last executing test programs: 3m29.602266836s ago: executing program 1 (id=382): r0 = socket(0x2, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@phonet={0x23, 0x7, 0x6, 0x1}, 0x6a) (async) mount$auto(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000100)='nfsd\x00\xee\x1a\x8f\xa2~?\xe2\x82fg\xb3G\xbe\xc8\x12\xae\xc3\xc0@[\x99\xec\xbf(\xec\xc3\xb2\xf2\x15Zi\xc4S6\'\x14\x05\t\x8c\xd5?\xa0\x00\xd8\xe4\xafW\xcc\xa3\xce\t\xf8p\xc6nA6\x1a\xb9\xac\xde\x0e\x90\x18\xf1\x13I\x95\xe12\xaclJ\xba\xeb\xe4\x83Z\xaev\xd7\xd9\xdd\x14\x81\xbe\xab\xed\xd5MI\x830_\xc2\x14O\x84\xaa\x13W\xb7\x06\'fvQ\x95\xc5\xd1\x98\xe3T\xcdfk\xc7\xe9\x96\r\x91\xb0\xc46\xf2\xfc\xef\xfe\xa0\xc9d\xb3h$\xeb\xad\xa4P\x8f\xc3bM{4RQ\x00\x9d)_\xd81(\x03\xfd\rw\xca1\x88|\xe5\x1e\x10\x89X\x01\xe9\xf6g\x95xx\xaf\xa9~m\x05\xa2\xe4\x81\xb9\x92\xda\x13\xfe5\xfb\xc6\xd8>\x01\xd4\x14\x94o\x1b[\xa8]\x9b\x03\x95\xc3\xad\xad\x1d#oi|\x04\x93N\xfa\x17\xf3b\xf6\xcf\x00'/236, 0x4, 0x0) (async) mmap$auto(0x800b, 0x100000001000, 0xe3, 0x12, r0, 0x3) (async) mount_setattr$auto(0x5, 0x0, 0x8000, &(0x7f0000000640)={0x4, 0x4, 0x100000, @inferred=0xffffffffffffffff}, 0x283) close_range$auto(0x2, 0x8, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket(0xa, 0x806, 0x0) (async, rerun: 64) connect$auto(r1, &(0x7f00000018c0)=@generic={0x8, "02120000830000000000e9ffffff"}, 0x55) (async, rerun: 64) close_range$auto(0x2, 0x8, 0x0) sendmmsg$auto(r2, &(0x7f0000000140)={{&(0x7f00000002c0)="e4f17afa241e24e8dafd34cee886ada2bbe0a73e19b40707439871e18689e4e441ff4906a3688257c5a4f303000b9cd33b278d3c5ac205c2b8d63d554586b953cf2c40428f1b447e9d7f10b038102ca629072ccfc660b99359e29dba53d875d44eae3a144c45843e8e23e989109a1a90091b120715f88c4d3ad4a9c927c2f35fe07ca0dce57a424fbb7fd17ebaf678605fe9c25a48dbe19fb73916308b6550e82ca0ef2546d3e2fe9e855943a0758b0b1abce38e05d64829", 0x80012, 0x0, 0x2, 0x0, 0x7, 0x4}, 0x3}, 0x2, 0xc) (async) write$auto(0x3, 0x0, 0xfffffdef) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000200)='/sys/devices/platform/snd_virmidi.0/sound/card2/midiC2D0/power/runtime_suspended_time\x00', 0x0, 0x0) (async) syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000040), 0xffffffffffffffff) (async) r4 = openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/usbmon0\x00', 0x400, 0x0) read$auto_mon_fops_binary_mon_bin(r4, 0x0, 0x0) (async) ioctl$auto_MON_IOCH_MFLUSH(r4, 0x9208, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/bus/usb/031/001\x00', 0x80, 0x0) (async, rerun: 64) sendmsg$auto_OVS_DP_CMD_NEW(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x2c}, 0x1, 0x0, 0x0, 0x801}, 0x0) (async, rerun: 64) syz_genetlink_get_family_id$auto_ovs_datapath(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8, 0x0) (async) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) (async) bpf$auto(0x0, &(0x7f0000000100)=@task_fd_query={0x7, 0x4, 0x8200, 0x1001, 0x8, 0x1000000f, 0x66b, 0x0, 0x5}, 0x6f4) socket(0x10, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) pipe$auto(0x0) (async, rerun: 64) writev$auto(0x5, &(0x7f0000000100)={0x0, 0x7}, 0x201) (async) vmsplice$auto(0x4, &(0x7f0000000040)={0x0, 0xffffffffffffffff}, 0x3, 0x4) 3m29.300687329s ago: executing program 1 (id=384): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) (async) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) (async) io_uring_setup$auto(0x6, 0x0) io_uring_setup$auto(0x6, 0x0) (async, rerun: 64) mmap$auto(0x0, 0xa, 0xdb, 0x9b72, 0x5, 0x8000) (rerun: 64) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) (async) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x402, 0x300000000000) io_uring_register$auto(0x100000001, 0x14, 0x0, 0x5) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) (async) close_range$auto(0x2, 0x8, 0x0) (async) socket(0x10, 0x2, 0x4) socket(0x10, 0x3, 0x6) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x10, 0x2, 0x4) (async) r1 = socket(0x10, 0x3, 0x6) ioperm$auto(0x9, 0x8000, 0x0) (async) r2 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="f0020000", @ANYRES16=r2, @ANYBLOB="01002dbd7000fedbdf2505000000da0203800800c000e000000204002a000400110008002e00", @ANYRES32, @ANYBLOB="d152e64e22695352dd73864415aa8a78c65e6ab752fb4d469a47a092ae7d5061cdd9690cac4138553ecfbb1b32dd7c33b14cc842bc1e2a5da4203e64ceaa9db5223aa655b6313c011b3e73a75f1aa1f7b2ea43344b15bd494886e355cf6d92c8fe670a42bc677830013e9c4aa4fa30c3e6630bf0ed13206d5a18f6813c6fb03466112aedf5d67bb5b99fe96a6dcd279916b0bce029925b63c48d41ca8a76e46c6014100005800c00c50003000000000000000c02368008027a8087010c800800e800", @ANYRES32=r0, @ANYBLOB="0800fb00", @ANYRES32=r1], 0x2f0}, 0x1, 0x0, 0x0, 0x40000}, 0x50) (async, rerun: 32) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) (async, rerun: 32) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ram11\x00', 0x84381, 0x0) (async) write$auto(0x3, 0x0, 0x9) 3m28.206310415s ago: executing program 1 (id=388): mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000980)='/proc/self/pagemap\x00', 0x80c00, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) sendmmsg$auto(0xffffffffffffffff, &(0x7f00000001c0)={{0x0, 0x5aa, 0x0, 0x4, 0x0, 0x5, 0x1000}, 0x5}, 0x2, 0x100) readv$auto(0x3, &(0x7f00000001c0)={0x0, 0x1000}, 0x100000007) set_mempolicy$auto(0x2, &(0x7f0000000080)=0x7e, 0x4) move_pages$auto(0x0, 0x6, 0x0, 0x0, 0x0, 0x9) close_range$auto(0x2, 0x8000, 0x0) r0 = socket(0x2, 0x1, 0x106) socket(0xa, 0x2, 0x88) setsockopt$auto(r0, 0x3, 0x4, 0x0, 0x5) unshare$auto(0x40000080) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0xfffffffffffffffe, 0xffffffffffff0001, 0x15) removexattr$auto(0x0, 0x0) mmap$auto(0x4, 0x2020009, 0x8, 0xeb1, 0xffffffffffeffffa, 0x7ffd) getrandom$auto(0x0, 0x6000000, 0x3) read$auto_proc_reg_file_ops_compat_inode(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_WG_CMD_GET_DEVICE(0xffffffffffffffff, 0x0, 0x4000) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) r1 = socketpair$auto(0x1d, 0x2, 0x2, 0x0) close_range$auto(0x2, 0x8, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_TIPC_NL_MON_PEER_GET(r2, &(0x7f0000002880)={0x0, 0x0, &(0x7f0000002840)={&(0x7f0000000100)={0x14, r3, 0x9eda955c4138fbed, 0x70bd2b, 0x25dfdbfb}, 0x14}}, 0x4000000) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000000)) bind$auto(r1, &(0x7f0000000080)=@nfc={0x27, 0x0, 0xffffffffffffffff, 0x3}, 0x10000006) open(0x0, 0x252802, 0x190) socket(0x1, 0x1, 0x0) 3m22.015392338s ago: executing program 1 (id=396): r0 = openat$auto_adf_hb_cfg_fops_adf_heartbeat_dbgfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/ieee80211/phy0/aqm\x00', 0x121c01, 0x0) write$auto_adf_hb_cfg_fops_adf_heartbeat_dbgfs(r0, 0x0, 0x63) sendfile$auto(r0, r0, &(0x7f0000000000)=0x3, 0x9) openat$auto_adf_hb_cfg_fops_adf_heartbeat_dbgfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/ieee80211/phy0/aqm\x00', 0x121c01, 0x0) (async) write$auto_adf_hb_cfg_fops_adf_heartbeat_dbgfs(r0, 0x0, 0x63) (async) sendfile$auto(r0, r0, &(0x7f0000000000)=0x3, 0x9) (async) 3m21.81915322s ago: executing program 1 (id=397): r0 = socket(0x10, 0x2, 0x0) sendmsg$auto_NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="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", @ANYRES16=0x0, @ANYBLOB="100025bd7000fbdbdf250200000008000100fb19a1450c00060069a3ffffffffffff"], 0x28}}, 0x4) (async) sendmsg$auto_NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="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", @ANYRES16=0x0, @ANYBLOB="100025bd7000fbdbdf250200000008000100fb19a1450c00060069a3ffffffffffff"], 0x28}}, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB=' \x00\''], 0x1ac}}, 0x40000) mprotect$auto(0x1ffff000, 0x8000000000000001, 0x4) sendmsg$auto_NCSI_CMD_SET_PACKAGE_MASK(r0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4c004}, 0x40080c0) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) openat$auto_o2hb_debug_fops_heartbeat(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/o2hb/livenodes\x00', 0x0, 0x0) mprotect$auto(0x1ffff000, 0x8000000001000001, 0xd) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/net/rose6/statistics/tx_window_errors\x00', 0x0, 0x0) (async) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/net/rose6/statistics/tx_window_errors\x00', 0x0, 0x0) read$auto(r1, 0x0, 0x8000) (async) read$auto(r1, 0x0, 0x8000) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x266c0, 0x1) r2 = socket(0xa, 0x2, 0x73) bind$auto(0x3, 0x0, 0x6a) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "ab06fdffff00fff500"}, 0x55) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, r2, 0x8000) close_range$auto(0x2, 0x8, 0x0) r3 = socket(0xa, 0x3, 0x3c) r4 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) userfaultfd$auto(0x1) (async) r5 = userfaultfd$auto(0x1) statx$auto(r5, 0x0, 0x1000, 0x8, 0x0) ioctl$auto(r4, 0x5609, r3) (async) ioctl$auto(r4, 0x5609, r3) socket(0x8, 0x1, 0x75a9) shutdown$auto(0x200000003, 0x2) (async) shutdown$auto(0x200000003, 0x2) io_uring_setup$auto(0x6, 0x0) (async) io_uring_setup$auto(0x6, 0x0) setsockopt$auto(0x3, 0x1, 0x2e, 0x0, 0x9) (async) setsockopt$auto(0x3, 0x1, 0x2e, 0x0, 0x9) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) (async) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mremap$auto(0x4000, 0xfee0, 0x3fd6, 0x3, 0xfffff000) 3m21.623285758s ago: executing program 1 (id=398): r0 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x28641, 0x0) listen$auto(r0, 0x400) (async, rerun: 64) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async, rerun: 64) close_range$auto(0x2, 0x8, 0x0) (async, rerun: 64) io_uring_setup$auto(0x6, 0x0) (async, rerun: 64) r1 = socket(0x2, 0x5, 0x0) close_range$auto(0x2, 0x8, 0x0) (async) socket(0x2, 0x80002, 0x73) (async, rerun: 64) socket(0x2, 0x1, 0x84) (async, rerun: 64) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) (async) shutdown$auto(0x200000003, 0x2) sendmmsg$auto(r1, &(0x7f0000000140)={{&(0x7f0000000040), 0x10, &(0x7f00000000c0)={0x0, 0x1a000}, 0x7, 0x0, 0x2, 0xb}, 0xfff}, 0x5, 0x311) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) (async) socket(0x2, 0x1, 0x0) (async) getsockopt$auto(r0, 0x6, 0x23, 0x0, &(0x7f0000000100)=0x3b) (async, rerun: 32) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0x1a000}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x103, 0x0) (async, rerun: 32) ioctl$auto(r0, 0x227c, 0xffffffffffffffff) 3m6.564755449s ago: executing program 32 (id=398): r0 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x28641, 0x0) listen$auto(r0, 0x400) (async, rerun: 64) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async, rerun: 64) close_range$auto(0x2, 0x8, 0x0) (async, rerun: 64) io_uring_setup$auto(0x6, 0x0) (async, rerun: 64) r1 = socket(0x2, 0x5, 0x0) close_range$auto(0x2, 0x8, 0x0) (async) socket(0x2, 0x80002, 0x73) (async, rerun: 64) socket(0x2, 0x1, 0x84) (async, rerun: 64) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) (async) shutdown$auto(0x200000003, 0x2) sendmmsg$auto(r1, &(0x7f0000000140)={{&(0x7f0000000040), 0x10, &(0x7f00000000c0)={0x0, 0x1a000}, 0x7, 0x0, 0x2, 0xb}, 0xfff}, 0x5, 0x311) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) (async) socket(0x2, 0x1, 0x0) (async) getsockopt$auto(r0, 0x6, 0x23, 0x0, &(0x7f0000000100)=0x3b) (async, rerun: 32) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0x1a000}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x103, 0x0) (async, rerun: 32) ioctl$auto(r0, 0x227c, 0xffffffffffffffff) 12.071432674s ago: executing program 2 (id=1113): r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x181) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/input/event2\x00', 0x2a482, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/015/001\x00', 0xa901, 0x0) mmap$auto(0x0, 0x400008, 0x6, 0x9b72, 0x3, 0x8000) ioctl$auto(0x3, 0x8108551b, 0x1) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x5, 0x8000) close_range$auto(0x2, 0x8, 0x0) ioctl$auto_evdev_fops_evdev(r1, 0xffffffff80284504, 0x0) waitid$auto(0x0, 0x594d0417, 0x0, 0x1000004, &(0x7f0000000080)={{0x7, 0x4}, {0x4, 0xfffffffffffffff9}, 0x3ff, 0x281, 0x8000000000000000, 0xffffffffffffffff, 0x7f, 0x9, 0x3, 0x0, 0x4, 0x8000, 0x4, 0x6, 0x8, 0x12}) ppoll$auto(&(0x7f0000000180)={r0, 0x4, 0x8}, 0x6, 0x0, 0x0, 0x8) close_range$auto(r0, 0x8, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f00000001c0), r0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) r7 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="2f212cbd7000fcdbdf420100000008000300", @ANYRES8=r2], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) sendmsg$auto_ETHTOOL_MSG_TUNNEL_INFO_GET(r3, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="00032abd7000fbdbdf251c00000060000180140002006261746164765f736c6176655f30000008000100", @ANYRES32=0x0, @ANYBLOB="140002006272696467655f736c6176655f3100001400020069705f7674693000000000000000000008000100", @ANYRES32=r6, @ANYBLOB="080003eb030000000800030001000080"], 0x74}, 0x1, 0x0, 0x0, 0x90}, 0x14) read$auto_tracing_thresh_fops_trace(r0, &(0x7f0000000000)=""/84, 0x54) timerfd_create$auto(0x6, 0x4) listmount$auto(&(0x7f0000000200)={0x20, @inferred, 0x80000024, 0x0, 0x2}, 0x0, 0x0, 0x1) 9.463776241s ago: executing program 2 (id=1120): r0 = open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x100) mmap$auto(0x4, 0xfffbffffffffffff, 0x5, 0x14, r0, 0x4) ioctl$auto_snd_pcm_f_ops_pcm1(r0, 0x5, &(0x7f0000000100)="d75acf27cff5f5c47231108bcc09016046264aa847a205b2a6b1bc6da12756e33b415ed1abdc8570937e88cd47bc6c27414b81213c0b0b3b98fcf166e7fe1a210dc7e14828a1c227c170aa1b871b5816bd1ed911da883d7df1d5a4de93ee594c244366ee3a7b18237c278c8141e68855641a39af3b7ffeabf9612ab75621b33b02b88ec1d48a6f2cb95777c91f5352a34eced488bbf103da12793acb56f8b9b51ef1f36947addb7f6de5be4567e30fff7df2fef306cfcff8d0d7cafc8516fb8ac7aeec") r1 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000340)='/dev/v4l-subdev2\x00', 0x80000, 0x0) bpf$auto(0xab, &(0x7f0000000040)=@raw_tracepoint={0x6, r1}, 0x10000) syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000000), r2) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) ioctl$auto(0x3, 0xc040563d, 0x38) 9.210714574s ago: executing program 4 (id=1121): r0 = socket(0x10, 0x2, 0x9) mmap$auto(0x0, 0x8, 0x2, 0x9b72, 0x5, 0x0) socket(0xa, 0x5, 0x0) (async, rerun: 64) setsockopt$auto(0x3, 0x0, 0x2a, 0x0, 0x28) (rerun: 64) read$auto(0x3, 0x0, 0x80) (async) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) (async) connect$auto(0x3, &(0x7f00000000c0), 0x55) (async) mkdir$auto(&(0x7f0000000300)='./file0\x00', 0xf801) getcwd$auto(0x0, 0xffffffffffffffff) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) socket$nl_generic(0x10, 0x3, 0x10) (async) socket(0xa, 0x5, 0x0) (async) inotify_init1$auto(0x3000000000000) (async, rerun: 64) inotify_add_watch$auto(0x4, 0x0, 0xe6e) (rerun: 64) chmod$auto(&(0x7f0000000040)='./file0\x00', 0x10fe) (async) sendmmsg$auto(0x3, 0x0, 0x9a6, 0xa00) (async) socket(0x11, 0x80003, 0x300) (async) readv$auto(0x4, &(0x7f0000000100)={0x0, 0x1000}, 0x8) (async) unshare$auto(0xc) (async, rerun: 32) sendmsg$auto_NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x0, 0x4, 0x70bd28, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x80c0}, 0x4000000) (async, rerun: 32) r1 = openat$auto_ftrace_subsystem_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f00000006c0)='/sys/kernel/debug/tracing/events/vmalloc/filter\x00', 0x103041, 0x0) write$auto(r1, 0x0, 0x9) ioperm$auto(0x4d9, 0xa7, 0x6) 8.321609285s ago: executing program 2 (id=1124): r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f000000fc00), 0x3, 0x0) ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x1) r1 = openat$auto_stat_fops_per_vm_kvm_main(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/kvm/notify_window_exits\x00', 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x0, 0xffffffffffff0001, 0x15) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x53, 0x9) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mremap$auto(0x4000, 0xb8, 0x13fd4, 0x3, 0xfffff000) mremap$auto(0x1fc000, 0xfee0, 0x3fd6, 0x3, 0xfffff000) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) read$auto_stat_fops_per_vm_kvm_main(r1, 0x0, 0x0) 7.86335394s ago: executing program 4 (id=1127): timer_create$auto(0x9, 0x0, 0x0) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000140), 0xffffffffffffffff) socket(0x11, 0x80003, 0x300) pread64$auto(0xffffffffffffffff, 0x0, 0x3f, 0x7fff) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x101202, 0x0) sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, 0x0, 0x40400c5) openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000000), 0x500, 0x0) unshare$auto(0x40000080) close_range$auto(0x2, 0x8, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/dev_mcast\x00', 0x4000, 0x0) r0 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x161302, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0x8, 0x8000) read$auto(0x3, 0x0, 0x1f40) close_range$auto(r0, r0, 0x0) r1 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv6/conf/all/forwarding\x00', 0x42a81, 0x0) r2 = openat$auto_proc_coredump_filter_operations_base(0xffffffffffffff9c, 0x0, 0x561c42, 0x0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/devices/virtual/block/nbd5/queue/zoned\x00', 0x60301, 0x0) mmap$auto(0x8a, 0xe7f, 0x3, 0xeb1, r0, 0x9444) r4 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000340)='/proc/sys/net/netfilter/nf_conntrack_buckets\x00', 0x103541, 0x0) read$auto(r4, 0x0, 0x200000001ff) write$auto(0x3, 0x0, 0xfdef) pwritev$auto(r2, &(0x7f0000000180)={0x0, 0x9}, 0x837, 0xb6, 0x3) pwrite64$auto(r1, 0x0, 0x1, 0x2) openat$auto_tracing_cpumask_fops_trace(0xffffffffffffff9c, 0x0, 0x49400, 0x0) write$auto(0x3, 0x0, 0xfdef) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/bus/usb/015/001\x00', 0xa901, 0x0) mmap$auto(0x40000, 0x20009, 0xdf, 0xeb5, 0x401, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4004810}, 0x8810) sendmsg$auto_ETHTOOL_MSG_STATS_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYRES64=r3, @ANYRES16=0x0], 0x14}, 0x1, 0x0, 0x0, 0x4000040}, 0x40040a2) close_range$auto(0x2, 0x8, 0x0) 5.027310442s ago: executing program 0 (id=1133): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) mmap$auto(0xf000, 0x9, 0x1000000003, 0x9b72, 0x2, 0x5) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video61\x00', 0x8a240, 0x0) ioctl$auto(r0, 0x5646, r0) r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, 0x0, 0x20342, 0x0) read$auto(0x3, 0x0, 0x7) ioctl$auto_SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000000000)=0x10000) ioctl$auto(r0, 0x81, r0) fsopen$auto(0x0, 0x1) sendmsg$auto_IOAM6_CMD_ADD_NAMESPACE(0xffffffffffffffff, 0x0, 0x24004054) getrandom$auto(0x0, 0x6000000, 0x3) remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0x3, 0x4) socket$nl_generic(0x10, 0x3, 0x10) mbind$auto(0x4, 0x2091d2, 0x4, 0x0, 0x6, 0x2) mmap$auto(0x80, 0x800008, 0xdf, 0x9b72, 0x2, 0x7fff) mbind$auto(0x0, 0x100000004, 0x100000000, 0x0, 0x20000000000006, 0x2) r2 = clone$auto(0x21002, 0x9, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x9) mkdir$auto(0x0, 0x8001) close_range$auto(0x2, 0x8, 0x0) close_range$auto(0x2, 0x8, 0x0) mount$auto(0x0, 0x0, &(0x7f0000000140)='nfsd\x00', 0x8, 0x0) capset$auto(&(0x7f0000000180)={0x6, r2}, &(0x7f00000001c0)={0x1, 0x9, 0xf}) openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/maps\x00', 0x40302, 0x0) r3 = openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sysvipc/shm\x00', 0x400080, 0x0) openat$auto_proc_timens_offsets_operations_base(0xffffffffffffff9c, &(0x7f0000002440), 0x80c02, 0x0) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7114}, 0x8) ioctl$auto_PROCMAP_QUERY(r3, 0xc0686611, &(0x7f0000000200)={0x100001a, 0xffffffffffffffff, 0x18, 0x5, 0x5580, 0x1, 0x4b, 0x85, 0x9, 0x7, 0x32, 0x7fffffff, 0xd, 0xe, 0xe}) 4.678815594s ago: executing program 2 (id=1134): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x100000, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) clone$auto(0x3fff, 0xad3, 0x0, 0x0, 0x2) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x402, 0x300000000000) mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) clone$auto(0x9, 0x3, 0x0, 0x0, 0x7) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_GET_REG(r0, 0x0, 0x20000010) recvmmsg$auto(r0, 0x0, 0x4, 0x1, 0x0) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cuse\x00', 0x1c1041, 0x0) write$auto_fuse_dev_operations_fuse_i(r1, &(0x7f0000000440)="110000001265843a000000000000000000", 0x11) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) fanotify_init$auto(0x5, 0x2000000000002) statmount$auto(0x0, &(0x7f0000000180)={0xffff, 0x1, 0x5, 0x3, 0x19, 0x940, 0x1, 0x3, 0x6, 0x4, 0x80, 0x5, 0x2, 0x9, 0xac, 0x9, 0x2, 0x3, 0x5, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x81a]}, 0x4, 0x7) r2 = openat$auto_fops_blob_file(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) readv$auto(r2, &(0x7f0000000300)={&(0x7f0000000240), 0xa7}, 0x8) socket(0x26, 0x80805, 0x0) syslog$auto(0x4, &(0x7f0000000040)='..\x00', 0x7) syz_open_procfs$namespace(0x0, &(0x7f0000000040)) syz_open_procfs$namespace(0x0, &(0x7f0000000080)) 4.110732275s ago: executing program 3 (id=1136): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r0 = socket(0x10, 0x2, 0x0) sendmsg$auto_BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x38, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYRESHEX=0x0, @ANYRES16=0x0, @ANYRESOCT=r0], 0x24}, 0x1, 0x0, 0x0, 0x4c8d4}, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYRES32=r1, @ANYRES32=r1, @ANYRES8=r0, @ANYRES64=r0], 0x1ac}}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmmsg$auto(0x3, &(0x7f0000000140)={{0x0, 0x10, &(0x7f00000002c0)={0x0}, 0xfffffffffffffffd, 0x0, 0x0, 0xc}, 0x7}, 0x80000000, 0xe) madvise$auto(0x0, 0xff, 0x15) mlock2$auto(0x1, 0x6, 0x43) madvise$auto(0x0, 0x3, 0x67) madvise$auto(0xd22, 0x8, 0x8) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000640)='/dev/snd/controlC0\x00', 0x80, 0x0) r4 = openat$auto_adf_hb_cfg_fops_adf_heartbeat_dbgfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/ieee80211/phy0/netdev:wlan0/tdls_wider_bw\x00', 0x81, 0x0) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8) r5 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f000000fc00), 0x3, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) getrandom$auto(0x0, 0x6000000, 0x3) ioctl$auto_KVM_CREATE_VM(r5, 0x4018aee2, 0x88) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_WRITE(r3, 0xc4c85513, &(0x7f0000000700)={{@raw=0x8, 0x7f, 0x5, 0x1, "26cb83211ffd7f6567850e138dd717bfeb7ab5c55e35d9811b26db6e6f8c5d7d57cdda7ca056a2a31e5dfe27", @inferred=r2}, 0x0, @integer64=@value=[0x0, 0x1, 0x2, 0x8000, 0xe325, 0x8, 0x40000000000002, 0xffff, 0x7, 0x8000100000000, 0x5, 0x2000000ff, 0xe95, 0xb, 0x80000000000000a, 0x1de185c0, 0x2, 0x7, 0x8, 0x3c1, 0x0, 0xd8a, 0x9bd, 0xa3, 0x200006af, 0xb, 0x7ffffffc, 0x7fffffffffffffff, 0x4, 0x6, 0xd, 0x1, 0x1, 0x9, 0xcf, 0x40a, 0xed, 0x2, 0x9, 0x1, 0x401, 0x7, 0x5, 0x1000000000000003, 0x8, 0x548, 0xc, 0xe3, 0xa, 0x4, 0x1, 0xb, 0xe0000000000003, 0x6, 0x0, 0x100000000006, 0x6, 0x7, 0xb, 0x82c1, 0x4436, 0x0, 0x9, 0x5], "1cd4f43065c34bdcb5fa6160f24c5f3eb5328361438ff4cd82ad2e9771421debdad4d39a52fc70b9012aff448a8b4a75e7c5126dc116dd8f5751e93614151d5a4f55a63e9ba1ad1e6542796d2a1cd644b0d756001b66abab0c0fd3b4287befd247e5410bef4c186120b5bed4ab64ffeb4b7c5a69166021a8814332515a657e93"}) waitid$auto(0x0, 0x5c5, &(0x7f0000000040)={@siginfo_0_0={0x7, 0x91d9, 0x8001, @_timer={r2, 0x406, @sival_ptr=0x0, 0x5}}}, 0x4, 0x0) mmap$auto(0x0, 0x8, 0x1000000004, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) socket(0x11, 0x80003, 0x300) socket(0x10, 0x2, 0x4) close_range$auto(r4, 0x8, 0x2) socket(0x2000000000000021, 0x2, 0x3) socket(0x15, 0x5, 0x0) socket(0x2, 0x1, 0x0) 3.96271337s ago: executing program 4 (id=1137): r0 = openat$auto_hwsim_fops_group_(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/ieee80211/phy9/hwsim/group\x00', 0x2100c0, 0x0) mmap$auto(0x0, 0x400008, 0x5, 0x9f72, r0, 0x8000) socket(0x2, 0x3, 0x6) lsm_list_modules$auto(0x0, 0x0, 0x0) socket(0xa, 0x5, 0x0) open(0x0, 0x22240, 0x154) ioperm$auto(0x3, 0xe, 0x2000000000000149) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mbind$auto(0x9, 0x84, 0x4, &(0x7f0000000000), 0x80000000, 0x7f) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) socket(0xa, 0x2, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x6, 0x0) shutdown$auto(0x200000003, 0x2) sched_getparam$auto(r1, &(0x7f0000000040)={0x6504}) sendmsg$auto_NLBL_MGMT_C_LISTDEF(0xffffffffffffffff, 0x0, 0x20048800) unshare$auto(0x40000080) recvmmsg$auto(0x3, 0x0, 0x687bcbd, 0x8, 0x0) ioprio_set$auto(0x1, 0x0, 0x0) truncate$auto(0x0, 0x7ffd) unshare$auto(0x6) 3.91414055s ago: executing program 0 (id=1138): r0 = socket(0x2b, 0x1, 0x1) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) (async) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) setsockopt$auto(0x400000000000003, 0x29, 0x8000006, 0x0, 0x8) r1 = syz_genetlink_get_family_id$auto_smc_gen_netlink(&(0x7f0000000040), r0) sendmsg$auto_SMC_NETLINK_ADD_UEID(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="30110000", @ANYRES16=r1, @ANYBLOB="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"], 0x130}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000800) (async) sendmsg$auto_SMC_NETLINK_ADD_UEID(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="30110000", @ANYRES16=r1, @ANYBLOB="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"], 0x130}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000800) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa}, 0x55) 3.735344649s ago: executing program 0 (id=1139): socket(0x2, 0x3, 0x100) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1, 0x9, 0x4, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket(0x11, 0x3, 0x9) capset$auto(0x0, &(0x7f0000000000)={0x1, 0x6, 0x48}) fsopen$auto(&(0x7f00000000c0)='lo\x00', 0x4) sendmmsg$auto(r2, &(0x7f00000006c0)={{&(0x7f0000000000), 0x5ac, &(0x7f0000000100)={&(0x7f0000000200)="4c0300000000000000a3677337f9eca9075f6bba441b1b", 0x49}, 0x5, &(0x7f0000000700), 0x5, 0x1}, 0x5}, 0x2, 0x100) sendmsg$auto_ETHTOOL_MSG_PLCA_GET_CFG(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x2c, r1, 0x1, 0x70bd27, 0x25dfdc01, {}, [@ETHTOOL_A_PLCA_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0xfffffffffffffd6f, 0x2, 'lo\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24048011}, 0x4000004) r3 = socket(0x10, 0x2, 0x9) setsockopt$auto(r3, 0x104000000000010e, 0x1, 0x0, 0x16) sendmsg$auto_NET_DM_CMD_CONFIG(r3, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)={0x14, 0x0, 0x100, 0x70bd27, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x40010}, 0x0) 3.527586518s ago: executing program 0 (id=1140): setsockopt$auto(0x0, 0x1, 0x2f, &(0x7f0000000040)='\b\xd4\x1a|\xa8\xf0\xd8Qbh\x12\v\x10\x04Mu_\x99\x94\xcc\'\xa1W\x96\xc6\xafpz\x81zX\x99\xfca\xe2T\x98\xde\xc4`\x94\x83aWIS\xd7#\xfc_\xb6\x15\x91\x90\x1b\x9d\xb4\xe1a\x1ah\xef\x96\xe3\xed,\xa3\xd0\xb1$\xbc\t\xd2>e\x94\x91\x8bB\xb6\xdai\x82\x95\xc0\tI\x14\xa2\xa0M\xc8]B\t\xc1*\x15\xc9\x97\xfb`\x1e\xb5\xe6\x12\x86\x1b\xbe\x8e\xfd\x9d\xc9\xa0Z\xb7W(\x92\x19\xf0\xc1\xb5J\xd7\xe3\xfb\xe3$y\x00@\xde\xf1\xff\x94\xf1\xd8)\xa6\xd7r-\x82\xec\aC4\xec\x11\x86\x84\x81\xb8\xee\f\xac\xa8a\xd0\xf9P\x19k\xa3Mt\xc2\'\x18\xd4x3\xe6h\xea6\x00\x8a\xf4\xe7\x85\xbf;\x84\xe3*\x94\x15\xdb\x15\xe3B\xcb&\f\xad\x91W\x87\xce\xae\xca\xeb\x16&>\xe8\xe3*\xfe\xa3\xfa\x11&\xbe\xec/\xc0\b\x03L\t\xc7', 0x6) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000010c0)='/dev/snd/controlC1\x00', 0x802, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/card0/pcm0p/sub3/info\x00', 0x84a81, 0x0) mmap$auto(0x0, 0xc, 0x4000000000df, 0x44eb2, 0x10006, 0x300000000000) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_tracing_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/per_cpu/cpu1/trace\x00', 0x80800, 0x0) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) sendfile$auto(0x6, 0x3, 0x0, 0x8000) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) unshare$auto(0x40000080) writev$auto(0x1, &(0x7f0000000100)={0x0, 0x400000000000fdef}, 0x1) close_range$auto(0x2, 0xa, 0x0) socket(0x18, 0xa, 0x1) r0 = socket(0x2, 0x5, 0x0) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22240, 0x155) socket(0x2, 0x5, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) connect$auto(0x3, 0x0, 0x55) sendmmsg$auto(r0, &(0x7f0000000100)={{&(0x7f0000000040), 0x10, &(0x7f00000000c0)={0x0, 0xff80}, 0x7, 0x0, 0x2, 0xb}, 0x40000fff}, 0x5, 0x7fffffff) setsockopt$auto(0x3, 0x1, 0x20, 0x0, 0x9) madvise$auto(0x0, 0xffffffffffff0009, 0x19) munmap$auto(0x20001000, 0x7) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x21, 0x2, 0x400002) poll$auto(0x0, 0x5, 0x108) mmap$auto(0xfffffffffffffffe, 0x8, 0x8003, 0xeb3, 0xfffffffffffffff9, 0x8000) 3.31567998s ago: executing program 2 (id=1141): setresuid$auto(0x2, 0x7, 0x0) newfstatat$auto(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x9, 0x880, 0x699a0000000000, 0x80000000, 0x0, 0xee01, 0x0, 0x3bb, 0x7d50, 0x3, 0x2, 0x7, 0x7, 0x9, 0x6, 0x8000000000000000, 0x1}, 0x9) setfsuid$auto(r0) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sda\x00', 0x8001, 0x0) ioctl$auto_def_blk_fops_fs(r1, 0x2284, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket(0x2, 0x1, 0x0) sendmmsg$auto(r3, &(0x7f0000000140)={{&(0x7f0000000040), 0x80012, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x5, 0x20000002) openat$auto_evm_xattr_ops_evm_secfs(0xffffffffffffff9c, &(0x7f00000002c0), 0x238c00, 0x0) r4 = syz_genetlink_get_family_id$auto_nfc(0x0, r3) sendmsg$auto_NFC_CMD_VENDOR(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r4, 0x100, 0x70bd27, 0x25dfdbfd}, 0x14}}, 0x40) sendmsg$auto_NFC_CMD_DEACTIVATE_TARGET(r2, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x54, r4, 0x300, 0x70bd2b, 0x25dfdbfc, {}, [@NFC_ATTR_LLC_PARAM_LTO={0x5, 0xf, 0x81}, @NFC_ATTR_SE_APDU={0x25, 0x19, "29f7916417a70e7aaf18d00be5264e7594e6e0c18edb82b8d0725f56a1dbe6c30d"}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0x10}, @NFC_ATTR_VENDOR_SUBCMD={0x8, 0x1e, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x40080}, 0x4) 3.219984888s ago: executing program 3 (id=1142): close_range$auto(0x2, 0xa, 0x0) (async) socket(0xa, 0x2, 0x0) (async) r0 = socket(0xa, 0x3, 0x3) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) close_range$auto(0x2, 0x8, 0x0) (async) io_uring_setup$auto(0x6, 0x0) socket(0xa, 0x1, 0x6) (async) socket(0x11, 0x80003, 0x300) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) r1 = socket(0x2, 0x1, 0x0) getsockopt$auto(r1, 0x0, 0x41, 0x0, &(0x7f00000000c0)=0x28) socket(0x10, 0x2, 0x0) socket(0x2, 0x3, 0x2) (async) socket(0x2, 0x3, 0x104) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, 0x0, 0x40, 0x0) (async) socketpair$auto(0x3, 0x5, 0x7, 0x0) (async) connect$auto(r0, 0x0, 0x55) (async) mmap$auto(0x0, 0xc, 0x4000000000df, 0x44eb2, 0x10006, 0x300000000000) (async) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x3, 0x100) socket$nl_generic(0x10, 0x3, 0x10) 2.867267825s ago: executing program 3 (id=1143): openat$auto_trace_options_core_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/tracing/options/sym-userobj\x00', 0x121082, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) unshare$auto(0x40000080) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x5, 0x8000) mmap$auto(0x0, 0x4, 0xffffffffffff0000, 0x40eb1, 0x401, 0x300000000000) stat$auto(0x0, 0x0) openat$auto_drm_debugfs_entry_fops_drm_debugfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/dri/vkms/framebuffer\x00', 0x0, 0x0) openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000080), 0x80080, 0x0) r0 = openat$auto_virtual_ncidev_fops_virtual_ncidev(0xffffffffffffff9c, &(0x7f0000000040), 0x8a02, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) unshare$auto(0xf) r1 = io_uring_setup$auto(0x6, 0x0) read$auto(0x3, 0x0, 0x80) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/block/ram10/power/runtime_suspended_time\x00', 0x40c500, 0x0) close_range$auto(0x2, r0, 0x0) openat$auto_cachefiles_daemon_fops_internal(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sda\x00', 0x8201, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r3 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000180), r2) r4 = getsid$auto(0xffffffffffffffff) get_robust_list$auto(r4, 0x0, 0x0) sendmsg$auto_NL802154_CMD_SET_SEC_PARAMS(r1, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="ac000000", @ANYRES16=r3, @ANYBLOB="20012dbd7000fddbdf251500000008000b000080000005001f00f800000008002a001000000014000400766c616e3000000000000000000000000c0017000900000000000000080001000f000000080021001fe3ffff08000c0007000000150002002f6465762f7669727475616c5f6e636900000000300030802c00e180040045800400288008000700", @ANYRES32=r4, @ANYBLOB="040015800180000000000000b92f25c1ea3ddc2913754d7ebad8a37141355df6a24fdfcfb4a5823af305480b4ef7a6bde218f55e07d81f607c3faf792fed5aed7fd5051232a79d09e1b0195da13a96a89cfeb1da4c1b", @ANYRES32, @ANYBLOB='\v\x009\x00*@^\'-}\x00\x00'], 0xac}, 0x1, 0x0, 0x0, 0x20008001}, 0x5) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/v4l-subdev6\x00', 0x80000, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) ioctl$auto(0x3, 0x40085618, 0x38) r5 = socket$nl_generic(0x10, 0x3, 0x10) fcntl$auto(r5, 0x11, 0x2) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sg0\x00', 0x8000, 0x0) ioctl$auto(0x3, 0xc0481273, 0x38) readv$auto(0x3, &(0x7f00000001c0)={0x0, 0x1000}, 0x100000007) 2.71690476s ago: executing program 2 (id=1144): mmap$auto(0x0, 0xe983, 0xdf, 0xeb3, 0x401, 0x80000000) r0 = socket(0x2, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) sendmmsg$auto(r0, &(0x7f0000000000)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0xb8fa}, 0x5, 0x20000000) io_uring_setup$auto(0x6, 0x0) mmap$auto(0x0, 0x9, 0x3ff57697, 0x9b72, 0x2, 0x8000000000008000) sendto$auto(0x3, 0x0, 0x2000f, 0x101, 0x0, 0x1c) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) sendto$auto(0x3, 0x0, 0x2000f, 0x101, 0x0, 0x1c) syz_genetlink_get_family_id$auto_ila(0x0, r0) sendmsg$auto_ILA_CMD_DEL(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x34}, 0x1, 0x0, 0x0, 0x4084}, 0xc840) shutdown$auto(0x200000003, 0x2) close_range$auto(0x2, 0x8, 0x0) read$auto(0xffffffffffffffff, 0x0, 0xfdef) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_TIPC_NL_MON_PEER_GET(r1, &(0x7f0000006140)={0x0, 0x0, &(0x7f0000006100)={&(0x7f00000001c0)=ANY=[], 0x18}}, 0x4c848) r2 = openat$auto_check_wx_fops_(0xffffffffffffff9c, &(0x7f0000000140), 0x20080, 0x0) readv$auto(r2, &(0x7f0000000080)={0x0, 0x14000000000}, 0x3) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/user/max_fanotify_groups\x00', 0x20202, 0x0) openat$auto_proc_pid_attr_operations_base(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/attr/exec\x00', 0x478d03, 0x0) mmap$auto(0x0, 0x40009, 0x8, 0x9b75, 0x7, 0x5) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004810}, 0x800) socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0xffffff7fffff0005, 0x8) mmap$auto(0x800000007, 0x4008, 0xd, 0x18, r2, 0x4) openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x8cc002, 0x0) 2.53257073s ago: executing program 0 (id=1145): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) rt_sigprocmask$auto(0x0, &(0x7f0000000000)={0xfffffffffffffe01}, 0x0, 0x8) (async) close_range$auto(0x0, 0xfffffffffffff000, 0x2) (async) r0 = openat$auto_bsg_fops_bsg(0xffffffffffffff9c, &(0x7f0000000100)='/dev/bsg/0:0:0:0\x00', 0x60400, 0x0) fcntl$auto(r0, 0x6, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) pidfd_open$auto(0x1, 0x0) (async) socket(0x2, 0x2, 0x1) r1 = socket(0x25, 0x1, 0x3) (async) sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x24004141) (async) sendmmsg$auto(0x3, &(0x7f0000000000)={{0x0, 0x2, 0x0, 0x106, 0x0, 0x1, 0x3}, 0xed7138c}, 0x7, 0x0) (async) syz_genetlink_get_family_id$auto_net_shaper(0x0, 0xffffffffffffffff) close_range$auto(0x2, 0x8, 0x0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = socket(0x2b, 0x1, 0x0) ioctl$auto(0xc8, 0x894c, 0x5c8d) r4 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$auto(0x3, 0x89e0, 0xfffffffffffff4e0) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) ioctl$auto(r4, 0x8004552d, 0xea3) (async) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) (async) socket(0xa, 0x3, 0x0) (async) bind$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3}, 0x6b) (async) connect$auto(0x3, &(0x7f00000000c0)=@in={0x2, 0x3}, 0x55) r5 = openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, &(0x7f0000000140), 0x100, 0x0) ioctl$auto_USB_RAW_IOCTL_EP_DISABLE(r5, 0x40045506, 0x0) close_range$auto(0x2, 0x8000, 0x0) sendmsg$auto_NL80211_CMD_SET_WOWLAN(0xffffffffffffffff, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000001180)={&(0x7f0000000080)={0x1c, 0x0, 0x1, 0x70bd27, 0x25dfdbfe, {}, [@NL80211_ATTR_BSS_SHORT_PREAMBLE={0xffffffffffffff81, 0x1d, 0x2}]}, 0x1c}}, 0x4000000) r6 = openat$auto_tracing_saved_cmdlines_size_fops_trace(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/debug/tracing/saved_cmdlines_size\x00', 0x40040, 0x0) sendmsg$auto_NL80211_CMD_LEAVE_IBSS(r1, &(0x7f0000001680)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001640)={&(0x7f00000016c0)={0x14c4, 0x0, 0x100, 0x70bd27, 0x25dfdbfd, {}, [@NL80211_ATTR_TDLS_DIALOG_TOKEN={0x5, 0x89, 0x9}, @NL80211_ATTR_EHT_CAPABILITY={0x29, 0x136, "8557c75ebcbacb804a29f5105a877c40bd405136afe6cf658c46733a4bf9b63875bc1ec984"}, @NL80211_ATTR_TDLS_ACTION={0x5, 0x88, 0x23}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1000}, @NL80211_ATTR_REKEY_DATA={0x1450, 0x7a, 0x0, 0x1, [@typed={0x8, 0xc8, 0x0, 0x0, @u32=0x27a3}, @typed={0x1004, 0xb, 0x0, 0x0, @binary="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"}, @generic="d873a09ba1f3b5862541a52653d720c5b2daf624b6908729e524e8e25daec5c7b270944da97ea2c76f530e40ca9fabef508b949b358bf25b508a3cf019c730f2ae89b990fbfc90cba51e02640ef9f4a331f9b5ff08bd600edfaf2cc2b8ab55b44dc9113105dfe892aa7de259f4893d86461ab85ba1678b602fd8db52885f8d943451ec90a84e706126ae2c7ff131842e315e407ce766cbf3fb26c67ea686465c1e3dac4ee2d045bf123bc8dac661248e9fb23f76304028a8b6c165d3a3f28b34331b72cc3a70c6cfd56a5efec8127d7e5ee6142742d944b3a64d1059fe608b161bcf8763", @nested={0xc0, 0xce, 0x0, 0x1, [@generic="48695097586c320ed632ec", @generic="407f3a7444077fad0e372243fddb1a79c208e26e17ae17f9960130b2537474ebdd465679c793d6d703ee248ee6bb57b40159a26b2d5e6e9e616cc0284cbb8e32158d580610a23b59bb1cad4a2e7502f2be443150fdff9e430da76143f72e5575029ede1cdd1c00e38a718ee113769076895e98d068a9b085c21017e6c59a81395e30eecc7bc18f0279889ebccd9f1407f497bcabac6dd2e8f071b36a2b28b47a440116f930a95c33fda42cb6bf", @nested={0x4, 0x78}]}, @nested={0x294, 0x80, 0x0, 0x1, [@typed={0x8, 0x93, 0x0, 0x0, @ipv4=@multicast1}, @typed={0x8, 0x92, 0x0, 0x0, @fd=r6}, @typed={0x8, 0x56, 0x0, 0x0, @fd=r3}, @typed={0x8, 0xe6, 0x0, 0x0, @ipv4=@empty}, @generic="c7765b076dcaca6857a35b7c2c57bd8f987901ead64a467e541d12d908a1973b33cb60b026f6f6d9b199229b3ee24df3e6d0ea63bba1acf931e840704e5edc49d6cc1310db43ffb21e2a3bbf54c37da21da4f199a192f893cca3e91e822c96c850b81301d3906bb356b3c9f6d43e3c51110865b5532f288a7f6bf4066420e44e80796117f71bf4d5d829f9beb9dc38e74646643d68ce79bb16", @generic="36ad6fe7330fae2fb11a930c84dbe381f13006cc1a0a0612a9af7d26092415ad2365669ac7c04f870261df92aef56153bd18d99c2db888a6db5baf40ba3e588f9cf223803e7b4756162a1d70f548c348a7e2edcfb428be3baec516b4e66986ca92dd6da8f652ad456d34938c1f2d274e9f99d715cce2e82741dd909a3dc1015a453fd53cee7f8e282daf8ef924a22d6c", @generic="ad570252c4a5a1f39f1c7bd6146747ed955d376742d0edb0822b0186771e8ede16bd1bd393bde97b21f51c058f9e9d83b4b6986cc0950ccfbe96e6819655674382df897bea7d4f7c95765ab2af9547da265a8fcccd63aae5660c0ae0f439796e24a48914cf4927b48049f9c0b02fc395cc8ecf4325bde73a9863f3a65e134021b3a798a0b3b0112062df99a8923eb1e216f567217020c50000000000000000c8ae527baaa9a389134bff17c044ce48949a75215d0d47525d819e8d022c745baeb3561b44a61a2dc2ff27a58d1922415d8852d3c4519932aef7a664d9121f2954d9b6e84657f91ffea19ba6b8a2c972dfcfaf312964d8ad04f7c97eb0a7a2227600aeced1f23c75e215c3840968a1f8e0706456cc5bc6f3bf2e1a3e0e29dde7957909427ee82c83ee9c019c071712ff3f7eeee3d5b88e25b235cca0a7033908e6c0f63f0001d623"]}, @typed={0x8, 0x13a, 0x0, 0x0, @fd=r2}]}, @NL80211_ATTR_WIPHY_TX_POWER_LEVEL={0x8, 0x62, 0x5}, @NL80211_ATTR_WIPHY_ANTENNA_TX={0x8, 0x69, 0x7}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8}]}, 0x14c4}, 0x1, 0x0, 0x0, 0x4040041}, 0x20000081) 1.927322557s ago: executing program 0 (id=1146): r0 = socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0x40009, 0x3, 0x9b72, 0x7, 0x28000) sendmsg$auto_NETDEV_CMD_QUEUE_GET(r0, &(0x7f0000003040)={0x0, 0x0, &(0x7f0000003000)={&(0x7f0000000040)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="1b1af54f8ddc5ee701002cbd7000fbdbdf250afa008008000b0000000000080001"], 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x20008810) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x10, 0x2, 0x0) sendmsg$auto_OVS_DP_CMD_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0f0026bd7000fcdbdf9907"], 0x24}, 0x1, 0x0, 0x0, 0x20000800}, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xfffffffffffffc5a, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x6044814}, 0x4000000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="13"], 0x1ac}}, 0x4004) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) mq_open$auto(0x0, 0xde8, 0xb, 0x0) mq_unlink$auto(0x0) mmap$auto(0x0, 0x2020009, 0x3, 0x800000000000eb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) r1 = openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, 0x0, 0x1541, 0x0) close_range$auto(0x2, 0x8, 0x0) mlockall$auto(0x1) io_uring_setup$auto(0x9cb, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$auto__ctl_fops_dm_ioctl(r1, 0x4, 0x0) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0xf, 0x18000, 0x6, 0x80000010, 0xffffffffffffffff, 0x1) ioctl$auto_SNDCTL_DSP_CHANNELS(0xffffffffffffffff, 0xc0045006, 0x0) connect$auto(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x1e, "566d4519645f43dd4b4ebdd352ce"}, 0x8) sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, 0x0, 0x800) ioctl$auto_SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, 0x0) 1.182817332s ago: executing program 3 (id=1147): mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x7fffffff, 0x300000000000) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), r0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) (async) semctl$auto(0x80001ff, 0x804, 0x13, 0x4) (async) r2 = socket(0x1d, 0x2, 0x7) getsockopt$auto(r2, 0x6b, 0xdc5a, 0xfffffffffffffffe, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) (async) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) (async) r3 = open(0x0, 0x163340, 0x6a) (async) socket(0x2, 0x80802, 0x0) (async) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) connect$auto(0x3, &(0x7f0000000140)=@in={0x2, 0x4, @multicast2}, 0x55) (async) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7fffffe) (async) io_uring_setup$auto(0x9e6, 0x0) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000001480), r4) sendmsg$auto_ETHTOOL_MSG_CHANNELS_SET(r4, &(0x7f0000001cc0)={0x0, 0x0, &(0x7f0000001c80)={&(0x7f0000000240)={0x2c, r5, 0x2d, 0x70bd2a, 0x25dfdbfc, {}, [@ETHTOOL_A_CHANNELS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8800}, 0x0) (async) sendmsg$auto_ETHTOOL_MSG_STATS_GET(r3, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0x3c, r5, 0x400, 0x70bd27, 0x25dfdbfd, {}, [@ETHTOOL_A_STATS_SRC={0x8, 0x5, 0xad3e}, @ETHTOOL_A_STATS_SRC={0x8, 0x5, 0x4}, @ETHTOOL_A_STATS_SRC={0x8, 0x5, 0x5}, @ETHTOOL_A_STATS_SRC={0x8, 0x5, 0xc0000000}, @ETHTOOL_A_STATS_SRC={0x8, 0x5, 0x7c5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x880}, 0x10044) (async) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="2f212dbd7000fcdbdf252100000008000300", @ANYRES32=r6, @ANYBLOB="08009e00", @ANYBLOB='F8'], 0x24}}, 0x4000000) (async) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 1.040275219s ago: executing program 4 (id=1148): r0 = socket(0x6, 0x4, 0x770) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), r0) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'geneve0\x00', 0x0}) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'veth1_to_bond\x00', 0x0}) sendmsg$auto_ETHTOOL_MSG_STRSET_GET(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x54, r2, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@ETHTOOL_A_STRSET_HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_PHY_INDEX={0x8, 0x4, 0x67}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1f}, @ETHTOOL_A_HEADER_PHY_INDEX={0x8, 0x4, 0x9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @ETHTOOL_A_STRSET_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0xfffffffd}]}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000}, 0x440c4) (async) syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000200), r1) r5 = openat$auto_set_tracer_fops_trace(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/tracing/current_tracer\x00', 0x200, 0x0) read$auto_set_tracer_fops_trace(r5, &(0x7f0000000280)=""/73, 0x49) (async) r6 = fspick$auto(0xffffffffffffffff, &(0x7f0000000300)='./file0\x00', 0x7fff) ioctl$auto_TIOCSETD2(r6, 0x5423, 0x0) (async) write$auto_evm_xattr_ops_evm_secfs(r6, &(0x7f0000000340)="e4e555bded7a299180f4848cff7051dbd829e89c2be5e653e7c85b32c83e25c521d155657e4b9cc916a9c63b3365d8837955b26ef147f22d03471690b7cc27523297da884e62d11b1bf94615ccce6eb41546615446e3adc151b8a4c6e096c015c2c4f397ff13c28a8d2f61cba223b8fdf2905f27bf06bb70d2d2eece72ae5d1e6eae8ee38c3809f85ab29318fac80ff526e88d0d0bf566e771f1c762727b25ada0d4c6a6b9adf56da1d32613227b262cb6a1190ea6173cc73984078fb3150ef33cc5cafca3d4c9b711b3d6c655e883d41ec5f204a84025b08a137002cda33d11b8f3a2ce9d8016b5dd9a502ceb26", 0xee) r7 = syz_genetlink_get_family_id$auto_wireguard(&(0x7f0000000480), r0) sendmsg$auto_WG_CMD_SET_DEVICE(r0, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x44, r7, 0x20, 0x70bd26, 0x25dfdbfd, {}, [@WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e23}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e21}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x800}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x1}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x3}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e20}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000040}, 0x4000080) ustat$auto(0x3ff, &(0x7f00000005c0)={0x39, 0x6, "c4b51d559a03", "4f9248bf4d0e"}) (async) mknod$auto(&(0x7f0000000600)='./file1\x00', 0x9, 0x9) (async) r8 = syz_genetlink_get_family_id$auto_ioam6(&(0x7f0000000680), r1) sendmsg$auto_IOAM6_CMD_DEL_SCHEMA(r6, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x24, r8, 0x1, 0x70bd29, 0x25dfdbff, {}, [@IOAM6_ATTR_SC_ID={0x8, 0x4, 0x5}, @IOAM6_ATTR_SC_ID={0x8, 0x4, 0x79c}]}, 0x24}, 0x1, 0x0, 0x0, 0x44004}, 0x40) (async) r9 = syz_genetlink_get_family_id$auto_net_dm(&(0x7f00000007c0), r0) sendmsg$auto_NET_DM_CMD_CONFIG(r6, &(0x7f0000001980)={&(0x7f0000000780), 0xc, &(0x7f0000001940)={&(0x7f0000000800)={0x111c, r9, 0x400, 0x70bd2b, 0x25dfdbfc, {}, [@NET_DM_ATTR_HW_DROPS={0x4}, @NET_DM_ATTR_SW_DROPS={0x4}, @NET_DM_ATTR_HW_DROPS={0x4}, @NET_DM_ATTR_UNSPEC={0x1004, 0x0, "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"}, @NET_DM_ATTR_UNSPEC={0xf0, 0x0, "8486102c729eb69fbb5bcd0ab816b550f8409f2ff250ba07c5d2d620dd93cb32ede4f6953d19618ddb63d9b9831affa131610384ed659d012429681f3bea446e2c3b058d0b2f8a423d35bd563fc07b0ef4a82b0ee033dcd7aef502618a775b241784aab93fad0fbb922e80fbfd72194ebdd0c7da056fdae3ed91bdbd1ccb500f9dd1879079e08df0bdbdab35056a1b3f1af51b273c77c1297dbeb9afde47c8a9c1ddf5442bd1935f5e9a38e99135f88f36c0725ec822ade8b44c0d013696e12cb0a65853443cc34ae3555e59b5357bacb53113c70da75fa5d102254bca86186e73eb9ad9b64932aa0edf334f"}, @NET_DM_ATTR_SW_DROPS={0x4}, @NET_DM_ATTR_HW_DROPS={0x4}]}, 0x111c}, 0x1, 0x0, 0x0, 0x800}, 0x20000080) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_ADD_LINK(r10, &(0x7f0000001b00)={&(0x7f00000019c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001ac0)={&(0x7f0000001a00)={0xa0, 0x0, 0x10, 0x70bd29, 0x25dfdbfb, {}, [@NL80211_ATTR_REG_ALPHA2={0x5b, 0x21, "45192770a95a7ab868edc32e6abacc7129dd5cab47412f0bf0e99d8f82354c9c811865cfb556294689f856ab718f9b97e81ee8d884cd6fd0689163bb63b918b9d2f05a2fdbe1cf9244f37e9aa3fb50865511526ebe101f"}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_CIPHER_SUITE_GROUP={0x8, 0x4a, 0x7}, @NL80211_ATTR_PUNCT_BITMAP={0x8, 0x142, 0x8}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0xffffffff}, @NL80211_ATTR_WIPHY_NAME={0xa, 0x2, 'IOAM6\x00'}, @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x9}]}, 0xa0}, 0x1, 0x0, 0x0, 0x40000}, 0x800) (async) mprotect$auto(0x8, 0x0, 0xd) (async) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_IOAM6_CMD_ADD_SCHEMA(r11, &(0x7f0000001cc0)={&(0x7f0000001b40)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001c80)={&(0x7f0000001b80)={0x100, r8, 0x100, 0x70bd2a, 0x25dfdbfd, {}, [@IOAM6_ATTR_SC_ID={0x8, 0x4, 0x4}, @IOAM6_ATTR_SC_ID={0x8, 0x4, 0x1d}, @IOAM6_ATTR_SC_DATA={0xd3, 0x5, "377529375bfd9735e36be743b90b28eecd2f6309fd96361ad746da5e75a3c0a7a8731fec3999d4fb17cfe671da47b47ae63e0fe07d1807154ce821a53996d022653eed3c202ba28b7606da542a44906824d9b14aacc33b5e86f3eb6833951c673e051f70f17e5943010a7c8961abd6a8885bb5e05490a47c665e23b605400ef55cc65119ad65b7837d4e61276670958d638cc0374cac409dbce1dcce632524f81b78251f0952119abc9b0b556682daeb5d2bbcad8af4c33f950a9ac2d8de531bceeffce667701a814845a88e07a623"}, @IOAM6_ATTR_SC_ID={0x8, 0x4, 0x1}]}, 0x100}, 0x1, 0x0, 0x0, 0xc040}, 0x8008800) (async) mprotect$auto(0x7ff, 0x5, 0x50118f30) socket$nl_generic(0x10, 0x3, 0x10) (async) write$auto_vga_arb_device_fops_vgaarb(r6, &(0x7f0000001d00)="a86e19a7679558824f7ab463a97b5787cfbd729a53b707e9e8a292dfb3f4b6627c1cd6bf4dcb1d5f41eefaf2f67ede1b4b0cb7434f69371cbe831e47e09ad9d4fc6af83fb7cb65a21a", 0x49) (async) r12 = openat$auto_fragmentation_threshold_ops_(0xffffffffffffff9c, &(0x7f0000001d80)='/sys/kernel/debug/ieee80211/phy1/fragmentation_threshold\x00', 0x101400, 0x0) mmap$auto(0xe, 0x6, 0x1, 0xffff, r12, 0x6) 931.286705ms ago: executing program 3 (id=1149): futex$auto(0xfffffffffffffffc, 0x9, 0x7, 0xffffffffffffffff, 0xfffffffffffffffc, 0x8) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) socket(0xa, 0x5, 0x0) socket(0xa, 0x801, 0x84) socket(0xa, 0x5, 0x0) dup3$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0xa, 0x801, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x8, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x7, 0x9}, 0x4}, 0x7, 0x2) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0xffb8, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x7, 0xfffffffc}, 0x7}, 0x4, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0x13, 0xffffffffffffffff, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$auto(0x0, &(0x7f00000001c0)=@task_fd_query={0x2, 0x4, 0x3, 0x2, 0x8, 0xc, 0xe3, 0x400000000a, 0x3}, 0x6f4) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00') r3 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/pid_for_children\x00') close_range$auto(r2, 0xfffffffffffff000, 0x2) socket$nl_generic(0x10, 0x3, 0x10) pidfd_open$auto(0x1, 0x0) setresuid$auto(0xffffffffffffffff, 0x8, 0x8000) setns(r3, 0x20000000) socket(0x10, 0x2, 0x0) select$auto(0x0, &(0x7f0000000040)={[0x9, 0x4, 0x34, 0x9, 0x1, 0x1, 0xa, 0x6, 0x5, 0x1, 0x0, 0xcf, 0x5, 0x213, 0x5, 0xb98]}, 0x0, 0x0, 0x0) sendmsg$auto_TIPC_NL_BEARER_DISABLE(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000040)=ANY=[@ANYBLOB='J\x00\x00\x00', @ANYRES16, @ANYBLOB="010025bd7000fcdbdf25020000002c0001808008001b000000"], 0x40}, 0x1, 0x0, 0x0, 0x20000000}, 0x44) sendmsg$auto_NL80211_CMD_GET_REG(r1, &(0x7f00000000c0)={0x0, 0xfffffffffffffdf9, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4004810}, 0x0) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="04000000", @ANYRES16=0x0, @ANYBLOB="10002cbd7000fddbdf250a"], 0x14}, 0x1, 0x0, 0x0, 0x20008000}, 0x10004010) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYRES16=r0], 0x1ac}}, 0x24040890) 416.274548ms ago: executing program 4 (id=1150): umask$auto(0x6) r0 = socket(0xa, 0x2, 0x3a) setsockopt$auto(r0, 0x29, 0x49, &(0x7f0000000040)='!\x00', 0x1ff) r1 = open(&(0x7f0000000080)='./file0\x00', 0x22ac2, 0x5d745cb200ae4d7b) fchown$auto(r1, 0xe5a, 0x5) 3.712ms ago: executing program 4 (id=1151): r0 = socket(0x10, 0x2, 0x0) sendmsg$auto_NETDEV_CMD_QUEUE_GET(0xffffffffffffffff, &(0x7f0000003040)={0x0, 0x0, &(0x7f0000003000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="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", @ANYRES16=0x0, @ANYBLOB="010600bd7000fbdbdf250a0000000800", @ANYRES16=r0], 0x1c}, 0x1, 0x0, 0x0, 0x20040004}, 0x20008810) (async) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ram3\x00', 0x60700, 0x0) read$auto_def_blk_fops_fs(r1, &(0x7f0000000140)=""/194, 0xc2) mmap$auto(0x1, 0x5, 0x2, 0x12, 0xffffffffffffffff, 0x8001) write$auto(0x3, 0x0, 0xfffffdef) (async) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000300)='/proc/partitions\x00', 0x200, 0x0) (async) clone$auto(0x21, 0x9, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x6) mmap$auto(0x0, 0x200006, 0x2, 0x40eb1, 0x602, 0x300000000000) sendmsg$auto_L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x801}, 0x1) mremap$auto(0x0, 0x7, 0x80000000000001d4, 0x3, 0x20000000) syz_open_procfs$namespace(0x0, 0x0) (async) syz_open_procfs$namespace(0x0, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'vlan0\x00', 0x0}) sendmsg$auto_ETHTOOL_MSG_PSE_GET(r0, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x28, 0x0, 0x400, 0x70bd2d, 0x25dfdbff, {}, [@ETHTOOL_A_PSE_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000084}, 0x80) sendfile$auto(0x1, 0x3, 0x0, 0x100000) (async) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="18"], 0x1ac}}, 0x40000) (async) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x60742, 0x0) (async) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) (async) r3 = socket(0x2b, 0x1, 0x1) getsockopt$auto(r3, 0x1, 0x1a, 0x0, 0x0) (async) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) (async) mmap$auto(0x0, 0x200006, 0x2, 0x40eb1, 0x602, 0x300000000000) (async) mbind$auto(0x0, 0x2, 0x2, &(0x7f0000002100)=0x4, 0x7, 0x0) get_mempolicy$auto(0x0, 0x0, 0x7f, 0x41ff, 0x3) (async) write$auto(0x3, 0x0, 0x7fffffff) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) signalfd4$auto(0xffffffff, 0x0, 0x8, 0x800) 0s ago: executing program 3 (id=1152): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002f00), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_PAUSE_SET(r0, 0x0, 0x4040000) mmap$auto(0x0, 0x400005, 0xfffffffffffffffe, 0x9b72, 0x2, 0x8000) r1 = socket(0x2a, 0x6, 0x80) bind$auto(r1, &(0x7f0000000080)=@l2={0x1f, 0x3, @none, 0x2}, 0x6b) connect$auto(0x3, &(0x7f00000000c0), 0x55) recvfrom$auto(0x3, 0x0, 0x8, 0x100, 0x0, 0xfffffffffffffffd) fcntl$auto(0xffffffffffffffff, 0x401, 0x5) sendmsg$auto_OVS_METER_CMD_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc0}, 0x40) eventfd$auto(0xf24) mmap$auto(0x0, 0x2030009, 0x3, 0x100000000eb1, 0xfffffff7fffffff7, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) pidfd_open$auto(0x1, 0x0) socket(0xa, 0x3, 0x100) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) eventfd$auto(0x3) eventfd$auto(0x0) socket(0x2, 0x5, 0xfffffffc) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) pipe$auto(0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.152' (ED25519) to the list of known hosts. [ 65.371806][ T5816] cgroup: Unknown subsys name 'net' [ 65.476691][ T5816] cgroup: Unknown subsys name 'cpuset' [ 65.485084][ T5816] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 66.865726][ T5816] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 68.580103][ T5838] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 68.588624][ T5838] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 68.597085][ T5838] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 68.605863][ T5838] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 68.615829][ T5837] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 68.623508][ T5838] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 68.629292][ T5839] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 68.631847][ T5837] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 68.638271][ T5840] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 68.646043][ T5839] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 68.652336][ T5840] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 68.660444][ T5839] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 68.668812][ T5837] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 68.673483][ T5839] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 68.681190][ T5837] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 68.686972][ T5839] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 68.694967][ T5837] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 68.701454][ T5839] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 68.708806][ T5837] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 68.722188][ T5839] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 68.722203][ T5837] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 68.722541][ T5837] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 68.729779][ T5839] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 68.737387][ T5837] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 69.095349][ T5827] chnl_net:caif_netlink_parms(): no params data found [ 69.176438][ T5826] chnl_net:caif_netlink_parms(): no params data found [ 69.223264][ T5828] chnl_net:caif_netlink_parms(): no params data found [ 69.232558][ T5825] chnl_net:caif_netlink_parms(): no params data found [ 69.261731][ T5827] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.269511][ T5827] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.277161][ T5827] bridge_slave_0: entered allmulticast mode [ 69.284455][ T5827] bridge_slave_0: entered promiscuous mode [ 69.338082][ T5827] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.345462][ T5827] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.352613][ T5827] bridge_slave_1: entered allmulticast mode [ 69.359571][ T5827] bridge_slave_1: entered promiscuous mode [ 69.434864][ T5827] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.446526][ T5827] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.461772][ T5826] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.469739][ T5826] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.477470][ T5826] bridge_slave_0: entered allmulticast mode [ 69.484153][ T5826] bridge_slave_0: entered promiscuous mode [ 69.506356][ T5826] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.513507][ T5826] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.521630][ T5826] bridge_slave_1: entered allmulticast mode [ 69.528310][ T5826] bridge_slave_1: entered promiscuous mode [ 69.552470][ T5827] team0: Port device team_slave_0 added [ 69.595535][ T5827] team0: Port device team_slave_1 added [ 69.604265][ T5826] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.613425][ T5828] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.620991][ T5828] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.628527][ T5828] bridge_slave_0: entered allmulticast mode [ 69.635365][ T5828] bridge_slave_0: entered promiscuous mode [ 69.642393][ T5825] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.650211][ T5825] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.657572][ T5825] bridge_slave_0: entered allmulticast mode [ 69.665173][ T5825] bridge_slave_0: entered promiscuous mode [ 69.674149][ T5826] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.698022][ T5828] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.705345][ T5828] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.712470][ T5828] bridge_slave_1: entered allmulticast mode [ 69.719927][ T5828] bridge_slave_1: entered promiscuous mode [ 69.733314][ T5825] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.740704][ T5825] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.747973][ T5825] bridge_slave_1: entered allmulticast mode [ 69.754638][ T5825] bridge_slave_1: entered promiscuous mode [ 69.770521][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.777632][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.803726][ T5827] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.837267][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.844452][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.870696][ T5827] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.883954][ T5828] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.904163][ T5825] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.915992][ T5826] team0: Port device team_slave_0 added [ 69.929480][ T5828] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.949326][ T5825] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.960288][ T5826] team0: Port device team_slave_1 added [ 70.006117][ T5828] team0: Port device team_slave_0 added [ 70.020591][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.027814][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.054162][ T5826] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.068218][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.075459][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.101468][ T5826] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.121222][ T5828] team0: Port device team_slave_1 added [ 70.140247][ T5825] team0: Port device team_slave_0 added [ 70.164372][ T5827] hsr_slave_0: entered promiscuous mode [ 70.170620][ T5827] hsr_slave_1: entered promiscuous mode [ 70.187717][ T5825] team0: Port device team_slave_1 added [ 70.194101][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.201064][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.227183][ T5828] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.239671][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.246718][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.272927][ T5828] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.322143][ T5826] hsr_slave_0: entered promiscuous mode [ 70.329081][ T5826] hsr_slave_1: entered promiscuous mode [ 70.337289][ T5826] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 70.345230][ T5826] Cannot create hsr debugfs directory [ 70.387030][ T5825] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.394174][ T5825] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.420478][ T5825] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.446458][ T5828] hsr_slave_0: entered promiscuous mode [ 70.452594][ T5828] hsr_slave_1: entered promiscuous mode [ 70.458989][ T5828] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 70.466690][ T5828] Cannot create hsr debugfs directory [ 70.476707][ T5825] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.484377][ T5825] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.510748][ T5825] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.602968][ T5825] hsr_slave_0: entered promiscuous mode [ 70.609365][ T5825] hsr_slave_1: entered promiscuous mode [ 70.617955][ T5825] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 70.625681][ T5825] Cannot create hsr debugfs directory [ 70.784663][ T5837] Bluetooth: hci3: command tx timeout [ 70.790453][ T5837] Bluetooth: hci0: command tx timeout [ 70.793752][ T52] Bluetooth: hci2: command tx timeout [ 70.839982][ T5827] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 70.854272][ T52] Bluetooth: hci1: command tx timeout [ 70.857755][ T5827] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 70.875243][ T5827] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 70.884565][ T5827] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 70.935032][ T5826] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 70.945755][ T5826] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 70.958724][ T5826] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 70.968459][ T5826] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 71.028271][ T5828] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 71.046368][ T5828] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 71.073516][ T5828] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 71.095718][ T5828] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 71.135141][ T5825] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 71.145087][ T5825] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 71.164568][ T5825] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 71.184691][ T5825] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 71.243351][ T5827] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.255730][ T5826] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.297764][ T5827] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.313406][ T5826] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.345647][ T62] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.352926][ T62] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.365325][ T62] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.372432][ T62] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.389261][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.396422][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.421943][ T5828] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.456043][ T54] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.463172][ T54] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.489742][ T5828] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.568415][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.575575][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.585476][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.592592][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.656570][ T5825] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.701633][ T5825] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.722014][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.729205][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.747637][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.757990][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.794858][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.801973][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.892370][ T5827] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.980543][ T5826] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.017667][ T5827] veth0_vlan: entered promiscuous mode [ 72.051186][ T5827] veth1_vlan: entered promiscuous mode [ 72.070479][ T5828] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.116437][ T5825] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.141600][ T5826] veth0_vlan: entered promiscuous mode [ 72.166941][ T5827] veth0_macvtap: entered promiscuous mode [ 72.177146][ T5827] veth1_macvtap: entered promiscuous mode [ 72.189072][ T5826] veth1_vlan: entered promiscuous mode [ 72.240317][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.266233][ T5825] veth0_vlan: entered promiscuous mode [ 72.272026][ T5828] veth0_vlan: entered promiscuous mode [ 72.285065][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.302516][ T5826] veth0_macvtap: entered promiscuous mode [ 72.316833][ T5828] veth1_vlan: entered promiscuous mode [ 72.325564][ T5825] veth1_vlan: entered promiscuous mode [ 72.334067][ T5826] veth1_macvtap: entered promiscuous mode [ 72.352708][ T5827] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.362883][ T5827] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.372494][ T5827] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.381613][ T5827] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.429692][ T5826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.442149][ T5826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.458706][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.474956][ T5826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.486997][ T5826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.498163][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.510057][ T5828] veth0_macvtap: entered promiscuous mode [ 72.522830][ T5826] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.532086][ T5826] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.541191][ T5826] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.550422][ T5826] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.569815][ T5828] veth1_macvtap: entered promiscuous mode [ 72.579670][ T5825] veth0_macvtap: entered promiscuous mode [ 72.594959][ T5825] veth1_macvtap: entered promiscuous mode [ 72.620255][ T5828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.632354][ T5828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.642893][ T5828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.653643][ T5828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.665535][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.695619][ T5825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.706820][ T5825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.717124][ T5825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.727845][ T5825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.737757][ T5825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.748863][ T5825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.760344][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.770537][ T5828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.781362][ T5828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.793069][ T5828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.804207][ T5828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.815919][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.838277][ T5825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.848862][ T5825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.854417][ T52] Bluetooth: hci2: command tx timeout [ 72.860065][ T5825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.864900][ T5838] Bluetooth: hci0: command tx timeout [ 72.875130][ T5837] Bluetooth: hci3: command tx timeout [ 72.886119][ T5825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.896138][ T5825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.907441][ T5825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.918369][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.929882][ T5828] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.939280][ T5828] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.943176][ T5837] Bluetooth: hci1: command tx timeout [ 72.948233][ T5828] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.962389][ T5828] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.976211][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.984297][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.996538][ T5825] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.006567][ T5825] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.016407][ T5825] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.027589][ T5825] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.118497][ T3499] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.123518][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.137290][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.146145][ T3499] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.218317][ T54] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.250702][ T5827] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 73.251875][ T54] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.279561][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.287610][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.334170][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.356676][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.403960][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.411834][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.538852][ T54] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.559596][ T5890] Zero length message leads to an empty skb [ 73.573372][ T54] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.687736][ T5895] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 73.745623][ T5897] netlink: 186 bytes leftover after parsing attributes in process `syz.2.3'. [ 74.933833][ T5837] Bluetooth: hci2: command tx timeout [ 74.939587][ T52] Bluetooth: hci0: command tx timeout [ 74.945134][ T5838] Bluetooth: hci3: command tx timeout [ 74.953978][ T5914] mkiss: ax0: crc mode is auto. [ 75.014010][ T52] Bluetooth: hci1: command tx timeout [ 75.246071][ T5925] netlink: zone id is out of range [ 75.269878][ T5925] netlink: zone id is out of range [ 75.315971][ T5925] netlink: zone id is out of range [ 75.325000][ T5925] netlink: zone id is out of range [ 75.343659][ T5925] netlink: zone id is out of range [ 75.348823][ T5925] netlink: zone id is out of range [ 75.391631][ T5925] netlink: zone id is out of range [ 76.125279][ T5943] netlink: zone id is out of range [ 76.142113][ T5926] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 76.147994][ T5943] netlink: zone id is out of range [ 76.193730][ T5943] netlink: zone id is out of range [ 77.013772][ T52] Bluetooth: hci0: command tx timeout [ 77.019667][ T5838] Bluetooth: hci3: command tx timeout [ 77.025236][ T5837] Bluetooth: hci2: command tx timeout [ 77.094645][ T5837] Bluetooth: hci1: command tx timeout [ 77.903861][ T5972] lo: entered allmulticast mode [ 77.924369][ T5972] netlink: 28 bytes leftover after parsing attributes in process `syz.2.19'. [ 78.074143][ T5977] lo: left allmulticast mode [ 78.862666][ T5991] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 79.671407][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 81.334886][ T6017] netlink: zone id is out of range [ 81.340058][ T6017] netlink: zone id is out of range [ 81.358180][ T6017] netlink: zone id is out of range [ 81.363350][ T6017] netlink: zone id is out of range [ 81.420410][ T6017] netlink: zone id is out of range [ 81.458095][ T6017] netlink: zone id is out of range [ 81.463290][ T6017] netlink: zone id is out of range [ 81.532133][ T6017] netlink: zone id is out of range [ 81.543741][ T6017] netlink: zone id is out of range [ 81.549119][ T6017] netlink: zone id is out of range [ 81.987087][ T975] cfg80211: failed to load regulatory.db [ 82.306300][ T6026] netlink: 4 bytes leftover after parsing attributes in process `syz.2.30'. [ 82.377779][ T6029] mmap: syz.1.31 (6029) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 83.994909][ T6050] netlink: 4 bytes leftover after parsing attributes in process `syz.3.34'. [ 85.325070][ T6066] netlink: 28 bytes leftover after parsing attributes in process `syz.3.37'. [ 85.552127][ T6067] netlink: 28 bytes leftover after parsing attributes in process `syz.2.38'. [ 85.613777][ T6067] bridge_slave_1: left allmulticast mode [ 85.619486][ T6067] bridge_slave_1: left promiscuous mode [ 85.638587][ T6067] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.685186][ T6067] bridge_slave_0: left allmulticast mode [ 85.693499][ T6067] bridge_slave_0: left promiscuous mode [ 85.701394][ T6067] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.074271][ T6082] process 'syz.2.42' launched './file0' with NULL argv: empty string added [ 86.460655][ T6092] net_ratelimit: 1 callbacks suppressed [ 86.460676][ T6092] netlink: zone id is out of range [ 86.471535][ T6092] netlink: zone id is out of range [ 86.478508][ T6092] netlink: zone id is out of range [ 88.616684][ T29] audit: type=1800 audit(1736292881.323:2): pid=6136 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.55" name="features" dev="configfs" ino=9298 res=0 errno=0 [ 88.648106][ T6134] netlink: 28 bytes leftover after parsing attributes in process `syz.1.54'. [ 88.678596][ T6134] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 88.806272][ T6124] netlink: 4 bytes leftover after parsing attributes in process `syz.3.50'. [ 90.699852][ T6159] netlink: 12 bytes leftover after parsing attributes in process `syz.2.60'. [ 91.645995][ T29] audit: type=1800 audit(1736292884.363:3): pid=6180 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.64" name="features" dev="configfs" ino=8660 res=0 errno=0 [ 91.693979][ T6177] netlink: 306 bytes leftover after parsing attributes in process `syz.2.72'. [ 91.995397][ T6187] netlink: 28 bytes leftover after parsing attributes in process `syz.0.66'. [ 92.046942][ T6187] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 94.044718][ T6233] netlink: 28 bytes leftover after parsing attributes in process `syz.3.78'. [ 94.083940][ T6233] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 94.929324][ T6247] netlink: 8 bytes leftover after parsing attributes in process `syz.0.83'. [ 95.204765][ T6250] netlink: zone id is out of range [ 95.246027][ T6250] netlink: zone id is out of range [ 95.310033][ T6250] netlink: zone id is out of range [ 95.363678][ T6250] netlink: zone id is out of range [ 95.388530][ T6250] netlink: zone id is out of range [ 95.493718][ T6250] netlink: zone id is out of range [ 95.523365][ T6250] netlink: zone id is out of range [ 95.570730][ T6250] netlink: zone id is out of range [ 95.651971][ T6250] netlink: zone id is out of range [ 95.752802][ T6250] netlink: zone id is out of range [ 98.201656][ T6296] netlink: 28 bytes leftover after parsing attributes in process `syz.1.93'. [ 99.016040][ T6318] netlink: 8 bytes leftover after parsing attributes in process `syz.1.100'. [ 99.103049][ T6320] sp0: Synchronizing with TNC [ 99.130065][ T6321] netlink: 8 bytes leftover after parsing attributes in process `syz.1.100'. [ 101.098254][ T6376] netlink: 'syz.2.112': attribute type 29 has an invalid length. [ 101.127942][ T6376] netlink: 334 bytes leftover after parsing attributes in process `syz.2.112'. [ 101.274456][ T6381] netlink: 314 bytes leftover after parsing attributes in process `syz.1.113'. [ 101.689012][ T6382] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 101.708235][ T6382] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 102.373996][ T6403] netlink: 28 bytes leftover after parsing attributes in process `syz.1.117'. [ 102.691865][ T6413] ======================================================= [ 102.691865][ T6413] WARNING: The mand mount option has been deprecated and [ 102.691865][ T6413] and is ignored by this kernel. Remove the mand [ 102.691865][ T6413] option from the mount to silence this warning. [ 102.691865][ T6413] ======================================================= [ 103.126462][ T6420] netlink: 130 bytes leftover after parsing attributes in process `syz.1.122'. [ 103.641714][ T6434] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 105.374755][ T6463] netlink: 342 bytes leftover after parsing attributes in process `syz.0.130'. [ 105.539952][ T6459] netlink: 342 bytes leftover after parsing attributes in process `syz.0.130'. [ 107.954042][ T6490] binder: BINDER_SET_CONTEXT_MGR already set [ 107.960322][ T6490] binder: 6488:6490 ioctl 4018620d 9 returned -16 [ 108.300253][ T6515] netlink: 338 bytes leftover after parsing attributes in process `syz.2.141'. [ 108.343993][ T6515] netlink: 338 bytes leftover after parsing attributes in process `syz.2.141'. [ 108.373530][ T6515] netlink: 70 bytes leftover after parsing attributes in process `syz.2.141'. [ 108.386784][ T6503] cgroup: fork rejected by pids controller in /syz3 [ 112.334140][ T6673] Process accounting resumed [ 112.359677][ T6673] synth uevent: /module/zl10353: unknown uevent action string [ 113.775716][ T6693] netlink: 28 bytes leftover after parsing attributes in process `syz.2.154'. [ 114.990009][ T6705] can: request_module (can-proto-0) failed. [ 115.011765][ T29] audit: type=1804 audit(1736292907.723:4): pid=6705 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.157" name="#)-\&[}" dev="mqueue" ino=10487 res=1 errno=0 [ 115.032590][ T6705] kernel read not supported for file /#)-\&[} (pid: 6705 comm: syz.0.157) [ 115.088513][ T29] audit: type=1800 audit(1736292907.803:5): pid=6705 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.157" name="#)-\&[}" dev="mqueue" ino=10487 res=0 errno=0 [ 115.153809][ T29] audit: type=1804 audit(1736292907.843:6): pid=6705 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.157" name="#)-\&[}" dev="mqueue" ino=10487 res=1 errno=0 [ 115.193647][ T29] audit: type=1804 audit(1736292907.843:7): pid=6705 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.157" name="#)-\&[}" dev="mqueue" ino=10487 res=1 errno=0 [ 117.675157][ T6712] ecryptfs_miscdev_write: Dropping miscdev message of unrecognized type [0] [ 122.825545][ T6755] net_ratelimit: 12 callbacks suppressed [ 122.825594][ T6755] netlink: zone id is out of range [ 122.872706][ T6755] netlink: zone id is out of range [ 122.913811][ T6755] netlink: zone id is out of range [ 122.966962][ T6755] netlink: zone id is out of range [ 122.972159][ T6755] netlink: zone id is out of range [ 123.008189][ T6755] netlink: zone id is out of range [ 123.034860][ T6755] netlink: zone id is out of range [ 123.053069][ T6755] netlink: zone id is out of range [ 123.079362][ T6755] netlink: zone id is out of range [ 123.097807][ T6755] netlink: zone id is out of range [ 123.285146][ T6766] netlink: 8 bytes leftover after parsing attributes in process `syz.0.169'. [ 123.883395][ T6777] netlink: 648 bytes leftover after parsing attributes in process `syz.2.173'. [ 123.903195][ T6777] netlink: 16 bytes leftover after parsing attributes in process `syz.2.173'. [ 124.314864][ T6785] netlink: 28 bytes leftover after parsing attributes in process `syz.1.174'. [ 124.395644][ T6785] netdevsim netdevsim1 netdevsim2: entered allmulticast mode [ 125.173320][ T6806] Invalid ELF header magic: != ELF [ 125.877709][ T6813] netlink: 28 bytes leftover after parsing attributes in process `syz.0.181'. [ 126.025736][ T6811] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 126.059258][ T6811] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 126.246344][ T6811] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 126.325113][ T6811] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 126.331119][ T6811] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 126.362075][ T6811] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 126.370861][ T6811] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 126.376998][ T6811] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 126.384899][ T6811] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 126.429691][ T6811] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 126.436623][ T6811] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 126.461184][ T6811] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 127.455445][ T6840] netlink: 4 bytes leftover after parsing attributes in process `syz.1.190'. [ 127.493810][ T5837] Bluetooth: hci0: command 0x0c1a tx timeout [ 128.373874][ T5837] Bluetooth: hci1: command 0x0c1a tx timeout [ 128.453732][ T5837] Bluetooth: hci3: command 0x0c1a tx timeout [ 128.454085][ T5838] Bluetooth: hci2: command 0x0c1a tx timeout [ 129.574002][ T5838] Bluetooth: hci0: command 0x0c1a tx timeout [ 130.454399][ T5838] Bluetooth: hci1: command 0x0c1a tx timeout [ 130.533655][ T5838] Bluetooth: hci3: command 0x0c1a tx timeout [ 130.539815][ T5838] Bluetooth: hci2: command 0x0c1a tx timeout [ 131.653761][ T5838] Bluetooth: hci0: command 0x0c1a tx timeout [ 131.712137][ T6860] netlink: 326 bytes leftover after parsing attributes in process `syz.2.194'. [ 131.726641][ T6866] ptrace attach of "./syz-executor exec"[5827] was attempted by "./syz-executor exec"[6866] [ 131.852494][ T6871] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 131.905525][ T6871] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 132.536862][ T5838] Bluetooth: hci1: command 0x0c1a tx timeout [ 132.613725][ T5838] Bluetooth: hci2: command 0x0c1a tx timeout [ 132.619874][ T5837] Bluetooth: hci3: command 0x0c1a tx timeout [ 132.857854][ T6888] netlink: 40 bytes leftover after parsing attributes in process `syz.0.201'. [ 133.187235][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.193836][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 135.272995][ T6923] netlink: 12 bytes leftover after parsing attributes in process `syz.2.208'. [ 140.052864][ T6996] netlink: 330 bytes leftover after parsing attributes in process `syz.1.222'. [ 140.459977][ T7000] nvme_fabrics: missing parameter 'transport=%s' [ 140.474114][ T7000] nvme_fabrics: missing parameter 'nqn=%s' [ 140.480188][ T7006] nvme_fabrics: unknown parameter or missing value 'ÎW-^ Ä' in ctrl creation request [ 142.506959][ T7033] Invalid ELF header magic: != ELF [ 143.162077][ T7058] Invalid ELF header magic: != ELF [ 143.341402][ T7036] netlink: 28 bytes leftover after parsing attributes in process `syz.2.229'. [ 143.395793][ T7036] netdevsim netdevsim2 netdevsim3: entered allmulticast mode [ 144.249263][ T7057] netlink: 28 bytes leftover after parsing attributes in process `syz.0.236'. [ 144.494026][ T7057] geneve1: entered allmulticast mode [ 145.185700][ T7079] Line length is too long: Should be less than 4094 [ 146.974383][ T7100] program syz.1.247 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 146.984048][ T7100] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 148.884447][ T7123] net_ratelimit: 2 callbacks suppressed [ 148.884467][ T7123] netlink: zone id is out of range [ 148.923475][ T7123] netlink: zone id is out of range [ 148.947877][ T7123] netlink: zone id is out of range [ 148.953083][ T7123] netlink: zone id is out of range [ 149.063719][ T7123] netlink: zone id is out of range [ 149.105595][ T7123] netlink: zone id is out of range [ 149.110764][ T7123] netlink: zone id is out of range [ 149.142842][ T7123] netlink: zone id is out of range [ 149.173307][ T7123] netlink: zone id is out of range [ 149.208307][ T7117] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 149.216272][ T7123] netlink: zone id is out of range [ 149.243812][ T7117] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 149.249934][ T7117] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 149.315115][ T7117] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 150.453701][ T5838] Bluetooth: hci0: command 0x0c1a tx timeout [ 151.254943][ T5838] Bluetooth: hci2: command 0x0c1a tx timeout [ 151.254953][ T5837] Bluetooth: hci1: command 0x0c1a tx timeout [ 151.345461][ T5838] Bluetooth: hci3: command 0x0c1a tx timeout [ 153.452569][ T7170] netlink: 28 bytes leftover after parsing attributes in process `syz.0.264'. [ 155.083468][ T7189] netlink: 264 bytes leftover after parsing attributes in process `syz.1.268'. [ 155.557772][ T7164] syz.3.243 (7164) used greatest stack depth: 20384 bytes left [ 157.383825][ T7183] syz.0.267 (7183) used greatest stack depth: 20256 bytes left [ 157.495977][ T7182] syz.0.267 (7182) used greatest stack depth: 19560 bytes left [ 158.375663][ T7239] net_ratelimit: 2 callbacks suppressed [ 158.375684][ T7239] netlink: zone id is out of range [ 158.414205][ T7239] netlink: zone id is out of range [ 158.481230][ T7239] netlink: zone id is out of range [ 158.519435][ T7239] netlink: zone id is out of range [ 158.594091][ T7239] netlink: zone id is out of range [ 158.645058][ T7239] netlink: zone id is out of range [ 158.650264][ T7239] netlink: zone id is out of range [ 158.683691][ T7239] netlink: zone id is out of range [ 158.713724][ T7239] netlink: zone id is out of range [ 158.724224][ T7239] netlink: zone id is out of range [ 164.598234][ T7334] netlink: 346 bytes leftover after parsing attributes in process `syz.2.305'. [ 166.196336][ T7375] net_ratelimit: 2 callbacks suppressed [ 166.196357][ T7375] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 168.386551][ T29] audit: type=1326 audit(1736292961.103:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7411 comm="syz.0.318" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f433cd85d29 code=0x0 [ 170.132006][ T7449] netlink: zone id is out of range [ 170.161530][ T7449] netlink: zone id is out of range [ 170.195776][ T7449] netlink: zone id is out of range [ 170.202373][ T7449] netlink: zone id is out of range [ 170.230445][ T7449] netlink: zone id is out of range [ 170.247902][ T7449] netlink: zone id is out of range [ 170.433617][ T7449] netlink: zone id is out of range [ 170.438792][ T7449] netlink: zone id is out of range [ 170.530400][ T7449] netlink: zone id is out of range [ 171.336447][ T7462] syz.2.328 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 171.700688][ T7472] Invalid ELF header magic: != ELF [ 172.091439][ T7482] netlink: 28 bytes leftover after parsing attributes in process `syz.0.329'. [ 172.555286][ T7488] FAULT_INJECTION: forcing a failure. [ 172.555286][ T7488] name failslab, interval 1, probability 0, space 0, times 1 [ 172.639218][ T7488] CPU: 1 UID: 0 PID: 7488 Comm: syz.2.335 Not tainted 6.13.0-rc6-syzkaller-00036-gfbfd64d25c7a #0 [ 172.649872][ T7488] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 172.659951][ T7488] Call Trace: [ 172.663230][ T7488] [ 172.666163][ T7488] dump_stack_lvl+0x16c/0x1f0 [ 172.670857][ T7488] should_fail_ex+0x497/0x5b0 [ 172.675544][ T7488] ? fs_reclaim_acquire+0xae/0x150 [ 172.680666][ T7488] should_failslab+0xc2/0x120 [ 172.685357][ T7488] __kmalloc_node_noprof+0xd1/0x520 [ 172.690566][ T7488] ? file_tty_write.constprop.0+0x281/0x9a0 [ 172.696470][ T7488] ? __kvmalloc_node_noprof+0xad/0x1a0 [ 172.701943][ T7488] __kvmalloc_node_noprof+0xad/0x1a0 [ 172.707238][ T7488] file_tty_write.constprop.0+0x6dd/0x9a0 [ 172.712972][ T7488] ? security_file_permission+0x71/0x210 [ 172.718619][ T7488] vfs_write+0x5ae/0x1150 [ 172.722956][ T7488] ? __pfx_tty_write+0x10/0x10 [ 172.727733][ T7488] ? __pfx_vfs_write+0x10/0x10 [ 172.732506][ T7488] ? __fget_files+0x40/0x3a0 [ 172.737119][ T7488] ksys_write+0x12b/0x250 [ 172.741458][ T7488] ? __pfx_ksys_write+0x10/0x10 [ 172.746319][ T7488] do_syscall_64+0xcd/0x250 [ 172.750835][ T7488] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 172.756739][ T7488] RIP: 0033:0x7f1c57785d29 [ 172.761161][ T7488] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 172.780786][ T7488] RSP: 002b:00007f1c5864d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 172.789400][ T7488] RAX: ffffffffffffffda RBX: 00007f1c57975fa0 RCX: 00007f1c57785d29 [ 172.797381][ T7488] RDX: 000000000000effd RSI: 0000000000000000 RDI: 0000000000000003 [ 172.805532][ T7488] RBP: 00007f1c5864d090 R08: 0000000000000000 R09: 0000000000000000 [ 172.813510][ T7488] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 172.821484][ T7488] R13: 0000000000000000 R14: 00007f1c57975fa0 R15: 00007ffc5a6cac58 [ 172.829476][ T7488] [ 173.607932][ T7502] netlink: 4 bytes leftover after parsing attributes in process `syz.0.338'. [ 175.341002][ T7491] net_ratelimit: 3 callbacks suppressed [ 175.341022][ T7491] netlink: zone id is out of range [ 175.381250][ T7491] netlink: zone id is out of range [ 175.401898][ T7491] netlink: zone id is out of range [ 175.412092][ T7491] netlink: zone id is out of range [ 175.433418][ T7491] netlink: zone id is out of range [ 175.490003][ T7491] netlink: zone id is out of range [ 175.511912][ T7491] netlink: zone id is out of range [ 175.540762][ T7491] netlink: zone id is out of range [ 175.569360][ T7536] netlink: 1204 bytes leftover after parsing attributes in process `syz.2.344'. [ 175.588230][ T7491] netlink: zone id is out of range [ 175.597054][ T7491] netlink: zone id is out of range [ 176.128836][ T7545] netlink: 330 bytes leftover after parsing attributes in process `syz.1.346'. [ 177.237961][ T7560] Invalid ELF header magic: != ELF [ 178.706601][ T7562] netlink: 28 bytes leftover after parsing attributes in process `syz.2.352'. [ 178.770072][ T7562] geneve1: entered allmulticast mode [ 180.034840][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 180.254483][ T7589] tipc: Started in network mode [ 180.262144][ T7589] tipc: Node identity ee00, cluster identity 4711 [ 180.313715][ T7589] tipc: Node number set to 60928 [ 180.368884][ T7593] netlink: 28 bytes leftover after parsing attributes in process `syz.2.359'. [ 180.437794][ T7593] macsec0: entered allmulticast mode [ 180.463786][ T7593] veth1_macvtap: entered allmulticast mode [ 182.057233][ T7617] netlink: 4 bytes leftover after parsing attributes in process `syz.0.363'. [ 184.122225][ T7660] workqueue: name exceeds WQ_NAME_LEN. Truncating to: !PjE ùrõ£Ò„yù*›"¤l-ý¤ôy–ú„ [ 184.764657][ T7671] netlink: 28 bytes leftover after parsing attributes in process `syz.0.380'. [ 186.135205][ T7693] ACPI: EC: Assuming SCI_EVT clearing on QR_EC writes [ 186.929529][ T5838] Bluetooth: hci0: ACL packet for unknown connection handle 0 [ 187.273316][ T7725] net_ratelimit: 14 callbacks suppressed [ 187.273338][ T7725] netlink: zone id is out of range [ 187.294578][ T7725] netlink: zone id is out of range [ 187.304019][ T7725] netlink: zone id is out of range [ 187.309316][ T7725] netlink: zone id is out of range [ 187.319480][ T7725] netlink: zone id is out of range [ 187.333651][ T7725] netlink: zone id is out of range [ 187.352306][ T7725] netlink: zone id is out of range [ 187.371178][ T7725] netlink: zone id is out of range [ 187.393502][ T7725] netlink: zone id is out of range [ 187.412218][ T7725] netlink: zone id is out of range [ 192.053204][ T6508] syz.3.140 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 192.164739][ T6508] CPU: 1 UID: 0 PID: 6508 Comm: syz.3.140 Not tainted 6.13.0-rc6-syzkaller-00036-gfbfd64d25c7a #0 [ 192.175397][ T6508] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 192.185487][ T6508] Call Trace: [ 192.188777][ T6508] [ 192.191709][ T6508] dump_stack_lvl+0x16c/0x1f0 [ 192.196404][ T6508] dump_header+0x101/0x900 [ 192.200833][ T6508] oom_kill_process+0x270/0xa60 [ 192.205690][ T6508] ? mem_cgroup_out_of_memory+0x8d/0x270 [ 192.211333][ T6508] out_of_memory+0x351/0x1700 [ 192.216030][ T6508] ? __pfx_out_of_memory+0x10/0x10 [ 192.221152][ T6508] ? rcu_read_unlock+0x17/0x60 [ 192.225933][ T6508] ? find_held_lock+0x2d/0x110 [ 192.230709][ T6508] mem_cgroup_out_of_memory+0x207/0x270 [ 192.236292][ T6508] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 192.242390][ T6508] ? do_raw_spin_unlock+0x172/0x230 [ 192.247619][ T6508] try_charge_memcg+0x54c/0xaf0 [ 192.252501][ T6508] ? __pfx_try_charge_memcg+0x10/0x10 [ 192.257906][ T6508] ? get_mem_cgroup_from_mm+0x87/0x5f0 [ 192.263405][ T6508] ? get_mem_cgroup_from_mm+0x87/0x5f0 [ 192.268995][ T6508] ? get_mem_cgroup_from_mm+0x131/0x5f0 [ 192.274558][ T6508] __mem_cgroup_charge+0x9b/0x280 [ 192.279602][ T6508] shmem_alloc_and_add_folio+0x507/0xc00 [ 192.285252][ T6508] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 192.291419][ T6508] ? shmem_allowable_huge_orders+0xd0/0x410 [ 192.297336][ T6508] shmem_get_folio_gfp+0x689/0x1530 [ 192.302594][ T6508] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 192.308233][ T6508] ? mark_held_locks+0x9f/0xe0 [ 192.313011][ T6508] ? timestamp_truncate+0x21f/0x2e0 [ 192.318230][ T6508] shmem_write_begin+0x161/0x300 [ 192.323183][ T6508] ? __pfx_shmem_write_begin+0x10/0x10 [ 192.328648][ T6508] ? inode_set_ctime_current+0x2a7/0x900 [ 192.334297][ T6508] ? balance_dirty_pages_ratelimited_flags+0x92/0x1270 [ 192.341166][ T6508] ? __pfx_inode_set_ctime_current+0x10/0x10 [ 192.347160][ T6508] generic_perform_write+0x2ba/0x920 [ 192.352458][ T6508] ? __pfx_generic_perform_write+0x10/0x10 [ 192.358272][ T6508] ? __mark_inode_dirty+0x2a5/0xe50 [ 192.363493][ T6508] ? generic_update_time+0xcf/0xf0 [ 192.368615][ T6508] ? mnt_put_write_access_file+0x45/0xf0 [ 192.374264][ T6508] shmem_file_write_iter+0x10e/0x140 [ 192.379568][ T6508] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 192.385380][ T6508] __kernel_write_iter+0x318/0xa80 [ 192.390502][ T6508] ? __pfx___kernel_write_iter+0x10/0x10 [ 192.396138][ T6508] ? get_dump_page+0x15b/0x230 [ 192.400915][ T6508] ? __pfx___might_resched+0x10/0x10 [ 192.406210][ T6508] dump_user_range+0x389/0x8c0 [ 192.411002][ T6508] ? __pfx_dump_user_range+0x10/0x10 [ 192.416303][ T6508] ? elf_coredump_extra_notes_write+0xbe/0x430 [ 192.422476][ T6508] ? __pfx_writenote+0x10/0x10 [ 192.427294][ T6508] elf_core_dump+0x2787/0x3880 [ 192.432093][ T6508] ? __pfx_elf_core_dump+0x10/0x10 [ 192.437226][ T6508] ? try_to_wake_up+0x949/0x1490 [ 192.442187][ T6508] ? __pfx_lock_release+0x10/0x10 [ 192.447238][ T6508] ? rwsem_wake.isra.0+0xbe/0x120 [ 192.452299][ T6508] ? rcu_is_watching+0x12/0xc0 [ 192.457075][ T6508] ? trace_lock_acquire+0x14e/0x1f0 [ 192.462291][ T6508] ? __pfx_sort+0x10/0x10 [ 192.466631][ T6508] ? get_signal+0x23f3/0x2610 [ 192.471323][ T6508] ? do_coredump+0x2dd5/0x43e0 [ 192.476100][ T6508] do_coredump+0x2dd5/0x43e0 [ 192.480713][ T6508] ? __pfx_do_coredump+0x10/0x10 [ 192.485663][ T6508] ? irqentry_exit_to_user_mode+0x13f/0x280 [ 192.491621][ T6508] get_signal+0x23f3/0x2610 [ 192.496146][ T6508] ? __pfx_get_signal+0x10/0x10 [ 192.501006][ T6508] ? rcu_is_watching+0x12/0xc0 [ 192.505780][ T6508] ? trace_irq_disable.constprop.0+0xea/0x140 [ 192.511861][ T6508] arch_do_signal_or_restart+0x90/0x7e0 [ 192.517421][ T6508] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 192.523600][ T6508] ? do_user_addr_fault+0xa4b/0x13f0 [ 192.528904][ T6508] irqentry_exit_to_user_mode+0x13f/0x280 [ 192.534637][ T6508] asm_exc_page_fault+0x26/0x30 [ 192.539505][ T6508] RIP: 0033:0x15 [ 192.543052][ T6508] Code: Unable to access opcode bytes at 0xffffffffffffffeb. [ 192.550415][ T6508] RSP: 002b:000000000000000a EFLAGS: 00010212 [ 192.556512][ T6508] RAX: 000000000000000b RBX: 00007ff0bd576240 RCX: 00007ff0bd385d29 [ 192.564487][ T6508] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000020003b46 [ 192.572463][ T6508] RBP: 00007ff0bd401b08 R08: 0000000000000002 R09: 0000000000000000 [ 192.580442][ T6508] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 192.588412][ T6508] R13: 0000000000000000 R14: 00007ff0bd576240 R15: 00007ffd519e4e98 [ 192.596405][ T6508] [ 192.611641][ T6508] memory: usage 307200kB, limit 307200kB, failcnt 16991 [ 192.641055][ T6508] memory+swap: usage 428172kB, limit 9007199254740988kB, failcnt 0 [ 192.649350][ T6508] kmem: usage 2960kB, limit 9007199254740988kB, failcnt 0 [ 192.656613][ T6508] Memory cgroup stats for /syz3: [ 192.656877][ T6508] cache 309108736 [ 192.666448][ T6508] rss 364544 [ 192.669711][ T6508] rss_huge 0 [ 192.673517][ T6508] shmem 309108736 [ 192.679394][ T6508] mapped_file 63299584 [ 192.685054][ T6508] dirty 0 [ 192.688034][ T6508] writeback 0 [ 192.691331][ T6508] workingset_refault_anon 2545 [ 192.696286][ T6508] workingset_refault_file 11 [ 192.701407][ T6508] swap 123875328 [ 192.705251][ T6508] swapcached 2011136 [ 192.709158][ T6508] pgpgin 201998 [ 192.712604][ T6508] pgpgout 126973 [ 192.716827][ T6508] pgfault 54488 [ 192.720843][ T6508] pgmajfault 251 [ 192.733613][ T6508] inactive_anon 129667072 [ 192.737992][ T6508] active_anon 181817344 [ 192.742160][ T6508] inactive_file 0 [ 192.764298][ T6508] active_file 0 [ 192.781901][ T6508] unevictable 0 [ 192.785788][ T6508] hierarchical_memory_limit 314572800 [ 192.791188][ T6508] hierarchical_memsw_limit 9223372036854771712 [ 192.804511][ T6508] total_cache 309108736 [ 192.808710][ T6508] total_rss 364544 [ 192.812450][ T6508] total_rss_huge 0 [ 192.860085][ T6508] total_shmem 309108736 [ 192.885920][ T6508] total_mapped_file 63299584 [ 192.900821][ T6508] total_dirty 0 [ 192.916319][ T6508] total_writeback 0 [ 192.920174][ T6508] total_workingset_refault_anon 2545 [ 192.955964][ T6508] total_workingset_refault_file 11 [ 192.961196][ T6508] total_swap 123875328 [ 192.983723][ T6508] total_swapcached 2011136 [ 192.988201][ T6508] total_pgpgin 201998 [ 192.992205][ T6508] total_pgpgout 126973 [ 193.023734][ T6508] total_pgfault 54488 [ 193.028291][ T6508] total_pgmajfault 251 [ 193.032816][ T6508] total_inactive_anon 129667072 [ 193.037957][ T6508] total_active_anon 181817344 [ 193.044354][ T6508] total_inactive_file 0 [ 193.048587][ T6508] total_active_file 0 [ 193.052582][ T6508] total_unevictable 0 [ 193.063645][ T6508] anon_cost 0 [ 193.066984][ T6508] file_cost 0 [ 193.070498][ T6508] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.140,pid=6531,uid=0 [ 193.087464][ T6508] Memory cgroup out of memory: Killed process 6531 (syz.3.140) total-vm:164068kB, anon-rss:924kB, file-rss:27416kB, shmem-rss:61668kB, UID:0 pgtables:260kB oom_score_adj:1000 [ 193.229728][ T7752] netlink: 28 bytes leftover after parsing attributes in process `syz.2.395'. [ 194.634714][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.641192][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.258516][ T31] oom_reaper: reaped process 6531 (syz.3.140), now anon-rss:0kB, file-rss:24816kB, shmem-rss:61668kB [ 197.622489][ T7791] device-mapper: ioctl: Unable to rename non-existent device, to uuid „ [ 198.824437][ T7819] random: crng reseeded on system resumption [ 198.947190][ T7821] warning: `syz.2.406' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 199.872896][ T7824] HfR: entered promiscuous mode [ 199.884276][ T6508] syz.3.140 (6508) used greatest stack depth: 17104 bytes left [ 199.913947][ T7824] netlink: 12 bytes leftover after parsing attributes in process `syz.0.408'. [ 199.922938][ T7824] HfR: left promiscuous mode [ 202.591049][ T7843] netlink: 350 bytes leftover after parsing attributes in process `syz.3.411'. [ 203.613729][ T7868] capability: warning: `syz.3.417' uses 32-bit capabilities (legacy support in use) [ 204.248681][ T7875] netlink: 28 bytes leftover after parsing attributes in process `syz.0.419'. syzkaller syzkaller login: [ 208.371640][ T7924] crash hp: kexec_trylock() failed, kdump image may be inaccurate [ 208.454422][ T7927] nbd: must specify an index to disconnect [ 209.724576][ T5837] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 209.753839][ T5837] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 209.778446][ T5837] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 209.813965][ T5837] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 209.824166][ T5837] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 209.831558][ T5837] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 209.927964][ T7904] kexec: Could not allocate control_code_buffer [ 210.872771][ T7950] netlink: 'syz.3.435': attribute type 1 has an invalid length. [ 211.392493][ T7934] chnl_net:caif_netlink_parms(): no params data found [ 211.634967][ T7965] net_ratelimit: 2 callbacks suppressed [ 211.634989][ T7965] netlink: zone id is out of range [ 211.703657][ T7965] netlink: zone id is out of range [ 211.708830][ T7965] netlink: zone id is out of range [ 211.733648][ T7965] netlink: zone id is out of range [ 211.738833][ T7965] netlink: zone id is out of range [ 211.753769][ T7965] netlink: zone id is out of range [ 211.758938][ T7965] netlink: zone id is out of range [ 211.783610][ T7965] netlink: zone id is out of range [ 211.788777][ T7965] netlink: zone id is out of range [ 211.803827][ T7965] netlink: zone id is out of range [ 211.903766][ T5838] Bluetooth: hci4: command tx timeout [ 212.254318][ T7934] bridge0: port 1(bridge_slave_0) entered blocking state [ 212.263758][ T7934] bridge0: port 1(bridge_slave_0) entered disabled state [ 212.288898][ T7934] bridge_slave_0: entered allmulticast mode [ 212.316549][ T7934] bridge_slave_0: entered promiscuous mode [ 212.331371][ T7934] bridge0: port 2(bridge_slave_1) entered blocking state [ 212.340585][ T7934] bridge0: port 2(bridge_slave_1) entered disabled state [ 212.354468][ T7934] bridge_slave_1: entered allmulticast mode [ 212.361722][ T7934] bridge_slave_1: entered promiscuous mode [ 212.468914][ T7934] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 212.509547][ T7934] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 212.645512][ T7934] team0: Port device team_slave_0 added [ 212.669844][ T7934] team0: Port device team_slave_1 added [ 212.729602][ T7934] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 212.739254][ T7934] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 212.783716][ T7934] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 212.797791][ T7934] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 212.810997][ T7934] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 212.838678][ T7934] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 212.906607][ T7934] hsr_slave_0: entered promiscuous mode [ 212.915368][ T7934] hsr_slave_1: entered promiscuous mode [ 212.921660][ T7934] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 212.945010][ T7934] Cannot create hsr debugfs directory [ 213.787304][ T7934] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 213.819286][ T7997] MTRR 2 not used [ 213.853056][ T7934] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 213.887252][ T7934] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 213.909883][ T7934] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 213.980115][ T5837] Bluetooth: hci4: command tx timeout [ 214.219797][ T7934] 8021q: adding VLAN 0 to HW filter on device bond0 [ 214.265436][ T7934] 8021q: adding VLAN 0 to HW filter on device team0 [ 214.315158][ T7708] bridge0: port 1(bridge_slave_0) entered blocking state [ 214.322804][ T7708] bridge0: port 1(bridge_slave_0) entered forwarding state [ 214.369451][ T7715] bridge0: port 2(bridge_slave_1) entered blocking state [ 214.376646][ T7715] bridge0: port 2(bridge_slave_1) entered forwarding state [ 214.506506][ T7934] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 214.807790][ T7934] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 215.791812][ T7934] veth0_vlan: entered promiscuous mode [ 215.838887][ T7934] veth1_vlan: entered promiscuous mode [ 216.054092][ T5837] Bluetooth: hci4: command tx timeout [ 216.156448][ T7934] veth0_macvtap: entered promiscuous mode [ 216.180334][ T7934] veth1_macvtap: entered promiscuous mode [ 216.196773][ T8028] Format for deleting device is "id" (uint). [ 216.308545][ T7934] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 216.337175][ T7934] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 216.353597][ T7934] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 216.373627][ T7934] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 216.386334][ T7934] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 216.397258][ T7934] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 216.413607][ T7934] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 216.424652][ T7934] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 216.445886][ T7934] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 216.491615][ T7934] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 216.513343][ T7934] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 216.541149][ T7934] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 216.564052][ T7934] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 216.580087][ T7934] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 216.603316][ T7934] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 216.623626][ T7934] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 216.634486][ T7934] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 216.646496][ T7934] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 216.693031][ T7934] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.711643][ T7934] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.743729][ T7934] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.752510][ T7934] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.937820][ T7708] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 216.973622][ T7708] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 217.055950][ T3499] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 217.072971][ T3499] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 218.134447][ T5837] Bluetooth: hci4: command tx timeout [ 219.100838][ T8071] H: entered promiscuous mode [ 219.133402][ T8071] netlink: 32 bytes leftover after parsing attributes in process `syz.4.454'. [ 220.783768][ T8092] net_ratelimit: 90 callbacks suppressed [ 220.783790][ T8092] netlink: Unknown conntrack attr (0) [ 221.601648][ T8107] syz.4.461 uses obsolete (PF_INET,SOCK_PACKET) [ 223.350405][ T8144] Invalid ELF header magic: != ELF [ 224.179424][ T8166] syz_tun: tun_chr_ioctl cmd 35108 [ 224.271899][ T8165] netlink: zone id is out of range [ 224.297385][ T8165] netlink: zone id is out of range [ 224.302555][ T8165] netlink: zone id is out of range [ 224.387941][ T8165] netlink: zone id is out of range [ 224.476074][ T8165] netlink: zone id is out of range [ 224.544954][ T8165] netlink: zone id is out of range [ 224.551477][ T8165] netlink: zone id is out of range [ 224.574088][ T8165] netlink: zone id is out of range [ 224.579506][ T8165] netlink: zone id is out of range [ 225.993242][ T8186] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input9 [ 226.420721][ T8188] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input10 [ 226.835615][ T8210] netlink: 'syz.4.486': attribute type 4 has an invalid length. [ 227.031367][ T8215] WARNING! power/level is deprecated; use power/control instead [ 228.513920][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 228.794683][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 230.043961][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 230.319180][ T0] NOHZ tick-stop error: local softirq work is pending, handler #282!!! [ 230.330754][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 230.401136][ T8292] netlink: 4 bytes leftover after parsing attributes in process `syz.2.503'. [ 230.410509][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 230.465271][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 231.494134][ T8319] netlink: 8 bytes leftover after parsing attributes in process `syz.3.508'. [ 232.070904][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 232.472918][ T8345] net_ratelimit: 3 callbacks suppressed [ 232.472941][ T8345] netlink: zone id is out of range [ 232.484782][ T8345] netlink: zone id is out of range [ 232.489935][ T8345] netlink: zone id is out of range [ 232.500655][ T8345] netlink: zone id is out of range [ 232.506846][ T8345] netlink: zone id is out of range [ 232.511994][ T8345] netlink: zone id is out of range [ 232.517670][ T8345] netlink: zone id is out of range [ 232.534762][ T8345] netlink: zone id is out of range [ 232.539901][ T8345] netlink: zone id is out of range [ 232.583710][ T8345] netlink: zone id is out of range [ 232.748137][ T8355] netlink: 334 bytes leftover after parsing attributes in process `syz.3.515'. [ 232.815315][ T8355] IPv6: NLM_F_CREATE should be specified when creating new route [ 232.991554][ T8359] netlink: 334 bytes leftover after parsing attributes in process `syz.3.515'. [ 233.311885][ T8368] netlink: 1204 bytes leftover after parsing attributes in process `syz.2.517'. [ 233.415128][ T8370] netlink: 8 bytes leftover after parsing attributes in process `syz.2.517'. [ 235.699785][ T8420] netlink: 4 bytes leftover after parsing attributes in process `syz.0.530'. [ 236.918158][ T8456] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 236.961170][ T8456] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 238.624985][ T8478] netlink: 'syz.2.542': attribute type 3 has an invalid length. [ 238.632697][ T8478] netlink: 16 bytes leftover after parsing attributes in process `syz.2.542'. [ 239.374162][ T8506] netlink: 4 bytes leftover after parsing attributes in process `syz.0.549'. [ 239.422842][ T8511] netlink: 338 bytes leftover after parsing attributes in process `syz.2.550'. [ 240.349244][ T8544] net_ratelimit: 2 callbacks suppressed [ 240.349268][ T8544] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 241.287582][ T8559] netlink: 28 bytes leftover after parsing attributes in process `syz.2.559'. [ 243.864637][ T8603] netlink: 8 bytes leftover after parsing attributes in process `syz.3.565'. [ 246.059952][ T8645] netlink: 'syz.3.577': attribute type 4 has an invalid length. [ 246.591661][ T8653] Process accounting resumed [ 248.606886][ T8672] netlink: 'syz.4.583': attribute type 3 has an invalid length. [ 248.656910][ T8672] netlink: 332 bytes leftover after parsing attributes in process `syz.4.583'. [ 248.685276][ T8675] netlink: 'syz.4.583': attribute type 3 has an invalid length. [ 248.692969][ T8675] netlink: 332 bytes leftover after parsing attributes in process `syz.4.583'. [ 256.056572][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.062928][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.294779][ T8782] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 256.360949][ T8782] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 256.569018][ T8786] Invalid ELF header magic: != ELF [ 256.603054][ T8786] Invalid ELF header magic: != ELF [ 256.700882][ T8786] Invalid ELF header magic: != ELF [ 256.753370][ T8786] Invalid ELF header magic: != ELF [ 256.884585][ T8786] Invalid ELF header magic: != ELF [ 256.890371][ T8786] Invalid ELF header magic: != ELF [ 256.980242][ T8786] Invalid ELF header magic: != ELF [ 257.823586][ T29] audit: type=1400 audit(8277292086.720:9): apparmor="DENIED" operation="setprocattr" info="invalid" error=-22 profile="unconfined" pid=8811 comm="syz.4.610" [ 258.154604][ T8819] netlink: 28 bytes leftover after parsing attributes in process `syz.4.612'. [ 258.835693][ T8819] team0: Port device team_slave_0 removed [ 259.629684][ T8842] syz_tun: tun_chr_ioctl cmd 2147767507 [ 259.664650][ T8842] syz_tun: tun_chr_ioctl cmd 2147767507 [ 260.511340][ T8855] netlink: zone id is out of range [ 260.544649][ T8855] netlink: zone id is out of range [ 260.549854][ T8855] netlink: zone id is out of range [ 260.614219][ T8855] netlink: zone id is out of range [ 260.694652][ T8855] netlink: zone id is out of range [ 260.718199][ T8855] netlink: zone id is out of range [ 260.757019][ T8855] netlink: zone id is out of range [ 260.801899][ T8855] netlink: zone id is out of range [ 260.853736][ T8855] netlink: zone id is out of range [ 260.905079][ T8855] netlink: zone id is out of range [ 263.369753][ T8885] netlink: 326 bytes leftover after parsing attributes in process `syz.3.625'. [ 275.515189][ T9067] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 275.554758][ T9067] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 275.560858][ T9067] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 275.585769][ T9067] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 275.592209][ T9067] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 275.679602][ T9067] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 276.933737][ T5838] Bluetooth: hci0: command 0x0c1a tx timeout [ 276.971164][ T9082] netlink: 8 bytes leftover after parsing attributes in process `syz.0.672'. [ 277.573683][ T5838] Bluetooth: hci3: command 0x0c1a tx timeout [ 277.579767][ T5838] Bluetooth: hci2: command 0x0c1a tx timeout [ 277.653621][ T5838] Bluetooth: hci4: command 0x0c1a tx timeout [ 279.753867][ T5838] Bluetooth: hci4: command 0x0c1a tx timeout [ 279.875250][ T9124] net_ratelimit: 10 callbacks suppressed [ 279.875270][ T9124] openvswitch: netlink: Duplicate key (type 15). [ 281.813952][ T5838] Bluetooth: hci4: command 0x0c1a tx timeout [ 286.596264][ T29] audit: type=1804 audit(8277292115.510:10): pid=9223 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.703" name="/newroot/sys/kernel/debug/tracing/dynamic_events" dev="tracefs" ino=33 res=1 errno=0 [ 286.650387][ T9205] netlink: 16 bytes leftover after parsing attributes in process `syz.0.699'. [ 291.823790][ T9276] openvswitch: netlink: Unknown nsh attribute 0 [ 293.769077][ T9310] netlink: 326 bytes leftover after parsing attributes in process `syz.2.722'. [ 298.172758][ T9402] netlink: 8 bytes leftover after parsing attributes in process `syz.0.743'. [ 299.075259][ T9413] netlink: 28 bytes leftover after parsing attributes in process `syz.4.745'. [ 299.151415][ T9413] ip6gre0: entered promiscuous mode [ 300.987268][ T29] audit: type=1800 audit(8277292129.900:11): pid=9457 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.754" name="dbroot" dev="configfs" ino=23722 res=0 errno=0 [ 301.011468][ T9457] db_root: cannot open: òÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿ [ 304.290085][ T9541] netlink: 4 bytes leftover after parsing attributes in process `syz.4.775'. [ 306.823770][ T9583] netlink: 12 bytes leftover after parsing attributes in process `syz.2.787'. [ 311.133231][ T9658] bond0: option packets_per_slave: invalid value ( Xµn‘pæ) [ 311.153486][ T9658] bond0: option packets_per_slave: allowed values 0 - 65535 [ 311.304332][ T9669] netlink: 'syz.3.805': attribute type 1 has an invalid length. [ 311.342826][ T9669] netlink: 'syz.3.805': attribute type 1 has an invalid length. [ 312.693370][ T9718] netlink: 28 bytes leftover after parsing attributes in process `syz.0.817'. [ 312.704564][ T9718] netdevsim netdevsim0 netdevsim2: entered allmulticast mode [ 313.513892][ T9743] netlink: 4 bytes leftover after parsing attributes in process `syz.2.825'. [ 313.525844][ T9743] netlink: 4 bytes leftover after parsing attributes in process `syz.2.825'. [ 314.709487][ T9774] netlink: 4 bytes leftover after parsing attributes in process `syz.4.834'. [ 314.737929][ T9774] netlink: 4 bytes leftover after parsing attributes in process `syz.4.834'. [ 315.302961][ T9722] svc: failed to register nfsdv3 RPC service (errno 512). [ 315.333881][ T9722] svc: failed to register nfsaclv3 RPC service (errno 512). [ 315.740611][ T9791] usb usb28: usbfs: process 9791 (syz.3.840) did not claim interface 47 before use [ 317.183978][ T9816] CIFS: VFS: Invalid SecurityFlags: [ 317.503387][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.509963][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 321.205841][ T9915] mkiss: ax0: crc mode is auto. [ 321.276703][ T9927] netlink: 4 bytes leftover after parsing attributes in process `syz.2.870'. [ 321.928520][ T9933] netlink: 8 bytes leftover after parsing attributes in process `syz.0.871'. [ 321.942750][ T9939] syz_tun: tun_chr_ioctl cmd 2147767519 [ 322.862180][ T9968] crash hp: kexec_trylock() failed, kdump image may be inaccurate [ 323.567979][T10003] Line length is too long: Should be less than 4094 [ 324.378903][ T9956] kexec: Could not allocate control_code_buffer [ 330.253810][T10151] usb usb15: usbfs: interface 0 claimed by hub while 'syz.2.907' sets config #-1456822853 [ 331.285658][T10188] netlink: 28 bytes leftover after parsing attributes in process `syz.4.915'. [ 331.415566][T10188] netlink: 28 bytes leftover after parsing attributes in process `syz.4.915'. [ 331.483991][T10188] netlink: 28 bytes leftover after parsing attributes in process `syz.4.915'. [ 331.534659][T10188] netlink: 28 bytes leftover after parsing attributes in process `syz.4.915'. [ 331.593020][T10188] netlink: 28 bytes leftover after parsing attributes in process `syz.4.915'. [ 331.654569][T10188] netlink: 28 bytes leftover after parsing attributes in process `syz.4.915'. [ 331.694591][T10188] netlink: 28 bytes leftover after parsing attributes in process `syz.4.915'. [ 331.773871][T10188] netlink: 28 bytes leftover after parsing attributes in process `syz.4.915'. [ 331.846274][T10188] netlink: 28 bytes leftover after parsing attributes in process `syz.4.915'. [ 331.855496][T10188] netlink: 28 bytes leftover after parsing attributes in process `syz.4.915'. [ 332.355640][T10215] tipc: Started in network mode [ 332.355667][T10215] tipc: Node identity ee00, cluster identity 4711 [ 332.355685][T10215] tipc: Node number set to 60928 [ 333.267333][T10213] tty tty46: ldisc open failed (-12), clearing slot 45 [ 333.642825][T10235] syz_tun: tun_chr_ioctl cmd 1074025688 [ 333.710949][T10235] syz_tun: tun_chr_ioctl cmd 1074025688 [ 334.683701][T10251] erspan0: entered allmulticast mode [ 335.165285][T10274] Process accounting resumed [ 335.190379][T10273] Process accounting resumed [ 338.444498][T10349] netlink: 8 bytes leftover after parsing attributes in process `syz.4.953'. [ 338.682014][T10361] netlink: 28 bytes leftover after parsing attributes in process `syz.3.954'. [ 339.393947][T10361] hsr_slave_1 (unregistering): left promiscuous mode [ 340.634163][T10399] netlink: 342 bytes leftover after parsing attributes in process `syz.3.964'. [ 341.582831][T10413] netlink: 8 bytes leftover after parsing attributes in process `syz.3.965'. [ 342.742558][T10432] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 342.767373][T10432] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 342.800846][T10432] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 342.814748][T10432] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 343.896248][T10412] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 344.213725][ T5838] Bluetooth: hci0: command 0x0c1a tx timeout [ 344.783610][ T5838] Bluetooth: hci2: command 0x0c1a tx timeout [ 344.863461][ T5838] Bluetooth: hci4: command 0x0c1a tx timeout [ 344.869566][ T5838] Bluetooth: hci3: command 0x0c1a tx timeout [ 345.264527][T10464] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied. [ 349.063614][T10516] Process accounting resumed [ 349.634277][T10529] netlink: 28 bytes leftover after parsing attributes in process `syz.0.988'. [ 351.112418][T10546] workqueue: Failed to create a rescuer kthread for wq "nfc14_nci_tx_wq": -EINTR [ 351.781469][T10628] netlink: 4 bytes leftover after parsing attributes in process `syz.3.993'. [ 357.925023][T10747] netlink: 252 bytes leftover after parsing attributes in process `syz.3.1017'. [ 358.000993][T10747] netlink: 252 bytes leftover after parsing attributes in process `syz.3.1017'. [ 358.220275][T10760] tc_dump_action: action bad kind [ 360.983967][T10810] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 365.872591][T10874] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1041'. [ 367.903271][T10914] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1050'. [ 368.128705][T10923] netlink: 338 bytes leftover after parsing attributes in process `syz.4.1052'. [ 368.149074][T10923] netlink: 338 bytes leftover after parsing attributes in process `syz.4.1052'. [ 369.644843][T10956] queue_state_write: unsupported operation '' [ 369.681411][T10956] queue_state_write: use 'run', 'start' or 'kick' [ 372.580422][T11027] lo: entered allmulticast mode [ 372.688913][T11027] lo: left allmulticast mode [ 375.775768][ T29] audit: type=1800 audit(4294967333.470:12): pid=11069 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1089" name="members" dev="configfs" ino=30108 res=0 errno=0 [ 375.842492][ T29] audit: type=1800 audit(4294967333.500:13): pid=11069 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1089" name="members" dev="configfs" ino=30117 res=0 errno=0 [ 376.202823][T11087] pty pty246: ldisc open failed (-12), clearing slot 246 [ 378.540211][T11128] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 378.635591][T11128] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 378.943810][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.950165][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.301009][T11144] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 379.369691][T11144] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 379.413312][T11144] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 379.469548][T11144] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 380.186292][T11166] netlink: 338 bytes leftover after parsing attributes in process `syz.3.1106'. [ 381.341075][ T5838] Bluetooth: hci0: command 0x0c1a tx timeout [ 381.413839][ T5838] Bluetooth: hci3: command 0x0c1a tx timeout [ 381.419927][ T5838] Bluetooth: hci2: command 0x0c1a tx timeout [ 381.493739][ T5838] Bluetooth: hci4: command 0x0c1a tx timeout [ 385.003667][T11222] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1113'. [ 385.860928][T11232] netlink: 54 bytes leftover after parsing attributes in process `syz.0.1118'. [ 388.816821][T11295] netlink: 334 bytes leftover after parsing attributes in process `syz.3.1130'. [ 389.853729][T11305] HfR: entered promiscuous mode [ 390.196798][T11318] vivid-013: ================= START STATUS ================= [ 390.219455][T11318] vivid-013: Generate PTS: true [ 390.257209][T11318] vivid-013: Generate SCR: true [ 390.289417][T11318] tpg source WxH: 640x360 (Y'CbCr) [ 390.310730][T11318] tpg field: 1 [ 390.320235][T11318] tpg crop: 640x360@0x0 [ 390.344625][T11318] tpg compose: 640x360@0x0 [ 390.349094][T11318] tpg colorspace: 8 [ 390.403578][T11318] tpg transfer function: 0/0 [ 390.408235][T11318] tpg Y'CbCr encoding: 0/0 [ 390.450999][T11318] tpg quantization: 0/0 [ 390.484212][T11318] tpg RGB range: 0/2 [ 390.531797][T11318] vivid-013: ================== END STATUS ================== [ 391.414353][T11343] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1139'. [ 395.068199][T11374] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 395.539353][T11412] [ 395.541729][T11412] ====================================================== [ 395.548749][T11412] WARNING: possible circular locking dependency detected [ 395.555771][T11412] 6.13.0-rc6-syzkaller-00036-gfbfd64d25c7a #0 Not tainted [ 395.562885][T11412] ------------------------------------------------------ [ 395.569907][T11412] syz.4.1151/11412 is trying to acquire lock: [ 395.575978][T11412] ffff888024f21e00 (&q->q_usage_counter(io)#4){++++}-{0:0}, at: submit_bio_noacct_nocheck+0x892/0xd70 [ 395.586991][T11412] [ 395.586991][T11412] but task is already holding lock: [ 395.594356][T11412] ffff888023483740 (mapping.invalidate_lock#2){.+.+}-{4:4}, at: page_cache_ra_unbounded+0x173/0x750 [ 395.605185][T11412] [ 395.605185][T11412] which lock already depends on the new lock. [ 395.605185][T11412] [ 395.615591][T11412] [ 395.615591][T11412] the existing dependency chain (in reverse order) is: [ 395.624609][T11412] [ 395.624609][T11412] -> #4 (mapping.invalidate_lock#2){.+.+}-{4:4}: [ 395.633157][T11412] down_read+0x9a/0x330 [ 395.637861][T11412] page_cache_ra_unbounded+0x173/0x750 [ 395.643858][T11412] page_cache_ra_order+0x8f2/0xc80 [ 395.649509][T11412] filemap_fault+0x14a5/0x2820 [ 395.654816][T11412] __do_fault+0x10a/0x490 [ 395.659685][T11412] do_pte_missing+0xebd/0x3e00 [ 395.665001][T11412] __handle_mm_fault+0x103c/0x2a40 [ 395.670676][T11412] handle_mm_fault+0x3fa/0xaa0 [ 395.675983][T11412] __get_user_pages+0x8d9/0x3b50 [ 395.681463][T11412] get_dump_page+0xff/0x230 [ 395.686507][T11412] dump_user_range+0x135/0x8c0 [ 395.691812][T11412] elf_core_dump+0x2787/0x3880 [ 395.697115][T11412] do_coredump+0x2dd5/0x43e0 [ 395.702252][T11412] get_signal+0x23f3/0x2610 [ 395.707297][T11412] arch_do_signal_or_restart+0x90/0x7e0 [ 395.713383][T11412] irqentry_exit_to_user_mode+0x13f/0x280 [ 395.719657][T11412] asm_exc_general_protection+0x26/0x30 [ 395.725772][T11412] [ 395.725772][T11412] -> #3 (&mm->mmap_lock){++++}-{4:4}: [ 395.733351][T11412] __might_fault+0x11b/0x190 [ 395.738488][T11412] _copy_from_user+0x29/0xd0 [ 395.743630][T11412] __blk_trace_setup+0xa8/0x180 [ 395.749028][T11412] blk_trace_ioctl+0x163/0x290 [ 395.754342][T11412] blkdev_ioctl+0x106/0x670 [ 395.759407][T11412] __x64_sys_ioctl+0x190/0x200 [ 395.764718][T11412] do_syscall_64+0xcd/0x250 [ 395.769770][T11412] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 395.776214][T11412] [ 395.776214][T11412] -> #2 (&q->debugfs_mutex){+.+.}-{4:4}: [ 395.784068][T11412] __mutex_lock+0x19b/0xa60 [ 395.789117][T11412] blk_register_queue+0x13c/0x4f0 [ 395.794685][T11412] add_disk_fwnode+0x785/0x1300 [ 395.800076][T11412] brd_alloc.isra.0+0x50a/0x7c0 [ 395.805486][T11412] brd_init+0x12b/0x1d0 [ 395.810175][T11412] do_one_initcall+0x128/0x630 [ 395.815495][T11412] kernel_init_freeable+0x58f/0x8b0 [ 395.821246][T11412] kernel_init+0x1c/0x2b0 [ 395.826124][T11412] ret_from_fork+0x45/0x80 [ 395.831074][T11412] ret_from_fork_asm+0x1a/0x30 [ 395.836380][T11412] [ 395.836380][T11412] -> #1 (&q->sysfs_lock){+.+.}-{4:4}: [ 395.843968][T11412] __mutex_lock+0x19b/0xa60 [ 395.849011][T11412] queue_attr_store+0xe2/0x170 [ 395.854329][T11412] sysfs_kf_write+0x117/0x170 [ 395.859549][T11412] kernfs_fop_write_iter+0x33d/0x500 [ 395.865385][T11412] iter_file_splice_write+0x90f/0x10b0 [ 395.871407][T11412] direct_splice_actor+0x18f/0x6c0 [ 395.877106][T11412] splice_direct_to_actor+0x346/0xa40 [ 395.883018][T11412] do_splice_direct+0x178/0x250 [ 395.888408][T11412] do_sendfile+0xaed/0xe30 [ 395.893380][T11412] __x64_sys_sendfile64+0x1da/0x220 [ 395.899138][T11412] do_syscall_64+0xcd/0x250 [ 395.904199][T11412] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 395.910618][T11412] [ 395.910618][T11412] -> #0 (&q->q_usage_counter(io)#4){++++}-{0:0}: [ 395.919140][T11412] __lock_acquire+0x249e/0x3c40 [ 395.924535][T11412] lock_acquire.part.0+0x11b/0x380 [ 395.930171][T11412] __submit_bio+0x49c/0x540 [ 395.935259][T11412] submit_bio_noacct_nocheck+0x892/0xd70 [ 395.941418][T11412] submit_bio_noacct+0x93a/0x1e20 [ 395.946966][T11412] mpage_readahead+0x41d/0x590 [ 395.952254][T11412] read_pages+0x1a8/0xdc0 [ 395.957103][T11412] page_cache_ra_unbounded+0x3dc/0x750 [ 395.963081][T11412] page_cache_ra_order+0x8f2/0xc80 [ 395.968707][T11412] page_cache_sync_ra+0x4b4/0x9c0 [ 395.974249][T11412] filemap_get_pages+0xd7b/0x1be0 [ 395.979791][T11412] filemap_read+0x3ca/0xd70 [ 395.984820][T11412] blkdev_read_iter+0x187/0x480 [ 395.990188][T11412] vfs_read+0x87f/0xbe0 [ 395.994860][T11412] ksys_read+0x12b/0x250 [ 395.999623][T11412] do_syscall_64+0xcd/0x250 [ 396.004652][T11412] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 396.011085][T11412] [ 396.011085][T11412] other info that might help us debug this: [ 396.011085][T11412] [ 396.021303][T11412] Chain exists of: [ 396.021303][T11412] &q->q_usage_counter(io)#4 --> &mm->mmap_lock --> mapping.invalidate_lock#2 [ 396.021303][T11412] [ 396.036001][T11412] Possible unsafe locking scenario: [ 396.036001][T11412] [ 396.043437][T11412] CPU0 CPU1 [ 396.048794][T11412] ---- ---- [ 396.054146][T11412] rlock(mapping.invalidate_lock#2); [ 396.059523][T11412] lock(&mm->mmap_lock); [ 396.066364][T11412] lock(mapping.invalidate_lock#2); [ 396.074173][T11412] rlock(&q->q_usage_counter(io)#4); [ 396.079546][T11412] [ 396.079546][T11412] *** DEADLOCK *** [ 396.079546][T11412] [ 396.087675][T11412] 1 lock held by syz.4.1151/11412: [ 396.092774][T11412] #0: ffff888023483740 (mapping.invalidate_lock#2){.+.+}-{4:4}, at: page_cache_ra_unbounded+0x173/0x750 [ 396.104016][T11412] [ 396.104016][T11412] stack backtrace: [ 396.109894][T11412] CPU: 1 UID: 0 PID: 11412 Comm: syz.4.1151 Not tainted 6.13.0-rc6-syzkaller-00036-gfbfd64d25c7a #0 [ 396.120648][T11412] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 396.130695][T11412] Call Trace: [ 396.133967][T11412] [ 396.136892][T11412] dump_stack_lvl+0x116/0x1f0 [ 396.141577][T11412] print_circular_bug+0x41c/0x610 [ 396.146610][T11412] check_noncircular+0x31a/0x400 [ 396.151553][T11412] ? __pfx_check_noncircular+0x10/0x10 [ 396.157020][T11412] ? lockdep_lock+0xc6/0x200 [ 396.161608][T11412] ? __pfx_lockdep_lock+0x10/0x10 [ 396.166634][T11412] __lock_acquire+0x249e/0x3c40 [ 396.171483][T11412] ? __pfx___lock_acquire+0x10/0x10 [ 396.176680][T11412] lock_acquire.part.0+0x11b/0x380 [ 396.181787][T11412] ? submit_bio_noacct_nocheck+0x892/0xd70 [ 396.187601][T11412] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 396.193233][T11412] ? rcu_is_watching+0x12/0xc0 [ 396.197999][T11412] ? trace_lock_acquire+0x14e/0x1f0 [ 396.203199][T11412] ? submit_bio_noacct_nocheck+0x892/0xd70 [ 396.209016][T11412] ? lock_acquire+0x2f/0xb0 [ 396.213520][T11412] ? submit_bio_noacct_nocheck+0x892/0xd70 [ 396.219339][T11412] __submit_bio+0x49c/0x540 [ 396.223853][T11412] ? submit_bio_noacct_nocheck+0x892/0xd70 [ 396.229662][T11412] ? __pfx___submit_bio+0x10/0x10 [ 396.234694][T11412] ? ktime_get+0x206/0x300 [ 396.239121][T11412] ? lockdep_hardirqs_on+0x7c/0x110 [ 396.244334][T11412] ? submit_bio_noacct_nocheck+0x892/0xd70 [ 396.250148][T11412] submit_bio_noacct_nocheck+0x892/0xd70 [ 396.255790][T11412] ? __pfx_submit_bio_noacct_nocheck+0x10/0x10 [ 396.261964][T11412] ? __pfx___might_resched+0x10/0x10 [ 396.267254][T11412] ? __pfx_xa_load+0x10/0x10 [ 396.271852][T11412] submit_bio_noacct+0x93a/0x1e20 [ 396.276892][T11412] mpage_readahead+0x41d/0x590 [ 396.281671][T11412] ? __pfx_mpage_readahead+0x10/0x10 [ 396.286971][T11412] ? __pfx_blkdev_get_block+0x10/0x10 [ 396.292349][T11412] ? __folio_batch_add_and_move+0x5f3/0xc60 [ 396.298265][T11412] ? __pfx_lock_release+0x10/0x10 [ 396.303285][T11412] ? __pfx_blkdev_readahead+0x10/0x10 [ 396.308658][T11412] read_pages+0x1a8/0xdc0 [ 396.312989][T11412] ? __folio_batch_add_and_move+0x689/0xc60 [ 396.318895][T11412] ? __folio_batch_add_and_move+0x612/0xc60 [ 396.324807][T11412] ? __pfx_read_pages+0x10/0x10 [ 396.329662][T11412] ? find_held_lock+0x2d/0x110 [ 396.334430][T11412] page_cache_ra_unbounded+0x3dc/0x750 [ 396.339898][T11412] page_cache_ra_order+0x8f2/0xc80 [ 396.345019][T11412] page_cache_sync_ra+0x4b4/0x9c0 [ 396.350047][T11412] filemap_get_pages+0xd7b/0x1be0 [ 396.355083][T11412] ? __pfx_filemap_get_pages+0x10/0x10 [ 396.360549][T11412] ? __pfx___might_resched+0x10/0x10 [ 396.365836][T11412] ? find_held_lock+0x2d/0x110 [ 396.370605][T11412] filemap_read+0x3ca/0xd70 [ 396.375114][T11412] ? __pfx_filemap_read+0x10/0x10 [ 396.380153][T11412] blkdev_read_iter+0x187/0x480 [ 396.385016][T11412] vfs_read+0x87f/0xbe0 [ 396.389187][T11412] ? __pfx_vfs_read+0x10/0x10 [ 396.393871][T11412] ? do_futex+0x123/0x350 [ 396.398218][T11412] ? __fget_files+0x40/0x3a0 [ 396.402818][T11412] ksys_read+0x12b/0x250 [ 396.407066][T11412] ? __pfx_ksys_read+0x10/0x10 [ 396.411834][T11412] do_syscall_64+0xcd/0x250 [ 396.416346][T11412] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 396.422261][T11412] RIP: 0033:0x7fa0e2b85d29 [ 396.426681][T11412] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 396.446292][T11412] RSP: 002b:00007fa0e3a17038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 396.454708][T11412] RAX: ffffffffffffffda RBX: 00007fa0e2d75fa0 RCX: 00007fa0e2b85d29 [ 396.462694][T11412] RDX: 00000000000000c2 RSI: 0000000020000140 RDI: 0000000000000004 [ 396.470664][T11412] RBP: 00007fa0e2c01b08 R08: 0000000000000000 R09: 0000000000000000 [ 396.478631][T11412] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 396.486601][T11412] R13: 0000000000000000 R14: 00007fa0e2d75fa0 R15: 00007ffe7d747378 [ 396.494577][T11412]