last executing test programs: 55.929273157s ago: executing program 3 (id=340): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), r0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) r3 = syz_clone(0x2020000, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_readv$auto(r3, &(0x7f0000000100)={0x0, 0x1}, 0x3, 0x0, 0x1, 0x4) prctl$auto(0x4, 0x17, r3, 0x9, 0xe000000000) sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001980)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="2f212cbd8966efb91b2e351f000008000300", @ANYRES32=r2, @ANYBLOB="0a0006"], 0x28}}, 0x4000000) mprotect$auto(0x1ffff000, 0x8000000000000001, 0xd) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r4, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x400c080) 54.659076244s ago: executing program 3 (id=343): set_tid_address$auto(0xfffffffffffffffd) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) r0 = socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @loopback}, 0x54) bpf$auto(0x5, &(0x7f0000000000)=@iter_create={0x19, 0x5}, 0x7) sendmmsg$auto(0xffffffffffffffff, 0x0, 0x3, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) move_pages$auto(0x0, 0x33b, &(0x7f0000000080)=0x0, 0x0, 0x0, 0x4) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x9, 0x3, 0x24, 0x940, 0x1ffde, 0x3, 0x6, 0x8000002, 0x9, 0x5, 0x2, 0x4, 0xb0, 0x7, 0x2, 0x3, 0x5, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, [0x0, 0x0, 0x0, 0x243efbdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe6e]}, 0x1fe, 0x81) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) r1 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) mmap$auto(0x0, 0x9, 0xdf, 0x1000000eb1, 0x401, 0x8000) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS0\x00', 0x48140, 0x0) r2 = open(&(0x7f0000000080)='./file0\x00', 0xeee00, 0x31) sendfile$auto(0xffffffffffffffff, r2, 0x0, 0x8000) read$auto_tracing_pipe_fops_trace(r2, &(0x7f0000000180)=""/33, 0x21) syz_genetlink_get_family_id$auto_gtp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$auto_GTP_CMD_NEWPDP(r0, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20440c0}, 0x4000004) shmctl$auto(0x9, 0xe, 0x0) socket(0xa, 0x2, 0x73) write$auto(0x3, 0x0, 0xfdef) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) 53.410431518s ago: executing program 3 (id=350): r0 = openat$auto_dfs_global_fops_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/ubifs/chk_index\x00', 0x2040, 0x0) read$auto_dfs_global_fops_debug(r0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_tcp_metrics(&(0x7f00000001c0), r1) sendmsg$auto_TCP_METRICS_CMD_GET(r1, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8040}, 0x44000) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), r1) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000001080)='/sys/devices/virtual/net/rose1/duplex\x00', 0x200, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r2, &(0x7f0000000040)=""/4109, 0x100d) sendmsg$auto_NL80211_CMD_GET_REG(r1, 0x0, 0x4078000) r3 = syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000140), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000f40)={'batadv0\x00'}) sendmsg$auto_BATADV_CMD_SET_MESH(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)={0x14, r3, 0x1, 0x70bd2c, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x140080e4) sendmsg$auto_BATADV_CMD_TP_METER(r1, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x30, r3, 0x810, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_TT_FLAGS={0x8, 0x15, 0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x44814) r5 = fcntl$getown(0xffffffffffffffff, 0x9) setpgid$auto(r5, 0xffffffffffffffff) r6 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/net/fib_trie\x00', 0xc00, 0x0) pread64$auto(r6, 0x0, 0x808, 0x3ff) r7 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)={0x400, 0x1d4, 0x39}, 0x18) r8 = geteuid() statx$auto(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x2, 0x3, &(0x7f0000000140)={0x0, 0x4, 0x3, 0x0, 0xee01, 0x0, 0x7f, 0x5, 0x1, 0xf, 0x951, 0x7fffffffffffffff, {0x1, 0x4}, {0xf1, 0x6}, {0x0, 0x8}, {0x3, 0x8}, 0x2, 0x5, 0x7, 0x6, 0x6, 0x7, 0xf026, 0x9, 0x268, 0x5b, 0x1, 0x3, [0x5, 0x7f, 0xa, 0x2db0, 0x100000000, 0x1, 0x0, 0x2e, 0x8]}) newfstatat$auto(r7, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)={0x4, 0x7fffffff, 0x1, 0x7, r8, r9, 0x0, 0x5, 0x5, 0x9, 0x8, 0x5f, 0x800, 0x1, 0x81, 0xfffffffffffffffc, 0x4}, 0xff) 53.243595241s ago: executing program 3 (id=351): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS2\x00', 0x0, 0x0) timer_create$auto(0x9, 0x0, 0x0) timer_settime$auto(0x0, 0x9, &(0x7f00000000c0)={{0x500a, 0x810007}, {0x9, 0x894f}}, 0x0) timer_gettime$auto(0x0, 0x0) ioctl$auto_TIOCSTI2(r0, 0x5412, 0x0) 51.698276139s ago: executing program 3 (id=354): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = io_uring_setup$auto(0x6, 0x0) getpid() fcntl$getown(r0, 0x9) capget$auto(&(0x7f00000002c0)={0x10001}, 0x0) r1 = getpid() process_vm_readv$auto(r1, 0x0, 0x1, 0x0, 0x6, 0x0) r2 = getpid() pidfd_open$auto(r2, 0x0) syz_clone3(0x0, 0x0) open(0x0, 0x22240, 0x155) mmap$auto_fb_fops_fb_chrdev(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000000, 0x50, r0, 0x9e) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) io_uring_setup$auto(0x1, 0x0) futex$auto(0x0, 0x6, 0x8, 0x0, 0x0, 0xffffffd6) io_uring_enter$auto(0xffffffffffffffff, 0x100, 0xffff230a, 0x9, 0x0, 0x7fff) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) read$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) madvise$auto(0xfffffffffffffffd, 0x2003f0, 0x4) tkill$auto(0x1, 0x7) openat2$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x484000, 0x30, 0x2}, 0x18) creat$auto(0x0, 0x4) swapon$auto(0x0, 0x3) r3 = socket$auto(0x100, 0x8, 0xfffffffe) bind$auto(r3, &(0x7f0000000000)=@l2={0x1f, 0xfff, @any, 0xf039}, 0x4) 50.274131311s ago: executing program 3 (id=360): bpf$auto(0x0, &(0x7f00000001c0)=@task_fd_query={0x9, 0x21eb, 0x7ff, 0x6, 0xa, 0x1000009, 0x5f, 0x0, 0x3}, 0x6f3) memfd_create$auto(&(0x7f0000000000)='\xc4--:\xdd:,./-${\x00', 0x4) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x3, 0x100) socket(0x2a, 0x2, 0x6) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) sendmmsg$auto(0x3, &(0x7f0000000000)={{0x0, 0x2, 0x0, 0x106, 0x0, 0x1, 0x3}, 0xed7138c}, 0x7, 0x0) socket(0xa, 0x3, 0x6) socket$nl_generic(0x10, 0x3, 0x10) eventfd$auto(0x3) r1 = socket(0xa, 0x2, 0x88) bpf$auto(0x0, &(0x7f0000000000)=@link_update={r1, @new_prog_fd=0x4, 0x4, @old_map_fd=r0}, 0xa3) 50.077426428s ago: executing program 32 (id=360): bpf$auto(0x0, &(0x7f00000001c0)=@task_fd_query={0x9, 0x21eb, 0x7ff, 0x6, 0xa, 0x1000009, 0x5f, 0x0, 0x3}, 0x6f3) memfd_create$auto(&(0x7f0000000000)='\xc4--:\xdd:,./-${\x00', 0x4) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x3, 0x100) socket(0x2a, 0x2, 0x6) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) sendmmsg$auto(0x3, &(0x7f0000000000)={{0x0, 0x2, 0x0, 0x106, 0x0, 0x1, 0x3}, 0xed7138c}, 0x7, 0x0) socket(0xa, 0x3, 0x6) socket$nl_generic(0x10, 0x3, 0x10) eventfd$auto(0x3) r1 = socket(0xa, 0x2, 0x88) bpf$auto(0x0, &(0x7f0000000000)=@link_update={r1, @new_prog_fd=0x4, 0x4, @old_map_fd=r0}, 0xa3) 2.688395267s ago: executing program 1 (id=665): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_INTERFACE(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000700)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="010000046d661a5a"], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x4000080) r2 = socket(0xa, 0x801, 0x84) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) getsockopt$auto(r2, 0x84, 0xffffffff, 0x0, &(0x7f0000000040)=0x9000c) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb3, 0x401, 0x8000) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000800)='/sys/devices/virtual/bdi/43:384/max_bytes\x00', 0x181482, 0x0) read$auto(r3, 0x0, 0x9) r4 = openat$auto_trace_options_fops_trace(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/tracing/options/blk_cgroup\x00', 0x5, 0x0) write$auto(r4, 0x0, 0x6) 2.415067387s ago: executing program 1 (id=670): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x29, 0x2, 0x0) openat$auto_ftrace_set_event_pid_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/set_event_pid\x00', 0xa0201, 0x0) r0 = open(&(0x7f0000000480)='./cgroup.cpu/cgroup.procs\x00', 0x80842, 0x91) read$auto(r0, 0x0, 0x210000001) write$auto(0x4, 0x0, 0x100082) mprotect$auto(0x1ffff000, 0x8000000000000001, 0xd) openat$auto_nsim_dev_max_vfs_fops_dev(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim3/max_vfs\x00', 0x48002, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0xf6f6, 0x8000) read$auto(0x3, 0x0, 0x7) write$auto(0x3, 0x0, 0xfdef) r1 = openat$auto_fops_init_pkru_pkeys(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$auto_fops_init_pkru_pkeys(r1, 0x0, 0x2b) close_range$auto(0x0, 0xfffffffffffff000, 0x2) pwrite64$auto(0xc8, &(0x7f0000000140)='\vX\xb5n\x91p\xe6\x1eRNM\x99\x86\xdde\x1cJ\x99\x00\x00\x00\x00\x00\x00\xfd\xfd\xd3\xd3\x1d\xf8\xbe\x01\x00\x00\x00\'\x03\x00\x00\x9f\x1e\xf9\xa4*\x01\x00\x00\x00^B\xb8\xe4j\t;\xe4\x90\xcc\x9d\xc5\x0fo\x84\xf4\x89\v\xea\x1b\x95\xafQ;CL\"\x01@\x00\x00\x00\x00\f\x00\xc0\x13\xc8\xe2\xae\xf5\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2E\xd8?\'\x8d\x81\x81O*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00,8\x93\xba\x88\x93\x9d\xb6\x1a\x7f\xc0%\xb0\x83ROJ+\x02\x9b#)\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd6eWj\xdc\xac\x88\xf0\xa0\x99\xb0R\xb4J}\xa8\xa1\x84]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\xde8\xf7\xc1\xa6\xf2\xc1\"\xact\xee\xc9\x00\x00\xff\xff\x00'/242, 0xfdf0, 0x39) flock$auto(0xffffffffffffffff, 0x5) r2 = openat$auto_dynamic_events_ops_trace_dynevent(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/dynamic_events\x00', 0x80301, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x80, 0x0) msgctl$auto(0x3, 0xfffffff7, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_VENDOR(r3, 0x0, 0x40088d4) write$auto_dynamic_events_ops_trace_dynevent(r2, 0x0, 0x0) 1.921647114s ago: executing program 2 (id=678): mmap$auto(0x0, 0x2020006, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sendmsg$auto_MACSEC_CMD_ADD_RXSA(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x2cb8}, 0x1, 0x0, 0x0, 0x40}, 0x2404c084) close_range$auto(0x2, 0xa, 0x0) socket(0xa, 0x2, 0x0) bpf$auto(0x0, &(0x7f0000000000)=@iter_create={0xffffffffffffffff, 0x6fc}, 0x7f) socket(0xa, 0x3, 0xff) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa}, 0x55) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x100000000000000, 0x9}, 0x7}, 0x3, 0x0) 1.727862479s ago: executing program 2 (id=679): set_mempolicy$auto(0x6, &(0x7f0000000000)=0x7e, 0x4) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) bpf$auto(0x5, &(0x7f0000000040)=@task_fd_query={0x2, 0x2, 0x8, 0x0, 0xd, 0x6, 0xffffffffffffffff, 0x6, 0x8001}, 0x3b) openat$auto_ecryptfs_miscdev_fops_miscdev(0xffffffffffffff9c, &(0x7f00000001c0), 0x20140, 0x0) bpf$auto(0x800, &(0x7f0000000100)=@task_fd_query={0x2, 0x2, 0x4, 0xfffffffe, 0x85, 0x9, 0x9, 0x6, 0x8001}, 0x101) 1.596557231s ago: executing program 2 (id=680): r0 = socket$nl_generic(0x10, 0x3, 0x10) fallocate$auto(r0, 0x7f, 0x3, 0x2) r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), r0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0x4) socket(0x10, 0x3, 0x6) r2 = socket(0x10, 0x2, 0x4) r3 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="f0020000", @ANYRES16=r3, @ANYBLOB="01002dbd7000fedbdf2505000000da0203800800c000e000000204002a000400110008002e00", @ANYRES32, @ANYBLOB="d152e64e22695352dd73864415aa8a78c65e6ab752fb4d469a47a092ae7d5061cdd9690cac4138553ecfbb1b32dd7c33b14cc842bc1e2a5da4203e64ceaa9db5223aa655b6313c011b3e73a75f1aa1f7b2ea43344b15bd494886e355cf6d92c8fe670a42bc677830013e9c4aa4fa30c3e6630bf0ed13206d5a18f6813c6fb03466112aedf5d67bb5b99fe9", @ANYRES32=r2, @ANYRES32], 0x2f0}, 0x1, 0x0, 0x0, 0x40000}, 0x50) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="2f212cbd7000fcdbdf25650a000008000300", @ANYRES32=r4], 0x1c}}, 0x4000000) mprotect$auto(0x1ffff000, 0x8000000000000004, 0xd) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_THERMAL_GENL_CMD_TZ_GET_ID(r5, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400c050}, 0x4000080) 1.502564699s ago: executing program 4 (id=681): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/fs/bcache/register_quiet\x00', 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000003540), r1) r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000080), r2) sendmsg$auto_NL80211_CMD_SET_BEACON(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000380)={0x5a0, r3, 0x4, 0x70bd27, 0x25dfdbfd, {}, [@NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0x6}, @NL80211_ATTR_HE_BSS_COLOR={0x8, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}]}, @NL80211_ATTR_REG_ALPHA2={0x41, 0x21, "6224503260de1695c4667110aae187fe6d8d8928ab78a131f61ea48d4527248554b055bf7e15a7686bccf5384132598fe221e54d71dbb940201e93cb7f"}, @NL80211_ATTR_TX_RATES={0x538, 0x5a, 0x0, 0x1, [@generic="5d7bc9de97f6001eb49b95ce281360aa474f72b391863ecfd710063325c2ffcac91589fc0ac40cfda364e5ecd2f9a12b488331e3e0cfaac0bc03673aa155b966fbda35a637b5bca7e7f4ef74e1ad04e8beda94005a1cbd88cadd4b7859e60691d922890b83d01668d1a9070f6879d4fd88b2a0809738d4443c3fa09afba5bc672652cc52a4dacfd9b4d319a6977df580e37244ec512dad1215ceeb77bbd9e50b6abef023", @typed={0x14, 0x116, 0x0, 0x0, @ipv6=@remote}, @generic="294bdaaa247b522aee8ae3c6ec5a5e817dcfa02fb7ccccb10c22b129e43d2ed45658d4f952ad0df5f5d083390bf12b1575f5a0d000f6a4d330b4a00f723a867301cd59144a1757f51a960cb2593ea04e9de15c3f9486a21a5711a1a44044502f17b4760c598e8c74548996a5b32237a5d2fbe0b28c54cf1e3abe44185943542e639d84d234b6d6297223b6701d664057a720f04fb5", @nested={0x16, 0xa6, 0x0, 0x1, [@generic="d1f5ae3cc1baf3a2b357", @nested={0x4, 0xec}, @nested={0x4, 0x136}, @generic]}, @nested={0x242, 0x6f, 0x0, 0x1, [@generic="506323c29844e6fef058fccc42f999a986262d3d21eedccac65537b6f510c342fccab3e6fc2e074f55732ccc730834e2739d101ecd9138d55213dbf0e11012a4581f0f80da0bd00a73cfe615727ab7c4b161c634ce91596322d226413fb7a87e7a31522b2bd54473b2c450b10c9c063dfe08663934d196c354fcc9dcd97eb4fcc8837f7ee3", @generic="7703944bd594b365359cd1e8c76a8a7280bbd509b7a0285f589458fb1afd7d350f46e519564a5f4108d612a97f73f93c59c0c1ae20239bdfb72bc499f70fc09591295d875eeb73a00fceb6db4a5298c2181040f92900d21363d857881cb6130278a81e41882bc4d22d5cd668b6f9056ba6724261b4", @typed={0x14, 0x14a, 0x0, 0x0, @ipv6=@dev={0xfe, 0x80, '\x00', 0x27}}, @nested={0x4, 0x6e}, @generic="7a15a21fcef2c589a0e9371012cd4c0dd9162c3fe335992877fd374f441e9cb41da41f864666355d04b35b8719e556e198c0aa7c7fc83831c59b38ba4c499179847b6ccc4c86d947941613936d65bb93491ccae605ba50de70b47480b73e51317906edf37988dbf5210a5e0525585f2143d5a96c6e166b61d16115c8a534e31c016882f4e91bb456bdeaaa5f0f7521b106", @nested={0x4, 0xe2}, @typed={0x8, 0x38, 0x0, 0x0, @ipv4=@empty}, @typed={0x14, 0xb3, 0x0, 0x0, @ipv6=@remote}, @generic="eecfc9ab253f48b2349671d1335cf33d025d617011de77df6cf164cbdda54db8b69ae0c413830c765e822bf5a3743e1ec5eac770c452b0a45ba52fdfe00d14cc9781a410de76f5765fce84bf0782a993c5145c9775f9a6f3014b6eb85577fe4b7117978ebc1368191c436a4d32e0c192528d21", @typed={0x8, 0xdd, 0x0, 0x0, @fd=r0}]}, @nested={0x94, 0x4d, 0x0, 0x1, [@generic="2d92de3253f6d0b7a6c29c5ba8174c2f7e4a0b2356af6186472f19f8ed540fc30a3d287cb49ab1ee4198d37e2b4edaeed011eb6e17c9b17e31c4b0b53d78893b47e6d48f8069e644e23537144e4d3d867dfe2961088ef0530431cd23355e337b91b27e979588e839a838b0b770f86804787020b365eb4534a94d66ec59039277831b9f3fd9a47e4f057e393bbece74f9"]}, @nested={0x12, 0x1f, 0x0, 0x1, [@nested={0x4, 0x4b}, @nested={0x4, 0x121}, @nested={0x4, 0x6a}, @generic="fc51"]}, @generic="11a044c2a3060d8597470c09cb59d38a6e697a76f490581fb980e59575f3ac2047374c670594efd68fcfa17e6c23a31f67365032ab74e8cfedfd1be08a8461bf47edb078821ed196d6e893874bcc49e16b4e6da0ed19b55b1ef0a2bd3b9c736ffd2d867d87c0418c6c9b514fcf93611f1ae461acdfa12b9905536eab493edc402f7d75aa4fd780a121d911e36ac04f02839a2894d29c909197c6c322396fce17d2de853ca32f053336d6e6ba623f952b293f4bed8a0fd676450bc40c890953b9d503c46464d998e44474bcc17fb888", @nested={0x14, 0x3b, 0x0, 0x1, [@typed={0x4, 0xd0}, @typed={0x8, 0x80, 0x0, 0x0, @fd}, @nested={0x4, 0x108}]}]}]}, 0x5a0}, 0x1, 0x0, 0x0, 0x4041}, 0x0) mmap$auto(0x0, 0x4, 0xdf, 0x9b72, 0x2, 0x0) close_range$auto(0x2, 0x8, 0x0) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) splice$auto(0x4, 0x0, 0x2, 0x0, 0xfffffffffffffffc, 0x4) r4 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f0000000040), 0xffffffffffffffff) close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x3, 0x6) r5 = socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) recvfrom$auto(0x3, 0x0, 0x800000000e, 0xfffff4a4, 0x0, 0xfffffffffffffffd) sendmsg$auto_NL80211_CMD_GET_REG(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="1b000000", @ANYBLOB="1a00279e"], 0x1ac}, 0x1, 0x0, 0x0, 0x40}, 0x40000) sendmsg$auto_CTRL_CMD_GETFAMILY(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002abd77dcb7fcdf2503000000190000000000000001"], 0x24}, 0x1, 0x0, 0x0, 0x4008810}, 0x10000000) mprotect$auto(0x1ffff000, 0x8000000000000001, 0x4) r6 = socket(0x10, 0x2, 0x0) socket(0xa, 0x2, 0x3a) connect$auto(0x3, 0x0, 0x55) setsockopt$auto(0x3, 0x1, 0x19, 0xffffffffffffffff, 0x0) sendmsg$auto_IPVS_CMD_GET_INFO(r6, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000005}, 0x4004010) 1.438516515s ago: executing program 1 (id=682): r0 = socket(0x1e, 0x1, 0x0) r1 = openat$auto_nsim_dev_hwstats_l3_disable_fops_hwstats(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/netdevsim/netdevsim3/hwstats/l3/disable_ifindex\x00', 0x841, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) r2 = open(&(0x7f0000000480)='./cgroup.cpu/cgroup.procs\x00', 0x80842, 0x91) read$auto(r2, 0x0, 0x1) write$auto_nsim_dev_hwstats_l3_disable_fops_hwstats(r1, 0x0, 0x2b) fanotify_mark$auto(r0, 0x80, 0x9, 0xffffffffffffffff, 0x0) sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYRESDEC=r0, @ANYRES16, @ANYBLOB="2f212cbd7000fcdbdf252100000008000300", @ANYRES16=0xffffffffffffffff, @ANYRES32=r0], 0x34}}, 0x4000000) r4 = syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22240, 0x155) r6 = socket(0xa, 0x2, 0x73) sendto$auto(0xffffffffffffffff, 0x0, 0x402, 0x101, &(0x7f0000000000)=@generic={0xa, "e2e18340cba8fe8000"}, 0x1c) mprotect$auto(0x1ffff000, 0x8000000000000004, 0xd) bind$auto(0x3, &(0x7f0000000000)=@in={0x2, 0x4e21, @local}, 0x1f) mknod$auto(&(0x7f00000003c0)='./file0\x00', 0x9, 0x9) mount$auto(&(0x7f0000000000)='veth0_macvtap\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='nfs\x00', 0x1, &(0x7f0000000340)) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), r5) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) r8 = socket(0x10, 0x2, 0xc) r9 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000240)={'veth0_vlan\x00', 0x0}) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r0, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000280)={&(0x7f00000004c0)={0x158, r4, 0x100, 0x70bd29, 0x25dfdbff, {}, [@ETHTOOL_A_CHANNELS_HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @ETHTOOL_A_CHANNELS_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg\x00'}]}, @ETHTOOL_A_CHANNELS_HEADER={0x94, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}]}, @ETHTOOL_A_CHANNELS_HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0xdb}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}]}, 0x158}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000) sendmsg$auto_CTRL_CMD_GETPOLICY(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB='q\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="10ffffbd7000fbdbdf250a00000a08000a40050000002000010006"], 0xf8}}, 0x10004010) sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9e44", @ANYRES16, @ANYRESDEC=r8, @ANYRES32=0x0, @ANYRESHEX=r3], 0x34}}, 0x87a39da9d33efbc9) 1.007169158s ago: executing program 1 (id=683): sendmsg$auto_NL802154_CMD_GET_WPAN_PHY(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="259629bd7000fcdbdf2501000000"], 0x14}, 0x1, 0x0, 0x0, 0x41000}, 0x64810) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'tunl0\x00', 0x0}) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000000c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1], 0x2c}, 0x1, 0x0, 0x0, 0x20004994}, 0x4000884) openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f0000002c00)='/dev/cec12\x00', 0x2900, 0x0) read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, &(0x7f0000000040)=""/41, 0x29) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r2 = socket(0x10, 0x2, 0x0) sendmsg$auto_TIPC_NL_BEARER_DISABLE(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000040)=ANY=[@ANYBLOB='J\x00\x00\x00', @ANYRES16, @ANYBLOB="010025bd7000fcdbdf25020000002c00018028003c8008001b"], 0x40}, 0x1, 0x0, 0x0, 0x20000000}, 0x44) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYRESHEX=r2, @ANYRES16], 0x14}, 0x1, 0x0, 0x0, 0x20008000}, 0x815) mmap$auto(0x6, 0xffffffffffffffff, 0x0, 0x9b71, 0x2, 0x8004) socket(0x2, 0x1, 0x0) openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000340)='/dev/v4l-subdev2\x00', 0x80000, 0x0) setresgid$auto(0x0, 0x800000a0, 0x0) setgroups$auto(0xc00000000, 0xfffffffffffffffc) keyctl$auto(0x5, 0xfffffffffffffffe, 0x103, 0x803, 0x800000000000c) setresuid$auto(0x2, 0x7, 0x8080) keyctl$auto(0x6, 0xfffffffffffffffe, 0x2, 0xb, 0x3) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000005c0)='/sys/devices/virtual/block/nbd8/queue/atomic_write_unit_min_bytes\x00', 0x200, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mtrr\x00', 0xc0000, 0x0) r3 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) ioctl$auto_DMA_HEAP_IOCTL_ALLOC(r3, 0xc0145401, 0x0) socket(0x10, 0x2, 0x0) openat$auto_proc_mounts_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/mounts\x00', 0x80400, 0x0) socket(0x2, 0x3, 0x2) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, 0x0, 0x82840, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 1.007039603s ago: executing program 4 (id=684): r0 = openat$auto_tracing_free_buffer_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/free_buffer\x00', 0x2, 0x0) socket(0x29, 0x800, 0x7) mmap$auto(0x5, 0x40000a, 0x8000000000000000, 0x14, r0, 0x7ffe) close_range$auto(0x0, 0xfffffffffffff001, 0x2) socket(0x2, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) memfd_create$auto(&(0x7f0000000000)='\xc4--:\xdd:,./-${\x00', 0x4) fallocate$auto(0x8000000000000003, 0x0, 0x9, 0x4cbd5d) fallocate$auto(0x8000000000000003, 0x3, 0xf, 0x200000004) prctl$auto(0xf, 0x200000008, 0xb, 0x3, 0x8) r1 = openat$auto_ftrace_avail_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/tracing/available_events\x00', 0x400000, 0x0) fadvise64$auto(r1, 0x1, 0x8, 0xfff) r2 = openat$auto_configfs_file_operations_configfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/config/target/core/alua/lu_gps/default_lu_gp/lu_gp_id\x00', 0x2306, 0x0) fchmod$auto(r2, 0x3) 1.000978509s ago: executing program 0 (id=685): set_tid_address$auto(0xfffffffffffffffd) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) r0 = socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @loopback}, 0x54) bpf$auto(0x5, &(0x7f0000000000)=@iter_create={0x19, 0x5}, 0x7) sendmmsg$auto(0xffffffffffffffff, 0x0, 0x3, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) move_pages$auto(0x0, 0x33b, &(0x7f0000000080)=0x0, 0x0, 0x0, 0x4) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x9, 0x3, 0x24, 0x940, 0x1ffde, 0x3, 0x6, 0x8000002, 0x9, 0x5, 0x2, 0x4, 0xb0, 0x7, 0x2, 0x3, 0x5, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, [0x0, 0x0, 0x0, 0x243efbdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe6e]}, 0x1fe, 0x81) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) r1 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) mmap$auto(0x0, 0x9, 0xdf, 0x1000000eb1, 0x401, 0x8000) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS0\x00', 0x48140, 0x0) r2 = open(&(0x7f0000000080)='./file0\x00', 0xeee00, 0x31) sendfile$auto(0xffffffffffffffff, r2, 0x0, 0x8000) read$auto_tracing_pipe_fops_trace(r2, &(0x7f0000000180)=""/33, 0x21) r3 = syz_genetlink_get_family_id$auto_gtp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$auto_GTP_CMD_NEWPDP(r0, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="000127bd7000fddbdf250000000008000400e000000108000700", @ANYBLOB="06000600ff07000008000700", @ANYRES32, @ANYBLOB="566dcf4d6c9bd6774273c0080002000500000005000d000400000008000800090000"], 0x4c}, 0x1, 0x0, 0x0, 0x20440c0}, 0x4000004) shmctl$auto(0x9, 0xe, 0x0) socket(0xa, 0x2, 0x73) write$auto(0x3, 0x0, 0xfdef) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) 869.217289ms ago: executing program 4 (id=686): set_tid_address$auto(0xfffffffffffffffd) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) r0 = socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @loopback}, 0x54) bpf$auto(0x5, &(0x7f0000000000)=@iter_create={0x19, 0x5}, 0x7) sendmmsg$auto(0xffffffffffffffff, 0x0, 0x3, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) move_pages$auto(0x0, 0x33b, &(0x7f0000000080)=0x0, 0x0, 0x0, 0x4) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x9, 0x3, 0x24, 0x940, 0x1ffde, 0x3, 0x6, 0x8000002, 0x9, 0x5, 0x2, 0x4, 0xb0, 0x7, 0x2, 0x3, 0x5, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, [0x0, 0x0, 0x0, 0x243efbdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe6e]}, 0x1fe, 0x81) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) r1 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) mmap$auto(0x0, 0x9, 0xdf, 0x1000000eb1, 0x401, 0x8000) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS0\x00', 0x48140, 0x0) r2 = open(&(0x7f0000000080)='./file0\x00', 0xeee00, 0x31) sendfile$auto(0xffffffffffffffff, r2, 0x0, 0x8000) read$auto_tracing_pipe_fops_trace(r2, &(0x7f0000000180)=""/33, 0x21) r3 = syz_genetlink_get_family_id$auto_gtp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$auto_GTP_CMD_NEWPDP(r0, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="000127bd7000fddbdf250000000008000400e000000108000700", @ANYBLOB="06000600ff07000008000700", @ANYRES32, @ANYBLOB="566dcf4d6c9bd6774273c0080002000500000005000d0004000000080008000900"], 0x4c}, 0x1, 0x0, 0x0, 0x20440c0}, 0x4000004) shmctl$auto(0x9, 0xe, 0x0) socket(0xa, 0x2, 0x73) write$auto(0x3, 0x0, 0xfdef) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) 868.561493ms ago: executing program 2 (id=694): r0 = openat$auto_dfs_global_fops_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/ubifs/chk_index\x00', 0x2040, 0x0) read$auto_dfs_global_fops_debug(r0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_tcp_metrics(&(0x7f00000001c0), r1) sendmsg$auto_TCP_METRICS_CMD_GET(r1, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8040}, 0x44000) r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/net/fib_trie\x00', 0xc00, 0x0) pread64$auto(r2, 0x0, 0x808, 0x3ff) r3 = geteuid() statx$auto(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x2, 0x3, &(0x7f0000000140)={0x0, 0x4, 0x3, 0x0, 0xee01, 0x0, 0x7f, 0x5, 0x1, 0xf, 0x951, 0x7fffffffffffffff, {0x1, 0x4}, {0xf1, 0x6}, {0x0, 0x8}, {0x3, 0x8}, 0x2, 0x5, 0x7, 0x6, 0x6, 0x7, 0xf026, 0x9, 0x268, 0x5b, 0x1, 0x3, [0x5, 0x7f, 0xa, 0x2db0, 0x100000000, 0x1, 0x0, 0x2e, 0x8]}) newfstatat$auto(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)={0x4, 0x7fffffff, 0x1, 0x7, r3, r4, 0x0, 0x5, 0x5, 0x9, 0x8, 0x5f, 0x800, 0x1, 0x81, 0xfffffffffffffffc, 0x4}, 0xff) 768.91343ms ago: executing program 1 (id=687): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/platform/vkms/graphics/fb0/mode\x00', 0x80002, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = socket(0xa, 0x2, 0x3a) sendmsg$auto_SMC_NETLINK_ENABLE_HS_LIMITATION(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f0000000280)={0xa0, 0x0, 0x8, 0x70bd2d, 0x25dfdbfc, {}, "fc17cc61dcd9feb30500000000000000c2be52605886901bae95eb0200ff314da23d83d032d9d81f5ade030d9ffb788f598191f25b3d391563b985857b23ff62ad095f4864b0318bc12aa2425136c95bd8880e6073ce7a6ce7727641861f7a6550cc373570ec556b5482d621ef1d488dd7c6cb35d240847a59ef8a477d9d94aabb896de4fd7321cf5a"}, 0xa0}, 0x1, 0x0, 0x0, 0x4000008}, 0x4004000) connect$auto(0xffffffffffffffff, 0x0, 0x57) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NFC_CMD_START_POLL(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x2c, 0x0, 0x4, 0x70bd2d, 0x25dfdbfb, {}, [@NFC_ATTR_LLC_PARAM_MIUX={0x6, 0x11, 0x8d7f}, @NFC_ATTR_LLC_PARAM_MIUX={0x6, 0x11, 0x54a}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0x7f}]}, 0x2c}, 0x1, 0x0, 0x0, 0x840}, 0x4010) write$auto(0x3, 0x0, 0x3f00) 527.806775ms ago: executing program 0 (id=688): r0 = openat$auto_dfs_global_fops_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/ubifs/chk_index\x00', 0x2040, 0x0) read$auto_dfs_global_fops_debug(r0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_tcp_metrics(&(0x7f00000001c0), r1) sendmsg$auto_TCP_METRICS_CMD_GET(r1, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8040}, 0x44000) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), r1) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000001080)='/sys/devices/virtual/net/rose1/duplex\x00', 0x200, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r2, &(0x7f0000000040)=""/4109, 0x100d) r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/net/fib_trie\x00', 0xc00, 0x0) pread64$auto(r3, 0x0, 0x808, 0x3ff) r4 = geteuid() statx$auto(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x2, 0x3, &(0x7f0000000140)={0x0, 0x4, 0x3, 0x0, 0xee01, 0x0, 0x7f, 0x5, 0x1, 0xf, 0x951, 0x7fffffffffffffff, {0x1, 0x4}, {0xf1, 0x6}, {0x0, 0x8}, {0x3, 0x8}, 0x2, 0x5, 0x7, 0x6, 0x6, 0x7, 0xf026, 0x9, 0x268, 0x5b, 0x1, 0x3, [0x5, 0x7f, 0xa, 0x2db0, 0x100000000, 0x1, 0x0, 0x2e, 0x8]}) newfstatat$auto(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)={0x4, 0x7fffffff, 0x1, 0x7, r4, r5, 0x0, 0x5, 0x5, 0x9, 0x8, 0x5f, 0x800, 0x1, 0x81, 0xfffffffffffffffc, 0x4}, 0xff) 527.590585ms ago: executing program 1 (id=689): r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/conf/batadv_slave_1/ignore_routes_with_linkdown\x00', 0x1401, 0x0) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) sysfs$auto(0x2, 0x4, 0x0) clone$auto(0x21002, 0x9, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x9) r1 = socket(0xa, 0x5, 0x0) getsockopt$auto(r1, 0x84, 0x7, 0x0, 0x0) pwrite64$auto(r0, &(0x7f00000003c0)='\vX\xb5n\x91p\xe6\x1eRN8\x99C\x05s\x1cJ\x99\x00:\x00!\r>\x94\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\xf1`\x9f\x1e\xf9\xa4\xf8\x15\x02l@^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;C\xa7XS;\xd1\xc3\x1ap|\x84\fL\"\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2y\x1f\xee\xeeE\x18A\x14\xc6\xaa\x19\x9d\x17\xcf\x9e3!\x93\xe8X\xa3,a\xd5\x14\xb9\xf8,\xdd\xd7\f!\x03\xa9\xb3\xf7\x19\xe5\xa6\x81\xbb 3\xc3\xec\x12\xef\xfbs\x9e}\xb0\xc9\x16I\x14\xbc\x01\xf0\x93O\xf0\x9byg\xb2\xdcZ\xf8g[\xf5\x97\x16\x0fm3\xcc\xc9\xaa\x812\b\x12\xffQq\x05\x00\x00\x00\x00\x00\x00\x00\xca\xf3\xc7\xa4\xebS\x17\x99\x0f\xa3\x83\xb9\xbe\xa0u\x90(\xd2\xa5\xbe\xaf9a\x10K&\xf7N\xb8\xf5\x19\x12\x95\x1ex\xe3\x89\x9eU\xb5\x80\x0e\xfb\xe2\xd61\b\t\xa4H*v\x9a`%\xb4)\xa0\xb6\x11\xc3\xb4\xaa^\x02\xc5E\na\x03\xd3\xf2j\xa4Ly\xfa\xfcX.\xa1\xcfU\xcc\xec\x8b\x057\xda,v\x1br\xd3\xc1\xcc\xb4YW\xc2\x92\xaf\xa8\x9c\x9dX]\xa4\x9a\x1a\xd5\x80B\x10\xd1\xd5\xca\x85\x9e)FT0\xe3\xb4\x19\x9dR\xc5\xdf\xb3\x9e\xea+2\x94\xba\x8c\xbe79\xba\x92\xcb\xd5\x87kB\xbd\xda\xf9\xb6)\xb3R\xe5A\xcfi\xd1\xf6\xad\x86\x00\x88\x86\x05@d\xbc\xca\xd0v\xa07\xd9\x01Z\x89\xec\xce[J\xe0M\xfc\x1f\xe7j)\xe8\xdb\xfa\xa57\xe71\x9b\xbc\xf5|\xc6\xc8\xe7N\xd3i.|\xdd\xc0h\xd6\x00\x00\x00\x00@\xb9\xa6}\x10\xa0\xd4aT\x9c\xf0\xa7\xb5\x96\x96\b\xc1\xc6zH\xbfKgpa[\xe4\xd5\xeb\x05\x01\xe7\xbc\xa4\xd9\xe9\"\x9b\xca\xd4,\xb5\x84\xd9\xa2ZC\x85t3\xc3v\"m\xa3_k]\x1f\xcb\xda\xb1\x91-\xfe6\xe4y\xfe\xc7\xccZ\xd9\xdd\xffqbk\xb0G\x81|\xcbK@*\xf1\'\xfd\xd8<\xa3\xb5', 0x8001, 0x1) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) getcwd$auto(0x0, 0xffffffffffffffff) socket(0xa, 0x801, 0x84) mmap$auto(0x0, 0xb, 0x6, 0xeb1, 0x3ff, 0x8000) recvmmsg$auto(0x3, 0x0, 0x7bf, 0x7bd6, 0x0) rename$auto(0x0, &(0x7f0000000300)='v#\xd5\xaf>=\x14\xe6%\xf7\x8a\x8d\x9a\xae\x1a\xd6\xa8\xb8\x1d\xf5(\xb0\x1f\xbd\xcbV\n\"\xe3V\xfeP\xceN\xb2\xc32\xaf\xcc\x80\xfa\xf0\xd4\xd9|\xfe\x03y\xd16\x17\x99R\xca\xe5\xf4\xb4T\xfcv\xfc\xe6\x9cv\a\x00\xc2a\x16\xd1\x8a\x80\x90\x87\xa5s\x10\xed\x93\xd4\x15=\xc0\x1f\x0e\xb0\x18v}\x03!\xf0I\xe3}\x90\x9b\x92[\xfe2<7\xd3\x81\x9a~\xcd\r\x19\x9e\x10(5\xfd\x8b\x82\xd4\xc85\xc3\x93t\t\xd0\x9d\xca^n\xf3\xcb>\x1bO\xcej\xe0\xef\xf2\xd7\xc2}\x18\xd9`AO\x95<\x9aH\vu\xae\xd4\xea\x12\xb8\xd1\n\x01\x83r\x85\xbf*\x18\xa7 S:R\x14\x89Z3\x94\x8bP)') openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/conf/batadv_slave_1/ignore_routes_with_linkdown\x00', 0x1401, 0x0) (async) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) (async) sysfs$auto(0x2, 0x4, 0x0) (async) clone$auto(0x21002, 0x9, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x9) (async) socket(0xa, 0x5, 0x0) (async) getsockopt$auto(r1, 0x84, 0x7, 0x0, 0x0) (async) pwrite64$auto(r0, &(0x7f00000003c0)='\vX\xb5n\x91p\xe6\x1eRN8\x99C\x05s\x1cJ\x99\x00:\x00!\r>\x94\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\xf1`\x9f\x1e\xf9\xa4\xf8\x15\x02l@^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;C\xa7XS;\xd1\xc3\x1ap|\x84\fL\"\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2y\x1f\xee\xeeE\x18A\x14\xc6\xaa\x19\x9d\x17\xcf\x9e3!\x93\xe8X\xa3,a\xd5\x14\xb9\xf8,\xdd\xd7\f!\x03\xa9\xb3\xf7\x19\xe5\xa6\x81\xbb 3\xc3\xec\x12\xef\xfbs\x9e}\xb0\xc9\x16I\x14\xbc\x01\xf0\x93O\xf0\x9byg\xb2\xdcZ\xf8g[\xf5\x97\x16\x0fm3\xcc\xc9\xaa\x812\b\x12\xffQq\x05\x00\x00\x00\x00\x00\x00\x00\xca\xf3\xc7\xa4\xebS\x17\x99\x0f\xa3\x83\xb9\xbe\xa0u\x90(\xd2\xa5\xbe\xaf9a\x10K&\xf7N\xb8\xf5\x19\x12\x95\x1ex\xe3\x89\x9eU\xb5\x80\x0e\xfb\xe2\xd61\b\t\xa4H*v\x9a`%\xb4)\xa0\xb6\x11\xc3\xb4\xaa^\x02\xc5E\na\x03\xd3\xf2j\xa4Ly\xfa\xfcX.\xa1\xcfU\xcc\xec\x8b\x057\xda,v\x1br\xd3\xc1\xcc\xb4YW\xc2\x92\xaf\xa8\x9c\x9dX]\xa4\x9a\x1a\xd5\x80B\x10\xd1\xd5\xca\x85\x9e)FT0\xe3\xb4\x19\x9dR\xc5\xdf\xb3\x9e\xea+2\x94\xba\x8c\xbe79\xba\x92\xcb\xd5\x87kB\xbd\xda\xf9\xb6)\xb3R\xe5A\xcfi\xd1\xf6\xad\x86\x00\x88\x86\x05@d\xbc\xca\xd0v\xa07\xd9\x01Z\x89\xec\xce[J\xe0M\xfc\x1f\xe7j)\xe8\xdb\xfa\xa57\xe71\x9b\xbc\xf5|\xc6\xc8\xe7N\xd3i.|\xdd\xc0h\xd6\x00\x00\x00\x00@\xb9\xa6}\x10\xa0\xd4aT\x9c\xf0\xa7\xb5\x96\x96\b\xc1\xc6zH\xbfKgpa[\xe4\xd5\xeb\x05\x01\xe7\xbc\xa4\xd9\xe9\"\x9b\xca\xd4,\xb5\x84\xd9\xa2ZC\x85t3\xc3v\"m\xa3_k]\x1f\xcb\xda\xb1\x91-\xfe6\xe4y\xfe\xc7\xccZ\xd9\xdd\xffqbk\xb0G\x81|\xcbK@*\xf1\'\xfd\xd8<\xa3\xb5', 0x8001, 0x1) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) getcwd$auto(0x0, 0xffffffffffffffff) (async) socket(0xa, 0x801, 0x84) (async) mmap$auto(0x0, 0xb, 0x6, 0xeb1, 0x3ff, 0x8000) (async) recvmmsg$auto(0x3, 0x0, 0x7bf, 0x7bd6, 0x0) (async) rename$auto(0x0, &(0x7f0000000300)='v#\xd5\xaf>=\x14\xe6%\xf7\x8a\x8d\x9a\xae\x1a\xd6\xa8\xb8\x1d\xf5(\xb0\x1f\xbd\xcbV\n\"\xe3V\xfeP\xceN\xb2\xc32\xaf\xcc\x80\xfa\xf0\xd4\xd9|\xfe\x03y\xd16\x17\x99R\xca\xe5\xf4\xb4T\xfcv\xfc\xe6\x9cv\a\x00\xc2a\x16\xd1\x8a\x80\x90\x87\xa5s\x10\xed\x93\xd4\x15=\xc0\x1f\x0e\xb0\x18v}\x03!\xf0I\xe3}\x90\x9b\x92[\xfe2<7\xd3\x81\x9a~\xcd\r\x19\x9e\x10(5\xfd\x8b\x82\xd4\xc85\xc3\x93t\t\xd0\x9d\xca^n\xf3\xcb>\x1bO\xcej\xe0\xef\xf2\xd7\xc2}\x18\xd9`AO\x95<\x9aH\vu\xae\xd4\xea\x12\xb8\xd1\n\x01\x83r\x85\xbf*\x18\xa7 S:R\x14\x89Z3\x94\x8bP)') (async) 527.50981ms ago: executing program 2 (id=690): lsetxattr$auto(0x0, 0x0, 0x0, 0x1, 0x2) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket(0x3, 0x2, 0x8) pipe2$auto(&(0x7f0000000040)=0xffffffffffffffff, 0x0) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty46\x00', 0x0, 0x0) ioctl$auto(r1, 0x540a, 0x0) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty46\x00', 0x0, 0x0) ioctl$auto(r2, 0x540a, r0) 412.792013ms ago: executing program 0 (id=691): r0 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer2\x00', 0x8002, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snd/midiC2D0\x00', 0x101080, 0x0) write$auto(r0, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x7fffffffffffffff) openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000400)='/dev/mtd0\x00', 0x28082, 0x0) ioctl$auto(0x3, 0xc0404d1a, 0x38) read$auto_snd_rawmidi_f_ops_rawmidi(r1, &(0x7f0000000080)=""/45, 0x2d) close_range$auto(0x2, 0x8, 0x0) 412.060428ms ago: executing program 2 (id=692): mmap$auto(0x0, 0x2000a, 0x10000000000df, 0xeb2, 0x401, 0x8000) socket(0x10, 0x2, 0x4) mmap$auto(0x0, 0x2000d, 0x4000000200df, 0xeb1, 0x404, 0x8000) sendmsg$auto_ETHTOOL_MSG_MODULE_EEPROM_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16, @ANYBLOB="ffa2"], 0x44}, 0x1, 0x0, 0x0, 0x10000000}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) r0 = bpf$auto(0x3, &(0x7f00000001c0)=@task_fd_query={0x0, 0xffffffffffffffff, 0x8, 0x20016, 0x8020000000f, 0x4, 0x5f, 0x20000000000804, 0x2}, 0x6f0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1200"], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0xa}, 0x7}, 0x3, 0x2) close_range$auto(0x2, 0x8, 0x0) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000226bd7000fedbdf250300000006000600810000000600070000800000060006000e0000000a00050000000000000000000a00010000000000000000000a000500aaaaaaaaaa3d0000080003002e00000008000200", @ANYRES32=0x0, @ANYBLOB="08070899b39c831b2f06bee402c3c20a43a80092ae20ecdd387811ea71d940e347702f2d657c64234b960e37e18bd9f86871a53900f294cc3fc38b8f8e820513f930898d2776caea4aee7e5207185b48c495682d69adb244b8d4e0f1bb5df6ab149fc1c20634f68d754f44ee48765b4d647b3b2bc105b2c8bd0f217c43dc7b072737e5c6571f9f6f7a6f92d398bdbc02bb0449aa8535e8e9ff13a9247333129624a479e836629f048c127b187d0ef5f5b5105a6543a89361a8bc"], 0x68}, 0x1, 0x0, 0x0, 0x20040084}, 0x40090) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x3, 0x100) socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) r2 = openat$auto_event_inject_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/tracing/events/vmalloc/purge_vmap_area_lazy/inject\x00', 0x40, 0x0) read$auto_event_inject_fops_trace(r2, 0x0, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYRES16=r2, @ANYRES8=r1], 0x1ac}, 0x1, 0x0, 0x0, 0x40}, 0x840) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x3, 0x6) socket(0xf, 0x3, 0x2) readv$auto(0x4, &(0x7f0000000f80)={0x0, 0x4}, 0x5) sendmmsg$auto(r0, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0x400000000000c4}, 0x2, 0x0, 0xfffffffffffffffe, 0xf}, 0x7}, 0x3af, 0x0) 361.129731ms ago: executing program 4 (id=693): r0 = openat$auto_configfs_file_operations_configfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/config/nvmet/discovery_nqn\x00', 0x189002, 0x0) r1 = open(0x0, 0x22240, 0x155) r2 = socket(0x2, 0x3, 0xa) sendmsg$auto_HWSIM_CMD_DEL_RADIO(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYRES16=r1, @ANYBLOB="6880", @ANYRES32=r1], 0x14}, 0x1, 0x0, 0x0, 0x26041884}, 0x0) syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000000), r1) write$auto_configfs_file_operations_configfs_internal(r0, &(0x7f0000000140)="8e", 0x1) 255.808522ms ago: executing program 0 (id=695): r0 = openat$auto_tracing_free_buffer_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/free_buffer\x00', 0x2, 0x0) socket(0x29, 0x800, 0x7) mmap$auto(0x5, 0x40000a, 0x8000000000000000, 0x14, r0, 0x7ffe) close_range$auto(0x0, 0xfffffffffffff001, 0x2) socket(0x2, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) memfd_create$auto(&(0x7f0000000000)='\xc4--:\xdd:,./-${\x00', 0x4) fallocate$auto(0x8000000000000003, 0x0, 0x9, 0x4cbd5d) fallocate$auto(0x8000000000000003, 0x3, 0xf, 0x200000004) prctl$auto(0xf, 0x200000008, 0xb, 0x3, 0x8) r1 = openat$auto_ftrace_avail_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/tracing/available_events\x00', 0x400000, 0x0) fadvise64$auto(r1, 0x1, 0x8, 0xfff) r2 = openat$auto_configfs_file_operations_configfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/config/target/core/alua/lu_gps/default_lu_gp/lu_gp_id\x00', 0x2306, 0x0) fchmod$auto(r2, 0x3) 205.7511ms ago: executing program 4 (id=696): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) io_uring_setup$auto(0x6, 0x0) socket(0xa, 0x801, 0x84) (async) socket(0xa, 0x801, 0x84) io_uring_setup$auto(0x6, 0x0) mmap$auto(0x0, 0x9, 0xffb, 0x8000000008011, 0x3, 0x0) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) socket(0xa, 0x801, 0x84) (async) socket(0xa, 0x801, 0x84) socket(0x2, 0x2, 0x0) setsockopt$auto(0x4, 0x88, 0x65, &(0x7f0000000000)='!/*:(*\'\x00', 0xe) io_uring_enter$auto(0x3, 0x0, 0x1, 0x3, 0x0, 0x2) io_uring_enter$auto(0x3, 0x1, 0x82400001, 0xb, 0x0, 0xd) 120.451801ms ago: executing program 0 (id=697): r0 = openat$auto_dfs_global_fops_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/ubifs/chk_index\x00', 0x2040, 0x0) read$auto_dfs_global_fops_debug(r0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_tcp_metrics(&(0x7f00000001c0), r1) sendmsg$auto_TCP_METRICS_CMD_GET(r1, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8040}, 0x44000) r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/net/fib_trie\x00', 0xc00, 0x0) pread64$auto(r2, 0x0, 0x808, 0x3ff) r3 = geteuid() statx$auto(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x2, 0x3, &(0x7f0000000140)={0x0, 0x4, 0x3, 0x0, 0xee01, 0x0, 0x7f, 0x5, 0x1, 0xf, 0x951, 0x7fffffffffffffff, {0x1, 0x4}, {0xf1, 0x6}, {0x0, 0x8}, {0x3, 0x8}, 0x2, 0x5, 0x7, 0x6, 0x6, 0x7, 0xf026, 0x9, 0x268, 0x5b, 0x1, 0x3, [0x5, 0x7f, 0xa, 0x2db0, 0x100000000, 0x1, 0x0, 0x2e, 0x8]}) newfstatat$auto(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)={0x4, 0x7fffffff, 0x1, 0x7, r3, r4, 0x0, 0x5, 0x5, 0x9, 0x8, 0x5f, 0x800, 0x1, 0x81, 0xfffffffffffffffc, 0x4}, 0xff) 955.779µs ago: executing program 4 (id=698): bpf$auto(0x401, &(0x7f0000000180)=@bpf_attr_4={0x1f, 0xffffffffffffffff, 0xffffffff}, 0xd) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x100000000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x801, 0x84) connect$auto(0x3, &(0x7f0000000140)=@l2tp={0x2, 0x0, @private=0xa010100, 0x3}, 0x55) r0 = io_uring_setup$auto(0x6, 0x0) setsockopt$auto(r0, 0x8, 0x3b, 0x0, 0x4) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/midiC2D0\x00', 0x22002, 0x0) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x5, 0x8000) r1 = openat$auto_drm_crtc_crc_control_fops_drm_debugfs_crc(0xffffffffffffff9c, &(0x7f00000000c0), 0xb02, 0x0) write$auto_drm_crtc_crc_control_fops_drm_debugfs_crc(r1, &(0x7f0000000240)='l0', 0x2) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0x2003f0, 0x11) close_range$auto(0x2, 0x8000, 0x0) io_uring_setup$auto(0x6, 0x0) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sg0\x00', 0x8000, 0x0) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg1\x00', 0x8a400, 0x0) ioctl$auto(0x3, 0xc0481273, 0x38) ioctl$auto(0x3, 0x1276, 0x7) 0s ago: executing program 0 (id=699): set_tid_address$auto(0xfffffffffffffffd) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) r0 = socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @loopback}, 0x54) bpf$auto(0x5, &(0x7f0000000000)=@iter_create={0x19, 0x5}, 0x7) sendmmsg$auto(0xffffffffffffffff, 0x0, 0x3, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) move_pages$auto(0x0, 0x33b, &(0x7f0000000080)=0x0, 0x0, 0x0, 0x4) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x9, 0x3, 0x24, 0x940, 0x1ffde, 0x3, 0x6, 0x8000002, 0x9, 0x5, 0x2, 0x4, 0xb0, 0x7, 0x2, 0x3, 0x5, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, [0x0, 0x0, 0x0, 0x243efbdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe6e]}, 0x1fe, 0x81) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) r1 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) mmap$auto(0x0, 0x9, 0xdf, 0x1000000eb1, 0x401, 0x8000) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS0\x00', 0x48140, 0x0) r2 = open(&(0x7f0000000080)='./file0\x00', 0xeee00, 0x31) sendfile$auto(0xffffffffffffffff, r2, 0x0, 0x8000) read$auto_tracing_pipe_fops_trace(r2, &(0x7f0000000180)=""/33, 0x21) r3 = syz_genetlink_get_family_id$auto_gtp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$auto_GTP_CMD_NEWPDP(r0, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="000127bd7000fddbdf250000000008000400e000000108000700", @ANYBLOB="06000600ff07000008000700", @ANYRES32, @ANYBLOB="566dcf4d6c9bd6774273c0080002000500000005000d000400000008000800090000"], 0x4c}, 0x1, 0x0, 0x0, 0x20440c0}, 0x4000004) shmctl$auto(0x9, 0xe, 0x0) socket(0xa, 0x2, 0x73) write$auto(0x3, 0x0, 0xfdef) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.14' (ED25519) to the list of known hosts. [ 65.050491][ T5819] cgroup: Unknown subsys name 'net' [ 65.168393][ T5819] cgroup: Unknown subsys name 'cpuset' [ 65.176817][ T5819] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 66.551618][ T5819] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 68.293731][ T5840] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 68.302240][ T5840] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 68.322129][ T5840] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 68.325633][ T5841] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 68.335168][ T5840] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 68.338719][ T5841] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 68.350561][ T5844] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 68.353278][ T5841] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 68.358975][ T5842] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 68.372598][ T5844] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 68.374169][ T5841] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 68.387779][ T5844] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 68.389420][ T5841] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 68.397926][ T5844] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 68.403805][ T5842] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 68.419088][ T5842] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 68.426376][ T5841] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 68.436009][ T5842] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 68.444164][ T5146] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 68.454541][ T5842] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 68.464601][ T54] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 68.464946][ T5842] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 68.484934][ T5842] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 68.494832][ T5842] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 68.832169][ T5830] chnl_net:caif_netlink_parms(): no params data found [ 68.913811][ T5831] chnl_net:caif_netlink_parms(): no params data found [ 68.985628][ T5829] chnl_net:caif_netlink_parms(): no params data found [ 69.007077][ T5828] chnl_net:caif_netlink_parms(): no params data found [ 69.050989][ T5830] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.058298][ T5830] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.069190][ T5830] bridge_slave_0: entered allmulticast mode [ 69.076268][ T5830] bridge_slave_0: entered promiscuous mode [ 69.114908][ T5830] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.122105][ T5830] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.129860][ T5830] bridge_slave_1: entered allmulticast mode [ 69.137088][ T5830] bridge_slave_1: entered promiscuous mode [ 69.171672][ T5831] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.180253][ T5831] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.188489][ T5831] bridge_slave_0: entered allmulticast mode [ 69.195360][ T5831] bridge_slave_0: entered promiscuous mode [ 69.202839][ T5831] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.210324][ T5831] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.217603][ T5831] bridge_slave_1: entered allmulticast mode [ 69.224767][ T5831] bridge_slave_1: entered promiscuous mode [ 69.255125][ T5830] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.281654][ T5830] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.312669][ T5831] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.326093][ T5831] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.342686][ T5829] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.350020][ T5829] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.357241][ T5829] bridge_slave_0: entered allmulticast mode [ 69.364219][ T5829] bridge_slave_0: entered promiscuous mode [ 69.397190][ T5829] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.405113][ T5829] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.413208][ T5829] bridge_slave_1: entered allmulticast mode [ 69.420768][ T5829] bridge_slave_1: entered promiscuous mode [ 69.428453][ T5828] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.437921][ T5828] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.446398][ T5828] bridge_slave_0: entered allmulticast mode [ 69.453074][ T5828] bridge_slave_0: entered promiscuous mode [ 69.473792][ T5830] team0: Port device team_slave_0 added [ 69.483207][ T5830] team0: Port device team_slave_1 added [ 69.496597][ T5828] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.503786][ T5828] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.511862][ T5828] bridge_slave_1: entered allmulticast mode [ 69.518626][ T5828] bridge_slave_1: entered promiscuous mode [ 69.537599][ T5831] team0: Port device team_slave_0 added [ 69.565987][ T5829] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.579059][ T5831] team0: Port device team_slave_1 added [ 69.594894][ T5828] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.606761][ T5828] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.626484][ T5829] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.652036][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.659605][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.687808][ T5830] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.708848][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.716038][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.743038][ T5831] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.762854][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.769940][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.796053][ T5830] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.822525][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.829856][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.856063][ T5831] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.875184][ T5828] team0: Port device team_slave_0 added [ 69.889258][ T5829] team0: Port device team_slave_0 added [ 69.897665][ T5829] team0: Port device team_slave_1 added [ 69.917121][ T5828] team0: Port device team_slave_1 added [ 69.962634][ T5831] hsr_slave_0: entered promiscuous mode [ 69.969278][ T5831] hsr_slave_1: entered promiscuous mode [ 70.002360][ T5830] hsr_slave_0: entered promiscuous mode [ 70.009164][ T5830] hsr_slave_1: entered promiscuous mode [ 70.015525][ T5830] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 70.023268][ T5830] Cannot create hsr debugfs directory [ 70.040441][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.050153][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.076659][ T5829] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.089067][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.096299][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.122767][ T5828] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.139587][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.149260][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.176004][ T5828] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.203549][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.210936][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.239565][ T5829] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.330070][ T5828] hsr_slave_0: entered promiscuous mode [ 70.336552][ T5828] hsr_slave_1: entered promiscuous mode [ 70.343158][ T5828] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 70.350882][ T5828] Cannot create hsr debugfs directory [ 70.420827][ T5829] hsr_slave_0: entered promiscuous mode [ 70.427499][ T5829] hsr_slave_1: entered promiscuous mode [ 70.433588][ T5829] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 70.441272][ T5829] Cannot create hsr debugfs directory [ 70.515562][ T5842] Bluetooth: hci1: command tx timeout [ 70.521550][ T5842] Bluetooth: hci0: command tx timeout [ 70.528633][ T5839] Bluetooth: hci3: command tx timeout [ 70.594801][ T5839] Bluetooth: hci2: command tx timeout [ 70.612319][ T5830] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 70.638166][ T5830] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 70.647454][ T5830] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 70.668031][ T5830] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 70.736221][ T5831] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 70.760583][ T5831] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 70.770400][ T5831] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 70.782346][ T5831] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 70.829195][ T5828] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 70.840588][ T5828] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 70.861252][ T5828] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 70.882931][ T5828] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 70.930803][ T5829] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 70.947256][ T5829] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 70.960221][ T5829] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 70.971911][ T5829] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 71.086426][ T5830] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.139900][ T5830] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.169445][ T3588] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.176968][ T3588] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.210806][ T5831] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.220332][ T81] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.227451][ T81] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.253248][ T5828] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.284938][ T5828] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.311402][ T5829] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.323627][ T5831] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.342434][ T3588] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.349604][ T3588] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.366799][ T1003] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.373912][ T1003] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.395842][ T1003] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.402935][ T1003] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.414239][ T1003] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.421447][ T1003] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.441395][ T5829] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.503883][ T81] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.511079][ T81] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.526911][ T81] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.534098][ T81] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.708794][ T5830] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.799494][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.814726][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.857578][ T5830] veth0_vlan: entered promiscuous mode [ 71.879980][ T5830] veth1_vlan: entered promiscuous mode [ 71.930842][ T5831] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.979245][ T5830] veth0_macvtap: entered promiscuous mode [ 71.997423][ T5830] veth1_macvtap: entered promiscuous mode [ 72.017933][ T5828] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.027515][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.042541][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.060606][ T5830] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.070166][ T5830] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.079547][ T5830] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.088671][ T5830] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.118295][ T5829] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.158920][ T5831] veth0_vlan: entered promiscuous mode [ 72.211844][ T5831] veth1_vlan: entered promiscuous mode [ 72.230902][ T5828] veth0_vlan: entered promiscuous mode [ 72.277582][ T5828] veth1_vlan: entered promiscuous mode [ 72.299555][ T81] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.314048][ T81] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.318934][ T5829] veth0_vlan: entered promiscuous mode [ 72.360814][ T5829] veth1_vlan: entered promiscuous mode [ 72.370055][ T5831] veth0_macvtap: entered promiscuous mode [ 72.381663][ T5831] veth1_macvtap: entered promiscuous mode [ 72.394211][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.401348][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.415631][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.420178][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.429130][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.457221][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.472047][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.488098][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.503743][ T5828] veth0_macvtap: entered promiscuous mode [ 72.520515][ T5831] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.530294][ T5831] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.539842][ T5831] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.549125][ T5831] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.570027][ T5828] veth1_macvtap: entered promiscuous mode [ 72.580209][ T5830] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 72.595184][ T5839] Bluetooth: hci3: command tx timeout [ 72.611385][ T5839] Bluetooth: hci0: command tx timeout [ 72.617815][ T5842] Bluetooth: hci1: command tx timeout [ 72.636382][ T5828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.650160][ T5828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.660949][ T5828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.671734][ T5828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.684314][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.685560][ T5842] Bluetooth: hci2: command tx timeout [ 72.709578][ T5829] veth0_macvtap: entered promiscuous mode [ 72.720961][ T5829] veth1_macvtap: entered promiscuous mode [ 72.737247][ T5829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.748037][ T5829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.758464][ T5829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.769192][ T5829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.779207][ T5829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.789723][ T5829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.801269][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.809890][ T5828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.831715][ T5828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.842807][ T5828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.855253][ T5828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.866614][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.903179][ T5828] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.912133][ T5828] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.924245][ T5828] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.933808][ T5828] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.951254][ T5829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.962791][ T5829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.979223][ T5829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.991795][ T5829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.008290][ T5829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.020234][ T5829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.036856][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.054751][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.072305][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.114211][ T5829] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.130100][ T5829] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.139104][ T5829] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.152467][ T5829] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.185979][ T81] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.201250][ T81] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.428534][ T1003] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.450571][ T1003] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.507453][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.515360][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.561615][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.569758][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.664080][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.699143][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.927562][ T5905] vivid-009: ================= START STATUS ================= [ 73.950300][ T5905] vivid-009: ================== END STATUS ================== [ 74.088851][ T5905] netlink: 248 bytes leftover after parsing attributes in process `syz.2.3'. [ 74.180375][ T5909] raw_sendmsg: syz.0.6 forgot to set AF_INET. Fix it! [ 74.675854][ T5842] Bluetooth: hci1: command tx timeout [ 74.676722][ T5146] Bluetooth: hci3: command tx timeout [ 74.687337][ T5839] Bluetooth: hci0: command tx timeout [ 74.694010][ T5923] program syz.0.11 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 74.754769][ T5146] Bluetooth: hci2: command tx timeout [ 75.402711][ T5938] netlink: 28 bytes leftover after parsing attributes in process `syz.2.16'. [ 75.694305][ T5944] netlink: 28 bytes leftover after parsing attributes in process `syz.1.17'. [ 75.697768][ T5911] process 'syz.3.7' launched ':,' with NULL argv: empty string added [ 75.820635][ T5938] team0: Port device team_slave_0 removed [ 76.043494][ T5944] team0: Port device team_slave_0 removed [ 76.205158][ T5955] netlink: 28 bytes leftover after parsing attributes in process `syz.3.19'. [ 76.446444][ T5955] team0: Port device team_slave_0 removed [ 76.592476][ T5963] netlink: 8 bytes leftover after parsing attributes in process `syz.0.21'. [ 76.765154][ T5146] Bluetooth: hci1: command tx timeout [ 76.770633][ T5146] Bluetooth: hci3: command tx timeout [ 76.776701][ T5146] Bluetooth: hci0: command tx timeout [ 76.834815][ T5839] Bluetooth: hci2: command tx timeout [ 77.280496][ T5979] netlink: 28 bytes leftover after parsing attributes in process `syz.3.26'. [ 77.622775][ T5985] netlink: 28 bytes leftover after parsing attributes in process `syz.1.28'. [ 78.380199][ T5997] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 79.285210][ T6014] netlink: 28 bytes leftover after parsing attributes in process `syz.0.37'. [ 79.847256][ T6014] team0: Port device team_slave_0 removed [ 80.919678][ T6039] netlink: 28 bytes leftover after parsing attributes in process `syz.0.43'. [ 80.990359][ T6039] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 81.033182][ T6039] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 81.096324][ T6037] Invalid ELF header magic: != ELF [ 81.171750][ T6039] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 81.214574][ T6039] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 81.756494][ T46] cfg80211: failed to load regulatory.db [ 84.258559][ T6088] svc: failed to register nfsdv3 RPC service (errno 111). [ 84.320361][ T6088] svc: failed to register nfsaclv3 RPC service (errno 111). [ 85.844497][ T6103] Zero length message leads to an empty skb [ 85.905271][ T29] audit: type=1804 audit(1734573122.941:2): pid=6103 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.59" name="#)-\&[}" dev="mqueue" ino=8618 res=1 errno=0 [ 85.960986][ T6103] kernel read not supported for file /#)-\&[} (pid: 6103 comm: syz.0.59) [ 86.069978][ T29] audit: type=1804 audit(1734573123.111:3): pid=6112 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.59" name="#)-\&[}" dev="mqueue" ino=8618 res=1 errno=0 [ 86.154618][ T29] audit: type=1804 audit(1734573123.111:4): pid=6112 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.59" name="#)-\&[}" dev="mqueue" ino=8618 res=1 errno=0 [ 86.188975][ T29] audit: type=1800 audit(1734573123.231:5): pid=6103 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.59" name="#)-\&[}" dev="mqueue" ino=8618 res=0 errno=0 [ 88.088792][ T6143] netlink: 28 bytes leftover after parsing attributes in process `syz.1.67'. [ 88.369700][ T6152] netlink: 28 bytes leftover after parsing attributes in process `syz.0.68'. [ 89.688149][ T6177] netlink: 28 bytes leftover after parsing attributes in process `syz.3.73'. [ 90.432524][ T29] audit: type=1804 audit(1734573127.471:6): pid=6187 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.74" name="#)-\&[}" dev="mqueue" ino=8049 res=1 errno=0 [ 90.453745][ T6187] kernel read not supported for file /#)-\&[} (pid: 6187 comm: syz.2.74) [ 90.497588][ T29] audit: type=1800 audit(1734573127.541:7): pid=6187 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.74" name="#)-\&[}" dev="mqueue" ino=8049 res=0 errno=0 [ 90.553349][ T29] audit: type=1804 audit(1734573127.591:8): pid=6183 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.74" name="#)-\&[}" dev="mqueue" ino=8049 res=1 errno=0 [ 90.655598][ T29] audit: type=1804 audit(1734573127.591:9): pid=6183 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.74" name="#)-\&[}" dev="mqueue" ino=8049 res=1 errno=0 [ 90.821128][ T6195] netlink: 28 bytes leftover after parsing attributes in process `syz.3.76'. [ 93.061851][ T29] audit: type=1804 audit(1734573130.101:10): pid=6229 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.91" name="#)-\&[}" dev="mqueue" ino=8799 res=1 errno=0 [ 93.061851][ T6229] kernel read not supported for file /#)-\&[} (pid: 6229 comm: syz.1.91) [ 93.180591][ T29] audit: type=1804 audit(1734573130.221:11): pid=6223 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.91" name="#)-\&[}" dev="mqueue" ino=8799 res=1 errno=0 [ 93.244428][ T29] audit: type=1804 audit(1734573130.221:12): pid=6223 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.91" name="#)-\&[}" dev="mqueue" ino=8799 res=1 errno=0 [ 93.351958][ T29] audit: type=1800 audit(1734573130.221:13): pid=6229 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.91" name="#)-\&[}" dev="mqueue" ino=8799 res=0 errno=0 [ 94.155305][ T6245] netlink: 28 bytes leftover after parsing attributes in process `syz.2.85'. [ 95.798240][ T6254] svc: failed to register nfsdv3 RPC service (errno 111). [ 95.905096][ T6254] svc: failed to register nfsaclv3 RPC service (errno 111). [ 97.448927][ T5973] syz.0.21 (5973) used greatest stack depth: 19632 bytes left [ 99.058700][ T6134] syz.0.64 (6134) used greatest stack depth: 18768 bytes left [ 103.185655][ T6362] netlink: 8 bytes leftover after parsing attributes in process `syz.2.111'. [ 106.592097][ T6412] netlink: 8 bytes leftover after parsing attributes in process `syz.3.123'. [ 108.388880][ T6445] netlink: 8 bytes leftover after parsing attributes in process `syz.1.134'. [ 110.990154][ T6491] binder: 6486:6491 ioctl c040563e 38 returned -22 [ 112.428178][ T6521] netlink: 28 bytes leftover after parsing attributes in process `syz.2.158'. [ 113.836930][ T6555] netlink: 28 bytes leftover after parsing attributes in process `syz.3.171'. [ 115.094820][ T6588] netlink: 28 bytes leftover after parsing attributes in process `syz.3.181'. [ 116.551985][ T6630] syz.3.194 uses obsolete (PF_INET,SOCK_PACKET) [ 117.526519][ T6668] netlink: 8 bytes leftover after parsing attributes in process `syz.1.207'. [ 118.032196][ T6681] netlink: 28 bytes leftover after parsing attributes in process `syz.0.210'. [ 119.793366][ T6719] netlink: 28 bytes leftover after parsing attributes in process `syz.3.221'. [ 120.114062][ T6729] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 120.120856][ T6729] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 120.334628][ T6732] nvme_fabrics: missing parameter 'transport=%s' [ 120.354035][ T6732] nvme_fabrics: missing parameter 'nqn=%s' [ 121.491973][ T6771] netlink: 20 bytes leftover after parsing attributes in process `syz.2.239'. [ 121.505639][ T6774] ptrace attach of "./syz-executor exec"[5829] was attempted by "./syz-executor exec"[6774] [ 122.397228][ T6793] netlink: 28 bytes leftover after parsing attributes in process `syz.1.245'. [ 122.698139][ T6796] Process accounting resumed [ 122.722803][ T6796] Console: switching to colour VGA+ 80x25 [ 124.319152][ T6823] netlink: 28 bytes leftover after parsing attributes in process `syz.3.255'. [ 125.205818][ T6834] netlink: 4 bytes leftover after parsing attributes in process `syz.3.260'. [ 125.239306][ T6834] HfR: entered promiscuous mode [ 125.250614][ T6834] netlink: 12 bytes leftover after parsing attributes in process `syz.3.260'. [ 125.273664][ T6834] HfR: left promiscuous mode [ 125.826277][ T6856] Process accounting resumed [ 126.010460][ T6865] netlink: 28 bytes leftover after parsing attributes in process `syz.3.266'. [ 126.543760][ T6875] delete_channel: no stack [ 127.202782][ T6898] Process accounting resumed [ 127.305867][ T6896] mkiss: ax0: crc mode is auto. [ 127.363932][ T6900] netlink: 8 bytes leftover after parsing attributes in process `syz.2.278'. [ 127.676324][ T6909] netlink: 20 bytes leftover after parsing attributes in process `syz.2.281'. [ 127.700792][ T6909] nbd: must specify a size in bytes for the device [ 127.819988][ T6910] netlink: 28 bytes leftover after parsing attributes in process `syz.0.280'. [ 128.506327][ T6920] netlink: 4 bytes leftover after parsing attributes in process `syz.1.286'. [ 128.565896][ T6920] HfR: entered promiscuous mode [ 128.589341][ T6920] netlink: 12 bytes leftover after parsing attributes in process `syz.1.286'. [ 128.604484][ T6920] HfR: left promiscuous mode [ 130.360864][ T6929] netlink: 334 bytes leftover after parsing attributes in process `syz.0.288'. [ 131.544854][ T6937] mmap: syz.0.291 (6937) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 131.672099][ T6936] netlink: 20 bytes leftover after parsing attributes in process `syz.1.292'. [ 131.759238][ T6936] netlink: 330 bytes leftover after parsing attributes in process `syz.1.292'. [ 131.865849][ T6942] netlink: 330 bytes leftover after parsing attributes in process `syz.1.292'. [ 133.255293][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.261664][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.691841][ T6955] netlink: 'syz.1.296': attribute type 2 has an invalid length. [ 133.822524][ T6969] mkiss: ax0: crc mode is auto. [ 134.722532][ T6978] Process accounting resumed [ 134.852236][ T6978] Process accounting resumed [ 135.282742][ T6994] lo: entered allmulticast mode [ 135.316502][ T6994] netlink: 28 bytes leftover after parsing attributes in process `syz.2.307'. [ 135.602036][ T7003] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 136.082574][ T6993] lo: left allmulticast mode [ 136.623107][ T7015] mkiss: ax0: crc mode is auto. [ 137.313914][ T7028] netlink: 330 bytes leftover after parsing attributes in process `syz.3.314'. [ 137.345151][ T7011] netlink: 'syz.0.310': attribute type 2 has an invalid length. [ 137.364877][ T7022] netlink: 20 bytes leftover after parsing attributes in process `syz.3.314'. [ 137.405616][ T7029] netlink: 330 bytes leftover after parsing attributes in process `syz.3.314'. [ 138.810507][ T7049] lo: entered allmulticast mode [ 138.862802][ T7049] netlink: 28 bytes leftover after parsing attributes in process `syz.1.321'. [ 140.142813][ T7046] lo: left allmulticast mode [ 141.386507][ T7079] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 141.404543][ T7079] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 141.435576][ T7071] netlink: 20 bytes leftover after parsing attributes in process `syz.0.325'. [ 141.586144][ T7071] netlink: 330 bytes leftover after parsing attributes in process `syz.0.325'. [ 141.671575][ T7079] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 141.828973][ T7079] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 141.877958][ T7079] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 142.065291][ T7079] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 142.228401][ T7079] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 142.278293][ T7079] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 142.400224][ T7067] netlink: 330 bytes leftover after parsing attributes in process `syz.0.325'. [ 142.435435][ T7079] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 142.648348][ T7079] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 142.707924][ T7079] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 143.068666][ T7079] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 143.396719][ T5839] Bluetooth: hci0: command 0x0c1a tx timeout [ 143.884602][ T5839] Bluetooth: hci3: command 0x0c1a tx timeout [ 144.154051][ T7107] lo: entered allmulticast mode [ 144.201090][ T7107] netlink: 28 bytes leftover after parsing attributes in process `syz.3.337'. [ 144.283254][ T5839] Bluetooth: hci1: command 0x0c1a tx timeout [ 144.754615][ T5839] Bluetooth: hci2: command 0x0c1a tx timeout [ 145.484374][ T5839] Bluetooth: hci0: command 0x0c1a tx timeout [ 145.607131][ T7106] lo: left allmulticast mode [ 145.961988][ T5839] Bluetooth: hci3: command 0x0c1a tx timeout [ 146.364539][ T5839] Bluetooth: hci1: command 0x0c1a tx timeout [ 146.582886][ T7132] netlink: 28 bytes leftover after parsing attributes in process `syz.1.341'. [ 146.834393][ T5839] Bluetooth: hci2: command 0x0c1a tx timeout [ 147.286258][ T7141] netlink: 28 bytes leftover after parsing attributes in process `syz.3.343'. [ 147.529884][ T7116] netlink: 'syz.2.339': attribute type 2 has an invalid length. [ 147.555650][ T5839] Bluetooth: hci0: command 0x0c1a tx timeout [ 148.034435][ T5839] Bluetooth: hci3: command 0x0c1a tx timeout [ 148.479619][ T5839] Bluetooth: hci1: command 0x0c1a tx timeout [ 148.834546][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 148.924399][ T5839] Bluetooth: hci2: command 0x0c1a tx timeout [ 150.194982][ T7173] openvswitch: netlink: nsh attr 1 has unexpected len 4 expected 8 [ 151.810475][ T7195] netlink: 206 bytes leftover after parsing attributes in process `syz.0.361'. [ 152.381672][ T5146] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 152.392899][ T5146] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 152.403450][ T5146] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 152.412729][ T5146] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 152.424279][ T5146] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 152.433017][ T5146] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 152.488994][ T7200] netlink: 28 bytes leftover after parsing attributes in process `syz.0.363'. [ 153.368512][ T7210] netlink: 330 bytes leftover after parsing attributes in process `syz.2.364'. [ 153.391437][ T7203] chnl_net:caif_netlink_parms(): no params data found [ 153.609072][ T7214] openvswitch: netlink: nsh attr 1 has unexpected len 4 expected 8 [ 154.012712][ T7203] bridge0: port 1(bridge_slave_0) entered blocking state [ 154.021686][ T7203] bridge0: port 1(bridge_slave_0) entered disabled state [ 154.039423][ T7203] bridge_slave_0: entered allmulticast mode [ 154.078162][ T7203] bridge_slave_0: entered promiscuous mode [ 154.097067][ T7203] bridge0: port 2(bridge_slave_1) entered blocking state [ 154.104223][ T7203] bridge0: port 2(bridge_slave_1) entered disabled state [ 154.126603][ T7203] bridge_slave_1: entered allmulticast mode [ 154.133811][ T7203] bridge_slave_1: entered promiscuous mode [ 154.287782][ T7203] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 154.333729][ T7203] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 154.509597][ T7203] team0: Port device team_slave_0 added [ 154.520368][ T5839] Bluetooth: hci2: command tx timeout [ 154.537157][ T7203] team0: Port device team_slave_1 added [ 154.846163][ T7203] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 154.853161][ T7203] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 154.929074][ T7203] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 154.956478][ T7203] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 154.975919][ T7203] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 155.034589][ T7203] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 155.323304][ T7203] hsr_slave_0: entered promiscuous mode [ 155.445039][ T7203] hsr_slave_1: entered promiscuous mode [ 155.490483][ T7203] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 155.504500][ T7203] Cannot create hsr debugfs directory [ 156.401989][ T7203] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 156.507296][ T7203] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 156.594661][ T5839] Bluetooth: hci2: command tx timeout [ 156.894610][ T7203] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 156.914720][ T7203] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 157.132367][ T7203] 8021q: adding VLAN 0 to HW filter on device bond0 [ 157.191914][ T7203] 8021q: adding VLAN 0 to HW filter on device team0 [ 157.270812][ T994] bridge0: port 1(bridge_slave_0) entered blocking state [ 157.278989][ T994] bridge0: port 1(bridge_slave_0) entered forwarding state [ 157.293445][ T29] audit: type=1800 audit(1734573194.321:14): pid=7255 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.375" name="lu_gp_id" dev="configfs" ino=13388 res=0 errno=0 [ 157.366859][ T994] bridge0: port 2(bridge_slave_1) entered blocking state [ 157.374066][ T994] bridge0: port 2(bridge_slave_1) entered forwarding state [ 157.860494][ T7203] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 158.470389][ T7203] veth0_vlan: entered promiscuous mode [ 158.530102][ T7203] veth1_vlan: entered promiscuous mode [ 158.582768][ T7203] veth0_macvtap: entered promiscuous mode [ 158.623366][ T7203] veth1_macvtap: entered promiscuous mode [ 158.669984][ T7203] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 158.674928][ T5839] Bluetooth: hci2: command tx timeout [ 158.696839][ T7203] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.724490][ T7203] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 158.761306][ T7203] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.788902][ T7203] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 158.826634][ T7203] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.865727][ T7203] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 158.891266][ T7203] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 158.923280][ T7203] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.954439][ T7203] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 158.984344][ T7203] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.994211][ T7203] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 159.054378][ T7203] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.075995][ T7203] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 159.110884][ T7203] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.150577][ T7203] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.184472][ T7203] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.193252][ T7203] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.424422][ T994] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 159.432302][ T994] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 159.683780][ T3588] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 159.707085][ T3588] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 160.093371][ T7305] netlink: 28 bytes leftover after parsing attributes in process `syz.4.362'. [ 160.448584][ T7305] team0: Port device team_slave_0 removed [ 160.755001][ T5839] Bluetooth: hci2: command tx timeout [ 161.128377][ T7324] bond0: option arp_validate: invalid value (*) [ 161.561628][ T7337] netlink: 4 bytes leftover after parsing attributes in process `syz.1.397'. [ 161.852631][ T7346] netlink: 28 bytes leftover after parsing attributes in process `syz.1.398'. [ 162.759026][ T7362] netlink: 334 bytes leftover after parsing attributes in process `syz.2.403'. [ 162.815198][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 162.822455][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 164.043138][ T7407] syz.1.418(7407): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 164.302774][ T7418] vivid-009: ================= START STATUS ================= [ 164.310857][ T7418] vivid-009: ================== END STATUS ================== [ 164.349865][ T7418] netlink: 248 bytes leftover after parsing attributes in process `syz.0.429'. [ 164.827263][ T7425] netlink: 222 bytes leftover after parsing attributes in process `syz.2.424'. [ 165.164693][ T7441] netlink: 28 bytes leftover after parsing attributes in process `syz.2.427'. [ 165.713808][ T7454] vivid-009: ================= START STATUS ================= [ 165.721934][ T7454] vivid-009: ================== END STATUS ================== [ 165.809994][ T7459] netlink: 248 bytes leftover after parsing attributes in process `syz.4.433'. [ 166.542917][ T7478] netlink: 28 bytes leftover after parsing attributes in process `syz.0.438'. [ 167.606574][ T7502] vivid-009: ================= START STATUS ================= [ 167.631971][ T7502] vivid-009: ================== END STATUS ================== [ 167.751114][ T7502] netlink: 248 bytes leftover after parsing attributes in process `syz.1.445'. [ 168.005794][ T7507] netlink: 28 bytes leftover after parsing attributes in process `syz.0.447'. [ 168.134692][ T7514] netlink: 28 bytes leftover after parsing attributes in process `syz.1.449'. [ 168.600983][ T7529] program syz.4.457 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 168.885232][ T7538] netlink: 28 bytes leftover after parsing attributes in process `syz.0.458'. [ 170.637494][ T7566] Invalid ELF header magic: != ELF [ 171.495983][ T7592] netlink: 28 bytes leftover after parsing attributes in process `syz.4.478'. [ 171.789377][ T7596] netlink: 28 bytes leftover after parsing attributes in process `syz.0.479'. [ 172.449669][ T7613] netlink: 28 bytes leftover after parsing attributes in process `syz.1.483'. [ 173.265174][ T7635] netlink: 28 bytes leftover after parsing attributes in process `syz.0.490'. [ 173.319362][ T7639] netlink: 504 bytes leftover after parsing attributes in process `syz.1.495'. [ 173.356428][ T7639] netlink: 504 bytes leftover after parsing attributes in process `syz.1.495'. [ 173.413002][ T7641] netlink: 28 bytes leftover after parsing attributes in process `syz.2.494'. [ 173.937997][ T7647] netlink: 24 bytes leftover after parsing attributes in process `syz.1.498'. [ 174.007059][ T7649] FAULT_INJECTION: forcing a failure. [ 174.007059][ T7649] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 174.066684][ T7649] CPU: 1 UID: 0 PID: 7649 Comm: syz.2.499 Not tainted 6.13.0-rc3-syzkaller-00062-gc061cf420ded #0 [ 174.078058][ T7649] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 174.088933][ T7649] Call Trace: [ 174.092239][ T7649] [ 174.095379][ T7649] dump_stack_lvl+0x16c/0x1f0 [ 174.100301][ T7649] should_fail_ex+0x497/0x5b0 [ 174.105093][ T7649] _copy_from_user+0x2e/0xd0 [ 174.109738][ T7649] copy_msghdr_from_user+0x99/0x160 [ 174.115166][ T7649] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 174.121064][ T7649] ___sys_sendmsg+0xff/0x1e0 [ 174.125697][ T7649] ? __pfx____sys_sendmsg+0x10/0x10 [ 174.130947][ T7649] ? __pfx_lock_release+0x10/0x10 [ 174.135992][ T7649] ? trace_lock_acquire+0x14e/0x1f0 [ 174.141213][ T7649] ? __fget_files+0x206/0x3a0 [ 174.145909][ T7649] __sys_sendmsg+0x16e/0x220 [ 174.150532][ T7649] ? __pfx___sys_sendmsg+0x10/0x10 [ 174.155708][ T7649] do_syscall_64+0xcd/0x250 [ 174.160226][ T7649] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 174.166245][ T7649] RIP: 0033:0x7fec35985d29 [ 174.170753][ T7649] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 174.190463][ T7649] RSP: 002b:00007fec367e6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 174.198899][ T7649] RAX: ffffffffffffffda RBX: 00007fec35b75fa0 RCX: 00007fec35985d29 [ 174.207055][ T7649] RDX: 00000000000000c0 RSI: 0000000020000f00 RDI: 0000000000000003 [ 174.215119][ T7649] RBP: 00007fec367e6090 R08: 0000000000000000 R09: 0000000000000000 [ 174.223469][ T7649] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 174.231628][ T7649] R13: 0000000000000000 R14: 00007fec35b75fa0 R15: 00007fffa368c5d8 [ 174.239895][ T7649] [ 174.678831][ T7661] netlink: 28 bytes leftover after parsing attributes in process `syz.2.501'. [ 176.703710][ T7704] netlink: 28 bytes leftover after parsing attributes in process `syz.4.515'. [ 177.342258][ T7716] netlink: 28 bytes leftover after parsing attributes in process `syz.1.519'. [ 177.504500][ T7717] Process accounting resumed [ 177.612539][ T7695] syz.0.511: vmalloc error: size 67117056, failed to allocated page array size 131088, mode:0xc22(GFP_ATOMIC|__GFP_HIGHMEM|__GFP_DIRECT_RECLAIM), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 177.629212][ T7720] netlink: 8 bytes leftover after parsing attributes in process `syz.2.522'. [ 177.672350][ T7695] CPU: 0 UID: 0 PID: 7695 Comm: syz.0.511 Not tainted 6.13.0-rc3-syzkaller-00062-gc061cf420ded #0 [ 177.683025][ T7695] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 177.684777][ T7720] netlink: 28 bytes leftover after parsing attributes in process `syz.2.522'. [ 177.693097][ T7695] Call Trace: [ 177.693114][ T7695] [ 177.693124][ T7695] dump_stack_lvl+0x16c/0x1f0 [ 177.693159][ T7695] warn_alloc+0x24d/0x3a0 [ 177.717567][ T7695] ? __pfx_warn_alloc+0x10/0x10 [ 177.722483][ T7695] ? __get_vm_area_node+0x1b0/0x2f0 [ 177.727730][ T7695] ? __get_vm_area_node+0x1dc/0x2f0 [ 177.732973][ T7695] __vmalloc_node_range_noprof+0x1105/0x1530 [ 177.739001][ T7695] ? ctl_ioctl+0x862/0xde0 [ 177.743545][ T7695] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 177.749917][ T7695] ? rcu_is_watching+0x12/0xc0 [ 177.754696][ T7695] ? trace_kmalloc+0x2d/0xd0 [ 177.759293][ T7695] ? __kmalloc_node_noprof.cold+0x5a/0x5f [ 177.765071][ T7695] ? ctl_ioctl+0x862/0xde0 [ 177.769529][ T7695] __kvmalloc_node_noprof+0x14f/0x1a0 [ 177.775127][ T7695] ? ctl_ioctl+0x862/0xde0 [ 177.779775][ T7695] ctl_ioctl+0x862/0xde0 [ 177.784069][ T7695] ? __pfx_get_target_version+0x10/0x10 [ 177.789650][ T7695] ? do_vfs_ioctl+0x513/0x1950 [ 177.794708][ T7695] ? __pfx_ctl_ioctl+0x10/0x10 [ 177.799524][ T7695] ? __fget_files+0x206/0x3a0 [ 177.804411][ T7695] dm_ctl_ioctl+0x22/0x30 [ 177.808753][ T7695] ? __pfx_dm_ctl_ioctl+0x10/0x10 [ 177.813788][ T7695] __x64_sys_ioctl+0x190/0x200 [ 177.818562][ T7695] do_syscall_64+0xcd/0x250 [ 177.823083][ T7695] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 177.828990][ T7695] RIP: 0033:0x7fabc3f85d29 [ 177.833419][ T7695] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 177.853041][ T7695] RSP: 002b:00007fabc4d06038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 177.861571][ T7695] RAX: ffffffffffffffda RBX: 00007fabc4175fa0 RCX: 00007fabc3f85d29 [ 177.869590][ T7695] RDX: 00000000200001c0 RSI: fffffffffffffd11 RDI: 0000000000000003 [ 177.877604][ T7695] RBP: 00007fabc4001a20 R08: 0000000000000000 R09: 0000000000000000 [ 177.885878][ T7695] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 177.894401][ T7695] R13: 0000000000000000 R14: 00007fabc4175fa0 R15: 00007fff56f05828 [ 177.902407][ T7695] [ 177.934371][ T7695] Mem-Info: [ 177.937549][ T7695] active_anon:32616 inactive_anon:23923 isolated_anon:0 [ 177.937549][ T7695] active_file:5129 inactive_file:45992 isolated_file:0 [ 177.937549][ T7695] unevictable:768 dirty:606 writeback:0 [ 177.937549][ T7695] slab_reclaimable:10506 slab_unreclaimable:95860 [ 177.937549][ T7695] mapped:27306 shmem:36951 pagetables:815 [ 177.937549][ T7695] sec_pagetables:0 bounce:0 [ 177.937549][ T7695] kernel_misc_reclaimable:0 [ 177.937549][ T7695] free:1288350 free_pcp:4444 free_cma:0 [ 178.004449][ T7695] Node 0 active_anon:130464kB inactive_anon:95692kB active_file:20516kB inactive_file:183896kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:109224kB dirty:2420kB writeback:0kB shmem:146268kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:2048kB writeback_tmp:0kB kernel_stack:10880kB pagetables:3260kB sec_pagetables:0kB all_unreclaimable? no [ 178.064934][ T7695] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 178.111626][ T7695] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 178.174387][ T7695] lowmem_reserve[]: 0 2465 2466 0 0 [ 178.179712][ T7695] Node 0 DMA32 free:1238888kB boost:0kB min:34200kB low:42748kB high:51296kB reserved_highatomic:0KB active_anon:134520kB inactive_anon:95692kB active_file:24716kB inactive_file:183072kB unevictable:1536kB writepending:2420kB present:3129332kB managed:2551336kB mlocked:0kB bounce:0kB free_pcp:380kB local_pcp:8kB free_cma:0kB [ 178.437457][ T7695] lowmem_reserve[]: 0 0 0 0 0 [ 178.456794][ T7695] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:824kB unevictable:0kB writepending:0kB present:1048580kB managed:876kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 178.503580][ T7733] netlink: 28 bytes leftover after parsing attributes in process `syz.4.527'. [ 178.578420][ T7695] lowmem_reserve[]: 0 0 0 0 0 [ 178.583245][ T7695] Node 1 Normal free:3893540kB boost:0kB min:55688kB low:69608kB high:83528kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:14964kB local_pcp:7388kB free_cma:0kB [ 178.704346][ T7695] lowmem_reserve[]: 0 0 0 0 0 [ 178.709154][ T7695] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 178.756043][ T7695] Node 0 DMA32: 1*4kB (M) 2*8kB (ME) 1168*16kB (UME) 1250*32kB (UME) 883*64kB (UME) 554*128kB (UME) 261*256kB (UME) 136*512kB (UM) 85*1024kB (UME) 31*2048kB (UM) 183*4096kB (UM) = 1222676kB [ 178.849335][ T7695] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 178.897323][ T7695] Node 1 Normal: 3*4kB (ME) 3*8kB (UME) 2*16kB (UM) 33*32kB (UME) 3*64kB (E) 16*128kB (UE) 14*256kB (UME) 7*512kB (UME) 4*1024kB (UM) 4*2048kB (UE) 945*4096kB (M) = 3893540kB [ 179.006730][ T7740] Process accounting resumed [ 179.017840][ T7742] nvme_fabrics: missing parameter 'transport=%s' [ 179.026329][ T7742] nvme_fabrics: missing parameter 'nqn=%s' [ 179.043307][ T7695] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 179.066594][ T7695] Node 0 hugepages_total=2 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 179.090060][ T7695] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 179.146159][ T7695] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 179.185837][ T7695] 94462 total pagecache pages [ 179.190674][ T7695] 29 pages in swap cache [ 179.209802][ T7695] Free swap = 124284kB [ 179.264400][ T7695] Total swap = 124996kB [ 179.285186][ T7695] 2097051 pages RAM [ 179.294907][ T7695] 0 pages HighMem/MovableOnly [ 179.334447][ T7695] 427367 pages reserved [ 179.348474][ T7695] 0 pages cma reserved [ 179.775655][ T7768] netlink: 8 bytes leftover after parsing attributes in process `syz.0.539'. [ 179.791806][ T7768] netlink: 28 bytes leftover after parsing attributes in process `syz.0.539'. [ 179.843398][ T7769] netlink: 28 bytes leftover after parsing attributes in process `syz.2.540'. [ 180.590314][ T7781] nvme_fabrics: missing parameter 'transport=%s' [ 180.626430][ T7781] nvme_fabrics: missing parameter 'nqn=%s' [ 181.307089][ T7807] netlink: 28 bytes leftover after parsing attributes in process `syz.2.550'. [ 181.335603][ T7808] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 181.874041][ T7812] netlink: 8 bytes leftover after parsing attributes in process `syz.4.553'. [ 181.908746][ T7812] netlink: 28 bytes leftover after parsing attributes in process `syz.4.553'. [ 182.039421][ T7814] Invalid ELF header magic: != ELF [ 183.408817][ T7844] netlink: 28 bytes leftover after parsing attributes in process `syz.0.559'. [ 184.805085][ T7887] netlink: 28 bytes leftover after parsing attributes in process `syz.4.575'. [ 185.469016][ T7901] netlink: 28 bytes leftover after parsing attributes in process `syz.4.578'. [ 186.165424][ T7917] netlink: 28 bytes leftover after parsing attributes in process `syz.4.583'. [ 186.441178][ T7924] Invalid ELF header magic: != ELF [ 187.301057][ T7933] netlink: 28 bytes leftover after parsing attributes in process `syz.1.587'. [ 187.668771][ T7938] netlink: 28 bytes leftover after parsing attributes in process `syz.2.589'. [ 187.678803][ T7938] vcan0: entered promiscuous mode [ 188.374674][ T7948] netlink: 28 bytes leftover after parsing attributes in process `syz.0.599'. [ 188.392726][ T7953] mkiss: ax0: crc mode is auto. [ 188.473370][ T7948] vcan0: entered promiscuous mode [ 188.639903][ T7960] netlink: 28 bytes leftover after parsing attributes in process `syz.1.594'. [ 189.574389][ T7977] netlink: 330 bytes leftover after parsing attributes in process `syz.0.600'. [ 190.524552][ T7992] netlink: 28 bytes leftover after parsing attributes in process `syz.0.605'. [ 191.019027][ T7997] netlink: 28 bytes leftover after parsing attributes in process `syz.0.606'. [ 191.475325][ T8008] netlink: 20 bytes leftover after parsing attributes in process `syz.0.611'. [ 193.437141][ T8046] netlink: 330 bytes leftover after parsing attributes in process `syz.1.623'. [ 194.402076][ T8080] netlink: 28 bytes leftover after parsing attributes in process `syz.1.632'. [ 194.682742][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.698001][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.343310][ T8105] netlink: 28 bytes leftover after parsing attributes in process `syz.2.641'. [ 195.579546][ T8107] netlink: 28 bytes leftover after parsing attributes in process `syz.0.642'. [ 195.945326][ T8121] netlink: 28 bytes leftover after parsing attributes in process `syz.4.645'. [ 198.381018][ T8165] netlink: 330 bytes leftover after parsing attributes in process `syz.4.656'. [ 198.731814][ T8174] netlink: 8 bytes leftover after parsing attributes in process `syz.4.659'. [ 199.194794][ T8186] netlink: 504 bytes leftover after parsing attributes in process `syz.4.663'. [ 199.554017][ T8202] netlink: 28 bytes leftover after parsing attributes in process `syz.4.671'. [ 200.391165][ T8226] netlink: 4 bytes leftover after parsing attributes in process `syz.4.681'. [ 200.489786][ T8224] netlink: 504 bytes leftover after parsing attributes in process `syz.2.680'. [ 200.893789][ T8247] netlink: 28 bytes leftover after parsing attributes in process `syz.0.685'. [ 201.048857][ T8253] netlink: 28 bytes leftover after parsing attributes in process `syz.4.686'. [ 201.384052][ T29] audit: type=1800 audit(1734573238.414:15): pid=8266 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.693" name="discovery_nqn" dev="configfs" ino=17118 res=0 errno=0 [ 201.797053][ T8286] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000007: 0000 [#1] PREEMPT SMP KASAN PTI [ 201.809697][ T8286] KASAN: null-ptr-deref in range [0x0000000000000038-0x000000000000003f] [ 201.818133][ T8286] CPU: 1 UID: 0 PID: 8286 Comm: syz.0.699 Not tainted 6.13.0-rc3-syzkaller-00062-gc061cf420ded #0 [ 201.828748][ T8286] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 201.838834][ T8286] RIP: 0010:sctp_copy_local_addr_list+0x2bc/0x5a0 [ 201.845292][ T8286] Code: 20 00 0f 85 ac 02 00 00 48 8b 1b 4c 39 fb 0f 84 98 01 00 00 e8 b5 01 3d f7 48 8d 7b 3d 48 89 f8 48 89 fa 48 c1 e8 03 83 e2 07 <42> 0f b6 04 20 38 d0 7f 08 84 c0 0f 85 86 02 00 00 44 0f b6 6b 3d [ 201.864934][ T8286] RSP: 0018:ffffc9000448fa40 EFLAGS: 00010206 [ 201.871049][ T8286] RAX: 0000000000000007 RBX: 0000000000000000 RCX: ffffc9000c2c9000 [ 201.879058][ T8286] RDX: 0000000000000005 RSI: ffffffff8a5c4d3b RDI: 000000000000003d [ 201.887058][ T8286] RBP: ffffc9000448fb20 R08: 0000000000000001 R09: 0000000000000000 [ 201.895058][ T8286] R10: 0000000000000000 R11: 0000000000000000 R12: dffffc0000000000 [ 201.903059][ T8286] R13: 0000000000000000 R14: 00000000ffffffff R15: ffff888061738fc8 [ 201.911154][ T8286] FS: 00007fabc4d066c0(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 201.920116][ T8286] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 201.926721][ T8286] CR2: 0000001b3001cff8 CR3: 0000000033c12000 CR4: 00000000003526f0 [ 201.934710][ T8286] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 201.942686][ T8286] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 201.950665][ T8286] Call Trace: [ 201.953939][ T8286] [ 201.956870][ T8286] ? die_addr+0x3b/0xa0 [ 201.961036][ T8286] ? exc_general_protection+0x155/0x230 [ 201.966601][ T8286] ? asm_exc_general_protection+0x26/0x30 [ 201.972334][ T8286] ? sctp_copy_local_addr_list+0x2ab/0x5a0 [ 201.978145][ T8286] ? sctp_copy_local_addr_list+0x2bc/0x5a0 [ 201.983962][ T8286] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 201.990123][ T8286] ? sctp_auth_asoc_copy_shkeys+0x2a7/0x360 [ 201.996026][ T8286] ? sctp_bind_addr_copy+0xe0/0x530 [ 202.001222][ T8286] sctp_bind_addr_copy+0xe0/0x530 [ 202.006256][ T8286] sctp_connect_new_asoc+0x1d8/0x790 [ 202.011551][ T8286] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 202.017363][ T8286] ? lock_acquire+0x2f/0xb0 [ 202.021864][ T8286] ? sctp_endpoint_lookup_assoc+0xac/0x2a0 [ 202.027676][ T8286] __sctp_connect+0x3f5/0xc60 [ 202.032359][ T8286] ? sctp_inet_connect+0xac/0x200 [ 202.037389][ T8286] ? __pfx___sctp_connect+0x10/0x10 [ 202.042595][ T8286] ? __pfx_sctp_inet_connect+0x10/0x10 [ 202.048064][ T8286] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 202.053959][ T8286] ? __pfx_sctp_inet_connect+0x10/0x10 [ 202.059440][ T8286] sctp_inet_connect+0x15f/0x200 [ 202.064410][ T8286] __sys_connect_file+0x13e/0x1a0 [ 202.069449][ T8286] __sys_connect+0x14f/0x170 [ 202.074054][ T8286] ? __pfx___sys_connect+0x10/0x10 [ 202.079176][ T8286] ? rcu_is_watching+0x12/0xc0 [ 202.083948][ T8286] __x64_sys_connect+0x72/0xb0 [ 202.088716][ T8286] ? lockdep_hardirqs_on+0x7c/0x110 [ 202.093915][ T8286] do_syscall_64+0xcd/0x250 [ 202.098423][ T8286] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 202.104324][ T8286] RIP: 0033:0x7fabc3f85d29 [ 202.108737][ T8286] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 202.128343][ T8286] RSP: 002b:00007fabc4d06038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 202.136759][ T8286] RAX: ffffffffffffffda RBX: 00007fabc4175fa0 RCX: 00007fabc3f85d29 [ 202.144729][ T8286] RDX: 0000000000000054 RSI: 0000000020000080 RDI: 0000000000000003 [ 202.152697][ T8286] RBP: 00007fabc4001a20 R08: 0000000000000000 R09: 0000000000000000 [ 202.160667][ T8286] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 202.168632][ T8286] R13: 0000000000000000 R14: 00007fabc4175fa0 R15: 00007fff56f05828 [ 202.176607][ T8286] [ 202.179619][ T8286] Modules linked in: [ 202.184326][ T8286] ---[ end trace 0000000000000000 ]--- [ 202.192638][ T8286] RIP: 0010:sctp_copy_local_addr_list+0x2bc/0x5a0 [ 202.199330][ T8286] Code: 20 00 0f 85 ac 02 00 00 48 8b 1b 4c 39 fb 0f 84 98 01 00 00 e8 b5 01 3d f7 48 8d 7b 3d 48 89 f8 48 89 fa 48 c1 e8 03 83 e2 07 <42> 0f b6 04 20 38 d0 7f 08 84 c0 0f 85 86 02 00 00 44 0f b6 6b 3d [ 202.220472][ T8286] RSP: 0018:ffffc9000448fa40 EFLAGS: 00010206 [ 202.227089][ T8286] RAX: 0000000000000007 RBX: 0000000000000000 RCX: ffffc9000c2c9000 [ 202.235380][ T8286] RDX: 0000000000000005 RSI: ffffffff8a5c4d3b RDI: 000000000000003d [ 202.243589][ T8286] RBP: ffffc9000448fb20 R08: 0000000000000001 R09: 0000000000000000 [ 202.252721][ T8286] R10: 0000000000000000 R11: 0000000000000000 R12: dffffc0000000000 [ 202.260969][ T8286] R13: 0000000000000000 R14: 00000000ffffffff R15: ffff888061738fc8 [ 202.262872][ T8288] netlink: 28 bytes leftover after parsing attributes in process `syz.0.699'. [ 202.269318][ T8286] FS: 00007fabc4d066c0(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 202.286980][ T8286] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 202.293599][ T8286] CR2: 00007fabc4ce4f98 CR3: 0000000033c12000 CR4: 00000000003526f0 [ 202.301685][ T8286] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 202.309816][ T8286] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 202.317882][ T8286] Kernel panic - not syncing: Fatal exception [ 202.324121][ T8286] Kernel Offset: disabled [ 202.328434][ T8286] Rebooting in 86400 seconds..