last executing test programs: 12m6.239728987s ago: executing program 2 (id=58): socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_full_fops_mem(0xffffffffffffff9c, &(0x7f0000002800), 0x20000, 0x0) read$auto(r0, &(0x7f0000002840)='\x00', 0x10000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mmap$auto(0x0, 0x4020009, 0xdd, 0xffc, 0x401, 0x3) r1 = socket(0x11, 0x80003, 0x300) setsockopt$auto(r1, 0x107, 0x12, 0x0, 0x4) r2 = socket(0x10, 0x2, 0x4) mmap$auto(0x0, 0x400008, 0x6, 0x9b72, 0x2, 0x8000) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000080)={{0x0, 0x3000000, 0x0, 0x1, 0x0, 0x10000000000000, 0x2}, 0x895}, 0x3, 0x0) r3 = openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000000), 0x40200, 0x0) r4 = getpid() process_vm_readv$auto(r4, &(0x7f0000000000)={0x0, 0xfff}, 0x1, &(0x7f0000000280)={&(0x7f0000000080), 0xffffffff}, 0x6, 0x0) ioctl$auto_dvb_demux_fops_dmxdev(r3, 0x403c6f2b, 0x0) ioctl$auto_dvb_demux_fops_dmxdev(r3, 0x403c6f2b, 0x0) io_uring_setup$auto(0x4bf15e08, &(0x7f0000000000)={0x401, 0x8, 0xfe, 0x6fb3, 0x8a, 0x9, 0xffffffffffffffff, [0xff, 0x9, 0x7f], {0x2, 0x7, 0x3032, 0xe, 0xf, 0x5, 0x5, 0xfffffff9, 0xf08a2b3}, {0x0, 0xfc, 0x6, 0x0, 0x0, 0xf89, 0x9, 0x837, 0x8}}) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'dummy0\x00'}) r6 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00') sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000001400"], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x2404c000) write$auto(r2, &(0x7f0000000000), 0x2fb) io_setup$auto(0x7ffe, 0x0) semctl$auto(0x7fffffff, 0x101, 0xc, 0x58) lstat$auto(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0xffffffffffffffff, 0x200, 0x101, 0x0, 0xffffffffffffffff, 0xee00, 0x0, 0x0, 0x4, 0x0, 0x4, 0x3, 0x4, 0x5a, 0x3, 0x4, 0x8}) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00') close_range$auto(0x0, 0xfffffffffffff000, 0x2) bpf$auto(0x5, &(0x7f0000000000)=@iter_create={0x15, 0x8}, 0x7) mprotect$auto(0x1ffff000, 0x8000000000002001, 0x4) bpf$auto(0xfffffffe, &(0x7f0000000180)=@raw_tracepoint={0x8, r6, 0x0, 0x7fff}, 0x6) 12m5.767921322s ago: executing program 2 (id=64): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socket(0x10, 0x2, 0x0) sendmsg$auto_BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000326bd7000fedbdf2502"], 0x28}, 0x1, 0x0, 0x0, 0x4c894}, 0x20000087) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB='\"\x00\''], 0x1ac}}, 0x40000) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x44001}, 0x2e11ce99e20695cd) close_range$auto(0x2, 0xa, 0x0) socket(0xa, 0x801, 0x84) (async) socket(0x2, 0x2, 0x0) (async) setsockopt$auto(0x4, 0x0, 0x20, 0xfffffffffffffffe, 0x0) socket(0xa, 0x2, 0x88) openat$auto_ima_measure_policy_ops_ima_fs(0xffffffffffffff9c, &(0x7f0000000000), 0x48001, 0x0) (async) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0xc) (async) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) (async) r0 = socket(0x23, 0x2, 0x0) sendmsg$auto_NL80211_CMD_EXTERNAL_AUTH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x4048800}, 0x40) (async) ioperm$auto(0x7, 0x6, 0x2) (async) syz_clone(0x800000, 0x0, 0x0, 0x0, 0x0, 0x0) 12m5.665586377s ago: executing program 2 (id=66): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001980)={0x3c, r1, 0x1b, 0x70bd26, 0x25dfdbfd, {}, [@OVS_PACKET_ATTR_PROBE={0x4}, @OVS_PACKET_ATTR_ACTIONS={0xc, 0x3, 0x0, 0x1, [@typed={0x8, 0xd, 0x0, 0x0, @uid}]}, @OVS_PACKET_ATTR_PACKET={0x12, 0x1, "898771f1c19f1779048590828847"}, @OVS_PACKET_ATTR_KEY={0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4004040}, 0xc800) socket$nl_generic(0x10, 0x3, 0x10) inotify_init1$auto(0x0) syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000040), r0) 12m5.600908928s ago: executing program 2 (id=67): r0 = socket(0x2b, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x4001, @loopback}, 0x6b) mprotect$auto(0x1ffff000, 0x8000000000000001, 0xd) r1 = socket(0x2a, 0x2, 0x1) connect$auto(r1, &(0x7f00000000c0)=@qipcrtr={0x2a, 0x2, 0x8000}, 0x57) open(&(0x7f0000000000)='./file0\x00', 0x261c2, 0x84) fallocate$auto(0x8000000000000003, 0x0, 0xd, 0x2cbd5d) close_range$auto(0x2, 0x8, 0x0) openat$auto_evm_xattr_ops_evm_secfs(0xffffffffffffff9c, &(0x7f00000001c0), 0x200100, 0x0) socket(0x2, 0x80002, 0x73) socket(0xa, 0x5, 0x0) bind$auto(r0, &(0x7f0000000180)=@generic={0x8, "6b2450b884a5af16de2f5ce0dd11"}, 0x3a9e) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) connect$auto(0x3, &(0x7f00000000c0)=@in={0x2, 0x0, @rand_addr=0xfffffffe}, 0x55) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) io_uring_setup$auto(0x1, 0x0) setsockopt$auto(0x3, 0x10000000084, 0x18, 0x0, 0x8) ftruncate$auto(0x3, 0x700) close_range$auto(0x2, 0x8000, 0x0) socket(0x12, 0x80000, 0x81) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x40086602, 0x0) sendmsg$auto_ETHTOOL_MSG_MM_GET(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x14, 0x0, 0x400, 0x70bd29, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x8001) sendmsg$auto_NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x20040045) 12m5.25201286s ago: executing program 2 (id=71): setresuid$auto(0xffffffffffffffff, 0x8, 0x8000) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00') close_range$auto(0x0, 0xfffffffffffff000, 0x2) bpf$auto(0x5, &(0x7f0000000000)=@iter_create={0x15, 0x8}, 0x7) mprotect$auto(0x1ffff000, 0x8000000000002001, 0x4) bpf$auto(0x0, &(0x7f0000000000)=@bpf_attr_7={@btf_id=0xe9f, 0x4, 0x1c}, 0xa3) bpf$auto(0x18, &(0x7f0000000040)=@bpf_attr_4={0x7, 0xffffffffffffffff, 0x5}, 0x92) tkill$auto(0x80000000000001, 0x7) mprotect$auto(0x1ffff000, 0x7fffffff, 0x0) semtimedop$auto(0x0, 0x0, 0x1, &(0x7f0000000080)={0x7f, 0x9}) mprotect$auto(0x1ffff000, 0x8000000000000001, 0xd) lsm_get_self_attr$auto(0x64, 0x0, &(0x7f0000002440)=0x1ff, 0x0) pselect6$auto(0x400, &(0x7f0000000000)={[0x8000000000000000, 0xff, 0x909, 0x9, 0x4cf, 0x9, 0x7fffffffffffffff, 0x7, 0xffff, 0x1, 0x7ff, 0xa, 0x8, 0x3, 0x401, 0xff]}, &(0x7f00000000c0)={[0x3, 0x2, 0x62df, 0x7fffffffffffffff, 0x9, 0x10000, 0x9, 0x6, 0x5902, 0x8, 0x8, 0xfffffffffffffff9, 0xa, 0x60, 0x3c37, 0x1]}, &(0x7f0000000140)={[0xae3, 0x1, 0x9, 0xffff, 0xc00000, 0x2, 0x80, 0x8, 0xb, 0x2, 0x7, 0x2, 0x0, 0x2, 0xffffffffffff871d, 0x80000000]}, &(0x7f00000001c0)={0x3, 0xb}, &(0x7f0000000200)="caae3b977b4d5278cc956c1dbde287d671781acc4935633e8f209eb768897a6c0d7041c930e660a70259020391077ab0c98cecff0aa4a2e917a984b31f1eb5d3d2a967d559cfab72387b3cbd0da8a15644a7d17b48435c73140fba7011695bb7dc34dfaf27b598e4f7a7a3e6f1324093e130fd8f64fb9104c47b1d519daa86cbf13f2110ab67aa71c5afafdded1ed8c640cd5551aa1a3f8769c6bfeaff03a1e80326135cc29819e2cdb5ae6813c5ae4b22071b64b0cbe93a5a69289ef5c5965b43dbb50ca481556580c687c4a814c839cfb19d50e20f") mmap$auto(0x0, 0xa, 0xdb, 0x9b72, 0x5, 0x8000) ioctl$auto(0xffffffffffffffff, 0x40104d09, 0x7) 12m4.999581582s ago: executing program 2 (id=76): sysfs$auto(0x2, 0x4e, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x800008000) capget$auto(0x0, 0xfffffffffffffffe) lsm_list_modules$auto(0x0, 0x0, 0x0) r0 = socket(0x2, 0x801, 0x106) getsockopt$auto(r0, 0x11c, 0x2, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) r1 = socket(0x2, 0x80002, 0x73) socket(0x2, 0x1, 0x84) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x54) listen$auto(0x3, 0x81) syz_genetlink_get_family_id$auto_hsr(&(0x7f0000000240), r1) accept$auto(0x3, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS1\x00', 0xc8500, 0x0) close_range$auto(0x0, 0xffffffffffffffff, 0x5) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sysfs$auto(0x2, 0x10000000000048, 0x0) r2 = fsopen$auto(0x0, 0x1) close_range$auto(0x2, 0x8, 0x0) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x8c00, 0x0) ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$auto(0x3, 0x400caed0, r2) socketpair$auto(0x1e, 0x1, 0x0, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x0, 0x0) statmount$auto(0x0, &(0x7f0000000040)={0x0, 0x0, 0x38, 0xffffff01, 0x9, 0x8000000000000003, 0x8, 0x7, 0x9, 0x5, 0x6, 0x9, 0x3, 0x8, 0x5, 0x8000000000000f, 0x0, 0x9, 0x10001, 0x6, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}, 0x800, 0x0) close_range$auto(0x2, 0x8, 0x0) 12m4.797161704s ago: executing program 32 (id=76): sysfs$auto(0x2, 0x4e, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x800008000) capget$auto(0x0, 0xfffffffffffffffe) lsm_list_modules$auto(0x0, 0x0, 0x0) r0 = socket(0x2, 0x801, 0x106) getsockopt$auto(r0, 0x11c, 0x2, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) r1 = socket(0x2, 0x80002, 0x73) socket(0x2, 0x1, 0x84) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x54) listen$auto(0x3, 0x81) syz_genetlink_get_family_id$auto_hsr(&(0x7f0000000240), r1) accept$auto(0x3, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS1\x00', 0xc8500, 0x0) close_range$auto(0x0, 0xffffffffffffffff, 0x5) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sysfs$auto(0x2, 0x10000000000048, 0x0) r2 = fsopen$auto(0x0, 0x1) close_range$auto(0x2, 0x8, 0x0) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x8c00, 0x0) ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$auto(0x3, 0x400caed0, r2) socketpair$auto(0x1e, 0x1, 0x0, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x0, 0x0) statmount$auto(0x0, &(0x7f0000000040)={0x0, 0x0, 0x38, 0xffffff01, 0x9, 0x8000000000000003, 0x8, 0x7, 0x9, 0x5, 0x6, 0x9, 0x3, 0x8, 0x5, 0x8000000000000f, 0x0, 0x9, 0x10001, 0x6, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}, 0x800, 0x0) close_range$auto(0x2, 0x8, 0x0) 9m31.896145518s ago: executing program 1 (id=876): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001980)={0x4c, r1, 0x1b, 0x70bd26, 0x25dfdbfd, {}, [@OVS_PACKET_ATTR_PROBE={0x4}, @OVS_PACKET_ATTR_ACTIONS={0x1c, 0x3, 0x0, 0x1, [@nested={0x8, 0x14, 0x0, 0x1, [@nested={0x4, 0x7}]}, @typed={0xf, 0xd, 0x0, 0x0, @str='ovs_packet\x00'}]}, @OVS_PACKET_ATTR_PACKET={0x12, 0x1, "89870ff1c59f1779048590828847"}, @OVS_PACKET_ATTR_KEY={0x4}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4004040}, 0xc800) socket(0x10, 0x2, 0x4) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid$auto(r2, 0x0) wait4$auto(0x0, 0x0, 0x9, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_wireguard(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$auto_WG_CMD_SET_DEVICE(r3, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000c40)={0x38, r4, 0x1, 0x70bd28, 0x25dfdbff, {}, [@WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, "7729ecac5e9239d0c4058eac0405576c2cd59ffc84b3098afa677190f34d1790"}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x10) 9m31.657158165s ago: executing program 1 (id=878): sethostname$auto(&(0x7f0000000000)='/dev/bus/usb/015/001\x00', 0x8) mknod$auto(&(0x7f0000000040)=':,\x00', 0xc9, 0xc8) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x20540, 0x0) openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/swaps\x00', 0x40000, 0x0) select$auto(0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x8, 0x3}) poll$auto(&(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x7}, 0x100, 0xfffffffd) mprotect$auto(0x1ffff000, 0x8000000000000001, 0xd) mount$auto(&(0x7f0000000000)='pimreg\x00', &(0x7f0000000040)='\x00', 0x0, 0x10dfd057, 0x0) socket(0x1e, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x15, 0x5, 0x0) socket(0xa, 0x2, 0x3a) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) getsockopt$auto(0x6, 0x40000000029, 0x1d, 0xfffffffffffffffe, 0x0) mount$auto(0x0, &(0x7f0000000040)='802_15_4_MAC\x00', 0x0, 0xaac, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/015/001\x00', 0xa901, 0x0) 9m30.702107537s ago: executing program 1 (id=883): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffff7, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) io_uring_setup$auto(0x9, 0x0) openat$auto_vcs_fops_vc_screen(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs1\x00', 0x2, 0x0) poll$auto(0x0, 0x1, 0xfffffffb) select$auto(0x9, &(0x7f0000000080)={[0x20000009, 0xfffffffffffffffc, 0x9, 0x5, 0xc, 0x0, 0x3, 0x1ffe000, 0xcad, 0x2, 0x9, 0xf, 0xa657, 0x202, 0x6, 0x1]}, 0x0, 0x0, 0x0) write$auto(0x3, 0x0, 0xffd8) 9m30.557606733s ago: executing program 1 (id=884): mmap$auto(0x0, 0x20009, 0x7, 0xeb1, 0x401, 0x8000) open(&(0x7f0000000000)='./file0\x00', 0x261c2, 0x84) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptyd7\x00', 0x42003, 0x0) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/card0/pcm0p/sub6/sw_params\x00', 0x2c8480, 0x0) select$auto(0x5, &(0x7f0000000080)={[0x20000009, 0xfffffffffffffffc, 0x9, 0x5, 0xc, 0x3, 0x3, 0x1ffe000, 0xcad, 0x2, 0x9, 0xf, 0xa657, 0x202, 0x6, 0x1]}, 0x0, 0x0, 0x0) r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000200)='/proc/asound/card1/pcm1p/sub4/info\x00', 0x8000, 0x0) read$auto_proc_reg_file_ops_compat_inode(r0, &(0x7f00000000c0)=""/10, 0xa) r1 = socket(0x2, 0x5, 0x0) sendmmsg$auto(r1, &(0x7f00000003c0)={{&(0x7f0000000040), 0x10, 0x0, 0x7, 0x0, 0x2, 0xb}, 0xa7}, 0x7, 0x7fffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), r2) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="d0040000", @ANYRES16=r3, @ANYBLOB="2f212cbd7000fcdbdf252100000008000300", @ANYRES32=r4, @ANYBLOB="b1042d8010"], 0x4d0}}, 0x4000000) ppoll$auto(&(0x7f0000000040)={0xffffffffffffffff, 0x3, 0x1}, 0x9, &(0x7f0000000080)={0x6, 0x3}, &(0x7f00000000c0)={0x1}, 0x8) open(&(0x7f0000000000)='./file0\x00', 0x261c2, 0x84) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000240), r5) r6 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) semctl$auto(0x2, 0x800, 0x7, 0xa) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$auto_NL80211_CMD_SET_WIPHY(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000380)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01002dbd7000fddbdf250800030008000300", @ANYRES32=r8], 0x24}, 0x1, 0x0, 0x0, 0x4000023}, 0x80) ppoll$auto(0x0, 0x9, 0x0, 0x0, 0x8) write$auto_drm_connector_fops_drm_debugfs(0xffffffffffffffff, &(0x7f0000000100)="66958ddde5c88f39d148b0dfb04f2842b30695684c672af7cf29f9eea007e5ddfb4aef052597b69f07cc3600475a6b63b3fab7db1ec676f35a39a820a06ea908bf373b0a4c", 0x45) close_range$auto(0x2, 0x8000, 0x0) r9 = socket(0xa, 0x2, 0x88) socket$nl_generic(0x10, 0x3, 0x10) r10 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000280)={'vcan0\x00', 0x0}) bpf$auto(0x0, &(0x7f00000000c0)=@bpf_attr_5={@target_ifindex=r11, r10, 0x4, 0x1ff, r9, @relative_id=0x13, 0xe600}, 0xf) 9m29.555399135s ago: executing program 1 (id=892): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'geneve0\x00', 0x0}) sendmsg$auto_BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000000)={0x1c, 0x0, 0x30f4b0fcc8d9477d, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8}, 0x4000044) r2 = socket(0xa, 0x5, 0x84) sendto$auto(r2, 0x0, 0x401, 0x101, &(0x7f0000000000)=@generic={0xa, "e2e18340cba8fe8000"}, 0x1c) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x3, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4000894}, 0x800) bpf$auto(0x0, &(0x7f00000001c0)=@test={0xffffffffffffffff, 0xffff, 0xfffff0b6, 0xffff, 0x84, 0xac1, 0x2, 0x36242398, 0x9, 0x3bb, 0x7, 0xffff, 0x6, 0x81, 0x68198}, 0x6f0) sendmsg$auto_ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="d4000000", @ANYRES16=0x0, @ANYBLOB="100027bd7000fbdbdf2518000000200001800247eea41fac000014000200766574683100000000000000000000000800070063fbffff0500060001000000840002803d00488013b37090badc49d6dc93876646d25a4d297d01cd3b7da38d12889cc50d505f353dc42d0a3c0a14c7b46428910708003600", @ANYRES32=0x0, @ANYBLOB="0400b3800000003d003b800400a4800c009a00008000000000000004008680c16ab1b1b39dcaa14b6af7dcc011b43cf706e562811c62b28a702b72e0a87126700294f2350000000c000180080003"], 0xd4}, 0x1, 0x0, 0x0, 0x20000010}, 0x20008000) sendmsg$auto_ETHTOOL_MSG_WOL_SET(0xffffffffffffffff, &(0x7f0000002cc0)={0x0, 0x0, &(0x7f0000002c80)={&(0x7f0000000180)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYBLOB="010027bd"], 0x2c}, 0x1, 0x0, 0x0, 0x4801}, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="12"], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000040)={{0x0, 0x2, &(0x7f0000000280)={0x0, 0xc4}, 0x1, 0x0, 0xffffffffffffffff, 0x9}, 0x7}, 0x3, 0x20) bpf$auto(0x7, &(0x7f00000000c0)=@raw_tracepoint={0x9, 0x0, 0x0, 0x8001}, 0x3d) mmap$auto(0x0, 0x4020009, 0x7ff, 0xeb1, 0x401, 0x8000) r3 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$auto_PPPIOCSMRU(r3, 0xc004743e, 0x0) write$auto(0x3, 0x0, 0x1) 9m28.587700907s ago: executing program 1 (id=895): mmap$auto(0x0, 0x9, 0x3, 0x8012, 0x3, 0x8000) (async) sendfile$auto(0x6, 0x3, 0x0, 0x8000) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) (async) unshare$auto(0x40000080) (async) writev$auto(0x1, &(0x7f0000000100)={0x0, 0x400000000000fdef}, 0x1) (async) madvise$auto(0x0, 0xffffffffffff0005, 0x19) munmap$auto(0x20001000, 0x7) r0 = openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f0000000100)='/proc/filesystems\x00', 0x8480, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendfile$auto(r1, r0, &(0x7f0000000500)=0x8, 0x2) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket(0x2, 0x3, 0xa) lsm_list_modules$auto(0x0, &(0x7f0000000100)=0xbefc, 0x0) (async) ioctl$auto(0x1, 0x89a0, 0x8) 9m28.469264323s ago: executing program 33 (id=895): mmap$auto(0x0, 0x9, 0x3, 0x8012, 0x3, 0x8000) (async) sendfile$auto(0x6, 0x3, 0x0, 0x8000) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) (async) unshare$auto(0x40000080) (async) writev$auto(0x1, &(0x7f0000000100)={0x0, 0x400000000000fdef}, 0x1) (async) madvise$auto(0x0, 0xffffffffffff0005, 0x19) munmap$auto(0x20001000, 0x7) r0 = openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f0000000100)='/proc/filesystems\x00', 0x8480, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendfile$auto(r1, r0, &(0x7f0000000500)=0x8, 0x2) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket(0x2, 0x3, 0xa) lsm_list_modules$auto(0x0, &(0x7f0000000100)=0xbefc, 0x0) (async) ioctl$auto(0x1, 0x89a0, 0x8) 59.335740647s ago: executing program 3 (id=5139): sendmsg$auto_BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB='(\x00\x00{', @ANYRES16=0x0, @ANYBLOB="000326bd7000fedbdf2502000000080027000e0000000a0010"], 0x28}, 0x1, 0x0, 0x0, 0x4c894}, 0x24008000) (async) r0 = socket(0x10, 0x2, 0x0) (async) openat$auto_configfs_file_operations_configfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/config/nvmet/discovery_nqn\x00', 0x80000, 0x0) r1 = openat$auto_mousedev_fops_mousedev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/mice\x00', 0x42, 0x0) write$auto_mousedev_fops_mousedev(r1, &(0x7f0000000040)='\\', 0x1) (async) r2 = timerfd_create$auto(0x3, 0x3) r3 = syz_genetlink_get_family_id$auto_mac802154_hwsim(&(0x7f00000000c0), 0xffffffffffffffff) fsetxattr$auto(0xffffffffffffffff, 0x0, 0x0, 0x1, 0x0) (async) recvfrom$auto(r1, &(0x7f0000000180)="22de8dcf04d457c4af507ba24c96940fc3a5b44e4ea51b349710", 0x0, 0x4, &(0x7f0000000200)=@isdn={0x22, 0x2, 0x8, 0xfc, 0x1}, &(0x7f0000000240)=0xfffffffb) sendmsg$auto_MAC802154_HWSIM_CMD_DEL_RADIO(r2, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000100)={&(0x7f0000001840)=ANY=[@ANYBLOB="06000000", @ANYRES16=r3, @ANYBLOB="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", @ANYRES32=r1, @ANYBLOB="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"], 0x16b8}, 0x1, 0x0, 0x0, 0x800}, 0x8000) r4 = openat$auto_ftrace_enable_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/tracing/events/vmalloc/free_vmap_area_noflush/enable\x00', 0x140, 0x0) (async) openat$auto_tracing_fops_trace(0xffffffffffffff9c, &(0x7f0000000280)='/sys/kernel/tracing/per_cpu/cpu0/trace\x00', 0x202, 0x0) sendmsg$auto_MAC802154_HWSIM_CMD_DEL_RADIO(r0, &(0x7f0000000700)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000006c0)={&(0x7f0000000c00)=ANY=[@ANYBLOB="90030000", @ANYRES16=r3, @ANYBLOB="000427bd7000fcdbdf2504000000dc000280d5006f800800a900", @ANYRES32=r4, @ANYBLOB="5552f52d88fc3e3faba975aa3701edd4ca46459d4cda85027f09d5198383b294ab76564acbde421643952b66f7bdf888d05e68bf4113d31cddcdbfa8960834be85fe66d10e0583c3b2a1cff8e2c2268abcabc65c9a53290adee10a59e1fbeba22e45c992caaf1f11917693a8133b37dd0d01e264041dd91604b453b434e398fb8795f7430ef7f3b9e27ed36b65e69abd206219215e4b678a76d5bc1611aaf4b384dd4ed991ab8ddbd975330fb20800a700ac14144014008300ff0100000000000000000000000000010000005c0003800400a8804c00b58008002800", @ANYRES32=r0, @ANYBLOB="0400c1800400418014006000fe88000000000000000000000000000108005b00e00000027577ef208d6db7c83da8deb42bcbddcf484d4de1feed64de61babc7208007200fef783c6374eafec3e1b8996f302defc419e76a3243d3eb46d9c50d5da6d99bb5fcf40828cebe5e10a686f44a23ad677fb9f7b5014475657096475d90cd99590201cac3ab6e240cd31561e", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=r3, @ANYBLOB="08003d007f0000012b9a05c612f7e25756c9708632820b0541b09b631b6a982ef6493aa3bbd64bfe884df18e612cdff44534d3e85eabea13b151cb678ab7c754908dbcbd8e6e800d4ea47e4e098e8bbc8a5c521dadeb943f8a21a7aa974a12997380934527e5f7a4f4efee308452bb6eb680ef23d1426d36360cec5bde67482f00476b68ec8184c890824cc90c7183357b86071cd121fcd0044111b05c064bde3e36d72395f5c39e1cf8b1e80a7582cfe636b8e360a239a9130004d0c13455fcf204172fb8a64709ec7557ca8d5c4d0e5bd6843a7364dd7f6d00080001000800000058c266194ed4"], 0x390}, 0x1, 0x0, 0x0, 0x4054}, 0x90) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) r5 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/snd/midiC2D2\x00', 0xa701, 0x0) ioctl$auto_SNDRV_RAWMIDI_IOCTL_DRAIN(r5, 0x40045731, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) ioctl$auto_SNDRV_RAWMIDI_IOCTL_PARAMS(r2, 0xc0305710, &(0x7f0000000800)={0xc6, 0x3, 0x4, 0x0, 0x4, "f7eb1925952650455a74d247"}) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_NL80211_CMD_SET_REG(r2, &(0x7f00000007c0)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000780)={&(0x7f00000042c0)=ANY=[@ANYRESHEX=r4, @ANYRES16=0x0, @ANYBLOB="00012dbd7000fcdbdf251a000000040034010400d8000800a4007f0000000400e2001700fe0096f7b45e3733a6c60a6e075073a4e3f88fe8dc0040005a802d002880e264a0db3972e37187e25a966c957d3421ab1988c031b3900167d0f718f21f69eab91693d3ded39cd90000000c000c0009000000000000000c0022800800460004000000241175800d0003002a2a253a5d40265b000000000f112e8069265262e492e81e8d3db4524fa6cadf75b31d6c97d42176f429f4ea02ee22baa7bffaec69b2dff2aa0238c08c88ed7155ba58cd050b494c416757d161ecb37f8b6aab5786011e2bcff9c5d51b62a6146f0dc94d80de9f35fe3cbc685227ce5944fe695c2aee4e7ecebd6528d210b0b8ecd7bf4e91bede253e80ee797b4d5d89f63b8ffb2699b35eb54dff86238595c3534ae54d34e90ec1de68a7f7413f023580b5da85a3afa9c63dd7c37f671e5dbd8130a43787b1fa4f884fcbc28ef3214fa3615b818837cd1ab1e03017cb7e7beb665547e34092e02e0a86b53c841dfb6ed23640edeffa66f43e31c00bc193fdd106b5ed4be880e60dd511dbafadbc2d13b853d0a2fb1e1d32f5e5d092235fc0335039e886b7e184ed36bdf65a99599240373f4079baa52ff7fb2f9c6ec7825b6904cf622d0dbf2404a7ce4c693b5c705ff449a9fb0911fac8e44e79fa2809682411c2fdb947a760e296c07aec14abd137a40728f47a1a9da6c7ed25d00afc684ac7ccd76111e27c2da0571536cf6118faf7e520f41dfaa0921c03149b51183d1018ae8b289952ccf9987125dae61f2c50b8b3da586f3e6be74de215fd9aff7e3a8ce4fc707d570de0f9e39dceed6f6ed0616529341f63b5d7822b7f1b97caf9ce7d72a800eeb21a32bb8c19a2fb3d055e46fdc2dc6075b48c489247e7f0151f623fc94f320d59e4200ad2059edf5d6d83def32a05d2b676f0b1b2a92adb0d725eeae61f99b994e0da91ca4317d703d9ba9bcc314b5a9e80a2f6f1bc4bc685df0074b3ab056428dc45e5e4f45f67577760fa486b04d5e4bd124b60b86b7a5663db2521c2f832054dfd38d33930a75b55d14b6324e24b30c6ed1f4a12c993df8a47eac274c0c99c9192cfbbd728be2db6100ac1b84014f1d4262fd917a1bebdd36db450b226ff6646e2fa74d576870498c87ac306122ab87d9bf35e46413c8d349b5e82015b360f7369230a4a68256959c339f540265ecbd5dc9e5e0b6fdf9e285aa820b3baf2fe88f45870a4fb69f553f00a0d6dcf9aa210d07fba123d28900059a82c4af6c56f3793f5f08a8826f24a9f18194ef2e1b61f22f7ce516dbc3c1befb4832bb1b6cc05ff3f7d74371efd5c15c04667a8d186af92bac2e20e9553ee400fe2af72de3acc8a28ac2e4169c1f4b136b4a19bffcb1c1a77a6f0b6f365287d16e7945385bbf1932327106528a7691c2ff5c3bd174f3843e308665d90678ea50b33eadcc3cf1dfcaa16a5ac22251fc1872b3b2e65f9938cc16b2a9eaa1a96bbe06cefc6ff39f67cf57c4252fe2e1cc8b75e4bbb38fa2e2b30746efd80ef29a98a787c4eba8a9a145b6d4b5bec0ec5d8a387777c75d4b53a5649db55648db3209010575208daf87633b394dad1f7981f3fc914d0b49391a4f76d0bf514a6056c9e96350721669ca941a495f95c54e0b90c8384ba34315684750aed2487a52dd7841489cc4aef971805959c3fdd2b0d7c54ddb74a156ca4872abf990c0217cbda876846565aebb96a1ed364dd4c9bb1353dd2bf10e792c6141c6f941f568824337a85e7aff4e4ec27ed7d44cf1461e8077041ed660afbaca345cc52eb729a0654034e8e7d51f829c90e26203d606a2129723c7e457a437214ee67616c32012693753230a056413f7971b6cb92f5217a91044b70c4abbd4b42ddade8bda9620a41e979567ec186f767fe6aa51658d5c1740caf5ac77e8177ba5e6e37de3a7655af9b18474118076684f62e719a821b9dbde248516c44dd00284f4a555398a5654d6ff2ef1437fb758c18cde492faac6f802fa4a85fbf9f018f0887e5d28790f03f3c0edebbc9a79b7a8fc072128de16966cdc53be89720cb357711057bde0585b59d0797aa499d61fdf8cfbb02015607d5e7f537e1f96bbb382531108c6e4cf45a6187c884801e25bb04a6f7bb12a0273c4cc978c8651306e3f63fea010c2f509c8a9bf2a43210faec21ba0471e8cfb0c69b6bf66003018ae48bf135b6904faa310c22ae5c7f46cd9ac01ca8ca2d26b35c4816ce306b735cb61f626dbff71e9e9179989ff5809d506f69ed121065127f3936ad366ecef9c9da6f64c7367de77bcca8f78b1e979b7d22d0041a5a045938dcdbd646ac3aac9328f020cc1bb419d67e29d10e51a53a59f6a4929d5482b46d1cabbbae280e6626a60087ca64822355faf8acf263ea5ab35dfd53e2d1e14d6993c6b38a548f7ee1f2c46a15d7a04101f977241744c29096ffe90cecd6737724c57eb1d84c3eda42596b03c5d0a907c2a66b1dfc59479514fdddbb2b6ce14f0601dde542fcb6d7a39bc6f2cb7f613f77ac51d695c2b8fd2b0c79927fc72d1aaba47a42e60710d79725abbac60688b4a9382fe1c2514bbd6ba9b7f0cf81524184e703cb3396ef465bea0a553cfe53525a2de22fc5c214579b4a3364318120e0250fd266feaaf12c40953bbcd885aa6c678288c52a8867f8c2d70090a227a09f11ee09273c06620ab06c8a32704c5b2aedad0f0c769dee792505dfbcb2c23d2faadaca9a96ba0ef17c37a38c5046b78cf65796023a6fae06cd2511a69d233a439862a9fc04ab0df4a25bf503d820360498f23efee442c9915b22c3b8e64a3f5f847cd8c494b86ec60f47b4665b264f96bf7d1887f14b147dbcf949251d84c38db3fcd18e420fbba00ba35152335b39055960caa644718dbe2de38332a31d7e0e5dccb3cf48ac11ec30a572d590f567bdc85c9089902d67c3bbbc07f591dac87d3dce479be56fcc50b3b51502609102104e9f7b8ea7f75bf72bd51b3b91891e663eb1717dafabc50a31baec186250402dc1545a3302ed7f252e89f1dc4ec8364632764ad11e10b884bc4d30a5708932fd9e730f8735c4de3ce2114b3045674c7baae0dcc02372699016575e60e624b69db55936c62c04cc70086977e03c8ad8dc1b0bb60f415a35710c0d6284e517e68f36768013d8daf2ba2f4eef1ef4f8ed52b8b1c9bc28b5501a36967cb95d79e706e138eaf570506796d5756e5a67e2f1b418e3d2137f9e3d776716ada6237067956e00666554f59a0f308a8544169d7010a69a62c41e6988d181bd7a831caf095582d4f1784efa845d2a0be8cb4093bb3866cf1f36f5ad2ac10a50d104d34c06345e8dd44879cbb1c8078b58b0c8535c82718e1727e07d8c1eb0290127b42408e593585d15f7f192cd1b085212c41c1746b575fd9262e4afd071ebf59b933e97b79974fb32d5ea434e7302a81aafc6c53150f1cd3d69648aa0513aac9563aa99ce9c8a05eb92897014814398f49ca2fd3c4722c1b84ff22e55d7002b4fe1cd2c007cba1ca41968973cd316bdce0f188832eb60642e23e4518fa9a874f4fdb0abaf8fe85ba386c34c0b292812b35de9ca2e4a6e2e418b728ad745db42936c0e8015ee5b7c35bdd212af5cc92bc07258a284dda5fd6a1162ea3c6b268e5d654ca20803e4984606e7fbe4f3457661cd5b0e8dd15a998531bdc194a5de7244f28f297bb57f561181092ae6bb5476ee8996d9b931301b1658346cbd6c59dd8b0b0158b5e33c345c986d3cba01345ca445333365b14728a5c208dec2738ddde2082cd9dfa346ff8ec0caa76b8d79e186755bbcd586e010e1a2a13af703880409abb2d614d0cb7f7534c45cb5756d753e1f8111d87f0d07b5975894a1ce6e5cfa44dccfbf90a255c3a6ce185cdfc9dc7a1817145e76c78c3ab5d1ec538903bc2e57411527a6fae899f2012133a1f4d8ba5c492c558f6ba87e16f05362628788f8d71387808880355b4558e39240bcbc7f1d44ea9b20a56bbd8ff2441fbcbe4e11d858e7d8fa5eb9d545031c198b5a448256529e5bbacca0c1fc5702327a70ffd3dab4eff0c6bb5009d6985396091339d927e443425e8792d6afbf8192fc68fb995ef02b48b99796700cf2449c47f29df3297c12fe4f450053c6213fbe787bb778534e88b53aa3bf76a0466609ce5b591d76c36440aec27cf43cea8cb2bc5e7eb4d27c901a625a2989ac536a41825c39cd5c083448a2e8f360f3c1e30cdf76942a632767a530dc23ffa72a25afaa208021175b2385348e35b8a7569f8a48d46470b9b0cfadd271f96224f9205f56321e6bf41d736618733751fd7ca2736d4e8a3c65f617c9e095573b088604d5a6fa7c249bd54fcea24939854e74adbb926c0c9d4d4a4467563d498425262f1835798d5d29608bd2395e8cddba9693c6c2004f413301012e43156f278448622c5a8d235cbda5e3395ff5fcdb7c616f98724ca7a5e8a7f9329ddbbd4fa9c26ede5b27296ef2017409eeb602a7d2f72fafc2d5500240cb8515e3e88c073ac1053204eedc84d362dc5910d329f13462db0be7409f4cad9f3e19bf05d3fdfe67d14707324c074bac35c24b7e7182be1910d79a5fe844ceb4be1784d6448bcd2f7be4403b1bd95e968d19ec5982e50885ed983d8803884ef13bc6cb341df5834fc12c03295bdacc7585558de3529b045ff024e85b3bca1eca31443298e96b165a3217e0e38caabe76ce97d7e74bee939c28d34303f5c1006b94e071f70cdf5366d18c846fe625b561a9bb2ee378fe56117ab81bf1a7e59f3f8731cd21f87fdfdbca35ba9bbaac8b5f57919aeb948618d7abc5b4e286fb7044256bba955142335ff3af552eccc5ead2421ad809984c42ede12a9ca93801c7d9da6f68a88c47abef10bb0a0758a755df273fe184a9885e3df380a303c1b739c253a31560dcff8987f8e41f2119c630f1e29da152db83bc7ff9cdaf02ccabf877f5ef5ae1ee7d7402b558c9385311c1e1b30e5d85290aac0ceef360f7b36e28e64bc7bcacd0232c6e8fbbf396a6794cb231ea89482859e00f027d8b81de2d565d90e8b0b76cffef6ea17380222897d35313d32c25f8dc2cf966118e750eefd1261bff73fae7f219b84cd3f3c4240c1d23f1c96fa6afb435f3f01961e9dfa0d5850f7c2d28459cf77671d0ea3a5d9c0212a59fa50473f5fb814e388345d81fa2a3293727f1279d0d1cac51c0300621d1c013c7b4f31a9fb6e01b861b62cb190f2e3a9957218ebe73710517a42a07626152ac13cef48546de3fb5d3bb5a488ba8570d6a5451ab2ed1c1694d0dc6607f5c1cfcb298123b5960f9206b31c6c7026e292480785fa285452b5d55f5d870beac6d81e4a65c89c174a4b2782e1a3b93dd46f696f6ea8c64cbb23ff2e23d7c87d104405c9be59d0485077a76fb93e253188accf1ef5d4526c1b15609b0d78929da8c1fdb6621392a1800453cd36966f74c916a97aa70b0c50ca8dea74ca94e6c855f3f0858f5e0ef780650895bf64c72fe58eabdfd8c9c3204f620f443bcc4ac155bda9c5f80c449fce89a5a2c26047c673456d8378e708a502e982f1b0fef9796713a001f72e0ba3935eff054b5f1078c65a184bfc1d36e06876da0f60287817ab8e9687ccf20e4cfed2a21094c0fa6a1e9847935c6746421a875706f7606d4eb00e9a856e9d7c3057c871d3093c2d0c38188b747ea546fb954a97699fd8cb1d4b144fc8911abe4732755faff2eda379786dce98c32a435b1855fbd8086c190730485d81aa072eba2bf33e2f5a3f4b54a24a855bc77e5278b7dec9a98155a1345fb276e43cbe002a6bb7f060c7c8382a1d07b79bd559fae2cce580f74267a28d8ff9fc81cd37b5dd2fa9c3e9f00187753d127fcb428180c5d07c1441f016f99252f42740526e67c420674ab7521e91a09a5438b54cb7fb4b89d5b1b7c54bed7cf7a0782fd2f6b9d84b74027a42affc1bdb270aefa0664f973b479c20f2b7d2f112a6f750861f6a1ce89d6a25d0689351791c26c175b41be155c67e812b847882a7ea8bc70e670e0f8b64795a977143810997d86e5e0b2ce474e36b59391d7493caa618a0b4fd4dbc4d965179bdf0f4a9c1d18cf1f56783ef92506903b8a449aaade1178827567591b17c8126ae7816fda2ac5ce43ad0b0c41a9552351d246d64067f8d14620ace91d605f17c93c697ba0cde550252d041074df7d3b2fef22b421d646161452df47872aafba586ecf9696b2a938471012ec7e7b1b87e97c932dc2e1522c9e13d87ebcd802558823f22031d14b4da82e980f2482ff4b81a9ad8df698b4fed92f84e34c0a693a11b2f3aef57745625e8cd1f3978521fdbac9a3dbf5dd00c3001002f080880051800400e5800800c9007f0000010c9e7e9ffc08a6de2c1bb11457827a38c01acfa222fd403e42f9335b08fd7dcf9093bd74d1c761e69254c977c76b3dfc9f0d8134ac32240ebdd07152769a2bead8c8911e9dfe6ad029c5c30289d4c034293dd56b26e7d35afd1e2bbc678a9ac923821bec10ec7a816504b179cac34c83ff0fa3b9b5d3b6cc8201988004000b800d24e9ea3ac779b81c007217d233159a834b6064fdb14df463ad9f1ca10582ed9422a23efe4d3c22670d0d4e55ff0b240a08022e866e0cc871e2a0fe8ce96aea5648f96ef1bce753e5c1082e664a9a11f0a98a40548543e480732d600774688b5efb6c7b60160ac3075c11183ffa38b3c94e911df0248bb7c3dea6432607679cde8b5f0f5ee774ab4523b3579cbf4f69bf2844867773863187348bfda76abeec1c89e10989d85558e0cc96f6af2e47647aad393b782dc25c0a0be38e1027c71413a3e0c2424ae769878e7b78738afeb8be0c0000000101000000000000213c8b7c241534f43f175177e952ccfdf22ff4cdb390215627aeccced276056942e613849d3845c1a418e46551e20b0d9a65051ed376e9fc5204ffec2d494ed77bf873227e99dc35710f4843788515618f02ae9538fe105779f4a09eb5d8beb51cda5e601c1914d3e67e840adbc01e5afb2c637ee131bbd3bd0311db5b8ba12d727d9098b06052380fb4dfa51a0956afbec1e18b95fb8b05a10400df800000"], 0x13c0}, 0x1, 0x0, 0x0, 0x4000880}, 0x8d0) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB=' \x00\''], 0x1ac}}, 0x40000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x5, 0x8000) (async) socket(0x2, 0x1, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/ram12/events_async\x00', 0x40, 0x0) socket(0xa, 0x3, 0x100) (async) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptys0\x00', 0x101e81, 0x0) fanotify_init$auto(0x5, 0x2000000000002) socket(0x2, 0x2, 0x88) (async) io_uring_setup$auto(0x6, 0x0) (async) socket(0x2, 0x801, 0x100) 59.01201789s ago: executing program 3 (id=5143): r0 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/net/softnet_stat\x00', 0x20000, 0x0) pread64$auto(r0, &(0x7f0000000040)='/proc/scsi/sg/devices\x00', 0x100000001, 0x100) (async) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000011c0)='/sys/devices/virtual/net/lowpan0/iflink\x00', 0x2000, 0x0) socket(0x11, 0x2, 0x300) (async) socket(0x2, 0x1, 0x0) setsockopt$auto(0x200000004, 0x6, 0xd, 0xffffffffffffffff, 0x0) (async) read$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f0000001200)=""/115, 0x73) 58.898432143s ago: executing program 3 (id=5144): r0 = socket(0x10, 0x2, 0x0) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="1f0000001200c7"], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x400c000) r1 = socket(0xa, 0x1, 0x84) (async) mmap$auto(0x0, 0xa, 0xdb, 0x9b72, 0x5, 0x8000) (async) close_range$auto(0x2, 0x8, 0x0) (async) r2 = io_uring_setup$auto(0x6, 0x0) r3 = socket(0x2, 0x5, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) (async) r4 = socket(0x2, 0x1, 0x84) (async) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) (async) mmap$auto(0x0, 0x20009, 0x10000000000df, 0xeb2, 0x401, 0x8000) (async, rerun: 64) sendmmsg$auto(r3, &(0x7f0000000140)={{&(0x7f0000000040), 0x10, &(0x7f00000000c0)={0x0, 0x1a000}, 0x7, 0x0, 0x2, 0xb}, 0xfff}, 0x5, 0x311) (rerun: 64) io_uring_setup$auto(0x6, 0x0) (async, rerun: 32) r5 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) r6 = syz_genetlink_get_family_id$auto_netdev(&(0x7f0000000440), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000002c0)={'veth1_to_bond\x00', 0x0}) sendmsg$auto_NETDEV_CMD_QUEUE_GET(r5, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f00000015c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010026bd7000fedbdf250a0000000200"/26, @ANYRES32=r7, @ANYBLOB="0800010000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x810) (async, rerun: 64) getsockopt$auto(r1, 0x84, 0x18, 0x0, 0x0) (async, rerun: 64) mprotect$auto(0x1ffff000, 0x8000000000000001, 0x4) (async) write$auto_snd_pcm_oss_f_reg_pcm_oss(r2, &(0x7f00000001c0)="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", 0x1000) (async, rerun: 32) fstatfs$auto(r4, &(0x7f00000011c0)={0x48af, 0xc1, 0xff, 0x7, 0x3ff, 0x4, 0x7ff, {[0x7ff, 0x200]}, 0x80000000, 0x81, 0x2, [0x6c58, 0x0, 0xe, 0x9]}) (async, rerun: 32) sendmsg$auto_NFSD_CMD_THREADS_SET(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x17, 0x0, 0x0, 0x40000021}, 0x8004) 58.349634689s ago: executing program 3 (id=5148): socket(0x15, 0x5, 0x0) socket(0x10, 0x2, 0x15) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/timers\x00', 0x0, 0x0) mlockall$auto(0x7) inotify_rm_watch$auto(0xffffffffffffffff, 0x84e4) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS1\x00', 0x20000, 0x0) madvise$auto(0x0, 0x2000040080000004, 0xe) modify_ldt$auto(0x1, 0x0, 0x10) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = socket(0x2, 0x2, 0x88) sendmsg$auto_WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x400c811}, 0x20008000) bind$auto(0x3, &(0x7f0000000080), 0x6b) connect$auto(0x3, &(0x7f00000000c0), 0x55) socket(0x1d, 0x3, 0x1) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x9, 0x3, 0xe, 0x940, 0x1ffde, 0x3, 0x2000000000000006, 0x2, 0x9, 0x5, 0x2, 0x7, 0xb0, 0x7, 0x2, 0x3, 0x5, 0x7, 0x0, 0x6, 0x0, 0x0, 0x20000000, 0x0, [0x0, 0x8000000, 0x0, 0x7]}, 0x1fe, 0x81) socket(0x1d, 0x3, 0x1) r1 = socket(0x10, 0x2, 0x0) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="10002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40400c4) sendmmsg$auto(r1, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f00000001c0), 0x7, 0xa505}, 0x800}, 0x7, 0x4008) r2 = openat$auto_dynamic_events_ops_trace_dynevent(0xffffffffffffff9c, &(0x7f0000004680)='/sys/kernel/debug/tracing/dynamic_events\x00', 0x502, 0x0) write$auto(r2, &(0x7f00000001c0)='!}*[\\@:/\x00', 0x8) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) write$auto(r0, 0x0, 0x3f00) setreuid$auto(0x0, 0x20000000004) socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f0000002c00)='/dev/cec18\x00', 0x900, 0x0) ioctl$auto_CEC_S_MODE(r3, 0x40046109, &(0x7f0000002c40)=0x10) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000140), 0xffffffffffffffff) 57.987175685s ago: executing program 3 (id=5152): r0 = socketpair$auto(0x1, 0x6, 0x2, &(0x7f00000000c0)=0x6) pwrite64$auto(r0, &(0x7f0000001380)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x86\xdde\x1cJ\x99\x00\a/\x00\x03\x00\xfd\xfdX\xd3\x1d\xf8\xbebZ\xddL\x01\x00\x00\xff^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x88\v\xae\xa9i8W\xe5\x00!\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2E\xd8?\'\x8dg\x81K*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00,,\x93\xba\x88\x93\xc6#\xe5\xaae\x9d\xb6\x1a\x7f\xc0%\xb0\rfOJ+\x02\x9b#)\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd0\xbdn\x1d\x00\xeb]B\xa0\x99/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\xde8\xf7\xc1\xa6\xf2\xc1\"\xact\xee\xc9\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00v\xd9\xe5H.-\x14\xee\xbc\xae\xe1\x85\xb2b\xd42\x89\x05e\x03z\xe6q\xcd\x91\tM\xd2\x90\xc91\xd9\x86\xe4\x8e\x0fI\xf0b2\nfa\xb8\x1a\xdb\xaa0P\xca\xb2W\xe3\x14\xb9Cx\x0e4\xc9\xb4\xdc4\xe3\x8f\x1c\xa5\x89\x8d\x84V\x97dg \x9f\xcd\x8fA\x16\x01\xc5.\x7fG\x86L\xa4\xd6h\xea\x11x\xce\x96t\xc7~# )\x8c6\x06\xd7\xfcu\x8c{t\xa5\x92JW\x8b\xb3Oj%\xb5H\x91F\x1b\x01\xef\x0e\xc5\xac\xcfK\xd5\x98\xce\xd6?\t\xa8\xb7\xce\x87\xdb\xb0\xaa\x8al8qF\re\xa7\xda\x1f\x9ad\b!\xddBD\xd9', 0x400000000000003d, 0x7a) socket(0x11, 0x3, 0x6) capset$auto(0x0, &(0x7f0000000000)={0x1, 0x47, 0x4a}) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x0, 0x1010001, 0x100000003) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/nbd9/queue/iosched/front_merges\x00', 0x80100, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f0000000380)=""/4094, 0xffe) rt_sigqueueinfo$auto(0x1, 0x7, &(0x7f0000000040)={@siginfo_0_0={0x0, 0x5, 0xfffffffb, @_rt={0x0, 0x0, @sival_int=0x7}}}) close_range$auto(0x0, 0xfffffffffffff000, 0x2) landlock_create_ruleset$auto(&(0x7f0000000000)={0x1da, 0x1, 0x9}, 0x9, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0x27, 0x80000, 0x1) r2 = socket(0x2, 0x1, 0x0) r3 = socket(0x18, 0x4, 0x1) r4 = socket(0x10, 0x2, 0x0) sendmsg$auto_OVS_DP_CMD_NEW(0xffffffffffffffff, 0x0, 0x4) r5 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB='l\x00\''], 0x1ac}, 0x1, 0x0, 0x0, 0x40814}, 0x2004c0c4) mprotect$auto(0x1ffff000, 0x8000000000000001, 0x4) sendmsg$auto_NCSI_CMD_SET_PACKAGE_MASK(r4, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4c004}, 0x40080c0) syz_genetlink_get_family_id$auto_ovs_datapath(0x0, r4) sendmsg$auto_GTP_CMD_DELPDP(r4, 0x0, 0x80) sendmsg$auto_OVS_DP_CMD_GET(r5, 0x0, 0x11) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) syz_genetlink_get_family_id$auto_ethtool(0x0, r3) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$auto(0x3, &(0x7f0000000040)=@can={0x1d, r6}, 0x6a) 57.212844425s ago: executing program 3 (id=5155): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) bpf$auto(0x0, &(0x7f0000000100)=@bpf_attr_0={0x1a, 0x506, 0x1, 0xffff, 0x7, 0x1, 0x4, "f17f8d54c5616da65442268478dd7c70", 0x0, 0x5, 0x0, 0x56, 0x2, 0x2, 0xffffffffffffffff, 0x6}, 0x6f4) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) rseq$auto(&(0x7f0000000300)={0xe, 0x401, 0x0, 0x6, 0xffffffff, 0x2}, 0x8000, 0x0, 0x6) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) recvmmsg$auto(0x4, 0x0, 0x7, 0xe, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) ioctl$auto_PROCMAP_QUERY(0xffffffffffffffff, 0xc0686611, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x801, 0x84) io_uring_setup$auto(0x6, 0x0) mmap$auto(0x0, 0x9, 0xffb, 0x8000000008011, 0x3, 0x0) move_pages$auto(0x0, 0x1002, 0x0, 0x0, 0x0, 0x2) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) io_uring_enter$auto(0x3, 0x0, 0x1, 0x3, 0x0, 0x2) io_uring_enter$auto(0x3, 0x5, 0x82400004, 0xe, 0x0, 0xd) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0001, 0x15) mmap$auto(0x0, 0x1000000000005, 0xdf, 0xeb1, 0x401, 0x8000) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, 0x0, 0x10004010) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) socket(0xa, 0x4, 0xfffffffc) mmap$auto(0x0, 0xe982, 0x8, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0xfe, 0x7fffffffffffffff, 0x2) madvise$auto(0x0, 0xffffffffffff0001, 0x15) madvise$auto(0x0, 0xffffffffffff0005, 0x19) setgroups$auto(0xe32, &(0x7f0000000040)=0x9) 56.873627086s ago: executing program 34 (id=5155): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) bpf$auto(0x0, &(0x7f0000000100)=@bpf_attr_0={0x1a, 0x506, 0x1, 0xffff, 0x7, 0x1, 0x4, "f17f8d54c5616da65442268478dd7c70", 0x0, 0x5, 0x0, 0x56, 0x2, 0x2, 0xffffffffffffffff, 0x6}, 0x6f4) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) rseq$auto(&(0x7f0000000300)={0xe, 0x401, 0x0, 0x6, 0xffffffff, 0x2}, 0x8000, 0x0, 0x6) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) recvmmsg$auto(0x4, 0x0, 0x7, 0xe, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) ioctl$auto_PROCMAP_QUERY(0xffffffffffffffff, 0xc0686611, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x801, 0x84) io_uring_setup$auto(0x6, 0x0) mmap$auto(0x0, 0x9, 0xffb, 0x8000000008011, 0x3, 0x0) move_pages$auto(0x0, 0x1002, 0x0, 0x0, 0x0, 0x2) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) io_uring_enter$auto(0x3, 0x0, 0x1, 0x3, 0x0, 0x2) io_uring_enter$auto(0x3, 0x5, 0x82400004, 0xe, 0x0, 0xd) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0001, 0x15) mmap$auto(0x0, 0x1000000000005, 0xdf, 0xeb1, 0x401, 0x8000) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, 0x0, 0x10004010) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) socket(0xa, 0x4, 0xfffffffc) mmap$auto(0x0, 0xe982, 0x8, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0xfe, 0x7fffffffffffffff, 0x2) madvise$auto(0x0, 0xffffffffffff0001, 0x15) madvise$auto(0x0, 0xffffffffffff0005, 0x19) setgroups$auto(0xe32, &(0x7f0000000040)=0x9) 39.691482342s ago: executing program 6 (id=5252): mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) (async) move_pages$auto(0x1, 0xf54, 0x0, 0x0, 0x0, 0x8000000000000000) (async) mmap$auto(0x0, 0x20009, 0xe3, 0x100000eb1, 0x40000000000a1, 0x8000) (async) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0) (async) fsopen$auto(&(0x7f0000000000)='nlctrl\x00', 0x3) (async) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) mmap$auto(0x0, 0x9, 0x400000072, 0x8b72, 0x1000000002, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) close_range$auto(0x2, 0x8, 0x0) (async) r0 = socketpair$auto(0x9, 0xea000000, 0x7, 0x0) r1 = socket(0xa, 0x801, 0x84) (async) r2 = socket(0x10, 0x2, 0x4) (async) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'team0\x00'}) sendmsg$auto_NFSD_CMD_THREADS_SET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000040)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x4801c) (async) write$auto(r2, &(0x7f0000000000)='-\x00', 0x2fb) (async) getsockopt$auto(r1, 0x84, 0x75, 0x0, &(0x7f0000000000)=0x109000c) (async) r3 = openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, &(0x7f00000002c0), 0x40000, 0x0) madvise$auto(0x0, 0x14, 0x26) (async) ioctl$auto_DMA_HEAP_IOCTL_ALLOC(r3, 0xc0184800, 0x0) (async) mmap$auto(0x0, 0x9, 0xff7, 0x8000000008012, 0x1000000004, 0x0) (async) statx$auto(0xffffff9c, 0x0, 0x1000, 0x1, 0x0) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000010c0), 0xffffffffffffffff) unshare$auto(0x40000080) (async) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000080), 0xffffffffffffffff) (async) sendmsg$auto_ETHTOOL_MSG_DEBUG_GET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x4801}, 0x24000086) (async) socket(0x10, 0x2, 0x101) (async) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x1ff, 0x7, 0x45, 0x4909b6f8, 0x1ffdf, 0x7, 0x200003, 0x2, 0xa121, 0x3, 0x80000000006, 0x6, 0xb4, 0xa, 0x6, 0x10001, 0x80, 0x400, 0x0, 0x7, 0x2100, 0x200, 0x0, 0x84, [0x0, 0x0, 0x0, 0x50100000000000, 0x0, 0x2000, 0x800000000000000, 0xa, 0x70624ce7, 0x0, 0xfffffffffffffffd, 0xfffffffffffffffd, 0x0, 0x6, 0x2, 0x0, 0xffffffffffffbffd, 0xfffffffffffffffd, 0x1, 0x0, 0xffffffffffffffff, 0x4, 0x1, 0x2000000000000000, 0x0, 0x0, 0x400080000005b8, 0xc, 0x0, 0x0, 0x0, 0x6, 0xffffffffffffffff, 0x88e, 0x8000000000008, 0x6, 0x49, 0x8, 0x0, 0x6, 0x9, 0x8, 0x4000000000, 0x7]}, 0x1fe, 0xd) 39.103584293s ago: executing program 6 (id=5256): mmap$auto(0x0, 0x400005, 0xfffffffffffffffe, 0x9b72, 0x2, 0x8000) socketpair$auto(0x0, 0x8, 0x27e, &(0x7f0000000080)=0xac7e) socket(0x1a, 0x3, 0xa) preadv2$auto(0x3, &(0x7f0000000000)={0x0, 0x1}, 0x6, 0xffffffffffffffff, 0x2, 0x7f) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/dynamic_debug/control\x00', 0xaa102, 0x0) socket(0x10, 0x2, 0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/controlC2\x00', 0x101842, 0x0) openat$auto_proc_pid_attr_operations_base(0xffffffffffffff9c, &(0x7f0000000140)='/proc/thread-self/attr/apparmor/exec\x00', 0x200200, 0x0) openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f0000000140)='/proc/thread-self/cpuset\x00', 0x181100, 0x0) pipe$auto(&(0x7f0000000000)) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x5, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_freeze_timeout\x00', 0x40000, 0x0) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) r0 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snd/controlC1\x00', 0x22082, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, 0x0) statmount$auto(0x0, &(0x7f0000000380)={0x8, 0x1, 0x10000009, 0x7, 0x2e, 0x6, 0x1ffde, 0x7, 0x6, 0x2, 0x9, 0x3, 0x6, 0x4, 0xb4, 0x9, 0x2, 0x10000, 0x80, 0x7, 0x0, 0x7, 0x2000, 0x200, 0x0, 0x84, [0x2000, 0x0, 0x0, 0x50100000000000, 0x0, 0x0, 0x0, 0xa, 0x70624ce7, 0x0, 0xffffffffff7ffffd, 0x0, 0x20000, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x0, 0xffffffffffffeffd, 0x9, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x400000000005b8, 0xc, 0x3, 0x0, 0x0, 0x6, 0xfffffeffffffffff, 0x8, 0x8000000000008, 0x0, 0x3, 0xa38, 0xffffffffffffffff, 0x0, 0xfffffffffffffffc, 0x2, 0x4000000000], "880b1c8f6664a7468b17141be00c482acc15bb3db409796e2913ea2140aa1b77139dd5cb543777d6ddd10c035ec8452145766294ac6d64fd10811ad2655a3ab118e8a896cb0e58b2efd7e5a69955f4ecc74815fc88b524b30831040e4a967b6034c43d70f5190d5bdc257767fda4c8b5b92ec2b591b93726176acfa0ef3d6bae147759192ec29442dc1e19cd30362c300fb69963656d9bb67ba295d8"}, 0x1fe, 0x200d) socket(0x15, 0x6, 0x4) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB, @ANYBLOB="10002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @loopback}, 0x54) 38.213907548s ago: executing program 6 (id=5265): openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/sctp/remaddr\x00', 0xb00, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) rseq$auto(&(0x7f0000000300)={0xe, 0x401, 0x0, 0x6, 0xffffffff, 0x2}, 0x8000, 0x0, 0x6) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x0, 0xfffff004, 0x2) socket(0xa, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_btrfs_ctl_fops_super(0xffffffffffffff9c, &(0x7f0000001640), 0x440, 0x0) r0 = open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x10, 0x2, 0xc) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/block/nbd11/integrity/tag_size\x00', 0x0, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x0, 0x9, 0x6, 0xe, 0x940, 0x1ffde, 0x40000003, 0x2000000000000006, 0x2, 0x4000009, 0x5, 0x2, 0x7, 0xb0, 0xb, 0x2, 0x3, 0x5, 0x7, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, [0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x1fe, 0x81) r4 = socket(0x1d, 0x2, 0x2) r5 = socket(0x10, 0x2, 0x0) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYRES16=r4, @ANYBLOB="108009"], 0x3c}, 0x1, 0x0, 0x0, 0x20048884}, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) sendmmsg$auto(r5, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f00000001c0), 0x7, 0xa505}, 0x800}, 0x7, 0x4008) read$auto(r3, &(0x7f00000000c0)='/sys/devices/platform/vhci_hcd.7/usb23/23-0:1.0/ep_81/interval\x00', 0x3) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000013c0)=ANY=[@ANYBLOB="18000000", @ANYRES8=r2, @ANYRES8=r1, @ANYRES32], 0x18}}, 0x80) open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) fcntl$auto(0x3, 0x400, 0x1) fremovexattr$auto(0x3, &(0x7f0000000080)='\\-\x00') r6 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/card1\x00', 0x40000, 0x0) poll$auto(&(0x7f0000000040)={r6, 0x7, 0x8}, 0x0, 0x2) ioctl$auto_COMEDI_SETRSUBD(r7, 0x6410, 0x0) r8 = socket(0x23, 0x2, 0x0) ioctl$auto(r8, 0x89a0, 0x8) ioctl$auto_BTRFS_IOC_DEVICES_READY(r0, 0x401c5820, &(0x7f0000001680)={@raw=0x3, "76fecbc57ca0978a171e985278736e21a481fa8b13ae8e7f38b69d5b21e6d9343978433b767c7f3792a36891edfda234f1e1e367a6f738eb115c1f0686a78c0fb96e93defcbf4c87e82cac4007d3ccf986c3f247c797b3b61cd52116eea211bfb30b322405b8fd104fdf6c56c2c6e0d4de71bfa11300c6c5fc716310a7027297e5cadb4b18b8fceb62134b01151fa94cd5a30e88345072aa29b4a6661fc55866c96823a684281301b159f24bd1bb32e6f13d29ba032ca4465630df3a09879a0383be90aaf3911476b8b5b75c0a705ffed01bb21b6c18929117dea32b272d3ec69170306368d67dcc11de0f797984ff6ed1c317f3a2e5bc22431091a6edf6dcc44b33fc44a277094d9a37cbaff5422a665bc723bfcf0cf70ac0089260ca0a58fb6d8ae8c0aa93914bea92b688a22e54c77fccc743554fa6617d8fc5809105dd802b085df6b9ff145749378b295688d01468f47a98973fd13eb8438cd344ecdd30439ce3e349b3b7d995edd9795eca8878d1ad75f8f8049f9f20a4012528e3fdf9d533e29d0bbbf711d4ac0cf115366461ad18b7e2d536d018c7797c13892dd111a9a8c93a15a393e8efbbe4fa632f2b1b191be1602d7239107851ab55afb557c7e527116ca6fe528d48c83d48c0e30ec0159625dcff2ffe8e0a0d89c87df0da3f26a3491607ed0a15ae3e412f5c067c5c0dcb0c53a64b03dca0e86e578b01cf51839d1673e11e4b4ea2de29e8b2e7ee8232954e9c6c823e1d5bd71a9ad78b063077e401f1814d2a021e28d0d323a3583fa547ed3fb5a2c2a101f6005fffd2d98df73196b624c87d406e0014f70c1d7f7e4844436b28518c84b003ee3d83685f471234baf6382fcae85d51960447b30d82b23e28f691d832f0903348fb5f38ffc1f114e9eb75773c32428835ef23cb17efdbb89a899443a7096ef3b39398a1461ed041f6b4a122beb84573ba84e6562757d59bef90d1c959afbd10d2d39c74efde264c40e6192a8289efe5a76d1b8f8a3639a4c9246c6dc34effabd9e54a327bf38af0e13e95fb1b60a1560e9fe7263dafe3342b7d66799733c955a560f4b46d46c53172917cb94db43592333f12bde7c08fad5819a08564a17f821833704cea7140c23f422e81f9f7d21233240a3789d74b29ff6d0914de41e0c253f800626ae9afd5aa5515336ed380106f79e3ff40aa500f24399ce1eac15000a701eee9e1cbb24588e5e3329f26bb7cb2e380adcebb0f35f3890330398af1f0b2600e9fae7b0c9afed28922241d8246bbea2ab4007e8db8573e3a1cd9bac10809c6f4014b43f738af5488a99af041fa1d091b68b5ae124ad98ef4736177fcd147fe71c4866bf4b87f394389a3ef9d9689319e25edc08b9b4438ebb9caa22df10bd05119895f6a1c41d4e0637e97fb0c9dee1caf94280c42d2b6746613e2da1d6998cdb938e657ac6f4121f96186efae5009901fd08661a6919f03b5c9c505e1e8e3f56a85cce8a119ff18f213ad6abdcad8167e0d0007669e3f712c0f04045cdbb115e577af7a9440065b132a8d8022f1afff7dbe77b5bc2851a1180f0fbcee67fb7ab251c44866830657e82f8d9f7ae859e9dc6c136000e1f468214ffafdd6168a6f87dd45a0102775d62d3258b2c2c3d60467de53c2fadab4744cc4251383a5bbbd0341f8af246f7c06b85c47bad6ff16e4747f94873ba4d7a5142d4bf32f37a0717bb0c8e2cd4111bdbe5cbec893d58eb17e4639a91cae111275793322e692e96a9de7dfd47487bab027eb0c2b62e02e9b6809641804a5d617876ded8bae9f358f62cd646902f674d9331e585694a250eef4110d82473d400b7ba91f97c182ed7d7ffef7d2a28dabca853fb9aaad4f04737fa1bf71b1c5856cdc41135944a3150a917198f0e9a4343a8d8db05a13fbc3d852955ae4a612a680f246f4e32582e5646cc384a8274da40aeecd45a1ef2e7ab96273e172a180238cbc89ae0fb7ae58a6d34eacd69f4210756118220d31fb21c1f95e296fa07e3089b56f131a06bac4396e508e286d50f0e7e31f443683fd89bafeae9207d45d0c5df179ad4762d7edffc53f31d910218709443be9c7a613b74e4036bffed6564441f6484eae7bf3e42d60fa53d3a7ee38333693fc79ded0bc9d6a1c75972cb3c2d689e1ad153429d52fe7ab009dc7582d7fb278aee7a9b8ba9e4511e0ae4390eae83aaa1b2a9e931315756005c6018180caae6a46b620f321126b3f8a9317da786494286cabb57da01efcdf0bdbb385a6e9ea743c1ff632bfc49fba7ddac3a0199a4e6f68cec4abc87c1039ec0653e7349fe27936a2332f130535f2252a3ac6515ad4b3d3268ad323e53e2f5b828ca099159f69f46bda8fc4d6b3d4561375deb43d85651d7ee8e2100738a8d8beafa6d944b443ef350bb6ba41f8e6064b51bef109f6f2db339d7e773c0cc2f6f98adab5f48d7f182730bcc1ca6cd99f32bb0589a9593f39bfdd31823e2c86d6cf254b2d72734ffb117151f74c0cb3bc4dae5c6384f85ca6801f998ec0df63cb9907a8ba7a32d19c83144b0d49af7c333c419ffe42adfe6cdd1f492a354e0ef4adf0544ea845f873ae002c45925cae0922741393f644e18c2c480a5dbef94a14ff1ad18aa04fa153cf8be419092761f80f80899d2d56d7ffebbe2cc22292042380d138794cb9a7c6fc70149abd8d1ebb344394f3af490110f72521ac92042cc5c7b8e590d6998e5e80768e46a386fea00d47120c7557b2c2380fef9a56484bc540b7a91941ca35c0307aabbb639c928d7ed15627cc8ba82615b8f11b26057c8f2d98f6c9dfd63c94cb621837d9afed349879ae66727e3c8ed0d58862951918af3f74cb7bebc27b4c6abafff27b9c55f6764e56d5e3e2876901cc368a669c9bdc299d9e4346a43d92297da9548c6e716aa0f71306acf3df18fe5b024ad389e155445dc8a8437d97c513f1d6986a6c0d0cca04359644f194a6eea2e55aa58caf82b110ad47ca89415b6afd04a8c8da6ee240b2dca81482fdb688f9611301b528ffc068ae0950a605bfa8a478cb083473b36610bc21b3f7d5d16490842a101d93e4bdb6c45ea1198fb731eb463318d28ebfdca2304a24ff063914fe17ac438391d95392eefbf7e993d2b96bceb43a10c62688e0d14467b1320384db4328cc9d8999e06605f60946c14a5a44cbf750182aa6caf4ea519d93a9631e9f86fd76090b6fc13813c406dc72a869609a5e15696f2c251e29090051dffa354dcb062a247514a61d279a8927d2bc75b78678824da2e62de78ea73a39807030a8f5e5604e656bf57aad07942b0c0748ba1ccdb6ad28131149e6720282b656a3447415c4f143dd321532a80a93eca618409a31675849fd300d74313f2630c17b048cc4872ba608e9e96d57dae51e80cad306abc27de964405f66f0b74e12e3def2cead19162821a3bb5e6567ac6a83d191d51786bf27b559d149baa283a6bcff3b48052d62e68edaae2cd19ac652d6c4f81820d4a57ba15add301c52cfe97f90e52ef1473e3446f7c15a1efe0f772f74997600b5ea59bddd7459b43f0a57b9707bf15efb7ddef25faf85c1eb2bf12ad9ace52a8474a918b7d344881bb99fabb759fbf1a6612eafe4ce376ad435110f74e0082fa2bdb1f4e5fc45f425314de87466d2ac7dffdcd07f24b06e7d76cd4bd348dfce944e83fde4a4e12086d0badddcd11db1e6cf5d6788ddc4d2347dce2111a236f0b21ae7b92b88eb168a91fded724fca00cd0235729bce51bad57cb95a3e24581833f99646fffdf0194bbafe1ddbcd1eda34a4d32dc20908aa6d4e1425d4b58a391a2723f325d852a356fb535826b6ec7aa43641d8c606181444e3df11ba04e410df9c442640b7574153977cdacf260c19d6fca43b0908e680c2578e912308b03625baf19b57b4e30d15d3e0dcbff8c3861e49cf1773a1d2fbcecec289a4b6af09308a3dbb9490faaac0f1640528f05928ad164dfdaba5ce3c71af8b5817860d35016c87b790b5139f1b073995ebb808d4cc2b56925aebf24e3be67ca82c405d23c5a8a6a6c469754e0127d9ebea594656d8a0be4435f768e7fcf978233d7730321a56fc8285b1e6c4231378046edca96114282e8dd75322743d5c4e72a5f9c74d4d70e9625a2a758cf455ede9023309b96798648cc1ad05844457c147d8f79ad5875cb7e476a97b0a2c24a4b76948cb4e2a5d05550958805c3742a16b98c0e753d3ed3472e63b38573b74a55a1546c96b3c86a42e0fae0e3226721747add5d1ce97bf61e59a70f89dcfd53a6d83f1b6ca4d4edb9457b6194aba7f57b26d950f4a4545ff29e8bd5c757f758bc2c5ecbbdd6c1618176ac061947012c729fd40112dcd28b7a8dadbc1210b5a2e1b3e4577557336b37f79ead311ae9336ad2e62b8bebf26e93306b4a0315992a0ec231e9e59a0a39a0556492a607af251b398d083cbcb81b876177a8083a19ca5307c3868d6944906e050bd1bbafa3423ede4760c4c1ec61c148a1d4847a58b44c2d978a6444d2a4068870b98f303c1a1c031e2029e07ea964930a3cd8b55ff359e18f5a980a5e4c43fc13b7bb088fb45b65aa0397e68121731def46e0aee353014ba63c0b5560860cf4137f60ed4f4cee37f6e5efd64d2cda42b00c759ec2490f314cbb005726aec23eea21a66ece3fa0f230e2bd0f27141016ca95a70460dd77d685a0fb381871dc62f00d2a0595e8645c7a9fd9b79b13d59cec101b52beced9650095ae72a7263c1b0c15c84799aec5124ee7c9d1064d10a335cf8e8e48f6ff6a6f2e8d7088e3d5dd5d9af6f001c1b44a2d328cee4dd5e2e9550f3ea52def87aa3f2f930e1197e631be6b7f2332df5bcb68a6e6a431b009695645d37c133c90fa5ed4bd977755877007c6c832e21337103369b6becf3d005d1fd59991bddad8c1a7838da3ec62fcc41998bc984ce2273164828c4d7a1664af1a8009ec400ffb39304014da697a0ee840068ac673ca7d60d81b10e25406bbaf9b6c3ea63c1ddd1178828c595c95f8f5131840cb1ae6c69eaafa037622a4f63cc6aad478a909b6458ef5c562df7c64a5aed0691b3e878703d50aee3a1b5f9030168580d15feb99c8b90143a221edf4d08ddf3282843339a6c21d8f1a68c57fe32a95e2b59b4087043dbb9c9ebebf929c14da7b2673b41dd8bb63d2e1c07b7251a314f2ee48bdee0315eb094e5fdf5c8eff6e564fd1a08f5bab420c65998c1593fdd08c24d614933022de0e1a0f79b7a8169750ccaf8e1f8715eac0aff61a85f2ba0aec615ce0d5790a1903c0f86f8274ffc5ed38c6c90455c9e43035cf73c4746c11d2c6629fe9fac7e1fbc0ddd81b7070d62fad2e8eee42a9f502014c2ac2a0ccc480e37acff804eb4c6fe3866a8f3c691aac6ab05820fb31a2730b02b1290321fbcda0be64d845e942f451c266a119e471b3543d047f604916dc5684428a43fc9f8f5c6e3fc33d3fe0504ec01853a3bf7762c02e4e2380aea8e790defc20b4dcf36e04db93647661c274b5c93af45a14c104b0f53c42b7e6facab3a2ded66d21bbdedc03fb9aa379b6abeb63acee726edd2a88d6bd1a5892efa2a452256c48af1ac1050eab158ff149b4a39bd5a711a9b61815d39b36d227ecaf0467201ced67a525a9b3aee87ea5a35b4993cbe7e39db0fafe23113b02bb96f751a6eb58d7742e7b0b284e6333855cf251cdb5b582efdb350595be6b42a1ae863d80e73171c6544242e9bf793d17678c7956c3aaca77850772f6b1e02b7ea20b2f1096c7af01f2bc5a358929d"}) socket(0xa, 0x2, 0x88) 37.889870971s ago: executing program 6 (id=5269): sendmsg$auto_IOAM6_CMD_ADD_NAMESPACE(0xffffffffffffffff, &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8040}, 0x24004054) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) getrandom$auto(0x0, 0x6000000, 0x3) remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0x3, 0x4) r0 = socket$nl_generic(0x10, 0x3, 0x10) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) unshare$auto(0x40000080) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) move_pages$auto(0x1, 0xf54, 0x0, 0x0, 0x0, 0x8000000000000000) mmap$auto(0x0, 0x2000b, 0x2, 0xeb1, 0x3fe, 0x8000) io_uring_setup$auto(0x6, 0x0) close_range$auto(0x2, 0x8000, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket(0x2, 0x2, 0x1) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002dbd7001f9dbca250100000008000a00000000000500070000000000080009009c781e010600020000000000080017"], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x48080) io_uring_setup$auto(0x6, 0x0) socket(0x2, 0x3, 0xa) setsockopt$auto(0x3, 0x0, 0x40, 0x0, 0x10001) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_wireguard(&(0x7f0000000100), r0) sendmsg$auto_WG_CMD_SET_DEVICE(r3, &(0x7f00000028c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)={0x28, r4, 0x21, 0x70bd26, 0x25dfdbfa, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'veth0_to_hsr\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x841}, 0x80) mlockall$auto(0x7) sendmsg$auto_ETHTOOL_MSG_DEBUG_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x20044840) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket(0x10, 0x2, 0xc) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)=ANY=[@ANYRES16=r6, @ANYRES32=r3, @ANYRESOCT, @ANYRESDEC=r5, @ANYRESOCT=r6, @ANYRESOCT=r5], 0x18}, 0x1, 0x0, 0x0, 0x60008004}, 0x80) 36.735331024s ago: executing program 6 (id=5276): socket(0x18, 0xa, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x2, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000940)='/dev/ram13\x00', 0x105000, 0x0) ioctl$auto(0x3, 0x401070ca, 0xa742) (async, rerun: 32) socket(0x21, 0x2, 0x2) (async, rerun: 32) mmap$auto(0x0, 0x9, 0x3ff57696, 0x9b72, 0x2, 0x8000000000008000) (async) io_uring_setup$auto(0x6, 0x0) (async) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) (async, rerun: 64) futex_wait$auto(0x0, 0x0, 0x7f, 0x2, 0x0, 0x1) (async, rerun: 64) futex_wake$auto(0x0, 0x8, 0x7, 0x2) (async) setsockopt$auto(0x200000000000003, 0x1, 0x2c, 0x0, 0x300) (async) mmap$auto(0xf000, 0x8, 0x1000000003, 0x9b72, 0x2, 0x8000) openat$auto_ctl_device_fops_user(0xffffffffffffff9c, 0x0, 0x20002, 0x0) (async, rerun: 32) socket(0x2, 0x80002, 0x73) (rerun: 32) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptyua\x00', 0x20804, 0x0) (async, rerun: 32) openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ttyua\x00', 0x109000, 0x0) (async, rerun: 32) close_range$auto(0x2, 0x8, 0x0) (async) openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f00000031c0)='/dev/ttyua\x00', 0x109000, 0x0) 36.563888065s ago: executing program 6 (id=5278): sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x800) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14f602, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_trace_options_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/tracing/options/blk_cgname\x00', 0x80080, 0x0) socket(0xa, 0x3, 0x3a) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x20011, 0x11, 0xeb1, 0xffffffffffffffff, 0x5) r0 = semctl$auto(0x201, 0xfffffffffffffffa, 0x3, 0x9) ioctl$auto_def_blk_fops_fs(0xffffffffffffffff, 0x1277, &(0x7f0000000000)) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) mmap$auto(0xfffffffffffffffd, 0xd5, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) socket(0x21, 0x2, 0x2) move_pages$auto(r0, 0x2000000000006, 0x0, 0x0, 0x0, 0x2) r1 = socket(0x11, 0x80003, 0x304) setsockopt$auto(r1, 0x107, 0x12, 0x0, 0x4) setsockopt$auto(r1, 0x107, 0x5, 0x0, 0x24) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) sendmsg$auto_ILA_CMD_GET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x8d1}, 0x4000050) mknod$auto(&(0x7f0000000180)=':,\x00', 0xc9, 0xfffffffa) r2 = openat$auto_proc_mem_operations_base(0xffffffffffffff9c, &(0x7f0000000300)='/proc/self/mem\x00', 0x100, 0x0) lseek$auto(r2, 0x9, 0x4) unshare$auto(0x800) execve$auto(&(0x7f0000000040)=':,\x00', 0x0, &(0x7f0000000200)=&(0x7f00000001c0)=':,\x00') ioctl$auto(0xc8, 0xfe1, 0xe) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) setsockopt$auto(0x3, 0x10000000084, 0x12, 0x0, 0x4) 21.388643614s ago: executing program 35 (id=5278): sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x800) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14f602, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_trace_options_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/tracing/options/blk_cgname\x00', 0x80080, 0x0) socket(0xa, 0x3, 0x3a) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x20011, 0x11, 0xeb1, 0xffffffffffffffff, 0x5) r0 = semctl$auto(0x201, 0xfffffffffffffffa, 0x3, 0x9) ioctl$auto_def_blk_fops_fs(0xffffffffffffffff, 0x1277, &(0x7f0000000000)) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) mmap$auto(0xfffffffffffffffd, 0xd5, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) socket(0x21, 0x2, 0x2) move_pages$auto(r0, 0x2000000000006, 0x0, 0x0, 0x0, 0x2) r1 = socket(0x11, 0x80003, 0x304) setsockopt$auto(r1, 0x107, 0x12, 0x0, 0x4) setsockopt$auto(r1, 0x107, 0x5, 0x0, 0x24) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) sendmsg$auto_ILA_CMD_GET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x8d1}, 0x4000050) mknod$auto(&(0x7f0000000180)=':,\x00', 0xc9, 0xfffffffa) r2 = openat$auto_proc_mem_operations_base(0xffffffffffffff9c, &(0x7f0000000300)='/proc/self/mem\x00', 0x100, 0x0) lseek$auto(r2, 0x9, 0x4) unshare$auto(0x800) execve$auto(&(0x7f0000000040)=':,\x00', 0x0, &(0x7f0000000200)=&(0x7f00000001c0)=':,\x00') ioctl$auto(0xc8, 0xfe1, 0xe) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) setsockopt$auto(0x3, 0x10000000084, 0x12, 0x0, 0x4) 14.886235698s ago: executing program 5 (id=5381): r0 = socket(0x2, 0x3, 0xa) r1 = syz_genetlink_get_family_id$auto_nlbl_cipsov4(&(0x7f0000000080), r0) sendmsg$auto_NLBL_CIPSOV4_C_LIST(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)={0x94, r1, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x8}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x4}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xffffffff}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x8}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x10}, @NLBL_CIPSOV4_A_MLSLVLLST={0x3e, 0x8, 0x0, 0x1, [@generic="bb87945d2f76b2f1e5895894a21ad9264abba7f1c86628b2c72f6435d28277f6e3451a3881519745a8d0e5b10f87b4cb318d3dd28984", @typed={0x4, 0xde}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x40804}, 0x40) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) getcwd$auto(0x0, 0xffffffffffffffff) setsockopt$auto(0x3, 0x0, 0x32, 0x0, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000040), r2) sendmsg$auto_TIPC_NL_NET_SET(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000002f80)={0x20, r3, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@typed={0x8, 0x1, 0x0, 0x0, @u32=0xb}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x815}, 0x8000) openat$auto_tracing_mark_fops_trace(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing/trace_marker\x00', 0x1, 0x0) 14.41170429s ago: executing program 5 (id=5382): openat$auto_tracing_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/per_cpu/cpu1/trace\x00', 0x80800, 0x0) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x9, 0x3, 0x8012, 0x3, 0x8000) sendfile$auto(0x6, 0x3, 0x0, 0x8000) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) unshare$auto(0x40000080) writev$auto(0x1, &(0x7f0000000100)={0x0, 0x400000000000fdef}, 0x1) madvise$auto(0x0, 0xffffffffffff0005, 0x19) munmap$auto(0x20001000, 0x7) mmap$auto(0x40000000000, 0x202000b, 0x80000003, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x21, 0x2, 0x2) setsockopt$auto(0x3, 0x1, 0x20, 0x0, 0x9) close_range$auto(0xffffffffffffffff, 0xfffffffffffff000, 0xffffffff) mmap$auto(0xfffffffffffffffe, 0x8, 0x8003, 0xeb3, 0xfffffffffffffff9, 0x0) socket$nl_generic(0x10, 0x3, 0x10) timer_create$auto(0x3, 0x0, &(0x7f0000000140)=0x6) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x7fff) timer_settime$auto(0x0, 0xffff8000, &(0x7f00000000c0)={{0xf, 0x10007}, {0x0, 0x800}}, 0x0) mmap$auto(0x0, 0x202000b, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = io_uring_setup$auto(0x6, 0x0) r1 = socket(0x1d, 0x5, 0x84) sendto$auto(r1, 0x0, 0x401, 0x101, &(0x7f0000000000)=@generic={0xa, "e2e18340cba8fef08d006000"}, 0x1c) close_range$auto(0x2, 0x8, 0x0) move_pages$auto(0x0, 0x1002, 0x0, 0x0, 0x0, 0x2) read$auto_transactions_fops_(r0, &(0x7f0000000180)=""/218, 0xda) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4008000}, 0x10080) setreuid$auto(0x4, 0x8) ioctl$auto_def_blk_fops_fs(0xffffffffffffffff, 0x1, &(0x7f0000000000)) madvise$auto(0x8c3a, 0x2, 0xf) 13.148132109s ago: executing program 5 (id=5384): r0 = socket$auto(0xb, 0x10, 0xffffffff) r1 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000080), 0xffffffffffffffff) fstat$auto(0xffffffffffffffff, &(0x7f00000000c0)={0x1, 0x1a4f, 0x9, 0x8, 0xee01, 0xffffffffffffffff, 0x0, 0x9, 0x0, 0x400, 0xffffffff, 0x7, 0x6, 0x6b0fc530, 0x5, 0x3, 0x6}) lstat$auto(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)={0x4, 0x0, 0x7, 0xb05b7e5, 0xee01, 0xffffffffffffffff, 0x0, 0x8000000000000000, 0x6, 0x3, 0xfff, 0x9, 0x4, 0xff, 0xbada, 0xa560, 0x8}) r4 = openat$auto_lowpan_control_fops_6lowpan(0xffffffffffffff9c, &(0x7f0000000280), 0x8401, 0x0) r5 = setfsuid$auto(0x0) sendmsg$auto_TIPC_NL_BEARER_GET(r0, &(0x7f0000000540)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000500)={&(0x7f00000002c0)={0x224, r1, 0x400, 0x70bd2b, 0x25dfdbfc, {}, [@TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@typed={0x4, 0x91}, @nested={0x4, 0xb7}]}, @TIPC_NLA_MON={0x48, 0x9, 0x0, 0x1, [@typed={0x8, 0x3d, 0x0, 0x0, @uid=r2}, @nested={0x20, 0x67, 0x0, 0x1, [@nested={0x4, 0x8f}, @generic="720012faeed97cb21e5b1c2724b9deb01484511c", @nested={0x4, 0x6d}]}, @typed={0x14, 0xa5, 0x0, 0x0, @ipv6=@private0}, @typed={0x8, 0x126, 0x0, 0x0, @uid=r3}]}, @TIPC_NLA_NODE={0x1bb, 0x6, 0x0, 0x1, [@nested={0x20, 0x9c, 0x0, 0x1, [@typed={0x1a, 0xd9, 0x0, 0x0, @str='/proc/self/clear_refs\x00'}]}, @typed={0x8, 0x111, 0x0, 0x0, @fd=r4}, @typed={0x8, 0x61, 0x0, 0x0, @uid=r5}, @nested={0x8, 0xd2, 0x0, 0x1, [@nested={0x4, 0x139}]}, @nested={0xc, 0x38, 0x0, 0x1, [@nested={0x4, 0xc7}, @nested={0x4, 0x56}]}, @generic="3f79714a7453829f0c2e928351be4395c70bbedf59676a899d97e6e70d4c6499131c43f1768f76a58d5ebac2efb6b766c449f896e9c829dc487085906e17a94d7681e45abad09f53a74cfb281b6d00e08b8b4d9144c4aaa34898447d1f85b202f80155e6d44d78a8d66eba7c12abea3f10cb61030133f4d71927f32e8396673a57a9c553100813eaefac48e728e3d2909ee2c7e453dea37bff5259638f2e2f661abead09a42f05b61c95e1c54d867301551e36a52564bbc678b5cffb5caddb150c8a410e50dbf9e7a8a193d315f00bacbe94c1ed90dae01116129594", @generic="f9d98f0df906fff2e886f138cd270274e3427cb6b9f0733fe65975f308bd03c948d557aac75e9d928b1aac19e786883702a9db958c01beb2e2dbb08dc28faa94c36941", @typed={0x8, 0xdf, 0x0, 0x0, @ipv4=@private=0xa010102}, @nested={0x35, 0x138, 0x0, 0x1, [@nested={0x4, 0x62}, @nested={0x4, 0x11f}, @generic="709b5c5062ace6be67cd60ae373960981b19c293f5f47305bcc66443771d033d372d74933c16d63a0f"]}, @typed={0x14, 0x49, 0x0, 0x0, @ipv6=@loopback}]}]}, 0x224}, 0x1, 0x0, 0x0, 0x4000040}, 0x0) r6 = openat$auto_proc_clear_refs_operations_internal(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/clear_refs\x00', 0x400000, 0x0) ioctl$auto(0xc8, 0x7fff, r6) 12.904875694s ago: executing program 5 (id=5386): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) unshare$auto(0x40000080) mmap$auto(0x804, 0x400008, 0x3, 0x9b71, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x0, 0x0) ppoll$auto(&(0x7f0000000080)={r0, 0x7980, 0x6}, 0x2, 0x0, 0x0, 0x8) ioctl$auto_SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f0000000100)=0x8) acct$auto(&(0x7f0000000080)='/proc/sys/kernel/sched_deadline\xdcBH\xc7H\xe2\x1d\b\x00ax_us\x00\xae\xb5\x86\xe9\xf6\xfe\x9b6\x91\x8f\x158\xe7qwI\t0\xc3\xd1\xcd\xf5\x04\xe0B\xe0U<\xb1\x1d\xda\xd2') removexattr$auto(0x0, 0x0) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS1\x00', 0x20000, 0x0) ioctl$auto_TIOCGDEV2(r2, 0x542f, 0x0) mmap$auto(0x4, 0x2020009, 0x8, 0xeb1, 0xffffffffffeffffa, 0x7ffd) getrandom$auto(0x0, 0x6000000, 0x3) sendmsg$auto_WG_CMD_GET_DEVICE(0xffffffffffffffff, 0x0, 0x4000) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x41ee43, 0x193) syz_clone(0x31080e00, 0x0, 0x0, 0x0, 0x0, 0x0) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) unshare$auto(0x200) clone$auto(0xfffffffe20000, 0x2, 0xfffffffffffffffc, 0xfffffffffffffffc, 0x800ffffffff) connect$auto(0x3, &(0x7f00000001c0), 0x55) mmap$auto(0x0, 0x20009, 0x10000000000df, 0xeb2, 0xffffffffffffffff, 0x8000) r3 = socket(0x2a, 0x2, 0x1) connect$auto(r3, &(0x7f00000000c0)=@qipcrtr={0x2a, 0xffffffff, 0xfffffffe}, 0x55) write$auto(0x3, 0x0, 0x3f00) prctl$auto(0x39, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xfffffffffffefffd, 0x17) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000002500), 0xffffffffffffffff) 10.94741365s ago: executing program 5 (id=5393): r0 = openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) ioctl$auto_IOCTL_VMCI_NOTIFICATIONS_RECEIVE(r0, 0x7a6, 0x3) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), r2) r4 = socket(0x18, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x80047437, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000640)={'wlan1\x00', 0x0}) sendmsg$auto_NL80211_CMD_DEL_PMK(r2, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000001440)={&(0x7f0000000c40)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010026bd73004edbdf258e00000008000300", @ANYRES32=r5], 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x8000) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000140), r2) r6 = syz_genetlink_get_family_id$auto_802_15_4_mac(&(0x7f00000003c0), r4) sendmsg$auto_IEEE802154_LLSEC_DEL_KEY(r1, &(0x7f0000000540)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000500)={&(0x7f0000000780)=ANY=[@ANYBLOB="00000100970732f6b882e5b92168a141b2a96f353d", @ANYRES16=r6, @ANYBLOB="04002dbd7000fcdbdf252800000084001e00f55bf7182196010ae5fd61a6228ace96804c05d6f577e64a516a2ab3ec25eaa93b001269006e1ac5efaebb2e8675fe7036fd2494fd1a9a2c3305524c8e04bec2be4b61656d8b2954e34e00e2f949eb482cf5652b0c648c64d93ffacf503b00b2bac19c6c29b460edfc7fce23584fa85db818b2810d0027b2eca15b0e1cd7562b050022000100000005001b00050000000500280080000000050019007f00000005003600000000001400010070696d367265670000000000000000000500220001000000"], 0xdc}}, 0x40000c0) mmap$auto(0xff, 0x8000000002020009, 0x4, 0x8010, 0xfffffffffffffffa, 0x8000) capget$auto(0x0, 0xfffffffffffffffe) capset$auto(0x0, &(0x7f0000000180)={0x1, 0x7, 0x6}) openat$auto_trace_fops_debugfs(0xffffffffffffff9c, &(0x7f0000000580), 0x22200, 0x0) mmap$auto(0x3, 0x2020009, 0x5aab8d51, 0xebf, r4, 0xff) r7 = getpgid(0xffffffffffffffff) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) getcwd$auto(0x0, 0xffffffffffffffff) rmdir$auto(0x0) r8 = syz_clone(0xa24200, &(0x7f00000001c0)="7987d32672c9cbc7402171496dc6fe42b39368d1c488e95472e8e83cfbc71927717f402c9ab597f4950bc41d921288268cfb618109215a81a0682fa84ec7b294ac79de2ca840f069641f7c0e3051e3ce18a6cb15b6549489dfa6b2395ea8ce98c5954b86827134baaa698851a4e7349587293c97cb02fad01dca9ace4b79725af90a8b66b19ab68c27f77dbd15e269864b11788aa364dca573d7171d399c7480da2b2aa015eb5d37acab38bb987a6c4e6923a0244c0c4b6d", 0xb8, &(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000000300)="f58aa6eba953e681d8cf7dc0a988542a01758e9e09353e1581589370c728b49b1b03772881dec2a9715f05379a0b8016174f79acd5c685e7089b213211259385d1fff0a636782fb19bc95ca5558e30e300a65bea") syz_open_procfs$namespace(r8, 0x0) socket(0x2, 0x801, 0x100) r9 = syz_genetlink_get_family_id$auto_macsec(&(0x7f0000000600), r4) capget$auto(&(0x7f0000000680)={0x2, r7}, &(0x7f00000006c0)={0x2, 0x73, 0x7}) r11 = clone$auto(0x7, 0x7, &(0x7f0000000700)=0x2, &(0x7f0000000740)=0x7ae3ad66, 0x5) sendmsg$auto_MACSEC_CMD_ADD_RXSC(r4, &(0x7f0000000b80)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000b40)={&(0x7f00000014c0)=ANY=[@ANYBLOB="74040000", @ANYRES16=r9, @ANYBLOB="000027bd7000fddbdf2501000000c90203800800340064010100f8da449a3469454db2205f08793d2bfa0d0cf7221be1f8621ea082899aa981528731b7b037d222b72938aba9f48f914d9fdcbea5cb29acbcbf26a8ea22d09e1ab470232bc8ba1e056f3d3242e000817c88d1f61400ab00fc020000000000000000000000000000b3f10a82b8a888c75d6d2060161f2b438f88f8af2544b6b8e9e016191fb1a593bd3bff62c760e8c18a221f69ceb2bf850c49c1c78a99924a8f3ca8f2459d650b93bb7dd785f751814632b7e160943b8229ef2b02a0910a7ffbb5eded863cfd444e5f04d1fb612da2c19b277738c33218844d96d20203a95ae5db8d0ef1d1bcc002c243d23fb40ab3ec023144f1a088d4556c2461f5c9891d2367266e45ecb601ec800800b20000000000000000000000000000000001d10383dd6c6d4b23160bc56c33d5a993bc87a0d2752780dde5afadaa192a8db6e29df759d1fe2fff094d2b67ade11bff7f040099800400198008000b00", @ANYRES32=r10, @ANYBLOB='\b\x001\x00', @ANYRES32=r10, @ANYBLOB="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", @ANYRES32=r11, @ANYBLOB="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"/388], 0x474}, 0x1, 0x0, 0x0, 0x14}, 0x4) setsockopt$auto(0x3, 0x6, 0xc, 0x0, 0x81) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f0000000400)={0x1c, r3, 0x10, 0x70bd2c, 0x25dfdbfd, {}, [@NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x7fff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24008044}, 0x20048084) 9.804769147s ago: executing program 5 (id=5398): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) prctl$auto(0x38, 0x0, 0x4, 0x5, 0x10003) madvise$auto(0x0, 0xffffffffffff0001, 0x15) sendmsg$auto_IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="80060000", @ANYRES16=0x0, @ANYBLOB, @ANYRES32, @ANYBLOB="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"], 0x680}, 0x1, 0x0, 0x0, 0x4004080}, 0x0) write$auto_bm_entry_operations_binfmt_misc(0xffffffffffffffff, &(0x7f0000000500)="b72202b15a374a58daee3b243a7e0bae10e3a251bf530b0f7d3d97432fabaa1964ca4124758436a74012b4c39224c9308cd167d9bf66d83453de0d374120d3b4c2697202461da20ce5048bbdf2ab6b6d614a076a10dfaee4f406fcfcc53b369234cc4a91c521f74351a4322cb986fa92daf918199aa48b5868d4226c6890f5bde000662c5dcbd13106b879f29eadf442d7a6c9b66650386fbaae4d3e4e44fe5143c1bda89bb099ae5696b2587863e54dd4d941cf09f9b785a3d104341ea4a0fffe109263c05a617687d8f8941cdc273e1231c8d207db65dddc38ba3f8c9a7145b107db5331d0ce7535a4b86406bac9264efd44753bab020633b90779ce0916cebabb1e9b1884ec5853b69b57f22cc95059541d31369561b93e3177f1b8a21594159d3e55ae955b8ded9c54aa0c0d91a97fa15621045c426f1b515e9d2e86a5f3fc146e6540ab441419d35d252ca8ddc94992a53f80b75ac112a79db837bc90d5c2230b710cf37451baf26f7afaf7f02c0a9e2c035fe29218fc39e87263482cefe8a6f4a18348c872396a3172096bf6138c1ea262020d6519b7d28d48517b66bfbceed515f62a98593e8a3d509b7fb9841d8ccc4ec466ebdfe4bc9b58794bbb4ad2b284b531a849a4b1af99d390b29fe698776ceab6d62557d7334b0f13e5dbe7d28000b4d2a33de873f57c89b13518296c16a8e580f6e3bcf11ba3fd30de19b351b538d31067503ba8eda3867000133df97fe2adde19b88da4777a23bc821c765d4d2aa47df24962e1b682030c1a51e3299a735ec2b00d8cb2ba0c94f984eb6581b8c50177f145dc0aab114da4a8401f3250d10cea972c20737e75f593239f94eb4b43ff77cb0f34b04ecbd737436ba1b96574cbc41703f28f52369f25a41154f74cc3a2889689d22ab1fc7b962c78b8c04f80b3085b7d1c5147a17292dc20b87dfe20e97fa41a4b1d428f7ff4bde9c70ac458e6f4a40f8c603a86028bd112ee50681d926fbcaa3d8416e855de74de9544eacb1f59bc00b179d41c0263856f7fe6ffa4cab588072c0f5126e9bd0827b28d9b3667050a12f797c033cbcdaf865bea2abf43961aa43952a4731c60152cee8d928541cdc7ecf40cad21c12a11ff124e8ce2a308409040669c0b9700e4c02fa8261f3180e2cf259b9cf50e9d7d5f02eb04eda42e912542306a1f134ec2aa3a63c52d00ad7af778961124e056ba77fadb51ecea91d6ef80d70fd668225c73f9e8087d7a94d8844e65283f837a4cd7813ef8bb22601fa5f08ee4fd43acb74d90f64d6dc8ffca05a424884e2a023c2075cd2eb5c05f4c7097f0af6dcd1b6fa6694a223ea1a1d9662df2bafac63c8592aceb163564da69f6c97fcfb580fa7bfe1d8d7d6b7d7402d4a6766c884c9d0b63c63c388c4f68212f3a1baa46256d5999fc9d8961a6d81ba1beff9d99786423c7e4a163b02d929d645181d410cf4a8733a4e7b77883aa82fa89f6edfced671b60ffa01147b6e9166b9ea3a581b174caf7988abb7699792e986874b1ab1f7cdbcc92afa8daf2d5bdca431b1826a644b5a6cc1994ea6e9b114d175ed4684ff16876fbef9b993d68feb5a065399795e06af87179beffcb044a6493f7513292ea3fd2d14613adfa6cde3b6604e82b4b9ecb30001bb1567ed36dac57ab9a78f7c7981dcf48bb4fe5b944a6104f35d5f2d3425b53c69e3b9f578b6de41665a500f1ba04", 0x4bf) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) inotify_rm_watch$auto(0xffffffffffffffff, 0x84e4) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS1\x00', 0x20000, 0x0) madvise$auto(0x5, 0x2000040080000004, 0xe) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000040), r0) sendmsg$auto_TIPC_NL_LINK_SET(r0, &(0x7f0000002ac0)={0x0, 0xfffffffffffffeb0, &(0x7f0000002a80)={&(0x7f0000000180)=ANY=[@ANYRES8=0x0, @ANYRES16=r1, @ANYBLOB="010027bd7000ffdbdf250900000004000480"], 0x18}, 0x1, 0x0, 0x0, 0x4000094}, 0x8080) io_uring_setup$auto(0x8e3e, 0x0) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptys1\x00', 0x20400, 0x0) ioctl$auto_TIOCSWINSZ2(r2, 0x5414, 0x0) modify_ldt$auto(0x1, 0x0, 0x10) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x4, 0x40000f, 0x17) r3 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sg0\x00', 0x501940, 0x0) write$auto_sg_fops_sg(r3, &(0x7f00000000c0)="a1ba24b57d711f4e59f1811652787c5101cb0829a875b2d9578d9655abf7c485c8de20d5960e8c62ec71394cfe643c1d66616df32faac3d9971e269890fc975cb7ec23cec2fb8d61dd015954fe6ce3c1cb410e8a6ee8e2c6c7b3552fef0f6fad5b76832b31f15ab17e2fb67a0ccc17ae93ab9fd848ba3a602bf250428c99aee4d32f213fce9a32e1ca51fa3dbf51", 0x8e) madvise$auto(0xfffffffffffffffd, 0xffffffffffff0002, 0x19) fallocate$auto(0xffffffffffffffff, 0x1, 0x9, 0x80000000) mmap$auto(0x2, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0x8000000000000000, 0x15) madvise$auto(0x0, 0x1010001, 0x100000003) r4 = openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000600), 0x800, 0x0) ioctl$auto_RTC_AIE_ON(r4, 0x7001, 0x1300) setgroups$auto(0xe32, &(0x7f0000000040)=0x9) uname$auto(&(0x7f0000000280)={"017a23d49d4e4f89b7bb66d0528142ad4998ea9c70c06d0408e91b30b0b0d300722823e67e78003cff84dfc2528569e4ca4367c6216df84c3958d96ed2c499caff", "1e2157148e99091f121521269985a6a599863e135818f2ccc77a864d50fd1b2447c13d33dfb37033d53d69c4ff062abf19efab53fd75a00d4af7dbdef66e913103", "1fa81ccc6ffd05b516bdc4046cdfee68955b5ae48f8a322b6a0e4d8233d9491029f04050fca8a76d8b02739e3347e73f0f398e219952ca06e6c78655a70e097917", "0749ebba3d6f1ed9c077eeeb6deae36535af268af804ea0614e6c5ef0445f6fb05bec835636e440d94396dbeef246ceff774a1af2e8884df1be20351da9874f6fa", "4fbb5ffd975d9cf0800c3bf9046b1351f7371fcaea1fac30b4de0aac3b4f950cba906c482378f4337fe941454b8dbd36e51d285c95a92a20bec5a9907616fad85e", "d802740973602ea52b49799bc04ddb3c4e8995a5f9bd70c8c718fc2ebdffc648dd1195b4ac34305e4005000000000000984e42ee00"}) 5.583918456s ago: executing program 4 (id=5407): close_range$auto(0x0, 0xfffff004, 0x2) openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000700)='/dev/binderfs/binder0\x00', 0x2280, 0x0) socket$nl_generic(0x10, 0x3, 0x10) open(&(0x7f0000000000)='./file0\x00', 0x261c2, 0x84) r0 = openat$auto_dev_fops_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x142, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = gettid() syz_open_procfs$namespace(r1, &(0x7f0000000080)='ns/user\x00') sysfs$auto(0x2, 0x4, 0x4) mincore$auto(0x1000, 0x8001, 0x0) io_uring_setup$auto(0x877, 0x0) io_uring_enter$auto(r0, 0xcd00, 0x1, 0x7, 0x0, 0xffffffffffffffff) openat$auto_proc_coredump_filter_operations_base(0xffffffffffffff9c, &(0x7f0000000040), 0x24040, 0x0) close_range$auto(0x2, 0x8, 0x0) socketpair$auto(0x1, 0x5, 0x3, 0x0) write$auto_proc_reg_file_ops_compat_inode(0xffffffffffffffff, 0x0, 0x0) 5.358750579s ago: executing program 7 (id=5408): mmap$auto(0x7fff, 0x400008, 0xdb, 0x10, 0xffffffffffffffff, 0x1) mmap$auto(0x0, 0x9, 0x3ff57696, 0x9b72, 0x2, 0x8000000000008000) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x5, 0x2) syz_clone(0x40100100, &(0x7f0000000000), 0x0, 0x0, 0x0, &(0x7f0000000100)) mprotect$auto(0x0, 0x8000000000000001, 0x6) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) epoll_ctl$auto(0x1, 0x768, 0x1, &(0x7f0000000000)={0x8ea, 0x5}) unshare$auto(0x200) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/mnt\x00') setns(r0, 0x0) clone$auto(0xfffffffe20000, 0x2, 0xfffffffffffffffc, 0xfffffffffffffffc, 0x800ffffffff) close_range$auto(r0, 0xffffffffffffffff, 0x4) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) close_range$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket(0x2, 0x3, 0x0) r3 = syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/time\x00') close_range$auto(0x0, 0xfffffffffffff000, 0x2) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_SET_MULTICAST_TO_UNICAST(r4, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000100)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01002bbd7000fcdbdf257900000028000e00897e0a7490f7effb140d438a8eae340b5af4ff191719263481f77102d3c53c8e8cfbf2f71902dd082e41b142c465a1"], 0x3c}, 0x1, 0x0, 0x0, 0x24000804}, 0x0) r6 = geteuid() setreuid$auto(r6, 0x0) setuid$auto(r6) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) io_uring_setup$auto(0x48, 0x0) socket(0x10, 0x2, 0x9) setsockopt$auto(r3, 0x1, 0xb, 0x0, 0x16) sendmsg$auto_NL80211_CMD_GET_REG(r1, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="6c020000", @ANYRES16=r5, @ANYBLOB="390025bd7000fcdbdf251f000000060014017d00000037022c800800d200", @ANYRES32=r6, @ANYBLOB="6f015b8004000b80595498ae69498146e3a0214e3d16801106003400f7c54e1504002b8094753a0b055277ab3ff41af1c36a2268bd46835ea87b8450e0189fa337e6dd328bdca5405f3d094bb7000000000000000400298008009900"/116, @ANYRES16=r2, @ANYBLOB="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"], 0x26c}, 0x1, 0x0, 0x0, 0x20000008}, 0x0) setpriority$auto(0x2, 0x7, 0xfffffff9) 5.186567649s ago: executing program 4 (id=5409): r0 = openat$auto_stat_fops_per_vm_kvm_main(0xffffffffffffff9c, 0x0, 0x80000, 0x0) read$auto_stat_fops_per_vm_kvm_main(r0, 0x0, 0x0) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/pts/ptmx\x00', 0x0, 0x0) mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) r2 = open_by_handle_at$auto(0xffffffffffffffff, 0x0, 0x4) syz_genetlink_get_family_id$auto_netdev(0x0, r2) r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$auto_NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010029bd700001dbdf250200000008000300", @ANYRES32=r5, @ANYBLOB="05003d0005000000"], 0x24}, 0x1, 0x0, 0x0, 0x24048080}, 0x80) fstat$auto(0xffffffffffffffff, &(0x7f0000000100)={0x8, 0x400, 0x9, 0x6, 0xee00, 0xee00, 0x0, 0x5, 0xfffffffffffffffe, 0x1, 0x100000001, 0x1, 0x2, 0x8, 0x4, 0xffffffffffffffff, 0x9}) r6 = getegid() r7 = getpgid$auto(0x0) msgctl$auto(0x1, 0xc2, &(0x7f0000000480)={{0x5, 0x0, r6, 0x400, 0x10000, 0x252, 0x6}, &(0x7f0000000400)=0xc, &(0x7f0000000440)=0xf7, 0x5, 0x4, 0x1, 0x1, 0xddf, 0x10, 0xb, 0xd8, @inferred, @inferred=r7}) socket(0x11, 0x3, 0x9) socket$nl_generic(0x10, 0x3, 0x10) timer_create$auto(0xfffffffd, 0x0, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/pts/ptmx\x00', 0x2380, 0x0) timer_settime$auto(0x0, 0xffff8000, &(0x7f00000000c0)={{0xf, 0x10007}, {0x9}}, 0x0) timer_gettime$auto(0x0, 0x0) socket(0x848000000015, 0x805, 0x0) ioctl$auto_TCFLSH2(r1, 0x8910, 0x0) 3.588851117s ago: executing program 4 (id=5410): r0 = socket(0xa, 0x2, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x20009, 0xdf, 0x12, 0x401, 0x8000) r1 = socket(0x2, 0x1, 0x0) sendmmsg$auto(r1, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x2, 0xb}, 0x800009}, 0x5, 0x20000000) r2 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x800, 0x0) pwrite64$auto(0xc8, &(0x7f0000000000)='\xfc\xff\xff\xff\xff\xff\xff\xffRN8\x99\x88\xf5s\x1cJ\x99\x00:c\x14\r>\x94\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\xf1`\x9f\x1e\xf9\xa4\xf8\x15\x02l@\xae\x18\xc0\xc1\xf2\x14^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2\xdac$w\x883\xac\xcd\x96\xc2\x93\x0e\x12/v0\x90\x915?', 0x4c, 0x9) poll$auto(&(0x7f0000000040)={r2, 0x1000, 0x94}, 0x4, 0xfffff800) recvmmsg$auto(0x3, 0x0, 0x10000, 0x6, 0x0) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, 0x0, 0x8004) iopl$auto(0x3) madvise$auto(0x0, 0xffffffffffff0001, 0x15) mmap$auto(0x0, 0x80000000, 0xfffffffffffffffc, 0x9b71, 0x2, 0x8) get_mempolicy$auto(0x0, 0x0, 0x81, 0x8, 0x3) connect$auto(0x3, &(0x7f0000000140), 0x55) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x400c000) r3 = bpf$auto(0x0, 0x0, 0xfbf) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x89b0, &(0x7f0000000140)={'vlan0\x00'}) shutdown$auto(0x200000003, 0x2) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, r3, 0x8000) write$auto(0x3, 0x0, 0x296) sendmsg$auto_NLBL_MGMT_C_LISTDEF(r1, 0x0, 0x20048800) r4 = pipe2$auto(&(0x7f0000000000)=r0, 0x4) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) unshare$auto(0x3) mmap$auto(0xfffffffffffffffe, 0xffffffffffffffff, 0x80000000df, 0x14, r4, 0x8000) io_uring_setup$auto(0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x2c, 0x3, 0x4) 3.095304998s ago: executing program 0 (id=5412): r0 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r0, &(0x7f0000000080)={{0x0, 0x8002, &(0x7f00000002c0)={0x0, 0xc4}, 0x2, 0x0, 0x6, 0x1}, 0x5}, 0x3, 0x0) 2.999895999s ago: executing program 7 (id=5413): mmap$auto(0x0, 0x2400008, 0xe1, 0x9b72, 0x2, 0x8000) syz_genetlink_get_family_id$auto_ovs_meter(0x0, 0xffffffffffffffff) sendmsg$auto_OVS_METER_CMD_SET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x52204b}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x880) mmap$auto(0x0, 0x8, 0xdc, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0x3, 0x66) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) madvise$auto(0x100000, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0xffffffffffff0001, 0x15) mseal$auto(0x1ffff000, 0x7dda, 0x0) openat$auto_short_retry_limit_ops_(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/ieee80211/phy15/short_retry_limit\x00', 0x0, 0x0) r0 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x1, 0x7) madvise$auto(0x0, 0x5, 0x19) mount_setattr$auto(r0, &(0x7f0000000040)='./file0\x00', 0x1, &(0x7f00000000c0)={0xfffffffffffffff8, 0xe7, 0xff, @inferred=r0}, 0x48b1) bpf$auto(0x5, &(0x7f0000001080)=@bpf_attr_7={@prog_id=0xc, 0x92f1, 0x4}, 0xa) 2.516282978s ago: executing program 0 (id=5414): socket$nl_generic(0x10, 0x3, 0x10) setsockopt$auto(0x4, 0x0, 0x61, 0xfffffffffffffffe, 0x2000000) (async) mmap$auto(0x0, 0x2020005, 0x1000000000000007, 0xeb1, 0x0, 0x1008000) (async) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/net/rpc/nfsd\x00', 0xe0d41, 0x0) (async) r0 = socket(0x29, 0x2, 0x0) (async) r1 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200", @ANYBLOB="5de1"], 0x1ac}}, 0x40000) (async) recvmmsg$auto(r1, &(0x7f0000000140)={{0x0, 0x1, &(0x7f0000000080)={0x0, 0x400}, 0x5, 0x0, 0x200002, 0x8}, 0x803}, 0xfffffff9, 0x10, 0x0) (async, rerun: 64) ioctl$auto(r0, 0x8923, 0x24) (rerun: 64) 1.559726388s ago: executing program 7 (id=5415): r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS1\x00', 0x20000, 0x0) mprotect$auto(0x1ffff000, 0x1, 0x9) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x3ffffffffffffffe, 0x20005, 0x18bad, 0x10, r0, 0x8000) open_by_handle_at$auto(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x1}, 0x4) socket(0x10, 0x3, 0x6) sendmsg$auto_NL802154_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16, @ANYBLOB="010026bd7000fddbdf2507"], 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x4000800) r1 = gettid() rt_sigqueueinfo$auto(r1, 0x1, 0x0) r2 = epoll_create$auto(0x4) r3 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video14\x00', 0x169082, 0x0) epoll_ctl$auto(r2, 0x1, r3, 0x0) syz_clone3(&(0x7f0000000400)={0x40100, &(0x7f0000000040), &(0x7f0000000100), &(0x7f0000000140), {0x2}, &(0x7f0000000180)=""/110, 0x6e, &(0x7f0000000340)=""/151, &(0x7f0000000240)=[r1], 0x1, {r2}}, 0x58) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1c00"], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) open$dir(&(0x7f0000000280)='./file0\x00', 0x22800, 0x50) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) io_uring_setup$auto(0x6, 0x0) openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000005280), 0x40400, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) close_range$auto(0x0, 0xfffffffffffff000, 0x2) open(&(0x7f00000000c0)='./cgroup\x00', 0x0, 0xb5d1af1605322df2) r4 = openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/scsi/sg/version\x00', 0x8080, 0x0) lseek$auto(r4, 0x5, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) unshare$auto(0x40000080) setrlimit$auto(0x1000000007, 0x0) getrandom$auto(0x0, 0x6000000, 0x3) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) mlockall$auto(0x7) 1.383859641s ago: executing program 0 (id=5416): mmap$auto(0x0, 0x2000d, 0x4000000200df, 0xeb1, 0x404, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x28, 0x801, 0x0) shutdown$auto(0x200000003, 0x2) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/tracing/per_cpu/cpu1/trace_pipe_raw\x00', 0x10003, 0x0) socket(0x2, 0x5, 0x0) socketpair$auto(0x1e, 0x1, 0x0, 0x0) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/pts/ptmx\x00', 0x0, 0x0) ioctl$auto_TIOCSETD2(r0, 0x5423, 0x0) ioctl$auto_TCFLSH2(r0, 0x8925, 0xfdfd) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x2000a, 0x4000000204d6, 0xeb1, 0x404, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) io_uring_setup$auto(0x7fff, 0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snd/controlC1\x00', 0x22000, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(r1, 0xfffffffffffff000, 0x2) select$auto(0x6, 0x0, &(0x7f00000000c0)={[0xbb0, 0x8101, 0x80, 0x1, 0xb, 0x4db11da, 0x3, 0x7f, 0x2, 0x0, 0x401, 0x1, 0x10000, 0x7, 0x6, 0xb83]}, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_IPVS_CMD_GET_CONFIG(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="01012abf07000000000000000000"], 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x40000) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000e40)='/sys/devices/pci0000:00/0000:00:01.3/config\x00', 0x2, 0x0) read$auto(r4, 0x0, 0x7ff) openat$auto_nvram_misc_fops_nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x8002, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ppoll$auto(&(0x7f0000000040)={r5, 0x3, 0x3}, 0x8, 0x0, 0x0, 0x8) io_uring_setup$auto(0x9, &(0x7f0000000100)={0x100002, 0x6, 0xfc39, 0x6, 0x6, 0x9, r5, [0x3, 0x3, 0x10000], {0xffffffef, 0x2, 0x90000000, 0x3, 0x2000, 0x9, 0x9, 0xf25, 0xc}, {0x1, 0x2, 0x9, 0xff78, 0xfffffff4, 0x9, 0xd53, 0x805}}) 1.134888758s ago: executing program 4 (id=5417): r0 = openat$auto_stat_fops_per_vm_kvm_main(0xffffffffffffff9c, 0x0, 0x80000, 0x0) read$auto_stat_fops_per_vm_kvm_main(r0, 0x0, 0x0) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/pts/ptmx\x00', 0x0, 0x0) mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) r2 = open_by_handle_at$auto(0xffffffffffffffff, 0x0, 0x4) syz_genetlink_get_family_id$auto_netdev(0x0, r2) r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$auto_NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010029bd700001dbdf250200000008000300", @ANYRES32=r5, @ANYBLOB="05003d0005000000"], 0x24}, 0x1, 0x0, 0x0, 0x24048080}, 0x80) fstat$auto(0xffffffffffffffff, &(0x7f0000000100)={0x8, 0x400, 0x9, 0x6, 0xee00, 0xee00, 0x0, 0x5, 0xfffffffffffffffe, 0x1, 0x100000001, 0x1, 0x2, 0x8, 0x4, 0xffffffffffffffff, 0x9}) r6 = getegid() r7 = getpgid$auto(0x0) msgctl$auto(0x1, 0xc2, &(0x7f0000000480)={{0x5, 0x0, r6, 0x400, 0x10000, 0x252, 0x6}, &(0x7f0000000400)=0xc, &(0x7f0000000440)=0xf7, 0x5, 0x4, 0x1, 0x1, 0xddf, 0x10, 0xb, 0xd8, @inferred, @inferred=r7}) socket(0x11, 0x3, 0x9) socket$nl_generic(0x10, 0x3, 0x10) timer_create$auto(0xfffffffd, 0x0, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/pts/ptmx\x00', 0x2380, 0x0) timer_settime$auto(0x0, 0xffff8000, &(0x7f00000000c0)={{0xf, 0x10007}, {0x9}}, 0x0) timer_gettime$auto(0x0, 0x0) socket(0x848000000015, 0x805, 0x0) ioctl$auto_TCFLSH2(r1, 0x8910, 0x0) 1.04572551s ago: executing program 0 (id=5418): r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sys/vm/nr_overcommit_hugepages\x00', 0x100, 0x0) clone$auto(0x1, 0x100, 0x0, 0x0, 0x800) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) r1 = syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_OVS_DP_CMD_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010026bd7000fcdbdf2501000000080002000400000008000100265352000a0002"], 0x34}, 0x1, 0x0, 0x0, 0x801}, 0x80) mprotect$auto(0x1ffff000, 0x8000000000000001, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_OVS_DP_CMD_NEW(r2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x801}, 0x80) r3 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x848000000015, 0x805, 0x0) bind$auto(r0, &(0x7f0000000000)=@phonet={0x23, 0x5, 0x4, 0x96}, 0x8) bind$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @loopback}, 0x6b) connect$auto(0x3, &(0x7f00000000c0)=@in={0x2, 0x0, @loopback}, 0x55) sendmsg$auto_OVS_DP_CMD_GET(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0}, 0x1, 0x0, 0x0, 0x50}, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r5 = socket(0x2, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) sendmmsg$auto(r5, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x5, 0x20000000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x100007}, 0x31cd3c7c, 0xb1) shutdown$auto(0x200000003, 0x2) sendfile$auto(0x1, 0x3, 0x0, 0xc01) sendmsg$auto_OVS_DP_CMD_GET(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)=ANY=[], 0xd000}, 0x1, 0x0, 0x0, 0x50}, 0x0) close_range$auto(0x2, 0x8, 0x0) clone$auto(0x21, 0x9, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x6) timerfd_create$auto(0x987, 0x3ff) 697.049849ms ago: executing program 4 (id=5419): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="359f673fdc87c184be05e56c99c425ab5d9b703b5be4692fd70835016edf6ea36869acaf0c91426fcc467593187efce9706801914de79d", @ANYRES16=r1, @ANYBLOB="1b0026bd7000fddbdf2503000000040008000400038012000100898771f1c19f177904859082884700000c00028008001d000d00000004000800"], 0x40}, 0x1, 0x0, 0x0, 0x4004040}, 0xc800) 573.021637ms ago: executing program 4 (id=5420): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x800) socket(0x10, 0x2, 0x0) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x8, 0x2, 0x9b72, 0x2, 0x0) socket(0x15, 0x5, 0x0) r0 = socket(0x26, 0x3, 0x104) socket(0x2, 0x3, 0xa) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_net_shaper(&(0x7f0000000000), r0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) futex$auto(0x0, 0x5, 0x8, 0x0, 0x0, 0x440a48d3) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mtrr\x00', 0x60641, 0x0) write$auto(0x3, 0x0, 0xfdef) socket(0x2, 0x5, 0x0) clock_gettime$auto(0x1, 0x0) getsockopt$auto(0x6, 0x84, 0x85, 0x0, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) sendmmsg$auto(0xffffffffffffffff, 0x0, 0x5, 0x20000000) setsockopt$auto(0x3, 0x1, 0x21, 0x0, 0x9) getcwd$auto(0x0, 0xffffffffffffffff) mprotect$auto(0x1ffff000, 0x8000000000000002, 0x5) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) madvise$auto(0x0, 0xffffffffffff0005, 0x19) open(0x0, 0x22240, 0x16c) madvise$auto(0x0, 0xffffffffffff0001, 0x15) mmap$auto(0x0, 0xc9d, 0x8, 0x9b72, 0x5, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0xffffffffffff0005, 0x19) msync$auto(0x0, 0x2000000005, 0x6) 348.171574ms ago: executing program 0 (id=5421): r0 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r0, &(0x7f0000000080)={{0x0, 0x8002, &(0x7f00000002c0)={0x0, 0xc4}, 0x2, 0x0, 0x6, 0x1}, 0x5}, 0x3, 0x0) 265.962076ms ago: executing program 7 (id=5422): openat$auto_tracing_mark_fops_trace(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing/trace_marker\x00', 0x1, 0x0) r0 = socket(0x2, 0x2, 0x88) sendmsg$auto_WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x400c811}, 0x20008000) bind$auto(0x3, &(0x7f0000000080), 0x6b) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x2, 0x1, 0x0) setsockopt$auto(0x3, 0x1, 0x2f, 0x0, 0x9) connect$auto(0x3, &(0x7f0000000140), 0x55) r1 = openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f0000000180), 0x200000, 0x0) io_cancel$auto(0x8, &(0x7f00000001c0)={0xfffffffffffffbff, 0x4, 0xfff, 0x6, 0x2, r1, 0x5, 0x10, 0x6, 0x0, 0x8, r0}, &(0x7f0000000200)={0x1, 0x3, 0x2, 0xfffffffffffffff7}) connect$auto(r2, &(0x7f00000000c0)=@isdn={0x22, 0xe, 0x7, 0x4, 0x45}, 0x55) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) write$auto(r0, 0x0, 0x3f00) setreuid$auto(0x0, 0x20000000004) mremap$auto(0x4000, 0xfee0, 0x3fd6, 0x3, 0x0) preadv2$auto(0x3, &(0x7f0000001000)={0x0, 0xfff5}, 0x5, 0xffffffffffffffff, 0x7, 0x2e) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8) ioctl$auto_IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, 0x0) 206.880987ms ago: executing program 7 (id=5423): r0 = socket(0x2, 0x1, 0x106) r1 = fcntl$auto(0x3, 0x4, 0xa553) (async) r2 = syz_genetlink_get_family_id$auto_nlbl_mgmt(&(0x7f0000000300), r0) sendmsg$auto_NLBL_MGMT_C_REMOVE(r1, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="000125bd7000fbdbdf2502000000080004400100000008000300080000000800e4086a86000006000b002101000006000b00020000000800030081000000080004100c0000eb080003000000000006008b000100000008000400c2000000"], 0x64}, 0x1, 0x0, 0x0, 0x4000}, 0x44812) sendmsg$auto_NLBL_MGMT_C_LISTDEF(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000280)={0x58, r2, 0x400, 0x70bd27, 0x25dfdbff, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x2}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x9}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x3ff}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x5}, @NLBL_MGMT_A_DOMAIN={0xc, 0x1, 'ip_vti0\x00'}, @NLBL_MGMT_A_CV4DOI={0x8}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x80000000}, @NLBL_MGMT_A_VERSION={0x8, 0x3, 0x4}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000000}, 0x10) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) r3 = open(&(0x7f0000000000)='./file0\x00', 0x261c2, 0x84) (async) close_range$auto(0x2, 0x8000, 0x0) (async) r4 = socket(0xa, 0x2, 0x88) (async) uname$auto(0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'ip_vti0\x00', 0x0}) bpf$auto(0x0, &(0x7f00000000c0)=@bpf_attr_5={@target_ifindex=r6, r5, 0x4, 0x1ff, r4, @relative_id=0x13, 0xe600}, 0xf) (async) bpf$auto(0x2, &(0x7f00000001c0)=@raw_tracepoint={0x5, r3, 0x0, 0x3}, 0xc) 124.844853ms ago: executing program 0 (id=5424): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x2b, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @remote}, 0x6a) (async) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x5, 0x20000000) (async) sendmsg$auto_THERMAL_GENL_CMD_THRESHOLD_ADD(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16, @ANYBLOB="00012bfddbdf2508000000080009000f000000000080"], 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x1f199c8836470f02) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) (async) mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x5, 0x2) mmap$auto(0x0, 0x200006, 0x2, 0x40eb1, 0x602, 0x300000000000) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) socket(0x2, 0x1, 0x0) (async) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) prctl$auto(0x38, 0x0, 0x4, 0x5, 0x10003) (async) madvise$auto(0x0, 0xffffffffffff0001, 0x15) sendmsg$auto_IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="80060000", @ANYRES16=0x0, @ANYBLOB, @ANYRES32, @ANYBLOB="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"], 0x680}, 0x1, 0x0, 0x0, 0x4004080}, 0x0) write$auto_bm_entry_operations_binfmt_misc(0xffffffffffffffff, &(0x7f0000000500)="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", 0x4bf) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) inotify_rm_watch$auto(0xffffffffffffffff, 0x84e4) (async) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS1\x00', 0x20000, 0x0) madvise$auto(0x5, 0x2000040080000004, 0xe) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000040), r1) sendmsg$auto_TIPC_NL_LINK_SET(r1, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000002a80)={&(0x7f0000000200)={0x18, r2, 0x1, 0x70bd27, 0x25dfdbff, {}, [@TIPC_NLA_LINK={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000094}, 0x8080) io_uring_setup$auto(0x8e3e, 0x0) (async) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptys1\x00', 0x20400, 0x0) ioctl$auto_TIOCSWINSZ2(r3, 0x5414, 0x0) (async) modify_ldt$auto(0x1, 0x0, 0x10) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) madvise$auto(0x0, 0xffffffffffff0005, 0x17) 0s ago: executing program 7 (id=5425): openat$auto_adf_hb_cfg_fops_adf_heartbeat_dbgfs(0xffffffffffffff9c, 0x0, 0x121c01, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_msft_opcode_fops_(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/bluetooth/hci0/msft_opcode\x00', 0x0, 0x0) read$auto(r1, &(0x7f0000006740)='^%-[)>\'\xdf\x00', 0xffff) (async) read$auto(r1, &(0x7f0000006740)='^%-[)>\'\xdf\x00', 0xffff) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) close_range$auto(0x2, 0x8, 0x0) recvmmsg$auto(0x4, &(0x7f0000000200)={{0x0, 0x4, &(0x7f0000000140)={0x0, 0x4da}, 0x4, 0x0, 0x8, 0x800}, 0x1000}, 0xffffffff, 0x0, 0x0) (async) recvmmsg$auto(0x4, &(0x7f0000000200)={{0x0, 0x4, &(0x7f0000000140)={0x0, 0x4da}, 0x4, 0x0, 0x8, 0x800}, 0x1000}, 0xffffffff, 0x0, 0x0) r2 = socket(0xa, 0x2, 0x88) syz_genetlink_get_family_id$auto_ovs_ct_limit(&(0x7f0000000000), r2) sendmsg$auto_NETDEV_CMD_NAPI_GET(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000340)=ANY=[], 0x1c}}, 0x0) close_range$auto(0x2, 0x8, 0x0) read$auto_rfcomm_dlc_debugfs_fops_(0xffffffffffffffff, &(0x7f0000000080)=""/96, 0x60) r3 = socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/virtual/mac80211_hwsim/hwsim0/ieee80211/phy0/rfkill2/index\x00', 0x41e9c1, 0x0) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/virtual/mac80211_hwsim/hwsim0/ieee80211/phy0/rfkill2/index\x00', 0x41e9c1, 0x0) r4 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000001340), 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r3, &(0x7f0000001400)={0x0, 0x0, &(0x7f00000013c0)={&(0x7f0000001380)=ANY=[@ANYBLOB="18000000", @ANYRES16=r4, @ANYBLOB="01001fbd7000fcdbdf250400000004001000"], 0x18}, 0x1, 0x0, 0x0, 0x24040000}, 0x18800) syz_genetlink_get_family_id$auto_nfsd(0x0, 0xffffffffffffffff) (async) syz_genetlink_get_family_id$auto_nfsd(0x0, 0xffffffffffffffff) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) (async) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) mmap$auto(0x0, 0x40009, 0x36, 0x9b72, 0x7, 0x28000) (async) mmap$auto(0x0, 0x40009, 0x36, 0x9b72, 0x7, 0x28000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) (async) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x800008000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) exit$auto(0x81) r5 = getsockopt$auto(0x6, 0x107, 0x14, 0x0, 0x0) syz_genetlink_get_family_id$auto_nl80211(0x0, r5) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x2004c0c0}, 0x24004801) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x2004c0c0}, 0x24004801) close_range$auto(0x2, 0x8000, 0x0) (async) close_range$auto(0x2, 0x8000, 0x0) kernel console output (not intermixed with test programs): evice-mapper: ioctl: Invalid ioctl structure: uuid , name , dev 400008000010006 [ 353.999510][T12463] device-mapper: ioctl: Invalid ioctl structure: uuid , name , dev 400008000010006 [ 354.027932][T12463] device-mapper: ioctl: Invalid ioctl structure: uuid , name , dev 400008000010006 [ 354.047857][T12463] device-mapper: ioctl: Invalid ioctl structure: uuid , name , dev 400008000010006 [ 354.076307][T12463] device-mapper: ioctl: Invalid ioctl structure: uuid , name , dev 400008000010006 [ 354.096208][T12463] device-mapper: ioctl: Invalid ioctl structure: uuid , name , dev 400008000010006 [ 354.127892][T12463] device-mapper: ioctl: Invalid ioctl structure: uuid , name , dev 400008000010006 [ 354.147884][T12463] device-mapper: ioctl: Invalid ioctl structure: uuid , name , dev 400008000010006 [ 354.165112][T12463] device-mapper: ioctl: Invalid ioctl structure: uuid , name , dev 400008000010006 [ 354.185068][T12463] device-mapper: ioctl: Invalid ioctl structure: uuid , name , dev 400008000010006 [ 354.217824][T12463] device-mapper: ioctl: Invalid ioctl structure: uuid , name , dev 400008000010006 [ 354.237589][T12463] device-mapper: ioctl: Invalid ioctl structure: uuid , name , dev 400008000010006 [ 355.088836][T12498] can: request_module (can-proto-0) failed. [ 360.131079][ T5834] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 360.751554][T12556] zswap: compressor not available [ 361.815751][T12580] ovs9: entered promiscuous mode [ 362.188916][T12587] sctp: [Deprecated]: syz.4.1414 (pid 12587) Use of int in maxseg socket option. [ 362.188916][T12587] Use struct sctp_assoc_value instead [ 363.157315][T12626] bridge0: port 3(team0) entered blocking state [ 363.227735][T12626] bridge0: port 3(team0) entered disabled state [ 363.234210][T12626] team0: entered allmulticast mode [ 363.259497][T12626] team_slave_0: entered allmulticast mode [ 363.296902][T12626] team_slave_1: entered allmulticast mode [ 363.326407][T12626] team0: entered promiscuous mode [ 363.363437][T12626] team_slave_0: entered promiscuous mode [ 363.430781][T12626] team_slave_1: entered promiscuous mode [ 363.524062][T12626] bridge0: port 3(team0) entered blocking state [ 363.530502][T12626] bridge0: port 3(team0) entered forwarding state [ 363.599191][T12640] can: request_module (can-proto-0) failed. [ 364.042982][T12658] scsi_strcpy_devinfo: vendor string ';/&c' is too long [ 367.093055][T12730] netlink: 'syz.4.1448': attribute type 1 has an invalid length. [ 368.109383][T12723] mmap: syz.3.1446 (12723): VmData 21479424 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. [ 369.128782][T12780] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1460'. [ 370.593074][T12806] vivid-013: ================= START STATUS ================= [ 370.611223][T12806] vivid-013: Generate PTS: true [ 370.616184][T12806] vivid-013: Generate SCR: true [ 370.621912][T12806] tpg source WxH: 640x360 (Y'CbCr) [ 370.627078][T12806] tpg field: 1 [ 370.643236][T12806] tpg crop: 640x360@0x0 [ 370.647467][T12806] tpg compose: 640x360@0x0 [ 370.652310][T12806] tpg colorspace: 8 [ 370.656272][T12806] tpg transfer function: 0/0 [ 370.660995][T12806] tpg Y'CbCr encoding: 0/0 [ 370.667105][T12806] tpg quantization: 0/0 [ 370.671615][T12806] tpg RGB range: 0/2 [ 370.675556][T12806] vivid-013: ================== END STATUS ================== [ 371.124887][T12831] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1471'. [ 371.192563][T12831] veth1_macvtap: entered allmulticast mode [ 373.349007][T12886] nl80211: entered promiscuous mode [ 373.506015][T12893] CIFS: VFS: Invalid SecurityFlags: [ 374.159778][T12908] binder: 12907:12908 ioctl c00c620f 9 returned -22 [ 374.318141][T12912] Process accounting resumed [ 375.825459][T12903] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1489'. [ 375.924740][T12903] netdevsim netdevsim3 netdevsim2: entered allmulticast mode [ 376.061658][T12901] Process accounting paused [ 376.712032][ T29] audit: type=1800 audit(8277292179.829:21): pid=12960 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1502" name="dbroot" dev="configfs" ino=41115 res=0 errno=0 [ 376.793226][T12960] sp0: Synchronizing with TNC [ 378.506085][T12993] netlink: 146 bytes leftover after parsing attributes in process `syz.5.1512'. [ 379.491823][T13025] openvswitch: netlink: nsh attr 1 has unexpected len 14 expected 8 [ 380.512962][T13034] netlink: 326 bytes leftover after parsing attributes in process `syz.5.1522'. [ 380.729336][T12990] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1510'. [ 380.940221][T12990] netdevsim netdevsim4 netdevsim2: entered allmulticast mode [ 383.926405][T13081] sctp: [Deprecated]: syz.5.1541 (pid 13081) Use of int in maxseg socket option. [ 383.926405][T13081] Use struct sctp_assoc_value instead [ 384.039951][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 384.046669][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 385.661461][T13143] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1548'. [ 385.707827][T13143] hsr_slave_0: entered allmulticast mode [ 385.781475][T13147] cifs: Unknown parameter 'T.żc[$⁍)UÑnE-ʙl- -_5Z omfwYh*/xDlݩgkǐA79Xa/f_ARxM vp$^;q3n-6+ek 1 [ 398.580113][ T55] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 398.587389][ T55] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 398.595213][ T55] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 398.602881][ T55] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 398.611031][ T55] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 399.018014][T14240] chnl_net:caif_netlink_parms(): no params data found [ 399.249885][T14240] bridge0: port 1(bridge_slave_0) entered blocking state [ 399.267847][T14240] bridge0: port 1(bridge_slave_0) entered disabled state [ 399.290537][T14240] bridge_slave_0: entered allmulticast mode [ 399.298207][T14240] bridge_slave_0: entered promiscuous mode [ 399.306204][T14240] bridge0: port 2(bridge_slave_1) entered blocking state [ 399.313674][T14240] bridge0: port 2(bridge_slave_1) entered disabled state [ 399.328945][T14240] bridge_slave_1: entered allmulticast mode [ 399.336341][T14240] bridge_slave_1: entered promiscuous mode [ 399.382592][T14240] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 399.416619][T14240] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 399.462424][T14240] team0: Port device team_slave_0 added [ 399.489536][T14240] team0: Port device team_slave_1 added [ 399.607392][T14240] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 399.631463][T14240] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 399.686843][T14240] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 399.713138][T14240] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 399.735444][T14240] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 399.764284][T14240] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 399.901309][T14240] hsr_slave_0: entered promiscuous mode [ 399.913488][T14240] hsr_slave_1: entered promiscuous mode [ 399.936078][T14240] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 399.943762][T14240] Cannot create hsr debugfs directory [ 400.251273][T14240] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 400.367714][T14240] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 400.461606][T14240] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 400.569307][T14240] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 400.705567][T14240] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 400.753466][T14240] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 400.770618][ T55] Bluetooth: hci4: command tx timeout [ 400.790025][T14240] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 400.810684][T14240] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 400.971045][T14240] 8021q: adding VLAN 0 to HW filter on device bond0 [ 401.027153][T14240] 8021q: adding VLAN 0 to HW filter on device team0 [ 401.070847][T10452] bridge0: port 1(bridge_slave_0) entered blocking state [ 401.078031][T10452] bridge0: port 1(bridge_slave_0) entered forwarding state [ 401.101092][T10452] bridge0: port 2(bridge_slave_1) entered blocking state [ 401.108348][T10452] bridge0: port 2(bridge_slave_1) entered forwarding state [ 401.154205][T14240] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 401.164791][T14240] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 401.496693][T14240] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 401.580832][T14240] veth0_vlan: entered promiscuous mode [ 401.609363][T14240] veth1_vlan: entered promiscuous mode [ 401.677458][T14240] veth0_macvtap: entered promiscuous mode [ 401.694110][T14240] veth1_macvtap: entered promiscuous mode [ 401.757172][T14240] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 401.791603][T14240] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 401.820982][T14240] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 401.856666][T14240] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 401.869444][T14240] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 401.905007][T14240] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 401.919738][T14240] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 401.930942][T14240] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 401.967722][T14240] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 401.981603][T14240] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 402.015199][T14240] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 402.032232][T14240] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 402.061582][T14240] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 402.080876][T14240] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 402.241159][ T3440] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 402.265777][ T3440] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 402.316667][T10456] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 402.339424][T10456] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 402.838104][ T55] Bluetooth: hci4: command tx timeout [ 402.902830][ T5834] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 402.911019][ T5834] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 402.920395][ T5834] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 402.928190][ T5834] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 402.935817][ T5834] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 402.945858][ T5834] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 403.760366][T14609] chnl_net:caif_netlink_parms(): no params data found [ 404.268355][T14609] bridge0: port 1(bridge_slave_0) entered blocking state [ 404.276124][T14609] bridge0: port 1(bridge_slave_0) entered disabled state [ 404.287142][T14609] bridge_slave_0: entered allmulticast mode [ 404.312917][T14609] bridge_slave_0: entered promiscuous mode [ 404.341698][T14609] bridge0: port 2(bridge_slave_1) entered blocking state [ 404.349333][T14609] bridge0: port 2(bridge_slave_1) entered disabled state [ 404.357067][T14609] bridge_slave_1: entered allmulticast mode [ 404.385527][T14609] bridge_slave_1: entered promiscuous mode [ 404.535328][T14609] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 404.567440][T14609] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 404.713473][T14609] team0: Port device team_slave_0 added [ 404.758790][T14609] team0: Port device team_slave_1 added [ 404.840094][T14609] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 404.847106][T14609] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 404.918018][ T5834] Bluetooth: hci4: command tx timeout [ 404.923555][T14609] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 404.938458][T14609] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 404.945447][T14609] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 404.977646][T14609] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 404.997821][ T5834] Bluetooth: hci2: command tx timeout [ 405.062630][T14609] hsr_slave_0: entered promiscuous mode [ 405.113855][T14609] hsr_slave_1: entered promiscuous mode [ 405.172033][T14609] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 405.179788][T14609] Cannot create hsr debugfs directory [ 405.423197][T14609] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 405.498940][T14609] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 405.575036][T14609] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 405.667328][T14609] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 405.852861][T14609] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 405.870215][T14609] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 405.894234][T14609] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 405.909593][T14609] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 406.080740][T14609] 8021q: adding VLAN 0 to HW filter on device bond0 [ 406.125104][T14609] 8021q: adding VLAN 0 to HW filter on device team0 [ 406.173929][T10452] bridge0: port 1(bridge_slave_0) entered blocking state [ 406.181195][T10452] bridge0: port 1(bridge_slave_0) entered forwarding state [ 406.240051][T10452] bridge0: port 2(bridge_slave_1) entered blocking state [ 406.247320][T10452] bridge0: port 2(bridge_slave_1) entered forwarding state [ 406.286011][T14609] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 406.634406][T14609] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 406.998180][ T5834] Bluetooth: hci4: command tx timeout [ 407.036635][T14609] veth0_vlan: entered promiscuous mode [ 407.064534][T14609] veth1_vlan: entered promiscuous mode [ 407.078276][ T5834] Bluetooth: hci2: command tx timeout [ 407.099628][T14609] veth0_macvtap: entered promiscuous mode [ 407.122566][T14609] veth1_macvtap: entered promiscuous mode [ 407.138851][T14609] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 407.153896][T14609] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 407.165134][T14609] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 407.176247][T14609] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 407.195456][T14609] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 407.236562][T14609] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 407.260959][T14609] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 407.290576][T14609] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 407.304570][T14609] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 407.327643][T14609] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 407.353980][T14609] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 407.392094][T14609] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 407.405717][T14609] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 407.423116][T14609] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 407.456051][T14609] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 407.491245][T14609] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 407.513365][T14609] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 407.533861][T14609] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 407.698479][T10455] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 407.706434][T10455] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 407.803683][T10455] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 407.816437][T14899] netlink: 504 bytes leftover after parsing attributes in process `syz.3.2798'. [ 407.830017][T10455] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 408.102604][ T55] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 408.113742][ T55] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 408.123781][ T55] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 408.158377][ T55] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 408.166029][ T55] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 408.174087][ T55] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 408.630239][T14913] chnl_net:caif_netlink_parms(): no params data found [ 408.870651][T14953] Invalid ELF header magic: != ELF [ 408.915857][T14913] bridge0: port 1(bridge_slave_0) entered blocking state [ 408.923147][T14913] bridge0: port 1(bridge_slave_0) entered disabled state [ 408.942322][T14913] bridge_slave_0: entered allmulticast mode [ 408.960886][T14913] bridge_slave_0: entered promiscuous mode [ 408.973663][T14913] bridge0: port 2(bridge_slave_1) entered blocking state [ 409.007733][T14913] bridge0: port 2(bridge_slave_1) entered disabled state [ 409.031705][T14913] bridge_slave_1: entered allmulticast mode [ 409.055381][T14913] bridge_slave_1: entered promiscuous mode [ 409.161515][ T5834] Bluetooth: hci2: command tx timeout [ 409.249783][T14913] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 409.305235][T14913] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 409.408017][T14976] syz.3.2841(14976): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 409.423256][T14913] team0: Port device team_slave_0 added [ 409.441570][T14913] team0: Port device team_slave_1 added [ 409.520598][T14913] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 409.551171][T14913] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 409.645619][T14913] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 409.671323][T14913] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 409.707887][T14913] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 409.777974][T14913] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 410.008942][T14913] hsr_slave_0: entered promiscuous mode [ 410.026215][T14913] hsr_slave_1: entered promiscuous mode [ 410.036008][T14913] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 410.069729][T14913] Cannot create hsr debugfs directory [ 410.197836][ T5834] Bluetooth: hci3: command tx timeout [ 410.575450][T14913] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 410.622612][T15038] vivid-013: ================= START STATUS ================= [ 410.640271][T15038] vivid-013: Generate PTS: true [ 410.660068][T15038] vivid-013: Generate SCR: true [ 410.665108][T15038] tpg source WxH: 640x360 (Y'CbCr) [ 410.678139][T15038] tpg field: 1 [ 410.692768][T15038] tpg crop: 640x360@0x0 [ 410.697000][T15038] tpg compose: 640x360@0x0 [ 410.720391][T14913] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 410.723672][T15038] tpg colorspace: 8 [ 410.737042][T15038] tpg transfer function: 0/0 [ 410.747202][T15038] tpg Y'CbCr encoding: 0/0 [ 410.758890][T15038] tpg quantization: 0/0 [ 410.763695][T15038] tpg RGB range: 0/2 [ 410.770326][T15038] vivid-013: ================== END STATUS ================== [ 410.865109][T14913] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 410.949845][T14913] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 411.113494][T14913] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 411.164535][T14913] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 411.242144][ T5834] Bluetooth: hci2: command tx timeout [ 411.247893][T14913] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 411.265806][T14913] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 411.532590][T14913] 8021q: adding VLAN 0 to HW filter on device bond0 [ 411.592568][T14913] 8021q: adding VLAN 0 to HW filter on device team0 [ 411.622949][T10465] bridge0: port 1(bridge_slave_0) entered blocking state [ 411.630128][T10465] bridge0: port 1(bridge_slave_0) entered forwarding state [ 411.660810][ T3440] bridge0: port 2(bridge_slave_1) entered blocking state [ 411.667969][ T3440] bridge0: port 2(bridge_slave_1) entered forwarding state [ 411.745781][T14913] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 411.796658][T15079] HfR: entered promiscuous mode [ 412.099676][T14913] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 412.157198][T14913] veth0_vlan: entered promiscuous mode [ 412.179918][T14913] veth1_vlan: entered promiscuous mode [ 412.253916][T14913] veth0_macvtap: entered promiscuous mode [ 412.271654][T14913] veth1_macvtap: entered promiscuous mode [ 412.278396][ T5834] Bluetooth: hci3: command tx timeout [ 412.401044][T14913] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 412.445666][T14913] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 412.456277][T14913] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 412.488873][T14913] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 412.502117][T14913] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 412.532610][T14913] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 412.549405][T14913] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 412.560207][T14913] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 412.584930][T14913] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 412.614474][T14913] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 412.653303][T14913] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 412.677941][T14913] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 412.697668][T14913] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 412.733183][T14913] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 412.746471][T14913] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 412.773462][T14913] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 412.794948][T14913] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 412.816060][T14913] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 412.839529][T14913] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 412.873013][T14913] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 412.896999][T14913] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 412.936909][T14913] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 413.071764][T10454] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 413.103419][T10454] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 413.163491][ T3440] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 413.208887][ T3440] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 413.773642][ T55] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 413.782251][ T55] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 413.791922][ T55] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 413.818367][ T55] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 413.826624][ T55] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 413.834622][ T55] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 414.028659][T15186] netlink: 326 bytes leftover after parsing attributes in process `syz.3.2946'. [ 414.230297][T15177] chnl_net:caif_netlink_parms(): no params data found [ 414.356826][T15169] Process accounting resumed [ 414.362075][ T5834] Bluetooth: hci3: command tx timeout [ 414.376042][T15177] bridge0: port 1(bridge_slave_0) entered blocking state [ 414.383351][T15177] bridge0: port 1(bridge_slave_0) entered disabled state [ 414.393404][T15177] bridge_slave_0: entered allmulticast mode [ 414.400758][T15177] bridge_slave_0: entered promiscuous mode [ 414.432359][T15177] bridge0: port 2(bridge_slave_1) entered blocking state [ 414.447722][T15177] bridge0: port 2(bridge_slave_1) entered disabled state [ 414.455026][T15177] bridge_slave_1: entered allmulticast mode [ 414.478726][T15177] bridge_slave_1: entered promiscuous mode [ 414.639970][T15177] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 414.670023][T15177] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 414.793676][T15177] team0: Port device team_slave_0 added [ 414.813812][T15177] team0: Port device team_slave_1 added [ 414.884458][T15177] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 414.903276][T15177] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 414.947751][T15177] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 414.965189][T15177] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 414.997744][T15177] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 415.054761][T15177] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 415.094776][T15208] netlink: 342 bytes leftover after parsing attributes in process `syz.3.2951'. [ 415.162810][T15177] hsr_slave_0: entered promiscuous mode [ 415.195189][T15177] hsr_slave_1: entered promiscuous mode [ 415.233550][T15177] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 415.251810][T15177] Cannot create hsr debugfs directory [ 415.281045][T15217] netlink: 'syz.3.2953': attribute type 1 has an invalid length. [ 415.429385][T15217] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2953'. [ 415.684539][T15177] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 415.771286][T15177] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 415.859563][T15177] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 415.877785][ T5834] Bluetooth: hci0: command tx timeout [ 415.981587][T15177] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 416.172636][T15177] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 416.208305][T15177] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 416.231233][T15177] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 416.255103][T15177] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 416.395219][T15177] 8021q: adding VLAN 0 to HW filter on device bond0 [ 416.423101][T15177] 8021q: adding VLAN 0 to HW filter on device team0 [ 416.439858][ T3440] bridge0: port 1(bridge_slave_0) entered blocking state [ 416.447054][ T3440] bridge0: port 1(bridge_slave_0) entered forwarding state [ 416.455038][ T5834] Bluetooth: hci3: command tx timeout [ 416.546856][ T3440] bridge0: port 2(bridge_slave_1) entered blocking state [ 416.554058][ T3440] bridge0: port 2(bridge_slave_1) entered forwarding state [ 416.856601][T15244] nbd: illegal input index 50331648 [ 416.930241][T15177] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 417.324495][T15177] veth0_vlan: entered promiscuous mode [ 417.360487][T15177] veth1_vlan: entered promiscuous mode [ 417.425983][T15177] veth0_macvtap: entered promiscuous mode [ 417.443455][T15177] veth1_macvtap: entered promiscuous mode [ 417.472229][T15177] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 417.476603][T15265] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2960'. [ 417.496631][T15177] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 417.527258][T15177] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 417.547728][T15177] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 417.567706][T15177] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 417.588893][T15177] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 417.607695][T15177] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 417.648005][T15177] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 417.671686][T15177] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 417.707723][T15177] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 417.728858][T15177] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 417.743706][T15177] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 417.759169][T15177] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 417.797971][T15177] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 417.823193][T15177] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 417.856994][T15177] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 417.883620][T15177] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 417.905063][T15177] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 417.935502][T15177] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 417.956126][T15177] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 417.967263][ T5834] Bluetooth: hci0: command tx timeout [ 417.991938][T15177] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 418.041017][T15177] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 418.065865][T15177] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 418.095519][T15177] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 418.127653][T15177] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 418.142916][T15177] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 418.311719][T10454] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 418.347351][T10454] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 418.394388][T10465] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 418.408871][T10465] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 419.170661][T15310] syz.0.2970 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 420.042930][ T5834] Bluetooth: hci0: command tx timeout [ 422.127627][ T5834] Bluetooth: hci0: command tx timeout [ 423.808169][T15404] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2990'. [ 423.988598][T15414] netlink: 164 bytes leftover after parsing attributes in process `syz.5.2992'. [ 424.028626][T15404] bridge0: port 2(bridge_slave_1) entered disabled state [ 424.036261][T15404] bridge0: port 1(bridge_slave_0) entered disabled state [ 424.237914][T15404] bridge0: entered allmulticast mode [ 425.268499][T15427] netlink: 93 bytes leftover after parsing attributes in process `syz.5.2996'. [ 428.632360][T15511] vivid-013: ================= START STATUS ================= [ 428.640715][T15511] vivid-013: Generate PTS: true [ 428.645640][T15511] vivid-013: Generate SCR: true [ 428.655269][T15511] tpg source WxH: 640x360 (Y'CbCr) [ 428.660940][T15511] tpg field: 1 [ 428.664352][T15511] tpg crop: 640x360@0x0 [ 428.668717][T15511] tpg compose: 640x360@0x0 [ 428.675794][T15511] tpg colorspace: 8 [ 428.680386][T15511] tpg transfer function: 0/0 [ 428.685020][T15511] tpg Y'CbCr encoding: 0/0 [ 428.689919][T15511] tpg quantization: 0/0 [ 428.697445][T15511] tpg RGB range: 0/2 [ 428.701573][T15511] vivid-013: ================== END STATUS ================== [ 432.416290][T15580] netlink: 'syz.5.3031': attribute type 1 has an invalid length. [ 432.467526][T15574] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3032'. [ 434.663043][T15651] netlink: 1204 bytes leftover after parsing attributes in process `syz.4.3049'. [ 434.699118][T15651] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3049'. [ 435.520623][T15669] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3054'. [ 436.163790][T15676] can: request_module (can-proto-0) failed. [ 436.762464][T15678] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 436.770810][T15678] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 436.791364][T15678] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 436.818197][T15678] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 436.836411][T15678] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 436.880440][T15678] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 436.894986][T15678] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 436.908055][T15678] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 436.923227][T15678] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 436.933768][T15678] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 436.953563][T15678] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 436.975526][T15678] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 438.277698][ T5834] Bluetooth: hci4: command 0x0c1a tx timeout [ 438.839670][ T5834] Bluetooth: hci2: command 0x0c1a tx timeout [ 438.917713][ T5834] Bluetooth: hci3: command 0x0c1a tx timeout [ 438.998372][ T5834] Bluetooth: hci0: command 0x0c1a tx timeout [ 440.293859][T15793] netlink: 342 bytes leftover after parsing attributes in process `syz.4.3080'. [ 440.358028][ T5834] Bluetooth: hci4: command 0x0c1a tx timeout [ 440.917689][ T5834] Bluetooth: hci2: command 0x0c1a tx timeout [ 441.007707][ T5834] Bluetooth: hci3: command 0x0c1a tx timeout [ 441.077880][ T5834] Bluetooth: hci0: command 0x0c1a tx timeout [ 442.113028][T15807] kexec: Could not allocate control_code_buffer [ 442.168889][T15820] bridge0: port 3(team0) entered blocking state [ 442.175376][T15820] bridge0: port 3(team0) entered disabled state [ 442.181904][T15820] team0: entered allmulticast mode [ 442.187110][T15820] team_slave_0: entered allmulticast mode [ 442.192967][T15820] team_slave_1: entered allmulticast mode [ 442.200289][T15820] team0: entered promiscuous mode [ 442.205366][T15820] team_slave_0: entered promiscuous mode [ 442.211297][T15820] team_slave_1: entered promiscuous mode [ 442.217475][T15820] bridge0: port 3(team0) entered blocking state [ 442.223931][T15820] bridge0: port 3(team0) entered forwarding state [ 442.438585][ T5834] Bluetooth: hci4: command 0x0c1a tx timeout [ 442.998291][ T5834] Bluetooth: hci2: command 0x0c1a tx timeout [ 443.079883][ T5834] Bluetooth: hci3: command 0x0c1a tx timeout [ 443.157771][ T5834] Bluetooth: hci0: command 0x0c1a tx timeout [ 444.353266][T15874] can0: slcan on ttyS2. [ 445.028074][T15880] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3099'. [ 445.217754][T15873] can0 (unregistered): slcan off ttyS2. [ 445.480946][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 445.487317][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 445.643394][T15880] Process accounting paused [ 446.401146][T15935] Invalid ELF header magic: != ELF [ 453.829775][T16023] netlink: 342 bytes leftover after parsing attributes in process `syz.0.3126'. [ 455.968402][T16063] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3138'. [ 456.267694][T16070] futex_wake_op: syz.0.3140 tries to shift op by 64; fix this program [ 456.478195][T16063] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 456.632181][T16063] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 459.003069][T16104] : entered promiscuous mode [ 460.505217][ T29] audit: type=1400 audit(8277292263.629:22): apparmor="DENIED" operation="setprocattr" info="current" error=-22 profile="unconfined" pid=16151 comm="syz.5.3158" [ 460.899173][T16154] netlink: 178 bytes leftover after parsing attributes in process `syz.5.3159'. [ 462.489736][T16209] Format for deleting device is "id" (uint). [ 462.609890][T16207] netlink: 314 bytes leftover after parsing attributes in process `syz.4.3170'. [ 462.637656][T16207] : renamed from bond_slave_1 (while UP) [ 463.583327][T16251] debugfs: Directory '!PjE r95N3y*"l-y~tZ' with parent 'ieee80211' already present! [ 464.685357][T16275] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3185'. [ 466.023905][T16319] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3194'. [ 466.093526][T16319] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3194'. [ 466.094799][T16317] lo: entered allmulticast mode [ 466.127190][T16326] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3194'. [ 466.280339][T16316] lo: left allmulticast mode [ 467.217519][T16363] nvme_fcloop: unknown parameter or missing value '' [ 467.230648][T16363] nvme_fcloop: unknown parameter or missing value '' [ 467.886355][T16382] binder: 16381:16382 ioctl 4018620d 9 returned -22 [ 467.971234][T16383] HfR: entered promiscuous mode [ 468.090963][T16395] binder: 16381:16395 ioctl 2284 ffffffffffffffff returned -22 [ 470.124369][T16450] debugfs: Directory '!PjE r95N3y*"l-y~tZ' with parent 'ieee80211' already present! [ 470.477930][T16455] netlink: 350 bytes leftover after parsing attributes in process `syz.4.3224'. [ 471.632133][T16504] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3234'. [ 472.392073][T16503] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 472.417773][T16503] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 472.423877][T16503] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 472.440549][T16503] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 472.887655][ T29] audit: type=1806 audit(8277292036.980:23): xattr="." res=0 [ 473.642868][ T5834] Bluetooth: hci4: command 0x0c1a tx timeout [ 474.248264][T16548] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3244'. [ 474.288239][T16549] binder: 16546:16549 ioctl 40044900 800000000000003 returned -22 [ 474.438025][ T5834] Bluetooth: hci3: command 0x0c1a tx timeout [ 474.444570][ T5834] Bluetooth: hci2: command 0x0c1a tx timeout [ 474.491195][T16549] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3243'. [ 474.517998][T16552] Bluetooth: hci0: command 0x0c1a tx timeout [ 474.995655][T16549] bond0: (slave bond_slave_1): Releasing backup interface [ 475.061539][T16555] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 475.093777][T16555] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 475.139824][T16555] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 475.176336][T16555] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 475.872001][T16412] Process accounting resumed [ 476.285401][T16591] netlink: 338 bytes leftover after parsing attributes in process `syz.3.3252'. [ 476.328293][T16591] netlink: 338 bytes leftover after parsing attributes in process `syz.3.3252'. [ 476.351732][T16591] netlink: 134 bytes leftover after parsing attributes in process `syz.3.3252'. [ 476.473600][T16605] block mtdblock0: the capability attribute has been deprecated. [ 476.757743][T16552] Bluetooth: hci4: command 0x0c1a tx timeout [ 476.893971][T16619] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3257'. [ 476.935684][T16619] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3257'. [ 477.159529][T16552] Bluetooth: hci3: command 0x0c1a tx timeout [ 477.165636][T16552] Bluetooth: hci2: command 0x0c1a tx timeout [ 477.238027][T16552] Bluetooth: hci0: command 0x0c1a tx timeout [ 477.276820][T16624] netlink: 330 bytes leftover after parsing attributes in process `syz.0.3260'. [ 477.434288][T16632] delete_channel: no stack [ 477.608565][T16641] cgroup: fork rejected by pids controller in /syz3 [ 478.180607][T16734] netlink: 334 bytes leftover after parsing attributes in process `syz.0.3272'. [ 478.214562][T16734] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3272'. [ 478.443066][T16738] netlink: 168 bytes leftover after parsing attributes in process `syz.5.3274'. [ 480.463775][T16812] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3286'. [ 480.639075][T16817] netlink: 342 bytes leftover after parsing attributes in process `syz.0.3288'. [ 481.639241][T16856] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3297'. [ 482.069833][T16875] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3299'. [ 482.325191][T16876] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3300'. [ 482.325560][T16881] netlink: 252 bytes leftover after parsing attributes in process `syz.0.3301'. [ 482.366100][T16881] netlink: 252 bytes leftover after parsing attributes in process `syz.0.3301'. [ 482.572091][T16892] ptrace attach of "./syz-executor exec"[14240] was attempted by "./syz-executor exec"[16892] [ 484.513436][T16957] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3320'. [ 484.710220][T16965] ptrace attach of "./syz-executor exec"[14913] was attempted by "./syz-executor exec"[16965] [ 484.930598][T16972] Invalid ELF header magic: != ELF [ 485.362844][T16981] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3325'. [ 486.207862][T16989] openvswitch: HfR: Dropping previously announced user features [ 486.285798][T16989] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3328'. [ 486.307918][T16989] HfR: left promiscuous mode [ 488.689689][T17038] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3339'. [ 493.024299][T17167] netlink: 330 bytes leftover after parsing attributes in process `syz.5.3369'. [ 493.112098][T17165] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3369'. [ 493.846773][T17198] netlink: 334 bytes leftover after parsing attributes in process `syz.4.3377'. [ 494.328933][T17200] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3380'. [ 495.036664][T17231] openvswitch: netlink: Missing valid actions attribute. [ 495.334718][T17237] could not allocate digest TFM handle [ 495.458296][T17237] could not allocate digest TFM handle [ 495.586011][T17237] could not allocate digest TFM handle [ 495.687932][T17237] could not allocate digest TFM handle [ 495.792668][T17237] could not allocate digest TFM handle [ 495.900698][T17237] could not allocate digest TFM handle [ 495.957256][T17237] could not allocate digest TFM handle [ 496.279478][T17297] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3396'. [ 496.564372][T17300] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3397'. [ 496.598509][T17300] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3397'. [ 496.627794][T17300] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3397'. [ 496.636941][T17300] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3397'. [ 496.699597][T17300] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3397'. [ 496.727800][T17300] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3397'. [ 496.737068][T17300] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3397'. [ 499.036458][T17377] MTRR 1 not used [ 499.051403][T17392] __nla_validate_parse: 27 callbacks suppressed [ 499.051428][T17392] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3416'. [ 499.887860][T17415] netlink: 346 bytes leftover after parsing attributes in process `syz.5.3423'. [ 500.048049][T17429] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3425'. [ 502.050696][T17515] Invalid input. Must be >= 4608 [ 502.764851][T17533] bridge0: port 3(syz_tun) entered blocking state [ 502.780437][T17533] bridge0: port 3(syz_tun) entered disabled state [ 502.802148][ T29] audit: type=1807 audit(2075.740:24): UNKNOWN=0"]$|1j0B|dӉO+/xWӦ^gq%ḦrO res=0 [ 502.814987][T17535] ima: policy update failed [ 502.819874][T17533] syz_tun: entered allmulticast mode [ 502.834962][T17533] syz_tun: entered promiscuous mode [ 502.842818][ T29] audit: type=1802 audit(2075.750:25): pid=17535 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.0.3450" res=0 errno=0 [ 502.881452][T17533] bridge0: port 3(syz_tun) entered blocking state [ 502.888137][T17533] bridge0: port 3(syz_tun) entered forwarding state [ 502.901150][ T29] audit: type=1802 audit(2075.770:26): pid=17535 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.0.3450" res=0 errno=0 [ 503.251755][T17549] netlink: 338 bytes leftover after parsing attributes in process `syz.3.3453'. [ 503.262159][T17549] netlink: 338 bytes leftover after parsing attributes in process `syz.3.3453'. [ 503.910381][T17570] netlink: 350 bytes leftover after parsing attributes in process `syz.4.3460'. [ 504.042861][T17567] ptrace attach of "./syz-executor exec"[15177] was attempted by "./syz-executor exec"[17567] [ 506.864989][T17612] kexec: Could not allocate control_code_buffer [ 506.922131][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 506.928565][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 507.333716][T17641] Process accounting paused [ 508.881179][T17667] openvswitch: netlink: Port -2134900732 exceeds max allowable 65535 [ 509.892283][T17703] netlink: 'syz.4.3490': attribute type 1 has an invalid length. [ 509.918329][T17703] netlink: 'syz.4.3490': attribute type 1 has an invalid length. [ 511.810666][T17747] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3500'. [ 513.282881][T17770] could not allocate digest TFM handle [ 513.488630][ T29] audit: type=1800 audit(2086.420:27): pid=17790 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.3511" name="dbroot" dev="configfs" ino=64556 res=0 errno=0 [ 513.511462][T17790] db_root: cannot open: [ 513.516546][T17790] db_root: cannot open: [ 513.556872][T17790] db_root: cannot open: [ 513.572368][T17790] db_root: cannot open: [ 514.234194][T17808] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3514'. [ 514.282366][T17808] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3514'. [ 519.505167][T17955] netlink: 'syz.4.3551': attribute type 21 has an invalid length. [ 519.576589][T17955] netlink: 326 bytes leftover after parsing attributes in process `syz.4.3551'. [ 519.626145][T17951] WARNING! power/level is deprecated; use power/control instead [ 520.304500][T17975] Invalid ELF header magic: != ELF [ 522.268471][ T29] audit: type=1800 audit(2095.210:28): pid=18022 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.3568" name="SYSV0000000a" dev="hugetlbfs" ino=0 res=0 errno=0 [ 525.098649][T18085] sg_write: data in/out 14/93 bytes for SCSI command 0x0-- guessing data in; [ 525.098649][T18085] program syz.4.3582 not setting count and/or reply_len properly [ 525.162393][T18085] sg_write: data in/out 14/90 bytes for SCSI command 0x0-- guessing data in; [ 525.162393][T18085] program syz.4.3582 not setting count and/or reply_len properly [ 525.501451][T18099] netlink: 342 bytes leftover after parsing attributes in process `syz.4.3585'. [ 527.525610][T18141] misc userio: No port type given on /dev/userio [ 531.609283][T18221] can: request_module (can-proto-3) failed. [ 531.759708][T18228] netlink: 330 bytes leftover after parsing attributes in process `syz.3.3616'. [ 532.375493][T18245] binder: 18241:18245 ioctl 40044900 800000000000003 returned -22 [ 532.857642][ T29] audit: type=1326 audit(2105.790:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18253 comm="syz.3.3624" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f99dff85d29 code=0x0 [ 532.912628][ T29] audit: type=1326 audit(2105.820:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18253 comm="syz.3.3624" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f99dff85d29 code=0x0 [ 533.040884][T18265] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 533.418778][T18245] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3619'. [ 533.674529][T18245] netlink: 206 bytes leftover after parsing attributes in process `syz.0.3619'. [ 534.108187][T18249] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 534.155684][T18249] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 534.177854][T18249] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 534.184100][T18249] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 535.747681][T18319] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3639'. [ 535.797867][T16552] Bluetooth: hci4: command 0x0c1a tx timeout [ 536.197668][ T55] Bluetooth: hci3: command 0x0c1a tx timeout [ 536.203836][ T55] Bluetooth: hci2: command 0x0c1a tx timeout [ 536.210119][T16552] Bluetooth: hci0: command 0x0c1a tx timeout [ 537.108843][T18333] Invalid ELF header magic: != ELF [ 537.590374][T18339] Process accounting resumed [ 537.819117][T18361] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3647'. [ 538.144724][T18367] smc: net device syz_tun applied user defined pnetid ETHTOOL [ 538.711771][T18403] netlink: 334 bytes leftover after parsing attributes in process `syz.3.3657'. [ 539.362741][T18424] Invalid ELF header magic: != ELF [ 539.649962][T18431] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3661'. [ 540.447198][T18467] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3671'. [ 540.623103][T18474] HfR: entered promiscuous mode [ 540.651443][T18474] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3673'. [ 540.673821][T18474] HfR: left promiscuous mode [ 541.919255][ T55] Bluetooth: hci0: unexpected event 0x10 length: 80 > 1 [ 541.919345][ T55] Bluetooth: hci0: hardware error 0x00 [ 542.110191][T16552] Bluetooth: hci0: unexpected event 0x10 length: 80 > 1 [ 543.503003][ T29] audit: type=1326 audit(4294969422.430:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18557 comm=636F6E7469672D7A6F6E65730A exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f53d7385d29 code=0x0 [ 543.957718][ T55] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 543.964006][ T55] Bluetooth: hci0: hardware error 0x00 [ 545.603266][T18637] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3713'. [ 546.042744][ T55] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 546.308919][T18653] device-mapper: ioctl: ioctl interface mismatch: kernel(4.48.0), user(0.0.0), cmd(3) [ 546.358607][T18655] futex_wake_op: syz.4.3717 tries to shift op by 64; fix this program [ 546.469345][T18650] netlink: 'syz.5.3718': attribute type 16 has an invalid length. [ 546.477336][T18650] netlink: 330 bytes leftover after parsing attributes in process `syz.5.3718'. [ 549.318150][T18709] capability: warning: `syz.5.3733' uses deprecated v2 capabilities in a way that may be insecure [ 549.439119][T18756] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3740'. [ 550.098903][T18777] nbd: must specify an index to disconnect [ 550.773982][T18806] netlink: 342 bytes leftover after parsing attributes in process `syz.0.3755'. [ 551.966593][T18855] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3763'. [ 554.553753][T18943] tipc: Started in network mode [ 554.570946][T18943] tipc: Node identity ffffffff, cluster identity 4711 [ 554.592149][T18943] tipc: Node number set to 4294967295 [ 555.092100][T18954] team0: left allmulticast mode [ 555.118495][T18954] team_slave_0: left allmulticast mode [ 555.124092][T18954] team_slave_1: left allmulticast mode [ 555.142365][T18954] team0: left promiscuous mode [ 555.147205][T18954] team_slave_0: left promiscuous mode [ 555.189516][T18954] team_slave_1: left promiscuous mode [ 555.211985][T18954] bridge0: port 3(team0) entered disabled state [ 559.127594][T18993] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 559.146103][T18993] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 559.156361][T18993] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 560.447582][ T55] Bluetooth: hci4: command 0x0c1a tx timeout [ 561.219223][ T55] Bluetooth: hci3: command 0x0c1a tx timeout [ 561.225633][T16552] Bluetooth: hci2: command 0x0c1a tx timeout [ 563.964528][T19118] sg_write: data in/out 2059/169 bytes for SCSI command 0x57-- guessing data in; [ 563.964528][T19118] program syz.4.3823 not setting count and/or reply_len properly [ 564.672560][T19140] Invalid ELF header magic: != ELF [ 565.020126][T19164] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3831'. [ 565.070173][T19172] netlink: 330 bytes leftover after parsing attributes in process `syz.5.3833'. [ 565.087640][T19164] tc_dump_action: action bad kind [ 565.096319][T19169] netlink: 330 bytes leftover after parsing attributes in process `syz.5.3833'. [ 567.631046][T19246] nbd: couldn't find device at index 33904 [ 567.690816][T19244] netlink: 'syz.3.3849': attribute type 10 has an invalid length. [ 567.717625][T19244] netlink: 'syz.3.3849': attribute type 13 has an invalid length. [ 568.186310][T19259] sp0: Synchronizing with TNC [ 568.273331][T19207] Process accounting paused [ 568.362920][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 568.370408][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 570.640088][T19289] Process accounting resumed [ 570.770814][T19328] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3871'. [ 571.379301][T19356] block nbd0: not configured, cannot reconfigure [ 572.886674][T19396] Invalid ELF header magic: != ELF [ 574.887185][T19411] netlink: 330 bytes leftover after parsing attributes in process `syz.3.3894'. [ 574.927621][T19411] : renamed from gre0 (while UP) [ 574.957820][T19412] netlink: 330 bytes leftover after parsing attributes in process `syz.3.3894'. [ 575.034819][T19412] netlink: 330 bytes leftover after parsing attributes in process `syz.3.3894'. [ 575.044144][T19411] netlink: 330 bytes leftover after parsing attributes in process `syz.3.3894'. [ 576.844292][T19468] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3906'. [ 577.299786][T19477] can: request_module (can-proto-5) failed. [ 578.493992][T19535] erspan0: entered allmulticast mode [ 579.081954][T19556] netlink: 334 bytes leftover after parsing attributes in process `syz.3.3929'. [ 579.106549][T19556] netlink: 334 bytes leftover after parsing attributes in process `syz.3.3929'. [ 581.279844][T19628] netlink: 338 bytes leftover after parsing attributes in process `syz.3.3945'. [ 582.135566][T19673] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3958'. [ 582.207310][T19673] bridge0: port 1(bridge_slave_0) entered disabled state [ 582.256403][T19673] bridge_slave_0 (unregistering): left allmulticast mode [ 582.265834][T19673] bridge_slave_0 (unregistering): left promiscuous mode [ 582.273544][T19673] bridge0: port 1(bridge_slave_0) entered disabled state [ 582.297409][T19683] netlink: 342 bytes leftover after parsing attributes in process `syz.5.3960'. [ 586.171788][T19816] netlink: 334 bytes leftover after parsing attributes in process `syz.3.3994'. [ 586.301048][T19827] netlink: 354 bytes leftover after parsing attributes in process `syz.5.3995'. [ 588.029861][T19868] Process accounting resumed [ 589.109416][T19896] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4016'. [ 591.193703][T19984] netlink: 342 bytes leftover after parsing attributes in process `syz.5.4038'. [ 592.099015][T20025] Invalid ELF header magic: != ELF [ 592.369081][T20028] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4048'. [ 592.510234][T20028] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 592.557322][T20028] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 592.606603][T20028] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 592.636254][T20028] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 592.669072][T20028] geneve1: entered allmulticast mode [ 592.690669][T20028] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4048'. [ 592.712088][T20028] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4048'. [ 592.722000][T20028] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4048'. [ 592.731588][T20028] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4048'. [ 592.825461][T20028] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4048'. [ 592.834887][T20028] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4048'. [ 593.162749][T20053] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4053'. [ 593.885850][T20077] ptrace attach of "./syz-executor exec"[15177] was attempted by "./syz-executor exec"[20077] [ 595.276080][T20119] can: request_module (can-proto-0) failed. [ 595.299928][T20117] kernel read not supported for file /#)-\&[} (pid: 20117 comm: syz.0.4067) [ 595.412161][ T29] audit: type=1804 audit(8277292080.300:32): pid=20117 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.4067" name="#)-\&[}" dev="mqueue" ino=74792 res=1 errno=0 [ 595.437271][ T29] audit: type=1804 audit(8277292080.310:33): pid=20119 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.4067" name="#)-\&[}" dev="mqueue" ino=74792 res=1 errno=0 [ 595.468452][ T29] audit: type=1804 audit(8277292080.310:34): pid=20119 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.4067" name="#)-\&[}" dev="mqueue" ino=74792 res=1 errno=0 [ 595.526282][ T29] audit: type=1800 audit(8277292080.310:35): pid=20117 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.4067" name="#)-\&[}" dev="mqueue" ino=74792 res=0 errno=0 [ 597.533045][T20171] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4082'. [ 598.804750][T20184] Process accounting resumed [ 599.032305][T20230] netlink: 'syz.3.4090': attribute type 1 has an invalid length. [ 599.877094][T20256] sctp: [Deprecated]: syz.0.4095 (pid 20256) Use of int in max_burst socket option deprecated. [ 599.877094][T20256] Use struct sctp_assoc_value instead [ 600.325184][T20261] [U] [ 600.327989][T20261] [U] [ 600.330758][T20261] [U] [ 600.333514][T20261] [U] [ 600.391477][T20261] [U] [ 600.394283][T20261] [U] [ 600.397049][T20261] [U] [ 600.399814][T20261] [U] [ 600.428312][T20261] [U] [ 600.431114][T20261] [U] [ 600.433876][T20261] [U] [ 600.436631][T20261] [U] [ 600.475469][T20261] [U] [ 600.478273][T20261] [U] [ 600.481036][T20261] [U] [ 600.483795][T20261] [U] [ 600.487242][T20260] netlink: 342 bytes leftover after parsing attributes in process `syz.4.4096'. [ 600.499875][T20261] [U] [ 600.502660][T20261] [U] [ 600.505426][T20261] [U] [ 600.508180][T20261] [U] [ 600.531680][T20261] [U] [ 600.534476][T20261] [U] [ 600.537226][T20261] [U] [ 600.539982][T20261] [U] [ 600.596209][T20261] [U] [ 600.599004][T20261] [U] [ 600.601760][T20261] [U] [ 600.604556][T20261] [U] [ 600.626298][T20261] [U] [ 600.629112][T20261] [U] [ 600.631864][T20261] [U] [ 600.634613][T20261] [U] [ 600.650571][T20261] [U] [ 600.653364][T20261] [U] [ 600.656136][T20261] [U] [ 600.659002][T20261] [U] [ 600.697998][T20261] [U] [ 600.700799][T20261] [U] [ 600.703571][T20261] [U] [ 600.706331][T20261] [U] [ 600.723758][T20261] [U] [ 600.726557][T20261] [U] [ 600.729320][T20261] [U] [ 600.732080][T20261] [U] [ 600.763551][T20261] [U] [ 600.766355][T20261] [U] [ 600.769115][T20261] [U] [ 600.771868][T20261] [U] [ 600.852571][T20261] [U] [ 600.855437][T20261] [U] [ 600.858207][T20261] [U] [ 600.860963][T20261] [U] [ 600.874868][T20261] [U] [ 600.877672][T20261] [U] [ 600.880425][T20261] [U] [ 600.883175][T20261] [U] [ 600.914259][T20261] [U] [ 600.917044][T20261] [U] [ 600.919800][T20261] [U] [ 600.922546][T20261] [U] [ 600.945981][T20261] [U] [ 600.948793][T20261] [U] [ 600.951548][T20261] [U] [ 600.954308][T20261] [U] [ 600.980472][T20261] [U] [ 600.983257][T20261] [U] [ 600.985998][T20261] [U] [ 600.988740][T20261] [U] [ 601.020234][T20261] [U] [ 601.023014][T20261] [U] [ 601.025765][T20261] [U] [ 601.028511][T20261] [U] [ 601.098001][T20261] [U] [ 605.522069][T20445] netlink: 342 bytes leftover after parsing attributes in process `syz.0.4133'. [ 605.798327][T20463] netlink: 'syz.3.4142': attribute type 1 has an invalid length. [ 606.160262][T20470] Invalid ELF header magic: != ELF [ 607.185938][ T29] audit: type=1800 audit(8277292092.180:36): pid=20484 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.4147" name="SYSV0000000a" dev="hugetlbfs" ino=0 res=0 errno=0 [ 609.728550][T20552] netlink: 4368 bytes leftover after parsing attributes in process `syz.4.4162'. [ 613.528873][T20688] vivid-013: ================= START STATUS ================= [ 613.537464][T20688] vivid-013: Generate PTS: true [ 613.598263][T20688] vivid-013: Generate SCR: true [ 613.603211][T20688] tpg source WxH: 640x360 (Y'CbCr) [ 613.684251][T20688] tpg field: 1 [ 613.712075][T20688] tpg crop: 640x360@0x0 [ 613.739800][T20688] tpg compose: 640x360@0x0 [ 613.772234][T20688] tpg colorspace: 8 [ 613.787579][T20688] tpg transfer function: 0/0 [ 613.821429][T20688] tpg Y'CbCr encoding: 0/0 [ 613.825910][T20688] tpg quantization: 0/0 [ 613.877627][T20688] tpg RGB range: 0/2 [ 613.896685][T20688] vivid-013: ================== END STATUS ================== [ 614.164353][T20700] QAT: Device 8 not found [ 616.127785][T20770] netlink: 'syz.5.4211': attribute type 2 has an invalid length. [ 616.171421][T20770] netlink: 10 bytes leftover after parsing attributes in process `syz.5.4211'. [ 616.205593][T20770] netlink: 'syz.5.4211': attribute type 2 has an invalid length. [ 616.289559][T20779] : Can't lookup blockdev [ 617.066621][T20809] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4221'. [ 617.101708][T20809] vcan0: entered promiscuous mode [ 617.144317][T20817] netlink: zone id is out of range [ 617.156087][T20817] netlink: zone id is out of range [ 617.171523][T20817] netlink: zone id is out of range [ 617.183727][T20817] netlink: zone id is out of range [ 617.197422][T20817] netlink: get zone limit has 4 unknown bytes [ 618.736214][T20887] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4240'. [ 618.737238][T20884] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4240'. [ 619.781991][T20909] netlink: 334 bytes leftover after parsing attributes in process `syz.5.4248'. [ 621.813937][T20962] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4260'. [ 622.274983][T20965] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4261'. [ 622.506815][T20947] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 622.519657][T20947] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 622.532383][T20947] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 623.462526][T20993] HSR: entered promiscuous mode [ 623.551006][T21002] netlink: 252 bytes leftover after parsing attributes in process `syz.5.4270'. [ 623.675809][T20970] kexec: Could not allocate control_code_buffer [ 623.717684][ T55] Bluetooth: hci4: command 0x0c1a tx timeout [ 624.641000][T16552] Bluetooth: hci2: command 0x0c1a tx timeout [ 624.647136][ T55] Bluetooth: hci3: command 0x0c1a tx timeout [ 625.762719][T21049] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4279'. [ 625.917693][T21049] team0: Port device team_slave_0 removed [ 626.254842][T21063] kmem.tcp.limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 626.595888][T21075] netlink: 178 bytes leftover after parsing attributes in process `syz.3.4287'. [ 629.766975][T21165] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4308'. [ 629.801914][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 629.803260][T21171] netlink: 322 bytes leftover after parsing attributes in process `syz.3.4310'. [ 629.808288][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 629.901087][T21176] can: request_module (can-proto-5) failed. [ 630.350110][T21189] Invalid ELF header magic: != ELF [ 630.506439][T21207] vivid-013: ================= START STATUS ================= [ 630.517753][T21207] vivid-013: Generate PTS: true [ 630.528256][T21207] vivid-013: Generate SCR: true [ 630.533200][T21207] tpg source WxH: 640x360 (Y'CbCr) [ 630.557645][T21207] tpg field: 1 [ 630.561096][T21207] tpg crop: 640x360@0x0 [ 630.565293][T21207] tpg compose: 640x360@0x0 [ 630.591059][T21207] tpg colorspace: 8 [ 630.594948][T21207] tpg transfer function: 0/0 [ 630.641147][T21207] tpg Y'CbCr encoding: 0/0 [ 630.645643][T21207] tpg quantization: 0/0 [ 630.667603][T21207] tpg RGB range: 0/2 [ 630.671587][T21207] vivid-013: ================== END STATUS ================== [ 631.504540][T21250] Invalid ELF header magic: != ELF [ 632.767121][T21297] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4334'. [ 632.799214][T21297] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4334'. [ 632.817702][T21297] ipvlan0: entered allmulticast mode [ 632.827544][T21297] veth0_vlan: entered allmulticast mode [ 633.607566][T21316] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4338'. [ 634.455559][T21337] debugfs: Directory '!PjE r95N3y*"l-y~tZ' with parent 'ieee80211' already present! [ 635.058118][T21345] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4347'. [ 635.106546][T21345] tc_dump_action: action bad kind [ 636.047770][T21369] unsupported nla_type 32969 [ 637.754459][T21425] Invalid ELF header magic: != ELF [ 637.868754][T21425] Invalid ELF header magic: != ELF [ 638.066959][T21425] Invalid ELF header magic: != ELF [ 638.120163][T21425] Invalid ELF header magic: != ELF [ 638.242389][T21425] Invalid ELF header magic: != ELF [ 638.305470][T21454] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4367'. [ 638.320328][T21425] Invalid ELF header magic: != ELF [ 638.351344][T21425] Invalid ELF header magic: != ELF [ 638.390272][T21425] Invalid ELF header magic: != ELF [ 638.432194][T21425] Invalid ELF header magic: != ELF [ 638.475352][T21425] Invalid ELF header magic: != ELF [ 638.852973][T21457] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4368'. [ 638.861562][T21446] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 638.870597][T21446] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 638.885109][T21446] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 640.197786][ T55] Bluetooth: hci4: command 0x0c1a tx timeout [ 640.918211][ T55] Bluetooth: hci3: command 0x0c1a tx timeout [ 640.918217][T16552] Bluetooth: hci2: command 0x0c1a tx timeout [ 641.180359][T21529] erspan0: entered allmulticast mode [ 645.362719][ T29] audit: type=1326 audit(8277292060.860:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21641 comm="syz.0.4401" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f218b785d29 code=0x0 [ 645.411960][T21646] netlink: 266 bytes leftover after parsing attributes in process `syz.3.4402'. [ 645.428209][T21646] IPv6: NLM_F_CREATE should be specified when creating new route [ 646.412308][T21675] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4405'. [ 652.265576][T16552] Bluetooth: hci2: unexpected event 0x06 length: 4 > 3 [ 652.620862][T21838] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4440'. [ 652.689041][T21838] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4440'. [ 653.593303][T21894] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4451'. [ 656.071593][T21972] sp0: Synchronizing with TNC [ 656.115540][T21972] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4467'. [ 656.166024][T21972] team0: Port device team_slave_1 removed [ 656.962519][T22012] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 657.005785][T22012] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 657.057575][T22012] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 657.370783][T22038] device-mapper: ioctl: Unable to rename non-existent device, to [ 657.472718][T22038] lo: entered allmulticast mode [ 658.917557][T16552] Bluetooth: hci4: command 0x0c1a tx timeout [ 659.077929][ T55] Bluetooth: hci2: command 0x0c1a tx timeout [ 659.084122][T16552] Bluetooth: hci3: command 0x0c1a tx timeout [ 660.199973][T22111] GUP no longer grows the stack in syz.4.4498 (22111): 9000-401000 (8000) [ 660.237743][T22111] CPU: 0 UID: 0 PID: 22111 Comm: syz.4.4498 Not tainted 6.13.0-rc6-syzkaller-00262-gb62cef9a5c67 #0 [ 660.248614][T22111] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 660.258726][T22111] Call Trace: [ 660.262138][T22111] [ 660.265115][T22111] dump_stack_lvl+0x16c/0x1f0 [ 660.269907][T22111] gup_vma_lookup+0x1d2/0x220 [ 660.274661][T22111] __get_user_pages+0x236/0x3b50 [ 660.279672][T22111] ? kasan_save_stack+0x42/0x60 [ 660.284590][T22111] ? __pfx___get_user_pages+0x10/0x10 [ 660.290116][T22111] ? __kmalloc_noprof+0x21a/0x4f0 [ 660.295206][T22111] ? process_vm_rw+0x301/0x360 [ 660.300054][T22111] ? __x64_sys_process_vm_readv+0xe2/0x1c0 [ 660.305933][T22111] ? do_syscall_64+0xcd/0x250 [ 660.310685][T22111] __gup_longterm_locked+0x211/0x1870 [ 660.316141][T22111] ? __pfx___gup_longterm_locked+0x10/0x10 [ 660.322109][T22111] ? rwsem_read_trylock+0x12d/0x250 [ 660.327370][T22111] ? rwsem_read_trylock+0x12d/0x250 [ 660.333111][T22111] ? __pfx_rwsem_read_trylock+0x10/0x10 [ 660.338739][T22111] ? process_vm_rw_core.constprop.0+0x3ff/0x9c0 [ 660.345065][T22111] pin_user_pages_remote+0xee/0x150 [ 660.350348][T22111] ? __pfx_pin_user_pages_remote+0x10/0x10 [ 660.356235][T22111] ? down_read+0xc9/0x330 [ 660.360645][T22111] process_vm_rw_core.constprop.0+0x42b/0x9c0 [ 660.366790][T22111] ? futex_wait_queue+0x101/0x1f0 [ 660.371888][T22111] ? __pfx_process_vm_rw_core.constprop.0+0x10/0x10 [ 660.378574][T22111] process_vm_rw+0x301/0x360 [ 660.383247][T22111] ? __pfx_process_vm_rw+0x10/0x10 [ 660.388432][T22111] ? lock_acquire+0x2f/0xb0 [ 660.392980][T22111] ? putname+0x13c/0x180 [ 660.397305][T22111] ? xfd_validate_state+0x5d/0x180 [ 660.402477][T22111] ? rcu_is_watching+0x12/0xc0 [ 660.407283][T22111] __x64_sys_process_vm_readv+0xe2/0x1c0 [ 660.412963][T22111] ? trace_irq_enable.constprop.0+0xea/0x140 [ 660.418974][T22111] do_syscall_64+0xcd/0x250 [ 660.423603][T22111] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 660.429533][T22111] RIP: 0033:0x7f53d7385d29 [ 660.433974][T22111] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 660.453611][T22111] RSP: 002b:00007f53d81cd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000136 [ 660.462058][T22111] RAX: ffffffffffffffda RBX: 00007f53d7575fa0 RCX: 00007f53d7385d29 [ 660.470316][T22111] RDX: 0000000000000004 RSI: 0000000020000040 RDI: 00000000000005e0 [ 660.478307][T22111] RBP: 00007f53d7401b08 R08: 0000000000000006 R09: 0000000000000000 [ 660.486317][T22111] R10: 00000000200000c0 R11: 0000000000000246 R12: 0000000000000000 [ 660.494316][T22111] R13: 0000000000000000 R14: 00007f53d7575fa0 R15: 00007ffd74fe4ab8 [ 660.502324][T22111] [ 662.223318][T22164] openvswitch: netlink: Port -2134900732 exceeds max allowable 65535 [ 662.361991][T22168] netlink: 'syz.3.4511': attribute type 6 has an invalid length. [ 662.377598][T22168] netlink: 'syz.3.4511': attribute type 7 has an invalid length. [ 662.385393][T22168] netlink: 'syz.3.4511': attribute type 8 has an invalid length. [ 662.393342][T22168] netlink: 'syz.3.4511': attribute type 9 has an invalid length. [ 662.404767][T22168] netlink: 226 bytes leftover after parsing attributes in process `syz.3.4511'. [ 662.414325][T22168] netlink: 'syz.3.4511': attribute type 6 has an invalid length. [ 662.427547][T22168] netlink: 'syz.3.4511': attribute type 7 has an invalid length. [ 662.435465][T22168] netlink: 'syz.3.4511': attribute type 8 has an invalid length. [ 662.483478][T22168] netlink: 'syz.3.4511': attribute type 9 has an invalid length. [ 662.511189][T22168] netlink: 226 bytes leftover after parsing attributes in process `syz.3.4511'. [ 663.214243][T22189] zswap: compressor not available [ 664.307447][T22040] lo: left allmulticast mode [ 664.582725][T22222] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4522'. [ 666.107876][T22260] netlink: 2 bytes leftover after parsing attributes in process `syz.4.4534'. [ 668.401684][T22328] lo: entered allmulticast mode [ 668.527641][T22330] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4550'. [ 668.528095][T22329] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4550'. [ 668.880358][T22348] netlink: 'syz.0.4554': attribute type 4 has an invalid length. [ 668.901662][T22348] netlink: 314 bytes leftover after parsing attributes in process `syz.0.4554'. [ 669.226264][T22327] lo: left allmulticast mode [ 669.856103][T22328] kexec: Could not allocate control_code_buffer [ 672.570978][T22423] program syz.4.4574 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 673.801117][T22462] netlink: 334 bytes leftover after parsing attributes in process `syz.3.4583'. [ 673.840297][T22462] netlink: 334 bytes leftover after parsing attributes in process `syz.3.4583'. [ 674.440527][T22479] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4588'. [ 675.893473][T22516] vivid-013: ================= START STATUS ================= [ 675.902450][T22516] vivid-013: Generate PTS: true [ 675.909820][T22516] vivid-013: Generate SCR: true [ 675.932579][T22516] tpg source WxH: 640x360 (Y'CbCr) [ 675.960472][T22516] tpg field: 1 [ 675.976023][T22516] tpg crop: 640x360@0x0 [ 675.987787][T22516] tpg compose: 640x360@0x0 [ 676.007585][T22516] tpg colorspace: 8 [ 676.011455][T22516] tpg transfer function: 0/0 [ 676.016080][T22516] tpg Y'CbCr encoding: 0/0 [ 676.027788][T22516] tpg quantization: 0/0 [ 676.031998][T22516] tpg RGB range: 0/2 [ 676.040964][T22516] vivid-013: ================== END STATUS ================== [ 678.538771][T22607] binder: 22605:22607 ioctl 541b 9 returned -22 [ 678.882283][T22628] delete_channel: no stack [ 679.842519][T22639] delete_channel: no stack [ 679.889999][T22639] delete_channel: no stack [ 679.935340][T22639] delete_channel: no stack [ 679.959585][T22639] delete_channel: no stack [ 679.964203][T22639] delete_channel: no stack [ 679.997684][T22639] delete_channel: no stack [ 680.008646][T22639] delete_channel: no stack [ 680.017950][T22639] delete_channel: no stack [ 680.027916][T22639] delete_channel: no stack [ 680.032505][T22639] delete_channel: no stack [ 680.074190][T22639] delete_channel: no stack [ 680.095972][T22639] delete_channel: no stack [ 680.106783][T22639] delete_channel: no stack [ 680.113238][T22639] delete_channel: no stack [ 680.125724][T22639] delete_channel: no stack [ 680.135848][T22639] delete_channel: no stack [ 680.145973][T22639] delete_channel: no stack [ 680.156071][T22639] delete_channel: no stack [ 680.170965][T22639] delete_channel: no stack [ 680.175581][T22639] delete_channel: no stack [ 680.181649][T22639] delete_channel: no stack [ 680.190548][T22639] delete_channel: no stack [ 680.207727][T22639] delete_channel: no stack [ 680.214104][T22639] delete_channel: no stack [ 680.228553][T22639] delete_channel: no stack [ 680.237753][T22639] delete_channel: no stack [ 680.252485][T22639] delete_channel: no stack [ 680.257106][T22639] delete_channel: no stack [ 680.277696][T22639] delete_channel: no stack [ 680.282578][T22639] delete_channel: no stack [ 680.287144][T22639] delete_channel: no stack [ 680.308109][T22639] delete_channel: no stack [ 680.312705][T22639] delete_channel: no stack [ 680.317303][T22639] delete_channel: no stack [ 680.331585][T22639] delete_channel: no stack [ 680.336554][T22639] delete_channel: no stack [ 680.341736][T22639] delete_channel: no stack [ 680.347307][T22639] delete_channel: no stack [ 680.352462][T22639] delete_channel: no stack [ 680.357210][T22639] delete_channel: no stack [ 680.362510][T22639] delete_channel: no stack [ 680.367240][T22639] delete_channel: no stack [ 680.375025][T22639] delete_channel: no stack [ 680.385108][T22639] delete_channel: no stack [ 680.395235][T22639] delete_channel: no stack [ 680.405333][T22639] delete_channel: no stack [ 680.415453][T22639] delete_channel: no stack [ 680.428115][T22639] delete_channel: no stack [ 680.432688][T22639] delete_channel: no stack [ 680.447076][T22639] delete_channel: no stack [ 680.462880][T22639] delete_channel: no stack [ 680.476485][T22639] delete_channel: no stack [ 680.492891][T22639] delete_channel: no stack [ 680.501830][T22639] delete_channel: no stack [ 680.516673][T22639] delete_channel: no stack [ 680.527678][T22639] delete_channel: no stack [ 680.536710][T22639] delete_channel: no stack [ 680.546180][T22639] delete_channel: no stack [ 680.557831][T22639] delete_channel: no stack [ 680.562434][T22639] delete_channel: no stack [ 680.584391][T22639] delete_channel: no stack [ 680.593401][T22639] delete_channel: no stack [ 680.605208][T22639] delete_channel: no stack [ 680.618407][T22639] delete_channel: no stack [ 680.632556][T22639] delete_channel: no stack [ 686.512481][T22902] netlink: 338 bytes leftover after parsing attributes in process `syz.3.4683'. [ 686.548282][T22902] netlink: 338 bytes leftover after parsing attributes in process `syz.3.4683'. [ 686.939514][T22919] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4691'. [ 687.861685][T22956] scsi_dev_info_list_add_str: bad dev info string '!`3)+' '' '' [ 688.029705][T22968] netlink: 'syz.0.4703': attribute type 21 has an invalid length. [ 688.050316][T22968] netlink: 334 bytes leftover after parsing attributes in process `syz.0.4703'. [ 689.010958][T23009] netlink: 'syz.5.4714': attribute type 1 has an invalid length. [ 689.028528][T23009] netlink: 334 bytes leftover after parsing attributes in process `syz.5.4714'. [ 691.258443][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 691.264849][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 692.450319][T16552] Bluetooth: hci4: ACL packet for unknown connection handle 0 [ 692.877953][T23102] nbd: socks must be embedded in a SOCK_ITEM attr [ 692.884783][T23102] block nbd0: shutting down sockets [ 696.090003][T23187] bridge0: port 4(veth1_to_hsr) entered blocking state [ 696.121689][T23187] bridge0: port 4(veth1_to_hsr) entered disabled state [ 696.152247][T23187] veth1_to_hsr: entered allmulticast mode [ 696.172032][T23187] veth1_to_hsr: entered promiscuous mode [ 696.205821][T23187] bridge0: port 4(veth1_to_hsr) entered blocking state [ 696.212883][T23187] bridge0: port 4(veth1_to_hsr) entered forwarding state [ 697.241732][T23208] lo: entered allmulticast mode [ 697.251876][T23208] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4757'. [ 698.172967][T23207] lo: left allmulticast mode [ 698.240501][T23234] netlink: 342 bytes leftover after parsing attributes in process `syz.4.4761'. [ 699.685042][T23269] vivid-013: ================= START STATUS ================= [ 699.726566][T23269] vivid-013: Generate PTS: true [ 699.732376][T23269] vivid-013: Generate SCR: true [ 699.737310][T23269] tpg source WxH: 640x360 (Y'CbCr) [ 699.746084][T23269] tpg field: 1 [ 699.752956][T23269] tpg crop: 640x360@0x0 [ 699.757174][T23269] tpg compose: 640x360@0x0 [ 699.776667][T23269] tpg colorspace: 8 [ 699.782662][T23269] tpg transfer function: 0/0 [ 699.787343][T23269] tpg Y'CbCr encoding: 0/0 [ 699.797607][T23269] tpg quantization: 0/0 [ 699.801814][T23269] tpg RGB range: 0/2 [ 699.817831][T23269] vivid-013: ================== END STATUS ================== [ 699.903902][T23209] kexec: Could not allocate control_code_buffer [ 699.942329][T23274] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4772'. [ 700.068232][T23274] team0 (unregistering): Port device team_slave_0 removed [ 700.123720][T23274] team0 (unregistering): Port device team_slave_1 removed [ 700.670604][T23294] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4777'. [ 701.400402][T23334] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4786'. [ 701.502804][T23336] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4787'. [ 701.685918][T23343] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4790'. [ 701.715848][T23343] veth0_macvtap: left promiscuous mode [ 703.269453][T23427] Process accounting resumed [ 703.274334][T23427] kstrtoul() returned -22 for lu_gp_id [ 703.891509][T23448] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 703.914064][T23448] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 703.937565][T23448] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4815'. [ 704.194060][T23451] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4815'. [ 704.828111][T23468] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4823'. [ 704.923310][T23474] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4825'. [ 704.955844][T23477] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4822'. [ 710.801251][T23615] mkiss: ax0: crc mode is auto. [ 710.857014][T23610] ptrace attach of "./syz-executor exec"[14240] was attempted by "./syz-executor exec"[23610] [ 711.851776][T22112] bridge0: port 3(syz_tun) entered disabled state [ 711.880611][T22112] syz_tun (unregistering): left allmulticast mode [ 711.894018][ T55] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 711.901927][ T55] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 711.909646][ T55] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 711.917830][ T55] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 711.925558][ T55] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 711.933203][ T55] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 711.955994][T22112] syz_tun (unregistering): left promiscuous mode [ 711.963176][T22112] bridge0: port 3(syz_tun) entered disabled state [ 712.241645][T23652] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4865'. [ 712.421741][T23642] chnl_net:caif_netlink_parms(): no params data found [ 712.560072][T23660] HfR: entered promiscuous mode [ 712.909719][T23642] bridge0: port 1(bridge_slave_0) entered blocking state [ 712.927392][T23642] bridge0: port 1(bridge_slave_0) entered disabled state [ 712.945006][T23642] bridge_slave_0: entered allmulticast mode [ 712.969684][T23642] bridge_slave_0: entered promiscuous mode [ 712.989636][T23642] bridge0: port 2(bridge_slave_1) entered blocking state [ 713.014991][T23642] bridge0: port 2(bridge_slave_1) entered disabled state [ 713.029454][T23642] bridge_slave_1: entered allmulticast mode [ 713.051864][T23642] bridge_slave_1: entered promiscuous mode [ 713.102072][T23642] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 713.154857][T23642] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 713.403186][T23642] team0: Port device team_slave_0 added [ 713.416477][T23642] team0: Port device team_slave_1 added [ 713.558742][T23642] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 713.565744][T23642] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 713.614809][T23642] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 713.644916][T23642] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 713.667556][T23642] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 713.717105][T23642] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 713.834589][T23642] hsr_slave_0: entered promiscuous mode [ 713.855437][T23642] hsr_slave_1: entered promiscuous mode [ 713.869312][T23642] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 713.887128][T23642] Cannot create hsr debugfs directory [ 713.957928][T16552] Bluetooth: hci1: command tx timeout [ 714.579039][T23642] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 714.659295][T23715] lo: entered allmulticast mode [ 714.758963][T23642] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 714.892533][T23642] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 714.958158][T23715] lo: left allmulticast mode [ 715.234459][T23642] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 715.397806][T23740] ptrace attach of "./syz-executor exec"[14913] was attempted by "./syz-executor exec"[23740] [ 715.708690][T23642] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 715.784614][T23642] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 715.823630][T23642] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 715.857645][T23642] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 716.041401][T16552] Bluetooth: hci1: command tx timeout [ 716.466296][T23642] 8021q: adding VLAN 0 to HW filter on device bond0 [ 716.531499][T23642] 8021q: adding VLAN 0 to HW filter on device team0 [ 716.573044][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 716.580221][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 717.025986][T15671] bridge0: port 2(bridge_slave_1) entered blocking state [ 717.033298][T15671] bridge0: port 2(bridge_slave_1) entered forwarding state [ 717.528192][T23642] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 717.624579][T23642] veth0_vlan: entered promiscuous mode [ 717.664897][T23642] veth1_vlan: entered promiscuous mode [ 717.752674][T23642] veth0_macvtap: entered promiscuous mode [ 717.779802][T23642] veth1_macvtap: entered promiscuous mode [ 717.814326][T23642] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 717.836740][T23642] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 717.854616][T23642] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 717.875543][T23642] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 717.897713][T23642] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 717.917534][T23642] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 717.931418][T23642] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 717.950806][T23642] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 717.966344][T23642] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 717.997646][T23642] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 718.011393][T23642] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 718.022429][T23642] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 718.054896][T23642] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 718.092557][T23642] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 718.117919][T16552] Bluetooth: hci1: command tx timeout [ 718.137626][T23642] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 718.147595][T23642] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 718.179188][T23642] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 718.220518][T23642] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 718.260375][T23642] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 718.288145][T23642] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 718.305039][T23642] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 718.326506][T23642] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 718.342847][T23642] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 718.352959][T23642] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 718.366710][T23642] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 718.394016][T23642] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 718.441062][T23642] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 718.452401][T23642] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 718.469793][T23642] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 718.484041][T23642] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 718.619949][ T8188] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 718.645241][ T8188] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 718.717003][ T8188] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 718.758139][ T8188] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 719.351593][T23817] netlink: 330 bytes leftover after parsing attributes in process `syz.3.4898'. [ 720.197850][T16552] Bluetooth: hci1: command tx timeout [ 720.549371][T23862] CIFS: VFS: Invalid SecurityFlags:  [ 721.379836][T23891] Invalid ELF header magic: != ELF [ 721.967742][T23893] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4918'. [ 722.624936][T23926] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 722.645509][T23926] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 723.589157][T23942] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4936'. [ 724.016303][T23950] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4931'. [ 724.025813][T23950] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 724.033920][T23950] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 724.069338][T23950] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 724.082563][T23950] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 724.601664][T23969] sg_write: data in/out 2059/169 bytes for SCSI command 0x57-- guessing data in; [ 724.601664][T23969] program syz.0.4942 not setting count and/or reply_len properly [ 724.986092][T23976] device-mapper: ioctl: ioctl interface mismatch: kernel(4.48.0), user(0.0.0), cmd(2) [ 725.397952][T23985] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4939'. [ 725.521507][T23985] bond0: (slave bond_slave_0): Releasing backup interface [ 728.124976][T24081] Invalid ELF header magic: != ELF [ 728.205490][T24084] netlink: 19 bytes leftover after parsing attributes in process `syz.4.4964'. [ 728.417917][ T29] audit: type=1807 audit(8277292143.900:38): UNKNOWN=0"]$|1j0B|dӉO+/xWӦ^gq%ḦrO res=0 [ 728.418939][T24088] ima: policy update failed [ 728.430262][ T29] audit: type=1802 audit(8277292143.900:39): pid=24088 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.0.4965" res=0 errno=0 [ 728.463007][ T29] audit: type=1802 audit(8277292143.950:40): pid=24088 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.0.4965" res=0 errno=0 [ 732.105289][T24170] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4982'. [ 732.964452][T24196] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 732.972641][T24196] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 732.999267][T24196] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 733.052121][T24196] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 733.074216][T24196] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 733.724437][T24235] netlink: 342 bytes leftover after parsing attributes in process `syz.3.4994'. [ 733.756622][T24235] netlink: 342 bytes leftover after parsing attributes in process `syz.3.4994'. [ 733.775515][T24235] netlink: 342 bytes leftover after parsing attributes in process `syz.3.4994'. [ 734.102025][T24245] random: crng reseeded on system resumption [ 734.163229][T24247] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4998'. [ 734.280963][T16552] Bluetooth: hci2: command 0x0c1a tx timeout [ 734.551253][T24252] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4999'. [ 734.997598][T16552] Bluetooth: hci3: command 0x0c1a tx timeout [ 735.077590][T16552] Bluetooth: hci1: command 0x0c1a tx timeout [ 736.320925][T24282] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5004'. [ 736.870359][T24284] Invalid ELF header magic: != ELF [ 737.157895][T16552] Bluetooth: hci1: command 0x0c1a tx timeout [ 738.892014][T24348] Process accounting resumed [ 739.195154][T24353] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 739.237654][T16552] Bluetooth: hci1: command 0x0c1a tx timeout [ 739.465376][T24358] Process accounting resumed [ 739.802880][T24376] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5029'. [ 744.561192][T24480] nbd: illegal input index 50331648 [ 744.610811][T24484] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5055'. [ 744.643008][T24484] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5055'. [ 748.650503][T24579] netlink: 330 bytes leftover after parsing attributes in process `syz.0.5077'. [ 751.949357][T24650] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5096'. [ 752.680503][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 752.688624][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 752.736388][T24679] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5102'. [ 752.760492][T24679] ip_vti0: entered promiscuous mode [ 753.302384][T24695] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5106'. [ 757.715907][ T29] audit: type=1800 audit(4294967309.280:41): pid=24817 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.5139" name="discovery_nqn" dev="configfs" ino=93735 res=0 errno=0 [ 758.302305][T24846] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5144'. [ 758.390659][T24846] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5144'. [ 758.412855][T24846] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5144'. [ 758.425804][T24846] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5144'. [ 758.454548][T24846] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5144'. [ 758.490887][T24846] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5144'. [ 758.500917][T24846] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5144'. [ 758.510932][T24846] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5144'. [ 758.520737][T24846] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5144'. [ 758.540163][T24846] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5144'. [ 758.920211][T24865] vcan0: entered promiscuous mode [ 760.085955][ T35] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 760.240550][ T35] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 760.368194][ T55] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 760.376260][ T55] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 760.384196][ T55] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 760.402751][ T55] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 760.410504][ T55] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 760.419915][ T55] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 760.421810][ T35] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 760.601393][ T35] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 760.635438][T24899] smc: net device syz_tun applied user defined pnetid ETHTOOL [ 760.992343][ T35] bridge_slave_1: left allmulticast mode [ 761.029886][ T35] bridge_slave_1: left promiscuous mode [ 761.063545][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 761.190091][ T35] bridge_slave_0: left allmulticast mode [ 761.195991][ T35] bridge_slave_0: left promiscuous mode [ 761.212990][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 761.598754][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 761.654364][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 761.684076][ T35] bond0 (unregistering): Released all slaves [ 761.952536][T24904] chnl_net:caif_netlink_parms(): no params data found [ 762.420098][T24904] bridge0: port 1(bridge_slave_0) entered blocking state [ 762.427329][T24904] bridge0: port 1(bridge_slave_0) entered disabled state [ 762.481147][T24904] bridge_slave_0: entered allmulticast mode [ 762.504557][T24904] bridge_slave_0: entered promiscuous mode [ 762.517539][ T55] Bluetooth: hci1: command tx timeout [ 762.615757][ T35] hsr_slave_0: left promiscuous mode [ 762.657951][ T35] hsr_slave_1: left promiscuous mode [ 762.693321][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 762.707675][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 762.746023][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 762.765651][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 762.861434][ T35] veth1_macvtap: left promiscuous mode [ 762.867126][ T35] veth0_macvtap: left promiscuous mode [ 763.377989][ T35] team0 (unregistering): Port device team_slave_1 removed syzkaller syzkaller login: [ 763.426748][ T35] team0 (unregistering): Port device team_slave_0 removed [ 763.947789][T24904] bridge0: port 2(bridge_slave_1) entered blocking state [ 763.955518][T24904] bridge0: port 2(bridge_slave_1) entered disabled state [ 763.987765][T24904] bridge_slave_1: entered allmulticast mode [ 763.996584][T24904] bridge_slave_1: entered promiscuous mode [ 764.070925][T24978] netlink: 'syz.4.5168': attribute type 19 has an invalid length. [ 764.100894][T24978] __nla_validate_parse: 56 callbacks suppressed [ 764.100919][T24978] netlink: 334 bytes leftover after parsing attributes in process `syz.4.5168'. [ 764.273403][T24904] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 764.333298][T24904] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 764.502738][T24904] team0: Port device team_slave_0 added [ 764.514502][T24904] team0: Port device team_slave_1 added [ 764.607668][ T55] Bluetooth: hci1: command tx timeout [ 764.694093][T24904] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 764.721679][T24904] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 764.819363][T24904] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 764.841739][T24904] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 764.882615][T24904] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 764.968863][T24904] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 765.147890][T24904] hsr_slave_0: entered promiscuous mode [ 765.170509][T24904] hsr_slave_1: entered promiscuous mode [ 765.214499][T24904] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 765.222696][T24904] Cannot create hsr debugfs directory [ 765.295508][T25035] Invalid ELF header magic: != ELF [ 765.606548][T24904] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 765.650235][T24904] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 765.682451][T24904] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 765.712584][T24904] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 765.904748][T24904] 8021q: adding VLAN 0 to HW filter on device bond0 [ 765.972189][T24904] 8021q: adding VLAN 0 to HW filter on device team0 [ 766.029018][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 766.036988][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 766.079273][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 766.086694][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 766.312879][T25060] cgroup: fork rejected by pids controller in /syz4 [ 766.531383][T24904] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 766.582983][T25060] KVM: debugfs: duplicate directory 25060-3 [ 766.612493][T25060] KVM: debugfs: duplicate directory 25060-4 [ 766.638792][T25060] KVM: debugfs: duplicate directory 25060-5 [ 766.677632][ T55] Bluetooth: hci1: command tx timeout [ 766.809585][T25060] KVM: debugfs: duplicate directory 25060-5 [ 766.832431][T25060] KVM: debugfs: duplicate directory 25060-6 [ 766.928783][T25060] KVM: debugfs: duplicate directory 25060-6 [ 766.939030][T25060] KVM: debugfs: duplicate directory 25060-7 [ 767.068060][T24904] veth0_vlan: entered promiscuous mode [ 767.075288][T25060] KVM: debugfs: duplicate directory 25060-7 [ 767.093507][T24904] veth1_vlan: entered promiscuous mode [ 767.108618][T25060] KVM: debugfs: duplicate directory 25060-8 [ 767.126198][T25060] KVM: debugfs: duplicate directory 25060-9 [ 767.197862][T24904] veth0_macvtap: entered promiscuous mode [ 767.219015][T24904] veth1_macvtap: entered promiscuous mode [ 767.270994][T24904] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 767.299403][T24904] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 767.327768][T24904] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 767.347865][T24904] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 767.377601][T24904] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 767.398996][T24904] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 767.420379][T24904] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 767.447640][T24904] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 767.467819][T24904] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 767.489359][T24904] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 767.508939][T24904] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 767.553911][T24904] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 767.568326][T24904] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 767.588193][T24904] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 767.607880][T24904] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 767.627800][T24904] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 767.641158][T24904] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 767.651510][T24904] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 767.663666][T24904] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 767.674952][T24904] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 767.685810][T24904] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 767.711213][T24904] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 767.735856][T24904] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 767.769552][T24904] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 767.788333][T24904] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 767.806963][T24904] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 768.059451][ T3616] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 768.115222][ T3616] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 768.205810][ T8190] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 768.229123][ T8190] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 768.757724][ T55] Bluetooth: hci1: command tx timeout [ 769.605674][T25208] ptrace attach of "./syz-executor exec"[24904] was attempted by "./syz-executor exec"[25208] [ 771.099428][T25262] Process accounting resumed [ 771.192154][T25264] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5201'. [ 774.542510][T25387] netlink: 93 bytes leftover after parsing attributes in process `syz.5.5227'. [ 774.571456][T25388] netlink: 93 bytes leftover after parsing attributes in process `syz.5.5227'. [ 775.095388][T25415] netlink: 452 bytes leftover after parsing attributes in process `syz.6.5234'. [ 775.140365][T25412] netlink: 452 bytes leftover after parsing attributes in process `syz.6.5234'. [ 775.170297][T25415] netlink: 452 bytes leftover after parsing attributes in process `syz.6.5234'. [ 775.203210][T25412] netlink: 452 bytes leftover after parsing attributes in process `syz.6.5234'. [ 775.238337][T25423] netlink: 342 bytes leftover after parsing attributes in process `syz.4.5237'. [ 776.111186][T25458] sg_write: data in/out 2059/169 bytes for SCSI command 0x57-- guessing data in; [ 776.111186][T25458] program syz.0.5245 not setting count and/or reply_len properly [ 776.171890][T25457] netlink: 'syz.5.5244': attribute type 2 has an invalid length. [ 776.220611][T25457] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5244'. [ 777.143443][T25483] random: crng reseeded on system resumption [ 778.859533][T25562] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5264'. [ 778.908760][T25562] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5264'. [ 779.160578][T25580] Invalid ELF header magic: != ELF [ 779.178118][T25574] device-mapper: ioctl: name not supplied when creating device [ 780.097784][T25588] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 780.104996][T25588] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 780.114535][T25588] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 780.121224][T25588] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 780.174781][T25588] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 781.817560][ T55] Bluetooth: hci2: command 0x0c1a tx timeout [ 782.117947][ T55] Bluetooth: hci1: command 0x0c1a tx timeout [ 782.121282][T16552] Bluetooth: hci3: command 0x0c1a tx timeout [ 782.561531][T25685] netlink: 50 bytes leftover after parsing attributes in process `syz.5.5289'. [ 783.605543][T25731] aoe: invalid device specification [ 784.228950][T16552] Bluetooth: hci1: command 0x0c1a tx timeout [ 784.252719][T25739] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 784.264155][T25739] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 785.616191][T25763] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 785.624228][T25763] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 785.643524][T25763] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 787.157922][T16552] Bluetooth: hci2: command 0x0c1a tx timeout [ 787.649753][T16552] Bluetooth: hci3: command 0x0c1a tx timeout [ 787.717702][T16552] Bluetooth: hci1: command 0x0c1a tx timeout [ 789.035837][ T29] audit: type=1804 audit(4294967340.600:42): pid=25902 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.5322" name="/newroot/sys/kernel/debug/tracing/set_event_notrace_pid" dev="tracefs" ino=1055 res=1 errno=0 [ 789.061827][ C0] vkms_vblank_simulate: vblank timer overrun [ 789.392007][T25911] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5326'. [ 789.772981][T25929] netlink: 'syz.4.5330': attribute type 15 has an invalid length. [ 789.782641][T25929] netlink: 252 bytes leftover after parsing attributes in process `syz.4.5330'. [ 794.082096][T26038] netlink: zone id is out of range [ 794.097081][T26038] netlink: zone id is out of range [ 794.127627][T26038] netlink: zone id is out of range [ 794.132907][T26038] netlink: zone id is out of range [ 794.168641][T26038] netlink: zone id is out of range [ 794.173917][T26038] netlink: zone id is out of range [ 794.207771][T26038] netlink: zone id is out of range [ 794.229830][T26038] netlink: zone id is out of range [ 794.263392][T26038] netlink: zone id is out of range [ 794.317533][T26038] netlink: zone id is out of range [ 794.511957][T26028] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 794.958328][T26044] Invalid ELF header magic: != ELF [ 794.998138][T26043] Invalid ELF header magic: != ELF [ 795.066479][T26054] Invalid ELF header magic: != ELF [ 796.100310][ T55] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 796.110680][ T55] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 796.127809][ T55] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 796.141005][ T55] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 796.149425][ T55] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 796.157245][ T55] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 796.741905][T26081] chnl_net:caif_netlink_parms(): no params data found [ 796.847740][T26101] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5367'. [ 797.518772][T26081] bridge0: port 1(bridge_slave_0) entered blocking state [ 797.735670][T26081] bridge0: port 1(bridge_slave_0) entered disabled state [ 797.759421][T26081] bridge_slave_0: entered allmulticast mode [ 797.791062][T26081] bridge_slave_0: entered promiscuous mode [ 797.919094][T26081] bridge0: port 2(bridge_slave_1) entered blocking state [ 797.957768][T26081] bridge0: port 2(bridge_slave_1) entered disabled state [ 798.000823][T26081] bridge_slave_1: entered allmulticast mode [ 798.029943][T26081] bridge_slave_1: entered promiscuous mode [ 798.198351][T16552] Bluetooth: hci4: command tx timeout [ 798.892472][T26081] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 798.956769][T26081] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 799.697297][T26081] team0: Port device team_slave_0 added [ 799.706733][T26140] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5374'. [ 799.729620][T26081] team0: Port device team_slave_1 added [ 800.063876][T26081] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 800.082875][T26081] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 800.171824][T26081] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 800.250234][T26081] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 800.272542][T26081] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 800.308415][T16552] Bluetooth: hci4: command tx timeout [ 800.405642][T26081] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 800.835468][T26081] hsr_slave_0: entered promiscuous mode [ 800.971471][T26081] hsr_slave_1: entered promiscuous mode [ 801.062263][T26081] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 801.093608][T26081] Cannot create hsr debugfs directory [ 801.938559][T26081] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 801.981212][T26081] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 802.046474][T26081] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 802.094057][T26081] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 802.357743][T16552] Bluetooth: hci4: command tx timeout [ 802.479731][T26081] 8021q: adding VLAN 0 to HW filter on device bond0 [ 802.552727][T26081] 8021q: adding VLAN 0 to HW filter on device team0 [ 802.642609][ T82] bridge0: port 1(bridge_slave_0) entered blocking state [ 802.650226][ T82] bridge0: port 1(bridge_slave_0) entered forwarding state [ 802.710210][ T82] bridge0: port 2(bridge_slave_1) entered blocking state [ 802.717606][ T82] bridge0: port 2(bridge_slave_1) entered forwarding state [ 802.892059][T26081] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 803.513931][T26081] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 803.814754][T26181] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5383'. [ 804.437670][T16552] Bluetooth: hci4: command tx timeout [ 804.938143][T26081] veth0_vlan: entered promiscuous mode [ 805.084857][T26081] veth1_vlan: entered promiscuous mode [ 805.245127][T26081] veth0_macvtap: entered promiscuous mode [ 805.453828][T26081] veth1_macvtap: entered promiscuous mode [ 805.634753][T26081] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 805.680652][T26081] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 805.723563][T26081] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 805.751505][T26220] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5392'. [ 805.765498][T26081] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 805.788613][T26081] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 805.824017][T26081] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 805.843075][T26081] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 805.867184][T26081] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 805.890234][T26081] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 805.909758][T26081] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 805.928608][T26081] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 805.948180][T26081] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 805.993365][T26081] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 806.028653][T26217] netlink: 342 bytes leftover after parsing attributes in process `syz.0.5390'. [ 806.052056][T26220] bridge_slave_1: left allmulticast mode [ 806.062099][T26220] bridge_slave_1: left promiscuous mode [ 806.101233][T26220] bridge0: port 2(bridge_slave_1) entered disabled state [ 806.250588][T26081] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 806.337341][T26081] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 806.399590][T26081] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 806.481812][T26081] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 806.527635][T26081] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 806.590351][T26081] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 806.640655][T26081] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 806.695810][T26081] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 806.742317][T26081] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 806.794206][T26081] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 806.847630][T26081] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 806.891720][T26081] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 806.942948][T26081] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 807.006428][T26081] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 807.065888][T26081] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 807.127637][T26081] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 807.171024][T26081] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 807.816506][ T8238] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 807.877862][ T8238] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 807.953988][ T8238] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 808.005936][ T8238] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 808.214390][T26237] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 808.255205][T26237] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 808.300773][T26237] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 808.331843][T26237] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 808.370816][T26237] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 808.430921][T26237] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 809.358302][T26261] netlink: 342 bytes leftover after parsing attributes in process `syz.7.5402'. [ 810.117870][T16552] Bluetooth: hci2: command 0x0c1a tx timeout [ 810.278327][T16552] Bluetooth: hci3: command 0x0c1a tx timeout [ 810.358178][T16552] Bluetooth: hci4: command 0x0c1a tx timeout [ 810.364649][T16552] Bluetooth: hci1: command 0x0c1a tx timeout [ 811.072641][T16552] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 811.086680][T16552] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 811.107640][T16552] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 811.118173][T16552] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 811.128186][T16552] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 811.135598][T16552] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 812.439454][T16552] Bluetooth: hci4: command 0x0c1a tx timeout [ 812.690996][T26273] chnl_net:caif_netlink_parms(): no params data found [ 813.157784][T16552] Bluetooth: hci5: command tx timeout [ 813.706024][T26273] bridge0: port 1(bridge_slave_0) entered blocking state [ 813.716091][T26273] bridge0: port 1(bridge_slave_0) entered disabled state [ 813.752823][T26273] bridge_slave_0: entered allmulticast mode [ 813.782238][T26273] bridge_slave_0: entered promiscuous mode [ 813.920735][T26273] bridge0: port 2(bridge_slave_1) entered blocking state [ 813.960791][T26273] bridge0: port 2(bridge_slave_1) entered disabled state [ 813.995185][T26273] bridge_slave_1: entered allmulticast mode [ 814.058741][T26273] bridge_slave_1: entered promiscuous mode [ 814.119769][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 814.132368][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 814.231136][T26273] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 814.277854][T26273] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 814.384439][T26273] team0: Port device team_slave_0 added [ 814.430225][T26273] team0: Port device team_slave_1 added [ 814.517675][T16552] Bluetooth: hci4: command 0x0c1a tx timeout [ 814.629155][T26273] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 814.636885][T26273] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 814.749897][T26273] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 814.822984][T26273] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 814.843057][T26273] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 814.955340][T26273] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 815.101350][T26273] hsr_slave_0: entered promiscuous mode [ 815.131224][T26273] hsr_slave_1: entered promiscuous mode [ 815.162986][T26273] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 815.193560][T26273] Cannot create hsr debugfs directory [ 815.237522][T16552] Bluetooth: hci5: command tx timeout [ 815.571595][T10455] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 815.664116][T26333] mkiss: ax0: crc mode is auto. [ 815.675908][T10455] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 815.836688][T10455] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 816.108731][T10455] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 816.203587][T26340] netlink: 'syz.0.5418': attribute type 2 has an invalid length. [ 816.228082][T26340] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5418'. [ 816.629943][T10455] bridge_slave_1: left allmulticast mode [ 816.635724][T10455] bridge_slave_1: left promiscuous mode [ 816.671617][T10455] bridge0: port 2(bridge_slave_1) entered disabled state [ 816.841440][T10455] bridge_slave_0: left allmulticast mode [ 816.847793][T10455] bridge_slave_0: left promiscuous mode [ 816.853745][T10455] bridge0: port 1(bridge_slave_0) entered disabled state [ 817.033937][T26366] ================================================================== [ 817.042112][T26366] BUG: KASAN: slab-use-after-free in msft_opcode_get+0x6d/0x80 [ 817.049808][T26366] Read of size 2 at addr ffff88803753e232 by task syz.7.5425/26366 [ 817.057927][T26366] [ 817.060575][T26366] CPU: 1 UID: 0 PID: 26366 Comm: syz.7.5425 Not tainted 6.13.0-rc6-syzkaller-00262-gb62cef9a5c67 #0 [ 817.072001][T26366] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 817.082278][T26366] Call Trace: [ 817.086028][T26366] [ 817.088999][T26366] dump_stack_lvl+0x116/0x1f0 [ 817.093742][T26366] print_report+0xc3/0x620 [ 817.098227][T26366] ? __virt_addr_valid+0x5e/0x590 [ 817.103309][T26366] ? __phys_addr+0xc6/0x150 [ 817.107856][T26366] kasan_report+0xd9/0x110 [ 817.112316][T26366] ? msft_opcode_get+0x6d/0x80 [ 817.117107][T26366] ? msft_opcode_get+0x6d/0x80 [ 817.121917][T26366] msft_opcode_get+0x6d/0x80 [ 817.127289][T26366] ? __pfx_msft_opcode_get+0x10/0x10 [ 817.132725][T26366] simple_attr_read+0x169/0x300 [ 817.137816][T26366] ? __pfx_simple_attr_read+0x10/0x10 [ 817.143355][T26366] ? debugfs_file_get+0x21c/0x5c0 [ 817.148545][T26366] ? __pfx_debugfs_file_get+0x10/0x10 [ 817.154059][T26366] debugfs_attr_read+0x74/0xa0 [ 817.158866][T26366] full_proxy_read+0xfb/0x1b0 [ 817.163619][T26366] ? __pfx_full_proxy_read+0x10/0x10 [ 817.168946][T26366] vfs_read+0x1df/0xbe0 [ 817.173167][T26366] ? __fget_files+0x1fc/0x3a0 [ 817.177980][T26366] ? __pfx___mutex_lock+0x10/0x10 [ 817.183055][T26366] ? __pfx_vfs_read+0x10/0x10 [ 817.187785][T26366] ? __fget_files+0x206/0x3a0 [ 817.192599][T26366] ksys_read+0x12b/0x250 [ 817.196930][T26366] ? __pfx_ksys_read+0x10/0x10 [ 817.201816][T26366] ? rcu_is_watching+0x12/0xc0 [ 817.206985][T26366] ? rcu_is_watching+0x12/0xc0 [ 817.211994][T26366] do_syscall_64+0xcd/0x250 [ 817.216544][T26366] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 817.222868][T26366] RIP: 0033:0x7f9c45785d29 [ 817.227310][T26366] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 817.247413][T26366] RSP: 002b:00007f9c435f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 817.255868][T26366] RAX: ffffffffffffffda RBX: 00007f9c45975fa0 RCX: 00007f9c45785d29 [ 817.264042][T26366] RDX: 000000000000ffff RSI: 0000000020006740 RDI: 0000000000000004 [ 817.272205][T26366] RBP: 00007f9c45801b08 R08: 0000000000000000 R09: 0000000000000000 [ 817.280210][T26366] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 817.289082][T26366] R13: 0000000000000000 R14: 00007f9c45975fa0 R15: 00007fffd77c7128 [ 817.297702][T26366] [ 817.301278][T26366] [ 817.303839][T26366] Allocated by task 15177: [ 817.308638][T26366] kasan_save_stack+0x33/0x60 [ 817.313732][T26366] kasan_save_track+0x14/0x30 [ 817.318825][T26366] __kasan_kmalloc+0xaa/0xb0 [ 817.323841][T26366] vhci_open+0x4c/0x430 [ 817.328327][T26366] misc_open+0x35a/0x420 [ 817.332794][T26366] chrdev_open+0x237/0x6a0 [ 817.337303][T26366] do_dentry_open+0xf59/0x1ea0 [ 817.342110][T26366] vfs_open+0x82/0x3f0 [ 817.346222][T26366] path_openat+0x1e6a/0x2d60 [ 817.351013][T26366] do_filp_open+0x20c/0x470 [ 817.355633][T26366] do_sys_openat2+0x17a/0x1e0 [ 817.360714][T26366] __x64_sys_openat+0x175/0x210 [ 817.365611][T26366] do_syscall_64+0xcd/0x250 [ 817.370146][T26366] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 817.376073][T26366] [ 817.378442][T26366] Freed by task 26228: [ 817.382634][T26366] kasan_save_stack+0x33/0x60 [ 817.387353][T26366] kasan_save_track+0x14/0x30 [ 817.392088][T26366] kasan_save_free_info+0x3b/0x60 [ 817.397233][T26366] __kasan_slab_free+0x51/0x70 [ 817.402056][T26366] kfree+0x14f/0x4b0 [ 817.405989][T26366] vhci_release+0xbb/0xf0 [ 817.410359][T26366] __fput+0x3f8/0xb60 [ 817.414564][T26366] task_work_run+0x14e/0x250 [ 817.419289][T26366] do_exit+0xad8/0x2d70 [ 817.423561][T26366] do_group_exit+0xd3/0x2a0 [ 817.428280][T26366] get_signal+0x2576/0x2610 [ 817.433004][T26366] arch_do_signal_or_restart+0x90/0x7e0 [ 817.438712][T26366] irqentry_exit_to_user_mode+0x13f/0x280 [ 817.444562][T26366] asm_exc_invalid_op+0x1a/0x20 [ 817.449887][T26366] [ 817.452227][T26366] The buggy address belongs to the object at ffff88803753e000 [ 817.452227][T26366] which belongs to the cache kmalloc-1k of size 1024 [ 817.466494][T26366] The buggy address is located 562 bytes inside of [ 817.466494][T26366] freed 1024-byte region [ffff88803753e000, ffff88803753e400) [ 817.481209][T26366] [ 817.483653][T26366] The buggy address belongs to the physical page: [ 817.490538][T26366] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x37538 [ 817.499685][T26366] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 817.509584][T26366] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 817.517346][T26366] page_type: f5(slab) [ 817.521552][T26366] raw: 00fff00000000040 ffff88801ac41dc0 dead000000000100 dead000000000122 [ 817.531321][T26366] raw: 0000000000000000 0000000000100010 00000001f5000000 0000000000000000 [ 817.540292][T26366] head: 00fff00000000040 ffff88801ac41dc0 dead000000000100 dead000000000122 [ 817.549094][T26366] head: 0000000000000000 0000000000100010 00000001f5000000 0000000000000000 [ 817.558766][T26366] head: 00fff00000000003 ffffea0000dd4e01 ffffffffffffffff 0000000000000000 [ 817.567956][T26366] head: 0000000000000008 0000000000000000 00000000ffffffff 0000000000000000 [ 817.577187][T26366] page dumped because: kasan: bad access detected [ 817.584382][T26366] page_owner tracks the page as allocated [ 817.590350][T26366] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 10457, tgid 10457 (kworker/u8:34), ts 413697437636, free_ts 413619647513 [ 817.610892][T26366] post_alloc_hook+0x2d1/0x350 [ 817.616141][T26366] get_page_from_freelist+0xfce/0x2f80 [ 817.621736][T26366] __alloc_pages_noprof+0x223/0x25b0 [ 817.627174][T26366] alloc_pages_mpol_noprof+0x2c9/0x610 [ 817.633200][T26366] new_slab+0x2c9/0x410 [ 817.637484][T26366] ___slab_alloc+0xce2/0x1650 [ 817.642742][T26366] __slab_alloc.constprop.0+0x56/0xb0 [ 817.648246][T26366] __kmalloc_noprof+0x2de/0x4f0 [ 817.653238][T26366] ieee802_11_parse_elems_full+0xe6/0x1630 [ 817.659222][T26366] ieee80211_ibss_rx_queued_mgmt+0xc54/0x3040 [ 817.665679][T26366] ieee80211_iface_work+0xc0b/0xf00 [ 817.671212][T26366] cfg80211_wiphy_work+0x3de/0x560 [ 817.676917][T26366] process_one_work+0x958/0x1b30 [ 817.682433][T26366] worker_thread+0x6c8/0xf00 [ 817.687291][T26366] kthread+0x2c1/0x3a0 [ 817.691433][T26366] ret_from_fork+0x45/0x80 [ 817.696479][T26366] page last free pid 5832 tgid 5832 stack trace: [ 817.702914][T26366] free_unref_page+0x661/0x1080 [ 817.707802][T26366] __put_partials+0x14c/0x170 [ 817.712525][T26366] qlist_free_all+0x4e/0x120 [ 817.717392][T26366] kasan_quarantine_reduce+0x195/0x1e0 [ 817.723027][T26366] __kasan_slab_alloc+0x69/0x90 [ 817.728012][T26366] __kmalloc_cache_noprof+0x202/0x420 [ 817.733601][T26366] nsim_fib_event_work+0x8dd/0x3190 [ 817.738840][T26366] process_one_work+0x958/0x1b30 [ 817.743920][T26366] worker_thread+0x6c8/0xf00 [ 817.748823][T26366] kthread+0x2c1/0x3a0 [ 817.753448][T26366] ret_from_fork+0x45/0x80 [ 817.758070][T26366] ret_from_fork_asm+0x1a/0x30 [ 817.763326][T26366] [ 817.765668][T26366] Memory state around the buggy address: [ 817.771417][T26366] ffff88803753e100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 817.779638][T26366] ffff88803753e180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 817.788709][T26366] >ffff88803753e200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 817.797366][T26366] ^ [ 817.803920][T26366] ffff88803753e280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 817.812898][T26366] ffff88803753e300: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 817.821955][T26366] ================================================================== SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 817.855919][T26366] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 817.864148][T26366] CPU: 0 UID: 0 PID: 26366 Comm: syz.7.5425 Not tainted 6.13.0-rc6-syzkaller-00262-gb62cef9a5c67 #0 [ 817.875414][T26366] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 817.886054][T26366] Call Trace: [ 817.889474][T26366] [ 817.892718][T26366] dump_stack_lvl+0x3d/0x1f0 [ 817.897470][T26366] panic+0x71d/0x800 [ 817.901521][T26366] ? __pfx_panic+0x10/0x10 [ 817.906284][T26366] ? rcu_is_watching+0x12/0xc0 [ 817.911573][T26366] ? preempt_schedule_thunk+0x1a/0x30 [ 817.918122][T26366] ? preempt_schedule_common+0x44/0xc0 [ 817.924271][T26366] ? check_panic_on_warn+0x1f/0xb0 [ 817.929493][T26366] check_panic_on_warn+0xab/0xb0 [ 817.934502][T26366] end_report+0x117/0x180 [ 817.938988][T26366] kasan_report+0xe9/0x110 [ 817.943553][T26366] ? msft_opcode_get+0x6d/0x80 [ 817.948543][T26366] ? msft_opcode_get+0x6d/0x80 [ 817.953888][T26366] msft_opcode_get+0x6d/0x80 [ 817.958712][T26366] ? __pfx_msft_opcode_get+0x10/0x10 [ 817.964303][T26366] simple_attr_read+0x169/0x300 [ 817.969828][T26366] ? __pfx_simple_attr_read+0x10/0x10 [ 817.975786][T26366] ? debugfs_file_get+0x21c/0x5c0 [ 817.981644][T26366] ? __pfx_debugfs_file_get+0x10/0x10 [ 817.987393][T26366] debugfs_attr_read+0x74/0xa0 [ 817.992378][T26366] full_proxy_read+0xfb/0x1b0 [ 817.997465][T26366] ? __pfx_full_proxy_read+0x10/0x10 [ 818.003162][T26366] vfs_read+0x1df/0xbe0 [ 818.007724][T26366] ? __fget_files+0x1fc/0x3a0 [ 818.014010][T26366] ? __pfx___mutex_lock+0x10/0x10 [ 818.019886][T26366] ? __pfx_vfs_read+0x10/0x10 [ 818.025108][T26366] ? __fget_files+0x206/0x3a0 [ 818.030008][T26366] ksys_read+0x12b/0x250 [ 818.034500][T26366] ? __pfx_ksys_read+0x10/0x10 [ 818.040010][T26366] ? rcu_is_watching+0x12/0xc0 [ 818.045374][T26366] ? rcu_is_watching+0x12/0xc0 [ 818.050515][T26366] do_syscall_64+0xcd/0x250 [ 818.055632][T26366] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 818.062417][T26366] RIP: 0033:0x7f9c45785d29 [ 818.067773][T26366] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 818.090153][T26366] RSP: 002b:00007f9c435f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 818.099555][T26366] RAX: ffffffffffffffda RBX: 00007f9c45975fa0 RCX: 00007f9c45785d29 [ 818.108512][T26366] RDX: 000000000000ffff RSI: 0000000020006740 RDI: 0000000000000004 [ 818.118679][T26366] RBP: 00007f9c45801b08 R08: 0000000000000000 R09: 0000000000000000 [ 818.127848][T26366] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 818.138230][T26366] R13: 0000000000000000 R14: 00007f9c45975fa0 R15: 00007fffd77c7128 [ 818.147570][T26366] [ 818.151242][T26366] Kernel Offset: disabled [ 818.156122][T26366] Rebooting in 86400 seconds..