last executing test programs: 12m41.030313368s ago: executing program 0 (id=448): openat$auto_hsr_node_table_fops_(0xffffffffffffff9c, &(0x7f0000000000), 0x103402, 0x0) (async) mbind$auto(0xffffffffffffff80, 0x1, 0xfffffffffffffffe, &(0x7f0000000040)=0xece, 0x6, 0x2) (async) openat$auto_tracing_iter_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/tracing/trace_options\x00', 0x400840, 0x0) (async, rerun: 64) getrandom$auto(&(0x7f00000000c0)='%^\x00', 0x6, 0x1) (async, rerun: 64) r0 = openat$auto_fops_bool_file(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/fail_futex/task-filter\x00', 0x391080, 0x0) write$auto_fops_bool_file(r0, &(0x7f0000000140)="03eadb6e4c", 0x5) r1 = socket(0x1e, 0x2, 0x2) shutdown$auto(r0, 0xb403) (async) landlock_restrict_self$auto(r1, 0x9) (async) listen$auto(r0, 0x4) (async) getrandom$auto(&(0x7f0000000180)='\xca\x00', 0x101, 0x8) (async) read$auto_fops_bool_file(r0, &(0x7f00000001c0)=""/71, 0x47) sysfs$auto(0xb, 0x6, 0x10000) (async) r2 = openat$auto_safesetid_uid_file_fops_securityfs(0xffffffffffffff9c, &(0x7f0000000240), 0x20000, 0x0) fcntl$auto(r2, 0xffff, 0x9216) (async) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000280)=0x0) connect$auto(r0, &(0x7f00000002c0)=@nfc={0x27, r3, 0x0, 0x4}, 0x2) (async) r4 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000340), r1) sendmsg$auto_NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r1, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x34, r4, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x7f}, @NL802154_ATTR_IFNAME={0x14, 0x4, 'bond_slave_1\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000008}, 0x4840) sysfs$auto(0x5, 0x8, 0x75) (async) r5 = openat$auto_proc_fault_inject_operations_base(0xffffffffffffff9c, &(0x7f0000000440)='/proc/self/make-it-fail\x00', 0x149081, 0x0) write$auto_proc_fault_inject_operations_base(r5, &(0x7f0000000480)="3649d9fce72327730ba474ce901ccfa541d22be41a567d3a18c24ed90aa724c138e48b48684ce4da42dfb8683b270ef2bd48ae3c2d5d302269bf", 0x3a) (async) clone$auto(0xab, 0x8, &(0x7f00000004c0)=0x10000, &(0x7f0000000500)=0x5, 0x9) (async) mprotect$auto(0x81, 0x9, 0x100000001) (async) mprotect$auto(0xfffffffffffffff9, 0xffffffffffff2cb4, 0x100) (async, rerun: 32) clone$auto(0x2, 0xffff, &(0x7f0000000540)=0xa36f, &(0x7f0000000580)=0xff, 0xe) (async, rerun: 32) lstat$auto(&(0x7f00000005c0)='./file0\x00', &(0x7f0000000600)={0x7, 0x0, 0x9, 0xc, 0xee01, 0x0, 0x0, 0x101, 0x4, 0x7, 0x7, 0x4, 0x0, 0x38, 0x0, 0x9, 0x600}) r7 = getgid() shmctl$auto(0x7, 0xb, &(0x7f0000000800)={{0x4f17061d, r6, r7, 0xfffffffb, 0x3, 0x100}, 0x6, 0x4, 0x7, 0x1b2, 0x4, 0x5, 0x1, 0x0, &(0x7f00000006c0)="183e8c0b162d25f28f2744643481272982209508c7512b71d297e06fce270f00f5be2b544ac4939f7b0e35349c2dbb307c092866319f507ef95efa9eb2c02a3e47b89db95a6c3a07ade9c79a20cb11fa7033f9d2bc187525001878fbb8ac7d549b761e7f287e533d3eaa6fdba252081a80a64460fb4f60fe74f82ef2858d1ae6d14baa28a455114f7462994868d407a1b1d667222fec28542fb7", &(0x7f0000000780)="cf510d9c1d9ae2078d1810bc04dfc24a9a95fb7b26a7b09a9c521fc6d6eb0893c0217d9132bc8e35f822dd040539d3da4c26adf16069dfa764de9812268cc902cd6b690adb289d86ad50b43d6ed8c1640c1fcfb542c70bceef526829910b92ebf9ed8019"}) (async) mmap$auto(0x2, 0x2, 0x3, 0x16, 0x8, 0x5680) 12m39.590875687s ago: executing program 0 (id=457): r0 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x82802, 0x0) write$auto(r0, &(0x7f00000000c0)='/dev/\b\x00\x00\x00\x00\x00\x00\x00\x00\xc1d&\xa2\x1a\x96n\xad\xb2\xa5\x03\xef,9+\xe3\x86/.\xdf\x80\xd0W\xcb\xabU5\x14~\xd6\xedP\x11\xdb\x8f\xa4{\x8e\xf5\xe0\xb8\xa6\xcc\x1c\'\xc4\'!>\xfem\x82\x8a\x11\x9c\xfc\x9cy5, \xea\xa3T\x95-\x1ee\x976\xea\xed{/\x86\xae\x9fk\x13g(\x139\xbc\x87_\xc9\x8bH]\x12\xdc\xcc$\xb3b8\xebP,5\xe4\xaa\xc1e\x00\xe6\xcf(', 0xd7) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000c80), r1) sendmsg$auto_L2TP_CMD_TUNNEL_GET(r1, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000dc0)={&(0x7f0000000cc0)={0x1c, r2, 0x121, 0x70bd2c, 0x25dfdbfd, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0xfffffffd}]}, 0x1c}, 0x1, 0x0, 0x0, 0x81}, 0x0) mmap$auto(0x0, 0x8, 0x1000000004, 0x9b72, 0x2, 0x8000) socket(0x29, 0x2, 0x0) sendmmsg$auto(0x3, &(0x7f0000000000)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0x1}, 0x400, 0x0, 0xdd0, 0x697b}, 0xed7138c}, 0x9a6, 0x9) 12m38.489230403s ago: executing program 0 (id=465): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) mprotect$auto(0x1ffff000, 0x8000000000000001, 0x4) madvise$auto(0x0, 0x2000040080000004, 0xe) mlockall$auto(0x8000000000000001) mprotect$auto(0x1ffff000, 0x810002, 0x6) gettid() io_uring_setup$auto(0x6, 0x0) r1 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)={0x58, r1, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@HWSIM_ATTR_RADIO_NAME={0x43, 0x11, '\x00\x87B\xfeP\xc6\xae\x16\x8eC\x9f\xdf*x$\xe5\xc1\x9b\xfd\x94\x8bY\xb5\xcb]\x1f\x1cR&\xf1v^g\xfe[\x822\x01E^(ZZ\xf9\xb1O\x8e\xf6-`r~\x86\xf0\x00\x00\x00\x00\x00\x00\x00\x00\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x801}, 0x4044820) 12m31.853503961s ago: executing program 0 (id=485): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0xffffff7fffff0005, 0x8) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = openat$auto_ftrace_subsystem_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f00000003c0)='/sys/kernel/tracing/events/vmalloc/filter\x00', 0x238400, 0x0) read$auto(r0, &(0x7f0000000400)='^#[\x00', 0xe79) timerfd_create$auto(0x9, 0x0) poll$auto(&(0x7f0000000d40)={0x3, 0x1, 0xa}, 0x5, 0x400) write$auto_vcs_fops_vc_screen(r1, &(0x7f0000000000)="6068026b1b321de52fd293044871a161d32e562f02836f938084e6cba8cdaa6e679050beb65c866fd52697acf1ff86caff7cef2bc025e173a2c3d452ba58bb9373854bc261ae51e3a0505bb6e71b545c171edb06c36cf46ac7ddfdfd356ef5d90eecf9a29b72af998cb409d7a1f6a076db441c7e510183322e980526f8b6e44951ec7b9ae42e27dea71a8a52daf0a83ebf98a62dcc02f983325e361f213a4631c5822142c8f4b73bebc65770ebeee82740c9125d9a01cd28d949879c890a0a1037ed78e7433781e49858c01ff194572a5668adffafefc70263620e177a04e1c50abc63795c8b80aac9d8f145ec69d33e5b1b0e5535", 0xf5) semctl$auto(0x201, 0x2, 0x13, 0x4) ioctl$auto(0x3, 0x40085400, 0x5) madvise$auto(0x0, 0x2003f0, 0x16) 12m27.911098161s ago: executing program 0 (id=499): mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x4, 0x300000000000) (async) bpf$auto(0x0, &(0x7f0000000780)=@bpf_attr_7={@map_id=0x3ff, 0x1, 0x2}, 0xa7) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) (async) ioperm$auto(0x4, 0xbc6, 0x81) (async) socket(0x25, 0x1, 0x3) (async) socket(0x2b, 0x1, 0x1) (async) mmap$auto(0x7, 0x40020009, 0xe2, 0x800000e83e, 0x9, 0xeec) (async) getsockopt$auto(0x100000006, 0x1, 0x3c, 0xfffffffffffffffe, 0x0) (async) socket(0x2, 0x2, 0x88) (async) ioctl$auto(0xc9, 0x100000002, 0x4000000005c8d) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) write$auto(0x3, 0x0, 0x3f00) (async) mmap$auto(0x0, 0x9, 0x20004000000000df, 0xeb1, 0x400000000000006, 0x8000) (async) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) socket(0xa, 0x5, 0x84) (async) socket(0x1, 0x1, 0x1) (async) io_uring_setup$auto(0x3, 0x0) io_uring_register$auto(0x2, 0x2, &(0x7f0000000040), 0x86) io_uring_register$auto(0x2, 0x7, &(0x7f0000000180), 0x1) (async) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) getrandom$auto(0x0, 0x6000000, 0x3) (async) msgrcv$auto(0xa, &(0x7f0000000000)={0x5, 0xfb}, 0xd647, 0x20080000000, 0x5) madvise$auto(0x0, 0xf663, 0x15) pipe2$auto(0x0, 0x80) (async) migrate_pages$auto(0x0, 0x101, 0x0, &(0x7f0000000140)=0x9) (async) madvise$auto(0x0, 0xffffffffffff0001, 0x15) futex$auto(0x0, 0x6, 0x47, 0x0, 0x0, 0x0) mmap$auto(0x93, 0x9, 0x9, 0x14, 0x100000001, 0x2) 12m24.519791758s ago: executing program 0 (id=513): r0 = socket$nl_generic(0x10, 0x3, 0x10) io_cancel$auto(0x84, &(0x7f0000000000)={0x10, 0x80000001, 0x4, 0x4, 0xffff, 0xffffffffffffffff, 0x6, 0x7, 0xb3, 0x0, 0xb, r0}, &(0x7f0000000040)={0x3, 0x3, 0x8, 0x3}) r2 = syz_genetlink_get_family_id$auto_ovs_ct_limit(&(0x7f0000000840), r1) sendmsg$auto_OVS_CT_LIMIT_CMD_SET(r0, &(0x7f0000002e40)={0x0, 0x0, &(0x7f0000002e00)={&(0x7f0000002d40)={0x18, r2, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@OVS_CT_LIMIT_ATTR_ZONE_LIMIT={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x4000080) 12m9.320239542s ago: executing program 32 (id=513): r0 = socket$nl_generic(0x10, 0x3, 0x10) io_cancel$auto(0x84, &(0x7f0000000000)={0x10, 0x80000001, 0x4, 0x4, 0xffff, 0xffffffffffffffff, 0x6, 0x7, 0xb3, 0x0, 0xb, r0}, &(0x7f0000000040)={0x3, 0x3, 0x8, 0x3}) r2 = syz_genetlink_get_family_id$auto_ovs_ct_limit(&(0x7f0000000840), r1) sendmsg$auto_OVS_CT_LIMIT_CMD_SET(r0, &(0x7f0000002e40)={0x0, 0x0, &(0x7f0000002e00)={&(0x7f0000002d40)={0x18, r2, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@OVS_CT_LIMIT_ATTR_ZONE_LIMIT={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x4000080) 12m1.288218611s ago: executing program 3 (id=584): syz_genetlink_get_family_id$auto_nfsd(0x0, 0xffffffffffffffff) socket(0x10, 0x2, 0xf) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) 12m0.497586268s ago: executing program 3 (id=590): r0 = socket(0x23, 0x2, 0x0) ioctl$auto(r0, 0x89ee, 0x10000000000009) socket(0x3, 0x2, 0x1000) socket(0x22, 0x2, 0x4) close_range$auto(0x0, 0xfffffffffffff000, 0x0) 12m0.227344298s ago: executing program 3 (id=593): socket(0x11, 0x2, 0x47bd) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000001c80)='/dev/fb0\x00', 0x20401, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv6/conf/dummy0/addr_gen_mode\x00', 0x1, 0x0) select$auto(0x2c, &(0x7f0000000100)={[0x2, 0x1000000000000, 0xfffffffffffffff7, 0x208, 0x400, 0x2, 0x6, 0x7fffffffffffffff, 0x3, 0x5, 0x7ff, 0x899b, 0x400, 0x9, 0x5, 0x4000]}, 0x0, 0x0, 0x0) r0 = openat$auto_nsim_dev_max_vfs_fops_dev(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/netdevsim/netdevsim0/max_vfs\x00', 0x8400, 0x0) read$auto(r0, &(0x7f00000000c0)='\x00\x1fO\xd3\x82qw\xa6\xd8\t\x94\xeb', 0x7) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x2, 0x0) 12m0.020447055s ago: executing program 3 (id=595): madvise$auto(0x0, 0x7fffffffffffffff, 0xa) ftruncate$auto(0x1ff, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) unshare$auto(0xa) swapon$auto(&(0x7f0000000040)='ns/pid_for_children\x00', 0x401) ioctl$auto_def_blk_fops_fs(0xffffffffffffffff, 0xab09, 0x0) getrandom$auto(0x0, 0x6000000, 0x3) remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0x3, 0x4) r0 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_SET_WOWLAN(0xffffffffffffffff, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000001180)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c00", @ANYRES16=r0, @ANYBLOB="0100ff000000000000ea4900000008000300", @ANYRES32=0xffffffffffffffff], 0x1c}}, 0x14000080) geteuid() r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000740), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'netdevsim0\x00', 0x0}) sendmsg$auto_ETHTOOL_MSG_COALESCE_SET(r2, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000000)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002abd7000fcdbdf25140000000c00018008000100", @ANYRES32=r4, @ANYBLOB="08000000006900004564721aacd4e0d6ee88cac0b0bc91ad9894791b00c6"], 0x28}, 0x1, 0x0, 0x0, 0x40448c1}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'vlan0\x00'}) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x2, 0x1ff, 0x7, 0x1f, 0x7181, 0x1ffde, 0x7, 0x3, 0x9, 0x9, 0x80003, 0x4, 0x200000000001, 0xb4, 0x9, 0x8, 0x10007, 0x80, 0x4, 0x0, 0xa, 0x22000, 0x200, 0x0, 0x84, [0x3, 0x2, 0x0, 0x2, 0x0, 0x2000, 0x0, 0xe, 0x70624ce7, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x8, 0x0, 0x6, 0x0, 0xfffffffffffbfffd, 0x2000000000000004, 0x10000000000001, 0x10000000000, 0xffffffffffffffff, 0x4, 0xfffffffffffffe00, 0x0, 0x0, 0x5, 0x400000000005b8, 0xffff, 0x0, 0x0, 0x0, 0x6, 0xffffffffffffffff, 0x88e, 0x8000000000008, 0xfffffffffffffffc, 0x9, 0xa38, 0x0, 0x3, 0xfffffffffffffffc, 0x2, 0x1, 0x7, 0xc567]}, 0x1fe, 0xd) r5 = openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f0000000180), 0x1541, 0x0) ioctl$auto__ctl_fops_dm_ioctl(r5, 0xfffffffffffffd0d, &(0x7f00000001c0)) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'veth0_to_bridge\x00', 0x0}) sendmsg$auto_ETHTOOL_MSG_FEC_SET(r2, &(0x7f00000025c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20102d}, 0xc, &(0x7f0000002580)={&(0x7f0000000380)=ANY=[@ANYBLOB="ac000000ee9c71f9ec56", @ANYBLOB="ccc23a8f65161f9116225aae8b93e7c11e167d817c552971691c2841ece5e4421e21bd2d8c4f25722b2b499aae47f8a2028f926f017603b85d8fda4b9b9133b9d2acb26636b46b8915559b3a5771f044b296370fb4064692996af41467ca617b23f4ca6af90eb90efedcb55e71e2f5c6e64a1e8008e0b8dd8fed5f5b1acfff7e09414ecf1cd4472de05e8a4d7580", @ANYRES8, @ANYRES32=r4, @ANYRES64=r3, @ANYRES32=r6, @ANYRESHEX=0x0, @ANYRES32=r6, @ANYBLOB="0800030001000500000003000800000004000280aff1041629ee6babaff969050f894e38aad636539a7531f2cd1950642e5c1884548438afd9fa80a59ee9a18a6ac14117d86b4ef59d1e21d2eb3d5e376022755d77736331124680d19620d5144639272f7809062cf1810a42", @ANYRESOCT=r1], 0xac}, 0x1, 0x0, 0x0, 0x4008804}, 0x44000) socket$nl_generic(0x10, 0x3, 0x10) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) sysfs$auto(0x8, 0x10001, 0x5) mbind$auto(0x0, 0x100000004, 0x100000000, 0x0, 0x20000000000006, 0x2) clone$auto(0x21002, 0x9, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x9) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) msgrcv$auto(0x0, 0x0, 0xffc, 0x1, 0xb1) msgsnd$auto(0x0, 0x0, 0x8, 0x9) 11m58.821467259s ago: executing program 3 (id=601): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) sysinfo$auto(0x0) name_to_handle_at$auto(0x5, 0x0, &(0x7f0000000100)={0xa9, 0x3, "f6babc2dd6f0baba3b83ac3f8d6458ff804a81ed5715dc1dda326b5c657297372582e5016d5b70f4f008cc5bc4743f8a42d7a7058052063ae15a323f056d3be5162d14c74bafaf937c6876722814df2823ab9af1c26754773a848c552c23866ddb4c372fadd96235cce438b8d1bb5d50537b0bb3be2f6097644530c852c09e3a2249784818249f4f74021d7440e788d4eec18858591d2adc331d1b84b5b6888e6be06915ee4e81965b"}, 0x0, 0x80000000) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000240)='/dev/snd/controlC2\x00', 0x300, 0x0) rt_tgsigqueueinfo$auto(0x3, 0x96, 0x7, &(0x7f0000000180)={@siginfo_0_0={0x0, 0x9c2a, 0x10001, @_sigsys={0x0, 0x5d35, 0x6}}}) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) io_uring_setup$auto(0x1, 0x0) futex$auto(0x0, 0x6, 0x8, 0x0, 0x0, 0xffffffd6) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) tkill$auto(0x1, 0x7) lsm_get_self_attr$auto(0x64, 0x0, &(0x7f0000002440)=0x2, 0x0) r0 = socket(0x8, 0x6, 0x5) statmount$auto(&(0x7f0000000280)={0x7fff, 0x7, 0x7f80000000000000, 0x9, 0x7fffffffffffffff}, &(0x7f0000000380)={0x8, 0x3, 0x7ff, 0x800, 0x8, 0x5, 0x1163fa8c, 0xb, 0x9, 0x180000000000, 0x1, 0x0, 0x71288ff5, 0x8001, 0x8, 0x3, 0xf486, 0x0, 0x2b0, 0x6, 0x3, 0x8, 0x5, 0x8, 0x4, 0x800, [0x5, 0x6, 0x0, 0x6, 0x0, 0x3, 0xc, 0x2, 0x7ff, 0x9, 0x3, 0x6, 0x4, 0x4, 0x100, 0x5, 0x6, 0x1, 0x7, 0x9, 0x1000, 0x7fffffffffffffff, 0x400000, 0x200, 0x800000000, 0xed, 0x34, 0x5, 0x3, 0x4, 0x4, 0x96, 0x3, 0x80000000, 0x7ff, 0x6, 0xb5d, 0x6, 0x5, 0x7, 0x7fffffffffffffff, 0x7, 0x6, 0x15, 0x0, 0x7], "91c53fad1fdd329cce60b0f8b1027c980e9094e3284f92624911869577258e3cc4541375d46f86e0f2f80c27db4a528fe964b3d88f77a133facc5fd6b6929cdd0e3aa187ecd8f2aaf319385b8599f0f0370ad755db0efe6cd9ed5cfff8564a77add703ecc59494d7bc1be7af78622f70459eb5f35a1a"}, 0x80000000, 0x66a6) getsockopt$auto(r0, 0x10d, 0x2, 0x0, 0x0) mmap$auto(0x6, 0xc, 0x6, 0x7fff, 0xfffffffffffff800, 0x2) r1 = openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f0000000340), 0x8200, 0x0) ioctl$auto_SW_SYNC_GET_DEADLINE(r1, 0xc0105702, 0x0) r2 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000040), r0) sendmsg$auto_NL802154_CMD_DEL_SEC_KEY(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r2, 0x200, 0x70bd26, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x6cae}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x1) 11m57.970760645s ago: executing program 3 (id=604): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000001080), 0xffffffffffffffff) keyctl$auto(0xf, 0x400, 0x8001, 0x100, 0x3) sendmsg$auto_L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, r1, 0x1, 0x70bd27, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x20000880}, 0x40090) 11m57.537140932s ago: executing program 33 (id=604): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000001080), 0xffffffffffffffff) keyctl$auto(0xf, 0x400, 0x8001, 0x100, 0x3) sendmsg$auto_L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, r1, 0x1, 0x70bd27, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x20000880}, 0x40090) 8m33.997304658s ago: executing program 4 (id=1939): mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYBLOB="000826bd7000fedbdf25030000000600", @ANYRES32=0x0, @ANYBLOB="0a00050000000000000000000a0001000000"], 0x6c}, 0x1, 0x0, 0x0, 0x40080}, 0x0) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda1\x00', 0x4040, 0x0) fadvise64$auto(r0, 0x8, 0x400000000000006, 0x4) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_NL80211_CMD_EXTERNAL_AUTH(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000300)={&(0x7f0000000100)={0x40, 0x0, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [@NL80211_ATTR_FILS_KEK={0x21, 0xf2, "54591ade6954ace8362a757239ec155c48649f66348719a89c03af8a61"}, @NL80211_ATTR_FILS_ERP_USERNAME={0x6, 0xf9, "ac51"}]}, 0x40}, 0x1, 0x0, 0x0, 0x24044009}, 0x20048001) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0xb, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB='*'], 0x1ac}}, 0x40000) openat$auto_stat_fops_per_vm_kvm_main(0xffffffffffffff9c, &(0x7f0000000380)='/sys/kernel/debug/kvm/halt_exits\x00', 0x200000, 0x0) 8m33.814510518s ago: executing program 4 (id=1942): r0 = openat$auto_i2cdev_fops_i2c_dev(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/tty/ttyte/dev\x00', 0x101000, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f0000001540)=""/104, 0x68) ioctl$auto_I2C_TENBIT(r0, 0x704, 0x3) ioctl$auto_I2C_SMBUS(r0, 0x720, 0x0) (async) ioctl$auto_I2C_SMBUS(r0, 0x720, 0x0) 8m33.71099869s ago: executing program 4 (id=1944): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) socketpair$auto(0x4, 0x3, 0x8000000000000000, 0x0) setsockopt$auto(0xffffffffffffffff, 0x11, 0x64, 0x0, 0x8) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0xffff, @remote}, 0x6a) (async) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0xffff, 0x20000000) (async) setsockopt$auto(0x3, 0x1, 0x2f, 0x0, 0x9) (async) mmap$auto(0x0, 0x101, 0x4000000000df, 0xeb1, 0x200000401, 0x8000) (async, rerun: 64) socket(0x10, 0x2, 0x0) (async, rerun: 64) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) ioperm$auto(0x7, 0x6, 0x5) (async, rerun: 32) epoll_create$auto(0x4) (rerun: 32) epoll_pwait$auto(0x3, 0x0, 0x20002, 0x3, 0x0, 0x8) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB='X'], 0x1ac}}, 0x40000) (async) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x9e) r0 = socket(0x2, 0x1, 0x0) sendmsg$auto_MAC802154_HWSIM_CMD_DEL_EDGE(r0, 0x0, 0x8014) (async, rerun: 64) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, 0x0, 0xc0) (rerun: 64) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) (async) write$auto(0x3, 0x0, 0x7fffffff) (async) sendmsg$auto_SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="010025bd7000f9dbdf25020000000b0001"], 0x20}, 0x1, 0x0, 0x0, 0x4008014}, 0x10) (async) mmap$auto(0x0, 0x20009, 0x10000000000df, 0xeb2, 0x401, 0x8000) r1 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000080), 0x80080, 0x0) ioctl$auto_PPPIOCSMRU(r1, 0xc004743e, 0x0) (async) mmap$auto(0x8, 0x0, 0xabe, 0x10, 0x2, 0x1000) ioctl$auto_PPPIOCGIDLE64(r1, 0x8010743f, 0x0) (async) ioctl$auto_PPPIOCSFLAGS(r1, 0x40047459, 0x0) ioctl$auto_PPPIOCSFLAGS(r1, 0x40047459, &(0x7f0000000000)=0x9) (async, rerun: 64) sendmsg$auto_TIPC_NL_PUBL_GET(0xffffffffffffffff, &(0x7f0000003940)={0x0, 0x0, &(0x7f0000003900)={&(0x7f0000000000)={0x14, 0x0, 0xf01, 0x70bd28, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x40800}, 0x840) (async, rerun: 64) socket(0xa, 0x1, 0x3a) 8m33.139597409s ago: executing program 4 (id=1950): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) io_uring_setup$auto(0x6, 0x0) socket(0x1d, 0x2, 0x6) bind$auto(0x3, &(0x7f00000000c0), 0xf) sched_get_priority_max$auto(0x7) r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv6/conf/veth0/disable_ipv6\x00', 0x40882, 0x0) pwrite64$auto(r0, 0x0, 0x0, 0xe950eaf) close_range$auto(0x2, 0x8, 0x0) openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000200), 0x400, 0x500) 8m32.732090261s ago: executing program 4 (id=1955): r0 = socket(0x2, 0x1, 0x0) mprotect$auto(0x1fffeffe, 0x8000000000000001, 0x4) (async) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) (async) r1 = socket(0xa, 0x6, 0x3a) (async) sendto$auto(0x3, 0x0, 0xf, 0xe, &(0x7f0000000100), 0x19) (async) ioctl$auto(0x3, 0x80000541b, 0x38) (async) socket(0x22, 0x6, 0x11) (async) mmap$auto(0xff, 0x20009, 0xdf, 0xeb1, 0x40000000000402, 0x7ffb) (async) close_range$auto(0x2, 0x8000, 0x0) (async) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000400)='/sys/devices/virtual/net/nr5/queues/rx-0/rps_flow_cnt\x00', 0x182b02, 0x0) socket(0x2, 0x80002, 0x73) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$auto_handshake(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_HANDSHAKE_CMD_DONE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="01002abd7000fedbdf250300000008001400", @ANYRES32, @ANYBLOB], 0x1c}}, 0x0) (async) sendmsg$auto_HANDSHAKE_CMD_DONE(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="77d43f81", @ANYRES16, @ANYBLOB="000128bd7000fedbdf250300000008000200", @ANYRES32=r2, @ANYBLOB="08000300ffff0000"], 0x24}, 0x1, 0x0, 0x0, 0x20040040}, 0x48085) (async) sendto$auto(r1, 0x0, 0x9, 0x80a, &(0x7f00000001c0)=@in={0x2, 0x4e21, @multicast2}, 0xea74) munmap$auto(0x8000, 0xe26) (async) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async) socket(0x2, 0x3, 0xa) (async) mmap$auto(0x0, 0x20009, 0x4000000000de, 0xeb1, 0x800d4, 0xf159) (async) r5 = openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f0000000180), 0x1541, 0x0) ioctl$auto__ctl_fops_dm_ioctl(r5, 0xfffffffffffffd31, 0x0) (async) socket(0x2b, 0x1, 0x0) (async) socket(0x2, 0x3, 0xa) (async) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) io_uring_setup$auto(0x5, 0x0) (async) futex$auto(0x0, 0x6, 0x8, 0x0, 0x0, 0xffffffd6) mmap$auto(0x0, 0x8, 0x1000000004, 0x9b72, 0x2, 0x8000) (async) tkill$auto(0x1, 0x7) socket(0x2, 0x5, 0x0) 8m32.499381653s ago: executing program 4 (id=1958): openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x800, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x12, 0x2, 0x8000) unshare$auto(0x493) pwrite64$auto(0xc8, &(0x7f0000000000)='\xfc\xff\xff\xff\xff\xff\xff\xffRN8\x99\x88\xf5s\x1cJ\x99\x00:c\x14\r>\x94\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\xf1`\x9f\x1e\xf9\xa4\xf8\x15\x02l@\xae\x18\xc0\xc1\xf2\x14^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2\xdac$w\x883\xac\xcd\x96\xc2\x93\x0e\x12/v0\x90\x915?', 0x48, 0x9) getsockopt$auto(0xffffffffffffffff, 0x0, 0x2, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_hsr(&(0x7f0000000180), r0) mmap$auto(0x0, 0x9, 0xdf, 0xeb1, 0x401, 0x8000) socket(0xa, 0x801, 0x106) io_uring_setup$auto(0x6, 0x0) listen$auto(0x3, 0x83) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'tunl0\x00'}) stat$auto(0x0, 0x0) shmctl$auto(0x4, 0x1, &(0x7f0000000280)={{0xfe9e, 0xffffffffffffffff, 0xee00, 0xa6, 0x800, 0x5, 0x3}, 0x7a6e56f5, 0x3, 0x9, 0xa, 0xfffffff8, 0xcc2, 0x1, 0x0, 0x0, &(0x7f0000000240)}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), r1) sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x4000000) sendmsg$auto_NL80211_CMD_GET_REG(r1, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f0000000300)={0x598, r2, 0x1, 0x7, 0x25dfdbfe, {}, [@NL80211_ATTR_SCAN_SSIDS={0xec, 0x2d, 0x0, 0x1, [@generic="dec83a1df9b664405061a53b3094f50272a0601afc63afc198e51539c83c9dc13f5b76576e93ea0845482107b5c6c39eb58511b7f80ec6f02b0122f62897af8414bbd01442c057773ee397ba981ea4f9", @nested={0x97, 0xcb, 0x0, 0x1, [@generic="ba037b5dbbf45147d33553456dbe68fd4bc9a8c45a79f9ff24e6ca0283819699c0732b3959cac68076ffa3e646ded6dcc0622ce6d72fbf64157eba5bf7c6fdb9be66a7e8f25841ec110646af5e1ea9f7d9027cd5d50107a5bc8aa769351af5db2a77304c4596318ca3fa0543ef38fd61ad1a8d196318012a2204dd408412f48a917a8ca5a24e3c4b25d8cdb45746c1", @nested={0x4, 0x16}]}]}, @NL80211_ATTR_TIMEOUT_REASON={0x8, 0xf8, 0x8}, @NL80211_ATTR_KEY_CIPHER={0x8}, @NL80211_ATTR_FILS_ERP_USERNAME={0x9, 0xf9, "028c817689"}, @NL80211_ATTR_MESH_PEER_AID={0x6, 0xed, 0x3}, @NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0xf7}, @NL80211_ATTR_SAR_SPEC={0x224, 0x12c, 0x0, 0x1, [@NL80211_SAR_ATTR_TYPE={0x8, 0x1, 0x20f44246}, @NL80211_SAR_ATTR_TYPE={0x8, 0x1, 0x2}, @NL80211_SAR_ATTR_SPECS={0x88, 0x2, 0x0, 0x1, [{0x2c, 0x0, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x8}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x80000000}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x9}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x2}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0xfffffff2}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x9}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0xa1e}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x3}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x2}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0xaf}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x2f34}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x1}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x9}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x7}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0xffffffff}]}]}, @NL80211_SAR_ATTR_SPECS={0x90, 0x2, 0x0, 0x1, [{0x44, 0x0, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x57d7310f}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x311e}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x140000}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x81}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x5}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x6}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x400}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x9}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x5ce}, @NL80211_SAR_ATTR_SPECS_POWER={0x8}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x4}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x1164}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0xffff}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS_POWER={0x8}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x5}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x8}]}]}, @NL80211_SAR_ATTR_SPECS={0xf8, 0x2, 0x0, 0x1, [{0x4}, {0x14, 0x0, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0xb56}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x1}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x3}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x7f}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x1}]}, {0x44, 0x0, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x1}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x2}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x4}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x4}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x2}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x5459}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x7fff}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x7}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x2075}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x2f}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x7}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x6}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0xc}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x99d60000}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0xe73}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x400}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x6}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x3}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0xab}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0xffff}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0xfffffbff}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x6}]}]}]}, @NL80211_ATTR_SAR_SPEC={0x240, 0x12c, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS={0x1cc, 0x2, 0x0, 0x1, [{0x44, 0x0, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x3ff}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x5}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x9}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x4}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x6}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x6}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x745}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x400000}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x2}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x9}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x32e}]}, {0x54, 0x0, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x6}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x2}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x5}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0xdb6a}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x30000000}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0xf17}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x7}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x9}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x3}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS_POWER={0x8}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x5}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x7}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x7}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x7fffffff}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x9}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x5}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x2}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x7ff}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x2f}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x2}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x3}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0xffff}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x11a26b55}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x6}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0xfffffff7}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x1000}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x8}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x9}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x55}]}, {0x54, 0x0, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x5}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x81}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x7}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x3}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0xfffffff7}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x1}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x6}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x6}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x5}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x1}]}]}, @NL80211_SAR_ATTR_TYPE={0x8, 0x1, 0x9}, @NL80211_SAR_ATTR_TYPE={0x8, 0x1, 0x7}, @NL80211_SAR_ATTR_SPECS={0x38, 0x2, 0x0, 0x1, [{0x34, 0x0, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x5}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x6b1d}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x9}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x4}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0xff}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0xd9}]}]}, @NL80211_SAR_ATTR_TYPE={0x8, 0x1, 0x7}, @NL80211_SAR_ATTR_TYPE={0x8, 0x1, 0xe79}, @NL80211_SAR_ATTR_SPECS={0x18, 0x2, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0xbe}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0xb3a}]}]}]}, @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x598}, 0x1, 0x0, 0x0, 0x40}, 0x10) r3 = syz_genetlink_get_family_id$auto_netdev(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$auto_NETDEV_CMD_QUEUE_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010025bd0001fbdbdf0002"], 0x1c}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) mprotect$auto(0x1ffff000, 0x8000000000000001, 0xd) r4 = socket(0x10, 0x2, 0x0) sendmsg$auto_ETHTOOL_MSG_LINKMODES_SET(r4, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x40000) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f000000fc00), 0x3, 0x0) setfsgid$auto(0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) 8m32.356703388s ago: executing program 34 (id=1958): openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x800, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x12, 0x2, 0x8000) unshare$auto(0x493) pwrite64$auto(0xc8, &(0x7f0000000000)='\xfc\xff\xff\xff\xff\xff\xff\xffRN8\x99\x88\xf5s\x1cJ\x99\x00:c\x14\r>\x94\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\xf1`\x9f\x1e\xf9\xa4\xf8\x15\x02l@\xae\x18\xc0\xc1\xf2\x14^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2\xdac$w\x883\xac\xcd\x96\xc2\x93\x0e\x12/v0\x90\x915?', 0x48, 0x9) getsockopt$auto(0xffffffffffffffff, 0x0, 0x2, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_hsr(&(0x7f0000000180), r0) mmap$auto(0x0, 0x9, 0xdf, 0xeb1, 0x401, 0x8000) socket(0xa, 0x801, 0x106) io_uring_setup$auto(0x6, 0x0) listen$auto(0x3, 0x83) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'tunl0\x00'}) stat$auto(0x0, 0x0) shmctl$auto(0x4, 0x1, &(0x7f0000000280)={{0xfe9e, 0xffffffffffffffff, 0xee00, 0xa6, 0x800, 0x5, 0x3}, 0x7a6e56f5, 0x3, 0x9, 0xa, 0xfffffff8, 0xcc2, 0x1, 0x0, 0x0, &(0x7f0000000240)}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), r1) sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x4000000) sendmsg$auto_NL80211_CMD_GET_REG(r1, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f0000000300)={0x598, r2, 0x1, 0x7, 0x25dfdbfe, {}, [@NL80211_ATTR_SCAN_SSIDS={0xec, 0x2d, 0x0, 0x1, [@generic="dec83a1df9b664405061a53b3094f50272a0601afc63afc198e51539c83c9dc13f5b76576e93ea0845482107b5c6c39eb58511b7f80ec6f02b0122f62897af8414bbd01442c057773ee397ba981ea4f9", @nested={0x97, 0xcb, 0x0, 0x1, [@generic="ba037b5dbbf45147d33553456dbe68fd4bc9a8c45a79f9ff24e6ca0283819699c0732b3959cac68076ffa3e646ded6dcc0622ce6d72fbf64157eba5bf7c6fdb9be66a7e8f25841ec110646af5e1ea9f7d9027cd5d50107a5bc8aa769351af5db2a77304c4596318ca3fa0543ef38fd61ad1a8d196318012a2204dd408412f48a917a8ca5a24e3c4b25d8cdb45746c1", @nested={0x4, 0x16}]}]}, @NL80211_ATTR_TIMEOUT_REASON={0x8, 0xf8, 0x8}, @NL80211_ATTR_KEY_CIPHER={0x8}, @NL80211_ATTR_FILS_ERP_USERNAME={0x9, 0xf9, "028c817689"}, @NL80211_ATTR_MESH_PEER_AID={0x6, 0xed, 0x3}, @NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0xf7}, @NL80211_ATTR_SAR_SPEC={0x224, 0x12c, 0x0, 0x1, [@NL80211_SAR_ATTR_TYPE={0x8, 0x1, 0x20f44246}, @NL80211_SAR_ATTR_TYPE={0x8, 0x1, 0x2}, @NL80211_SAR_ATTR_SPECS={0x88, 0x2, 0x0, 0x1, [{0x2c, 0x0, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x8}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x80000000}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x9}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x2}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0xfffffff2}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x9}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0xa1e}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x3}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x2}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0xaf}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x2f34}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x1}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x9}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x7}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0xffffffff}]}]}, @NL80211_SAR_ATTR_SPECS={0x90, 0x2, 0x0, 0x1, [{0x44, 0x0, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x57d7310f}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x311e}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x140000}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x81}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x5}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x6}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x400}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x9}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x5ce}, @NL80211_SAR_ATTR_SPECS_POWER={0x8}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x4}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x1164}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0xffff}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS_POWER={0x8}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x5}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x8}]}]}, @NL80211_SAR_ATTR_SPECS={0xf8, 0x2, 0x0, 0x1, [{0x4}, {0x14, 0x0, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0xb56}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x1}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x3}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x7f}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x1}]}, {0x44, 0x0, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x1}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x2}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x4}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x4}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x2}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x5459}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x7fff}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x7}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x2075}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x2f}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x7}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x6}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0xc}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x99d60000}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0xe73}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x400}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x6}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x3}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0xab}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0xffff}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0xfffffbff}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x6}]}]}]}, @NL80211_ATTR_SAR_SPEC={0x240, 0x12c, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS={0x1cc, 0x2, 0x0, 0x1, [{0x44, 0x0, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x3ff}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x5}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x9}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x4}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x6}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x6}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x745}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x400000}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x2}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x9}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x32e}]}, {0x54, 0x0, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x6}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x2}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x5}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0xdb6a}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x30000000}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0xf17}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x7}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x9}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x3}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS_POWER={0x8}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x5}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x7}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x7}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x7fffffff}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x9}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x5}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x2}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x7ff}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x2f}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x2}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x3}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0xffff}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x11a26b55}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x6}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0xfffffff7}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x1000}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x8}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x9}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x55}]}, {0x54, 0x0, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x5}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x81}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x7}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x3}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0xfffffff7}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x1}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x6}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x6}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x5}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x1}]}]}, @NL80211_SAR_ATTR_TYPE={0x8, 0x1, 0x9}, @NL80211_SAR_ATTR_TYPE={0x8, 0x1, 0x7}, @NL80211_SAR_ATTR_SPECS={0x38, 0x2, 0x0, 0x1, [{0x34, 0x0, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x5}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x6b1d}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x9}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x4}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0xff}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0xd9}]}]}, @NL80211_SAR_ATTR_TYPE={0x8, 0x1, 0x7}, @NL80211_SAR_ATTR_TYPE={0x8, 0x1, 0xe79}, @NL80211_SAR_ATTR_SPECS={0x18, 0x2, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0xbe}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0xb3a}]}]}]}, @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x598}, 0x1, 0x0, 0x0, 0x40}, 0x10) r3 = syz_genetlink_get_family_id$auto_netdev(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$auto_NETDEV_CMD_QUEUE_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010025bd0001fbdbdf0002"], 0x1c}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) mprotect$auto(0x1ffff000, 0x8000000000000001, 0xd) r4 = socket(0x10, 0x2, 0x0) sendmsg$auto_ETHTOOL_MSG_LINKMODES_SET(r4, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x40000) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f000000fc00), 0x3, 0x0) setfsgid$auto(0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) 3m12.156822725s ago: executing program 5 (id=3659): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000440)={0x10ac, r1, 0x200, 0x70bd26, 0x25dfdbfd, {}, [@NL80211_ATTR_FRAME_MATCH={0x1004, 0x5b, "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"}, @NL80211_ATTR_WDEV={0xc, 0x99, 0x7}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_SCAN_FREQ_KHZ={0x7a, 0x124, 0x0, 0x1, [@nested={0x4, 0x2e}, @generic="705b71135262ae0e122bb1df9666c2f7c6e6453c7d2ee49e5e34edfa13ba054b284d02deaf95e2d7e3dc3063888408e3479e42ac67e7039aa3b9a86c2dc89bc475ac07b360178dde2050e69a57461d4643a27e092416d9b777124799727f5cf3e82ba87cacc525a75ed09972003e125dcacc"]}]}, 0x10ac}, 0x1, 0x0, 0x0, 0x400c080}, 0x80) socketpair$auto(0x8, 0x1, 0x8000000000000000, 0x0) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) ioctl$auto_TIOCSTI2(r2, 0x5412, 0x0) 3m12.034851806s ago: executing program 5 (id=3661): r0 = socket(0x2, 0x801, 0x100) ioperm$auto(0x3, 0xe, 0x2000000000000149) wait4$auto(0x3, 0x0, 0x100, 0x0) openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x88182, 0x0) mknod$auto(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x121800, 0x6) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ila(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_ILA_CMD_FLUSH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x14, r1, 0x1, 0x70bd21, 0x25dfdbff}, 0xfffffffb}, 0x1, 0x0, 0x0, 0x90}, 0x4000) r2 = open(0x0, 0xc162, 0x0) mmap$auto(0x0, 0x20009, 0x20004000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8000, 0x0) io_uring_setup$auto(0x3, 0x0) io_uring_register$auto(0x2, 0x6, &(0x7f0000000180), 0x86) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0xdd, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) fanotify_init$auto(0x5, 0x2000000000002) socket(0x2, 0x2, 0x1) socket(0x2, 0x801, 0x106) socket(0x26, 0x80805, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x12ba7e, 0x145) fanotify_mark$auto(0x0, 0x1, 0x9, 0x4, 0x0) close_range$auto(0x2, 0xffffffffffffffff, 0x0) open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) readv$auto(0x0, &(0x7f0000000080)={0x0, 0x1e}, 0x3) fallocate$auto(r2, 0x3, 0xff, 0x7) connect$auto(0x3, &(0x7f00000000c0)=@in={0x2, 0x0, @multicast2}, 0x55) 3m11.770058787s ago: executing program 5 (id=3665): mmap$auto(0x0, 0x20007, 0x80000000004000df, 0x10004000eb1, 0x8, 0x8000) semctl$auto(0x1ff, 0x2, 0x13, 0x1) socket(0x15, 0x5, 0x0) setsockopt$auto(0x3, 0x114, 0x6, 0x0, 0xa0) select$auto(0xd, 0x0, &(0x7f0000000100)={[0x20000000000d, 0x203, 0x0, 0xc, 0x5, 0x3, 0xff, 0x2000000000000002, 0x9, 0x8, 0x103, 0xa, 0x4, 0xaab, 0x5, 0x4006]}, 0x0, 0x0) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = socket(0xa, 0x3, 0x73) setsockopt$auto(r0, 0xff, 0x7, 0x0, 0xfff) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80802, 0x0) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) connect$auto(0x3, &(0x7f0000000140)=@in={0x2, 0x4, @multicast2}, 0x55) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7fffffe) 3m11.542726652s ago: executing program 5 (id=3668): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socketpair$auto(0x8, 0x1, 0x8000000000000000, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) write$auto(0x3, 0x0, 0xfffffdef) close_range$auto(0x2, 0x8, 0x0) 3m10.959794337s ago: executing program 5 (id=3670): rt_sigqueueinfo$auto(0x1, 0x7, &(0x7f0000000040)={@siginfo_0_0={0x0, 0x5, 0xfffffffb, @_sigpoll={0x52, 0x7}}}) r0 = getpid() migrate_pages$auto(r0, 0x3, 0x0, &(0x7f0000000000)=0x6) 3m10.701568038s ago: executing program 5 (id=3671): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = socket(0xa, 0x3, 0x6) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000340)='/dev/v4l-subdev2\x00', 0x80000, 0x0) mmap$auto(0x7, 0x600008, 0xe2, 0x9b7f, 0x8, 0x2f6076fb) ioctl$auto(0x3, 0xc0585605, 0x38) close_range$auto(0x2, 0x8, 0x0) fanotify_init$auto(0x5, 0x2000000000002) socket(0x2, 0x801, 0x100) fanotify_init$auto(0x80, 0x7) poll$auto(&(0x7f0000000d40)={0x3, 0x1, 0xa}, 0x9, 0x400) sendmsg$auto_NL802154_CMD_GET_SEC_DEV(r0, 0x0, 0x20008040) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), r1) syz_genetlink_get_family_id$auto_wireguard(&(0x7f0000000300), 0xffffffffffffffff) connect$auto(0x3, 0x0, 0x55) pread64$auto(0xffffffffffffffff, 0x0, 0xf429, 0xb) mmap$auto(0x1, 0x9, 0xffffffffffffffff, 0x14, 0x81, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'team_slave_0\x00'}) 3m10.249119778s ago: executing program 35 (id=3671): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = socket(0xa, 0x3, 0x6) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000340)='/dev/v4l-subdev2\x00', 0x80000, 0x0) mmap$auto(0x7, 0x600008, 0xe2, 0x9b7f, 0x8, 0x2f6076fb) ioctl$auto(0x3, 0xc0585605, 0x38) close_range$auto(0x2, 0x8, 0x0) fanotify_init$auto(0x5, 0x2000000000002) socket(0x2, 0x801, 0x100) fanotify_init$auto(0x80, 0x7) poll$auto(&(0x7f0000000d40)={0x3, 0x1, 0xa}, 0x9, 0x400) sendmsg$auto_NL802154_CMD_GET_SEC_DEV(r0, 0x0, 0x20008040) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), r1) syz_genetlink_get_family_id$auto_wireguard(&(0x7f0000000300), 0xffffffffffffffff) connect$auto(0x3, 0x0, 0x55) pread64$auto(0xffffffffffffffff, 0x0, 0xf429, 0xb) mmap$auto(0x1, 0x9, 0xffffffffffffffff, 0x14, 0x81, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'team_slave_0\x00'}) 1m23.984949252s ago: executing program 2 (id=4250): mmap$auto(0x0, 0x20007, 0x80000000004000df, 0x10004000eb1, 0x8, 0x8000) setsockopt$auto(0x3, 0x114, 0x6, 0x0, 0xa0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x163340, 0x6a) socket(0x2, 0x80802, 0x0) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) connect$auto(0x3, &(0x7f0000000140)=@in={0x2, 0x4, @multicast2}, 0x55) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7fffffe) landlock_create_ruleset$auto(&(0x7f00000007c0)={0x1}, 0x8, 0x0) ioctl$auto_VHOST_SET_OWNER(0xffffffffffffffff, 0xaf01, 0x5) read$auto_v4l2_fops_v4l2_dev(0xffffffffffffffff, &(0x7f00000001c0)=""/191, 0x1f8) 1m23.5420737s ago: executing program 2 (id=4254): connect$auto(0xffffffffffffffff, &(0x7f0000000000), 0x55) mprotect$auto(0x1ffff000, 0x8000000000000001, 0x4) close_range$auto(0x2, 0x8, 0x0) mknod$auto(&(0x7f0000000000)='\x00\x00\x00\x00\x00\x00\x00', 0x1001, 0x4) open(&(0x7f0000000000)='./file0\x00', 0x8a240, 0x15e) mmap$auto(0x0, 0x40008, 0x1000000004, 0x9b72, 0x2, 0x8000) write$auto(0x3, 0x0, 0xfffffdef) mmap$auto(0x0, 0x401, 0xdf, 0x9b72, 0x2, 0x8000) read$auto(0x3, 0x0, 0xfffffdef) 1m22.574938956s ago: executing program 2 (id=4257): exit$auto(0x7fff) mmap$auto(0x0, 0xa, 0xdb, 0x9b72, 0x5, 0x8000) utimensat$auto(0x2, 0x0, 0x0, 0x1000) sendmsg$auto_OVS_DP_CMD_GET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4044087}, 0x8004) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="35e1dd14e0", @ANYRES16=0x0, @ANYBLOB="13042bbd7000fbdbdf250b000020"], 0x14}, 0x1, 0x0, 0x0, 0x4804}, 0x80) mmap$auto(0x0, 0x9a, 0x4, 0xeb1, 0x401, 0x8000) socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x2, 0x5, 0x7) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS1\x00', 0x20000, 0x0) ioctl$auto_TIOCGDEV2(r1, 0x5459, 0x0) openat$auto_kmsg_fops_printk(0xffffffffffffff9c, &(0x7f0000000040), 0x1001, 0x0) socket(0xa, 0x801, 0x106) openat$auto_tap_fops_tap(0xffffffffffffff9c, 0x0, 0x2001, 0x0) socket(0x2c, 0x80003, 0x0) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22242, 0x155) fanotify_init$auto(0x65, 0x2) pipe$auto(0x0) dup2$auto(0x5, 0x4) splice$auto(0x4, 0x0, 0x2, 0x0, 0x80000001, 0x9) write$auto(0x6, 0x0, 0x100000001) r2 = syz_genetlink_get_family_id$auto_ipvs(&(0x7f0000000040), r0) geteuid() sendmsg$auto_IPVS_CMD_SET_DEST(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000240)={&(0x7f00000004c0)={0x14, r2, 0x4, 0x70bd2c, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x8}, 0x20040044) 1m21.43852916s ago: executing program 2 (id=4262): setsockopt$auto(0x3, 0x114, 0x6, 0x0, 0xa0) select$auto(0xd, 0x0, &(0x7f0000000100)={[0x20000000000d, 0x203, 0x0, 0xc, 0x5, 0x3, 0xff, 0x2000000000000002, 0x9, 0x8, 0x103, 0xa, 0x4, 0xaab, 0x5, 0x4006]}, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x163340, 0x6a) socket(0x2, 0x80802, 0x0) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) connect$auto(0x3, &(0x7f0000000140)=@in={0x2, 0x4, @multicast2}, 0x55) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$auto_OVS_FLOW_CMD_GET(r0, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000000040)={0x20, r1, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@OVS_FLOW_ATTR_PROBE={0x4}, @OVS_FLOW_ATTR_UFID={0x5, 0x9, 0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000004}, 0x51b41aab316a9d76) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7fffffe) 1m21.14840436s ago: executing program 2 (id=4263): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000040), r0) sendmsg$auto_NFSD_CMD_THREADS_SET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="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"], 0x40}, 0x1, 0x0, 0x0, 0x404c8c4}, 0x20004000) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) bpf$auto(0x5, &(0x7f0000000000)=@iter_create={0xf14, 0xf4240}, 0x7) socket(0x2, 0x1, 0x0) socket(0x23, 0x2, 0x0) ioctl$auto(0x1, 0x89a0, 0x8) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) socket(0xa, 0x3, 0x32) close_range$auto(0x2, 0xfffffffffffff000, 0x2) bpf$auto(0x8000000000000020, 0xffffffffffffffff, 0x0) r3 = socket(0xa, 0x2, 0x3a) mmap$auto(0x0, 0xa, 0xdb, 0x9b72, 0x5, 0x8000) io_uring_setup$auto(0x6, 0x0) clock_nanosleep$auto(0x2, 0x1000, 0x0, 0x0) setsockopt$auto(r3, 0x29, 0x21, &(0x7f0000000040)='! ', 0x63) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) connect$auto(0x3, &(0x7f0000000140), 0x55) linkat$auto(r2, &(0x7f0000000380)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000400)='./file0\x00', 0x6) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x68, 0x0, 0x200, 0x70bd26, 0x25dfdbfe, {}, [@HSR_A_IF1_AGE={0x8, 0x3, 0x200}, @HSR_A_IF2_SEQ={0x6, 0x7, 0x8000}, @HSR_A_IFINDEX={0x8}, @HSR_A_NODE_ADDR_B={0xa}, @HSR_A_NODE_ADDR={0xa}, @HSR_A_NODE_ADDR={0xa}, @HSR_A_IF1_AGE={0x8, 0x3, 0x19}, @HSR_A_IFINDEX={0x8}, @HSR_A_IF1_AGE={0x8, 0x3, 0x6}]}, 0x68}, 0x1, 0x0, 0x0, 0x4000}, 0x40090) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x3, 0x100) socket(0x10, 0x2, 0x0) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) 1m20.192736559s ago: executing program 2 (id=4269): mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) socketpair$auto(0x8, 0x5, 0x8000000000000000, 0x0) r0 = open(0x0, 0x10a42, 0xe1d2b27bdc14aabc) fanotify_mark$auto(0x400000000000, 0x101, 0xdd, r0, 0x0) sendmsg$auto_NL80211_CMD_START_P2P_DEVICE(r0, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x0, 0x4048040}, 0x48040) rt_sigaction$auto(0x6, 0x0, 0x0, 0x8) r1 = socket(0x23, 0x80805, 0xa) mincore$auto(0x0, 0x10000, 0x0) poll$auto(&(0x7f0000000040)={r1, 0x7, 0x8}, 0x80, 0x400400) setsockopt$auto(r2, 0x113, 0x1, 0x0, 0x81) open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x100) open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) mmap$auto(0x0, 0x5, 0x4000000000df, 0xeb1, 0x401, 0x8000) mmap$auto(0x10, 0x5, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) write$auto(0x3, 0x0, 0x100082) prctl$auto(0x10000000024, 0x2, 0x2008, 0x4000000c, 0x80001) lseek$auto(0x3, 0x7fffffffffffffff, 0x1) mmap$auto(0xa14, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) setns(0xffffffffffffffff, 0x0) unshare$auto(0x40000080) socket(0x2b, 0x2, 0x88) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) socket(0xa, 0x801, 0x84) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x801, 0x84) getsockopt$auto(0x6, 0x84, 0x80, 0x0, &(0x7f00000000c0)=0x67f) clone$auto(0x8001, 0x5, 0xffffffffffffffff, 0xfffffffffffffffc, 0x6) writev$auto(0x1, &(0x7f0000000100)={0x0, 0x400000000000fdef}, 0x1) socket(0x28, 0x4, 0x3) fcntl$auto(0x0, 0x407, 0x100000) 1m19.672265243s ago: executing program 36 (id=4269): mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) socketpair$auto(0x8, 0x5, 0x8000000000000000, 0x0) r0 = open(0x0, 0x10a42, 0xe1d2b27bdc14aabc) fanotify_mark$auto(0x400000000000, 0x101, 0xdd, r0, 0x0) sendmsg$auto_NL80211_CMD_START_P2P_DEVICE(r0, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x0, 0x4048040}, 0x48040) rt_sigaction$auto(0x6, 0x0, 0x0, 0x8) r1 = socket(0x23, 0x80805, 0xa) mincore$auto(0x0, 0x10000, 0x0) poll$auto(&(0x7f0000000040)={r1, 0x7, 0x8}, 0x80, 0x400400) setsockopt$auto(r2, 0x113, 0x1, 0x0, 0x81) open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x100) open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) mmap$auto(0x0, 0x5, 0x4000000000df, 0xeb1, 0x401, 0x8000) mmap$auto(0x10, 0x5, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) write$auto(0x3, 0x0, 0x100082) prctl$auto(0x10000000024, 0x2, 0x2008, 0x4000000c, 0x80001) lseek$auto(0x3, 0x7fffffffffffffff, 0x1) mmap$auto(0xa14, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) setns(0xffffffffffffffff, 0x0) unshare$auto(0x40000080) socket(0x2b, 0x2, 0x88) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) socket(0xa, 0x801, 0x84) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x801, 0x84) getsockopt$auto(0x6, 0x84, 0x80, 0x0, &(0x7f00000000c0)=0x67f) clone$auto(0x8001, 0x5, 0xffffffffffffffff, 0xfffffffffffffffc, 0x6) writev$auto(0x1, &(0x7f0000000100)={0x0, 0x400000000000fdef}, 0x1) socket(0x28, 0x4, 0x3) fcntl$auto(0x0, 0x407, 0x100000) 40.963802997s ago: executing program 7 (id=4475): connect$auto(0xffffffffffffffff, &(0x7f0000000000), 0x55) close_range$auto(0x2, 0x8, 0x0) mknod$auto(&(0x7f0000000000)='\x00\x00\x00\x00\x00\x00\x00', 0x1001, 0x4) open(&(0x7f0000000000)='./file0\x00', 0x8a240, 0x15e) mmap$auto(0x0, 0x40008, 0x1000000004, 0x9b72, 0x2, 0x8000) open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x100) write$auto(0x3, 0x0, 0xfffffdef) mmap$auto(0x0, 0x401, 0xdf, 0x9b72, 0x2, 0x8000) read$auto(0x3, 0x0, 0xfffffdef) 40.750851198s ago: executing program 7 (id=4477): unshare$auto(0x40000080) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) (async) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) removexattr$auto(0x0, 0x0) (async) removexattr$auto(0x0, 0x0) mmap$auto(0x4, 0x2020009, 0x8, 0xeb1, 0xffffffffffeffffa, 0x7ffd) getrandom$auto(0x0, 0x6000000, 0x3) r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/net/rxrpc/calls\x00', 0x100, 0x0) read$auto_proc_reg_file_ops_compat_inode(r0, &(0x7f0000000040)=""/88, 0x58) read$auto_proc_reg_file_ops_compat_inode(r0, &(0x7f0000001080)=""/4092, 0xffc) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_WG_CMD_GET_DEVICE(0xffffffffffffffff, 0x0, 0x4000) (async) sendmsg$auto_WG_CMD_GET_DEVICE(0xffffffffffffffff, 0x0, 0x4000) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x50, 0x0, 0x800, 0x70bd2c, 0x25dfdbfe, {}, [@HSR_A_IFINDEX={0x8}, @HSR_A_IF2_SEQ={0x6, 0x7, 0x8000}, @HSR_A_IFINDEX={0x8}, @HSR_A_NODE_ADDR_B={0xa, 0x5, @remote}, @HSR_A_NODE_ADDR={0xa}, @HSR_A_NODE_ADDR={0xa, 0x1, @broadcast}]}, 0x50}, 0x1, 0x0, 0x0, 0x40080}, 0x6004000) r1 = socket(0xa, 0x3, 0xff) mprotect$auto(0x1ffff000, 0x8000000000000001, 0xd) sendto$auto(r1, 0x0, 0xffffffffe0000000, 0x200, &(0x7f0000000180)=@l2={0x1f, 0x15, @none, 0x1}, 0x1c) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) (async) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) socketpair$auto(0x1d, 0x2, 0x2, 0x0) (async) socketpair$auto(0x1d, 0x2, 0x2, 0x0) close_range$auto(0x2, 0x8, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x252802, 0x190) socket(0x1, 0x1, 0x0) (async) socket(0x1, 0x1, 0x0) setsockopt$auto(0x3, 0x1, 0xf44, 0x0, 0x9) connect$auto(0x3, &(0x7f00000001c0), 0x55) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) (async) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) (async) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0xfffffffffffefffd, 0x17) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x8, 0x3ff57696, 0x9b72, 0x5, 0x8000000000008000) mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) madvise$auto(0x0, 0x80000001, 0x8) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) 39.375790711s ago: executing program 7 (id=4487): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_RSS_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="01032bbd7000ffdbdf2724"], 0x14}, 0x1, 0x0, 0x0, 0x7}, 0x4010) 39.228361049s ago: executing program 7 (id=4489): mmap$auto(0x0, 0x3, 0xdf, 0xeb1, 0x401, 0x8000) mkdir$auto(&(0x7f00000001c0)='}[,&*}\x00', 0xc001) unshare$auto(0x40000080) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_OVS_DP_CMD_NEW(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x40000081) fcntl$auto(r0, 0x0, 0x9) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x5, 0x0) mq_open$auto(&(0x7f0000000200)='#)-\\&[}\x00', 0xde8, 0xb, &(0x7f0000000240)={0x9, 0x4, 0x2, 0x5}) mq_open$auto(&(0x7f0000000280)='#)-\\&[}\x00', 0x5, 0x10, 0x0) mmap$auto(0x0, 0x8001, 0x4000000000df, 0x610, 0x6, 0x300000000000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) r1 = open(0x0, 0x0, 0xb5d1af1605322df2) open_by_handle_at$auto(r1, &(0x7f0000000040)={0x8, 0x2, "0200000000000000"}, 0x2) r2 = socket(0x10, 0x2, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x0, 0x1, 0x9, 0x7, 0x3b, 0x4909b6fb, 0x1ffde, 0x7, 0x6, 0x2, 0x9, 0x3, 0x6, 0xcb13, 0xb4, 0x9, 0x2, 0x10000, 0x80, 0x7, 0x40000, 0x7, 0x2000, 0x4200, 0x0, 0x84, [0x0, 0x0, 0x0, 0x50100000000004, 0x0, 0x0, 0x100, 0xa, 0x70624ce7, 0x0, 0x6, 0xb, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0xfffffffffffffffd, 0x7, 0x6, 0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0, 0x0, 0x400000000005b8, 0xc, 0x0, 0x804, 0x0, 0x7, 0xffffffffffffffff, 0x5, 0x1, 0xfffffffffffffffc, 0x3, 0xa38, 0x4, 0x3fffffffffffe, 0x1, 0x2, 0x3fffffffff, 0x0, 0x2, 0xffff]}, 0x202, 0x11) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="10002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) sendmmsg$auto(r2, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f00000001c0), 0x7, 0xa505}, 0x800}, 0x7, 0x4008) io_uring_setup$auto(0x6, 0x0) ioperm$auto(0x800007ff, 0x5, 0xd) mknod$auto(&(0x7f0000000040)='\xfd\x90\x8f2\x14\x92\x00\xbf\xdf\xcf\x9a\xae}\xd9\xf95\xc5gV\x82\f\xe5h\xfe\x83\xe4\xbe\x8c\x1f\xa5\xf1_T\xde\xf7\xd4\x83D\x9eXS\xd6\x90T\xc1v\xad#\xc4q\x8b\xed2\xadW:0\xef\x9c.=\xba\x0fy\x8f\xcd\xd6\xde\xa9i\xec\xe8\xca\x9f\xf3\x82b\xa2y\xa87J\xfc \xc5\xd8\x80\xba\xaaV\x8f{\x1f\x1b\xb0\n\x97\\\xa7\xe3\xdf\xc29-*;#r\xc8\xd1\x14RcF\x87\xe4\x1c\x1fGL\xa5\x19\x90\xd6\x8d*\xe6\b(\x1a\xea\x95\xdc\xa6)5\xae&yAl\x1e\xe3j Lp\x91\r\xed%\xafZ\xf8w\xf2}\xcdGS\xce\xb9\xdck\x86\x00.6\xe6{\xc1\x00\x1bW5\x81\xda!\xcb.O\xa9\xf3\xa7\x88+\xb9\xf3\x9a7\xa4\xe6)<\xa79\xa4\x87\\\xb4\xbf\v\x03\x87\xac\x87r\x02\x05\xdb\xe4\xde,V\xb6G\xba.WR\xe2<~\xdd\xb2\xe53hj_;\xa5qm\x92\xc7P\xc9.\x82w8\x1f\xfcX\xe4\x14\xc72cC\xd3\x00'/263, 0x1, 0x4) lstat$auto(&(0x7f0000000500)='\xfd\x90\x8f2\x14\x92\x00\xbf\xdf\xcf\x9a\xae}\xd9\xf95\xc5gV\x82\f\xe5h\xfe\x83\xe4\xbe\x8c\x1f\xa5\xf1_T\xde\xf7\xd4\x83D\x9eXS\xd6\x90T\xc1v\xad#\xc4q\x8b\xed2\xadW:0\xef\x9c.=\xba\x0fy\x8f\xcd\xd6\xde\xa9i\xec\xe8\xca\x9f\xf3\x82b\xa2y\xa87J\xfc \xc5\xd8\x80\xba\xaaV\x8f{\x1f\x1b\xb0\n\x97\\\xa7\xe3\xdf\xc29-*;#r\xc8\xd1\x14RcF\x87\xe4\x1c\x1fGL\xa5\x19\x90\xd6\x8d*\xe6\b(\x1a\xea\x95\xdc\xa6)5\xae&yAl\x1e\xe3j Lp\x91\r\xed%\xafZ\xf8w\xf2}\xcdGS\xce\xb9\xdck\x86\x00.6\xe6{\xc1\x00\x1bW5\x81\xda!\xcb.O\xa9\xf3\xa7\x88+\xb9\xf3\x9a7\xa4\xe6)<\xa79\xa4\x87\\\xb4\xbf\v\x03\x87\xac\x87r\x02\x05\xdb\xe4\xde,V\xb6G\xba.WR\xe2<~\xdd\xb2\xe53hj_;\xa5qm\x92\xc7P\xc9.\x82w8\x1f\xfcX\xe4\x14\xc72cC\xd3\x00', 0x0) mmap$auto(0x3, 0x43, 0xdf, 0x17, 0x7, 0x40000000028000) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_GTP_CMD_NEWPDP(r3, &(0x7f0000003080)={0x0, 0x0, &(0x7f0000003040)={&(0x7f0000000380)=ANY=[@ANYRES64=r0, @ANYRES16, @ANYBLOB="9900000000000000020800001e000000000001000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4000810}, 0x80) 38.44831273s ago: executing program 7 (id=4492): rt_sigqueueinfo$auto(0x1, 0x7, &(0x7f0000000040)={@siginfo_0_0={0x0, 0x5, 0xfffffffb, @_sigpoll={0x52, 0x7}}}) migrate_pages$auto(0x1, 0x9, 0x0, &(0x7f0000000840)=0x2) mmap$auto(0x0, 0x2020006, 0x1000000000000007, 0xeb1, 0x0, 0x1008000) r0 = socket(0x29, 0x2, 0x0) openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x48402, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = open(&(0x7f0000000480)='./cgroup.cpu/cgroup.procs\x00', 0x80842, 0x91) read$auto(r1, 0x0, 0x1) setresuid$auto(0x2, 0x7, 0x0) write$auto(0x3, 0x0, 0xfdef) r2 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200", @ANYBLOB="5de1"], 0x1ac}}, 0x40000) recvmmsg$auto(r2, &(0x7f0000000140)={{0x0, 0x1, &(0x7f0000000080)={0x0, 0x400}, 0x5, 0x0, 0x200002, 0x8}, 0x803}, 0xfffffff9, 0x10, 0x0) sendmsg$auto_ETHTOOL_MSG_PSE_GET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x2c, 0x0, 0x400, 0x70bd25, 0x25dfdbfe, {}, [@ETHTOOL_A_PSE_HEADER={0x4}, @ETHTOOL_A_PSE_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x800) close_range$auto(r2, r1, 0xc) sendmsg$auto_NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="d8010000", @ANYRES16, @ANYBLOB="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"], 0x1d8}, 0x1, 0x0, 0x0, 0x40080}, 0x20040000) sendmsg$auto_HWSIM_CMD_DEL_RADIO(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="01"], 0x14}, 0x1, 0x0, 0x0, 0x20040800}, 0x24004000) r3 = socket(0x10, 0x2, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000011c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1200"], 0x1ac}}, 0x40000) ioctl$auto(r0, 0x8922, 0x24) 37.868467118s ago: executing program 7 (id=4497): mprotect$auto(0x1ffff000, 0x8000000000000001, 0x4) close_range$auto(0x2, 0x8, 0x0) mknod$auto(&(0x7f0000000000)='\x00\x00\x00\x00\x00\x00\x00', 0x1001, 0x4) open(&(0x7f0000000000)='./file0\x00', 0x8a240, 0x15e) mmap$auto(0x0, 0x40008, 0x1000000004, 0x9b72, 0x2, 0x8000) open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x100) write$auto(0x3, 0x0, 0xfffffdef) mmap$auto(0x0, 0x401, 0xdf, 0x9b72, 0x2, 0x8000) read$auto(0x3, 0x0, 0xfffffdef) 37.39210542s ago: executing program 37 (id=4497): mprotect$auto(0x1ffff000, 0x8000000000000001, 0x4) close_range$auto(0x2, 0x8, 0x0) mknod$auto(&(0x7f0000000000)='\x00\x00\x00\x00\x00\x00\x00', 0x1001, 0x4) open(&(0x7f0000000000)='./file0\x00', 0x8a240, 0x15e) mmap$auto(0x0, 0x40008, 0x1000000004, 0x9b72, 0x2, 0x8000) open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x100) write$auto(0x3, 0x0, 0xfffffdef) mmap$auto(0x0, 0x401, 0xdf, 0x9b72, 0x2, 0x8000) read$auto(0x3, 0x0, 0xfffffdef) 7.199180837s ago: executing program 1 (id=4665): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_RSS_GET(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x7}, 0x4010) 7.082422521s ago: executing program 1 (id=4666): setsockopt$auto(0x3, 0x114, 0x6, 0x0, 0xa0) select$auto(0xd, 0x0, &(0x7f0000000100)={[0x20000000000d, 0x203, 0x0, 0xc, 0x5, 0x3, 0xff, 0x2000000000000002, 0x9, 0x8, 0x103, 0xa, 0x4, 0xaab, 0x5, 0x4006]}, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) r0 = open(0x0, 0x163340, 0x6a) getpid() socket(0x2, 0x80802, 0x0) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) vmsplice$auto(r0, &(0x7f0000000080)={&(0x7f0000000000)="62125ca68359a22d8b13ebd2af1cd5d3213f78549862a37a74989e78388e7164ab19a1d490276bd104d1aca03964756b52762029646b0cc7fce837f6636bac652515d7477d0c19c34fab5fcde5fd26244f32343a31baf9bc8f622224b146a2681fe7541a8bbd5a43fce0a5fdaba634a62cff30031e511d2319c1c4250253", 0x5}, 0x7, 0x7) connect$auto(0x3, &(0x7f0000000140)=@in={0x2, 0x4, @multicast2}, 0x55) read$auto_snd_ctl_f_ops_control(r0, &(0x7f00000000c0)=""/12, 0xc) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7fffffe) 6.631245678s ago: executing program 1 (id=4669): socketpair$auto(0x8, 0x1, 0x8000000000000000, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e01, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0xa, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x3, 0x2) ioctl$auto(0x3, 0x890b, 0x38) 6.451937213s ago: executing program 1 (id=4670): semctl$auto(0x1ff, 0x2, 0x3c52, 0x1) mmap$auto(0x0, 0x400005, 0xfffffffffffffffe, 0x9b72, 0x2, 0x8000) sendmsg$auto_WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x488c0}, 0x0) r0 = socket(0x2a, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000080), 0x6b) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000140)) connect$auto(r0, &(0x7f0000000040)=@can, 0x8) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) fcntl$auto(0xffffffffffffffff, 0x401, 0x5) write$auto(0x3, 0x0, 0xfffffdef) unshare$auto(0x40000080) socket(0xa, 0x3, 0x3a) epoll_wait$auto(r0, &(0x7f0000000000)={0x200007, 0x800000000000007}, 0x7fe, 0x6) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) setsockopt$auto(0x400000000000003, 0x29, 0xca, 0x0, 0x567) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) sysfs$auto(0x2, 0x10000000000002d, 0x0) syz_genetlink_get_family_id$auto_ovs_datapath(0x0, r0) mbind$auto(0x0, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) gettid() connect$auto(0xffffffffffffffff, 0x0, 0x55) mmap$auto(0x0, 0x5, 0x3, 0x16, 0x3, 0x8000) sendfile$auto(0x6, r0, 0x0, 0x8000) unshare$auto(0x40000080) writev$auto(0x1, &(0x7f0000000100)={0x0, 0x400000000000fdef}, 0x1) madvise$auto(0x0, 0x20200, 0x15) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r1 = open(&(0x7f0000000200)='./cgroup\x00', 0x400, 0x23) fchdir$auto(r1) 6.150258793s ago: executing program 6 (id=4673): semctl$auto(0x1ff, 0x2, 0x3c52, 0x1) mmap$auto(0x0, 0x400005, 0xfffffffffffffffe, 0x9b72, 0x2, 0x8000) sendmsg$auto_WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x488c0}, 0x0) r0 = socket(0x2a, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000080), 0x6b) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000140)) connect$auto(r0, &(0x7f0000000040)=@can, 0x8) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) fcntl$auto(0xffffffffffffffff, 0x401, 0x5) write$auto(0x3, 0x0, 0xfffffdef) unshare$auto(0x40000080) socket(0xa, 0x3, 0x3a) epoll_wait$auto(r0, &(0x7f0000000000)={0x200007, 0x800000000000007}, 0x7fe, 0x6) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) setsockopt$auto(0x400000000000003, 0x29, 0xca, 0x0, 0x567) 5.275944988s ago: executing program 6 (id=4676): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_RSS_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x7}, 0x4010) 5.171465673s ago: executing program 6 (id=4677): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xfffffffffffefffd, 0x17) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f000000fc00), 0x3, 0x0) ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x1) madvise$auto(0x0, 0x20499d, 0x9) madvise$auto(0x0, 0xffffffffffff0001, 0x15) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) ioctl$auto_DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000080)={0x0, r1, r0, 0x401}) ioctl$auto_IOCTL_VMCI_QUEUEPAIR_SETVA(r2, 0x7a4, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) futex_waitv$auto(&(0x7f0000000000)={0x8, 0x5d94, 0x4, 0x4}, 0x77, 0x0, 0x0, 0x62bd) mprotect$auto(0x1ffff000, 0x8000000000000001, 0x4) io_uring_setup$auto(0x40005, &(0x7f0000000000)={0x6, 0x1, 0x400, 0x7, 0x1005, 0x6, 0x7, [0x4, 0x2e9, 0x8], {0x0, 0x1, 0x8, 0x7, 0x5, 0x100005, 0x1, 0xfffffffc, 0x7}, {0x4, 0xfff, 0xffff7fff, 0x2, 0x8, 0x200, 0x3, 0x0, 0x3}}) bpf$auto(0xb, 0x0, 0x3) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) 4.875414618s ago: executing program 9 (id=4678): connect$auto(0xffffffffffffffff, &(0x7f0000000000), 0x55) mprotect$auto(0x1ffff000, 0x8000000000000001, 0x4) close_range$auto(0x2, 0x8, 0x0) mknod$auto(&(0x7f0000000000)='\x00\x00\x00\x00\x00\x00\x00', 0x1001, 0x4) open(&(0x7f0000000000)='./file0\x00', 0x8a240, 0x15e) mmap$auto(0x0, 0x40008, 0x1000000004, 0x9b72, 0x2, 0x8000) open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x100) write$auto(0x3, 0x0, 0xfffffdef) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x2, 0x8000) mmap$auto(0x0, 0x401, 0xdf, 0x9b72, 0x2, 0x8000) read$auto(0x3, 0x0, 0xfffffdef) 4.782695618s ago: executing program 1 (id=4679): r0 = open(&(0x7f00009e1000)='./file0\x00', 0xc162, 0x0) close_range$auto(0x2, 0x8, 0x0) ioctl$auto_evdev_fops_evdev(0xffffffffffffffff, 0x40044590, 0x0) io_setup$auto(0x7ffe, &(0x7f0000000000)) socket(0xa, 0x3, 0x0) io_setup$auto(0x54d5, 0x0) chmod$auto(&(0x7f00000000c0)='./file0\x00', 0xf4ba) write$auto(r0, &(0x7f0000000100)='%\t\x00*@,,,\xc6_X~\x0e\x00\xfd\xb6\x93\x8b\x87\x03 5\x91\xe5C\x13\x0f\xcc)j\xa6H\t\v>q;\xf2\xa6&|\xe5~\xf9K\x91\xb9U$>\xa6kdIY\xc0\n/Y\xb1lJ\xd9\x8cj\xa3\xe5\xd3*\xd4N\xc6\x02\xb9x8\x8b}\xbc\xa3\xbb\xb8\xeb\"\xe70[i\x87pi\x7f\x88\x1d\x93 @\xa6j\xea\xb1o[\xc3\x05u\xdf\xde\x1e\x88v4\x97\x14\xad\xcf\x1f\xc3p\xd8\x1dK\v\x1f\x8c\x95\xfd', 0x101) close_range$auto(0x2, 0x8, 0x0) openat$auto_u32_array_fops_file(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/netdevsim/netdevsim0/ports/1/udp_ports_table1\x00', 0x40, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) io_uring_setup$auto(0x6, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x9, 0xffb, 0x8000000008011, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) mmap$auto(0x3, 0x7fffffffffffffff, 0x9, 0x12, 0x9, 0x22a) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x9, 0x3, 0xb, 0x998, 0x1ffde, 0x3, 0x6, 0x2, 0x9, 0x5, 0xffffffffffffffff, 0x7, 0xb2, 0x800000000000009, 0x2, 0x3, 0x5, 0x7}, 0x1fe, 0x3) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) r1 = socket(0x10, 0x2, 0x0) sendmsg$auto_HANDSHAKE_CMD_ACCEPT(r1, 0x0, 0x4800) sendmsg$auto_NL80211_CMD_GET_REG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) setsockopt$auto(0xffffffffffffffff, 0x11, 0x67, 0x0, 0x8) pwrite64$auto(0xc8, &(0x7f0000000080)='\vX\xb5n\x91p\xe6\x15\x00p\x01\x99\x88c\x14\r>\x14\x1a\xd3\xd3\x1d\xf8?\xdb\xdb\xc1\xf5\xe3o\x8e\xf1`\x9f\x1e\xf9\xa4\xf8\x15\x02l@\x18*\xc0\xc1\xf2\x14^\x0fo\x84\xfc\xe5}\xea\x1b\x95\xafQ;_L\"\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2\x10\x00\x00\x00\x00\x00/TX:\x8a\xddf\xa9H0\x06\xe7\xd2\xe2\xf6^\xfdo\x00\x9a>T\xd5\x1e\xe3\xeb\x89q\a\xd6h\xc9\xbc\x8f\x1dBk\x95\x174\xdc\x03\x05> -\xb6\x9d[\xe42(\xe4\n\x98u\xc9\xa1\xc4Zb\x04\xc2\xf1 \x8a\xbe]\xde\xfd8u\xb4\xde\xb3\xa1T/\xdfx\x14Y\xfe\x1e\x1f\x91\x19\xb7\xfc\xcd\x7fl\xb3\xa8#\xa0\xb9P\x8d\x04C\x87\xebR\x93\x12\x18H&N\x8b\'i)\xab@\xaf\xcb\xda\x00\x067\xce\xd6V4\xc2\xeeX\xb4\xe9\f\xee\xe8\xd8\x91\x1b\xcd\x00j\x14H\xcc-\x14\xde\xaaN\x87\x8d\x9b\xa05\xacHX\xc1\xce\x91\xee\xad\r\xbe\xb2&f\xa3\xe2\x8bp\xba\x8a\"\xf1\xfc\xa13\xfe\xe0JG\xe1v\x82s}v~`X%pJ\xbf\xc3`\xa9\x8f\"l\xc7XX\xa4\xb6\x0e\xbe\xa0wy\xfe\x03n+k\xf149*(\x15\xaa\xc2\x8aB\xf1\xbb$M\xfe%\xc7\x84\xf0\xa4}bd\xac\xa8T\xda\xffm\x86\xca\x80\xde3\xa7\xba\xc7Y]\xd7\xa2\xec)\xd6\xad\xbcI\x10\xa3#\xd4/J\xa8\x14\x1b<\x04\xbd\x89\xefQf\xc0Q\x92\x92\xa7\x99\xcf\xaekR\xf5\xb7\x14r[\x9fx\xaf+\xb3@\xf4\x83\xbf\xc7e\xe7\xc2\xd6\x10\x0fk\xee)\x92\bO\xa1\x1a\x9e\xef:5\x1e\x1c\"9\xd8\xdf\xa9C\xe2SHG6\xf2\xd5.\x12]\x17J\x8b\xc52\xe9\x9e\xbc\xdc\xae\xef\xed\xf9\xa6\x9e-\x92pZ\x12j/\x1dD{\xac\x17\\O\xee\x11\x10$\x12\xfc \xb0\xb7cA;\xa1,\x040\xa7\xd9\xb2\x19@1\x92\x10\xc4\xc0\x1f\x1d\xe1\xf6\x80lW\v,\xa2\x134no\xa0\x00l\xd8\xe4\xd3\x16\xd3%\x8b\xf5\x1e\x12{\xe6\xdb\xde\a\xdedH\x90\xf7\x19\xff\xcb\xacC\xeadOf\xb8\x15\xc39\xefLt\t\x11\xa1\x0e\x85\xac\xcc+\xc0\xb4.\xaa3>\xc0\x96\x84\xd5\x02\xc1\x94=\xb0\xfe\xda\x1d\xe9\xa7\xe1\xcf\x80|k\xdd\x95\xc9\xb0y\xb4\xbd\xc2W\x9c\xa4\x80\x13\xbc\x7fb=y\xdb]U\xd1HC\xe1\xa7\x94q\xb0C\xb8\x86\xd0\x9d\xe0\x8aD\x91x\'\xd6\x17\xd1\x9d\x16\xa7oZ\x8a\xce:\x9e@\xca\x17\x05f+\xee\xd8\xe6D\x9e\xb18Aw', 0xe, 0x3) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/mdstat\x00', 0x20200, 0x0) 4.216414132s ago: executing program 1 (id=4681): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xfffffffffffefffd, 0x17) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f000000fc00), 0x3, 0x0) ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x1) madvise$auto(0x0, 0x20499d, 0x9) madvise$auto(0x0, 0xffffffffffff0001, 0x15) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) ioctl$auto_DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000080)={0x0, r1, r0, 0x401}) ioctl$auto_IOCTL_VMCI_QUEUEPAIR_SETVA(r2, 0x7a4, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) futex_waitv$auto(&(0x7f0000000000)={0x8, 0x5d94, 0x4, 0x4}, 0x77, 0x0, 0x0, 0x62bd) mprotect$auto(0x1ffff000, 0x8000000000000001, 0x4) io_uring_setup$auto(0x40005, &(0x7f0000000000)={0x6, 0x1, 0x400, 0x7, 0x1005, 0x6, 0x7, [0x4, 0x2e9, 0x8], {0x0, 0x1, 0x8, 0x7, 0x5, 0x100005, 0x1, 0xfffffffc, 0x7}, {0x4, 0xfff, 0xffff7fff, 0x2, 0x8, 0x200, 0x3, 0x0, 0x3}}) madvise$auto(0x108000, 0x800034, 0x9) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) 4.210524386s ago: executing program 8 (id=4682): socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_smc_gen_netlink(&(0x7f0000000040), 0xffffffffffffffff) (async) r1 = syz_genetlink_get_family_id$auto_smc_gen_netlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_SMC_NETLINK_DISABLE_SEID(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="013b"], 0x14}, 0x1, 0x0, 0x0, 0x880}, 0x810) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), r0) (async) r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), r0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_smc_gen_netlink(&(0x7f00000002c0), r0) sendmsg$auto_SMC_NETLINK_DISABLE_SEID(r3, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x50000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0xbc, r4, 0x100, 0x70bd2a, 0x25dfdbfd, {}, "425f6e208f9456056baca50f0e4ed0b32cdea276fdf20d7008e99aa9d9dbf516cb716cca46b9ea3f2d7887354d650f5de0fdff07aff1a774d3256ce05a77af6e8c78008567c43f6f6eb95b5f8710350ec05fee86d45511a4307a4549d525038275dae9c555ef23767794801821b70c97ed9615d0631fc43d39721a28932cc867607178d3e92d0382f16be07ac40331c8898f3b2050bc330cbcb1e855503830862519cd93f1"}, 0xbc}, 0x1, 0x0, 0x0, 0x4080020}, 0x40) (async) sendmsg$auto_SMC_NETLINK_DISABLE_SEID(r3, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x50000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0xbc, r4, 0x100, 0x70bd2a, 0x25dfdbfd, {}, "425f6e208f9456056baca50f0e4ed0b32cdea276fdf20d7008e99aa9d9dbf516cb716cca46b9ea3f2d7887354d650f5de0fdff07aff1a774d3256ce05a77af6e8c78008567c43f6f6eb95b5f8710350ec05fee86d45511a4307a4549d525038275dae9c555ef23767794801821b70c97ed9615d0631fc43d39721a28932cc867607178d3e92d0382f16be07ac40331c8898f3b2050bc330cbcb1e855503830862519cd93f1"}, 0xbc}, 0x1, 0x0, 0x0, 0x4080020}, 0x40) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/fs/o2cb/logmask/NOTICE\x00', 0x0, 0x0) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/fs/o2cb/logmask/NOTICE\x00', 0x0, 0x0) socket(0x2b, 0x1, 0x1) mmap$auto(0x0, 0x20009, 0x6, 0xeb1, 0x7f, 0x8000) io_uring_setup$auto(0x6, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/card1\x00', 0x0, 0x0) ioctl$auto(r5, 0x64c6, 0x1e2) close_range$auto(0x2, 0x8, 0x0) close_range$auto(0x2, 0x8000, 0x0) sendmsg$auto_NL80211_CMD_SET_BEACON(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xb002080}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r2, 0x100, 0x70bd27, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x40004}, 0x4000840) 3.979728284s ago: executing program 8 (id=4683): connect$auto(0xffffffffffffffff, &(0x7f0000000000), 0x55) mprotect$auto(0x1ffff000, 0x8000000000000001, 0x4) close_range$auto(0x2, 0x8, 0x0) mknod$auto(&(0x7f0000000000)='\x00\x00\x00\x00\x00\x00\x00', 0x1001, 0x4) open(&(0x7f0000000000)='./file0\x00', 0x8a240, 0x15e) mmap$auto(0x0, 0x40008, 0x1000000004, 0x9b72, 0x2, 0x8000) open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x100) write$auto(0x3, 0x0, 0xfffffdef) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x2, 0x8000) mmap$auto(0x0, 0x401, 0xdf, 0x9b72, 0x2, 0x8000) read$auto(0x3, 0x0, 0xfffffdef) (fail_nth: 3) 3.881150623s ago: executing program 9 (id=4684): r0 = open(0x0, 0xc162, 0x0) close_range$auto(0x2, 0x8, 0x0) ioctl$auto_evdev_fops_evdev(0xffffffffffffffff, 0x40044590, 0x0) io_setup$auto(0x7ffe, &(0x7f0000000000)) socket(0xa, 0x3, 0x0) io_setup$auto(0x54d5, &(0x7f0000000000)) chmod$auto(&(0x7f00000000c0)='./file0\x00', 0xf4ba) write$auto(r0, &(0x7f0000000100)='%\t\x00*@,,,\xc6_X~\x0e\x00\xfd\xb6\x93\x8b\x87\x03 5\x91\xe5C\x13\x0f\xcc)j\xa6H\t\v>q;\xf2\xa6&|\xe5~\xf9K\x91\xb9U$>\xa6kdIY\xc0\n/Y\xb1lJ\xd9\x8cj\xa3\xe5\xd3*\xd4N\xc6\x02\xb9x8\x8b}\xbc\xa3\xbb\xb8\xeb\"\xe70[i\x87pi\x7f\x88\x1d\x93 @\xa6j\xea\xb1o[\xc3\x05u\xdf\xde\x1e\x88v4\x97\x14\xad\xcf\x1f\xc3p\xd8\x1dK\v\x1f\x8c\x95\xfd', 0x101) close_range$auto(0x2, 0x8, 0x0) openat$auto_u32_array_fops_file(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/netdevsim/netdevsim0/ports/1/udp_ports_table1\x00', 0x40, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) io_uring_setup$auto(0x6, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x9, 0xffb, 0x8000000008011, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) mmap$auto(0x3, 0x7fffffffffffffff, 0x9, 0x12, 0x9, 0x22a) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x9, 0x3, 0xb, 0x998, 0x1ffde, 0x3, 0x6, 0x2, 0x9, 0x5, 0xffffffffffffffff, 0x7, 0xb2, 0x800000000000009, 0x2, 0x3, 0x5, 0x7}, 0x1fe, 0x3) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) r1 = socket(0x10, 0x2, 0x0) sendmsg$auto_HANDSHAKE_CMD_ACCEPT(r1, 0x0, 0x4800) sendmsg$auto_NL80211_CMD_GET_REG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) setsockopt$auto(0xffffffffffffffff, 0x11, 0x67, 0x0, 0x8) pwrite64$auto(0xc8, &(0x7f0000000080)='\vX\xb5n\x91p\xe6\x15\x00p\x01\x99\x88c\x14\r>\x14\x1a\xd3\xd3\x1d\xf8?\xdb\xdb\xc1\xf5\xe3o\x8e\xf1`\x9f\x1e\xf9\xa4\xf8\x15\x02l@\x18*\xc0\xc1\xf2\x14^\x0fo\x84\xfc\xe5}\xea\x1b\x95\xafQ;_L\"\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2\x10\x00\x00\x00\x00\x00/TX:\x8a\xddf\xa9H0\x06\xe7\xd2\xe2\xf6^\xfdo\x00\x9a>T\xd5\x1e\xe3\xeb\x89q\a\xd6h\xc9\xbc\x8f\x1dBk\x95\x174\xdc\x03\x05> -\xb6\x9d[\xe42(\xe4\n\x98u\xc9\xa1\xc4Zb\x04\xc2\xf1 \x8a\xbe]\xde\xfd8u\xb4\xde\xb3\xa1T/\xdfx\x14Y\xfe\x1e\x1f\x91\x19\xb7\xfc\xcd\x7fl\xb3\xa8#\xa0\xb9P\x8d\x04C\x87\xebR\x93\x12\x18H&N\x8b\'i)\xab@\xaf\xcb\xda\x00\x067\xce\xd6V4\xc2\xeeX\xb4\xe9\f\xee\xe8\xd8\x91\x1b\xcd\x00j\x14H\xcc-\x14\xde\xaaN\x87\x8d\x9b\xa05\xacHX\xc1\xce\x91\xee\xad\r\xbe\xb2&f\xa3\xe2\x8bp\xba\x8a\"\xf1\xfc\xa13\xfe\xe0JG\xe1v\x82s}v~`X%pJ\xbf\xc3`\xa9\x8f\"l\xc7XX\xa4\xb6\x0e\xbe\xa0wy\xfe\x03n+k\xf149*(\x15\xaa\xc2\x8aB\xf1\xbb$M\xfe%\xc7\x84\xf0\xa4}bd\xac\xa8T\xda\xffm\x86\xca\x80\xde3\xa7\xba\xc7Y]\xd7\xa2\xec)\xd6\xad\xbcI\x10\xa3#\xd4/J\xa8\x14\x1b<\x04\xbd\x89\xefQf\xc0Q\x92\x92\xa7\x99\xcf\xaekR\xf5\xb7\x14r[\x9fx\xaf+\xb3@\xf4\x83\xbf\xc7e\xe7\xc2\xd6\x10\x0fk\xee)\x92\bO\xa1\x1a\x9e\xef:5\x1e\x1c\"9\xd8\xdf\xa9C\xe2SHG6\xf2\xd5.\x12]\x17J\x8b\xc52\xe9\x9e\xbc\xdc\xae\xef\xed\xf9\xa6\x9e-\x92pZ\x12j/\x1dD{\xac\x17\\O\xee\x11\x10$\x12\xfc \xb0\xb7cA;\xa1,\x040\xa7\xd9\xb2\x19@1\x92\x10\xc4\xc0\x1f\x1d\xe1\xf6\x80lW\v,\xa2\x134no\xa0\x00l\xd8\xe4\xd3\x16\xd3%\x8b\xf5\x1e\x12{\xe6\xdb\xde\a\xdedH\x90\xf7\x19\xff\xcb\xacC\xeadOf\xb8\x15\xc39\xefLt\t\x11\xa1\x0e\x85\xac\xcc+\xc0\xb4.\xaa3>\xc0\x96\x84\xd5\x02\xc1\x94=\xb0\xfe\xda\x1d\xe9\xa7\xe1\xcf\x80|k\xdd\x95\xc9\xb0y\xb4\xbd\xc2W\x9c\xa4\x80\x13\xbc\x7fb=y\xdb]U\xd1HC\xe1\xa7\x94q\xb0C\xb8\x86\xd0\x9d\xe0\x8aD\x91x\'\xd6\x17\xd1\x9d\x16\xa7oZ\x8a\xce:\x9e@\xca\x17\x05f+\xee\xd8\xe6D\x9e\xb18Aw', 0xe, 0x3) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/mdstat\x00', 0x20200, 0x0) 3.035703725s ago: executing program 8 (id=4685): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xfffffffffffefffd, 0x17) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f000000fc00), 0x3, 0x0) ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x1) madvise$auto(0x0, 0x20499d, 0x9) madvise$auto(0x0, 0xffffffffffff0001, 0x15) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) ioctl$auto_DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000080)={0x0, r1, r0, 0x401}) ioctl$auto_IOCTL_VMCI_QUEUEPAIR_SETVA(r2, 0x7a4, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) futex_waitv$auto(&(0x7f0000000000)={0x8, 0x5d94, 0x4, 0x4}, 0x77, 0x0, 0x0, 0x62bd) mprotect$auto(0x1ffff000, 0x8000000000000001, 0x4) madvise$auto(0x108000, 0x800034, 0x9) bpf$auto(0xb, 0x0, 0x3) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) 2.808859208s ago: executing program 9 (id=4686): mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) r0 = socket$nl_generic(0x10, 0x3, 0x10) pipe2$auto(&(0x7f0000000000)=r0, 0x1) (async) setsockopt$auto(r0, 0x104000000000010e, 0xc, 0x0, 0x6) (async) mmap$auto(0x0, 0x2020009, 0x3, 0x10, 0xfffffffffffffffa, 0x8000) (async) mbind$auto(0x0, 0x800605, 0x8003, &(0x7f0000000100)=0xfffe, 0x3, 0x3) socket(0x18, 0x5, 0x2) (async) unshare$auto(0xfff) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) getsockopt$auto(0x3, 0x200000000001, 0x1c, 0x0, 0x0) (async) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), r0) mbind$auto(0x0, 0x800605, 0x8003, &(0x7f0000000100)=0xffff, 0x3, 0x3) 2.591590626s ago: executing program 9 (id=4687): semctl$auto(0x1ff, 0x2, 0x3c52, 0x1) mmap$auto(0x0, 0x400005, 0xfffffffffffffffe, 0x9b72, 0x2, 0x8000) sendmsg$auto_WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x488c0}, 0x0) r0 = socket(0x2a, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000080), 0x6b) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000140)) connect$auto(r0, &(0x7f0000000040)=@can, 0x8) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) fcntl$auto(0xffffffffffffffff, 0x401, 0x5) write$auto(0x3, 0x0, 0xfffffdef) unshare$auto(0x40000080) socket(0xa, 0x3, 0x3a) epoll_wait$auto(r0, &(0x7f0000000000)={0x200007, 0x800000000000007}, 0x7fe, 0x6) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) setsockopt$auto(0x400000000000003, 0x29, 0xca, 0x0, 0x567) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) sysfs$auto(0x2, 0x10000000000002d, 0x0) syz_genetlink_get_family_id$auto_ovs_datapath(0x0, r0) mbind$auto(0x0, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) gettid() connect$auto(0xffffffffffffffff, 0x0, 0x55) mmap$auto(0x0, 0x5, 0x3, 0x16, 0x3, 0x8000) sendfile$auto(0x6, r0, 0x0, 0x8000) unshare$auto(0x40000080) writev$auto(0x1, &(0x7f0000000100)={0x0, 0x400000000000fdef}, 0x1) madvise$auto(0x0, 0x20200, 0x15) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r1 = open(&(0x7f0000000200)='./cgroup\x00', 0x400, 0x23) fchdir$auto(r1) 2.369052385s ago: executing program 6 (id=4688): mmap$auto(0x0, 0x676, 0x6, 0x9b72, 0x2, 0x8000) ioctl$auto_SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, 0x0) openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000005280), 0x40400, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_tcp_metrics(&(0x7f0000000ac0), 0xffffffffffffffff) sendmsg$auto_TCP_METRICS_CMD_GET(r0, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="9bff29bd7000fbdbdf25e6ffffff9d8cb167e64732c226123bef767235e3985ec8929cbe7ebc2b236c6e5649c058440ef15c41abb9e7aad47252b05d75afa6ec8c2506f726399dc23637e474700262382705dc5793d112fd98ace08271b0d31d0f7b81d9eb8fe824a515b12ab62643abe4dfd7ac6c80ae04ef008309114695c094fcbf20320bb94bae407cd179727b8d199053b416dbe9dbd5c4ffec488743cf1f79e12487665cf80da48b89193a1e477af450"], 0x14}}, 0x0) io_uring_setup$auto(0x6, 0x0) read$auto(0x3, 0x0, 0x80) 1.702174526s ago: executing program 8 (id=4689): mmap$auto(0x0, 0x3, 0xdf, 0xeb1, 0x401, 0x8000) mkdir$auto(&(0x7f00000001c0)='}[,&*}\x00', 0xc001) unshare$auto(0x40000080) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_OVS_DP_CMD_NEW(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x40000081) fcntl$auto(r0, 0x0, 0x9) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x5, 0x0) mq_open$auto(&(0x7f0000000200)='#)-\\&[}\x00', 0xde8, 0xb, &(0x7f0000000240)={0x9, 0x4, 0x2, 0x5}) mq_open$auto(&(0x7f0000000280)='#)-\\&[}\x00', 0x5, 0x10, 0x0) mmap$auto(0x0, 0x8001, 0x4000000000df, 0x610, 0x6, 0x300000000000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) r1 = open(&(0x7f00000000c0)='./cgroup\x00', 0x0, 0xb5d1af1605322df2) open_by_handle_at$auto(r1, &(0x7f0000000040)={0x5, 0x2, "0200000000"}, 0x2) r2 = socket(0x10, 0x2, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x0, 0x1, 0x9, 0x7, 0x3b, 0x4909b6fb, 0x1ffde, 0x7, 0x6, 0x2, 0x9, 0x3, 0x6, 0xcb13, 0xb4, 0x9, 0x2, 0x10000, 0x80, 0x7, 0x40000, 0x7, 0x2000, 0x4200, 0x0, 0x84, [0x0, 0x0, 0x0, 0x50100000000004, 0x0, 0x0, 0x100, 0xa, 0x70624ce7, 0x0, 0x6, 0xb, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0xfffffffffffffffd, 0x7, 0x6, 0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0, 0x0, 0x400000000005b8, 0xc, 0x0, 0x804, 0x0, 0x7, 0xffffffffffffffff, 0x5, 0x1, 0xfffffffffffffffc, 0x3, 0xa38, 0x4, 0x3fffffffffffe, 0x1, 0x2, 0x3fffffffff, 0x0, 0x2, 0xffff]}, 0x202, 0x11) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="10002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) sendmmsg$auto(r2, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f00000001c0), 0x7, 0xa505}, 0x800}, 0x7, 0x4008) io_uring_setup$auto(0x6, 0x0) ioperm$auto(0x800007ff, 0x5, 0xd) mknod$auto(&(0x7f0000000040)='\xfd\x90\x8f2\x14\x92\x00\xbf\xdf\xcf\x9a\xae}\xd9\xf95\xc5gV\x82\f\xe5h\xfe\x83\xe4\xbe\x8c\x1f\xa5\xf1_T\xde\xf7\xd4\x83D\x9eXS\xd6\x90T\xc1v\xad#\xc4q\x8b\xed2\xadW:0\xef\x9c.=\xba\x0fy\x8f\xcd\xd6\xde\xa9i\xec\xe8\xca\x9f\xf3\x82b\xa2y\xa87J\xfc \xc5\xd8\x80\xba\xaaV\x8f{\x1f\x1b\xb0\n\x97\\\xa7\xe3\xdf\xc29-*;#r\xc8\xd1\x14RcF\x87\xe4\x1c\x1fGL\xa5\x19\x90\xd6\x8d*\xe6\b(\x1a\xea\x95\xdc\xa6)5\xae&yAl\x1e\xe3j Lp\x91\r\xed%\xafZ\xf8w\xf2}\xcdGS\xce\xb9\xdck\x86\x00.6\xe6{\xc1\x00\x1bW5\x81\xda!\xcb.O\xa9\xf3\xa7\x88+\xb9\xf3\x9a7\xa4\xe6)<\xa79\xa4\x87\\\xb4\xbf\v\x03\x87\xac\x87r\x02\x05\xdb\xe4\xde,V\xb6G\xba.WR\xe2<~\xdd\xb2\xe53hj_;\xa5qm\x92\xc7P\xc9.\x82w8\x1f\xfcX\xe4\x14\xc72cC\xd3\x00'/263, 0x1, 0x4) lstat$auto(&(0x7f0000000500)='\xfd\x90\x8f2\x14\x92\x00\xbf\xdf\xcf\x9a\xae}\xd9\xf95\xc5gV\x82\f\xe5h\xfe\x83\xe4\xbe\x8c\x1f\xa5\xf1_T\xde\xf7\xd4\x83D\x9eXS\xd6\x90T\xc1v\xad#\xc4q\x8b\xed2\xadW:0\xef\x9c.=\xba\x0fy\x8f\xcd\xd6\xde\xa9i\xec\xe8\xca\x9f\xf3\x82b\xa2y\xa87J\xfc \xc5\xd8\x80\xba\xaaV\x8f{\x1f\x1b\xb0\n\x97\\\xa7\xe3\xdf\xc29-*;#r\xc8\xd1\x14RcF\x87\xe4\x1c\x1fGL\xa5\x19\x90\xd6\x8d*\xe6\b(\x1a\xea\x95\xdc\xa6)5\xae&yAl\x1e\xe3j Lp\x91\r\xed%\xafZ\xf8w\xf2}\xcdGS\xce\xb9\xdck\x86\x00.6\xe6{\xc1\x00\x1bW5\x81\xda!\xcb.O\xa9\xf3\xa7\x88+\xb9\xf3\x9a7\xa4\xe6)<\xa79\xa4\x87\\\xb4\xbf\v\x03\x87\xac\x87r\x02\x05\xdb\xe4\xde,V\xb6G\xba.WR\xe2<~\xdd\xb2\xe53hj_;\xa5qm\x92\xc7P\xc9.\x82w8\x1f\xfcX\xe4\x14\xc72cC\xd3\x00', 0x0) mmap$auto(0x3, 0x43, 0xdf, 0x17, 0x7, 0x40000000028000) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_GTP_CMD_NEWPDP(r3, &(0x7f0000003080)={0x0, 0x0, &(0x7f0000003040)={&(0x7f0000000380)=ANY=[@ANYRES64=r0, @ANYRES16, @ANYBLOB="9900000000000000020800001e000000000001000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4000810}, 0x80) 1.311732487s ago: executing program 6 (id=4690): r0 = open(&(0x7f00009e1000)='./file0\x00', 0xc162, 0x0) close_range$auto(0x2, 0x8, 0x0) ioctl$auto_evdev_fops_evdev(0xffffffffffffffff, 0x40044590, 0x0) io_setup$auto(0x7ffe, &(0x7f0000000000)) socket(0xa, 0x3, 0x0) io_setup$auto(0x54d5, 0x0) chmod$auto(&(0x7f00000000c0)='./file0\x00', 0xf4ba) write$auto(r0, &(0x7f0000000100)='%\t\x00*@,,,\xc6_X~\x0e\x00\xfd\xb6\x93\x8b\x87\x03 5\x91\xe5C\x13\x0f\xcc)j\xa6H\t\v>q;\xf2\xa6&|\xe5~\xf9K\x91\xb9U$>\xa6kdIY\xc0\n/Y\xb1lJ\xd9\x8cj\xa3\xe5\xd3*\xd4N\xc6\x02\xb9x8\x8b}\xbc\xa3\xbb\xb8\xeb\"\xe70[i\x87pi\x7f\x88\x1d\x93 @\xa6j\xea\xb1o[\xc3\x05u\xdf\xde\x1e\x88v4\x97\x14\xad\xcf\x1f\xc3p\xd8\x1dK\v\x1f\x8c\x95\xfd', 0x101) close_range$auto(0x2, 0x8, 0x0) openat$auto_u32_array_fops_file(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/netdevsim/netdevsim0/ports/1/udp_ports_table1\x00', 0x40, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) io_uring_setup$auto(0x6, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x9, 0xffb, 0x8000000008011, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) mmap$auto(0x3, 0x7fffffffffffffff, 0x9, 0x12, 0x9, 0x22a) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x9, 0x3, 0xb, 0x998, 0x1ffde, 0x3, 0x6, 0x2, 0x9, 0x5, 0xffffffffffffffff, 0x7, 0xb2, 0x800000000000009, 0x2, 0x3, 0x5, 0x7}, 0x1fe, 0x3) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) r1 = socket(0x10, 0x2, 0x0) sendmsg$auto_HANDSHAKE_CMD_ACCEPT(r1, 0x0, 0x4800) sendmsg$auto_NL80211_CMD_GET_REG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) setsockopt$auto(0xffffffffffffffff, 0x11, 0x67, 0x0, 0x8) pwrite64$auto(0xc8, &(0x7f0000000080)='\vX\xb5n\x91p\xe6\x15\x00p\x01\x99\x88c\x14\r>\x14\x1a\xd3\xd3\x1d\xf8?\xdb\xdb\xc1\xf5\xe3o\x8e\xf1`\x9f\x1e\xf9\xa4\xf8\x15\x02l@\x18*\xc0\xc1\xf2\x14^\x0fo\x84\xfc\xe5}\xea\x1b\x95\xafQ;_L\"\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2\x10\x00\x00\x00\x00\x00/TX:\x8a\xddf\xa9H0\x06\xe7\xd2\xe2\xf6^\xfdo\x00\x9a>T\xd5\x1e\xe3\xeb\x89q\a\xd6h\xc9\xbc\x8f\x1dBk\x95\x174\xdc\x03\x05> -\xb6\x9d[\xe42(\xe4\n\x98u\xc9\xa1\xc4Zb\x04\xc2\xf1 \x8a\xbe]\xde\xfd8u\xb4\xde\xb3\xa1T/\xdfx\x14Y\xfe\x1e\x1f\x91\x19\xb7\xfc\xcd\x7fl\xb3\xa8#\xa0\xb9P\x8d\x04C\x87\xebR\x93\x12\x18H&N\x8b\'i)\xab@\xaf\xcb\xda\x00\x067\xce\xd6V4\xc2\xeeX\xb4\xe9\f\xee\xe8\xd8\x91\x1b\xcd\x00j\x14H\xcc-\x14\xde\xaaN\x87\x8d\x9b\xa05\xacHX\xc1\xce\x91\xee\xad\r\xbe\xb2&f\xa3\xe2\x8bp\xba\x8a\"\xf1\xfc\xa13\xfe\xe0JG\xe1v\x82s}v~`X%pJ\xbf\xc3`\xa9\x8f\"l\xc7XX\xa4\xb6\x0e\xbe\xa0wy\xfe\x03n+k\xf149*(\x15\xaa\xc2\x8aB\xf1\xbb$M\xfe%\xc7\x84\xf0\xa4}bd\xac\xa8T\xda\xffm\x86\xca\x80\xde3\xa7\xba\xc7Y]\xd7\xa2\xec)\xd6\xad\xbcI\x10\xa3#\xd4/J\xa8\x14\x1b<\x04\xbd\x89\xefQf\xc0Q\x92\x92\xa7\x99\xcf\xaekR\xf5\xb7\x14r[\x9fx\xaf+\xb3@\xf4\x83\xbf\xc7e\xe7\xc2\xd6\x10\x0fk\xee)\x92\bO\xa1\x1a\x9e\xef:5\x1e\x1c\"9\xd8\xdf\xa9C\xe2SHG6\xf2\xd5.\x12]\x17J\x8b\xc52\xe9\x9e\xbc\xdc\xae\xef\xed\xf9\xa6\x9e-\x92pZ\x12j/\x1dD{\xac\x17\\O\xee\x11\x10$\x12\xfc \xb0\xb7cA;\xa1,\x040\xa7\xd9\xb2\x19@1\x92\x10\xc4\xc0\x1f\x1d\xe1\xf6\x80lW\v,\xa2\x134no\xa0\x00l\xd8\xe4\xd3\x16\xd3%\x8b\xf5\x1e\x12{\xe6\xdb\xde\a\xdedH\x90\xf7\x19\xff\xcb\xacC\xeadOf\xb8\x15\xc39\xefLt\t\x11\xa1\x0e\x85\xac\xcc+\xc0\xb4.\xaa3>\xc0\x96\x84\xd5\x02\xc1\x94=\xb0\xfe\xda\x1d\xe9\xa7\xe1\xcf\x80|k\xdd\x95\xc9\xb0y\xb4\xbd\xc2W\x9c\xa4\x80\x13\xbc\x7fb=y\xdb]U\xd1HC\xe1\xa7\x94q\xb0C\xb8\x86\xd0\x9d\xe0\x8aD\x91x\'\xd6\x17\xd1\x9d\x16\xa7oZ\x8a\xce:\x9e@\xca\x17\x05f+\xee\xd8\xe6D\x9e\xb18Aw', 0xe, 0x3) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/mdstat\x00', 0x20200, 0x0) 1.272947962s ago: executing program 9 (id=4691): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000040), r0) sendmsg$auto_NFSD_CMD_THREADS_SET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="000225bd7000fddb87df2502000000080003000700000008000100080000000800020012f2ffff080001000100008009000400532e2df60000009ef36c814661aaafca301d843f965599a93f74e15cc8f777003f4e46f9af6f561ddeb4229d9945cd34061ce802e4b8f3d593e0ba1f1bcdac13c244da7f511af87a815ff53465dabcfe2eef18b11ad2f2e48b224d8766aa70cf8320b093a99bae37b875fa44f284d3580e72dd70a78de760e7f0c2ff52b4a14b62559c3d9eb34f0a2b0dc94720477c42876640987a98d61c5941f24c5a38d7bcab0c0b1921bf096e99ffa4e4814585a4af3c1e7339d6a7a75402fca487911c3687f45bb009e69e82cf1a8b89264794a5f80ea6798e1863d379"], 0x40}, 0x1, 0x0, 0x0, 0x404c8c4}, 0x20004000) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) bpf$auto(0x5, &(0x7f0000000000)=@iter_create={0xf14, 0xf4240}, 0x7) socket(0x2, 0x1, 0x0) socket(0x23, 0x2, 0x0) ioctl$auto(0x1, 0x89a0, 0x8) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) socket(0xa, 0x3, 0x32) close_range$auto(0x2, 0xfffffffffffff000, 0x2) bpf$auto(0x8000000000000020, 0xffffffffffffffff, 0x0) socket(0xa, 0x2, 0x3a) mmap$auto(0x0, 0xa, 0xdb, 0x9b72, 0x5, 0x8000) clock_nanosleep$auto(0x2, 0x1000, 0x0, 0x0) connect$auto(0x3, &(0x7f0000000140), 0x55) linkat$auto(r2, &(0x7f0000000380)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000400)='./file0\x00', 0x6) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) 1.130751834s ago: executing program 8 (id=4692): semctl$auto(0x1ff, 0x2, 0x13, 0x1) setsockopt$auto(0x3, 0x114, 0x6, 0x0, 0xa0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x163340, 0x6a) socket(0x2, 0x80802, 0x0) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) connect$auto(0x3, &(0x7f0000000140)=@in={0x2, 0x4, @multicast2}, 0x55) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7fffffe) (fail_nth: 14) landlock_create_ruleset$auto(&(0x7f00000007c0)={0x1}, 0x8, 0x0) ioctl$auto_VHOST_SET_OWNER(0xffffffffffffffff, 0xaf01, 0x5) read$auto_v4l2_fops_v4l2_dev(0xffffffffffffffff, &(0x7f00000001c0)=""/191, 0x1f8) 571.693407ms ago: executing program 8 (id=4693): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xfffffffffffefffd, 0x17) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f000000fc00), 0x3, 0x0) ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x1) madvise$auto(0x0, 0x20499d, 0x9) madvise$auto(0x0, 0xffffffffffff0001, 0x15) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) ioctl$auto_DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000080)={0x0, r1, r0, 0x401}) ioctl$auto_IOCTL_VMCI_QUEUEPAIR_SETVA(r2, 0x7a4, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) futex_waitv$auto(&(0x7f0000000000)={0x8, 0x5d94, 0x4, 0x4}, 0x77, 0x0, 0x0, 0x62bd) mprotect$auto(0x1ffff000, 0x8000000000000001, 0x4) io_uring_setup$auto(0x40005, &(0x7f0000000000)={0x6, 0x1, 0x400, 0x7, 0x1005, 0x6, 0x7, [0x4, 0x2e9, 0x8], {0x0, 0x1, 0x8, 0x7, 0x5, 0x100005, 0x1, 0xfffffffc, 0x7}, {0x4, 0xfff, 0xffff7fff, 0x2, 0x8, 0x200, 0x3, 0x0, 0x3}}) bpf$auto(0xb, 0x0, 0x3) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) 205.696677ms ago: executing program 9 (id=4695): setsockopt$auto(0x3, 0x114, 0x6, 0x0, 0xa0) select$auto(0xd, 0x0, &(0x7f0000000100)={[0x20000000000d, 0x203, 0x0, 0xc, 0x5, 0x3, 0xff, 0x2000000000000002, 0x9, 0x8, 0x103, 0xa, 0x4, 0xaab, 0x5, 0x4006]}, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) listmount$auto(&(0x7f0000000040)={0x1c, 0x0, 0x2000000005, 0x800000876e, 0xffc}, 0x0, 0x2, 0x1) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x163242, 0x0) socket(0x2, 0x80802, 0x0) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socket(0x10, 0x2, 0x0) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="10002cbd7000fddbdf251c"], 0x14}, 0x1, 0x0, 0x0, 0x20008000}, 0x10004010) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1a0027"], 0x1ac}}, 0x40000) r0 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f000001f300), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYRES32=r0], 0x1ac}}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) connect$auto(0x3, &(0x7f0000000140)=@in={0x2, 0x4, @multicast2}, 0x55) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7fffffe) 0s ago: executing program 6 (id=4696): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x2, 0x4, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) mmap$auto(0x0, 0x9, 0x3ff57696, 0x9b72, 0x2, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000001c80)='/dev/fb0\x00', 0x20401, 0x0) fanotify_init$auto(0x80200, 0x2007) open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0) socket(0xa, 0x3, 0x87) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "ab06fdffff00fff500"}, 0x55) sendmmsg$auto(0x3, &(0x7f0000000000)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0x1}, 0x106, 0x0, 0x1, 0x697b}, 0xed7138c}, 0x9a6, 0x0) syncfs$auto(0x4) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x5, 0x20000000) r1 = openat$auto_safesetid_uid_file_fops_securityfs(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) poll$auto(&(0x7f00000001c0)={r1, 0x4, 0xff78}, 0x40, 0x3) write$auto_dfs_global_fops_debug(r2, 0x0, 0x0) write$auto(0x3, 0x0, 0xfffffdef) mmap$auto(0x0, 0x400005, 0xfffffffffffffffe, 0x9b72, 0x2, 0x8000) sendmsg$auto_WG_CMD_GET_DEVICE(0xffffffffffffffff, 0x0, 0x2000c041) r3 = openat$auto_ftrace_event_format_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000640)='/sys/kernel/tracing/events/vmalloc/alloc_vmap_area/format\x00', 0x40, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) open(&(0x7f0000000100)='.\x00', 0x0, 0x408) getdents$auto(0x0, 0x0, 0x700) socket(0x2, 0x1, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) mremap$auto(0x4000, 0xfee0, 0x3fd6, 0x3, 0x0) mmap$auto(0x2000, 0x9, 0x3ff57696, 0x9b72, 0x2, 0x8000000000008000) ioctl$auto(0x1, 0x8941, 0x8) read$auto(r3, &(0x7f0000000180)='G\xcfY\xb3\xee\t\xe8\x97\xf5\b.Cg.\x94i\n\xc9\xea\xa9\xf6\xf2K\xb9S\x9b\x1b\xb4\xea\xd6\xba\x90/\xbc\x8a\x06tF\xf1\xe6\xc7\x89\xc8\xf8\xd7P\xe6N\xda\xe1\x9e\xe7\xc2}\x12v\xac\x89\v\x93\xbd\x89n/\xb4A#\x93&D\x14;\x9c}\xc9\xce', 0x2) bind$auto(0x3, 0x0, 0x6b) kernel console output (not intermixed with test programs): ter parsing attributes in process `syz.5.3599'. [ 710.415155][T19426] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3610'. [ 711.300113][T19450] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3614'. [ 711.916725][T19456] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3617'. [ 712.483035][T19482] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3623'. [ 713.255551][T19461] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3616'. [ 714.034802][T19518] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3632'. [ 714.123587][T19506] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 714.133729][T19506] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 714.151609][T19506] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 714.169965][T19506] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 714.518433][T19543] netlink: 266 bytes leftover after parsing attributes in process `syz.5.3639'. [ 714.538057][T19543] IPv6: NLM_F_CREATE should be specified when creating new route [ 715.469180][ T5840] Bluetooth: hci2: command 0x040f tx timeout [ 716.085095][T19566] netlink: 36 bytes leftover after parsing attributes in process `syz.6.3645'. [ 716.197899][ T5840] Bluetooth: hci1: command 0x0c1a tx timeout [ 716.209591][ T5840] Bluetooth: hci0: command 0x0c1a tx timeout [ 716.215000][ T5832] Bluetooth: hci4: command 0x0c1a tx timeout getty: ttyS0: read error: Resource temporarily unavailable [ 716.629603][T19581] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3649'. [ 717.282143][T19618] 0}^: entered promiscuous mode [ 718.644355][ T12] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 718.771189][ T12] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 718.828528][T19642] kexec: Could not allocate control_code_buffer [ 718.908823][ T12] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 719.100747][ T12] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 719.510261][ T12] team0: left allmulticast mode [ 719.515297][ T12] team_slave_0: left allmulticast mode [ 719.567067][ T12] team_slave_1: left allmulticast mode [ 719.580857][ T5842] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 719.603437][ T5842] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 719.612243][T19675] EXT4-fs error: 3 callbacks suppressed [ 719.612249][ T5842] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 719.614603][ T12] team0: left promiscuous mode [ 719.631748][ T5842] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 719.641261][ T5842] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 719.648604][ T5842] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 719.659820][ T12] team_slave_0: left promiscuous mode [ 719.665654][ T12] team_slave_1: left promiscuous mode [ 719.703309][ T12] bridge0: port 3(team0) entered disabled state [ 719.744762][T19660] Process accounting resumed [ 719.761612][ T12] bridge_slave_1: left allmulticast mode [ 719.767316][ T12] bridge_slave_1: left promiscuous mode [ 719.781036][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 719.806050][ T12] bridge_slave_0: left allmulticast mode [ 719.811813][ T12] bridge_slave_0: left promiscuous mode [ 719.824923][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 719.844491][T19681] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3678'. [ 720.145752][ T12] erspan0 (unregistering): left allmulticast mode [ 720.461125][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 720.472724][ T12] bond0 (unregistering): Released all slaves [ 720.580278][ T12] ovs_: left promiscuous mode [ 720.682313][ T12] HfR: left promiscuous mode [ 721.515735][T19673] chnl_net:caif_netlink_parms(): no params data found [ 721.566712][ T12] hsr_slave_0: left promiscuous mode [ 721.577947][ T12] hsr_slave_1: left promiscuous mode [ 721.587295][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 721.595561][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 721.604062][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 721.611847][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 721.685431][ T12] veth1_macvtap: left promiscuous mode [ 721.709346][ T12] veth0_macvtap: left promiscuous mode [ 721.715064][ T12] veth1_vlan: left promiscuous mode [ 721.719300][ T5842] Bluetooth: hci1: command tx timeout [ 721.740731][ T12] veth0_vlan: left promiscuous mode [ 722.583475][ T12] team0 (unregistering): Port device team_slave_1 removed [ 722.643617][ T12] team0 (unregistering): Port device team_slave_0 removed [ 723.810467][T19584] Bluetooth: hci1: command tx timeout [ 723.973139][T19673] bridge0: port 1(bridge_slave_0) entered blocking state [ 724.010864][T19673] bridge0: port 1(bridge_slave_0) entered disabled state [ 724.026580][T19673] bridge_slave_0: entered allmulticast mode [ 724.033824][T19673] bridge_slave_0: entered promiscuous mode [ 724.043944][T19673] bridge0: port 2(bridge_slave_1) entered blocking state [ 724.051659][T19673] bridge0: port 2(bridge_slave_1) entered disabled state [ 724.058902][T19673] bridge_slave_1: entered allmulticast mode [ 724.066748][T19673] bridge_slave_1: entered promiscuous mode [ 724.353980][T19673] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 724.422580][T19673] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 724.565449][T19751] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3697'. [ 724.615757][T19673] team0: Port device team_slave_0 added [ 724.639014][T19673] team0: Port device team_slave_1 added [ 724.644617][T19774] EXT4-fs error: 9 callbacks suppressed [ 724.703202][T19673] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 724.715446][T19673] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 724.799530][T19673] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 724.833460][T19673] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 724.870002][T19673] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 724.936851][T19673] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 725.026717][T19673] hsr_slave_0: entered promiscuous mode [ 725.043546][T19673] hsr_slave_1: entered promiscuous mode [ 725.053974][T19673] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 725.073473][T19673] Cannot create hsr debugfs directory [ 725.697214][T19673] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 725.749738][T19673] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 725.800630][T19673] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 725.841807][T19673] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 725.869270][ T5842] Bluetooth: hci1: command tx timeout [ 726.054576][T19673] 8021q: adding VLAN 0 to HW filter on device bond0 [ 726.114695][T19673] 8021q: adding VLAN 0 to HW filter on device team0 [ 726.135547][T19803] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3708'. [ 726.173078][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 726.180244][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 726.206585][ T6618] bridge0: port 2(bridge_slave_1) entered blocking state [ 726.213748][ T6618] bridge0: port 2(bridge_slave_1) entered forwarding state [ 726.367140][T19673] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 726.841634][T19673] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 727.112395][T19816] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3710'. [ 727.202156][T19673] veth0_vlan: entered promiscuous mode [ 727.212792][T19673] veth1_vlan: entered promiscuous mode [ 727.236476][T19673] veth0_macvtap: entered promiscuous mode [ 727.245398][T19673] veth1_macvtap: entered promiscuous mode [ 727.276599][T19673] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 727.289400][T19673] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 727.310239][T19673] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 727.339135][T19673] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 727.368227][T19673] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 727.387554][T19673] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 727.411580][T19673] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 727.449136][T19673] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 727.480908][T19673] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 727.531094][T19673] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 727.579136][T19673] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 727.599590][T19673] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 727.619892][T19673] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 727.640790][T19673] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 727.657636][T19845] netlink: 7 bytes leftover after parsing attributes in process `syz.1.3721'. [ 727.666864][T19845] netlink: 7 bytes leftover after parsing attributes in process `syz.1.3721'. [ 727.699281][T19673] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 727.722444][T19673] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 can't run '/sbi[ 727.756947][T19673] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 727.789988][T19673] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 727.800147][T19673] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 727.808893][T19673] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 727.817731][T19673] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 727.826757][T19673] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 727.951233][ T5842] Bluetooth: hci1: command tx timeout [ 727.971987][ T6624] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 728.003229][ T6624] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 728.095635][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 728.103899][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 can't run '/sbi[ 729.024289][T19873] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3720'. can't run '/sbi[ 729.770725][T19909] EXT4-fs error: 17 callbacks suppressed [ 729.823472][T19914] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3732'. [ 730.226958][T19913] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3734'. [ 730.311144][T19928] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3735'. can't run '/sbi[ 731.752075][T19962] kernel read not supported for file /#)-\&[} (pid: 19962 comm: syz.7.3746) [ 731.770516][ T29] audit: type=1800 audit(4295360738.928:132): pid=19962 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.3746" name="#)-\&[}" dev="mqueue" ino=73452 res=0 errno=0 can't run '/sbi[ 731.815723][T19961] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3754'. [ 731.827412][T19962] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3746'. [ 731.880808][T19962] ipvlan0: entered allmulticast mode [ 731.886394][T19962] veth0_vlan: entered allmulticast mode [ 732.160634][T19982] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3750'. [ 732.531442][T19979] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3749'. can't run '/sbican't run '/sbi[ 733.908276][T20028] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3760'. [ 734.284709][T20032] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3762'. [ 734.827520][T20037] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3763'. [ 734.846648][T20047] EXT4-fs error: 5 callbacks suppressed can't run '/sbican't run '/sbi[ 735.997235][T20077] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3773'. [ 736.367230][T20081] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3774'. can't run '/sbi[ 737.177099][T20090] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3777'. can't run '/sbi[ 737.941261][T20119] kernel read not supported for file /#)-\&[} (pid: 20119 comm: syz.7.3783) [ 737.988065][ T29] audit: type=1800 audit(4295360745.138:133): pid=20119 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.3783" name="#)-\&[}" dev="mqueue" ino=73452 res=0 errno=0 [ 738.029859][T20119] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3783'. [ 738.802062][T20125] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3793'. can't run '/sbi[ 739.590592][T20149] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3789'. [ 739.907168][T20155] kernel read not supported for file /#)-\&[} (pid: 20155 comm: syz.7.3794) [ 739.958973][T20156] EXT4-fs error: 13 callbacks suppressed can't run '/sbi[ 740.007283][ T29] audit: type=1800 audit(4295360747.158:134): pid=20155 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.3794" name="#)-\&[}" dev="mqueue" ino=73452 res=0 errno=0 [ 740.626209][T20175] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3796'. [ 740.682700][T20167] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3798'. can't run '/sbi[ 741.388587][T20195] kernel read not supported for file /#)-\&[} (pid: 20195 comm: syz.6.3805) [ 741.443226][T20198] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3805'. [ 741.499215][ T29] audit: type=1800 audit(4295360748.648:135): pid=20195 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.3805" name="#)-\&[}" dev="mqueue" ino=58546 res=0 errno=0 [ 741.682514][T20207] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3806'. [ 741.747179][T20203] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3802'. can't run '/sbin/getty': Struct[ 742.856314][T20227] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3811'. [ 742.876975][T20230] netlink: 326 bytes leftover after parsing attributes in process `syz.7.3814'. [ 742.917101][T20229] netlink: 326 bytes leftover after parsing attributes in process `syz.7.3814'. can't run '/sbi[ 743.123369][T20226] netlink: Conntrack attr has 16 unknown bytes can't run '/sbin/getty': Struct[ 744.435621][T20271] netlink: 'syz.6.3826': attribute type 11 has an invalid length. can't run '/sbi[ 745.086140][T20295] EXT4-fs error: 5 callbacks suppressed [ 745.093137][T20294] netlink: 186 bytes leftover after parsing attributes in process `syz.1.3836'. can't run '/sbi[ 746.508278][T20312] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3849'. [ 747.082209][T20325] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3845'. [ 747.117148][T20331] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3848'. can't run '/sbin/getty': Structure needs cleani[ 747.473629][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.482064][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.623430][T20346] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3858'. [ 747.874758][T20355] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3852'. can't run '/sbi[ 748.262435][T20369] kernel read not supported for file /#)-\&[} (pid: 20369 comm: syz.6.3855) [ 748.319226][ T29] audit: type=1800 audit(4295360755.448:136): pid=20369 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.3855" name="#)-\&[}" dev="mqueue" ino=58546 res=0 errno=0 [ 748.362698][T20367] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3855'. [ 748.582215][T20376] kernel read not supported for file /#)-\&[} (pid: 20376 comm: syz.2.3857) [ 748.689258][ T29] audit: type=1800 audit(4295360755.818:137): pid=20376 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.3857" name="#)-\&[}" dev="mqueue" ino=55389 res=0 errno=0 [ 748.808169][T20376] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3857'. can't run '/sbin/getty': Struct[ 749.326275][T20380] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3861'. [ 749.870118][T20401] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3864'. [ 750.205114][T20411] EXT4-fs error: 5 callbacks suppressed can't run '/sbi[ 750.363799][T20417] kernel read not supported for file /#)-\&[} (pid: 20417 comm: syz.2.3868) [ 750.379352][ T29] audit: type=1800 audit(4295360757.538:138): pid=20417 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.3868" name="#)-\&[}" dev="mqueue" ino=55389 res=0 errno=0 [ 750.409508][T20417] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3868'. [ 750.691428][T20424] kernel read not supported for file /#)-\&[} (pid: 20424 comm: syz.7.3870) [ 750.731829][ T29] audit: type=1800 audit(4295360757.878:139): pid=20424 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.3870" name="#)-\&[}" dev="mqueue" ino=73452 res=0 errno=0 can't run '/sbi[ 752.079748][T20450] kernel read not supported for file /#)-\&[} (pid: 20450 comm: syz.6.3883) [ 752.088664][ T29] audit: type=1800 audit(4295360759.238:140): pid=20450 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.3883" name="#)-\&[}" dev="mqueue" ino=58546 res=0 errno=0 [ 752.091786][T20450] __nla_validate_parse: 3 callbacks suppressed [ 752.091803][T20450] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3883'. can't run '/sbi[ 752.377703][T20454] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3877'. [ 752.590696][T20449] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3875'. [ 752.937757][T20472] kernel read not supported for file /#)-\&[} (pid: 20472 comm: syz.1.3880) [ 752.962328][ T29] audit: type=1800 audit(4295360760.108:141): pid=20472 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.3880" name="#)-\&[}" dev="mqueue" ino=58942 res=0 errno=0 [ 753.156884][T20471] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3880'. can't run '/sbi[ 753.408899][T20467] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3881'. [ 753.461218][T20483] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3885'. [ 753.914647][T20485] netlink: 342 bytes leftover after parsing attributes in process `syz.7.3886'. [ 754.068577][T20499] kernel read not supported for file /#)-\&[} (pid: 20499 comm: syz.1.3889) [ 754.129005][ T29] audit: type=1800 audit(4295360761.278:142): pid=20499 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.3889" name="#)-\&[}" dev="mqueue" ino=58942 res=0 errno=0 [ 754.197521][T20495] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3889'. can't run '/sbi[ 754.381697][T20505] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3890'. can't run '/sbi[ 755.346897][T20529] EXT4-fs error: 5 callbacks suppressed [ 756.342254][T20543] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3903'. can't run '/sbin/getty': Struct[ 756.997755][T20577] kernel read not supported for file /#)-\&[} (pid: 20577 comm: syz.6.3913) [ 757.006932][ T29] audit: type=1800 audit(4295360764.158:143): pid=20577 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.3913" name="#)-\&[}" dev="mqueue" ino=58546 res=0 errno=0 can't run '/sbi[ 757.536678][T20588] vivid-009: ================= START STATUS ================= [ 757.610079][T20588] vivid-009: Test Pattern: 75% Colorbar [ 757.639339][T20588] vivid-009: Fill Percentage of Frame: 100 [ 757.645235][T20588] vivid-009: Horizontal Movement: No Movement [ 757.682750][T20588] vivid-009: Vertical Movement: No Movement [ 757.699933][T20588] vivid-009: OSD Text Mode: All [ 757.704869][T20588] vivid-009: Show Border: false [ 757.790262][T20585] __nla_validate_parse: 1 callbacks suppressed [ 757.790284][T20585] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3916'. [ 757.793823][T20588] vivid-009: Show Square: false [ 757.898727][T20588] vivid-009: Sensor Flipped Horizontally: false [ 757.917573][T20588] vivid-009: Sensor Flipped Vertically: false [ 757.937875][T20588] vivid-009: Insert SAV Code in Image: false [ 757.958203][T20588] vivid-009: Insert EAV Code in Image: false [ 757.986586][T20588] vivid-009: Insert Video Guard Band: false [ 758.019114][T20588] vivid-009: Reduced Framerate: false [ 758.039733][T20588] vivid-009: HDMI 009-0 Is Connected To: Test Pattern Generator [ 758.088980][T20588] vivid-009: S-Video 009-0 Is Connected To: Test Pattern Generator [ 758.097136][T20588] vivid-009: Enable Capture Cropping: true [ 758.129302][T20588] vivid-009: Enable Capture Composing: true [ 758.145663][T20588] vivid-009: Enable Capture Scaler: true [ 758.165937][T20588] vivid-009: Timestamp Source: End of Frame [ 758.195820][T20588] vivid-009: Colorspace: sRGB [ 758.254970][T20588] vivid-009: Transfer Function: Default [ 758.270515][T20588] vivid-009: Y'CbCr Encoding: Default [ 758.305228][T20588] vivid-009: HSV Encoding: Hue 0-179 [ 758.322179][T20602] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3919'. [ 758.339338][T20588] vivid-009: Quantization: Default [ 758.344525][T20588] vivid-009: Apply Alpha To Red Only: false [ 758.399831][T20588] vivid-009: Standard Aspect Ratio: 4x3 [ 758.428688][T20588] vivid-009: DV Timings Signal Mode: Current DV Timings inactive can't run '/sbi[ 758.465630][T20588] vivid-009: DV Timings: 640x480p59 inactive [ 758.482308][T20588] vivid-009: DV Timings Aspect Ratio: Source Width x Height [ 758.523748][T20588] vivid-009: Maximum EDID Blocks: 2 [ 758.546441][T20588] vivid-009: Limited RGB Range (16-235): false [ 758.573947][T20588] vivid-009: Rx RGB Quantization Range: Automatic [ 758.604635][T20588] vivid-009: Power Present: 0x00000001 [ 758.632367][T20588] tpg source WxH: 640x360 (Y'CbCr) [ 758.637531][T20588] tpg field: 1 [ 758.677088][T20588] tpg crop: 640x360@0x0 [ 758.702196][T20588] tpg compose: 640x360@0x0 [ 758.706666][T20588] tpg colorspace: 8 [ 758.746441][T20588] tpg transfer function: 0/0 [ 758.779145][T20588] tpg Y'CbCr encoding: 0/0 [ 758.783612][T20588] tpg quantization: 0/0 [ 758.829188][T20588] tpg RGB range: 0/2 [ 758.833727][T20588] vivid-009: ================== END STATUS ================== [ 759.406017][T20624] kernel read not supported for file /#)-\&[} (pid: 20624 comm: syz.1.3926) [ 759.440546][ T29] audit: type=1800 audit(4295360766.598:144): pid=20624 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.3926" name="#)-\&[}" dev="mqueue" ino=58942 res=0 errno=0 [ 759.446533][T20624] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3926'. can't run '/sbin/getty': Structure needs cleaning [ 760.252738][T20633] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3928'. can't run '/sbin/getty': Struct[ 760.502863][T20639] EXT4-fs error: 5 callbacks suppressed ure needs cleani[ 760.745417][T20646] kernel read not supported for file /#)-\&[} (pid: 20646 comm: syz.1.3931) [ 760.773788][ T29] audit: type=1800 audit(4295360767.918:145): pid=20646 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.3931" name="#)-\&[}" dev="mqueue" ino=58942 res=0 errno=0 [ 760.799681][T20646] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3931'. [ 760.928602][T20640] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3927'. [ 761.478857][ T29] audit: type=1800 audit(4295360768.628:146): pid=20659 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.3933" name="version" dev="configfs" ino=76914 res=0 errno=0 can't run '/sbican't run '/sbin/getty': Struct[ 761.490397][T20659] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 763.257897][T20676] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3940'. can't run '/sbi[ 763.661104][T20703] kernel read not supported for file /#)-\&[} (pid: 20703 comm: syz.7.3945) [ 763.699312][ T29] audit: type=1800 audit(4295360770.848:147): pid=20703 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.3945" name="#)-\&[}" dev="mqueue" ino=73452 res=0 errno=0 [ 763.705114][T20703] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3945'. can't run '/sbi[ 764.800352][T20714] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3950'. can't run '/sbi[ 765.688076][T20757] EXT4-fs error: 5 callbacks suppressed n/getty': Structure needs cleaning [ 766.558749][T20776] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3964'. can't run '/sbican't run '/sbin/getty': Struct[ 768.226663][T20832] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3977'. [ 768.597496][T20852] rtc_cmos 00:00: Alarms can be up to one day in the future can't run '/sbi[ 768.981759][T20863] openvswitch: netlink: IP tunnel dst address not specified [ 769.670459][T20878] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3988'. can't run '/sbi[ 770.773210][T20918] EXT4-fs error: 5 callbacks suppressed can't run '/sbican't run '/sbi[ 773.381170][T20959] netlink: 330 bytes leftover after parsing attributes in process `syz.7.4010'. [ 773.445346][T20959] : renamed from wg0 (while UP) can't run '/sbican't run '/sbi[ 775.141624][T20984] netlink: 28 bytes leftover after parsing attributes in process `syz.7.4019'. [ 775.500199][T21002] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4021'. can't run '/sbin/getty': Structure needs cleaning[ 775.861286][T21010] EXT4-fs error: 5 callbacks suppressed can't run '/sbi[ 777.093099][T21029] rtc_cmos 00:00: Alarms can be up to one day in the future [ 777.783727][T21035] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4030'. can't run '/sbi[ 778.130298][T21037] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4032'. [ 778.489044][T21048] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4033'. can't run '/sbi[ 779.043157][T21060] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4036'. [ 779.276686][T21064] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4037'. can't run '/sbi[ 780.949839][T21085] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4043'. can't run '/sbin/getty': Structure needs cleani[ 781.010334][T21097] EXT4-fs error: 5 callbacks suppressed can't run '/sbi[ 782.301633][T21098] netlink: 330 bytes leftover after parsing attributes in process `syz.2.4045'. [ 782.406385][T21098] : renamed from wg0 [ 782.713364][T21116] netlink: 28 bytes leftover after parsing attributes in process `syz.7.4048'. can't run '/sbi[ 783.086976][T21122] kernel read not supported for file /#)-\&[} (pid: 21122 comm: syz.1.4049) [ 783.163598][ T29] audit: type=1800 audit(4295360790.323:148): pid=21122 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.4049" name="#)-\&[}" dev="mqueue" ino=58942 res=0 errno=0 [ 783.262980][T21122] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4049'. can't run '/sbi[ 784.968358][T21154] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4055'. can't run '/sbi[ 785.390261][T21163] netlink: 172 bytes leftover after parsing attributes in process `syz.7.4060'. [ 785.702344][T21168] kernel read not supported for file /#)-\&[} (pid: 21168 comm: syz.7.4062) [ 785.730752][ T29] audit: type=1800 audit(4295360792.893:149): pid=21168 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.4062" name="#)-\&[}" dev="mqueue" ino=73452 res=0 errno=0 [ 785.755017][T21168] netlink: 28 bytes leftover after parsing attributes in process `syz.7.4062'. [ 786.108223][T21177] EXT4-fs error: 5 callbacks suppressed can't run '/sbi[ 786.226039][T21180] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4065'. [ 786.971735][T21190] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4068'. can't run '/sbi[ 787.537684][T21209] kernel read not supported for file /#)-\&[} (pid: 21209 comm: syz.1.4072) [ 787.595466][ T29] audit: type=1800 audit(4295360794.747:150): pid=21209 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.4072" name="#)-\&[}" dev="mqueue" ino=58942 res=0 errno=0 [ 787.598462][T21209] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4072'. can't run '/sbi[ 788.928740][T21235] netlink: 28 bytes leftover after parsing attributes in process `syz.7.4080'. can't run '/sbi[ 789.630905][T21257] kernel read not supported for file /#)-\&[} (pid: 21257 comm: syz.1.4084) [ 789.673905][T21259] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4084'. [ 789.757078][ T29] audit: type=1800 audit(4295360796.907:151): pid=21257 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.4084" name="#)-\&[}" dev="mqueue" ino=58942 res=0 errno=0 can't run '/sbi[ 790.838408][T21272] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4091'. [ 791.163256][T21288] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4094'. [ 791.213340][T21289] EXT4-fs error: 5 callbacks suppressed can't run '/sbi[ 791.447228][T21299] netlink: 20 bytes leftover after parsing attributes in process `syz.7.4097'. [ 791.756764][T21307] kernel read not supported for file /#)-\&[} (pid: 21307 comm: syz.2.4100) [ 791.798116][ T29] audit: type=1800 audit(4295360798.947:152): pid=21307 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.4100" name="#)-\&[}" dev="mqueue" ino=55389 res=0 errno=0 [ 791.841560][T21307] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4100'. can't run '/sbi[ 793.095085][T21327] netlink: 28 bytes leftover after parsing attributes in process `syz.7.4105'. can't run '/sbi[ 793.862189][T21345] netlink: 28 bytes leftover after parsing attributes in process `syz.7.4108'. can't run '/sbi[ 794.366266][T21359] lo: entered allmulticast mode [ 794.387888][T21360] kernel read not supported for file /#)-\&[} (pid: 21360 comm: syz.7.4113) [ 794.400289][T21360] netlink: 28 bytes leftover after parsing attributes in process `syz.7.4113'. [ 794.403954][ T29] audit: type=1800 audit(4294967299.480:153): pid=21360 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.4113" name="#)-\&[}" dev="mqueue" ino=73452 res=0 errno=0 [ 794.557364][T21361] lo: left allmulticast mode [ 795.166277][T21384] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 795.276522][T21373] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4118'. can't run '/sbi[ 796.331009][T21403] EXT4-fs error: 5 callbacks suppressed can't run '/sbi[ 797.166350][T21409] kernel read not supported for file /#)-\&[} (pid: 21409 comm: syz.7.4129) [ 797.196123][ T29] audit: type=1800 audit(4294967302.270:154): pid=21409 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.4129" name="#)-\&[}" dev="mqueue" ino=73452 res=0 errno=0 [ 797.207504][T21409] netlink: 28 bytes leftover after parsing attributes in process `syz.7.4129'. can't run '/sbin/getty': Structure needs cleani[ 798.171547][T21418] netlink: 'syz.7.4132': attribute type 1 has an invalid length. [ 798.273080][T21419] netlink: 158 bytes leftover after parsing attributes in process `syz.7.4132'. can't run '/sbi[ 798.940838][T21450] kernel read not supported for file /#)-\&[} (pid: 21450 comm: syz.7.4142) [ 798.971387][ T29] audit: type=1800 audit(4294967304.050:155): pid=21450 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.4142" name="#)-\&[}" dev="mqueue" ino=73452 res=0 errno=0 [ 799.091599][T21447] netlink: 28 bytes leftover after parsing attributes in process `syz.7.4142'. can't run '/sbi[ 799.855424][T21466] netlink: 'syz.2.4148': attribute type 4 has an invalid length. can't run '/sbi[ 800.896945][T21484] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4150'. [ 801.085846][T21496] zero sized request [ 801.161477][T21496] zero sized request [ 801.165513][T21496] zero sized request [ 801.187323][T21496] zero sized request [ 801.194871][T21496] zero sized request [ 801.209466][T21496] zero sized request [ 801.213560][T21496] zero sized request [ 801.217549][T21496] zero sized request [ 801.259341][T21496] zero sized request [ 801.263643][T21496] zero sized request [ 801.267638][T21496] zero sized request [ 801.283409][T21496] zero sized request [ 801.287424][T21496] zero sized request [ 801.291784][T21496] zero sized request [ 801.295917][T21496] zero sized request [ 801.301099][T21496] zero sized request [ 801.305093][T21496] zero sized request [ 801.309586][T21496] zero sized request [ 801.313587][T21496] zero sized request [ 801.317568][T21496] zero sized request [ 801.321991][T21496] zero sized request [ 801.325982][T21496] zero sized request [ 801.330528][T21496] zero sized request [ 801.334586][T21496] zero sized request [ 801.338558][T21496] zero sized request [ 801.343139][T21496] zero sized request [ 801.347212][T21496] zero sized request [ 801.352144][T21496] zero sized request [ 801.406248][T21496] zero sized request can't run '/sbi[ 801.415890][T21502] EXT4-fs error: 5 callbacks suppressed [ 801.610294][T21505] kernel read not supported for file /#)-\&[} (pid: 21505 comm: syz.2.4154) [ 801.636075][ T29] audit: type=1800 audit(4294967306.710:156): pid=21505 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.4154" name="#)-\&[}" dev="mqueue" ino=55389 res=0 errno=0 [ 801.659501][T21505] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4154'. [ 802.384414][T21516] netlink: 330 bytes leftover after parsing attributes in process `syz.1.4158'. [ 802.398379][T21516] : renamed from wg0 (while UP) can't run '/sbi[ 803.098911][T21537] kernel read not supported for file /#)-\&[} (pid: 21537 comm: syz.2.4163) [ 803.126462][ T29] audit: type=1800 audit(4294967308.200:157): pid=21537 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.4163" name="#)-\&[}" dev="mqueue" ino=55389 res=0 errno=0 [ 803.165334][T21537] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4163'. can't run '/sbi[ 803.859767][T21560] kernel read not supported for file /#)-\&[} (pid: 21560 comm: syz.6.4167) [ 803.904763][ T29] audit: type=1800 audit(4294967308.980:158): pid=21560 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.4167" name="#)-\&[}" dev="mqueue" ino=58546 res=0 errno=0 [ 803.928613][T21560] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4167'. can't run '/sbi[ 804.905981][T21573] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4170'. [ 804.945347][T21588] ecryptfs_miscdev_write: Dropping miscdev message of unrecognized type [0] [ 805.070610][T21586] netlink: 330 bytes leftover after parsing attributes in process `syz.2.4171'. [ 805.398972][T21595] kernel read not supported for file /#)-\&[} (pid: 21595 comm: syz.1.4175) [ 805.415665][ T29] audit: type=1800 audit(4294967310.480:159): pid=21595 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.4175" name="#)-\&[}" dev="mqueue" ino=58942 res=0 errno=0 [ 805.453777][T21588] netlink: 'syz.7.4172': attribute type 4 has an invalid length. [ 805.473374][T21596] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4175'. can't run '/sbin/getty': Structure needs cleaning [ 805.924204][T21609] kernel read not supported for file /#)-\&[} (pid: 21609 comm: syz.7.4178) [ 805.996722][T21612] netlink: 28 bytes leftover after parsing attributes in process `syz.7.4178'. [ 806.007875][ T29] audit: type=1800 audit(4294967311.090:160): pid=21609 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.4178" name="#)-\&[}" dev="mqueue" ino=73452 res=0 errno=0 can't run '/sbi[ 806.514320][T21625] EXT4-fs error: 5 callbacks suppressed [ 807.203182][T21652] ecryptfs_miscdev_write: Dropping miscdev message of unrecognized type [0] [ 807.506542][T21652] netlink: 'syz.1.4187': attribute type 4 has an invalid length. can't run '/sbi[ 807.527288][T21653] netlink: 330 bytes leftover after parsing attributes in process `syz.7.4186'. can't run '/sbi[ 808.912496][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.918842][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 can't run '/sbican't run '/sbi[ 811.559713][T21664] EXT4-fs error: 5 callbacks suppressed can't run '/sbican't run '/sbican't run '/sbi[ 814.413521][T21677] kernel read not supported for file /#)-\&[} (pid: 21677 comm: syz.6.4188) [ 814.423353][ T29] audit: type=1800 audit(4294967319.500:161): pid=21677 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.4188" name="#)-\&[}" dev="mqueue" ino=58546 res=0 errno=0 [ 814.477965][T21671] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4188'. can't run '/sbican't run '/sbin/getty': Structure needs cleaning [ 816.447916][T21714] kernel read not supported for file /#)-\&[} (pid: 21714 comm: syz.7.4203) [ 816.462209][ T29] audit: type=1800 audit(4294967321.540:162): pid=21714 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.4203" name="#)-\&[}" dev="mqueue" ino=73452 res=0 errno=0 [ 816.485298][T21716] kernel read not supported for file /#)-\&[} (pid: 21716 comm: syz.1.4204) [ 816.525023][ T29] audit: type=1800 audit(4294967321.590:163): pid=21716 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.4204" name="#)-\&[}" dev="mqueue" ino=58942 res=0 errno=0 [ 816.557529][T21716] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4204'. can't run '/sbi[ 816.620522][T21720] EXT4-fs error: 5 callbacks suppressed can't run '/sbican't run '/sbi[ 819.052838][T21777] kernel read not supported for file /#)-\&[} (pid: 21777 comm: syz.1.4218) [ 819.107094][ T29] audit: type=1800 audit(4294967324.180:164): pid=21777 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.4218" name="#)-\&[}" dev="mqueue" ino=58942 res=0 errno=0 [ 819.262017][T21776] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4218'. can't run '/sbi[ 820.288847][T21795] kernel read not supported for file /#)-\&[} (pid: 21795 comm: syz.2.4229) [ 820.298328][ T29] audit: type=1800 audit(4294967337.378:165): pid=21795 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.4229" name="#)-\&[}" dev="mqueue" ino=55389 res=0 errno=0 [ 820.417298][T21795] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4229'. can't run '/sbi[ 820.761702][T21811] netlink: 334 bytes leftover after parsing attributes in process `syz.1.4225'. can't run '/sbi[ 821.786474][T21835] EXT4-fs error: 5 callbacks suppressed [ 822.072879][T21845] kernel read not supported for file /#)-\&[} (pid: 21845 comm: syz.1.4235) [ 822.083785][T21846] kernel read not supported for file /#)-\&[} (pid: 21846 comm: syz.2.4234) [ 822.103721][ T29] audit: type=1800 audit(4294967297.862:166): pid=21846 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.4234" name="#)-\&[}" dev="mqueue" ino=55389 res=0 errno=0 [ 822.110982][T21846] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4234'. [ 822.159041][ T29] audit: type=1800 audit(4294967297.892:167): pid=21845 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.4235" name="#)-\&[}" dev="mqueue" ino=58942 res=0 errno=0 [ 822.204013][T21845] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4235'. can't run '/sbi[ 823.185970][T21875] netlink: 326 bytes leftover after parsing attributes in process `syz.1.4242'. can't run '/sbican't run '/sbin/getty': Structure needs cleaning [ 824.864194][T21902] kernel read not supported for file /#)-\&[} (pid: 21902 comm: syz.1.4249) [ 824.920291][ T29] audit: type=1800 audit(4294967300.682:168): pid=21902 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.4249" name="#)-\&[}" dev="mqueue" ino=58942 res=0 errno=0 [ 824.929357][T21904] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4249'. can't run '/sbi[ 826.790281][T21774] Process accounting resumed can't run '/sbi[ 827.324669][T21942] EXT4-fs error: 5 callbacks suppressed [ 827.683445][T21932] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4259'. [ 828.169972][T21935] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4260'. can't run '/sbican't run '/sbi[ 830.108192][T19584] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 830.121316][T19584] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 830.133431][T19584] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 830.142881][T19584] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 830.151261][T19584] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 830.158608][T19584] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 can't run '/sbi[ 830.921861][T21992] netlink: 28 bytes leftover after parsing attributes in process `syz.7.4274'. [ 831.101098][T21986] chnl_net:caif_netlink_parms(): no params data found can't run '/sbi[ 831.471971][T22010] kernel read not supported for file /#)-\&[} (pid: 22010 comm: syz.7.4276) [ 831.484024][ T29] audit: type=1800 audit(4294967300.852:169): pid=22010 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.4276" name="#)-\&[}" dev="mqueue" ino=73452 res=0 errno=0 [ 831.528540][T22010] netlink: 28 bytes leftover after parsing attributes in process `syz.7.4276'. [ 831.570713][T21986] bridge0: port 1(bridge_slave_0) entered blocking state [ 831.577908][T21986] bridge0: port 1(bridge_slave_0) entered disabled state [ 831.599374][T21986] bridge_slave_0: entered allmulticast mode [ 831.617852][T21986] bridge_slave_0: entered promiscuous mode [ 831.628170][T21986] bridge0: port 2(bridge_slave_1) entered blocking state [ 831.646826][T21986] bridge0: port 2(bridge_slave_1) entered disabled state [ 831.655627][T21986] bridge_slave_1: entered allmulticast mode [ 831.675520][T21986] bridge_slave_1: entered promiscuous mode [ 831.852835][T21986] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 831.900734][T21986] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 832.081406][T22003] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4275'. [ 832.239842][T21986] team0: Port device team_slave_0 added [ 832.275254][T19584] Bluetooth: hci3: command tx timeout [ 832.284923][T21986] team0: Port device team_slave_1 added [ 832.476158][T22026] EXT4-fs error: 5 callbacks suppressed can't run '/sbi[ 832.515739][T21986] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 832.533368][T21986] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 832.589543][T21986] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 832.650312][T21986] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 832.657414][T21986] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 832.719181][T21986] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 832.958191][T22033] kernel read not supported for file /#)-\&[} (pid: 22033 comm: syz.7.4281) [ 832.991155][ T29] audit: type=1800 audit(4294967302.362:170): pid=22033 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.4281" name="#)-\&[}" dev="mqueue" ino=73452 res=0 errno=0 [ 832.993743][T22033] netlink: 28 bytes leftover after parsing attributes in process `syz.7.4281'. [ 833.136187][T21986] hsr_slave_0: entered promiscuous mode [ 833.153533][T21986] hsr_slave_1: entered promiscuous mode [ 833.174002][T21986] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 833.192640][T21986] Cannot create hsr debugfs directory [ 833.411372][T22039] kernel read not supported for file /#)-\&[} (pid: 22039 comm: syz.1.4282) [ 833.432736][ T29] audit: type=1800 audit(4294967302.802:171): pid=22039 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.4282" name="#)-\&[}" dev="mqueue" ino=58942 res=0 errno=0 [ 833.465462][T22039] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4282'. can't run '/sbi[ 833.982777][T22041] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4284'. [ 834.102020][ T29] audit: type=1800 audit(4294967303.462:172): pid=22050 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.4285" name="SYSV00010000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 834.212844][T21986] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 834.339251][T21986] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 834.351124][T19584] Bluetooth: hci3: command tx timeout [ 834.465826][T21986] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 834.506221][T21986] netdevsim netdevsim8 netdevsim3: renamed from eth3 can't run '/sbi[ 834.632613][T22060] kernel read not supported for file /#)-\&[} (pid: 22060 comm: syz.6.4286) [ 834.705613][ T29] audit: type=1800 audit(4294967304.072:173): pid=22060 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.4286" name="#)-\&[}" dev="mqueue" ino=58546 res=0 errno=0 [ 834.711012][T22060] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4286'. [ 834.928329][T21986] 8021q: adding VLAN 0 to HW filter on device bond0 [ 834.960504][T21986] 8021q: adding VLAN 0 to HW filter on device team0 [ 835.014840][T22061] netlink: 28 bytes leftover after parsing attributes in process `syz.7.4288'. [ 835.022106][T12452] bridge0: port 1(bridge_slave_0) entered blocking state [ 835.031008][T12452] bridge0: port 1(bridge_slave_0) entered forwarding state [ 835.086454][T12452] bridge0: port 2(bridge_slave_1) entered blocking state [ 835.093637][T12452] bridge0: port 2(bridge_slave_1) entered forwarding state [ 835.332885][T21986] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network can't run '/sbi[ 835.742095][T21986] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 836.033980][T21986] veth0_vlan: entered promiscuous mode [ 836.067594][T21986] veth1_vlan: entered promiscuous mode [ 836.128670][T21986] veth0_macvtap: entered promiscuous mode [ 836.138797][T21986] veth1_macvtap: entered promiscuous mode [ 836.185467][T21986] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 836.239276][T21986] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 836.256095][T21986] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 836.267126][T21986] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 836.278218][T21986] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 836.296609][T21986] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 836.307639][T21986] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 836.335541][T21986] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 836.347645][T22096] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4293'. [ 836.353255][T21986] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 836.365974][T22102] kernel read not supported for file /#)-\&[} (pid: 22102 comm: syz.6.4294) [ 836.374592][T21986] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 836.376794][ T29] audit: type=1800 audit(4294967305.742:174): pid=22102 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.4294" name="#)-\&[}" dev="mqueue" ino=58546 res=0 errno=0 [ 836.398773][T21986] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 836.414993][T22102] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4294'. [ 836.430077][T19584] Bluetooth: hci3: command tx timeout [ 836.466469][T21986] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 836.477879][T21986] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 836.489222][T21986] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 836.501570][T21986] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 836.512578][T21986] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 836.523681][T21986] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 836.535764][T21986] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 836.546789][T21986] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 836.573589][T21986] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 836.584571][T21986] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! can't run '/sbi[ 836.602923][T21986] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 836.635057][T21986] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 836.644012][T21986] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 836.653546][T21986] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 836.662966][T21986] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 836.977148][ T6618] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 837.013560][ T6618] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 837.148987][T13194] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 837.199191][T13194] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 837.398065][ T29] audit: type=1800 audit(4294967306.752:175): pid=22107 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.4295" name="SYSV00010000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 837.602939][T22129] EXT4-fs error: 5 callbacks suppressed can't run '/sbi[ 838.509472][ T5842] Bluetooth: hci3: command tx timeout [ 838.584696][T22147] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4304'. [ 838.664276][T22161] kernel read not supported for file /#)-\&[} (pid: 22161 comm: syz.7.4305) [ 838.677510][ T29] audit: type=1800 audit(4294967308.052:176): pid=22161 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.4305" name="#)-\&[}" dev="mqueue" ino=73452 res=0 errno=0 [ 838.682497][T22161] netlink: 28 bytes leftover after parsing attributes in process `syz.7.4305'. can't run '/sbi[ 840.562055][T22196] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4317'. can't run '/sbi[ 840.934275][T22215] kernel read not supported for file /#)-\&[} (pid: 22215 comm: syz.6.4320) [ 840.958613][ T29] audit: type=1800 audit(4294967310.322:177): pid=22215 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.4320" name="#)-\&[}" dev="mqueue" ino=58546 res=0 errno=0 [ 840.984214][T22215] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4320'. can't run '/sbi[ 842.558875][T22249] netlink: 28 bytes leftover after parsing attributes in process `syz.7.4328'. can't run '/sbi[ 842.730302][T22257] EXT4-fs error: 5 callbacks suppressed [ 842.962107][T22269] netlink: 28 bytes leftover after parsing attributes in process `syz.8.4333'. [ 843.005799][T22269] ipvlan0: entered allmulticast mode [ 843.029719][T22269] veth0_vlan: entered allmulticast mode can't run '/sbican't run '/sbi[ 844.948350][T22312] netlink: 28 bytes leftover after parsing attributes in process `syz.8.4344'. [ 844.996930][T22314] kernel read not supported for file /#)-\&[} (pid: 22314 comm: syz.6.4345) [ 845.033053][ T29] audit: type=1800 audit(4294967314.402:178): pid=22314 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.4345" name="#)-\&[}" dev="mqueue" ino=58546 res=0 errno=0 [ 845.070720][T22314] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4345'. [ 845.195113][T22308] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4343'. can't run '/sbi[ 845.853924][T22336] kernel read not supported for file /#)-\&[} (pid: 22336 comm: syz.1.4347) [ 845.900535][ T29] audit: type=1800 audit(4294967315.272:179): pid=22336 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.4347" name="#)-\&[}" dev="mqueue" ino=58942 res=0 errno=0 [ 845.942927][T22336] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4347'. [ 846.573941][T22345] netlink: 28 bytes leftover after parsing attributes in process `syz.7.4352'. [ 846.809579][T22367] kernel read not supported for file /#)-\&[} (pid: 22367 comm: syz.1.4358) [ 846.818698][ T29] audit: type=1800 audit(4294967316.182:180): pid=22367 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.4358" name="#)-\&[}" dev="mqueue" ino=58942 res=0 errno=0 [ 846.843619][ T5842] Bluetooth: hci1: command 0x0406 tx timeout can't run '/sbi[ 846.895030][T22367] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4358'. [ 846.941480][T22358] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4356'. can't run '/sbi[ 847.912461][T22395] EXT4-fs error: 5 callbacks suppressed [ 848.443665][T22414] kernel read not supported for file /#)-\&[} (pid: 22414 comm: syz.7.4372) [ 848.456861][ T29] audit: type=1800 audit(4294967317.822:181): pid=22414 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.4372" name="#)-\&[}" dev="mqueue" ino=73452 res=0 errno=0 [ 848.480429][T22414] netlink: 28 bytes leftover after parsing attributes in process `syz.7.4372'. [ 848.602651][T22406] netlink: 28 bytes leftover after parsing attributes in process `syz.8.4370'. can't run '/sbican't run '/sbi[ 850.672362][T22464] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4386'. can't run '/sbi[ 851.962504][T22507] device-mapper: ioctl: ioctl interface mismatch: kernel(4.48.0), user(1073742850.0.2147483643), cmd(12) can't run '/sbi[ 852.743386][T22524] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4402'. can't run '/sbin/getty': Struct[ 853.005073][T22536] EXT4-fs error: 5 callbacks suppressed [ 853.640129][T22546] FAULT_INJECTION: forcing a failure. [ 853.640129][T22546] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 853.699244][T22546] CPU: 1 UID: 0 PID: 22546 Comm: syz.8.4406 Not tainted 6.13.0-rc2-syzkaller-00382-gdccbe2047a5b #0 [ 853.710070][T22546] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 853.720156][T22546] Call Trace: [ 853.723452][T22546] [ 853.726406][T22546] dump_stack_lvl+0x16c/0x1f0 [ 853.731120][T22546] should_fail_ex+0x497/0x5b0 [ 853.735847][T22546] _copy_from_user+0x2e/0xd0 [ 853.740482][T22546] copy_msghdr_from_user+0x99/0x160 [ 853.745723][T22546] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 853.751567][T22546] ? __lock_acquire+0xcc5/0x3c40 [ 853.756559][T22546] ___sys_sendmsg+0xff/0x1e0 [ 853.761192][T22546] ? __pfx____sys_sendmsg+0x10/0x10 [ 853.766444][T22546] ? trace_lock_acquire+0x14e/0x1f0 [ 853.771698][T22546] __sys_sendmmsg+0x201/0x420 [ 853.776422][T22546] ? __pfx___sys_sendmmsg+0x10/0x10 [ 853.781671][T22546] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 853.787698][T22546] ? fput+0x67/0x440 [ 853.791633][T22546] ? ksys_write+0x1ba/0x250 [ 853.796167][T22546] ? __pfx_ksys_write+0x10/0x10 [ 853.801054][T22546] __x64_sys_sendmmsg+0x9c/0x100 [ 853.806030][T22546] ? lockdep_hardirqs_on+0x7c/0x110 [ 853.811263][T22546] do_syscall_64+0xcd/0x250 [ 853.815803][T22546] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 853.821731][T22546] RIP: 0033:0x7f3b3b185d19 [ 853.826169][T22546] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 853.845814][T22546] RSP: 002b:00007f3b3bfcc038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 853.854272][T22546] RAX: ffffffffffffffda RBX: 00007f3b3b375fa0 RCX: 00007f3b3b185d19 [ 853.862276][T22546] RDX: 00000000000009a6 RSI: 0000000000000000 RDI: 0000000000000003 [ 853.870277][T22546] RBP: 00007f3b3bfcc090 R08: 0000000000000000 R09: 0000000000000000 [ 853.878273][T22546] R10: 0000000007fffffe R11: 0000000000000246 R12: 0000000000000001 [ 853.886269][T22546] R13: 0000000000000000 R14: 00007f3b3b375fa0 R15: 00007ffdf610bfb8 [ 853.894283][T22546] [ 853.897399][ C1] vkms_vblank_simulate: vblank timer overrun can't run '/sbi[ 854.398939][T22570] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4413'. can't run '/sbi[ 855.278461][T22599] FAULT_INJECTION: forcing a failure. [ 855.278461][T22599] name failslab, interval 1, probability 0, space 0, times 0 [ 855.322167][T22599] CPU: 0 UID: 0 PID: 22599 Comm: syz.7.4422 Not tainted 6.13.0-rc2-syzkaller-00382-gdccbe2047a5b #0 [ 855.332990][T22599] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 855.343075][T22599] Call Trace: [ 855.346375][T22599] [ 855.349324][T22599] dump_stack_lvl+0x16c/0x1f0 [ 855.354039][T22599] should_fail_ex+0x497/0x5b0 [ 855.358758][T22599] should_failslab+0xc2/0x120 [ 855.363474][T22599] kmem_cache_alloc_noprof+0x6e/0x3b0 [ 855.368888][T22599] ? dst_alloc+0x99/0x1a0 [ 855.373339][T22599] dst_alloc+0x99/0x1a0 [ 855.377528][T22599] rt_dst_alloc+0x35/0x3a0 [ 855.381984][T22599] ip_route_output_key_hash_rcu+0x8a5/0x2770 [ 855.388006][T22599] ip_route_output_key_hash+0x138/0x2e0 [ 855.393583][T22599] ? __pfx_ip_route_output_key_hash+0x10/0x10 [ 855.399694][T22599] ? __pfx_lock_release+0x10/0x10 [ 855.404747][T22599] ? trace_lock_acquire+0x14e/0x1f0 [ 855.409990][T22599] ip_route_output_flow+0x27/0x150 [ 855.415135][T22599] udp_sendmsg+0x1b92/0x29b0 [ 855.419767][T22599] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 855.425354][T22599] ? __pfx_udp_sendmsg+0x10/0x10 [ 855.430347][T22599] ? __pfx___might_resched+0x10/0x10 [ 855.435660][T22599] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 855.441586][T22599] ? aa_sk_perm+0x2f5/0xb20 [ 855.446147][T22599] ? __pfx_udp_sendmsg+0x10/0x10 [ 855.451120][T22599] inet_sendmsg+0x105/0x140 [ 855.455661][T22599] ____sys_sendmsg+0x907/0xb40 [ 855.461074][T22599] ? copy_msghdr_from_user+0x10b/0x160 [ 855.466578][T22599] ? __pfx_____sys_sendmsg+0x10/0x10 [ 855.471883][T22599] ? __lock_acquire+0xcc5/0x3c40 [ 855.476856][T22599] ___sys_sendmsg+0x135/0x1e0 [ 855.481553][T22599] ? __pfx____sys_sendmsg+0x10/0x10 [ 855.486777][T22599] ? trace_lock_acquire+0x14e/0x1f0 [ 855.492003][T22599] __sys_sendmmsg+0x201/0x420 [ 855.496698][T22599] ? __pfx___sys_sendmmsg+0x10/0x10 [ 855.501917][T22599] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 855.507915][T22599] ? fput+0x67/0x440 [ 855.511823][T22599] ? ksys_write+0x1ba/0x250 [ 855.516330][T22599] ? __pfx_ksys_write+0x10/0x10 [ 855.521190][T22599] __x64_sys_sendmmsg+0x9c/0x100 [ 855.526137][T22599] ? lockdep_hardirqs_on+0x7c/0x110 [ 855.531345][T22599] do_syscall_64+0xcd/0x250 [ 855.535859][T22599] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 855.541760][T22599] RIP: 0033:0x7fc817985d19 [ 855.546175][T22599] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 855.565788][T22599] RSP: 002b:00007fc818768038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 855.574216][T22599] RAX: ffffffffffffffda RBX: 00007fc817b75fa0 RCX: 00007fc817985d19 [ 855.582201][T22599] RDX: 00000000000009a6 RSI: 0000000000000000 RDI: 0000000000000003 [ 855.590176][T22599] RBP: 00007fc818768090 R08: 0000000000000000 R09: 0000000000000000 [ 855.598157][T22599] R10: 0000000007fffffe R11: 0000000000000246 R12: 0000000000000001 [ 855.606130][T22599] R13: 0000000000000000 R14: 00007fc817b75fa0 R15: 00007ffc6c74fa28 [ 855.614115][T22599] can't run '/sbi[ 856.182307][T22617] kernel read not supported for file /#)-\&[} (pid: 22617 comm: syz.7.4425) [ 856.235300][T22610] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4426'. [ 856.247987][T22618] netlink: 28 bytes leftover after parsing attributes in process `syz.7.4425'. [ 856.260055][ T29] audit: type=1800 audit(4294967325.632:182): pid=22617 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.4425" name="#)-\&[}" dev="mqueue" ino=73452 res=0 errno=0 can't run '/sbi[ 857.786362][T22628] Process accounting paused [ 857.963419][ T5842] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 857.975855][ T5842] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 857.984118][ T5842] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 857.993443][ T5842] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 858.023032][ T5842] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 858.032944][ T5842] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 858.145218][T22652] EXT4-fs error: 5 callbacks suppressed can't run '/sbi[ 858.581932][T22644] chnl_net:caif_netlink_parms(): no params data found [ 858.753547][T22656] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4436'. [ 858.822560][T22644] bridge0: port 1(bridge_slave_0) entered blocking state [ 858.860873][T22644] bridge0: port 1(bridge_slave_0) entered disabled state [ 858.899568][T22644] bridge_slave_0: entered allmulticast mode [ 858.926848][T22644] bridge_slave_0: entered promiscuous mode [ 858.978304][T22644] bridge0: port 2(bridge_slave_1) entered blocking state [ 859.029203][T22644] bridge0: port 2(bridge_slave_1) entered disabled state [ 859.036745][T22644] bridge_slave_1: entered allmulticast mode [ 859.070783][T22644] bridge_slave_1: entered promiscuous mode [ 859.140399][T22668] ref_tracker: memory allocation failure, unreliable refcount tracker. can't run '/sbi[ 859.221574][T22644] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 859.255910][T22644] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 859.397639][T22644] team0: Port device team_slave_0 added [ 859.422754][T22644] team0: Port device team_slave_1 added [ 859.644336][T22644] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 859.662685][T22644] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 859.742974][T22644] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 859.772379][T22644] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 859.799514][T22644] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 859.876699][T22644] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 860.120979][ T5842] Bluetooth: hci0: command tx timeout [ 860.137629][T22644] hsr_slave_0: entered promiscuous mode [ 860.159625][T22644] hsr_slave_1: entered promiscuous mode can't run '/sbin/getty': Structure needs cleaning [ 860.229288][T22644] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 860.247190][T22644] Cannot create hsr debugfs directory [ 861.024856][T22644] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 861.141963][T22644] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 can't run '/sbi[ 861.359800][T22644] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 861.540397][T22644] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 861.842806][T22644] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 861.868838][T22644] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 861.975434][T22644] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 862.013770][T22644] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 862.189353][ T5842] Bluetooth: hci0: command tx timeout can't run '/sbi[ 862.263253][T22644] 8021q: adding VLAN 0 to HW filter on device bond0 [ 862.309948][T22644] 8021q: adding VLAN 0 to HW filter on device team0 [ 862.350609][T13194] bridge0: port 1(bridge_slave_0) entered blocking state [ 862.359515][T13194] bridge0: port 1(bridge_slave_0) entered forwarding state [ 862.407510][T13194] bridge0: port 2(bridge_slave_1) entered blocking state [ 862.414696][T13194] bridge0: port 2(bridge_slave_1) entered forwarding state [ 863.062003][T22644] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 863.180506][T22706] netlink: 28 bytes leftover after parsing attributes in process `syz.7.4448'. can't run '/sbi[ 863.250397][T22720] EXT4-fs error: 5 callbacks suppressed [ 863.311618][T22723] FAULT_INJECTION: forcing a failure. [ 863.311618][T22723] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 863.370240][T22723] CPU: 0 UID: 0 PID: 22723 Comm: syz.8.4450 Not tainted 6.13.0-rc2-syzkaller-00382-gdccbe2047a5b #0 [ 863.381062][T22723] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 863.391150][T22723] Call Trace: [ 863.394455][T22723] [ 863.397411][T22723] dump_stack_lvl+0x16c/0x1f0 [ 863.402128][T22723] should_fail_ex+0x497/0x5b0 [ 863.406857][T22723] _copy_from_user+0x2e/0xd0 [ 863.411492][T22723] copy_msghdr_from_user+0x99/0x160 [ 863.416732][T22723] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 863.422583][T22723] ? __lock_acquire+0xcc5/0x3c40 [ 863.427565][T22723] ? hlock_class+0x4e/0x130 [ 863.432098][T22723] ? __lock_acquire+0x15a9/0x3c40 [ 863.437147][T22723] ___sys_sendmsg+0xff/0x1e0 [ 863.441755][T22723] ? __pfx____sys_sendmsg+0x10/0x10 [ 863.446966][T22723] ? __pfx___lock_acquire+0x10/0x10 [ 863.452207][T22723] ? __pfx___might_resched+0x10/0x10 [ 863.457500][T22723] ? __might_fault+0xe3/0x190 [ 863.462198][T22723] __sys_sendmmsg+0x201/0x420 [ 863.466905][T22723] ? __pfx___sys_sendmmsg+0x10/0x10 [ 863.472126][T22723] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 863.478122][T22723] ? fput+0x67/0x440 [ 863.482037][T22723] ? ksys_write+0x1ba/0x250 [ 863.486548][T22723] ? __pfx_ksys_write+0x10/0x10 [ 863.491494][T22723] __x64_sys_sendmmsg+0x9c/0x100 [ 863.496451][T22723] ? lockdep_hardirqs_on+0x7c/0x110 [ 863.501658][T22723] do_syscall_64+0xcd/0x250 [ 863.506169][T22723] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 863.512073][T22723] RIP: 0033:0x7f3b3b185d19 [ 863.516491][T22723] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 863.536100][T22723] RSP: 002b:00007f3b3bfcc038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 863.544516][T22723] RAX: ffffffffffffffda RBX: 00007f3b3b375fa0 RCX: 00007f3b3b185d19 [ 863.552494][T22723] RDX: 00000000000009a6 RSI: 0000000000000000 RDI: 0000000000000003 [ 863.560466][T22723] RBP: 00007f3b3bfcc090 R08: 0000000000000000 R09: 0000000000000000 [ 863.568436][T22723] R10: 0000000007fffffe R11: 0000000000000246 R12: 0000000000000001 [ 863.576421][T22723] R13: 0000000000000000 R14: 00007f3b3b375fa0 R15: 00007ffdf610bfb8 [ 863.584497][T22723] [ 863.791307][T22644] veth0_vlan: entered promiscuous mode [ 863.817187][T22644] veth1_vlan: entered promiscuous mode [ 863.885328][T22644] veth0_macvtap: entered promiscuous mode [ 863.921625][T22644] veth1_macvtap: entered promiscuous mode [ 863.953888][T22644] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 864.025430][T22644] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 864.044329][T22644] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 864.058693][T22644] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 864.068810][T22644] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 864.095909][T22644] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 864.116973][T22644] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 864.138118][T22644] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 864.158678][T22644] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 864.209186][T22644] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 864.235278][T22644] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 864.269274][ T5842] Bluetooth: hci0: command tx timeout [ 864.269606][T22644] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! can't run '/sbi[ 864.313518][T22644] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 864.364889][T22644] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 864.389205][T22644] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 864.399453][T22644] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 864.410717][T22644] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 864.420929][T22644] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 864.431907][T22644] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 864.459364][T22644] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 864.481030][T22644] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 864.502635][T22644] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 864.513951][T22644] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 864.526826][T22644] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 864.538049][T22644] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 864.579846][T22644] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 864.616911][T22644] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 864.639273][T22644] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 864.648018][T22644] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 864.698193][T22644] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 864.707077][T22748] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4456'. [ 865.051777][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 865.086130][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 865.239829][T13191] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 865.250483][T13191] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 can't run '/sbi[ 865.701500][T22764] FAULT_INJECTION: forcing a failure. [ 865.701500][T22764] name failslab, interval 1, probability 0, space 0, times 0 [ 865.769201][T22764] CPU: 1 UID: 0 PID: 22764 Comm: syz.6.4460 Not tainted 6.13.0-rc2-syzkaller-00382-gdccbe2047a5b #0 [ 865.780029][T22764] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 865.790109][T22764] Call Trace: [ 865.793405][T22764] [ 865.796362][T22764] dump_stack_lvl+0x16c/0x1f0 [ 865.801078][T22764] should_fail_ex+0x497/0x5b0 [ 865.805786][T22764] should_failslab+0xc2/0x120 [ 865.810482][T22764] kmem_cache_alloc_noprof+0x6e/0x3b0 [ 865.815874][T22764] ? dst_alloc+0x99/0x1a0 [ 865.820223][T22764] dst_alloc+0x99/0x1a0 [ 865.824401][T22764] rt_dst_alloc+0x35/0x3a0 [ 865.828836][T22764] ip_route_output_key_hash_rcu+0x8a5/0x2770 [ 865.834835][T22764] ip_route_output_key_hash+0x138/0x2e0 [ 865.840397][T22764] ? __pfx_ip_route_output_key_hash+0x10/0x10 [ 865.846506][T22764] ? __pfx_lock_release+0x10/0x10 [ 865.851537][T22764] ? trace_lock_acquire+0x14e/0x1f0 [ 865.856746][T22764] ? lockdep_hardirqs_on+0x7c/0x110 [ 865.861962][T22764] ip_route_output_flow+0x27/0x150 [ 865.867084][T22764] udp_sendmsg+0x1b92/0x29b0 [ 865.871696][T22764] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 865.877260][T22764] ? __pfx_udp_sendmsg+0x10/0x10 [ 865.882228][T22764] ? __pfx___might_resched+0x10/0x10 [ 865.887523][T22764] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 865.893429][T22764] ? aa_sk_perm+0x2f5/0xb20 [ 865.897954][T22764] ? __pfx_udp_sendmsg+0x10/0x10 [ 865.902905][T22764] inet_sendmsg+0x105/0x140 [ 865.907417][T22764] ____sys_sendmsg+0x907/0xb40 [ 865.912191][T22764] ? copy_msghdr_from_user+0x10b/0x160 [ 865.917662][T22764] ? __pfx_____sys_sendmsg+0x10/0x10 [ 865.922954][T22764] ? __lock_acquire+0xcc5/0x3c40 [ 865.927915][T22764] ? hlock_class+0x4e/0x130 [ 865.932426][T22764] ? __lock_acquire+0x15a9/0x3c40 [ 865.937470][T22764] ___sys_sendmsg+0x135/0x1e0 [ 865.942163][T22764] ? __pfx____sys_sendmsg+0x10/0x10 [ 865.947369][T22764] ? __pfx___lock_acquire+0x10/0x10 [ 865.952609][T22764] ? __pfx___might_resched+0x10/0x10 [ 865.957901][T22764] ? __might_fault+0xe3/0x190 [ 865.962594][T22764] __sys_sendmmsg+0x201/0x420 [ 865.967291][T22764] ? __pfx___sys_sendmmsg+0x10/0x10 [ 865.972508][T22764] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 865.978507][T22764] ? fput+0x67/0x440 [ 865.982414][T22764] ? ksys_write+0x1ba/0x250 [ 865.986925][T22764] ? __pfx_ksys_write+0x10/0x10 [ 865.991801][T22764] __x64_sys_sendmmsg+0x9c/0x100 [ 865.996763][T22764] ? lockdep_hardirqs_on+0x7c/0x110 [ 866.001977][T22764] do_syscall_64+0xcd/0x250 [ 866.006498][T22764] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 866.012405][T22764] RIP: 0033:0x7f0487985d19 [ 866.016831][T22764] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 866.036462][T22764] RSP: 002b:00007f048883d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 866.044890][T22764] RAX: ffffffffffffffda RBX: 00007f0487b75fa0 RCX: 00007f0487985d19 [ 866.052866][T22764] RDX: 00000000000009a6 RSI: 0000000000000000 RDI: 0000000000000003 [ 866.060841][T22764] RBP: 00007f048883d090 R08: 0000000000000000 R09: 0000000000000000 [ 866.068820][T22764] R10: 0000000007fffffe R11: 0000000000000246 R12: 0000000000000001 [ 866.076792][T22764] R13: 0000000000000000 R14: 00007f0487b75fa0 R15: 00007ffd7505e438 [ 866.084778][T22764] [ 866.178213][T22760] netlink: 28 bytes leftover after parsing attributes in process `syz.8.4459'. can't run '/sbi[ 866.349407][ T5842] Bluetooth: hci0: command tx timeout [ 866.855528][T22773] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4464'. [ 866.987317][T22788] kernel read not supported for file /#)-\&[} (pid: 22788 comm: syz.8.4466) [ 867.008186][T22788] netlink: 28 bytes leftover after parsing attributes in process `syz.8.4466'. [ 867.009151][ T29] audit: type=1800 audit(4294967336.372:183): pid=22788 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.4466" name="#)-\&[}" dev="mqueue" ino=85962 res=0 errno=0 [ 867.071175][T22773] team0: Port device team_slave_0 removed can't run '/sbi[ 868.252806][T22822] netlink: 28 bytes leftover after parsing attributes in process `syz.8.4474'. can't run '/sbi[ 868.369383][T22833] EXT4-fs error: 5 callbacks suppressed [ 868.623872][T22843] kernel read not supported for file /#)-\&[} (pid: 22843 comm: syz.1.4478) [ 868.639945][ T29] audit: type=1800 audit(4294967338.012:184): pid=22843 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.4478" name="#)-\&[}" dev="mqueue" ino=58942 res=0 errno=0 [ 868.680593][T22843] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4478'. can't run '/sbi[ 869.459926][T22863] FAULT_INJECTION: forcing a failure. [ 869.459926][T22863] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 869.488278][T22863] CPU: 0 UID: 0 PID: 22863 Comm: syz.6.4484 Not tainted 6.13.0-rc2-syzkaller-00382-gdccbe2047a5b #0 [ 869.499100][T22863] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 869.509185][T22863] Call Trace: [ 869.512480][T22863] [ 869.515426][T22863] dump_stack_lvl+0x16c/0x1f0 [ 869.520136][T22863] should_fail_ex+0x497/0x5b0 [ 869.524854][T22863] _copy_from_user+0x2e/0xd0 [ 869.529487][T22863] copy_msghdr_from_user+0x99/0x160 [ 869.534726][T22863] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 869.540570][T22863] ? __lock_acquire+0xcc5/0x3c40 [ 869.545550][T22863] ? hlock_class+0x4e/0x130 [ 869.550081][T22863] ? __lock_acquire+0x15a9/0x3c40 [ 869.555147][T22863] ___sys_sendmsg+0xff/0x1e0 [ 869.559776][T22863] ? __pfx____sys_sendmsg+0x10/0x10 [ 869.565093][T22863] ? __pfx___lock_acquire+0x10/0x10 [ 869.570359][T22863] ? __pfx___might_resched+0x10/0x10 [ 869.575676][T22863] ? __might_fault+0xe3/0x190 [ 869.580395][T22863] __sys_sendmmsg+0x201/0x420 [ 869.585116][T22863] ? __pfx___sys_sendmmsg+0x10/0x10 [ 869.590532][T22863] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 869.596558][T22863] ? fput+0x67/0x440 [ 869.600490][T22863] ? ksys_write+0x1ba/0x250 [ 869.605020][T22863] ? __pfx_ksys_write+0x10/0x10 [ 869.609903][T22863] __x64_sys_sendmmsg+0x9c/0x100 [ 869.615654][T22863] ? lockdep_hardirqs_on+0x7c/0x110 [ 869.620885][T22863] do_syscall_64+0xcd/0x250 [ 869.625423][T22863] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 869.631346][T22863] RIP: 0033:0x7f0487985d19 [ 869.635787][T22863] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 869.655442][T22863] RSP: 002b:00007f048883d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 869.663890][T22863] RAX: ffffffffffffffda RBX: 00007f0487b75fa0 RCX: 00007f0487985d19 [ 869.671890][T22863] RDX: 00000000000009a6 RSI: 0000000000000000 RDI: 0000000000000003 [ 869.679888][T22863] RBP: 00007f048883d090 R08: 0000000000000000 R09: 0000000000000000 [ 869.687880][T22863] R10: 0000000007fffffe R11: 0000000000000246 R12: 0000000000000001 [ 869.695878][T22863] R13: 0000000000000000 R14: 00007f0487b75fa0 R15: 00007ffd7505e438 [ 869.703900][T22863] [ 870.010124][T22882] kernel read not supported for file /#)-\&[} (pid: 22882 comm: syz.7.4489) [ 870.037652][ T29] audit: type=1800 audit(4294967339.402:185): pid=22882 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.4489" name="#)-\&[}" dev="mqueue" ino=73452 res=0 errno=0 [ 870.089800][T22876] netlink: 28 bytes leftover after parsing attributes in process `syz.7.4489'. [ 870.097958][T22871] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4488'. [ 870.353745][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.363428][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 can't run '/sbican't run '/sbi[ 871.774075][T22922] netlink: 28 bytes leftover after parsing attributes in process `syz.8.4499'. [ 872.088344][T22920] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4500'. [ 872.256583][T19584] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 872.285430][ T5832] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 872.300375][ T5832] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 872.309919][ T5832] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 872.317765][ T5832] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 872.325355][ T5832] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 can't run '/sbi[ 872.469909][T22938] FAULT_INJECTION: forcing a failure. [ 872.469909][T22938] name failslab, interval 1, probability 0, space 0, times 0 [ 872.487795][T22938] CPU: 1 UID: 0 PID: 22938 Comm: syz.8.4504 Not tainted 6.13.0-rc2-syzkaller-00382-gdccbe2047a5b #0 [ 872.498627][T22938] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 872.508707][T22938] Call Trace: [ 872.512007][T22938] [ 872.514966][T22938] dump_stack_lvl+0x16c/0x1f0 [ 872.519683][T22938] should_fail_ex+0x497/0x5b0 [ 872.524399][T22938] should_failslab+0xc2/0x120 [ 872.529117][T22938] kmem_cache_alloc_noprof+0x6e/0x3b0 [ 872.534549][T22938] ? dst_alloc+0x99/0x1a0 [ 872.538919][T22938] dst_alloc+0x99/0x1a0 [ 872.543118][T22938] rt_dst_alloc+0x35/0x3a0 [ 872.547579][T22938] ip_route_output_key_hash_rcu+0x8a5/0x2770 [ 872.553600][T22938] ip_route_output_key_hash+0x138/0x2e0 [ 872.559180][T22938] ? __pfx_ip_route_output_key_hash+0x10/0x10 [ 872.565290][T22938] ? __pfx_lock_release+0x10/0x10 [ 872.570344][T22938] ? trace_lock_acquire+0x14e/0x1f0 [ 872.575575][T22938] ? lockdep_hardirqs_on+0x7c/0x110 [ 872.580815][T22938] ip_route_output_flow+0x27/0x150 [ 872.585967][T22938] udp_sendmsg+0x1b92/0x29b0 [ 872.590610][T22938] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 872.596199][T22938] ? __pfx_udp_sendmsg+0x10/0x10 [ 872.601191][T22938] ? __pfx___might_resched+0x10/0x10 [ 872.606512][T22938] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 872.612458][T22938] ? aa_sk_perm+0x2f5/0xb20 [ 872.617017][T22938] ? __pfx_udp_sendmsg+0x10/0x10 [ 872.622001][T22938] inet_sendmsg+0x105/0x140 [ 872.626546][T22938] ____sys_sendmsg+0x907/0xb40 [ 872.631466][T22938] ? copy_msghdr_from_user+0x10b/0x160 [ 872.636974][T22938] ? __pfx_____sys_sendmsg+0x10/0x10 [ 872.642298][T22938] ? __lock_acquire+0xcc5/0x3c40 [ 872.647289][T22938] ? hlock_class+0x4e/0x130 [ 872.651833][T22938] ? __lock_acquire+0x15a9/0x3c40 [ 872.656911][T22938] ___sys_sendmsg+0x135/0x1e0 [ 872.661633][T22938] ? __pfx____sys_sendmsg+0x10/0x10 [ 872.666874][T22938] ? __pfx___lock_acquire+0x10/0x10 [ 872.672145][T22938] ? __pfx___might_resched+0x10/0x10 [ 872.674421][T22933] chnl_net:caif_netlink_parms(): no params data found [ 872.677439][T22938] ? __might_fault+0xe3/0x190 [ 872.677487][T22938] __sys_sendmmsg+0x201/0x420 [ 872.693599][T22938] ? __pfx___sys_sendmmsg+0x10/0x10 [ 872.698846][T22938] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 872.704872][T22938] ? fput+0x67/0x440 [ 872.708809][T22938] ? ksys_write+0x1ba/0x250 [ 872.713346][T22938] ? __pfx_ksys_write+0x10/0x10 [ 872.718236][T22938] __x64_sys_sendmmsg+0x9c/0x100 [ 872.723214][T22938] ? lockdep_hardirqs_on+0x7c/0x110 [ 872.728455][T22938] do_syscall_64+0xcd/0x250 [ 872.732993][T22938] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 872.738913][T22938] RIP: 0033:0x7f3b3b185d19 [ 872.743348][T22938] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 872.762968][T22938] RSP: 002b:00007f3b3bfcc038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 872.771393][T22938] RAX: ffffffffffffffda RBX: 00007f3b3b375fa0 RCX: 00007f3b3b185d19 [ 872.779396][T22938] RDX: 00000000000009a6 RSI: 0000000000000000 RDI: 0000000000000003 [ 872.787396][T22938] RBP: 00007f3b3bfcc090 R08: 0000000000000000 R09: 0000000000000000 [ 872.795391][T22938] R10: 0000000007fffffe R11: 0000000000000246 R12: 0000000000000001 [ 872.803390][T22938] R13: 0000000000000000 R14: 00007f3b3b375fa0 R15: 00007ffdf610bfb8 [ 872.811402][T22938] [ 873.018739][T22933] bridge0: port 1(bridge_slave_0) entered blocking state [ 873.038490][T22933] bridge0: port 1(bridge_slave_0) entered disabled state [ 873.056753][T22933] bridge_slave_0: entered allmulticast mode [ 873.064595][T22933] bridge_slave_0: entered promiscuous mode [ 873.135751][T22933] bridge0: port 2(bridge_slave_1) entered blocking state [ 873.143284][T22933] bridge0: port 2(bridge_slave_1) entered disabled state [ 873.151478][T22933] bridge_slave_1: entered allmulticast mode [ 873.169356][T22933] bridge_slave_1: entered promiscuous mode [ 873.177816][T22956] erspan0: entered allmulticast mode [ 873.230123][T22933] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 873.245298][T22933] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 873.321144][T22933] team0: Port device team_slave_0 added [ 873.361473][T22933] team0: Port device team_slave_1 added [ 873.472474][T22964] EXT4-fs error: 5 callbacks suppressed can't run '/sbi[ 873.503965][T22933] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 873.540562][T22933] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 873.589333][T22933] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 873.605544][T22933] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 873.613012][T22933] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 873.640615][T22933] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 873.900658][T22933] hsr_slave_0: entered promiscuous mode [ 873.920355][T22933] hsr_slave_1: entered promiscuous mode [ 873.927154][T22933] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 873.951612][T22933] Cannot create hsr debugfs directory [ 874.303068][T22933] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 874.343148][T22933] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 874.371739][ T5842] Bluetooth: hci1: command tx timeout [ 874.397022][T22933] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 874.531983][T22933] netdevsim netdevsim9 netdevsim3: renamed from eth3 can't run '/sbi[ 874.854007][T22980] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4512'. [ 874.909120][T22933] 8021q: adding VLAN 0 to HW filter on device bond0 [ 874.946430][T22933] 8021q: adding VLAN 0 to HW filter on device team0 [ 874.975566][ T6624] bridge0: port 1(bridge_slave_0) entered blocking state [ 874.982770][ T6624] bridge0: port 1(bridge_slave_0) entered forwarding state [ 875.145524][ T6624] bridge0: port 2(bridge_slave_1) entered blocking state [ 875.152702][ T6624] bridge0: port 2(bridge_slave_1) entered forwarding state can't run '/sbin/getty': Structure needs cleaning [ 875.666524][T22933] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 876.287352][T22933] veth0_vlan: entered promiscuous mode [ 876.327599][T22933] veth1_vlan: entered promiscuous mode [ 876.435047][T22933] veth0_macvtap: entered promiscuous mode [ 876.441109][ T5842] Bluetooth: hci1: command tx timeout [ 876.486880][T22933] veth1_macvtap: entered promiscuous mode [ 876.544568][T22933] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 876.589948][T22933] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 876.616838][T22933] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 can't run '/sbi[ 876.648528][T22933] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 876.667889][T22933] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 876.687221][T22933] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 876.707834][T22933] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 876.733045][T22933] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 876.765166][T22933] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 876.786518][T22933] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 876.821226][T22933] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 876.849249][T22933] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 876.915843][T22933] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 876.937140][T22933] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 876.952249][T22933] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 876.978509][T22933] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 877.009354][T22933] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 877.030122][T22933] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 877.041720][T22933] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 877.059018][T22933] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 877.071037][T22933] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 877.082391][T22933] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 877.094084][T22933] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 877.167596][T22933] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 877.198754][T22933] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 877.249202][T22933] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 877.274030][T22933] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 877.300929][T22933] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 877.325452][T22933] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 877.358097][T22933] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 877.409990][T22933] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 877.441279][T22933] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 877.460372][T22933] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 877.481501][T22933] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 can't run '/sbi[ 877.707880][T13191] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 877.729743][T13191] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 877.797430][T13191] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 877.831097][T13191] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 878.536273][ T5842] Bluetooth: hci1: command tx timeout [ 878.676580][T23051] EXT4-fs error: 5 callbacks suppressed can't run '/sbi[ 878.968846][T23058] kernel read not supported for file /#)-\&[} (pid: 23058 comm: syz.6.4525) [ 878.982989][T23058] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4525'. [ 878.985136][ T29] audit: type=1804 audit(4294967348.322:186): pid=23058 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.6.4525" name="#)-\&[}" dev="mqueue" ino=88572 res=1 errno=0 [ 879.020510][ T29] audit: type=1800 audit(4294967348.342:187): pid=23058 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.4525" name="#)-\&[}" dev="mqueue" ino=88572 res=0 errno=0 [ 879.034451][T23058] ipvlan0: entered allmulticast mode [ 879.067349][ T29] audit: type=1804 audit(4294967348.432:188): pid=23060 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.6.4525" name="#)-\&[}" dev="mqueue" ino=88572 res=1 errno=0 [ 879.072993][T23058] veth0_vlan: entered allmulticast mode [ 879.105628][ T29] audit: type=1804 audit(4294967348.432:189): pid=23060 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.6.4525" name="#)-\&[}" dev="mqueue" ino=88572 res=1 errno=0 [ 879.413349][T23066] kernel read not supported for file /#)-\&[} (pid: 23066 comm: syz.9.4528) [ 879.438509][ T29] audit: type=1800 audit(4294967348.802:190): pid=23066 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.9.4528" name="#)-\&[}" dev="mqueue" ino=88604 res=0 errno=0 [ 879.459752][T23066] netlink: 28 bytes leftover after parsing attributes in process `syz.9.4528'. [ 879.493714][T23066] ipvlan0: entered allmulticast mode [ 879.499584][T23066] veth0_vlan: entered allmulticast mode can't run '/sbi[ 880.120324][T23061] netlink: 28 bytes leftover after parsing attributes in process `syz.8.4527'. [ 880.266677][T23083] FAULT_INJECTION: forcing a failure. [ 880.266677][T23083] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 880.294802][T23061] team0: Port device team_slave_0 removed [ 880.308863][T23083] CPU: 1 UID: 0 PID: 23083 Comm: syz.1.4535 Not tainted 6.13.0-rc2-syzkaller-00382-gdccbe2047a5b #0 [ 880.319677][T23083] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 880.329759][T23083] Call Trace: [ 880.333062][T23083] [ 880.336015][T23083] dump_stack_lvl+0x16c/0x1f0 [ 880.340722][T23083] should_fail_ex+0x497/0x5b0 [ 880.345413][T23083] _copy_from_user+0x2e/0xd0 [ 880.350018][T23083] copy_msghdr_from_user+0x99/0x160 [ 880.355233][T23083] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 880.361049][T23083] ? __lock_acquire+0xcc5/0x3c40 [ 880.366003][T23083] ? hlock_class+0x4e/0x130 [ 880.370512][T23083] ? __lock_acquire+0x15a9/0x3c40 [ 880.375553][T23083] ___sys_sendmsg+0xff/0x1e0 [ 880.380157][T23083] ? __pfx____sys_sendmsg+0x10/0x10 [ 880.385374][T23083] ? __pfx___lock_acquire+0x10/0x10 [ 880.390607][T23083] ? __pfx___might_resched+0x10/0x10 [ 880.395898][T23083] ? __might_fault+0xe3/0x190 [ 880.400679][T23083] __sys_sendmmsg+0x201/0x420 [ 880.405373][T23083] ? __pfx___sys_sendmmsg+0x10/0x10 [ 880.410587][T23083] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 880.416582][T23083] ? fput+0x67/0x440 [ 880.420488][T23083] ? ksys_write+0x1ba/0x250 [ 880.425091][T23083] ? __pfx_ksys_write+0x10/0x10 [ 880.429957][T23083] __x64_sys_sendmmsg+0x9c/0x100 [ 880.434907][T23083] ? lockdep_hardirqs_on+0x7c/0x110 [ 880.440118][T23083] do_syscall_64+0xcd/0x250 [ 880.444633][T23083] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 880.450534][T23083] RIP: 0033:0x7f6600d85d19 [ 880.454965][T23083] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 880.475014][T23083] RSP: 002b:00007f6601c43038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 880.483435][T23083] RAX: ffffffffffffffda RBX: 00007f6600f75fa0 RCX: 00007f6600d85d19 [ 880.491412][T23083] RDX: 00000000000009a6 RSI: 0000000000000000 RDI: 0000000000000003 [ 880.499388][T23083] RBP: 00007f6601c43090 R08: 0000000000000000 R09: 0000000000000000 [ 880.507361][T23083] R10: 0000000007fffffe R11: 0000000000000246 R12: 0000000000000002 [ 880.515335][T23083] R13: 0000000000000000 R14: 00007f6600f75fa0 R15: 00007ffd986e4b28 [ 880.523327][T23083] [ 880.606249][ T5842] Bluetooth: hci1: command tx timeout can't run '/sbi[ 880.783326][T23084] erspan0: entered allmulticast mode [ 881.010619][T23098] kernel read not supported for file /#)-\&[} (pid: 23098 comm: syz.8.4539) [ 881.030437][ T29] audit: type=1800 audit(4294967350.392:191): pid=23098 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.4539" name="#)-\&[}" dev="mqueue" ino=85962 res=0 errno=0 [ 881.060708][T23098] netlink: 28 bytes leftover after parsing attributes in process `syz.8.4539'. [ 881.653641][T23108] kernel read not supported for file /#)-\&[} (pid: 23108 comm: syz.8.4541) [ 881.692422][ T29] audit: type=1800 audit(4294967351.052:192): pid=23108 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.4541" name="#)-\&[}" dev="mqueue" ino=85962 res=0 errno=0 [ 881.719109][T23108] netlink: 28 bytes leftover after parsing attributes in process `syz.8.4541'. can't run '/sbi[ 882.560877][T23129] kernel read not supported for file /#)-\&[} (pid: 23129 comm: syz.6.4547) [ 882.570193][ T29] audit: type=1800 audit(4294967351.942:193): pid=23129 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.4547" name="#)-\&[}" dev="mqueue" ino=88572 res=0 errno=0 [ 882.578323][T23129] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4547'. can't run '/sbi[ 883.068003][T23132] netlink: 28 bytes leftover after parsing attributes in process `syz.8.4556'. [ 883.322260][T23144] Process accounting resumed [ 883.467548][T23139] netlink: 28 bytes leftover after parsing attributes in process `syz.9.4548'. [ 883.658236][T23155] kernel read not supported for file /#)-\&[} (pid: 23155 comm: syz.1.4552) [ 883.700315][ T29] audit: type=1800 audit(4294967353.052:194): pid=23155 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.4552" name="#)-\&[}" dev="mqueue" ino=58942 res=0 errno=0 [ 883.768145][T23157] EXT4-fs error: 5 callbacks suppressed [ 883.818561][T23155] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4552'. [ 883.904135][T23139] team0: Port device team_slave_0 removed [ 884.524593][T23177] kernel read not supported for file /#)-\&[} (pid: 23177 comm: syz.8.4568) [ 884.543578][ T29] audit: type=1800 audit(4294967353.912:195): pid=23177 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.4568" name="#)-\&[}" dev="mqueue" ino=85962 res=0 errno=0 [ 884.546546][T23177] netlink: 28 bytes leftover after parsing attributes in process `syz.8.4568'. [ 884.572897][T23169] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4559'. can't run '/sbi[ 884.881721][T23188] kernel read not supported for file /#)-\&[} (pid: 23188 comm: syz.6.4570) [ 884.911115][ T29] audit: type=1800 audit(4294967354.282:196): pid=23188 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.4570" name="#)-\&[}" dev="mqueue" ino=88572 res=0 errno=0 [ 884.932820][T23188] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4570'. [ 884.961562][T23189] kernel read not supported for file /#)-\&[} (pid: 23189 comm: syz.8.4561) [ 884.991463][ T29] audit: type=1800 audit(4294967354.352:197): pid=23189 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.4561" name="#)-\&[}" dev="mqueue" ino=85962 res=0 errno=0 [ 885.193759][T23198] FAULT_INJECTION: forcing a failure. [ 885.193759][T23198] name failslab, interval 1, probability 0, space 0, times 0 [ 885.213303][T23198] CPU: 0 UID: 0 PID: 23198 Comm: syz.6.4564 Not tainted 6.13.0-rc2-syzkaller-00382-gdccbe2047a5b #0 [ 885.224102][T23198] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 885.234160][T23198] Call Trace: [ 885.237439][T23198] [ 885.240375][T23198] dump_stack_lvl+0x16c/0x1f0 [ 885.245072][T23198] should_fail_ex+0x497/0x5b0 [ 885.249761][T23198] should_failslab+0xc2/0x120 [ 885.254452][T23198] kmem_cache_alloc_noprof+0x6e/0x3b0 [ 885.259843][T23198] ? dst_alloc+0x99/0x1a0 [ 885.264183][T23198] dst_alloc+0x99/0x1a0 [ 885.268349][T23198] rt_dst_alloc+0x35/0x3a0 [ 885.272801][T23198] ip_route_output_key_hash_rcu+0x8a5/0x2770 [ 885.278795][T23198] ip_route_output_key_hash+0x138/0x2e0 [ 885.284352][T23198] ? __pfx_ip_route_output_key_hash+0x10/0x10 [ 885.290429][T23198] ? __pfx_lock_release+0x10/0x10 [ 885.295466][T23198] ? trace_lock_acquire+0x14e/0x1f0 [ 885.300676][T23198] ? lockdep_hardirqs_on+0x7c/0x110 [ 885.305893][T23198] ip_route_output_flow+0x27/0x150 [ 885.311011][T23198] udp_sendmsg+0x1b92/0x29b0 [ 885.315616][T23198] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 885.321178][T23198] ? __pfx_udp_sendmsg+0x10/0x10 [ 885.326142][T23198] ? __pfx___might_resched+0x10/0x10 [ 885.331432][T23198] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 885.337339][T23198] ? aa_sk_perm+0x2f5/0xb20 [ 885.341862][T23198] ? __pfx_udp_sendmsg+0x10/0x10 [ 885.346810][T23198] inet_sendmsg+0x105/0x140 [ 885.351316][T23198] ____sys_sendmsg+0x907/0xb40 [ 885.356084][T23198] ? copy_msghdr_from_user+0x10b/0x160 [ 885.361554][T23198] ? __pfx_____sys_sendmsg+0x10/0x10 [ 885.366841][T23198] ? __lock_acquire+0xcc5/0x3c40 [ 885.371799][T23198] ? hlock_class+0x4e/0x130 [ 885.376311][T23198] ? __lock_acquire+0x15a9/0x3c40 [ 885.381357][T23198] ___sys_sendmsg+0x135/0x1e0 [ 885.386048][T23198] ? __pfx____sys_sendmsg+0x10/0x10 [ 885.391256][T23198] ? __pfx___lock_acquire+0x10/0x10 [ 885.396508][T23198] ? __pfx___might_resched+0x10/0x10 [ 885.401811][T23198] ? __might_fault+0xe3/0x190 [ 885.406506][T23198] __sys_sendmmsg+0x201/0x420 [ 885.411200][T23198] ? __pfx___sys_sendmmsg+0x10/0x10 [ 885.416504][T23198] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 885.422504][T23198] ? fput+0x67/0x440 [ 885.426410][T23198] ? ksys_write+0x1ba/0x250 [ 885.430922][T23198] ? __pfx_ksys_write+0x10/0x10 [ 885.435782][T23198] __x64_sys_sendmmsg+0x9c/0x100 [ 885.440730][T23198] ? lockdep_hardirqs_on+0x7c/0x110 [ 885.445931][T23198] do_syscall_64+0xcd/0x250 [ 885.450451][T23198] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 885.456353][T23198] RIP: 0033:0x7f0487985d19 [ 885.460770][T23198] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 885.480393][T23198] RSP: 002b:00007f048883d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 885.488824][T23198] RAX: ffffffffffffffda RBX: 00007f0487b75fa0 RCX: 00007f0487985d19 [ 885.496797][T23198] RDX: 00000000000009a6 RSI: 0000000000000000 RDI: 0000000000000003 [ 885.504773][T23198] RBP: 00007f048883d090 R08: 0000000000000000 R09: 0000000000000000 [ 885.512761][T23198] R10: 0000000007fffffe R11: 0000000000000246 R12: 0000000000000002 [ 885.520754][T23198] R13: 0000000000000000 R14: 00007f0487b75fa0 R15: 00007ffd7505e438 [ 885.528764][T23198] can't run '/sbican't run '/sbi[ 887.020779][T23234] kernel read not supported for file /#)-\&[} (pid: 23234 comm: syz.6.4574) [ 887.073521][T23234] __nla_validate_parse: 1 callbacks suppressed [ 887.073550][T23234] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4574'. [ 887.079270][ T29] audit: type=1800 audit(4294967356.442:198): pid=23234 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.4574" name="#)-\&[}" dev="mqueue" ino=88572 res=0 errno=0 [ 887.101501][T23236] netlink: 28 bytes leftover after parsing attributes in process `syz.9.4572'. [ 887.365047][T23226] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4573'. can't run '/sbi[ 887.931876][T23248] FAULT_INJECTION: forcing a failure. [ 887.931876][T23248] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 887.974043][T23248] CPU: 0 UID: 0 PID: 23248 Comm: syz.6.4576 Not tainted 6.13.0-rc2-syzkaller-00382-gdccbe2047a5b #0 [ 887.984874][T23248] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 887.994989][T23248] Call Trace: [ 887.998292][T23248] [ 888.001245][T23248] dump_stack_lvl+0x16c/0x1f0 [ 888.005966][T23248] should_fail_ex+0x497/0x5b0 [ 888.010685][T23248] _copy_to_iter+0x29b/0x1400 [ 888.015405][T23248] ? pipe_read+0x13b/0x13f0 [ 888.019943][T23248] ? aa_file_perm+0x4c6/0xfe0 [ 888.024652][T23248] ? __pfx__copy_to_iter+0x10/0x10 [ 888.029800][T23248] ? __pfx___mutex_lock+0x10/0x10 [ 888.034875][T23248] copy_page_to_iter+0xf1/0x180 [ 888.039771][T23248] pipe_read+0x53d/0x13f0 [ 888.044149][T23248] ? __pfx_pipe_read+0x10/0x10 [ 888.048953][T23248] ? apparmor_file_permission+0x251/0x400 [ 888.054712][T23248] ? bpf_lsm_file_permission+0x9/0x10 [ 888.060124][T23248] ? security_file_permission+0x71/0x210 [ 888.065793][T23248] vfs_read+0xa4c/0xbe0 [ 888.069982][T23248] ? __pfx_vfs_read+0x10/0x10 [ 888.074688][T23248] ? __fget_files+0x40/0x3a0 [ 888.079334][T23248] ksys_read+0x207/0x250 [ 888.083619][T23248] ? __pfx_ksys_read+0x10/0x10 [ 888.088425][T23248] do_syscall_64+0xcd/0x250 [ 888.092971][T23248] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 888.098897][T23248] RIP: 0033:0x7f0487985d19 [ 888.103337][T23248] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 888.122977][T23248] RSP: 002b:00007f048883d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 888.131428][T23248] RAX: ffffffffffffffda RBX: 00007f0487b75fa0 RCX: 00007f0487985d19 [ 888.139435][T23248] RDX: 00000000fffffdef RSI: 0000000000000000 RDI: 0000000000000003 [ 888.147441][T23248] RBP: 00007f048883d090 R08: 0000000000000000 R09: 0000000000000000 [ 888.155456][T23248] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 888.163464][T23248] R13: 0000000000000000 R14: 00007f0487b75fa0 R15: 00007ffd7505e438 [ 888.171483][T23248] [ 888.282191][T23258] netlink: 28 bytes leftover after parsing attributes in process `syz.9.4579'. can't run '/sbin/getty': Struct[ 888.881419][T23273] EXT4-fs error: 5 callbacks suppressed [ 888.896950][T23274] kernel read not supported for file /#)-\&[} (pid: 23274 comm: syz.6.4584) [ 888.920626][ T29] audit: type=1800 audit(4294967358.292:199): pid=23274 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.4584" name="#)-\&[}" dev="mqueue" ino=88572 res=0 errno=0 [ 888.951676][T23274] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4584'. [ 889.670331][T23293] kernel read not supported for file /#)-\&[} (pid: 23293 comm: syz.1.4592) [ 889.707554][ T29] audit: type=1800 audit(4294967359.072:200): pid=23293 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.4592" name="#)-\&[}" dev="mqueue" ino=58942 res=0 errno=0 [ 889.726690][T23293] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4592'. [ 889.747328][T23292] mkiss: ax0: crc mode is auto. [ 889.880758][T23283] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4587'. can't run '/sbi[ 890.935487][T23320] kernel read not supported for file /#)-\&[} (pid: 23320 comm: syz.9.4597) can't run '/sbin/getty': Structure needs cleaning [ 891.038804][ T29] audit: type=1800 audit(4294967360.402:201): pid=23320 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.9.4597" name="#)-\&[}" dev="mqueue" ino=88604 res=0 errno=0 [ 891.061191][T23320] netlink: 28 bytes leftover after parsing attributes in process `syz.9.4597'. can't run '/sbi[ 892.437557][T23351] kernel read not supported for file /#)-\&[} (pid: 23351 comm: syz.1.4608) [ 892.501772][ T29] audit: type=1800 audit(4294967361.872:202): pid=23351 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.4608" name="#)-\&[}" dev="mqueue" ino=58942 res=0 errno=0 [ 892.514207][T23351] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4608'. can't run '/sbin/getty': Struct[ 892.984342][T23368] kernel read not supported for file /#)-\&[} (pid: 23368 comm: syz.1.4613) [ 893.025322][ T29] audit: type=1800 audit(4294967362.392:203): pid=23368 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.4613" name="#)-\&[}" dev="mqueue" ino=58942 res=0 errno=0 [ 893.070371][T23368] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4613'. can't run '/sbi[ 893.985605][T23384] EXT4-fs error: 5 callbacks suppressed [ 894.616344][T23401] kernel read not supported for file /#)-\&[} (pid: 23401 comm: syz.6.4622) [ 894.645922][ T29] audit: type=1800 audit(4294967364.012:204): pid=23401 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.4622" name="#)-\&[}" dev="mqueue" ino=88572 res=0 errno=0 [ 894.653729][T23401] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4622'. [ 894.947077][T23410] kernel read not supported for file /#)-\&[} (pid: 23410 comm: syz.9.4625) [ 894.960596][T23405] Invalid ELF header magic: != ELF [ 894.966084][ T29] audit: type=1800 audit(4294967364.332:205): pid=23410 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.9.4625" name="#)-\&[}" dev="mqueue" ino=88604 res=0 errno=0 [ 894.997167][T23410] netlink: 28 bytes leftover after parsing attributes in process `syz.9.4625'. [ 895.007658][T23405] ubi0: attaching mtd0 [ 895.018775][T23405] ubi0: scanning is finished can't run '/sbi[ 895.047116][T23405] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 895.127066][T23412] kernel read not supported for file /#)-\&[} (pid: 23412 comm: syz.1.4627) [ 895.139450][ T29] audit: type=1800 audit(4294967364.512:206): pid=23412 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.4627" name="#)-\&[}" dev="mqueue" ino=58942 res=0 errno=0 [ 895.236245][T23405] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 895.247171][T23412] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4627'. [ 895.280814][T23403] delete_channel: no stack [ 895.727070][T23426] FAULT_INJECTION: forcing a failure. [ 895.727070][T23426] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 895.755400][T23426] CPU: 1 UID: 0 PID: 23426 Comm: syz.9.4629 Not tainted 6.13.0-rc2-syzkaller-00382-gdccbe2047a5b #0 [ 895.766221][T23426] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 895.776303][T23426] Call Trace: [ 895.779604][T23426] [ 895.782563][T23426] dump_stack_lvl+0x16c/0x1f0 [ 895.787280][T23426] should_fail_ex+0x497/0x5b0 [ 895.791994][T23426] _copy_to_iter+0x29b/0x1400 [ 895.797061][T23426] ? pipe_read+0x13b/0x13f0 [ 895.801610][T23426] ? aa_file_perm+0x4c6/0xfe0 [ 895.806319][T23426] ? __pfx__copy_to_iter+0x10/0x10 [ 895.811467][T23426] ? __pfx___mutex_lock+0x10/0x10 [ 895.816548][T23426] copy_page_to_iter+0xf1/0x180 [ 895.821441][T23426] pipe_read+0x53d/0x13f0 [ 895.825829][T23426] ? __pfx_pipe_read+0x10/0x10 [ 895.830633][T23426] ? apparmor_file_permission+0x251/0x400 [ 895.836392][T23426] ? bpf_lsm_file_permission+0x9/0x10 [ 895.841813][T23426] ? security_file_permission+0x71/0x210 [ 895.847490][T23426] vfs_read+0xa4c/0xbe0 [ 895.851685][T23426] ? __pfx_vfs_read+0x10/0x10 [ 895.856398][T23426] ? __fget_files+0x40/0x3a0 [ 895.861042][T23426] ksys_read+0x207/0x250 [ 895.865315][T23426] ? __pfx_ksys_read+0x10/0x10 [ 895.870120][T23426] do_syscall_64+0xcd/0x250 [ 895.874659][T23426] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 895.880581][T23426] RIP: 0033:0x7f7320d85d19 [ 895.885019][T23426] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 895.904919][T23426] RSP: 002b:00007f7321b86038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 895.913379][T23426] RAX: ffffffffffffffda RBX: 00007f7320f76080 RCX: 00007f7320d85d19 [ 895.921390][T23426] RDX: 00000000fffffdef RSI: 0000000000000000 RDI: 0000000000000003 [ 895.929394][T23426] RBP: 00007f7321b86090 R08: 0000000000000000 R09: 0000000000000000 [ 895.937397][T23426] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 895.945397][T23426] R13: 0000000000000000 R14: 00007f7320f76080 R15: 00007ffca0ddb208 [ 895.953432][T23426] can't run '/sbi[ 896.802206][T23450] mkiss: ax0: crc mode is auto. [ 896.922502][T23441] netlink: 28 bytes leftover after parsing attributes in process `syz.8.4634'. can't run '/sbi[ 897.498145][T23458] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4639'. [ 897.530457][T23470] kernel read not supported for file /#)-\&[} (pid: 23470 comm: syz.8.4640) [ 897.567249][ T29] audit: type=1800 audit(4294967366.932:207): pid=23470 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.4640" name="#)-\&[}" dev="mqueue" ino=85962 res=0 errno=0 [ 897.578928][T23470] netlink: 28 bytes leftover after parsing attributes in process `syz.8.4640'. can't run '/sbican't run '/sbi[ 899.100933][T23496] EXT4-fs error: 5 callbacks suppressed [ 899.240147][T23503] mkiss: ax0: crc mode is auto. [ 899.810926][T23509] netlink: 28 bytes leftover after parsing attributes in process `syz.8.4651'. can't run '/sbi[ 900.327237][T23524] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4655'. [ 900.877460][T23547] netlink: 342 bytes leftover after parsing attributes in process `syz.6.4662'. can't run '/sbi[ 902.036912][T23559] mkiss: ax0: crc mode is auto. [ 902.145537][T23554] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4672'. can't run '/sbi[ 902.594287][T23573] kernel read not supported for file /#)-\&[} (pid: 23573 comm: syz.6.4668) [ 902.634333][T23565] netlink: 28 bytes leftover after parsing attributes in process `syz.9.4667'. [ 902.645835][ T29] audit: type=1800 audit(4294967372.012:208): pid=23573 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.4668" name="#)-\&[}" dev="mqueue" ino=88572 res=0 errno=0 [ 902.694228][T23573] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4668'. can't run '/sbi[ 903.295801][T23578] netlink: 28 bytes leftover after parsing attributes in process `syz.8.4671'. [ 903.364673][T23588] erspan0: entered allmulticast mode [ 903.476309][T23595] kernel read not supported for file /#)-\&[} (pid: 23595 comm: syz.9.4674) [ 903.490379][ T29] audit: type=1800 audit(4294967372.862:209): pid=23595 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.9.4674" name="#)-\&[}" dev="mqueue" ino=88604 res=0 errno=0 [ 903.600051][T23595] netlink: 28 bytes leftover after parsing attributes in process `syz.9.4674'. can't run '/sbi[ 904.201954][T23611] EXT4-fs error: 5 callbacks suppressed [ 904.587825][T23616] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4679'. [ 905.211870][T23635] FAULT_INJECTION: forcing a failure. [ 905.211870][T23635] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 905.252275][T23635] CPU: 0 UID: 0 PID: 23635 Comm: syz.8.4683 Not tainted 6.13.0-rc2-syzkaller-00382-gdccbe2047a5b #0 [ 905.263130][T23635] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 905.273217][T23635] Call Trace: [ 905.276518][T23635] [ 905.279469][T23635] dump_stack_lvl+0x16c/0x1f0 [ 905.284185][T23635] should_fail_ex+0x497/0x5b0 [ 905.288905][T23635] ? fs_reclaim_acquire+0xae/0x150 [ 905.294141][T23635] should_fail_alloc_page+0xe7/0x130 [ 905.299471][T23635] prepare_alloc_pages.constprop.0+0x16f/0x560 [ 905.305668][T23635] __alloc_pages_noprof+0x190/0x25b0 [ 905.311001][T23635] ? __pfx_mark_lock+0x10/0x10 [ 905.315806][T23635] ? mark_lock+0xb5/0xc60 [ 905.320174][T23635] ? page_ext_get+0x34/0x310 [ 905.324808][T23635] ? __pfx_mark_lock+0x10/0x10 [ 905.329614][T23635] ? __pfx___alloc_pages_noprof+0x10/0x10 [ 905.335374][T23635] ? __lock_acquire+0xcc5/0x3c40 [ 905.340364][T23635] ? hlock_class+0x4e/0x130 [ 905.344910][T23635] ? __lock_acquire+0xcc5/0x3c40 [ 905.349895][T23635] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 905.355823][T23635] ? policy_nodemask+0xea/0x4e0 [ 905.360720][T23635] alloc_pages_mpol_noprof+0x2c9/0x610 [ 905.366232][T23635] ? __pfx_alloc_pages_mpol_noprof+0x10/0x10 [ 905.372257][T23635] ? find_held_lock+0x2d/0x110 [ 905.377075][T23635] folio_alloc_mpol_noprof+0x36/0xd0 [ 905.382405][T23635] shmem_alloc_folio+0x135/0x160 [ 905.387391][T23635] shmem_alloc_and_add_folio+0x48b/0xc00 [ 905.393071][T23635] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 905.399003][T23635] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 905.405188][T23635] ? shmem_huge_global_enabled+0x176/0x250 [ 905.411035][T23635] ? shmem_allowable_huge_orders+0xcd/0x3e0 [ 905.416980][T23635] shmem_get_folio_gfp+0x689/0x1530 [ 905.422222][T23635] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 905.427896][T23635] shmem_fault+0x200/0xae0 [ 905.432354][T23635] ? __pfx_shmem_fault+0x10/0x10 [ 905.437330][T23635] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 905.442996][T23635] ? rcu_is_watching+0x12/0xc0 [ 905.447803][T23635] ? __pfx_filemap_map_pages+0x10/0x10 [ 905.453296][T23635] __do_fault+0x10a/0x490 [ 905.457658][T23635] ? __pfx_filemap_map_pages+0x10/0x10 [ 905.463149][T23635] do_pte_missing+0x1a8/0x3e00 [ 905.467968][T23635] __handle_mm_fault+0x103c/0x2a40 [ 905.473134][T23635] ? __pfx___handle_mm_fault+0x10/0x10 [ 905.478630][T23635] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 905.484316][T23635] ? find_vma+0xc0/0x140 [ 905.488589][T23635] ? __pfx_find_vma+0x10/0x10 [ 905.493299][T23635] handle_mm_fault+0x3fa/0xaa0 [ 905.498107][T23635] do_user_addr_fault+0x7a3/0x13f0 [ 905.503254][T23635] exc_page_fault+0x5c/0xc0 [ 905.507798][T23635] asm_exc_page_fault+0x26/0x30 [ 905.512682][T23635] RIP: 0010:rep_movs_alternative+0x4a/0x70 [ 905.518538][T23635] Code: 75 f1 c3 cc cc cc cc 66 0f 1f 84 00 00 00 00 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 df 83 f9 08 73 e8 eb c9 a4 c3 cc cc cc cc 48 89 c8 48 c1 e9 03 83 e0 07 f3 48 a5 89 c1 [ 905.538181][T23635] RSP: 0018:ffffc900033a7a30 EFLAGS: 00050206 [ 905.544283][T23635] RAX: 0000000000000001 RBX: 0000000000001000 RCX: 0000000000001000 [ 905.552283][T23635] RDX: 0000000000000000 RSI: ffff888041688000 RDI: 0000000000001000 [ 905.560294][T23635] RBP: ffffc900033a7da0 R08: 0000000000000000 R09: ffffed10082d11ff [ 905.568273][T23635] R10: ffff888041688fff R11: 0000000000000000 R12: 0000000000002000 [ 905.576251][T23635] R13: 00007ffffffff000 R14: ffff888041688000 R15: 0000000000001000 [ 905.584245][T23635] _copy_to_iter+0x384/0x1400 [ 905.588945][T23635] ? pipe_read+0x13b/0x13f0 [ 905.593458][T23635] ? aa_file_perm+0x4c6/0xfe0 [ 905.598142][T23635] ? __pfx__copy_to_iter+0x10/0x10 [ 905.603263][T23635] ? __pfx___mutex_lock+0x10/0x10 [ 905.608310][T23635] copy_page_to_iter+0xf1/0x180 [ 905.613179][T23635] pipe_read+0x53d/0x13f0 [ 905.617532][T23635] ? __pfx_pipe_read+0x10/0x10 [ 905.622308][T23635] ? apparmor_file_permission+0x251/0x400 [ 905.628044][T23635] ? bpf_lsm_file_permission+0x9/0x10 [ 905.633440][T23635] ? security_file_permission+0x71/0x210 [ 905.639089][T23635] vfs_read+0xa4c/0xbe0 [ 905.643257][T23635] ? __pfx_vfs_read+0x10/0x10 [ 905.647942][T23635] ? __fget_files+0x40/0x3a0 [ 905.652556][T23635] ksys_read+0x207/0x250 [ 905.656808][T23635] ? __pfx_ksys_read+0x10/0x10 [ 905.661587][T23635] do_syscall_64+0xcd/0x250 [ 905.666108][T23635] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 905.672010][T23635] RIP: 0033:0x7f3b3b185d19 [ 905.676429][T23635] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 905.696045][T23635] RSP: 002b:00007f3b3bfab038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 905.704465][T23635] RAX: ffffffffffffffda RBX: 00007f3b3b376080 RCX: 00007f3b3b185d19 [ 905.712441][T23635] RDX: 00000000fffffdef RSI: 0000000000000000 RDI: 0000000000000003 [ 905.720419][T23635] RBP: 00007f3b3bfab090 R08: 0000000000000000 R09: 0000000000000000 [ 905.728391][T23635] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 905.736363][T23635] R13: 0000000000000000 R14: 00007f3b3b376080 R15: 00007ffdf610bfb8 [ 905.744361][T23635] [ 905.747407][ C0] vkms_vblank_simulate: vblank timer overrun can't run '/sbi[ 905.895727][T23639] netlink: 28 bytes leftover after parsing attributes in process `syz.9.4684'. can't run '/sbi[ 907.547925][T23668] kernel read not supported for file /#)-\&[} (pid: 23668 comm: syz.8.4689) [ 907.633946][ T29] audit: type=1800 audit(4294967377.002:210): pid=23668 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.4689" name="#)-\&[}" dev="mqueue" ino=85962 res=0 errno=0 [ 907.655704][T23668] netlink: 28 bytes leftover after parsing attributes in process `syz.8.4689'. can't run '/sbi[ 907.928773][T23677] FAULT_INJECTION: forcing a failure. [ 907.928773][T23677] name failslab, interval 1, probability 0, space 0, times 0 [ 907.960520][T23677] CPU: 1 UID: 0 PID: 23677 Comm: syz.8.4692 Not tainted 6.13.0-rc2-syzkaller-00382-gdccbe2047a5b #0 [ 907.971345][T23677] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 907.981431][T23677] Call Trace: [ 907.984734][T23677] [ 907.987684][T23677] dump_stack_lvl+0x16c/0x1f0 [ 907.992403][T23677] should_fail_ex+0x497/0x5b0 [ 907.997136][T23677] should_failslab+0xc2/0x120 [ 908.001855][T23677] kmem_cache_alloc_noprof+0x6e/0x3b0 [ 908.007271][T23677] ? dst_alloc+0x99/0x1a0 [ 908.011637][T23677] dst_alloc+0x99/0x1a0 [ 908.015832][T23677] rt_dst_alloc+0x35/0x3a0 [ 908.020287][T23677] ip_route_output_key_hash_rcu+0x8a5/0x2770 [ 908.026310][T23677] ip_route_output_key_hash+0x138/0x2e0 [ 908.031895][T23677] ? __pfx_ip_route_output_key_hash+0x10/0x10 [ 908.038001][T23677] ? __pfx_lock_release+0x10/0x10 [ 908.043055][T23677] ? trace_lock_acquire+0x14e/0x1f0 [ 908.048291][T23677] ? lockdep_hardirqs_on+0x7c/0x110 [ 908.053526][T23677] ip_route_output_flow+0x27/0x150 [ 908.058674][T23677] udp_sendmsg+0x1b92/0x29b0 [ 908.063298][T23677] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 908.068867][T23677] ? __pfx_udp_sendmsg+0x10/0x10 [ 908.073837][T23677] ? __pfx___might_resched+0x10/0x10 [ 908.079145][T23677] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 908.085053][T23677] ? aa_sk_perm+0x2f5/0xb20 [ 908.089579][T23677] ? __pfx_udp_sendmsg+0x10/0x10 [ 908.094532][T23677] inet_sendmsg+0x105/0x140 [ 908.099049][T23677] ____sys_sendmsg+0x907/0xb40 [ 908.103832][T23677] ? copy_msghdr_from_user+0x10b/0x160 [ 908.109313][T23677] ? __pfx_____sys_sendmsg+0x10/0x10 [ 908.114615][T23677] ? __lock_acquire+0xcc5/0x3c40 [ 908.119572][T23677] ? hlock_class+0x4e/0x130 [ 908.124085][T23677] ? __lock_acquire+0x15a9/0x3c40 [ 908.129130][T23677] ___sys_sendmsg+0x135/0x1e0 [ 908.133830][T23677] ? __pfx____sys_sendmsg+0x10/0x10 [ 908.139036][T23677] ? __pfx___lock_acquire+0x10/0x10 [ 908.144278][T23677] ? __pfx___might_resched+0x10/0x10 [ 908.149570][T23677] ? __might_fault+0xe3/0x190 [ 908.154263][T23677] __sys_sendmmsg+0x201/0x420 [ 908.158960][T23677] ? __pfx___sys_sendmmsg+0x10/0x10 [ 908.164181][T23677] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 908.170179][T23677] ? fput+0x67/0x440 [ 908.174088][T23677] ? ksys_write+0x1ba/0x250 [ 908.178613][T23677] ? __pfx_ksys_write+0x10/0x10 [ 908.183479][T23677] __x64_sys_sendmmsg+0x9c/0x100 [ 908.188430][T23677] ? lockdep_hardirqs_on+0x7c/0x110 [ 908.193642][T23677] do_syscall_64+0xcd/0x250 [ 908.198156][T23677] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 908.204060][T23677] RIP: 0033:0x7f3b3b185d19 [ 908.208483][T23677] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 908.228118][T23677] RSP: 002b:00007f3b3bfcc038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 908.236535][T23677] RAX: ffffffffffffffda RBX: 00007f3b3b375fa0 RCX: 00007f3b3b185d19 [ 908.244514][T23677] RDX: 00000000000009a6 RSI: 0000000000000000 RDI: 0000000000000003 [ 908.252487][T23677] RBP: 00007f3b3bfcc090 R08: 0000000000000000 R09: 0000000000000000 [ 908.260464][T23677] R10: 0000000007fffffe R11: 0000000000000246 R12: 0000000000000002 [ 908.268435][T23677] R13: 0000000000000000 R14: 00007f3b3b375fa0 R15: 00007ffdf610bfb8 [ 908.276425][T23677] [ 908.567345][T23672] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4690'. can't run '/sbi[ 909.436975][T23695] ------------[ cut here ]------------ [ 909.443076][T23695] WARNING: CPU: 1 PID: 23695 at mm/page_alloc.c:4727 __alloc_pages_noprof+0xeff/0x25b0 [ 909.452865][T23695] Modules linked in: [ 909.456804][T23695] CPU: 1 UID: 0 PID: 23695 Comm: syz.6.4696 Not tainted 6.13.0-rc2-syzkaller-00382-gdccbe2047a5b #0 [ 909.468304][T23695] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 909.479141][T23695] RIP: 0010:__alloc_pages_noprof+0xeff/0x25b0 [ 909.485401][T23695] Code: 24 2c 00 00 00 00 89 cd 0f 84 8b f9 ff ff 8b 34 24 48 89 da 8b 7c 24 08 e8 0e b3 fe ff e9 69 f9 ff ff c6 05 72 5f 16 0e 01 90 <0f> 0b 90 31 db e9 9f f3 ff ff 89 14 24 e8 9f a3 0c 00 8b 14 24 e9 [ 909.505223][T23695] RSP: 0018:ffffc900034f78e8 EFLAGS: 00010246 [ 909.511558][T23695] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 909.519761][T23695] RDX: 0000000000000000 RSI: 0000000000000013 RDI: 0000000000040cc0 [ 909.527918][T23695] RBP: 0000000000000000 R08: 0000000000000005 R09: 0000000000000100 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 909.536017][T23695] R10: 0000000000000100 R11: 0000000000000001 R12: 0000000000000013 [ 909.544684][T23695] R13: 0000000000040cc0 R14: 1ffff9200069ef31 R15: 00000000ffffffff [ 909.553096][T23695] FS: 00007f048883d6c0(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 909.562539][T23695] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 909.569686][T23695] CR2: 0000001b3300eff8 CR3: 0000000047356000 CR4: 00000000003526f0 [ 909.578171][T23695] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 909.586410][T23695] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 909.594516][T23695] Call Trace: [ 909.597816][T23695] [ 909.600842][T23695] ? __warn+0xea/0x3c0 [ 909.604956][T23695] ? __alloc_pages_noprof+0xeff/0x25b0 [ 909.610522][T23695] ? report_bug+0x3c0/0x580 [ 909.615071][T23695] ? handle_bug+0x54/0xa0 [ 909.619502][T23695] ? exc_invalid_op+0x17/0x50 [ 909.624394][T23695] ? asm_exc_invalid_op+0x1a/0x20 [ 909.629688][T23695] ? __alloc_pages_noprof+0xeff/0x25b0 [ 909.635201][T23695] ? stack_trace_save+0x95/0xd0 [ 909.640569][T23695] ? __pfx_stack_trace_save+0x10/0x10 [ 909.645989][T23695] ? hlock_class+0x4e/0x130 [ 909.650995][T23695] ? stack_depot_save_flags+0x28/0x9e0 [ 909.656598][T23695] ? __pfx___alloc_pages_noprof+0x10/0x10 [ 909.662470][T23695] ? kasan_save_stack+0x33/0x60 [ 909.667833][T23695] ? __kasan_kmalloc+0xaa/0xb0 [ 909.673266][T23695] ? safesetid_uid_file_write+0x84/0xc0 [ 909.678861][T23695] ? vfs_write+0x24c/0x1150 [ 909.683466][T23695] ? ksys_write+0x12b/0x250 [ 909.688103][T23695] ? do_syscall_64+0xcd/0x250 [ 909.692851][T23695] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 909.698980][T23695] ___kmalloc_large_node+0x84/0x1b0 [ 909.704295][T23695] __kmalloc_large_node_noprof+0x1c/0x70 [ 909.710101][T23695] __kmalloc_node_track_caller_noprof.cold+0x5/0x5f [ 909.716742][T23695] ? handle_policy_update+0x188/0x11e0 [ 909.722332][T23695] memdup_user_nul+0x2b/0x110 [ 909.727192][T23695] handle_policy_update+0x188/0x11e0 [ 909.732746][T23695] ? __pfx_handle_policy_update+0x10/0x10 [ 909.738507][T23695] ? apparmor_capable+0x114/0x1d0 [ 909.744063][T23695] ? bpf_lsm_capable+0x9/0x10 [ 909.748784][T23695] ? security_capable+0x7e/0x260 [ 909.754198][T23695] safesetid_uid_file_write+0x84/0xc0 [ 909.759672][T23695] ? __pfx_safesetid_uid_file_write+0x10/0x10 [ 909.765775][T23695] vfs_write+0x24c/0x1150 [ 909.770688][T23695] ? __pfx_vfs_write+0x10/0x10 [ 909.775483][T23695] ? do_futex+0x123/0x350 [ 909.780444][T23695] ? __pfx_do_futex+0x10/0x10 [ 909.785168][T23695] ? ktime_get_ts64+0x2d4/0x400 [ 909.790283][T23695] ? __x64_sys_futex+0x1e1/0x4c0 [ 909.795267][T23695] ? __x64_sys_futex+0x1ea/0x4c0 [ 909.800316][T23695] ksys_write+0x12b/0x250 [ 909.804682][T23695] ? __pfx_ksys_write+0x10/0x10 [ 909.809630][T23695] do_syscall_64+0xcd/0x250 [ 909.814176][T23695] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 909.820190][T23695] RIP: 0033:0x7f0487985d19 [ 909.824635][T23695] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 909.844844][T23695] RSP: 002b:00007f048883d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 909.853981][T23695] RAX: ffffffffffffffda RBX: 00007f0487b75fa0 RCX: 00007f0487985d19 [ 909.862113][T23695] RDX: 00000000fffffdef RSI: 0000000000000000 RDI: 0000000000000003 [ 909.870616][T23695] RBP: 00007f0487a01a20 R08: 0000000000000000 R09: 0000000000000000 [ 909.879239][T23695] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 909.887259][T23695] R13: 0000000000000000 R14: 00007f0487b75fa0 R15: 00007ffd7505e438 [ 909.895451][T23695] [ 909.898497][T23695] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 909.905792][T23695] CPU: 1 UID: 0 PID: 23695 Comm: syz.6.4696 Not tainted 6.13.0-rc2-syzkaller-00382-gdccbe2047a5b #0 [ 909.916581][T23695] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 909.926661][T23695] Call Trace: [ 909.929957][T23695] [ 909.932906][T23695] dump_stack_lvl+0x3d/0x1f0 [ 909.937529][T23695] panic+0x71d/0x800 [ 909.941462][T23695] ? __pfx_panic+0x10/0x10 [ 909.945906][T23695] ? show_trace_log_lvl+0x29d/0x3d0 [ 909.951131][T23695] ? __alloc_pages_noprof+0xeff/0x25b0 [ 909.956607][T23695] check_panic_on_warn+0xab/0xb0 [ 909.961565][T23695] __warn+0xf6/0x3c0 [ 909.965473][T23695] ? __alloc_pages_noprof+0xeff/0x25b0 [ 909.970953][T23695] report_bug+0x3c0/0x580 [ 909.975305][T23695] handle_bug+0x54/0xa0 [ 909.979475][T23695] exc_invalid_op+0x17/0x50 [ 909.983997][T23695] asm_exc_invalid_op+0x1a/0x20 [ 909.988860][T23695] RIP: 0010:__alloc_pages_noprof+0xeff/0x25b0 [ 909.994946][T23695] Code: 24 2c 00 00 00 00 89 cd 0f 84 8b f9 ff ff 8b 34 24 48 89 da 8b 7c 24 08 e8 0e b3 fe ff e9 69 f9 ff ff c6 05 72 5f 16 0e 01 90 <0f> 0b 90 31 db e9 9f f3 ff ff 89 14 24 e8 9f a3 0c 00 8b 14 24 e9 [ 910.014563][T23695] RSP: 0018:ffffc900034f78e8 EFLAGS: 00010246 [ 910.020638][T23695] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 910.028611][T23695] RDX: 0000000000000000 RSI: 0000000000000013 RDI: 0000000000040cc0 [ 910.036585][T23695] RBP: 0000000000000000 R08: 0000000000000005 R09: 0000000000000100 [ 910.044558][T23695] R10: 0000000000000100 R11: 0000000000000001 R12: 0000000000000013 [ 910.052531][T23695] R13: 0000000000040cc0 R14: 1ffff9200069ef31 R15: 00000000ffffffff [ 910.060522][T23695] ? stack_trace_save+0x95/0xd0 [ 910.065389][T23695] ? __pfx_stack_trace_save+0x10/0x10 [ 910.070768][T23695] ? hlock_class+0x4e/0x130 [ 910.075288][T23695] ? stack_depot_save_flags+0x28/0x9e0 [ 910.081205][T23695] ? __pfx___alloc_pages_noprof+0x10/0x10 [ 910.086961][T23695] ? kasan_save_stack+0x33/0x60 [ 910.091853][T23695] ? __kasan_kmalloc+0xaa/0xb0 [ 910.096634][T23695] ? safesetid_uid_file_write+0x84/0xc0 [ 910.102195][T23695] ? vfs_write+0x24c/0x1150 [ 910.106713][T23695] ? ksys_write+0x12b/0x250 [ 910.111228][T23695] ? do_syscall_64+0xcd/0x250 [ 910.115924][T23695] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 910.122032][T23695] ___kmalloc_large_node+0x84/0x1b0 [ 910.127251][T23695] __kmalloc_large_node_noprof+0x1c/0x70 [ 910.132902][T23695] __kmalloc_node_track_caller_noprof.cold+0x5/0x5f [ 910.139514][T23695] ? handle_policy_update+0x188/0x11e0 [ 910.144991][T23695] memdup_user_nul+0x2b/0x110 [ 910.149689][T23695] handle_policy_update+0x188/0x11e0 [ 910.154986][T23695] ? __pfx_handle_policy_update+0x10/0x10 [ 910.160714][T23695] ? apparmor_capable+0x114/0x1d0 [ 910.165755][T23695] ? bpf_lsm_capable+0x9/0x10 [ 910.170438][T23695] ? security_capable+0x7e/0x260 [ 910.175390][T23695] safesetid_uid_file_write+0x84/0xc0 [ 910.180770][T23695] ? __pfx_safesetid_uid_file_write+0x10/0x10 [ 910.186846][T23695] vfs_write+0x24c/0x1150 [ 910.191187][T23695] ? __pfx_vfs_write+0x10/0x10 [ 910.195961][T23695] ? do_futex+0x123/0x350 [ 910.200305][T23695] ? __pfx_do_futex+0x10/0x10 [ 910.204992][T23695] ? ktime_get_ts64+0x2d4/0x400 [ 910.209893][T23695] ? __x64_sys_futex+0x1e1/0x4c0 [ 910.214839][T23695] ? __x64_sys_futex+0x1ea/0x4c0 [ 910.219793][T23695] ksys_write+0x12b/0x250 [ 910.224149][T23695] ? __pfx_ksys_write+0x10/0x10 [ 910.229014][T23695] do_syscall_64+0xcd/0x250 [ 910.233534][T23695] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 910.239438][T23695] RIP: 0033:0x7f0487985d19 [ 910.243856][T23695] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 910.263472][T23695] RSP: 002b:00007f048883d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 910.271892][T23695] RAX: ffffffffffffffda RBX: 00007f0487b75fa0 RCX: 00007f0487985d19 [ 910.279865][T23695] RDX: 00000000fffffdef RSI: 0000000000000000 RDI: 0000000000000003 [ 910.287838][T23695] RBP: 00007f0487a01a20 R08: 0000000000000000 R09: 0000000000000000 [ 910.295813][T23695] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 910.303785][T23695] R13: 0000000000000000 R14: 00007f0487b75fa0 R15: 00007ffd7505e438 [ 910.311773][T23695] [ 910.315059][T23695] Kernel Offset: disabled [ 910.319443][T23695] Rebooting in 86400 seconds..