last executing test programs: 14m22.606930005s ago: executing program 1 (id=2230): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000280)='/sys/power/pm_trace_dev_match\x00', 0x40040, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0xffffffffffff0001, 0x15) madvise$auto(0x0, 0xffffffffffff0005, 0x19) move_mount$auto(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x91e4) mmap$auto(0x0, 0x200003, 0x4000000000df, 0x40eb2, 0x402, 0x300000000000) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x200000, 0x200006, 0x1, 0x40eb1, 0x602, 0xb00000000000) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000000000)=""/192, 0x101) 14m21.752190294s ago: executing program 1 (id=2233): sendmsg$auto_BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xac, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x200, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_HOP_PENALTY={0x0, 0x35, 0xfc}, @BATADV_ATTR_TT_CRC32={0x1e, 0x13, 0x10001}]}, 0x24}, 0x1, 0x0, 0x0, 0x4c894}, 0x20000004) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB=' \x00\''], 0x1ac}}, 0x40000) mprotect$auto(0x1ffff000, 0x8000000000000001, 0x4) r0 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x40000) r1 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000100), r0) sendmsg$auto_ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x40, r1, 0x20, 0x70bd2d, 0x25dfdbfc, {}, [@ETHTOOL_A_LINKMODES_DUPLEX={0x5, 0x6, 0x1a}, @ETHTOOL_A_LINKMODES_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x43}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @ETHTOOL_A_LINKMODES_DUPLEX={0x5, 0x6, 0x1}, @ETHTOOL_A_LINKMODES_DUPLEX={0x5, 0x6, 0xb8}]}, 0x40}, 0x1, 0x0, 0x0, 0x4010}, 0x8840) 14m21.263160343s ago: executing program 1 (id=2237): close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socket(0x23, 0x80805, 0x0) memfd_secret$auto(0x0) bpf$auto(0x8, &(0x7f0000000000)=@bpf_attr_5={@target_fd=0x880, 0x9, 0x37, 0x37, 0x80, @relative_id=0x6, 0x3}, 0xc63) mprotect$auto(0x1ffff000, 0x8000000000000001, 0x4) io_uring_setup$auto(0x5, &(0x7f0000000000)={0x6, 0x1, 0x400, 0x7, 0x5, 0x2, 0x7, [0x4, 0x2e9, 0x8], {0x0, 0x1, 0x7, 0x7, 0x5, 0x5, 0x1, 0xfffffffc, 0x7}, {0x4, 0xfffff654, 0xffff7fff, 0x2, 0x8, 0x200, 0x3, 0x0, 0x3}}) 14m21.03234374s ago: executing program 1 (id=2239): mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) pipe$auto(&(0x7f0000001480)) r0 = open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) open(&(0x7f0000000040)='./file0\x00', 0x149443, 0x0) socket(0x2, 0x1, 0x106) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) io_uring_setup$auto(0x6, 0x0) socket(0x1e, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x10, 0x2, 0xc) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000013c0)=ANY=[@ANYBLOB="18000000", @ANYRES8=r2, @ANYRES8=r1, @ANYRES32], 0x18}}, 0x80) mprotect$auto(0x1ffff000, 0x8000000000000001, 0xd) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x10048884) io_uring_setup$auto(0x6, 0x0) open(0x0, 0x22240, 0x0) mprotect$auto(0x1ffff000, 0x8000000000000001, 0x4) utime$auto(0x0, &(0x7f0000001ac0)={0x8, 0x2}) mmap$auto(0x6, 0x2020009, 0x1003, 0x13, 0xfffffffffffffffa, 0x400000000000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r3 = socket(0x2, 0x6, 0x0) close_range$auto(0x2, 0x8, 0x0) memfd_create$auto(0x0, 0xe) socket(0x2, 0x1, 0x106) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x31}}, 0x6a) sendmmsg$auto(r3, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x5, 0x20000000) 14m20.754923491s ago: executing program 1 (id=2241): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) tkill$auto(0x80000000000001, 0x7) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) lseek$auto(0xffffffffffffffff, 0x9, 0xfffffffc) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000140)={{&(0x7f0000000040), 0x80012, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x5, 0x20000002) r1 = syz_genetlink_get_family_id$auto_nfc(0x0, 0xffffffffffffffff) sendmsg$auto_NFC_CMD_VENDOR(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r1, 0x100, 0x70bd27, 0x25dfdbfd}, 0x14}}, 0x40) sendmsg$auto_NFC_CMD_STOP_POLL(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, r1, 0x200, 0x70bd25, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x50}, 0x20008010) r2 = socket(0x25, 0x6, 0x0) getsockopt$auto(r2, 0x10d, 0xe, 0x0, &(0x7f0000000000)=0xb) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) getcwd$auto(0x0, 0xffffffffffffffff) setdomainname$auto(&(0x7f0000000040)='-\x00', 0x80000001) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x5, 0x0) inotify_init1$auto(0x3000000000000) inotify_add_watch$auto(0x4, 0x0, 0x4000e6e) open(0x0, 0x41a001, 0x409) openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) shmctl$auto(0x0, 0xf, &(0x7f0000000340)={{0x7, 0xee00, 0x0, 0x4, 0x1, 0x800, 0x6}, 0x2, 0xd, 0x2, 0x2, @inferred, @raw=0x1d000000, 0x4, 0x0, 0x0, 0x0}) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) open(&(0x7f0000000140)='./bus\x00', 0x12b4c0, 0x0) ioctl$auto(0x3, 0x541b, 0x38) 14m20.328270814s ago: executing program 1 (id=2244): close_range$auto(0x2, 0x8, 0x0) openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000000), 0x113040, 0x0) mknod$auto(&(0x7f0000000040)='\xfd\x90\x8f2\x14\x92\x00\xbf\xdf\xcf\x9a\xae}\xd9\xf95\xc5gV\x82\f\xe5h\xfe\x83\xe4\xbe\x8c\x1f\xa5\xf1_T\xde\xf7\xd4\x83D\x9eXS\xd6\x90T\xc1v\xad#\xc4q\x8b\xed2\xadW:0\xef\x9c.=\xba\x0fy\x8f\xcd\xd6\xde\xa9i\xec\xe8\xca\x9f\xf3\x82b\xa2y\xa87J\xfc \xc5\xd8\x80\xba\xaaV\x8f{\x1f\x1b\xb0\n\x97\\\xa7\xe3\xdf\xc29-*;#r\xc8\xd1\x14RcF\x87\xe4\x1c\x1fGL\xa5\x19\x90\xd6\x8d*\xe6\b(\x1a\xea\x95\xdc\xa6)5\xae&yAl\x1e\xe3j Lp\x91\r\xed%\xafZ\xf8w\xf2}\xcdGS\xce\xb9\xdck\x86\x00.6\xe6{\xc1\x00\x1bW5\x81\xda!\xcb.O\xa9\xf3\xa7\x88+\xb9\xf3\x9a7\xa4\xe6)<\xa79\xa4\x87\\\xb4\xbf\v\x03\x87\xac\x87r\x02\x05\xdb\xe4\xde,V\xb6G\xba.WR\xe2<~\xdd\xb2\xe53hj_;\xa5qm\x92\xc7P\xc9.\x82w8\x1f\xfcX\xe4\x14\xc72cC\xd3\x00'/263, 0x1, 0x4) socket(0xa, 0x801, 0x84) socket(0x11, 0x2, 0x1) r0 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/swradio0\x00', 0x1601, 0x0) getsockopt$auto(r0, 0x5, 0xb419, &(0x7f0000000000)='/dev/swradio0\x00', &(0x7f0000000080)=0x2) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x1f, 0x6, 0x20000001) sendmmsg$auto(r1, &(0x7f0000000000)={{&(0x7f0000000040), 0xc88, 0x0, 0x0, &(0x7f0000000140), 0x8, 0x80000000}, 0x5}, 0x3b8b, 0x800) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) openat2$dir(0xffffffffffffff9c, 0x0, &(0x7f0000000200)={0x4080, 0x149, 0x3a}, 0x18) mmap$auto(0x0, 0x7, 0xdf, 0x20eb5, 0x40000000000a5, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) shmctl$auto(0x9, 0xe, 0x0) socket$nl_generic(0x10, 0x3, 0x10) io_uring_setup$auto(0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$auto(0x5, 0x0, 0x102) sendmsg$auto_MAC802154_HWSIM_CMD_GET_RADIO(0xffffffffffffffff, &(0x7f0000001600)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000015c0)={&(0x7f0000001f40)=ANY=[], 0x5208}, 0x1, 0x0, 0x0, 0x4}, 0x4c000) connect$auto(0x3, 0x0, 0x54) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0xc8, 0x2, 0x9, 0xffffffffffff8001, 0xbef) madvise$auto(0x0, 0xffffffffffff0005, 0x19) futex$auto(0x0, 0x8d, 0x0, 0x0, 0x0, 0x100) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x402, 0x300000000000) get_robust_list$auto(0x1, 0x0, 0x0) kexec_load$auto(0x0, 0x4, &(0x7f0000000080)={@kbuf=0x0, 0x2, 0x7ff, 0x8000}, 0x1) 14m19.807281885s ago: executing program 32 (id=2244): close_range$auto(0x2, 0x8, 0x0) openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000000), 0x113040, 0x0) mknod$auto(&(0x7f0000000040)='\xfd\x90\x8f2\x14\x92\x00\xbf\xdf\xcf\x9a\xae}\xd9\xf95\xc5gV\x82\f\xe5h\xfe\x83\xe4\xbe\x8c\x1f\xa5\xf1_T\xde\xf7\xd4\x83D\x9eXS\xd6\x90T\xc1v\xad#\xc4q\x8b\xed2\xadW:0\xef\x9c.=\xba\x0fy\x8f\xcd\xd6\xde\xa9i\xec\xe8\xca\x9f\xf3\x82b\xa2y\xa87J\xfc \xc5\xd8\x80\xba\xaaV\x8f{\x1f\x1b\xb0\n\x97\\\xa7\xe3\xdf\xc29-*;#r\xc8\xd1\x14RcF\x87\xe4\x1c\x1fGL\xa5\x19\x90\xd6\x8d*\xe6\b(\x1a\xea\x95\xdc\xa6)5\xae&yAl\x1e\xe3j Lp\x91\r\xed%\xafZ\xf8w\xf2}\xcdGS\xce\xb9\xdck\x86\x00.6\xe6{\xc1\x00\x1bW5\x81\xda!\xcb.O\xa9\xf3\xa7\x88+\xb9\xf3\x9a7\xa4\xe6)<\xa79\xa4\x87\\\xb4\xbf\v\x03\x87\xac\x87r\x02\x05\xdb\xe4\xde,V\xb6G\xba.WR\xe2<~\xdd\xb2\xe53hj_;\xa5qm\x92\xc7P\xc9.\x82w8\x1f\xfcX\xe4\x14\xc72cC\xd3\x00'/263, 0x1, 0x4) socket(0xa, 0x801, 0x84) socket(0x11, 0x2, 0x1) r0 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/swradio0\x00', 0x1601, 0x0) getsockopt$auto(r0, 0x5, 0xb419, &(0x7f0000000000)='/dev/swradio0\x00', &(0x7f0000000080)=0x2) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x1f, 0x6, 0x20000001) sendmmsg$auto(r1, &(0x7f0000000000)={{&(0x7f0000000040), 0xc88, 0x0, 0x0, &(0x7f0000000140), 0x8, 0x80000000}, 0x5}, 0x3b8b, 0x800) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) openat2$dir(0xffffffffffffff9c, 0x0, &(0x7f0000000200)={0x4080, 0x149, 0x3a}, 0x18) mmap$auto(0x0, 0x7, 0xdf, 0x20eb5, 0x40000000000a5, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) shmctl$auto(0x9, 0xe, 0x0) socket$nl_generic(0x10, 0x3, 0x10) io_uring_setup$auto(0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$auto(0x5, 0x0, 0x102) sendmsg$auto_MAC802154_HWSIM_CMD_GET_RADIO(0xffffffffffffffff, &(0x7f0000001600)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000015c0)={&(0x7f0000001f40)=ANY=[], 0x5208}, 0x1, 0x0, 0x0, 0x4}, 0x4c000) connect$auto(0x3, 0x0, 0x54) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0xc8, 0x2, 0x9, 0xffffffffffff8001, 0xbef) madvise$auto(0x0, 0xffffffffffff0005, 0x19) futex$auto(0x0, 0x8d, 0x0, 0x0, 0x0, 0x100) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x402, 0x300000000000) get_robust_list$auto(0x1, 0x0, 0x0) kexec_load$auto(0x0, 0x4, &(0x7f0000000080)={@kbuf=0x0, 0x2, 0x7ff, 0x8000}, 0x1) 7m59.574873834s ago: executing program 4 (id=3863): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nl80211(0x0, r0) sendmsg$auto_NL80211_CMD_SET_SAR_SPECS(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002bbd7000fbdbdf258c00000008000300", @ANYRES32=0x0, @ANYBLOB="0c0099000300000002"], 0x28}, 0x1, 0x0, 0x0, 0x40d0}, 0x40000) 7m59.36226366s ago: executing program 4 (id=3865): mmap$auto(0x0, 0x8, 0xa2, 0x90, 0x401, 0x220) r0 = openat$auto_proc_page_owner_operations_page_owner(0xffffffffffffff9c, &(0x7f0000000040), 0xa0000, 0x0) close_range$auto(0xffffffffffffffff, r0, 0xc0e3) r1 = socket(0x10, 0x2, 0x4) sendmsg$auto_NFSD_CMD_THREADS_SET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000001400c72da808bf8d5feacf8510"], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x400c001) write$auto(r1, &(0x7f0000000000)='\x16\x00', 0x2fb) socket(0x2, 0x80002, 0x73) socket(0x2, 0x1, 0x84) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000001d00), r2) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000340)='/dev/v4l-subdev6\x00', 0x143800, 0x0) sendmsg$auto_ETHTOOL_MSG_RINGS_SET(r2, &(0x7f0000001dc0)={0x0, 0xffffffffffffff1c, &(0x7f0000001d80)={&(0x7f0000000180)=ANY=[@ANYBLOB="280000d7b9b01558826a004bf468ebe4123676977baada10193b0b9793a81d009b21bfa459add1fa73b86b48c87a7b25a5df22afbe319c10307e4870f7cd222343e066b89ba0118dc226d4a02f68782628cb601ac28cae873f2cdb4e2f2110c5148656", @ANYRES16=r3, @ANYBLOB="010027bd7000ffdbdf25100000000c00018008000100", @ANYRES32=r5, @ANYBLOB="0800070006000000"], 0x28}, 0x1, 0x0, 0x0, 0x90}, 0x80000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) open(&(0x7f0000000100)='.\x00', 0x0, 0x408) getdents64$auto(0x0, 0x0, 0x41) setsockopt$auto(0x3, 0x10000000084, 0x14, 0x0, 0x8) shutdown$auto(0x200000003, 0x2) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) 7m59.167192818s ago: executing program 4 (id=3866): openat$auto_bm_entry_operations_binfmt_misc(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/fs/binfmt_misc/syz0\x00', 0x2, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) timer_create$auto(0xfffffff9, &(0x7f0000000000)={@sival_int=0x3, @inferred, 0x1, @_tid}, &(0x7f0000000040)=0x200) r0 = getgid() lstat$auto(&(0x7f0000000440)='./file0\x00', &(0x7f0000000540)={0xa, 0x1ff, 0x3, 0x5, 0x0, r0, 0x0, 0xfffffffffffffffa, 0x5, 0x200, 0x4, 0x2, 0x800, 0x2, 0x6, 0x9e, 0x8}) lstat$auto(&(0x7f00000000c0)='./file0\x00', &(0x7f00000002c0)={0x0, 0x1, 0x3fa6, 0xf1, 0x0, r0, 0x0, 0xffffffffffff03fc, 0x2000000008, 0xc, 0x80, 0x3, 0x10, 0x7, 0x7f, 0x401, 0x1ff}) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x5, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) mmap$auto(0xfff, 0xcf5, 0x10db, 0x9b72, 0xffffffffffffff67, 0x8000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) pipe2$auto(0x0, 0xfdd) unshare$auto(0x40000080) select$auto(0x3, 0x0, &(0x7f0000000240)={[0x9, 0x200, 0x0, 0x7, 0x7, 0x3, 0x6, 0x2, 0x0, 0x10000005e58296f, 0x0, 0x7, 0x3, 0x200, 0x2000000000000004, 0x6]}, 0x0, 0x0) statmount$auto(0x0, 0x0, 0x1fe, 0x7) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0xa, 0x2000000000df, 0x9b72, 0x2, 0x7fff) ptrace$auto(0x10, 0x10000000000001, 0xffffffffffffff56, 0x868f) syz_clone3(&(0x7f00000006c0)={0x240004000, &(0x7f0000000200), 0x0, &(0x7f0000000480), {0x1b}, 0x0, 0x0, 0x0, &(0x7f0000000680)=[0x0], 0x1}, 0x58) r1 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snd/controlC2\x00', 0x4000, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_WRITE(r1, 0xc4c85513, &(0x7f0000000e80)={{@raw=0x8, 0x7, 0x4, 0x1, "de4fa56109fa76e7f2def73f972a844411b181543ad682fd346e5390ef4de4f35a444e522cde810108132054", @raw=0x7}, 0x0, @integer64=@value_ptr=&(0x7f00000001c0)=0x2, "cced1838d88bd3052654c62459bf46e87b036c09f37b424cd639494a96e1467842110487b34b31981f3ff8c12c3c0e1fc793eede967b1acbb32325d38671a20719411dd9dfa91fa774319696db8dfad87f61d893e25e35c907ef5771401001a85866cc719e3c13464cff50f112390104cb77999c54816e7e9e59cf5b6b5359c6"}) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) 7m57.359229304s ago: executing program 4 (id=3877): r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x200, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r1 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000540)='/dev/sequencer\x00', 0x80091, 0x0) writev$auto(r1, &(0x7f0000000000)={0x0, 0x710d}, 0x8000000000000001) pread64$auto(r0, 0x0, 0x3f, 0x7fff) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x101202, 0x0) sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, 0x0, 0x40400c5) openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000000), 0x500, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x0, 0xffffffffffffffff, 0x4000000000002) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8000, 0x0) setsockopt$auto(0x3, 0x8000000000000006, 0x1f, 0x0, 0x7ffffc) r2 = fanotify_init$auto(0x5, 0x800) mmap$auto(0x3, 0x4020029, 0x6, 0xeb1, 0x401, 0x8000) r3 = mq_open$auto(&(0x7f0000000200)='\x01', 0xde8, 0xb, &(0x7f0000000240)={0x3, 0x4, 0xffffffffffffffff, 0x10000000000000b}) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x1ff, 0x7, 0x5, 0x7181, 0x11ffde, 0x7, 0x3, 0x9, 0x9, 0x80003, 0x2, 0x200000000001, 0xb4, 0x9, 0x8, 0x10007, 0x80, 0x4, 0x0, 0xa, 0x1, 0x202, 0x0, 0x84, [0x6, 0x2, 0x0, 0x1, 0x0, 0x2000, 0x0, 0xe, 0x70624ce7, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x8, 0x0, 0x6, 0x0, 0xfffffffffffbfffe, 0x2000000000000004, 0x10000000000001, 0x10000000000, 0xffffffffffffffff, 0x4, 0xfffffffffffffe00, 0x4, 0x0, 0x5, 0x400000000005b8, 0xffff, 0x4, 0x100, 0x0, 0x6, 0xffffffffffffffff, 0x88e, 0x8000000000008, 0xfffffffffffffffc, 0x8, 0xa38, 0x0, 0x3, 0xfffffffffffffffc, 0x2, 0x1, 0x7, 0xc567]}, 0x1fe, 0xd) openat$auto_tracing_err_log_fops_trace(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/tracing/error_log\x00', 0x4000, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000003540), r4) epoll_pwait$auto(r5, &(0x7f0000000380)={0x1, 0xfffffffffffffffd}, 0x6, 0x1000001, &(0x7f0000000400)={0x5}, 0x8) syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x40000) ioctl$auto_SNDCTL_DSP_SPEED(r3, 0xc0045002, &(0x7f0000000100)=0x1) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000000c0), r2) sendmsg$auto_NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc000}, 0x2404c800) kexec_load$auto(0x5, 0x2, &(0x7f0000000040)={@kbuf=0x0, 0x800c000, 0x40000000, 0x800c000}, 0x4) 7m56.011069022s ago: executing program 4 (id=3883): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) rt_sigqueueinfo$auto(0x1, 0x7, &(0x7f0000000040)={@siginfo_0_0={0x0, 0x5, 0xfffffffb, @_sigpoll={0x52, 0x7}}}) ioperm$auto(0x7, 0x6, 0x2) time$auto(0x0) keyctl$auto(0x12, 0xf, 0x40000000c6e9, 0x81, 0xa472) signalfd$auto(0xffffffffffffffff, 0x0, 0x8) r0 = epoll_create$auto(0x3e) epoll_ctl$auto(r0, 0x1, 0x8000000000000000, 0x0) 7m55.250879709s ago: executing program 4 (id=3889): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) signalfd$auto(0xffffffffffffffff, 0x0, 0x8) r0 = epoll_create$auto(0x3e) epoll_ctl$auto(r0, 0x1, 0x8000000000000000, 0x0) (fail_nth: 2) 7m54.881468719s ago: executing program 33 (id=3889): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) signalfd$auto(0xffffffffffffffff, 0x0, 0x8) r0 = epoll_create$auto(0x3e) epoll_ctl$auto(r0, 0x1, 0x8000000000000000, 0x0) (fail_nth: 2) 6m34.724843204s ago: executing program 3 (id=4267): socket(0x18, 0x4, 0x1) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/virtual/workqueue/nvme-reset-wq/cpumask\x00', 0x8802, 0x0) ioctl$auto_TIOCGDEV2(0xffffffffffffffff, 0x5452, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, &(0x7f0000003b80)='/dev/snd/pcmC0D0c\x00', 0x575480, 0x0) mmap$auto(0x0, 0x9, 0x3, 0x8012, 0x3, 0x81000000) socket$nl_generic(0x10, 0x3, 0x10) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) sendmmsg$auto(0x3, &(0x7f0000000000)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xac}, 0x4, 0x0, 0x1, 0x5}, 0xed7138c}, 0x2, 0x9) recvmmsg$auto(0x4, 0x0, 0x7, 0xe, 0x0) recvfrom$auto(0x4, 0x0, 0x101d0, 0x3ffffd, 0x0, 0x0) mmap$auto(0x0, 0x202000d, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x10, 0x2, 0x0) socket(0x18, 0x800, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x801, 0x84) getsockopt$auto(0x6, 0x84, 0x25, 0x0, &(0x7f00000000c0)=0x10000) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x800, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket(0x10, 0x2, 0xc) fsetxattr$auto(0xffffffffffffffff, &(0x7f0000000040)='#\x00', &(0x7f0000000080), 0x11a1, 0x1) socket(0x15, 0x5, 0x0) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0xa, 0x0) getsockopt$auto(0x6, 0x84, 0x66, 0x0, &(0x7f00000000c0)=0x10000) 6m23.454094009s ago: executing program 3 (id=4293): r0 = openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f0000002c00)='/dev/cec18\x00', 0x200100, 0x0) ioctl$auto_CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f0000000000)={"f0f8fb5e", 0x0, 0x5, 0x4, 0x6, 0x7, "b32befc8bc059070da83e071eb4cbf", "c3e63cca", '>cjj', "c2e28642", ["52359088e2daa465379fc681", "20714fd7ee80c0f25100", "bfa7cc5bca2b673bea10a63c", "724a1c02d401d36bb19115cd"]}) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptyea\x00', 0x0, 0x0) bpf$auto(0x2, &(0x7f00000001c0)=@task_fd_query={0x9, 0xffffffffffffffff, 0x7ff, 0x6, 0xa, 0x8, 0x5f, 0x0, 0x3}, 0x6f3) socket(0x10, 0x2, 0x0) memfd_create$auto(&(0x7f0000000000)='\xc4--:\xdd:,./-${\x00', 0x4) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x3, 0x100) r3 = socket(0x2e, 0x2, 0x6) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) sendmmsg$auto(r3, &(0x7f0000000000)={{0x0, 0x7f, 0x0, 0x106, 0x0, 0x1, 0x3}, 0xed7138c}, 0x7, 0x0) r4 = socket(0xa, 0x3, 0x6) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket(0x1e, 0x4, 0x88) bpf$auto(0x0, &(0x7f0000000000)=@link_update={r5, @new_prog_fd=0x4, 0x4, @old_map_fd=r2}, 0xa3) sendmsg$auto_NFSD_CMD_THREADS_SET(r2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000850}, 0xc0) r6 = openat$auto_cpu_latency_qos_fops_qos(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) mmap$auto(0x200, 0xe, 0x1, 0x15, r1, 0x9) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'bond_slave_0\x00'}) close_range$auto(0x0, r6, 0x2) socket(0x2b, 0x6, 0x0) socket(0x1a, 0x2, 0xfffffffe) mmap$auto(0x0, 0x6, 0x2000000df, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0xa, 0x0) io_uring_setup$auto(0x6, 0x0) socket(0xa, 0x3, 0x3a) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "ab06fdffff00fff500"}, 0x55) 6m22.816411759s ago: executing program 3 (id=4295): unshare$auto(0x40000080) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) r0 = socket(0x26, 0x2, 0x6b3) bind$auto(0x3, &(0x7f0000000040)=@vsock={0x28, 0x0, 0x2710, @hyper}, 0x6a) ppoll$auto(&(0x7f0000000000)={r0, 0x8, 0x6}, 0x7, 0x0, 0x0, 0x8) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x5, 0x20000000) mmap$auto(0x0, 0x1, 0x3, 0xeb1, 0xfffffffffffffffa, 0x7ffe) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0xfffffffe, 0x1, 0x4, 0x9, 0x79) madvise$auto(0x0, 0xffffffffffff0001, 0x15) syz_genetlink_get_family_id$auto_hsr(0x0, 0xffffffffffffffff) r1 = openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0) ioctl$auto_RTC_RD_TIME(r1, 0x80247009, 0x0) r2 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x20401, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x4601, 0x0) 6m15.699849653s ago: executing program 3 (id=4305): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = socket(0x2c, 0x6, 0x0) close_range$auto(0x2, 0x8, 0x0) memfd_create$auto(0x0, 0xe) socket(0x2, 0x1, 0x106) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/net_prio.ifpriomap\x00', 0x10b142, 0x0) sendfile$auto(r1, r1, 0x0, 0x200) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x10, 0x0, 0x9, 0x0, 0x1f, 0x6}, 0x800009}, 0x5, 0x20000000) r2 = openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000000), 0x640000, 0x0) ioctl$auto_IOCTL_VMCI_QUEUEPAIR_ALLOC(r2, 0x7a8, 0x0) ioctl$auto(0x3, 0x541b, 0xfffffffffffff4e0) 6m14.726418267s ago: executing program 3 (id=4310): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ovs_ct_limit(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$auto_OVS_CT_LIMIT_CMD_DEL(r0, &(0x7f0000003480)={0x0, 0x0, &(0x7f0000003440)={&(0x7f0000000180)={0x17c4, r1, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@OVS_CT_LIMIT_ATTR_ZONE_LIMIT={0x4}, @OVS_CT_LIMIT_ATTR_ZONE_LIMIT={0x17ac, 0x1, 0x0, 0x1, [@nested={0x1769, 0x2f, 0x0, 0x1, [@generic="8ac0eb3e572204a44edfe808d83c1f3ca60d0aaf0498e468d0359e24ad6369ac0fddce3df9fe6eb2a7e077bba8be9eed10fbfdbb3b85af6259249822e87f54ec3c1fe23fafe6936508203f5c297f1dc4a2a11fcb5743f2dbe3ccad76d627f720d7626306b11e223a821193fe6ac0d453186834655e37bde17c98123bc5b00ebedcb790fbed8966f595c56a8258582e419f7b2ae1a00b2000d7c31992081ed0faa4ff718faf4c1540d9246075f851c457a0337a281a1e782804797b01f961e8f0dd188ba67cf130cd4a10aaf40d5a6a6147c361a0f94424c244fc99b9c4aa2ba51d8651d5adad3e7bb4174f6806ffe8e623add96de6921f348ed0275f4f5a4eda0401b1b990dddd5d5283fb51ced1f1c56be0cb1cc569b237421ee8d96290196a97c8d74c94f2a4f2de79a392c8e61c774a4f9dcbbce000f09c1bcd097e3553646f66e4a4cf36251f6d69f0cf3cf75ffbad85e3a3964ab6f5f3e756d739272311671bce3a61da2a45b0cfff6cecb760132902213cb92bf378dda64e3e7bcd529a16a9648e84fb80c85a4849e7ac628db5f422e773df65409950db8a3bbb16ab10df8b71fa455a5e9db280226af05b69875a396dc93416c5488cbeac72ffc222508e6cb0cd752b42ef98a241bf18340cdd91958ff1e768947aad34defa6be66115fb86d50c5d07576a01f9a643eee14e4670dc3959f8c918931a80bcc81839bdf0ce78b0ca2812c98ccd57d1effa6003000855679d07dc5a7b4402618c2b799c54c19fbd6b4d8ed09ba9e43dab2c14c13e289d4003277298c46cfffb783d4f38d0ac133c95f8403e1a49d5f57f96ddf3ae6bd6fd2ad6bb6c41e9803f41e2d210e9bc99c43ac59bee04d4dbef2f135963ca1f71cad3d34642fa7b4ff4acd055636ff0f83f1a3b28de9a595562f7fd1aba639613659f14345ed9edf36b3267014fc9d4d661975972cb49b98f37b3bad8db4db1fe56c83e3835416a5ff6f892e77b41e9be401ee75750485a1fbd1632d3153bb9c3d10f04320dbe87aade077026f2e99521917d7b4e5d2a4018b6375399280090256776177d082f2d1a8caf62bfdcf346e16ce8a50d09f1b87bf6b419dc915d2348a0cae8a13acd054958cb50e350e01994fce48e38a9a58beff76ee695dae4172340b6b072501497439e015657b9dec57973edb166ed4cdcbb68027725355b7e858023271874cdea703544dae4b7f8af1c908d08b318bfc5e4d20e13d3977cca87b589a477d23023bcb552bf2dc4fa92f7bd5fc6783921731fe2bc93edcdaebf8ec3fcfb3b187ab5265ee02c507e2ac97ab834d63a53cc42dec2a72ac6fcfd4eb779f8e11067be30106771dadeea42688039b8a2687de51069cce2aff3fba5430bfbf94adbcf2deea95e38e4856e2ce51d51560b84fb6807d1928a6afddce70b7d9570e2bce7ae05ca53724dfeaa078b0120acd0761bbaaf4f857d0acb47362db3aaa1fe6a5696b065edf6773c2d1fcad41616f62a90d370470971ff5dc1e176a885e34c23b257da6aea635547aad56aec2f9dbe08dc510e3e878ce2a59d29bafed36bb7c9f908cd9884803b341604d32e50a935f1a44224bc602fa5dde5c04e17ba976a622e5dc22671fd87af28581c87f3031774127c156068e166806bec98d2fbe5d25e3da5216e971f0ccbbd79c1fb23bc3c3a56614faba6f4bd20ffe901c7a48eef437c3c4d821fa4793bafb89612f23e93d0143b991f3f7aca3ea80ab433530dffe563f93404169d381362eb9d832636212875288251a05b529ee804404abd668a6a5ee95b7204f98bbac7b0bd6c14efe2ad05a03d3d7d0e4b294c5c05e2c95ee405b78619a5481764860d31f56dd292f84fb3b0b56d7b20ca8d77e6e29ce41a4903e9187d4e4e7998f246560307260132aa4ef27091a13dfc7d483bfbd263471bc6370a6b9aeee94cbe98e30b26e67879c1bbb284c34d9d5dcd923a4c74f8394a70beaa8c7d87b012f5befe544afc48d01308b94db995579261943f7c5c3ea4756889aac0b361bf381f5f31660bc0ad4bbfaa1a6189710e4442263cff421f4bd4b10740d284f081d97518af069154ad42080241211f90337811b779404c9c96b6660137f84f71ffa88e393a02729319853806d61817c1a98a05c1227a617f21723aa22b4fe131cdacd0c9b27ff97f94a1dd37a1c71e1a2ec088b716683765f6ff4a6c35b0a5af58ec366bb5dc3e9b6cc662ebc8efe588f80a5f2c503cf1671c6ec77ca25a14a55fa538b95d0434f2f09f446cf1ea10d8b97775d951d3997809bd195854bcc304ef3ca785d43c1b7e33bd3781e65af117f9b594f5c597b6c8e5e2d0576b1772bac4d98aec5d0e628aee64db432ef195ef860ed3d735a7da2d486c826be324371cea9f3d37ff2cabfafcac52b997e947404364d649192f3977777744c878b3e50aac435b46fa6a50eb543c79f32bfd32b4955fbf3566c7c029be0f7066c468921c17e3a06ad3013450b40ac9e216986130d880147ad10dfd576578c2dd2745b036ce74477f831e9d1dbc5bc89cf2d6f6d6efeeacbaca7924876ed71d1a8423e7c393696f414e295a76f8c614860655f01f7996944120e9304c9a51295c20cd0683c10c6d4bc9d362278944e3f0fff3fb70f8fe8e3cfaa7c19b7c5afd2ec863ee0964733f2596bee8885bb6c3ba96923ad2501889038bb7067a633975bd9a8ca3087c80c2c5eb336949c03495810dd8939384525170cff9f37dd3f24df3c17d400f8778542adb3ccedb5ff3bb75db75c6751968e87833d18ff215c3e45d2532d8308d02fdba544016b1f13832f74c3c00826879d695936e638936c5fb2380a984e3c78b1ebe89b1c309fad2182ab37efeeaaf7977e0e6303fd8c61d9374a2caf92069f7df45e1ddceaaa22522dc3fb1b6be7b109b837fc53de9f26d63096f76c778af64075bc15cced1c977da5e3ca3b31a3ba421e9829ac5f02c5ec74c7f55c7efc707d0cf43927c4ad1d2580075378faf0dc6ce90c52a53849ac4e60f40e125c81dc8c740bcf326563c5a919ef6e67d1dc9ed2a558ece23de88a523f96b3b4192be86843ee0ca537240c5243dac80159b13dcac1201dc9a85b788b137db217ef238bc0bae7403ece31d185e3eded156f987fc52a6fe74b4d798794b0f319f79b5b1c1eebdb54e50c3af4d45cbb8164ad1e621f7c2510b09fc94c2909d0ebef6c55cf26633a4f6f852ed11082a1515980af19a62536663de0c767c3efc4eea9ae98aecb1770c912a3c8519d62b5eea0b3d853f41f9741b554621e7ed9b8f24bc6302d65795eed0b092266b618f06a22b5cd76f9a6e2281868de13add9fc7cfbfcbfddc0ef5eab6eb7afbf641dee4e0859f6fdb82a1dd40eae2c293b08046256d5d23554651ae63480fdf6360d8e636b714b7c98392b9e07b952e597516c2dda91186392f797ee8441ca59c2c294e5c5bba2952c7a5271116edc46a22450bb204d6a7812775e6640423c99b78b12bd69176f1c7f90656369e683d1b4627a2ccdbba6cc622e865e6fd0f8e5c34e2a16b71c9ce3ac47975bbc8b3fd240ae0575b1fc651a8e7e3f6ba54c9302a439d76a1517b17ae62352d9774cb443b05caa75625208346c53d8f343f3eff31f21971145fb4517365e4489c8340006976fc5e361a983f82fa963a8bcc467f54de39d88fa724ddd86bea035159e757218fe1388b85f2e7f62d241fe58b8060f964901dc5ba6f4475bcf4252a8eb1978f6ae4a9de00ee974f20647faceb8c07e570f032fde4e96ebfd8c616ec4c3a7c426ccf4fadae6778be2444ee88b1450c08b8b1b975f8e5b5a823b11444d9717b6ce9ab7e154b23c2f9220b37a45be7c01d6b977c9a62119d7511eca039e89fe7b0aab992509fae3fb907b5f97d8ddbc3cfba3d0d20e9a5a8971bb1b789c585b5b1559f1de2fe2f505379a543c82e09792162b7616df633a3fdbbe8bf90400b51e2611fbef4948a37235dd739197a91e4a379e39cfd4fac1cd5ecc3b2440bd8b84a4023b9ebca11753f301b329860338d45342e13a80701ba37454ba1438761080ff2ecf8ce550416440c10e1fba347f9604ba5f6d096778d4a499388fef201fd9ef6b37bb8ae445cf5ecc986506613ca6ebbc9ceb41b862ed848957fd4f20d74f580ff14ee60e6bfc554c796c77e72a6ddd273717a0a86d6132c47c67515927feaa77f817940f5c1c49d0d67ffbed467bd4bce8b03b5bbfe449bff4b21861e7a719db1bceaf78666e3c6c050e849c702488990ef49645677c24bc1957412bb3438e67c1ab73170ded7109999fba56a22e1daa3fb799d288218f8a1b759b6f3749b676e6a65439eb5ca73a14dc4b40aa6ca938df5506b85513129b30ed782b8ac2aca1cb077b8bc723fbe51aaaf549934ec2de18f2ab4984c3ab9a5d6fb4c5d5898258c89336f59a9a11a3b06f50cb78b4cac688e494a6cb279793aa755c7e882fe2af3fb1bf119bd5288d9c8c73cf133efb767c8db6c00b7c1d935650a90667c416b19ffe94d5b08286e82204c1a7161522f598fbc133ebf2bb05719f0aed59436be0afff76df27c04374c2d51f5758ce47ac4453be8856b7db9c237f5b15664d2a1f4ac8cf24c0a1fa91aab37ae8e03ea61cfaea1d366453faaddac9c23c50a6f18d93e9eb1dd159c073a4946b91fc3edeaa0f1139ce718028824de736c21d70c8d58b9479c5f22a5232f4512407710df33e408cc76e014c7b713db35639cba508326dd95feaa3e59e622319bb345886668d83c9a1c60538ef075db70350a4a898c4ac48e5a05ecc6e0fc6e0504c67fbb4f86f980671257648adacc46005e99ed6b6b5d22d481900f51b25322e7ab8cfce2c6f04bc80defaa163b1ed39ff53c7313715292ede240e8dc0ccec53d1eabb16f7ec107ea07934e740fc5a7ad2381543f2728e4c02a82cc3b9153bc37a736dfdcb5db956efa3cc698bf4a1f53f3138297f67cf480447a58473f129e097bc41f9b70a9c812212453b528ee9e44228384ea76be0f88932b990640a42a0fcaa3dce38a53482587f042e3cdaf5fd939096a6c6b1932085eabb50fef249d48d3de23da185c6e039ba4bda46f51cc31bbe8ae90efcf0053dcc4da8707fc24fd65e544e1737041eb766d8a1b7c974356e77d6ee3828f6d0afb3864288a7180da58eb252d87c361b6dd1de467975524f97861e629baeb3d1e1cddca06d79f8150a7292d7a60bbc8a725b2b9c3608ad5db93d65618933ea9073a4daefbc1eb726dd3e16955a29c072b391cf98eb3071a2395b7d13df9b2306194a8ae8a7a05d25f396f2ebdcd71725172a4fc06e3e61aa5b9a661d3d8d1ccaf2c4cc59f6086871087e2cbea60d2e9f53706548dac49a30485bc2f389a5af6241b4a93d5d5740910a675b3dd7932d24d47bfdbf11f305200a30062e7e281c03aa18b278e101fa5d4651d842fb2a702b874dc647747e5d5f3aca6801786a54fba0ebb4dd850a6ff5a34a64a7e3f90a366981c6eb833a41fea08d5fd1d1f12211f011274c565c250631ad4680ed5952c5422fdc18906fddda2b165797ee6cf60c0d8824114aca9959b095895ca3187611d33e394dee20c021d0bf7ad5357f5ba73e67f99dcf4fc3d1a64fa3e2f542d5b0a5bc93d24d731217cb75d6eb31a31f60d1700fcf5fcb90ce1a2500657377a1943b8f8328957c00531f926da991aef45f3e182f6af5a06cdc631b68828c42399da9ed66300bd33257c4cfaf53c3cf3bfcb3520e3615b7287c2b0372caefaa244fdb76abea39b7d222d91fab4da055ef2fcd014fb6c44dc", @nested={0xa2, 0x82, 0x0, 0x1, [@nested={0x4, 0x5a}, @generic="a06818d5c5811a5ed400851a9c59c69eeda35805221e340f05e48c350cb2417c66cf09534989c5acee811dbfd343132d6d2309eb9658268a213c2c1dd4f0c8a819d6a059b99ea12c10cf6e59dbe33d8f7ed59094f0e8915f518255d322d1ceb5b90a3e6906214a5627157fda08006f41cc0aff03f76406e0b75fcfdc523d5f26b726f73e185336d23d14d53a25a8a520635e9b270e1508227fdf"]}, @typed={0x8, 0xb6, 0x0, 0x0, @fd=r0}, @nested={0x309, 0xec, 0x0, 0x1, [@generic="22af5c5db3e98ee5b887716737a90f43f64174c49c896d8541d428079e8affd80db0ada346b180d43f91db55d2fb649627b0", @generic="5184b8e8849a32da3ee20e6a9cda070968024fd920c499e130e0719a157338532598d3ddc1bec2375642c0f1c895570b7968dd8af5777be8d42bfc67944b21b28543897ac1437498352083ff0928d811ad5a26a13b55e3976ba69b45563a2fe1619c88ce1c666d2bd4284dd224ec30a0f95eb55098d8441ef9e82fae976976951d79817526602b03d8a666f439a86edc5b9cbfb7824c78b065a0cd1bde535f8222a09756b5e88f261c083d07846d5f40fa7bb4d2154d969c5f4e8759cfed2dea740de704dc4ab773d3bc733746e9d0ff919791970af20e9c60f56d", @generic="ae5e56eaf0cc9a0932a2d93537d10661199902a7f1b5f47b2bc01366645055968296f35701ecc6372b10e0b6b26e785665d310f7ce3627153d98735a51c69d41faf1113d006df833e5b8e2425436ffd8c49b6dfa01e2b257ea165a540449f8c673fabddee15b71c5d73cc1576c10143de1bcbcddd854ab48a492cc18b561e1152af51ca4087af9310f577eea3f783953784a465cdbb72249c177879d6671a9550dac5856cc696acacf5136f9e525ab507558386e7fd8aca0796ebcd1d8ef4cfaae9fd6827759d272916b91e7977d75e42125b3d828bf1ad9826ac5f26b3ec4b7", @generic="f571f10f080d62d27f32e8b54274ef9bab3a96ff7f8fb52b3e7b16d2c30bfd908b4c6b9d69e50b6d75f0da681f48a894d9c7088f12f9ed1940591ea937d4b282ea5c6c619ba373f3df8908da3b84d34fbf99f1ae15ef9cf042262735674187b1c9888f73762e732aa57d0122fbf4e47ff6f688de5f6a8ec8263896abc4744e08f33cd50abaf575163262b5f69b", @generic="921e7337c697d3a1577e1c758d19324174c65deede22e374da83523ce81f93f86b7e293f92133f37ef8554ec71a69ee319399c76e48018ba478e2e070160871536e1c2e1e6b2a47c32617971cc02fb9bc1e8401c2139af8e3fd0e217240b5bfafd23b3aeb609fd122d2ceeb7a4c682c23ba645268705569212c48f", @nested={0x4, 0x9a}, @typed={0xc, 0xb0, 0x0, 0x0, @u64=0xa8}]}, @nested={0x1e2, 0xf7, 0x0, 0x1, [@nested={0x4, 0x2a}, @generic="6b482c307cf11f3816f55648dd8c0977ce2d36bd71baf73702c27b3959f50826f9e137c4763c6589c35863796d110666d21f4261928282128f6998c9c0e1d0594bce70c39091110143c300f73ff7c55d76f5faa83051367a08db7b82b84b7932ff7c7c7fe4aa62d7788953c6f773db6029290fabee732b77953ec6a0219337da30d1f8d9765c244bf6828c26852cb00d1498e4fbecf361fbdb6dbe9086f47afb1e", @nested={0x4, 0x14}, @generic="bfd873159389c0b305c844a0b2f8421a280002771ce4be0d88e851a566412fef0dde9df3c98ee8ff8cf3f8846de437a1b1e406adb0d499a65d003027d919c78410ffe8f5ce0070983e3934817faf6de076e912aa16414981aa3243b705b44eed554371ec4a557389fe0861940d9520e505c39e27cd79c7590a82f463ee9b6af8c1a51ccdc3f5cb1bb4", @generic="3cfa9dc7f38e9332b570e60d877a4678b9d200e790da1610ee7b8f4ed6c030615c64af29b853c6938dcf2df775ec5f79fff1e6cd8a7d9eb54189b230d16e6e8b24cb4e", @typed={0x8, 0xe8, 0x0, 0x0, @pid}, @nested={0x4, 0xd5}, @generic="6709ccf4aa6de864835df3d04d81bf156e2dfa9afec7bab07bfb5eb46311f2b19f1f64a29ea23bbbc7c21c881b5a27c780b7d6c6b3131cba22d149a1ff1607d5ba06a7e9d6120ecf738722019e76b0846a", @nested={0x4, 0x15}, @typed={0x8, 0x24, 0x0, 0x0, @u32=0x2}]}, @generic="2bb6aff7fd45776ea691d7e7ced226183a69ae0f00bad482268b6f45beb6e7c5c98e97873e229061a998a51cc31fd1e72911ef3a20277d0a1799a3bac9da730cc559cc4b4793d85e316faa7bd1af90e9b612d25ac91b11cdf0bf02edad204809a8f121a1cea40cb1bdb61b73fb61ddc67dc4ed773477463488398dd2849e", @generic="661314b23aba95299ff88095c11a55136971dba1f472ccfaabaaee9aa4161fc3210104f76ce821be79651ac92fb8838baa93845d572a341d8d01c4", @generic="534421a17632083a047ba99276d3eacbea5712c8d80a761313fa1a96a718f410af050b3d22f2b28d9087bf0155011bf22f69152bf09816179171789463faaedadf8d442ee841e2ee7f6c2a147647a70b6df487db", @typed={0xba, 0x119, 0x0, 0x0, @binary="22052dcaa9ea6e7965091b066a6325ad79185148b9fa3a0cd4d661ea2fdb9b93e77bb2d2a23fe86b1ebd0fdcbde2cadceb29aa17d9d32fe57dc4729e9988b04d84b244fad2e7bd14953bd5f6a39f9126f5b97d8bc8ffced4348ad67d9f84fb49d3947e3585b66dacc7b337a76e486eb1f2b87db095bfe47d719bdeeee5d6d83206a068dcfbd9aa5507d98fcb90f35e433ded3de95b0e7a604c1059e35ddb6e4b86478076ae385f2ba5814faa05bce6ef025240892ff6"}]}, @nested={0x3c, 0xcb, 0x0, 0x1, [@generic, @typed={0x14, 0x128, 0x0, 0x0, @ipv6=@private2}, @typed={0x8, 0x19, 0x0, 0x0, @u32=0x6}, @nested={0x1c, 0x122, 0x0, 0x1, [@nested={0x18, 0x83, 0x0, 0x1, [@nested={0x11, 0x92, 0x0, 0x1, [@typed={0x8, 0x2, 0x0, 0x0, @ipv4=@broadcast}, @generic="5e17dbb58f"]}]}]}]}]}]}, 0x17c4}, 0x1, 0x0, 0x0, 0x40c4}, 0x8800) 6m13.392602556s ago: executing program 3 (id=4314): unshare$auto(0x40000080) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) r0 = socket(0x26, 0x2, 0x6b3) bind$auto(0x3, &(0x7f0000000040)=@vsock={0x28, 0x0, 0x2710, @hyper}, 0x6a) ppoll$auto(&(0x7f0000000000)={r0, 0x8, 0x6}, 0x7, 0x0, 0x0, 0x8) madvise$auto(0x0, 0xffffffffffff0001, 0x15) syz_genetlink_get_family_id$auto_hsr(0x0, 0xffffffffffffffff) r1 = openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0) ioctl$auto_RTC_RD_TIME(r1, 0x80247009, 0x0) r2 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x20401, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x4601, 0x0) 5m58.291292093s ago: executing program 34 (id=4314): unshare$auto(0x40000080) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) r0 = socket(0x26, 0x2, 0x6b3) bind$auto(0x3, &(0x7f0000000040)=@vsock={0x28, 0x0, 0x2710, @hyper}, 0x6a) ppoll$auto(&(0x7f0000000000)={r0, 0x8, 0x6}, 0x7, 0x0, 0x0, 0x8) madvise$auto(0x0, 0xffffffffffff0001, 0x15) syz_genetlink_get_family_id$auto_hsr(0x0, 0xffffffffffffffff) r1 = openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0) ioctl$auto_RTC_RD_TIME(r1, 0x80247009, 0x0) r2 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x20401, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x4601, 0x0) 3m25.928769364s ago: executing program 5 (id=4934): socket(0x2, 0x5, 0x0) bpf$auto(0x0, &(0x7f00000001c0)=@task_fd_query={0x9, 0x21eb, 0x7ff, 0x6, 0xa, 0x1000009, 0x5f, 0x0, 0x3}, 0x6f3) socket(0x10, 0x2, 0x0) memfd_create$auto(&(0x7f0000000000)='\xc4--:\xdd:,./-${\x00', 0x4) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x3, 0x100) socket(0x2a, 0x2, 0x6) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) sendmmsg$auto(0x3, &(0x7f0000000000)={{0x0, 0x2, 0x0, 0x106, 0x0, 0x1, 0x3}, 0xed7138c}, 0x7, 0x0) socket(0xa, 0x3, 0x6) socket$nl_generic(0x10, 0x3, 0x10) bpf$auto(0x0, &(0x7f0000000000)=@link_update={0xffffffffffffffff, @new_prog_fd=0x4, 0x4, @old_map_fd=r0}, 0xa3) 3m25.716377903s ago: executing program 5 (id=4938): bpf$auto(0x0, 0x0, 0x6f3) 3m25.558348629s ago: executing program 5 (id=4939): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0001, 0x15) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) time$auto(0xffffffffffffffff) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) sendmmsg$auto(0x3, &(0x7f0000000000)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xac}, 0x4, 0x0, 0x1, 0x5}, 0xed7138c}, 0x2, 0x9) recvmmsg$auto(0x4, 0x0, 0x7, 0xe, 0x0) recvfrom$auto(0x4, 0x0, 0x101d0, 0x3ffffd, 0x0, 0x0) fsetxattr$auto(0xffffffffffffffff, 0x0, 0x0, 0x11a1, 0x1) socket(0x15, 0x5, 0x0) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x2a, 0x2, 0x6) poll$auto(&(0x7f0000000040)={r0, 0x6, 0xb6}, 0x7, 0x3) close_range$auto(0x2, 0xa, 0x0) getsockopt$auto(0x6, 0x84, 0x66, 0x0, 0x0) 3m24.685696878s ago: executing program 5 (id=4941): ioctl$auto_CEC_S_MODE(0xffffffffffffffff, 0x40046109, &(0x7f0000002c40)=0xf0) 3m24.495199407s ago: executing program 5 (id=4944): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x0, 0x5, 0x0) socketpair$auto(0x1e, 0x1, 0x0, 0x0) socket(0xa, 0x2, 0x0) socket(0xa, 0x3, 0xff) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "ab06fdffff00fff500"}, 0x55) write$auto(0x3, 0x0, 0x5dc) socket(0xa, 0x801, 0x84) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) setresuid$auto(0x8000000000000001, 0x1, 0x200) mlockall$auto(0x7) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) setsockopt$auto(0x3, 0x10000000084, 0x81, 0x0, 0x8) setsockopt$auto(0x3, 0x10000000084, 0x80, 0x0, 0x8) setsockopt$auto(0x3, 0x10000000084, 0x81, 0x0, 0x8) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async) close_range$auto(0x0, 0x5, 0x0) (async) socketpair$auto(0x1e, 0x1, 0x0, 0x0) (async) socket(0xa, 0x2, 0x0) (async) socket(0xa, 0x3, 0xff) (async) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "ab06fdffff00fff500"}, 0x55) (async) write$auto(0x3, 0x0, 0x5dc) (async) socket(0xa, 0x801, 0x84) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) setresuid$auto(0x8000000000000001, 0x1, 0x200) (async) mlockall$auto(0x7) (async) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) (async) setsockopt$auto(0x3, 0x10000000084, 0x81, 0x0, 0x8) (async) setsockopt$auto(0x3, 0x10000000084, 0x80, 0x0, 0x8) (async) setsockopt$auto(0x3, 0x10000000084, 0x81, 0x0, 0x8) (async) 3m23.810321946s ago: executing program 5 (id=4946): r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptyx2\x00', 0x50240, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sda1\x00', 0xa4e00, 0x0) (async) setresuid$auto(0x0, 0xffffffffffffffff, 0x0) (async) ioctl$auto_TCFLSH2(r0, 0x540b, 0x0) (async) mmap$auto(0x0, 0xffff, 0xdf, 0x9b72, 0x2, 0x8000) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/scsi/scsi\x00', 0x40102, 0x0) mmap$auto(0x6, 0x100000000400008, 0x1000000e0, 0x9b72, r0, 0x8000) (async) preadv$auto(0x40000000000003, &(0x7f0000000080)={0x0, 0xfffffffd}, 0x6, 0x8, 0x5) (async) pread64$auto(r1, 0x0, 0xf42c, 0x2) (async) close_range$auto(0x2, 0x8, 0x0) (async) sendmsg$auto_NL80211_CMD_DEL_INTERFACE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x502}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYRESOCT=0x0, @ANYRES8=r0, @ANYBLOB="010025bd050088000f000000"], 0x1c}, 0x1, 0x0, 0x0, 0x84}, 0x408d1) (async) socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/workqueue/ib-comp-wq/uevent\x00', 0x331102, 0x0) mbind$auto(0x9, 0x84, 0x4, &(0x7f0000000000), 0x80000000, 0x7f) (async) mmap$auto(0x0, 0x4000000004, 0x4000000000df, 0x40ebe, r2, 0x300000000000) (async) mmap$auto(0xc, 0x0, 0x0, 0x1a, 0x9, 0x3) (async) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x200008000) (async) socketpair$auto(0x1, 0x1, 0xfffffffc, 0x0) (async) recvmmsg$auto(0x3, 0x0, 0x687bcbd, 0x8, 0x0) (async) shutdown$auto(0x200000003, 0x2) (async) sysfs$auto(0x7, 0x19, 0x4) (async) mmap$auto(0x3ff, 0x1, 0x8, 0x15, 0xd, 0x6) madvise$auto(0x0, 0x7ffffffffffffffe, 0xa) r3 = socket(0x18, 0x5, 0x1) sendmsg$auto_HSR_C_GET_NODE_STATUS(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x8041}, 0x4040001) msgsnd$auto(0x3, &(0x7f0000000040)={0xffffffffffffffe5, 0xb}, 0x9, 0xb966) openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000080), 0x2b0200, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb5, 0x401, 0x8000) (async) ioperm$auto(0x7, 0x6, 0x2) (async) clone$auto(0x21, 0x9, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x6) 3m8.709456236s ago: executing program 35 (id=4946): r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptyx2\x00', 0x50240, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sda1\x00', 0xa4e00, 0x0) (async) setresuid$auto(0x0, 0xffffffffffffffff, 0x0) (async) ioctl$auto_TCFLSH2(r0, 0x540b, 0x0) (async) mmap$auto(0x0, 0xffff, 0xdf, 0x9b72, 0x2, 0x8000) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/scsi/scsi\x00', 0x40102, 0x0) mmap$auto(0x6, 0x100000000400008, 0x1000000e0, 0x9b72, r0, 0x8000) (async) preadv$auto(0x40000000000003, &(0x7f0000000080)={0x0, 0xfffffffd}, 0x6, 0x8, 0x5) (async) pread64$auto(r1, 0x0, 0xf42c, 0x2) (async) close_range$auto(0x2, 0x8, 0x0) (async) sendmsg$auto_NL80211_CMD_DEL_INTERFACE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x502}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYRESOCT=0x0, @ANYRES8=r0, @ANYBLOB="010025bd050088000f000000"], 0x1c}, 0x1, 0x0, 0x0, 0x84}, 0x408d1) (async) socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/workqueue/ib-comp-wq/uevent\x00', 0x331102, 0x0) mbind$auto(0x9, 0x84, 0x4, &(0x7f0000000000), 0x80000000, 0x7f) (async) mmap$auto(0x0, 0x4000000004, 0x4000000000df, 0x40ebe, r2, 0x300000000000) (async) mmap$auto(0xc, 0x0, 0x0, 0x1a, 0x9, 0x3) (async) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x200008000) (async) socketpair$auto(0x1, 0x1, 0xfffffffc, 0x0) (async) recvmmsg$auto(0x3, 0x0, 0x687bcbd, 0x8, 0x0) (async) shutdown$auto(0x200000003, 0x2) (async) sysfs$auto(0x7, 0x19, 0x4) (async) mmap$auto(0x3ff, 0x1, 0x8, 0x15, 0xd, 0x6) madvise$auto(0x0, 0x7ffffffffffffffe, 0xa) r3 = socket(0x18, 0x5, 0x1) sendmsg$auto_HSR_C_GET_NODE_STATUS(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x8041}, 0x4040001) msgsnd$auto(0x3, &(0x7f0000000040)={0xffffffffffffffe5, 0xb}, 0x9, 0xb966) openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000080), 0x2b0200, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb5, 0x401, 0x8000) (async) ioperm$auto(0x7, 0x6, 0x2) (async) clone$auto(0x21, 0x9, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x6) 34.272365698s ago: executing program 7 (id=5351): r0 = openat$auto_proc_pid_cmdline_ops_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/cmdline\x00', 0x40, 0x0) socket(0xa, 0x2, 0x3a) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) setsockopt$auto(0x3, 0x0, 0xb, 0x0, 0x17) read$auto_proc_pid_cmdline_ops_base(r0, &(0x7f0000000100)=""/205, 0xcd) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) mknod$auto(0x0, 0xc9, 0xc8) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x20800, 0x0) r1 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/console\x00', 0x48600, 0x0) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS0\x00', 0x48140, 0x0) ppoll$auto(&(0x7f0000000080)={r1, 0x1, 0x400}, 0x5, 0x0, 0x0, 0x8) ioctl$auto_TIOCVHANGUP2(r2, 0x5437, 0x0) 33.217566483s ago: executing program 7 (id=5352): socket(0x10, 0x2, 0x0) timer_create$auto(0x9, 0x0, 0x0) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000140), 0xffffffffffffffff) r0 = socket(0x11, 0x80003, 0x300) pread64$auto(0xffffffffffffffff, 0x0, 0x3f, 0x7fff) r1 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x101202, 0x0) sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, 0x0, 0x40400c5) openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000000), 0x500, 0x0) unshare$auto(0x40000080) close_range$auto(0x2, r1, 0x1b0e) setsockopt$auto(r0, 0x107, 0x14, 0x0, 0x4) sendto$auto(0x3, 0x0, 0x13, 0xfffffff8, &(0x7f0000000440)=@tipc=@name={0x1e, 0x2, 0x0, {{0x1, 0x3}}}, 0x22) sendmmsg$auto(0x3, 0x0, 0x200, 0x0) read$auto(0xc8, 0x0, 0x200) r2 = setfsuid$auto(0xee00) setreuid$auto(r2, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x2020009, 0x3, 0xeb2, 0xfffffffffffffffb, 0x8000) openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000200), 0x400, 0x0) mmap$auto(0xfffffffffffffff7, 0x202, 0xdd, 0x19, 0x2, 0x1000007fff) r3 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x800, 0x0) readv$auto(r3, &(0x7f00000003c0)={0x0, 0x1}, 0x3) r4 = socket(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'veth0_vlan\x00', 0x0}) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="60802000", @ANYRES16=0x0, @ANYBLOB="00042cbd7000fedbdf25030000000800030000020000080004000500000008000200", @ANYRES32=0x0, @ANYBLOB="0a00050000000000000000000a00010062a768e4ce4f00000a000100000000000000000008000200", @ANYRES32=r5, @ANYBLOB="06000600440d0000"], 0x60}, 0x1, 0x0, 0x0, 0x40080}, 0x9c0a7fc06f585e63) socket(0x10, 0x2, 0x0) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="1100"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) statx$auto(0xffffffffffffff9c, &(0x7f0000000480)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x9, 0x8, &(0x7f00000005c0)={0x101, 0x7ff, 0x2, 0x2, r2, 0x0, 0x1, 0x1, 0x6, 0x8000, 0xd, 0x5, {0x6, 0x3}, {0x8001, 0x8}, {0xd, 0x5}, {0x2, 0x1}, 0x9, 0x8, 0x1200, 0x8, 0x8000, 0x2, 0x200, 0x9, 0x3, 0x7fffffff, 0x4, 0x15, [0x3ff, 0x1a, 0x4, 0x8, 0x1, 0x3ff, 0x1, 0xffffffffffffffff, 0x7]}) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180), 0x2}, 0x2, &(0x7f00000001c0), 0x7, 0xa505}, 0x800}, 0xb, 0x4006) 31.133452222s ago: executing program 7 (id=5357): close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) r0 = fanotify_init$auto(0x5, 0x2000000000002) r1 = socket$nl_generic(0x10, 0x3, 0x10) read$auto(r1, &(0x7f0000000300)='vlan1\x00', 0xc) r2 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f00000022c0), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_PLCA_GET_STATUS(r1, &(0x7f00000023c0)={0x0, 0x0, &(0x7f0000002380)={&(0x7f0000002300)={0x2c, r2, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [@ETHTOOL_A_PLCA_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}]}]}, 0x2c}, 0x1, 0x300, 0x0, 0x408d1}, 0x4010) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'dummy0\x00', 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) poll$auto(&(0x7f0000003640)={r4, 0x7, 0x6}, 0x6, 0x100000) r6 = syz_genetlink_get_family_id$auto_netdev(&(0x7f0000003900), r4) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$auto_NETDEV_CMD_QUEUE_GET(r5, &(0x7f00000039c0)={0x0, 0x0, &(0x7f0000003980)={&(0x7f0000000000)={0x1c, r6, 0x301, 0x70bd2c, 0x25dfdbfd, {}, [@NETDEV_A_QUEUE_IFINDEX={0x8, 0x2, r8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0xc4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge_slave_1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'bond0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'ip6gre0\x00', 0x0}) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r0, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10010}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)={0xd0, r2, 0x800, 0x70bd25, 0x25dfdbff, {}, [@ETHTOOL_A_CHANNELS_HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}]}, @ETHTOOL_A_CHANNELS_HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}, @ETHTOOL_A_CHANNELS_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7}]}, @ETHTOOL_A_CHANNELS_HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_CHANNELS_HEADER={0x4}, @ETHTOOL_A_CHANNELS_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0xd0}, 0x1, 0x0, 0x0, 0x8000004}, 0x40004) socket(0xa, 0x2, 0x0) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$auto_net_shaper(&(0x7f0000001500), r12) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000001540)={'netdevsim0\x00', 0x0}) sendmsg$auto_NET_SHAPER_CMD_GROUP(r12, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000015c0)={&(0x7f0000000000)={0x30, r13, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@NET_SHAPER_A_HANDLE={0xc, 0x1, 0x0, 0x1, [@NET_SHAPER_A_HANDLE_SCOPE={0x8, 0x1, 0x1}]}, @NET_SHAPER_A_LEAVES={0x4}, @NET_SHAPER_A_IFINDEX={0x8, 0x8, r14}, @NET_SHAPER_A_PARENT={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x44000}, 0x14) setsockopt$auto(0x400000000000003, 0x29, 0x3c, 0x0, 0x56b) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) ioctl$auto(0x3, 0x8982, 0x91) socket(0x26, 0x80805, 0x0) open(&(0x7f0000000000)='./file1\x00', 0x4242, 0xe1d2b27bdc14aabe) preadv2$auto(r0, &(0x7f00000001c0)={0x0, 0xe}, 0x2, 0x7ff, 0x5, 0x64) 29.46008097s ago: executing program 7 (id=5358): madvise$auto(0x5, 0x7fffffffffffbfff, 0x5) mmap$auto(0x200, 0x9, 0x1000000003, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x2, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) futex$auto(&(0x7f0000000080)=0x1, 0xb, 0x1, 0x0, 0x0, 0xfffffffa) futex$auto(&(0x7f0000000080)=0x2, 0xa, 0x0, 0x0, 0x0, 0x440a48d2) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000180)="52d60732173d7b5f862a84aee2476b5d8428377ae1da027f4fe1475ecfa90cffedd61d0dadce9b74f64759bedfcf81b04bf958b0dad52e274df790fa398185abd41b0f3d814cdc50a5eec5fa3f90", 0x12, 0x0, 0x9, 0x0, 0x10000000001f, 0xb}, 0x800009}, 0x5, 0x20000000) write$auto(0x3, 0x0, 0xfffffdef) fcntl$auto(0x3, 0x4, 0xa553) mmap$auto(0x0, 0xc04, 0xfffffffffffffffe, 0x9b72, 0x2, 0xc7f6) sendmsg$auto_WG_CMD_GET_DEVICE(0xffffffffffffffff, 0x0, 0x2000c041) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x121041, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x8, 0x3ff57696, 0x9b72, 0x2, 0x8000000000008000) madvise$auto(0x0, 0xffffffffffff0004, 0x19) mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) ioperm$auto(0x7, 0x6, 0x2) ioctl$auto_RTC_PARAM_SET(0xffffffffffffffff, 0x40187014, &(0x7f0000000100)={0x5, @ptr=0xffffffffffffff7f, 0xf54}) madvise$auto(0x0, 0x200007, 0x8) unshare$auto(0x40000080) ioctl$auto_def_blk_fops_fs(0xffffffffffffffff, 0xab09, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0xa, 0x1) 25.523636584s ago: executing program 7 (id=5367): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) rt_sigqueueinfo$auto(0x1, 0x7, &(0x7f0000000040)={@siginfo_0_0={0x0, 0x5, 0xfffffffb, @_sigpoll={0x52, 0x7}}}) r0 = openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f0000002c00)='/dev/cec18\x00', 0x900, 0x0) ioctl$auto_CEC_S_MODE(r0, 0x40046109, &(0x7f0000002c40)=0xd0) 24.427331389s ago: executing program 7 (id=5369): mmap$auto(0x0, 0x20009, 0x4000000000df, 0x10, 0x401, 0x8000) move_pages$auto(0x1, 0xf54, 0x0, 0x0, 0x0, 0x8000000000000000) mmap$auto(0x0, 0x20009, 0xe3, 0x100000eb1, 0x40000000000a1, 0x8000) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0) fsopen$auto(&(0x7f0000000000)='nlctrl\x00', 0x3) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) r0 = socket(0x10, 0x3, 0xa) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_macsec(&(0x7f0000004d40), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'macsec0\x00', 0x0}) r4 = openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f0000002c00)='/dev/cec4\x00', 0x101682, 0x0) ioctl$auto_CEC_ADAP_S_LOG_ADDRS(r4, 0xc05c6104, 0x0) ioctl$auto_CEC_TRANSMIT(r4, 0xc0386105, &(0x7f0000000000)={0x4, 0x2, 0x7, 0x2, 0x1ff, 0x12b, "f7c2868a07e137ab9c72dd89646df184", 0x0, 0x16, 0x5, 0x5, 0x1, 0x2, 0x21}) sendmsg$auto_MACSEC_CMD_DEL_RXSC(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000074c0)={&(0x7f0000001340)=ANY=[@ANYBLOB=',\x00\x00 ', @ANYRES16=r2, @ANYBLOB="01002abd7000fbdbdf250200000008000100", @ANYRES32=r3, @ANYBLOB="100002800c0001000300000000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x80) mmap$auto(0x0, 0x9, 0x400000072, 0x8b72, 0x1000000002, 0x8000) madvise$auto(0xfffffffffffffffe, 0xffffffffffff0001, 0x15) clone$auto(0x21002, 0x9, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x9) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7fffffe) futex_wait$auto(0x0, 0x0, 0x7f, 0x2, 0x0, 0x1) futex_wake$auto(0x0, 0x7, 0xfffffffb, 0x2) 23.708034434s ago: executing program 36 (id=5369): mmap$auto(0x0, 0x20009, 0x4000000000df, 0x10, 0x401, 0x8000) move_pages$auto(0x1, 0xf54, 0x0, 0x0, 0x0, 0x8000000000000000) mmap$auto(0x0, 0x20009, 0xe3, 0x100000eb1, 0x40000000000a1, 0x8000) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0) fsopen$auto(&(0x7f0000000000)='nlctrl\x00', 0x3) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) r0 = socket(0x10, 0x3, 0xa) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_macsec(&(0x7f0000004d40), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'macsec0\x00', 0x0}) r4 = openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f0000002c00)='/dev/cec4\x00', 0x101682, 0x0) ioctl$auto_CEC_ADAP_S_LOG_ADDRS(r4, 0xc05c6104, 0x0) ioctl$auto_CEC_TRANSMIT(r4, 0xc0386105, &(0x7f0000000000)={0x4, 0x2, 0x7, 0x2, 0x1ff, 0x12b, "f7c2868a07e137ab9c72dd89646df184", 0x0, 0x16, 0x5, 0x5, 0x1, 0x2, 0x21}) sendmsg$auto_MACSEC_CMD_DEL_RXSC(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000074c0)={&(0x7f0000001340)=ANY=[@ANYBLOB=',\x00\x00 ', @ANYRES16=r2, @ANYBLOB="01002abd7000fbdbdf250200000008000100", @ANYRES32=r3, @ANYBLOB="100002800c0001000300000000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x80) mmap$auto(0x0, 0x9, 0x400000072, 0x8b72, 0x1000000002, 0x8000) madvise$auto(0xfffffffffffffffe, 0xffffffffffff0001, 0x15) clone$auto(0x21002, 0x9, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x9) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7fffffe) futex_wait$auto(0x0, 0x0, 0x7f, 0x2, 0x0, 0x1) futex_wake$auto(0x0, 0x7, 0xfffffffb, 0x2) 11.447485056s ago: executing program 2 (id=5399): madvise$auto(0x5, 0x7fffffffffffbfff, 0x5) mmap$auto(0x200, 0x9, 0x1000000003, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x2, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) futex$auto(&(0x7f0000000080)=0x1, 0xb, 0x1, 0x0, 0x0, 0xfffffffa) futex$auto(&(0x7f0000000080)=0x2, 0xa, 0x0, 0x0, 0x0, 0x440a48d2) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000180)="52d60732173d7b5f862a84aee2476b5d8428377ae1da027f4fe1475ecfa90cffedd61d0dadce9b74f64759bedfcf81b04bf958b0dad52e274df790fa398185abd41b0f3d814cdc50a5eec5fa3f90", 0x12, 0x0, 0x9, 0x0, 0x10000000001f, 0xb}, 0x800009}, 0x5, 0x20000000) write$auto(0x3, 0x0, 0xfffffdef) fcntl$auto(0x3, 0x4, 0xa553) mmap$auto(0x0, 0xc04, 0xfffffffffffffffe, 0x9b72, 0x2, 0xc7f6) bind$auto(0x3, 0x0, 0x6b) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x121041, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x8, 0x3ff57696, 0x9b72, 0x2, 0x8000000000008000) madvise$auto(0x0, 0xffffffffffff0004, 0x19) mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) ioperm$auto(0x7, 0x6, 0x2) ioctl$auto_RTC_PARAM_SET(0xffffffffffffffff, 0x40187014, &(0x7f0000000100)={0x5, @ptr=0xffffffffffffff7f, 0xf54}) madvise$auto(0x0, 0x200007, 0x8) unshare$auto(0x40000080) ioctl$auto_def_blk_fops_fs(0xffffffffffffffff, 0xab09, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0xa, 0x1) 9.166917101s ago: executing program 0 (id=5402): madvise$auto(0x5, 0x7fffffffffffbfff, 0x5) mmap$auto(0x200, 0x9, 0x1000000003, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x2, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) futex$auto(&(0x7f0000000080)=0x1, 0xb, 0x1, 0x0, 0x0, 0xfffffffa) futex$auto(&(0x7f0000000080)=0x2, 0xa, 0x0, 0x0, 0x0, 0x440a48d2) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000180)="52d60732173d7b5f862a84aee2476b5d8428377ae1da027f4fe1475ecfa90cffedd61d0dadce9b74f64759bedfcf81b04bf958b0dad52e274df790fa398185abd41b0f3d814cdc50a5eec5fa3f90", 0x12, 0x0, 0x9, 0x0, 0x10000000001f, 0xb}, 0x800009}, 0x5, 0x20000000) write$auto(0x3, 0x0, 0xfffffdef) fcntl$auto(0x3, 0x4, 0xa553) mmap$auto(0x0, 0xc04, 0xfffffffffffffffe, 0x9b72, 0x2, 0xc7f6) bind$auto(0x3, 0x0, 0x6b) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x121041, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x8, 0x3ff57696, 0x9b72, 0x2, 0x8000000000008000) madvise$auto(0x0, 0xffffffffffff0004, 0x19) mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) ioperm$auto(0x7, 0x6, 0x2) ioctl$auto_RTC_PARAM_SET(0xffffffffffffffff, 0x40187014, &(0x7f0000000100)={0x5, @ptr=0xffffffffffffff7f, 0xf54}) madvise$auto(0x0, 0x200007, 0x8) unshare$auto(0x40000080) ioctl$auto_def_blk_fops_fs(0xffffffffffffffff, 0xab09, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0xa, 0x1) 7.151821404s ago: executing program 2 (id=5404): mmap$auto(0x0, 0x5, 0x2, 0x40eb2, 0x401, 0x300000000000) r0 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/security/tomoyo/manager\x00', 0x2, 0x0) write$auto_tomoyo_operations_securityfs_if(r0, &(0x7f00000000c0)="0a1b9a5c430f8262cd1aec49ec53c2efa054d7886d8ea5c2574c58e9867ecec3371cadb848770dc8f745b2c76eedba12b9f694dabdbcf3401910bb733aca465c9bd40a", 0x43) r1 = openat$auto_short_retry_limit_ops_(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/ieee80211/phy7/short_retry_limit\x00', 0x4a02, 0x0) r2 = openat$auto_tracing_cpumask_fops_trace(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/tracing/tracing_cpumask\x00', 0x82101, 0x0) close_range$auto(r1, r2, 0x5) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r3 = socket(0x2, 0x6, 0x0) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) setsockopt$auto(r3, 0x10d, 0xb, 0x0, 0x17) r4 = socket(0x15, 0x5, 0x0) bind$auto(0x3, 0x0, 0x6a) setsockopt$auto(r4, 0x114, 0x1, 0x0, 0x1c) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) mmap$auto(0x0, 0x9, 0x3ff57696, 0x9b72, 0x2, 0x8000000000008000) madvise$auto(0x0, 0x10000, 0x19) mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x5, 0x2) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @loopback}, 0x54) r5 = openat$auto_lowpan_enable_fops_(0xffffffffffffff9c, &(0x7f0000000440), 0x8080, 0x0) readv$auto(0x0, &(0x7f0000000080)={0x0, 0x1e}, 0x3) r6 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$auto(r5, 0x10000, 0x1, &(0x7f0000000200)='/dev/tty12\x00', 0x7f) r7 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_STOP_SCHED_SCAN(r6, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000180)={&(0x7f0000000480)={0x102c, r7, 0x4, 0x70bd2b, 0x25dfdbfb, {}, [@NL80211_ATTR_PMKR0_NAME={0x1004, 0x102, "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"}, @NL80211_ATTR_ADMITTED_TIME={0x6, 0xd4, 0x8}, @NL80211_ATTR_FRAME_MATCH={0xa, 0x5b, "f5326b27ccce"}]}, 0x102c}, 0x1, 0x0, 0x0, 0x4800}, 0x24000011) r8 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) ioctl$auto(r8, 0x4b66, 0x1) 7.075924583s ago: executing program 0 (id=5405): madvise$auto(0x0, 0x7fffffffffffffff, 0xa) ftruncate$auto(0x1ff, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) unshare$auto(0x40000080) ioctl$auto_def_blk_fops_fs(0xffffffffffffffff, 0xab09, 0x0) getrandom$auto(0x0, 0x6000000, 0x3) remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0x3, 0x4) r0 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_SET_WOWLAN(0xffffffffffffffff, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000001180)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c00", @ANYRES16=r0, @ANYBLOB="0100ff000000000000ea4900000008000300", @ANYRES32], 0x1c}}, 0x14000080) geteuid() r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000740), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'netdevsim0\x00', 0x0}) sendmsg$auto_ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000080)=ANY=[@ANYBLOB="a28c3006", @ANYRES16=r2, @ANYBLOB="01002abd7000fcdbdf25140000000c00018008000100", @ANYRES32=r3, @ANYBLOB="0800120002000000"], 0x28}, 0x1, 0x0, 0x0, 0x40448c1}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'vlan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'veth0_to_bridge\x00', 0x0}) sendmsg$auto_ETHTOOL_MSG_FEC_SET(0xffffffffffffffff, &(0x7f00000025c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20102d}, 0xc, &(0x7f0000002580)={&(0x7f0000000140)={0xac, 0x0, 0x20, 0x70bd28, 0x25dfdbfb, {}, [@ETHTOOL_A_FEC_MODES={0x4}, @ETHTOOL_A_FEC_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x97}]}, @ETHTOOL_A_FEC_HEADER={0x84, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x81}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x8}]}, @ETHTOOL_A_FEC_MODES={0x4}]}, 0xac}, 0x1, 0x0, 0x0, 0x4008804}, 0x44000) socket$nl_generic(0x10, 0x3, 0x10) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) sysfs$auto(0x8, 0x10001, 0x5) mbind$auto(0x0, 0x100000004, 0x100000000, 0x0, 0x20000000000006, 0x2) clone$auto(0x21002, 0x9, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x9) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) msgrcv$auto(0x0, 0x0, 0xffc, 0x1, 0xb1) msgsnd$auto(0x0, 0x0, 0x8, 0x9) 6.98375403s ago: executing program 6 (id=5406): r0 = socket(0x10, 0x2, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x10000000000000a, 0xeb1, 0xfffffffffffffffa, 0x8000) io_uring_setup$auto(0x6, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_LINKINFO_SET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYRESDEC=r0, @ANYRES16=r2, @ANYBLOB="01002dbd7000fbdbdf2503000000180001801400020073797a5f74756e0000000000000000000500050001000000"], 0x34}, 0x1, 0x0, 0x0, 0x4000840}, 0x0) sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0x3dd, &(0x7f0000000500)={&(0x7f00000005c0)="4a8868850b44af0000c9cb1081bb6cfabdd81dfcc15159c56778a04a3688ef246df85b7b1a6ebe1869550a5f5d26fc89a77fabbf3e9d5fa4ac11838240026abafc513d70216efe5718891359a98acaab4f8a6843fb269a3fd44f", 0x800000000fbf}, 0x2, 0x0, 0x7, 0xa505}, 0x2}, 0xb, 0x4008) r3 = socket(0x2, 0x5, 0x0) bpf$auto(0x0, &(0x7f00000001c0)=@task_fd_query={0x9, 0x21eb, 0x7ff, 0x6, 0xa, 0x1000009, r3, 0x0, 0x3}, 0x6f3) r5 = socket(0x10, 0x2, 0x0) r6 = memfd_create$auto(&(0x7f0000000000)='\xc4--:\xdd:,./-${\x00', 0x4) socket$nl_generic(0x10, 0x3, 0x10) socket(0x28, 0x3, 0x7fffffff) r7 = socket(0x1f, 0x80000, 0x6) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) sendmmsg$auto(0x3, &(0x7f0000000000)={{0x0, 0x2, 0x0, 0x106, 0x0, 0x1, 0x3}, 0xed7138c}, 0x7, 0x0) r8 = socket(0xa, 0x3, 0x6) socket(0x2c, 0x3, 0x1000003b) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000015c0), r9) sendmsg$auto_NL80211_CMD_GET_STATION(r9, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000001880)={&(0x7f0000000300)=ANY=[@ANYRESOCT=r6, @ANYRES32=r1, @ANYRESDEC=r10, @ANYRESDEC=r4, @ANYRES8=r2, @ANYRES8, @ANYRES64=0x0, @ANYRES64=r8, @ANYRES32], 0x28}, 0x1, 0x0, 0x0, 0x40004001}, 0x800) sendmsg$auto_NL80211_CMD_GET_SURVEY(r7, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010027bd7000fddbdf25320000000600b500ff0700000500920040000000080410580022010000008004008c000600ab0006"], 0x38}, 0x1, 0x0, 0x0, 0x40}, 0x20000000) sendmsg$auto_NL80211_CMD_CRIT_PROTOCOL_STOP(r7, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="7400e500", @ANYRES32=r5, @ANYBLOB="00032dbd7000ffdbdf25630000000600ed00000000000600b5000600000006009800010000000400ff000500080003000000060012000700000008001400040000001b00c700324975f389832ff1f82698cc13f48c81817c1f07b435d4001000b0006d298bd28eff488fae365756"], 0x74}, 0x1, 0x0, 0x0, 0x4000013}, 0x2000c010) socket$nl_generic(0x10, 0x3, 0x10) 6.334471859s ago: executing program 6 (id=5407): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/firmware/acpi/pm_profile\x00', 0x141000, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000000000)=""/53, 0x35) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptywa\x00', 0x400, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x2000000000000021, 0x2, 0x10000000000002) r1 = socket(0x15, 0x5, 0x0) setsockopt$auto(r1, 0x114, 0x8, 0x0, 0x4) ioctl$auto(0x3, 0x89e0, 0x3) ioctl$auto(0x3, 0x40045436, 0x14) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/firmware/acpi/pm_profile\x00', 0x141000, 0x0) (async) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000000000)=""/53, 0x35) (async) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptywa\x00', 0x400, 0x0) (async) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) (async) close_range$auto(0x2, 0x8, 0x0) (async) socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) (async) socket(0x2000000000000021, 0x2, 0x10000000000002) (async) socket(0x15, 0x5, 0x0) (async) setsockopt$auto(r1, 0x114, 0x8, 0x0, 0x4) (async) ioctl$auto(0x3, 0x89e0, 0x3) (async) ioctl$auto(0x3, 0x40045436, 0x14) (async) 5.588825282s ago: executing program 2 (id=5408): sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) ioctl$auto_VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, 0x0) fsopen$auto(0x0, 0x3) ioctl$auto(0xc8, 0x400454d1, 0x5c8d) r0 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$auto(0x3, 0xc0045543, 0xb551) mmap$auto(0x0, 0x400008, 0x10000000df, 0x9b72, 0x2, 0x8000) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS1\x00', 0x20400, 0x0) ioctl$auto_TIOCSWINSZ2(r1, 0x5414, 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) shmctl$auto(0x5, 0x4, 0x0) fsconfig$auto(r0, 0x2, 0x0, &(0x7f0000000140)="e995adcc9217c2816b79170c6904afba57de89b37d628f0361286063e8dcc190d28815a40cb50aa89ac1d382055e6854", 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_seg6(&(0x7f0000001a00), 0xffffffffffffffff) sendmsg$auto_SEG6_CMD_SET_TUNSRC(r2, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000001180)={&(0x7f0000000040)=ANY=[@ANYRES16=r3, @ANYBLOB="110026bd7000ffdbdf250300000014000100ff01f5ff"], 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x44892) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/ptp/ptp0/max_vclocks\x00', 0xa100, 0x0) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x484041, 0x0) socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x402, 0x300000000000) openat$auto_urandom_fops_random(0xffffffffffffff9c, &(0x7f0000004000), 0x40, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0}, 0x1) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/pagemap\x00', 0xc480, 0x0) 5.315705034s ago: executing program 6 (id=5409): unshare$auto(0x40000080) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) r0 = socket(0x26, 0x2, 0x6b3) bind$auto(0x3, &(0x7f0000000040)=@vsock={0x28, 0x0, 0x2710, @hyper}, 0x6a) ppoll$auto(&(0x7f0000000000)={r0, 0x8, 0x6}, 0x7, 0x0, 0x0, 0x8) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x5, 0x20000000) mmap$auto(0x0, 0x1, 0x3, 0xeb1, 0xfffffffffffffffa, 0x7ffe) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0xfffffffe, 0x1, 0x4, 0x9, 0x79) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0xffffffffffff0001, 0x15) r1 = socket(0x21, 0xa, 0x0) syz_genetlink_get_family_id$auto_smc_pnetid(0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$auto_hsr(0x0, 0xffffffffffffffff) prctl$auto(0x26, 0xfffffffffffffffe, 0x0, 0x0, 0x40) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/controlC1\x00', 0xa02, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r2 = openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0) syz_genetlink_get_family_id$auto_wireguard(&(0x7f0000000100), r1) ioctl$auto_RTC_RD_TIME(r2, 0x80247009, 0x0) r3 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x20401, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x4601, 0x0) madvise$auto(0x0, 0x1010001, 0x100000003) getxattr$auto(0x0, 0x0, 0x0, 0x2) socket(0xa, 0x2, 0x88) fanotify_init$auto(0x5, 0x2) io_uring_setup$auto(0x6, 0x0) close_range$auto(0x2, 0x8000, 0x0) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x1e, &(0x7f0000000000), 0x1) 5.070872722s ago: executing program 0 (id=5410): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/platform/dummy_hcd.2/usb3/3-0:1.0/ep_81/bLength\x00', 0x22180, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ram11\x00', 0x84381, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/015/001\x00', 0xa901, 0x0) keyctl$auto(0x4, 0xffffffffffffffff, 0x5, 0x800, 0xa) keyctl$auto(0xe, 0x1, 0x2, 0x8, 0xffd) mmap$auto(0x0, 0x400008, 0xa, 0x9b72, 0x3, 0x8004) ioctl$auto(0x3, 0x8108551b, 0x1) openat$auto_urandom_fops_random(0xffffffffffffff9c, &(0x7f00000000c0), 0x2608c2, 0x0) r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp1\x00', 0x20342, 0x0) ioctl$auto_SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000000000)=0x5) r2 = openat$auto_vcs_fops_vc_screen(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vcsa1\x00', 0x1, 0x0) write$auto_vcs_fops_vc_screen(r2, &(0x7f00000001c0)="de68b010fe92868d5585a80c205959", 0xf) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nbd(&(0x7f0000001d00), 0xffffffffffffffff) close_range$auto(0x0, 0xfffffffffffff000, 0x2) mmap$auto(0x0, 0x9, 0x72, 0x8b72, 0x2, 0x8000) io_uring_setup$auto(0x6, 0x0) close_range$auto(0x0, r0, 0x2) r4 = socket(0x2, 0x6, 0x0) socket(0xa, 0x3, 0x3a) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) mmap$auto(0x0, 0x10000003, 0x3, 0xeb1, 0xfffffffffffffffa, 0xfffffffffffffffe) sendmmsg$auto(0x3, 0x0, 0x20009a6, 0x0) sendmsg$auto_NBD_CMD_CONNECT(r3, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001dc0)={&(0x7f0000000440)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRESOCT=r4, @ANYBLOB="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"], 0x28}, 0x1, 0x0, 0x0, 0x4004}, 0x8880) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x5, 0x8000) write$auto(0x3, 0x0, 0xfffffdef) ioctl$auto_SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000000400)=0x10) close_range$auto(0x2, 0x8, 0x0) write$auto(0x3, 0x0, 0x9) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000003480)=""/247, 0xf7) 4.488754907s ago: executing program 0 (id=5411): mmap$auto(0x2, 0x2020006, 0x1000, 0x8eb1, 0xfffffffffffffffa, 0x8000) unshare$auto(0x40000080) socket$nl_generic(0x10, 0x3, 0x10) futex$auto(0x0, 0x5, 0x0, 0x0, 0x0, 0xc0040000) mmap$auto(0x0, 0x6, 0x4000000000df, 0xeb1, 0x400, 0x8000) r0 = socket(0x11, 0x80003, 0x300) setsockopt$auto(r0, 0x107, 0x2, 0x0, 0x28) 4.387649523s ago: executing program 2 (id=5412): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r0 = socket(0x10, 0x2, 0x0) sendmsg$auto_IPVS_CMD_GET_SERVICE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001380)={0x100c, 0x0, 0x4, 0x70bd26, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x1e4, 0x1, 0x0, 0x1, [@nested={0x1e0, 0x116, 0x0, 0x1, [@nested={0x1da, 0xb4, 0x0, 0x1, [@typed={0x5, 0xa2, 0x0, 0x0, @str='\x00'}, @generic="946a52701565afb7fc2765ea6326fe0ff7f6bd06452e763badb547a569a4451dc00c65d85becc32eb4e2eb9044b70a99a099f8bf042e3dbc88521b6415b338547f0f28aef7cb24d5c7a36c6d78702c315f1bc3cf38149b90ac45153fb66fbb69eeb9049e23f77d3ecc016898cddaa8c2ada1963a6c5f44caeef41c0701cde1d838abfaf490440a931e6a2885fe9a1d3ca6ec89b58760ac57132ba30900e57828478d9120db81faed62a243aa152ba6d17e40ae4fbff7a132724c5974624d98f8b16b5d42a4c20469e330295f3ea6", @generic="6c663c7aaf9af52c7f532e0d7dac503c46019e3be3204078d2dbb31231c2d5a0bf6727b378a29cff2aeb5b7500000000000000", @generic="4360c3e8795ce84cc8667fc2e2ba65efd9de123792d875c3209eb294d0acab4e309e246456547f663ae1a79c4feb924da952d56c58fc61666381692de68f009d5c626ef42f31a8d8b0280e6e394cd497e8079ba2e707638ac8d8931f3a457804e5875020217a1cdafaa52ca6b600cb864d8199b8e3de4d944ca15791f0453d2f869bfec7c3f8b26aac35dcbf0f77e19f7d3d5d332babacf14317dcdf0fc82214c0f91bbe4a577432b8c128f93b4c41d0ba2da05eae2d7fe434fe060a9fc4b2ec8134eec7612e3b4f9acfafa17f"]}]}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9}, @IPVS_CMD_ATTR_DEST={0xe0c, 0x2, 0x0, 0x1, [@nested={0xe06, 0xda, 0x0, 0x1, [@typed={0x4, 0x9f}, @generic="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", @typed={0x8, 0xfa, 0x0, 0x0, @ipv4=@remote}, @typed={0x8, 0x146, 0x0, 0x0, @pid=0xffffffffffffffff}, @generic="3eddc99bcc9008cebd60632e0840064de571260cc67e711df75e3e84ca5d3a190ffbb479decb", @typed={0x8, 0x139, 0x0, 0x0, @fd=r0}, @typed={0x14, 0xbd, 0x0, 0x0, @ipv6=@private0}, @nested={0x4, 0x4}, @generic="28eb79249bf6e1dd4d3062338ab3caec5aeb221c73fc49e208e7374b"]}]}]}, 0x100c}, 0x1, 0x0, 0x0, 0x4004080}, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200", @ANYBLOB="5de1"], 0x1ac}}, 0x40000) recvmmsg$auto(r0, &(0x7f0000000140)={{0x0, 0x4, &(0x7f0000000080)={0x0, 0x803}, 0x5, 0x0, 0x2, 0x8}, 0x800}, 0x10a, 0x8, 0x0) 3.769206504s ago: executing program 0 (id=5413): open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x100) rseq$auto(&(0x7f0000000300)={0xe, 0x401, 0x0, 0x6, 0xffffffff, 0x2}, 0x8000, 0x0, 0x6) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) r0 = open(0x0, 0xeee00, 0x31) mmap$auto(0x0, 0x5, 0x4000000000df, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) write$auto(0x3, 0x0, 0x100082) lseek$auto(0x3, 0x7fffffffffffffff, 0x1) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) setns(0xffffffffffffffff, 0x0) clone$auto(0x8001, 0x1, 0xffffffffffffffff, 0xfffffffffffffffc, 0x6) writev$auto(0x1, &(0x7f0000000100)={0x0, 0x400000000000fdef}, 0x1) r1 = socket(0xa, 0x2, 0x73) write$auto_msr_fops_msr(r0, 0x0, 0x0) getsockname$auto(r1, &(0x7f0000000240), &(0x7f0000000280)=0xaea) r2 = openat$auto_nsim_dev_take_snapshot_fops_dev(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim2/take_snapshot\x00', 0x1, 0x0) write$auto_nsim_dev_take_snapshot_fops_dev(r2, 0x0, 0x0) 3.286925161s ago: executing program 2 (id=5414): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x60742, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r1 = socket(0x2b, 0x1, 0x1) getsockopt$auto(r1, 0x1, 0x1a, 0x0, 0x0) r2 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mmap$auto(0x0, 0x200006, 0x2, 0x40eb1, 0x602, 0x300000000000) mbind$auto(0x0, 0x2, 0x2, &(0x7f0000002100)=0x4, 0x7, 0x0) get_mempolicy$auto(0x0, 0x0, 0x7f, 0x41ff, 0x3) write$auto(0x3, 0x0, 0x7fffffff) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) signalfd4$auto(0xffffffff, 0x0, 0x8, 0x800) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) close_range$auto(0x2, 0xa, 0x0) socket(0x18, 0xa, 0x1) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) prctl$auto(0x41555856, 0x4, 0x2008, 0x0, 0x0) socket(0xa, 0x2, 0x0) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "ab06fdffff00fff500"}, 0x55) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, 0x0, 0x2000, 0x0) close_range$auto(r2, r0, 0x6) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0) 3.186495377s ago: executing program 8 (id=5370): r0 = socket(0x2, 0x5, 0x0) mmap$auto(0x40000000000, 0x8, 0xdf, 0x9b72, r0, 0x8000) (async) setsockopt$auto(0x3, 0x10000000084, 0x84, 0x0, 0x90) 3.091200782s ago: executing program 8 (id=5415): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000000)='/dev/binderfs/binder1\x00', 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x3, 0x10eb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mbind$auto(0xf000, 0x1, 0x1, 0x0, 0x7fff, 0x2) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x1e, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x9, 0xdf, 0xeb1, 0x1, 0x8000) getsockopt$auto(0x6, 0x1, 0x38, 0xfffffffffffffffe, 0x0) ioctl$auto(r0, 0x40046207, 0x9) sendmsg$auto_OVS_METER_CMD_SET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x52204b}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x880) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0x200007, 0x19) mmap$auto(0x0, 0x9, 0xdf, 0x1000000eb1, 0x401, 0x8000) select$auto(0x3, 0x0, &(0x7f0000000100)={[0x8, 0xb, 0x0, 0x9, 0xfffffffffffffffc, 0x83, 0x6, 0x2, 0x9, 0xffff, 0x4000000000000002, 0xd, 0x3, 0xfffffffffffffffe, 0x7, 0x1000000006]}, 0x0, 0x0) syslog$auto(0x2, &(0x7f0000000000)='-#:\x00[\xda\xe2\xc3L\xd30{Q\xecvP\x93\x87\x1e\xdd\x95\x1b\x19qI\vv\xacO*X0V\x93\x85\xff\xb2\xdd\xd8\xd5Kh\xfa\xa3\xc7\x9b}\xec\x1e\xdc\x80\x1fR\xc30\x9a\xae\\\'\x14\x98\x98\xc3iDv\x97\xdfTMt\xe5?\xd0\xcc\xb8\xfa\a\x7f\x7f\x00\x00\x00\x00\x00\x00\x00n_\xb1\x1c\x7f\xb0y\xec\xe2\xcc\x1a/\xfa{d\xe4BN\x9c\xb9\x87.\xfe\xe7&1j\xe6]\xc3\x9anE6\x81\xe4\xec\xfa\xefE\xf7\x17h\xf4pumR\xd55Dd(\x0f(b\x1aD\xf4\x03\xc3\\\xdf\x8f\xa8\x82\xab\x102\xd1\xaf\xcaT\x86\x171\x11Q4\x94\x9d\xf5\x9c\xe3\xaa\xf3\xd26i\xf9\xb2\xd9T\xc9\xfd\xba\x91^\x19\x95\xde\xbc \xa8\x98\xc3\xed\xe9,{\xd4\xa1\xe4p\xcf\b\f\xb4\xbe_\xf2\xbe\xef\v\xf1d\xdd\x0e\xfc\xc3\xeaqt\x94\xe7\xce\xf1\xc5\x94~\xf6Cx\x0e\x98\xc7gE>*\x9c%\xa0\\\x14\t\tv.\x1c\x1a\xf1\xba\xc0>\xf4Hc\xc3\xfa\x033\x8f\xb9(\n/\xcdo\xc2', 0xcf) close_range$auto(0x2, 0x8, 0x0) clone$auto(0x1002, 0x9, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x9) openat$auto_evm_key_ops_evm_secfs(0xffffffffffffff9c, &(0x7f00000000c0), 0x40802, 0x0) mmap$auto(0x0, 0xc, 0x4000000000df, 0x44eb2, 0x10006, 0x300000000000) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ram3\x00', 0x1a9382, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x4c440, 0x0) preadv2$auto(0x3, &(0x7f0000001000)={0x0, 0x80000000}, 0x5, 0xffffffffffffffff, 0x7, 0x2e) preadv2$auto(0x3, &(0x7f0000001000)={0x0, 0x80000000}, 0x5, 0xffffffffffffffff, 0x7, 0x2e) bpf$auto(0x5, &(0x7f0000001080)=@bpf_attr_7={@link_id=0x9, 0x92f1, 0x4}, 0xa) 2.469881855s ago: executing program 6 (id=5416): r0 = socket(0x2a, 0x2, 0x0) r1 = socket(0x10, 0x2, 0xc) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000013c0)=ANY=[@ANYBLOB="18000000", @ANYRES8=r1, @ANYBLOB="01", @ANYRES32], 0x18}, 0x1, 0x0, 0x0, 0x60008004}, 0x80) recvfrom$auto(r1, &(0x7f0000000000), 0xfffffffffffffff5, 0xaa, 0x0, 0x0) r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), r1) prctl$auto(0x35, 0x0, 0x8, 0x0, 0x0) prctl$auto(0x34, 0x0, 0x0, 0x0, 0x0) sendmsg$auto_NL80211_CMD_DEL_MPATH(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="100026bd7000fcdbdf251800000018003b800400030004000300040003000400030004000200"], 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 1.787023729s ago: executing program 0 (id=5417): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000440), r0) sendmsg$auto_TIPC_NL_BEARER_DISABLE(r0, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000540)={0x14, r1, 0x1, 0x70bd2b, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x24004080) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x2a, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'ip6tnl0\x00'}) syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002f00), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_PAUSE_SET(r3, 0x0, 0x4040000) mmap$auto(0x0, 0x400005, 0xfffffffffffffffe, 0x9b72, 0x2, 0x8000) socket(0x2a, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000080), 0x6b) connect$auto(0x3, &(0x7f00000000c0), 0x55) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/net/nr2/queues/tx-0/xps_rxqs\x00', 0x22701, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r4, &(0x7f00000027c0)='H', 0x1) fcntl$auto(0xffffffffffffffff, 0x401, 0x5) sendmsg$auto_OVS_METER_CMD_SET(0xffffffffffffffff, 0x0, 0x40) setsockopt$auto(0xffffffffffffffff, 0x4, 0x8001, 0x0, 0x7) unshare$auto(0x40000080) mbind$auto(0x0, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) sendmsg$auto_VDPA_CMD_DEV_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="010027bd7000ffdbdf2505000000080011007f0000001000010026212b245b2b287b5e265e001400040077673100000000000000000000000000080011002d7800001400020076657468315f746f5f626500"], 0x5c}, 0x1, 0x0, 0x0, 0x40010}, 0xc000) gettid() connect$auto(0xffffffffffffffff, 0x0, 0x55) unshare$auto(0x40000080) writev$auto(0x1, &(0x7f0000000100)={0x0, 0x400000000000fdef}, 0x1) madvise$auto(0x0, 0x20200, 0x15) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) open(&(0x7f0000000200)='./cgroup\x00', 0x400, 0x23) 1.699447377s ago: executing program 6 (id=5418): unshare$auto(0x40000080) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) syz_genetlink_get_family_id$auto_mac80211_hwsim(0x0, 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000540), r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000080), r2) sendmsg$auto_BATADV_CMD_GET_MCAST_FLAGS(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)={0x1c, r3, 0x95bda67d863ba7af, 0x70bd2d, 0x25dfdbfd}, 0x1c}, 0x1, 0x0, 0x0, 0x884}, 0x20010000) sendmsg$auto_HWSIM_CMD_GET_RADIO(r0, &(0x7f0000001900)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="30202eb63a4bf251df25060032e526ec5763e258a3875662f7c99394d89d9148f12c25e02f650123af3d4562825b22558de243cf5d5511c439760b3582d8dd4e753c5e4e16d214a5621aa80d9d688f2ab9988f5e35c14e2fb48d73e14d0e7fc4fd3185eb035cad0e7a7a95262999d9e210c965346b98d45a29a78bfaafce0900e32c4e188bb9b24dd12e9ee41d71b3e787f6094b17cb845e11d15a10430d3d49fd5e19a1d33637c7"], 0x14}, 0x1, 0x0, 0x0, 0x884}, 0x8000) mmap$auto(0x800, 0x1000ffffffff, 0xdb, 0x9b72, 0x400, 0x28004) r4 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)) r5 = getpid() move_pages$auto(r5, 0xfffffffffffffffe, &(0x7f0000000080)=&(0x7f0000000000)="459c158508ac8a9babaf41d25d067b29665293c0252cc2de4c80b2ef093d4d93f8bd21665c264fdac915531d36901a94fe7de91bdcdeb8550727e99b26864df08621ba7750ec99ac429cb78a9d6b51e75261230028af", &(0x7f00000000c0)=0xe, &(0x7f0000000100)=0xd8, 0xff5) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000200)='/dev/sequencer2\x00', 0x90080, 0x0) fstat$auto(r4, 0x0) 259.238007ms ago: executing program 6 (id=5419): r0 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video37\x00', 0x8a240, 0x0) ioctl$auto(r0, 0x5646, r0) read$auto_v4l2_fops_v4l2_dev(r0, &(0x7f0000000080)=""/27, 0x1b) r1 = io_uring_setup$auto(0x6, &(0x7f0000000100)={0x80000001, 0x1eff, 0xa0, 0x1, 0x10001, 0x7f, r0, [0xbc22, 0x7, 0x3], {0x144, 0x9, 0x3, 0x9, 0x7, 0x2, 0x200, 0x8, 0x5}, {0x80000000, 0x4d7, 0x6, 0x6, 0x2, 0x7fff, 0x80000001, 0x0, 0xdc01}}) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) semctl$auto(0x201, 0xfffffffffffffffa, 0x3, 0x0) r2 = socket(0x2, 0x1, 0x0) getsockopt$auto(r2, 0x0, 0x41, 0x0, 0x0) write$auto_zero_fops_mem(r1, &(0x7f0000000280)="40b6f5f38bfa718a0b70bf700a6604c2ee12c74899dc87b45783a743421b99beb440c5b08348b8f3f943991c391a31426a79b78d6c737104357f7df06f62774e743fbc1100c15689a90bc403a56de4f90b80957c6861b8be5777cbe0cb4c9c5f73b021dca4dac716abf0a98701c049bcb715457d4d9e77ef9bdd01edf58f640c482773a8f6d76aa7030c010a4faaa9ab4add30b28fe31f5ac616b2cbc752ef44161ce3e9044df8e5564b6d90b42c555f7f0fae458d105db5676a0aaaecbdc4ab1c71db3a3f21f8604d344426c5c76e1c40de0ddbd0422ce3a243d484da965ad1b0b8aff8df395d0c90", 0xe9) epoll_wait$auto(r1, &(0x7f00000001c0)={0x6, 0x8}, 0x7fffffff, 0x7) r3 = open(&(0x7f00000000c0)='./cgroup\x00', 0x262400, 0xb5d1af1605322c72) openat$auto_dfs_dom_ops_debugfs(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) syz_clone3(&(0x7f0000000200)={0x383281180, 0x0, 0x0, 0x0, {0x1a}, 0x0, 0x0, 0x0, 0x0, 0x0, {r3}}, 0x58) r4 = openat$auto_objects_fops_(0xffffffffffffff9c, &(0x7f0000000040), 0x103000, 0x0) prctl$auto(0x34, 0x1, 0x0, 0x0, 0x0) ioctl$auto(r0, 0x6, r4) 0s ago: executing program 2 (id=5420): openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000010c0)='/dev/snd/controlC1\x00', 0x802, 0x0) r0 = openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) io_uring_setup$auto(0x2, 0x0) openat$auto_dfs_cpu_ops_debugfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/x86/topo/cpus/0\x00', 0x141800, 0x0) ioctl$auto_TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000040)=0x64ea) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/controlC2\x00', 0x101842, 0x0) r1 = openat$auto_proc_pid_attr_operations_base(0xffffffffffffff9c, &(0x7f0000000140)='/proc/thread-self/attr/apparmor/exec\x00', 0x200200, 0x0) r2 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/neigh/netdevsim3/base_reachable_time_ms\x00', 0x101302, 0x0) r3 = dup$auto(r2) write$auto_force_suspend_fops_hci_vhci(r3, &(0x7f0000000040)="900ad8", 0x3) openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f0000000140)='/proc/thread-self/cpuset\x00', 0x181100, 0x0) pipe$auto(&(0x7f0000000000)=r1) mmap$auto(0x0, 0x200, 0x1, 0x17, 0x401, 0x8000) r4 = socket(0x10, 0x2, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x3, 0x1, 0x9, 0x3, 0x3, 0x940, 0x1ffde, 0x3, 0x7, 0x2, 0x9, 0x8, 0x1ff, 0x4, 0xb0, 0x9, 0x2, 0x2000, 0x5, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000]}, 0x1fe, 0x81) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) mprotect$auto(0x1ffff000, 0x8000000000000001, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(r4, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x40000) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x5, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_freeze_timeout\x00', 0x40000, 0x0) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/pci0000:00/0000:00:01.0/uevent\x00', 0x103c40, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r5, &(0x7f0000001c00)=""/4109, 0x100d) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snd/controlC1\x00', 0x22082, 0x0) r6 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/scsi/scsi\x00', 0x40d81, 0x0) write$auto_proc_reg_file_ops_compat_inode(r6, 0x0, 0x0) kernel console output (not intermixed with test programs): k: 'syz.3.3533': attribute type 2 has an invalid length. [ 1080.992639][T19446] netlink: 674 bytes leftover after parsing attributes in process `syz.3.3533'. [ 1083.277125][T19498] Line length is too long: Should be less than 4094 [ 1084.939505][T19509] netlink: 452 bytes leftover after parsing attributes in process `syz.0.3555'. [ 1084.960605][T19509] netlink: 452 bytes leftover after parsing attributes in process `syz.0.3555'. [ 1086.104421][T19535] binder: 19534:19535 ioctl 40044900 800000000000003 returned -22 [ 1092.821788][T19640] ptrace attach of "./syz-executor exec"[15027] was attempted by "./syz-executor exec"[19640] [ 1097.133023][T19693] ptrace attach of "./syz-executor exec"[14844] was attempted by "./syz-executor exec"[19693] [ 1098.788079][T19723] netlink: 330 bytes leftover after parsing attributes in process `syz.4.3608'. [ 1099.919719][T19732] ptrace attach of "./syz-executor exec"[14844] was attempted by "./syz-executor exec"[19732] [ 1100.542999][T19754] nbd: socks must be embedded in a SOCK_ITEM attr [ 1100.549183][T19754] block nbd0: shutting down sockets [ 1103.032055][T19793] openvswitch: HfR: Dropping previously announced user features [ 1103.395986][T19796] netlink: 'syz.0.3620': attribute type 39 has an invalid length. [ 1103.404549][T19796] netlink: 'syz.0.3620': attribute type 40 has an invalid length. [ 1103.424211][T19796] netlink: 'syz.0.3620': attribute type 41 has an invalid length. [ 1103.442355][T19796] netlink: 'syz.0.3620': attribute type 44 has an invalid length. [ 1103.462514][T19796] netlink: 'syz.0.3620': attribute type 46 has an invalid length. [ 1103.473856][T19796] netlink: 'syz.0.3620': attribute type 47 has an invalid length. [ 1103.491534][T19796] netlink: 'syz.0.3620': attribute type 48 has an invalid length. [ 1103.512316][T19796] netlink: 'syz.0.3620': attribute type 49 has an invalid length. [ 1103.519533][T19796] netlink: 'syz.0.3620': attribute type 50 has an invalid length. [ 1103.533253][T19796] netlink: 6 bytes leftover after parsing attributes in process `syz.0.3620'. [ 1104.016701][T19790] ptrace attach of "./syz-executor exec"[14402] was attempted by "./syz-executor exec"[19790] [ 1106.162644][T19822] netlink: 'syz.0.3627': attribute type 2 has an invalid length. [ 1106.194228][T19822] netlink: 674 bytes leftover after parsing attributes in process `syz.0.3627'. [ 1106.921131][T19834] openvswitch: HfR: Dropping previously announced user features [ 1108.408975][T19862] netlink: zone id is out of range [ 1108.472254][T19862] netlink: zone id is out of range [ 1108.552364][T19862] netlink: zone id is out of range [ 1108.560368][T19862] netlink: zone id is out of range [ 1108.623111][T19862] netlink: zone id is out of range [ 1108.674845][T19862] netlink: zone id is out of range [ 1108.704573][T19862] netlink: zone id is out of range [ 1108.735885][T19862] netlink: zone id is out of range [ 1108.786308][T19862] netlink: zone id is out of range [ 1108.828087][T19862] netlink: zone id is out of range [ 1109.109529][T19830] ptrace attach of "./syz-executor exec"[15027] was attempted by "./syz-executor exec"[19830] [ 1109.767306][T19887] openvswitch: HfR: Dropping previously announced user features [ 1110.052851][T19891] IPVS: length: 11322 != 8 [ 1110.234952][T19870] netlink: 'syz.4.3640': attribute type 2 has an invalid length. [ 1110.264987][T19870] netlink: 674 bytes leftover after parsing attributes in process `syz.4.3640'. [ 1112.573956][T19899] ptrace attach of "./syz-executor exec"[14402] was attempted by "./syz-executor exec"[19899] [ 1113.347935][T19925] netlink: 'syz.0.3653': attribute type 2 has an invalid length. [ 1113.365371][T19925] netlink: 674 bytes leftover after parsing attributes in process `syz.0.3653'. [ 1115.451148][T19957] vivid-009: ================= START STATUS ================= [ 1115.509713][T19957] vivid-009: Enable Output Cropping: true [ 1115.532556][T19957] vivid-009: Enable Output Composing: true [ 1115.547316][T19957] vivid-009: Enable Output Scaler: true [ 1115.583163][T19957] vivid-009: Tx RGB Quantization Range: Automatic [ 1115.612341][T19957] vivid-009: Transmit Mode: HDMI [ 1115.616878][T19957] vivid-009: Hotplug Present: 0x00000000 [ 1115.682345][T19957] vivid-009: RxSense Present: 0x00000000 [ 1115.687516][T19957] vivid-009: EDID Present: 0x00000000 [ 1115.813807][T19957] vivid-009: ================== END STATUS ================== [ 1116.277153][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 1116.283177][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 1116.482869][T19971] netlink: 88 bytes leftover after parsing attributes in process `syz.4.3663'. [ 1116.988958][T19979] net_ratelimit: 984 callbacks suppressed [ 1116.988980][T19979] netlink: zone id is out of range [ 1117.022250][T19979] netlink: zone id is out of range [ 1117.026926][T19979] netlink: zone id is out of range [ 1117.031551][T19979] netlink: zone id is out of range [ 1117.102428][T19979] netlink: zone id is out of range [ 1117.107106][T19979] netlink: zone id is out of range [ 1117.111742][T19979] netlink: zone id is out of range [ 1117.152342][T19979] netlink: zone id is out of range [ 1117.167613][T19979] netlink: zone id is out of range [ 1117.180355][T19979] netlink: zone id is out of range [ 1117.319411][T19978] zswap: compressor not available [ 1117.790554][T19947] ptrace attach of "./syz-executor exec"[15195] was attempted by "./syz-executor exec"[19947] [ 1117.907224][T19994] openvswitch: HfR: Dropping previously announced user features [ 1117.941050][T19998] openvswitch: HfR: Dropping previously announced user features [ 1118.699320][T19987] ptrace attach of "./syz-executor exec"[14844] was attempted by "./syz-executor exec"[19987] [ 1122.392854][T20108] openvswitch: HfR: Dropping previously announced user features [ 1122.693219][T20117] net_ratelimit: 1481 callbacks suppressed [ 1122.693240][T20117] netlink: zone id is out of range [ 1122.722331][T20117] netlink: zone id is out of range [ 1122.727036][T20117] netlink: zone id is out of range [ 1122.752314][T20117] netlink: zone id is out of range [ 1122.763030][T20117] netlink: zone id is out of range [ 1122.767695][T20117] netlink: zone id is out of range [ 1122.787385][T20117] netlink: zone id is out of range [ 1122.799891][T20117] netlink: zone id is out of range [ 1122.808905][T20117] netlink: zone id is out of range [ 1122.819031][T20117] netlink: zone id is out of range [ 1123.487301][T20095] ptrace attach of "./syz-executor exec"[15195] was attempted by "./syz-executor exec"[20095] [ 1124.044363][T20133] cifs: Unknown parameter 'T.\[f(El.vZ-: ->_/Tea*5Z doei"mPfwYMh:*/xDl]) WmgUkGAm3yO7MXX9tXva/fj_AR#HxM v,p1$^;tXq31+#nl!5-6)+ek>qG<0kcT)n.|eMMwNa(t.PSMNF1,~$u& 3Z-HvClHAi!]5@_&r &8@EfK$O)Ez>x' [ 1128.058227][T20202] net_ratelimit: 1227 callbacks suppressed [ 1128.058251][T20202] netlink: zone id is out of range [ 1128.089878][T20202] netlink: zone id is out of range [ 1128.105967][T20202] netlink: zone id is out of range [ 1128.123584][T20202] netlink: zone id is out of range [ 1128.138496][T20202] netlink: zone id is out of range [ 1128.155152][T20202] netlink: zone id is out of range [ 1128.171237][T20202] netlink: zone id is out of range [ 1128.188798][T20202] netlink: zone id is out of range [ 1128.205168][T20202] netlink: zone id is out of range [ 1128.221365][T20202] netlink: zone id is out of range [ 1133.062561][T20293] net_ratelimit: 1028 callbacks suppressed [ 1133.062584][T20293] netlink: zone id is out of range [ 1133.092344][T20293] netlink: zone id is out of range [ 1133.097011][T20293] netlink: zone id is out of range [ 1133.101950][T20293] netlink: zone id is out of range [ 1133.122317][T20293] netlink: zone id is out of range [ 1133.126984][T20293] netlink: zone id is out of range [ 1133.142348][T20293] netlink: zone id is out of range [ 1133.162349][T20293] netlink: zone id is out of range [ 1133.167092][T20293] netlink: zone id is out of range [ 1133.182811][T20293] netlink: zone id is out of range [ 1133.353724][T20299] futex_wake_op: syz.0.3747 tries to shift op by 64; fix this program [ 1133.937881][T20301] cifs: Unknown parameter '`' [ 1134.660827][T20323] can: request_module (can-proto-0) failed. [ 1137.222902][T20380] netlink: 330 bytes leftover after parsing attributes in process `syz.2.3772'. [ 1138.487630][T20405] net_ratelimit: 1547 callbacks suppressed [ 1138.487654][T20405] netlink: zone id is out of range [ 1138.532273][T20405] netlink: zone id is out of range [ 1138.562712][T20405] netlink: zone id is out of range [ 1138.597122][T20405] netlink: zone id is out of range [ 1138.601798][T20405] netlink: zone id is out of range [ 1138.632310][T20405] netlink: zone id is out of range [ 1138.663984][T20405] netlink: zone id is out of range [ 1138.668652][T20405] netlink: zone id is out of range [ 1138.676806][T20398] ptrace attach of "./syz-executor exec"[14844] was attempted by "./syz-executor exec"[20398] [ 1138.692269][T20405] netlink: zone id is out of range [ 1138.696927][T20405] netlink: zone id is out of range [ 1144.742880][T20520] openvswitch: HfR: Dropping previously announced user features [ 1145.961628][T20537] netlink: 342 bytes leftover after parsing attributes in process `syz.4.3809'. [ 1146.064174][T20540] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3808'. [ 1146.093717][T20540] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3808'. [ 1146.262029][T20545] netlink: 350 bytes leftover after parsing attributes in process `syz.0.3810'. [ 1146.311153][T20545] netlink: 350 bytes leftover after parsing attributes in process `syz.0.3810'. [ 1148.733939][T20591] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3826'. [ 1148.808225][T20591] ipvlan0: entered allmulticast mode [ 1148.813697][T20591] veth0_vlan: entered allmulticast mode [ 1148.860283][T20601] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3824'. [ 1149.554397][T20616] net_ratelimit: 694 callbacks suppressed [ 1149.554422][T20616] netlink: zone id is out of range [ 1149.598222][T20616] netlink: zone id is out of range [ 1149.617841][T20616] netlink: zone id is out of range [ 1149.642095][T20616] netlink: zone id is out of range [ 1149.661253][T20616] netlink: zone id is out of range [ 1149.682951][T20616] netlink: zone id is out of range [ 1149.701983][T20616] netlink: zone id is out of range [ 1149.719821][T20616] netlink: zone id is out of range [ 1149.739146][T20616] netlink: zone id is out of range [ 1149.757400][T20616] netlink: zone id is out of range [ 1151.727347][T20643] Process accounting resumed [ 1152.578471][T20668] sctp: [Deprecated]: syz.3.3844 (pid 20668) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1152.578471][T20668] Use struct sctp_sack_info instead [ 1154.430320][T20727] netlink: 338 bytes leftover after parsing attributes in process `syz.3.3862'. [ 1154.463675][T20727] netlink: 338 bytes leftover after parsing attributes in process `syz.3.3862'. [ 1156.221984][T20768] net_ratelimit: 1030 callbacks suppressed [ 1156.222008][T20768] netlink: zone id is out of range [ 1156.249729][T20768] netlink: zone id is out of range [ 1156.259229][T20741] ptrace attach of "./syz-executor exec"[14402] was attempted by "./syz-executor exec"[20741] [ 1156.272826][T20768] netlink: zone id is out of range [ 1156.277943][T20768] netlink: zone id is out of range [ 1156.302732][T20768] netlink: zone id is out of range [ 1156.307408][T20768] netlink: zone id is out of range [ 1156.312033][T20768] netlink: zone id is out of range [ 1156.342234][T20768] netlink: zone id is out of range [ 1156.348724][T20768] netlink: zone id is out of range [ 1156.367549][T20768] netlink: zone id is out of range [ 1156.596583][T20773] netlink: 338 bytes leftover after parsing attributes in process `syz.2.3876'. [ 1156.616280][T20775] netlink: 338 bytes leftover after parsing attributes in process `syz.2.3876'. [ 1156.675719][T20773] nfs4: Unknown parameter '' [ 1158.176537][T20804] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3884'. [ 1159.049271][T20811] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3888'. [ 1159.598514][ T5860] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1159.610397][ T5860] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1159.621941][ T5860] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1159.655260][ T5860] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1159.662892][ T5860] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1159.671002][ T5860] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1159.702693][T20825] ptrace attach of "./syz-executor exec"[15027] was attempted by "./syz-executor exec"[20825] [ 1160.090832][T20827] chnl_net:caif_netlink_parms(): no params data found [ 1160.278086][T20827] bridge0: port 1(bridge_slave_0) entered blocking state [ 1160.302421][T20827] bridge0: port 1(bridge_slave_0) entered disabled state [ 1160.309025][T20827] bridge_slave_0: entered allmulticast mode [ 1160.315881][T20827] bridge_slave_0: entered promiscuous mode [ 1160.353198][T20827] bridge0: port 2(bridge_slave_1) entered blocking state [ 1160.360238][T20827] bridge0: port 2(bridge_slave_1) entered disabled state [ 1160.367262][T20827] bridge_slave_1: entered allmulticast mode [ 1160.374352][T20827] bridge_slave_1: entered promiscuous mode [ 1160.476968][T20827] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1160.487917][T20827] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1160.660471][T20827] team0: Port device team_slave_0 added [ 1160.739519][T20852] netlink: 342 bytes leftover after parsing attributes in process `syz.3.3897'. [ 1160.743725][T20827] team0: Port device team_slave_1 added [ 1160.803541][T20852] netlink: 110 bytes leftover after parsing attributes in process `syz.3.3897'. [ 1160.822551][T20827] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1160.828901][T20827] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1160.892901][T20827] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1160.934296][T20827] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1160.940618][T20827] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1161.033092][T20827] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1161.142496][T20856] Process accounting resumed [ 1161.246160][T20827] hsr_slave_0: entered promiscuous mode [ 1161.264666][T20827] hsr_slave_1: entered promiscuous mode [ 1161.281790][T20827] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1161.294563][T20827] Cannot create hsr debugfs directory [ 1161.496929][T20827] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1161.511439][T20827] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1161.525706][T20827] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1161.543568][T20827] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1161.641073][T20827] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1161.683918][T20827] 8021q: adding VLAN 0 to HW filter on device team0 [ 1161.706674][ T7746] bridge0: port 1(bridge_slave_0) entered blocking state [ 1161.713212][ T7746] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1161.750527][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 1161.757139][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1161.792369][ T54] Bluetooth: hci0: command tx timeout [ 1162.051839][T20827] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1162.474534][T20827] veth0_vlan: entered promiscuous mode [ 1162.484750][T20827] veth1_vlan: entered promiscuous mode [ 1162.507263][T20827] veth0_macvtap: entered promiscuous mode [ 1162.516674][T20827] veth1_macvtap: entered promiscuous mode [ 1162.536832][T20827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1162.546308][T20827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1162.555457][T20827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1162.565250][T20827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1162.574322][T20827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1162.583776][T20827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1162.592892][T20827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1162.602504][T20827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1162.611370][T20827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1162.620950][T20827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1162.630228][T20827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1162.639958][T20827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1162.650509][T20827] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1162.660627][T20827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1162.670212][T20827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1162.679449][T20827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1162.688958][T20827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1162.698018][T20827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1162.707691][T20827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1162.716671][T20827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1162.726486][T20827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1162.735678][T20827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1162.745173][T20827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1162.754376][T20827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1162.763953][T20827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1162.775046][T20827] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1162.810291][T20827] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1162.832460][T20827] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1162.840377][T20827] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1162.856720][T20827] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1162.959527][ T7746] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1162.990917][ T7746] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1163.046110][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1163.054089][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1163.873684][ T54] Bluetooth: hci0: command tx timeout [ 1164.364820][T20897] ptrace attach of "./syz-executor exec"[15195] was attempted by "./syz-executor exec"[20897] [ 1165.054851][T20913] net_ratelimit: 1550 callbacks suppressed [ 1165.054875][T20913] netlink: zone id is out of range [ 1165.078827][T20913] netlink: zone id is out of range [ 1165.084322][T20913] netlink: zone id is out of range [ 1165.089119][T20913] netlink: zone id is out of range [ 1165.094430][T20913] netlink: zone id is out of range [ 1165.099070][T20913] netlink: zone id is out of range [ 1165.104375][T20913] netlink: zone id is out of range [ 1165.109742][T20913] netlink: zone id is out of range [ 1165.115031][T20913] netlink: zone id is out of range [ 1165.119671][T20913] netlink: zone id is out of range [ 1165.207797][T20905] ptrace attach of "./syz-executor exec"[14844] was attempted by "./syz-executor exec"[20905] [ 1165.326931][T20919] openvswitch: HfR: Dropping previously announced user features [ 1165.952547][ T54] Bluetooth: hci0: command tx timeout [ 1165.989332][T20925] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3911'. [ 1166.076143][T20925] netdevsim netdevsim3 netdevsim2: entered allmulticast mode [ 1167.535155][T20946] ptrace attach of "./syz-executor exec"[15027] was attempted by "./syz-executor exec"[20946] [ 1168.053546][ T54] Bluetooth: hci0: command tx timeout [ 1168.174972][T20957] openvswitch: HfR: Dropping previously announced user features [ 1168.207227][T20955] ptrace attach of "./syz-executor exec"[14844] was attempted by "./syz-executor exec"[20955] [ 1168.578643][T20970] netlink: 342 bytes leftover after parsing attributes in process `syz.3.3923'. [ 1170.188387][T21008] net_ratelimit: 691 callbacks suppressed [ 1170.188409][T21008] netlink: zone id is out of range [ 1170.216025][T21008] netlink: zone id is out of range [ 1170.220701][T21008] netlink: zone id is out of range [ 1170.247260][T21008] netlink: zone id is out of range [ 1170.258793][T21008] netlink: zone id is out of range [ 1170.285242][T21008] netlink: zone id is out of range [ 1170.304712][T21008] netlink: zone id is out of range [ 1170.328669][T21008] netlink: zone id is out of range [ 1170.334550][T21008] netlink: zone id is out of range [ 1170.339205][T21008] netlink: zone id is out of range [ 1170.626088][T21018] openvswitch: HfR: Dropping previously announced user features [ 1171.766576][T21039] ptrace attach of "./syz-executor exec"[15027] was attempted by "./syz-executor exec"[21039] [ 1172.285400][T21059] openvswitch: HfR: Dropping previously announced user features [ 1172.311238][T21059] openvswitch: HfR: Dropping previously announced user features [ 1174.051575][T21084] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3947'. [ 1174.106964][T21084] netdevsim netdevsim2 netdevsim2: entered allmulticast mode [ 1176.202629][T21179] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3968'. [ 1176.232955][T21179] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1176.260790][T21179] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1176.277883][T21179] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1176.293721][T21179] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1177.722737][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.728482][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 1178.568283][T21229] netlink: 338 bytes leftover after parsing attributes in process `syz.3.3979'. [ 1178.586021][T21229] hsr0: entered promiscuous mode [ 1178.618317][T21229] hsr0: entered allmulticast mode [ 1178.632439][T21229] hsr_slave_0: entered allmulticast mode [ 1178.637808][T21229] hsr_slave_1: entered allmulticast mode [ 1178.639894][T21236] net_ratelimit: 2033 callbacks suppressed [ 1178.639913][T21236] netlink: zone id is out of range [ 1178.674682][T21236] netlink: zone id is out of range [ 1178.691058][T21236] netlink: zone id is out of range [ 1178.703233][T21236] netlink: zone id is out of range [ 1178.734090][T21236] netlink: zone id is out of range [ 1178.738906][T21236] netlink: zone id is out of range [ 1178.745388][T21236] netlink: zone id is out of range [ 1178.750503][T21236] netlink: zone id is out of range [ 1178.755915][T21236] netlink: zone id is out of range [ 1178.760688][T21236] netlink: zone id is out of range [ 1178.951547][T21247] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 1178.970815][T21247] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 1179.564284][T21260] Invalid ELF header magic: != ELF [ 1182.512583][T21328] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4000'. [ 1183.005697][T21339] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4003'. [ 1183.044608][T21339] mac80211_hwsim hwsim27 wlan0: entered promiscuous mode [ 1183.051029][T21339] mac80211_hwsim hwsim27 wlan0: entered allmulticast mode [ 1185.880110][T21376] net_ratelimit: 1044 callbacks suppressed [ 1185.880133][T21376] openvswitch: netlink: IP tunnel TTL not specified. [ 1186.093595][T21385] HfR: entered promiscuous mode [ 1186.435976][T21393] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 1186.485509][T21393] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 1187.141441][T21409] Invalid ELF header magic: != ELF [ 1188.102857][T21430] Process accounting resumed [ 1188.152579][T21429] openvswitch: HfR: Dropping previously announced user features [ 1188.179046][T21435] Process accounting resumed [ 1192.072124][T21500] netlink: 330 bytes leftover after parsing attributes in process `syz.0.4039'. [ 1192.512441][T21498] ptrace attach of "./syz-executor exec"[20827] was attempted by "./syz-executor exec"[21498] [ 1193.298327][T21515] netlink: 74 bytes leftover after parsing attributes in process `syz.0.4051'. [ 1197.025336][T21600] netlink: zone id is out of range [ 1197.045656][T21600] netlink: zone id is out of range [ 1197.050340][T21600] netlink: zone id is out of range [ 1197.072010][T21600] netlink: zone id is out of range [ 1197.086489][T21600] netlink: zone id is out of range [ 1197.096942][T21600] netlink: zone id is out of range [ 1197.132330][T21600] netlink: zone id is out of range [ 1197.149523][T21600] netlink: zone id is out of range [ 1197.166835][T21600] netlink: zone id is out of range [ 1197.181406][T21600] netlink: zone id is out of range [ 1197.445563][T21606] netlink: 8652 bytes leftover after parsing attributes in process `syz.5.4065'. [ 1198.603566][T21652] netlink: 'syz.3.4081': attribute type 21 has an invalid length. [ 1198.614273][T21652] netlink: 334 bytes leftover after parsing attributes in process `syz.3.4081'. [ 1201.174124][T21717] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4097'. [ 1202.738234][T21758] netlink: 334 bytes leftover after parsing attributes in process `syz.2.4110'. [ 1202.760230][T21758] netlink: 334 bytes leftover after parsing attributes in process `syz.2.4110'. [ 1203.098834][T21766] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4111'. [ 1203.173040][T21766] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4111'. [ 1204.972358][T21821] net_ratelimit: 1428 callbacks suppressed [ 1204.972381][T21821] netlink: zone id is out of range [ 1205.022451][T21821] netlink: zone id is out of range [ 1205.027133][T21821] netlink: zone id is out of range [ 1205.031764][T21821] netlink: zone id is out of range [ 1205.123826][T21821] netlink: zone id is out of range [ 1205.156110][T21821] netlink: zone id is out of range [ 1205.182425][T21821] netlink: zone id is out of range [ 1205.209787][T21821] netlink: zone id is out of range [ 1205.242334][T21821] netlink: zone id is out of range [ 1205.264672][T21821] netlink: zone id is out of range [ 1205.968923][T21841] bridge0: port 3(hsr_slave_1) entered blocking state [ 1205.975861][T21841] bridge0: port 3(hsr_slave_1) entered disabled state [ 1205.984453][T21841] hsr_slave_1: entered allmulticast mode [ 1205.990819][T21841] hsr_slave_1: left allmulticast mode [ 1206.695926][T21859] Invalid ELF header magic: != ELF [ 1207.311703][T21862] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4133'. [ 1207.417807][T21862] geneve1: entered allmulticast mode [ 1207.893341][T21874] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4136'. [ 1209.309470][T21896] netlink: 1592 bytes leftover after parsing attributes in process `syz.2.4143'. [ 1212.138338][T21952] netlink: 1592 bytes leftover after parsing attributes in process `syz.0.4156'. [ 1214.005766][T21990] netlink: 'syz.0.4162': attribute type 11 has an invalid length. [ 1214.013564][T21990] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4162'. [ 1214.042099][T21996] openvswitch: HfR: Dropping previously announced user features [ 1214.426256][T22003] net_ratelimit: 513 callbacks suppressed [ 1214.426279][T22003] openvswitch: netlink: nsh attribute has 2 unknown bytes. [ 1214.489183][T22003] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4165'. [ 1214.617140][T22007] netlink: 1592 bytes leftover after parsing attributes in process `syz.3.4167'. [ 1215.151351][T22021] netlink: 146 bytes leftover after parsing attributes in process `syz.3.4170'. [ 1215.824223][T22034] netlink: 'syz.0.4173': attribute type 33 has an invalid length. [ 1215.831512][T22034] netlink: 322 bytes leftover after parsing attributes in process `syz.0.4173'. [ 1216.700161][T22057] openvswitch: netlink: nsh attribute has 2 unknown bytes. [ 1216.721727][T22057] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4177'. [ 1218.809618][T22103] openvswitch: netlink: nsh attribute has 2 unknown bytes. [ 1218.823515][T22103] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4189'. [ 1219.489967][T22121] netlink: 326 bytes leftover after parsing attributes in process `syz.5.4198'. [ 1219.692729][T22123] ptrace attach of "./syz-executor exec"[15027] was attempted by "./syz-executor exec"[22123] [ 1220.634424][T22154] openvswitch: HfR: Dropping previously announced user features [ 1227.471415][T22260] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4227'. [ 1227.491608][T22260] gretap0: entered promiscuous mode [ 1228.394747][T22279] netlink: 330 bytes leftover after parsing attributes in process `syz.3.4230'. [ 1228.438667][T22276] netlink: 330 bytes leftover after parsing attributes in process `syz.3.4230'. [ 1228.846203][T22282] netlink: 'syz.0.4231': attribute type 4 has an invalid length. [ 1228.858404][T22277] ptrace attach of "./syz-executor exec"[20827] was attempted by "./syz-executor exec"[22277] [ 1228.982889][T22285] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4231'. [ 1229.470697][T22285] team0: Port device team_slave_0 removed [ 1229.480106][T22281] netlink: 326 bytes leftover after parsing attributes in process `syz.3.4233'. [ 1231.322834][T22310] netlink: zone id is out of range [ 1231.327501][T22310] netlink: zone id is out of range [ 1231.342365][T22310] netlink: zone id is out of range [ 1231.347039][T22310] netlink: zone id is out of range [ 1231.351667][T22310] netlink: zone id is out of range [ 1231.372234][T22310] netlink: zone id is out of range [ 1231.382339][T22310] netlink: zone id is out of range [ 1231.389385][T22310] netlink: zone id is out of range [ 1231.399295][T22310] netlink: zone id is out of range [ 1231.409748][T22310] netlink: zone id is out of range [ 1232.225456][T22333] futex_wake_op: syz.5.4244 tries to shift op by 64; fix this program [ 1232.311847][T22312] netlink: 342 bytes leftover after parsing attributes in process `syz.3.4239'. [ 1232.400014][T22325] netlink: 'syz.2.4243': attribute type 4 has an invalid length. [ 1232.488964][T22332] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4243'. [ 1233.013073][T22332] team0: Port device team_slave_0 removed [ 1233.865123][T22353] cgroup: fork rejected by pids controller in /syz3 [ 1236.891169][T22441] Invalid ELF header magic: != ELF [ 1238.309207][T22456] openvswitch: HfR: Dropping previously announced user features [ 1238.347877][T22453] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4264'. [ 1238.380118][T22453] bridge_slave_1: left allmulticast mode [ 1238.387408][T22453] bridge_slave_1: left promiscuous mode [ 1238.399871][T22453] bridge0: port 2(bridge_slave_1) entered disabled state [ 1238.719019][T22453] bridge_slave_0: left allmulticast mode [ 1238.732328][T22453] bridge_slave_0: left promiscuous mode [ 1238.754004][T22453] bridge0: port 1(bridge_slave_0) entered disabled state [ 1239.157122][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 1239.163532][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 1245.542568][T22512] netlink: 8915 bytes leftover after parsing attributes in process `syz.2.4279'. [ 1246.310314][T22521] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4283'. [ 1248.123214][T22545] ptrace attach of "./syz-executor exec"[20827] was attempted by "./syz-executor exec"[22545] [ 1248.396068][T22543] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4288'. [ 1248.447052][T22543] gretap0: entered promiscuous mode [ 1249.364827][T22558] could not allocate digest TFM handle [ 1251.117965][T22576] Invalid ELF header magic: != ELF [ 1253.743691][T22583] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4296'. [ 1258.108033][T22630] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4304'. [ 1259.535660][T22655] net_ratelimit: 511 callbacks suppressed [ 1259.535683][T22655] netlink: zone id is out of range [ 1259.652055][T22655] netlink: zone id is out of range [ 1259.708216][T22655] netlink: zone id is out of range [ 1259.759696][T22655] netlink: zone id is out of range [ 1259.850150][T22655] netlink: zone id is out of range [ 1259.958839][T22655] netlink: zone id is out of range [ 1260.002294][T22655] netlink: zone id is out of range [ 1260.061588][T22655] netlink: zone id is out of range [ 1260.089886][T22655] netlink: zone id is out of range [ 1260.162328][T22655] netlink: zone id is out of range [ 1260.206237][T22661] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4312'. [ 1260.243827][T22661] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1260.500664][T22661] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1268.275997][T22705] net_ratelimit: 490 callbacks suppressed [ 1268.276021][T22705] netlink: zone id is out of range [ 1268.302345][T22705] netlink: zone id is out of range [ 1268.307019][T22705] netlink: zone id is out of range [ 1268.311640][T22705] netlink: zone id is out of range [ 1268.342379][T22705] netlink: zone id is out of range [ 1268.347055][T22705] netlink: zone id is out of range [ 1268.351680][T22705] netlink: zone id is out of range [ 1268.382317][T22705] netlink: zone id is out of range [ 1268.387075][T22705] netlink: zone id is out of range [ 1268.391783][T22705] netlink: zone id is out of range [ 1273.718236][T22745] net_ratelimit: 490 callbacks suppressed [ 1273.718259][T22745] netlink: zone id is out of range [ 1273.740120][T22745] netlink: zone id is out of range [ 1273.745238][T22745] netlink: zone id is out of range [ 1273.750236][T22745] netlink: zone id is out of range [ 1273.756290][T22745] netlink: zone id is out of range [ 1273.761339][T22745] netlink: zone id is out of range [ 1273.781387][T22745] netlink: zone id is out of range [ 1273.786507][T22745] netlink: zone id is out of range [ 1273.801691][T22745] netlink: zone id is out of range [ 1273.807086][T22745] netlink: zone id is out of range [ 1274.164067][T22754] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4337'. [ 1276.256684][T22777] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1276.273062][T22777] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1276.287764][T22777] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1276.311293][T22777] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1276.351798][T22777] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1276.363578][T22777] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1278.432408][T22777] Bluetooth: hci1: command tx timeout [ 1278.914064][T22801] netlink: 4368 bytes leftover after parsing attributes in process `syz.0.4348'. [ 1279.692570][T22798] ptrace attach of "./syz-executor exec"[15195] was attempted by "./syz-executor exec"[22798] [ 1280.512443][ T54] Bluetooth: hci1: command tx timeout [ 1281.728168][T22776] chnl_net:caif_netlink_parms(): no params data found [ 1282.202053][ T54] Bluetooth: hci0: command 0x0406 tx timeout [ 1282.592315][ T54] Bluetooth: hci1: command tx timeout [ 1283.654767][T22776] bridge0: port 1(bridge_slave_0) entered blocking state [ 1283.674001][T22776] bridge0: port 1(bridge_slave_0) entered disabled state [ 1283.680598][T22776] bridge_slave_0: entered allmulticast mode [ 1283.723465][T22776] bridge_slave_0: entered promiscuous mode [ 1283.750823][T22776] bridge0: port 2(bridge_slave_1) entered blocking state [ 1283.777843][T22776] bridge0: port 2(bridge_slave_1) entered disabled state [ 1283.812516][T22776] bridge_slave_1: entered allmulticast mode [ 1283.819089][T22776] bridge_slave_1: entered promiscuous mode [ 1283.844414][T22375] syz.3.4248 (22375) used greatest stack depth: 17424 bytes left [ 1284.247273][T22776] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1284.271434][T22776] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1284.323179][T22835] openvswitch: HfR: Dropping previously announced user features [ 1284.421704][T22776] team0: Port device team_slave_0 added [ 1284.445526][T22776] team0: Port device team_slave_1 added [ 1284.629441][T22776] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1284.643174][T22776] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1284.676990][T22777] Bluetooth: hci1: command tx timeout [ 1284.742074][T22776] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1284.791766][T22776] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1284.821956][T22776] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1284.892225][T22776] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1285.135386][T22841] net_ratelimit: 490 callbacks suppressed [ 1285.135410][T22841] netlink: zone id is out of range [ 1285.172348][T22841] netlink: zone id is out of range [ 1285.177154][T22841] netlink: zone id is out of range [ 1285.192313][T22841] netlink: zone id is out of range [ 1285.197709][T22841] netlink: zone id is out of range [ 1285.202053][T22776] hsr_slave_0: entered promiscuous mode [ 1285.222305][T22841] netlink: zone id is out of range [ 1285.227410][T22841] netlink: zone id is out of range [ 1285.236063][T22841] netlink: zone id is out of range [ 1285.237944][T22776] hsr_slave_1: entered promiscuous mode [ 1285.248251][T22841] netlink: zone id is out of range [ 1285.262629][T22841] netlink: zone id is out of range [ 1285.298941][T22776] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1285.347168][T22776] Cannot create hsr debugfs directory [ 1285.973410][T22845] ptrace attach of "./syz-executor exec"[20827] was attempted by "./syz-executor exec"[22845] [ 1286.299188][T22776] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1286.366218][T22776] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1286.425526][T22776] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1286.465089][T22776] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1286.482748][T22847] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4359'. [ 1286.604198][T22851] : Can't lookup blockdev [ 1287.126843][T22776] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1287.185883][T22776] 8021q: adding VLAN 0 to HW filter on device team0 [ 1287.263554][T21029] bridge0: port 1(bridge_slave_0) entered blocking state [ 1287.269984][T21029] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1287.300252][T21029] bridge0: port 2(bridge_slave_1) entered blocking state [ 1287.306756][T21029] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1287.551313][T22776] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1287.811061][T22860] netlink: 'syz.0.4363': attribute type 2 has an invalid length. [ 1287.922617][T22860] netlink: 674 bytes leftover after parsing attributes in process `syz.0.4363'. [ 1288.081639][T22776] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1288.107585][T22866] openvswitch: HfR: Dropping previously announced user features [ 1288.712945][T22776] veth0_vlan: entered promiscuous mode [ 1288.744597][T22776] veth1_vlan: entered promiscuous mode [ 1288.792130][T22776] veth0_macvtap: entered promiscuous mode [ 1288.803725][T22776] veth1_macvtap: entered promiscuous mode [ 1288.827383][T22776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1288.837681][T22776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1288.846741][T22776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1288.856955][T22776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1288.866721][T22776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1288.877141][T22776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1288.904133][T22776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1288.925141][T22776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1288.950696][T22776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1288.970602][T22776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1288.990389][T22776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1289.000502][T22776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1289.013824][T22776] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1289.039535][T22776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1289.049890][T22776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1289.073006][T22776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1289.083512][T22776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1289.102287][T22776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1289.111907][T22776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1289.128455][T22776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1289.145150][T22776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1289.162274][T22776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1289.173941][T22776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1289.203286][T22776] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1289.284342][T22776] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1289.305724][T22776] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1289.325030][T22776] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1289.333491][T22776] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1289.637956][T21031] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1289.662473][T21031] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1289.758123][T21033] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1289.765396][T21033] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1289.834525][T22902] netlink: 'syz.2.4373': attribute type 2 has an invalid length. [ 1289.841828][T22902] netlink: 674 bytes leftover after parsing attributes in process `syz.2.4373'. [ 1290.384777][T22918] net_ratelimit: 1536 callbacks suppressed [ 1290.384797][T22918] netlink: zone id is out of range [ 1290.399403][T22918] netlink: zone id is out of range [ 1290.405379][T22918] netlink: zone id is out of range [ 1290.412681][T22918] netlink: zone id is out of range [ 1290.444591][T22918] netlink: zone id is out of range [ 1290.467645][T22918] netlink: zone id is out of range [ 1290.492696][T22918] netlink: zone id is out of range [ 1290.517910][T22918] netlink: zone id is out of range [ 1290.533831][T22918] netlink: zone id is out of range [ 1290.548393][T22918] netlink: zone id is out of range [ 1294.063644][T22983] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4395'. [ 1294.245960][T22982] : Can't lookup blockdev [ 1295.666228][T23013] net_ratelimit: 2063 callbacks suppressed [ 1295.666250][T23013] netlink: zone id is out of range [ 1295.676687][T23013] netlink: zone id is out of range [ 1295.681324][T23013] netlink: zone id is out of range [ 1295.687690][T23013] netlink: zone id is out of range [ 1295.692523][T23013] netlink: zone id is out of range [ 1295.698045][T23013] netlink: zone id is out of range [ 1295.703048][T23013] netlink: zone id is out of range [ 1295.707676][T23013] netlink: zone id is out of range [ 1295.713643][T23013] netlink: zone id is out of range [ 1295.732502][T23013] netlink: zone id is out of range [ 1295.915568][T23019] netlink: 'syz.6.4410': attribute type 33 has an invalid length. [ 1295.940996][T23019] netlink: 322 bytes leftover after parsing attributes in process `syz.6.4410'. [ 1296.332854][T23028] netlink: 334 bytes leftover after parsing attributes in process `syz.2.4414'. [ 1296.521115][T23035] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4416'. [ 1297.411414][T23054] netlink: 330 bytes leftover after parsing attributes in process `syz.0.4422'. [ 1300.447706][T23122] binder: 23121:23122 ioctl c0105512 1 returned -22 [ 1300.600899][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 1300.611970][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 1301.054056][T23132] net_ratelimit: 1549 callbacks suppressed [ 1301.054076][T23132] openvswitch: netlink: Port -2134900732 exceeds max allowable 65535 [ 1304.552335][T23205] tipc: Can't bind to reserved service type 0 [ 1304.680998][T23161] ptrace attach of "./syz-executor exec"[14844] was attempted by "./syz-executor exec"[23161] [ 1305.837659][T23237] can: request_module (can-proto-5) failed. [ 1306.303940][T23243] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4463'. [ 1308.918359][T23316] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4479'. [ 1311.650268][T23349] ptrace attach of "./syz-executor exec"[15195] was attempted by "./syz-executor exec"[23349] [ 1311.695532][T23336] ptrace attach of "./syz-executor exec"[22776] was attempted by "./syz-executor exec"[23336] [ 1313.385400][T23385] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4491'. [ 1318.582517][T23472] netlink: 338 bytes leftover after parsing attributes in process `syz.2.4511'. [ 1318.590977][T23473] netlink: 338 bytes leftover after parsing attributes in process `syz.2.4511'. [ 1321.858472][T23519] mkiss: ax0: crc mode is auto. [ 1324.664653][T23548] ptrace attach of "./syz-executor exec"[20827] was attempted by "./syz-executor exec"[23548] [ 1325.502391][T23571] Invalid ELF header magic: != ELF [ 1326.906101][T23610] netlink: zone id is out of range [ 1326.910775][T23610] netlink: zone id is out of range [ 1326.935376][T23610] netlink: zone id is out of range [ 1326.949070][T23610] netlink: zone id is out of range [ 1326.964019][T23610] netlink: zone id is out of range [ 1326.968705][T23610] netlink: zone id is out of range [ 1326.994612][T23610] netlink: zone id is out of range [ 1327.013716][T23610] netlink: zone id is out of range [ 1327.033354][T23610] netlink: zone id is out of range [ 1327.043344][T23610] netlink: zone id is out of range [ 1327.265165][T23619] netlink: 'syz.5.4540': attribute type 2 has an invalid length. [ 1327.295311][T23619] netlink: 674 bytes leftover after parsing attributes in process `syz.5.4540'. [ 1328.385574][T23631] netlink: 'syz.5.4544': attribute type 11 has an invalid length. [ 1328.652113][T23625] ptrace attach of "./syz-executor exec"[22776] was attempted by "./syz-executor exec"[23625] [ 1332.766753][T23689] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4555'. [ 1334.163665][T23712] net_ratelimit: 510 callbacks suppressed [ 1334.163688][T23712] netlink: zone id is out of range [ 1334.190399][T23712] netlink: zone id is out of range [ 1334.201882][T23712] netlink: zone id is out of range [ 1334.212962][T23712] netlink: zone id is out of range [ 1334.222479][T23712] netlink: zone id is out of range [ 1334.233114][T23712] netlink: zone id is out of range [ 1334.240478][T23712] netlink: zone id is out of range [ 1334.252279][T23712] netlink: zone id is out of range [ 1334.268732][T23712] netlink: zone id is out of range [ 1334.286811][T23712] netlink: zone id is out of range [ 1334.485502][T23708] raw_sendmsg: syz.0.4559 forgot to set AF_INET. Fix it! [ 1336.683406][T23766] svc: failed to register nfsdv3 RPC service (errno 111). [ 1336.721153][T23766] svc: failed to register nfsaclv3 RPC service (errno 111). [ 1338.233516][ T54] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1338.247236][ T54] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1338.256851][ T54] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1338.265403][ T54] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1338.282501][ T54] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1338.290912][ T54] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1338.920930][T23796] chnl_net:caif_netlink_parms(): no params data found [ 1339.420975][T23796] bridge0: port 1(bridge_slave_0) entered blocking state [ 1339.437033][T23796] bridge0: port 1(bridge_slave_0) entered disabled state [ 1339.450994][T23796] bridge_slave_0: entered allmulticast mode [ 1339.469469][T23796] bridge_slave_0: entered promiscuous mode [ 1339.500925][T23796] bridge0: port 2(bridge_slave_1) entered blocking state [ 1339.525897][T23796] bridge0: port 2(bridge_slave_1) entered disabled state [ 1339.539287][T23796] bridge_slave_1: entered allmulticast mode [ 1339.549907][T23796] bridge_slave_1: entered promiscuous mode [ 1339.637953][T23796] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1339.668653][T23796] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1339.747896][T23796] team0: Port device team_slave_0 added [ 1339.756071][T23796] team0: Port device team_slave_1 added [ 1339.819971][T23796] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1339.829744][T23796] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1339.861165][T23796] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1339.881858][T23796] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1339.895523][T23796] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1339.944064][T23796] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1340.039817][T23796] hsr_slave_0: entered promiscuous mode [ 1340.073853][T23796] hsr_slave_1: entered promiscuous mode [ 1340.093018][T23796] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1340.099893][T23796] Cannot create hsr debugfs directory [ 1340.352554][T22777] Bluetooth: hci2: command tx timeout [ 1340.512698][T23796] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1340.687980][T23796] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1340.779602][T23796] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1340.974998][T23796] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1341.172478][T23796] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1341.181501][T23796] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1341.198706][T23796] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1341.254480][T23796] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1341.345483][T23840] openvswitch: HfR: Dropping previously announced user features [ 1341.538765][T23796] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1341.624705][T23796] 8021q: adding VLAN 0 to HW filter on device team0 [ 1341.650619][T23175] bridge0: port 1(bridge_slave_0) entered blocking state [ 1341.657110][T23175] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1341.703508][T21028] bridge0: port 2(bridge_slave_1) entered blocking state [ 1341.710036][T21028] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1342.199136][T23796] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1342.212425][T23864] net_ratelimit: 1033 callbacks suppressed [ 1342.212447][T23864] netlink: zone id is out of range [ 1342.232979][T23864] netlink: zone id is out of range [ 1342.237649][T23864] netlink: zone id is out of range [ 1342.252551][T23864] netlink: zone id is out of range [ 1342.257254][T23864] netlink: zone id is out of range [ 1342.282278][T23864] netlink: zone id is out of range [ 1342.295125][T23864] netlink: zone id is out of range [ 1342.307672][T23796] veth0_vlan: entered promiscuous mode [ 1342.319603][T23864] netlink: zone id is out of range [ 1342.331621][T23864] netlink: zone id is out of range [ 1342.342770][T23796] veth1_vlan: entered promiscuous mode [ 1342.361386][T23864] netlink: zone id is out of range [ 1342.425586][T23796] veth0_macvtap: entered promiscuous mode [ 1342.433500][T22777] Bluetooth: hci2: command tx timeout [ 1342.451761][T23796] veth1_macvtap: entered promiscuous mode [ 1342.524914][T23796] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1342.573473][T23796] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1342.593197][T23796] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1342.612277][T23796] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1342.622427][T23796] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1342.642528][T23796] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1342.674169][T23796] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1342.697176][T23796] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1342.712805][T23796] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1342.732599][T23796] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1342.760547][T23796] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1342.775199][T23796] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1342.799108][T23796] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1342.814512][T23796] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1342.828280][T23796] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1342.875157][T23796] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1342.922221][T23796] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1342.931168][T23796] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1342.972220][T23796] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1342.981757][T23796] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1343.012201][T23796] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1343.021102][T23796] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1343.030656][T23796] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1343.040006][T23796] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1343.049986][T23796] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1343.059384][T23796] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1343.069345][T23796] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1343.083729][T23796] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1343.093692][T23796] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1343.101571][T23796] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1343.112970][T23796] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1343.120866][T23796] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1343.305953][ T7743] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1343.331881][ T7743] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1343.408041][T21032] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1343.438989][T21032] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1343.668996][T23903] tipc: Started in network mode [ 1343.690439][T23903] tipc: Node identity ee00, cluster identity 4711 [ 1343.712632][T23903] tipc: Node number set to 60928 [ 1343.831652][T23909] futex_wake_op: syz.0.4598 tries to shift op by 64; fix this program [ 1344.516268][T22777] Bluetooth: hci2: command tx timeout [ 1344.534502][T23922] netlink: 'syz.0.4602': attribute type 2 has an invalid length. [ 1344.541620][T23922] netlink: 674 bytes leftover after parsing attributes in process `syz.0.4602'. [ 1344.651295][T23922] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4602'. [ 1344.734896][T23922] macsec0: entered promiscuous mode [ 1345.463528][T23931] Invalid ELF header magic: != ELF [ 1345.864626][T23937] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4604'. [ 1346.132892][T23937] lo: entered promiscuous mode [ 1346.150276][T23937] lo: entered allmulticast mode [ 1346.592556][T22777] Bluetooth: hci2: command tx timeout [ 1346.600923][T23964] netlink: 342 bytes leftover after parsing attributes in process `syz.0.4612'. [ 1346.774349][T23964] netlink: 342 bytes leftover after parsing attributes in process `syz.0.4612'. [ 1346.857164][T23972] netlink: 'syz.5.4614': attribute type 2 has an invalid length. [ 1346.880367][T23964] netlink: 342 bytes leftover after parsing attributes in process `syz.0.4612'. [ 1346.892331][T23972] netlink: 674 bytes leftover after parsing attributes in process `syz.5.4614'. [ 1346.947080][T23964] netlink: 342 bytes leftover after parsing attributes in process `syz.0.4612'. [ 1347.054243][T23964] netlink: 342 bytes leftover after parsing attributes in process `syz.0.4612'. [ 1347.081582][T23964] netlink: 342 bytes leftover after parsing attributes in process `syz.0.4612'. [ 1347.997621][T23992] net_ratelimit: 63 callbacks suppressed [ 1347.997644][T23992] netlink: zone id is out of range [ 1348.019500][T23992] netlink: zone id is out of range [ 1348.042732][T23992] netlink: zone id is out of range [ 1348.047401][T23992] netlink: zone id is out of range [ 1348.052056][T23992] netlink: zone id is out of range [ 1348.112642][T23992] netlink: zone id is out of range [ 1348.117647][T23992] netlink: zone id is out of range [ 1348.155993][T23992] netlink: zone id is out of range [ 1348.163104][T23992] netlink: zone id is out of range [ 1348.216326][T23992] netlink: zone id is out of range [ 1348.225965][T23997] MTRR 1 not used [ 1348.485876][T24002] veth1_macvtap: left promiscuous mode [ 1348.840768][T23993] svc: failed to register nfsdv3 RPC service (errno 111). [ 1348.886499][T23993] svc: failed to register nfsaclv3 RPC service (errno 111). [ 1350.197607][T24055] __nla_validate_parse: 60 callbacks suppressed [ 1350.197630][T24055] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4631'. [ 1350.419354][T24055] hsr_slave_0 (unregistering): left promiscuous mode [ 1350.857230][T24070] netlink: 178 bytes leftover after parsing attributes in process `syz.5.4635'. [ 1351.742029][T24092] Invalid ELF header magic: != ELF [ 1353.684021][T24104] could not allocate digest TFM handle [ 1354.004391][T24112] could not allocate digest TFM handle [ 1354.218412][T24104] could not allocate digest TFM handle [ 1355.219264][T24136] could not allocate digest TFM handle [ 1356.311620][T24147] ptrace attach of "./syz-executor exec"[15195] was attempted by "./syz-executor exec"[24147] [ 1356.832886][T24169] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4655'. [ 1356.889481][T24169] veth1_macvtap: left promiscuous mode [ 1357.453024][T24189] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4660'. [ 1358.200598][T24206] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4664'. [ 1358.222604][ T29] audit: type=1800 audit(4294967453.197:28): pid=24210 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.4665" name="lu_gp_id" dev="configfs" ino=93505 res=0 errno=0 [ 1358.229476][T24206] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4664'. [ 1358.324448][T24214] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4664'. [ 1358.788234][T24212] erspan0: entered allmulticast mode [ 1360.902608][T24260] HfR: entered promiscuous mode [ 1362.056007][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 1362.061815][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 1362.714952][T24299] openvswitch: HfR: Dropping previously announced user features [ 1365.397967][T24341] HfR: entered promiscuous mode [ 1366.013586][T24355] vivid-013: ================= START STATUS ================= [ 1366.102324][T24355] vivid-013: Generate PTS: true [ 1366.116444][T24355] vivid-013: Generate SCR: true [ 1366.154883][T24355] tpg source WxH: 640x360 (Y'CbCr) [ 1366.185396][T24355] tpg field: 1 [ 1366.201752][T24355] tpg crop: 640x360@0x0 [ 1366.232431][T24355] tpg compose: 640x360@0x0 [ 1366.285478][T24355] tpg colorspace: 8 [ 1366.303432][T24355] tpg transfer function: 0/0 [ 1366.327468][T24355] tpg Y'CbCr encoding: 0/0 [ 1366.346586][T24355] tpg quantization: 0/0 [ 1366.384956][T24355] tpg RGB range: 0/2 [ 1366.388560][T24355] vivid-013: ================== END STATUS ================== [ 1366.958705][T24380] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4704'. [ 1367.647076][T24380] bond0: (slave bond_slave_1): Releasing backup interface [ 1367.701296][T24394] openvswitch: HfR: Dropping previously announced user features [ 1369.430774][T24378] Invalid ELF header magic: != ELF [ 1370.247471][T24431] openvswitch: HfR: Dropping previously announced user features [ 1373.476598][T24436] kexec: Could not allocate control_code_buffer [ 1374.138204][T24477] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4727'. [ 1374.199438][T24476] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4727'. [ 1377.522779][T24523] ptrace attach of "./syz-executor exec"[22776] was attempted by "./syz-executor exec"[24523] [ 1377.614999][T24526] net_ratelimit: 39 callbacks suppressed [ 1377.615022][T24526] netlink: zone id is out of range [ 1377.655480][T24526] netlink: zone id is out of range [ 1377.678369][T24526] netlink: zone id is out of range [ 1377.684460][T24526] netlink: zone id is out of range [ 1377.689188][T24526] netlink: zone id is out of range [ 1377.694977][T24526] netlink: zone id is out of range [ 1377.699693][T24526] netlink: zone id is out of range [ 1377.708827][T24526] netlink: zone id is out of range [ 1377.714079][T24526] netlink: zone id is out of range [ 1377.718853][T24526] netlink: zone id is out of range [ 1378.262513][ T29] audit: type=1800 audit(4294967304.670:29): pid=24541 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.4743" name="features" dev="configfs" ino=95178 res=0 errno=0 [ 1384.320742][T24646] nvme_fabrics: unknown parameter or missing value '7' in ctrl creation request [ 1385.134335][T24648] ptrace attach of "./syz-executor exec"[15195] was attempted by "./syz-executor exec"[24648] [ 1385.477262][T24669] netlink: 334 bytes leftover after parsing attributes in process `syz.2.4769'. [ 1385.551601][T24670] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4769'. [ 1385.671938][T24670] vxcan1: entered promiscuous mode [ 1390.232803][T24725] tty tty4: ldisc open failed (-12), clearing slot 3 [ 1391.490294][T24762] netlink: 338 bytes leftover after parsing attributes in process `syz.2.4788'. [ 1391.513039][T24770] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4790'. [ 1391.521271][T24760] netlink: 338 bytes leftover after parsing attributes in process `syz.2.4788'. [ 1391.533018][T24760] netlink: 338 bytes leftover after parsing attributes in process `syz.2.4788'. [ 1391.863252][T24771] ptrace attach of "./syz-executor exec"[15195] was attempted by "./syz-executor exec"[24771] [ 1391.965282][T24787] netlink: 326 bytes leftover after parsing attributes in process `syz.6.4793'. [ 1395.375214][T24865] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4810'. [ 1395.389751][T24865] net_ratelimit: 1529 callbacks suppressed [ 1395.389772][T24865] openvswitch: netlink: ufid size 17 bytes exceeds the range (1, 16) [ 1395.404006][T24865] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 1395.642994][T24867] can: request_module (can-proto-5) failed. [ 1396.747668][T24893] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4815'. [ 1396.890671][T24885] netlink: 338 bytes leftover after parsing attributes in process `syz.6.4814'. syzkaller syzkaller login: [ 1398.428095][ T5860] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1398.441017][ T5860] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1398.470082][ T5860] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1398.493682][ T5860] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1398.517038][ T5860] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1398.527930][ T5860] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1399.451503][T24935] chnl_net:caif_netlink_parms(): no params data found [ 1399.500212][T24957] netlink: zone id is out of range [ 1399.505809][T24957] netlink: zone id is out of range [ 1399.510955][T24957] netlink: zone id is out of range [ 1399.516931][T24957] netlink: zone id is out of range [ 1399.522107][T24957] netlink: zone id is out of range [ 1399.527871][T24957] netlink: zone id is out of range [ 1399.533076][T24957] netlink: zone id is out of range [ 1399.538878][T24957] netlink: zone id is out of range [ 1399.956157][ T54] Bluetooth: hci1: command 0x0406 tx timeout [ 1400.107851][T24935] bridge0: port 1(bridge_slave_0) entered blocking state [ 1400.132307][T24935] bridge0: port 1(bridge_slave_0) entered disabled state [ 1400.139636][T24935] bridge_slave_0: entered allmulticast mode [ 1400.173468][T24935] bridge_slave_0: entered promiscuous mode [ 1400.203313][T24935] bridge0: port 2(bridge_slave_1) entered blocking state [ 1400.210478][T24935] bridge0: port 2(bridge_slave_1) entered disabled state [ 1400.220408][T24935] bridge_slave_1: entered allmulticast mode [ 1400.228821][T24935] bridge_slave_1: entered promiscuous mode [ 1400.373636][T24935] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1400.430494][T24935] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1400.513411][T24935] team0: Port device team_slave_0 added [ 1400.543379][T24935] team0: Port device team_slave_1 added [ 1400.592333][T22777] Bluetooth: hci4: command tx timeout [ 1400.787181][T24935] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1400.812730][T24935] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1400.922229][T24935] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1400.949824][T24935] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1400.967362][T24935] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1401.038095][T24935] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1401.166622][T24935] hsr_slave_0: entered promiscuous mode [ 1401.193276][T24935] hsr_slave_1: entered promiscuous mode [ 1401.201046][T24935] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1401.215558][T24935] Cannot create hsr debugfs directory [ 1401.221289][T24987] openvswitch: HfR: Dropping previously announced user features [ 1401.625519][T24935] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1401.886671][T24935] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1402.122535][T24997] net_ratelimit: 509 callbacks suppressed [ 1402.122556][T24997] netlink: zone id is out of range [ 1402.122703][T24935] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1402.152609][T24997] netlink: zone id is out of range [ 1402.162618][T24997] netlink: zone id is out of range [ 1402.177968][T24997] netlink: zone id is out of range [ 1402.190863][T24997] netlink: zone id is out of range [ 1402.217251][T24997] netlink: zone id is out of range [ 1402.232315][T24997] netlink: zone id is out of range [ 1402.256943][T24997] netlink: zone id is out of range [ 1402.281080][T24997] netlink: zone id is out of range [ 1402.292314][T24997] netlink: zone id is out of range [ 1402.310425][T24935] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1402.503482][T25002] FAULT_INJECTION: forcing a failure. [ 1402.503482][T25002] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1402.531151][T25002] CPU: 1 UID: 0 PID: 25002 Comm: syz.6.4844 Not tainted 6.13.0-rc5-syzkaller-00161-g63676eefb7a0 #0 [ 1402.541988][T25002] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1402.552078][T25002] Call Trace: [ 1402.555379][T25002] [ 1402.558332][T25002] dump_stack_lvl+0x16c/0x1f0 [ 1402.563067][T25002] should_fail_ex+0x497/0x5b0 [ 1402.567785][T25002] _copy_from_user+0x2e/0xd0 [ 1402.572418][T25002] copy_msghdr_from_user+0x99/0x160 [ 1402.577652][T25002] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 1402.583503][T25002] ? __pfx___lock_acquire+0x10/0x10 [ 1402.588744][T25002] ___sys_recvmsg+0xdc/0x1a0 [ 1402.593371][T25002] ? __pfx____sys_recvmsg+0x10/0x10 [ 1402.598605][T25002] ? __pfx_lock_release+0x10/0x10 [ 1402.603659][T25002] ? trace_lock_acquire+0x14e/0x1f0 [ 1402.608925][T25002] do_recvmmsg+0x2f8/0x740 [ 1402.613400][T25002] ? __pfx_do_recvmmsg+0x10/0x10 [ 1402.615530][T25000] MTRR 1 not used [ 1402.618352][T25002] ? vfs_write+0x306/0x1150 [ 1402.626532][T25002] ? __mutex_unlock_slowpath+0x164/0x690 [ 1402.632209][T25002] ? __fget_files+0x206/0x3a0 [ 1402.636931][T25002] __x64_sys_recvmmsg+0x239/0x290 [ 1402.641993][T25002] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 1402.647589][T25002] do_syscall_64+0xcd/0x250 [ 1402.652128][T25002] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1402.658053][T25002] RIP: 0033:0x7f4453185d29 [ 1402.662493][T25002] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1402.682134][T25002] RSP: 002b:00007f4453f0e038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1402.690317][T24935] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1402.690564][T25002] RAX: ffffffffffffffda RBX: 00007f4453375fa0 RCX: 00007f4453185d29 [ 1402.705236][T25002] RDX: 0000000000000007 RSI: 0000000000000000 RDI: 0000000000000004 [ 1402.713239][T25002] RBP: 00007f4453f0e090 R08: 0000000000000000 R09: 0000000000000000 [ 1402.721244][T25002] R10: 000000000000000e R11: 0000000000000246 R12: 0000000000000001 [ 1402.729257][T25002] R13: 0000000000000000 R14: 00007f4453375fa0 R15: 00007ffceb9631a8 [ 1402.737294][T25002] [ 1402.748217][T24935] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1402.756056][T22777] Bluetooth: hci4: command tx timeout [ 1402.840999][T24935] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1402.877734][T24935] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1403.204497][T24935] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1403.240239][T24935] 8021q: adding VLAN 0 to HW filter on device team0 [ 1403.277304][T24044] bridge0: port 1(bridge_slave_0) entered blocking state [ 1403.284517][T24044] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1403.350361][T24046] bridge0: port 2(bridge_slave_1) entered blocking state [ 1403.357594][T24046] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1403.516872][T24935] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1403.889421][T24935] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1403.929523][T25022] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4850'. [ 1404.021570][T24935] veth0_vlan: entered promiscuous mode [ 1404.067546][T24935] veth1_vlan: entered promiscuous mode [ 1404.160483][T24935] veth0_macvtap: entered promiscuous mode [ 1404.205200][T24935] veth1_macvtap: entered promiscuous mode [ 1404.239887][T24935] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1404.252466][T24935] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1404.274786][T24935] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1404.302284][T24935] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1404.328417][T24935] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1404.342397][T24935] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1404.362304][T24935] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1404.382572][T24935] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1404.414485][T24935] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1404.452115][T24935] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1404.483497][T24935] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1404.512792][T24935] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1404.552257][T24935] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1404.581502][T24935] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1404.601352][T24935] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1404.626261][T24935] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1404.648428][T24935] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1404.709019][T24935] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1404.731820][T24935] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1404.757170][T24935] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1404.802320][T24935] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1404.826963][T24935] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1404.837911][T22777] Bluetooth: hci4: command tx timeout [ 1404.860871][T24935] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1404.871382][T24935] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1404.891051][T24935] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1404.902458][T24935] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1404.918588][T24935] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1404.932192][T24935] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1404.949401][T24935] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1404.972044][T24935] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1404.992638][T24935] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1405.013451][T24935] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1405.046342][T24935] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1405.074151][T24935] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1405.093172][T24935] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1405.142657][T24935] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1406.269700][T24046] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1406.313045][T24046] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1406.489295][T23165] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1406.502303][T23165] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1406.912569][T22777] Bluetooth: hci4: command tx timeout [ 1408.370516][T25105] openvswitch: HfR: Dropping previously announced user features [ 1409.001613][T25108] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4864'. [ 1409.738954][T25116] Invalid ELF header magic: != ELF [ 1409.844722][T25113] openvswitch: HfR: Dropping previously announced user features [ 1412.468990][T25133] net_ratelimit: 507 callbacks suppressed [ 1412.469013][T25133] netlink: zone id is out of range [ 1412.507046][T25133] netlink: zone id is out of range [ 1412.519316][T25133] netlink: zone id is out of range [ 1412.542304][T25133] netlink: zone id is out of range [ 1412.557216][T25133] netlink: zone id is out of range [ 1412.572356][T25133] netlink: zone id is out of range [ 1412.585233][T25133] netlink: zone id is out of range [ 1412.602545][T25133] netlink: zone id is out of range [ 1412.613726][T25133] netlink: zone id is out of range [ 1412.618965][T25133] netlink: zone id is out of range [ 1413.980847][T25153] netlink: 'syz.5.4875': attribute type 10 has an invalid length. [ 1414.001665][T25153] netlink: 326 bytes leftover after parsing attributes in process `syz.5.4875'. [ 1415.992977][T25192] netlink: 342 bytes leftover after parsing attributes in process `syz.2.4884'. [ 1417.230640][T25209] openvswitch: HfR: Dropping previously announced user features [ 1419.447391][T25248] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4897'. [ 1419.479995][T25248] lo: entered promiscuous mode [ 1419.490600][T25248] lo: entered allmulticast mode [ 1419.934071][T25257] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4899'. [ 1419.950026][T25257] gretap0: entered promiscuous mode [ 1419.963105][T25275] vivid-003: ================= START STATUS ================= [ 1420.002455][T25275] vivid-003: Radio HW Seek Mode: Bounded [ 1420.008486][T25275] vivid-003: Radio Programmable HW Seek: false [ 1420.038603][T25275] vivid-003: RDS Rx I/O Mode: Block I/O [ 1420.068459][T25275] vivid-003: Generate RBDS Instead of RDS: false [ 1420.085947][T25275] vivid-003: RDS Reception: true [ 1420.090979][T25275] vivid-003: RDS Program Type: 0 inactive [ 1420.104471][T25275] vivid-003: RDS PS Name: inactive [ 1420.147338][T25275] vivid-003: RDS Radio Text: inactive [ 1420.161614][T25275] vivid-003: RDS Traffic Announcement: false inactive [ 1420.175769][T25275] vivid-003: RDS Traffic Program: false inactive [ 1420.214283][T25275] vivid-003: RDS Music: false inactive [ 1420.219871][T25275] vivid-003: ================== END STATUS ================== [ 1420.666067][T25280] netlink: 1204 bytes leftover after parsing attributes in process `syz.2.4904'. [ 1420.880042][T25285] netlink: 772 bytes leftover after parsing attributes in process `syz.0.4913'. [ 1421.021810][T25285] netlink: 772 bytes leftover after parsing attributes in process `syz.0.4913'. [ 1421.077755][T25298] HfR: entered promiscuous mode [ 1421.104409][T25285] netlink: 772 bytes leftover after parsing attributes in process `syz.0.4913'. [ 1421.134161][T25285] netlink: 772 bytes leftover after parsing attributes in process `syz.0.4913'. [ 1421.162504][T25285] netlink: 772 bytes leftover after parsing attributes in process `syz.0.4913'. [ 1421.192526][T25285] netlink: 772 bytes leftover after parsing attributes in process `syz.0.4913'. [ 1421.222447][T25285] netlink: 772 bytes leftover after parsing attributes in process `syz.0.4913'. [ 1421.289454][T25285] netlink: 772 bytes leftover after parsing attributes in process `syz.0.4913'. [ 1421.313103][T25285] netlink: 772 bytes leftover after parsing attributes in process `syz.0.4913'. [ 1421.338584][T25285] netlink: 772 bytes leftover after parsing attributes in process `syz.0.4913'. [ 1421.366355][T25285] netlink: 772 bytes leftover after parsing attributes in process `syz.0.4913'. [ 1421.515853][T25302] Process accounting resumed [ 1423.479857][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 1423.486331][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 1424.300238][T25355] random: crng reseeded on system resumption [ 1428.371520][T25420] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4936'. [ 1428.507294][T25420] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1428.687550][T25420] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1428.783535][T25420] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1428.817474][T25420] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1434.083173][T25513] FAULT_INJECTION: forcing a failure. [ 1434.083173][T25513] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1434.122450][T25513] CPU: 0 UID: 0 PID: 25513 Comm: syz.0.4956 Not tainted 6.13.0-rc5-syzkaller-00161-g63676eefb7a0 #0 [ 1434.133282][T25513] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1434.143367][T25513] Call Trace: [ 1434.146665][T25513] [ 1434.149622][T25513] dump_stack_lvl+0x16c/0x1f0 [ 1434.154338][T25513] should_fail_ex+0x497/0x5b0 [ 1434.159056][T25513] _copy_from_user+0x2e/0xd0 [ 1434.163678][T25513] __sys_bpf+0x215/0x57a0 [ 1434.168030][T25513] ? __pfx_lock_release+0x10/0x10 [ 1434.173083][T25513] ? __pfx___sys_bpf+0x10/0x10 [ 1434.177876][T25513] ? vfs_write+0x306/0x1150 [ 1434.182416][T25513] ? __mutex_unlock_slowpath+0x164/0x690 [ 1434.188095][T25513] ? fput+0x67/0x440 [ 1434.192022][T25513] ? ksys_write+0x1ba/0x250 [ 1434.196568][T25513] ? __pfx_ksys_write+0x10/0x10 [ 1434.201454][T25513] __x64_sys_bpf+0x78/0xc0 [ 1434.205900][T25513] ? lockdep_hardirqs_on+0x7c/0x110 [ 1434.211132][T25513] do_syscall_64+0xcd/0x250 [ 1434.215676][T25513] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1434.221612][T25513] RIP: 0033:0x7fec9d185d29 [ 1434.226047][T25513] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1434.245688][T25513] RSP: 002b:00007fec9e019038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1434.254138][T25513] RAX: ffffffffffffffda RBX: 00007fec9d375fa0 RCX: 00007fec9d185d29 [ 1434.262139][T25513] RDX: 00000000000006f3 RSI: 00000000200001c0 RDI: 0000000000000000 [ 1434.270139][T25513] RBP: 00007fec9e019090 R08: 0000000000000000 R09: 0000000000000000 [ 1434.278136][T25513] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1434.286149][T25513] R13: 0000000000000001 R14: 00007fec9d375fa0 R15: 00007ffd670d8798 [ 1434.294178][T25513] [ 1439.984427][T25549] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4964'. syzkaller syzkaller login: [ 1444.622439][T25579] net_ratelimit: 1017 callbacks suppressed [ 1444.622462][T25579] netlink: zone id is out of range [ 1444.809681][T25579] netlink: zone id is out of range [ 1444.846292][T25579] netlink: zone id is out of range [ 1444.872374][T25579] netlink: zone id is out of range [ 1444.887868][T25579] netlink: zone id is out of range [ 1444.899698][T25581] Invalid ELF header magic: != ELF [ 1444.939186][T25579] netlink: zone id is out of range [ 1444.975079][T25579] netlink: zone id is out of range [ 1445.002441][T25579] netlink: zone id is out of range [ 1445.023314][T25579] netlink: zone id is out of range [ 1445.232574][T25579] netlink: zone id is out of range [ 1446.316337][ T54] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1446.327534][ T54] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1446.336629][ T54] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1446.344289][ T54] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1446.351316][ T54] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1446.359518][ T54] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1446.775077][T25594] chnl_net:caif_netlink_parms(): no params data found [ 1447.442989][T25594] bridge0: port 1(bridge_slave_0) entered blocking state [ 1447.472803][T25594] bridge0: port 1(bridge_slave_0) entered disabled state [ 1447.492820][T25594] bridge_slave_0: entered allmulticast mode [ 1447.520948][T25594] bridge_slave_0: entered promiscuous mode [ 1447.551373][T25594] bridge0: port 2(bridge_slave_1) entered blocking state [ 1447.586112][T25594] bridge0: port 2(bridge_slave_1) entered disabled state [ 1447.602749][T25594] bridge_slave_1: entered allmulticast mode [ 1447.624990][T25594] bridge_slave_1: entered promiscuous mode [ 1447.717346][T25594] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1447.745383][T25594] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1447.858687][T25594] team0: Port device team_slave_0 added [ 1447.867886][T25594] team0: Port device team_slave_1 added [ 1447.946512][T25594] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1447.953626][T25594] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1447.978062][T25594] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1447.990161][T25594] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1447.997079][T25594] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1448.052167][T25594] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1448.139987][T25594] hsr_slave_0: entered promiscuous mode [ 1448.163792][T25594] hsr_slave_1: entered promiscuous mode [ 1448.171004][T25594] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1448.187016][T25594] Cannot create hsr debugfs directory [ 1448.432862][T22777] Bluetooth: hci3: command tx timeout [ 1448.804715][T25594] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1448.864234][T25594] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1448.876303][T25594] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1448.892540][T25594] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1449.374090][T25594] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1449.424442][T25594] 8021q: adding VLAN 0 to HW filter on device team0 [ 1449.471359][T25594] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1449.481369][T25594] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1449.496318][T24043] bridge0: port 1(bridge_slave_0) entered blocking state [ 1449.502792][T24043] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1449.511213][T24043] bridge0: port 2(bridge_slave_1) entered blocking state [ 1449.517700][T24043] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1449.991860][T25594] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1450.512870][T22777] Bluetooth: hci3: command tx timeout [ 1450.803256][T25594] veth0_vlan: entered promiscuous mode [ 1450.877142][T25594] veth1_vlan: entered promiscuous mode [ 1451.144270][T25594] veth0_macvtap: entered promiscuous mode [ 1451.167630][T25594] veth1_macvtap: entered promiscuous mode [ 1451.260975][T25594] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1451.292315][T25594] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1451.292340][T25594] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1451.292361][T25594] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1451.292372][T25594] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1451.292389][T25594] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1451.292415][T25594] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1451.292431][T25594] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1451.292454][T25594] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1451.292470][T25594] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1451.292494][T25594] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1451.292511][T25594] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1451.292528][T25594] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1451.292545][T25594] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1451.292567][T25594] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1451.292584][T25594] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1451.293795][T25594] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1451.307799][T25594] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1451.307825][T25594] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1451.307840][T25594] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1451.307858][T25594] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1451.307871][T25594] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1451.307889][T25594] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1451.307906][T25594] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1451.307923][T25594] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1451.307939][T25594] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1451.307956][T25594] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1451.307971][T25594] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1451.307990][T25594] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1451.308006][T25594] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1451.308024][T25594] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1451.308884][T25594] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1451.337567][T25594] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1451.620680][T25594] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1451.629102][T25594] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1451.637592][T25594] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1452.177766][T24046] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1452.201041][T24046] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1452.368997][T24046] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1452.382277][T24046] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1452.504864][T25675] net_ratelimit: 495 callbacks suppressed [ 1452.504886][T25675] netlink: zone id is out of range [ 1452.592762][T22777] Bluetooth: hci3: command tx timeout [ 1452.622289][T25675] netlink: zone id is out of range [ 1452.782765][T25675] netlink: zone id is out of range [ 1452.787523][T25675] netlink: zone id is out of range [ 1452.820493][T25675] netlink: zone id is out of range [ 1452.852958][T25675] netlink: zone id is out of range [ 1452.857623][T25675] netlink: zone id is out of range [ 1452.900103][T25675] netlink: zone id is out of range [ 1452.930600][T25675] netlink: zone id is out of range [ 1452.967802][T25675] netlink: zone id is out of range [ 1454.679221][T22777] Bluetooth: hci3: command tx timeout [ 1457.533597][T25714] HfR: entered promiscuous mode [ 1461.400349][ T54] Bluetooth: hci2: command 0x0406 tx timeout [ 1461.793912][T25746] openvswitch: HfR: Dropping previously announced user features syzkaller syzkaller login: [ 1465.332070][T25781] Invalid ELF header magic: != ELF syzkaller syzkaller login: [ 1470.779970][T25845] ICMPv6: process `syz.0.5026' is using deprecated sysctl (syscall) net.ipv6.neigh.virt_wifi0.retrans_time - use net.ipv6.neigh.virt_wifi0.retrans_time_ms instead [ 1471.193871][T25848] netlink: 28 bytes leftover after parsing attributes in process `syz.6.5028'. [ 1472.651246][T25858] can: request_module (can-proto-0) failed. syzkaller syzkaller login: [ 1474.555979][T25892] openvswitch: HfR: Dropping previously announced user features [ 1475.223287][T25900] net_ratelimit: 500 callbacks suppressed [ 1475.223310][T25900] netlink: zone id is out of range [ 1475.344747][T25900] netlink: zone id is out of range [ 1475.383750][T25900] netlink: zone id is out of range [ 1475.419483][T25900] netlink: zone id is out of range [ 1475.467815][T25900] netlink: zone id is out of range [ 1475.516196][T25900] netlink: zone id is out of range [ 1475.609311][T25900] netlink: zone id is out of range [ 1475.639742][T25900] netlink: zone id is out of range [ 1475.660129][T25898] block nbd0: Unsupported socket: shutdown callout must be supported. [ 1475.698600][T25900] netlink: zone id is out of range [ 1475.752436][T25900] netlink: zone id is out of range [ 1477.117623][ T29] audit: type=1807 audit(4294967403.520:30): UNKNOWN=òÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿ [ 1477.133157][T25908] ima: policy update failed [ 1477.224338][ C1] vkms_vblank_simulate: vblank timer overrun [ 1477.238625][ T29] audit: type=1802 audit(4294967403.540:31): pid=25909 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.7.5040" res=0 errno=0 [ 1477.330950][T25912] Invalid ELF header magic: != ELF [ 1477.547873][ T29] audit: type=1802 audit(4294967403.960:32): pid=25908 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.7.5040" res=0 errno=0 [ 1478.594950][T25920] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5041'. [ 1478.789748][T25920] geneve1: entered allmulticast mode syzkaller syzkaller login: [ 1482.515616][T25963] net_ratelimit: 499 callbacks suppressed [ 1482.515640][T25963] netlink: zone id is out of range [ 1482.602313][T25963] netlink: zone id is out of range [ 1482.608337][T25963] netlink: zone id is out of range [ 1482.632340][T25963] netlink: zone id is out of range [ 1482.637943][T25963] netlink: zone id is out of range [ 1482.672665][T25963] netlink: zone id is out of range [ 1482.688427][T25963] netlink: zone id is out of range [ 1482.708696][T25963] netlink: zone id is out of range [ 1482.741619][T25963] netlink: zone id is out of range [ 1482.762329][T25963] netlink: zone id is out of range [ 1484.255363][T25928] delete_channel: no stack [ 1484.963783][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 1484.970125][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 syzkaller syzkaller login: [ 1493.388557][T26077] openvswitch: HfR: Dropping previously announced user features [ 1498.092561][T26116] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5091'. [ 1498.272076][T26120] net_ratelimit: 483 callbacks suppressed [ 1498.272101][T26120] netlink: zone id is out of range [ 1498.272116][T26120] netlink: zone id is out of range [ 1498.297423][T26120] netlink: zone id is out of range [ 1498.297440][T26120] netlink: zone id is out of range [ 1498.297450][T26120] netlink: zone id is out of range [ 1498.297461][T26120] netlink: zone id is out of range [ 1498.297472][T26120] netlink: zone id is out of range [ 1498.297483][T26120] netlink: zone id is out of range [ 1498.297494][T26120] netlink: zone id is out of range [ 1498.297505][T26120] netlink: zone id is out of range [ 1498.334665][T26116] netlink: 14 bytes leftover after parsing attributes in process `syz.2.5091'. [ 1499.614862][T26142] netlink: 326 bytes leftover after parsing attributes in process `syz.7.5096'. [ 1499.875529][T26139] netlink: 326 bytes leftover after parsing attributes in process `syz.7.5096'. [ 1501.817231][T26163] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5102'. [ 1506.096021][T26184] device-mapper: ioctl: Invalid ioctl structure: uuid , name , dev 400008000000006 [ 1506.254210][T26181] Invalid ELF header magic: != ELF [ 1507.207691][T26185] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5105'. [ 1508.178941][T26201] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5112'. [ 1509.511261][T26211] Process accounting resumed [ 1510.244695][T26224] : Can't lookup blockdev syzkaller syzkaller login: [ 1515.922470][T26303] syz.2.5133 (26303): attempted to duplicate a private mapping with mremap. This is not supported. [ 1518.377450][T26337] netlink: 28 bytes leftover after parsing attributes in process `syz.7.5139'. [ 1522.847375][ T5860] Bluetooth: hci4: command 0x0406 tx timeout [ 1524.516448][T26387] FAULT_INJECTION: forcing a failure. [ 1524.516448][T26387] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1524.554358][T26387] CPU: 1 UID: 0 PID: 26387 Comm: syz.7.5151 Not tainted 6.13.0-rc5-syzkaller-00161-g63676eefb7a0 #0 [ 1524.565190][T26387] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1524.575288][T26387] Call Trace: [ 1524.578588][T26387] [ 1524.581540][T26387] dump_stack_lvl+0x16c/0x1f0 [ 1524.586263][T26387] should_fail_ex+0x497/0x5b0 [ 1524.590986][T26387] ? fs_reclaim_acquire+0xae/0x150 [ 1524.596134][T26387] should_fail_alloc_page+0xe7/0x130 [ 1524.601458][T26387] prepare_alloc_pages.constprop.0+0x16f/0x560 [ 1524.607661][T26387] __alloc_pages_noprof+0x190/0x25b0 [ 1524.613008][T26387] ? __pfx___lock_acquire+0x10/0x10 [ 1524.618255][T26387] ? __pfx___alloc_pages_noprof+0x10/0x10 [ 1524.624031][T26387] ? aa_file_perm+0x4c6/0xfe0 [ 1524.628725][T26387] ? __pfx_lock_release+0x10/0x10 [ 1524.633760][T26387] ? trace_lock_acquire+0x14e/0x1f0 [ 1524.638978][T26387] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1524.644892][T26387] ? policy_nodemask+0xea/0x4e0 [ 1524.649762][T26387] alloc_pages_mpol_noprof+0x2c9/0x610 [ 1524.655249][T26387] ? __pfx_alloc_pages_mpol_noprof+0x10/0x10 [ 1524.661254][T26387] ? find_held_lock+0x2d/0x110 [ 1524.666038][T26387] ? __pfx_aa_file_perm+0x10/0x10 [ 1524.671078][T26387] get_free_pages_noprof+0xc/0x40 [ 1524.676114][T26387] vcs_read+0xbb/0xbd0 [ 1524.680203][T26387] ? __pfx_vcs_read+0x10/0x10 [ 1524.684936][T26387] ? bpf_lsm_file_permission+0x9/0x10 [ 1524.690331][T26387] ? security_file_permission+0x71/0x210 [ 1524.695997][T26387] ? __pfx_vcs_read+0x10/0x10 [ 1524.700712][T26387] vfs_read+0x1df/0xbe0 [ 1524.704953][T26387] ? __fget_files+0x1fc/0x3a0 [ 1524.709658][T26387] ? __pfx_lock_release+0x10/0x10 [ 1524.714703][T26387] ? __pfx_vfs_read+0x10/0x10 [ 1524.719402][T26387] ? lock_acquire+0x2f/0xb0 [ 1524.723922][T26387] ? __fget_files+0x40/0x3a0 [ 1524.728534][T26387] ? __fget_files+0x206/0x3a0 [ 1524.733241][T26387] ksys_read+0x12b/0x250 [ 1524.737496][T26387] ? __pfx_ksys_read+0x10/0x10 [ 1524.742281][T26387] do_syscall_64+0xcd/0x250 [ 1524.746803][T26387] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1524.752744][T26387] RIP: 0033:0x7f4b7e985d29 [ 1524.757171][T26387] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1524.776803][T26387] RSP: 002b:00007f4b7f79a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1524.785233][T26387] RAX: ffffffffffffffda RBX: 00007f4b7eb75fa0 RCX: 00007f4b7e985d29 [ 1524.793226][T26387] RDX: 000000000000004a RSI: 0000000020000000 RDI: 0000000000000003 [ 1524.801212][T26387] RBP: 00007f4b7f79a090 R08: 0000000000000000 R09: 0000000000000000 [ 1524.809198][T26387] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1524.817196][T26387] R13: 0000000000000000 R14: 00007f4b7eb75fa0 R15: 00007ffd47d4bdd8 [ 1524.825374][T26387] [ 1524.828540][ C1] vkms_vblank_simulate: vblank timer overrun [ 1531.639046][T26432] FAULT_INJECTION: forcing a failure. [ 1531.639046][T26432] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1531.692460][T26432] CPU: 0 UID: 0 PID: 26432 Comm: syz.7.5161 Not tainted 6.13.0-rc5-syzkaller-00161-g63676eefb7a0 #0 [ 1531.703294][T26432] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1531.713375][T26432] Call Trace: [ 1531.716665][T26432] [ 1531.719612][T26432] dump_stack_lvl+0x16c/0x1f0 [ 1531.724319][T26432] should_fail_ex+0x497/0x5b0 [ 1531.729031][T26432] _copy_to_user+0x32/0xd0 [ 1531.733481][T26432] simple_read_from_buffer+0xd0/0x160 [ 1531.738878][T26432] proc_fail_nth_read+0x198/0x270 [ 1531.743939][T26432] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1531.749609][T26432] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1531.755184][T26432] vfs_read+0x1df/0xbe0 [ 1531.759379][T26432] ? __fget_files+0x1fc/0x3a0 [ 1531.764085][T26432] ? __pfx___mutex_lock+0x10/0x10 [ 1531.769136][T26432] ? __pfx_vfs_read+0x10/0x10 [ 1531.773848][T26432] ? __fget_files+0x206/0x3a0 [ 1531.778563][T26432] ksys_read+0x12b/0x250 [ 1531.782830][T26432] ? __pfx_ksys_read+0x10/0x10 [ 1531.787631][T26432] do_syscall_64+0xcd/0x250 [ 1531.792162][T26432] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1531.798081][T26432] RIP: 0033:0x7f4b7e98473c [ 1531.802516][T26432] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 1531.822148][T26432] RSP: 002b:00007f4b7f79a030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1531.830588][T26432] RAX: ffffffffffffffda RBX: 00007f4b7eb75fa0 RCX: 00007f4b7e98473c [ 1531.838579][T26432] RDX: 000000000000000f RSI: 00007f4b7f79a0a0 RDI: 0000000000000004 [ 1531.846582][T26432] RBP: 00007f4b7f79a090 R08: 0000000000000000 R09: 0000000000000000 [ 1531.854573][T26432] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1531.862562][T26432] R13: 0000000000000000 R14: 00007f4b7eb75fa0 R15: 00007ffd47d4bdd8 [ 1531.870573][T26432] [ 1532.012679][T26435] lo: entered allmulticast mode [ 1532.036625][T26434] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5164'. [ 1533.786997][T26435] lo: left allmulticast mode [ 1535.296938][T26461] netlink: 326 bytes leftover after parsing attributes in process `syz.0.5169'. [ 1537.537199][T26492] net_ratelimit: 485 callbacks suppressed [ 1537.537222][T26492] netlink: zone id is out of range [ 1537.579330][T26492] netlink: zone id is out of range [ 1537.596252][T26492] netlink: zone id is out of range [ 1537.627385][T26492] netlink: zone id is out of range [ 1537.657960][T26492] netlink: zone id is out of range [ 1537.672368][T26492] netlink: zone id is out of range [ 1537.703191][T26492] netlink: zone id is out of range [ 1537.725570][T26492] netlink: zone id is out of range [ 1537.749354][T26492] netlink: zone id is out of range [ 1537.892318][T26492] netlink: zone id is out of range [ 1544.540703][T26562] net_ratelimit: 475 callbacks suppressed [ 1544.540727][T26562] netlink: zone id is out of range [ 1544.552575][T26562] netlink: zone id is out of range [ 1544.557805][T26562] netlink: zone id is out of range [ 1544.564537][T26562] netlink: zone id is out of range [ 1544.569834][T26562] netlink: zone id is out of range [ 1544.576858][T26562] netlink: zone id is out of range [ 1544.604543][T26562] netlink: zone id is out of range [ 1544.631687][T26562] netlink: zone id is out of range [ 1544.658459][T26562] netlink: zone id is out of range [ 1544.672375][T26562] netlink: zone id is out of range syzkaller syzkaller login: [ 1545.462279][T26576] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5188'. [ 1546.188517][T26559] Process accounting resumed [ 1546.383112][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 1546.390024][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 1548.884874][T26628] device-mapper: ioctl: Invalid ioctl structure: uuid , name , dev 400008000000006 [ 1549.863465][T26645] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 1552.275047][T26689] device-mapper: ioctl: Invalid ioctl structure: uuid , name , dev 400008000000006 [ 1552.369618][T26691] netlink: 330 bytes leftover after parsing attributes in process `syz.0.5215'. [ 1553.397966][T26712] netlink: 330 bytes leftover after parsing attributes in process `syz.7.5221'. [ 1554.239883][T26737] netlink: 'syz.6.5228': attribute type 5 has an invalid length. [ 1554.262431][T26737] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5228'. [ 1555.105305][T26763] can: request_module (can-proto-0) failed. [ 1555.892550][T26781] FAULT_INJECTION: forcing a failure. [ 1555.892550][T26781] name failslab, interval 1, probability 0, space 0, times 0 [ 1555.905782][T26781] CPU: 0 UID: 0 PID: 26781 Comm: syz.6.5236 Not tainted 6.13.0-rc5-syzkaller-00161-g63676eefb7a0 #0 [ 1555.916569][T26781] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1555.926648][T26781] Call Trace: [ 1555.929961][T26781] [ 1555.932909][T26781] dump_stack_lvl+0x116/0x1f0 [ 1555.937618][T26781] should_fail_ex+0x497/0x5b0 [ 1555.942347][T26781] should_failslab+0xc2/0x120 [ 1555.947061][T26781] kmem_cache_alloc_noprof+0x6e/0x3b0 [ 1555.952466][T26781] ? __send_signal_locked+0x159/0x11a0 [ 1555.957962][T26781] ? sig_get_ucounts+0x1c0/0x5b0 [ 1555.962933][T26781] __send_signal_locked+0x159/0x11a0 [ 1555.968256][T26781] group_send_sig_info+0x2aa/0x300 [ 1555.973404][T26781] ? __pfx_group_send_sig_info+0x10/0x10 [ 1555.979062][T26781] ? trace_lock_acquire+0x14e/0x1f0 [ 1555.984287][T26781] ? __pfx_lock_release+0x10/0x10 [ 1555.989351][T26781] ? kill_something_info+0x5b/0x310 [ 1555.994581][T26781] __kill_pgrp_info+0x8f/0x110 [ 1555.999375][T26781] kill_something_info+0xf9/0x310 [ 1556.004423][T26781] ? __task_pid_nr_ns+0x186/0x500 [ 1556.009569][T26781] __x64_sys_kill+0xdc/0x140 [ 1556.014189][T26781] ? __pfx___x64_sys_kill+0x10/0x10 [ 1556.019417][T26781] ? ksys_write+0x1ba/0x250 [ 1556.023971][T26781] do_syscall_64+0xcd/0x250 [ 1556.028507][T26781] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1556.034430][T26781] RIP: 0033:0x7f4453185d29 [ 1556.038866][T26781] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1556.058849][T26781] RSP: 002b:00007f4450ff6038 EFLAGS: 00000246 ORIG_RAX: 000000000000003e [ 1556.067292][T26781] RAX: ffffffffffffffda RBX: 00007f4453376160 RCX: 00007f4453185d29 [ 1556.075288][T26781] RDX: 0000000000000000 RSI: 0000000000000011 RDI: 0000000000000000 [ 1556.083284][T26781] RBP: 00007f4450ff6090 R08: 0000000000000000 R09: 0000000000000000 [ 1556.091279][T26781] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1556.099276][T26781] R13: 0000000000000001 R14: 00007f4453376160 R15: 00007ffceb9631a8 [ 1556.107290][T26781] [ 1556.112836][ C0] vkms_vblank_simulate: vblank timer overrun [ 1557.595062][T26794] nfs4: Unknown parameter '' [ 1560.065967][T26803] sg_write: data in/out 32551/64969 bytes for SCSI command 0x0-- guessing data in; [ 1560.065967][T26803] program syz.7.5239 not setting count and/or reply_len properly [ 1562.883953][T26836] netlink: 342 bytes leftover after parsing attributes in process `syz.2.5247'. [ 1563.253848][T26848] device-mapper: ioctl: Invalid ioctl structure: uuid , name , dev 400008000000006 [ 1566.259791][T26883] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 1567.004415][T26891] device-mapper: ioctl: Invalid ioctl structure: uuid , name , dev 400008000000006 syzkaller syzkaller login: [ 1568.915342][ T5860] Bluetooth: hci3: command 0x0406 tx timeout [ 1569.991339][T26940] net_ratelimit: 475 callbacks suppressed [ 1569.991363][T26940] netlink: zone id is out of range [ 1570.070041][T26941] device-mapper: ioctl: Invalid ioctl structure: uuid , name , dev 400008000000006 [ 1570.089069][T26940] netlink: zone id is out of range [ 1570.122232][T26940] netlink: zone id is out of range [ 1570.127905][T26940] netlink: zone id is out of range [ 1570.190256][T26940] netlink: zone id is out of range [ 1570.272562][T26940] netlink: zone id is out of range [ 1570.305149][T26940] netlink: zone id is out of range [ 1570.334384][T26940] netlink: zone id is out of range [ 1570.408275][T26940] netlink: zone id is out of range [ 1570.434881][T26940] netlink: zone id is out of range [ 1571.495232][T26947] netlink: 28 bytes leftover after parsing attributes in process `syz.7.5274'. [ 1571.567188][T26947] gretap0: entered promiscuous mode [ 1572.894450][ T29] audit: type=1326 audit(4294967499.300:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27000 comm="syz.2.5285" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f3120785d29 code=0x0 [ 1573.854833][T27022] netlink: 306 bytes leftover after parsing attributes in process `syz.2.5292'. [ 1573.889443][T27022] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5292'. [ 1573.937768][T27022] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5292'. [ 1574.056999][T27026] blktrace: Concurrent blktraces are not allowed on sg0 syzkaller syzkaller login: [ 1575.362436][T27054] can: request_module (can-proto-5) failed. syzkaller syzkaller login: [ 1581.511701][T27112] Invalid ELF header magic: != ELF [ 1582.383616][T27122] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5311'. [ 1582.987799][T27131] net_ratelimit: 483 callbacks suppressed [ 1582.987823][T27131] netlink: zone id is out of range [ 1583.030008][T27131] netlink: zone id is out of range [ 1583.058074][T27131] netlink: zone id is out of range [ 1583.089228][T27131] netlink: zone id is out of range [ 1583.136443][T27131] netlink: zone id is out of range [ 1583.172629][T27131] netlink: zone id is out of range [ 1583.221306][T27131] netlink: zone id is out of range [ 1583.262413][T27131] netlink: zone id is out of range [ 1583.283290][T27131] netlink: zone id is out of range [ 1583.293511][T27131] netlink: zone id is out of range [ 1586.365810][T27154] tipc: Started in network mode [ 1586.371412][T27154] tipc: Node identity ffffffff, cluster identity 4711 [ 1586.390429][T27154] tipc: Node number set to 4294967295 [ 1588.143494][T27195] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5325'. [ 1589.380679][T27204] ecryptfs_miscdev_write: memdup_user returned error [-14] [ 1592.008399][T27234] net_ratelimit: 978 callbacks suppressed [ 1592.008423][T27234] netlink: zone id is out of range [ 1592.052235][T27234] netlink: zone id is out of range [ 1592.057921][T27234] netlink: zone id is out of range [ 1592.110256][T27234] netlink: zone id is out of range [ 1592.142396][T27234] netlink: zone id is out of range [ 1592.148077][T27234] netlink: zone id is out of range [ 1592.181096][T27234] netlink: zone id is out of range [ 1592.414377][T27234] netlink: zone id is out of range [ 1592.421226][T27234] netlink: zone id is out of range [ 1592.447994][T27234] netlink: zone id is out of range syzkaller syzkaller login: [ 1593.078749][T27250] device-mapper: ioctl: ioctl interface mismatch: kernel(4.48.0), user(0.0.0), cmd(6) syzkaller syzkaller login: [ 1595.865500][T27265] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1595.918032][T27265] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 1596.317475][T27265] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1596.325471][T27265] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1596.353735][T27265] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1596.381485][T27265] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1596.404705][T27265] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1596.431931][T27265] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1596.453892][T27265] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1596.461299][T27265] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1597.395874][T22777] Bluetooth: hci0: command 0x0406 tx timeout [ 1598.355011][T22777] Bluetooth: hci1: command 0x0406 tx timeout [ 1598.432619][T22777] Bluetooth: hci4: command 0x0406 tx timeout [ 1598.439982][ T5860] Bluetooth: hci2: command 0x0406 tx timeout [ 1598.520782][ T5860] Bluetooth: hci3: command 0x0406 tx timeout [ 1599.402470][T27285] kexec: Could not allocate control_code_buffer [ 1599.475484][ T5860] Bluetooth: hci0: command 0x0406 tx timeout [ 1599.667740][T27293] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5350'. [ 1600.432414][ T5860] Bluetooth: hci1: command 0x0406 tx timeout [ 1600.512474][ T5860] Bluetooth: hci2: command 0x0406 tx timeout [ 1600.521280][T22777] Bluetooth: hci4: command 0x0406 tx timeout [ 1600.600655][T22777] Bluetooth: hci3: command 0x0406 tx timeout syzkaller syzkaller login: [ 1602.057681][T27308] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1602.103534][T27308] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1602.166168][T27308] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1602.214962][T27308] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1602.538559][T27308] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1603.686631][T22777] Bluetooth: hci0: command 0x0406 tx timeout [ 1604.122454][T22777] Bluetooth: hci1: command 0x0406 tx timeout [ 1604.192698][T22777] Bluetooth: hci2: command 0x0406 tx timeout [ 1604.278616][T22777] Bluetooth: hci4: command 0x0406 tx timeout [ 1604.602210][T22777] Bluetooth: hci3: command 0x0406 tx timeout [ 1607.800472][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 1607.809789][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 syzkaller syzkaller login: [ 1611.538852][ T5860] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1611.565976][ T5860] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1611.576556][ T5860] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1611.588459][ T5860] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1611.597469][ T5860] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1611.605556][ T5860] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1612.497427][T27417] bridge0: port 3(syz_tun) entered blocking state [ 1612.504940][T27417] bridge0: port 3(syz_tun) entered disabled state [ 1612.512981][T27417] syz_tun: entered allmulticast mode [ 1612.520028][T27417] syz_tun: entered promiscuous mode [ 1612.526828][T27417] bridge0: port 3(syz_tun) entered blocking state [ 1612.534025][T27417] bridge0: port 3(syz_tun) entered forwarding state [ 1613.127917][T27408] chnl_net:caif_netlink_parms(): no params data found [ 1613.712554][ T5860] Bluetooth: hci3: command tx timeout [ 1615.345412][T27408] bridge0: port 1(bridge_slave_0) entered blocking state [ 1615.402497][T27408] bridge0: port 1(bridge_slave_0) entered disabled state [ 1615.424243][T27408] bridge_slave_0: entered allmulticast mode [ 1615.448143][T27408] bridge_slave_0: entered promiscuous mode [ 1615.513527][T27408] bridge0: port 2(bridge_slave_1) entered blocking state [ 1615.521352][T27408] bridge0: port 2(bridge_slave_1) entered disabled state [ 1615.547083][T27408] bridge_slave_1: entered allmulticast mode [ 1615.563478][T27408] bridge_slave_1: entered promiscuous mode [ 1615.764408][T27457] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5383'. [ 1615.792782][ T5860] Bluetooth: hci3: command tx timeout [ 1615.856245][T27458] netlink: 330 bytes leftover after parsing attributes in process `syz.0.5383'. [ 1616.062619][T27408] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1616.127728][T27408] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1616.356382][T27408] team0: Port device team_slave_0 added [ 1616.414455][T27408] team0: Port device team_slave_1 added [ 1616.652423][T27408] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1616.701740][T27408] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1616.942234][T27408] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1616.968086][T27408] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1617.012229][T27408] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1617.170672][T27408] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1617.678222][T27408] hsr_slave_0: entered promiscuous mode [ 1617.723193][T27408] hsr_slave_1: entered promiscuous mode [ 1617.792882][T27475] device-mapper: ioctl: Invalid ioctl structure: uuid , name , dev 400008000000006 [ 1617.875968][T22777] Bluetooth: hci3: command tx timeout [ 1618.022323][T27408] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1618.051822][T27408] Cannot create hsr debugfs directory [ 1619.942322][T27483] can: request_module (can-proto-0) failed. [ 1619.953053][T22777] Bluetooth: hci3: command tx timeout [ 1620.239720][T27486] can: request_module (can-proto-0) failed. [ 1620.955528][T27408] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1621.057357][T27408] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1621.121137][T27408] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1621.185340][T27408] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1621.569912][T27408] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1621.669043][T27408] 8021q: adding VLAN 0 to HW filter on device team0 [ 1621.730612][T23172] bridge0: port 1(bridge_slave_0) entered blocking state [ 1621.738511][T23172] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1621.804183][T23173] bridge0: port 2(bridge_slave_1) entered blocking state [ 1621.812093][T23173] bridge0: port 2(bridge_slave_1) entered forwarding state syzkaller syzkaller login: [ 1625.398395][T27408] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1627.935190][T27408] veth0_vlan: entered promiscuous mode [ 1627.964699][T27408] veth1_vlan: entered promiscuous mode [ 1628.004202][T27408] veth0_macvtap: entered promiscuous mode [ 1628.025267][T27408] veth1_macvtap: entered promiscuous mode [ 1628.053201][T27408] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1628.078975][T27408] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1628.107948][T27408] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1628.140795][T27408] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1628.164652][T27408] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1628.206823][T27408] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1628.231639][T27408] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1628.266757][T27408] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1628.302841][T27408] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1628.339775][T27408] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1628.381862][T27408] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1628.422473][T27408] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1628.462876][T27408] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1628.504244][T27408] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1628.527442][T27408] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1628.552333][T27408] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1628.571030][T27408] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1628.592686][T27408] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1628.617721][T27408] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1628.646993][T27408] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1628.672256][T27408] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1628.715337][T27408] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1628.747284][T27408] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1628.775809][T27408] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1628.812298][T27408] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1628.846090][T27408] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1628.882243][T27408] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1628.922330][T27408] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1628.962344][T27408] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1628.992410][T27408] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1629.032223][T27408] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1629.072806][T27408] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1629.109664][T27408] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1629.141111][T27408] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1629.192483][T27408] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1629.223677][T27408] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1629.495772][T27408] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1629.532304][T27408] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1629.563287][T27408] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1629.592844][T27408] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1630.130749][T24046] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1630.180555][T24046] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1630.371064][T24046] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1630.402560][T24046] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1631.688409][T27618] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5416'. [ 1633.802436][T27637] vivid-007: ================= START STATUS ================= [ 1633.810983][T27637] vivid-007: Generate PTS: true [ 1633.841442][T27637] vivid-007: Generate SCR: true [ 1633.870549][T27637] tpg source WxH: 640x360 (Y'CbCr) [ 1633.910273][T27637] tpg field: 1 [ 1633.922232][T27637] tpg crop: 640x360@0x0 [ 1633.926864][T27637] tpg compose: 640x360@0x0 [ 1633.949569][T27637] tpg colorspace: 8 [ 1634.018125][T27637] tpg transfer function: 0/0 [ 1634.035104][T27644] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5420'. [ 1634.049692][T27637] tpg Y'CbCr encoding: 0/0 [ 1634.079286][T27633] [ 1634.081318][T27637] tpg quantization: 0/0 [ 1634.081869][T27633] ====================================================== [ 1634.094161][T27633] WARNING: possible circular locking dependency detected [ 1634.101896][T27633] 6.13.0-rc5-syzkaller-00161-g63676eefb7a0 #0 Not tainted [ 1634.109732][T27633] ------------------------------------------------------ [ 1634.117465][T27633] syz.8.5415/27633 is trying to acquire lock: [ 1634.122201][T27637] tpg RGB range: 0/2 [ 1634.124124][T27633] ffff888142709e00 [ 1634.128391][T27637] vivid-007: ================== END STATUS ================== [ 1634.140865][T27633] (&q->q_usage_counter(io)#4){++++}-{0:0}, at: submit_bio_noacct_nocheck+0x892/0xd70 [ 1634.151425][T27633] [ 1634.151425][T27633] but task is already holding lock: [ 1634.159524][T27633] ffff888148c43740 (mapping.invalidate_lock#2){++++}-{4:4}, at: page_cache_ra_unbounded+0x173/0x750 [ 1634.171416][T27633] [ 1634.171416][T27633] which lock already depends on the new lock. [ 1634.171416][T27633] [ 1634.182856][T27633] [ 1634.182856][T27633] the existing dependency chain (in reverse order) is: [ 1634.192765][T27633] [ 1634.192765][T27633] -> #4 (mapping.invalidate_lock#2){++++}-{4:4}: [ 1634.202144][T27633] down_read+0x9a/0x330 [ 1634.207300][T27633] filemap_fault+0x2e0/0x2820 [ 1634.213020][T27633] __do_fault+0x10a/0x490 [ 1634.218352][T27633] do_pte_missing+0xebd/0x3e00 [ 1634.224164][T27633] __handle_mm_fault+0x103c/0x2a40 [ 1634.230356][T27633] handle_mm_fault+0x3fa/0xaa0 [ 1634.236164][T27633] __get_user_pages+0x8d9/0x3b50 [ 1634.242167][T27633] __gup_longterm_locked+0x211/0x1870 [ 1634.248651][T27633] gup_fast_fallback+0x1802/0x2690 [ 1634.254873][T27633] pin_user_pages_fast+0xa8/0x100 [ 1634.260976][T27633] iov_iter_extract_pages+0x3a5/0x2010 [ 1634.267567][T27633] bio_iov_iter_get_pages+0x37c/0x1100 [ 1634.274165][T27633] blkdev_direct_IO+0x1054/0x1ad0 [ 1634.280260][T27633] blkdev_write_iter+0x6f9/0xd40 [ 1634.286262][T27633] vfs_write+0x5ae/0x1150 [ 1634.291631][T27633] ksys_write+0x12b/0x250 [ 1634.296963][T27633] do_syscall_64+0xcd/0x250 [ 1634.302489][T27633] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1634.309542][T27633] [ 1634.309542][T27633] -> #3 (&mm->mmap_lock){++++}-{4:4}: [ 1634.317854][T27633] __might_fault+0x11b/0x190 [ 1634.323483][T27633] _copy_from_user+0x29/0xd0 [ 1634.329103][T27633] __blk_trace_setup+0xa8/0x180 [ 1634.335010][T27633] blk_trace_setup+0x47/0x70 [ 1634.340626][T27633] sg_ioctl+0x7a3/0x26b0 [ 1634.345870][T27633] __x64_sys_ioctl+0x190/0x200 [ 1634.351673][T27633] do_syscall_64+0xcd/0x250 [ 1634.357227][T27633] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1634.364284][T27633] [ 1634.364284][T27633] -> #2 (&q->debugfs_mutex){+.+.}-{4:4}: [ 1634.372883][T27633] __mutex_lock+0x19b/0xa60 [ 1634.378411][T27633] blk_register_queue+0x13c/0x4f0 [ 1634.384522][T27633] add_disk_fwnode+0x785/0x1300 [ 1634.390448][T27633] brd_alloc.isra.0+0x50a/0x7c0 [ 1634.396367][T27633] brd_init+0x12b/0x1d0 [ 1634.401506][T27633] do_one_initcall+0x128/0x630 [ 1634.407324][T27633] kernel_init_freeable+0x58f/0x8b0 [ 1634.413621][T27633] kernel_init+0x1c/0x2b0 [ 1634.418957][T27633] ret_from_fork+0x45/0x80 [ 1634.424381][T27633] ret_from_fork_asm+0x1a/0x30 [ 1634.430196][T27633] [ 1634.430196][T27633] -> #1 (&q->sysfs_lock){+.+.}-{4:4}: [ 1634.438504][T27633] __mutex_lock+0x19b/0xa60 [ 1634.444032][T27633] queue_attr_store+0xe2/0x170 [ 1634.449840][T27633] sysfs_kf_write+0x117/0x170 [ 1634.455590][T27633] kernfs_fop_write_iter+0x33d/0x500 [ 1634.461981][T27633] iter_file_splice_write+0x90f/0x10b0 [ 1634.468579][T27633] direct_splice_actor+0x18f/0x6c0 [ 1634.474774][T27633] splice_direct_to_actor+0x346/0xa40 [ 1634.481249][T27633] do_splice_direct+0x178/0x250 [ 1634.487151][T27633] do_sendfile+0xaed/0xe30 [ 1634.492578][T27633] __x64_sys_sendfile64+0x1da/0x220 [ 1634.498874][T27633] do_syscall_64+0xcd/0x250 [ 1634.504399][T27633] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1634.511456][T27633] [ 1634.511456][T27633] -> #0 (&q->q_usage_counter(io)#4){++++}-{0:0}: [ 1634.520825][T27633] __lock_acquire+0x249e/0x3c40 [ 1634.526730][T27633] lock_acquire.part.0+0x11b/0x380 [ 1634.532915][T27633] __submit_bio+0x49c/0x540 [ 1634.538444][T27633] submit_bio_noacct_nocheck+0x892/0xd70 [ 1634.545215][T27633] submit_bio_noacct+0x93a/0x1e20 [ 1634.551316][T27633] mpage_readahead+0x41d/0x590 [ 1634.557128][T27633] read_pages+0x1a8/0xdc0 [ 1634.562457][T27633] page_cache_ra_unbounded+0x3dc/0x750 [ 1634.569029][T27633] page_cache_ra_order+0x8f2/0xc80 [ 1634.575233][T27633] page_cache_sync_ra+0x4b4/0x9c0 [ 1634.581346][T27633] filemap_get_pages+0xd7b/0x1be0 [ 1634.587453][T27633] filemap_read+0x3ca/0xd70 [ 1634.592984][T27633] blkdev_read_iter+0x187/0x480 [ 1634.598888][T27633] do_iter_readv_writev+0x614/0x7f0 [ 1634.605180][T27633] vfs_readv+0x4cf/0x890 [ 1634.610415][T27633] do_readv+0x133/0x340 [ 1634.615552][T27633] __x64_sys_preadv2+0x11f/0x160 [ 1634.621555][T27633] do_syscall_64+0xcd/0x250 [ 1634.627082][T27633] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1634.634136][T27633] [ 1634.634136][T27633] other info that might help us debug this: [ 1634.634136][T27633] [ 1634.645376][T27633] Chain exists of: [ 1634.645376][T27633] &q->q_usage_counter(io)#4 --> &mm->mmap_lock --> mapping.invalidate_lock#2 [ 1634.645376][T27633] [ 1634.661542][T27633] Possible unsafe locking scenario: [ 1634.661542][T27633] [ 1634.669725][T27633] CPU0 CPU1 [ 1634.675651][T27633] ---- ---- [ 1634.681543][T27633] rlock(mapping.invalidate_lock#2); [ 1634.687458][T27633] lock(&mm->mmap_lock); [ 1634.694991][T27633] lock(mapping.invalidate_lock#2); [ 1634.703587][T27633] rlock(&q->q_usage_counter(io)#4); [ 1634.709500][T27633] [ 1634.709500][T27633] *** DEADLOCK *** [ 1634.709500][T27633] [ 1634.718450][T27633] 1 lock held by syz.8.5415/27633: [ 1634.724060][T27633] #0: ffff888148c43740 (mapping.invalidate_lock#2){++++}-{4:4}, at: page_cache_ra_unbounded+0x173/0x750 [ 1634.736422][T27633] [ 1634.736422][T27633] stack backtrace: [ 1634.742893][T27633] CPU: 0 UID: 0 PID: 27633 Comm: syz.8.5415 Not tainted 6.13.0-rc5-syzkaller-00161-g63676eefb7a0 #0 [ 1634.754728][T27633] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1634.765781][T27633] Call Trace: [ 1634.769377][T27633] [ 1634.772595][T27633] dump_stack_lvl+0x116/0x1f0 [ 1634.777747][T27633] print_circular_bug+0x41c/0x610 [ 1634.783284][T27633] check_noncircular+0x31a/0x400 [ 1634.788727][T27633] ? __pfx_check_noncircular+0x10/0x10 [ 1634.794741][T27633] ? lockdep_lock+0xc6/0x200 [ 1634.799824][T27633] ? __pfx_lockdep_lock+0x10/0x10 [ 1634.805363][T27633] __lock_acquire+0x249e/0x3c40 [ 1634.810701][T27633] ? __pfx___lock_acquire+0x10/0x10 [ 1634.816414][T27633] lock_acquire.part.0+0x11b/0x380 [ 1634.822049][T27633] ? submit_bio_noacct_nocheck+0x892/0xd70 [ 1634.828442][T27633] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 1634.834634][T27633] ? rcu_is_watching+0x12/0xc0 [ 1634.839876][T27633] ? trace_lock_acquire+0x14e/0x1f0 [ 1634.845596][T27633] ? submit_bio_noacct_nocheck+0x892/0xd70 [ 1634.851984][T27633] ? lock_acquire+0x2f/0xb0 [ 1634.856929][T27633] ? submit_bio_noacct_nocheck+0x892/0xd70 [ 1634.863319][T27633] __submit_bio+0x49c/0x540 [ 1634.868275][T27633] ? submit_bio_noacct_nocheck+0x892/0xd70 [ 1634.874665][T27633] ? __pfx___submit_bio+0x10/0x10 [ 1634.880201][T27633] ? ktime_get+0x206/0x300 [ 1634.885062][T27633] ? lockdep_hardirqs_on+0x7c/0x110 [ 1634.890778][T27633] ? submit_bio_noacct_nocheck+0x892/0xd70 [ 1634.897171][T27633] submit_bio_noacct_nocheck+0x892/0xd70 [ 1634.903372][T27633] ? __pfx_submit_bio_noacct_nocheck+0x10/0x10 [ 1634.910147][T27633] ? __pfx___might_resched+0x10/0x10 [ 1634.915958][T27633] ? __pfx_xa_load+0x10/0x10 [ 1634.921011][T27633] submit_bio_noacct+0x93a/0x1e20 [ 1634.926545][T27633] mpage_readahead+0x41d/0x590 [ 1634.931789][T27633] ? __pfx_mpage_readahead+0x10/0x10 [ 1634.937614][T27633] ? __pfx_blkdev_get_block+0x10/0x10 [ 1634.943527][T27633] ? __folio_batch_add_and_move+0x5f3/0xc60 [ 1634.950011][T27633] ? __pfx_lock_release+0x10/0x10 [ 1634.955533][T27633] ? __pfx_blkdev_readahead+0x10/0x10 [ 1634.961466][T27633] read_pages+0x1a8/0xdc0 [ 1634.966227][T27633] ? lock_acquire+0x2f/0xb0 [ 1634.971173][T27633] ? __pfx_lru_add+0x10/0x10 [ 1634.976219][T27633] ? __pfx_read_pages+0x10/0x10 [ 1634.981554][T27633] ? find_held_lock+0x2d/0x110 [ 1634.986798][T27633] page_cache_ra_unbounded+0x3dc/0x750 [ 1634.992808][T27633] page_cache_ra_order+0x8f2/0xc80 [ 1634.998437][T27633] page_cache_sync_ra+0x4b4/0x9c0 [ 1635.003964][T27633] filemap_get_pages+0xd7b/0x1be0 [ 1635.009499][T27633] ? __pfx_filemap_get_pages+0x10/0x10 [ 1635.015509][T27633] ? __pfx___might_resched+0x10/0x10 [ 1635.021324][T27633] filemap_read+0x3ca/0xd70 [ 1635.026288][T27633] ? __pfx___lock_acquire+0x10/0x10 [ 1635.032005][T27633] ? __pfx_filemap_read+0x10/0x10 [ 1635.037565][T27633] ? __pfx_mark_lock+0x10/0x10 [ 1635.042809][T27633] ? schedule+0x1fd/0x350 [ 1635.047567][T27633] ? __pfx_aa_file_perm+0x10/0x10 [ 1635.053091][T27633] blkdev_read_iter+0x187/0x480 [ 1635.058425][T27633] do_iter_readv_writev+0x614/0x7f0 [ 1635.064140][T27633] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 1635.070427][T27633] ? bpf_lsm_file_permission+0x9/0x10 [ 1635.076341][T27633] ? security_file_permission+0x71/0x210 [ 1635.082544][T27633] vfs_readv+0x4cf/0x890 [ 1635.087214][T27633] ? __pfx_vfs_readv+0x10/0x10 [ 1635.092451][T27633] ? find_held_lock+0x2d/0x110 [ 1635.097697][T27633] ? __pfx_lock_release+0x10/0x10 [ 1635.103216][T27633] ? trace_lock_acquire+0x14e/0x1f0 [ 1635.108939][T27633] ? __fget_files+0x206/0x3a0 [ 1635.114087][T27633] ? do_readv+0x133/0x340 [ 1635.118843][T27633] do_readv+0x133/0x340 [ 1635.123409][T27633] ? __pfx_do_readv+0x10/0x10 [ 1635.128548][T27633] ? rcu_is_watching+0x12/0xc0 [ 1635.133790][T27633] __x64_sys_preadv2+0x11f/0x160 [ 1635.139224][T27633] do_syscall_64+0xcd/0x250 [ 1635.144178][T27633] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1635.150665][T27633] RIP: 0033:0x7fa773b85d29 [ 1635.155515][T27633] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1635.177081][T27633] RSP: 002b:00007fa774a27038 EFLAGS: 00000246 ORIG_RAX: 0000000000000147 [ 1635.186332][T27633] RAX: ffffffffffffffda RBX: 00007fa773d76240 RCX: 00007fa773b85d29 [ 1635.195094][T27633] RDX: 0000000000000005 RSI: 0000000020001000 RDI: 0000000000000003 [ 1635.203858][T27633] RBP: 00007fa773c01b08 R08: 0000000000000007 R09: 000000000000002e [ 1635.212623][T27633] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 1635.221393][T27633] R13: 0000000000000000 R14: 00007fa773d76240 R15: 00007ffdd1d3bdf8 [ 1635.230164][T27633] [ 1635.233621][ C0] vkms_vblank_simulate: vblank timer overrun SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1635.497827][T27638] vivid-007: kernel_thread() failed [ 1637.309784][T23173] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1637.436919][T23173] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1637.536331][T23173] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1637.556478][T27634] bridge0: port 3(syz_tun) entered disabled state [ 1637.568161][T27634] syz_tun (unregistering): left allmulticast mode [ 1637.575331][T27634] syz_tun (unregistering): left promiscuous mode [ 1637.583091][T27634] bridge0: port 3(syz_tun) entered disabled state [ 1637.597116][T23173] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1637.697201][T23173] bridge_slave_1: left allmulticast mode [ 1637.704903][T23173] bridge_slave_1: left promiscuous mode [ 1637.711528][T23173] bridge0: port 2(bridge_slave_1) entered disabled state [ 1637.753568][T23173] bridge_slave_0: left allmulticast mode [ 1637.760305][T23173] bridge_slave_0: left promiscuous mode [ 1637.778354][T23173] bridge0: port 1(bridge_slave_0) entered disabled state [ 1637.920509][T23173] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1637.931616][T23173] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1637.943077][T23173] bond0 (unregistering): Released all slaves [ 1638.189621][T23173] hsr_slave_0: left promiscuous mode [ 1638.201522][T23173] hsr_slave_1: left promiscuous mode [ 1638.219026][T23173] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1638.227512][T23173] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1638.242976][T23173] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1638.251205][T23173] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1638.305315][T23173] veth1_macvtap: left promiscuous mode [ 1638.311416][T23173] veth0_macvtap: left promiscuous mode [ 1638.318132][T23173] veth1_vlan: left promiscuous mode [ 1638.325181][T23173] veth0_vlan: left promiscuous mode [ 1638.627109][T23173] team0 (unregistering): Port device team_slave_1 removed [ 1638.676830][T23173] team0 (unregistering): Port device team_slave_0 removed