last executing test programs: 2m43.673298976s ago: executing program 1 (id=657): mkdir$auto(&(0x7f0000000080)='}[,&*}/file0\x00', 0xfff7) mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0xf, 0x0) rename$auto(&(0x7f0000000040)='}[,&*}/file0\x00', &(0x7f0000000100)='}[,&*}/file0\x00') 2m43.648278192s ago: executing program 1 (id=658): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async) getrandom$auto(0x0, 0x6000000, 0x3) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f000000fc00), 0x3, 0x0) ioctl$auto_KVM_CREATE_VM(r0, 0xc008aec1, 0x88) (async) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x7ff, 0x8000) (async) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) (async) fstatfs$auto(0x0, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid_for_children\x00') (async) socket(0xa, 0x3, 0x3a) (async) setsockopt$auto(0x400000000000003, 0x29, 0xd0, 0x0, 0x4) 2m41.04069395s ago: executing program 1 (id=663): mmap$auto(0x0, 0x400008, 0xdc, 0x9b72, 0x1000002, 0x8000) r0 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000080), 0x80080, 0x0) ioctl$auto_PPPIOCSMRU(r0, 0xc004743e, 0x0) mprotect$auto(0x1ffff000, 0x8000000000000001, 0xd) set_mempolicy$auto(0x2, &(0x7f0000000080)=0x7e, 0x4) mmap$auto(0xfffffffffffffffc, 0x20009, 0xb17a, 0xeb1, 0x3fd, 0x8000) move_pages$auto(0x0, 0xf54, 0x0, 0x0, 0x0, 0x8000000000000000) r1 = socket(0x11, 0x3, 0x300) setsockopt$auto(r1, 0x107, 0x1, 0x0, 0x8004) setpriority$auto(0x2, 0x7, 0xfffffff9) syz_genetlink_get_family_id$auto_netdev(0x0, 0xffffffffffffffff) close_range$auto(0x2, 0x8, 0x0) ioctl$auto_PPPIOCSACTIVE(r0, 0x40107446, 0x0) mmap$auto(0x0, 0x400008, 0xdc, 0x9b72, 0x1000002, 0x8000) (async) openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000080), 0x80080, 0x0) (async) ioctl$auto_PPPIOCSMRU(r0, 0xc004743e, 0x0) (async) mprotect$auto(0x1ffff000, 0x8000000000000001, 0xd) (async) set_mempolicy$auto(0x2, &(0x7f0000000080)=0x7e, 0x4) (async) mmap$auto(0xfffffffffffffffc, 0x20009, 0xb17a, 0xeb1, 0x3fd, 0x8000) (async) move_pages$auto(0x0, 0xf54, 0x0, 0x0, 0x0, 0x8000000000000000) (async) socket(0x11, 0x3, 0x300) (async) setsockopt$auto(r1, 0x107, 0x1, 0x0, 0x8004) (async) setpriority$auto(0x2, 0x7, 0xfffffff9) (async) syz_genetlink_get_family_id$auto_netdev(0x0, 0xffffffffffffffff) (async) close_range$auto(0x2, 0x8, 0x0) (async) ioctl$auto_PPPIOCSACTIVE(r0, 0x40107446, 0x0) (async) 2m39.252792097s ago: executing program 1 (id=667): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, r1, 0x1, 0x70bd25, 0x25dfdbfd, {}, [@NL80211_ATTR_MAX_HW_TIMESTAMP_PEERS={0x6, 0x143, 0xd}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x5}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x4090) (async) r2 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f0000000140), r0) (async) r3 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f00000001c0), r0) sendmsg$auto_HWSIM_CMD_DEL_RADIO(r0, &(0x7f0000001380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001340)={&(0x7f0000000200)={0x1120, r3, 0x8, 0x70bd28, 0x25dfdbff, {}, [@HWSIM_ATTR_CIPHER_SUPPORT={0xae, 0x18, "88776593ff4ca8e8a4237e27f1e4ea1b183ba23fc6aab4b52717f7a9fa30c7f76c7a75583e6bee0f09f6c0e102a621dd02123baa73139f207b108d16cf9faeb0b7b0749c4878c467d824c702833d5548bca8bdf23573f73a00d973b4738123556c1b05e3f83ec0f9abeca913d93dd896f54f3c85658dd4574a78114dad5b46a731e4c6d88783b802505282bfc6cbe0bfa88f35f9080112739a7f78358764a3762dd56ce25353a18cdc83"}, @HWSIM_ATTR_TX_INFO_FLAGS={0x34, 0x15, "80a48e1ee1ebda003e62ab978fbe4ba17e7d530c63b7ccf0219757c7753c06870bb857ee51b79da1b4f475dbb9bd5c67"}, @HWSIM_ATTR_MLO_SUPPORT={0x4}, @HWSIM_ATTR_FREQ={0x8}, @HWSIM_ATTR_RADIO_ID={0x8, 0xa, 0x1ff}, @HWSIM_ATTR_RADIO_ID={0x8, 0xa, 0x2e0}, @HWSIM_ATTR_FLAGS={0x8, 0x4, 0x72}, @HWSIM_ATTR_ADDR_RECEIVER={0x1004, 0x1, "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"}]}, 0x1120}, 0x1, 0x0, 0x0, 0x4040}, 0x60000010) sendmsg$auto_CTRL_CMD_GETPOLICY(r0, &(0x7f0000001480)={&(0x7f00000013c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001440)={&(0x7f0000001400)={0x34, r2, 0x4, 0x70bd2d, 0x25dfdbfc, {}, [@CTRL_ATTR_OP={0x8, 0xa, 0x7}, @CTRL_ATTR_FAMILY_ID={0x6, 0x1, 0x4}, @CTRL_ATTR_OP={0x8, 0xa, 0x5}, @CTRL_ATTR_OP={0x8, 0xa, 0x3}]}, 0x34}, 0x1, 0x0, 0x0, 0x40800}, 0x10) (async) sendmsg$auto_NL80211_CMD_STOP_AP(r0, &(0x7f0000002080)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000002040)={&(0x7f0000001500)={0xb30, r1, 0x100, 0x70bd25, 0x25dfdbfd, {}, [@NL80211_ATTR_IE_ASSOC_RESP={0x81a, 0x80, "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"}, @NL80211_ATTR_WIPHY_ANTENNA_TX={0x8, 0x69, 0x5}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xb7, 0xe8, "dfd269d28e543e5ab8f9e6a6f86d68e1fe3c226b1e5881f5b9360bf93c1628fdb3cc9d0b7fd976394952698d10c25c94a981db46038077714270b21a144c69cc4d57e8873d93ee8e0c25608af84387e0139961b699b5fb6e72080a37fee9817ab72e2a0b3a82b53e20eb15cc41fe4ce8b6a4216120ebc28376238c2539faeba7e071f94662ea94ae8450cffba28b124bbbbd52f8c23e9603c60cc6c65cecbc7fca111f6dcae00eb638a2a649dce7da90392da3"}, @NL80211_ATTR_RADAR_BACKGROUND={0x4}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, "eb875a0ad541e15309ed629fc0c39450fc9a784356e585117f7b"}, @NL80211_ATTR_IE_PROBE_RESP={0x219, 0x7f, "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"}]}, 0xb30}, 0x1, 0x0, 0x0, 0x24004080}, 0x24008080) (async, rerun: 64) r4 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f00000020c0), 0x40, 0x0) (rerun: 64) ioctl$auto_PPPIOCSPASS(r4, 0x40107447, &(0x7f0000002140)={0xe79b, &(0x7f0000002100)={0x2, 0x5, 0x32, @raw=0x4}}) (async) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000002180), r0) (async, rerun: 64) close_range$auto(r4, r0, 0x3) (async, rerun: 64) openat$auto_tracing_entries_fops_trace(0xffffffffffffff9c, &(0x7f00000021c0)='/sys/kernel/tracing/per_cpu/cpu0/buffer_size_kb\x00', 0x735e80, 0x0) (async, rerun: 64) r5 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) sendmsg$auto_NL80211_CMD_SET_QOS_MAP(r5, &(0x7f0000002680)={&(0x7f0000002200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000002640)={&(0x7f0000002240)={0x400, r1, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@NL80211_ATTR_REG_RULES={0x3a2, 0x22, 0x0, 0x1, [@nested={0x12, 0x4b, 0x0, 0x1, [@nested={0x4, 0x111}, @generic="f7ef", @nested={0x4, 0xf1}, @nested={0x4, 0x38}]}, @nested={0x79, 0x20, 0x0, 0x1, [@generic="222da2c33a844a15b31f1ba07866f49c5a1e59d20334d9e75140bbecc5b2b430f05b33198460a19e8c07c70fb3925cc610f659a52f9508a573acbea4045b5da7665e6a671d856755a45af6042cf89a0ec34802b0bee114f23e08894fda5c412da43e10cd12552a7f6ff505da018b6e0d9ccd4f75b4"]}, @generic="930a0f8365c8091e7ceef282b9c07e389ba431fe7d442f853d1e70f6af63c791faeb75e92645a00b7e29cd1bc36ca1ee9ad912bdb204f7bea37f315c95f3c2799263e3a9fb04ecf5169d980655b5dba520de5b24c611f8336267134daffba4fc5bb0e96b343ef4fea7a24e41edda579ab0e957cb2391933b425f1e66a14e9b5dc96481fbf23218f70f282b19982c93253def11a767a730f1179b229f4c7e26c08f22e19b3928c360c6d023937f35165aa9a4f7a9e3c23d3a7acfb62c50c9824232f4553ccad00de7cc5ecea6638519e40bffe026c243c4b8dee7c8b067767a9753bf77", @generic="b716eeb09a6c87a7273f653698ea809d7eb332e5bee6e1827a78e710208a08a20caca41e1d6b0e4db284c584d7561e5e75883faa7ead5bd4", @nested={0xc, 0x44, 0x0, 0x1, [@typed={0x8, 0x7b, 0x0, 0x0, @ipv4=@private=0xa010101}]}, @generic="0b6e01", @typed={0xdc, 0x35, 0x0, 0x0, @binary="2ae6fcdcf31255187e64caa95e7297a2f0f733f8d6dd018786c67e3704364e90dbf34b11b86c8e58a13e67a0e45bdeffc796a5d2da23b3faa6c4e12209721a16e30ae4ec04676325b2434b25848ea292512cb5490db3a7e6b1780ec2f26276f338615e9e3078f6c31fa5a47fe980180cf16b185299ef572edd737200f7ed6cb9a15d0875711d21d3061519e262c237d65f24d9bcd4855549efe587f26332dd6486911b0fb9b313c64a91891a238981bdc862130417eac8dadbd0983893865c72e849892b796de79bfefcb1dc3a26c3dfba0c578821e27fbd"}, @nested={0xf8, 0xd5, 0x0, 0x1, [@typed={0xc, 0x72, 0x0, 0x0, @u64=0x8}, @nested={0x4, 0x13}, @generic="8d3968b0b9df9a02768b8445770d7906ec76771d219de1b99ce02c57212892d729d45b46b60c049ca7fae6b2586cee3786a192d4f9acbd906d001f4ba0b6307ee598d6b8f26467605366070ed95c9c47d0ae626712a759e9bd8be4586df64d93a4317ab8dee5da75d64011719834bc0e", @nested={0x4, 0x12e}, @typed={0x8, 0xba, 0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0x28}}, @typed={0x68, 0x76, 0x0, 0x0, @binary="698461c8cd7cecfd7ae1fc2215027f5b8b46213ef155ec3b8aab585a3db608b7d3230cb8fbc1ce8b18164a67eec0d626f42b7c7e81b538b7a8e6c90faae08949f89f17566847a4c28135a7c56e757849cc4c1e961542d89a5de53b8e0fd0c4d212eadc8d"}]}, @typed={0xd, 0xa4, 0x0, 0x0, @str='/dev/ppp\x00'}]}, @NL80211_ATTR_MPATH_NEXT_HOP={0x24, 0x1a, "e199d2f7fbd3fede4394d692aadd8c37493c012b9305a4290b5aa5746c8e2dd4"}, @NL80211_ATTR_WIPHY_TXQ_PARAMS={0x18, 0x25, 0x0, 0x1, [@typed={0xc, 0x11a, 0x0, 0x0, @u64=0x5}, @typed={0x5, 0xf4, 0x0, 0x0, @str='\x00'}]}, @NL80211_ATTR_CONTROL_PORT={0x4}, @NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0x6}]}, 0x400}, 0x1, 0x0, 0x0, 0x20000040}, 0x20000010) (async) r6 = syz_genetlink_get_family_id$auto_gtp(&(0x7f0000002700), r5) (async) r7 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) sendmsg$auto_GTP_CMD_ECHOREQ(r0, &(0x7f00000027c0)={&(0x7f00000026c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000002780)={&(0x7f0000002740)={0x34, r6, 0x24, 0x70bd2c, 0x25dfdbfc, {}, [@GTPA_FLOW={0x6, 0x6, 0x83}, @GTPA_I_TEI={0x8, 0x8, 0x100}, @GTPA_LINK={0x8, 0x1, 0x7}, @GTPA_NET_NS_FD={0x8, 0x7, r7}]}, 0x34}, 0x1, 0x0, 0x0, 0x8040}, 0x1) (async) r8 = syz_genetlink_get_family_id$auto_seg6(&(0x7f0000002840), r5) sendmsg$auto_SEG6_CMD_SET_TUNSRC(r5, &(0x7f0000002940)={&(0x7f0000002800)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000002900)={&(0x7f0000002880)={0x58, r8, 0x0, 0x70bd25, 0x25dfdbfb, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x5}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x1}, @SEG6_ATTR_SECRETLEN={0x5}, @SEG6_ATTR_ALGID={0x5, 0x6, 0xb2}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0xa}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0xa3}, @SEG6_ATTR_DST={0x14, 0x1, @ipv4={'\x00', '\xff\xff', @local}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x4044810) (async, rerun: 32) setsockopt$auto(r4, 0xfffffff8, 0xa, &(0x7f0000002980)='nlctrl\x00', 0x0) (async, rerun: 32) open_by_handle_at$auto(r4, &(0x7f00000029c0)={0xb5, 0x0, "5c35a0e415cf77aa69975baaf7763df104d7a62c46216ece9a2869c8ba0b74a42b3d0c76a86545fd264d2d366493ce84413d15204860b041deeab546d83c5737ced61e1ccc7577ab20341f9b2f5b27d17dec9e682cb9f3f6a5eb3c841f81474635bf171554683eeb99461d28250e0f2de0f0c22ed05232279dda17dc2451097c7b49b7fab955af1b32105c774d66a3c82f632091ac28b2136cbb699ba8d5925c3ace37d589d7e10386a124527160dd9bb1cd197765"}, 0x6) readv$auto(r0, &(0x7f0000003a80)={&(0x7f0000002a80)="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", 0x100}, 0x2) (async) openat$auto_i2cdev_fops_i2c_dev(0xffffffffffffff9c, &(0x7f0000003ac0), 0x0, 0x0) (async) r9 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$auto(r5, 0x45, 0x9, &(0x7f0000003b00)='\x86,^\x00', 0x6) (async, rerun: 64) r10 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r11 = syz_genetlink_get_family_id$auto_ipvs(&(0x7f0000003b80), r9) (async, rerun: 32) shmctl$auto(0x1, 0x151e, &(0x7f0000004c80)={{0x7, 0xee00, 0x0, 0x80000001, 0x9, 0x8, 0x6}, 0x9, 0x88d, 0x5, 0xfffffffffffff801, @raw=0xfff, @raw=0xffffff80, 0x144c, 0x0, &(0x7f0000003bc0)="e4098afb4c2c7b47c2247c821fe84b56ba05f827c578783a6cca5bcc6ac2ded2514d65c00b86bbb4527ad923a6fa5294ccf79af631204b5992b5d63b3ef2ab419333ef708cfabc5a9dd8930d8722c4da23875be566be27652df9111f83e9e4f12a8c77a2ee4ceab02d92b5ce09fe4d3caff804ac959b560e3aee5f3947a4cb717a61bc8d52aa49da163a", &(0x7f0000003c80)="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"}) (rerun: 32) sendmsg$auto_IPVS_CMD_GET_INFO(r10, &(0x7f0000004f80)={&(0x7f0000003b40)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000004f40)={&(0x7f0000004d00)={0x21c, r11, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}, @IPVS_CMD_ATTR_DEST={0x1fd, 0x2, 0x0, 0x1, [@nested={0x110, 0x54, 0x0, 0x1, [@typed={0x14, 0x27, 0x0, 0x0, @ipv6=@loopback}, @typed={0x4b, 0xb0, 0x0, 0x0, @binary="a5ab8db24a64f59d1dac22ea30a2c4aa0e20c6ca8c8198e3b1ca65dad3a920894674ba7a92d244f3b808f2484d08a8f7f7df7859cea03eef9721cffd6ef5df70a08208110af6a3"}, @generic="fb6df0c229b9f6f33031c7bdc9523d2428918e07c864321426e837e7e92c7208a4bcb32340ab5ca51e2f9458a0cabb6b5e7ad25ac7216f7011d39285b7e5ab80aac6c5bfe41150d81da1d5e3b4c30d7a44d2f5e155086f892485a2033e385c0cd3b2397c703d37da68520c8825f6658e89410726f9c467f0e7aec7ee6c41f15d8965661dd087b65863353f77bf79218c85b5258c83f8f5c075dc7a10", @typed={0x8, 0x103, 0x0, 0x0, @u32=0x8}, @typed={0x4, 0xee}, @nested={0x4, 0xb5}]}, @typed={0x8, 0x49, 0x0, 0x0, @uid=r12}, @generic="edda8b72840154732a050890bba34e19b6df6971b35d8e4e01fb1212865fda59fe4f94604336a01f17152e8f133c1a8f063f566de5c0b25d454c0b3b5b5361f974a1ce06c4b0cc20cfd73c9f800d93720b862c58d526ab924733bac48adf8f8124e240fc74e6ca687ba55a5fb7b926613f72dbefb6201b4af7cd6b628a67f9ebdf0fa80da74be362ce6a46bc9550d99698a2ed6f45103d4781fdc939adc5defba52091b6486675447b12a629fb4dbd43aa6aa80f8262406e8d0df6977794ff1d07c46d8b0eb2cd150f66404d2c1de4d6468984eae43d4b7b5a", @typed={0x8, 0x6c, 0x0, 0x0, @ipv4=@empty}]}]}, 0x21c}, 0x1, 0x0, 0x0, 0x408c0}, 0x480c0) 2m39.070234329s ago: executing program 1 (id=669): mmap$auto(0x0, 0x4020009, 0xdf, 0x10, 0x401, 0x8000) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nfc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_NFC_CMD_GET_DEVICE(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0xdc, r1, 0x800, 0x70bd2c, 0x25dfdbff, {}, [@NFC_ATTR_VENDOR_DATA={0xa9, 0x1f, "a676c09b3f597c4465af6cd328b7b48ca0728849e5989e90b5754992eb4241d06d185445c2e69f3d8293c59d26757e346853e74664273c667bcc98a4130c3faf66ac2a9fc69b50cdc35094b4a81b22f0d41afb37f06b9e664448ec82ae8dc1b93007f3af0814d068ba3c941aad495d1a8a2e7cadfc0a7c7abdc1d65acefae3e6b8b09a98238ba5aeb21c6444ed76fd0ceaf5ef74ae75c4afc61ef509431515e5f412c512d1"}, @NFC_ATTR_DEVICE_NAME={0x4}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x6}, @NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0x3}, @NFC_ATTR_COMM_MODE={0x5, 0xa, 0xdb}]}, 0xdc}, 0x1, 0x0, 0x0, 0x24000c14}, 0x20000000) mseal$auto(0x0, 0x7dda, 0x0) madvise$auto(0x0, 0x200007, 0xa) 2m38.941039692s ago: executing program 1 (id=670): r0 = openat$auto_rfcomm_dlc_debugfs_fops_(0xffffffffffffff9c, &(0x7f00000001c0), 0x80, 0x0) sendmsg$auto_NETDEV_CMD_BIND_RX(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="5f9d985b8ea79db0ed89c2d336e52b9aeaffffe3", @ANYRES16=0x0, @ANYBLOB="140026bd7000000100000d00000008000300", @ANYRES32=r0, @ANYBLOB="4400028008000100ffffffff08000100050000000800010001040000080001000900000008000100810000000800030006000000080001000600000008000100e5000000"], 0x60}, 0x1, 0x0, 0x0, 0x2004c000}, 0x40448c0) (async) mmap$auto(0x0, 0x2000b, 0xdf, 0xeb1, 0x8000000000000000, 0x8000) r1 = socket(0x2, 0x5, 0x0) (async) open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket(0x10, 0x2, 0xc) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000013c0)=ANY=[@ANYBLOB="18000000", @ANYRES8=0x0, @ANYRES8=r2, @ANYRES8], 0x18}}, 0x200080c0) mprotect$auto(0x1ffff000, 0x8000000000000001, 0xd) (async) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r3, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x10048884) (async) getsockopt$auto(r1, 0x84, 0x85, 0x0, &(0x7f00000000c0)=0x1000c) (async) r4 = gettid() kill$auto(r4, 0x11) move_pages$auto(r4, 0x10000000f56, 0x0, 0x0, 0x0, 0x8000000000000000) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) r5 = openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000005280), 0x40400, 0x0) (async) open(&(0x7f0000000000)='./file0\x00', 0x261c2, 0x84) (async) openat$auto_cgwb_debug_stats_fops_(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/bdi/43:448/wb_stats\x00', 0x100, 0x0) (async) r6 = openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0000, 0x0) pread64$auto(r6, &(0x7f0000000080)='\x00\x00\x00\x88\xde\x90\a\'\x9bM\xa0\x848\xbbz(\xe9\x05<\x82\xfe\xe2\xf6 \x0f8\xfb\xa7\xb4\xa0\x9e\xcb\xec\x9e{W\xed>\xe7l\xcb\x90\\/\x84\x99!*\xe3\x99}x\xd4\xa5D\xfa\xe5\xf9od^\xa6', 0xd51, 0x8) (async) stat$auto(&(0x7f00000010c0)='./file0\x00', 0x0) ioctl$auto_posix_clock_file_operations_posix_clock(r5, 0x40603d10, 0x0) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) futex_wait$auto(0x0, 0x0, 0x7f, 0x2, 0x0, 0x1) (async) futex$auto(0x0, 0x3, 0x8243, 0x0, 0x0, 0x4) bpf$auto(0x8000000000000012, 0x0, 0x0) (async) ppoll$auto(&(0x7f0000001cc0)={0xffffffffffffffff, 0x7, 0x6}, 0x1, 0x0, 0x0, 0x8) (async) r7 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$auto(r7, 0x405c5503, 0x81) 2m22.934932123s ago: executing program 32 (id=670): r0 = openat$auto_rfcomm_dlc_debugfs_fops_(0xffffffffffffff9c, &(0x7f00000001c0), 0x80, 0x0) sendmsg$auto_NETDEV_CMD_BIND_RX(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="5f9d985b8ea79db0ed89c2d336e52b9aeaffffe3", @ANYRES16=0x0, @ANYBLOB="140026bd7000000100000d00000008000300", @ANYRES32=r0, @ANYBLOB="4400028008000100ffffffff08000100050000000800010001040000080001000900000008000100810000000800030006000000080001000600000008000100e5000000"], 0x60}, 0x1, 0x0, 0x0, 0x2004c000}, 0x40448c0) (async) mmap$auto(0x0, 0x2000b, 0xdf, 0xeb1, 0x8000000000000000, 0x8000) r1 = socket(0x2, 0x5, 0x0) (async) open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket(0x10, 0x2, 0xc) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000013c0)=ANY=[@ANYBLOB="18000000", @ANYRES8=0x0, @ANYRES8=r2, @ANYRES8], 0x18}}, 0x200080c0) mprotect$auto(0x1ffff000, 0x8000000000000001, 0xd) (async) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r3, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x10048884) (async) getsockopt$auto(r1, 0x84, 0x85, 0x0, &(0x7f00000000c0)=0x1000c) (async) r4 = gettid() kill$auto(r4, 0x11) move_pages$auto(r4, 0x10000000f56, 0x0, 0x0, 0x0, 0x8000000000000000) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) r5 = openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000005280), 0x40400, 0x0) (async) open(&(0x7f0000000000)='./file0\x00', 0x261c2, 0x84) (async) openat$auto_cgwb_debug_stats_fops_(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/bdi/43:448/wb_stats\x00', 0x100, 0x0) (async) r6 = openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0000, 0x0) pread64$auto(r6, &(0x7f0000000080)='\x00\x00\x00\x88\xde\x90\a\'\x9bM\xa0\x848\xbbz(\xe9\x05<\x82\xfe\xe2\xf6 \x0f8\xfb\xa7\xb4\xa0\x9e\xcb\xec\x9e{W\xed>\xe7l\xcb\x90\\/\x84\x99!*\xe3\x99}x\xd4\xa5D\xfa\xe5\xf9od^\xa6', 0xd51, 0x8) (async) stat$auto(&(0x7f00000010c0)='./file0\x00', 0x0) ioctl$auto_posix_clock_file_operations_posix_clock(r5, 0x40603d10, 0x0) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) futex_wait$auto(0x0, 0x0, 0x7f, 0x2, 0x0, 0x1) (async) futex$auto(0x0, 0x3, 0x8243, 0x0, 0x0, 0x4) bpf$auto(0x8000000000000012, 0x0, 0x0) (async) ppoll$auto(&(0x7f0000001cc0)={0xffffffffffffffff, 0x7, 0x6}, 0x1, 0x0, 0x0, 0x8) (async) r7 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$auto(r7, 0x405c5503, 0x81) 8.841322499s ago: executing program 2 (id=1272): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_TIPC_NL_BEARER_GET(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000001280)={&(0x7f0000001300)={0x14, r1, 0x9d0da3446261172d, 0x50bd28, 0x25dfdbfe}, 0x14}, 0x1, 0xf000, 0x0, 0x24000000}, 0x20008080) 8.508456166s ago: executing program 2 (id=1274): openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/dev_mcast\x00', 0x0, 0x0) r0 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x161302, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0x8, 0x8000) read$auto(0x3, 0x0, 0x1f40) close_range$auto(r0, r0, 0x0) r1 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv6/conf/all/forwarding\x00', 0x42a81, 0x0) r2 = openat$auto_proc_coredump_filter_operations_base(0xffffffffffffff9c, 0x0, 0x141002, 0x0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/bus/usb/drivers/usb_acecad/new_id\x00', 0x60301, 0x0) mmap$auto(0x8a, 0xe7f, 0x3, 0xeb1, r0, 0x9444) r4 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv6/conf/veth0/dad_transmits\x00', 0x123541, 0x0) read$auto(r4, 0x0, 0x1ff) write$auto(0x3, 0x0, 0xfdef) pwritev$auto(r2, &(0x7f0000000180)={0x0, 0x9}, 0x837, 0xb6, 0x3) pwrite64$auto(r1, 0x0, 0x1, 0x2) openat$auto_tracing_cpumask_fops_trace(0xffffffffffffff9c, 0x0, 0x1c7640, 0x0) write$auto(0x3, 0x0, 0xfdef) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/bus/usb/015/001\x00', 0xa901, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_ETHTOOL_MSG_STATS_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYRES64=r3, @ANYRES16=0x0, @ANYBLOB="01002b00"/14], 0x14}, 0x1, 0x0, 0x0, 0x4000040}, 0x40040a2) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x1, 0x73) socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x4, 0x9}, 0x7}, 0x3, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/card1/pcm1c/sub2/xrun_injection\x00', 0x2, 0x0) ioctl$auto(0x3, 0x8008551c, 0x38) unshare$auto(0x40000080) mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0xff1, 0x8000) 7.304706861s ago: executing program 2 (id=1276): openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f600, 0x0) mmap$auto(0x0, 0x810004, 0x40000000000ffb, 0x8000000008011, 0x3, 0x8000) socket(0x2, 0x3, 0xa) syz_genetlink_get_family_id$auto_nlctrl(&(0x7f0000000040), 0xffffffffffffffff) bpf$auto(0x18, &(0x7f0000000000)=@info={0x2800, 0x1ff, 0x6}, 0xcf) getsockopt$auto(0x3, 0x0, 0x20, &(0x7f0000000000)='\x00', &(0x7f0000000040)=0x5) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x3ff, 0x0) r0 = openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000000), 0x40802, 0x0) write$auto(r0, 0x0, 0xea) 6.767028264s ago: executing program 2 (id=1279): ioperm$auto(0x7fb, 0x1, 0x4000007) openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/irq/9/effective_affinity_list\x00', 0x100182, 0x0) r0 = socket(0x1d, 0xa, 0x5) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x20004, 0x1ff, 0xeb1, 0x8000000000000024, 0x8000) bpf$auto(0x0, &(0x7f00000001c0)=@task_fd_query={0x9, r0, 0x7ff, 0x6, 0xa, 0x1000009, 0x5f, 0x0, 0x3}, 0x6f3) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x7, 0x800008000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) read$auto(0x3, 0x0, 0x80) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x5, &(0x7f00000002c0)={0x0, 0xa}, 0x1, 0x0, 0xe, 0xfffffff7}, 0x9}, 0x10002, 0x47) prctl$auto(0x59616d61, 0xdaffffffffffffff, 0x2, 0xffffffffffffffff, 0x8) socket(0x10, 0x2, 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) mmap$auto(0x0, 0x8, 0xffffffffffffffff, 0x9b72, 0x2, 0x8000) get_mempolicy$auto(0x0, 0x0, 0x81, 0x8, 0x3) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/irq/9/smp_affinity\x00', 0x129542, 0x0) r1 = getegid() lchown$auto(&(0x7f0000000000)='./file0\x00', 0x0, r1) semtimedop$auto(0x7, 0x0, 0x3, 0x0) 6.748158518s ago: executing program 3 (id=1280): rseq$auto(0x0, 0x8000, 0x0, 0x6) (async) mmap$auto(0x0, 0x9, 0x3, 0x800019b72, 0x9, 0x8000000000008000) capget$auto(0x0, 0xfffffffffffffffe) setreuid$auto(0x0, 0x20000000004) capset$auto(0x0, &(0x7f0000000180)={0x1, 0x7, 0x6}) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mbind$auto(0x9, 0x98, 0x7af, 0x0, 0x4, 0x7fd) (async) mprotect$auto(0x1ffff000, 0x8000000001000001, 0xd) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/time\x00') getdents$auto(r0, 0x0, 0x40000100) (async) getdents64$auto(r0, 0x0, 0x101) (async) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/system/cpu/cpuidle/current_driver\x00', 0x8000, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f00000000c0)=""/89, 0x59) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'pim6reg\x00', 0x0}) r3 = bpf$auto(0x20000005, &(0x7f0000000000)=@bpf_attr_3={0x8, 0x2, 0x18c, 0x4, 0x2, 0x8, 0x4, 0x57b8, 0xfffffff8, "63acf0e05b2d33ebc15774e816ef77cf", r2, 0x543, 0xffffffffffffffff, 0x207, 0x0, 0x4, 0x4, 0x2, 0xe, 0xa, @attach_btf_obj_fd, 0x9, 0x7fb, 0x6, 0xa, 0x48000000, 0xa7c2}, 0x102) futimesat$auto(r4, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={0x2, 0x7}) (async) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) write$auto_dev_fops_plock(r3, &(0x7f0000000180)="44f95e64f4b03258cd7fe4a2d837210f3f3d5291a0d9464f82c43534bbee7ba81f58ebaaf17a45c6b11c88f42a564ea0de34ed172379ab0af77a548e73bee6862785987b8efa66fefded2038e668e28d3f0dbcd4ccbb546444d64c051b529301eb0357095ab3f70b0c517386821721f64129cb4cb2815fafa55034e9baac495ba39eb9786ad3e87838834940eb47e899d872f1d8b3a70bc4c44ac3bcd813dad020ed968e53aa6ca3b2c7a4c4b8bbe1b12b47254203f2a4df17a99621a7e2b3bfb70e4469af34f1fbbcf2f5a60e2f77e401a6616c21bf1c9ac97c911d4028", 0xde) (async) capset$auto(&(0x7f0000000280)={0x7}, &(0x7f00000002c0)={0xc0000000, 0x6, 0xf9b}) (async) semctl$auto(0x1ff, 0x2, 0x13, 0x1) sendmmsg$auto(0x3, &(0x7f0000000000)={{0x0, 0x2, &(0x7f0000000040)={0x0, 0x34000}, 0x4, 0x0, 0x1}, 0xed7138c}, 0x2, 0x9) setsockopt$auto(0x3, 0x1, 0x20, 0x0, 0x9) (async) close_range$auto(0x2, 0x8, 0x0) move_pages$auto(0x0, 0xf54, 0x0, 0x0, 0x0, 0x8000000000000000) 5.789271478s ago: executing program 3 (id=1282): mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x403, 0x8000) r0 = prctl$auto(0x1000000003b, 0x1, 0x0, 0x3, 0x9) removexattr$auto(0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000002500), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_OVS_DP_CMD_NEW(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010026bd7020f8dbdfaa0000000000000000", @ANYRESDEC=r0, @ANYBLOB="080001004866520008000200", @ANYRESHEX=r1, @ANYBLOB="130e4c731d470936eddca33387a70c2d33d68b51dc4e0e347456496ed270b17e80b4731cd8"], 0x2c}, 0x1, 0x0, 0x0, 0x801}, 0x80) unshare$auto(0x40000080) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r4 = socket(0x2, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) sendmmsg$auto(r4, 0x0, 0x5, 0x20000000) socket(0x18, 0x5, 0x2) ptrace$auto(0x4206, 0x0, 0x0, 0x5) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) unshare$auto(0x40000080) openat$auto_proc_coredump_filter_operations_base(0xffffffffffffff9c, &(0x7f0000000140), 0x141002, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000340)='/proc/sys/net/netfilter/nf_conntrack_buckets\x00', 0x101000, 0x0) write$auto(0x3, 0x0, 0xfdef) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) sendmsg$auto_NETDEV_CMD_QUEUE_GET(0xffffffffffffffff, &(0x7f0000003040)={0x0, 0x0, &(0x7f0000003000)={&(0x7f0000000040)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x20008810) open(&(0x7f0000000000)='./file0\x00', 0xa61c2, 0x84) bind$auto(0x3, 0x0, 0x6b) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) socket(0x21, 0x2, 0xfffffffd) r5 = syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000080), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_OVS_DP_CMD_DEL(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01002abd7000fedbdf2502"], 0x38}, 0x1, 0x0, 0x0, 0x20040011}, 0x20000000) socket$nl_generic(0x10, 0x3, 0x10) 5.36573111s ago: executing program 0 (id=1283): sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x40000) mprotect$auto(0x110c238000, 0x1, 0x3) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x40000, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x20000014}, 0xc0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) timerfd_gettime$auto(0x9, 0x0) connect$auto(0x3, &(0x7f0000000080)=@ax25={0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x5}, 0x54) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x33a00, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x6, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ipvs(&(0x7f00000009c0), 0xffffffffffffffff) sendmsg$auto_IPVS_CMD_SET_SERVICE(r0, 0x0, 0x4000000) socket(0x11, 0x80003, 0x300) socket(0x11, 0x80003, 0x300) openat$auto_proc_pid_attr_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/apparmor/prev\x00', 0x1, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ptyw5\x00', 0x3e41, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/net/rpc/auth.unix.ip/channel\x00', 0x141401, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) io_uring_setup$auto(0x6, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x5a1b02, 0x0) socket(0x2, 0x5, 0x0) socketpair$auto(0x1e, 0x1, 0x0, 0x0) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/pts/ptmx\x00', 0x0, 0x0) ioctl$auto_TIOCSETD2(r1, 0x5423, 0x0) ioctl$auto_TCFLSH2(r1, 0x5411, 0x0) 4.745850521s ago: executing program 2 (id=1285): rseq$auto(&(0x7f0000000300)={0xb, 0x401, 0x0, 0x2, 0xffffffff, 0x2}, 0x20008000, 0x0, 0x8) close_range$auto(0x0, 0xfffffffffffff000, 0x0) bpf$auto(0x0, &(0x7f00000001c0)=@task_fd_query={0x9, 0x21eb, 0x7ff, 0x6, 0xa, 0x1000009, 0x5f, 0x0, 0x3}, 0x6f3) bpf$auto(0x18, &(0x7f0000000040)=@task_fd_query={r0, 0xffffffffffffffff, 0x9, 0x8, 0x8, 0x7, 0xffffffffffffffff, 0x2, 0x4}, 0x92) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x11, 0x80003, 0x300) fanotify_init$auto(0x65, 0x2) pipe$auto(&(0x7f0000000080)) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) r2 = socket(0x10, 0x2, 0xc) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000013c0)=ANY=[@ANYBLOB="18000000", @ANYRES8=r2, @ANYRES8=r1, @ANYRES32], 0x18}}, 0x80) mprotect$auto(0x1ffff000, 0x8000000000000001, 0xd) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x10048884) mincore$auto(0x0, 0xffffffff, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_macsec(&(0x7f0000000000), 0xffffffffffffffff) r5 = openat$auto_stat_fops_(0xffffffffffffff9c, &(0x7f0000000000)='/proc/stat\x00', 0xc0400, 0x0) read$auto_stat_fops_(r5, &(0x7f0000000040)=""/6, 0x6) sendmsg$auto_MACSEC_CMD_ADD_TXSA(r3, &(0x7f0000002a00)={0x0, 0x0, &(0x7f00000029c0)={&(0x7f0000006280)={0x24, r4, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@MACSEC_ATTR_IFINDEX={0x8}, @MACSEC_ATTR_SA_CONFIG={0x8, 0x3, 0x0, 0x1, [@typed={0x4, 0x3}]}]}, 0x24}, 0x1, 0x0, 0x0, 0xc080}, 0x48040) 4.308812493s ago: executing program 0 (id=1286): socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), r0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000640)={'wlan1\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000640)={'wlan1\x00', 0x0}) sendmsg$auto_NL80211_CMD_DEL_PMK(r0, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000001440)={&(0x7f0000000c40)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010026bd73004edbdf258e00000008000300", @ANYRES32=r2], 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) open(&(0x7f0000000140)='./file0\x00', 0x220c0, 0x20) chmod$auto(&(0x7f00000000c0)='./file0\x00', 0xf4ba) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) capget$auto(0x0, 0xfffffffffffffffe) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000100)='/dev/video15\x00', 0x1580, 0x0) (async) r3 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000100)='/dev/video15\x00', 0x1580, 0x0) read$auto_v4l2_fops_v4l2_dev(r3, &(0x7f0000000000)=""/194, 0x70800) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x3b72, 0x0) keyctl$auto(0x2000000000000018, 0xfffffffffffffffd, 0x0, 0x1, 0xa0) (async) keyctl$auto(0x2000000000000018, 0xfffffffffffffffd, 0x0, 0x1, 0xa0) execve$auto(&(0x7f0000000080)='./file0\x00', &(0x7f0000000240)=&(0x7f0000000280)='team_slave_1\x00', 0x0) socket$nl_generic(0x10, 0x3, 0x10) rseq$auto(0x0, 0x8000, 0x0, 0x6) (async) rseq$auto(0x0, 0x8000, 0x0, 0x6) execve$auto(0x0, 0x0, 0x0) socket(0x24, 0x80000, 0xfffffff6) r4 = socket(0xa, 0x1, 0x84) getsockopt$auto(r4, 0x84, 0x9, 0x0, &(0x7f0000000000)=0x9b) (async) getsockopt$auto(r4, 0x84, 0x9, 0x0, &(0x7f0000000000)=0x9b) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) setsockopt$auto(0x3, 0x10f, 0x8a, 0x0, 0x14) 4.177332392s ago: executing program 4 (id=1287): mmap$auto(0xffff, 0xa, 0xdb, 0x9b72, 0x5, 0x8000) setrlimit$auto(0x1000000007, 0x0) socket(0x200000000000011, 0x2, 0x0) 3.918481172s ago: executing program 4 (id=1288): mmap$auto(0x0, 0x2000d, 0x4000000000df, 0xeb1, 0x404, 0x8000) r0 = openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000000)='/dev/binderfs/binder0\x00', 0x1, 0x0) pread64$auto(0xffffffffffffffff, 0x0, 0x100000000008, 0x8) (async, rerun: 32) ioctl$auto(0x3, 0xc0105512, 0x1) (rerun: 32) ioctl$auto(r0, 0xc0306201, 0x9) (async) close_range$auto(0x2, 0x8, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_smc_gen_netlink(0x0, 0xffffffffffffffff) (async) sendmsg$auto_SMC_NETLINK_ADD_UEID(r1, 0x0, 0x8092) pread64$auto(0xffffffffffffffff, 0x0, 0x100000001, 0x1) (async, rerun: 64) mmap$auto(0x9, 0x100, 0x7fff, 0x411, 0xffffffffffffffff, 0x3) (async, rerun: 64) socket$nl_generic(0x10, 0x3, 0x10) semctl$auto(0x10000, 0x5, 0x0, 0x1) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_ioam6(&(0x7f0000000600), r2) sendmsg$auto_IOAM6_CMD_NS_SET_SCHEMA(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000640)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002bbd7000050800000700000004000600060001004a000400"], 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x80) (async, rerun: 64) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async, rerun: 64) r4 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$auto(r4, 0x8004552d, 0xea3) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) futex_waitv$auto(&(0x7f0000000000)={0x8, 0x5d94, 0x4, 0x4}, 0x77, 0x0, 0x0, 0x62bd) (async, rerun: 64) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x0) (async, rerun: 64) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x800008000) (async) madvise$auto(0x0, 0xffffffffffff0001, 0x15) mbind$auto(0x0, 0x100000004, 0x4, 0x0, 0x20000000000006, 0x2) shmat$auto(0x4, 0x0, 0x1) 2.866049706s ago: executing program 3 (id=1289): mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async) pipe2$auto(0x0, 0x80) (async) socketpair$auto(0x1, 0x5, 0x7ff, 0x0) (async) openat$auto_vhci_fops_hci_vhci(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) (async) statmount$auto(0x0, &(0x7f0000000180)={0xa, 0x1, 0x1fd, 0x7, 0x5, 0x7184, 0x1ffde, 0x7, 0x3, 0x9, 0x9, 0x8, 0x4, 0x200000000001, 0xb4, 0xfffffffffffffff8, 0x8, 0x200, 0x4000080, 0x0, 0x100, 0xe, 0x22000, 0x200, 0x0, 0x84, [0x3, 0x3, 0x0, 0x2, 0x3, 0x2000, 0x0, 0xc, 0x70624ce7, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x400000000000008, 0x1000000000000000, 0x6, 0x80000000, 0xfffffffffffbfffd, 0x2000000000000004, 0x10000000000001, 0x10000000000, 0xbfffffffffffffff, 0x4, 0xfffffffffffffe00, 0x0, 0x8, 0x1005, 0x400000000005b8, 0xffff, 0x0, 0x81, 0x0, 0x1, 0x2, 0x88e, 0x40, 0xfffffffffffffffc, 0x8, 0xa3c, 0x0, 0x3, 0x3ff, 0x2, 0x8, 0x7, 0xc567]}, 0x1fe, 0x4000d) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48480, 0x0) poll$auto(&(0x7f0000000080)={0x2, 0x0, 0x1a}, 0xff, 0x1) socket(0x2, 0x6, 0x0) (async) bind$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3}, 0x6b) (async, rerun: 64) connect$auto(0x3, &(0x7f00000000c0), 0x55) (async, rerun: 64) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) (async) socket(0x1d, 0x2, 0x2) connect$auto(0x3, 0x0, 0x55) (async) sigaltstack$auto(&(0x7f0000000080)={0x0, 0x80000004, 0x1}, 0x0) (async) r0 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) (async) mq_open$auto(0x0, 0x3ff, 0x7, 0x0) (async) sendmsg$auto_NLBL_CALIPSO_C_LIST(r0, &(0x7f0000000480)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x54, 0x0, 0x0, 0x70bd29, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8, 0x2, 0x949}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x401}, @NLBL_CALIPSO_A_MTYPE={0x8, 0x2, 0xf}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x6}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0xe32d}, @NLBL_CALIPSO_A_MTYPE={0x8, 0x2, 0xffff}]}, 0x54}, 0x1, 0x0, 0x0, 0x8800}, 0x4000) (async) socket(0xa, 0x3, 0xa) (async) bpf$auto(0x0, &(0x7f0000000000)=@token_create={0x8, r0}, 0x6) (async, rerun: 32) sendmmsg$auto(0x3, 0x0, 0x9a6, 0xa00) (async, rerun: 32) tgkill$auto(0x0, 0x0, 0x1) madvise$auto(0x0, 0xffffffffffff0001, 0x15) (async, rerun: 32) r1 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) (async, rerun: 64) mmap$auto(0x8000000000000, 0x6000000, 0x10001, 0x476aff54, r1, 0x42) (async, rerun: 64) io_uring_enter$auto(0xffffffffffffffff, 0x5, 0x0, 0x101, 0x0, 0x5) (async) lremovexattr$auto(0x0, 0x0) 2.75738275s ago: executing program 0 (id=1290): r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv6/conf/dummy0/addr_gen_mode\x00', 0x1, 0x0) mmap$auto(0x0, 0x0, 0x2, 0xeb1, r0, 0x8000) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/nbd7/queue/max_discard_segments\x00', 0x80000, 0x0) read$auto(r1, 0x0, 0x9) write$auto(0x3, 0x0, 0xfdef) 2.728474617s ago: executing program 4 (id=1291): r0 = openat$auto_vhci_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000000), 0x60840, 0x0) read$auto(r0, 0x0, 0x80000000) socket(0xa, 0x801, 0x84) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, r0, 0x8000) socket(0x2, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @remote}, 0x6a) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000080), 0x12, 0x0, 0x1, 0x0, 0x40, 0xb}, 0x800009}, 0x8, 0x20000000) write$auto(0x3, 0x0, 0xfffffdef) fcntl$auto(0x3, 0x4, 0xa553) sendmsg$auto_WG_CMD_GET_DEVICE(0xffffffffffffffff, 0x0, 0x2000c041) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) io_uring_setup$auto(0x85, 0x0) getsockopt$auto(0xffffffffffffffff, 0x0, 0x53, 0x0, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x0, 0x0) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) mmap$auto(0x9, 0x8, 0x7f, 0x14, 0x1ff, 0xeb41) socket(0x0, 0x5, 0x2000005) socket(0x2a, 0x80000, 0x9) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x800008000) write$auto(0x3, 0x0, 0xfffffdf1) mmap$auto(0x0, 0x20006, 0x10000000000df, 0xeb2, 0x401, 0x8000) setsockopt$auto(0x3, 0x10000000084, 0x78, 0x0, 0x8) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) getsockopt$auto(0x6, 0x0, 0x9, 0xfffffffffffffffc, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ipvs(&(0x7f0000000040), 0xffffffffffffffff) 2.497704268s ago: executing program 0 (id=1292): unshare$auto(0x40000080) unshare$auto(0x7ff) r0 = fsopen$auto(&(0x7f0000000000)='\x00', 0x4bc8) r1 = openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self/oom_score\x00', 0x2001c0, 0x0) read$auto_proc_single_file_operations_base(r1, &(0x7f0000000140)=""/44, 0x2c) r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000080), 0xffffffffffffffff) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) pipe2$auto(0x0, 0x800) r3 = open(0x0, 0x261c2, 0x84) close_range$auto(0x2, 0x8000, 0x0) r4 = socket(0xa, 0x2, 0x88) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000280)={'vcan0\x00', 0x0}) bpf$auto(0x0, &(0x7f00000000c0)=@bpf_attr_5={@target_ifindex=r6, r5, 0x4, 0x1ff, r4, @relative_id=0x13, 0xe600}, 0xf) bpf$auto(0x2, &(0x7f00000001c0)=@raw_tracepoint={0x5, r3, 0x0, 0x3}, 0xc) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) bpf$auto(0x1, &(0x7f0000000080)=@bpf_attr_3={0x5, 0x0, 0x702955be, 0x5c, 0x4, 0x9, 0x80, 0xe4, 0xfffff800, "0566c8ee7c78a925488276d7697a12bd", 0x0, 0x2, 0xffffffffffffffff, 0x7, 0x9, 0x4, 0x7, 0x10001, 0x0, 0x8001, @attach_prog_fd, 0x7e, 0x4, 0x1, 0x5, 0x3}, 0x5) r7 = getuid() fsconfig$auto(r0, 0x6, &(0x7f0000000180)='\x00', &(0x7f00000001c0)="fe01c35a84ca9a115c1f9300bd672e4c2dd62694005700b0a3a33924d6beb7fa64fa6ac28cab37eff31c0ef3ab217a52e83d342538613033e7a3514836fbb95f147d7925cd9811e464d9e88b2d23feb48664a57e6fad78d6c550f0603496251ea8b17cbbaead7753058e7321254e798b5376182343b3606d6877a7b7f0630ea46a1b8dd0b97fa3377fcddaa7dd236f269e4feb574b8c2c88adbd76000ca77f21348fa958de03123eec67c2063dee1616e90d081b08938d3e27ea9e9d969e0fd3c6e4d5fe66e2d8ef72df4c1b0e2227acac612caa045dfd64c6f4c2290cc1997b0121", r7) kexec_load$auto(0x7b2d2ae3, 0x6f, &(0x7f00000003c0)={@kbuf=&(0x7f00000002c0)="69baacb5623641d24ef2b670f77993eaa9ea7f302e732a66779353576d9f6b026d134a9f3f9fcf65f2df576281447e5ae30af96ff63c5145213ccd5d1151b88d6ff8d2c09619d7c9627c3bb52e1332afd2aeed2b8109e6bc32596b7cdfab5302d8e8e584274e6ed43292bddb9edfa7dc18f2956f6fde973d7a2add43011afe7a68ef231f51c0df5d51d485123dc05859acd29c82fde651b098b51414745061a5068d5480d349e0231ee1e0505764efe7f293493294d268e1907b891a73fe9566b4258596f16cd33d1a4200476755187edfd2537829c9315510fa283420e4381cbd", 0xb8, 0xe, 0x8}, 0xffffffffffffff7f) kexec_load$auto(0x9, 0x4f237fc0, &(0x7f00000004c0)={@kbuf=&(0x7f0000000400)="19ccc865f6275fe7770236b5ca086e63c4ed4d484289e3cf198d1f8bd9ae22e7922ca192b80b11e460fec06660af834890b8f03bc4a9d66d827e34598b9edca96208e62a73f52f952b53235f3ab7f26eb7796dc0494b1509a42460a698520640545ad998892860734493ea8c22d508a2338850e2888b7ed1435ff57dc581364037dc99230ac3a30815590b349a8fb6e526f1beb6005ce6717ed4976a9a781aced0537e6419d1c3aa15ba44ff8902", 0x6, 0x1, 0x6}, 0x4) sendmsg$auto_NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000100)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c0000d5ebb20e374b0ddbda269a8cfafac60000000000a698f2b46b397640660b155aba4d23eb5d2af1e616be131db49b8c39c4af2faf59ba239b6d6b9294c062aa3601e41e0a9456b34add18a1f99deebd757b813777b81338be08ca68a478d828f7c56624eb4c0e665463853e81bfd8c4ddc3f3800000000000", @ANYRES16=r2, @ANYBLOB="10002ebd7000fedbdf250700000008005d0004000000"], 0x1c}, 0x1, 0x0, 0x0, 0x40800}, 0x20044801) 1.485267548s ago: executing program 3 (id=1293): r0 = socket(0xa, 0x2, 0x0) stat$auto(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)={0x4, 0x1, 0x80000000, 0x7, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x5, 0x0, 0xb, 0x5, 0xfffffffffffffd4d, 0xda7, 0x5, 0xfffffffffffffffa, 0x5, 0x2}) keyctl$auto(0x9, r1, r1, r2, 0xfffffffffffffff8) r3 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x81, 0x0) ioctl$auto(r3, 0x80045105, 0x3) setsockopt$auto(r0, 0x29, 0x17, 0x0, 0x3) openat$auto_dmaengine_summary_fops_(0xffffffffffffff9c, &(0x7f0000000080), 0xa242, 0x0) 1.268442118s ago: executing program 3 (id=1294): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0x8000000000000000, 0x8000) capget$auto(0x0, 0xfffffffffffffffe) capset$auto(0x0, &(0x7f0000000180)={0x1, 0x7, 0x6}) r0 = open(&(0x7f0000000080)='./file0\x00', 0x22ac2, 0x5d745cb200ae4d7b) fchown$auto(r0, 0xe5a, 0x5) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sda1\x00', 0x80080, 0x0) utimes$auto(&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)={0x8, 0x8001}) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/LNXSYSTM:00/LNXPWRBN:00/input/input0/phys\x00', 0x40, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x400c000) bpf$auto(0x5, &(0x7f0000000100)=@task_fd_query={0x2, 0x2, 0x4, 0x0, 0x85, 0x7, 0x9, 0x6, 0x8001}, 0x101) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/platform/vidtv.0/i2c-0/0-0060/modalias\x00', 0x80000, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r2, &(0x7f0000000000)=""/53, 0x35) bpf$auto(0xfffffe00, &(0x7f0000001080)=@info={r0, 0xffffffff, 0x7}, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f0000000040)=""/4110, 0x100e) 1.217843934s ago: executing program 0 (id=1295): socket(0x2, 0x1, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async) bind$auto(0x3, &(0x7f0000000000), 0x68) connect$auto(0x3, &(0x7f0000000000), 0x55) (async) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) (async) sendto$auto(0x3, 0x0, 0x2000f, 0x101, 0x0, 0x1c) (async) mmap$auto(0x0, 0x400005, 0xfffffffffffffffe, 0x9b72, 0x2, 0x8000) (async) setsockopt$auto(0x3, 0x1, 0x21, 0x0, 0x9) (async) bind$auto(0x3, 0x0, 0x68) (async) memfd_create$auto(&(0x7f0000000040)='.\x00', 0x80) (async) mmap$auto(0x0, 0x5, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) (async) writev$auto(0x1, &(0x7f0000000100)={0x0, 0x400000000000fdef}, 0x1) fcntl$auto(0x0, 0x407, 0x0) (async) memfd_create$auto(0x0, 0x7) (async) rseq$auto(0x0, 0x8000, 0x0, 0x6) finit_module$auto(0x3, 0xfffffffffffffffe, 0x400000000004) write$auto(0x3, 0x0, 0xfffffdef) (async) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) sysfs$auto(0x2, 0x11, 0x0) (async) r0 = openat$auto_event_inject_fops_trace(0xffffffffffffff9c, &(0x7f0000000300)='/sys/kernel/tracing/events/vmalloc/alloc_vmap_area/inject\x00', 0x2, 0x0) pwrite64$auto(r0, 0x0, 0x52, 0x3) (async) syz_clone(0xcc81455747ec94b6, 0x0, 0x0, 0x0, 0x0, 0x0) 1.127831385s ago: executing program 2 (id=1296): openat$auto_trace_options_core_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/tracing/options/sym-userobj\x00', 0x121082, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) unshare$auto(0x40000080) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x5, 0x8000) mmap$auto(0x0, 0x4, 0xffffffffffff0000, 0x40eb1, 0x401, 0x300000000000) stat$auto(0x0, 0x0) openat$auto_drm_debugfs_entry_fops_drm_debugfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/dri/vkms/framebuffer\x00', 0x0, 0x0) openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000080), 0x80080, 0x0) r0 = openat$auto_virtual_ncidev_fops_virtual_ncidev(0xffffffffffffff9c, &(0x7f0000000040), 0x8a02, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) unshare$auto(0xf) io_uring_setup$auto(0x6, 0x0) read$auto(0x3, 0x0, 0x80) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/block/ram10/power/runtime_suspended_time\x00', 0x40c500, 0x0) close_range$auto(0x2, r0, 0x0) openat$auto_cachefiles_daemon_fops_internal(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sda\x00', 0x8201, 0x0) mmap$auto(0x2, 0x2020009, 0x2, 0xeb1, 0xfffffffffffffffa, 0xff1b) r1 = socket$nl_generic(0x10, 0x3, 0x10) fcntl$auto(r1, 0x11, 0x2) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sg0\x00', 0x8000, 0x0) ioctl$auto(0x3, 0xc0481273, 0x38) readv$auto(0x3, &(0x7f00000001c0)={0x0, 0x1000}, 0x100000007) 1.011997325s ago: executing program 3 (id=1297): openat$auto_adf_hb_cfg_fops_adf_heartbeat_dbgfs(0xffffffffffffff9c, 0x0, 0x121c01, 0x0) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) (async) mmap$auto(0x0, 0x4020009, 0xdb, 0xeb1, 0x401, 0x8000) (async) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) (async, rerun: 64) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x800008000) (rerun: 64) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) (async) futex_requeue$auto(0x0, 0x9f, 0x64, 0x101) (async) close_range$auto(0x2, 0x8, 0x0) (async) openat$auto_mousedev_fops_mousedev(0xffffffffffffff9c, &(0x7f0000001180)='/dev/input/mice\x00', 0x1a1382, 0x0) (async) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) recvmmsg$auto(0x4, &(0x7f0000000200)={{0x0, 0x4, &(0x7f0000000140)={0x0, 0x4da}, 0x4, 0x0, 0x8, 0x800}, 0x1000}, 0xffffffff, 0x0, 0x0) (async) sendmsg$auto_NETDEV_CMD_NAPI_GET(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000340)=ANY=[], 0x1c}}, 0x0) r1 = openat$auto_rfcomm_dlc_debugfs_fops_(0xffffffffffffff9c, &(0x7f0000000040), 0x2682, 0x0) read$auto_rfcomm_dlc_debugfs_fops_(r1, &(0x7f0000000080)=""/96, 0x60) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000001340), 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r2, &(0x7f0000001400)={0x0, 0x0, &(0x7f00000013c0)={&(0x7f0000001380)={0x18, r3, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@HWSIM_ATTR_DESTROY_RADIO_ON_CLOSE={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x24040000}, 0x18800) (async) syz_genetlink_get_family_id$auto_nfsd(0x0, 0xffffffffffffffff) (async) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r4 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000280)={&(0x7f0000001440)={0x20, r4, 0x0, 0x70bd2b, 0x25dfdbfb, {}, [@NL80211_ATTR_MPATH_NEXT_HOP={0x4}, @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, 0xe0}]}, 0x20}}, 0x4001) (async) close_range$auto(0x2, 0x8000, 0x0) 932.004476ms ago: executing program 4 (id=1298): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000002500), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_OVS_DP_CMD_NEW(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010026bd7020f8dbdfaa0000000000000000", @ANYRES32=0x4, @ANYBLOB="080001004866520008000200", @ANYRES32=0x9, @ANYBLOB], 0x2c}, 0x1, 0x0, 0x0, 0x801}, 0x80) r4 = syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000080), 0xffffffffffffffff) getrandom$auto(0x0, 0x6000000, 0x3) close_range$auto(0x2, r2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) bpf$auto(0x0, &(0x7f0000000040)=@bpf_attr_5={@target_ifindex=r6, 0x7f, 0x99, 0x8, 0x1, @relative_id=0x8, 0x5}, 0x92) bpf$auto(0xf, &(0x7f00000001c0)=@bpf_attr_3={0x5, 0xaa, 0x276, 0x0, 0x3, 0x2, 0x8, 0x33, 0xd, "6326bcc7c57ffed984639b375ee8d538", 0x0, 0x3, 0xffffffffffffffff, 0xfffffffc, 0x6, 0x5, 0x0, 0x9, 0x2, 0x7f, @attach_prog_fd, 0xce51, 0x0, 0x7, 0x92c, 0x8}, 0xc) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_OVS_DP_CMD_DEL(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000200)=ANY=[@ANYRES8=r3, @ANYRES16=r4, @ANYBLOB="01002abd7000fedbdf2502"], 0x38}, 0x1, 0x0, 0x0, 0x20040011}, 0x20000000) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000500)={'lo\x00', 0x0}) socket(0xa, 0x23af690fef30229, 0x9) sendmsg$auto_OVS_DP_CMD_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050029bd7001fcdbdf25000000006c0a0000", @ANYRES32=r9, @ANYBLOB="0b0001002e023ab62d240000"], 0x28}, 0x1, 0x0, 0x0, 0x4000c000}, 0x4000024) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event1\x00', 0x10000, 0x0) openat$auto_vcs_fops_vc_screen(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcsa\x00', 0x418000, 0x0) mmap$auto(0x3aad, 0x20009, 0x204000000000df, 0xeb1, 0x401, 0x8000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) r10 = openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000000), 0x40200, 0x0) getpid() ioctl$auto_dvb_demux_fops_dmxdev(r10, 0x403c6f2b, 0x0) r11 = openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) ioctl$auto_dvb_demux_fops_dmxdev(r11, 0x403c6f2b, 0x0) 509.766334ms ago: executing program 4 (id=1299): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000002440), r0) r2 = syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_OVS_FLOW_CMD_GET(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={0x124, r2, 0x1, 0x70bd25, 0x25dfdc02, {}, [@OVS_FLOW_ATTR_PROBE={0x4}, @OVS_FLOW_ATTR_KEY={0x10c, 0x1, 0x0, 0x1, [@nested={0x108, 0x10, 0x0, 0x1, [@nested={0x104, 0xf, 0x0, 0x1, [@generic="99cb9d0ac5e7ca3db865f48743213f4895a92d889bcc52161a9db0c71042415f87e61e3975a378b736c3306b1a3ee4ce8b655fea2d69b00098f23b1cb37bf85739d04fb10a01766880ff82bbcaf8ffcc48221b11ee52385f95f3ca6366d40c8f351f1acb026136efeac333f139dc70761cb1b8ab2088cd036ec759ace6a86b542d5d8052a4be21311d98044cbdc3a15d34c29150d2cf295ab86ea42b51a5745e2911d0571fa6c66dad9cb30216732f9ba61fcdae60832bfa6da7e5c55339f2d80fbc2405cdbdf77856206c82c836024e4169fc9784aeafa9debd822a1bcf47979c0c1de2e67b3f8f747ebdf057a5be35", @generic="1a327b07757bb36f5c3608656cec1929"]}]}]}]}, 0x124}, 0x1, 0x0, 0x0, 0x200400f0}, 0x800) sendmsg$auto_ETHTOOL_MSG_MODULE_GET(r0, &(0x7f0000002780)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@ETHTOOL_A_MODULE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x400c0}, 0x40004) syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000080), r0) 225.190896ms ago: executing program 0 (id=1300): mmap$auto(0x0, 0x9, 0x3, 0x8012, 0x3, 0x8000) sendfile$auto(0x6, 0x3, 0x0, 0x8000) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) unshare$auto(0x40000080) writev$auto(0x1, &(0x7f0000000100)={0x0, 0x400000000000fdef}, 0x1) madvise$auto(0x0, 0xffffffffffff0005, 0x19) munmap$auto(0x20001000, 0x7) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) mprotect$auto(0x1ffff000, 0x8000000000000002, 0x5) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/mnt\x00') futex$auto(0x0, 0x5, 0x0, 0x0, 0x0, 0xa0000001) ioctl$NS_GET_PARENT(r0, 0x8008b705, 0x0) sendmsg$auto_ETHTOOL_MSG_LINKSTATE_GET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004001}, 0x8c00) openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/console\x00', 0x788802, 0x0) r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, 0x0, 0x20342, 0x0) write$auto_snd_pcm_oss_f_reg_pcm_oss(r1, 0x0, 0x0) ioctl$auto_KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r2 = open(&(0x7f0000000000)='./cgroup.cpu/cgroup.procs\x00', 0x2000, 0xb5d1af1605322c72) r3 = open_by_handle_at$auto(r2, &(0x7f0000000040)={0x7, 0x2, "97000000000000"}, 0x800) read$auto_autofs_root_operations_autofs_i(r3, &(0x7f0000000140)=""/34, 0x22) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000008000) close_range$auto(r1, r2, 0x4) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x3, 0xa) lsm_list_modules$auto(0x0, &(0x7f0000000100)=0xbefc, 0x0) socket(0xa, 0x4, 0x11b) ioctl$auto(0x1, 0x89a0, 0x8) 0s ago: executing program 4 (id=1301): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) mprotect$auto(0x1ffff000, 0x8000000000000004, 0xd) openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f00000000c0), 0xf0040, 0x0) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) io_uring_setup$auto(0x9, 0x0) readv$auto(0x3, &(0x7f00000001c0)={0x0, 0xf7}, 0x7) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/kernel/threads-max\x00', 0x101201, 0x0) r1 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000380), 0x2201, 0x0) ioctl$auto_PPPIOCSMRU(r1, 0xc004743e, 0x0) write$auto(0x3, 0x0, 0xfffffdef) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x88542, 0x0) open(0x0, 0x4242, 0xe1d2b27bdc14aabc) openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, 0x0, 0x20001, 0x0) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000000), r0) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) read$auto(0x3, 0x0, 0x7) madvise$auto(0x0, 0xffffffffffff0001, 0x15) ioperm$auto(0x800, 0x5, 0xd) read$auto_kernel_debug_fops_orangefs_debugfs(r0, &(0x7f0000000200)=""/227, 0xe3) preadv2$auto(0x3, 0x0, 0x5, 0xffffffffffffffff, 0x7, 0x2e) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.75' (ED25519) to the list of known hosts. [ 65.776352][ T5817] cgroup: Unknown subsys name 'net' [ 65.884114][ T5817] cgroup: Unknown subsys name 'cpuset' [ 65.892693][ T5817] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 67.271241][ T5817] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 69.006042][ T5828] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 69.014606][ T5828] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 69.043028][ T5832] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 69.053363][ T5834] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 69.061970][ T5838] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 69.070521][ T5838] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 69.079205][ T5838] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 69.088586][ T5838] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 69.092765][ T5834] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 69.096956][ T5838] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 69.111316][ T5838] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 69.111473][ T5834] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 69.119347][ T5838] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 69.126201][ T5834] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 69.135008][ T5838] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 69.147240][ T5838] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 69.156054][ T5838] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 69.165435][ T5838] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 69.173058][ T5838] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 69.182699][ T5834] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 69.182831][ T5838] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 69.212556][ T5828] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 69.221458][ T5828] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 69.232954][ T5144] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 69.477309][ T5826] chnl_net:caif_netlink_parms(): no params data found [ 69.676338][ T5826] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.685307][ T5826] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.693304][ T5826] bridge_slave_0: entered allmulticast mode [ 69.700478][ T5826] bridge_slave_0: entered promiscuous mode [ 69.714754][ T5829] chnl_net:caif_netlink_parms(): no params data found [ 69.729016][ T5826] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.736618][ T5826] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.743908][ T5826] bridge_slave_1: entered allmulticast mode [ 69.750505][ T5826] bridge_slave_1: entered promiscuous mode [ 69.757676][ T5830] chnl_net:caif_netlink_parms(): no params data found [ 69.791175][ T5835] chnl_net:caif_netlink_parms(): no params data found [ 69.814719][ T5826] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.828405][ T5826] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.897010][ T5826] team0: Port device team_slave_0 added [ 69.907847][ T5826] team0: Port device team_slave_1 added [ 69.993947][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.001554][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.027933][ T5826] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.043422][ T5829] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.050527][ T5829] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.057866][ T5829] bridge_slave_0: entered allmulticast mode [ 70.064533][ T5829] bridge_slave_0: entered promiscuous mode [ 70.072636][ T5829] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.079754][ T5829] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.087118][ T5829] bridge_slave_1: entered allmulticast mode [ 70.094338][ T5829] bridge_slave_1: entered promiscuous mode [ 70.107079][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.114418][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.140427][ T5826] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.180061][ T5830] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.187364][ T5830] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.194744][ T5830] bridge_slave_0: entered allmulticast mode [ 70.201730][ T5830] bridge_slave_0: entered promiscuous mode [ 70.210427][ T5835] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.217785][ T5835] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.225096][ T5835] bridge_slave_0: entered allmulticast mode [ 70.232480][ T5835] bridge_slave_0: entered promiscuous mode [ 70.247574][ T5830] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.254988][ T5830] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.262267][ T5830] bridge_slave_1: entered allmulticast mode [ 70.268840][ T5830] bridge_slave_1: entered promiscuous mode [ 70.285773][ T5835] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.293200][ T5835] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.300438][ T5835] bridge_slave_1: entered allmulticast mode [ 70.307651][ T5835] bridge_slave_1: entered promiscuous mode [ 70.315967][ T5829] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.327560][ T5829] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.372875][ T5830] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.385360][ T5826] hsr_slave_0: entered promiscuous mode [ 70.394310][ T5826] hsr_slave_1: entered promiscuous mode [ 70.422776][ T5830] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.439154][ T5835] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.463153][ T5829] team0: Port device team_slave_0 added [ 70.479290][ T5835] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.491582][ T5830] team0: Port device team_slave_0 added [ 70.506774][ T5829] team0: Port device team_slave_1 added [ 70.521804][ T5830] team0: Port device team_slave_1 added [ 70.574258][ T5835] team0: Port device team_slave_0 added [ 70.584236][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.591675][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.625847][ T5830] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.638016][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.645050][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.671412][ T5830] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.683604][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.690809][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.717144][ T5829] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.730000][ T5835] team0: Port device team_slave_1 added [ 70.753856][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.761008][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.787041][ T5829] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.825473][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.832580][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.859710][ T5835] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.872708][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.879691][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.905767][ T5835] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.962156][ T5830] hsr_slave_0: entered promiscuous mode [ 70.968790][ T5830] hsr_slave_1: entered promiscuous mode [ 70.977785][ T5830] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 70.985808][ T5830] Cannot create hsr debugfs directory [ 71.014827][ T5829] hsr_slave_0: entered promiscuous mode [ 71.021701][ T5829] hsr_slave_1: entered promiscuous mode [ 71.030592][ T5829] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 71.038419][ T5829] Cannot create hsr debugfs directory [ 71.062782][ T5835] hsr_slave_0: entered promiscuous mode [ 71.068966][ T5835] hsr_slave_1: entered promiscuous mode [ 71.075474][ T5835] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 71.083219][ T5835] Cannot create hsr debugfs directory [ 71.161736][ T55] Bluetooth: hci0: command tx timeout [ 71.189212][ T5826] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 71.223379][ T5826] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 71.246258][ T5826] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 71.275100][ T5826] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 71.330915][ T55] Bluetooth: hci2: command tx timeout [ 71.331029][ T5832] Bluetooth: hci3: command tx timeout [ 71.337007][ T55] Bluetooth: hci1: command tx timeout [ 71.412147][ T5835] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 71.426657][ T5835] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 71.438630][ T5835] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 71.457052][ T5835] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 71.506490][ T5829] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 71.522622][ T5829] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 71.537531][ T5829] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 71.550026][ T5829] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 71.622896][ T5830] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 71.636688][ T5830] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 71.649868][ T5830] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 71.663145][ T5826] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.678916][ T5830] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 71.727993][ T5826] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.760158][ T1050] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.767483][ T1050] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.794778][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.801968][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.813049][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.819533][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.858162][ T5835] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.886409][ T5826] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 71.899296][ T5826] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 71.925418][ T5835] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.945712][ T1050] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.952905][ T1050] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.977167][ T2901] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.984338][ T2901] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.027767][ T5830] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.075060][ T5829] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.086206][ T5830] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.115042][ T1050] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.122330][ T1050] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.152358][ T1094] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.159952][ T1094] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.191580][ T5829] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.214326][ T1094] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.222048][ T1094] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.242870][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.249980][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.273824][ T5826] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.402668][ T5826] veth0_vlan: entered promiscuous mode [ 72.433229][ T5826] veth1_vlan: entered promiscuous mode [ 72.487009][ T5835] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.514601][ T5826] veth0_macvtap: entered promiscuous mode [ 72.529748][ T5826] veth1_macvtap: entered promiscuous mode [ 72.572240][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.597101][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.609219][ T5826] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.625561][ T5826] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.637594][ T5826] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.647314][ T5826] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.720164][ T5829] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.733447][ T5830] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.792921][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.809303][ T5835] veth0_vlan: entered promiscuous mode [ 72.809903][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.823518][ T5835] veth1_vlan: entered promiscuous mode [ 72.904446][ T5830] veth0_vlan: entered promiscuous mode [ 72.910287][ T5829] veth0_vlan: entered promiscuous mode [ 72.919576][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.927380][ T5835] veth0_macvtap: entered promiscuous mode [ 72.933649][ T5835] veth1_macvtap: entered promiscuous mode [ 72.947213][ T5830] veth1_vlan: entered promiscuous mode [ 72.951811][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.988918][ T5829] veth1_vlan: entered promiscuous mode [ 73.003184][ T5835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.023586][ T5835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.035915][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.053106][ T5835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.057242][ T5826] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 73.085742][ T5835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.097093][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.118013][ T5835] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.127034][ T5835] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.139048][ T5835] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.163484][ T5835] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.242088][ T55] Bluetooth: hci0: command tx timeout [ 73.249951][ T5830] veth0_macvtap: entered promiscuous mode [ 73.266920][ T5829] veth0_macvtap: entered promiscuous mode [ 73.295134][ T5829] veth1_macvtap: entered promiscuous mode [ 73.311335][ T5830] veth1_macvtap: entered promiscuous mode [ 73.344306][ T5829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.355665][ T5829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.366868][ T5829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.383684][ T5829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.402687][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.403497][ T55] Bluetooth: hci1: command tx timeout [ 73.415711][ T5832] Bluetooth: hci3: command tx timeout [ 73.417878][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.421325][ T5828] Bluetooth: hci2: command tx timeout [ 73.443074][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.464429][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.475051][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.486644][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.497262][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.509057][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.535144][ T5829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.537103][ T5891] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5'. [ 73.556844][ T5829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.567391][ T5829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.578368][ T5829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.589595][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.599748][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.610322][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.620487][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.631830][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.642471][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.653304][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.665624][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.691372][ T5829] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.700125][ T5829] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.715981][ T5829] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.726191][ T5829] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.773780][ T5830] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.783654][ T5830] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.793238][ T5830] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.805724][ T5830] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.826734][ T1050] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.840006][ T1050] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.921775][ T2901] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.934461][ T2901] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.985478][ T1050] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.999540][ T1050] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.118087][ T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.140904][ T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.158156][ T1050] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.166231][ T1094] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.180861][ T1050] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.188636][ T1094] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.487216][ T5908] tty tty46: ldisc open failed (-12), clearing slot 45 [ 74.804414][ T5916] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4'. [ 75.001303][ T5911] delete_channel: no stack [ 75.330666][ T55] Bluetooth: hci0: command tx timeout [ 75.472812][ T5930] Zero length message leads to an empty skb [ 75.493065][ T55] Bluetooth: hci1: command tx timeout [ 75.498582][ T5832] Bluetooth: hci3: command tx timeout [ 75.508550][ T5828] Bluetooth: hci2: command tx timeout [ 75.947034][ T5947] mmap: syz.3.15 (5947) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 76.398487][ T5954] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 76.999490][ T5963] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 77.401053][ T55] Bluetooth: hci0: command tx timeout [ 77.561329][ T55] Bluetooth: hci1: command tx timeout [ 77.566790][ T55] Bluetooth: hci3: command tx timeout [ 77.572373][ T5832] Bluetooth: hci2: command tx timeout [ 77.716741][ T5977] netlink: 32 bytes leftover after parsing attributes in process `syz.3.24'. [ 77.749897][ T5977] netlink: 16 bytes leftover after parsing attributes in process `syz.3.24'. [ 78.925512][ T6014] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 79.463103][ T6048] process 'syz.0.35' launched ':,' with NULL argv: empty string added [ 79.599138][ T6067] netlink: 74 bytes leftover after parsing attributes in process `syz.3.37'. [ 80.463571][ T6088] syz.2.42 uses obsolete (PF_INET,SOCK_PACKET) [ 81.460951][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 81.529041][ T6117] netlink: 32 bytes leftover after parsing attributes in process `syz.0.56'. [ 81.581939][ T6117] netlink: 16 bytes leftover after parsing attributes in process `syz.0.56'. [ 81.760395][ T6123] futex_wake_op: syz.3.49 tries to shift op by 64; fix this program [ 82.190903][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 82.410828][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 83.324331][ T6134] ======================================================= [ 83.324331][ T6134] WARNING: The mand mount option has been deprecated and [ 83.324331][ T6134] and is ignored by this kernel. Remove the mand [ 83.324331][ T6134] option from the mount to silence this warning. [ 83.324331][ T6134] ======================================================= [ 84.562703][ T6194] Process accounting resumed [ 84.576806][ T6194] kernel write not supported for file /mce/severities-coverage (pid: 6194 comm: syz.3.61) [ 84.660593][ T6195] kernel write not supported for file /mce/severities-coverage (pid: 6195 comm: syz.3.61) [ 84.685775][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 85.920226][ T6203] kernel write not supported for file /mce/severities-coverage (pid: 6203 comm: syz.3.63) [ 87.037190][ T6232] kernel write not supported for file /mce/severities-coverage (pid: 6232 comm: syz.3.68) [ 87.070893][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 87.080882][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 87.091795][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 87.116304][ T6238] netlink: 28 bytes leftover after parsing attributes in process `syz.2.71'. [ 87.166718][ T46] cfg80211: failed to load regulatory.db [ 87.326655][ T6243] kernel write not supported for file /mce/severities-coverage (pid: 6243 comm: syz.3.72) [ 87.684475][ T6255] netlink: 32 bytes leftover after parsing attributes in process `syz.2.75'. [ 87.734795][ T6255] netlink: 16 bytes leftover after parsing attributes in process `syz.2.75'. [ 87.822912][ T6248] kernel write not supported for file /mce/severities-coverage (pid: 6248 comm: syz.3.73) [ 88.292897][ T55] Bluetooth: hci3: Received unexpected HCI Event 0x00 [ 88.857702][ T6260] kernel write not supported for file /mce/severities-coverage (pid: 6260 comm: syz.3.77) [ 89.344732][ T6293] netlink: 4 bytes leftover after parsing attributes in process `syz.2.83'. [ 89.818636][ T6296] kernel write not supported for file /mce/severities-coverage (pid: 6296 comm: syz.3.82) [ 90.378676][ T6287] kernel write not supported for file /mce/severities-coverage (pid: 6287 comm: syz.3.82) [ 91.698459][ T6309] kernel write not supported for file /mce/severities-coverage (pid: 6309 comm: syz.3.86) [ 91.919911][ T6325] kernel write not supported for file /mce/severities-coverage (pid: 6325 comm: syz.3.91) [ 92.044242][ T6339] netlink: 32 bytes leftover after parsing attributes in process `syz.3.94'. [ 92.073009][ T6339] netlink: 16 bytes leftover after parsing attributes in process `syz.3.94'. [ 92.163244][ T6339] kernel write not supported for file /mce/severities-coverage (pid: 6339 comm: syz.3.94) [ 92.381228][ T6354] kernel write not supported for file /mce/severities-coverage (pid: 6354 comm: syz.3.96) [ 93.099978][ T6382] netlink: 16 bytes leftover after parsing attributes in process `syz.0.104'. [ 93.129770][ T6382] netlink: 16 bytes leftover after parsing attributes in process `syz.0.104'. [ 93.595436][ T6388] bridge0: port 3(team0) entered blocking state [ 93.602097][ T6388] bridge0: port 3(team0) entered disabled state [ 93.660939][ T6388] team0: entered allmulticast mode [ 93.666119][ T6388] team_slave_0: entered allmulticast mode [ 93.735800][ T6388] team_slave_1: entered allmulticast mode [ 93.743371][ T6388] team0: entered promiscuous mode [ 93.748481][ T6388] team_slave_0: entered promiscuous mode [ 93.757917][ T6388] team_slave_1: entered promiscuous mode [ 93.765247][ T6388] bridge0: port 3(team0) entered blocking state [ 93.771799][ T6388] bridge0: port 3(team0) entered forwarding state [ 94.158617][ T6424] netlink: 16 bytes leftover after parsing attributes in process `syz.0.115'. [ 94.190145][ T6424] netlink: 16 bytes leftover after parsing attributes in process `syz.0.115'. [ 94.916790][ T6436] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 94.939343][ T6436] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 94.962179][ T6437] rtc_cmos 00:00: Alarms can be up to one day in the future [ 95.973508][ T6469] netlink: 16 bytes leftover after parsing attributes in process `syz.3.126'. [ 95.993803][ T6469] netlink: 16 bytes leftover after parsing attributes in process `syz.3.126'. [ 97.332015][ T6509] netlink: 16 bytes leftover after parsing attributes in process `syz.1.138'. [ 97.366813][ T6509] netlink: 16 bytes leftover after parsing attributes in process `syz.1.138'. [ 97.388363][ T6505] netlink: 504 bytes leftover after parsing attributes in process `syz.2.136'. [ 99.018512][ T6537] kexec: Could not allocate control_code_buffer [ 99.581942][ T6564] netlink: zone id is out of range [ 99.602308][ T6564] netlink: zone id is out of range [ 99.630991][ T6564] netlink: zone id is out of range [ 99.720908][ T6564] netlink: zone id is out of range [ 99.726072][ T6564] netlink: zone id is out of range [ 99.731848][ T6564] netlink: zone id is out of range [ 99.736993][ T6564] netlink: zone id is out of range [ 99.742564][ T6564] netlink: zone id is out of range [ 99.747741][ T6564] netlink: zone id is out of range [ 99.753746][ T6564] netlink: zone id is out of range [ 100.812363][ T6590] netlink: 326 bytes leftover after parsing attributes in process `syz.2.158'. [ 101.353370][ T6612] ptrace attach of "./syz-executor exec"[5826] was attempted by "[Ɉ8Z)ڳvvq1de{vFOAQ%($QL_zFh΁\x07g~I7MgX8Ō^Zgw`Ckn)?ŁԐeGA\x0b\x0a$e݉Hf4⃣Jg#\x1bѨDHW?\x0aN4{*,=lmwn_\x22.ém$@h^L4<wdpȞl+a 'o61^9:3蒙U\x1b<$D\x22U?i\x1b\x0c`2#z#Ncp4:90y<;׾s:DЃMUKc,y+h\x09\x22*BZ',LBdY_+xū]>\x5c|2$\x0a/-!r;`|z?\x09|\x09EXJ0dzn5\x0a\x07\x0d+{\x0dssHW7Kiw4F{Frv݉\x0bDd.W,Ikx\x0b;[\x5cz>0 OFel}TԦD\x0dGl\x0bbLd}:P+MtQvY!!\x0cHp>'َ+0j'W5I$&Q\x5cm,A23Jg&iͱWȩZ(\x0bxy)BOz/DnTaɘ2: c[[zx\x5csc$raٛ[&lQRܥ7p_(WC& [ 101.596643][ T6615] netlink: 16 bytes leftover after parsing attributes in process `syz.2.164'. [ 101.807893][ T6615] netlink: 16 bytes leftover after parsing attributes in process `syz.2.164'. [ 102.822099][ T6647] netlink: 28 bytes leftover after parsing attributes in process `syz.0.172'. [ 103.525423][ T6654] netlink: 330 bytes leftover after parsing attributes in process `syz.3.175'. [ 105.700721][ T29] audit: type=1800 audit(1736315958.711:2): pid=6711 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.187" name="dbroot" dev="configfs" ino=10190 res=0 errno=0 [ 105.700984][ T6700] netlink: 28 bytes leftover after parsing attributes in process `syz.3.184'. [ 105.912684][ T6700] netdevsim netdevsim3 netdevsim2: entered allmulticast mode [ 106.648772][ T6743] netlink: 32 bytes leftover after parsing attributes in process `syz.3.195'. [ 106.730179][ T6747] netlink: 8 bytes leftover after parsing attributes in process `syz.1.196'. [ 107.471773][ T6770] netlink: 32 bytes leftover after parsing attributes in process `syz.2.202'. [ 107.506802][ T6770] netlink: 16 bytes leftover after parsing attributes in process `syz.2.202'. [ 107.847685][ T6773] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 107.872464][ T6773] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 109.625746][ T6826] sd 0:0:1:0: PR command failed: 1026 [ 109.641313][ T6826] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 109.661312][ T6826] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 110.170400][ T6841] netlink: 176 bytes leftover after parsing attributes in process `syz.0.215'. [ 110.278263][ T6841] netlink: 28 bytes leftover after parsing attributes in process `syz.0.215'. [ 111.075228][ T6858] netlink: 4 bytes leftover after parsing attributes in process `syz.1.217'. [ 111.123543][ T6864] ima: policy update failed [ 111.136517][ T29] audit: type=1807 audit(1736315964.141:3): UNKNOWN=0"]$|1j0B|dӉO+/xWӦ^gq%ḦrO res=0 [ 111.179319][ T29] audit: type=1802 audit(1736315964.141:4): pid=6864 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.0.220" res=0 errno=0 [ 111.230728][ T29] audit: type=1802 audit(1736315964.141:5): pid=6864 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.0.220" res=0 errno=0 [ 112.525928][ T6886] bridge0: port 3(team0) entered blocking state [ 112.570870][ T6886] bridge0: port 3(team0) entered disabled state [ 112.590934][ T6886] team0: entered allmulticast mode [ 112.599706][ T6886] team_slave_0: entered allmulticast mode [ 112.620714][ T6886] team_slave_1: entered allmulticast mode [ 112.644690][ T6886] team0: entered promiscuous mode [ 112.699729][ T6886] team_slave_0: entered promiscuous mode [ 112.710821][ T6886] team_slave_1: entered promiscuous mode [ 112.741491][ T6886] bridge0: port 3(team0) entered blocking state [ 112.747891][ T6886] bridge0: port 3(team0) entered forwarding state [ 114.856358][ T6918] netlink: 32 bytes leftover after parsing attributes in process `syz.3.229'. [ 114.866686][ T6918] netlink: 16 bytes leftover after parsing attributes in process `syz.3.229'. [ 114.983742][ T6925] netlink: 28 bytes leftover after parsing attributes in process `syz.2.232'. [ 115.039407][ T6925] vxcan1: entered promiscuous mode [ 115.149977][ T6929] bridge0: port 3(team0) entered blocking state [ 115.181083][ T6929] bridge0: port 3(team0) entered disabled state [ 115.187837][ T6929] team0: entered allmulticast mode [ 115.204791][ T6929] team_slave_0: entered allmulticast mode [ 115.212509][ T6929] team_slave_1: entered allmulticast mode [ 115.232362][ T6929] team0: entered promiscuous mode [ 115.237520][ T6929] team_slave_0: entered promiscuous mode [ 115.275616][ T6929] team_slave_1: entered promiscuous mode [ 115.305639][ T6929] bridge0: port 3(team0) entered blocking state [ 115.312094][ T6929] bridge0: port 3(team0) entered forwarding state [ 115.372013][ T6933] netlink: 24 bytes leftover after parsing attributes in process `syz.0.235'. [ 117.144474][ T6978] netlink: 16 bytes leftover after parsing attributes in process `syz.2.242'. [ 117.334842][ T6992] netlink: 28 bytes leftover after parsing attributes in process `syz.3.246'. [ 117.384369][ T6992] vxcan1: entered promiscuous mode [ 117.876808][ T6987] netlink: 28 bytes leftover after parsing attributes in process `syz.2.245'. [ 118.354189][ T7018] netlink: 16 bytes leftover after parsing attributes in process `syz.1.253'. [ 120.158770][ T7049] tty tty56: ldisc open failed (-12), clearing slot 55 [ 120.255023][ T7054] netlink: 16 bytes leftover after parsing attributes in process `syz.1.264'. [ 120.403917][ T7058] netlink: 252 bytes leftover after parsing attributes in process `syz.0.266'. [ 120.469902][ T7058] netlink: 252 bytes leftover after parsing attributes in process `syz.0.266'. [ 120.585151][ T7067] netlink: 4 bytes leftover after parsing attributes in process `syz.3.269'. [ 120.702379][ T7064] netlink: 8 bytes leftover after parsing attributes in process `syz.1.268'. [ 121.351774][ T7076] ima: policy update failed [ 121.440017][ T29] audit: type=1807 audit(1736315974.361:6): UNKNOWN=0"]$|1j0B|dӉO+/xWӦ^gq%ḦrO res=0 [ 121.460882][ T29] audit: type=1802 audit(1736315974.361:7): pid=7076 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.2.272" res=0 errno=0 [ 121.500665][ T29] audit: type=1802 audit(1736315974.371:8): pid=7076 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.2.272" res=0 errno=0 [ 126.022211][ T7157] device-mapper: ioctl: Invalid ioctl structure: uuid , name , dev 400008000010006 [ 126.851388][ T7150] netlink: 334 bytes leftover after parsing attributes in process `syz.3.290'. [ 129.123962][ T7195] netlink: 4 bytes leftover after parsing attributes in process `syz.1.303'. [ 131.541188][ T7231] netlink: 16 bytes leftover after parsing attributes in process `syz.0.311'. [ 133.255962][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.263200][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.281177][ T7283] ptm ptm1: ldisc open failed (-12), clearing slot 1 [ 135.286108][ T7305] netlink: 252 bytes leftover after parsing attributes in process `syz.2.330'. [ 135.297787][ T7305] netlink: 252 bytes leftover after parsing attributes in process `syz.2.330'. [ 136.811946][ T7337] netlink: 28 bytes leftover after parsing attributes in process `syz.3.341'. [ 139.095686][ T7408] netlink: 16 bytes leftover after parsing attributes in process `syz.1.352'. [ 139.460393][ T7413] netlink: 330 bytes leftover after parsing attributes in process `syz.1.354'. [ 140.795943][ T7429] netlink: 8 bytes leftover after parsing attributes in process `syz.2.359'. [ 141.715025][ T7446] mkiss: ax0: crc mode is auto. [ 141.927104][ T7438] netlink: 8 bytes leftover after parsing attributes in process `syz.3.361'. [ 145.208501][ T7540] bridge0: port 3(team0) entered blocking state [ 145.230734][ T7540] bridge0: port 3(team0) entered disabled state [ 145.237224][ T7540] team0: entered allmulticast mode [ 145.327320][ T7540] team_slave_0: entered allmulticast mode [ 145.363613][ T7540] team_slave_1: entered allmulticast mode [ 145.417330][ T7540] team0: entered promiscuous mode [ 145.429843][ T7540] team_slave_0: entered promiscuous mode [ 145.458399][ T7540] team_slave_1: entered promiscuous mode [ 145.474306][ T7540] bridge0: port 3(team0) entered blocking state [ 145.480773][ T7540] bridge0: port 3(team0) entered forwarding state [ 146.000859][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 146.464871][ T7558] Line length is too long: Should be less than 4094 [ 147.227903][ T7557] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 147.239307][ T7557] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 147.277240][ T7557] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 147.299855][ T7557] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 147.316149][ T7557] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 147.341702][ T7557] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 147.368193][ T7557] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 147.383520][ T7557] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 147.411204][ T7557] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 147.432476][ T7557] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 147.439065][ T7557] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 147.527341][ T7557] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 147.919744][ T7592] device-mapper: ioctl: ioctl interface mismatch: kernel(4.48.0), user(0.0.0), cmd(5) [ 148.520745][ T5832] Bluetooth: hci0: command 0x0c1a tx timeout [ 149.330737][ T5832] Bluetooth: hci1: command 0x0c1a tx timeout [ 149.400695][ T5832] Bluetooth: hci2: command 0x0c1a tx timeout [ 149.490810][ T5832] Bluetooth: hci3: command 0x0c1a tx timeout [ 149.780211][ T7630] netlink: 8 bytes leftover after parsing attributes in process `syz.2.401'. [ 149.912405][ T7636] netlink: 12706 bytes leftover after parsing attributes in process `syz.2.401'. [ 150.586846][ T7649] netlink: 16 bytes leftover after parsing attributes in process `syz.2.407'. [ 150.600949][ T5832] Bluetooth: hci0: command 0x0c1a tx timeout [ 151.410900][ T5832] Bluetooth: hci1: command 0x0c1a tx timeout [ 151.493941][ T5832] Bluetooth: hci2: command 0x0c1a tx timeout [ 151.560959][ T5832] Bluetooth: hci3: command 0x0c1a tx timeout [ 152.695584][ T5832] Bluetooth: hci0: command 0x0c1a tx timeout [ 153.497266][ T5832] Bluetooth: hci1: command 0x0c1a tx timeout [ 153.575462][ T5832] Bluetooth: hci2: command 0x0c1a tx timeout [ 153.660851][ T5832] Bluetooth: hci3: command 0x0c1a tx timeout [ 157.793466][ T7805] netlink: 4 bytes leftover after parsing attributes in process `syz.1.442'. [ 157.840809][ T7804] net_ratelimit: 182 callbacks suppressed [ 157.840830][ T7804] netlink: zone id is out of range [ 157.978640][ T7804] netlink: zone id is out of range [ 158.055850][ T7804] netlink: set zone limit has 8 unknown bytes [ 158.354789][ T7819] netlink: 16 bytes leftover after parsing attributes in process `syz.3.445'. [ 159.664441][ T29] audit: type=1326 audit(4294967314.180:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7862 comm="syz.3.457" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f3f30f85d29 code=0x0 [ 159.713713][ T7860] netlink: 16 bytes leftover after parsing attributes in process `syz.1.456'. [ 161.241413][ T7911] netlink: 16 bytes leftover after parsing attributes in process `syz.0.468'. [ 161.571514][ T7925] netlink: 28 bytes leftover after parsing attributes in process `syz.0.470'. [ 162.400789][ T7954] netlink: 16 bytes leftover after parsing attributes in process `syz.1.478'. [ 163.086780][ T7981] netlink: 342 bytes leftover after parsing attributes in process `syz.0.485'. [ 163.598491][ T8001] netlink: 16 bytes leftover after parsing attributes in process `syz.3.490'. [ 166.034872][ T8056] netlink: 16 bytes leftover after parsing attributes in process `syz.0.500'. [ 167.311824][ T8090] netlink: 16 bytes leftover after parsing attributes in process `syz.3.511'. [ 168.095807][ T8110] netlink: 338 bytes leftover after parsing attributes in process `syz.3.517'. [ 168.700894][ T8118] block mtdblock0: the capability attribute has been deprecated. [ 169.278413][ T8135] netlink: 16 bytes leftover after parsing attributes in process `syz.2.523'. [ 169.499300][ T8137] syz.2.524 (8137): drop_caches: 0 [ 169.532285][ T8137] syz.2.524 (8137): drop_caches: 0 [ 170.365905][ T8166] netlink: 326 bytes leftover after parsing attributes in process `syz.0.530'. [ 170.670759][ T8173] netlink: 16 bytes leftover after parsing attributes in process `syz.1.533'. [ 171.289961][ T8182] netlink: 28 bytes leftover after parsing attributes in process `syz.1.536'. [ 171.333648][ T8182] ipvlan0: entered promiscuous mode [ 171.338958][ T8182] ipvlan0: entered allmulticast mode [ 171.345151][ T8182] veth0_vlan: entered allmulticast mode [ 172.538056][ T8212] netlink: 16 bytes leftover after parsing attributes in process `syz.0.544'. [ 172.962917][ T8222] vivid-013: ================= START STATUS ================= [ 173.013344][ T8222] vivid-013: Generate PTS: true [ 173.019016][ T8222] vivid-013: Generate SCR: true [ 173.030934][ T8222] tpg source WxH: 640x360 (Y'CbCr) [ 173.046826][ T8222] tpg field: 1 [ 173.050323][ T8222] tpg crop: 640x360@0x0 [ 173.060936][ T8222] tpg compose: 640x360@0x0 [ 173.067197][ T8222] tpg colorspace: 8 [ 173.080758][ T8222] tpg transfer function: 0/0 [ 173.085501][ T8222] tpg Y'CbCr encoding: 0/0 [ 173.089948][ T8222] tpg quantization: 0/0 [ 173.103858][ T8222] tpg RGB range: 0/2 [ 173.118908][ T8222] vivid-013: ================== END STATUS ================== [ 174.481052][ T8248] netlink: 12 bytes leftover after parsing attributes in process `syz.3.554'. [ 174.592564][ T8248] netlink: 28 bytes leftover after parsing attributes in process `syz.3.554'. [ 174.618180][ T8248] macvlan1: entered promiscuous mode [ 176.460135][ T8290] netlink: 4 bytes leftover after parsing attributes in process `syz.1.565'. [ 177.952672][ T8300] netlink: 'syz.0.568': attribute type 4 has an invalid length. [ 177.976967][ T8307] netlink: 'syz.0.568': attribute type 4 has an invalid length. [ 180.988367][ T8378] Invalid ELF header magic: != ELF [ 183.039386][ T8404] netlink: 342 bytes leftover after parsing attributes in process `syz.1.586'. [ 183.405700][ T8408] do_dccp_setsockopt: sockopt(PACKET_SIZE) is deprecated: fix your app [ 183.527799][ T8409] kafs: addr_prefs: Invalid Command [ 184.013010][ T8420] netlink: 16 bytes leftover after parsing attributes in process `syz.3.589'. [ 184.498978][ T8433] capability: warning: `syz.3.592' uses 32-bit capabilities (legacy support in use) [ 185.939276][ T8473] netlink: 16 bytes leftover after parsing attributes in process `syz.2.600'. [ 188.636029][ T8549] misc userio: No port type given on /dev/userio [ 188.891957][ T8559] netlink: 342 bytes leftover after parsing attributes in process `syz.2.622'. [ 189.520842][ T0] NOHZ tick-stop error: local softirq work is pending, handler #242!!! [ 189.767581][ T8569] Process accounting resumed [ 189.803043][ T8598] aoe: can't write to that file. [ 194.698692][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.705144][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 197.673873][ T8741] netlink: 330 bytes leftover after parsing attributes in process `syz.2.664'. [ 198.680184][ T8768] netlink: 4 bytes leftover after parsing attributes in process `syz.1.670'. [ 199.721822][ T8784] can: request_module (can-proto-3) failed. [ 199.812870][ T8783] netlink: 9544 bytes leftover after parsing attributes in process `syz.0.672'. [ 200.710944][ T8802] netlink: 12 bytes leftover after parsing attributes in process `syz.0.675'. [ 202.711064][ T8816] netlink: 322 bytes leftover after parsing attributes in process `syz.0.680'. [ 209.397876][ T8904] netlink: 16 bytes leftover after parsing attributes in process `syz.0.694'. [ 210.001020][ T29] audit: type=1800 audit(4294967364.460:10): pid=8909 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.695" name="members" dev="configfs" ino=20022 res=0 errno=0 [ 210.156553][ T8914] Invalid ELF header magic: != ELF [ 212.901462][ T8960] vivid-013: ================= START STATUS ================= [ 212.926613][ T8960] vivid-013: Generate PTS: true [ 212.950618][ T8960] vivid-013: Generate SCR: true [ 212.955568][ T8960] tpg source WxH: 640x360 (Y'CbCr) [ 213.008457][ T8960] tpg field: 1 [ 213.020671][ T8960] tpg crop: 640x360@0x0 [ 213.024935][ T8960] tpg compose: 640x360@0x0 [ 213.068411][ T8960] tpg colorspace: 8 [ 213.141834][ T8960] tpg transfer function: 0/0 [ 213.146482][ T8960] tpg Y'CbCr encoding: 0/0 [ 213.186299][ T8960] tpg quantization: 0/0 [ 213.212268][ T8960] tpg RGB range: 0/2 [ 213.216214][ T8960] vivid-013: ================== END STATUS ================== [ 213.243938][ T8965] raw_sendmsg: syz.3.707 forgot to set AF_INET. Fix it! [ 213.588280][ T8975] delete_channel: no stack [ 213.608115][ T8975] delete_channel: no stack [ 213.626238][ T8975] delete_channel: no stack [ 213.716231][ T8975] delete_channel: no stack [ 213.731585][ T8975] delete_channel: no stack [ 213.770401][ T8975] delete_channel: no stack [ 213.785859][ T8975] delete_channel: no stack [ 213.809562][ T8975] delete_channel: no stack [ 213.827639][ T8975] delete_channel: no stack [ 213.860915][ T8975] delete_channel: no stack [ 213.892443][ T8975] delete_channel: no stack [ 213.927556][ T8975] delete_channel: no stack [ 213.951032][ T8975] delete_channel: no stack [ 213.971557][ T8975] delete_channel: no stack [ 213.990937][ T8975] delete_channel: no stack [ 214.010902][ T8975] delete_channel: no stack [ 214.036259][ T8975] delete_channel: no stack [ 214.048095][ T8975] delete_channel: no stack [ 214.068661][ T8975] delete_channel: no stack [ 214.088950][ T8975] delete_channel: no stack [ 214.106493][ T8975] delete_channel: no stack [ 214.126811][ T8975] delete_channel: no stack [ 214.147360][ T8975] delete_channel: no stack [ 214.167593][ T8975] delete_channel: no stack [ 214.187743][ T8975] delete_channel: no stack [ 214.208092][ T8975] delete_channel: no stack [ 214.228793][ T8975] delete_channel: no stack [ 214.249820][ T8975] delete_channel: no stack [ 214.269537][ T8975] delete_channel: no stack [ 214.287308][ T8975] delete_channel: no stack [ 214.309169][ T8975] delete_channel: no stack [ 214.329421][ T8975] delete_channel: no stack [ 214.347982][ T8975] delete_channel: no stack [ 215.116014][ T8995] netlink: 28 bytes leftover after parsing attributes in process `syz.3.714'. [ 215.242690][ T8995] bridge0: entered promiscuous mode [ 215.251877][ T5144] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 215.262277][ T5144] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 215.270316][ T5144] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 215.279575][ T5144] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 215.290259][ T5144] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 215.491105][ T5834] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 216.374546][ T9003] chnl_net:caif_netlink_parms(): no params data found [ 217.599536][ T5834] Bluetooth: hci4: command tx timeout [ 217.626164][ T9003] bridge0: port 1(bridge_slave_0) entered blocking state [ 217.654083][ T9003] bridge0: port 1(bridge_slave_0) entered disabled state [ 217.661829][ T9003] bridge_slave_0: entered allmulticast mode [ 217.862950][ T9003] bridge_slave_0: entered promiscuous mode [ 217.871632][ T9003] bridge0: port 2(bridge_slave_1) entered blocking state [ 217.878777][ T9003] bridge0: port 2(bridge_slave_1) entered disabled state [ 217.907362][ T9003] bridge_slave_1: entered allmulticast mode [ 217.921889][ T9003] bridge_slave_1: entered promiscuous mode [ 218.112307][ T9003] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 218.169198][ T9003] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 218.305871][ T9003] team0: Port device team_slave_0 added [ 218.336055][ T9003] team0: Port device team_slave_1 added [ 218.432103][ T9003] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 218.449333][ T9003] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 218.553194][ T9003] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 218.606306][ T9003] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 218.660674][ T9003] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 218.731332][ T9003] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 218.849530][ T9035] netlink: 342 bytes leftover after parsing attributes in process `syz.0.720'. [ 218.876365][ T9003] hsr_slave_0: entered promiscuous mode [ 218.888745][ T9034] hugetlbfs: syz.0.720 (9034): Using mlock ulimits for SHM_HUGETLB is obsolete [ 218.912807][ T9003] hsr_slave_1: entered promiscuous mode [ 218.939618][ T9003] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 218.965718][ T9003] Cannot create hsr debugfs directory [ 219.236898][ T9038] vivid-013: ================= START STATUS ================= [ 219.285697][ T9038] vivid-013: Generate PTS: true [ 219.310796][ T9038] vivid-013: Generate SCR: true [ 219.332233][ T9038] tpg source WxH: 640x360 (Y'CbCr) [ 219.364368][ T9038] tpg field: 1 [ 219.367800][ T9038] tpg crop: 640x360@0x0 [ 219.393405][ T9038] tpg compose: 640x360@0x0 [ 219.418488][ T9038] tpg colorspace: 8 [ 219.432664][ T9038] tpg transfer function: 0/0 [ 219.437332][ T9038] tpg Y'CbCr encoding: 0/0 [ 219.485336][ T9003] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 219.503976][ T9038] tpg quantization: 0/0 [ 219.518526][ T9003] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 219.536580][ T9038] tpg RGB range: 0/2 [ 219.540522][ T9038] vivid-013: ================== END STATUS ================== [ 219.559567][ T9003] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 219.577564][ T9003] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 219.641204][ T5834] Bluetooth: hci4: command tx timeout [ 219.934589][ T9003] 8021q: adding VLAN 0 to HW filter on device bond0 [ 219.998945][ T9003] 8021q: adding VLAN 0 to HW filter on device team0 [ 220.044329][ T8865] bridge0: port 1(bridge_slave_0) entered blocking state [ 220.051590][ T8865] bridge0: port 1(bridge_slave_0) entered forwarding state [ 220.064920][ T8768] Process accounting paused [ 220.256367][ T8884] bridge0: port 2(bridge_slave_1) entered blocking state [ 220.264022][ T8884] bridge0: port 2(bridge_slave_1) entered forwarding state [ 220.763727][ T9003] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 221.312759][ T9003] veth0_vlan: entered promiscuous mode [ 221.351368][ T9003] veth1_vlan: entered promiscuous mode [ 221.445611][ T9003] veth0_macvtap: entered promiscuous mode [ 221.477772][ T9003] veth1_macvtap: entered promiscuous mode [ 221.563349][ T9003] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 221.605836][ T9003] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 221.644293][ T9003] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 221.685452][ T9003] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 221.720764][ T5834] Bluetooth: hci4: command tx timeout [ 221.730990][ T9003] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 221.803133][ T9003] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 221.813121][ T9003] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 221.814345][ T9074] netlink: 4 bytes leftover after parsing attributes in process `syz.2.727'. [ 221.823620][ T9003] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 221.824933][ T9003] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 221.902855][ T9003] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 221.913596][ T9003] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 221.923544][ T9003] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 221.934046][ T9003] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 221.943952][ T9003] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 221.954461][ T9003] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 221.964433][ T9003] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 221.974950][ T9003] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 221.986349][ T9003] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 222.022738][ T9003] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.031571][ T9003] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.040294][ T9003] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.049247][ T9003] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.180336][ T8874] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 222.222558][ T8874] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 222.276764][ T8886] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 222.309995][ T8886] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 223.800758][ T5834] Bluetooth: hci4: command tx timeout [ 224.284249][ T9143] netlink: 12 bytes leftover after parsing attributes in process `syz.3.741'. [ 225.492985][ T9174] netlink: 146 bytes leftover after parsing attributes in process `syz.2.746'. [ 230.866905][ T9280] netlink: 12 bytes leftover after parsing attributes in process `syz.3.770'. [ 231.532375][ T9284] netlink: 16 bytes leftover after parsing attributes in process `syz.0.771'. [ 232.472803][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 234.854130][ T9354] netlink: 330 bytes leftover after parsing attributes in process `syz.4.786'. [ 235.950044][ T9376] netlink: 12 bytes leftover after parsing attributes in process `syz.4.792'. [ 235.967667][ T9376] netlink: 16 bytes leftover after parsing attributes in process `syz.4.792'. [ 237.172939][ T9394] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 237.192376][ T9394] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 237.218059][ T9394] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 237.258460][ T9394] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 237.265017][ T9394] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 237.295611][ T9394] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 237.770504][ T9416] netlink: 12 bytes leftover after parsing attributes in process `syz.2.802'. [ 237.832071][ T9416] netlink: 16 bytes leftover after parsing attributes in process `syz.2.802'. [ 239.240907][ T5834] Bluetooth: hci3: command 0x0c1a tx timeout [ 239.247243][ T5832] Bluetooth: hci1: command 0x0c1a tx timeout [ 239.254796][ T5144] Bluetooth: hci0: command 0x0c1a tx timeout [ 239.320759][ T5144] Bluetooth: hci4: command 0x0c1a tx timeout [ 239.471640][ T9453] mkiss: ax0: crc mode is auto. [ 240.811653][ T9473] netlink: 342 bytes leftover after parsing attributes in process `syz.2.820'. [ 241.351772][ T9479] netlink: 'syz.3.822': attribute type 3 has an invalid length. [ 241.382471][ T9479] netlink: 16 bytes leftover after parsing attributes in process `syz.3.822'. [ 241.403026][ T5144] Bluetooth: hci4: command 0x0c1a tx timeout [ 242.623231][ T9508] netlink: 16 bytes leftover after parsing attributes in process `syz.4.827'. [ 243.480889][ T5144] Bluetooth: hci4: command 0x0c1a tx timeout [ 243.614286][ T9528] nfs: Unknown parameter 'w`_I+; HY Lu>>uh*C<+ ' [ 244.031609][ T9533] netlink: 16 bytes leftover after parsing attributes in process `syz.3.831'. [ 244.591456][ T9551] netlink: 12 bytes leftover after parsing attributes in process `syz.0.834'. [ 246.834122][ T9595] netlink: 12 bytes leftover after parsing attributes in process `syz.0.846'. [ 249.027041][ T9626] : entered promiscuous mode [ 255.181604][ T9722] netlink: 28 bytes leftover after parsing attributes in process `syz.2.875'. [ 255.575748][ T9722] geneve1: entered allmulticast mode [ 256.123707][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.130365][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.596192][ T9737] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 256.602847][ T9737] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 256.630983][ T9737] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 256.667990][ T9737] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 257.062330][ T9763] bridge0: port 3(team0) entered blocking state [ 257.080683][ T9763] bridge0: port 3(team0) entered disabled state [ 257.126691][ T9763] team0: entered allmulticast mode [ 257.150810][ T9763] team_slave_0: entered allmulticast mode [ 257.181037][ T9763] team_slave_1: entered allmulticast mode [ 257.188338][ T9763] team0: entered promiscuous mode [ 257.240153][ T9766] could not allocate digest TFM handle binfmt_misc [ 257.264840][ T9763] team_slave_0: entered promiscuous mode [ 257.335712][ T9763] team_slave_1: entered promiscuous mode [ 257.371314][ T9763] bridge0: port 3(team0) entered blocking state [ 257.377698][ T9763] bridge0: port 3(team0) entered forwarding state [ 257.939213][ T5144] Bluetooth: hci0: command 0x0c1a tx timeout [ 258.706421][ T5144] Bluetooth: hci4: command 0x0c1a tx timeout [ 258.712677][ T5144] Bluetooth: hci3: command 0x0c1a tx timeout [ 258.718727][ T5144] Bluetooth: hci1: command 0x0c1a tx timeout [ 258.875369][ T9785] ptm ptm8: ldisc open failed (-12), clearing slot 8 [ 259.979904][ T9806] netlink: 648 bytes leftover after parsing attributes in process `syz.0.893'. [ 260.131091][ T9806] netlink: 16 bytes leftover after parsing attributes in process `syz.0.893'. [ 260.376112][ T9802] kexec: Could not allocate control_code_buffer [ 260.941773][ T9818] netlink: 'syz.4.896': attribute type 19 has an invalid length. [ 260.978089][ T9818] netlink: 310 bytes leftover after parsing attributes in process `syz.4.896'. [ 261.087625][ T9820] nfsd: Unknown parameter '_؊[V)K*q'JV*Plr- la1OzF&W C:+/g' [ 262.903467][ T9856] netlink: 28 bytes leftover after parsing attributes in process `syz.3.905'. [ 262.972532][ T9856] netlink: 342 bytes leftover after parsing attributes in process `syz.3.905'. [ 263.830050][ T9852] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 264.325103][ T29] audit: type=1326 audit(4294967418.840:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9883 comm="syz.2.912" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9bd3985d29 code=0x0 [ 265.719246][ T9907] Process accounting resumed [ 268.212567][ T9941] netlink: 28 bytes leftover after parsing attributes in process `syz.3.924'. [ 268.696123][ T9954] netlink: 334 bytes leftover after parsing attributes in process `syz.4.928'. [ 269.729754][ T9979] nbd: illegal input index -33554433 [ 269.809393][ T9977] vivid-013: ================= START STATUS ================= [ 269.838942][ T9977] vivid-013: Generate PTS: true [ 269.851062][ T9977] vivid-013: Generate SCR: true [ 269.867109][ T9977] tpg source WxH: 640x360 (Y'CbCr) [ 269.899355][ T9977] tpg field: 1 [ 269.903022][ T9977] tpg crop: 640x360@0x0 [ 269.907723][ T9977] tpg compose: 640x360@0x0 [ 269.932084][ T9977] tpg colorspace: 8 [ 269.935943][ T9977] tpg transfer function: 0/0 [ 269.940637][ T9977] tpg Y'CbCr encoding: 0/0 [ 269.960850][ T9977] tpg quantization: 0/0 [ 269.965108][ T9977] tpg RGB range: 0/2 [ 269.969027][ T9977] vivid-013: ================== END STATUS ================== [ 270.192424][ T9991] sd 0:0:1:0: PR command failed: 1026 [ 270.197895][ T9991] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 270.216138][ T9991] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 270.250912][ T9990] netlink: 8 bytes leftover after parsing attributes in process `syz.2.935'. [ 270.298772][ T9998] netlink: 32 bytes leftover after parsing attributes in process `syz.2.935'. [ 270.312677][ T9994] netlink: 32 bytes leftover after parsing attributes in process `syz.2.935'. [ 272.888570][T10023] Invalid ELF header magic: != ELF [ 273.572173][T10028] netlink: 28 bytes leftover after parsing attributes in process `syz.4.944'. [ 274.083670][T10035] could not allocate digest TFM handle binfmt_misc [ 274.299241][T10049] Invalid ELF header magic: != ELF [ 276.433845][T10028] syz.4.944 (10028) used greatest stack depth: 19120 bytes left [ 277.987222][T10113] netlink: 342 bytes leftover after parsing attributes in process `syz.3.964'. [ 278.531347][T10130] netlink: 12 bytes leftover after parsing attributes in process `syz.2.970'. [ 278.603612][T10130] netlink: 8 bytes leftover after parsing attributes in process `syz.2.970'. [ 280.613535][T10159] sctp: [Deprecated]: syz.0.968 (pid 10159) Use of struct sctp_assoc_value in delayed_ack socket option. [ 280.613535][T10159] Use struct sctp_sack_info instead [ 281.732432][T10185] netlink: 12 bytes leftover after parsing attributes in process `syz.3.981'. [ 281.766197][T10185] netlink: 8 bytes leftover after parsing attributes in process `syz.3.981'. [ 281.781424][T10188] syz.4.982(10188): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 281.887495][T10190] netlink: 8 bytes leftover after parsing attributes in process `syz.4.982'. [ 282.679511][T10201] random: crng reseeded on system resumption [ 282.800832][T10203] netlink: 28 bytes leftover after parsing attributes in process `syz.4.984'. [ 282.938741][T10210] netlink: 342 bytes leftover after parsing attributes in process `syz.4.984'. [ 283.921269][T10226] nbd: socks must be embedded in a SOCK_ITEM attr [ 283.928917][T10226] block nbd2: shutting down sockets syzkaller syzkaller login: [ 286.138664][T10265] netlink: 146 bytes leftover after parsing attributes in process `syz.2.998'. [ 287.922011][T10285] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1004'. [ 289.176279][T10313] syz.2.1012 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 289.233877][T10316] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1013'. [ 289.935125][T10332] Invalid ELF header magic: != ELF [ 293.454039][T10347] netlink: 'syz.3.1019': attribute type 2 has an invalid length. [ 293.506978][T10347] netlink: 674 bytes leftover after parsing attributes in process `syz.3.1019'. [ 295.342598][T10392] Invalid ELF header magic: != ELF [ 297.145051][T10437] netlink: 330 bytes leftover after parsing attributes in process `syz.0.1042'. [ 297.276610][T10437] : renamed from hsr0 (while UP) [ 297.811355][T10445] netlink: 342 bytes leftover after parsing attributes in process `syz.4.1045'. [ 297.950731][T10448] binder: 10447:10448 ioctl 400c620e 9 returned -14 [ 303.270816][T10523] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1061'. [ 305.673302][T10571] netlink: 330 bytes leftover after parsing attributes in process `syz.4.1075'. [ 305.710717][T10571] : renamed from hsr0 (while UP) [ 306.083675][T10566] kernel read not supported for file /#)-\"[} (pid: 10566 comm: syz.2.1074) [ 306.118487][ T29] audit: type=1800 audit(4294967460.630:12): pid=10566 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1074" name=23292D5C225B7D dev="mqueue" ino=27232 res=0 errno=0 [ 306.488699][T10579] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1078'. [ 306.869793][T10579] hsr_slave_1 (unregistering): left promiscuous mode [ 307.641832][T10593] netlink: 146 bytes leftover after parsing attributes in process `syz.2.1081'. [ 309.721092][T10616] kernel read not supported for file /#)-\"[} (pid: 10616 comm: syz.4.1087) [ 309.770857][ T29] audit: type=1800 audit(4294967464.290:13): pid=10616 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1087" name=23292D5C225B7D dev="mqueue" ino=27353 res=0 errno=0 [ 310.662536][T10626] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 310.668956][T10626] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 310.675435][T10626] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 310.699935][T10626] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 312.682998][ T5834] Bluetooth: hci3: command 0x0c1a tx timeout [ 312.683555][ T5144] Bluetooth: hci1: command 0x0c1a tx timeout [ 312.689075][ T5834] Bluetooth: hci0: command 0x0c1a tx timeout [ 312.761568][ T5834] Bluetooth: hci4: command 0x0c1a tx timeout [ 314.591250][T10753] netlink: 'syz.0.1102': attribute type 1 has an invalid length. [ 315.306529][T10750] kernel read not supported for file /#)-\"[} (pid: 10750 comm: syz.3.1099) [ 315.370299][ T29] audit: type=1800 audit(4294967469.870:14): pid=10750 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1099" name=23292D5C225B7D dev="mqueue" ino=27536 res=0 errno=0 [ 317.517728][T10814] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1112'. [ 317.547134][T10814] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1112'. [ 317.567221][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.573655][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 320.419312][T10841] kernel read not supported for file /#)-\"[} (pid: 10841 comm: syz.0.1115) [ 320.491460][ T29] audit: type=1800 audit(4294967475.010:15): pid=10841 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1115" name=23292D5C225B7D dev="mqueue" ino=27767 res=0 errno=0 [ 320.648013][T10153] syz.0.968 (10153) used greatest stack depth: 18160 bytes left [ 321.097889][T10774] cgroup: fork rejected by pids controller in /syz2 [ 323.277433][T10952] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1128'. [ 323.324288][T10952] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1128'. [ 323.833789][T10964] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1131'. [ 324.343838][T10970] netlink: 'syz.4.1132': attribute type 1 has an invalid length. [ 326.392049][T11005] netlink: zone id is out of range [ 326.397223][T11005] netlink: zone id is out of range [ 326.422191][T11005] netlink: zone id is out of range [ 326.440825][T11005] netlink: zone id is out of range [ 326.459816][T11005] netlink: zone id is out of range [ 326.492412][T11005] netlink: zone id is out of range [ 326.520244][T11005] netlink: zone id is out of range [ 326.526394][T11008] netlink: 5224 bytes leftover after parsing attributes in process `syz.0.1141'. [ 326.540719][T11005] netlink: zone id is out of range [ 326.545879][T11005] netlink: zone id is out of range [ 326.563170][T11005] netlink: zone id is out of range [ 327.080908][T11020] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1145'. [ 327.124952][T11020] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1145'. [ 327.221143][T11024] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1147'. [ 327.239916][T11024] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1147'. [ 328.100016][T11038] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1151'. [ 328.112057][T11038] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1151'. [ 328.504491][T11045] Invalid ELF header magic: != ELF [ 328.919611][T11056] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1157'. [ 328.962990][T11056] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1157'. [ 329.705089][T11083] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1163'. [ 329.715544][T11083] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1163'. [ 329.726642][T11083] FAULT_INJECTION: forcing a failure. [ 329.726642][T11083] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 329.740134][T11083] CPU: 1 UID: 0 PID: 11083 Comm: syz.4.1163 Not tainted 6.13.0-rc6-syzkaller-00038-g09a0fa92e5b4 #0 [ 329.750936][T11083] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 329.761035][T11083] Call Trace: [ 329.764342][T11083] [ 329.767305][T11083] dump_stack_lvl+0x16c/0x1f0 [ 329.772024][T11083] should_fail_ex+0x497/0x5b0 [ 329.776750][T11083] strncpy_from_user+0x3b/0x2d0 [ 329.781671][T11083] getname_flags.part.0+0x8f/0x550 [ 329.786849][T11083] getname+0x8d/0xe0 [ 329.790822][T11083] do_sys_openat2+0x104/0x1e0 [ 329.795536][T11083] ? __pfx_do_sys_openat2+0x10/0x10 [ 329.800775][T11083] ? __fget_files+0x206/0x3a0 [ 329.805489][T11083] __x64_sys_openat+0x175/0x210 [ 329.810373][T11083] ? __pfx___x64_sys_openat+0x10/0x10 [ 329.815766][T11083] ? ksys_write+0x1ba/0x250 [ 329.820311][T11083] do_syscall_64+0xcd/0x250 [ 329.824845][T11083] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 329.830761][T11083] RIP: 0033:0x7f861bb85d29 [ 329.835184][T11083] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 329.854901][T11083] RSP: 002b:00007f861c95c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 329.863326][T11083] RAX: ffffffffffffffda RBX: 00007f861bd75fa0 RCX: 00007f861bb85d29 [ 329.871300][T11083] RDX: 0000000000000200 RSI: 0000000020000000 RDI: ffffffffffffff9c [ 329.879270][T11083] RBP: 00007f861c95c090 R08: 0000000000000000 R09: 0000000000000000 [ 329.887241][T11083] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 329.895213][T11083] R13: 0000000000000000 R14: 00007f861bd75fa0 R15: 00007ffca2eee438 [ 329.903197][T11083] [ 330.561528][T11108] FAULT_INJECTION: forcing a failure. [ 330.561528][T11108] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 330.590674][T11108] CPU: 1 UID: 0 PID: 11108 Comm: syz.2.1169 Not tainted 6.13.0-rc6-syzkaller-00038-g09a0fa92e5b4 #0 [ 330.601504][T11108] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 330.611601][T11108] Call Trace: [ 330.614911][T11108] [ 330.617865][T11108] dump_stack_lvl+0x16c/0x1f0 [ 330.622586][T11108] should_fail_ex+0x497/0x5b0 [ 330.627315][T11108] _copy_from_user+0x2e/0xd0 [ 330.631948][T11108] copy_msghdr_from_user+0x99/0x160 [ 330.637191][T11108] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 330.643058][T11108] ___sys_sendmsg+0xff/0x1e0 [ 330.647694][T11108] ? __pfx____sys_sendmsg+0x10/0x10 [ 330.652938][T11108] ? __pfx_lock_release+0x10/0x10 [ 330.657989][T11108] ? trace_lock_acquire+0x14e/0x1f0 [ 330.663238][T11108] ? __fget_files+0x206/0x3a0 [ 330.667955][T11108] __sys_sendmsg+0x16e/0x220 [ 330.672591][T11108] ? __pfx___sys_sendmsg+0x10/0x10 [ 330.677849][T11108] do_syscall_64+0xcd/0x250 [ 330.682389][T11108] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 330.688335][T11108] RIP: 0033:0x7f9bd3985d29 [ 330.692779][T11108] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 330.712433][T11108] RSP: 002b:00007f9bd46ef038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 330.720891][T11108] RAX: ffffffffffffffda RBX: 00007f9bd3b75fa0 RCX: 00007f9bd3985d29 [ 330.728901][T11108] RDX: 0000000004000004 RSI: 0000000020001840 RDI: 0000000000000003 [ 330.736903][T11108] RBP: 00007f9bd46ef090 R08: 0000000000000000 R09: 0000000000000000 [ 330.744904][T11108] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 330.752907][T11108] R13: 0000000000000000 R14: 00007f9bd3b75fa0 R15: 00007ffc9b45f138 [ 330.760930][T11108] [ 331.062965][T11116] netlink: 334 bytes leftover after parsing attributes in process `syz.3.1171'. [ 331.340422][T11106] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 331.348045][T11106] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 331.360809][T11106] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 331.368011][T11106] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 331.679832][T11135] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1174'. [ 331.790833][T11135] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1174'. [ 331.847494][T11135] FAULT_INJECTION: forcing a failure. [ 331.847494][T11135] name failslab, interval 1, probability 0, space 0, times 1 [ 331.975900][T11135] CPU: 0 UID: 0 PID: 11135 Comm: syz.0.1174 Not tainted 6.13.0-rc6-syzkaller-00038-g09a0fa92e5b4 #0 [ 331.986728][T11135] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 331.996820][T11135] Call Trace: [ 332.000115][T11135] [ 332.003067][T11135] dump_stack_lvl+0x16c/0x1f0 [ 332.007780][T11135] should_fail_ex+0x497/0x5b0 [ 332.012493][T11135] ? fs_reclaim_acquire+0xae/0x150 [ 332.017654][T11135] should_failslab+0xc2/0x120 [ 332.022405][T11135] kmem_cache_alloc_noprof+0x6e/0x3b0 [ 332.027830][T11135] ? alloc_empty_file+0x73/0x1e0 [ 332.032836][T11135] alloc_empty_file+0x73/0x1e0 [ 332.037644][T11135] path_openat+0xe1/0x2d60 [ 332.042102][T11135] ? hlock_class+0x4e/0x130 [ 332.046651][T11135] ? __lock_acquire+0x15a9/0x3c40 [ 332.051724][T11135] ? __pfx_path_openat+0x10/0x10 [ 332.056708][T11135] ? __pfx___lock_acquire+0x10/0x10 [ 332.061939][T11135] ? lock_acquire.part.0+0x11b/0x380 [ 332.067259][T11135] ? find_held_lock+0x2d/0x110 [ 332.072063][T11135] do_filp_open+0x20c/0x470 [ 332.076617][T11135] ? __pfx_do_filp_open+0x10/0x10 [ 332.081682][T11135] ? find_held_lock+0x2d/0x110 [ 332.086509][T11135] ? alloc_fd+0x41f/0x760 [ 332.090884][T11135] do_sys_openat2+0x17a/0x1e0 [ 332.095631][T11135] ? __pfx_do_sys_openat2+0x10/0x10 [ 332.100886][T11135] ? __fget_files+0x206/0x3a0 [ 332.105706][T11135] __x64_sys_openat+0x175/0x210 [ 332.110605][T11135] ? __pfx___x64_sys_openat+0x10/0x10 [ 332.116024][T11135] ? ksys_write+0x1ba/0x250 [ 332.120577][T11135] do_syscall_64+0xcd/0x250 [ 332.125129][T11135] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 332.131070][T11135] RIP: 0033:0x7f89f5f85d29 [ 332.135512][T11135] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 332.155156][T11135] RSP: 002b:00007f89f6d28038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 332.163613][T11135] RAX: ffffffffffffffda RBX: 00007f89f6175fa0 RCX: 00007f89f5f85d29 [ 332.171620][T11135] RDX: 0000000000000200 RSI: 0000000020000000 RDI: ffffffffffffff9c [ 332.179630][T11135] RBP: 00007f89f6d28090 R08: 0000000000000000 R09: 0000000000000000 [ 332.187665][T11135] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 332.195671][T11135] R13: 0000000000000000 R14: 00007f89f6175fa0 R15: 00007ffd52675f28 [ 332.203693][T11135] [ 332.826646][T11147] FAULT_INJECTION: forcing a failure. [ 332.826646][T11147] name failslab, interval 1, probability 0, space 0, times 0 [ 332.920680][T11147] CPU: 0 UID: 0 PID: 11147 Comm: syz.0.1180 Not tainted 6.13.0-rc6-syzkaller-00038-g09a0fa92e5b4 #0 [ 332.926890][ T5834] Bluetooth: hci0: command 0x0c1a tx timeout [ 332.931476][T11147] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 332.931493][T11147] Call Trace: [ 332.931500][T11147] [ 332.931509][T11147] dump_stack_lvl+0x16c/0x1f0 [ 332.931543][T11147] should_fail_ex+0x497/0x5b0 [ 332.931572][T11147] ? fs_reclaim_acquire+0xae/0x150 [ 332.931600][T11147] should_failslab+0xc2/0x120 [ 332.931634][T11147] kmem_cache_alloc_node_noprof+0x72/0x3b0 [ 332.931665][T11147] ? __alloc_skb+0x2b3/0x380 [ 332.931702][T11147] __alloc_skb+0x2b3/0x380 [ 332.931733][T11147] ? __pfx___alloc_skb+0x10/0x10 [ 332.931765][T11147] ? lock_acquire+0x2f/0xb0 [ 332.997408][T11147] netlink_alloc_large_skb+0x69/0x130 [ 333.002831][T11147] netlink_sendmsg+0x689/0xd70 [ 333.007641][T11147] ? __pfx_netlink_sendmsg+0x10/0x10 [ 333.012964][T11147] ____sys_sendmsg+0x9ae/0xb40 [ 333.017744][T11147] ? copy_msghdr_from_user+0x10b/0x160 [ 333.023222][T11147] ? __pfx_____sys_sendmsg+0x10/0x10 [ 333.028527][T11147] ___sys_sendmsg+0x135/0x1e0 [ 333.033227][T11147] ? __pfx____sys_sendmsg+0x10/0x10 [ 333.038459][T11147] ? __pfx_lock_release+0x10/0x10 [ 333.043494][T11147] ? trace_lock_acquire+0x14e/0x1f0 [ 333.048714][T11147] ? __fget_files+0x206/0x3a0 [ 333.053407][T11147] __sys_sendmsg+0x16e/0x220 [ 333.058011][T11147] ? __pfx___sys_sendmsg+0x10/0x10 [ 333.063255][T11147] do_syscall_64+0xcd/0x250 [ 333.067880][T11147] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 333.073804][T11147] RIP: 0033:0x7f89f5f85d29 [ 333.078234][T11147] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 333.097880][T11147] RSP: 002b:00007f89f6d28038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 333.106311][T11147] RAX: ffffffffffffffda RBX: 00007f89f6175fa0 RCX: 00007f89f5f85d29 [ 333.114286][T11147] RDX: 0000000004000004 RSI: 0000000020001840 RDI: 0000000000000003 [ 333.122263][T11147] RBP: 00007f89f6d28090 R08: 0000000000000000 R09: 0000000000000000 [ 333.130245][T11147] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 333.138226][T11147] R13: 0000000000000000 R14: 00007f89f6175fa0 R15: 00007ffd52675f28 [ 333.146216][T11147] [ 333.400717][ T5834] Bluetooth: hci4: command 0x0c1a tx timeout [ 333.406793][ T5834] Bluetooth: hci3: command 0x0c1a tx timeout [ 333.413079][ T5144] Bluetooth: hci1: command 0x0c1a tx timeout [ 333.532520][T11156] netlink: 'syz.0.1183': attribute type 4 has an invalid length. [ 333.946405][T11166] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1187'. [ 333.975971][T11166] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1187'. [ 334.012787][T11166] FAULT_INJECTION: forcing a failure. [ 334.012787][T11166] name failslab, interval 1, probability 0, space 0, times 0 [ 334.056079][T11166] CPU: 1 UID: 0 PID: 11166 Comm: syz.2.1187 Not tainted 6.13.0-rc6-syzkaller-00038-g09a0fa92e5b4 #0 [ 334.066911][T11166] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 334.076986][T11166] Call Trace: [ 334.080281][T11166] [ 334.083227][T11166] dump_stack_lvl+0x16c/0x1f0 [ 334.087944][T11166] should_fail_ex+0x497/0x5b0 [ 334.092650][T11166] ? fs_reclaim_acquire+0xae/0x150 [ 334.097789][T11166] should_failslab+0xc2/0x120 [ 334.102511][T11166] kmem_cache_alloc_noprof+0x6e/0x3b0 [ 334.107913][T11166] ? security_file_alloc+0x34/0x2b0 [ 334.113180][T11166] security_file_alloc+0x34/0x2b0 [ 334.118246][T11166] init_file+0x93/0x480 [ 334.122447][T11166] alloc_empty_file+0x91/0x1e0 [ 334.127262][T11166] path_openat+0xe1/0x2d60 [ 334.131716][T11166] ? hlock_class+0x4e/0x130 [ 334.136261][T11166] ? __lock_acquire+0x15a9/0x3c40 [ 334.141327][T11166] ? __pfx_path_openat+0x10/0x10 [ 334.146301][T11166] ? __pfx___lock_acquire+0x10/0x10 [ 334.151527][T11166] ? lock_acquire.part.0+0x11b/0x380 [ 334.156843][T11166] ? find_held_lock+0x2d/0x110 [ 334.161647][T11166] do_filp_open+0x20c/0x470 [ 334.166181][T11166] ? __pfx_do_filp_open+0x10/0x10 [ 334.171215][T11166] ? find_held_lock+0x2d/0x110 [ 334.176011][T11166] ? alloc_fd+0x41f/0x760 [ 334.180357][T11166] do_sys_openat2+0x17a/0x1e0 [ 334.185050][T11166] ? __pfx_do_sys_openat2+0x10/0x10 [ 334.190264][T11166] ? __fget_files+0x206/0x3a0 [ 334.194952][T11166] __x64_sys_openat+0x175/0x210 [ 334.199815][T11166] ? __pfx___x64_sys_openat+0x10/0x10 [ 334.205205][T11166] ? ksys_write+0x1ba/0x250 [ 334.209722][T11166] do_syscall_64+0xcd/0x250 [ 334.214242][T11166] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 334.220148][T11166] RIP: 0033:0x7f9bd3985d29 [ 334.224574][T11166] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 334.244184][T11166] RSP: 002b:00007f9bd46ef038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 334.252603][T11166] RAX: ffffffffffffffda RBX: 00007f9bd3b75fa0 RCX: 00007f9bd3985d29 [ 334.260581][T11166] RDX: 0000000000000200 RSI: 0000000020000000 RDI: ffffffffffffff9c [ 334.268562][T11166] RBP: 00007f9bd46ef090 R08: 0000000000000000 R09: 0000000000000000 [ 334.276532][T11166] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 334.284503][T11166] R13: 0000000000000000 R14: 00007f9bd3b75fa0 R15: 00007ffc9b45f138 [ 334.292488][T11166] [ 335.001608][T11192] netlink: 338 bytes leftover after parsing attributes in process `syz.3.1196'. [ 336.694731][T11230] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1205'. [ 337.931265][T11264] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1214'. [ 338.758884][T11282] netlink: 342 bytes leftover after parsing attributes in process `syz.2.1216'. [ 338.782235][T11288] netlink: 342 bytes leftover after parsing attributes in process `syz.2.1216'. [ 339.224252][T11299] random: crng reseeded on system resumption [ 339.449835][T11308] Invalid ELF header magic: != ELF [ 342.060771][T11358] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1237'. [ 342.533096][T11373] smc: net device syz_tun applied user defined pnetid ETHTOOL [ 342.735522][T11386] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 343.423097][T11405] mmap: syz.3.1248 (11405): VmData 37470208 exceed data ulimit 3. Update limits or use boot option ignore_rlimit_data. [ 345.244906][T11436] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1255'. [ 346.427804][T11455] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1260'. [ 351.033500][T11522] can: request_module (can-proto-5) failed. [ 352.472711][T11539] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1282'. [ 352.823260][T11549] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1285'. [ 353.785946][T11561] binder: 11559:11561 ioctl c0105512 1 returned -22 [ 357.078166][T11616] net_ratelimit: 55 callbacks suppressed [ 357.078188][T11616] openvswitch: netlink: ERSPAN option length err (len 256, max 255). [ 357.676951][T11609] [ 357.679324][T11609] ====================================================== [ 357.686360][T11609] WARNING: possible circular locking dependency detected [ 357.693409][T11609] 6.13.0-rc6-syzkaller-00038-g09a0fa92e5b4 #0 Not tainted [ 357.700529][T11609] ------------------------------------------------------ [ 357.707557][T11609] syz.2.1296/11609 is trying to acquire lock: [ 357.713649][T11609] ffff888025916480 (&sb->s_type->i_mutex_key#3){++++}-{4:4}, at: start_creating.part.0+0xb0/0x3a0 [ 357.724336][T11609] [ 357.724336][T11609] but task is already holding lock: [ 357.731711][T11609] ffffffff8de395c8 (relay_channels_mutex){+.+.}-{4:4}, at: relay_open+0x324/0xa20 [ 357.740979][T11609] [ 357.740979][T11609] which lock already depends on the new lock. [ 357.740979][T11609] [ 357.751382][T11609] [ 357.751382][T11609] the existing dependency chain (in reverse order) is: [ 357.760385][T11609] [ 357.760385][T11609] -> #2 (relay_channels_mutex){+.+.}-{4:4}: [ 357.768468][T11609] __mutex_lock+0x19b/0xa60 [ 357.773592][T11609] relay_prepare_cpu+0x2c/0x300 [ 357.778978][T11609] cpuhp_invoke_callback+0x3d0/0xa10 [ 357.784783][T11609] __cpuhp_invoke_callback_range+0x101/0x200 [ 357.791291][T11609] _cpu_up+0x3fd/0x910 [ 357.795885][T11609] cpu_up+0x1dc/0x240 [ 357.800388][T11609] cpuhp_bringup_mask+0xdc/0x210 [ 357.805850][T11609] bringup_nonboot_cpus+0x176/0x1c0 [ 357.811575][T11609] smp_init+0x34/0x160 [ 357.816162][T11609] kernel_init_freeable+0x3ad/0x8b0 [ 357.821886][T11609] kernel_init+0x1c/0x2b0 [ 357.826744][T11609] ret_from_fork+0x45/0x80 [ 357.831684][T11609] ret_from_fork_asm+0x1a/0x30 [ 357.836981][T11609] [ 357.836981][T11609] -> #1 (cpu_hotplug_lock){++++}-{0:0}: [ 357.844714][T11609] cpus_read_lock+0x42/0x160 [ 357.850001][T11609] zswap_store+0x8f8/0x25f0 [ 357.855026][T11609] swap_writepage+0x3b6/0x1120 [ 357.860310][T11609] shmem_writepage+0xf7b/0x1490 [ 357.865685][T11609] pageout+0x3b2/0xaa0 [ 357.870272][T11609] shrink_folio_list+0x3025/0x42d0 [ 357.875903][T11609] evict_folios+0x6e3/0x19c0 [ 357.881014][T11609] try_to_shrink_lruvec+0x61e/0xa80 [ 357.886733][T11609] shrink_lruvec+0x313/0x2ba0 [ 357.891934][T11609] shrink_node+0x105e/0x3f20 [ 357.897046][T11609] do_try_to_free_pages+0x35f/0x1a30 [ 357.902860][T11609] try_to_free_mem_cgroup_pages+0x31a/0x7a0 [ 357.909361][T11609] try_charge_memcg+0x356/0xaf0 [ 357.914738][T11609] obj_cgroup_charge+0x179/0x4d0 [ 357.920203][T11609] __memcg_slab_post_alloc_hook+0x1b6/0x9b0 [ 357.926622][T11609] kmem_cache_alloc_lru_noprof+0x30d/0x3b0 [ 357.932954][T11609] alloc_inode+0xbf/0x230 [ 357.937808][T11609] new_inode+0x22/0x210 [ 357.942488][T11609] __debugfs_create_file+0x11a/0x660 [ 357.948307][T11609] debugfs_create_file_full+0x6d/0xa0 [ 357.954206][T11609] kvm_dev_ioctl+0x14b6/0x1aa0 [ 357.959492][T11609] __x64_sys_ioctl+0x190/0x200 [ 357.964773][T11609] do_syscall_64+0xcd/0x250 [ 357.969801][T11609] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 357.976218][T11609] [ 357.976218][T11609] -> #0 (&sb->s_type->i_mutex_key#3){++++}-{4:4}: [ 357.984826][T11609] __lock_acquire+0x249e/0x3c40 [ 357.990196][T11609] lock_acquire.part.0+0x11b/0x380 [ 357.995827][T11609] down_write+0x93/0x200 [ 358.000598][T11609] start_creating.part.0+0xb0/0x3a0 [ 358.006325][T11609] __debugfs_create_file+0xa5/0x660 [ 358.012051][T11609] debugfs_create_file_full+0x6d/0xa0 [ 358.017959][T11609] relay_create_buf_file+0xf0/0x170 [ 358.023700][T11609] relay_open_buf.part.0+0x760/0xb90 [ 358.029534][T11609] relay_open+0x5e2/0xa20 [ 358.034402][T11609] do_blk_trace_setup+0x4b4/0xac0 [ 358.039953][T11609] __blk_trace_setup+0xd8/0x180 [ 358.045347][T11609] blk_trace_ioctl+0x163/0x290 [ 358.050636][T11609] blkdev_ioctl+0x106/0x670 [ 358.055673][T11609] __x64_sys_ioctl+0x190/0x200 [ 358.060959][T11609] do_syscall_64+0xcd/0x250 [ 358.065983][T11609] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 358.072484][T11609] [ 358.072484][T11609] other info that might help us debug this: [ 358.072484][T11609] [ 358.082703][T11609] Chain exists of: [ 358.082703][T11609] &sb->s_type->i_mutex_key#3 --> cpu_hotplug_lock --> relay_channels_mutex [ 358.082703][T11609] [ 358.097244][T11609] Possible unsafe locking scenario: [ 358.097244][T11609] [ 358.104692][T11609] CPU0 CPU1 [ 358.110054][T11609] ---- ---- [ 358.115407][T11609] lock(relay_channels_mutex); [ 358.120265][T11609] lock(cpu_hotplug_lock); [ 358.127291][T11609] lock(relay_channels_mutex); [ 358.134660][T11609] lock(&sb->s_type->i_mutex_key#3); [ 358.140036][T11609] [ 358.140036][T11609] *** DEADLOCK *** [ 358.140036][T11609] [ 358.148197][T11609] 2 locks held by syz.2.1296/11609: [ 358.153386][T11609] #0: ffff8880261992e0 (&q->debugfs_mutex){+.+.}-{4:4}, at: blk_trace_ioctl+0xc9/0x290 [ 358.163152][T11609] #1: ffffffff8de395c8 (relay_channels_mutex){+.+.}-{4:4}, at: relay_open+0x324/0xa20 [ 358.172833][T11609] [ 358.172833][T11609] stack backtrace: [ 358.178715][T11609] CPU: 1 UID: 0 PID: 11609 Comm: syz.2.1296 Not tainted 6.13.0-rc6-syzkaller-00038-g09a0fa92e5b4 #0 [ 358.189476][T11609] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 358.199533][T11609] Call Trace: [ 358.202809][T11609] [ 358.205748][T11609] dump_stack_lvl+0x116/0x1f0 [ 358.210434][T11609] print_circular_bug+0x41c/0x610 [ 358.215475][T11609] check_noncircular+0x31a/0x400 [ 358.220420][T11609] ? __pfx_check_noncircular+0x10/0x10 [ 358.225887][T11609] ? stack_trace_save+0x95/0xd0 [ 358.230748][T11609] ? lockdep_lock+0xc6/0x200 [ 358.235344][T11609] ? __pfx_lockdep_lock+0x10/0x10 [ 358.240808][T11609] __lock_acquire+0x249e/0x3c40 [ 358.245660][T11609] ? __pfx___lock_acquire+0x10/0x10 [ 358.250857][T11609] lock_acquire.part.0+0x11b/0x380 [ 358.255967][T11609] ? start_creating.part.0+0xb0/0x3a0 [ 358.261357][T11609] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 358.266989][T11609] ? rcu_is_watching+0x12/0xc0 [ 358.271757][T11609] ? trace_lock_acquire+0x14e/0x1f0 [ 358.276966][T11609] ? start_creating.part.0+0xb0/0x3a0 [ 358.282354][T11609] ? lock_acquire+0x2f/0xb0 [ 358.286859][T11609] ? start_creating.part.0+0xb0/0x3a0 [ 358.292257][T11609] down_write+0x93/0x200 [ 358.296510][T11609] ? start_creating.part.0+0xb0/0x3a0 [ 358.301894][T11609] ? __pfx_down_write+0x10/0x10 [ 358.306751][T11609] ? do_raw_spin_unlock+0x172/0x230 [ 358.311955][T11609] ? mntput+0x10/0x90 [ 358.315940][T11609] ? simple_pin_fs+0xa3/0x190 [ 358.320619][T11609] start_creating.part.0+0xb0/0x3a0 [ 358.325828][T11609] __debugfs_create_file+0xa5/0x660 [ 358.331040][T11609] debugfs_create_file_full+0x6d/0xa0 [ 358.336427][T11609] ? __pfx_blk_create_buf_file_callback+0x10/0x10 [ 358.342852][T11609] relay_create_buf_file+0xf0/0x170 [ 358.348061][T11609] relay_open_buf.part.0+0x760/0xb90 [ 358.353357][T11609] relay_open+0x5e2/0xa20 [ 358.357693][T11609] ? debugfs_create_file_full+0x75/0xa0 [ 358.363342][T11609] do_blk_trace_setup+0x4b4/0xac0 [ 358.368371][T11609] __blk_trace_setup+0xd8/0x180 [ 358.373229][T11609] ? __pfx___blk_trace_setup+0x10/0x10 [ 358.378697][T11609] ? __pfx_snprintf+0x10/0x10 [ 358.383381][T11609] ? kmem_cache_free+0x152/0x4c0 [ 358.388328][T11609] blk_trace_ioctl+0x163/0x290 [ 358.393097][T11609] ? __pfx_blk_trace_ioctl+0x10/0x10 [ 358.398387][T11609] ? trace_lock_acquire+0x14e/0x1f0 [ 358.403683][T11609] ? do_fcntl+0x1ec/0x15b0 [ 358.408116][T11609] blkdev_ioctl+0x106/0x670 [ 358.412635][T11609] ? __pfx_blkdev_ioctl+0x10/0x10 [ 358.417667][T11609] ? __fget_files+0x206/0x3a0 [ 358.422347][T11609] ? __pfx_blkdev_ioctl+0x10/0x10 [ 358.427386][T11609] __x64_sys_ioctl+0x190/0x200 [ 358.432151][T11609] do_syscall_64+0xcd/0x250 [ 358.436660][T11609] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 358.442558][T11609] RIP: 0033:0x7f9bd3985d29 [ 358.446972][T11609] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 358.466584][T11609] RSP: 002b:00007f9bd46ef038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 358.475002][T11609] RAX: ffffffffffffffda RBX: 00007f9bd3b75fa0 RCX: 00007f9bd3985d29 [ 358.482971][T11609] RDX: 0000000000000038 RSI: 00000000c0481273 RDI: 0000000000000003 [ 358.490941][T11609] RBP: 00007f9bd3a01b08 R08: 0000000000000000 R09: 0000000000000000 [ 358.498907][T11609] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 358.506875][T11609] R13: 0000000000000000 R14: 00007f9bd3b75fa0 R15: 00007ffc9b45f138 [ 358.514938][T11609]