last executing test programs: 2m2.588004342s ago: executing program 1 (id=796): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_ftrace_formats_fops_trace_printk(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/tracing/printk_formats\x00', 0x109000, 0x0) socket(0x25, 0x1, 0x0) r0 = socket(0x10, 0x2, 0xc) r1 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000002c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_wireguard(&(0x7f0000003640), r2) sendmsg$auto_WG_CMD_GET_DEVICE(r2, &(0x7f0000003740)={0x0, 0x0, &(0x7f0000003700)={&(0x7f0000003680)={0x14, r3, 0x686f00e90a3cc359, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x8000) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/mm/hugepages/hugepages-2048kB/nr_hugepages_mempolicy\x00', 0xa001, 0x0) set_mempolicy$auto(0x1, &(0x7f0000000080)=0xe, 0xf7) write$auto(r4, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) sendmsg$auto_CTRL_CMD_GETPOLICY(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB='q\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="10ffffbd7000fbdbdf250a00000a08000a40050000002000010006"], 0xf8}}, 0x10004010) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x800) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x8002, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x9}, 0x3, 0x0) 2m2.470915916s ago: executing program 1 (id=798): syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/net\x00') r0 = semctl$auto(0x2, 0xc2ac, 0x200, 0x4) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x121040, 0x0) mprotect$auto(0x1ffff000, 0x8000000000000007, 0xd) r1 = openat$auto_tracing_mark_raw_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/tracing/trace_marker_raw\x00', 0xa4e07, 0x0) write$auto_tracing_mark_raw_fops_trace(r1, 0x0, 0x0) write$auto_tracing_mark_raw_fops_trace(r1, 0x0, 0x0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) close_range$auto(0x2, 0x8, 0x0) r2 = socket(0xa, 0x801, 0x84) r3 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(r2, r3, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="010026bd7000fedbdf25030000000800030000020000060007000080000008000200", @ANYRES32=0x0, @ANYBLOB="0a00050000000000000000000a00010000000000000000000a0001000000000000000000080003003800000008000200", @ANYRES32=0x0, @ANYBLOB="0a0001000000000040"], 0x6c}, 0x1, 0x0, 0x0, 0x40080}, 0x40090) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x3, 0x100) socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="13"], 0x1ac}}, 0x4004) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) sendmsg$auto_L2TP_CMD_TUNNEL_MODIFY(r3, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x34, 0x0, 0x300, 0x70bd2a, 0x25dfdbfc, {}, [@L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x44080}, 0x4004800) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x1, 0x0) setsockopt$auto(0x3, 0x6, 0x2a, 0x0, 0x4) syz_open_procfs$namespace(r0, &(0x7f0000000040)='ns/net\x00') 2m2.388017192s ago: executing program 1 (id=799): mmap$auto(0x0, 0x2000d, 0x4000000200df, 0xebe, 0x404, 0x8000000000008000) r0 = socket(0x2, 0x5, 0x0) getsockopt$auto(r0, 0x84, 0xf, 0x0, 0x0) 2m2.332881364s ago: executing program 1 (id=800): socket(0x2, 0x1, 0x0) socket(0x2, 0x6, 0x0) epoll_create$auto(0x4) epoll_wait$auto(0x5, 0x0, 0x2, 0xfffffffd) r0 = socket$nl_generic(0x10, 0x3, 0x10) epoll_ctl$auto(0x5, 0x1, r0, 0x0) capset$auto(0x0, 0xfffffffffffffffe) epoll_ctl$auto(0x5, 0x3, r0, 0x0) 2m1.420666064s ago: executing program 1 (id=809): mmap$auto(0x0, 0x400005, 0xfffffffffffffffe, 0x9b72, 0x2, 0x8000) sendmsg$auto_WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x4008810}, 0x2000c041) (async) r0 = socket(0x2a, 0x1, 0x0) bind$auto(0x3, 0x0, 0x6b) (async) sendmsg$auto_IEEE802154_DEL_IFACE(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xffffff9c, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="4e00006a1ba3c7a12916839df145799cb80ac5f1ccbcedff1cba71f72d19812630112a5089d15c4e947045dd0d9704042bc5d4f017013ae3ce74c40842e5", @ANYRES16=0x0, @ANYRES64=r0], 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x8001) (async) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000140)) (async) connect$auto(0xffffffffffffffff, &(0x7f0000000040)=@can, 0x8) (async) recvfrom$auto(r0, 0x0, 0x4, 0x8001, 0x0, 0xfffffffffffffffd) (async) fcntl$auto(0xffffffffffffffff, 0x401, 0x5) (async) write$auto(0x3, 0x0, 0xfffffdef) unshare$auto(0x40000080) r1 = socket(0xa, 0x3, 0x3a) epoll_wait$auto(r0, 0x0, 0x7ff, 0x6) (async) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) (async) r2 = socket(0x26, 0x3, 0x3) (async) setsockopt$auto(0x400000000000003, 0x29, 0xca, 0x0, 0x567) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) sysfs$auto(0x2, 0x10000000000002d, 0x0) (async) syz_genetlink_get_family_id$auto_ovs_datapath(0x0, r0) mbind$auto(0x0, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) (async) gettid() (async) connect$auto(r2, 0x0, 0x55) (async) mmap$auto(0x1000000000000101, 0x6, 0x6, 0x15, 0x3, 0x3) (async) sendfile$auto(0x6, r0, 0x0, 0x8000) (async) statmount$auto(0x0, 0x0, 0x8, 0x9) sendmsg$auto_NL80211_CMD_GET_REG(r1, 0x0, 0x40080) (async) mknod$auto(0x0, 0x23e, 0x4000001) mmap$auto(0x1, 0x8, 0xdf, 0x9b72, r0, 0x8000) (async) socket(0xa, 0x2, 0x0) unshare$auto(0x40000080) 2m0.024525502s ago: executing program 1 (id=816): mmap$auto(0x3, 0x20007, 0x4000000000df, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x9, 0xfffffffffffffffe, 0x9b72, 0x2, 0x8000) sendmsg$auto_WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x4008810}, 0x2000c041) r0 = socket(0x2a, 0x1, 0x0) mmap$auto(0x6, 0x400008, 0xdf, 0x9b72, 0x2, 0x7ffe) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0xffffffffffff0001, 0x15) io_uring_setup$auto(0x6, 0x0) madvise$auto(0x0, 0x200007, 0x19) open(0x0, 0x1a1043, 0x2a) bind$auto(0x3, 0x0, 0x6b) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000140)) connect$auto(r0, &(0x7f0000000040)=@can, 0x8) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) fcntl$auto(0xffffffffffffffff, 0x401, 0x5) unshare$auto(0x40000080) socket(0xa, 0x3, 0x3a) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) setsockopt$auto(0x400000000000003, 0x29, 0xca, 0x0, 0x567) syz_genetlink_get_family_id$auto_ovs_datapath(0x0, r0) mbind$auto(0x0, 0x100080004, 0x8, 0x0, 0x6, 0x9) gettid() connect$auto(0xffffffffffffffff, 0x0, 0x55) mmap$auto(0x0, 0x5, 0x3, 0x16, 0x3, 0x8000) unshare$auto(0x40000080) writev$auto(0x1, &(0x7f0000000100)={0x0, 0x400000000000fdef}, 0x1) madvise$auto(0x0, 0x20202, 0x15) r1 = open_by_handle_at$auto(0xffffffffffffffff, &(0x7f0000000240)={0x95, 0x4, "4ff9166d473ec56fba5b6ef5aaf7b809c57c826a03e955b56d7d5cddb91b84097aae6a7f34d5fabfb5c7a668c682a13e9d798715ae928db098f1d65a585d8095c59b5e884f81ca41eaa9c3645f9c8a632d8e491f22e662abe747bb087843fbcf0a4feca35a24c40430b825b0f918aade6ee006982b34c7684c3c15de59bea67c560c0fa48a6ccf028d0ad13ff9509d9c1fde6d6b66"}, 0x5) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYBLOB="000229bd0000fbdbdf35020000000800fbffffffffff0737010005000040"], 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0xc0) 1m59.537267868s ago: executing program 32 (id=816): mmap$auto(0x3, 0x20007, 0x4000000000df, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x9, 0xfffffffffffffffe, 0x9b72, 0x2, 0x8000) sendmsg$auto_WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x4008810}, 0x2000c041) r0 = socket(0x2a, 0x1, 0x0) mmap$auto(0x6, 0x400008, 0xdf, 0x9b72, 0x2, 0x7ffe) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0xffffffffffff0001, 0x15) io_uring_setup$auto(0x6, 0x0) madvise$auto(0x0, 0x200007, 0x19) open(0x0, 0x1a1043, 0x2a) bind$auto(0x3, 0x0, 0x6b) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000140)) connect$auto(r0, &(0x7f0000000040)=@can, 0x8) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) fcntl$auto(0xffffffffffffffff, 0x401, 0x5) unshare$auto(0x40000080) socket(0xa, 0x3, 0x3a) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) setsockopt$auto(0x400000000000003, 0x29, 0xca, 0x0, 0x567) syz_genetlink_get_family_id$auto_ovs_datapath(0x0, r0) mbind$auto(0x0, 0x100080004, 0x8, 0x0, 0x6, 0x9) gettid() connect$auto(0xffffffffffffffff, 0x0, 0x55) mmap$auto(0x0, 0x5, 0x3, 0x16, 0x3, 0x8000) unshare$auto(0x40000080) writev$auto(0x1, &(0x7f0000000100)={0x0, 0x400000000000fdef}, 0x1) madvise$auto(0x0, 0x20202, 0x15) r1 = open_by_handle_at$auto(0xffffffffffffffff, &(0x7f0000000240)={0x95, 0x4, "4ff9166d473ec56fba5b6ef5aaf7b809c57c826a03e955b56d7d5cddb91b84097aae6a7f34d5fabfb5c7a668c682a13e9d798715ae928db098f1d65a585d8095c59b5e884f81ca41eaa9c3645f9c8a632d8e491f22e662abe747bb087843fbcf0a4feca35a24c40430b825b0f918aade6ee006982b34c7684c3c15de59bea67c560c0fa48a6ccf028d0ad13ff9509d9c1fde6d6b66"}, 0x5) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYBLOB="000229bd0000fbdbdf35020000000800fbffffffffff0737010005000040"], 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0xc0) 4.078337611s ago: executing program 0 (id=1471): r0 = syz_genetlink_get_family_id$auto_netdev(&(0x7f0000000000), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NETDEV_CMD_PAGE_POOL_GET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x20, r0, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@NETDEV_A_PAGE_POOL_ID={0xc, 0x1, 0xffff}]}, 0x20}}, 0x8854) listmount$auto(&(0x7f0000000100)={0x18, @raw, 0x80000024, 0xfffffffffffffff7, 0x202}, 0x0, 0x4, 0x1) socket(0xa, 0x3, 0x3a) setsockopt$auto(0x400000000000003, 0x29, 0xd1, 0x0, 0x4) 3.922308516s ago: executing program 0 (id=1474): r0 = socket(0x11, 0x3, 0x9) io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7fffffff, 0xd, 0x2, 0x6, 0x7, 0x8, 0xffffffffffffffff, [], {0x6, 0x6, 0xf, 0x29f, 0x100, 0x7f, 0x101, 0x6, 0x2}, {0x100, 0x1, 0x52, 0x5, 0x1, 0x7fffffff, 0x76c5, 0x8, 0x100000000}}) mmap$auto(0x0, 0xa, 0xdb, 0x9b72, 0x5, 0x8000) socket(0xa, 0x3, 0x8) socket(0x2b, 0x1, 0x1) r1 = socket(0x10, 0x2, 0x4) sendmsg$auto_NFSD_CMD_THREADS_SET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="2c0000001400c7d2a2e1917949643de42b"], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x400c000) socket(0x2b, 0x1, 0x0) recvmmsg$auto(0x5, &(0x7f0000000580)={{0x0, 0x5, 0x0, 0x0, 0x0, 0x2, 0x80000001}, 0x4}, 0x3, 0x6, 0x0) clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) close_range$auto(0x2, 0x8, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000180)='/dev/admmidi2\x00', 0x10000, 0x0) open(0x0, 0x4040, 0x75) socket(0xa, 0x2, 0x3a) sendmmsg$auto(r0, &(0x7f00000001c0)={{&(0x7f0000000000), 0x5aa, &(0x7f0000000100)={&(0x7f0000000080), 0x49}, 0x4, 0x0, 0x5, 0x1000}, 0x5}, 0x2, 0x100) sendmsg$auto_NL80211_CMD_REMOVE_LINK_STA(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x71c}, 0x1, 0x0, 0x0, 0x40}, 0x1) r2 = openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000040), 0x400, 0x0) ppoll$auto(&(0x7f0000000100)={r2, 0x71, 0x6}, 0x4, 0x0, 0x0, 0x8) r3 = socket(0x2, 0x1, 0x84) accept$auto(r3, &(0x7f0000000040)=@sco, &(0x7f0000000080)) 3.509837583s ago: executing program 4 (id=1480): unshare$auto(0x40000080) r0 = openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/pcmC1D0c\x00', 0x40, 0x0) r1 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/card0\x00', 0x129800, 0x0) ioctl$auto(r1, 0x921064ac, 0xffffffffffffffff) readv$auto(0x3, &(0x7f00000001c0)={0x0, 0x7fffffffefff}, 0x7) mmap$auto(0x0, 0x3, 0xdf, 0xeb1, 0x401, 0x8000) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, 0x0, 0x80, 0x0) close_range$auto(0x2, 0x8, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/time_for_children\x00') mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) munlock$auto(0x9, 0xfffffffffffffffe) mmap$auto(0x10000, 0x400008, 0xdf, 0x9b72, r0, 0x8000) io_uring_setup$auto(0x4a, 0x0) close_range$auto(0x2, 0x8000, 0x0) r2 = open(0x0, 0x261c2, 0x84) io_uring_setup$auto(0x9, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8000, 0x0) r4 = socket(0xa, 0x2, 0x88) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000280)={'wg0\x00', 0x0}) bpf$auto(0x0, &(0x7f00000000c0)=@bpf_attr_5={@target_ifindex=r7, r6, 0x4, 0x401, r4, @relative_fd=r5, 0xe600}, 0xf) bpf$auto(0x2, &(0x7f00000001c0)=@raw_tracepoint={0x5, r2, 0x0, 0x3}, 0xc) bpf$auto(0x4, &(0x7f0000000400)=@bpf_attr_11={0x5, 0x8000000000000005, 0x9, 0x161f, 0xf870e9f, 0xa4ea, 0x8}, 0x9) socket(0x23, 0x3, 0x40) r8 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000080), r2) sendmsg$auto_NL80211_CMD_GET_POWER_SAVE(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f00000002c0)={0x100, r8, 0x10, 0x70bd2b, 0x25dfdbfd, {}, [@NL80211_ATTR_BSS_CTS_PROT={0x5, 0x1c, 0xc}, @NL80211_ATTR_AUTH_DATA={0xda, 0x9c, "75d18aa44204240882b877b2884fc3a2ee203a4cfe2cdea1afa4d8a673ac47a6ecde60a58f3f8c0ad7de397a7d6e82ed2d875af47b9125a8c48f24aa655436d436a718c9284f59e1ec786e4c031c5b5f3d1c180e3a775a13c9a66793ca57de391f5ef0de0acf8cce31c72f0b2ac60dc5cad069335721849e926d09f5b72c76459ca0499d0c50fc1a2691d233e7290343cb901c81e44d29a98d799f1fb5b1ceaa6a4a0e550ccf1d26d37a27ede6c07bed1790867bbc5ede2718205ed0110ded14e9d3dd71bda12040cfcc4d023c7117a00413ce09cc96"}, @NL80211_ATTR_KEY_DATA={0x5, 0x7, 'D'}]}, 0x100}, 0x1, 0x0, 0x0, 0x4048010}, 0xc010) setsockopt$auto(0x400000000000003, 0x29, 0xcd, 0x0, 0x567) 3.017037718s ago: executing program 0 (id=1481): close_range$auto(0x0, 0x5, 0x0) fanotify_init$auto(0x66a, 0x2000000000002) inotify_init1$auto(0x3000000000000) mmap$auto(0x0, 0x3, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x15, 0x5, 0x0) socket(0x15, 0x5, 0x0) getsockname$auto(0x3, 0x0, 0x0) getsockopt$auto(0x2, 0x114, 0x8, 0xfffffffffffffffc, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x140) rseq$auto(&(0x7f0000000300)={0xe, 0x401, 0x0, 0x6, 0xffffffff, 0x2}, 0x8000, 0x0, 0x6) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) r0 = open(0x0, 0x529201, 0x186) mmap$auto(0x0, 0x5, 0x4000000000df, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x2022009, 0x3, 0x15, 0xfffffffffffffffa, 0x8000) write$auto(0x3, 0x0, 0x100082) lseek$auto(0x3, 0x7fffffffffffffff, 0x1) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) setns(0xffffffffffffffff, 0x0) clone$auto(0x8001, 0x5, 0xffffffffffffffff, 0xfffffffffffffffc, 0x6) writev$auto(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x400000000000fdeb}, 0xfffffffffffffffe) r1 = socket(0xa, 0x2, 0x73) write$auto_msr_fops_msr(r0, 0x0, 0x0) getsockname$auto(r1, &(0x7f0000000240), &(0x7f0000000280)=0xaea) fcntl$auto(0x0, 0x407, 0x100000) mlockall$auto(0x7) mmap$auto(0x0, 0x200004, 0x4000000000df, 0x40eb2, 0x402, 0x300000000000) memfd_create$auto(&(0x7f0000000000)='A\x00\x00\x00\x00\xef\x97\x8aY\x00\x00\xd2\x8c\xb05\x03\\\xb2\xbf24\x17{\xde\f\x00\x00\v\x00E\xdb\x81\xd9\xd8\xe640\xc6\xa4Sr\x82\xcc\"K\xe1IIT\x00\x00\x00', 0xe) rseq$auto(0x0, 0x8000, 0x0, 0x6) fallocate$auto(0x8000000000000003, 0x0, 0xd, 0xcbd5d) finit_module$auto(0x3, 0xfffffffffffffffe, 0x400000000004) 2.706673405s ago: executing program 4 (id=1482): mmap$auto(0x0, 0x20009, 0xdf, 0x2000000eb1, 0x40000000000a5, 0x8000) close_range$auto(0x2, 0x8, 0x0) r0 = io_uring_setup$auto(0x40000002c55, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/platform/vidtv.0/i2c-0/0-0060/modalias\x00', 0x80000, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f0000000000)=""/53, 0x35) r2 = socket(0x2, 0x80802, 0x0) openat$auto_configfs_file_operations_configfs_internal(0xffffffffffffff9c, &(0x7f0000000280)='/sys/kernel/config/target/dbroot\x00', 0x8000, 0x0) open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x20) ioperm$auto(0x101, 0x9, 0xe) chmod$auto(&(0x7f00000000c0)='./file0\x00', 0xf4ba) r3 = openat$auto_binder_ctl_fops_binderfs(0xffffffffffffff9c, &(0x7f0000000180), 0x8800, 0x0) connect$auto(r3, &(0x7f00000001c0)=@tipc=@nameseq={0x1e, 0x1, 0x1, {0x2, 0x3, 0x2}}, 0x3) setsockopt$auto(r2, 0x11, 0x67, 0x0, 0x8) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r4 = socket(0x10, 0x2, 0x0) sendmsg$auto_IPVS_CMD_GET_SERVICE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001740)={0x248, 0x0, 0x4, 0x70bd26, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x128, 0x1, 0x0, 0x1, [@nested={0x11c, 0x116, 0x0, 0x1, [@nested={0x115, 0x96, 0x0, 0x1, [@typed={0x5, 0xa2, 0x0, 0x0, @str='\x00'}, @generic="946a52701565afb7fc2765ea6326fe0ff7f6bd06452e763badb547a569a4451dc00c65d85becc32eb4e2eb9044b70a99a099f8bf042e3dbc88521b6415b338547f0f28aef7cb24d5c7a36c6d78702c315f1bc3cf38149b90ac45153fb66fbb69eeb9049e23f77d3ecc016898cddaa8c2ada1963a6c5f44caeef41c0701cde1d838abfaf490440a931e6a2885fe9a1d3ca6ec89b58760ac57132ba30900e57828478d9120db81faed62a243aa152ba6d17e40ae4fbff7a132724c5974624d98f8b16b5d42a4c20469e330295f3ea6", @generic="6c663c7aaf9af52c7f532e0d7dac503c46019e3be3204078d2dbb31231c2d5a0bf6727b378a29cff2aeb5b7500000000000000", @nested={0x4, 0x9a}, @nested={0x4, 0xfd}]}]}, @typed={0x8, 0x5c, 0x0, 0x0, @fd=r4}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9}, @IPVS_CMD_ATTR_DEST={0xa0, 0x2, 0x0, 0x1, [@nested={0x99, 0xda, 0x0, 0x1, [@typed={0x4, 0x9f}, @typed={0x8, 0x35, 0x0, 0x0, @pid}, @typed={0x8, 0xfa, 0x0, 0x0, @ipv4=@remote}, @typed={0x8, 0x146, 0x0, 0x0, @pid=0xffffffffffffffff}, @generic="3eddc99bcc9008cebd60632e0840064de571260cc67e711df75e3e84ca5d3a190ffbb479decbce9283bb196a", @typed={0x8, 0x139, 0x0, 0x0, @fd=r4}, @typed={0x14, 0xbd, 0x0, 0x0, @ipv6=@private0}, @nested={0x4, 0x4}, @generic="28eb79249bf6e1dd4d3062338ab3caec5aeb221c73fc49e208e7374b97a93ebc08468d25e478c6f9ac4cd1ae09"]}]}, @IPVS_CMD_ATTR_DEST={0x63, 0x2, 0x0, 0x1, [@typed={0x8, 0x115, 0x0, 0x0, @ipv4=@local}, @typed={0xc, 0x3e, 0x0, 0x0, @str='ip6gre0\x00'}, @generic="23ce1dbdb4d3e33e097e41b8f6aef8a46976ce54f21d5830ef7d1cad8cc9ec22057a6aa139fae24292770d4c36bbd1", @nested={0x1c, 0x4a, 0x0, 0x1, [@nested={0x4, 0x1d}, @typed={0x14, 0x46, 0x0, 0x0, @ipv6=@dev={0xfe, 0x80, '\x00', 0xa}}]}]}]}, 0x248}, 0x1, 0x0, 0x0, 0x4004080}, 0x0) sendmsg$auto_GTP_CMD_ECHOREQ(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r5 = socket(0x1e, 0x1, 0x0) getsockname$auto(r5, &(0x7f0000000000), &(0x7f0000000040)=0xd1) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[], 0xfdef}, 0x1, 0x0, 0x0, 0x10}, 0x2020057) mprotect$auto(0x1ffff000, 0x8000000000000001, 0x4) r6 = socket(0x1e, 0x1, 0x0) sendmsg$auto_ETHTOOL_MSG_MM_GET(r6, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40400c0}, 0x14002881) sendmsg$auto_NL80211_CMD_GET_REG(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[], 0x1ac}}, 0x48c0) recvmmsg$auto(r4, &(0x7f0000000140)={{0x0, 0x4, &(0x7f0000000080)={0x0, 0x803}, 0x5, 0x0, 0x2, 0x8}, 0x800}, 0x10a, 0x8, 0x0) read$auto_trace_options_core_fops_trace(r0, &(0x7f00000002c0)=""/164, 0xa4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'ip6gre0\x00'}) connect$auto(0x3, &(0x7f00000000c0)=@tipc=@name={0x1e, 0x2, 0x1, {{0x40, 0x4}, 0x3}}, 0x55) write$auto(r2, 0x0, 0xffd6) 2.479805856s ago: executing program 3 (id=1483): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) ioperm$auto(0x7, 0x6, 0x8c) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket(0xf, 0x3, 0x2) r0 = socket(0xf, 0x3, 0x10000000000002) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) socket(0x10, 0x2, 0x0) sendmsg$auto_GTP_CMD_ECHOREQ(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="01002abd7000fbdbdf250300000008000100010000002cc2f24a9f6278892e000040319d904fb1e0d887050164cce7b2c057ce114e43ce5d34580ca223ed9a58add1e6573e745de3254a8157808582e59dbe7fad142e201899d00eccdcbf8188c772d252b246c359cb55d98c73c1db73f2055ba5b51a90cb528881ae6edcfe8753eef83e0d60da4795758e3ec74ad7325a942ac9abd105b6e09f20f12c336c6e3a8a7a32f2e5204761bca511c5dc996439bfaf8821c3ea3767e422dec2"], 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x200000c4) r1 = socket(0x10, 0x2, 0x0) sendmsg$auto_OVS_DP_CMD_DEL(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB], 0x14}, 0x1, 0x0, 0x0, 0x8044}, 0x4001090) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB='R'], 0x1ac}}, 0x40000) sendmmsg$auto(r1, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f00000001c0), 0x7, 0xa505}, 0x800}, 0x7, 0x8) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xfffffffffffffdb5, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) ioctl$auto_TCSBRKP2(0xffffffffffffffff, 0x5425, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/apparmor/parameters/paranoid_load\x00', 0xa800, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r3, &(0x7f00000000c0)=""/40, 0x28) open(&(0x7f0000000000)='./file0\x00', 0x261c2, 0x84) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) mknod$auto(&(0x7f0000000040)='\xfd\x90\x8f2\x14\x92\x00\xbf\xdf\xcf\x9a\xae}\xd9\xf95\xc5gV\x82\f\xe5h\xfe\x83\xe4\xbe\x8c\x1f\xa5\xf1_T\xde\xf7\xd4\x83D\x9eXS\xd6\x90T\xc1v\xad#\xc4q\x8b\xed2\xadW:0\xef\x9c.=\xba\x0fy\x8f\xcd\xd6\xde\xa9i\xec\xe8\xca\x9f\xf3\x82b\xa2y\xa87J\xfc \xc5\xd8\x80\xba\xaaV\x8f{\x1f\x1b\xb0\n\x97\\\xa7\xe3\xdf\xc29-*;#r\xc8\xd1\x14RcF\x87\xe4\x1c\x1fGL\xa5\x19\x90\xd6\x8d*\xe6\b(\x1a\xea\x95\xdc\xa6)5\xae&yAl\x1e\xe3j Lp\x91\r\xed%\xafZ\xf8w\xf2}\xcdGS\xce\xb9\xdck\x86\x00.6\xe6{\xc1\x00\x1bW5\x81\xda!\xcb.O\xa9\xf3\xa7\x88+\xb9\xf3\x9a7\xa4\xe6)<\xa79\xa4\x87\\\xb4\xbf\v\x03\x87\xac\x87r\x02\x05\xdb\xe4\xde,V\xb6G\xba.WR\xe2<~\xdd\xb2\xe53hj_;\xa5qm\x92\xc7P\xc9.\x82w8\x1f\xfcX\xe4\x14\xc72cC\xd3\x00'/263, 0x1, 0x4) lstat$auto(&(0x7f0000000500)='\xfd\x90\x8f2\x14\x92\x00\xbf\xdf\xcf\x9a\xae}\xd9\xf95\xc5gV\x82\f\xe5h\xfe\x83\xe4\xbe\x8c\x1f\xa5\xf1_T\xde\xf7\xd4\x83D\x9eXS\xd6\x90T\xc1v\xad#\xc4q\x8b\xed2\xadW:0\xef\x9c.=\xba\x0fy\x8f\xcd\xd6\xde\xa9i\xec\xe8\xca\x9f\xf3\x82b\xa2y\xa87J\xfc \xc5\xd8\x80\xba\xaaV\x8f{\x1f\x1b\xb0\n\x97\\\xa7\xe3\xdf\xc29-*;#r\xc8\xd1\x14RcF\x87\xe4\x1c\x1fGL\xa5\x19\x90\xd6\x8d*\xe6\b(\x1a\xea\x95\xdc\xa6)5\xae&yAl\x1e\xe3j Lp\x91\r\xed%\xafZ\xf8w\xf2}\xcdGS\xce\xb9\xdck\x86\x00.6\xe6{\xc1\x00\x1bW5\x81\xda!\xcb.O\xa9\xf3\xa7\x88+\xb9\xf3\x9a7\xa4\xe6)<\xa79\xa4\x87\\\xb4\xbf\v\x03\x87\xac\x87r\x02\x05\xdb\xe4\xde,V\xb6G\xba.WR\xe2<~\xdd\xb2\xe53hj_;\xa5qm\x92\xc7P\xc9.\x82w8\x1f\xfcX\xe4\x14\xc72cC\xd3\x00', 0x0) fallocate$auto(0x8000000000000003, 0x0, 0xd, 0xcbd5d) setrlimit$auto(0x1, 0x0) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) sendmsg$auto_SMC_NETLINK_GET_DEV_SMCD(r2, &(0x7f0000004380)={0x0, 0x0, &(0x7f0000004340)={&(0x7f0000004300)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB='\v'], 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x810) syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000300), r2) read$auto(r2, &(0x7f0000000100)='nl80211\x00', 0xbe62) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB='f\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000180000000fedbdf25b80000000800030004020000060007000080000008000200", @ANYRES16=r0, @ANYBLOB="0a00050000000000000000000a00010000000000000000000a0001000000000000000000060007000100000008000200", @ANYRES32=0x0, @ANYBLOB="0cca79edaa664683e097001a"], 0x68}, 0x1, 0x0, 0x0, 0x4044080}, 0x4044091) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="13"], 0x1ac}}, 0x4004) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x4}, 0x7}, 0x3, 0x0) 2.427903951s ago: executing program 4 (id=1485): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = bpf$auto(0x0, &(0x7f00000001c0)=@task_fd_query={0x2, 0x4, 0x3, 0x2, 0x8, 0xc, 0xe3, 0x400000000a, 0x3}, 0x6f4) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) init_module$auto(0x0, 0xffff9, &(0x7f0000000140)='/sys/devices/platform/dummy_hcd.6/usb7/power/wakeup_active_count\x00') prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x8000000000000000, 0x15) madvise$auto(0x0, 0x2000000080000001, 0x3) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) ioctl$auto(0xc8, 0xffffffff800454cf, 0x5c8d) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) capget$auto(0x0, 0xfffffffffffffffe) capset$auto(0x0, &(0x7f0000000000)={0x3, 0x7, 0x8}) move_mount$auto(r0, 0x0, r1, 0x0, 0x9) madvise$auto(0x0, 0xffffffffffff0005, 0x17) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x30, 0x80000006, 0x4) r2 = socket(0x10, 0x2, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x7, 0x1ff, 0x7, 0x42, 0x4909b6f8, 0x1ffdf, 0x7, 0x200003, 0x2, 0xa121, 0x3, 0x6, 0x4, 0xb4, 0xa, 0x6, 0x10001, 0x80, 0x100000000, 0x0, 0x7, 0x2100, 0x200, 0x0, 0x84, [0x0, 0x0, 0x0, 0x50100000000000, 0x6, 0x2000, 0x0, 0x80000000000006, 0x70624ce7, 0x0, 0xfffffffffffffffd, 0xfffffffffffffffd, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffbfff, 0xfffffffffffffffd, 0x1, 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x2000000000000000, 0x0, 0x0, 0x400000000005b8, 0xc, 0x0, 0x0, 0x0, 0x6, 0x0, 0x88e, 0x8000000000008, 0xfffffffffffffffc, 0x9, 0xa38, 0x0, 0x3, 0xfffffffffffffffa, 0x8, 0x4000000000, 0x7]}, 0x1fe, 0xd) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="10002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) sendmmsg$auto(r2, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000000)={0x0, 0xfc2}, 0x2, &(0x7f00000001c0), 0x7, 0xa505}, 0x800}, 0x7, 0x4008) madvise$auto(0x0, 0xffffffffffff0005, 0x19) move_mount$auto(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x91e4) mmap$auto(0x0, 0x200003, 0x4000000000df, 0x40eb2, 0x402, 0x300000000000) mmap$auto(0x200000, 0x200006, 0x1, 0x40eb1, 0x602, 0xb00000000000) 2.260064901s ago: executing program 2 (id=1486): r0 = openat$auto_tracing_entries_fops_trace(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/tracing/per_cpu/cpu1/buffer_size_kb\x00', 0x480c2, 0x0) read$auto_tracing_entries_fops_trace(r0, 0x0, 0x0) 2.22652485s ago: executing program 0 (id=1487): mmap$auto(0xfffffffffffffffd, 0x7fff, 0x200, 0x10, 0xfffffffffffffffa, 0x5) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mremap$auto(0x4000, 0xfee0, 0x3fd6, 0x3, 0xfffff000) mremap$auto(0x1fc000, 0xfee0, 0x3fd6, 0x3, 0xfffff000) r0 = openat$auto_force_suspend_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/bluetooth/hci3/force_suspend\x00', 0x50002, 0x0) read$auto(r0, &(0x7f0000000040)='^,.\',\x00', 0x7) mmap$auto(0xfffffffffffffffd, 0x7fff, 0x200, 0x10, 0xfffffffffffffffa, 0x5) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) mremap$auto(0x4000, 0xfee0, 0x3fd6, 0x3, 0xfffff000) (async) mremap$auto(0x1fc000, 0xfee0, 0x3fd6, 0x3, 0xfffff000) (async) openat$auto_force_suspend_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/bluetooth/hci3/force_suspend\x00', 0x50002, 0x0) (async) read$auto(r0, &(0x7f0000000040)='^,.\',\x00', 0x7) (async) 1.962222328s ago: executing program 2 (id=1488): mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x403, 0x8000) r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x9, 0x72, 0x8b72, 0x2, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x1, 0x6) getsockopt$auto(0x6, 0x40000000029, 0x3, 0xfffffffffffffffe, 0x0) r1 = pipe$auto(0x0) pipe$auto(0x0) tee$auto(0x2000000000000, 0x3, 0x3ff, 0x9) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nbd11\x00', 0x4840, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'macvlan0\x00'}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'ip6erspan0\x00'}) fadvise64$auto(r2, 0x8, 0xc, 0x4) 1.88152446s ago: executing program 3 (id=1489): mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x402, 0x300000000000) r0 = socket(0xf, 0x3, 0x2) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x63}, 0x1, 0x0, 0x0, 0x4080}, 0x20000000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'geneve0\x00', 0x0}) r2 = open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) fcntl$auto(r2, 0x400, 0x1) execve$auto(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) truncate$auto(&(0x7f0000000000)='./file0\x00', 0x3f2ec021) sendmsg$auto_BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000000)=ANY=[@ANYBLOB="f2000000", @ANYRES16=0x0, @ANYBLOB="7d472dbd7000fcdbdf", @ANYRES32=r1, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x8}, 0x4000044) r3 = socket(0xa, 0x5, 0x84) sendto$auto(r3, 0x0, 0x401, 0x101, &(0x7f0000000000)=@generic={0xa, "e2e18340cba8fe8000"}, 0x1c) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x3, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4000894}, 0x800) bpf$auto(0x0, &(0x7f00000001c0)=@test={0xffffffffffffffff, 0xffff, 0xfffff0b6, 0xffff, 0x84, 0xac1, 0x2, 0x36242398, 0x9, 0x3bb, 0x7, 0xffff, 0x6, 0x81, 0x68198}, 0x6f0) sendmsg$auto_ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000000100)=ANY=[], 0xd4}, 0x1, 0x0, 0x0, 0x20000010}, 0x20008000) clone3$auto(&(0x7f0000000140)={0x1, 0x4, 0x81, 0x6, 0x8, 0x8, 0x4000000000000, 0x2, 0xb, 0x8001, 0xc88}, 0xfffffffffffffffb) sendmsg$auto_ETHTOOL_MSG_WOL_SET(0xffffffffffffffff, &(0x7f0000002cc0)={0x0, 0x0, &(0x7f0000002c80)={&(0x7f0000000180)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYBLOB="010027bd"], 0x2c}, 0x1, 0x0, 0x0, 0x4801}, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="12"], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 1.720727621s ago: executing program 2 (id=1490): io_submit$auto(0x6, 0x7f, &(0x7f0000000040)=&(0x7f0000000000)={0x6fffffffffffff, 0xb, 0x8, 0x3, 0x2, 0x3b, 0xfffffffffffffc00, 0x2, 0xfff, 0x0, 0x6}) r0 = socket(0x11, 0x2, 0x0) mmap$auto(0x0, 0x3, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x15, 0x5, 0x0) r1 = socket(0x2, 0x1, 0x106) sendmmsg$auto(0xffffffffffffffff, 0x0, 0x5, 0x20000000) r2 = openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/usbmon0\x00', 0x400, 0x0) ioctl$auto_MON_IOCX_MFETCH(r2, 0xc0109207, 0x0) ioctl$auto_MON_IOCX_MFETCH(r2, 0xc0109207, &(0x7f0000000100)={0x0, 0x4, 0x7}) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000140)='/dev/bus/usb/032/001\x00', 0x2, 0x0) ioctl$auto(0x3, 0x5411, 0x38) sendmsg$auto_ETHTOOL_MSG_LINKINFO_SET(0xffffffffffffffff, 0x0, 0x2000c840) ioctl$sock_SIOCGIFINDEX(r0, 0x8905, 0x0) r3 = socket(0xa, 0x1, 0x84) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffff7, 0x8000) newfstatat$auto(0xffffffffffffff9c, 0x0, 0x0, 0x5000) ftruncate$auto(r1, 0x401) keyctl$auto(0x12, 0x102000000010001, 0x7f, 0x200, 0x3) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x47, 0x8000) getsockopt$auto(r3, 0x0, 0x12, 0xfffffffffffffffe, 0x0) writev$auto(r0, &(0x7f00000028c0)={&(0x7f0000000000), 0x200}, 0x9) 1.353879634s ago: executing program 2 (id=1491): set_mempolicy$auto(0x2, &(0x7f0000000080)=0x7e, 0x4) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000380), 0x8c00, 0x0) ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x0) rt_sigprocmask$auto(0x0, &(0x7f0000000000)={0xfffffffffffffe01}, 0x0, 0x8) r1 = syz_clone3(&(0x7f0000000200)={0x182000080, 0x0, 0x0, 0x0, {0x1a}, 0x0, 0x0, 0x0, 0x0}, 0x58) rt_sigtimedwait$auto(&(0x7f0000000040)={0x7fffffff}, 0x0, 0x0, 0x8) mmap$auto(0x6, 0x0, 0xb176, 0x1000000000000eb4, 0x3fd, 0x7ffe) r2 = openat$auto_ftrace_enable_fops_trace_events(0xffffffffffffff9c, &(0x7f00000035c0)='/sys/kernel/debug/tracing/events/vmalloc/purge_vmap_area_lazy/enable\x00', 0x0, 0x0) r3 = setfsuid$auto(0xee00) fchown$auto(r2, r3, 0x0) move_pages$auto(r1, 0x4, 0x0, 0x0, 0x0, 0x8000000000000000) mknod$auto(&(0x7f00000003c0)=':,\x00\xbd\x80\xd6\x002\xb37\xff\x1a\x9e99\xda\xd1v\'\xc6\xd2Fw;\x00v\xdce\xad\xf4\xdb\xc7\x946\xe4\f\x9el]L+\x06\x130V\x1b,d\x8f\xa0\xabDUdk\xac\x82\\tyQ\xd8j\a\x1a[\xdb\x96\x1f{2\x04\xc5Y\xc1@\x0e\xeeWZ\x94N\xd4\xc8q=\x9b\xd1\x7fR3\xb6`\x00\xb3\xe5|1\xba\r\x85\x89\xfe\xed\xe1\xad`\x92\xc7\x9c\xd7\xd8\x15\t&\xb7\xfc\x82\xc4\xd3J\xae\x810\x19\x14\t\xc2\xa5V\xaa\x8d\x04\xf5\xf3\xd6\xd1\xe9k\xaf\x1a\xc6u\x96\xf7\xaa\x84\x92\x995m\xf9O\xc0\x1e\xa05\xdb\xa5\xae\r\x06\xe6\xc3\xd0\xf8:\xf7\xc5u\x91\xf8\x91\xee\xd8y\xb8\xc1)\xad\x05\xeb\xe9\xab\r\x9a@\aa(\x1a\xa4\xc1\xcf\\\xf0\xc3~\xbbd\x94\x9c\x02\xd4\xfc\xd2`\xd9\x83{-\x81zY\\\xac!#\xea\xba\x86)\xe9\xbc\x82\xf6\xd2\x7f\xdb\xa1\xd5\x89|\xa0O\xfcqZ\x85@A\x90\"\x11L\xdd\xa5\x9f\xf5', 0x20e9, 0x103) open(&(0x7f0000000280)=':,\x00\xbd\x80\xd6\x002\xb37\xff\x1a\x9e99\xda\xd1v\'\xc6\xd2Fw;\x00v\xdce\xad\xf4\xdb\xc7\x946\xe4\f\x9el]L+\x06\x130V\x1b,d\x8f\xa0\xabDUdk\xac\x82\\tyQ\xd8j\a\x1a[\xdb\x96\x1f{2\x04\xc5Y\xc1@\x0e\xeeWZ\x94N\xd4\xc8q=\x9b\xd1\x7fR3\xb6`\x00\xb3\xe5|1\xba\r\x85\x89\xfe\xed\xe1\xad`\x92\xc7\x9c\xd7\xd8\x15\t&\xb7\xfc\x82\xc4\xd3J\xae\x810\x19\x14\t\xc2\xa5V\xaa\x8d\x04\xf5\xf3\xd6\xd1\xe9k\xaf\x1a\xc6u\x96\xf7\xaa\x84\x92\x995m\xf9O\xc0\x1e\xa05\xdb\xa5\xae\r\x06\xe6\xc3\xd0\xf8:\xf7\xc5u\x91\xf8\x91\xee\xd8y\xb8\xc1)\xad\x05\xeb\xe9\xab\r\x9a@\aa(\x1a\xa4\xc1\xcf\\\xf0\xc3~\xbbd\x94\x9c\x02\xd4\xfc\xd2`\xd9\x83{-\x81zY\\\xac!#\xea\xba\x86)\xe9\xbc\x82\xf6\xd2\x7f\xdb\xa1\xd5\x89|\xa0O\xfcqZ\x85@A\x90\"\x11L\xdd\xa5\x9f\xf5\x00', 0x20102, 0x100) preadv2$auto(0x3, &(0x7f0000001000)={0x0, 0xfff5}, 0x5, 0xffffffffffffffff, 0x7, 0x2e) r4 = socket(0x11, 0x3, 0x300) r5 = socket(0x15, 0x800, 0x3) recvmmsg$auto(r5, &(0x7f0000000140)={{0x0, 0x3, &(0x7f00000000c0)={0x0, 0xf32}, 0x0, 0x0, 0xfffffffffffffffd, 0x4}, 0x8}, 0x100, 0x5, &(0x7f0000000180)={0x5, 0xcb}) setsockopt$auto(r4, 0x107, 0x1, 0x0, 0x8004) r6 = open(&(0x7f0000000100)='./bus\x00', 0x14d27e, 0x72) copy_file_range$auto(r6, 0x0, 0xffffffffffffffff, 0x0, 0x4000000000012, 0x8) ioctl$auto_SW_SYNC_IOC_CREATE_FENCE(r6, 0xc0285700, &(0x7f0000000000)={0x2, "e8934e2b5cf934e59b32345853e6b97297f828e1fae0c02e15d3f7cea3f3e61f", @raw=0x1}) write$auto_fops_u32_(r6, &(0x7f00000000c0)="6b83e19a5f9563ca5baffd597620c5141af3bbfa3683254c8e7a3be336d9ea9c06eb4494ef7a65d08117a51cdcee7a8d920d9afdbfd58b76ba5b51397a77a83b846e9db745a8352f4c0622735f4fea92072cf7c28e2d71d2bda5060f6bb8ecf97562dd5fe8c400e2dab239bf76db134c2a1d2ebdf4a9a83eda295d3550198eef505ea13739347795810461a6e0a4425dde4c6d999c3cca2bd02ce1cb236cd87c082c1c1d94c977dde54d64170f0469d95e0b8128e6c3fb8684076074df09252e3662f63648d1ebbad7954b800e02a1d8a7ea16c54eaab7201952b1765e04529ab36b225b259eccb6fdcc787990329fa45c4762926442cd79fa", 0xf9) r7 = socket(0xa, 0x2, 0x3a) r8 = geteuid() setreuid$auto(r8, r3) setresuid$auto(r8, r8, r8) setsockopt$auto(r7, 0x29, 0x49, 0x0, 0x1ff) setpriority$auto(0x2, 0x7, 0x5) syz_genetlink_get_family_id$auto_netdev(0x0, 0xffffffffffffffff) close_range$auto(0x2, 0x8, 0x0) 1.287142724s ago: executing program 3 (id=1492): mmap$auto(0x8, 0x400008, 0xdf, 0x800000009b72, 0x2, 0x8000) (async) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), r0) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) (rerun: 64) sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="2f212abd7000fcdbdf252100000008000300", @ANYRES32=r2, @ANYBLOB="08002c800400be5ec285ef96428b169a80"], 0x24}}, 0x4000000) (async) move_pages$auto(0x1, 0xf54, 0x0, 0x0, 0x0, 0x8000000000000000) mmap$auto(0x0, 0x20009, 0xe3, 0x100000eb1, 0x40000000000a1, 0x8000) (async) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) (async) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0) (async) fsopen$auto(&(0x7f0000000000)='nlctrl\x00', 0x3) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_GET_REG(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001500)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1700", @ANYBLOB="45039f28794a67207ad752"], 0x1ac}}, 0x40000) (async) mmap$auto(0x0, 0x9, 0x400000072, 0x8b72, 0x1000000002, 0x8000) (async) madvise$auto(0x0, 0xffffffffffff0001, 0x15) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0x51c, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x0, 0x0) io_uring_setup$auto(0x6, 0x0) (async) r4 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) ioctl$auto(r4, 0x4b46, 0x1) syz_genetlink_get_family_id$auto_nlctrl(0x0, 0xffffffffffffffff) (async) readv$auto(0x0, &(0x7f0000000080)={0x0, 0x6}, 0x7ff) (async) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, 0x0, 0xc040810) (async) mmap$auto(0x0, 0x20006, 0x4000000000e1, 0xebd, 0x4, 0x8000) (async) read$auto(0x4, 0x0, 0xfdef) (async) futex_wait$auto(0x0, 0x0, 0x7f, 0x2, 0x0, 0x1) (async) futex_wake$auto(0x0, 0x7, 0xfffffffb, 0x2) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vbi0\x00', 0x80080, 0x0) 1.247209474s ago: executing program 4 (id=1493): mmap$auto(0x0, 0x9, 0x3ff57697, 0x9b72, 0x2, 0x8000000000008000) r0 = openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$auto_RTC_IRQP_READ(r0, 0x8008700b, &(0x7f0000000080)=0x6) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f0, 0x15) madvise$auto(0x0, 0x200007, 0x19) mlock$auto(0x5, 0xffff) r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/rpc/nfsd.fh/content\x00', 0x2800, 0x0) read$auto_proc_reg_file_ops_compat_inode(r2, &(0x7f0000001080)=""/244, 0xf4) r3 = openat$auto__dev_ioctl_fops_dev_ioctl(0xffffffffffffff9c, &(0x7f0000001440), 0x101000, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) r4 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="72010000", @ANYBLOB="120027", @ANYBLOB="5de1523353782950330a"], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) readv$auto(0x3, &(0x7f00000001c0)={0x0, 0xf7}, 0x7) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01002dbd7000f9dbdf250100000008000900810000000500070058000000080009000800000008000a0008006f6b14000800000000000000000000000000000000006300"], 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x800) r7 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000001c80)='/dev/fb0\x00', 0x20401, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x4601, 0x0) ioctl$auto__dev_ioctl_fops_dev_ioctl(r3, 0x192ff, 0x0) socket(0xa, 0x3, 0x3a) io_uring_setup$auto(0x6, 0x0) setsockopt$auto(r4, 0x20011, 0x8, 0x0, 0x0) 1.152626684s ago: executing program 0 (id=1494): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_dvb_dvr_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000080), 0x4000, 0x0) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0xffffffffffff0001, 0x15) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) io_uring_setup$auto(0x6, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000200), 0x400, 0x3f) getcpu$auto(&(0x7f0000000000)=0x4, &(0x7f0000000040)=0x401, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) openat$auto_dvb_dvr_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000080), 0x4000, 0x0) (async) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) (async) madvise$auto(0x0, 0xffffffffffff0005, 0x19) (async) madvise$auto(0x0, 0xffffffffffff0001, 0x15) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) io_uring_setup$auto(0x6, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) (async) openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000200), 0x400, 0x3f) (async) getcpu$auto(&(0x7f0000000000)=0x4, &(0x7f0000000040)=0x401, 0x0) (async) 956.22889ms ago: executing program 2 (id=1495): r0 = openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f0000000000)='/dev/usbmon1\x00', 0x4ad03, 0x0) r1 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f00000040c0)='/dev/bus/usb/001/001\x00', 0x8800, 0x0) ioctl$auto_MON_IOCG_STATS(r0, 0x80089203, &(0x7f0000000080)={0x7fff, 0x22fb}) setsockopt$auto(r1, 0x2, 0xfffffff8, &(0x7f00000002c0)='/dev/usbmoj1@\x81\x80k\xe55\xa8\xeb\x8c\x86\xb7G\b:[\xef\xcf\x185\xb5\x10\xc1\xfeL\xf5\xf2\x18\xe8\x9a\x16\xc4\xe5\xd0\x11\xe8\xf4\n4\x17N/3\x03\xdf*\x84;D\fZi\x13\xa9\x7f\xd0&\xe0\xe3\xa1\xf4\f\x94\xfeE\xe5wp\x8fLl\xfd5D\xd0\xe2\x15\x93\x19\xcc\x00\xfa\xd5\xbf\x8cn\xc2W\xd9$Y\x03\xd7\xd3\x88.\x04\x00#\xe7\xb6\xb3\xc8;h\xd6\xd0O\x17EV\xbeg{\x12\f\xc1\xd8\xf5\xf8\x95\xa9\xdaGm\xcb\x948[4\x19\x84\x8dG\xcczE\x89f\xea1\xd2\xc3N\x00\x00\x00\x00\x00\x00\x00', 0xe) openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) r2 = socket(0xa, 0x2, 0x3a) read$auto_proc_single_file_operations_base(0xffffffffffffffff, &(0x7f0000000840)=""/4096, 0x1000) setsockopt$auto(r2, 0x29, 0x37, &(0x7f0000000080)='\x15!\xa8^J/\xddCx4!\x00\xd3\x8f\x1e\x1b\xc3 \xe2\xa8\xd6\xd9\xc0\xa2\x0f\x88\xb1e\x8a\xd8?\xfe\xda\xc4\xef\xff(i\xc6@\x91[\vBj\x0eQ\xce\x16\'C\x8cYA\x92u\xd5\xb8\\\x82,\xe2=y\x9bR\xbcn\xa0c\x16~\x86\"t\xde\x14\xe4\xa5\xfe\xb5', 0x8) r3 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/card0\x00', 0x80601, 0x0) ioctl$auto(r3, 0x64c4, 0xffffffffffffffff) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) socket(0x2, 0x2, 0x0) r4 = openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000100)='/proc/thread-self/pagemap\x00', 0x18100, 0x0) r5 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/007/001\x00', 0xa901, 0x0) ppoll$auto(&(0x7f0000000180)={r5, 0x9, 0xc44d}, 0x9, 0x0, 0x0, 0x8) pwrite64$auto(r4, &(0x7f0000000140)='@\x00', 0xeb7, 0x80) socket(0x2, 0x1, 0x0) mmap$auto(0x0, 0x5, 0xfffffffffffffe01, 0x8011, 0x3, 0x8000) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @remote}, 0x6a) r6 = socket$nl_generic(0x10, 0x3, 0x10) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv6/conf/all/forwarding\x00', 0x42a81, 0x0) sendmsg$auto_TASKSTATS_CMD_GET(r6, &(0x7f0000000200)={0x0, 0xf3e0fff77c47799f, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="c4a58e0ae17055845660a8b9f8c905024d54cd170902a82c607ae8918bbf6a638fddbeca2e93ffdd92edf693ddc107a9ccbd47", @ANYRES16, @ANYBLOB="010a25bd7000fddbdf25010000000e000400"], 0x24}, 0x1, 0x0, 0x0, 0x4001}, 0x20000000) io_pgetevents$auto(0x76d, 0x2, 0xa31f, 0x0, 0x0, &(0x7f0000000700)={&(0x7f00000006c0)}) syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000000), r2) r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x40400, 0x48) fchmod$auto(r7, 0x7439) mknod$auto(&(0x7f0000000140)='./file1\x00', 0x9, 0xfffffffd) setreuid$auto(0x4, 0x8) mkdir$auto(&(0x7f0000000040)='./file0\x00', 0xfef) openat$dir(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x8000, 0x70) 743.515502ms ago: executing program 3 (id=1496): r0 = socket(0x10, 0x2, 0x0) rseq$auto(&(0x7f0000000180)={0xe, 0x3, 0x2000000000003, 0x80006, 0xffffffff, 0x1003, "a897cc12077d89"}, 0x408000, 0x3, 0x3) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x1ac}}, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB=','], 0x1ac}}, 0x40000) mprotect$auto(0x1ffff000, 0x8000000000000001, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x40000) read$auto_suspend_stats_fops_(0xffffffffffffffff, &(0x7f0000000100)=""/147, 0x93) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'bond0\x00'}) r1 = clone3$auto(&(0x7f00000000c0)={0xd5e5, 0x7, 0x10000, 0x100000000, 0x29e4, 0x6, 0x100, 0xfffffffffffeffff, 0xff, 0x8, 0xd}, 0x8) sendmsg$auto_ETHTOOL_MSG_FEC_SET(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000140)={&(0x7f0000002bc0)={0x14d0, 0x0, 0x700, 0x70bd27, 0x25dfdbfb, {}, [@ETHTOOL_A_FEC_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0xfffffffa}]}, @ETHTOOL_A_FEC_MODES={0x27a, 0x2, 0x0, 0x1, [@typed={0x6, 0x26, 0x0, 0x0, @str=':\x00'}, @generic="e18a9752a8bb80614bd2b4fe2cced2e94c698422e6d16bd585e7f8f3a99442ee735eb17b85926839cf33bec4c6b0159c074863626fec970bee5137b3e034452e50cd3fba246370407a6dfdf32c4e8ba6c57a5d158c863fe272652780a224a7ccb1eda564d22c2c4a7e01fdaa789539a30a5f959bc7baeb1529477e031f9ca1ce3fd47f4f05ede028d5d07ebd68c45dc6982bcbc1c71342ec0b90f54f70e1fffadf399dd272893f2d8a74161d6346ad6344b968739493077ac1dca0c64f5bf2bd", @generic="e0b01742fbdb55410287af8ae9101ef6403c", @generic="c72f4fa50940845bb01de2f89f9266ed72f151d9a730ce08d0e0c967b94235e830d7880927ae44fbc363452412a7257f8dfdacfc2ee8afa8ef4d985abf94377c4213639641a2ccd0ebd3a95dbf2cc2ad8aac13a6eb313edd0ff23e16cae8a541448f44df5a20d0e389369e78", @nested={0x127, 0x93, 0x0, 0x1, [@nested={0x4, 0xcb}, @typed={0x14, 0x2b, 0x0, 0x0, @ipv6=@dev={0xfe, 0x80, '\x00', 0x3b}}, @generic="c11be9fa4f0143d63983d8856a85e2e381e6c9ea5da545fd273a6ac7dc3267fac5db06e832b8478ff4d520b54af57e2df167e629a283f0d4361f9a8e4c3326abb376012a0d8b171b38d5849400cea4fca274ff8572185b61527eb5d2d8961997c100b986cb9944be5791efaf1509010aab0b", @generic="8ba030e0e257ad33f0f0e09766bef5ade6ff1bb786877b41b0bb56ac8c8778219021012dbc2ebef0d64c8090e8bc4b2fab6c38da39ea5caf4e45910dae1d511b2251c5d8b23787039c066c0af615e69a8acea29fd147887fdebd2b3e83ca25c81ca35b1e6725cb12f8c24601058b63cfa3918a66a25f25bcda97e923966187a762f5e0493f7952e8e76db9b6ede883e1a38ee34f86409ebe37"]}, @typed={0x5, 0x13c, 0x0, 0x0, @str='\x00'}]}, @ETHTOOL_A_FEC_MODES={0x1218, 0x2, 0x0, 0x1, [@nested={0x3b, 0x142, 0x0, 0x1, [@generic="4ca3f9c2fdf2c94c03d69b44a74f7d73b0e26662395d9f3cb3f300d79858dbd3563ad6951d3680fc2a3972", @typed={0xc, 0x27, 0x0, 0x0, @u64=0x5}]}, @nested={0xc, 0xba, 0x0, 0x1, [@typed={0x8, 0x98, 0x0, 0x0, @u32=0xfff}]}, @typed={0x8, 0xe2, 0x0, 0x0, @pid=r1}, @nested={0x132, 0xca, 0x0, 0x1, [@nested={0x4, 0x7b}, @generic="0e6b838636bbf0211bdfde38f4add5bbf5b5b7598c604aa8b0a350188f622d2bcffc142e940f89615632f97ea24fd7a2bf0763ab20ca5de7f382a2fecaf7883e2103bc5fc6a6f177c0e11a833d240cddd07023050b445fb52c0e49f3af2e87936de266c1f381532bd599101018f5bcea820d1cf39525236d6c865b55bf13985e07d5742b3472298277bc3bb5ef", @generic="4df2a0c2011ba06f59b3b0aecb5b647efab5de9e471b5f46bc96084c601462a4b966ebb7740e9a7235668a5d6193a05c14327a5563f3299306a830fed97ccb517b0d43e261bdb288e6973770fb4bd58c31b8688f1d48e29b9b781c2fc71a6ceca075a3931a93800c148a00319160646123c6d8836f66915949772dfc5872704edb53fd9034540c0c446ca4b6eb2c34d958fb22c250a247e532", @nested={0x4, 0xb9}]}, @nested={0x108d, 0xca, 0x0, 0x1, [@typed={0x8, 0x31, 0x0, 0x0, @pid=0xffffffffffffffff}, @generic="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", @nested={0x4, 0xbd}, @generic="eb268587b8dac35a2353092e7b288e45e0d660c96448b40a195dd0ab64284eb8e79b169c3b96d87125dfd19fa5966c101cccc6a5a17e2acc91f8d5653f7e19614ec554a96faf9ef1f47b3e5ce6c09cbab21211976036cd7a018c19f6a17e3fbc54ddcbed635c37112b3b7e3a82a90cf5e026c991733eec017d934e5bee"]}]}, @ETHTOOL_A_FEC_AUTO={0x5, 0x3, 0x2}]}, 0x14d0}, 0x1, 0x0, 0x0, 0x4044000}, 0x4000000) 702.327415ms ago: executing program 4 (id=1497): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x2, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @empty}, 0x6a) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0xc00009}, 0x5, 0x20000000) write$auto(0x3, 0x0, 0xfffffdef) sendto$auto(0x3, 0x0, 0xfffffffffffffdeb, 0x101, 0x0, 0x3) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/security/tomoyo/profile\x00', 0x88140, 0x0) getdents$auto(r1, 0x0, 0x4000004) getsockname$auto(r1, &(0x7f0000000000)=@generic={0x1a, "e3c422d11f7a47c758788fd78b13"}, &(0x7f0000000080)=0x7) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) 447.548382ms ago: executing program 3 (id=1498): r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/ip_vs_stats\x00', 0x121140, 0x0) pread64$auto(r0, 0x0, 0x8, 0x8003) 145.521004ms ago: executing program 4 (id=1499): mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) r0 = openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f0000007480)='/dev/cec12\x00', 0x400, 0x0) ioctl$auto_CEC_RECEIVE(r0, 0xc0386106, 0x0) bind$auto(r0, &(0x7f0000000100)=@rc={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x5}, 0x101) io_uring_setup$auto(0x6, 0x0) socket(0xa, 0x801, 0x106) futex_waitv$auto(&(0x7f0000000000)={0xf, 0x5d94, 0x4, 0x4}, 0x77, 0x0, 0x0, 0x62bd) r1 = socket$nl_generic(0x10, 0x3, 0x10) pidfd_open$auto(0x1, 0x0) pidfd_open$auto(0x1, 0x0) bpf$auto(0x0, &(0x7f0000000000)=@link_update={r1, @new_prog_fd=0x4, 0x4, @old_map_fd}, 0xa3) r2 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$auto(r2, 0x10e, 0x6b6, 0xfffffffffffffffe, 0x0) bind$auto(r2, &(0x7f00000000c0)=@generic={0x6, "6026fef98ea3e42547f7648b6294"}, 0x5f15) 144.647641ms ago: executing program 3 (id=1500): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r0 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x621f, 0x10004) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = socket(0x2, 0x801, 0x100) (async) io_uring_setup$auto(0x6, 0x0) mkdir$auto(&(0x7f0000000040)='./file0\x00', 0x2) (async) r2 = openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, &(0x7f0000000140), 0x100, 0x0) ioctl$auto_USB_RAW_IOCTL_INIT(r2, 0x41015500, &(0x7f0000000300)={"5adef7dee7f7018957844cff29ed32b5e06502a30816a7b0342aecf5f00ba22f9f22c23d86776e7d6063852dc51b297d7b2b2c3f6165dd465564daa9a2cca3b9b9c39d9bbb61b295c05520b6fe0b8472ba8186c035fd2688b67c36b68ceca32e2224537de625d65efabc41094dbaf17f9de8de04b004d05ab550d26bfed7346e", "6a1bad4244cddabc5ab8d84a2115e0e70d0facb940aa64b6d9eaff2acebd7c5dcfe4787051ec26364b7ae8d7baeeb9e4889b7d58e1d448845d4af2ae37e050ae070000000000000052e042e71a82d23e1948a0361be893b768934ff405d41b80790ac47f793c6e9bf2a139c3504753c3fc1f121a0e28e4b321ca105318fe4dea", 0x1}) (async) epoll_ctl$auto(r0, 0x2, r1, &(0x7f0000000100)={0x3, 0x100000000}) (async, rerun: 32) r3 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0) (rerun: 32) write$auto(r3, 0x0, 0xe) close_range$auto(r1, r1, 0x10001) (async) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x8000, 0x70) mkdir$auto(&(0x7f0000000000)='./file0/file1\x00', 0x2) mkdir$auto(&(0x7f0000000080)='./file0/file0\x00', 0x3) renameat2$auto(r4, &(0x7f00000000c0)='./file0\x00', r4, &(0x7f0000000240)='./file1\x00', 0x2) (async) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) (async, rerun: 32) connect$auto(0x3, &(0x7f00000018c0), 0x55) (async, rerun: 32) close_range$auto(0x2, 0x8, 0x0) (async) setresuid$auto(0x2, 0x7, 0x8080) (async, rerun: 64) ioprio_get$auto(0x3, 0x2) (rerun: 64) 2.465463ms ago: executing program 0 (id=1501): mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x402, 0x300000000000) r0 = socket(0xf, 0x3, 0x2) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x63}, 0x1, 0x0, 0x0, 0x4080}, 0x20000000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'geneve0\x00', 0x0}) r2 = open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) fcntl$auto(r2, 0x400, 0x1) execve$auto(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) truncate$auto(&(0x7f0000000000)='./file0\x00', 0x3f2ec021) sendmsg$auto_BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000000)=ANY=[@ANYBLOB="f2000000", @ANYRES16=0x0, @ANYBLOB="7d472dbd7000fcdbdf", @ANYRES32=r1, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x8}, 0x4000044) r3 = socket(0xa, 0x5, 0x84) sendto$auto(r3, 0x0, 0x401, 0x101, &(0x7f0000000000)=@generic={0xa, "e2e18340cba8fe8000"}, 0x1c) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x3, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4000894}, 0x800) bpf$auto(0x0, &(0x7f00000001c0)=@test={0xffffffffffffffff, 0xffff, 0xfffff0b6, 0xffff, 0x84, 0xac1, 0x2, 0x36242398, 0x9, 0x3bb, 0x7, 0xffff, 0x6, 0x81, 0x68198}, 0x6f0) sendmsg$auto_ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000000100)=ANY=[], 0xd4}, 0x1, 0x0, 0x0, 0x20000010}, 0x20008000) clone3$auto(&(0x7f0000000140)={0x1, 0x4, 0x81, 0x6, 0x8, 0x8, 0x4000000000000, 0x2, 0xb, 0x8001, 0xc88}, 0xfffffffffffffffb) sendmsg$auto_ETHTOOL_MSG_WOL_SET(0xffffffffffffffff, &(0x7f0000002cc0)={0x0, 0x0, &(0x7f0000002c80)={&(0x7f0000000180)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYBLOB="010027bd"], 0x2c}, 0x1, 0x0, 0x0, 0x4801}, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="12"], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 0s ago: executing program 2 (id=1502): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002f00), 0xffffffffffffffff) socket(0x2b, 0x1, 0x0) (async) mmap$auto(0x0, 0xa, 0xdb, 0x9b72, 0x5, 0x8000) (async) setsockopt$auto(0x3, 0x1, 0x21, 0x0, 0x9) (async) listen$auto(0x3, 0x83) memfd_create$auto(&(0x7f0000000040)='A\x00\x00\x00\x00\xef\x97\x8aY\x00\x00\xd2\x8c\xb05\x03\\\xb2\xbf247{\xde\f\x00\x00\v\x00E\xdb\x81\xd9\xd8\xe640\xc6\xa4Sr\x82\xcc3\x0f\xa71\"K\xe1IIT\x00\x00\x00', 0x1010) rseq$auto(&(0x7f0000000300)={0xe, 0x401, 0x0, 0x6, 0xffffffff, 0x2}, 0x8000, 0x0, 0x6) (async) fallocate$auto(0x8000000000000003, 0x0, 0xd, 0xcbd5d) (async) finit_module$auto(0x3, 0xfffffffffffffffe, 0x400000000004) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x47, 0x8000) sendmsg$auto_NL802154_CMD_SEND_BEACONS(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000400)={&(0x7f0000000280)={0x44, 0x0, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@NL802154_ATTR_PAGE={0x5, 0x7, 0x4}, @NL802154_ATTR_IFTYPE={0x8, 0x5, 0x4}, @NL802154_ATTR_CCA_ED_LEVEL={0x8, 0xe, 0x9}, @NL802154_ATTR_PID={0x8}, @NL802154_ATTR_NETNS_FD={0x8, 0x1d, r0}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5, 0x1a, 0x68}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x24008054) syncfs$auto(r0) r2 = open(&(0x7f0000000000)='./file0\x00', 0x261c2, 0x84) (async) close_range$auto(0x2, 0x8000, 0x0) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x100000000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) socket(0xa, 0x801, 0x84) connect$auto(0x3, &(0x7f0000000140)=@l2tp={0x2, 0x0, @private=0xa010100, 0x3}, 0x55) (async) io_uring_setup$auto(0x6, 0x0) (async) setsockopt$auto(0x3, 0x10000000084, 0x7c, 0x0, 0x8) (async) r3 = socket(0xa, 0x2, 0x88) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'ip_vti0\x00', 0x0}) bpf$auto(0x0, &(0x7f00000000c0)=@bpf_attr_5={@target_ifindex=r5, r4, 0x8000, 0x2, r3, @relative_id=0x13, 0x6}, 0xf) bpf$auto(0x2, &(0x7f00000001c0)=@raw_tracepoint={0x5, r2, 0x0, 0x3}, 0xc) sendmsg$auto_NFSD_CMD_LISTENER_SET(r0, &(0x7f0000005380)={0x0, 0x0, &(0x7f0000005340)={&(0x7f0000000080)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002bbd0000fcdbdf250600000024000180090002006e6673640000000014000100df9b201bba5d82e832454bc5b9c949fd"], 0x38}, 0x1, 0x0, 0x0, 0xc000}, 0x20000000) (async) rseq$auto(&(0x7f0000000340)={0x8, 0x2, 0x0, 0xb, 0x8, 0x6ad, "71dce34ed9fca85749282c0c0d209941ef4ee781d78eb8a39aaa0f33fdf0707c5114a118e4322c0f8fc72136461f7a914a9d1bc57ccef2254dff7e2e10a32f20b47df582b4d27b4fdb33a8dc6df48a6dd52a80f89e693729a9af182573284ea084ea2efda1e8a71878615239861975c292fcffbdc6f131b05c"}, 0x5, 0x6, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.10.59' (ED25519) to the list of known hosts. [ 66.545706][ T5814] cgroup: Unknown subsys name 'net' [ 66.712432][ T5814] cgroup: Unknown subsys name 'cpuset' [ 66.720805][ T5814] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 68.119710][ T5814] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 69.825248][ T5826] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 69.838810][ T5826] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 69.858651][ T5826] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 69.877970][ T5826] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 69.897961][ T5826] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 69.905745][ T5826] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 69.948021][ T5826] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 69.956501][ T5826] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 69.965662][ T5826] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 69.978681][ T5826] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 69.987096][ T5826] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 69.995465][ T5826] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 70.021820][ T5141] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 70.034987][ T5141] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 70.043036][ T5831] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 70.051682][ T5831] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 70.059539][ T5831] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 70.067016][ T5831] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 70.092972][ T5826] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 70.112754][ T5826] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 70.128359][ T5826] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 70.140973][ T5826] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 70.156412][ T5826] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 70.165349][ T5826] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 70.276704][ T5823] chnl_net:caif_netlink_parms(): no params data found [ 70.429653][ T5823] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.437525][ T5823] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.445727][ T5823] bridge_slave_0: entered allmulticast mode [ 70.452689][ T5823] bridge_slave_0: entered promiscuous mode [ 70.498416][ T5823] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.505737][ T5823] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.513665][ T5823] bridge_slave_1: entered allmulticast mode [ 70.520553][ T5823] bridge_slave_1: entered promiscuous mode [ 70.561359][ T5827] chnl_net:caif_netlink_parms(): no params data found [ 70.575336][ T5823] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.588484][ T5823] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.644453][ T5829] chnl_net:caif_netlink_parms(): no params data found [ 70.659108][ T5823] team0: Port device team_slave_0 added [ 70.682935][ T5823] team0: Port device team_slave_1 added [ 70.761428][ T5823] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.768757][ T5823] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.795108][ T5823] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.834802][ T5823] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.841870][ T5823] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.868267][ T5823] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.887604][ T5827] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.894984][ T5827] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.903283][ T5827] bridge_slave_0: entered allmulticast mode [ 70.910568][ T5827] bridge_slave_0: entered promiscuous mode [ 70.932545][ T5834] chnl_net:caif_netlink_parms(): no params data found [ 70.944978][ T5827] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.952194][ T5827] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.960152][ T5827] bridge_slave_1: entered allmulticast mode [ 70.966879][ T5827] bridge_slave_1: entered promiscuous mode [ 71.040212][ T5827] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.049797][ T5829] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.057001][ T5829] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.064713][ T5829] bridge_slave_0: entered allmulticast mode [ 71.071790][ T5829] bridge_slave_0: entered promiscuous mode [ 71.080015][ T5829] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.087174][ T5829] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.094611][ T5829] bridge_slave_1: entered allmulticast mode [ 71.101441][ T5829] bridge_slave_1: entered promiscuous mode [ 71.121289][ T5823] hsr_slave_0: entered promiscuous mode [ 71.128179][ T5823] hsr_slave_1: entered promiscuous mode [ 71.136932][ T5827] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.202888][ T5827] team0: Port device team_slave_0 added [ 71.214745][ T5827] team0: Port device team_slave_1 added [ 71.222927][ T5829] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.257336][ T5829] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.323532][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.333861][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.365491][ T5827] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.379451][ T5829] team0: Port device team_slave_0 added [ 71.385964][ T5834] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.394045][ T5834] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.402068][ T5834] bridge_slave_0: entered allmulticast mode [ 71.409033][ T5834] bridge_slave_0: entered promiscuous mode [ 71.421121][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.428338][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.454587][ T5827] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.469249][ T5829] team0: Port device team_slave_1 added [ 71.479999][ T5834] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.487241][ T5834] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.494922][ T5834] bridge_slave_1: entered allmulticast mode [ 71.501908][ T5834] bridge_slave_1: entered promiscuous mode [ 71.553615][ T5834] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.565885][ T5834] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.600748][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.607881][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.634345][ T5829] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.664753][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.672027][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.699351][ T5829] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.713904][ T5827] hsr_slave_0: entered promiscuous mode [ 71.720678][ T5827] hsr_slave_1: entered promiscuous mode [ 71.727168][ T5827] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 71.735842][ T5827] Cannot create hsr debugfs directory [ 71.749659][ T5834] team0: Port device team_slave_0 added [ 71.777002][ T5834] team0: Port device team_slave_1 added [ 71.816630][ T5829] hsr_slave_0: entered promiscuous mode [ 71.823609][ T5829] hsr_slave_1: entered promiscuous mode [ 71.830473][ T5829] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 71.843494][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.845363][ T5829] Cannot create hsr debugfs directory [ 71.850760][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.882989][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.891953][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.918632][ T5834] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.919032][ T5826] Bluetooth: hci0: command tx timeout [ 71.931762][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.942112][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.968444][ T5834] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.077810][ T5826] Bluetooth: hci1: command tx timeout [ 72.087533][ T5823] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 72.105525][ T5834] hsr_slave_0: entered promiscuous mode [ 72.112785][ T5834] hsr_slave_1: entered promiscuous mode [ 72.120631][ T5834] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 72.129974][ T5834] Cannot create hsr debugfs directory [ 72.145137][ T5823] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 72.157778][ T5826] Bluetooth: hci2: command tx timeout [ 72.176860][ T5823] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 72.206332][ T5823] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 72.237964][ T5826] Bluetooth: hci3: command tx timeout [ 72.341527][ T5827] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 72.368279][ T5827] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 72.395429][ T5827] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 72.432097][ T5827] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 72.473022][ T5829] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 72.487418][ T5829] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 72.506402][ T5829] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 72.525811][ T5829] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 72.587205][ T5823] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.597518][ T5834] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 72.624524][ T5834] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 72.635776][ T5834] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 72.658970][ T5823] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.677323][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.684849][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.697387][ T5834] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 72.737305][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.744664][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.884467][ T5827] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.912158][ T5829] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.937086][ T5827] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.981719][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.990144][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.006697][ T5829] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.021714][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.028946][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.061194][ T5834] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.074414][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.081641][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.093697][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.101086][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.161914][ T5834] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.187431][ T5823] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.202993][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.210475][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.259338][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.266479][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.362369][ T5823] veth0_vlan: entered promiscuous mode [ 73.403103][ T5823] veth1_vlan: entered promiscuous mode [ 73.484902][ T5823] veth0_macvtap: entered promiscuous mode [ 73.514749][ T5823] veth1_macvtap: entered promiscuous mode [ 73.553772][ T5823] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.588934][ T5823] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.600820][ T5823] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.615144][ T5823] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.626938][ T5823] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.642891][ T5823] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.669420][ T5829] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.763452][ T5827] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.784466][ T5834] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.854048][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.864456][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.897490][ T5829] veth0_vlan: entered promiscuous mode [ 73.942482][ T5834] veth0_vlan: entered promiscuous mode [ 73.955272][ T5829] veth1_vlan: entered promiscuous mode [ 73.967926][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.971919][ T5834] veth1_vlan: entered promiscuous mode [ 73.975949][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.000751][ T5826] Bluetooth: hci0: command tx timeout [ 74.007914][ T5827] veth0_vlan: entered promiscuous mode [ 74.034922][ T5827] veth1_vlan: entered promiscuous mode [ 74.086587][ T5823] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 74.100938][ T5829] veth0_macvtap: entered promiscuous mode [ 74.120364][ T5829] veth1_macvtap: entered promiscuous mode [ 74.154297][ T5834] veth0_macvtap: entered promiscuous mode [ 74.162609][ T5826] Bluetooth: hci1: command tx timeout [ 74.181641][ T5829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.193978][ T5829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.205524][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.238355][ T5826] Bluetooth: hci2: command tx timeout [ 74.255648][ T5827] veth0_macvtap: entered promiscuous mode [ 74.274420][ T5834] veth1_macvtap: entered promiscuous mode [ 74.293458][ T5827] veth1_macvtap: entered promiscuous mode [ 74.305634][ T5829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.318158][ T5826] Bluetooth: hci3: command tx timeout [ 74.353660][ T5829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.367063][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.391545][ T5829] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.404610][ T5829] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.420071][ T5829] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.434644][ T5829] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.443211][ T5887] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 74.456844][ T5834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.479370][ T5834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.495730][ T5834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.513950][ T5834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.525418][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.546868][ T5834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.567716][ T5834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.584142][ T5834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.594938][ T5834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.612124][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.634175][ T5834] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.648430][ T5834] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.657199][ T5834] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.670992][ T5834] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.724639][ T5827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.751162][ T5827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.761845][ T5827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.773282][ T5827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.784877][ T5827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.795582][ T5827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.810193][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.899659][ T5827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.915016][ T5827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.928042][ T5827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.939103][ T5827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.949493][ T5827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.960915][ T5827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.973504][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.018598][ T5827] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.038346][ T5827] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.048985][ T5827] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.058387][ T5827] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.112411][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.131646][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.150796][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.158346][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.235301][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.244789][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.364968][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.388834][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.419494][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.476108][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.555405][ T5876] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.586766][ T5876] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.937623][ T5908] sp0: Synchronizing with TNC [ 76.078491][ T5826] Bluetooth: hci0: command tx timeout [ 76.240853][ T5826] Bluetooth: hci1: command tx timeout [ 76.318141][ T5826] Bluetooth: hci2: command tx timeout [ 76.400475][ T5826] Bluetooth: hci3: command tx timeout [ 76.409341][ T5917] sp0: Synchronizing with TNC [ 76.864252][ T5929] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12'. [ 77.495004][ T5944] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 78.158428][ T5826] Bluetooth: hci0: command tx timeout [ 78.320279][ T5826] Bluetooth: hci1: command tx timeout [ 78.399318][ T5826] Bluetooth: hci2: command tx timeout [ 78.481315][ T5826] Bluetooth: hci3: command tx timeout [ 79.830958][ T5971] sp0: Synchronizing with TNC [ 81.448613][ T5984] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 81.476266][ T5984] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 81.590339][ T5984] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 81.677246][ T5984] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 81.686624][ T5984] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 82.020715][ T5984] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 82.152828][ T6000] netlink: 'syz.3.29': attribute type 1 has an invalid length. [ 82.177732][ T6000] netlink: 53 bytes leftover after parsing attributes in process `syz.3.29'. [ 82.226770][ T5984] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 82.243972][ T5984] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 82.399135][ T5984] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 82.436409][ T5984] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 82.490474][ T5984] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 82.591102][ T5984] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 82.887730][ T5826] Bluetooth: hci0: command 0x0c1a tx timeout [ 83.441957][ T6015] Zero length message leads to an empty skb [ 83.683009][ T5826] Bluetooth: hci1: command 0x0c1a tx timeout [ 84.238236][ T5826] Bluetooth: hci2: command 0x0c1a tx timeout [ 84.487829][ T5826] Bluetooth: hci3: command 0x0c1a tx timeout [ 84.689235][ T6023] openvswitch: netlink: Duplicate key (type 15). [ 84.957928][ T5826] Bluetooth: hci0: command 0x0c1a tx timeout [ 85.760527][ T5826] Bluetooth: hci1: command 0x0c1a tx timeout [ 86.318017][ T5826] Bluetooth: hci2: command 0x0c1a tx timeout [ 86.376296][ T6040] netlink: 'syz.0.38': attribute type 1 has an invalid length. [ 86.437780][ T6040] netlink: 53 bytes leftover after parsing attributes in process `syz.0.38'. [ 86.574826][ T5826] Bluetooth: hci3: command 0x0c1a tx timeout [ 86.671959][ T6042] process 'syz.1.39' launched './file0' with NULL argv: empty string added [ 87.037779][ T5826] Bluetooth: hci0: command 0x0c1a tx timeout [ 87.216377][ T1204] cfg80211: failed to load regulatory.db [ 87.558224][ T6051] netlink: 342 bytes leftover after parsing attributes in process `syz.3.42'. [ 87.845296][ T5826] Bluetooth: hci1: command 0x0c1a tx timeout [ 88.398417][ T5826] Bluetooth: hci2: command 0x0c1a tx timeout [ 88.637882][ T5826] Bluetooth: hci3: command 0x0c1a tx timeout [ 89.318010][ T6073] netlink: 'syz.1.48': attribute type 11 has an invalid length. [ 90.509595][ T6109] netlink: 4 bytes leftover after parsing attributes in process `syz.3.56'. [ 91.074550][ T6116] device-mapper: ioctl: Unable to rename non-existent device, to [ 91.515492][ T6125] netlink: 8 bytes leftover after parsing attributes in process `syz.2.60'. [ 92.647954][ T6134] zswap: compressor not available [ 92.944465][ T6135] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 94.363458][ T6155] netlink: 28 bytes leftover after parsing attributes in process `syz.1.67'. [ 94.377899][ T6155] gretap0: entered promiscuous mode [ 95.935362][ T6173] binder: 6172:6173 ioctl 40044900 800000000000003 returned -22 [ 98.466477][ T6194] netlink: 452 bytes leftover after parsing attributes in process `syz.3.75'. [ 99.285878][ T6216] netlink: 4 bytes leftover after parsing attributes in process `syz.3.82'. [ 99.351518][ T6216] netlink: 4 bytes leftover after parsing attributes in process `syz.3.82'. [ 99.685948][ T6236] netlink: 338 bytes leftover after parsing attributes in process `syz.2.84'. [ 99.688023][ T6228] could not allocate digest TFM handle [ 99.723821][ T6236] batadv0: entered promiscuous mode [ 99.905084][ T6230] could not allocate digest TFM handle [ 102.929278][ T6298] sp0: Synchronizing with TNC [ 103.356021][ T6303] sp0: Synchronizing with TNC [ 103.644253][ T6307] lo: entered allmulticast mode [ 103.660207][ T6307] netlink: 28 bytes leftover after parsing attributes in process `syz.2.102'. [ 103.867879][ T6314] binder: 6311:6314 ioctl 40044900 800000000000003 returned -22 [ 104.064286][ T6308] lo: left allmulticast mode [ 105.978717][ T6341] netlink: 4 bytes leftover after parsing attributes in process `syz.0.108'. [ 106.027872][ T6341] netlink: 4 bytes leftover after parsing attributes in process `syz.0.108'. [ 107.895078][ T6375] sp0: Synchronizing with TNC [ 108.585716][ T6384] netlink: 'syz.1.115': attribute type 1 has an invalid length. [ 108.637559][ T6384] netlink: 53 bytes leftover after parsing attributes in process `syz.1.115'. [ 109.373478][ T6399] FAULT_INJECTION: forcing a failure. [ 109.373478][ T6399] name failslab, interval 1, probability 0, space 0, times 1 [ 109.393106][ T6399] CPU: 1 UID: 0 PID: 6399 Comm: syz.2.116 Not tainted 6.13.0-rc4-syzkaller-00110-g4099a71718b0 #0 [ 109.403907][ T6399] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 109.414033][ T6399] Call Trace: [ 109.417498][ T6399] [ 109.420574][ T6399] dump_stack_lvl+0x16c/0x1f0 [ 109.425503][ T6399] should_fail_ex+0x497/0x5b0 [ 109.430260][ T6399] ? fs_reclaim_acquire+0xae/0x150 [ 109.435444][ T6399] should_failslab+0xc2/0x120 [ 109.440176][ T6399] __kmalloc_node_noprof+0xd1/0x520 [ 109.445880][ T6399] ? __kvmalloc_node_noprof+0xad/0x1a0 [ 109.451402][ T6399] __kvmalloc_node_noprof+0xad/0x1a0 [ 109.456947][ T6399] alloc_netdev_mqs+0xc4e/0x1320 [ 109.461940][ T6399] sixpack_open+0xfb/0xa40 [ 109.466393][ T6399] ? __pfx_sixpack_open+0x10/0x10 [ 109.471463][ T6399] ? down_write+0x14e/0x200 [ 109.476109][ T6399] ? __pfx_sixpack_open+0x10/0x10 [ 109.481189][ T6399] tty_ldisc_open+0x9c/0x120 [ 109.485820][ T6399] tty_set_ldisc+0x318/0x720 [ 109.490555][ T6399] tty_ioctl+0xc22/0x1640 [ 109.494966][ T6399] ? __pfx_tty_ioctl+0x10/0x10 [ 109.499940][ T6399] ? __pfx_lock_release+0x10/0x10 [ 109.505005][ T6399] ? trace_lock_acquire+0x14e/0x1f0 [ 109.510350][ T6399] ? __fget_files+0x206/0x3a0 [ 109.515262][ T6399] ? __pfx_tty_ioctl+0x10/0x10 [ 109.520151][ T6399] __x64_sys_ioctl+0x190/0x200 [ 109.525056][ T6399] do_syscall_64+0xcd/0x250 [ 109.529685][ T6399] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 109.535649][ T6399] RIP: 0033:0x7f8046d85d29 [ 109.540079][ T6399] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 109.559739][ T6399] RSP: 002b:00007f8047be2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 109.568175][ T6399] RAX: ffffffffffffffda RBX: 00007f8046f75fa0 RCX: 00007f8046d85d29 [ 109.576354][ T6399] RDX: 0000000000000000 RSI: 0000000000005423 RDI: 0000000000000007 [ 109.584360][ T6399] RBP: 00007f8047be2090 R08: 0000000000000000 R09: 0000000000000000 [ 109.592358][ T6399] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 109.600354][ T6399] R13: 0000000000000000 R14: 00007f8046f75fa0 R15: 00007ffd9d9e8378 [ 109.608654][ T6399] [ 110.393457][ T6420] sp0: Synchronizing with TNC [ 111.888407][ T6436] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 113.406280][ T6460] netlink: 338 bytes leftover after parsing attributes in process `syz.2.134'. [ 115.547523][ T6479] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 116.296910][ T6492] netlink: 28 bytes leftover after parsing attributes in process `syz.0.140'. [ 116.569664][ T6492] vcan0: entered promiscuous mode [ 121.798590][ T6553] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 126.107961][ T6571] mmap: syz.0.159 (6571) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 127.712415][ T6579] capability: warning: `syz.3.162' uses 32-bit capabilities (legacy support in use) [ 128.035897][ T6564] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 129.580659][ T6595] netlink: 342 bytes leftover after parsing attributes in process `syz.3.166'. [ 130.155398][ T6599] netlink: 28 bytes leftover after parsing attributes in process `syz.0.164'. [ 132.268213][ T6611] netlink: 'syz.3.169': attribute type 1 has an invalid length. [ 132.308955][ T6611] netlink: 53 bytes leftover after parsing attributes in process `syz.3.169'. [ 132.781365][ T6615] netlink: 342 bytes leftover after parsing attributes in process `syz.3.170'. [ 133.291522][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.300283][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.579984][ T6640] netlink: 'syz.2.178': attribute type 1 has an invalid length. [ 133.608367][ T6640] netlink: 53 bytes leftover after parsing attributes in process `syz.2.178'. [ 133.754015][ T6641] delete_channel: no stack [ 137.559730][ T6675] netlink: 326 bytes leftover after parsing attributes in process `syz.1.183'. [ 137.683209][ T6690] sp0: Synchronizing with TNC [ 138.960264][ T6714] openvswitch: netlink: Duplicate key (type 15). [ 140.095891][ T6725] Process accounting resumed [ 140.134043][ T6725] Process accounting resumed [ 141.609320][ T6756] openvswitch: netlink: Duplicate key (type 15). [ 142.150986][ T6764] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 142.574431][ T6769] Invalid ELF header magic: != ELF [ 144.930857][ T6807] openvswitch: netlink: Duplicate key (type 15). [ 145.758805][ T6816] netlink: 40 bytes leftover after parsing attributes in process `syz.2.221'. [ 146.386414][ T6829] block nbd12: NBD_DISCONNECT [ 146.414211][ T6830] netlink: 28 bytes leftover after parsing attributes in process `syz.1.225'. [ 146.510350][ T6830] bridge0: port 1(bridge_slave_0) entered disabled state [ 146.719310][ T6830] bridge_slave_0 (unregistering): left allmulticast mode [ 146.727409][ T6830] bridge_slave_0 (unregistering): left promiscuous mode [ 146.747791][ T6830] bridge0: port 1(bridge_slave_0) entered disabled state [ 147.066098][ T6839] random: crng reseeded on system resumption [ 147.252163][ T6844] openvswitch: netlink: IP tunnel dst address not specified [ 147.728192][ T6853] openvswitch: netlink: Duplicate key (type 15). [ 148.397539][ T6874] netlink: 4 bytes leftover after parsing attributes in process `syz.2.237'. [ 148.414843][ T6867] zswap: compressor not available [ 148.421902][ T6874] netlink: 4 bytes leftover after parsing attributes in process `syz.2.237'. [ 149.120274][ T6899] netlink: 4 bytes leftover after parsing attributes in process `syz.1.245'. [ 149.316033][ T6908] [ 149.434128][ T6908] Process accounting resumed [ 151.158970][ T6964] netlink: 8 bytes leftover after parsing attributes in process `syz.0.259'. [ 151.485259][ T6948] syz.1.255 uses obsolete (PF_INET,SOCK_PACKET) [ 153.058127][ T6995] netlink: 4 bytes leftover after parsing attributes in process `syz.1.267'. [ 153.194041][ T7001] netlink: 334 bytes leftover after parsing attributes in process `syz.2.268'. [ 154.214189][ T7031] device-mapper: ioctl: only supply one of name or uuid, cmd(5) [ 154.370861][ T7007] Process accounting resumed [ 154.568103][ T7039] openvswitch: netlink: Duplicate key (type 15). [ 156.937791][ T29] audit: type=1807 audit(1735542951.067:2): UNKNOWN=0"]$|1j0B|dӉO+/xWӦ^gq%ḦrO res=0 [ 156.953900][ T29] audit: type=1802 audit(1735542951.077:3): pid=7056 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.2.283" res=0 errno=0 [ 156.978210][ T7056] ima: policy update failed [ 157.057813][ T29] audit: type=1802 audit(1735542951.127:4): pid=7056 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.2.283" res=0 errno=0 [ 158.456493][ T7064] netlink: 4 bytes leftover after parsing attributes in process `syz.1.287'. [ 158.499794][ T7064] netlink: 4 bytes leftover after parsing attributes in process `syz.1.287'. [ 158.757850][ T7062] Process accounting resumed [ 158.852021][ T7062] bridge0: port 3(team0) entered blocking state [ 158.877904][ T7062] bridge0: port 3(team0) entered disabled state [ 158.884497][ T7062] team0: entered allmulticast mode [ 158.907891][ T7062] team_slave_0: entered allmulticast mode [ 158.934845][ T7062] team_slave_1: entered allmulticast mode [ 158.947859][ T7062] team0: entered promiscuous mode [ 158.967787][ T7062] team_slave_0: entered promiscuous mode [ 158.985567][ T7062] team_slave_1: entered promiscuous mode [ 159.003954][ T7062] bridge0: port 3(team0) entered blocking state [ 159.010452][ T7062] bridge0: port 3(team0) entered forwarding state [ 160.086766][ T7108] netlink: 28 bytes leftover after parsing attributes in process `syz.3.296'. [ 160.117222][ T7108] veth1_macvtap: left promiscuous mode [ 160.514800][ T7117] netlink: 4 bytes leftover after parsing attributes in process `syz.0.298'. [ 160.570247][ T7117] netlink: 4 bytes leftover after parsing attributes in process `syz.0.298'. [ 160.951949][ T29] audit: type=1800 audit(1735542955.087:5): pid=7130 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.302" name="lu_gp_id" dev="configfs" ino=14590 res=0 errno=0 [ 161.018119][ T29] audit: type=1800 audit(1735542955.097:6): pid=7129 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.302" name="lu_gp_id" dev="configfs" ino=14590 res=0 errno=0 [ 161.209074][ T7140] netlink: 4 bytes leftover after parsing attributes in process `syz.2.303'. [ 161.991980][ T7155] openvswitch: netlink: Duplicate key (type 15). [ 162.089937][ T29] audit: type=1807 audit(1735542956.237:7): UNKNOWN=0"]$|1j0B|dӉO+/xWӦ^gq%ḦrO res=0 [ 162.108306][ T7158] ima: policy update failed [ 162.117757][ T29] audit: type=1802 audit(1735542956.237:8): pid=7158 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.3.308" res=0 errno=0 [ 162.178294][ T29] audit: type=1802 audit(1735542956.307:9): pid=7158 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.3.308" res=0 errno=0 [ 162.986415][ T7181] HfR: entered promiscuous mode [ 163.036289][ T7181] netlink: 12 bytes leftover after parsing attributes in process `syz.0.314'. [ 163.087949][ T7181] HfR: left promiscuous mode [ 163.642356][ T7200] openvswitch: netlink: IPv6 tunnel dst address is zero [ 164.370660][ T7227] netlink: 28 bytes leftover after parsing attributes in process `syz.1.323'. [ 165.747625][ T7251] netlink: 93 bytes leftover after parsing attributes in process `syz.2.328'. [ 166.786544][ T7267] raw_sendmsg: syz.2.331 forgot to set AF_INET. Fix it! [ 167.423884][ T7289] binder: 7288:7289 ioctl 40044900 800000000000003 returned -22 [ 168.374704][ T7304] futex_wake_op: syz.2.337 tries to shift op by 64; fix this program [ 169.304248][ T7312] FAULT_INJECTION: forcing a failure. [ 169.304248][ T7312] name failslab, interval 1, probability 0, space 0, times 0 [ 169.343020][ T7312] CPU: 1 UID: 0 PID: 7312 Comm: syz.0.338 Not tainted 6.13.0-rc4-syzkaller-00110-g4099a71718b0 #0 [ 169.348423][ T7311] netlink: 93 bytes leftover after parsing attributes in process `syz.2.339'. [ 169.354814][ T7312] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 169.354861][ T7312] Call Trace: [ 169.354870][ T7312] [ 169.354880][ T7312] dump_stack_lvl+0x16c/0x1f0 [ 169.354940][ T7312] should_fail_ex+0x497/0x5b0 [ 169.354969][ T7312] ? fs_reclaim_acquire+0xae/0x150 [ 169.355001][ T7312] should_failslab+0xc2/0x120 [ 169.355134][ T7312] __kmalloc_node_noprof+0xd1/0x520 [ 169.355169][ T7312] ? __kvmalloc_node_noprof+0xad/0x1a0 [ 169.355206][ T7312] __kvmalloc_node_noprof+0xad/0x1a0 [ 169.355240][ T7312] seq_read_iter+0x82a/0x12b0 [ 169.355276][ T7312] ? __pfx_aa_file_perm+0x10/0x10 [ 169.355302][ T7312] seq_read+0x39f/0x4e0 [ 169.355326][ T7312] ? __pfx_seq_read+0x10/0x10 [ 169.355373][ T7312] ? __pfx_seq_read+0x10/0x10 [ 169.355399][ T7312] vfs_read+0x1df/0xbe0 [ 169.355425][ T7312] ? __fget_files+0x1fc/0x3a0 [ 169.355452][ T7312] ? __pfx___mutex_lock+0x10/0x10 [ 169.355483][ T7312] ? __pfx_vfs_read+0x10/0x10 [ 169.355519][ T7312] ? __fget_files+0x206/0x3a0 [ 169.355554][ T7312] ksys_read+0x12b/0x250 [ 169.355577][ T7312] ? __pfx_ksys_read+0x10/0x10 [ 169.355616][ T7312] do_syscall_64+0xcd/0x250 [ 169.355652][ T7312] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 169.355685][ T7312] RIP: 0033:0x7f9837b85d29 [ 169.355720][ T7312] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 169.355744][ T7312] RSP: 002b:00007f9838997038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 169.355772][ T7312] RAX: ffffffffffffffda RBX: 00007f9837d76080 RCX: 00007f9837b85d29 [ 169.355791][ T7312] RDX: 0000000000400000 RSI: 0000000000000000 RDI: 0000000000000003 [ 169.355808][ T7312] RBP: 00007f9838997090 R08: 0000000000000000 R09: 0000000000000000 [ 169.355825][ T7312] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 169.355843][ T7312] R13: 0000000000000001 R14: 00007f9837d76080 R15: 00007ffc0542d6a8 [ 169.355877][ T7312] [ 171.449596][ T7344] FAULT_INJECTION: forcing a failure. [ 171.449596][ T7344] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 171.521410][ T7344] CPU: 0 UID: 0 PID: 7344 Comm: syz.2.349 Not tainted 6.13.0-rc4-syzkaller-00110-g4099a71718b0 #0 [ 171.532169][ T7344] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 171.542256][ T7344] Call Trace: [ 171.545565][ T7344] [ 171.548599][ T7344] dump_stack_lvl+0x16c/0x1f0 [ 171.553322][ T7344] should_fail_ex+0x497/0x5b0 [ 171.558101][ T7344] _copy_to_iter+0x4a5/0x1400 [ 171.562826][ T7344] ? __pfx__copy_to_iter+0x10/0x10 [ 171.567983][ T7344] ? __virt_addr_valid+0x1a4/0x590 [ 171.573140][ T7344] ? __virt_addr_valid+0x5e/0x590 [ 171.578196][ T7344] ? __phys_addr_symbol+0x30/0x80 [ 171.583240][ T7344] ? __check_object_size+0x488/0x710 [ 171.588548][ T7344] seq_read_iter+0xd00/0x12b0 [ 171.593338][ T7344] seq_read+0x39f/0x4e0 [ 171.597506][ T7344] ? __pfx_seq_read+0x10/0x10 [ 171.602211][ T7344] ? __pfx_seq_read+0x10/0x10 [ 171.606904][ T7344] vfs_read+0x1df/0xbe0 [ 171.611086][ T7344] ? __fget_files+0x1fc/0x3a0 [ 171.615786][ T7344] ? __pfx___mutex_lock+0x10/0x10 [ 171.620828][ T7344] ? __pfx_vfs_read+0x10/0x10 [ 171.625528][ T7344] ? __fget_files+0x206/0x3a0 [ 171.630228][ T7344] ksys_read+0x12b/0x250 [ 171.634579][ T7344] ? __pfx_ksys_read+0x10/0x10 [ 171.639561][ T7344] do_syscall_64+0xcd/0x250 [ 171.644109][ T7344] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 171.650034][ T7344] RIP: 0033:0x7f8046d85d29 [ 171.654550][ T7344] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 171.674187][ T7344] RSP: 002b:00007f8047be2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 171.682769][ T7344] RAX: ffffffffffffffda RBX: 00007f8046f75fa0 RCX: 00007f8046d85d29 [ 171.690754][ T7344] RDX: 0000000000400000 RSI: 0000000000000000 RDI: 0000000000000003 [ 171.698736][ T7344] RBP: 00007f8047be2090 R08: 0000000000000000 R09: 0000000000000000 [ 171.706724][ T7344] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 171.714746][ T7344] R13: 0000000000000000 R14: 00007f8046f75fa0 R15: 00007ffd9d9e8378 [ 171.722755][ T7344] [ 172.518893][ T7369] syz.2.353 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 172.702107][ T29] audit: type=1800 audit(1735542966.847:10): pid=7367 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.352" name="discovery_nqn" dev="configfs" ino=13897 res=0 errno=0 [ 173.665124][ T7399] netlink: 'syz.2.357': attribute type 2 has an invalid length. [ 174.148424][ T7405] FAULT_INJECTION: forcing a failure. [ 174.148424][ T7405] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 174.193937][ T7405] CPU: 0 UID: 0 PID: 7405 Comm: syz.2.359 Not tainted 6.13.0-rc4-syzkaller-00110-g4099a71718b0 #0 [ 174.204621][ T7405] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 174.214726][ T7405] Call Trace: [ 174.218034][ T7405] [ 174.220993][ T7405] dump_stack_lvl+0x16c/0x1f0 [ 174.225717][ T7405] should_fail_ex+0x497/0x5b0 [ 174.230627][ T7405] _copy_to_user+0x32/0xd0 [ 174.235109][ T7405] simple_read_from_buffer+0xd0/0x160 [ 174.240544][ T7405] proc_fail_nth_read+0x198/0x270 [ 174.245628][ T7405] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 174.251257][ T7405] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 174.256876][ T7405] vfs_read+0x1df/0xbe0 [ 174.261072][ T7405] ? __fget_files+0x1fc/0x3a0 [ 174.265806][ T7405] ? __pfx___mutex_lock+0x10/0x10 [ 174.270874][ T7405] ? __pfx_vfs_read+0x10/0x10 [ 174.275615][ T7405] ? __fget_files+0x206/0x3a0 [ 174.280441][ T7405] ksys_read+0x12b/0x250 [ 174.284821][ T7405] ? __pfx_ksys_read+0x10/0x10 [ 174.289647][ T7405] do_syscall_64+0xcd/0x250 [ 174.294209][ T7405] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 174.300200][ T7405] RIP: 0033:0x7f8046d8473c [ 174.304656][ T7405] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 174.324871][ T7405] RSP: 002b:00007f8047bc1030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 174.333329][ T7405] RAX: ffffffffffffffda RBX: 00007f8046f76080 RCX: 00007f8046d8473c [ 174.341317][ T7405] RDX: 000000000000000f RSI: 00007f8047bc10a0 RDI: 0000000000000004 [ 174.349307][ T7405] RBP: 00007f8047bc1090 R08: 0000000000000000 R09: 0000000000000000 [ 174.357290][ T7405] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 174.365279][ T7405] R13: 0000000000000001 R14: 00007f8046f76080 R15: 00007ffd9d9e8378 [ 174.373298][ T7405] [ 175.097843][ T7418] netlink: 20 bytes leftover after parsing attributes in process `syz.3.360'. [ 175.492281][ T7432] netlink: 93 bytes leftover after parsing attributes in process `syz.0.366'. [ 175.629009][ T7418] mac80211_hwsim hwsim9 wlan1: entered allmulticast mode [ 177.073175][ T7469] netlink: 330 bytes leftover after parsing attributes in process `syz.2.374'. [ 177.247298][ T7472] openvswitch: netlink: Duplicate key (type 15). [ 177.564671][ T7481] netlink: 93 bytes leftover after parsing attributes in process `syz.2.377'. [ 178.254548][ T7495] netlink: 28 bytes leftover after parsing attributes in process `syz.1.381'. [ 179.384899][ T7518] netlink: 93 bytes leftover after parsing attributes in process `syz.3.388'. [ 180.306432][ T7531] openvswitch: netlink: Duplicate key (type 15). [ 181.138137][ T7540] netlink: 4 bytes leftover after parsing attributes in process `syz.3.392'. [ 182.675523][ T7563] netlink: 28 bytes leftover after parsing attributes in process `syz.2.398'. [ 182.705377][ T7563] macvlan1: entered promiscuous mode [ 183.172090][ T7571] openvswitch: netlink: Duplicate key (type 15). [ 183.735540][ T7591] vivid-009: ================= START STATUS ================= [ 183.744768][ T7591] vivid-009: Enable Output Cropping: true [ 183.752513][ T7591] vivid-009: Enable Output Composing: true [ 183.758992][ T7591] vivid-009: Enable Output Scaler: true [ 183.764596][ T7591] vivid-009: Tx RGB Quantization Range: Automatic [ 183.771469][ T7591] vivid-009: Transmit Mode: HDMI [ 183.776646][ T7591] vivid-009: Hotplug Present: 0x00000000 [ 183.782389][ T7591] vivid-009: RxSense Present: 0x00000000 [ 183.788368][ T7591] vivid-009: EDID Present: 0x00000000 [ 183.795154][ T7591] vivid-009: ================== END STATUS ================== [ 184.354449][ T7621] netlink: 93 bytes leftover after parsing attributes in process `syz.3.414'. [ 184.395941][ T7610] Process accounting paused [ 184.809322][ T7637] openvswitch: netlink: Duplicate key (type 15). [ 184.929843][ T7642] device-mapper: ioctl: ioctl interface mismatch: kernel(4.48.0), user(0.0.0), cmd(3) [ 185.189281][ T7650] netlink: 4 bytes leftover after parsing attributes in process `syz.2.425'. [ 185.319655][ T7652] netlink: 85 bytes leftover after parsing attributes in process `syz.1.426'. [ 186.116362][ T7678] netlink: 12 bytes leftover after parsing attributes in process `syz.0.433'. [ 186.161279][ T7691] netlink: 85 bytes leftover after parsing attributes in process `syz.2.437'. [ 187.377470][ T7715] netlink: 338 bytes leftover after parsing attributes in process `syz.0.443'. [ 187.445408][ T7716] netlink: 338 bytes leftover after parsing attributes in process `syz.0.443'. [ 188.156415][ T7735] vivid-013: ================= START STATUS ================= [ 188.220007][ T7735] vivid-013: Generate PTS: true [ 188.264483][ T7735] vivid-013: Generate SCR: true [ 188.341716][ T7735] tpg source WxH: 640x360 (Y'CbCr) [ 188.380255][ T7735] tpg field: 1 [ 188.390431][ T7733] ======================================================= [ 188.390431][ T7733] WARNING: The mand mount option has been deprecated and [ 188.390431][ T7733] and is ignored by this kernel. Remove the mand [ 188.390431][ T7733] option from the mount to silence this warning. [ 188.390431][ T7733] ======================================================= [ 188.393835][ T7735] tpg crop: 640x360@0x0 [ 188.484482][ T7735] tpg compose: 640x360@0x0 [ 188.503256][ T7735] tpg colorspace: 8 [ 188.507147][ T7735] tpg transfer function: 0/0 [ 188.532745][ T7735] tpg Y'CbCr encoding: 0/0 [ 188.537593][ T7735] tpg quantization: 0/0 [ 188.559130][ T7735] tpg RGB range: 0/2 [ 188.585484][ T7735] vivid-013: ================== END STATUS ================== [ 188.704968][ T7751] netlink: 85 bytes leftover after parsing attributes in process `syz.3.448'. [ 188.891605][ T7761] netlink: 28 bytes leftover after parsing attributes in process `syz.1.450'. [ 188.914491][ T7761] macvlan1: entered promiscuous mode [ 190.295693][ T7801] netlink: 28 bytes leftover after parsing attributes in process `syz.1.460'. [ 190.341359][ T7800] netlink: 28 bytes leftover after parsing attributes in process `syz.1.460'. [ 190.394773][ T7801] netdevsim netdevsim1 netdevsim2: entered allmulticast mode [ 190.666751][ T7814] syz.0.461 (7814): attempted to duplicate a private mapping with mremap. This is not supported. [ 192.522098][ T7858] delete_channel: no stack [ 192.780624][ T7863] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 192.787061][ T7863] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 192.801229][ T7863] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 192.808194][ T7863] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 193.644044][ T7844] smc: net device syz_tun applied user defined pnetid ETHTOOL [ 194.735312][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.741815][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.800264][ T5826] Bluetooth: hci1: command 0x0c1a tx timeout [ 194.807391][ T5826] Bluetooth: hci0: command 0x0c1a tx timeout [ 194.877972][ T5826] Bluetooth: hci3: command 0x0c1a tx timeout [ 194.884140][ T5831] Bluetooth: hci2: command 0x0c1a tx timeout [ 195.141374][ T7911] netlink: 12 bytes leftover after parsing attributes in process `syz.1.490'. [ 196.068307][ T7924] binder: 7919:7924 ioctl 4bfb 3 returned -22 [ 196.688966][ T7943] bond0: option mode: unable to set because the bond device is up [ 196.721221][ T7943] netlink: 8 bytes leftover after parsing attributes in process `syz.1.498'. [ 196.821960][ T7912] netlink: 20 bytes leftover after parsing attributes in process `syz.0.488'. [ 196.921670][ T7912] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode [ 196.967507][ T7952] netlink: 28 bytes leftover after parsing attributes in process `syz.3.499'. [ 197.007239][ T7952] bridge0: port 1(bridge_slave_0) entered disabled state [ 197.062964][ T7952] bridge_slave_0 (unregistering): left allmulticast mode [ 197.070771][ T7952] bridge_slave_0 (unregistering): left promiscuous mode [ 197.088590][ T7952] bridge0: port 1(bridge_slave_0) entered disabled state [ 197.123283][ T7954] program syz.1.500 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 197.158007][ T7955] program syz.1.500 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 199.377862][ T7994] netlink: 8 bytes leftover after parsing attributes in process `syz.2.509'. [ 199.389708][ T7995] nfs: Unknown parameter 'w`_I+; HY Lu>>uh*C<+ ' [ 199.529598][ T7997] netlink: 342 bytes leftover after parsing attributes in process `syz.1.510'. [ 200.197002][ T8031] netlink: 8 bytes leftover after parsing attributes in process `syz.3.522'. [ 200.403833][ T8042] netlink: 12 bytes leftover after parsing attributes in process `syz.2.526'. [ 200.417321][ T8042] netlink: 12 bytes leftover after parsing attributes in process `syz.2.526'. [ 201.698151][ T8062] delete_channel: no stack [ 203.768460][ T8157] netlink: 'syz.2.555': attribute type 1 has an invalid length. [ 203.776487][ T8157] netlink: 53 bytes leftover after parsing attributes in process `syz.2.555'. [ 203.834771][ T8158] netlink: 'syz.2.555': attribute type 1 has an invalid length. [ 203.853005][ T8158] netlink: 53 bytes leftover after parsing attributes in process `syz.2.555'. [ 205.579670][ T8207] netlink: 'syz.3.567': attribute type 1 has an invalid length. [ 205.594861][ T8206] smc: net device syz_tun applied user defined pnetid ETHTOOL [ 205.602978][ T8207] netlink: 53 bytes leftover after parsing attributes in process `syz.3.567'. [ 206.602798][ T8246] netlink: 'syz.2.577': attribute type 1 has an invalid length. [ 206.629139][ T8246] netlink: 53 bytes leftover after parsing attributes in process `syz.2.577'. [ 206.659877][ T8246] netlink: 'syz.2.577': attribute type 1 has an invalid length. [ 206.679248][ T8246] netlink: 53 bytes leftover after parsing attributes in process `syz.2.577'. [ 206.879825][ T29] audit: type=1800 audit(1735543001.027:11): pid=8253 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.580" name="SYSV0000000a" dev="hugetlbfs" ino=0 res=0 errno=0 [ 206.943272][ T8253] netlink: 12 bytes leftover after parsing attributes in process `syz.2.580'. [ 207.062428][ T29] audit: type=1800 audit(1735543001.207:12): pid=8257 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.581" name="version" dev="configfs" ino=18747 res=0 errno=0 [ 208.162082][ T8283] openvswitch: netlink: Duplicate key (type 15). [ 209.128010][ T29] audit: type=1800 audit(1735543003.257:13): pid=8305 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.593" name="SYSV0000000a" dev="hugetlbfs" ino=0 res=0 errno=0 [ 209.210010][ T8305] netlink: 12 bytes leftover after parsing attributes in process `syz.0.593'. [ 210.461508][ T8334] netlink: 4 bytes leftover after parsing attributes in process `syz.0.600'. [ 210.502875][ T8334] netlink: 4 bytes leftover after parsing attributes in process `syz.0.600'. [ 210.821317][ T8342] netlink: 'syz.1.604': attribute type 1 has an invalid length. [ 210.838916][ T8344] openvswitch: netlink: Duplicate key (type 15). [ 211.850385][ T8348] delete_channel: no stack [ 212.210525][ T8365] HfR: entered promiscuous mode [ 212.432354][ T8365] openvswitch: HfR: Dropping previously announced user features [ 212.867033][ T8374] Invalid ELF header magic: != ELF [ 213.377045][ T8393] netlink: 28 bytes leftover after parsing attributes in process `syz.2.616'. [ 213.404199][ T8393] hsr_slave_0: left promiscuous mode [ 213.426097][ T8393] hsr_slave_1: left promiscuous mode [ 214.474772][ T8395] netlink: 8 bytes leftover after parsing attributes in process `syz.1.614'. [ 216.006842][ T8401] netlink: 28 bytes leftover after parsing attributes in process `syz.2.618'. [ 216.016614][ T8400] openvswitch: netlink: Duplicate key (type 15). [ 216.189674][ T8390] syz.1.614 (8390) used greatest stack depth: 21440 bytes left [ 216.351826][ T8395] Process accounting resumed [ 216.437837][ T8395] syz.1.614 (8395) used greatest stack depth: 17536 bytes left [ 217.583134][ T29] audit: type=1800 audit(1735543011.727:14): pid=8430 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.627" name="members" dev="configfs" ino=19894 res=0 errno=0 [ 218.554796][ T8446] openvswitch: netlink: Duplicate key (type 15). [ 219.537606][ T8442] openvswitch: netlink: Port -2134900732 exceeds max allowable 65535 [ 220.773353][ T8484] openvswitch: netlink: Duplicate key (type 15). [ 222.229986][ T8515] netlink: 12 bytes leftover after parsing attributes in process `syz.1.652'. [ 222.257808][ T8515] nbd: must specify a size in bytes for the device [ 224.200323][ T8545] HfR: entered promiscuous mode [ 224.279130][ T8545] openvswitch: HfR: Dropping previously announced user features [ 226.732544][ T8599] openvswitch: netlink: Duplicate key (type 15). [ 226.778270][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 227.388194][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 227.527969][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 227.537463][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 228.130797][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 228.628186][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 228.847785][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 228.918329][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 229.197976][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 229.238157][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 229.999917][ T8637] netlink: 8 bytes leftover after parsing attributes in process `syz.2.684'. [ 230.665266][ T8659] netlink: 8 bytes leftover after parsing attributes in process `syz.3.692'. [ 234.119578][ T8752] openvswitch: netlink: Duplicate key (type 15). [ 234.284303][ T8760] netlink: 'syz.1.714': attribute type 19 has an invalid length. [ 234.292508][ T8760] netlink: 310 bytes leftover after parsing attributes in process `syz.1.714'. [ 235.307273][ T8785] netlink: 4 bytes leftover after parsing attributes in process `syz.3.719'. [ 237.321564][ T8832] nl80211: entered promiscuous mode [ 237.467091][ T8835] netlink: 24 bytes leftover after parsing attributes in process `syz.2.731'. [ 238.977415][ T8873] netlink: 8 bytes leftover after parsing attributes in process `syz.1.744'. [ 240.161914][ T8904] netlink: 28 bytes leftover after parsing attributes in process `syz.3.753'. [ 240.348645][ T8911] netlink: 28 bytes leftover after parsing attributes in process `syz.1.756'. [ 240.482962][ T8904] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 240.515891][ T8904] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 240.537330][ T8904] bond0 (unregistering): Released all slaves [ 240.803736][ T8922] netlink: 330 bytes leftover after parsing attributes in process `syz.0.758'. [ 240.984252][ T8911] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 241.005723][ T8911] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 241.029982][ T8911] bond0 (unregistering): Released all slaves [ 241.281867][ T8937] openvswitch: netlink: Duplicate key (type 15). [ 242.789674][ T8979] netlink: 20 bytes leftover after parsing attributes in process `syz.3.772'. [ 242.904463][ T8984] netlink: 'syz.0.774': attribute type 1 has an invalid length. [ 242.923988][ T8984] netlink: 53 bytes leftover after parsing attributes in process `syz.0.774'. [ 243.901766][ T9032] netlink: 'syz.1.785': attribute type 1 has an invalid length. [ 243.906706][ T9033] netlink: 334 bytes leftover after parsing attributes in process `syz.2.786'. [ 243.925515][ T9032] netlink: 53 bytes leftover after parsing attributes in process `syz.1.785'. [ 245.232844][ T9069] netlink: 'syz.1.796': attribute type 1 has an invalid length. [ 245.240893][ T9069] netlink: 53 bytes leftover after parsing attributes in process `syz.1.796'. [ 246.338687][ T9101] netlink: 'syz.0.807': attribute type 1 has an invalid length. [ 246.346496][ T9101] netlink: 53 bytes leftover after parsing attributes in process `syz.0.807'. [ 246.953788][ T9112] erspan0: entered allmulticast mode [ 248.085046][ T9152] openvswitch: netlink: Duplicate key (type 15). [ 248.941388][ T53] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 248.954372][ T53] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 248.965786][ T53] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 248.974015][ T53] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 248.985162][ T53] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 249.014275][ T53] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 249.926337][ T9177] chnl_net:caif_netlink_parms(): no params data found [ 250.343532][ T9196] netlink: 24 bytes leftover after parsing attributes in process `syz.3.824'. [ 250.566945][ T9177] bridge0: port 1(bridge_slave_0) entered blocking state [ 250.584676][ T9177] bridge0: port 1(bridge_slave_0) entered disabled state [ 250.615808][ T9177] bridge_slave_0: entered allmulticast mode [ 250.634414][ T9177] bridge_slave_0: entered promiscuous mode [ 250.860377][ T9177] bridge0: port 2(bridge_slave_1) entered blocking state [ 250.875045][ T9177] bridge0: port 2(bridge_slave_1) entered disabled state [ 250.894033][ T9177] bridge_slave_1: entered allmulticast mode [ 250.914915][ T9177] bridge_slave_1: entered promiscuous mode [ 251.021305][ T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.120420][ T5831] Bluetooth: hci4: command tx timeout [ 251.157442][ T9177] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 251.272621][ T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.331251][ T9177] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 251.484051][ T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.696627][ T9177] team0: Port device team_slave_0 added [ 251.732015][ T9177] team0: Port device team_slave_1 added [ 252.039636][ T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 252.076358][ T9177] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 252.092810][ T9177] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 252.140599][ T9177] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 252.222063][ T9177] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 252.253850][ T9177] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 252.287274][ T9177] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 252.427818][ T9177] hsr_slave_0: entered promiscuous mode [ 252.434518][ T9177] hsr_slave_1: entered promiscuous mode [ 252.447475][ T9177] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 252.463679][ T9177] Cannot create hsr debugfs directory [ 252.731861][ T12] bridge_slave_1: left allmulticast mode [ 252.744078][ T12] bridge_slave_1: left promiscuous mode [ 252.769719][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 253.197854][ T5831] Bluetooth: hci4: command tx timeout [ 253.400079][ T12] erspan0 (unregistering): left allmulticast mode [ 253.829590][ T12] HfR: left promiscuous mode [ 253.975982][ T12] nl80211: left promiscuous mode [ 254.869689][ T9177] 8021q: adding VLAN 0 to HW filter on device bond0 [ 254.966310][ T9177] 8021q: adding VLAN 0 to HW filter on device team0 [ 255.277920][ T5831] Bluetooth: hci4: command tx timeout [ 255.310044][ T80] bridge0: port 1(bridge_slave_0) entered blocking state [ 255.317208][ T80] bridge0: port 1(bridge_slave_0) entered forwarding state [ 255.355895][ T80] bridge0: port 2(bridge_slave_1) entered blocking state [ 255.364291][ T80] bridge0: port 2(bridge_slave_1) entered forwarding state [ 255.530530][ T9177] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 255.704639][ T9273] netlink: 28 bytes leftover after parsing attributes in process `syz.2.840'. [ 255.736999][ T9273] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 255.780153][ T9273] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 255.848292][ T9273] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 255.855782][ T9273] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 256.030432][ T12] hsr_slave_0: left promiscuous mode [ 256.045848][ T12] hsr_slave_1: left promiscuous mode [ 256.118132][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 256.136164][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 256.161991][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.168494][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.203655][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 256.258214][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 256.322863][ T12] veth1_macvtap: left promiscuous mode [ 256.336510][ T9291] netlink: 'syz.2.843': attribute type 1 has an invalid length. [ 256.344535][ T9291] netlink: 53 bytes leftover after parsing attributes in process `syz.2.843'. [ 256.368032][ T12] veth0_macvtap: left promiscuous mode [ 256.373872][ T12] veth1_vlan: left promiscuous mode [ 256.403037][ T12] veth0_vlan: left promiscuous mode [ 257.215007][ T9307] FAULT_INJECTION: forcing a failure. [ 257.215007][ T9307] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 257.237482][ T9307] CPU: 1 UID: 0 PID: 9307 Comm: syz.0.846 Not tainted 6.13.0-rc4-syzkaller-00110-g4099a71718b0 #0 [ 257.248149][ T9307] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 257.258246][ T9307] Call Trace: [ 257.261536][ T9307] [ 257.264474][ T9307] dump_stack_lvl+0x16c/0x1f0 [ 257.269174][ T9307] should_fail_ex+0x497/0x5b0 [ 257.273872][ T9307] _copy_to_user+0x32/0xd0 [ 257.278314][ T9307] simple_read_from_buffer+0xd0/0x160 [ 257.283703][ T9307] proc_fail_nth_read+0x198/0x270 [ 257.288757][ T9307] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 257.294333][ T9307] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 257.299910][ T9307] vfs_read+0x1df/0xbe0 [ 257.304085][ T9307] ? __fget_files+0x1fc/0x3a0 [ 257.308786][ T9307] ? __pfx___mutex_lock+0x10/0x10 [ 257.313887][ T9307] ? __pfx_vfs_read+0x10/0x10 [ 257.318591][ T9307] ? __fget_files+0x206/0x3a0 [ 257.323295][ T9307] ksys_read+0x12b/0x250 [ 257.327553][ T9307] ? __pfx_ksys_read+0x10/0x10 [ 257.332475][ T9307] do_syscall_64+0xcd/0x250 [ 257.337018][ T9307] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 257.342942][ T9307] RIP: 0033:0x7f9837b8473c [ 257.347370][ T9307] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 257.366996][ T9307] RSP: 002b:00007f98389b8030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 257.375428][ T9307] RAX: ffffffffffffffda RBX: 00007f9837d75fa0 RCX: 00007f9837b8473c [ 257.383430][ T9307] RDX: 000000000000000f RSI: 00007f98389b80a0 RDI: 0000000000000006 [ 257.391415][ T9307] RBP: 00007f98389b8090 R08: 0000000000000000 R09: 0000000000000000 [ 257.399394][ T9307] R10: 00000000fffffffd R11: 0000000000000246 R12: 0000000000000001 [ 257.407397][ T9307] R13: 0000000000000000 R14: 00007f9837d75fa0 R15: 00007ffc0542d6a8 [ 257.415950][ T9307] [ 257.438521][ T5831] Bluetooth: hci4: command tx timeout [ 257.655281][ T9311] netlink: 28 bytes leftover after parsing attributes in process `syz.0.847'. [ 257.868716][ T12] team0 (unregistering): Port device team_slave_1 removed [ 257.951122][ T12] team0 (unregistering): Port device team_slave_0 removed [ 258.314033][ T9314] openvswitch: netlink: Duplicate key (type 15). [ 258.721478][ T9311] macsec0: entered promiscuous mode [ 258.893828][ T9177] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 259.446980][ T9177] veth0_vlan: entered promiscuous mode [ 259.659892][ T9177] veth1_vlan: entered promiscuous mode [ 259.718933][ T9360] netlink: 'syz.0.855': attribute type 1 has an invalid length. [ 259.743352][ T9360] netlink: 53 bytes leftover after parsing attributes in process `syz.0.855'. [ 259.753988][ T9177] veth0_macvtap: entered promiscuous mode [ 259.801622][ T9177] veth1_macvtap: entered promiscuous mode [ 259.868484][ T9177] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 259.911686][ T9177] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 259.934837][ T9177] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 259.946170][ T9177] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 259.963605][ T9177] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 259.975113][ T9177] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 260.006475][ T9177] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 260.026803][ T9177] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 260.043493][ T9177] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 260.056364][ T9371] netlink: 28 bytes leftover after parsing attributes in process `syz.0.856'. [ 260.065000][ T9177] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 260.458227][ T9371] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 260.495844][ T9371] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 260.528769][ T9371] bond0 (unregistering): Released all slaves [ 260.760615][ T7239] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 260.779422][ T7239] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 260.833090][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 260.859607][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 264.067133][ T9527] Process accounting resumed [ 264.099154][ T9527] kernel write not supported for file netdevsim/netdevsim0/psample/latency_max (pid: 9527 comm: syz.0.877) [ 264.355991][ T9542] netlink: 28 bytes leftover after parsing attributes in process `syz.3.880'. [ 264.378828][ T9542] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 264.417207][ T9542] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 264.452847][ T9542] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 264.468430][ T9542] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 264.624475][ T9540] kernel write not supported for file netdevsim/netdevsim0/psample/latency_max (pid: 9540 comm: syz.0.879) [ 264.907616][ T9555] kernel write not supported for file netdevsim/netdevsim0/psample/latency_max (pid: 9555 comm: syz.0.882) [ 265.011499][ T9563] openvswitch: netlink: Duplicate key (type 15). [ 265.903321][ T9562] kernel write not supported for file netdevsim/netdevsim0/psample/latency_max (pid: 9562 comm: syz.0.885) [ 266.074634][ T9597] kernel write not supported for file netdevsim/netdevsim0/psample/latency_max (pid: 9597 comm: syz.0.893) [ 266.310871][ T9599] kernel write not supported for file netdevsim/netdevsim0/psample/latency_max (pid: 9599 comm: syz.0.894) [ 266.870725][ T9611] kernel write not supported for file netdevsim/netdevsim0/psample/latency_max (pid: 9611 comm: syz.0.896) [ 267.042414][ T9628] netlink: 28 bytes leftover after parsing attributes in process `syz.2.901'. [ 267.051753][ T9628] macsec0: entered promiscuous mode [ 267.190652][ T9632] openvswitch: netlink: Duplicate key (type 15). [ 267.319928][ T9623] kernel write not supported for file netdevsim/netdevsim0/psample/latency_max (pid: 9623 comm: syz.0.900) [ 267.361107][ T9639] netlink: 334 bytes leftover after parsing attributes in process `syz.3.904'. [ 267.569348][ T9640] ima: policy update failed [ 267.574180][ T29] audit: type=1802 audit(4294967331.980:15): pid=9640 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.0.903" res=0 errno=0 [ 267.605421][ T9641] kernel write not supported for file netdevsim/netdevsim0/psample/latency_max (pid: 9641 comm: syz.0.903) [ 267.891860][ T9652] netlink: 28 bytes leftover after parsing attributes in process `syz.4.908'. [ 268.440798][ T9682] netlink: 334 bytes leftover after parsing attributes in process `syz.2.915'. [ 268.541346][ T9646] kernel write not supported for file netdevsim/netdevsim0/psample/latency_max (pid: 9646 comm: syz.0.906) [ 269.122012][ T9697] warn_unsupported: 1 callbacks suppressed [ 269.122034][ T9697] kernel write not supported for file netdevsim/netdevsim0/psample/latency_max (pid: 9697 comm: syz.0.921) [ 269.326209][ T9717] kernel write not supported for file netdevsim/netdevsim0/psample/latency_max (pid: 9717 comm: syz.0.924) [ 269.438402][ T9728] netlink: 334 bytes leftover after parsing attributes in process `syz.0.927'. [ 269.545265][ T9728] kernel write not supported for file netdevsim/netdevsim0/psample/latency_max (pid: 9728 comm: syz.0.927) [ 269.789957][ T9741] netlink: 40 bytes leftover after parsing attributes in process `syz.3.932'. [ 269.904799][ T9736] kernel write not supported for file netdevsim/netdevsim0/psample/latency_max (pid: 9736 comm: syz.0.931) [ 270.208692][ T9750] kernel write not supported for file netdevsim/netdevsim0/psample/latency_max (pid: 9750 comm: syz.0.933) [ 270.667587][ T9757] kernel write not supported for file netdevsim/netdevsim0/psample/latency_max (pid: 9757 comm: syz.0.935) [ 270.924525][ T9767] netlink: 4 bytes leftover after parsing attributes in process `syz.3.937'. [ 271.064729][ T9770] netlink: 4 bytes leftover after parsing attributes in process `syz.3.937'. [ 271.179227][ T9765] erspan0: entered allmulticast mode [ 272.001976][ T9765] kernel write not supported for file netdevsim/netdevsim0/psample/latency_max (pid: 9765 comm: syz.0.936) [ 272.193111][ T9807] openvswitch: netlink: Duplicate key (type 15). [ 272.302340][ T9812] Invalid ELF header magic: != ELF [ 272.417483][ T9818] svc: failed to register nfsdv3 RPC service (errno 111). [ 272.439865][ T9818] svc: failed to register nfsaclv3 RPC service (errno 111). [ 272.481223][ T9821] netlink: 334 bytes leftover after parsing attributes in process `syz.3.946'. [ 273.083682][ T9816] kernel write not supported for file netdevsim/netdevsim0/psample/latency_max (pid: 9816 comm: syz.0.944) [ 273.958023][ T9868] netlink: 334 bytes leftover after parsing attributes in process `syz.2.956'. [ 274.177842][ T9850] kernel write not supported for file netdevsim/netdevsim0/psample/latency_max (pid: 9850 comm: syz.0.953) [ 274.418004][ T9874] kernel write not supported for file netdevsim/netdevsim0/psample/latency_max (pid: 9874 comm: syz.0.958) [ 274.699929][ T9881] kernel write not supported for file netdevsim/netdevsim0/psample/latency_max (pid: 9881 comm: syz.0.959) [ 274.864699][ T9889] openvswitch: netlink: Duplicate key (type 15). [ 274.995378][ T9893] netlink: 8 bytes leftover after parsing attributes in process `syz.2.961'. [ 275.780494][ T9898] kernel write not supported for file netdevsim/netdevsim0/psample/latency_max (pid: 9898 comm: syz.0.962) [ 276.647752][ T9937] erspan0: entered allmulticast mode [ 276.922171][ T9920] kernel write not supported for file netdevsim/netdevsim0/psample/latency_max (pid: 9920 comm: syz.0.964) [ 277.073433][ T9956] netlink: 334 bytes leftover after parsing attributes in process `syz.0.967'. [ 277.232825][ T9956] kernel write not supported for file netdevsim/netdevsim0/psample/latency_max (pid: 9956 comm: syz.0.967) [ 277.491051][ T9971] kernel write not supported for file netdevsim/netdevsim0/psample/latency_max (pid: 9971 comm: syz.0.968) [ 278.054256][ T9975] kernel write not supported for file netdevsim/netdevsim0/psample/latency_max (pid: 9975 comm: syz.0.969) [ 278.784169][ T9993] kernel write not supported for file netdevsim/netdevsim0/psample/latency_max (pid: 9993 comm: syz.0.970) [ 279.907986][T10042] netlink: 334 bytes leftover after parsing attributes in process `syz.2.976'. [ 281.267088][T10076] netlink: 28 bytes leftover after parsing attributes in process `syz.4.982'. [ 282.588871][T10085] netlink: 'syz.4.984': attribute type 1 has an invalid length. [ 282.607869][T10085] netlink: 53 bytes leftover after parsing attributes in process `syz.4.984'. [ 283.235895][T10013] kernel write not supported for file netdevsim/netdevsim0/psample/latency_max (pid: 10013 comm: syz.0.974) [ 283.510859][T10091] openvswitch: netlink: Duplicate key (type 15). [ 284.051072][T10094] netlink: 334 bytes leftover after parsing attributes in process `syz.0.988'. [ 284.273104][T10094] kernel write not supported for file netdevsim/netdevsim0/psample/latency_max (pid: 10094 comm: syz.0.988) [ 284.619392][ T9981] kernel write not supported for file netdevsim/netdevsim0/psample/latency_max (pid: 9981 comm: syz.0.969) [ 285.116940][T10104] : Can't lookup blockdev [ 285.219800][T10000] kernel write not supported for file netdevsim/netdevsim0/psample/latency_max (pid: 10000 comm: syz.0.970) [ 285.652142][T10098] kernel write not supported for file netdevsim/netdevsim0/psample/latency_max (pid: 10098 comm: syz.0.990) [ 285.798692][T10137] netlink: 334 bytes leftover after parsing attributes in process `syz.4.999'. [ 286.057563][T10144] netlink: 'syz.0.1000': attribute type 1 has an invalid length. [ 286.096052][T10144] netlink: 53 bytes leftover after parsing attributes in process `syz.0.1000'. [ 286.407749][T10144] kernel write not supported for file netdevsim/netdevsim0/psample/latency_max (pid: 10144 comm: syz.0.1000) [ 287.708063][T10170] kernel write not supported for file netdevsim/netdevsim0/psample/latency_max (pid: 10170 comm: syz.0.1006) [ 287.790509][T10184] netlink: 334 bytes leftover after parsing attributes in process `syz.0.1011'. [ 287.852243][T10182] kernel write not supported for file netdevsim/netdevsim0/psample/latency_max (pid: 10182 comm: syz.0.1011) [ 288.011936][T10188] device-mapper: ioctl: Invalid ioctl structure: uuid , name , dev 400008000010006 [ 289.544348][T10187] kernel write not supported for file netdevsim/netdevsim0/psample/latency_max (pid: 10187 comm: syz.0.1013) [ 289.869793][T10239] FAULT_INJECTION: forcing a failure. [ 289.869793][T10239] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 289.891705][T10239] CPU: 1 UID: 0 PID: 10239 Comm: syz.0.1022 Not tainted 6.13.0-rc4-syzkaller-00110-g4099a71718b0 #0 [ 289.902552][T10239] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 289.912735][T10239] Call Trace: [ 289.916052][T10239] [ 289.919122][T10239] dump_stack_lvl+0x16c/0x1f0 [ 289.923846][T10239] should_fail_ex+0x497/0x5b0 [ 289.928577][T10239] _copy_from_user+0x2e/0xd0 [ 289.933222][T10239] __x64_sys_signalfd+0xfd/0x1a0 [ 289.938200][T10239] ? __pfx___x64_sys_signalfd+0x10/0x10 [ 289.943801][T10239] do_syscall_64+0xcd/0x250 [ 289.948439][T10239] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 289.954376][T10239] RIP: 0033:0x7f9837b85d29 [ 289.958908][T10239] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 289.967873][T10240] kAFS: Invalid Command on /proc/fs/afs/cells file [ 289.978623][T10239] RSP: 002b:00007f9838997038 EFLAGS: 00000246 ORIG_RAX: 000000000000011a [ 289.978655][T10239] RAX: ffffffffffffffda RBX: 00007f9837d76080 RCX: 00007f9837b85d29 [ 289.978670][T10239] RDX: 0000000000000008 RSI: 0000000000000000 RDI: 0000000000000003 [ 289.978685][T10239] RBP: 00007f9838997090 R08: 0000000000000000 R09: 0000000000000000 [ 289.978706][T10239] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 289.978725][T10239] R13: 0000000000000001 R14: 00007f9837d76080 R15: 00007ffc0542d6a8 [ 289.978753][T10239] [ 290.656670][T10230] kernel write not supported for file netdevsim/netdevsim0/psample/latency_max (pid: 10230 comm: syz.0.1022) [ 290.757518][T10255] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1029'. [ 290.787505][T10255] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 290.829543][T10255] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 290.846929][T10255] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 290.865768][T10255] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 291.052851][T10255] kernel write not supported for file netdevsim/netdevsim0/psample/latency_max (pid: 10255 comm: syz.0.1029) [ 291.223992][T10276] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1033'. [ 291.452751][T10278] kernel write not supported for file netdevsim/netdevsim0/psample/latency_max (pid: 10278 comm: syz.0.1032) [ 291.538075][T10284] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1034'. [ 291.696009][T10273] kernel write not supported for file netdevsim/netdevsim0/psample/latency_max (pid: 10273 comm: syz.0.1032) [ 291.938655][T10302] netlink: 334 bytes leftover after parsing attributes in process `syz.3.1039'. [ 292.072273][T10298] kernel write not supported for file netdevsim/netdevsim0/psample/latency_max (pid: 10298 comm: syz.0.1038) [ 292.317922][T10318] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1044'. [ 292.675968][T10341] openvswitch: netlink: Duplicate key (type 15). [ 293.141667][T10351] netlink: 334 bytes leftover after parsing attributes in process `syz.3.1052'. [ 293.225619][T10329] kernel write not supported for file netdevsim/netdevsim0/psample/latency_max (pid: 10329 comm: syz.0.1045) [ 293.778185][T10362] kernel write not supported for file netdevsim/netdevsim0/psample/latency_max (pid: 10362 comm: syz.0.1054) [ 294.822174][T10397] netlink: 334 bytes leftover after parsing attributes in process `syz.2.1062'. [ 294.846309][T10376] Process accounting paused [ 295.098580][T10401] netlink: 'syz.2.1064': attribute type 1 has an invalid length. [ 295.106535][T10401] netlink: 53 bytes leftover after parsing attributes in process `syz.2.1064'. [ 295.123109][T10402] openvswitch: netlink: Duplicate key (type 15). [ 295.138895][T10401] netlink: 'syz.2.1064': attribute type 1 has an invalid length. [ 295.167472][T10401] netlink: 53 bytes leftover after parsing attributes in process `syz.2.1064'. [ 296.172416][T10416] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1066'. [ 297.848536][T10456] openvswitch: netlink: Duplicate key (type 15). [ 300.470768][T10506] openvswitch: netlink: Duplicate key (type 15). [ 301.668830][T10523] ima: policy update failed [ 301.677744][ T29] audit: type=1802 audit(4294967329.440:16): pid=10523 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.0.1092" res=0 errno=0 [ 302.934403][T10564] openvswitch: netlink: Duplicate key (type 15). [ 303.292944][T10557] netlink: Conntrack attr has 16 unknown bytes [ 304.548595][T10605] netlink: 'syz.4.1123': attribute type 22 has an invalid length. [ 305.512049][T10625] openvswitch: netlink: Duplicate key (type 15). [ 307.955746][T10681] netlink: 'syz.4.1134': attribute type 1 has an invalid length. [ 307.973951][T10681] netlink: 53 bytes leftover after parsing attributes in process `syz.4.1134'. [ 308.000927][T10680] openvswitch: netlink: Duplicate key (type 15). [ 309.627580][T10729] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied. [ 315.265905][T10818] openvswitch: netlink: Duplicate key (type 15). [ 316.410249][T10849] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1169'. [ 317.208632][T10875] openvswitch: netlink: Duplicate key (type 15). [ 317.215242][T10872] netlink: 'syz.2.1177': attribute type 2 has an invalid length. [ 317.603458][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.611358][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.756923][T10883] openvswitch: netlink: Duplicate key (type 15). [ 318.165719][T10890] netlink: 'syz.0.1182': attribute type 1 has an invalid length. [ 318.186270][T10890] netlink: 53 bytes leftover after parsing attributes in process `syz.0.1182'. [ 319.038037][T10901] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1188'. [ 319.789247][T10913] openvswitch: netlink: Duplicate key (type 15). [ 321.486193][T10946] netlink: 338 bytes leftover after parsing attributes in process `syz.0.1193'. [ 321.718637][T10958] netlink: 338 bytes leftover after parsing attributes in process `syz.0.1193'. [ 322.300022][T10970] netlink: 334 bytes leftover after parsing attributes in process `syz.2.1203'. [ 322.807546][T10990] nfs: Bad value for 'source' [ 323.127603][T10995] netlink: 342 bytes leftover after parsing attributes in process `syz.2.1212'. [ 323.274295][T11002] netlink: 334 bytes leftover after parsing attributes in process `syz.2.1213'. [ 324.937860][T11033] Process accounting resumed [ 324.942648][T11033] kernel write not supported for file netdevsim/netdevsim0/psample/latency_max (pid: 11033 comm: syz.0.1222) [ 325.482707][T11075] openvswitch: netlink: Duplicate key (type 15). [ 325.545208][T11060] kernel write not supported for file netdevsim/netdevsim0/psample/latency_max (pid: 11060 comm: syz.0.1226) [ 325.656488][T11079] netlink: 'syz.3.1231': attribute type 1 has an invalid length. [ 325.664460][T11079] netlink: 53 bytes leftover after parsing attributes in process `syz.3.1231'. [ 325.676648][T11079] netlink: 'syz.3.1231': attribute type 1 has an invalid length. [ 325.685102][T11079] netlink: 53 bytes leftover after parsing attributes in process `syz.3.1231'. [ 325.766014][T11085] netlink: 350 bytes leftover after parsing attributes in process `syz.0.1232'. [ 325.877337][T11082] kernel write not supported for file netdevsim/netdevsim0/psample/latency_max (pid: 11082 comm: syz.0.1232) [ 326.065822][T11095] kernel write not supported for file netdevsim/netdevsim0/psample/latency_max (pid: 11095 comm: syz.0.1235) [ 326.724575][T11106] kernel write not supported for file netdevsim/netdevsim0/psample/latency_max (pid: 11106 comm: syz.0.1237) [ 326.949484][T11129] kernel write not supported for file netdevsim/netdevsim0/psample/latency_max (pid: 11129 comm: syz.0.1244) [ 327.092247][T11135] can0: slcan on ptm0. [ 327.219438][T11134] can0 (unregistered): slcan off ptm0. [ 327.337508][T11136] kernel write not supported for file netdevsim/netdevsim0/psample/latency_max (pid: 11136 comm: syz.0.1245) [ 327.578164][T11154] kernel write not supported for file netdevsim/netdevsim0/psample/latency_max (pid: 11154 comm: syz.0.1247) [ 328.380403][T11173] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1257'. [ 328.797164][T11186] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1251'. [ 328.997143][T11172] kernel write not supported for file netdevsim/netdevsim0/psample/latency_max (pid: 11172 comm: syz.0.1257) [ 329.002998][T11192] random: crng reseeded on system resumption [ 329.197917][T11200] openvswitch: netlink: Duplicate key (type 15). [ 329.209394][T11195] [U] [ 329.212507][T11195] [U] [ 329.215231][T11195] [U] [ 329.217953][T11195] [U] [ 329.286316][T11195] [U] [ 329.289092][T11195] [U] [ 329.291802][T11195] [U] [ 329.294506][T11195] [U] [ 329.341359][T11195] [U] [ 329.344136][T11195] [U] [ 329.346863][T11195] [U] [ 329.349586][T11195] [U] [ 329.426936][T11195] [U] [ 329.429712][T11195] [U] [ 329.432440][T11195] [U] [ 329.435167][T11195] [U] [ 329.470425][T11195] [U] [ 329.473196][T11195] [U] [ 329.475912][T11195] [U] [ 329.478627][T11195] [U] [ 329.518060][T11195] [U] [ 329.521256][T11195] [U] [ 329.523979][T11195] [U] [ 329.526700][T11195] [U] [ 329.580563][T11195] [U] [ 329.583349][T11195] [U] [ 329.586078][T11195] [U] [ 329.588791][T11195] [U] [ 329.612224][T11195] [U] [ 329.615010][T11195] [U] [ 329.617732][T11195] [U] [ 329.620465][T11195] [U] [ 329.664140][T11195] [U] [ 329.666919][T11195] [U] [ 329.669658][T11195] [U] [ 329.672395][T11195] [U] [ 329.698638][T11195] [U] [ 329.701409][T11195] [U] [ 329.704176][T11195] [U] [ 329.706959][T11195] [U] [ 329.730395][T11195] [U] [ 329.733172][T11195] [U] [ 329.735905][T11195] [U] [ 329.738653][T11195] [U] [ 329.767860][T11195] [U] [ 329.771066][T11195] [U] [ 329.773798][T11195] [U] [ 329.776528][T11195] [U] [ 329.807912][T11195] [U] [ 329.810680][T11195] [U] [ 329.813399][T11195] [U] [ 329.816118][T11195] [U] [ 329.847858][T11195] [U] [ 329.850644][T11195] [U] [ 329.853358][T11195] [U] [ 329.856076][T11195] [U] [ 329.877911][T11195] [U] [ 329.880200][T11118] kernel write not supported for file netdevsim/netdevsim0/psample/latency_max (pid: 11118 comm: syz.0.1237) [ 329.880655][T11195] [U] [ 329.880703][T11195] [U] [ 329.897629][T11195] [U] [ 329.912718][T11195] [U] [ 329.915488][T11195] [U] [ 329.918209][T11195] [U] [ 329.920928][T11195] [U] [ 329.942543][T11195] [U] [ 330.019939][T11198] kernel write not supported for file netdevsim/netdevsim0/psample/latency_max (pid: 11198 comm: syz.0.1253) [ 330.518233][T11212] kernel write not supported for file netdevsim/netdevsim0/psample/latency_max (pid: 11212 comm: syz.0.1256) [ 330.786710][T11231] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1262'. [ 330.939595][T11225] kernel write not supported for file netdevsim/netdevsim0/psample/latency_max (pid: 11225 comm: syz.0.1269) [ 331.083945][T11239] netlink: 'syz.0.1264': attribute type 1 has an invalid length. [ 331.107861][T11239] netlink: 41 bytes leftover after parsing attributes in process `syz.0.1264'. [ 331.175194][T11239] kernel write not supported for file netdevsim/netdevsim0/psample/latency_max (pid: 11239 comm: syz.0.1264) [ 332.431483][T11265] netlink: 338 bytes leftover after parsing attributes in process `syz.4.1268'. [ 332.677139][T11275] netlink: 338 bytes leftover after parsing attributes in process `syz.4.1268'. [ 333.878080][T11246] kernel write not supported for file netdevsim/netdevsim0/psample/latency_max (pid: 11246 comm: syz.0.1265) [ 334.173317][T11285] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1274'. [ 334.376980][T11288] kernel write not supported for file netdevsim/netdevsim0/psample/latency_max (pid: 11288 comm: syz.0.1272) [ 334.717840][T11302] ICMPv6: process `syz.4.1276' is using deprecated sysctl (syscall) net.ipv6.neigh.virt_wifi0.retrans_time - use net.ipv6.neigh.virt_wifi0.retrans_time_ms instead [ 334.838276][T11309] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1279'. [ 334.861679][T11309] bridge0: port 1(bridge_slave_0) entered disabled state [ 334.952414][T11309] bridge_slave_0 (unregistering): left allmulticast mode [ 334.966250][T11309] bridge_slave_0 (unregistering): left promiscuous mode [ 334.975685][T11309] bridge0: port 1(bridge_slave_0) entered disabled state [ 335.017972][T11315] netlink: 334 bytes leftover after parsing attributes in process `syz.3.1280'. [ 335.801805][T11294] kernel write not supported for file netdevsim/netdevsim0/psample/latency_max (pid: 11294 comm: syz.0.1277) [ 336.124081][T11346] kernel write not supported for file netdevsim/netdevsim0/psample/latency_max (pid: 11346 comm: syz.0.1289) [ 336.625784][T11362] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1293'. [ 337.033134][T11351] kernel write not supported for file netdevsim/netdevsim0/psample/latency_max (pid: 11351 comm: syz.0.1291) [ 339.226787][T11420] openvswitch: netlink: Duplicate key (type 15). [ 339.676562][T11431] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1308'. [ 340.234420][T11440] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1311'. [ 340.487145][T11393] kernel write not supported for file netdevsim/netdevsim0/psample/latency_max (pid: 11393 comm: syz.0.1298) [ 341.464613][T11335] kernel write not supported for file netdevsim/netdevsim0/psample/latency_max (pid: 11335 comm: syz.0.1277) [ 341.833196][T11467] kernel write not supported for file netdevsim/netdevsim0/psample/latency_max (pid: 11467 comm: syz.0.1314) [ 342.029009][T11475] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1320'. [ 342.081002][T11476] openvswitch: netlink: Duplicate key (type 15). [ 343.040257][T11482] kernel write not supported for file netdevsim/netdevsim0/psample/latency_max (pid: 11482 comm: syz.0.1319) [ 343.797335][T11503] kernel write not supported for file netdevsim/netdevsim0/psample/latency_max (pid: 11503 comm: syz.0.1327) [ 344.190181][T11526] kernel write not supported for file netdevsim/netdevsim0/psample/latency_max (pid: 11526 comm: syz.0.1330) [ 344.359752][T11536] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1331'. [ 344.772387][T11534] kernel write not supported for file netdevsim/netdevsim0/psample/latency_max (pid: 11534 comm: syz.0.1331) [ 344.920957][T11553] openvswitch: netlink: Duplicate key (type 15). [ 345.436596][T11566] netlink: 'syz.2.1337': attribute type 1 has an invalid length. [ 345.734289][T11557] kernel write not supported for file netdevsim/netdevsim0/psample/latency_max (pid: 11557 comm: syz.0.1334) [ 345.981843][T11583] netlink: 'syz.4.1344': attribute type 9 has an invalid length. [ 346.006728][ T29] audit: type=1806 audit(32769.100:17): xattr="." res=0 [ 346.100258][T11584] Invalid ELF header magic: != ELF [ 346.607505][T11610] netlink: 330 bytes leftover after parsing attributes in process `syz.3.1351'. [ 346.716069][T11578] kernel write not supported for file netdevsim/netdevsim0/psample/latency_max (pid: 11578 comm: syz.0.1342) [ 346.751165][T11616] openvswitch: netlink: Duplicate key (type 15). [ 346.928974][T11622] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1355'. [ 347.723857][T11620] kernel write not supported for file netdevsim/netdevsim0/psample/latency_max (pid: 11620 comm: syz.0.1354) [ 348.068282][T11653] kernel write not supported for file netdevsim/netdevsim0/psample/latency_max (pid: 11653 comm: syz.0.1361) [ 348.247428][T11666] netlink: 334 bytes leftover after parsing attributes in process `syz.4.1365'. [ 348.999146][T11663] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 349.006631][T11663] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 349.023312][T11663] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 349.033708][T11663] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 349.049093][T11663] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 349.071239][T11663] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 349.130855][T11663] kernel write not supported for file netdevsim/netdevsim0/psample/latency_max (pid: 11663 comm: syz.0.1364) [ 349.662516][T11686] netlink: 330 bytes leftover after parsing attributes in process `syz.0.1369'. [ 350.169019][T11682] kernel write not supported for file netdevsim/netdevsim0/psample/latency_max (pid: 11682 comm: syz.0.1369) [ 350.480018][ T5831] Bluetooth: hci0: command 0x0c1a tx timeout [ 350.554407][T11694] kernel write not supported for file netdevsim/netdevsim0/psample/latency_max (pid: 11694 comm: syz.0.1372) [ 350.785210][T11707] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1373'. [ 350.871780][T11707] kernel write not supported for file netdevsim/netdevsim0/psample/latency_max (pid: 11707 comm: syz.0.1373) [ 351.030010][T11712] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1377'. [ 351.039175][ T5831] Bluetooth: hci4: command 0x0c1a tx timeout [ 351.045255][ T5831] Bluetooth: hci3: command 0x0c1a tx timeout [ 351.049169][T11714] netlink: 334 bytes leftover after parsing attributes in process `syz.3.1375'. [ 351.051494][ T53] Bluetooth: hci1: command 0x0c1a tx timeout [ 351.175672][T11709] kernel write not supported for file netdevsim/netdevsim0/psample/latency_max (pid: 11709 comm: syz.0.1376) [ 351.937945][T11718] kernel write not supported for file netdevsim/netdevsim0/psample/latency_max (pid: 11718 comm: syz.0.1378) [ 352.079462][T11743] openvswitch: netlink: Duplicate key (type 15). [ 352.314336][ T29] audit: type=1326 audit(32775.420:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11746 comm="syz.2.1383" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8046d85d29 code=0x0 [ 352.971234][T11748] kernel write not supported for file netdevsim/netdevsim0/psample/latency_max (pid: 11748 comm: syz.0.1382) [ 353.125467][T11765] netlink: 334 bytes leftover after parsing attributes in process `syz.3.1388'. [ 353.135148][ T5141] Bluetooth: hci4: command 0x0c1a tx timeout [ 353.303323][T11774] netlink: 'syz.3.1391': attribute type 9 has an invalid length. [ 353.431784][T11762] kernel write not supported for file netdevsim/netdevsim0/psample/latency_max (pid: 11762 comm: syz.0.1387) [ 353.594827][T11780] netlink: 'syz.3.1392': attribute type 5 has an invalid length. [ 353.988181][T11798] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1397'. [ 354.017360][T11798] nbd: must specify an index to disconnect [ 354.051199][T11800] openvswitch: netlink: Duplicate key (type 15). [ 354.103077][T11779] kernel write not supported for file netdevsim/netdevsim0/psample/latency_max (pid: 11779 comm: syz.0.1393) [ 354.275289][T11808] netlink: 334 bytes leftover after parsing attributes in process `syz.3.1399'. [ 354.941973][T11809] Process accounting paused [ 355.200039][ T5141] Bluetooth: hci4: command 0x0c1a tx timeout [ 355.260661][T11835] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1408'. [ 355.390140][T11835] bond0: (slave bond_slave_0): Releasing backup interface [ 355.959613][T11860] openvswitch: netlink: Duplicate key (type 15). [ 357.255957][T11895] ecryptfs_miscdev_write: Dropping miscdev message of unrecognized type [0] [ 358.308093][T11928] netlink: 'syz.4.1429': attribute type 1 has an invalid length. [ 358.368063][T11929] netlink: 'syz.4.1429': attribute type 1 has an invalid length. [ 359.270300][T11943] netlink: 342 bytes leftover after parsing attributes in process `syz.3.1432'. [ 360.098923][T11986] netlink: 342 bytes leftover after parsing attributes in process `syz.3.1444'. [ 360.180034][T11991] openvswitch: netlink: Duplicate key (type 15). [ 360.526154][T12004] netlink: 342 bytes leftover after parsing attributes in process `syz.4.1449'. [ 361.689216][T12027] netlink: 334 bytes leftover after parsing attributes in process `syz.2.1456'. [ 362.695891][T12054] openvswitch: netlink: Duplicate key (type 15). [ 364.127895][T12103] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1476'. [ 365.237441][ T29] audit: type=1800 audit(32778.250:19): pid=12127 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1482" name="dbroot" dev="configfs" ino=34078 res=0 errno=0 [ 365.468201][T12131] Invalid ELF header magic: != ELF [ 366.030935][T12137] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1485'. [ 366.192894][T12137] geneve1: entered allmulticast mode [ 367.539669][T12170] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 367.572643][T12170] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 367.605679][T12170] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 367.636495][T12170] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 367.783868][ T5904] [ 367.786290][ T5904] ====================================================== [ 367.793384][ T5904] WARNING: possible circular locking dependency detected [ 367.800418][ T5904] 6.13.0-rc4-syzkaller-00110-g4099a71718b0 #0 Not tainted [ 367.807547][ T5904] ------------------------------------------------------ [ 367.814583][ T5904] kworker/0:6/5904 is trying to acquire lock: [ 367.820671][ T5904] ffffffff8fabfcc8 (rtnl_mutex){+.+.}-{4:4}, at: smc_vlan_by_tcpsk+0x251/0x620 [ 367.829704][ T5904] [ 367.829704][ T5904] but task is already holding lock: [ 367.837094][ T5904] ffff888034379958 (sk_lock-AF_INET){+.+.}-{0:0}, at: smc_connect_work+0x53c/0xae0 [ 367.846458][ T5904] [ 367.846458][ T5904] which lock already depends on the new lock. [ 367.846458][ T5904] [ 367.856881][ T5904] [ 367.856881][ T5904] the existing dependency chain (in reverse order) is: [ 367.865920][ T5904] [ 367.865920][ T5904] -> #1 (sk_lock-AF_INET){+.+.}-{0:0}: [ 367.873620][ T5904] lock_sock_nested+0x3a/0xf0 [ 367.878858][ T5904] sockopt_lock_sock+0x54/0x70 [ 367.884190][ T5904] do_ip_getsockopt+0x115c/0x2bf0 [ 367.889765][ T5904] ip_getsockopt+0x9c/0x1e0 [ 367.894813][ T5904] raw_getsockopt+0x4d/0x1e0 [ 367.899944][ T5904] do_sock_getsockopt+0x3fe/0x870 [ 367.905520][ T5904] __sys_getsockopt+0x12f/0x260 [ 367.910931][ T5904] __x64_sys_getsockopt+0xbd/0x160 [ 367.916611][ T5904] do_syscall_64+0xcd/0x250 [ 367.921707][ T5904] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 367.928168][ T5904] [ 367.928168][ T5904] -> #0 (rtnl_mutex){+.+.}-{4:4}: [ 367.935434][ T5904] __lock_acquire+0x249e/0x3c40 [ 367.940927][ T5904] lock_acquire.part.0+0x11b/0x380 [ 367.946600][ T5904] __mutex_lock+0x19b/0xa60 [ 367.951677][ T5904] smc_vlan_by_tcpsk+0x251/0x620 [ 367.957254][ T5904] __smc_connect+0x466/0x4890 [ 367.962501][ T5904] smc_connect_work+0x54f/0xae0 [ 367.967902][ T5904] process_one_work+0x958/0x1b30 [ 367.973384][ T5904] worker_thread+0x6c8/0xf00 [ 367.978519][ T5904] kthread+0x2c1/0x3a0 [ 367.983135][ T5904] ret_from_fork+0x45/0x80 [ 367.988102][ T5904] ret_from_fork_asm+0x1a/0x30 [ 367.993427][ T5904] [ 367.993427][ T5904] other info that might help us debug this: [ 367.993427][ T5904] [ 368.003758][ T5904] Possible unsafe locking scenario: [ 368.003758][ T5904] [ 368.011225][ T5904] CPU0 CPU1 [ 368.016618][ T5904] ---- ---- [ 368.022001][ T5904] lock(sk_lock-AF_INET); [ 368.026442][ T5904] lock(rtnl_mutex); [ 368.032978][ T5904] lock(sk_lock-AF_INET); [ 368.039941][ T5904] lock(rtnl_mutex); [ 368.043947][ T5904] [ 368.043947][ T5904] *** DEADLOCK *** [ 368.043947][ T5904] [ 368.052113][ T5904] 3 locks held by kworker/0:6/5904: [ 368.057344][ T5904] #0: ffff88814d9e4948 ((wq_completion)smc_hs_wq){+.+.}-{0:0}, at: process_one_work+0x12cd/0x1b30 [ 368.068117][ T5904] #1: ffffc9000427fd80 ((work_completion)(&smc->connect_work)){+.+.}-{0:0}, at: process_one_work+0x8bb/0x1b30 [ 368.079909][ T5904] #2: ffff888034379958 (sk_lock-AF_INET){+.+.}-{0:0}, at: smc_connect_work+0x53c/0xae0 [ 368.089703][ T5904] [ 368.089703][ T5904] stack backtrace: [ 368.095622][ T5904] CPU: 0 UID: 0 PID: 5904 Comm: kworker/0:6 Not tainted 6.13.0-rc4-syzkaller-00110-g4099a71718b0 #0 [ 368.106514][ T5904] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 368.116602][ T5904] Workqueue: smc_hs_wq smc_connect_work [ 368.122183][ T5904] Call Trace: [ 368.125488][ T5904] [ 368.128511][ T5904] dump_stack_lvl+0x116/0x1f0 [ 368.133314][ T5904] print_circular_bug+0x41c/0x610 [ 368.138474][ T5904] check_noncircular+0x31a/0x400 [ 368.143461][ T5904] ? __pfx_check_noncircular+0x10/0x10 [ 368.148965][ T5904] ? __lock_acquire+0x2077/0x3c40 [ 368.154031][ T5904] ? lockdep_lock+0xc6/0x200 [ 368.158664][ T5904] ? __pfx_lockdep_lock+0x10/0x10 [ 368.163742][ T5904] __lock_acquire+0x249e/0x3c40 [ 368.168644][ T5904] ? __pfx___lock_acquire+0x10/0x10 [ 368.173874][ T5904] ? __pfx_lock_release+0x10/0x10 [ 368.178937][ T5904] lock_acquire.part.0+0x11b/0x380 [ 368.184087][ T5904] ? smc_vlan_by_tcpsk+0x251/0x620 [ 368.189236][ T5904] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 368.194900][ T5904] ? rcu_is_watching+0x12/0xc0 [ 368.199704][ T5904] ? trace_lock_acquire+0x14e/0x1f0 [ 368.204950][ T5904] ? smc_vlan_by_tcpsk+0x251/0x620 [ 368.210110][ T5904] ? lock_acquire+0x2f/0xb0 [ 368.214643][ T5904] ? smc_vlan_by_tcpsk+0x251/0x620 [ 368.219879][ T5904] __mutex_lock+0x19b/0xa60 [ 368.224417][ T5904] ? smc_vlan_by_tcpsk+0x251/0x620 [ 368.229574][ T5904] ? smc_vlan_by_tcpsk+0x251/0x620 [ 368.234736][ T5904] ? __pfx___mutex_lock+0x10/0x10 [ 368.239802][ T5904] ? smc_vlan_by_tcpsk+0x32e/0x620 [ 368.244961][ T5904] ? smc_vlan_by_tcpsk+0x251/0x620 [ 368.250114][ T5904] smc_vlan_by_tcpsk+0x251/0x620 [ 368.255081][ T5904] ? __pfx_smc_vlan_by_tcpsk+0x10/0x10 [ 368.260575][ T5904] __smc_connect+0x466/0x4890 [ 368.265308][ T5904] ? __pfx___smc_connect+0x10/0x10 [ 368.270453][ T5904] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 368.275859][ T5904] ? mark_held_locks+0x9f/0xe0 [ 368.280665][ T5904] ? __local_bh_enable_ip+0xa4/0x120 [ 368.285989][ T5904] smc_connect_work+0x54f/0xae0 [ 368.290877][ T5904] ? __pfx_smc_connect_work+0x10/0x10 [ 368.296297][ T5904] ? lock_acquire+0x2f/0xb0 [ 368.300834][ T5904] ? process_one_work+0x8bb/0x1b30 [ 368.305979][ T5904] process_one_work+0x958/0x1b30 [ 368.310958][ T5904] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 368.316623][ T5904] ? __pfx_process_one_work+0x10/0x10 [ 368.322033][ T5904] ? rcu_is_watching+0x12/0xc0 [ 368.326839][ T5904] ? assign_work+0x1a0/0x250 [ 368.331475][ T5904] worker_thread+0x6c8/0xf00 [ 368.336142][ T5904] ? __kthread_parkme+0x148/0x220 [ 368.341210][ T5904] ? __pfx_worker_thread+0x10/0x10 [ 368.346351][ T5904] kthread+0x2c1/0x3a0 [ 368.350472][ T5904] ? _raw_spin_unlock_irq+0x23/0x50 [ 368.355715][ T5904] ? __pfx_kthread+0x10/0x10 [ 368.360337][ T5904] ret_from_fork+0x45/0x80 [ 368.364793][ T5904] ? __pfx_kthread+0x10/0x10 [ 368.369424][ T5904] ret_from_fork_asm+0x1a/0x30 [ 368.374242][ T5904] [ 368.377347][ C0] vkms_vblank_simulate: vblank timer overrun [ 369.287795][ T5141] Bluetooth: hci0: command 0x0c1a tx timeout [ 369.597814][ T5141] Bluetooth: hci1: command 0x0c1a tx timeout [ 369.677794][ T5141] Bluetooth: hci4: command 0x0c1a tx timeout [ 369.677820][ T5831] Bluetooth: hci3: command 0x0c1a tx timeout