last executing test programs: 4m55.954329829s ago: executing program 3 (id=4): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) mremap$auto(0x0, 0xffffffffffffffff, 0x401, 0x3, 0x7fffffffb000) prctl$auto(0x23, 0x800007, 0x7ffffffff002, 0x8, 0x7fffffff) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/012/001\x00', 0x208000, 0x0) mmap$auto(0x0, 0xa, 0xdb, 0x9b72, 0x5, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x5, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) inotify_rm_watch$auto(0x0, 0x9) rename$auto(0x0, 0x0) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0xffffffffffffffff) mmap$auto(0x0, 0x8, 0x4000000000db, 0x44eb1, 0x4000000000000006, 0x300000000000) mmap$auto(0x0, 0x6, 0x4000000000df, 0xeb1, 0x400, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x5, 0x1, 0x28040de9, 0x18, 0x5, 0x10001) mmap$auto(0x0, 0x20009, 0xe3, 0x40000000000eb1, 0x40000000000a1, 0x1000) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) connect$auto(0x3, 0x0, 0x54) socket$nl_generic(0x10, 0x3, 0x10) open(&(0x7f0000000000)='./file0\x00', 0x241c2, 0x84) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8000, 0x0) io_uring_setup$auto(0x6, 0x0) socket(0xa, 0x3, 0x3a) setsockopt$auto(0x400000000000003, 0x29, 0xca, 0x0, 0x567) move_pages$auto(0x0, 0x1002, 0x0, &(0x7f0000001140), 0x0, 0x2) brk$auto(0x7fffffffafff) 4m54.158684653s ago: executing program 3 (id=15): openat$auto_tracing_fops_trace(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/debug/tracing/trace\x00', 0x80800, 0x0) syz_genetlink_get_family_id$auto_smc_gen_netlink(&(0x7f0000000040), 0xffffffffffffffff) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$auto_OVS_FLOW_CMD_NEW(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000140)={0x1c, r1, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [@OVS_FLOW_ATTR_PROBE={0x4}, @OVS_FLOW_ATTR_PROBE={0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x40) read$auto(0x3, 0x0, 0x400000) r2 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) rseq$auto(&(0x7f0000000300)={0xe, 0x401, 0x0, 0x6, 0xffffffff, 0x5ce}, 0x8000, 0x0, 0x6) r3 = openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x1000, 0x0) mmap$auto_tracing_buffers_fops_trace(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x9, 0x11, r3, 0x0) r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) move_pages$auto(r4, 0x1002, 0x0, 0x0, 0x0, 0x2) sendmsg$auto_NL80211_CMD_GET_STATION(0xffffffffffffffff, 0x0, 0x4004010) openat$auto_clk_summary_fops_(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/clk/clk_summary\x00', 0x2000, 0x0) lsm_list_modules$auto(0x0, 0x0, 0x0) unshare$auto(0x8000000) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) io_uring_setup$auto(0x3ff, 0x0) close_range$auto(0x2, 0x8, 0x0) r5 = syz_genetlink_get_family_id$auto_ovs_vport(&(0x7f0000000200), r2) r6 = geteuid() mmap$auto(0x7e, 0x44fd, 0x7, 0x18, 0x5, 0x3bcf) sendmsg$auto_OVS_VPORT_CMD_DEL(r2, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000340)={0x23c, r5, 0x300, 0x70bd29, 0x25dfdbfd, {}, [@OVS_VPORT_ATTR_OPTIONS={0x184, 0x4, 0x0, 0x1, [@generic="e205a2b450bfbe897a396901027aec549b1ad418fe5b634acd0fd79a1bdc6d7c28b9b551c4ba2b6d037432df49465e66cf34bd54d0ff627f147388541cd05d0082c332a6c7735574bb91f45570b71755b8f18802358b62892963f49825680ad65ae8dd1091", @generic="03569296916d8d049d8b86324006eb3e7624a27574c3a9f5f7457e6a100234c5eb719a75d119b5ebcf972b941a48492d01210a318fbb8dd5b470bad20fba9c385fec3cf974f6c10095f0ebc3ba25af9b93e3edef1df5f5bd5669d882939a8efbc2c4d2514e16b61c465604a11660d7a9860cefbd3df126d87aadbc26f64d6bcee3c0287e2ed923d801966d5a53c89c80adf2822342f9db4a33f85c31db3ac2973d29d887b4f1c03973c017324a84cd1eae39c5e3f7007ae9934f810f75028db69f250fa72c25", @generic="2b3a9f5bf81c0bf8704cc8b9de40f487db1bf0f4d7cd22e58909b436ee07b812c904d95c67482d0f007a53243ccadb1a48b14e9602a06a5d2355d0f78b1a11d7be58d9b8174a8159e22a386f81", @typed={0x8, 0x39, 0x0, 0x0, @uid=r6}]}, @OVS_VPORT_ATTR_UPCALL_PID={0xa2, 0x5, "5ad7ec870e661b7cd727c31145c08b2a8243febfca841df1b397c624ebe69d2ef560a30202b53ec8ff1ef49da5a91b92ab7c765b14d2eca8b8903d888f6c1c8d94df92011da96eb7767e4970838d2fb1be5fdf0d2ebe68f157d2780022ba50d8ca94ce4e8c083d4cce8c229a8df0038454522bdac7216b62985cde96fc45569653215e99b0bc6a4c58788f7440a5417bf7cbe85aa12ff242cb6e61a8eab9"}]}, 0x23c}, 0x1, 0x0, 0x0, 0x8805}, 0x80) futex$auto(&(0x7f0000000080)=0x2948, 0x0, 0x2948, &(0x7f00000000c0)={0x225c17d03}, 0x0, 0x5) futex$auto(0x0, 0x5, 0x4, 0x0, &(0x7f0000000080)=0x9, 0x4000000) r7 = socket(0x6, 0x2, 0x4) syz_genetlink_get_family_id$auto_nl802154(&(0x7f00000001c0), r7) madvise$auto(0x800000000000000, 0xffffffffffff0005, 0x19) 4m53.561953422s ago: executing program 3 (id=18): r0 = socket(0x11, 0x3, 0x2) getsockopt$auto(r0, 0x2, 0x2, 0x0, 0x0) r1 = open(&(0x7f0000000000)='./file0\x00', 0x261c2, 0x84) fallocate$auto(0x8000000000000003, 0x0, 0xd, 0xcbd5d) memfd_secret$auto(0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) socket(0x2, 0x1, 0x0) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) io_uring_setup$auto(0x6, 0x0) setsockopt$auto(0x3, 0x1, 0x2e, 0x0, 0x9) select$auto(0xa, 0x0, &(0x7f0000000100)={[0x20000000000d, 0x203, 0x0, 0xc, 0x5, 0x3, 0x5, 0x2000000000000002, 0x9, 0x8, 0x400000000ff, 0xa, 0x4, 0xaab, 0x5, 0x7]}, 0x0, 0x0) rt_sigprocmask$auto(0x0, &(0x7f0000000000)={0xfffffffffffffe01}, 0x0, 0x8) write$auto(0x3, 0x0, 0xfffffdef) ppoll$auto(&(0x7f0000000080)={0xffffffffffffffff, 0xe73, 0xbb}, 0x20, 0x0, &(0x7f0000000100)={0x6}, 0x8) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) socket(0x1e, 0x4, 0x0) socket(0x1e, 0x4, 0x0) socket(0x10, 0x2, 0x0) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_ftrace_set_event_notrace_pid_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/set_event_notrace_pid\x00', 0x141f02, 0x0) r2 = socket(0x10, 0x2, 0x4) sendmsg$auto_THERMAL_GENL_CMD_TZ_GET_ID(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x14, 0x0, 0x221, 0x70bd2c, 0x25dfdbeb}, 0x14}, 0x1, 0x0, 0x0, 0x400c050}, 0x4000080) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c00000014"], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x400c000) write$auto(r2, &(0x7f0000000000)='-\x00', 0x2fb) socketpair$auto(0x1e, 0x2, 0x8000000000000000, 0x0) sendfile$auto(0x6, r1, 0x0, 0xfdef) r3 = open(&(0x7f00000001c0)='./cgroup\x00', 0x0, 0x6f) syz_clone3(&(0x7f0000000340)={0x3a0000080, 0x0, 0x0, 0x0, {0xb}, 0x0, 0x0, 0x0, 0x0, 0x0, {r3}}, 0x58) 4m53.05909281s ago: executing program 3 (id=22): openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptyba\x00', 0x80002, 0x0) mmap$auto(0x0, 0x0, 0xdf, 0x9b72, 0x7, 0x28000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) fcntl$auto(0x2, 0x401, 0x80000001) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mmap$auto(0x0, 0x2000b, 0x4000000000df, 0xeb1, 0x401, 0x8000) socket(0x2, 0x1, 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) capset$auto(0xfffffffffffffffe, 0xfffffffffffffffc) ioctl$auto(0x3, 0x5411, 0x38) r0 = getpid() capset$auto(&(0x7f0000000040)={0xfffffff9, r0}, &(0x7f0000000080)={0x4, 0x9, 0x69c7}) 4m52.0987728s ago: executing program 3 (id=24): r0 = open(&(0x7f0000000340)='./file0\x00', 0x2a4c0, 0x20) openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000005280), 0x40400, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0x317, 0x401, 0x8000) madvise$auto(0x0, 0x2000040080000004, 0xe) mmap$auto(0x0, 0xfff, 0xdf, 0x9b72, 0x400, 0x28000) rseq$auto(&(0x7f0000000300)={0x0, 0x9, 0x0, 0x4, 0xffffffff, 0xfffffffe}, 0x8000, 0x0, 0x3) shmdt$auto(0x0) madvise$auto(0x4000000000000000, 0x4, 0x15) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) semctl$auto(0x1ff, 0x2, 0x13, 0x1) bind$auto(0x3, 0x0, 0x76) connect$auto(0x3, 0x0, 0x55) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x8000000000000000, 0x15) timerfd_settime$auto(0xffffffffffffffff, 0xfffff000, 0x0, 0x0) rt_sigqueueinfo$auto(0x1, 0x7, &(0x7f0000000040)={@siginfo_0_0={0x0, 0x5, 0xfffffffb, @_sigpoll={0x52, 0x7}}}) readv$auto(0x2, &(0x7f0000000140)={0x0, 0x3}, 0x4548) chmod$auto(&(0x7f00000000c0)='./file0\x00', 0xf4ba) execve$auto(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) execve$auto(&(0x7f0000000080)='./file0\x00', &(0x7f0000000240)=&(0x7f0000000200)='team_slave_1\x00', 0x0) execve$auto(&(0x7f0000000100)='./file0\x00', &(0x7f00000002c0)=&(0x7f0000000280)='team_slave_1\x00', &(0x7f0000000000)=&(0x7f0000000180)='{\xff\xffcv\x14QP=qj\xca\x1cB0\xcf\x02Z\x9b\xb2\xf5\b=#t\xbfAe\xd2\x92?~\x1chD\x15\x00\xf6\f\xf3\xc8\x12\xd1S\xb1\xe3-\xa0\xb7\xef\x91\xa29KAN\xae.\xb9-\xa6*d\xa7\xa4\xc6\x93p\xf1,\tn$\xb2\xa39`6\xf4)\xca\xf0\xca\xaaeo') mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) io_uring_setup$auto(0x1, 0x0) futex$auto(0x0, 0x6, 0x8, 0x0, 0x0, 0xffffffd6) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) tkill$auto(0x1, 0x7) cachestat$auto(r0, 0x0, 0x0, 0x9) 4m50.512469819s ago: executing program 3 (id=33): r0 = open(&(0x7f0000000000)='./file0\x00', 0x261c2, 0x84) bpf$auto(0x2, &(0x7f00000001c0)=@raw_tracepoint={0x5, r0, 0x0, 0x3}, 0xc) write$auto_trace_options_fops_trace(r0, &(0x7f00000000c0)="ed69a2127cd8f5518e5f5798c9ae63e4d57e370d27a1f6714d42775453b9e26a3b6224298fd14f08ab2c3223c2e70a396ce3365806a7c0f9f6b6e9ae61a4dd7e62252ff76bdc1054d7d3aeb7632d3fecad3a11bbad4b2a4b5d2bb546a3a079c0c38b7573c17373321cd6b4bd374f114a6545e584c63aedac4e2a9a057256095a49b37e36d564a4e0dbff61bff222331b85b0b2a55fbc357595f73ae34a8e45324e5cdc97aab000089f6067765d924ffb09526f43d79b59f88f4a32f60feddac1d46026b69b2f725e57efcf97", 0xcc) openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000700)='/dev/binderfs/binder0\x00', 0x0, 0x0) r1 = openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x1000, 0x0) mmap$auto_tracing_buffers_fops_trace(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x8e051, r1, 0x0) 4m50.138185541s ago: executing program 32 (id=33): r0 = open(&(0x7f0000000000)='./file0\x00', 0x261c2, 0x84) bpf$auto(0x2, &(0x7f00000001c0)=@raw_tracepoint={0x5, r0, 0x0, 0x3}, 0xc) write$auto_trace_options_fops_trace(r0, &(0x7f00000000c0)="ed69a2127cd8f5518e5f5798c9ae63e4d57e370d27a1f6714d42775453b9e26a3b6224298fd14f08ab2c3223c2e70a396ce3365806a7c0f9f6b6e9ae61a4dd7e62252ff76bdc1054d7d3aeb7632d3fecad3a11bbad4b2a4b5d2bb546a3a079c0c38b7573c17373321cd6b4bd374f114a6545e584c63aedac4e2a9a057256095a49b37e36d564a4e0dbff61bff222331b85b0b2a55fbc357595f73ae34a8e45324e5cdc97aab000089f6067765d924ffb09526f43d79b59f88f4a32f60feddac1d46026b69b2f725e57efcf97", 0xcc) openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000700)='/dev/binderfs/binder0\x00', 0x0, 0x0) r1 = openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x1000, 0x0) mmap$auto_tracing_buffers_fops_trace(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x8e051, r1, 0x0) 4m7.583255807s ago: executing program 4 (id=392): mmap$auto(0x0, 0x101, 0x4000000000df, 0xeb1, 0x200000401, 0x8000) r0 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) r1 = openat$auto_stat_fops_per_vm_kvm_main(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$auto_stat_fops_per_vm_kvm_main(r1, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$auto_NETDEV_CMD_QUEUE_GET(0xffffffffffffffff, &(0x7f0000003040)={0x0, 0x0, &(0x7f0000003000)={&(0x7f0000000040)={0x24, 0x0, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@NETDEV_A_QUEUE_ID={0x8, 0x1, 0x80}, @NETDEV_A_QUEUE_IFINDEX={0x8, 0x2, r2}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x20004080) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB='X'], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 4m7.491573818s ago: executing program 4 (id=394): mmap$auto(0xb4, 0x2020009, 0x5, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x0, 0xffffffffffff0001, 0x15) settimeofday$auto(&(0x7f0000000180)={0x100000001, 0x1}, 0x0) sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x48000}, 0x0) msgrcv$auto(0x4, 0x0, 0xffff, 0x8000000000000000, 0x3ff) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x3) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x3) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) getdents$auto(0x0, 0x0, 0x18) syz_open_procfs$namespace(0x0, 0x0) fcntl$auto(0x8000000000000001, 0x26, 0x8) r0 = socket(0x1a, 0x80000, 0xcd3) sendmsg$auto_ETHTOOL_MSG_MODULE_EEPROM_GET(r0, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f00000001c0)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x2000c081}, 0x2404c802) 4m6.3629892s ago: executing program 4 (id=407): r0 = getpgid(0xffffffffffffffff) (async) r1 = gettid() tkill$auto(r1, 0x7) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_OVS_DP_CMD_NEW(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYRES8=r3, @ANYRES16=r2, @ANYRES32=r3, @ANYRES32=0x4, @ANYRES32=r0, @ANYRESDEC=r2, @ANYBLOB="060001002e000000"], 0x2c}, 0x1, 0x0, 0x0, 0x801}, 0x0) (async) timer_create$auto(0x40008, &(0x7f0000000000)={@sival_ptr=&(0x7f0000000200)=[0x1000, 0x10001, 0x5, 0x7ff], 0x715, 0xf, @_tid=r1}, &(0x7f00000001c0)=0x200) (async) mmap$auto(0x3, 0x5, 0x3, 0xeb1, 0xc18, 0x8000) r4 = socket(0x2, 0x1, 0x0) getsockopt$auto(r4, 0x0, 0x43, 0x0, &(0x7f00000000c0)=0x1e) (async) recvmmsg$auto(0xffffffffffffffff, &(0x7f0000000140)={{0x0, 0x4, &(0x7f0000000080)={0x0, 0x4c0}, 0x5, 0x0, 0x200002}, 0x803}, 0xa, 0x10, 0x0) (async) ioperm$auto(0xfb, 0x5, 0xe) (async) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) (async) setreuid$auto(0x0, 0x20000000004) (async) faccessat2$auto(0x1, &(0x7f0000000000)='\x00', 0x2, 0x1000) r5 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x89b0, &(0x7f0000000140)={'bridge0\x00'}) (async, rerun: 32) mknodat$auto(0xffffffffffffffff, &(0x7f00000003c0)='./file0\x00', 0xfff, 0xfffffff8) (async, rerun: 32) mmap$auto(0x0, 0x400008, 0x8, 0x8b72, 0x182, 0x8000) mmap$auto(0x0, 0x400005, 0x400000000df, 0x9b72, 0x5, 0x7ffd) (async) r6 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYRES16=r6, @ANYBLOB="5cb04505669709e465251500000adb"], 0xfdef}, 0x1, 0x0, 0x0, 0x20000000}, 0x2000000) mprotect$auto(0x1ffff000, 0x8000000000000001, 0x4) r7 = socket(0x10, 0x2, 0xc) sendmsg$auto_CTRL_CMD_GETPOLICY(r7, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x2000000) (async, rerun: 32) mount$auto(&(0x7f0000000080)='pimreg1\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='P-(\x00', 0x0, &(0x7f0000000180)=[0x47, 0x401, 0x0, 0x1, 0x4]) (async, rerun: 32) kcmp$auto(0x1, 0x0, 0x4, 0x7ff, 0xe) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003ec, 0x14) 4m6.123722792s ago: executing program 4 (id=409): close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0xa, 0xdb, 0x12, 0x9, 0x8000) close_range$auto(0x2, 0x8, 0x0) mlockall$auto(0x8000000000000001) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket(0x2, 0x5, 0x0) mmap$auto(0x0, 0x8001, 0x3ff57696, 0x9b72, 0x2, 0x8000000000008000) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x5, 0x84) semctl$auto(0x2, 0x5, 0x13, 0x9) setsockopt$auto(0x3, 0x10000000084, 0xa, 0x0, 0x20) socket(0x1e, 0x1, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) getresuid$auto(0xfffffffffffffffc, 0xfffffffffffffffe, 0xfffffffffffffffc) mprotect$auto(0x1ffff000, 0x80fffd, 0x1) openat$auto_proc_timens_offsets_operations_base(0xffffffffffffff9c, &(0x7f0000000000), 0x309080, 0x0) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) 4m4.027854824s ago: executing program 4 (id=425): r0 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyz5\x00', 0x109040, 0x0) r1 = openat$auto_tracing_pipe_fops_trace(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/tracing/trace_pipe\x00', 0x40, 0x0) mmap$auto(0x1, 0x9, 0x3ff57699, 0x9b72, 0x4, 0x8000000000008000) (async) mmap$auto(0x1, 0x9, 0x3ff57699, 0x9b72, 0x4, 0x8000000000008000) tkill$auto(0x80000000000001, 0x7) (async) tkill$auto(0x80000000000001, 0x7) ptrace$auto(0x10, 0x10000000000001, 0xffffffffffffff56, 0x868f) close_range$auto(r0, r1, 0x1) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/midiC2D2\x00', 0x2041, 0x0) ioctl$auto_SNDRV_RAWMIDI_IOCTL_PARAMS(r2, 0xc0305710, &(0x7f0000000040)={0x0, 0x73d, 0x3, 0x1, 0xff, "50b82e6c92b172b4cfaaca8e"}) (async) ioctl$auto_SNDRV_RAWMIDI_IOCTL_PARAMS(r2, 0xc0305710, &(0x7f0000000040)={0x0, 0x73d, 0x3, 0x1, 0xff, "50b82e6c92b172b4cfaaca8e"}) socket(0x10, 0x2, 0x0) (async) r3 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r3, &(0x7f0000000080)={{0x0, 0x8002, &(0x7f00000002c0)={0x0, 0xc4}, 0x2, 0x0, 0x0, 0x1}, 0x5}, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000280)={'dummy0\x00', 0x0}) bpf$auto(0x0, &(0x7f00000000c0)=@bpf_attr_5={@target_ifindex=r5, 0xffffffffffffffff, 0x4, 0x1ff, 0xffffffffffffffff, @relative_fd, 0xe600}, 0x6) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'ip6gretap0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'ip6gretap0\x00', 0x0}) socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'syz_tun\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) syz_genetlink_get_family_id$auto_batadv(0x0, 0xffffffffffffffff) sendmsg$auto_BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x800}, 0x8040) (async) sendmsg$auto_BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x800}, 0x8040) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_PROTOCOL_FEATURES(r10, &(0x7f0000000640)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x840}, 0xc, &(0x7f0000000400)={&(0x7f0000000480)={0x140, r11, 0x800, 0x70bd2c, 0x25dfdbfe, {}, [@NL80211_ATTR_MLO_TTLM_ULINK={0x81, 0x149, "6e5d7581298af62072dccd12db439590d14ab9e472255c8c64ce81da20828631da79670086db7c646ca1f0c20959f93f3591145449132dd410489c649c9de7a33cf31ea62a04b43620d4f338f78062b0356d63e008e2d4f55dd9471eaca34faf71fe2d036523d71f22ea87e78027b713fae2cb0b275c927952174bd0de"}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x3c, 0xbd, "428d5dca4959d2b83afbf0c606fa68ccbc7d9d94b638bba01923a03c83c7b54e115e1a00c1a807ce71b08561af6cef0dd953f68889e7fba5"}, @NL80211_ATTR_S1G_CAPABILITY={0x5b, 0x128, "fadb13dc5e4bd6562c2e25ab52c869766f765efde6a5621402fd304064a1c7b19ac9670389e2921308d7aea815ae2233dbc62676cd763c3dd05c97d44cf1930ac635173645008fead83729a75c0974eb3c08e19d042e0a"}, @NL80211_ATTR_CONTROL_PORT={0x4}, @NL80211_ATTR_CNTDWN_OFFS_PRESP={0x9, 0xbb, "fbd2fd1923"}]}, 0x140}, 0x1, 0x0, 0x0, 0x4004005}, 0x4000000) sendmsg$auto_NL80211_CMD_GET_PROTOCOL_FEATURES(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r11, 0x2, 0x70bd2a, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x0) bpf$auto(0x0, &(0x7f0000000040)=@bpf_attr_5={@target_ifindex=r9, r8, 0x99, 0x8, 0x1, @relative_id=0x8, 0x5}, 0x92) (async) bpf$auto(0x0, &(0x7f0000000040)=@bpf_attr_5={@target_ifindex=r9, r8, 0x99, 0x8, 0x1, @relative_id=0x8, 0x5}, 0x92) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) r14 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f00000002c0)={'wlan1\x00', 0x0}) sendmsg$auto_NL80211_CMD_GET_INTERFACE(r12, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r13, @ANYBLOB="010029bd50009ddbdf251100000008000300", @ANYRES32=r15], 0x1c}, 0x1, 0x0, 0x0, 0x20018048}, 0x0) sendmsg$auto_NCSI_CMD_SET_CHANNEL_MASK(r3, &(0x7f0000000200)={&(0x7f0000000100), 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x34, 0x0, 0x10, 0x70bd26, 0x25dfdbfe, {}, [@NCSI_ATTR_IFINDEX={0x8, 0x1, r7}, @NCSI_ATTR_IFINDEX={0x8, 0x1, r9}, @NCSI_ATTR_CHANNEL_MASK={0x8, 0x8, 0x2}, @NCSI_ATTR_IFINDEX={0x8, 0x1, r15}]}, 0x34}, 0x1, 0x0, 0x0, 0x40800}, 0x801c) bpf$auto(0xfffff507, &(0x7f0000000300)=@query={@target_ifindex=r6, 0x6, 0x100, 0x800, 0x101, @count=0xa, 0x0, 0x0, 0x9, 0x8, 0x8}, 0xfffffffb) (async) bpf$auto(0xfffff507, &(0x7f0000000300)=@query={@target_ifindex=r6, 0x6, 0x100, 0x800, 0x101, @count=0xa, 0x0, 0x0, 0x9, 0x8, 0x8}, 0xfffffffb) 4m3.619959333s ago: executing program 4 (id=429): mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) fstat$auto(0x2, 0x0) close_range$auto(0x2, 0x8000, 0x0) r0 = socket(0xa, 0x2, 0x88) r1 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000280)='/sys/kernel/security/tomoyo/stat\x00', 0x8002, 0x0) ppoll$auto(&(0x7f00000000c0)={r1, 0xf94e, 0x3}, 0x5, 0x0, 0x0, 0x8) setresuid$auto(0x2, 0x7, 0x0) write$auto_adf_hb_cfg_fops_adf_heartbeat_dbgfs(r2, &(0x7f0000000180)="abc9f358550ba2ca69269d657b3e484c3d038c1953439d661392fb54e1e9f411fa6d6af47737c46ee7bed2a1e7650d5dfc23006a8cd0b929708de8fae2711c64b53e3315b06f1ade3f2534133fa586c61b2a33e14ea4a69bef95226cf032d4736b39fe65bf2092e79e9384a229eea3b830049e646ef5f48e018535329a021ec8a091ead1db6232e18174e9dbe8a4eacacc605938b83de446b3407bb754e4b1b5d794165808332a56360a", 0xaa) fstatfs$auto(r2, &(0x7f0000000400)={0x0, 0xa, 0x2, 0x9e, 0x7f, 0x6c4d, 0x3, {[0x400, 0x4]}, 0x7, 0x80000001, 0x8000, [0x8001, 0xff, 0x1, 0x65b]}) r3 = openat$auto_drm_crtc_crc_control_fops_drm_debugfs_crc(0xffffffffffffff9c, &(0x7f00000000c0), 0xb02, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)) lseek$auto(0x0, 0x4f, 0x1) getdents64$auto(0x0, 0xfffffffffffffffc, 0x131) write$auto_drm_crtc_crc_control_fops_drm_debugfs_crc(r3, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'vcan0\x00', 0x0}) sendmmsg$auto(r4, &(0x7f00000003c0)={{&(0x7f00000002c0)=[0x6, 0x3, 0x8, 0xfffffffffffffff7], 0x1, &(0x7f0000000340)={&(0x7f0000000300)=[0x9, 0x4, 0x4, 0x800, 0x8, 0x47], 0xd}, 0xa, &(0x7f0000000380)=[0x8, 0x9], 0x3, 0x5}, 0x3}, 0x0, 0x5) syz_genetlink_get_family_id$auto_nlctrl(&(0x7f0000000180), 0xffffffffffffffff) r6 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000010c0)='/dev/snd/controlC1\x00', 0x802, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(r6, 0xc1105517, &(0x7f0000000000)={{0x7, 0x0, 0x1, 0x7, "3112d585005a614d19e22af9ffb683dbede3d0bf828bbfba40f035f4be6b7fe5e2f94bd90484b0755015e48d", 0x7}, 0x3, 0x5, 0x4, 0x404, @integer={0x7, 0x5, 0x100}, "7a9fc199a16a2311eacf2fc7ae1da978dc3e8090334fdd73340238d212b6debe0ada71bdd70925450e24e87212f0bcab84a16f7ce8cbce0bb32777702b8d7c2d"}) bpf$auto(0x0, &(0x7f00000000c0)=@link_create={@map_fd=r2, @target_ifindex=r5, 0x5, 0xa8d, @netkit={@relative_id=0xffff, 0x49}}, 0x10) r7 = socket(0x2b, 0x1, 0x1) bpf$auto(0x4, &(0x7f00000001c0)=@raw_tracepoint={0x5, r7, 0x0, 0x3}, 0xc) 4m3.307031189s ago: executing program 33 (id=429): mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) fstat$auto(0x2, 0x0) close_range$auto(0x2, 0x8000, 0x0) r0 = socket(0xa, 0x2, 0x88) r1 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000280)='/sys/kernel/security/tomoyo/stat\x00', 0x8002, 0x0) ppoll$auto(&(0x7f00000000c0)={r1, 0xf94e, 0x3}, 0x5, 0x0, 0x0, 0x8) setresuid$auto(0x2, 0x7, 0x0) write$auto_adf_hb_cfg_fops_adf_heartbeat_dbgfs(r2, &(0x7f0000000180)="abc9f358550ba2ca69269d657b3e484c3d038c1953439d661392fb54e1e9f411fa6d6af47737c46ee7bed2a1e7650d5dfc23006a8cd0b929708de8fae2711c64b53e3315b06f1ade3f2534133fa586c61b2a33e14ea4a69bef95226cf032d4736b39fe65bf2092e79e9384a229eea3b830049e646ef5f48e018535329a021ec8a091ead1db6232e18174e9dbe8a4eacacc605938b83de446b3407bb754e4b1b5d794165808332a56360a", 0xaa) fstatfs$auto(r2, &(0x7f0000000400)={0x0, 0xa, 0x2, 0x9e, 0x7f, 0x6c4d, 0x3, {[0x400, 0x4]}, 0x7, 0x80000001, 0x8000, [0x8001, 0xff, 0x1, 0x65b]}) r3 = openat$auto_drm_crtc_crc_control_fops_drm_debugfs_crc(0xffffffffffffff9c, &(0x7f00000000c0), 0xb02, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)) lseek$auto(0x0, 0x4f, 0x1) getdents64$auto(0x0, 0xfffffffffffffffc, 0x131) write$auto_drm_crtc_crc_control_fops_drm_debugfs_crc(r3, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'vcan0\x00', 0x0}) sendmmsg$auto(r4, &(0x7f00000003c0)={{&(0x7f00000002c0)=[0x6, 0x3, 0x8, 0xfffffffffffffff7], 0x1, &(0x7f0000000340)={&(0x7f0000000300)=[0x9, 0x4, 0x4, 0x800, 0x8, 0x47], 0xd}, 0xa, &(0x7f0000000380)=[0x8, 0x9], 0x3, 0x5}, 0x3}, 0x0, 0x5) syz_genetlink_get_family_id$auto_nlctrl(&(0x7f0000000180), 0xffffffffffffffff) r6 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000010c0)='/dev/snd/controlC1\x00', 0x802, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(r6, 0xc1105517, &(0x7f0000000000)={{0x7, 0x0, 0x1, 0x7, "3112d585005a614d19e22af9ffb683dbede3d0bf828bbfba40f035f4be6b7fe5e2f94bd90484b0755015e48d", 0x7}, 0x3, 0x5, 0x4, 0x404, @integer={0x7, 0x5, 0x100}, "7a9fc199a16a2311eacf2fc7ae1da978dc3e8090334fdd73340238d212b6debe0ada71bdd70925450e24e87212f0bcab84a16f7ce8cbce0bb32777702b8d7c2d"}) bpf$auto(0x0, &(0x7f00000000c0)=@link_create={@map_fd=r2, @target_ifindex=r5, 0x5, 0xa8d, @netkit={@relative_id=0xffff, 0x49}}, 0x10) r7 = socket(0x2b, 0x1, 0x1) bpf$auto(0x4, &(0x7f00000001c0)=@raw_tracepoint={0x5, r7, 0x0, 0x3}, 0xc) 1m34.764883454s ago: executing program 5 (id=1452): mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0x8, 0x0) chdir$auto(&(0x7f0000000000)='}[,&*}\x00') mprotect$auto(0x0, 0x6, 0x0) setuid$auto(0x800000000008) ioprio_set$auto(0x2, 0x800000000, 0x8) umount2$auto(&(0x7f0000000040)='.\x00', 0x4) r0 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) ioctl$auto_UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, &(0x7f0000000080)={r0, 0x4, 0x2, 0x7}) setns(r1, 0x80) ioctl$auto_DMA_HEAP_IOCTL_ALLOC(r0, 0xc0505405, 0x0) 1m34.671586132s ago: executing program 5 (id=1454): r0 = openat$auto_ubi_ctrl_cdev_operations_ubi(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) setresuid$auto(0x0, 0x7, 0x8080) close_range$auto(0x0, 0xfffffffffffff000, 0x2) listen$auto(r0, 0x6) mlockall$auto(0x7) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) socket(0xa, 0x2, 0x0) r1 = socket(0x1e, 0x1, 0x0) getsockopt$auto(0x4, 0x6, 0x6, 0xfffffffffffffffc, 0x0) memfd_create$auto(&(0x7f0000000040)='A^^\x02\x00\xef\x97\x8aY\x00\x00\xd2\x8c\xb05\x03\\\xb2\xbf247{\xde\t8\f\x00\x00\v\x00\x82\xcc\"K\xe1IIT\x00'/54, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_smc_pnetid(&(0x7f0000000540), r1) socket(0x2b, 0x1, 0x1) socket(0x2b, 0x1, 0x1) r3 = openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0) ioctl$auto_RTC_RD_TIME(r3, 0x80247009, &(0x7f00000000c0)={0x3ff, 0x1527, 0xfffffff7, 0x2, 0x5, 0x6, 0x101, 0xfc, 0x40}) r4 = syz_clone(0x2000, &(0x7f0000000080)="9a6e5741322685551ef014e33c7fb851665c50f405f4ab65f7cde60f89ea7b701902d654cfce61a976744321b15dba46cd0f15", 0x33, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)="13f0160170f2cfdc0d4071c3862d83f6b600783d88ff4abe7f7a9f764f05e17c5008f820088f17882affb8a9f469bf942723f2e58c1cbaf2fa257f49dca1f2fbf0a87a4b5827b367b02f484a64bc75ea54d48fc2ad6e0986aae8f0190d56be852afb957c436a0cca5bcb8a1677650a47b5de6cbab25457ce1f80842e5153b75e6785d7b1367a4739df7aeeaf37d7706419f3f276d651096880182be7cce5ac0247554858e7ef30b725f5") statx$auto(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', 0xde, 0x7, &(0x7f0000000240)={0x6, 0x8, 0x1ff, 0x4, 0xee00, 0xee01, 0xfff9, 0x1, 0x4, 0x30, 0x7, 0x40, {0x0, 0xf2b}, {0x5, 0x5}, {0x5, 0xd}, {0x9, 0x67b86e7e}, 0x1, 0x8, 0x101, 0x2, 0xec, 0x1, 0x9, 0xfffffffffffffffa, 0x7, 0x3, 0xffffffff, 0x670, [0x2800, 0x4, 0x3, 0x3d6f00000000, 0x6, 0x0, 0xa2, 0xca, 0x81]}) r6 = openat$auto_nsim_nexthop_bucket_activity_fops_fib(0xffffffffffffff9c, &(0x7f0000000480)='/sys/kernel/debug/netdevsim/netdevsim5/fib/nexthop_bucket_activity\x00', 0x50401, 0x0) sendfile$auto(r2, r6, &(0x7f0000000500)=0x7, 0xf) waitid$auto(0x2, 0x80000000, &(0x7f0000000340)={@siginfo_0_0={0x6, 0x1, 0x5, @_rt={r4, r5, @sival_int=0x1}}}, 0xfffffffa, &(0x7f00000003c0)={{0x8, 0x8001}, {0x5, 0x7}, 0x10001, 0xd, 0x8, 0x140000, 0x70, 0x6, 0x8, 0x12aa, 0x0, 0x9, 0x5, 0xfffffffffffffffd, 0x2809, 0x5}) listen$auto(0x3, 0x81) ioctl$auto(0x3, 0x894b, 0x38) ioctl$auto_UBI_IOCATT(r0, 0x40186f40, 0x0) 1m34.395762506s ago: executing program 5 (id=1458): r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp1\x00', 0x20b42, 0x0) write$auto_snd_pcm_oss_f_reg_pcm_oss(r0, &(0x7f0000000280)="c2", 0x1) ioctl$auto_SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000080)=0x10000) openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mtd0\x00', 0x8080, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/kallsyms\x00', 0x12d040, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socket(0x10, 0x80002, 0x0) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000640), 0xffffffffffffffff) read$auto(0x3, 0x0, 0x7) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) prctl$auto(0x23, 0xb, 0x7ffffffeefff, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) mprotect$auto(0x1ffff000, 0x8000000000000001, 0xd) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid\x00') mmap$auto(0xd, 0xe0, 0x5, 0x7fff, 0x6, 0x3) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x1, 0x1, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8002) r1 = open(&(0x7f0000000000)='./cgroup\x00', 0x0, 0x64) ioctl$auto(0xc8, 0x400454c8, 0x5c8d) getdents64$auto(r1, &(0x7f0000000040)={0x1d6c, 0x1000000000, 0x2, 0x25, ']'}, 0x7) fchdir$auto(r1) mkdir$auto(&(0x7f0000004440)='./file0\x00', 0x1) mkdir$auto(0x0, 0x9) 1m33.88082903s ago: executing program 5 (id=1464): r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x28242, 0x0) ioctl$auto_SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000000)=0xe) ioctl$auto_SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000200)=0x1000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r1 = socket(0xa, 0x3, 0x5) futex$auto(0x0, 0x6, 0x47, 0x0, 0x0, 0x0) setsockopt$auto(0x3, 0x1, 0x41, 0x0, 0x88) read$auto(0x3, 0x0, 0x80) sendmmsg$auto(r1, &(0x7f0000000180)={{&(0x7f0000000040), 0xc88, 0x0, 0x0, 0x0, 0x8, 0x80000000}, 0x5}, 0x3b8b, 0xa) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000040), 0xffffffffffffffff) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ram6\x00', 0xee380, 0x0) readv$auto(0x3, &(0x7f00000001c0)={0x0, 0x7fffffffefff}, 0x7) pwrite64$auto(0xc8, &(0x7f0000000180)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x86\xdde\x1cJ\x99\x00\x00/\x00\x00\x00\xfd\xfdX\xd3\x1d\xf8\xbebZ\xddL\x01\x00\x00\x00^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x88\v\xae\xa9i8W\xe5\x00!\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2E\xd8?\'\x8dg\x81K*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00,,\x93\xba\x88\x93\xc6#\xe5\xaae\x9d\xb6\x1a\x7f\xc0%\xb0\rfOJ+\x02\x9b#)\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd0\xbdn\x1d\x00\xeb]B\xa0\x99/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\xde8\xf7\xc1\xa6\xf2\xc1\"\xact\xee\xc9\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00v\xd9\xe5H.-\x14\xee\xbc\xae\xe1\x85\xb2b\xd42\x89\x05e\x03z\xe6q\xcd\x91\tM\xd2\x90\xc91\xd9\x86\xe4\x8e\x0fI\xf0b2\nfa\xb8\x1a\xdb\xaa0P\xca\xb2W\xe3\x14\xb9Cx\x0e4\xc9\xb4\xdc4\xe3\x8f\x1c\xa5\x89\x8d\x84V\x97dg \x9f\xcd\x8fA\x16\x01\xc5.\x7fG\x86L\xa4\xd6h\xea\x11x\xce\x96t\xc7~# )\x8c6\x06\xd7\xfcu\x8c{t\xa5\x92JW\x8b\xb3Oj%\xb5H\x91F\x1b\x01\xef\x0e\xc5\xac\xcfK\xd5\x98\xce\xd6?\t\xa8\xb7\xce\x87\xdb\xb0\xaa\x8al8qF\re\xa7\xda\x1f\x9ad\b!\xddBD\xd9', 0x40, 0x1000) connect$auto(0xffffffffffffffff, &(0x7f00000000c0)=@l2tp={0x2, 0x0, @private=0xa010100, 0x1}, 0x1002) socket(0x27, 0x80000, 0xa) r4 = openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/lru_gen_full\x00', 0x4000, 0x0) clone$auto(0xfffffffffffffff1, 0x1, &(0x7f0000000140)=0x3, &(0x7f0000000a00)=0x16, 0x8) write$auto_lru_gen_rw_fops_vmscan(r4, &(0x7f0000000340)="78d8394c0c22ca5e643ef9dd81a26535af6312eb1e5496ebcfd800a58db7aee5bd3ec4425ae47aa9881bae11e969668aa929809d5da06f46258319f2b134b02b201788dd50431dd6ec7a0ba10239a1f0f3cac64d875d907b6edb8defc01f", 0x5e) sendto$auto(0x3, 0x0, 0x18, 0x101, 0x0, 0x1c) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)={0x60c, r3, 0x2, 0x70bd2b, 0x25dfdbfe, {}, [@HWSIM_ATTR_RADIO_NAME={0x43, 0x11, ' \x87B\xfeP\x04\x00\x00\x00\x00\xe4\x1d\x00x$\xe5\xc1\x9b\xfd\x14\x8bY\xb5\xcb]\x1f\x1cR&\xf1vO|\x87\xab\x822\x01E\xea\x00\x00\x00\xf9\xb1O\x8e\xf6-`r~\x86\xf0\x00\x00\x00\x00\x00\x00\x00\x00\x00'}, @HWSIM_ATTR_FRAME={0x5b4, 0x3, "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"}]}, 0x60c}, 0x1, 0x0, 0x0, 0x801}, 0x4044820) 1m33.492555123s ago: executing program 5 (id=1467): r0 = openat$auto_ptdump_curknl_fops_(0xffffffffffffff9c, &(0x7f0000000000), 0x6e4180, 0x0) read$auto_ptdump_curknl_fops_(r0, &(0x7f0000000040)=""/56, 0x38) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000000c0), r1) r4 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000001340), r1) sendmsg$auto_L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000001400)={&(0x7f0000001300)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000013c0)={&(0x7f0000001380)={0x40, r4, 0x10, 0x70bd2c, 0x25dfdbfe, {}, [@L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @local}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x800}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, 0xffffffff}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e20}]}, 0x40}, 0x1, 0x0, 0x0, 0x8001}, 0x4000005) sendmsg$auto_NL80211_CMD_GET_SURVEY(r2, &(0x7f0000002780)={0x0, 0x0, &(0x7f0000002740)={&(0x7f0000000040)={0x14, r3, 0x73d, 0x70bd25, 0x25dfdbfe}, 0x14}}, 0x8010) openat$auto_nodes_fops_netdebug(0xffffffffffffff9c, 0x0, 0x101100, 0x0) io_uring_setup$auto(0x28000, &(0x7f0000000040)={0x6813823a, 0x4, 0x5, 0x4, 0x7, 0x1, 0xffffffffffffffff, [0x3, 0x8, 0x3], {0x5, 0x6ef4cee8, 0x7, 0x5, 0xc, 0x800, 0x8, 0x3, 0x8}, {0x0, 0xef, 0x0, 0x4, 0x8, 0xfffffffb, 0xfffffff9, 0xb1, 0x800}}) open(&(0x7f0000000000)='./file0\x00', 0xa61c2, 0x84) execve$auto(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) mprotect$auto(0x1ffff000, 0x8000000000000001, 0xd) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) io_uring_setup$auto(0x1, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) tkill$auto(0x1, 0x7) mount$auto(&(0x7f0000000000)='pimreg\x00', &(0x7f0000000040)='\x00', 0x0, 0x1000, 0x0) mmap$auto(0x0, 0x20006, 0xdf, 0xeb1, 0x401, 0x8000) r6 = openat$dir(0xffffffffffffff9c, 0x0, 0x8c1, 0x80) move_mount$auto(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', r6, 0x0, 0x140) close_range$auto(0x2, 0x8, 0xfffffffd) socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$auto_ipvs(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$auto_IPVS_CMD_DEL_DAEMON(r5, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0x24, r7, 0x4, 0x70bd2d, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4091}, 0x20000011) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000003040), r8) r10 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000040)={'netdevsim0\x00', 0x0}) sendmsg$auto_ETHTOOL_MSG_CHANNELS_SET(r8, &(0x7f0000003140)={0x0, 0x0, &(0x7f0000003100)={&(0x7f0000003080)={0x30, r9, 0x1, 0x70bd25, 0x25dfdbfb, {}, [@ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0x1}, @ETHTOOL_A_CHANNELS_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}]}, @ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0x6}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000004}, 0x20008800) 1m32.854048369s ago: executing program 5 (id=1468): mmap$auto(0x0, 0x5, 0x2, 0x40eb2, 0x401, 0x300000000000) socket(0x2, 0x801, 0x106) connect$auto(0x3, &(0x7f0000000240), 0x6) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_stat_fops_per_vm_kvm_main(0xffffffffffffff9c, &(0x7f0000004080)='/sys/kernel/debug/zswap/pool_total_size\x00', 0x103002, 0x0) read$auto(r0, &(0x7f0000000000)='#.&\x00', 0xc1) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0xa, 0x8000) capget$auto(0x0, 0xfffffffffffffffe) socket(0xa, 0x2, 0x88) mmap$auto(0x0, 0x40009, 0x3, 0x9b72, 0x7, 0x28000) socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_NETDEV_CMD_QUEUE_GET(0xffffffffffffffff, &(0x7f0000003040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20040004}, 0x20008810) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) r1 = socket(0xa, 0x1, 0x109) pwrite64$auto(0xc8, 0x0, 0xfdef, 0x3) openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) setsockopt$auto(r1, 0x0, 0xf1, 0x0, 0x9) capset$auto(0x0, 0x0) r2 = openat$auto_nvram_misc_fops_nvram(0xffffffffffffff9c, &(0x7f00000003c0), 0x80, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) io_uring_setup$auto(0x40000002c55, 0x0) madvise$auto(0x0, 0x20200, 0x15) socket(0x1d, 0x2, 0x7) recvmmsg$auto(0x4, 0x0, 0x9, 0xe, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ovs_packet(0x0, r3) ioctl$auto_NVRAM_SETCKS(r2, 0x7041, 0x3c) mremap$auto(0x0, 0x4, 0x4, 0x7, 0x100000000) 1m32.339635921s ago: executing program 34 (id=1468): mmap$auto(0x0, 0x5, 0x2, 0x40eb2, 0x401, 0x300000000000) socket(0x2, 0x801, 0x106) connect$auto(0x3, &(0x7f0000000240), 0x6) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_stat_fops_per_vm_kvm_main(0xffffffffffffff9c, &(0x7f0000004080)='/sys/kernel/debug/zswap/pool_total_size\x00', 0x103002, 0x0) read$auto(r0, &(0x7f0000000000)='#.&\x00', 0xc1) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0xa, 0x8000) capget$auto(0x0, 0xfffffffffffffffe) socket(0xa, 0x2, 0x88) mmap$auto(0x0, 0x40009, 0x3, 0x9b72, 0x7, 0x28000) socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_NETDEV_CMD_QUEUE_GET(0xffffffffffffffff, &(0x7f0000003040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20040004}, 0x20008810) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) r1 = socket(0xa, 0x1, 0x109) pwrite64$auto(0xc8, 0x0, 0xfdef, 0x3) openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) setsockopt$auto(r1, 0x0, 0xf1, 0x0, 0x9) capset$auto(0x0, 0x0) r2 = openat$auto_nvram_misc_fops_nvram(0xffffffffffffff9c, &(0x7f00000003c0), 0x80, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) io_uring_setup$auto(0x40000002c55, 0x0) madvise$auto(0x0, 0x20200, 0x15) socket(0x1d, 0x2, 0x7) recvmmsg$auto(0x4, 0x0, 0x9, 0xe, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ovs_packet(0x0, r3) ioctl$auto_NVRAM_SETCKS(r2, 0x7041, 0x3c) mremap$auto(0x0, 0x4, 0x4, 0x7, 0x100000000) 6.348576232s ago: executing program 0 (id=2041): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000000), r0) process_mrelease$auto(0xffffffffffffffff, 0x7fffffff) mremap$auto(0x2f85, 0xe9, 0x4, 0x7, 0x7) r2 = syz_genetlink_get_family_id$auto_tcp_metrics(&(0x7f0000000080), r0) sendmsg$auto_TCP_METRICS_CMD_GET(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1010000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x98, r2, 0x810, 0x70bd28, 0x25dfdbff, {}, [@TCP_METRICS_ATTR_ADDR_IPV6={0x14, 0x2, @private1}, @TCP_METRICS_ATTR_SADDR_IPV4={0x8, 0xb, @multicast1}, @TCP_METRICS_ATTR_ADDR_IPV6={0x14, 0x2, @mcast2}, @TCP_METRICS_ATTR_ADDR_IPV4={0x8, 0x1, @multicast1}, @TCP_METRICS_ATTR_SADDR_IPV4={0x8, 0xb, @private=0xa010102}, @TCP_METRICS_ATTR_SADDR_IPV6={0x14, 0xc, @private1={0xfc, 0x1, '\x00', 0x1}}, @TCP_METRICS_ATTR_SADDR_IPV6={0x14, 0xc, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @TCP_METRICS_ATTR_SADDR_IPV6={0x14, 0xc, @local}, @TCP_METRICS_ATTR_ADDR_IPV4={0x8, 0x1, @multicast2}]}, 0x98}, 0x1, 0x0, 0x0, 0x4}, 0xc80) sendmsg$auto_NL802154_CMD_SET_CHANNEL(r0, &(0x7f00000002c0)={&(0x7f0000000200), 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x34, r1, 0x800, 0x70bd26, 0x25dfdbfb, {}, [@NL802154_ATTR_EXTENDED_ADDR={0xc, 0x17, 0x1000}, @NL802154_ATTR_IFNAME={0x14, 0x4, 'geneve0\x00'}]}, 0x34}}, 0x10) r3 = openat$auto_nodes_fops_netdebug(0xffffffffffffff9c, &(0x7f0000000300), 0x200000, 0x0) io_uring_setup$auto(0x2, &(0x7f0000000340)={0x0, 0xfffffc01, 0x0, 0x81, 0x518, 0x9, r3, [0xffff, 0x2, 0x536], {0x6, 0x10001, 0x3, 0x4, 0xfffffffa, 0x5, 0xfff, 0xe, 0xfffffffffffffffb}, {0x3, 0x8, 0x9, 0x5b2, 0x5, 0xfffffc01, 0x4, 0x401, 0x1}}) sendmmsg$auto(r3, &(0x7f0000000500)={{&(0x7f00000003c0)=[0x8, 0x5, 0xfffffffffffffffa, 0x6, 0x0, 0x3, 0xe], 0x8, &(0x7f0000000440)={&(0x7f0000000400)=[0xffff], 0x5}, 0x7f, &(0x7f0000000480)=[0x8, 0xd, 0x10000, 0x7, 0x3, 0x5, 0x7, 0x4, 0xdbf4], 0x9, 0x6}, 0xe2bc}, 0x4, 0xa6) ioctl$auto_USB_RAW_IOCTL_EP_CLEAR_HALT(r4, 0x4004550e, &(0x7f0000000540)=0x3) r5 = syz_genetlink_get_family_id$auto_nfc(&(0x7f00000005c0), r0) sendmsg$auto_NFC_CMD_DEACTIVATE_TARGET(r4, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, r5, 0x0, 0x70bd2a, 0x25dfdbff, {}, [@NFC_ATTR_LLC_PARAM_RW={0x5, 0x10, 0xd4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000001}, 0x2890) mremap$auto(0x5, 0x5, 0x6, 0x4, 0x5) copy_file_range$auto(r3, &(0x7f00000006c0), r3, &(0x7f0000000700)=0x400, 0x5, 0x6) madvise$auto(0x5, 0x6d, 0x7) pwritev2$auto(0x9, &(0x7f0000000780)={&(0x7f0000000740)=[0x0, 0x6, 0xffffffff, 0x80000000, 0x8001, 0xfd], 0xfffffffffffffffe}, 0x7fffffffffffffff, 0x3, 0xe, 0x9) r6 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/ptyz9\x00', 0x400, 0x0) write$auto(r3, &(0x7f0000000800)='&\x00', 0x315) ioctl$auto_MON_IOCX_GET(0xffffffffffffffff, 0x40189206, &(0x7f00000008c0)={&(0x7f0000000840)={0x6, 0x3, 0x7, 0x5, 0xc, 0x40, 0x3, 0x4, 0x7, 0x800, 0x2, 0x401, 0xff, @iso={0x7fff, 0x5}, 0x1000, 0x65, 0x4, 0x2}, &(0x7f0000000880)=[0x7d29, 0x9, 0x5], 0x9}) madvise$auto(0x6, 0x1ff, 0x9) bind$auto(r4, &(0x7f0000000900)=@isdn={0x22, 0x3, 0xd, 0x3}, 0x7f) ioctl$auto_VHOST_NET_SET_BACKEND(r4, 0x4008af30, &(0x7f0000000940)={0x8, r6}) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r7, &(0x7f0000000a40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x34, 0x0, 0x800, 0x70bd25, 0x25dfdbfe, {}, [@HWSIM_ATTR_RADIO_ID={0x8, 0xa, 0x2547}, @HWSIM_ATTR_IFTYPE_SUPPORT={0x8, 0x17, 0x1}, @HWSIM_ATTR_RADIO_NAME={0xe, 0x11, '@)%%.-}/#+'}]}, 0x34}, 0x1, 0x0, 0x0, 0x40004}, 0x40090) mprotect$auto(0x1, 0x100, 0xa04) read$auto(r3, &(0x7f0000000a80)='\\\x00', 0x4) sendmsg$auto_NL80211_CMD_NEW_KEY(r7, &(0x7f0000000b80)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x14, 0x0, 0x400, 0x70bd2d, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x4) madvise$auto(0x9, 0xa7, 0xffffff3e) write$auto_null_fops_mem(r4, &(0x7f0000000bc0)="00fe810f1dc7f82811333cd58963c41fc3111b480784aee578b82fd6ba302c0e4af26f08a363da2984fa0ea6493ee7634d97cdd8e62c1685d3c454d182a918c30f5812d6d70e11784f027d5b19ce0ad3b311178b88bf247a4c33bdeb79c723348c85bf6eb0f769b092d33c78984b6ced45a982614fbd21d7416f67e6dbe7757a453c660517f641ab13ff516f5b9f517ebde4977e0cbff52bd8bbb0fee81359ccbad9bd4286c6e718", 0xa8) ioctl$auto_TIOCSWINSZ2(r6, 0x5414, 0x0) 6.005712723s ago: executing program 0 (id=2046): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nbd(&(0x7f0000000080), r0) ptrace$auto(0xffffffffffffffff, 0x26f8, 0x9, 0x9) sendmsg$auto_NBD_CMD_RECONFIGURE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r1, 0x6b8c90062c2a8195, 0x70bd2d, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000) 5.65117241s ago: executing program 0 (id=2051): r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x4000, 0x0) kexec_load$auto(0x1, 0x7, &(0x7f00000000c0)={@kbuf=&(0x7f0000000080)=[0x2, 0xff9, 0x9, 0x4], 0x153, 0x6, 0x8000000000000000}, 0x4) read$auto_snd_pcm_oss_f_reg_pcm_oss(r0, &(0x7f0000000040)=""/58, 0x3a) ioctl$auto_SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000100)=0x7) 5.391505486s ago: executing program 0 (id=2055): clone$auto(0x4cd58981, 0x521, 0xfffffffffffffffc, 0xfffffffffffffffd, 0x0) mlockall$auto(0x8000000000000001) mlockall$auto(0x1) r0 = socket(0x10, 0x2, 0x0) openat$auto_kernel_debug_fops_orangefs_debugfs(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) r1 = syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_OVS_FLOW_CMD_GET(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x28, r1, 0x1, 0x70bd25, 0x25dfdc02, {}, [@OVS_FLOW_ATTR_PROBE={0x4}, @OVS_FLOW_ATTR_KEY={0x10, 0x1, 0x0, 0x1, [@nested={0xc, 0x10, 0x0, 0x1, [@typed={0x8, 0xb, 0x0, 0x0, @fd=r2}]}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x200400f0}, 0x800) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x8c60, 0x9, 0x3, 0xa, 0x998, 0x1ffde, 0x3, 0x2, 0x2, 0x9, 0x5, 0xffffffffffffffff, 0x7, 0xb2, 0x800000000000009, 0x2, 0x3, 0x5, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}, 0x7, 0x3) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f00000001c0), 0x7, 0xa505}, 0x800}, 0x7, 0x4008) mprotect$auto(0x1ffff000, 0x80fffd, 0x1) 3.361598665s ago: executing program 6 (id=2067): r0 = openat$auto_ftrace_system_enable_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/events/vmalloc/enable\x00', 0x401, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_ipvs(&(0x7f0000000040), 0xffffffffffffffff) statx$auto(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0xaaf, 0x9, &(0x7f0000000100)={0xc60, 0x6, 0x4, 0x0, 0x0, 0xee00, 0x4, 0xbd8f, 0x377721b8, 0x2c2, 0x5, 0x145, {0x1, 0x4}, {0x6, 0x4}, {0x0, 0x4}, {0x8000000000000000, 0xffffffff}, 0x5, 0x831b, 0xf, 0x3, 0x1, 0xae, 0x8, 0x3, 0x5, 0x8, 0x2, 0x1, [0x0, 0x0, 0x7, 0x3, 0x7fffffffffffffff, 0x0, 0x100, 0x451d, 0x81]}) mkdir$auto(&(0x7f0000000040)='./file0\x00', 0x2) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x8000, 0x70) mknodat$auto(r4, &(0x7f00000003c0)='./file0\x00', 0xfff, 0xfffffff8) renameat2$auto(r4, &(0x7f0000000200)='./file0\x00', r4, &(0x7f0000000240)='./file1\x00', 0x1) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x8000, 0x70) mknodat$auto(r5, &(0x7f00000003c0)='./file0\x00', 0xfff, 0xfffffff8) renameat2$auto(r5, &(0x7f0000000200)='./file0\x00', r5, &(0x7f0000000240)='./file1\x00', 0x2) r6 = geteuid() setreuid$auto(r6, 0x0) setuid$auto(r6) r7 = gettid() sendmsg$auto_IPVS_CMD_SET_DEST(r1, &(0x7f0000000800)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000200)={0x5a4, r2, 0x20, 0x70bd2b, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}, @IPVS_CMD_ATTR_DEST={0x1f, 0x2, 0x0, 0x1, [@nested={0xc, 0x109, 0x0, 0x1, [@typed={0x8, 0x2c, 0x0, 0x0, @u32=0x5}]}, @generic="a6006f", @nested={0xc, 0x32, 0x0, 0x1, [@typed={0x8, 0x10d, 0x0, 0x0, @fd=r0}]}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}, @IPVS_CMD_ATTR_SERVICE={0x4be, 0x1, 0x0, 0x1, [@typed={0xfd, 0x93, 0x0, 0x0, @binary="a08a96c61bb0b45b8fdf83d5d84854510e7c7076d90acbc63333a5013f81c63e5b334610a7043579fec7047ae5d150b00d2de67fd6370d29d74a1707e5b5d967221ac0e8c4c4d3719b40124bf403ee1bd0089f219e33f0c341630057f203710954394b88ef8d05f0c7b615b7729ff5b6de27785c87c8ed323556953485fc9e50c96280f57018eb9a0e7e8e97f73d1ab3118151af0d3340d93884e9f31d3d923a4a37c9f0c3e55a2737d245e60a8c40de6b5ecd3e1db774995478bcc731dc96790131eefce964a1ae6d2f442ba30c6907ca412635185383a4fef57a795476cfeb1c94e04350afa98d481e1e00a04c13e274d673188a44c5e9d0"}, @generic="478cfa9cecc9af59efb65fa8b93ee6cb2a9b1a82df020feeb2a296754850919aef2709cfdf755104e82e55ac5891dcd27d616e0565be46a784c26de060d686ee889d75607c63047e5410a813a8ac19d8e3c0c4acb5311487e10e8cf5c3e46d343dfe9775bfead1ab71915beaccec96207a8b427344995e01ad91ac3dfd58e4676ff071c47d1f897ba184859aef08318985ee5ac839b8ebef0e92", @typed={0xc, 0x5a, 0x0, 0x0, @u64=0x5}, @typed={0x14, 0x112, 0x0, 0x0, @ipv6=@private0={0xfc, 0x0, '\x00', 0x1}}, @generic="3aa2b7f3d63df824809016f68b55a767ad63d5b2cd34f4e6fb937a4b2027ab0acdbca32a0c769bbf839cf061f8cdefa87061", @nested={0x211, 0xf0, 0x0, 0x1, [@generic="ade9eb0ece5094a60c93269182f9b60561eb7feefbd787d9ed6a4033d0367a239eed7c9fc28634d03b3c9a1b49bfb965b836085d277f3d2e6f80bc8c7c857b7f7edfee4a921b6abc53a2bc8d8c53c5a45b270f4a706716197a85e9fb85f113796e578bc766e66f17c19261ce", @nested={0x4, 0x5d}, @generic="294eb3d57caed1531b49cfd7ff74962623cfa994759cd6f09ab52db253ec9b8c7fa4e199ab9fae438dfd8c5c8a4ea5a6ca5b4e9810a4273d6e4f2fd39b5b1ec204b94423641b32e865bad762c6506403a551b62e98adaa962980e10873", @generic="161395dc1f0ae8a3d3ee9d67427374928bb766d4392c5c7cc9d76be5ae1fa876b92ef4331827716025b4ba80d09c8c84a513562c01ca7a2708c643e9e81ec85b576d1973b7374fe868529d86f5093295e340393d4564c42295f3452a32c5b5b6ee9218abd6f99879580dd00c864d8e805dd98f68ef55f2f8788f58043b79e1d49a24269b529ff714d9faca56cd79223e28e2511baf93f0368dd7559811ae36dab15fa628e64c8a4d83a1ce9ec734518fee052031", @nested={0x4, 0x5}, @nested={0x4, 0xd9}, @typed={0x8, 0x5a, 0x0, 0x0, @uid=r3}, @generic="819fb016d9fec92dccada73c29e283506f628d59fa47c3bbb64dfb49e5fbc92aadf632b0fb14ca5c119d2efd781274c4f6d34604b668b1ddd8d9469b546e396370556d81faabc1519bbbf98b99b131051e2ec2f4fb0cdee2654f6f2885684f9ee148ba78be611fe71b68fa9f431429419f07a683", @typed={0x8, 0x34, 0x0, 0x0, @fd=r0}]}, @typed={0x8, 0x147, 0x0, 0x0, @uid=r6}, @generic="9e1c60b820a7f188bd3f272753dbfac539d0100189e7b4b0c914982a1c803cebdadf72dff28859d0e38355d3f1248decad5b75b00c7ce045f723e3b80b9e682746d52c641b039e4330a3870378b43618af18ddca73965d5b62125e59d074ef62977c5ee71018139edf629312fa62bb9c6cc322856a71e854d88be94ce9c14db78254739fc03fae96a60a8719341bfe363f3a440bfb3486d7330afe40e9380bdcfe2a8686f4efd1997c9f184e3383", @typed={0x4, 0x79}]}, @IPVS_CMD_ATTR_DAEMON={0x95, 0x3, 0x0, 0x1, [@generic="905010ab6db761d00d62dc9d93b3940ffccb99a1c7c4991aefce2cc3e2a928bcf47ce1728659299d5061a6060eceadc3482ae615e7c0bf6b56863a14da83ec0ad5120cf3073ffd813fa954872b65ee365a13a1f95883e44e9eb6f1794997d2b885c0b16c9b5b047e8c4bef9999630957fc695913c3c971de", @generic="67dddf1e446740990b", @typed={0x8, 0x6, 0x0, 0x0, @pid=r7}, @nested={0x8, 0x21, 0x0, 0x1, [@nested={0x4, 0x8e}]}]}]}, 0x5a4}, 0x1, 0x0, 0x0, 0x8010}, 0x1) openat$auto_event_trigger_fops_trace(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/tracing/events/vmalloc/alloc_vmap_area/trigger\x00', 0x1, 0x0) write$auto_ftrace_system_enable_fops_trace_events(r0, 0x0, 0x0) 3.150501609s ago: executing program 6 (id=2071): mmap$auto(0x0, 0xc, 0x3, 0x44eb2, 0x8, 0x300000000000) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) fanotify_init$auto(0x5, 0x2000000000002) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) r0 = openat$auto_userio_fops_userio(0xffffffffffffff9c, &(0x7f0000000980), 0x102001, 0x0) pwrite64$auto(r0, 0x0, 0x2, 0x0) getcwd$auto(0x0, 0xffffffffffffffff) ioctl$auto(0x4000000000000c8, 0x800454d3, 0x3) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x89fc, 0x0) openat2$dir(0xffffffffffffff9c, 0x0, &(0x7f0000000240)={0x80040, 0x80, 0x3}, 0x18) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_net_shaper(&(0x7f00000038c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000000080), r1) r5 = geteuid() r6 = syz_clone(0x800000, &(0x7f0000000100)="20e7ba89e301e69299d37ac87ae9fcd68226e9ae384955e6e7fe5aec45984ac421b9e95b5d5efdf3508b5474eaf39870ca70a062c8c5316a714dc52d1334550073f19dbc6c40ce64bcd35d8378b9f157d4d35206bc897eb68df6dcb820744818135ad1a2937194f30ba868d3d4635e068bdaef89eb5669bc85f4f777a51d3aa59ef2eaab01dcb5b2f423326514acd69b6baf68fe466dacb98b68c15f42b275278cf0880e5a", 0xa5, &(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000240)="039cde28f79fb107cb5701db1ee3ac79dc005b3049924c12855e8de3b26c23676cabc8b390715572b3834f2fe43c7c69ce6dc8713a42c63531c4f1c4633213e296381567c3bd70830962937e64562fcf33bd8b09c1dfe9eef4a5390688f668f326215cf69259a607be4cc73ca1d310442c15d4f86244721b84e0d05e32caa1c9f691814035b788eec1450cd681433d3bc37231fefaaf3ff80003ab524a94") sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r3, &(0x7f00000009c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000980)={&(0x7f0000000300)={0x59c, r4, 0x4, 0x70bd2a, 0x25dfdbfd, {}, [@OVS_PACKET_ATTR_ACTIONS={0x140, 0x3, 0x0, 0x1, [@nested={0x1c, 0x6f, 0x0, 0x1, [@nested={0x4, 0x8}, @nested={0x4, 0x8f}, @typed={0xf, 0x122, 0x0, 0x0, @str='net-shaper\x00'}]}, @nested={0x120, 0x148, 0x0, 0x1, [@typed={0x8, 0x7c, 0x0, 0x0, @uid=r5}, @typed={0x16, 0x60, 0x0, 0x0, @binary="7fe15128a29c4edcc57fff00711e9a4eb747"}, @nested={0x4, 0xdc}, @nested={0x4, 0xbd}, @generic="6e68f3854e5954e35a2220fbd4539f66c9a4427945ace536c8886cf49b9c654cf7c7712771d9d905c1d823c6b243521ea02b0d5293db231991ff7e2684d0e97edf1a647860cb7115bc5c302d11b78f363f1c68389ba24e731246628691b179bd84f3110db050544da67fc1ac39f4dbb788aafe9fdfc5626da401ccb6bf5ff863fb46887aeefae1836dd63669ba30a95b6810319bf25ae3540ea1d5dc7d25b741e5d67a8325bb88515aea017f065856bee59d58c33be6d26cbde251def9c958f964949e8afb5b829db1a7175db3003f9bbdc158fe4472d2fcb555f35a78650645d4ef1e97bfa212c2ff3dbbbfcf3b733a618bf2a0"]}]}, @OVS_PACKET_ATTR_ACTIONS={0x15c, 0x3, 0x0, 0x1, [@nested={0x150, 0x5a, 0x0, 0x1, [@generic="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", @nested={0x4, 0x27}, @generic="eb8f9096dd71e9c7e11c807117481a1228282a7b7782f632b3034567d13e6878f1470d2dcc9c940521d2a4dc5be088858f421af48e2a31412dfd497e0044b1d6e0ebc9875dcbf5c19e8bf0"]}, @typed={0xffffffffffffffec, 0x33, 0x0, 0x0, @ipv4=@loopback}]}, @OVS_PACKET_ATTR_ACTIONS={0x2df, 0x3, 0x0, 0x1, [@generic="d4cf4a0b4d268e6769243ef7230fb4ffc3ff76f70f7386dab7efb63c6c40758d520c3834954daaf7971e1bfab0b249f394e0a3c63dc01c05f08c8defebfaf289b7203c4ab397a4346eec81e52bc5ad59c574510e60ce2c9facc07221c5b39aeda7952f02c82d0008ea3f4229986187588861015d65e16b2d35ce3ed8fe813286a4c64e18e085a3a5e31b3ed0f651afcf32994c3973799b9194e0939abe0505b744", @generic="3f8a1beba5fa669fea758bec197b2390de3ecf80b0b305dc6b266d9c4e73384c250d7bab6e161357978907af408f9bd1c1e1a2df50954113772ff2d0f14d923ddc08dc197cb34d1dcba58d5184b4cc599727f9d3c16a0cc79733099448fdb36b03c28878b090e87909c30e39e7fe2b9eb028105055a0fc3855e888ff633f4d9e56f6a34204af80436e72a4f5a783f29bb01ea0de8eb4cd90c4d12adeeaeb68fa6e4c4b2c4e9808f8e2e0e98b0b3b016e3d7e9b7c7b9d9f692851b0a70ee45ffde3f734fcb5bd1f610277e28c94dcab5529efdba145ca8c7d12c0835240f26e9368b3", @nested={0x1c, 0xff, 0x0, 0x1, [@nested={0x4, 0x22}, @nested={0x4, 0x139}, @typed={0xf, 0x148, 0x0, 0x0, @str='netdevsim0\x00'}]}, @generic="0a4d38481c6880a1aa9a42daca42567780ea1d98e7dfddc57ee072a53a55046892e1e1aa324fa18f009666fa1fc48d4dfb84dd49a10cd6f13b3d5ffe56dc1b87ff38ad5c3c6bc36d7bad761799111bdc7d34f0c1af80173f2f666e482a59b71809d9c116f1dbd67b044c7154056b31de258c7a70dd162a95817a9ba074a387b586602e37f901c09c", @nested={0xa7, 0xb2, 0x0, 0x1, [@typed={0xa, 0xcc, 0x0, 0x0, @str='$\xa3%+#\x00'}, @nested={0x4, 0x24}, @generic="7169d2eceb6cfa8ba277053599cc1140a2d4e672bf60c43d305cb41833e4b9ab5484b8324f09f83df9206ea1ffecf2cbf7cf97e7bf23bb61bc7b59884bcbd0983d59bdf663ed2c6c5aefd4f1c272484b6725f0673774b1a2aec0a1a4c981fe107bad08001194507f6c501e8ba52bde", @typed={0x8, 0xf1, 0x0, 0x0, @pid=r6}, @generic, @nested={0x4, 0x5b}, @nested={0x4, 0xd7}, @typed={0x14, 0x75, 0x0, 0x0, @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}}]}, @typed={0xc, 0xcf, 0x0, 0x0, @u64=0x6}]}, @OVS_PACKET_ATTR_MRU={0x6, 0x9, 0x8}, @OVS_PACKET_ATTR_PROBE={0x4}]}, 0x59c}, 0x1, 0x0, 0x0, 0x40009}, 0x81) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'netdevsim0\x00', 0x0}) sendmsg$auto_NET_SHAPER_CMD_CAP_GET2(r1, &(0x7f0000003a00)={0x0, 0x0, &(0x7f00000039c0)={&(0x7f00000000c0)={0x1c, r2, 0x301, 0x70bd28, 0x25dfdbff, {}, [@NET_SHAPER_A_CAPS_IFINDEX={0x8, 0x1, r7}]}, 0x1c}}, 0x2) 2.965904786s ago: executing program 2 (id=2072): r0 = socket(0xa, 0x2, 0x0) socket(0x1d, 0x2, 0x7) connect$auto(r0, 0x0, 0x54) setsockopt$auto(0x3, 0x1, 0x10, 0x0, 0x9) connect$auto(0x3, &(0x7f0000000000), 0x55) mkdir$auto(&(0x7f00000001c0)='}[,&*}\x00', 0xc000) unshare$auto(0x40000080) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_OVS_DP_CMD_NEW(0xffffffffffffffff, 0x0, 0x80) socket$nl_generic(0x10, 0x3, 0x10) mq_open$auto(&(0x7f00000002c0)='\xe9\xe7\x1eT\xb5h\xca\x0eYd\xe8\xdc\xa83\xf4`\x06\xc3\x10\xfc\xe5\x97e&jd\x88K\xdcBUX\xe0\x1b\xd80z\x04\xbeL\x9a\xbc\xe6\xc684\xb3\xff\xff\xff\xff\x00\x00\x00\x00\x18\x94k\xb0\xa8s\x8e\xa49\xca\xa3G\xbe\xbeH\x0eg\x89\xd8Z\x90\xa0\xf3C\x14 \x92h\xeb@\xd5\xdcD\x18\'\'\x14Z3*Z\x04j\xcd\x9d\x84B\b\x12a\xa4WH\x03\xbc\xfdl\xe6\x86\xc8\x8d\xb8\xee\xd5\x0e\x03F\xd59\xf8;P?\x14\xb9#\xa6\xf3\xd2|\xce\xf4\x8ev\x1b\xadPi\xd9\xf0<\xfd\xe7\x1a{Y\x9a\xb4\x80Jd\xc2\xd3\xff\xe5^\xf0\xc5\xf9\xd8\a\xb7\xd8\xc2qbf\x91\xae\xe4\x92\xd98\xd8|\xda\xda\x13\x18\xf8k\xf1\xfe\xe4%\x91n\xda=\xf6\x06\x8f\xf1/\xd0\xaaB\x85\xb7\xa0!P\xfc\xe6\xf4\x1cs\x03:(\x11\x92T\xf1\xc0\xfc\x87\xde|\x17]\x7f|\xc6\n\x84[\xd6\xcd+dQ\x934\xba\xe4\xc70\xe3\xed\x96q\x84\t7\x80\x8b\xc5\x0e>\xeb\xd1\x9e\x986\x8e8\xb9r\x8d\x87\x9a\xef4Y\xee\xf5\b\xda\xb9\x9eO=\xf3tZR\xfb\x85\xe3Pt\x15\xe9.|\xe2\xf0\x17\xa4iL?\xf7\x94\xf47\xba\x9eL\x94\x03\xb5~\x98\x10B\xae\xaf\x03\x9aei\x9c`\xd9\xfe\xaf\xb2Y\'U\tt\x93\xd0(\x84Db&\x13\v\xb9\xedO\x87j', 0xdf, 0x10, 0x0) select$auto(0x3, 0x0, 0x0, 0x0, 0x0) socket(0x22, 0x2, 0x2) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0) keyctl$auto(0x9, 0xfffffffffffffffc, 0xfffffffffffffffd, 0x1, 0x3) r1 = socket(0x2b, 0x1, 0x1) listen$auto(0x3, 0x81) ioctl$sock_SIOCGIFINDEX(r1, 0x8905, 0x0) mmap$auto(0x3, 0x47, 0x9, 0x14, 0x3, 0x40000000028002) r2 = getuid() lstat$auto(&(0x7f0000000080)='}[,&*}\x00', &(0x7f00000000c0)={0x47c, 0x5, 0x400, 0xda77, 0xee00, 0xee01, 0x0, 0x21, 0x10001, 0x7, 0x2, 0x89f, 0x800, 0x101, 0x46a93147, 0x8, 0x800}) lstat$auto(&(0x7f0000000040)='}[,&*}\x00', &(0x7f0000000200)={0x80000001, 0x278, 0x1, 0xec, r2, r3, 0x0, 0xbe4d, 0x2, 0x7, 0x52, 0x3, 0xfff, 0x58fd, 0x4, 0x81, 0x1ff}) 2.794431711s ago: executing program 6 (id=2074): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffff7, 0x8000) kill$auto(0x0, 0x21) r0 = socket(0x2, 0x3, 0xa) connect$auto(r0, &(0x7f00000000c0), 0x55) sendto$auto(r0, 0x0, 0x3, 0x10000, &(0x7f0000000040), 0x0) futex$auto(0x0, 0x6, 0x47, 0x0, 0x0, 0x0) setsockopt$auto(0x3, 0x1, 0x41, 0x0, 0x8) keyctl$auto(0x14, 0xff, 0x7fffffffefff, 0x400, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0xa00) recvmmsg$auto(0x3, 0x0, 0xff, 0xba, 0x0) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYRESDEC], 0x3c}, 0x1, 0x0, 0x0, 0x4004040}, 0xc800) openat$auto_ima_measure_policy_ops_ima_fs(0xffffffffffffff9c, &(0x7f0000000040), 0x2dc08f24db163610, 0x0) writev$auto(0xca, &(0x7f0000000080)={&(0x7f00000000c0)=[0x404], 0x1}, 0x7e) 2.051606231s ago: executing program 2 (id=2078): ioperm$auto(0x7, 0x6, 0x2) mlockall$auto(0x7) select$auto(0x7, 0x0, &(0x7f0000000080)={[0x209c, 0xe9e, 0x4, 0x15, 0x1000, 0x47, 0xc, 0xf, 0x0, 0x0, 0xe, 0xd59, 0x101, 0xff, 0x2, 0x3]}, 0x0, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r0 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f00000001c0), 0x7, 0xa505}, 0x800}, 0x7, 0x4008) close_range$auto(0x2, r0, 0x0) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) socket$nl_generic(0x10, 0x3, 0x10) io_uring_setup$auto(0xa, 0x0) close_range$auto(0x2, 0xa, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x5, 0x0) setsockopt$auto(0x3, 0x10000000084, 0x14, 0x0, 0x4) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x1000) tee$auto(0x0, 0x5, 0xfffffffffffffff1, 0x4) ioperm$auto(0x1, 0x6, 0x14c) shmctl$auto(0x0, 0xf, &(0x7f0000000080)={{0x7, 0xee00, 0x0, 0x4, 0x2, 0x800, 0x6}, 0x2, 0xd, 0x0, 0x2, 0x4, 0x101, 0x4, 0x0, 0x0, 0x0}) dup$auto(0x1) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) clock_gettime$auto(0x1, 0x0) 1.835814129s ago: executing program 6 (id=2080): r0 = socket(0xa, 0x2, 0x88) bpf$auto(0x11, &(0x7f0000000140)=@bpf_attr_0={0x57, 0x6, 0xffff, 0x4, 0x5, 0xffffffffffffffff, 0x632, "3355508ce18e5347517a835d9eb9d8e2", 0x0, 0xffffffffffffffff, 0x7, 0x4, 0x18a, 0x6}, 0xcd) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000000200), r0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'ip_vti0\x00', 0x0}) bpf$auto(0x0, &(0x7f00000000c0)=@bpf_attr_5={@target_ifindex=r3, r2, 0x8000, 0x2, r0, @relative_id=0x13, 0x8969}, 0xf) timerfd_gettime$auto(r0, &(0x7f0000000000)={{0x5, 0x9}, {0x677, 0x9}}) r5 = openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/maps\x00', 0x21000, 0x0) connect$auto(r0, &(0x7f0000000080)=@isdn={0x22, 0x1, 0x1, 0x4, 0x4}, 0x4) r6 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000280), r1) sendmsg$auto_NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r4, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000400)={&(0x7f00000002c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="00042dbd7000fedbdf25380000000800350103000000f500550001e6c02559b667b8ac7afcb26410eadf7635e5a3d7ccdb511195a57bdeea221eadccb09dbdb785e097c67dbef879a2a884e66f2382caa86bfc517daf0487d4372596babcfc71ad6325cc8e17319984ffa982e65b084925f6c921e1e986e999551fde48365b4f80094bcf8e2ad78119e41678fa04f82e1f398d559a8802b7a95fb695fead066829bb3ee9d5dc8a9025f3c9b75cd832503d2fce070682584c921b50119b4dc79ca73817b9b33d9ebac1d62db5cd281905e3a25a5f8422da9205682bde97be7d47439cc4651bb550d47926e66e1232501f6f86994a143894442bf6decadfc6c904726ea8f4ae210f24f7d0180000001100fd0003e7649daee31d412637646483000000"], 0x128}, 0x1, 0x0, 0x0, 0x8040}, 0x40000) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) ioctl$auto_PPPIOCUNBRIDGECHAN(r5, 0xc0686611, 0x5) 1.774858439s ago: executing program 2 (id=2081): r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp1\x00', 0x20b42, 0x0) write$auto_snd_pcm_oss_f_reg_pcm_oss(r0, &(0x7f0000000280)="c2", 0x1) ioctl$auto_SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000080)=0x10000) openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mtd0\x00', 0x8080, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/kallsyms\x00', 0x12d040, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x10, 0x80002, 0x0) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000640), 0xffffffffffffffff) read$auto(0x3, 0x0, 0x7) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) prctl$auto(0x23, 0xb, 0x7ffffffeefff, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) mprotect$auto(0x1ffff000, 0x8000000000000001, 0xd) syz_open_procfs$namespace(0x0, 0x0) mmap$auto(0xd, 0xe0, 0x5, 0x7fff, 0x6, 0x3) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x1, 0x1, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8002) r1 = open(&(0x7f0000000000)='./cgroup\x00', 0x0, 0x64) ioctl$auto(0xc8, 0x400454c8, 0x5c8d) getdents64$auto(r1, &(0x7f0000000040)={0x1d6c, 0x1000000000, 0x2, 0x25, ']'}, 0x7) fchdir$auto(r1) mkdir$auto(&(0x7f0000004440)='./file0\x00', 0x1) mkdir$auto(0x0, 0x9) 1.307505518s ago: executing program 0 (id=2084): execve$auto(0x0, 0x0, 0x0) r0 = openat$auto_severities_coverage_fops_severity(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r1 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x2, 0x0) write$auto_tomoyo_operations_securityfs_if(r1, 0x0, 0x0) ppoll$auto(0x0, 0xd6, &(0x7f0000003640)={0x7fffffffffffffff, 0x489}, 0x0, 0x8) mprotect$auto(0x1ffff000, 0x8000000000000001, 0xd) connect$auto(0x3, 0x0, 0x55) dup3$auto(0xffffffffffffffff, r0, 0x10000) nanosleep$auto(&(0x7f0000000200)={0x7, 0xd}, &(0x7f0000000240)={0x6, 0x37dc12502000000}) timer_create$auto(0x2, 0x0, 0x0) syz_genetlink_get_family_id$auto_macsec(&(0x7f0000000a00), 0xffffffffffffffff) timer_settime$auto(0x0, 0x6, 0x0, 0x0) mount$auto(&(0x7f0000000000)='pimreg\x00', &(0x7f0000000040)='\x00', 0x0, 0x10dfd057, 0x0) 1.239529874s ago: executing program 2 (id=2085): mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) close_range$auto(0x0, 0xfffffffffffff000, 0x0) pipe2$auto(0x0, 0x80) inotify_rm_watch$auto(0xffffffffffffffff, 0x2) ioctl$auto(0x1, 0x5761, 0x40000000000004) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000800), r0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000940)={'ipvlan1\x00', 0x0}) sendmsg$auto_ETHTOOL_MSG_MODULE_EEPROM_GET(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000980)={0x48, r1, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@ETHTOOL_A_MODULE_EEPROM_PAGE={0x5}, @ETHTOOL_A_MODULE_EEPROM_BANK={0x5, 0x5, 0x6}, @ETHTOOL_A_MODULE_EEPROM_LENGTH={0x8, 0x3, 0x9}, @ETHTOOL_A_MODULE_EEPROM_OFFSET={0x8, 0x2, 0x4}, @ETHTOOL_A_MODULE_EEPROM_I2C_ADDRESS={0x5, 0x6, 0x6}, @ETHTOOL_A_MODULE_EEPROM_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0xc000) open(&(0x7f0000000040)='./file0\x00', 0x149443, 0x0) mprotect$auto(0x1ffff000, 0x8000000000000001, 0xd) acct$auto(&(0x7f0000000040)='\x00') 1.233371106s ago: executing program 6 (id=2086): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f000000c180), 0xffffffffffffffff) sendmsg$auto_TIPC_NL_NAME_TABLE_GET(r0, &(0x7f000000ca40)={0x0, 0x0, &(0x7f000000ca00)={&(0x7f000000c1c0)={0x14, r1, 0x35712d2af9a9dbe3, 0x70bd28, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x841}, 0x4) r2 = socket(0x10, 0x80002, 0x0) r3 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000004140), 0xffffffffffffffff) sendmsg$auto_NL802154_CMD_SET_PAN_ID(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010027bd7000fddbdf250a0005000700000000000000080001"], 0x24}, 0x1, 0x0, 0x0, 0x4088}, 0x20000010) sendmsg$auto_NL802154_CMD_GET_INTERFACE(r0, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r3, 0x24, 0x70bd27, 0x25dfdbfc, {}, [@NL802154_ATTR_PAGE={0x5, 0x7, 0xff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x44}, 0x40000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0x8, 0x0) chdir$auto(&(0x7f0000000000)='}[,&*}\x00') umount2$auto(&(0x7f0000000040)='.\x00', 0x0) ioperm$auto(0x1ff, 0x2, 0x2000000000000149) r4 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000180)='/proc/crypto\x00', 0x5482, 0x0) read$auto_proc_iter_file_ops_compat_inode(r4, &(0x7f0000001040)=""/4088, 0xff8) r5 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x200, 0x0) ioctl$auto_SNDCTL_DSP_SPEED(r5, 0xc0045002, &(0x7f00000000c0)=0xfffffff7) ioctl$auto_SNDCTL_DSP_CHANNELS(r5, 0xc0045006, &(0x7f0000000080)=0x9) read$auto(r5, &(0x7f0000000040)='.\x00', 0xbd4) mremap$auto(0x4000, 0xfee0, 0x3fd6, 0x3, 0xfffff000) mremap$auto(0x1fc000, 0xfee0, 0x3fd6, 0x3, 0xfffff000) mremap$auto(0x0, 0x7, 0x3fd6, 0x3, 0x20000000) munmap$auto(0x0, 0xffffffff) r6 = openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/maps\x00', 0x2, 0x0) ioctl$auto_PROCMAP_QUERY(r6, 0xc0686611, &(0x7f0000000080)={0x800, 0x0, 0x7, 0x8, 0x0, 0x3ff, 0xe, 0x4, 0x8, 0x2, 0x7, 0x1004, 0x548, 0x6}) 1.140998658s ago: executing program 2 (id=2087): r0 = open(&(0x7f0000000800)='./file0\x00', 0x341, 0x80) fcntl$auto(r0, 0x400, 0x1) r1 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_ETHTOOL_MSG_RSS_GET(r2, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000780)={0x34, r1, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@ETHTOOL_A_RSS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}]}, @ETHTOOL_A_RSS_CONTEXT={0x8, 0x2, 0xc}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x50) execve$auto(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000080)='./file0\x00', 0x22281, 0x11) 1.116459678s ago: executing program 1 (id=2088): r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS1\x00', 0x20000, 0x0) ioctl$auto_TIOCGDEV2(r0, 0x540f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'virt_wifi0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000140)={'veth0_vlan\x00', 0x0}) sendmsg$auto_NL80211_CMD_GET_INTERFACE(r3, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000700)={0x1c, r4, 0xb01, 0x70bd27, 0x25dfdbfb, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4000080) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ovs_ct_limit(&(0x7f0000000840), r7) r8 = getpid() bpf$auto(0x5, &(0x7f0000000140)=@task_fd_query={r8, r7, 0x6, 0x6, 0x101, 0xfffffffd, r7, 0xf8, 0x5}, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'rose0\x00', 0x0}) sendmsg$auto_OVS_DP_CMD_DEL(r1, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x50, 0x0, 0x400, 0x70bd25, 0x25dfdbff, {}, [@OVS_DP_ATTR_IFINDEX={0x8, 0x9, r2}, @OVS_DP_ATTR_MASKS_CACHE_SIZE={0x8, 0x7, 0xdc33}, @OVS_DP_ATTR_IFINDEX={0x8, 0x9, r6}, @OVS_DP_ATTR_UPCALL_PID={0x8, 0x2, r8}, @OVS_DP_ATTR_NAME={0xb, 0x1, 'TIPCv2\x00'}, @OVS_DP_ATTR_IFINDEX={0x8}, @OVS_DP_ATTR_IFINDEX={0x8, 0x9, r9}]}, 0x50}, 0x1, 0x0, 0x0, 0x24004011}, 0x4000000) sendmsg$auto_TIPC_NL_BEARER_ADD(r1, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)={0xe0, 0x0, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x8, 0x4, 0x0, 0x1, [@typed={0x4, 0x8c}]}, @TIPC_NLA_BEARER={0xc2, 0x1, 0x0, 0x1, [@typed={0x8, 0x11, 0x0, 0x0, @ipv4=@loopback}, @typed={0x4, 0x107}, @generic="d07b7cd7eea6bad74e74713dfd7e2db90bd6d3d9a752cdcb9cfc4ed5df6bc93399995e3bb38538757b8807a0ee433fab55c3ccb55880e8604c9143f5c4476da003758d0c9843", @nested={0x6b, 0xab, 0x0, 0x1, [@typed={0x8, 0x3c, 0x0, 0x0, @fd=r0}, @generic="9655e235e5a118b061cbf57c924802260efbe7fe316b7b7c8aaaa10ce1525f9e39bac405e5675495dc06a89055bcd6a7630444c64ff320682f9a5d96dfa67cf878c9215a0e88245903037c8a03d169b4dd6164", @nested={0x4, 0x57}, @nested={0x4, 0x84}, @nested={0x4, 0x13f}]}]}]}, 0xe0}, 0x1, 0x0, 0x0, 0x26048001}, 0x800) 739.835846ms ago: executing program 1 (id=2089): r0 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r1 = socket(0xa, 0x2, 0x0) setsockopt$auto(0x3, 0x0, 0x80, 0x0, 0xe) socket(0x22, 0x1, 0x2107ce47) openat$auto_nsim_udp_tunnels_info_reset_fops_udp_tunnels(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/debug/netdevsim/netdevsim0/ports/1/udp_ports_reset\x00', 0x20000, 0x0) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptyu2\x00', 0x189000, 0x0) close_range$auto(r1, r2, 0x3) read$auto_proc_iter_file_ops_compat_inode(r0, &(0x7f0000001040)=""/4096, 0x1000) pwrite64$auto(0xc8, 0x0, 0x4e, 0x3) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000080), r1) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) lsm_list_modules$auto(0x0, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) mmap$auto(0x0, 0xa, 0xdb, 0x9b72, 0x5, 0x8000) socket(0x21, 0x800, 0x80008007) io_uring_setup$auto(0x6, 0x0) unshare$auto(0x200) r5 = syz_open_procfs$namespace(0x0, 0x0) r6 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/mnt\x00') setns(r6, 0x0) sendmmsg$auto(r5, 0x0, 0xfff, 0x0) set_mempolicy$auto(0xfffffff3, &(0x7f0000000180)=0xf, 0x3) umount2$auto(&(0x7f0000000080)='.\x00', 0x3) setns(r5, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x100) mprotect$auto(0x1ffff000, 0x8000000000000001, 0xd) unlink$auto(&(0x7f0000000000)='#\x00') sendmsg$auto_ETHTOOL_MSG_LINKINFO_SET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, r4, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@ETHTOOL_A_LINKINFO_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000840}, 0xc840) 557.20207ms ago: executing program 1 (id=2090): sendmsg$auto_HWSIM_CMD_DEL_RADIO(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="01"], 0x14}, 0x1, 0x0, 0x0, 0x20040800}, 0x24004000) r0 = socket(0x10, 0x2, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000011c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1200"], 0x1ac}}, 0x40000) 427.015174ms ago: executing program 1 (id=2091): mmap$auto(0x0, 0x2000a, 0x10000000000df, 0xeb2, 0x401, 0x8000) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000226bd7000fedbdf250300000008000008000200b01c7324ddc5152087c2d340a1f4f000000700"/49, @ANYRES32=0x0, @ANYBLOB="0a00050000000000000000000a00010000000000000000000a000500bbbbbbbbbbbb0000080003003800000008000200", @ANYRES32=0x0, @ANYBLOB="0800030053ce0000"], 0x68}, 0x1, 0x0, 0x0, 0x40080}, 0x40090) mmap$auto(0x0, 0x8, 0x1000000004, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x2000a, 0x10000000000df, 0xeb2, 0x401, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_HWSIM_CMD_DEL_RADIO(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="01eb"], 0x14}, 0x1, 0x0, 0x0, 0x20040800}, 0x24004000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x3, 0x6) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1200"], 0x1ac}}, 0x40000) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x1) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) socket(0x29, 0x2, 0x0) sendmmsg$auto(0x3, &(0x7f0000000000)={{0x0, 0x2, &(0x7f0000000040)={0x0, 0x1}, 0x400, 0x0, 0xdd0, 0x697b}, 0xed71388}, 0x9a6, 0x9) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) close_range$auto(0x2, 0x8, 0x0) close_range$auto(0x2, 0x8, 0x0) r0 = openat$auto_drm_crtc_crc_data_fops_drm_debugfs_crc(0xffffffffffffff9c, &(0x7f0000000000), 0x42100, 0x0) r1 = openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000005280), 0x40400, 0x0) ioctl$auto_posix_clock_file_operations_posix_clock(r1, 0x40043d0d, 0x0) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptyre\x00', 0x40000, 0x0) capget$auto(0x0, 0x0) mmap$auto(0x0, 0xa, 0xdb, 0x9b72, 0x5, 0x8000) socket(0xa, 0x801, 0x84) ioctl$auto_TIOCGWINSZ2(r2, 0x5413, 0x0) write$auto(r0, &(0x7f0000000100)='\xbb\xbb\xbb\xbb\xbb\xbb', 0x1) r3 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/controlC2\x00', 0x80002, 0x0) ioctl$auto(r3, 0x80045530, 0x400000080000000) socket(0x2, 0x3, 0x100) geteuid() 276.746394ms ago: executing program 0 (id=2092): openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x1, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wg0\x00', 0x0}) bpf$auto(0x0, &(0x7f00000000c0)=@bpf_attr_5={@target_ifindex=r1, r0, 0x4, 0x1ff, 0xffffffffffffffff, @relative_id=0x13, 0xe600}, 0xf) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'ip6_vti0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket(0xa, 0x2, 0x0) r5 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000280)={'wlan1\x00', 0x0}) sendmsg$auto_NL80211_CMD_NEW_KEY(r3, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r5, @ANYBLOB="13042bbd7000fbdbdf3e2b00000008000300", @ANYRES32=r6], 0x20}, 0x1, 0x0, 0x0, 0x4804}, 0x80) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket(0xa, 0x2, 0x88) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000280)={'wg0\x00', 0x0}) bpf$auto(0x0, &(0x7f00000000c0)=@bpf_attr_5={@target_ifindex=r10, r9, 0x4, 0x401, r8, @relative_id=0x13, 0xe600}, 0xf) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'veth1\x00'}) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$auto_netdev(&(0x7f0000002f80), r12) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000000)={'veth1_vlan\x00', 0x0}) sendmsg$auto_NETDEV_CMD_QUEUE_GET(r12, &(0x7f0000003040)={0x0, 0x0, &(0x7f0000003000)={&(0x7f0000000040)={0x2c, r13, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@NETDEV_A_QUEUE_TYPE={0x8}, @NETDEV_A_QUEUE_IFINDEX={0x8, 0x2, r14}, @NETDEV_A_QUEUE_ID={0x8, 0x1, 0x710}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x20008810) r15 = socket(0xa, 0x2, 0x88) r16 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r15, 0x8933, &(0x7f0000000280)={'vcan0\x00', 0x0}) bpf$auto(0x0, &(0x7f00000000c0)=@bpf_attr_5={@target_ifindex=r17, r16, 0x4, 0x1ff, r15, @relative_id=0x13, 0xe600}, 0xf) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'veth0_vlan\x00', 0x0}) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000540)={&(0x7f0000000340)={0x1d8, 0x0, 0x200, 0x70bd27, 0x25dfdbfd, {}, [@ETHTOOL_A_CHANNELS_HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x80000001}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0xffffffff}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x37f}]}, @ETHTOOL_A_CHANNELS_HEADER={0x70, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x800}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}]}, @ETHTOOL_A_CHANNELS_HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0xee}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp0\x00'}]}, @ETHTOOL_A_CHANNELS_HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}]}, @ETHTOOL_A_CHANNELS_HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r17}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_FLAGS={0xff4f, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r17}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r18}]}]}, 0x1d8}, 0x1, 0x0, 0x0, 0x48814}, 0x90) mprotect$auto(0x1ffff000, 0x8000000000000001, 0xd) openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) openat$auto_msr_fops_msr(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cpu/1/msr\x00', 0x20000, 0x0) close_range$auto(0x2, 0x8000, 0x0) 232.233943ms ago: executing program 1 (id=2093): r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000280)='/dev/audio1\x00', 0x210140, 0x0) ioctl$auto_SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000080)=0x3) socket$nl_generic(0x10, 0x3, 0x10) read$auto_snd_pcm_oss_f_reg_pcm_oss(r0, &(0x7f00000001c0)=""/68, 0x44) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket(0x10, 0x3, 0x6) r1 = socket(0x10, 0x2, 0xc) socket(0xa, 0x2, 0x0) r2 = socket(0x10, 0x2, 0xc) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_ETHTOOL_MSG_WOL_SET(0xffffffffffffffff, &(0x7f0000002cc0)={0x0, 0x0, &(0x7f0000002c80)={&(0x7f0000000340)=ANY=[@ANYBLOB="14000000", @ANYBLOB="0100df"], 0x14}, 0x1, 0x0, 0x0, 0x801}, 0x40) socket(0x2, 0x6, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="18000000", @ANYRES8=r2, @ANYRES8=r3], 0x18}, 0x1, 0x0, 0x0, 0x60008004}, 0x84) mprotect$auto(0x1ffff000, 0x8000000000000001, 0xd) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r1, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x4000000) mmap$auto(0x0, 0x20009, 0x9, 0xeb1, 0x401, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="72010000", @ANYBLOB="120027", @ANYBLOB="5de1523353782950330a"], 0x1ac}}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB='J'], 0x1ac}}, 0x40000) sendmmsg$auto(r3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) bpf$auto(0x0, &(0x7f0000000100)=@task_fd_query={0x7, 0x4, 0x200, 0x3, 0x8, 0xc, 0x2e, 0x0, 0x3}, 0x6f4) poll$auto(&(0x7f0000000000)={r4, 0x101, 0x72}, 0x4, 0x1) epoll_create$auto(0x80008000) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) mmap$auto(0x10000000, 0x8, 0x1000000003, 0x8010, 0x2, 0x8000) getrandom$auto(0x0, 0x6000000, 0x3) bpf$auto(0x0, &(0x7f0000000100)=@task_fd_query={0x7, r6, 0x200, 0x1001, 0x8, 0xf, r5, 0x0, 0x80000000}, 0x6f4) mmap$auto(0x0, 0x9, 0x3, 0x8012, 0x3, 0x8000) 172.520433ms ago: executing program 2 (id=2094): r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp1\x00', 0x20b42, 0x0) write$auto_snd_pcm_oss_f_reg_pcm_oss(r0, &(0x7f0000000280)="c2", 0x1) ioctl$auto_SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000080)=0x10000) openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mtd0\x00', 0x8080, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/kallsyms\x00', 0x12d040, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x10, 0x80002, 0x0) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000640), 0xffffffffffffffff) read$auto(0x3, 0x0, 0x7) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) prctl$auto(0x23, 0xb, 0x7ffffffeefff, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) mprotect$auto(0x1ffff000, 0x8000000000000001, 0xd) syz_open_procfs$namespace(0x0, 0x0) mmap$auto(0xd, 0xe0, 0x5, 0x7fff, 0x6, 0x3) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x1, 0x1, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8002) r1 = open(&(0x7f0000000000)='./cgroup\x00', 0x0, 0x64) ioctl$auto(0xc8, 0x400454c8, 0x5c8d) getdents64$auto(r1, &(0x7f0000000040)={0x1d6c, 0x1000000000, 0x2, 0x25, ']'}, 0x7) fchdir$auto(r1) mkdir$auto(&(0x7f0000004440)='./file0\x00', 0x1) mkdir$auto(0x0, 0x9) 111.638715ms ago: executing program 6 (id=2095): futex_wait$auto(&(0x7f0000000000)=[0x74b], 0x10, 0x9, 0xff, &(0x7f0000000040)={0x0, 0x25c8}, 0xc0) futex$auto(&(0x7f0000000080)=0x2, 0x8, 0xafc, &(0x7f00000000c0)={0x101, 0xffff}, &(0x7f0000000100)=0x10, 0xef) 0s ago: executing program 1 (id=2096): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$auto_gtp(&(0x7f0000000c40), 0xffffffffffffffff) sendmsg$auto_GTP_CMD_NEWPDP(r0, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000000)={0x24, r1, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@GTPA_VERSION={0x8}, @GTPA_LINK={0x8, 0x1, 0xae50}]}, 0x24}, 0x1, 0x0, 0x0, 0x20008000}, 0x4000) (async) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) (async, rerun: 32) r2 = open(&(0x7f0000000100)='.\x00', 0x40000, 0x0) (rerun: 32) getdents64$auto(r2, 0x0, 0x400) (async) read$auto_dvb_dvr_fops_dmxdev(r2, &(0x7f0000000000)=""/211, 0xd3) (async) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x5, 0x8000) (async, rerun: 32) r3 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) r4 = syz_genetlink_get_family_id$auto_tcp_metrics(&(0x7f0000000ac0), 0xffffffffffffffff) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async) r5 = openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000000500), 0x22000, 0x0) (async) r6 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000001c80)='/dev/fb0\x00', 0x20401, 0x0) fanotify_mark$auto(0xffffffffffffffff, 0x9, 0x8, 0xffffffffffffffff, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r6, 0x4602, 0x0) ioctl$auto_posix_clock_file_operations_posix_clock(r5, 0x40383d0c, 0x0) (async) sendmsg$auto_TCP_METRICS_CMD_GET(r3, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000b00)={0x14, r4, 0x89c1beb01534ff9b, 0x70bd29, 0x25dfdbfb}, 0x14}}, 0x0) (async) madvise$auto(0x0, 0xffffffffffff0001, 0x15) (async) pkey_free$auto(0xfffffffd) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.56' (ED25519) to the list of known hosts. [ 65.312231][ T5818] cgroup: Unknown subsys name 'net' [ 65.461782][ T5818] cgroup: Unknown subsys name 'cpuset' [ 65.470034][ T5818] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 66.764338][ T5818] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 68.524118][ T55] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 68.537048][ T55] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 68.573206][ T5838] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 68.581360][ T5838] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 68.589313][ T5838] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 68.598223][ T5838] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 68.607201][ T5838] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 68.616364][ T5839] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 68.624566][ T5838] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 68.625939][ T5839] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 68.640566][ T5838] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 68.640663][ T5839] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 68.656963][ T5839] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 68.661944][ T5841] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 68.665938][ T5839] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 68.671932][ T5841] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 68.680110][ T5839] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 68.685564][ T5841] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 68.693318][ T5839] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 68.700989][ T5841] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 68.706495][ T5839] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 68.726445][ T5145] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 68.727379][ T5839] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 68.742091][ T5145] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 69.124223][ T5827] chnl_net:caif_netlink_parms(): no params data found [ 69.145834][ T5831] chnl_net:caif_netlink_parms(): no params data found [ 69.190343][ T5832] chnl_net:caif_netlink_parms(): no params data found [ 69.263426][ T5833] chnl_net:caif_netlink_parms(): no params data found [ 69.356726][ T5827] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.365214][ T5827] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.374576][ T5827] bridge_slave_0: entered allmulticast mode [ 69.382411][ T5827] bridge_slave_0: entered promiscuous mode [ 69.412022][ T5827] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.419548][ T5827] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.426806][ T5827] bridge_slave_1: entered allmulticast mode [ 69.434159][ T5827] bridge_slave_1: entered promiscuous mode [ 69.441762][ T5831] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.449070][ T5831] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.456223][ T5831] bridge_slave_0: entered allmulticast mode [ 69.462927][ T5831] bridge_slave_0: entered promiscuous mode [ 69.470896][ T5831] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.478037][ T5831] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.485314][ T5831] bridge_slave_1: entered allmulticast mode [ 69.492340][ T5831] bridge_slave_1: entered promiscuous mode [ 69.527116][ T5832] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.534403][ T5832] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.543208][ T5832] bridge_slave_0: entered allmulticast mode [ 69.550397][ T5832] bridge_slave_0: entered promiscuous mode [ 69.574094][ T5827] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.593374][ T5832] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.600641][ T5832] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.607809][ T5832] bridge_slave_1: entered allmulticast mode [ 69.615083][ T5832] bridge_slave_1: entered promiscuous mode [ 69.629604][ T5827] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.650489][ T5831] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.690820][ T5831] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.701882][ T5832] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.711152][ T5833] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.718909][ T5833] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.726066][ T5833] bridge_slave_0: entered allmulticast mode [ 69.732879][ T5833] bridge_slave_0: entered promiscuous mode [ 69.740811][ T5833] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.748025][ T5833] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.755351][ T5833] bridge_slave_1: entered allmulticast mode [ 69.762431][ T5833] bridge_slave_1: entered promiscuous mode [ 69.771901][ T5827] team0: Port device team_slave_0 added [ 69.785935][ T5832] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.812356][ T5827] team0: Port device team_slave_1 added [ 69.844912][ T5833] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.865787][ T5831] team0: Port device team_slave_0 added [ 69.873467][ T5831] team0: Port device team_slave_1 added [ 69.887967][ T5833] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.906767][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.913912][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.939876][ T5827] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.962483][ T5832] team0: Port device team_slave_0 added [ 69.970701][ T5832] team0: Port device team_slave_1 added [ 69.984986][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.992365][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.018823][ T5827] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.053313][ T5833] team0: Port device team_slave_0 added [ 70.072401][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.080250][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.106701][ T5831] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.125467][ T5833] team0: Port device team_slave_1 added [ 70.141987][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.149062][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.175220][ T5831] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.187084][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.194238][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.220217][ T5832] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.232755][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.239795][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.265911][ T5832] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.303289][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.310407][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.336691][ T5833] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.350172][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.357158][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.383229][ T5833] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.406947][ T5827] hsr_slave_0: entered promiscuous mode [ 70.413296][ T5827] hsr_slave_1: entered promiscuous mode [ 70.459374][ T5832] hsr_slave_0: entered promiscuous mode [ 70.465633][ T5832] hsr_slave_1: entered promiscuous mode [ 70.472347][ T5832] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 70.480624][ T5832] Cannot create hsr debugfs directory [ 70.523967][ T5831] hsr_slave_0: entered promiscuous mode [ 70.530452][ T5831] hsr_slave_1: entered promiscuous mode [ 70.536900][ T5831] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 70.544636][ T5831] Cannot create hsr debugfs directory [ 70.574833][ T5833] hsr_slave_0: entered promiscuous mode [ 70.581629][ T5833] hsr_slave_1: entered promiscuous mode [ 70.587654][ T5833] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 70.595308][ T5833] Cannot create hsr debugfs directory [ 70.739601][ T5145] Bluetooth: hci0: command tx timeout [ 70.818684][ T5145] Bluetooth: hci2: command tx timeout [ 70.818695][ T5839] Bluetooth: hci3: command tx timeout [ 70.818954][ T5839] Bluetooth: hci1: command tx timeout [ 70.879625][ T5827] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 70.897095][ T5827] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 70.914928][ T5827] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 70.924274][ T5827] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 70.975732][ T5831] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 70.997750][ T5831] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 71.012175][ T5831] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 71.025232][ T5831] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 71.056272][ T5832] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 71.065921][ T5832] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 71.091791][ T5832] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 71.102223][ T5832] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 71.157380][ T5833] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 71.184868][ T5833] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 71.195965][ T5833] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 71.207866][ T5833] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 71.252138][ T5827] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.304869][ T5827] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.330491][ T966] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.337838][ T966] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.359773][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.366928][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.440645][ T5831] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.472871][ T5832] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.506625][ T5832] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.533458][ T5831] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.544951][ T3027] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.552118][ T3027] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.573316][ T5833] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.590358][ T3027] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.597466][ T3027] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.653270][ T5833] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.665924][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.673127][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.684319][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.691485][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.710032][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.716573][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.743508][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.752796][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.782925][ T81] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.790080][ T81] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.853854][ T5827] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.976525][ T5827] veth0_vlan: entered promiscuous mode [ 72.015035][ T5827] veth1_vlan: entered promiscuous mode [ 72.081882][ T5827] veth0_macvtap: entered promiscuous mode [ 72.105704][ T5827] veth1_macvtap: entered promiscuous mode [ 72.169166][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.180287][ T5832] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.199292][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.218928][ T5827] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.227867][ T5827] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.237590][ T5827] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.246700][ T5827] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.293013][ T5833] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.303572][ T5831] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.354648][ T5832] veth0_vlan: entered promiscuous mode [ 72.420654][ T5832] veth1_vlan: entered promiscuous mode [ 72.447583][ T5833] veth0_vlan: entered promiscuous mode [ 72.462905][ T5831] veth0_vlan: entered promiscuous mode [ 72.474221][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.493572][ T5833] veth1_vlan: entered promiscuous mode [ 72.502172][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.503487][ T5832] veth0_macvtap: entered promiscuous mode [ 72.534755][ T5832] veth1_macvtap: entered promiscuous mode [ 72.542568][ T5831] veth1_vlan: entered promiscuous mode [ 72.587933][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.597142][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.608470][ T5833] veth0_macvtap: entered promiscuous mode [ 72.626347][ T5833] veth1_macvtap: entered promiscuous mode [ 72.641511][ T5832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.657943][ T5832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.670487][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.692896][ T5832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.703522][ T5832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.714488][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.725673][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.731320][ T5827] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 72.736913][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.765352][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.776466][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.787529][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.796312][ T5831] veth0_macvtap: entered promiscuous mode [ 72.815741][ T5832] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.824800][ T5839] Bluetooth: hci0: command tx timeout [ 72.836643][ T5832] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.873005][ T5832] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.881925][ T5832] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.893208][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.904443][ T5839] Bluetooth: hci2: command tx timeout [ 72.910486][ T55] Bluetooth: hci3: command tx timeout [ 72.910575][ T5145] Bluetooth: hci1: command tx timeout [ 72.923596][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.934172][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.951717][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.962982][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.971683][ T5831] veth1_macvtap: entered promiscuous mode [ 73.015741][ T5833] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.026585][ T5833] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.035627][ T5833] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.046181][ T5833] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.076647][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.087988][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.098376][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.109275][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.121900][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.133251][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.144759][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.155546][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.166069][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.176079][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.186576][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.196520][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.207064][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.218610][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.243660][ T5831] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.244258][ T81] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.254173][ T5831] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.261147][ T81] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.286915][ T5831] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.296150][ T5831] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.402061][ T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.444101][ T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.457126][ T81] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.465677][ T81] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.558692][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.567518][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.579563][ T81] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.595718][ T81] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.672562][ T81] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.713324][ T81] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.786063][ T5903] netlink: 334 bytes leftover after parsing attributes in process `syz.2.3'. [ 73.817915][ T5903] Zero length message leads to an empty skb [ 74.628773][ T5916] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8'. [ 74.908573][ T5145] Bluetooth: hci0: command tx timeout [ 74.978530][ T5145] Bluetooth: hci1: command tx timeout [ 74.980556][ T5839] Bluetooth: hci2: command tx timeout [ 74.983970][ T5145] Bluetooth: hci3: command tx timeout [ 75.064941][ T5908] team0: entered allmulticast mode [ 75.068437][ T5927] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 75.073042][ T5908] team_slave_0: entered allmulticast mode [ 75.122652][ T5908] team_slave_1: entered allmulticast mode [ 76.986844][ T5145] Bluetooth: hci0: command tx timeout [ 77.059685][ T5145] Bluetooth: hci2: command tx timeout [ 77.065208][ T5145] Bluetooth: hci3: command tx timeout [ 77.068350][ T5839] Bluetooth: hci1: command tx timeout [ 78.221453][ T5971] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 78.664737][ T5974] process 'syz.3.24' launched './file0' with NULL argv: empty string added [ 78.819997][ T5986] program syz.1.29 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 79.034096][ T5985] nfsd: Unknown parameter 'nfsd' [ 79.599608][ T35] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.814701][ T35] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.839252][ T6007] netlink: 342 bytes leftover after parsing attributes in process `syz.2.37'. [ 79.992510][ T35] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.118602][ T35] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.265214][ T55] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 80.274661][ T55] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 80.283565][ T55] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 80.301459][ T55] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 80.311795][ T55] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 80.322445][ T55] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 80.521408][ T35] bridge_slave_1: left allmulticast mode [ 80.527983][ T35] bridge_slave_1: left promiscuous mode [ 80.534752][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.569699][ T35] bridge_slave_0: left allmulticast mode [ 80.575491][ T35] bridge_slave_0: left promiscuous mode [ 80.581679][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.748346][ T6035] kernel read not supported for file /#)-\&[} (pid: 6035 comm: syz.2.40) [ 80.760260][ T29] audit: type=1804 audit(1733990129.462:2): pid=6035 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.40" name="#)-\&[}" dev="mqueue" ino=8596 res=1 errno=0 [ 80.807125][ T29] audit: type=1800 audit(1733990129.472:3): pid=6035 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.40" name="#)-\&[}" dev="mqueue" ino=8596 res=0 errno=0 [ 81.230161][ T6050] netlink: 4 bytes leftover after parsing attributes in process `syz.0.41'. [ 81.754650][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 81.775161][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 81.802593][ T35] bond0 (unregistering): Released all slaves [ 81.843876][ T6063] netlink: 354 bytes leftover after parsing attributes in process `syz.0.45'. [ 81.956682][ T91] cfg80211: failed to load regulatory.db [ 82.401732][ T6063] netlink: 178 bytes leftover after parsing attributes in process `syz.0.45'. [ 82.418271][ T5839] Bluetooth: hci1: command tx timeout [ 82.853662][ T6088] FAULT_INJECTION: forcing a failure. [ 82.853662][ T6088] name failslab, interval 1, probability 0, space 0, times 1 [ 82.937553][ T6088] CPU: 0 UID: 0 PID: 6088 Comm: syz.0.49 Not tainted 6.13.0-rc2-syzkaller-00031-gf92f4749861b #0 [ 82.948122][ T6088] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 82.958232][ T6088] Call Trace: [ 82.961538][ T6088] [ 82.964506][ T6088] dump_stack_lvl+0x16c/0x1f0 [ 82.969239][ T6088] should_fail_ex+0x497/0x5b0 [ 82.973965][ T6088] ? fs_reclaim_acquire+0xae/0x150 [ 82.979118][ T6088] should_failslab+0xc2/0x120 [ 82.983848][ T6088] kmem_cache_alloc_noprof+0x6e/0x3b0 [ 82.989270][ T6088] ? security_file_alloc+0x34/0x2b0 [ 82.994514][ T6088] security_file_alloc+0x34/0x2b0 [ 82.999571][ T6088] init_file+0x93/0x480 [ 83.003771][ T6088] alloc_empty_file+0x91/0x1e0 [ 83.008574][ T6088] path_openat+0xe1/0x2d60 [ 83.013024][ T6088] ? hlock_class+0x4e/0x130 [ 83.017560][ T6088] ? __lock_acquire+0x15a9/0x3c40 [ 83.022635][ T6088] ? __pfx_path_openat+0x10/0x10 [ 83.027607][ T6088] ? __pfx___lock_acquire+0x10/0x10 [ 83.032847][ T6088] ? lock_acquire.part.0+0x11b/0x380 [ 83.038166][ T6088] ? find_held_lock+0x2d/0x110 [ 83.042968][ T6088] do_filp_open+0x20c/0x470 [ 83.047505][ T6088] ? __pfx_do_filp_open+0x10/0x10 [ 83.052558][ T6088] ? find_held_lock+0x2d/0x110 [ 83.057379][ T6088] ? alloc_fd+0x41f/0x760 [ 83.061750][ T6088] do_sys_openat2+0x17a/0x1e0 [ 83.066465][ T6088] ? __pfx_do_sys_openat2+0x10/0x10 [ 83.071708][ T6088] ? __fget_files+0x206/0x3a0 [ 83.076434][ T6088] __x64_sys_openat+0x175/0x210 [ 83.081320][ T6088] ? __pfx___x64_sys_openat+0x10/0x10 [ 83.086735][ T6088] ? ksys_write+0x1ba/0x250 [ 83.091282][ T6088] do_syscall_64+0xcd/0x250 [ 83.095820][ T6088] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 83.101753][ T6088] RIP: 0033:0x7ff776985d19 [ 83.106200][ T6088] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 83.125846][ T6088] RSP: 002b:00007ff7777a8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 83.134295][ T6088] RAX: ffffffffffffffda RBX: 00007ff776b75fa0 RCX: 00007ff776985d19 [ 83.142295][ T6088] RDX: 0000000000000002 RSI: 0000000020000040 RDI: ffffffffffffff9c [ 83.150309][ T6088] RBP: 00007ff7777a8090 R08: 0000000000000000 R09: 0000000000000000 [ 83.158305][ T6088] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 83.166304][ T6088] R13: 0000000000000000 R14: 00007ff776b75fa0 R15: 00007fff1277eaf8 [ 83.174319][ T6088] [ 83.455871][ T35] hsr_slave_0: left promiscuous mode [ 83.478179][ T35] hsr_slave_1: left promiscuous mode [ 83.506202][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 83.518794][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 83.530878][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 83.539101][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 83.554333][ T35] veth1_macvtap: left promiscuous mode [ 83.563105][ T35] veth0_macvtap: left promiscuous mode [ 83.566104][ T6091] mmap: syz.1.50 (6091) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 83.569663][ T35] veth1_vlan: left promiscuous mode [ 83.587210][ T35] veth0_vlan: left promiscuous mode [ 83.884926][ T6105] netlink: 4 bytes leftover after parsing attributes in process `syz.1.54'. [ 83.895167][ T6105] netlink: 4 bytes leftover after parsing attributes in process `syz.1.54'. [ 84.088029][ T35] team_slave_1 (unregistering): left allmulticast mode [ 84.100674][ T35] team0 (unregistering): Port device team_slave_1 removed [ 84.135587][ T35] team_slave_0 (unregistering): left allmulticast mode [ 84.145063][ T35] team0 (unregistering): Port device team_slave_0 removed [ 84.459148][ T35] team0 (unregistering): left allmulticast mode [ 84.499325][ T5839] Bluetooth: hci1: command tx timeout [ 84.550500][ T6025] chnl_net:caif_netlink_parms(): no params data found [ 84.819400][ T6025] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.832790][ T6025] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.858344][ T6025] bridge_slave_0: entered allmulticast mode [ 84.875736][ T6025] bridge_slave_0: entered promiscuous mode [ 84.924497][ T6025] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.932357][ T6025] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.939630][ T6025] bridge_slave_1: entered allmulticast mode [ 84.946560][ T6025] bridge_slave_1: entered promiscuous mode [ 85.162026][ T6025] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.174474][ T6025] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.285304][ T6140] netlink: 40 bytes leftover after parsing attributes in process `syz.2.61'. [ 85.314663][ T6025] team0: Port device team_slave_0 added [ 85.340270][ T6025] team0: Port device team_slave_1 added [ 85.714674][ T6152] netlink: 28 bytes leftover after parsing attributes in process `syz.1.63'. [ 85.726769][ T6025] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.739388][ T6025] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.791508][ T6025] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.846049][ T6025] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.856039][ T6025] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.895669][ T6025] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.048964][ T6152] syz.1.63 (6152) used greatest stack depth: 21200 bytes left [ 86.193774][ T6161] netlink: 8 bytes leftover after parsing attributes in process `syz.1.66'. [ 86.211035][ T6025] hsr_slave_0: entered promiscuous mode [ 86.225401][ T6025] hsr_slave_1: entered promiscuous mode [ 86.232501][ T6025] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 86.251005][ T6025] Cannot create hsr debugfs directory [ 86.454216][ T6169] syz.1.67 uses obsolete (PF_INET,SOCK_PACKET) [ 86.578309][ T5839] Bluetooth: hci1: command tx timeout [ 86.865790][ T6025] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 86.904084][ T6025] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 86.923793][ T6025] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 86.951883][ T6025] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 87.116474][ T6025] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.142554][ T6025] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.165077][ T966] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.174249][ T966] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.213036][ T966] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.220243][ T966] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.371591][ T6197] netlink: 330 bytes leftover after parsing attributes in process `syz.2.71'. [ 87.677636][ T6025] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.012132][ T6217] svc: failed to register nfsdv3 RPC service (errno 111). [ 88.059407][ T6217] svc: failed to register nfsaclv3 RPC service (errno 111). [ 88.231178][ T6025] veth0_vlan: entered promiscuous mode [ 88.247736][ T6232] tipc: Started in network mode [ 88.258564][ T6232] tipc: Node identity ffffffff, cluster identity 4711 [ 88.265396][ T6232] tipc: Node number set to 4294967295 [ 88.297355][ T6025] veth1_vlan: entered promiscuous mode [ 88.354361][ T6025] veth0_macvtap: entered promiscuous mode [ 88.396631][ T6025] veth1_macvtap: entered promiscuous mode [ 88.431306][ T6025] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.442484][ T6025] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.458225][ T6025] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.478900][ T6025] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.505698][ T6025] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.528205][ T6025] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.539477][ T6025] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.582860][ T6025] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.627193][ T6025] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.652523][ T6025] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.669687][ T6025] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.680450][ T5839] Bluetooth: hci1: command tx timeout [ 88.686251][ T6025] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.702699][ T6025] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.714320][ T6025] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.748544][ T6025] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.757642][ T6025] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.771015][ T6025] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.783545][ T6025] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.951801][ T81] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.978480][ T81] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.991249][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.999601][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.698665][ T6289] netlink: 334 bytes leftover after parsing attributes in process `syz.2.93'. [ 89.960813][ T6300] netlink: 350 bytes leftover after parsing attributes in process `syz.0.94'. [ 90.729225][ T6331] can: request_module (can-proto-5) failed. [ 90.853140][ T6343] netlink: 334 bytes leftover after parsing attributes in process `syz.0.105'. [ 91.814256][ T6393] netlink: 334 bytes leftover after parsing attributes in process `syz.1.118'. [ 93.066052][ T6444] netlink: 330 bytes leftover after parsing attributes in process `syz.0.127'. [ 93.184173][ T6449] netlink: 334 bytes leftover after parsing attributes in process `syz.4.130'. [ 93.318516][ T6451] svc: failed to register nfsdv3 RPC service (errno 111). [ 93.347681][ T6451] svc: failed to register nfsaclv3 RPC service (errno 111). [ 93.873561][ T6485] ======================================================= [ 93.873561][ T6485] WARNING: The mand mount option has been deprecated and [ 93.873561][ T6485] and is ignored by this kernel. Remove the mand [ 93.873561][ T6485] option from the mount to silence this warning. [ 93.873561][ T6485] ======================================================= [ 94.069252][ T6500] netlink: 334 bytes leftover after parsing attributes in process `syz.4.143'. [ 94.399678][ T6515] netlink: 342 bytes leftover after parsing attributes in process `syz.1.144'. [ 94.985974][ T6545] netlink: 334 bytes leftover after parsing attributes in process `syz.2.154'. [ 96.090869][ T6574] netlink: 334 bytes leftover after parsing attributes in process `syz.2.163'. [ 97.962325][ T6621] openvswitch: netlink: Geneve opt len 2 is not a multiple of 4. [ 98.463581][ T6634] netlink: 334 bytes leftover after parsing attributes in process `syz.0.173'. [ 99.091493][ T6654] netlink: 298 bytes leftover after parsing attributes in process `syz.1.187'. [ 99.244423][ T6660] netlink: 'syz.4.189': attribute type 2 has an invalid length. [ 99.380516][ T6669] netlink: 334 bytes leftover after parsing attributes in process `syz.4.192'. [ 99.406393][ T6671] netlink: 4 bytes leftover after parsing attributes in process `syz.2.193'. [ 99.579871][ T6679] openvswitch: netlink: Geneve opt len 2 is not a multiple of 4. [ 101.206093][ T6744] netlink: 'syz.2.216': attribute type 4 has an invalid length. [ 104.720614][ T6854] netlink: 334 bytes leftover after parsing attributes in process `syz.4.247'. [ 105.734874][ T6900] netlink: 334 bytes leftover after parsing attributes in process `syz.0.257'. [ 106.338974][ T6927] IPVS: length: 537396514 != 24 [ 106.704417][ T6938] netlink: 24 bytes leftover after parsing attributes in process `syz.0.267'. [ 110.889646][ T7094] netlink: 4 bytes leftover after parsing attributes in process `syz.2.294'. [ 115.246898][ T7145] could not allocate digest TFM handle [ 117.369963][ T7201] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 117.424552][ T7204] netlink: 4 bytes leftover after parsing attributes in process `syz.0.332'. [ 117.451713][ T7204] netlink: 28 bytes leftover after parsing attributes in process `syz.0.332'. [ 117.483742][ T7204] veth1_macvtap: left promiscuous mode [ 121.065574][ T7298] netlink: 334 bytes leftover after parsing attributes in process `syz.4.368'. [ 121.548959][ T5839] Bluetooth: hci1: unexpected event 0x1c length: 11 > 5 [ 121.712482][ T7330] netlink: 334 bytes leftover after parsing attributes in process `syz.2.380'. [ 122.276907][ T7361] netlink: 334 bytes leftover after parsing attributes in process `syz.4.392'. [ 122.409812][ T7366] netlink: 334 bytes leftover after parsing attributes in process `syz.0.395'. [ 123.914027][ T7423] netlink: 'syz.1.411': attribute type 9 has an invalid length. [ 124.248924][ T7434] netlink: 8 bytes leftover after parsing attributes in process `syz.1.415'. [ 125.174854][ T7456] netlink: 'syz.1.421': attribute type 9 has an invalid length. [ 125.813378][ T7466] ptrace attach of ""[6025] was attempted by "./syz-executor exec"[7466] [ 125.845895][ T7469] netlink: 28 bytes leftover after parsing attributes in process `syz.1.424'. [ 126.285106][ T7484] netlink: 'syz.0.430': attribute type 9 has an invalid length. [ 126.410923][ T53] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.563686][ T53] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.709965][ T53] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.899207][ T53] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.228668][ T55] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 127.258267][ T55] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 127.278400][ T55] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 127.287394][ T55] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 127.295197][ T55] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 127.303410][ T55] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 127.438858][ T7506] netlink: 334 bytes leftover after parsing attributes in process `syz.2.436'. [ 127.493316][ T53] bridge_slave_1: left allmulticast mode [ 127.510935][ T53] bridge_slave_1: left promiscuous mode [ 127.517628][ T53] bridge0: port 2(bridge_slave_1) entered disabled state [ 127.681108][ T53] bridge_slave_0: left allmulticast mode [ 127.689720][ T53] bridge_slave_0: left promiscuous mode [ 127.736569][ T53] bridge0: port 1(bridge_slave_0) entered disabled state [ 128.217524][ T7536] netlink: 4 bytes leftover after parsing attributes in process `syz.2.439'. [ 128.758232][ T7539] netlink: 8 bytes leftover after parsing attributes in process `syz.2.439'. [ 129.383737][ T55] Bluetooth: hci1: command tx timeout [ 129.881459][ T53] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 129.915888][ T53] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 129.953429][ T53] bond0 (unregistering): Released all slaves [ 130.219554][ T7571] netlink: 334 bytes leftover after parsing attributes in process `syz.0.446'. [ 131.394449][ T7501] chnl_net:caif_netlink_parms(): no params data found [ 131.458910][ T55] Bluetooth: hci1: command tx timeout [ 131.675667][ T53] hsr_slave_0: left promiscuous mode [ 131.686363][ T53] hsr_slave_1: left promiscuous mode [ 131.708290][ T53] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 131.728342][ T53] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 131.764998][ T53] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 131.782884][ T53] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 131.842397][ T53] veth1_macvtap: left promiscuous mode [ 131.847986][ T53] veth0_macvtap: left promiscuous mode [ 131.868433][ T53] veth1_vlan: left promiscuous mode [ 131.873814][ T53] veth0_vlan: left promiscuous mode [ 131.963562][ T7624] netlink: 334 bytes leftover after parsing attributes in process `syz.2.457'. [ 133.143203][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.158220][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.538898][ T55] Bluetooth: hci1: command tx timeout [ 133.646181][ T53] team0 (unregistering): Port device team_slave_1 removed [ 133.724596][ T53] team0 (unregistering): Port device team_slave_0 removed [ 134.751364][ T7654] netlink: 334 bytes leftover after parsing attributes in process `syz.0.466'. [ 134.795107][ T7501] bridge0: port 1(bridge_slave_0) entered blocking state [ 134.825496][ T7501] bridge0: port 1(bridge_slave_0) entered disabled state [ 134.858868][ T7501] bridge_slave_0: entered allmulticast mode [ 134.896881][ T7501] bridge_slave_0: entered promiscuous mode [ 134.923036][ T7501] bridge0: port 2(bridge_slave_1) entered blocking state [ 134.936861][ T7501] bridge0: port 2(bridge_slave_1) entered disabled state [ 134.954710][ T7501] bridge_slave_1: entered allmulticast mode [ 134.976015][ T7501] bridge_slave_1: entered promiscuous mode [ 135.269464][ T7501] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 135.290815][ T7501] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 135.394602][ T7501] team0: Port device team_slave_0 added [ 135.435402][ T7501] team0: Port device team_slave_1 added [ 135.541196][ T7501] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 135.549647][ T7501] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 135.576875][ T7501] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 135.624236][ T55] Bluetooth: hci1: command tx timeout [ 135.644529][ T7501] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 135.668184][ T7501] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 135.706243][ T7501] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 135.846449][ T7501] hsr_slave_0: entered promiscuous mode [ 135.869068][ T7501] hsr_slave_1: entered promiscuous mode [ 135.884280][ T7501] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 135.902046][ T7501] Cannot create hsr debugfs directory [ 136.371847][ T7709] netlink: 330 bytes leftover after parsing attributes in process `syz.1.478'. [ 136.398732][ T7501] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 136.461460][ T7501] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 136.522014][ T7501] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 136.545913][ T7501] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 136.839703][ T7501] 8021q: adding VLAN 0 to HW filter on device bond0 [ 136.986055][ T7501] 8021q: adding VLAN 0 to HW filter on device team0 [ 137.020172][ T3518] bridge0: port 1(bridge_slave_0) entered blocking state [ 137.027389][ T3518] bridge0: port 1(bridge_slave_0) entered forwarding state [ 137.151723][ T3518] bridge0: port 2(bridge_slave_1) entered blocking state [ 137.158908][ T3518] bridge0: port 2(bridge_slave_1) entered forwarding state [ 137.278003][ T7501] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 137.289818][ T7501] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 137.767654][ T7501] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 138.169424][ T7788] netlink: 326 bytes leftover after parsing attributes in process `syz.2.493'. [ 138.292368][ T7766] lo: entered promiscuous mode [ 138.335080][ T7501] veth0_vlan: entered promiscuous mode [ 138.360387][ T7501] veth1_vlan: entered promiscuous mode [ 138.367690][ T7775] lo: left promiscuous mode [ 138.456269][ T7501] veth0_macvtap: entered promiscuous mode [ 138.532122][ T7501] veth1_macvtap: entered promiscuous mode [ 138.591932][ T7501] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 138.606898][ T7501] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.616896][ T7501] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 138.627765][ T7501] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.638022][ T7501] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 138.648793][ T7501] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.660117][ T7501] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 138.670379][ T7501] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 138.680962][ T7501] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.692447][ T7501] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 138.703060][ T7501] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.713009][ T7501] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 138.723533][ T7501] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.734703][ T7501] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 138.784727][ T7501] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.794780][ T7501] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.816702][ T7501] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.837784][ T7501] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.186824][ T7816] netlink: 334 bytes leftover after parsing attributes in process `syz.0.499'. [ 139.328404][ T3465] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 139.357555][ T3465] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 139.435762][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 139.477293][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 140.064958][ T7838] netlink: 12 bytes leftover after parsing attributes in process `syz.0.501'. [ 140.085959][ T7838] netlink: 20 bytes leftover after parsing attributes in process `syz.0.501'. [ 141.353972][ T7882] netlink: 334 bytes leftover after parsing attributes in process `syz.2.507'. [ 141.817740][ T7892] netlink: 4 bytes leftover after parsing attributes in process `syz.2.510'. [ 142.551831][ T7916] netlink: 334 bytes leftover after parsing attributes in process `syz.5.518'. [ 144.694675][ T7966] netlink: 334 bytes leftover after parsing attributes in process `syz.1.528'. [ 144.751401][ T7965] capability: warning: `syz.0.526' uses 32-bit capabilities (legacy support in use) [ 144.766244][ T7956] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 145.920388][ T7993] netlink: 334 bytes leftover after parsing attributes in process `syz.1.538'. [ 146.225814][ T8006] netlink: 338 bytes leftover after parsing attributes in process `syz.1.540'. [ 147.894949][ T8049] netlink: 4 bytes leftover after parsing attributes in process `syz.2.549'. [ 148.320840][ T8065] netlink: 338 bytes leftover after parsing attributes in process `syz.1.555'. [ 148.330679][ T8065] IPv6: NLM_F_CREATE should be specified when creating new route [ 148.968827][ T8086] netlink: 28 bytes leftover after parsing attributes in process `syz.5.561'. [ 150.505977][ T8142] netlink: 8 bytes leftover after parsing attributes in process `syz.5.578'. [ 150.589683][ T8149] ecryptfs_miscdev_write: Dropping miscdev message of unrecognized type [0] [ 151.165117][ T8167] ptrace attach of "./syz-executor exec"[7501] was attempted by ""[8167] [ 152.434534][ T8206] netlink: 'syz.2.595': attribute type 11 has an invalid length. [ 155.902970][ T8316] netlink: 178 bytes leftover after parsing attributes in process `syz.2.613'. [ 159.357966][ T8426] mmap: syz.1.635 (8426): VmData 37597184 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. [ 160.120462][ T8458] bridge0: port 3(hsr0) entered blocking state [ 160.130302][ T8458] bridge0: port 3(hsr0) entered disabled state [ 160.140500][ T8458] hsr0: entered allmulticast mode [ 160.145593][ T8458] hsr_slave_0: entered allmulticast mode [ 160.178698][ T8458] hsr_slave_1: entered allmulticast mode [ 160.195907][ T8458] hsr0: entered promiscuous mode [ 160.220856][ T8458] bridge0: port 3(hsr0) entered blocking state [ 160.227432][ T8458] bridge0: port 3(hsr0) entered forwarding state [ 161.146258][ T8503] netlink: 334 bytes leftover after parsing attributes in process `syz.1.649'. [ 161.228671][ T8503] netlink: 28 bytes leftover after parsing attributes in process `syz.1.649'. [ 161.248034][ T8503] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 161.260712][ T8503] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 161.410737][ T8503] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 161.486182][ T8503] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 162.001948][ T8514] lo: entered allmulticast mode [ 162.308385][ T8514] lo: left allmulticast mode [ 165.419632][ T8563] bridge0: port 4(batadv0) entered blocking state [ 165.436477][ T8563] bridge0: port 4(batadv0) entered disabled state [ 165.453610][ T8563] batadv0: entered allmulticast mode [ 165.469261][ T8563] batadv0: entered promiscuous mode [ 165.503576][ T8563] bridge0: port 4(batadv0) entered blocking state [ 165.510254][ T8563] bridge0: port 4(batadv0) entered forwarding state [ 165.639519][ T3465] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 165.649155][ T3465] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 167.658840][ T8605] netlink: 28 bytes leftover after parsing attributes in process `syz.5.677'. [ 168.028797][ T8610] netlink: 28 bytes leftover after parsing attributes in process `syz.5.678'. [ 168.272932][ T8610] bond0: (slave bond_slave_1): Releasing backup interface [ 169.237760][ T8639] ptrace attach of "./syz-executor exec"[5832] was attempted by "./syz-executor exec"[8639] [ 171.530005][ T8667] netlink: 266 bytes leftover after parsing attributes in process `syz.1.693'. [ 173.584377][ T8687] netlink: 338 bytes leftover after parsing attributes in process `syz.1.699'. [ 173.642924][ T8690] netlink: 338 bytes leftover after parsing attributes in process `syz.1.699'. [ 173.744164][ T8687] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 173.788219][ T8687] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 174.053709][ T8689] syz.0.700 (8689) used greatest stack depth: 21120 bytes left [ 176.193445][ T8723] block nbd0: not configured, cannot reconfigure [ 176.228454][ T8723] block nbd0: not configured, cannot reconfigure [ 176.235011][ T8723] block nbd0: not configured, cannot reconfigure [ 176.308424][ T8723] block nbd0: not configured, cannot reconfigure [ 176.317562][ T8723] block nbd0: not configured, cannot reconfigure [ 177.681769][ T8764] netlink: 8 bytes leftover after parsing attributes in process `syz.5.718'. [ 177.870355][ T8764] netlink: 1656 bytes leftover after parsing attributes in process `syz.5.718'. [ 178.005354][ T8775] netlink: 'syz.1.721': attribute type 46 has an invalid length. [ 178.577871][ T8795] netlink: 330 bytes leftover after parsing attributes in process `syz.5.727'. [ 181.654740][ T8858] 0}^: entered promiscuous mode [ 182.964315][ T8892] netlink: 4 bytes leftover after parsing attributes in process `syz.1.755'. [ 183.000375][ T8892] netlink: 4 bytes leftover after parsing attributes in process `syz.1.755'. [ 184.708764][ T8927] netlink: 326 bytes leftover after parsing attributes in process `syz.2.767'. [ 184.933991][ T29] audit: type=1326 audit(11363.400:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8931 comm="syz.5.768" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fcf8e985d19 code=0x0 [ 185.090640][ T8938] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 185.118418][ T8938] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 185.789463][ T8959] netlink: 504 bytes leftover after parsing attributes in process `syz.5.775'. [ 185.801235][ T8959] netlink: 504 bytes leftover after parsing attributes in process `syz.5.775'. [ 187.761751][ T9031] netlink: 'syz.0.798': attribute type 16 has an invalid length. [ 187.798478][ T9031] netlink: 330 bytes leftover after parsing attributes in process `syz.0.798'. [ 187.842217][ T9035] netlink: 'syz.0.798': attribute type 16 has an invalid length. [ 187.869647][ T9035] netlink: 330 bytes leftover after parsing attributes in process `syz.0.798'. [ 188.889423][ T9063] openvswitch: netlink: Tunnel attr 9483 out of range max 16 [ 188.897383][ T9060] netlink: 342 bytes leftover after parsing attributes in process `syz.5.805'. [ 189.855880][ T9101] netlink: 28 bytes leftover after parsing attributes in process `syz.2.819'. [ 189.895966][ T9105] netlink: 28 bytes leftover after parsing attributes in process `syz.2.819'. [ 191.538582][ T5834] Bluetooth: hci0: command 0x0406 tx timeout [ 191.540533][ T5839] Bluetooth: hci2: command 0x0406 tx timeout [ 191.545433][ T5834] Bluetooth: hci3: command 0x0406 tx timeout [ 192.310035][ T9170] netlink: 28 bytes leftover after parsing attributes in process `syz.1.838'. [ 193.975870][ T9221] netlink: 28 bytes leftover after parsing attributes in process `syz.1.850'. [ 194.008578][ T9221] bridge_slave_1: left allmulticast mode [ 194.033609][ T9221] bridge_slave_1: left promiscuous mode [ 194.045238][ T9221] bridge0: port 2(bridge_slave_1) entered disabled state [ 194.067000][ T9221] bridge_slave_0: left allmulticast mode [ 194.079026][ T9221] bridge_slave_0: left promiscuous mode [ 194.095383][ T9221] bridge0: port 1(bridge_slave_0) entered disabled state [ 194.209938][ T9221] netlink: 28 bytes leftover after parsing attributes in process `syz.1.850'. [ 194.228479][ T9221] netlink: 28 bytes leftover after parsing attributes in process `syz.1.850'. [ 194.247103][ T9221] netlink: 28 bytes leftover after parsing attributes in process `syz.1.850'. [ 194.263568][ T9221] netlink: 28 bytes leftover after parsing attributes in process `syz.1.850'. [ 194.283885][ T9221] netlink: 28 bytes leftover after parsing attributes in process `syz.1.850'. [ 194.303410][ T9221] netlink: 28 bytes leftover after parsing attributes in process `syz.1.850'. [ 194.322983][ T9221] netlink: 28 bytes leftover after parsing attributes in process `syz.1.850'. [ 194.342870][ T9221] netlink: 28 bytes leftover after parsing attributes in process `syz.1.850'. [ 194.368515][ T9221] netlink: 28 bytes leftover after parsing attributes in process `syz.1.850'. [ 194.585924][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.602195][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.837742][ T9263] ptrace attach of "./syz-executor exec"[5833] was attempted by "./syz-executor exec"[9263] [ 197.126908][ T9335] mac80211_hwsim hwsim4 ›: renamed from wlan0 (while UP) [ 199.393584][ T9385] __nla_validate_parse: 29 callbacks suppressed [ 199.393608][ T9385] netlink: 326 bytes leftover after parsing attributes in process `syz.1.903'. [ 200.053761][ T9410] : Can't lookup blockdev [ 205.253655][ T9527] netlink: 'syz.5.942': attribute type 13 has an invalid length. [ 205.702029][ T9538] netlink: 342 bytes leftover after parsing attributes in process `syz.1.945'. [ 207.380099][ T9569] nbd: couldn't find device at index 33904 [ 209.660814][ T9629] netlink: 342 bytes leftover after parsing attributes in process `syz.2.972'. [ 209.679265][ T9629] netlink: 342 bytes leftover after parsing attributes in process `syz.2.972'. [ 209.706611][ T9629] netlink: 130 bytes leftover after parsing attributes in process `syz.2.972'. [ 211.119019][ T9648] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 211.168285][ T9648] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 212.618545][ T9669] netlink: 28 bytes leftover after parsing attributes in process `syz.0.985'. [ 212.703525][ T9670] netlink: 4 bytes leftover after parsing attributes in process `syz.0.985'. [ 217.357243][ T9757] netlink: Unknown conntrack attr (type=64, max=9) [ 217.414685][ T9760] netlink: 'syz.5.1013': attribute type 2 has an invalid length. [ 217.549586][ T9765] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1014'. [ 217.674248][ T9771] netlink: 266 bytes leftover after parsing attributes in process `syz.0.1015'. [ 217.698418][ T9771] IPv6: NLM_F_CREATE should be specified when creating new route [ 217.934283][ T9775] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1017'. [ 218.143534][ T9775] bond0: (slave bond_slave_0): Releasing backup interface [ 218.235665][ T9780] netlink: 'syz.5.1018': attribute type 22 has an invalid length. [ 218.271875][ T9780] netlink: 330 bytes leftover after parsing attributes in process `syz.5.1018'. [ 218.983607][ T29] audit: type=1804 audit(4294967312.550:5): pid=9817 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.1024" name="#)-\&[}" dev="mqueue" ino=20720 res=1 errno=0 [ 218.983613][ T9817] kernel read not supported for file /#)-\&[} (pid: 9817 comm: syz.0.1024) [ 219.080146][ T29] audit: type=1800 audit(4294967312.650:6): pid=9817 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1024" name="#)-\&[}" dev="mqueue" ino=20720 res=0 errno=0 [ 223.668612][ T9910] netlink: 334 bytes leftover after parsing attributes in process `syz.2.1049'. [ 225.149340][ T9935] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1053'. [ 225.195294][ T9935] lo: entered promiscuous mode [ 225.209444][ T9935] lo: entered allmulticast mode [ 226.248732][ T9951] netlink: 334 bytes leftover after parsing attributes in process `syz.2.1058'. [ 228.465220][ T9988] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1067'. [ 228.831502][ T9988] bond0: (slave bond_slave_0): Releasing backup interface [ 229.664708][T10006] openvswitch: netlink: Tunnel attr 0 has unexpected len 0 expected 8 [ 229.684845][T10007] openvswitch: netlink: Tunnel attr 0 has unexpected len 0 expected 8 [ 233.859859][T10093] RDS: rds_bind could not find a transport for ::ffff:172.20.20.187, load rds_tcp or rds_rdma? [ 234.768314][T10111] netlink: 330 bytes leftover after parsing attributes in process `syz.1.1102'. [ 235.920356][T10145] openvswitch: netlink: nsh attr 1 has unexpected len 14 expected 8 [ 237.273417][T10188] netlink: 306 bytes leftover after parsing attributes in process `syz.5.1125'. [ 238.109542][T10212] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1132'. [ 239.095613][T10236] netlink: 326 bytes leftover after parsing attributes in process `syz.2.1135'. [ 240.530186][T10266] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1144'. [ 240.863635][T10273] bridge0: port 3(ipvlan1) entered blocking state [ 240.884204][T10273] bridge0: port 3(ipvlan1) entered disabled state [ 240.910715][T10273] ipvlan1: entered allmulticast mode [ 240.916069][T10273] veth0_vlan: entered allmulticast mode [ 240.949654][T10273] ipvlan1: left allmulticast mode [ 240.957142][T10273] veth0_vlan: left allmulticast mode [ 241.448825][T10288] tipc: Started in network mode [ 241.453747][T10288] tipc: Node identity ee00, cluster identity 4711 [ 241.495872][T10288] tipc: Node number set to 60928 [ 242.905419][T10315] netlink: 88 bytes leftover after parsing attributes in process `syz.1.1160'. [ 243.625724][T10328] Process accounting resumed [ 244.541522][T10343] nbd: couldn't find a device at index -2 [ 246.065531][ T29] audit: type=1804 audit(4294967339.630:7): pid=10377 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.1167" name="#)-\&[}" dev="mqueue" ino=22055 res=1 errno=0 [ 246.090016][T10381] netlink: 'syz.1.1182': attribute type 4 has an invalid length. [ 246.091641][T10377] kernel read not supported for file /#)-\&[} (pid: 10377 comm: syz.5.1167) [ 246.142945][ T29] audit: type=1804 audit(4294967339.710:8): pid=10382 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.5.1167" name="#)-\&[}" dev="mqueue" ino=22055 res=1 errno=0 [ 246.204483][ T29] audit: type=1804 audit(4294967339.710:9): pid=10382 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.5.1167" name="#)-\&[}" dev="mqueue" ino=22055 res=1 errno=0 [ 246.250917][ T29] audit: type=1800 audit(4294967339.740:10): pid=10377 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1167" name="#)-\&[}" dev="mqueue" ino=22055 res=0 errno=0 [ 246.356363][T10388] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1184'. [ 247.458759][T10413] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1192'. [ 247.792780][T10420] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1195'. [ 247.803207][T10420] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1195'. [ 248.261766][T10428] netlink: 'syz.1.1199': attribute type 32 has an invalid length. [ 248.585292][T10446] netlink: 'syz.0.1204': attribute type 1 has an invalid length. [ 248.597174][T10446] netlink: 318 bytes leftover after parsing attributes in process `syz.0.1204'. [ 248.636909][T10449] netlink: 146 bytes leftover after parsing attributes in process `syz.2.1203'. [ 249.580438][T10480] netlink: 252 bytes leftover after parsing attributes in process `syz.1.1213'. [ 249.601476][T10480] netlink: 252 bytes leftover after parsing attributes in process `syz.1.1213'. [ 250.369793][T10498] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1216'. [ 250.548712][T10503] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1211'. [ 250.803284][T10503] team0: Port device team_slave_1 removed [ 252.978817][ T5145] Bluetooth: hci1: command 0x0406 tx timeout [ 253.582889][T10564] netlink: 334 bytes leftover after parsing attributes in process `syz.0.1236'. [ 253.742286][T10580] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1241'. [ 253.911858][T10583] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 254.236648][T10608] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1249'. [ 254.425507][T10614] netlink: 11244 bytes leftover after parsing attributes in process `syz.1.1252'. [ 254.435881][T10614] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1252'. [ 254.511334][T10614] svc: failed to register nfsdv3 RPC service (errno 22). [ 254.537502][T10614] svc: failed to register nfsaclv3 RPC service (errno 22). [ 254.732011][T10622] netlink: 322 bytes leftover after parsing attributes in process `syz.0.1256'. [ 254.759614][T10622] raw_sendmsg: syz.0.1256 forgot to set AF_INET. Fix it! [ 255.917373][T10692] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1274'. [ 256.021243][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.027843][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.171753][T10704] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1277'. [ 256.202304][T10704] mac80211_hwsim hwsim4 ›: entered promiscuous mode [ 256.227600][T10704] mac80211_hwsim hwsim4 ›: entered allmulticast mode [ 259.813049][T10780] netlink: 74 bytes leftover after parsing attributes in process `syz.1.1301'. [ 262.098042][T10863] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1328'. [ 262.133906][T10866] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1328'. [ 263.329273][T10902] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1338'. [ 263.351461][T10902] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1338'. [ 264.114083][T10932] netlink: 338 bytes leftover after parsing attributes in process `syz.1.1346'. [ 267.228549][T10986] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 267.376830][T10988] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1360'. [ 267.508265][T10992] netlink: 'syz.1.1361': attribute type 16 has an invalid length. [ 267.536561][T10992] netlink: 322 bytes leftover after parsing attributes in process `syz.1.1361'. [ 268.223793][ T55] Bluetooth: hci0: unexpected event 0x09 length: 11 > 3 [ 268.933009][T11042] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1379'. [ 269.035540][T11044] netlink: 330 bytes leftover after parsing attributes in process `syz.1.1380'. [ 269.065550][T11044] : renamed from gre0 (while UP) [ 269.092942][T11044] netlink: 330 bytes leftover after parsing attributes in process `syz.1.1380'. [ 269.528539][T11067] openvswitch: netlink: Message has 215 unknown bytes. [ 269.615056][T11073] netlink: 334 bytes leftover after parsing attributes in process `syz.2.1391'. [ 270.504477][T11100] netlink: 146 bytes leftover after parsing attributes in process `syz.5.1398'. [ 270.657087][T11105] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1399'. [ 270.712307][T11108] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1399'. [ 271.969227][T11153] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1412'. [ 273.413254][T11204] netlink: 'syz.1.1426': attribute type 1 has an invalid length. [ 273.471908][T11204] __nla_validate_parse: 1 callbacks suppressed [ 273.471928][T11204] netlink: 306 bytes leftover after parsing attributes in process `syz.1.1426'. [ 273.545702][T11204] netlink: 'syz.1.1426': attribute type 2 has an invalid length. [ 273.560975][T11204] netlink: 'syz.1.1426': attribute type 2 has an invalid length. [ 273.796815][T11219] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1431'. [ 273.895278][T11232] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1431'. [ 273.983164][T11219] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode [ 274.903835][T11276] netlink: 10 bytes leftover after parsing attributes in process `syz.1.1448'. [ 275.052228][T11284] netlink: 342 bytes leftover after parsing attributes in process `syz.0.1451'. [ 276.168578][T11332] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1465'. [ 276.201640][T11329] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1463'. [ 276.227555][T11328] netlink: 322 bytes leftover after parsing attributes in process `syz.0.1461'. [ 276.698732][T11329] bond0: (slave bond_slave_1): Releasing backup interface [ 277.286264][T11350] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1469'. [ 277.508544][T11352] netlink: 322 bytes leftover after parsing attributes in process `syz.1.1469'. [ 278.085709][ T5145] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 278.109955][ T5829] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 278.119222][ T5829] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 278.128554][ T5829] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 278.138226][ T5829] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 278.218565][ T5829] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 278.569588][T11361] chnl_net:caif_netlink_parms(): no params data found [ 278.845089][T11383] openvswitch: netlink: Unknown nsh attribute 0 [ 278.897502][T11361] bridge0: port 1(bridge_slave_0) entered blocking state [ 278.921645][T11361] bridge0: port 1(bridge_slave_0) entered disabled state [ 278.953973][T11361] bridge_slave_0: entered allmulticast mode [ 278.980552][T11361] bridge_slave_0: entered promiscuous mode [ 279.010426][T11361] bridge0: port 2(bridge_slave_1) entered blocking state [ 279.041806][T11361] bridge0: port 2(bridge_slave_1) entered disabled state [ 279.049232][T11361] bridge_slave_1: entered allmulticast mode [ 279.056271][T11361] bridge_slave_1: entered promiscuous mode [ 279.114515][T11361] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 279.126239][T11387] debugfs: Directory '!' with parent 'ieee80211' already present! [ 279.161826][T11361] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 279.235790][T11361] team0: Port device team_slave_0 added [ 279.247495][T11361] team0: Port device team_slave_1 added [ 279.357616][T11361] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 279.375330][T11361] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 279.433008][T11361] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 279.474703][T11361] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 279.493189][T11361] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 279.543759][T11361] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 279.787104][T11361] hsr_slave_0: entered promiscuous mode [ 279.821739][T11361] hsr_slave_1: entered promiscuous mode [ 279.858310][T11361] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 279.865926][T11361] Cannot create hsr debugfs directory [ 280.213874][T11361] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 280.266037][T11361] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 280.285819][T11416] __nla_validate_parse: 1 callbacks suppressed [ 280.285840][T11416] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1491'. [ 280.307685][T11361] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 280.368528][T11361] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 280.418930][ T55] Bluetooth: hci1: command tx timeout [ 280.541225][T11422] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1495'. [ 280.589608][T11361] 8021q: adding VLAN 0 to HW filter on device bond0 [ 280.616656][T11361] 8021q: adding VLAN 0 to HW filter on device team0 [ 280.631183][ T3490] bridge0: port 1(bridge_slave_0) entered blocking state [ 280.638350][ T3490] bridge0: port 1(bridge_slave_0) entered forwarding state [ 280.693622][ T3490] bridge0: port 2(bridge_slave_1) entered blocking state [ 280.700805][ T3490] bridge0: port 2(bridge_slave_1) entered forwarding state [ 280.834770][T11434] netlink: 4096 bytes leftover after parsing attributes in process `syz.0.1497'. [ 281.122995][T11361] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 281.444672][T11361] veth0_vlan: entered promiscuous mode [ 281.464417][T11361] veth1_vlan: entered promiscuous mode [ 281.516471][T11361] veth0_macvtap: entered promiscuous mode [ 281.557777][T11361] veth1_macvtap: entered promiscuous mode [ 281.614374][T11361] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 281.638209][T11361] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 281.660961][T11361] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 281.678180][T11361] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 281.701673][T11361] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 281.732115][T11361] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 281.755277][T11361] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 281.777747][T11361] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 281.801919][T11361] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 281.817982][T11361] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 281.840348][T11361] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 281.851566][T11361] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 281.862870][T11361] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 281.874431][T11361] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 281.910985][T11361] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.931317][T11361] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.946926][T11361] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.960687][T11361] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.088248][ T3490] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 282.096112][ T3490] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 282.156814][ T9797] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 282.171758][ T9797] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 282.499223][ T55] Bluetooth: hci1: command tx timeout [ 283.141527][ T29] audit: type=1800 audit(4294967300.172:11): pid=11489 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1509" name="SYSV00001000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 283.347601][T11500] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1512'. [ 283.388710][T11500] hsr_slave_0: entered allmulticast mode [ 284.578349][ T55] Bluetooth: hci1: command tx timeout [ 284.922519][T11524] Process accounting resumed [ 286.658356][ T55] Bluetooth: hci1: command tx timeout [ 287.257873][T11590] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1531'. [ 287.747057][T11599] netlink: 342 bytes leftover after parsing attributes in process `syz.6.1533'. [ 291.270883][T11659] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 295.389185][T11747] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1575'. [ 298.249429][T11810] netlink: zone id is out of range [ 298.268579][T11810] netlink: set zone limit has 8 unknown bytes [ 299.787963][T11822] netlink: 'syz.6.1602': attribute type 1 has an invalid length. [ 299.956414][T11828] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1600'. [ 300.841703][T11841] openvswitch: netlink: IP tunnel dst address not specified [ 300.962475][T11845] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1607'. [ 301.587833][T11855] Process accounting resumed [ 301.600655][T11855] kernel write not supported for file /tomoyo/query (pid: 11855 comm: syz.6.1611) [ 301.996988][T11867] RDS: rds_bind could not find a transport for ::ffff:172.30.0.3, load rds_tcp or rds_rdma? [ 302.611707][T11861] kernel write not supported for file /tomoyo/query (pid: 11861 comm: syz.6.1613) [ 302.767929][T11890] kernel write not supported for file /tomoyo/query (pid: 11890 comm: syz.6.1624) [ 302.943953][T11893] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1625'. [ 302.973735][T11893] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1625'. [ 303.054804][T11892] kernel write not supported for file /tomoyo/query (pid: 11892 comm: syz.6.1625) [ 303.348040][T11904] kernel write not supported for file /tomoyo/query (pid: 11904 comm: syz.6.1629) [ 303.491609][T11909] kernel write not supported for file /tomoyo/query (pid: 11909 comm: syz.6.1631) [ 303.816089][T11908] Process accounting resumed [ 305.718553][T11953] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1644'. [ 306.057799][T11974] netlink: 504 bytes leftover after parsing attributes in process `syz.0.1648'. [ 306.144469][T11932] kexec: Could not allocate control_code_buffer [ 309.874149][T12059] netlink: 'syz.6.1675': attribute type 1 has an invalid length. [ 310.781069][T12089] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1681'. [ 310.801632][T12090] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1681'. [ 310.987007][T12063] kexec: Could not allocate control_code_buffer [ 311.154883][ T29] audit: type=1800 audit(4294967328.180:12): pid=12100 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.1682" name="discovery_nqn" dev="configfs" ino=29124 res=0 errno=0 [ 311.484671][T12119] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1687'. [ 311.596178][T12124] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1689'. [ 311.874584][T12130] cgroup: fork rejected by pids controller in /syz1 [ 311.973225][T12164] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1693'. [ 312.206882][T12164] bond0: (slave bond_slave_1): Releasing backup interface [ 312.232565][T12279] netlink: Conntrack attr has 16 unknown bytes [ 312.304691][T12279] netlink: 338 bytes leftover after parsing attributes in process `syz.1.1695'. [ 313.279633][T12316] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1707'. [ 313.382800][T12319] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1708'. [ 314.890842][T12366] netlink: 'syz.2.1720': attribute type 4 has an invalid length. [ 314.901360][T12366] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1720'. [ 314.918823][T12366] hsr_slave_0: entered allmulticast mode [ 315.272349][T12369] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1721'. [ 315.950193][T12382] svc: failed to register nfsdv3 RPC service (errno 111). [ 315.998300][T12382] svc: failed to register nfsaclv3 RPC service (errno 111). [ 316.690605][T12406] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1732'. [ 316.711792][T12406] bridge_slave_1: left allmulticast mode [ 316.717493][T12406] bridge_slave_1: left promiscuous mode [ 316.766005][T12406] bridge0: port 2(bridge_slave_1) entered disabled state [ 316.829053][T12406] bridge_slave_0: left allmulticast mode [ 316.834771][T12406] bridge_slave_0: left promiscuous mode [ 316.846177][T12406] bridge0: port 1(bridge_slave_0) entered disabled state [ 317.227576][T12422] delete_channel: no stack [ 317.419736][T12425] netlink: 11244 bytes leftover after parsing attributes in process `syz.2.1738'. [ 317.456459][T12425] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1738'. [ 317.472703][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.479737][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.577836][T12428] svc: failed to register nfsdv3 RPC service (errno 111). [ 317.607606][T12428] svc: failed to register nfsaclv3 RPC service (errno 111). [ 317.618988][T12431] nfs: Unknown parameter '¿' [ 317.648426][T12431] nfs: Unknown parameter '¿' [ 317.663880][T12431] nfs: Unknown parameter '¿' [ 317.702808][T12431] nfs: Unknown parameter '¿' [ 317.737132][T12431] nfs: Unknown parameter '¿' [ 317.762412][T12431] nfs: Unknown parameter '¿' [ 317.790124][T12431] nfs: Unknown parameter '¿' [ 317.821448][T12431] nfs: Unknown parameter '¿' [ 317.928033][T12431] nfs: Unknown parameter '¿' [ 317.970346][T12431] nfs: Unknown parameter '¿' [ 318.010833][T12431] nfs: Unknown parameter '¿' [ 318.032485][T12431] nfs: Unknown parameter '¿' [ 318.092742][T12431] nfs: Unknown parameter '¿' [ 318.148668][T12431] nfs: Unknown parameter '¿' [ 318.169848][T12431] nfs: Unknown parameter '¿' [ 318.215974][T12431] nfs: Unknown parameter '¿' [ 319.239872][T12459] syz.6.1747(12459): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 320.263751][T12475] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1753'. [ 322.462435][T12514] netlink: 322 bytes leftover after parsing attributes in process `syz.6.1761'. [ 323.399916][T12524] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1763'. [ 323.498305][T12529] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1764'. [ 323.520832][T12529] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1764'. [ 323.765857][T12532] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1765'. [ 324.866234][T12532] bond0: (slave bond_slave_1): Releasing backup interface [ 325.116624][T12555] futex_wake_op: syz.2.1775 tries to shift op by 64; fix this program [ 326.594563][T12585] nbd: illegal input index 50331648 [ 326.942718][ T29] audit: type=1326 audit(4294967343.970:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12597 comm="" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f67a0b85d19 code=0x0 [ 328.357035][T12620] futex_wake_op: syz.0.1795 tries to shift op by -1; fix this program [ 330.056670][T12658] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1805'. [ 330.203098][T12658] h: entered promiscuous mode [ 330.334403][T12665] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1806'. [ 330.386614][T12664] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1808'. [ 331.969165][T12688] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1816'. [ 333.611615][T12713] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1822'. [ 333.633477][T12713] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 334.073525][T12728] netlink: 342 bytes leftover after parsing attributes in process `syz.1.1827'. [ 334.595963][T12722] Process accounting paused [ 335.707915][T12771] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1838'. [ 335.762195][T12766] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1838'. [ 336.466279][T12800] netlink: 330 bytes leftover after parsing attributes in process `syz.6.1846'. [ 337.149530][ T29] audit: type=1807 audit(4294967354.180:14): UNKNOWN=$ res=0 [ 337.150064][T12820] ima: policy update failed [ 337.156956][ T29] audit: type=1802 audit(4294967354.180:15): pid=12821 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.6.1853" res=0 errno=0 [ 337.235943][ T29] audit: type=1802 audit(4294967354.200:16): pid=12820 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.6.1853" res=0 errno=0 [ 338.085777][T12845] program syz.6.1859 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 339.386391][T12861] netlink: 178 bytes leftover after parsing attributes in process `syz.6.1864'. [ 340.690618][T12898] Process accounting resumed [ 341.351677][T12920] netlink: 330 bytes leftover after parsing attributes in process `syz.6.1883'. [ 341.850620][T12934] netlink: 330 bytes leftover after parsing attributes in process `syz.2.1887'. [ 345.329164][T12987] netlink: 'syz.2.1903': attribute type 13 has an invalid length. [ 346.814654][T13020] netlink: 342 bytes leftover after parsing attributes in process `syz.2.1911'. [ 346.839411][T13020] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1911'. [ 347.129436][T13029] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1914'. [ 349.901887][T13101] netlink: 342 bytes leftover after parsing attributes in process `syz.1.1934'. [ 350.741813][T13128] netlink: 'syz.1.1941': attribute type 28 has an invalid length. [ 350.768629][T13128] netlink: 334 bytes leftover after parsing attributes in process `syz.1.1941'. [ 351.699147][T13169] tipc: Trying to set illegal importance in message [ 351.720828][T13171] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1953'. [ 352.101145][T13185] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1958'. [ 352.173480][T13189] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1960'. [ 354.092814][T13238] ptrace attach of "./syz-executor exec"[5833] was attempted by ""[13238] [ 356.690963][T13288] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1990'. [ 356.707793][T13287] ima: Unable to open file: / (-2) [ 357.053660][T13287] ima: policy update failed [ 357.122190][ T29] audit: type=1802 audit(4294967374.150:17): pid=13287 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.6.1989" res=0 errno=0 [ 358.622727][T13314] netlink: 330 bytes leftover after parsing attributes in process `syz.0.1997'. [ 359.483751][T13316] netlink: 85 bytes leftover after parsing attributes in process `syz.6.1999'. [ 360.288284][T13348] netlink: 'syz.6.2007': attribute type 11 has an invalid length. [ 360.860793][T13371] ptrace attach of "./syz-executor exec"[11361] was attempted by ""[13371] [ 361.117489][T13375] Process accounting resumed [ 362.006801][T13404] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2024'. [ 362.140271][T13407] openvswitch: netlink: IP tunnel dst address not specified [ 362.930337][T13430] bridge0: port 3(batadv0) entered blocking state [ 362.937755][T13430] bridge0: port 3(batadv0) entered disabled state [ 362.952310][T13430] batadv0: entered allmulticast mode [ 362.961591][T13430] batadv0: entered promiscuous mode [ 362.967118][T13436] netlink: 504 bytes leftover after parsing attributes in process `syz.0.2037'. [ 362.967436][T13430] bridge0: port 3(batadv0) entered blocking state [ 362.982903][T13430] bridge0: port 3(batadv0) entered forwarding state [ 362.992687][T13439] netlink: 178 bytes leftover after parsing attributes in process `syz.2.2033'. [ 363.079514][ T9797] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 363.089007][ T9797] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 363.100161][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 363.999528][T13476] nbd: must specify a device to reconfigure [ 364.234006][T13487] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2050'. [ 364.665172][T13505] : Can't lookup blockdev [ 364.674872][T13505] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2057'. [ 364.805705][T13499] netlink: 342 bytes leftover after parsing attributes in process `syz.1.2054'. [ 364.956053][T13484] Process accounting resumed [ 364.965804][T13510] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2058'. [ 365.000522][T13510] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 365.007997][T13510] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 365.062853][T13510] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 365.074817][T13510] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 366.017192][T13498] openvswitch: netlink: Unknown VXLAN extension attribute 0 [ 366.332083][T13546] netlink: 178 bytes leftover after parsing attributes in process `syz.6.2065'. [ 366.650635][T13498] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2055'. [ 367.210634][ T55] Bluetooth: hci1: Malformed Event: 0x2f [ 367.415602][T13585] netlink: 334 bytes leftover after parsing attributes in process `syz.1.2077'. [ 367.903008][T13589] sctp: [Deprecated]: syz.2.2078 (pid 13589) Use of int in max_burst socket option deprecated. [ 367.903008][T13589] Use struct sctp_assoc_value instead [ 368.479329][T13609] netlink: 'syz.1.2083': attribute type 46 has an invalid length. [ 368.637696][T13613] Process accounting resumed [ 369.461642][T13635] netlink: 354 bytes leftover after parsing attributes in process `syz.1.2091'. [ 369.480085][T13635] netlink: 354 bytes leftover after parsing attributes in process `syz.1.2091'. [ 369.629057][T13637] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2093'. [ 369.660228][T13637] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2093'. [ 369.707576][T13640] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2092'. [ 369.766316][T13640] ------------[ cut here ]------------ [ 369.772238][T13640] skb_assert_len [ 369.801614][T13640] WARNING: CPU: 0 PID: 13640 at ./include/linux/skbuff.h:2680 __dev_queue_xmit+0x234a/0x43e0 [ 369.812216][T13640] Modules linked in: [ 369.816166][T13640] CPU: 0 UID: 0 PID: 13640 Comm: syz.0.2092 Not tainted 6.13.0-rc2-syzkaller-00031-gf92f4749861b #0 [ 369.827344][T13640] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 369.837657][T13640] RIP: 0010:__dev_queue_xmit+0x234a/0x43e0 [ 369.843582][T13640] Code: 3c d9 99 f8 45 84 e4 75 25 e8 52 d7 99 f8 c6 05 76 10 06 07 01 90 48 c7 c6 60 6b 7b 8c 48 c7 c7 80 3a 7b 8c e8 77 ae 5a f8 90 <0f> 0b 90 90 e8 2d d7 99 f8 44 0f b6 25 4f 10 06 07 31 ff 44 89 e6 [ 369.863355][T13640] RSP: 0018:ffffc9000df97178 EFLAGS: 00010282 [ 369.869543][T13640] RAX: 0000000000000000 RBX: ffff888020f4ea00 RCX: ffffc90004d72000 [ 369.877559][T13640] RDX: 0000000000080000 RSI: ffffffff815a16d6 RDI: 0000000000000001 [ 369.885699][T13640] RBP: ffff888020f4ea10 R08: 0000000000000001 R09: 0000000000000000 [ 369.894000][T13640] R10: 0000000000000001 R11: 0000000000000001 R12: 0000000000000000 [ 369.902436][T13640] R13: 0000000000000000 R14: 0000000000000000 R15: ffff888064e72000 [ 369.910715][T13640] FS: 00007ff7777a86c0(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 369.919927][T13640] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 369.926562][T13640] CR2: 0000000020003040 CR3: 000000002f602000 CR4: 00000000003526f0 [ 369.934660][T13640] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 369.942758][T13640] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 369.950850][T13640] Call Trace: [ 369.954169][T13640] [ 369.957136][T13640] ? __warn+0xea/0x3c0 [ 369.961342][T13640] ? preempt_schedule_notrace+0x62/0xe0 [ 369.966937][T13640] ? __dev_queue_xmit+0x234a/0x43e0 [ 369.972281][T13640] ? report_bug+0x3c0/0x580 [ 369.976835][T13640] ? handle_bug+0x54/0xa0 [ 369.981298][T13640] ? exc_invalid_op+0x17/0x50 [ 369.986030][T13640] ? asm_exc_invalid_op+0x1a/0x20 [ 369.991180][T13640] ? __warn_printk+0x1a6/0x350 [ 369.996264][T13640] ? __dev_queue_xmit+0x234a/0x43e0 [ 370.001888][T13640] ? __dev_queue_xmit+0x2349/0x43e0 [ 370.007140][T13640] ? ___sys_sendmsg+0x135/0x1e0 [ 370.012320][T13640] ? __pfx___dev_queue_xmit+0x10/0x10 [ 370.017762][T13640] ? rcu_is_watching+0x12/0xc0 [ 370.022807][T13640] ? trace_kmem_cache_alloc+0x2d/0xd0 [ 370.028278][T13640] ? kmem_cache_alloc_noprof+0x21b/0x3b0 [ 370.033957][T13640] ? __copy_skb_header+0x2e8/0x5b0 [ 370.039190][T13640] ? __skb_clone+0x570/0x760 [ 370.043830][T13640] netlink_deliver_tap+0xa61/0xca0 [ 370.049090][T13640] netlink_unicast+0x6b4/0x7f0 [ 370.053904][T13640] ? __pfx_netlink_unicast+0x10/0x10 [ 370.059327][T13640] ? __nla_parse+0x40/0x60 [ 370.063801][T13640] netdev_nl_queue_get_doit+0x37f/0x6a0 [ 370.069454][T13640] genl_family_rcv_msg_doit+0x202/0x2f0 [ 370.075051][T13640] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 370.081222][T13640] ? __dev_queue_xmit+0x89b/0x43e0 [ 370.086377][T13640] ? genl_get_cmd+0x195/0x580 [ 370.091185][T13640] ? __radix_tree_lookup+0x21f/0x2c0 [ 370.096522][T13640] genl_rcv_msg+0x565/0x800 [ 370.101451][T13640] ? __pfx_genl_rcv_msg+0x10/0x10 [ 370.106526][T13640] ? __pfx_netdev_nl_queue_get_doit+0x10/0x10 [ 370.113180][T13640] netlink_rcv_skb+0x165/0x410 [ 370.117993][T13640] ? __pfx_genl_rcv_msg+0x10/0x10 [ 370.123286][T13640] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 370.128721][T13640] ? down_read+0xc9/0x330 [ 370.133099][T13640] ? __pfx_down_read+0x10/0x10 [ 370.137923][T13640] ? netlink_deliver_tap+0x1ae/0xca0 [ 370.143336][T13640] genl_rcv+0x28/0x40 [ 370.147361][T13640] netlink_unicast+0x53c/0x7f0 [ 370.152291][T13640] ? __pfx_netlink_unicast+0x10/0x10 [ 370.157625][T13640] ? __phys_addr_symbol+0x30/0x80 [ 370.162781][T13640] ? __check_object_size+0x488/0x710 [ 370.168214][T13640] netlink_sendmsg+0x8b8/0xd70 [ 370.173024][T13640] ? __pfx_netlink_sendmsg+0x10/0x10 [ 370.178553][T13640] ____sys_sendmsg+0x9ae/0xb40 [ 370.183363][T13640] ? copy_msghdr_from_user+0x10b/0x160 [ 370.189082][T13640] ? __pfx_____sys_sendmsg+0x10/0x10 [ 370.194439][T13640] ___sys_sendmsg+0x135/0x1e0 [ 370.199265][T13640] ? __pfx____sys_sendmsg+0x10/0x10 [ 370.204811][T13640] ? __pfx_lock_release+0x10/0x10 [ 370.210253][T13640] ? trace_lock_acquire+0x14e/0x1f0 [ 370.215745][T13640] ? __fget_files+0x206/0x3a0 [ 370.220732][T13640] __sys_sendmsg+0x16e/0x220 [ 370.225378][T13640] ? __pfx___sys_sendmsg+0x10/0x10 [ 370.230604][T13640] ? __x64_sys_futex+0x1e1/0x4c0 [ 370.235614][T13640] do_syscall_64+0xcd/0x250 [ 370.240283][T13640] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 370.246221][T13640] RIP: 0033:0x7ff776985d19 [ 370.250738][T13640] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 370.270470][T13640] RSP: 002b:00007ff7777a8038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 370.279006][T13640] RAX: ffffffffffffffda RBX: 00007ff776b75fa0 RCX: 00007ff776985d19 [ 370.287032][T13640] RDX: 0000000020008810 RSI: 0000000020003040 RDI: 000000000000000a [ 370.295117][T13640] RBP: 00007ff776a01a20 R08: 0000000000000000 R09: 0000000000000000 [ 370.303460][T13640] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 370.311785][T13640] R13: 0000000000000000 R14: 00007ff776b75fa0 R15: 00007fff1277eaf8 [ 370.320150][T13640] [ 370.323200][T13640] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 370.330495][T13640] CPU: 0 UID: 0 PID: 13640 Comm: syz.0.2092 Not tainted 6.13.0-rc2-syzkaller-00031-gf92f4749861b #0 [ 370.341261][T13640] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 370.351315][T13640] Call Trace: [ 370.354591][T13640] [ 370.357523][T13640] dump_stack_lvl+0x3d/0x1f0 [ 370.362129][T13640] panic+0x71d/0x800 [ 370.366037][T13640] ? __pfx_panic+0x10/0x10 [ 370.370473][T13640] ? show_trace_log_lvl+0x29d/0x3d0 [ 370.375688][T13640] ? __dev_queue_xmit+0x234a/0x43e0 [ 370.380951][T13640] check_panic_on_warn+0xab/0xb0 [ 370.385918][T13640] __warn+0xf6/0x3c0 [ 370.389836][T13640] ? preempt_schedule_notrace+0x62/0xe0 [ 370.395394][T13640] ? __dev_queue_xmit+0x234a/0x43e0 [ 370.400607][T13640] report_bug+0x3c0/0x580 [ 370.404949][T13640] handle_bug+0x54/0xa0 [ 370.409123][T13640] exc_invalid_op+0x17/0x50 [ 370.413635][T13640] asm_exc_invalid_op+0x1a/0x20 [ 370.418491][T13640] RIP: 0010:__dev_queue_xmit+0x234a/0x43e0 [ 370.424306][T13640] Code: 3c d9 99 f8 45 84 e4 75 25 e8 52 d7 99 f8 c6 05 76 10 06 07 01 90 48 c7 c6 60 6b 7b 8c 48 c7 c7 80 3a 7b 8c e8 77 ae 5a f8 90 <0f> 0b 90 90 e8 2d d7 99 f8 44 0f b6 25 4f 10 06 07 31 ff 44 89 e6 [ 370.443919][T13640] RSP: 0018:ffffc9000df97178 EFLAGS: 00010282 [ 370.449990][T13640] RAX: 0000000000000000 RBX: ffff888020f4ea00 RCX: ffffc90004d72000 [ 370.457961][T13640] RDX: 0000000000080000 RSI: ffffffff815a16d6 RDI: 0000000000000001 [ 370.465934][T13640] RBP: ffff888020f4ea10 R08: 0000000000000001 R09: 0000000000000000 [ 370.473905][T13640] R10: 0000000000000001 R11: 0000000000000001 R12: 0000000000000000 [ 370.481875][T13640] R13: 0000000000000000 R14: 0000000000000000 R15: ffff888064e72000 [ 370.489854][T13640] ? __warn_printk+0x1a6/0x350 [ 370.494633][T13640] ? __dev_queue_xmit+0x2349/0x43e0 [ 370.499839][T13640] ? ___sys_sendmsg+0x135/0x1e0 [ 370.504716][T13640] ? __pfx___dev_queue_xmit+0x10/0x10 [ 370.510113][T13640] ? rcu_is_watching+0x12/0xc0 [ 370.514885][T13640] ? trace_kmem_cache_alloc+0x2d/0xd0 [ 370.520263][T13640] ? kmem_cache_alloc_noprof+0x21b/0x3b0 [ 370.525903][T13640] ? __copy_skb_header+0x2e8/0x5b0 [ 370.531024][T13640] ? __skb_clone+0x570/0x760 [ 370.535632][T13640] netlink_deliver_tap+0xa61/0xca0 [ 370.540767][T13640] netlink_unicast+0x6b4/0x7f0 [ 370.545561][T13640] ? __pfx_netlink_unicast+0x10/0x10 [ 370.550861][T13640] ? __nla_parse+0x40/0x60 [ 370.555301][T13640] netdev_nl_queue_get_doit+0x37f/0x6a0 [ 370.560860][T13640] genl_family_rcv_msg_doit+0x202/0x2f0 [ 370.566421][T13640] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 370.572493][T13640] ? __dev_queue_xmit+0x89b/0x43e0 [ 370.577608][T13640] ? genl_get_cmd+0x195/0x580 [ 370.582296][T13640] ? __radix_tree_lookup+0x21f/0x2c0 [ 370.587590][T13640] genl_rcv_msg+0x565/0x800 [ 370.592103][T13640] ? __pfx_genl_rcv_msg+0x10/0x10 [ 370.597137][T13640] ? __pfx_netdev_nl_queue_get_doit+0x10/0x10 [ 370.603222][T13640] netlink_rcv_skb+0x165/0x410 [ 370.607993][T13640] ? __pfx_genl_rcv_msg+0x10/0x10 [ 370.613027][T13640] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 370.618328][T13640] ? down_read+0xc9/0x330 [ 370.622664][T13640] ? __pfx_down_read+0x10/0x10 [ 370.627437][T13640] ? netlink_deliver_tap+0x1ae/0xca0 [ 370.632761][T13640] genl_rcv+0x28/0x40 [ 370.636756][T13640] netlink_unicast+0x53c/0x7f0 [ 370.641536][T13640] ? __pfx_netlink_unicast+0x10/0x10 [ 370.646827][T13640] ? __phys_addr_symbol+0x30/0x80 [ 370.651859][T13640] ? __check_object_size+0x488/0x710 [ 370.657159][T13640] netlink_sendmsg+0x8b8/0xd70 [ 370.661933][T13640] ? __pfx_netlink_sendmsg+0x10/0x10 [ 370.667237][T13640] ____sys_sendmsg+0x9ae/0xb40 [ 370.672007][T13640] ? copy_msghdr_from_user+0x10b/0x160 [ 370.677480][T13640] ? __pfx_____sys_sendmsg+0x10/0x10 [ 370.682792][T13640] ___sys_sendmsg+0x135/0x1e0 [ 370.687482][T13640] ? __pfx____sys_sendmsg+0x10/0x10 [ 370.692701][T13640] ? __pfx_lock_release+0x10/0x10 [ 370.697757][T13640] ? trace_lock_acquire+0x14e/0x1f0 [ 370.702978][T13640] ? __fget_files+0x206/0x3a0 [ 370.707673][T13640] __sys_sendmsg+0x16e/0x220 [ 370.712276][T13640] ? __pfx___sys_sendmsg+0x10/0x10 [ 370.717397][T13640] ? __x64_sys_futex+0x1e1/0x4c0 [ 370.722362][T13640] do_syscall_64+0xcd/0x250 [ 370.726877][T13640] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 370.732784][T13640] RIP: 0033:0x7ff776985d19 [ 370.737205][T13640] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 370.756815][T13640] RSP: 002b:00007ff7777a8038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 370.765235][T13640] RAX: ffffffffffffffda RBX: 00007ff776b75fa0 RCX: 00007ff776985d19 [ 370.773209][T13640] RDX: 0000000020008810 RSI: 0000000020003040 RDI: 000000000000000a [ 370.781182][T13640] RBP: 00007ff776a01a20 R08: 0000000000000000 R09: 0000000000000000 [ 370.789162][T13640] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 370.797139][T13640] R13: 0000000000000000 R14: 00007ff776b75fa0 R15: 00007fff1277eaf8 [ 370.805127][T13640] [ 370.808293][T13640] Kernel Offset: disabled [ 370.812671][T13640] Rebooting in 86400 seconds..