last executing test programs: 10m20.726164625s ago: executing program 1 (id=1061): socket(0x2, 0x3, 0x1) r0 = socket(0x26, 0x5, 0xc) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="18000000", @ANYRES8=r0, @ANYBLOB="01", @ANYRES64=r0], 0x18}, 0x1, 0x0, 0x0, 0x60008004}, 0x80) r1 = openat$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/block/nbd15/sched/starved\x00', 0x0, 0x0) read$auto_blk_mq_debugfs_fops_blk_mq_debugfs(r1, &(0x7f0000000040)=""/124, 0x7c) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/bdi/31:0/min_ratio_fine\x00', 0x20140, 0x0) mprotect$auto(0x8, 0x8000000001000001, 0xd) r2 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x1, 0x0) write$auto_seq_oss_f_ops_seq_oss(r2, &(0x7f0000000040)="5f74ab2fc43781", 0x7) mprotect$auto(0x1ffff000, 0x8000000000000001, 0xd) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x4000000) ioctl$auto(0x3, 0x890b, 0x7ffffffffffe) syz_genetlink_get_family_id$auto_ila(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x9, 0x3, 0xe, 0x940, 0x1ffde, 0x3, 0x2000000000000006, 0x2, 0x9, 0x5, 0x2, 0x7, 0xb3, 0x9, 0x2, 0x3, 0x5, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x55, 0x8000000000000000, 0x4000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbc]}, 0x1fe, 0x81) r3 = socket(0x10, 0x2, 0x0) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="10002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) socket(0xa, 0x801, 0x84) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, 0x0, 0x8004) connect$auto(0x3, 0x0, 0x55) select$auto(0xa, 0x0, &(0x7f0000000100)={[0x20000000000d, 0x203, 0x0, 0xc, 0x5, 0x3, 0x5, 0x2000000000000002, 0x9, 0x8, 0xff, 0xa, 0x4, 0xaab, 0x5, 0x4006]}, 0x0, 0x0) shutdown$auto(0x200000003, 0x2) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) connect$auto(0x3, 0x0, 0x55) sendmmsg$auto(r3, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008) socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000001c80)='/dev/fb0\x00', 0x20401, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x4601, 0x0) 10m19.748003262s ago: executing program 1 (id=1067): socket(0x2, 0x5, 0x0) connect$auto(0x3, &(0x7f0000000280)=@in={0x2, 0x0, @rand_addr=0x1002c01}, 0x55) 10m17.882260955s ago: executing program 3 (id=1081): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) prctl$auto(0x1000000003b, 0x1, 0x4, 0x8000003, 0x7) madvise$auto(0x0, 0xffffffffffff0001, 0x15) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket(0x2, 0x1, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS1\x00', 0x20000, 0x0) ioctl$auto_TIOCVHANGUP2(r0, 0x5437, 0x0) (async) socket(0x23, 0x80805, 0x0) (async) socket(0x25, 0x1, 0x3) (async) fsconfig$auto(0x0, 0x6, 0xfffffffffffffffe, 0xfffffffffffffffe, 0x8000000000000001) 10m16.534089195s ago: executing program 3 (id=1085): statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x7, 0x3, 0x22, 0x940, 0x1ffde, 0x3, 0x6, 0x8000002, 0x9, 0x5, 0x2, 0x4, 0xb0, 0x7, 0x2, 0x0, 0x5, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, [0x0, 0x200000000000000, 0x0, 0x243efbdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x890, 0x0, 0x0, 0x0, 0x8b2, 0x0, 0x0, 0x0, 0x9, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe6e]}, 0x1fe, 0x81) r0 = socket(0x28, 0x5, 0x0) setsockopt$auto(0x3, 0x10f, 0x7f, 0x0, 0x14) statmount$auto(&(0x7f0000000140)={0x9, 0x11e, 0x0, 0x9, 0x9}, &(0x7f0000000700)={0x0, 0x3, 0x1, 0xfffffffb, 0x8, 0x4, 0x200, 0x2, 0xf, 0x4, 0x1, 0x4, 0x2, 0x7, 0x4, 0x1, 0x6, 0x80000000, 0x59, 0xe, 0x80000001, 0xfffffffb, 0xfffffff7, 0x4, 0x79f, 0x6fe, [0x1, 0x0, 0xfffffffffffffffe, 0x734d, 0x401, 0x7, 0x1, 0xff, 0x9, 0x7fffffffffffffff, 0x0, 0x8001, 0x8000000000000000, 0x81b, 0x8, 0x1, 0x7, 0x3, 0x7, 0x8000000000000000, 0xfffffffffffffffd, 0x6, 0x1, 0x10, 0x1, 0x8, 0x80, 0x1, 0x6, 0x1, 0x2, 0x3, 0x9, 0x1, 0x7, 0x7ff, 0x8, 0x9, 0xda, 0x480f, 0x9, 0x2, 0x6, 0x0, 0x40, 0x800], "81d571a7a5f07695e8ee9f48c93f0d449863122cb968165830eee93d9334ee7aab7e088994adc211aefabdd31d2310b1a887dc0e113118c610873abd977e10f4809214b2996314c2dbb408b31e11e76ca5a7a1da53c76dbc7512adc1a6957600c498952a0a6108b652043e29c941c90f7c4e7b134e1a565670f81f15b5123ac06b329d8bc24d4f8b24b56c662ac63969fb84b2d247b058d64b69222dd77de3b6ebcb17bc0218d49a1ed64a3d5158ce2b503d89a6e3b5181069bce6a3925c7fd85b675f9106f62b71c16b089861ecd2a78e21c8b3eeb8eab118fbc7e66d2231ef5db8f468ab9ad71efe92750070"}, 0x80000001, 0x7018) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) r1 = socket(0x10, 0x2, 0x0) r2 = syz_genetlink_get_family_id$auto_thermal(&(0x7f0000000080), r0) sendmsg$auto_THERMAL_GENL_CMD_THRESHOLD_ADD(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000380)={0x31c, r2, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@THERMAL_GENL_ATTR_CDEV={0x5c, 0xf, 0x0, 0x1, [@typed={0x44, 0xab, 0x0, 0x0, @binary="76af074cce3d37e498533e560e468cf17d8f4146d9399e1bacaa56b40568debc0e0ceef1059524946183ff208cefaa484ed19167845ea9bb2e37ef3ea8ef57a8"}, @typed={0xc, 0x69, 0x0, 0x0, @u64=0xf675}, @typed={0x8, 0x6e, 0x0, 0x0, @u32=0x4}]}, @THERMAL_GENL_ATTR_TZ={0x2aa, 0x1, 0x0, 0x1, [@nested={0x15b, 0x139, 0x0, 0x1, [@generic="13cab578394a1832eb731e18f75217f54c95c504752e834d", @typed={0x8, 0x140, 0x0, 0x0, @u32=0xfff}, @generic="77f94f4449b61e1189c402c8548b56c775066ec2ad924eb146668f50879aca5cc51b5bd0d2fc8da8b9bddcf99b430e7711f18c44171a5be7f5bcdbbc3b06678695a94bd6c5b0a6ec0a749963e3f72472455048f19dd59dabad193779784d", @nested={0x4, 0x53}, @nested={0x4, 0x4f}, @generic="ffe9c42ed2abea0fb2caca7ef09f75dd0349bb946d2510fde832a8f5231e9172665916018e2fce80fbd571b0dc67084b24046a39121a23f49f136ae2ccb073cf195d6a857e21cb8a41b0407750c49394bc0b2f2e696ab0ffc3d9f2806f0c798f03bd13e324b4be5186716c2d31fb0b827ba033352303ffeb1a204ffe5d486602c2db5b211e4f4afa23c1f647ea7e3cc7b64f605b14acad42df7c3df9b24c70917d596b3c06e45b571035e202878f88461760fa9110b891672c709652529d634d7d3dd3e0784bbe46c96a618952b24479aa"]}, @generic="ae71f9fa65ce5c3ee67ab1efcba23e59e282594730464e685658e3321af91e80ba977354afcb2948acb700c8d25e4a4b6db028b0e47e21bd2b17571291d1ca3b9937bb2172e728a6ef4a8ccc81fbe84c8bd8ffdfb9d069e49ea80e4d32ee0b7fbfdfac6664e2008ba792dc72c54063b70d2002a071865f955d4e791c99c0a134a92701fcd9ecbf556fb435eced54e8c2cd8bf0866b901c4bbe03e981675355a1a087a24d9974e087d8fb4e7decfce8ae597a9851a213ddee8137b20cf245", @nested={0x89, 0x11f, 0x0, 0x1, [@typed={0x8, 0xb2, 0x0, 0x0, @ipv4=@private=0xa010102}, @generic="28f1d4d3f900cc10b0334a652995b514b712bcb6ac69972ced3f6aa24f6d4188b35cdf175f3c0040421fd954ae547ec36624822d68d3645b74a7a4064868c339ee17dd0763090e6539ae448c8b44c79b5108b13efc1da430f59cac6d825d72ba9d7d9a8798ee9395649303044b1a3ecde046866c63192596a00a43502a"]}]}]}, 0x31c}, 0x1, 0x0, 0x0, 0x400c004}, 0x4004) sendmsg$auto_NL80211_CMD_GET_REG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) openat$auto_tracing_thresh_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/tracing_thresh\x00', 0x82, 0x0) read$auto(0x3, 0x0, 0x80) r3 = openat$auto_ftrace_subsystem_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f00000006c0)='/sys/kernel/debug/tracing/events/vmalloc/filter\x00', 0x103041, 0x0) socket(0x2d, 0x5, 0x10) write$auto(r3, 0x0, 0x9) exit$auto(0x7) 10m15.611009573s ago: executing program 1 (id=1087): mmap$auto(0x800, 0x400005, 0xdf, 0x10, 0x10000005, 0x8000) prctl$auto(0x1000000003b, 0xffffffffffffffff, 0x4, 0x5, 0x10004) madvise$auto(0x0, 0xffffffffffff0001, 0x15) clock_settime$auto(0xa, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000010c0), 0xffffffffffffffff) prctl$auto(0x43, 0x17, 0xfffffffffffffffd, 0x0, 0x4000000000) prctl$auto(0x43, 0x0, 0x0, 0x0, 0x0) r2 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snd/controlC2\x00', 0x80, 0x0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) read$auto(r3, 0x0, 0x20) r4 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000000100), r0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000015c0), r5) sendmsg$auto_NL80211_CMD_GET_STATION(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000001880)={&(0x7f0000002440)={0x1c, r6, 0x4bcedae9142a5f4d, 0x70bd28, 0x25dfdbfd, {}, [@NL80211_ATTR_MLO_LINKS={0x8, 0x138, 0x0, 0x1, [{0x4}]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40004001}, 0x800) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r4, 0x400, 0x70bd29, 0x25dfdbfe, {}, [@OVS_PACKET_ATTR_PROBE={0x4}, @OVS_PACKET_ATTR_PROBE={0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x40000) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_READ(r2, 0xc4c85512, &(0x7f0000000940)={{0x9, 0x100005, 0x7, 0x2, "56417cdd4a0f148e4fb600fa8ee3de1bb08e20726d8cb42d7ea1baa3bc892739ebbf988eb4decbbbc7b641a5", 0x7}, 0x1, @integer64=@value_ptr=&(0x7f00000002c0)=0x3, "2815869991310d2e2c893758b356b856d0ba300c52a120ef4cdc746d9961bd8bf8fb67f8a01b53664b097aa0fc7b9643ee5cd7742195b460c850f29d0668608482bf2d2470662e6a5400b45766b60618c2a0a50732b0ffdd02f00377dc056f599f033757056056081b43560d8824d11501802c67a59c3ce66c6aa1034721506e"}) sendmsg$auto_CTRL_CMD_GETPOLICY(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x1c, r1, 0x301, 0x4070bd25, 0x25dfdbff, {}, [@CTRL_ATTR_OP={0x8, 0xa, 0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20040891}, 0xc040810) r7 = openat$auto_ubi_ctrl_cdev_operations_ubi(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000040), 0xffffffffffffffff) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000780), r9) sendmsg$auto_TIPC_NL_BEARER_ENABLE(r8, &(0x7f0000003a80)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001f80)=ANY=[@ANYBLOB, @ANYRES16=r10, @ANYBLOB="01002abd7000fbdbdf25030000001800018014000100"/38], 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x24040004) mmap$auto(0x3, 0x407, 0xdf, 0x15, 0x200000000005, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) ioctl$auto_UBI_IOCATT(r7, 0x40186f40, 0x0) 10m15.253805964s ago: executing program 3 (id=1089): ioctl$auto_UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, &(0x7f00000000c0)={0xffffffffffffffff, 0x4, 0xfffffffffffffffa, 0x3}) r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_SET_PMK(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, r1, 0x4, 0x70bd29, 0x25dfdbfc, {}, [@NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_COLOR_CHANGE_COUNT={0x5, 0x12f, 0xf}]}, 0x20}}, 0x4000801) mmap$auto(0x0, 0x8, 0x2, 0x9b72, 0x5, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_ovs_meter(&(0x7f0000003040), 0xffffffffffffffff) sendmsg$auto_OVS_METER_CMD_SET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000003200)={&(0x7f0000000000)={0x28, r3, 0x159198c6007aa95d, 0x70bd29, 0x25dfdbfc, {}, [@OVS_METER_ATTR_KBPS={0x4}, @OVS_METER_ATTR_BANDS={0x8, 0x4, 0x0, 0x1, [@generic='\x00\x00\x00\x00']}, @OVS_METER_ATTR_ID={0x8, 0x1, 0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0xc0}, 0x40) r4 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)) fstat$auto(r4, 0x0) r5 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/dynamic_debug/control\x00', 0xaa102, 0x0) r6 = socket(0xa, 0x1, 0x84) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x47, 0x8000) getsockopt$auto(r6, 0x0, 0x12, 0xfffffffffffffffe, 0x0) mmap$auto(0x0, 0x9, 0x3, 0x800019b72, 0x9, 0x8000000000008000) capget$auto(0x0, 0xfffffffffffffffe) capset$auto(0x0, &(0x7f0000000180)={0x1, 0x7, 0x6}) fchdir$auto(0xffffffffffffffff) mkdir$auto(0x0, 0x1) mkdir$auto(0x0, 0x9) rename$auto(0x0, 0x0) mount$auto(0x0, 0x0, &(0x7f00000001c0)='nfsd\x00\xee\x1a\x8f\xa2~?\xe2\x82fg\xb3G\xbe\xc8\x12\xae\xc3\xc0@[\x99\xec\xbf(\xec\xc3\xb2\xf2\x15Zi\xc4S6\'\x14\x05\t\x8c\xd5?\xa0\x00\xd8\xe4\xafW\xcc\xa3\xce\tI\x95\xe12\xaclJ\xba\xeb\xe4\x83Z\xaev\xd7\xd9\xdd_\x14O\x84\xaa\x13W\xb7\x06\'fvQ\x95\xc5\xd1\x98\xe3T\xcdfk\xc7\xe9\x96\r\x91\xb0\xc46\xf2\xfc\xef\xfe\xa0\xc9d\xb3h$\xeb\xad\xa4P\x8f\xc3bM{4RQ\x00\x9d)_\xd81(\x03\xfd\rw\xca1\x88|\xe5\x1e\x10\x89X\x01\xe9\xf6g\x95xx\xaf\xa9~m\x05\xe1\xa8\xda\x80\xc5\x8f\xb41\x81\xf0\xa3\xa2\xe4\x81\xb9\x92\xda\x13\xfe5\xfb\xc6\xd8>\x01\xd4\x14', 0x5, 0x0) write$auto(r5, 0x0, 0xff) 10m13.830726647s ago: executing program 1 (id=1093): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000010c0), 0xffffffffffffffff) prctl$auto(0x43, 0x17, 0x0, 0x0, 0x0) prctl$auto(0x59616d61, 0x0, 0x0, 0x0, 0x0) r2 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snd/controlC2\x00', 0x80, 0x0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) read$auto(r3, 0x0, 0x20) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_READ(r2, 0xc4c85512, &(0x7f0000000940)={{0x9, 0x5, 0x7, 0x2, "56417cdd4a0f148e4fb600fa8ee3de1bb08e20726d8cb42d7ea1baa3bc892739ebbf988eb4decbbbc7b641a5", 0x7}, 0x1, @iec958={"12da4bf77713ee2bb6facc085113fd652c789aae66489974", "2955be102bcf3ee004f188270c9b2b7e2496a13019c8b2d579cb813deffa204e02b48664a86d0e29fc47a2dafbf03081079bd859ea6374c1db5dd116fbe9bdcf56b81e8cac87fe34f959728cb93e8d8cfc08c08ccd9566ac08cb995756d58281eb92b1cbddae0d5cfc7910b2a4efcdcde2c56e1295d16c624890dd60a11b838d3ecc6f0f82fbd90aab7293eb7a2df9a4362880", 0x0, "dd232990"}, "2815869991310d2e2c893758b356b856d0ba300c52a120ef4cdc746d9961bd8bf8fb67f8a01b53664b097aa0fc7b9643ee5cd7742195b460c850f29d0668608482bf2d2470662e6a5400b45766b60618c2a0a50732b0ffdd02f00377dc056f599f033757056056081b43560d8824d11501802c67a59c3ce66c6aa1034721506e"}) sendmsg$auto_CTRL_CMD_GETPOLICY(r0, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x20, r1, 0x301, 0x4070bd25, 0x25dfdbff, {}, [@CTRL_ATTR_FAMILY_NAME={0xc, 0x2, 'ethtool\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000800}, 0xc040810) r4 = openat$auto_ubi_ctrl_cdev_operations_ubi(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) mmap$auto(0x3, 0x3ae80e56, 0xdf, 0x9b7e, 0x200000000004, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) ioctl$auto_UBI_IOCATT(r4, 0x40186f40, 0x0) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), r0) sendfile$auto(0x1, 0x3, 0x0, 0xc01) 10m13.688625327s ago: executing program 1 (id=1094): bpf$auto(0x1e, &(0x7f0000000000)=@raw_tracepoint={0x3, 0xffffffffffffffff, 0x0, 0x67}, 0x5) open(&(0x7f0000000080)='./file0\x00', 0x22ac2, 0x5d745cb200ae4d7b) write$auto(0x3, 0x0, 0xfdef) r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000100), r0) r2 = getpgrp(0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x2, 0x1) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) io_uring_setup$auto(0x6, 0x0) sendto$auto(0x3, 0x0, 0xf, 0xe, &(0x7f0000000100), 0x19) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000080), r3) r6 = geteuid() setreuid$auto(r6, 0x0) r7 = getpgrp(0xffffffffffffffff) r8 = openat$auto_msr_fops_msr(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cpu/0/msr\x00', 0xa0080, 0x0) read$auto_msr_fops_msr(r8, &(0x7f0000000080)=""/4096, 0x1000) sendmsg$auto_TIPC_NL_BEARER_GET(r4, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="aaf00000", @ANYRES16=r5, @ANYBLOB="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", @ANYRES32=r6, @ANYBLOB="0400f180b300088061e2343b7cca78472c2099d95115bdc2f6b1d14d464116838c1ea59057614931c404f4dc89a8a61151a767cf3b94867a452b1b6dbfe2ea4cec9dc152ee0b6fdff69ead4b6cebf3914cea35e87971e3ed98429fd88ad92099531e57595cc44d1415e347c28bcc2c1d7b96bf4ec9a06157710bc166b1d9b939c83b151b74ac646fa00aac5a54f1d70428d7e121b5c892348568a1d305491addafe0109de649694b468eb1785fe54408009d00", @ANYRES32=r7, @ANYBLOB='\x00'], 0x320}, 0x1, 0x0, 0x0, 0x60}, 0x4) r9 = geteuid() setreuid$auto(r9, 0x0) sendmsg$auto_NL80211_CMD_SET_CHANNEL(r0, &(0x7f0000000d00)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000140)={0xb74, r1, 0x110, 0x70bd25, 0x25dfdbfb, {}, [@NL80211_ATTR_MLO_LINKS={0xb48, 0x138, 0x0, 0x1, [{0x394, 0x0, 0x0, 0x1, [@NL80211_ATTR_SCAN_SUPP_RATES={0x1a8, 0x7d, 0x0, 0x1, [@typed={0xb, 0x2f, 0x0, 0x0, @str='%\x13&.%\\\x00'}, @nested={0xef, 0x122, 0x0, 0x1, [@nested={0x4, 0xab}, @generic="737cc390d0882484b256d0cad065e1b8af0c51a3930ce091720f33089df619509ca06c40901cdb668de8c5c2316c9095e8c220b7ae2ecf24440e4aa26d836fb4a1ef9e6249fb5c157505484b25232875a5d34d3ba6783e7794b91db77a410dfec3037788a92bb62b6682b76395683371a00066d6ec46b8835f75014d88d9fb9fdb15c70aa899e8f0f3235a1004b6b1f1f2f2579ff6431d49", @nested={0x4, 0xc8}, @typed={0x8, 0x118, 0x0, 0x0, @pid=r2}, @typed={0x8, 0x5c, 0x0, 0x0, @fd=r0}, @generic="e7196c2cd0c112fa3b34b14c3ee1e0b0cd548c8a9eae3802ab2a7eb4175f4cccc9d57b291c62a488162692458a9b42382de073", @nested={0x4, 0x73}, @nested={0x4, 0x70}]}, @generic="8cb833014a32e9bcb4f91b01a630ccebba501c87adfb12652bf958254066b1b710d8c64bc3967d67a012c0e1639b13ddf3489606e1c4cfa20e2831038426798c78b22dc0e20d2ca9451284d0599b0ef0b89b6b1157351fdd29510c33a195c9a166a1a41ceb14958d25924a51a4c68daebbee825be11648d5da4d82e6e83b9c35a8c0bb0e94d7fb5d2c1180c9c4b9c366c03fbba5d0d4f98b354183ed6b277a9a", @typed={0x8, 0x11d, 0x0, 0x0, @ipv4=@local}]}, @NL80211_ATTR_HE_BSS_COLOR={0x38, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0xe}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x4f}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0xde}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}]}, @NL80211_ATTR_FILS_NONCES={0x7, 0xf3, "340af7"}, @NL80211_ATTR_VIF_RADIO_MASK={0x8, 0x14d, 0xfffffff8}, @NL80211_ATTR_CNTDWN_OFFS_BEACON={0xb7, 0xba, "a0ea6f2fefa46b15fd2092bb8d040905607b927913035e2048fae7af77c9b1514f1a21c0087d2763de2a85b240355c421ed1b9018ca9aa2be2497cfd26c3c6dcb597b618dd392c80ffeca308087085bc7e95919c507cfc57892b63d6887baa7d4f4649f87f74ead2bd0691f0df51caeac478b0cce24451113bf00ce032bc4da130794d27410230581fddf636e7ded2bd8facca2c182153e11d57b0667c294c2c0a69c3d9502f54c91d2d8977cf421a777d96ef"}, @NL80211_ATTR_WIPHY_RTS_THRESHOLD={0x8, 0x40, 0x9}, @NL80211_ATTR_STA_FLAGS={0xd8, 0x11, 0x0, 0x1, [@generic="2ff291363b80c69d94e875637ae99a4f8f1c38891ae8c3f281181ead8c84523a5604e69091985462597fb89dbe68597189c8e7376ca34bb337a1c9d3f61cf2ebc91e7eb4c9628af515a3258583eba29599ada3bccb61cae96836b7216caae992b80c588efa638028c8237ae31793a03484ad5cfa84c68d5435a3d6a9fc4e2be0f88c7a4936e4164ac6300f807a", @typed={0x8, 0x8d, 0x0, 0x0, @uid=r6}, @generic="cb9cc398b038c1e50c26d6c2382e5f0c3ef653a6ad251a5d25b6c8733e3b0e323a9743c883692415a57bac7b504c25efc1b496d86dbacd096a7ac7979370cb"]}, @NL80211_ATTR_STA_PLINK_ACTION={0x5, 0x19, 0x1}]}, {0x1bc, 0x0, 0x0, 0x1, [@NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x5}, @NL80211_ATTR_TX_RATES={0x19e, 0x5a, 0x0, 0x1, [@typed={0xc, 0x4c, 0x0, 0x0, @u64=0x3}, @generic="26accb744080fd9518c999fba7ac22d9bcb96e2f4c396a02c50c6224eaf35bc7cf13dadad14d571a256c4ac11247460a18ddc3187f143e0617a1e50eccefdffb295162bb338befdba0733b43fbcda997c20a7628b5e34c42dea12863b41c3ea4e4ca822833c7c3a1219bfd707a38f34bf00df58ec19f1c3b36033154b0c64185ba426fd44e66e5c9b7fdc3c20c7a67acc85596454ff19f1b0e167a27f0b72a14f4dd741f9dc5650733de1a50916dcdf43bc1de8d1570cad91977e3ab506b", @generic="774df76325ab202f785d0cbe068dfc9c89a9e02c1840223b5275796739de69c6075d6e4ecbffd7a35f8ced19ce8ccd3d9c9a1aeba5d502b062d47f94ea0968b0ae8be566b1b38bd5414e482dc9a32e1a974db182c3036acb1e53124874c7a9ea7febfe00b99b10a003205813617d2af22c446ff21dd84d0670fadc8b36b7aeb7a49704e8bc9da4c5a4831ac8505edf0faae9487f5a5bbd26148ea207bf86022498df849834bf5773ee18e674d5d92af0f21f2d88de32c2cae60c2070716a0a4ac21df48a7fe5d77b9f4232d481fc5c20"]}, @NL80211_ATTR_TIMEOUT={0x8, 0x110, 0x1ff}, @NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0xf}]}, {0x244, 0x0, 0x0, 0x1, [@NL80211_ATTR_PROBE_RESP={0x23f, 0x91, "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"}]}, {0x29c, 0x0, 0x0, 0x1, [@NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_WIPHY_TXQ_PARAMS={0x28b, 0x25, 0x0, 0x1, [@nested={0x1c3, 0xa2, 0x0, 0x1, [@typed={0x8, 0x97, 0x0, 0x0, @ipv4=@multicast1}, @generic="4dcd5579089f97b39e975129d3693319c8bd5d3779fa6e9468c15ecea310714dc7b3d355f96a23bb1c6e4e60847a47d7d30c6a28fa5ff02e02bfa52727cbce08419a57e98d45c8d36cfa5d369e4f0623", @generic="dccb155e2c4bbcf82bc95d1e0170d271736eedf303034ff6c5776394ff4d2ce665662bf46bfbee0b99a51201b15e5bc6b635a412a7f8dd19b814ef8f121d082b5e95b35f71c8df4ed489af0992f8d4d21ebf", @generic="b4fe016f042067efc09475e566e8616a55b57cc4c3747457d0fa0f90eb889283c3adde987254514dc221be527c4bc6c2bc04947b39d8cbfcfa44e6bbd926944fdc7a96a4c402af6183fd296def619ca112952d3d12f08c6f86a9f99b970e257cc83500b937d1e945ca3f273dac9a1c0540ea7dc68813afc5d1c094153a04227b390bba69fb256c45a0cb6522a22ed8901302dfe11074bbf3", @generic="e0d329d1556003f71dea30ee0517aaae78832ed06dfd289b7766c2be0a02f43356926ba16704a6211d9c1387044e2f9432ebde9d596c7c39c5a751b7e00fd90d4d1751e4a7ac56ea284f3cb1eeefe0259c2b71c13adf3919d84a6d7eaa3a5fab985e3a0e3eaf53d7d004a185c4", @nested={0x4, 0x67}, @nested={0x4, 0x9c}, @typed={0x8, 0xd6, 0x0, 0x0, @uid=r9}]}, @typed={0x14, 0x32, 0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @generic="9db94ed5d449a1c4271e5bf18ac8b73f7529d653ae21cc18e2162eb7804c4d4ac4fec558249ce3f770624a8a00505b99d8317b1600d8d56a097a976ef96e3b756d5910e645bea37dbb21ac3d3be8b9c1ff403cf8680e48fa333dd3c0efb910982f11173889948224608ed3cd57e0211f7a2790e93114e83636c66aedff8f9d0b8edcbf17f3390eff05d197a1b26ad3c103b3a16acc837a28d4368efefdaf7abd8a85babebff5dd9aa87193ae870ee3"]}, @NL80211_ATTR_TDLS_DIALOG_TOKEN={0x5, 0x89, 0x10}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_TDLS_SUPPORT={0x4}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x9}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, 0x3}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0xb, 0xfb}}]}, {0xa8, 0x0, 0x0, 0x1, [@NL80211_ATTR_CONTROL_PORT={0x4}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0x93, 0xe8, "a890a9ae5aea2f7d6380cc1a5c86af398abd9364c6fb6514cf7703f2e93396415f76fdbf770ae100cdcc2088fe2c01f6b9ae5bc9b266d048e16757975690ea70cb79d7c71c8dc0eeec8cd2c7ae459642149bde2255a62cc3ff0286d80e894782011d7e42e4298356a2658afb811b459e49c8e32037cb8d41310da1affc1506a11a99fb325fb826dfacc4f89455e462"}, @NL80211_ATTR_BSS_DUMP_INCLUDE_USE_DATA={0x4}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x8}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_ATTR_OPMODE_NOTIF={0x5}, @NL80211_ATTR_STA_CAPABILITY={0x6, 0xab, 0x6c}, @NL80211_ATTR_CENTER_FREQ1_OFFSET={0x8, 0x123, 0xd096f73}, @NL80211_ATTR_KEY_DATA={0x15, 0x7, "9ac2bcb312b8abea88ecf592f0f96eb6ce"}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_ATTR_WDEV={0xc, 0x99, 0x1f}]}]}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, 0x2}, @NL80211_ATTR_USER_PRIO={0x5, 0xd3, 0x9}]}, 0xb74}, 0x1, 0x0, 0x0, 0x20004041}, 0x40884) syncfs$auto(r8) 10m12.586637713s ago: executing program 2 (id=1098): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0xfffffffffffffffd, 0x40000008000) ioperm$auto(0x6, 0x6, 0xfffffffd) setrlimit$auto(0x1000000007, 0x0) epoll_create1$auto(0x8000000000000000) futex_waitv$auto(0x0, 0x517, 0xc5, 0x0, 0x80000007) shmat$auto(0xffffffff, &(0x7f0000000000)='(\x00', 0xfffffffe) 10m12.423662506s ago: executing program 2 (id=1099): r0 = openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/maps\x00', 0x40000, 0x0) read$auto_proc_pid_maps_operations_internal(r0, 0x0, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) getrandom$auto(0x0, 0x6000000, 0x3) r1 = openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, &(0x7f00000028c0), 0x100, 0x0) ioctl$auto_USB_RAW_IOCTL_EP_ENABLE(r1, 0x40095505, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1, 0x2, 0xfffffff7, 0x0) close_range$auto(0x2, 0x8, 0x0) r2 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sg0\x00', 0x101000, 0x0) setreuid$auto(0x0, 0x0) read$auto(r2, 0x0, 0x0) open(0x0, 0x163340, 0x2a) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sg1\x00', 0x200, 0x0) connect$auto(0x3, &(0x7f0000000140)=@in={0x2, 0x4, @empty}, 0x80000055) sendmmsg$auto(0x3, 0x0, 0x3, 0x1c) 10m11.767151023s ago: executing program 3 (id=1100): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_netdev(&(0x7f0000000040), r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000640)={'wlan1\x00'}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$auto_NL802154_CMD_GET_SEC_KEY(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r4, 0x2474a7d9180cffa3, 0x70bd2d, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x40040}, 0x40c0) sendmsg$auto_NL802154_CMD_SET_WPAN_PHY_NETNS(r2, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x867b031c65864c1a}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, r4, 0x800, 0x70bd28, 0x25dfdbfb, {}, [@NL802154_ATTR_MIN_BE={0x5, 0x11, 0xb5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x10) sendmsg$auto_NETDEV_CMD_QSTATS_GET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x14, r1, 0x301, 0x70bd27, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x40448c0}, 0x20000000) 10m11.323939856s ago: executing program 2 (id=1101): bpf$auto(0x1e, &(0x7f0000000000)=@raw_tracepoint={0x3, 0xffffffffffffffff, 0x3000000, 0x67}, 0x5) 10m11.137564411s ago: executing program 2 (id=1103): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop6\x00', 0x1cdd81, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/vkms/graphics/fb0/virtual_size\x00', 0x20400, 0x0) mount$auto(&(0x7f0000000100)='vlan0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='/sys/devices/platform/dummy_hcd.3/usb4/devpath\x00', 0x9, &(0x7f00000001c0)="eee5d936e70b69e75dd710837797e393182389700ad753bc") mprotect$auto(0x1fffeffd, 0x8000000080000003, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/serial8250/serial8250:0/serial8250:0.3/tty/ttyS3/console\x00', 0x80302, 0x0) sendfile$auto(r1, r1, 0x0, 0x3) mmap$auto(0x0, 0x0, 0x5, 0xeb1, 0x401, 0xc8) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/platform/dummy_hcd.3/usb4/devpath\x00', 0xc3100, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r2, &(0x7f0000000040)=""/49, 0x31) sysfs$auto(0x2, 0x5, 0x7) r3 = openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0) ioctl$auto_RTC_PIE_OFF(r3, 0x7006, 0x0) r4 = openat$auto_evm_xattr_ops_evm_secfs(0xffffffffffffff9c, &(0x7f0000000080), 0x100401, 0x0) socket(0x2, 0x1, 0x106) setsockopt$auto(0x3, 0x0, 0x15, 0x0, 0x28) write$auto_evm_xattr_ops_evm_secfs(r4, &(0x7f00000000c0)='.', 0x1) semtimedop$auto(0xfffffff9, &(0x7f0000000000)={0x3, 0x6, 0x1}, 0x100, &(0x7f00000000c0)={0x8, 0x3}) ioctl$auto_SG_GET_RESERVED_SIZE(r0, 0x4c0a, 0x0) 10m10.809210522s ago: executing program 2 (id=1104): openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nbd3\x00', 0x101000, 0x0) r0 = openat$auto_drm_crtc_crc_data_fops_drm_debugfs_crc(0xffffffffffffff9c, &(0x7f0000000000), 0x8080, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002f00), 0xffffffffffffffff) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, 0x0, 0x4040000) mmap$auto(0x0, 0x400005, 0xfffffffffffffffe, 0x9b72, 0x2, 0x8000) socket(0x2a, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000080), 0x6b) connect$auto(0x3, &(0x7f0000000040)=@qipcrtr={0x2a, 0x4, 0x7fff}, 0x55) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) fcntl$auto(0xffffffffffffffff, 0x401, 0x5) sendmsg$auto_OVS_METER_CMD_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc0}, 0x40) setsockopt$auto(0xffffffffffffffff, 0x4, 0x8001, 0x0, 0x2) unshare$auto(0x40000080) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) sysfs$auto(0x2, 0x10000000000002d, 0x0) mbind$auto(0x0, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) gettid() connect$auto(0xffffffffffffffff, 0x0, 0x55) mmap$auto(0x0, 0x5, 0x3, 0x16, 0x3, 0x8400) unshare$auto(0x40000080) writev$auto(0x1, &(0x7f0000000100)={0x0, 0x400000000000fdef}, 0x1) madvise$auto(0x0, 0x20200, 0x15) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) open(&(0x7f0000000200)='./cgroup\x00', 0x400, 0x23) mkdir$auto(&(0x7f0000000140)='MAC80211_HWSIM\x00', 0x1) rmdir$auto(&(0x7f0000000340)='MAC80211_HWSIM\x00') sendmsg$auto_NFSD_CMD_LISTENER_SET(r1, &(0x7f0000005380)={0x0, 0x0, &(0x7f0000005340)={&(0x7f0000002f40)=ANY=[@ANYRES8=r2, @ANYRES16=r2, @ANYBLOB="010000018004000100"/22], 0x1c}, 0x1, 0x0, 0x0, 0xc000}, 0x20000000) read$auto_drm_crtc_crc_data_fops_drm_debugfs_crc(r0, &(0x7f0000000240)=""/117, 0x75) 10m9.961284258s ago: executing program 3 (id=1105): mmap$auto(0x8001, 0x400009, 0xdf, 0x9b72, 0x2, 0x8000) io_uring_setup$auto(0x6, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x1e, 0x1, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x0, 0xffffffffffff0001, 0x15) settimeofday$auto(&(0x7f0000000180)={0x100000001, 0x1}, 0x0) sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x48000}, 0x0) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x0, 0x0, 0x3) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x3) socket(0x2, 0x1, 0x0) epoll_create$auto(0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) epoll_ctl$auto(0x5, 0x1, r1, 0x0) epoll_ctl$auto(0x5, 0x3, r1, 0x0) io_uring_register$auto(r0, 0x3, &(0x7f0000000000)="08556de4e9838af258bec298c951de0d733afd677e3d0a11dc7b879cc4dffbbdfd2e10acfff62b0cdc1b713da19ce848e5ced526d276ea5ab66c9a55e3d78d8447c10223f3e84a10c13174adf01a49024678c667fc35f4ede69cab1ad8baaed35aa8877d30091169ec2d2eeb442399c5bf4bc367573a77d6124f86a5ed941cedbc5fb8702d6cef5c7754fcf1d56643cdce", 0x3) socket(0xa, 0x2, 0x0) mmap$auto(0x0, 0x40009, 0x2, 0x16, 0x2, 0x28000) getsockopt$auto(0x100000006, 0x11, 0x68, 0xfffffffffffffffc, 0x0) 10m8.903933195s ago: executing program 1 (id=1106): statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x401bf, 0x47352, 0x32, 0x65f, 0x1ffde, 0x7, 0x3, 0x20000002, 0x9, 0x3, 0x6, 0x4, 0xb4, 0x9, 0x6, 0x10003, 0x80, 0x4, 0x0, 0x7, 0x2000, 0x203, 0x0, 0x84, [0x0, 0x0, 0x0, 0x8050100000000000, 0x0, 0x100100001, 0x0, 0xa, 0x70624ce7, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0, 0x1, 0x3, 0x0, 0xfffffffffffffffd, 0x2, 0x200000000004, 0x8, 0xffffffffeffffffe, 0x200000000000004, 0x0, 0x0, 0x0, 0x0, 0x400000000005b8, 0x8, 0x0, 0x0, 0x4, 0x6, 0xffffffffffffffff, 0x890, 0x8000000000008, 0xfffffffffffffffc, 0x1000, 0xa38, 0x0, 0x0, 0xfffffffffffffffc, 0x2, 0x4000000000, 0x10006, 0x7fffffffffffffff]}, 0x1fe, 0x100000d) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) r0 = openat$auto_generic(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$auto_snd_ctl_f_ops_control(r0, 0x0, 0x0) mknod$auto(0x0, 0x1, 0x4) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) io_uring_setup$auto(0x1, 0x0) r1 = socket(0x11, 0x80003, 0x300) openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f0000000140), 0x10000, 0x0) openat$auto_kernel_debug_fops_orangefs_debugfs(0xffffffffffffff9c, &(0x7f0000000640), 0x201, 0x0) write$auto(r0, 0x0, 0xfffffdef) setsockopt$auto(r1, 0x107, 0x1, 0x0, 0x8004) mount$auto(&(0x7f0000000380)='lo\x00', &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='$\x00', 0x8, &(0x7f0000000440)="81dd9d9119d830c0d277423269abf9f37dbc6fde728e") bpf$auto(0x6, &(0x7f0000000040)=@token_create={0x400, r0}, 0x7) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS1\x00', 0x20000, 0x0) ioctl$auto_TIOCGDEV2(r2, 0x80285442, 0x0) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) r3 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r3, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008) 10m8.692108051s ago: executing program 2 (id=1107): mmap$auto(0x0, 0x40000c, 0xdf, 0x9b72, 0x2, 0x8000) sendmsg$auto_CTRL_CMD_GETFAMILY(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x4008810}, 0x30040005) (async) mprotect$auto(0x1ffff000, 0x8000000000000001, 0x1) (async) close_range$auto(0x0, 0x5, 0x0) (async) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) (async) setsockopt$auto(0x1, 0x1, 0x10, &(0x7f0000000040)='\x00\x15\x8d\xca`\xbcgY\xd2w\xf6\xaedN\xfb\xc2_\xf54\xb4z\n*\xaaL\'\xab>q\x9e\xdd`\x84_\r\xc2\x17\xb1\xaf\xd2\f\xfd[Iy\xbb*$\xec\xca\x8b\xde\xdcV@\x04+\x00'/82, 0xba) writev$auto(0x1, &(0x7f0000000100)={0x0, 0x400000040000fdef}, 0x1) (async) r0 = syz_clone3(&(0x7f0000000440)={0x208000000, &(0x7f00000000c0), &(0x7f0000000180), &(0x7f00000001c0), {0x13}, &(0x7f0000000300)=""/193, 0xc1, &(0x7f0000000200)=""/123, &(0x7f0000000400)=[0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0], 0x7}, 0x58) r1 = syz_open_procfs$namespace(r0, &(0x7f0000000280)='ns/pid\x00') poll$auto(&(0x7f0000000500)={r1, 0x94fa, 0x3}, 0x4112, 0xb) r3 = syz_genetlink_get_family_id$auto_vdpa(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$auto_VDPA_CMD_DEV_CONFIG_GET(r2, &(0x7f0000000740)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000700)={&(0x7f00000008c0)=ANY=[@ANYBLOB="84ff00009e20280a90d8554815d4f69179a14fab72263af4967fa8b42d063b94b9f6736d9d9226a75d63b0ea780100b1650ca3894c8713c7d4ec160b2bf1713de58d0c0736ee7647ce2ca8d328c1cce9db1e6b017ad4739fea7d424ce2eacd70747d2f171a1bbd84462253bb500e164d52ac9c875c50461e87d512e9e4e5d97be1faa785386706fc3f63cf72214fada2a0cd22a98a2ff64c6d4f104a4d8dcc11346d1af45bc35d94f5ea7ba475920fdc15079691c4f83e6ace09fc8dcb1873bf66dbe8e9fd3400a23c7ae1", @ANYRES16=r3, @ANYBLOB="010026bd7000fddbdf25060000001400020070696d72656731000000000000000000080011000700000006000d000000000008001100e60000001400020076657468315f6d61637674617000000006000c0000020000b9000a003b8cfec3e00c198809713c5ad3db2b2949ef09998bde645533c06dfc74cd360d2433c92ccedfdf8b416327fa3f9ccae1feebf8315402e2ed7fcd0252dd68d1b72a4f9f1e42af04fd63de3c7b241bc37e0ee20cd6b56086cb211ae210ce1c162bd64f8286dbd2c17a91de39facd47277b62e10f0ce354ab840ce65d019a0044c47f0458bc90707c65678a1765953e07e0254d1fad70f2bda167905f23f4118d7c03538835985ac9f98cdcfc09e41a4eb87b4532b8120000001400040076657468305f746f5f626f6e64000000140004007465616d3000"/314], 0x140}, 0x1, 0x0, 0x0, 0x48000}, 0x20004815) (async) r4 = socket(0x1e, 0x4, 0x0) mmap$auto(0x0, 0x9, 0xeffffffffffffffe, 0x90, 0x10000005, 0xd) (async) bind$auto(r4, &(0x7f00000002c0)=@tipc=@name={0x1e, 0x2, 0x1, {{0x1, 0x2}, 0x3}}, 0x68) (async) sendmsg$auto_WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x4008850}, 0x22048044) (async) socket(0x2, 0x1, 0x0) (async) bind$auto(0x3, &(0x7f0000000080), 0x6b) (async) connect$auto(0x3, &(0x7f00000000c0), 0x55) (async) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) (async) write$auto(0x3, 0x0, 0xfdef) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) (async) open(0x0, 0x22240, 0x155) socket(0x18, 0x4, 0x1) getpeername$auto(0x3, 0x0, 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) (async) sendmmsg$auto(r2, &(0x7f0000000000)={{0x0, 0x2, 0x0, 0x106, 0x0, 0x1, 0xfff}, 0xed7138c}, 0x9a6, 0xe000) (async) unshare$auto(0x40000080) 10m5.37907679s ago: executing program 3 (id=1112): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_OVS_DP_CMD_NEW(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x2c, r1, 0x1, 0x2070bd26, 0x25dfdbf8, {0x1, 0x0, 0x700}, [@OVS_DP_ATTR_UPCALL_PID={0x8, 0x2, 0x4}, @OVS_DP_ATTR_NAME={0x8, 0x1, 'HfR\x00'}, @OVS_DP_ATTR_UPCALL_PID={0x8, 0x2, 0x9}]}, 0x2c}, 0x1, 0x0, 0x0, 0x801}, 0x0) 9m53.375458025s ago: executing program 32 (id=1106): statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x401bf, 0x47352, 0x32, 0x65f, 0x1ffde, 0x7, 0x3, 0x20000002, 0x9, 0x3, 0x6, 0x4, 0xb4, 0x9, 0x6, 0x10003, 0x80, 0x4, 0x0, 0x7, 0x2000, 0x203, 0x0, 0x84, [0x0, 0x0, 0x0, 0x8050100000000000, 0x0, 0x100100001, 0x0, 0xa, 0x70624ce7, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0, 0x1, 0x3, 0x0, 0xfffffffffffffffd, 0x2, 0x200000000004, 0x8, 0xffffffffeffffffe, 0x200000000000004, 0x0, 0x0, 0x0, 0x0, 0x400000000005b8, 0x8, 0x0, 0x0, 0x4, 0x6, 0xffffffffffffffff, 0x890, 0x8000000000008, 0xfffffffffffffffc, 0x1000, 0xa38, 0x0, 0x0, 0xfffffffffffffffc, 0x2, 0x4000000000, 0x10006, 0x7fffffffffffffff]}, 0x1fe, 0x100000d) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) r0 = openat$auto_generic(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$auto_snd_ctl_f_ops_control(r0, 0x0, 0x0) mknod$auto(0x0, 0x1, 0x4) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) io_uring_setup$auto(0x1, 0x0) r1 = socket(0x11, 0x80003, 0x300) openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f0000000140), 0x10000, 0x0) openat$auto_kernel_debug_fops_orangefs_debugfs(0xffffffffffffff9c, &(0x7f0000000640), 0x201, 0x0) write$auto(r0, 0x0, 0xfffffdef) setsockopt$auto(r1, 0x107, 0x1, 0x0, 0x8004) mount$auto(&(0x7f0000000380)='lo\x00', &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='$\x00', 0x8, &(0x7f0000000440)="81dd9d9119d830c0d277423269abf9f37dbc6fde728e") bpf$auto(0x6, &(0x7f0000000040)=@token_create={0x400, r0}, 0x7) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS1\x00', 0x20000, 0x0) ioctl$auto_TIOCGDEV2(r2, 0x80285442, 0x0) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) r3 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r3, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008) 9m53.26851844s ago: executing program 33 (id=1107): mmap$auto(0x0, 0x40000c, 0xdf, 0x9b72, 0x2, 0x8000) sendmsg$auto_CTRL_CMD_GETFAMILY(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x4008810}, 0x30040005) (async) mprotect$auto(0x1ffff000, 0x8000000000000001, 0x1) (async) close_range$auto(0x0, 0x5, 0x0) (async) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) (async) setsockopt$auto(0x1, 0x1, 0x10, &(0x7f0000000040)='\x00\x15\x8d\xca`\xbcgY\xd2w\xf6\xaedN\xfb\xc2_\xf54\xb4z\n*\xaaL\'\xab>q\x9e\xdd`\x84_\r\xc2\x17\xb1\xaf\xd2\f\xfd[Iy\xbb*$\xec\xca\x8b\xde\xdcV@\x04+\x00'/82, 0xba) writev$auto(0x1, &(0x7f0000000100)={0x0, 0x400000040000fdef}, 0x1) (async) r0 = syz_clone3(&(0x7f0000000440)={0x208000000, &(0x7f00000000c0), &(0x7f0000000180), &(0x7f00000001c0), {0x13}, &(0x7f0000000300)=""/193, 0xc1, &(0x7f0000000200)=""/123, &(0x7f0000000400)=[0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0], 0x7}, 0x58) r1 = syz_open_procfs$namespace(r0, &(0x7f0000000280)='ns/pid\x00') poll$auto(&(0x7f0000000500)={r1, 0x94fa, 0x3}, 0x4112, 0xb) r3 = syz_genetlink_get_family_id$auto_vdpa(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$auto_VDPA_CMD_DEV_CONFIG_GET(r2, &(0x7f0000000740)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000700)={&(0x7f00000008c0)=ANY=[@ANYBLOB="84ff00009e20280a90d8554815d4f69179a14fab72263af4967fa8b42d063b94b9f6736d9d9226a75d63b0ea780100b1650ca3894c8713c7d4ec160b2bf1713de58d0c0736ee7647ce2ca8d328c1cce9db1e6b017ad4739fea7d424ce2eacd70747d2f171a1bbd84462253bb500e164d52ac9c875c50461e87d512e9e4e5d97be1faa785386706fc3f63cf72214fada2a0cd22a98a2ff64c6d4f104a4d8dcc11346d1af45bc35d94f5ea7ba475920fdc15079691c4f83e6ace09fc8dcb1873bf66dbe8e9fd3400a23c7ae1", @ANYRES16=r3, @ANYBLOB="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"/314], 0x140}, 0x1, 0x0, 0x0, 0x48000}, 0x20004815) (async) r4 = socket(0x1e, 0x4, 0x0) mmap$auto(0x0, 0x9, 0xeffffffffffffffe, 0x90, 0x10000005, 0xd) (async) bind$auto(r4, &(0x7f00000002c0)=@tipc=@name={0x1e, 0x2, 0x1, {{0x1, 0x2}, 0x3}}, 0x68) (async) sendmsg$auto_WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x4008850}, 0x22048044) (async) socket(0x2, 0x1, 0x0) (async) bind$auto(0x3, &(0x7f0000000080), 0x6b) (async) connect$auto(0x3, &(0x7f00000000c0), 0x55) (async) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) (async) write$auto(0x3, 0x0, 0xfdef) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) (async) open(0x0, 0x22240, 0x155) socket(0x18, 0x4, 0x1) getpeername$auto(0x3, 0x0, 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) (async) sendmmsg$auto(r2, &(0x7f0000000000)={{0x0, 0x2, 0x0, 0x106, 0x0, 0x1, 0xfff}, 0xed7138c}, 0x9a6, 0xe000) (async) unshare$auto(0x40000080) 9m50.052464923s ago: executing program 34 (id=1112): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_OVS_DP_CMD_NEW(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x2c, r1, 0x1, 0x2070bd26, 0x25dfdbf8, {0x1, 0x0, 0x700}, [@OVS_DP_ATTR_UPCALL_PID={0x8, 0x2, 0x4}, @OVS_DP_ATTR_NAME={0x8, 0x1, 'HfR\x00'}, @OVS_DP_ATTR_UPCALL_PID={0x8, 0x2, 0x9}]}, 0x2c}, 0x1, 0x0, 0x0, 0x801}, 0x0) 5.70219912s ago: executing program 4 (id=4821): mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) io_uring_setup$auto(0x1, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) ioctl$auto_VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000000000)={0x1, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000bc0), 0xffffffffffffffff) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/bdi/31:0/min_ratio_fine\x00', 0x20140, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r2, &(0x7f0000001080)=""/4096, 0x1000) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000001c0)={'macvlan0\x00'}) mlock2$auto(0x1, 0x6, 0x43) sendmsg$auto_BATADV_CMD_GET_TRANSTABLE_LOCAL(r1, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="9c0800ef059174d78d35e4ecb16ec7da8469b96a3881db20f44e81fe14ac2f73aecfe43a53900f1c68269a4a5267640d59fd3ab40a7b11de7c4c33d112d0ccd4a6a1a3494e0e146a0a64f28e1b52087d6ef986cddba095edd6fec43a50b901bfed8d85824efdaadc2eb5ef0f02ef2d92def16d6267dd0ae85e7ddf032f6a31c23b511e6b6b3795e30467504e46c5b9c4debd18e14858bce5296d58ad", @ANYRES64=r0, @ANYRESOCT=r2, @ANYRES64=0x0, @ANYBLOB="53039d4e78d63ebd8041b7f383df85a3e6400179fcbdecd99d493a1ea31c7802ae937b4941c9df8e79893dd3fa00dd239b6215b7307bca0b32cd67872936ac0c9fdc96ba9af45a2f7cfd750b1bfac86c0372a5fc30af1afa7f00ce42f622e0fc9a3cba"], 0x1c}, 0x1, 0x0, 0x0, 0x8008}, 0x4000000) mmap$auto(0x0, 0x400008, 0x0, 0x9b72, 0x40000000000002, 0x3) mmap$auto(0x0, 0x400008, 0x7, 0x9b72, 0x200000000001, 0x8000) arch_prctl$auto(0x2001, 0x2) sendmsg$auto_BATADV_CMD_TP_METER(r0, &(0x7f0000000100)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x894}, 0x8000) io_uring_setup$auto(0x6, 0x0) r4 = socket(0x10, 0x2, 0x9) mmap$auto(0x0, 0x8, 0x1000000004, 0x9b72, 0x2, 0x8000) setrlimit$auto(0x0, 0x0) setrlimit$auto(0x0, 0x0) setsockopt$auto(r4, 0x104000000000010e, 0x2, 0x0, 0x7fff) r5 = openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cec2\x00', 0x801, 0x0) ioctl$auto_CEC_RECEIVE(r5, 0xc0386106, &(0x7f0000000140)={0x0, 0xe89, 0xfffffff6, 0x100000d, 0xfffffffe, 0x8, "dbf0cf00000200cc001000", 0xf9, 0x2, 0x6, 0x4, 0x7, 0x10, 0x7}) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x21d00, 0x0) ioctl$auto(0xffffffffffffffff, 0x4b32, 0x92b6) futex$auto(0x0, 0x6, 0x6, 0x0, 0x0, 0x9) futex$auto(0x0, 0x3, 0x8243, 0x0, 0x0, 0x4) r6 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000001c80)='/dev/fb0\x00', 0x20401, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0xc0684608, 0x0) 5.242977343s ago: executing program 4 (id=4824): r0 = openat$auto_proc_uid_map_operations_base(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/uid_map\x00', 0x0, 0x0) openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x20007, 0x9, 0xeb1, 0x403, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_full_fops_mem(0xffffffffffffff9c, &(0x7f0000000000), 0x101002, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) ioctl$auto(0x3, 0x5403, 0x38) ioctl$auto(0xffffffffffffffff, 0x5403, 0x3) read$auto_proc_uid_map_operations_base(r0, &(0x7f0000000040)=""/52, 0x34) open(0x0, 0x0, 0x110) 5.030707121s ago: executing program 4 (id=4825): r0 = openat$auto_proc_uid_map_operations_base(0xffffffffffffff9c, &(0x7f00000005c0)='/proc/thread-self/uid_map\x00', 0x680200, 0x0) openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x20007, 0x9, 0xeb1, 0x403, 0x8000) close_range$auto(0x2, 0x8, 0x0) capget$auto(&(0x7f0000000200)={0x4, 0xffffffffffffffff}, &(0x7f0000000240)={0xffffff63, 0x7, 0xa168}) move_pages$auto(r1, 0x3, &(0x7f0000000600)=&(0x7f0000000280)="67a4bc2a5496e4ab4d0f88739385abdc6a0363c6114dd9b01fb7ef10c121e96d6edd81723a98ecc29998f8bc80f953f5ad6efd987b6b93c0df3dfe8231d11ac07efc622d2c450d3699a0d48bc1decf85d06326e1dfc84e6dc8288651c8d6cab3d2b5d10bc1e621833c80124886e40b0ce184a6cc35ddc872a3722ea37618614b75851314f843e83ccb6cd5b73653b378b959d9ee547ef3aaaafb5bf016be6024592f4f3c52930705cafc57171578db6f3c5600a7a6102fb9f440b30f26f8e1e14587a181", &(0x7f00000003c0)=0x8, &(0x7f0000000400), 0x5) sendmsg$auto_NETDEV_CMD_QUEUE_GET(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)={0x2c, 0x0, 0x1, 0x70bd26, 0x25dfdbfa, {}, [@NETDEV_A_QUEUE_TYPE={0x8, 0x3, 0x1}, @NETDEV_A_QUEUE_IFINDEX={0x8}, @NETDEV_A_QUEUE_IFINDEX={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x810) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000480)={'bridge0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'erspan0\x00', 0x0}) sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="20002abd7000ffdbdf250100000008000100", @ANYRES32=r2, @ANYBLOB="1d00f800", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r3, @ANYBLOB], 0x2c}}, 0x4004084) openat$auto_full_fops_mem(0xffffffffffffff9c, &(0x7f0000000000), 0x101002, 0x0) r4 = openat$auto_ubi_ctrl_cdev_operations_ubi(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) setresuid$auto(0x0, 0x7, 0x8080) ioctl$auto_UBI_IOCATT(r4, 0x40186f40, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) ioctl$auto(r4, 0x5403, 0x38) ioctl$auto(0xffffffffffffffff, 0x5403, 0x3) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) sysfs$auto(0x2, 0x4, 0x0) clone$auto(0x21002, 0x9, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x9) r5 = socket(0xa, 0x5, 0x0) getsockopt$auto(r5, 0x84, 0xa, 0x0, 0x0) read$auto_proc_uid_map_operations_base(r0, &(0x7f0000000040)=""/52, 0x34) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$auto_net_shaper(&(0x7f0000000100), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) bpf$auto(0x0, &(0x7f0000000040)=@bpf_attr_5={@target_ifindex=r9, r8, 0x99, 0x8, 0x1, @relative_id=0x8, 0x5}, 0x92) sendmsg$auto_NET_SHAPER_CMD_CAP_GET(r6, &(0x7f00000001c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="000226bd7000fcdbdf250500000008000200f0ffffff08000100", @ANYRES32=r9, @ANYBLOB="757ee670109eb2c195d7f70700000000685800"], 0x24}, 0x1, 0x0, 0x0, 0x8018}, 0x40801) open(0x0, 0x0, 0x110) 4.604971669s ago: executing program 4 (id=4829): r0 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event0\x00', 0x80, 0x0) ioctl$auto_evdev_fops_evdev(r0, 0x80004519, 0x0) (async) sendmsg$auto_NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001dc0)={&(0x7f0000000040)={0x20, 0x0, 0x1, 0x70bd25, 0x25dfdbfd, {}, [@NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [@nested={0x8, 0x1, 0x0, 0x1, [@nested={0x4, 0x1}]}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x0) r1 = socket(0x10, 0x2, 0x0) (async) sendmsg$auto_NETDEV_CMD_QUEUE_GET(0xffffffffffffffff, &(0x7f0000003040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x0, 0x1, 0x70bd2c, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x20008810) sendmsg$auto_NL80211_CMD_GET_REG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB='J'], 0x1ac}, 0x1, 0x0, 0x0, 0x20040051}, 0x40000) r2 = socket(0x2, 0x2, 0x106) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) openat$auto_tracing_cpumask_fops_trace(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/tracing/tracing_cpumask\x00', 0x40100, 0x0) (async) madvise$auto(0x0, 0xffffffffffff0001, 0x15) (async) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) bpf$auto(0x7, &(0x7f0000000000)=@bpf_attr_11={0x2, 0x1, 0x8, 0xd, 0x2, 0x9, 0xb, r2}, 0x0) futex$auto(0x0, 0x85, 0x5, 0x0, 0x0, 0x10000007) (async) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) 4.22090823s ago: executing program 6 (id=4830): syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000140), 0xffffffffffffffff) close_range$auto(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffff8) r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) munmap$auto(0x20001000, 0x2000000c) connect$auto(0xffffffffffffffff, 0x0, 0x10001) r1 = openat$auto_dynamic_events_ops_trace_dynevent(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/tracing/dynamic_events\x00', 0x502, 0x0) write$auto_dynamic_events_ops_trace_dynevent(r1, 0x0, 0x0) madvise$auto(0xf, 0xffffffffffff0005, 0x19) mmap$auto(0x4, 0x4, 0xfffffffffffffff8, 0x40eb1, 0x402, 0x300000000000) mincore$auto(0x1000, 0x8, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x19) io_uring_setup$auto(0x6, 0x0) ioctl$auto(0x3, 0x8918, 0x95) seccomp$auto(0x2, 0xf, 0xfffffffffffffffe) connect$auto(0xffffffffffffffff, &(0x7f0000000000), 0x1) mprotect$auto(0x1ffff000, 0x8000000000000001, 0x4) close_range$auto(0x2, 0x8, 0x0) mknod$auto(&(0x7f0000000000)='\x00\x00\x00\x00\x00\x00\x00', 0x1001, 0x3) open(&(0x7f0000000000)='./file0\x00', 0xa240, 0x15e) read$auto(r0, 0x0, 0xfffffdee) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$auto_stat_fops_per_vm_kvm_main(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/kvm/mmu_pte_write\x00', 0x20440, 0x0) read$auto_stat_fops_per_vm_kvm_main(r2, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 3.990043511s ago: executing program 4 (id=4832): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) bpf$auto(0x4, &(0x7f0000000240)=@bpf_attr_7={@btf_id=0xfffffffd, 0x800, 0x1}, 0x7) prctl$auto(0x965, 0x2, 0x200, 0x5, 0x5) madvise$auto(0xffffffffffffffff, 0x4, 0x887b) sysinfo$auto(0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000340), r1) prctl$auto(0x43, 0x17, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x40009, 0xe2, 0x9b71, 0x4, 0x28000) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) setrlimit$auto(0x1000000007, 0x0) mlockall$auto(0x3) io_uring_setup$auto(0x6, 0x0) mremap$auto(0x4000, 0xfee0, 0x3fd6, 0x3, 0xfffff000) sched_setaffinity$auto(0x0, 0x9, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) sendmsg$auto_NL80211_CMD_DISCONNECT(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010029bd7000fcdbdf252600000008000300", @ANYRES32=r4], 0x1c}, 0x1, 0x0, 0x0, 0x90}, 0x4040800) sendmsg$auto_NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f00000010c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x49}, 0xc, &(0x7f0000001080)={&(0x7f0000000040)={0x1018, r3, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@NL80211_ATTR_MLO_TTLM_DLINK={0x1004, 0x148, "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"}]}, 0x1018}, 0x1, 0x0, 0x0, 0x4000}, 0x24000044) 2.823900164s ago: executing program 6 (id=4841): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ram14\x00', 0x4000, 0x0) mmap$auto(0x0, 0x9, 0xffb, 0x8000000008011, 0x3, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000040)={0x1, 0x0, 0x33}, 0x18) madvise$auto(0x0, 0x10001, 0x100000003) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) 2.358872258s ago: executing program 0 (id=4842): r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/conf/ip6gretap0/forwarding\x00', 0x40802, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x321342, 0x1c9) landlock_restrict_self$auto(0x1000, 0x0) read$auto(r0, &(0x7f00000001c0)='/dev/raw-gadget\x00', 0x3) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0x8000000000000000, 0x8000) mmap$auto(0x0, 0x9, 0x3, 0x800019b72, 0x9, 0x8000000000008000) capget$auto(0x0, 0xfffffffffffffffe) capset$auto(0x0, &(0x7f0000000180)={0x1, 0x7, 0x6}) r1 = open(&(0x7f0000000000)='./file0\x00', 0x4041, 0x1a1) fallocate$auto(r1, 0x9, 0x7, 0x61) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/kcore\x00', 0x101000, 0x0) 2.227449951s ago: executing program 6 (id=4844): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000ac0), r0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'dummy0\x00', 0x0}) sendmsg$auto_ETHTOOL_MSG_LINKINFO_GET(r0, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000b40)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010025bd7000fddbdfa5020000000c00018008000100", @ANYRES32=r2, @ANYBLOB], 0x20}, 0x1, 0x0, 0x0, 0xc880}, 0x20000) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), r0) 2.053106533s ago: executing program 5 (id=4845): openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/lru_gen_full\x00', 0x0, 0x0) mmap$auto(0xfffffffffffffffc, 0x20009, 0x2, 0xeb1, 0x40000000000a5, 0x8000) r0 = openat$auto_ftrace_event_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/tracing/events/vmalloc/purge_vmap_area_lazy/filter\x00', 0x2, 0x0) r1 = openat$auto_ftrace_event_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/tracing/events/vmalloc/purge_vmap_area_lazy/filter\x00', 0x2, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f00000044c0)='/dev/nbd2\x00', 0x501841, 0x0) read$auto_ftrace_event_filter_fops_trace_events(r0, &(0x7f0000000180)=""/4096, 0x1000) write$auto(r1, 0x0, 0xfd) mmap$auto(0x0, 0x9, 0x3ff57696, 0x9b72, 0x2, 0x8000000000008000) ppoll$auto(0xfffffffffffffffe, 0x4, 0x0, 0xfffffffffffffffe, 0x8) r2 = openat$auto_ftrace_event_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing/events/vmalloc/alloc_vmap_area/filter\x00', 0x8000, 0x0) read$auto_ftrace_event_filter_fops_trace_events(r2, &(0x7f0000000080)=""/136, 0x88) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000180), 0xffffffffffffffff) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/devices/virtual/block/loop4/size\x00', 0x80, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r5, &(0x7f00000000c0)=""/17, 0x11) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_TIPC_NL_LINK_GET(r6, &(0x7f0000005200)={0x0, 0x0, &(0x7f00000051c0)={&(0x7f0000005080)=ANY=[@ANYBLOB, @ANYRES16=r4, @ANYBLOB="010326bd7000fedbdf2508000000"], 0x14}, 0x1, 0x0, 0x0, 0x5}, 0x4) newfstatat$auto(0xffffffffffffff9c, &(0x7f00000011c0)='./file0\x00', &(0x7f0000001200)={0xff, 0x2, 0x5, 0xa, 0xee01, 0xee00, 0x0, 0x4fd, 0x5, 0x6, 0xffffffffffffffff, 0xff, 0x5, 0x5, 0x8, 0x7, 0xb}, 0x4) sendmsg$auto_TIPC_NL_BEARER_DISABLE(r3, &(0x7f0000004480)={&(0x7f0000001180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000004440)={&(0x7f00000012c0)={0x3154, r4, 0x20, 0x43, 0x25dfdbfe, {}, [@TIPC_NLA_LINK={0x171, 0x4, 0x0, 0x1, [@nested={0x14, 0x108, 0x0, 0x1, [@typed={0x8, 0xc7, 0x0, 0x0, @u32=0x1ff}, @typed={0x8, 0x113, 0x0, 0x0, @u32=0x7ff}]}, @typed={0x5, 0x7f, 0x0, 0x0, @str='\x00'}, @typed={0xc, 0x71, 0x0, 0x0, @u64=0x7}, @typed={0x8, 0x9a, 0x0, 0x0, @uid=r7}, @nested={0xb9, 0xce, 0x0, 0x1, [@nested={0x4, 0x51}, @generic="ff75738d14647706d0a844d1a45205dd580c6a91d6fe352af1fa062f24c7543f9397937a85632c13b830f751b9705c559df84a3610987cf719d2834c781ba26b0ce9dff21c46cf9f34236d55ec713a20", @generic="e0", @typed={0x4, 0xde}, @typed={0x5b, 0xbc, 0x0, 0x0, @binary="75866e4b5016f9c9863b139ed75c52c2bfbfc4df424968495eb967fbbc5c4a87009c554231f28862493350efba46559b33517b573025c826a8c304fa7fe7bcfe9b609a1ba428d331dfa7c1172808d871ee6c0eaf1b8c8b"}]}, @generic="490bdaeb", @nested={0x7c, 0x68, 0x0, 0x1, [@generic="6ede7cc0ab1f2a53e84e69b277d21ae0ab8c4cd2281576910ded66c748dcd083297dda0140f17b2d335181dedef753df1e4425a5897df88811f3c58d245b898f5bc297c2772925bf0d161c653270246eaa71fec79cca274ecb00e8bd127f603fdd91e9c764f3af29d53a488c86c6836cd85868f2", @nested={0x4, 0x128}]}, @generic="1c"]}, @TIPC_NLA_UNSPEC={0xb7, 0x0, "11907dc58c2746a47e53a16a118ff49169a628777b4efb71b22408636822a3552a72ca41f81a33bc914eebf5528793c7064c1c9bd277d8e79f6d64e65d93dc4434edd179c54731b980367981bb43eb982c45d3b254ddec736ae9156b4723fb0cae332e178e1bb8870cd2e8fc477a60847014a3995b0df493ee71dd70dc72444c82da2407a03ee3816f58ea6c22a4519609710376adc306b12eb962cd9e58cb1522edb18718fb34ba27d13052b55a3b434d486f"}, @TIPC_NLA_SOCK={0x224, 0x2, 0x0, 0x1, [@nested={0x10f, 0x82, 0x0, 0x1, [@typed={0x14, 0xb5, 0x0, 0x0, @ipv6=@mcast1}, @generic="5bd61524b00190cd6b6b6445e6e5ff4b9635b89fb8125c2da2346264ca4c303a961683e24be67d57442c3743cb5ab22aae61b4d0ac654500523758db6f0ad8d9e5bc5824bac129e180b4234187454bda027d15749931824ba1ff7c3ba5f0cd4515364de1f926d8d71d8b2a76f5e9b478863c01af79b9d37a95141752c1dae53287773de7114969116b3481d3d577a60a9d400aca645abebaff0e34cd5e0faa868f81da4eda7d674f1c5146a533c87f2d70ed215ca949d5206466d325a6953b3d2079a3d4905ed89f7eb293cb6756908958c0754924a1cdd3e135ff7eff8d2c4bf589f90668436a425ebc0c4a851a6c655c3dd514523f64"]}, @nested={0xfb, 0xa3, 0x0, 0x1, [@nested={0x4, 0x8}, @generic="3c82a171832aa544fc7852acad2ddb1c19", @nested={0x4, 0x111}, @generic="c708f16ffb4fcd3e2b09587f0db43dbd77676edc6f2612456ef7d43c49fd5367ca22815df309ce7f232a4457cb3a425aa65e6096", @nested={0x4, 0x33}, @generic="49ebf3ff3fb912b384cd9239d34a7ed51e7ad6e0e1767df106d36b62f8139e838b909d0a7c7cc475653e1dce81188f053c177fc71d6830d823888275c7879b0e0a6ccb52456fd8da6d39149cc84365f94448b73a06c1f9af6adb820cb6e6c1d48e1194522139f67e64939b633cad9e61bc8f8be23e2858fa8baec05a6384a4b18e7515533fa6366dcff62e10ffb74ac9a741b041d6ae1c0e4da97d21ed7f980ef5a954fbd4ff"]}, @typed={0x14, 0x9b, 0x0, 0x0, @ipv6=@mcast2}]}, @TIPC_NLA_NET={0x97, 0x7, 0x0, 0x1, [@generic="f0a08b82a05e2aa3f833f19af958bd993f457d79ce4a9306f5f08a64ca49fbf8dcaf21107c3ce51a4386cc981f127818ccb24fc85f6d146609298fee00f3e113b9ba8e38a95d2f9f03b46c0daa4c645a8cc743382b77fdde0e36f7409b881a2a3a637b28183952ecfbdeac511f51375845b5721dbf9fbe4bbbb019204b968d2837be6221c69aa4d6c9f1cd97ab14689435e344"]}, @TIPC_NLA_NODE={0x1f6, 0x6, 0x0, 0x1, [@generic="9bd8c9f2deb318c24c4f1d14bb8a4f0d0984f3cdd21ef722ff87a30dcbf50a9d38a3467702bc7b498af173f6b60936344fdb3ed27f2ef5c532a4854c69364f239ffe2014f3137d6115a7a9d3c2a389e69e9b9053296ccd49d2ae67cb939d8bd151104d08242a20731ec2726255d2941b90695c3a7dd65be3ea3eada9b0be65994ed7cf6c10d8a3ab4f23984bbaaaf2d669bef5bd35f4ed17fe9772a123a28fe7ded4a1b4e99bf65894c5d7c0c1133705ab", @generic="5acd0b083808121215492eddf983df136c4cfcc292056aa206378d43ac7e58ff829916d3a13a5ea849", @generic="a9a4861b5adaa2a87bec3fc3e990137c5362a63deb89ce345dec9b5127084085971ababbb28028e2", @generic="236a9a555b85e6579e105989f9a4c3cc0f1b8ef6b1061d23775863bb019f7c4b19720a13d91f51324cb3193c4267f3214c193f8cabfbd7764dddecfa480aa27c5fb9a34aebebe2631a583ccab768d6a0593d9d25959d845c65e13a01206a0ca4e52f2739ee0dfeafafc5b3b503b2461a6ced0392ee7f140e0ec8f2ecae2290751a79a6ed7598062298145189e582fd3fa698642814c3e85703b3de48e9ebfec2b99b6a9adfbf9dd32a0889d882cb771a1c2790ae1668df1cf31afb588ea89733b50a493bc8d651417853b2c97591dc997097f7c1f20ef57a51dc32ba2650dd2078eccf8dd047bc1c9ee70c296a07e900"]}, @TIPC_NLA_MEDIA={0x165e, 0x5, 0x0, 0x1, [@nested={0x1c, 0xf9, 0x0, 0x1, [@nested={0x4, 0x3a}, @typed={0xc, 0x4f, 0x0, 0x0, @str='\\}:[\x15]\xd1\x00'}, @nested={0x4, 0xa5}, @nested={0x4, 0xc3}]}, @typed={0x8, 0x109, 0x0, 0x0, @pid}, @typed={0x8, 0x66, 0x0, 0x0, @ipv4=@empty}, @nested={0x1199, 0x36, 0x0, 0x1, [@nested={0x4, 0xdb}, @typed={0x8, 0x60, 0x0, 0x0, @ipv4=@broadcast}, @nested={0x4, 0x72}, @generic="1a16ac91b39e8c2bd1024a224bc6af533c817081281b9753c95656273becef0da6f75529fcf6443ed96feebcac3e7fc51a9ac975de43cd5540e3736fe289a0a5be5151f75d18982a27541b89cd2ab103b3af45ca49b9bec27e441a7bb76ba5e871063add65bd30dfa9c1b90518ca09dd719f8602ad500ef0cd318582b96dd110f7eb61443c5666789ca706c0e43e144f0d821bef4875ec6f865f7a4322e4ec5773af565eb651c400022327e79f7796cbf3cae552a5d949a453bf005590a43e12ccf28caba3b487179df2e47836dacc1b54e69b5669a3dbd39506e9d93fb24d3d07aa933edafc7ef2278b7bee13e5c3c5a029cba88364341672571003cf33b9410bc57a3706c2c1cf0796829bb3b56fd7d2725276491b742d850fa070b7e84b0cb91dbb72a193273c39f87d901648eb9ebc6bab0b2caf3d5fabc77380aa2b538dd3e38db62400d44270ba8a60e57a8fc23ed2a2dadce016d8d1c0b8439e90120907668e8eb335b7817c1aaeb55a770979137a8f126031354afbd152671c81aa26d08b9adf9156e741a5d87bc04b90bf12884a9e2abace32ffe9349ec7b2f2338ea0eab4d61698530de8722f081469a109f65bbb7fc9be3ac5a6d03646e91cbedb84ea70fd58839465e0a79b75a3c087bd27156b500cb2af27e6cf93760e2ce8cd9d2d5b70087b81f18ca00024211009a2b9c4b868179b3bb88afbae9e22399ba220249b47058c66cc0e87621d272644f94c8e85ab1b2d3c4a192a72d782786a451aa0e2528d4fa16088689c4ba0d2799d3b3cf6187448a140ac14324302a89c615029aca74b21d57b3021ebab6375ea3a1b10a145d576a8b121c18254ed5832aad9ea635678680be7da1be2040a4de44f8a78e7b6a94a8880d7d341eaa24a84af7168a38c09a46f0fbaea8dfea59c46c4c09a0178225fac282519485d4aeb367d64da41fb4353f85a5304be6cf163f5e73ee5b4fe8fd45bd25103eee674b952120f3039213cf99ee4875fd54f11f2f9307a0bec1d4d67746197662a55e375d07fa98859a8a6732a4ccfec8f77b5227bf650b91da3e6f5ea085006e422080d677d510f226fbadc9c3edcb1e34e16b9058f6d067640204f31b98b0fddf3c1653810ebd93a2960a244da3dfda2a8b24f94be2bb6f64cf5692336667242dcfeed0f8148cf7bd115f23bc8cc27034628c66e3c8a1bd12f0c803747d24125badf1db6f6ff9647a8079745b048a35d36095d30051c2c61ac71ed9591f67a8b9aec555a9d6c45ea8949d186c179556358338de9411b1c73d03b47031ad62d6b382af82a19a84d502579f7a21ce2af7a2dd7daae744f07b41ddb592bc91a0c485cfc046dfd4dcc7367334755d7ed00b9495d7e33668c9e42995272449ab5d9c6f2d0bc18cabb14ea7e7434a9193a122775e5a28859c947b21476d97314806db44269e9b11ce1058f333c3a02d37b7f0ff98ca9165ed80d8eec2ef4a2420e13f8cd6bd494897add03cfc4b4b51261278581b449226025572947db0fca2baad174b0d59b1c31ec8626ffc7775aafd7679663ec078fc9450038936d50abc5c47bc6257fc4688f612563d7bc734c46ce345f4ce123160384854162d544e25edaba7be0ae74a24aa5ff7eeffc124d1ef993c62b6c66f296da635e5fd1eb1233d6ab986501cfee3a6ac8c4bff110c2343cc1d8cead143346294993259c22a8c3de640368860a84885fb35d2c86e74006e5fd1052aae053f77535831db2bcc72daa2eea5b94e22ea4ce302b4c3ec281ff8443d86c8e1681d964bd8d0ddd205cce33826f71611b20ed340b43f5676f33c7183ed9a6a65fd0ef0195031e08970c54d7696684b3debc258e112ecbe6ccd829a2e4620abf65040e9567fb513638164c788c7d68f785c8cbe87f00cfba055c9918394829d351926cea092a0df4b280abb6bc8a9f705485e1d86870f270098f8776a8cadcdf8454d695d7668426ed2cd856ac2721b11a3402dcbfaea105191f1f5c7c622d2f4232cd009c4b74581f48b4903c6fc4197ce73a65563473510cb4de5bd9f1c02b6f0c79563bf8d03f29589476617cb7eb640a33dc71f19bbde2d2f0673c9b0cc5b60fa1b4c060ce1a1c7837807197fda7047ec03c60becdee397e40820d871de97e2349c04200669342dc572cef7b0264b8302927b4e307047f3d3e7eaeaf474c10906ff4e8291e4f93394ed3619bd6ab135c1ebb75fd37665e6ff95490b3c402e64449c4d1aa813d2b668e0368d632c7d82fc0237fe56f85e052505f9f02620a80df92129b9476a82e1add07cc7cb212846d73717a3c6747f785fb2ac5b5164887b25dee67549ee6124c9e9b6f7535b1730eceb399a62a39dbff8effdb2ddc6bd47a5a5906068ab1cf45c9f1d02d38c84c741f54269b12ecb2cf201b279f5bcca8452d3b9de9a1c4fdd1795a22ff708594ff6d9fb912b4438c7026c9d6ad5ddb01678fb81ed4c6df9f40adaae31c49816700b5a033af5ce1673a72ca469d04649a9a58239bbf90b8006c54ec1a7288edd8b88d128402f1775577191905bd291798fe5973bada7f29ac431ca381163551d099ef225115b0068f991e4be4b345b7fe0ad2533f93aff32e8b19283fec47a6308b1379ef1de843be2aead1dbd5644948b1947eb08dc290e2af86d3cf10647e2b6d139d5591fce6dcf5331ce1722211e2746f09759945ff534b5d65914969f405ad406e1d333b6abf3bef82fd79359bb682a335aeeadd634f28771a7d432561339f62d959d5c1900e685d0339f900895ab95f287f348fc46c5d85dca5c610b051891e95ac8f5aab5384482124ffdef5d96a9445053d39a17064c6d3f1f85f780f04444e67bfd9e0febf9d290d104c8cb3350151eba8077c2a1ccbaf390bb6814bd400ae580f119c6cdfc82edddb9ef8fa510fc90a55421bcfeaed7a95bda98d21cbdacb64559761fc9dab583e8edbec61714eb083202fcc7fc7198fe2e25a4935bf4733120c81e8726e0e26af5cd5c6c97a4b567a56b12b201657da4dde391d7972d94961b79141cd212d3482175d750f9a61fbc774e08f1f2ac994b7b71d366e0030e406acffa36e4da0ee18554c50394e7112199f7066d14d3f585930400dca77a5231a1d6fbdb5a087171de04ea540c6b2fe6ed07eefaaeb6f297feb0b85f6ce2bd965e67b864a67884a92bb0f9862ae7885ea4a766cf8f220b7975ab05203a71d2dec307714a1ff64a101cd6333f2695d4a55f171a825c7b06d5745d99901d38a28ecfe94ba4b4a37f34f95d75fc678109d98fad30e6ee639ea2d4e6032f768f0c8dcbf98ce8bf6b3c428f399abf5b083f89f2b3537a2a9478e75880f43ed1612815fdf019706f291602de746f4e48ee3e2f2a2c48255c75b2899384aae7e578cd0586bce07a23a2f5c9876f5d21bd3e59323e0e03e85e9c5af4ab8682d0efebdb211777b70293d75ae47fc6f1c4041546f78b6a02d2f8775dfda60fb7cdb4dc8612f02e32f90bc1f1a2dbe7989bf5ff555b0dcae526c3b735728815e79125364088f6ab75ae5dd08519ca1fdeef966d7a072aae6ced2a8cd1994fbb01445a31d95b825b536a8e7741d31ccf567d4a7dccb17ca93c73c191ae1e5262e97d35543b71f1681801183cae96758ce345260fb095c7cc30018d026ddba5f4528e8e40ebc2df2a62793b7075ee90b44399c8baef5061561093251c9a4bc876ba8af39ffebb8780c34f63fd3549ec215c378ee67fd2a675c2bb3d2a1cb6be36892c9e43d3bf1043f31611df53804373044ff8d2197259a879df18fb4c51a4103179df69e4ae9bb42dddb3042043d25a4c99f5cae40d34143fb3743cd5891a246a4dc8874677bf99e139c3dad253cb027c4f726a342b8e12d0346e7966cf967dbf3fb99a8560d421e7b749a6ff66e85f66d14734f2b7d70f9d684af71bf08bad86cee294bdd4d714e541c7296e66ee14bea62b7b53634298b8684e73fce4d72dac0de7acaf7e987874967c43037c133cb6e5d8653b1889e062b6b81ac4ad572ddc5027e3a60f0d7030d68a11bb899c9f8a7d7616af807a35f9e19b36e9fb99a5e47e1bab99a267d29020897f3cb711fbb5d120d8354dd2a2132fca6ad2a9a785b1796021654fbbe21a875ebc5f06043422f0bda82d636c512ae179b072287646927adf056fd57bd691294a554ddb8b3edf9c821ef3e761ff2e48623beb88d4d6891e0b1de0e20d4d84aedc9a3fa3fd7962b33bf6b660a407cf4daf766475d865ea51c84f6fbad86e8cf3d75442ee2ee39f7c7e12ccc37ed80a4653949baaed6b3046cd22660a3f9e02214fa5db9bc77d618ad4399c393ee9e7ddb915170476a5e26372a18e53818591c42a3026c8cc7fb9a1fd4d07bd497daf485db1b58b820adddc2c18fe31c3ff9ec0973d248ecd361d72cd91fac0bd6a6d6b535bab0b449de3d4bf4f7221ebcd907868ed0a06cae0133efbe86d164ba45661b2278d9f1a0b68eb356c5a36b5eaa33b5c690148369acad77920c72d1bebf3a799cc87f50a56b2b131997afc8dceda5651ffaf12ecb9e06b25be65d13b8c79b645e4a1065235c9c32c70ca7b68353e92459775d7aa211e18048af08757dff8c1c8f940fdea86a600f70fb5c6a4972de11cf306a7e8dcb5e333d1b1c963523da5ff23b5f70e605d6ed662b16887aca5cd5a83e87df53a052611b13f9a2e6f41866e152ee5b031cb2a121aa14bc32013abb89b68d216e2e554dda6dd0c7661b9f04d90ffbd467bbf733c82bddbdf3134e8ff5d189ddae8ec25111ed0c5315157d9b7a33db02c43f4f0177b76c1e592ac2484b1c2992ff3440f4002a2c4ba9435defc65c1e12466edfadbab56f58ec03ac2a4c5a3a0cbd0e141407084d42728a16b462116687602faf2bb1f2fd4ad5cc28db95546148484d428c7e129e52277b0759d4beb38b8c137fc06cf60cdb3dbacf335829bc3020816fa9b61be9d2d8b64f8fd28412d6d5b9a8e3969dabc697267577e280f45220d7763b924631227df8897919f1b8cfe8b4784e8a3a72daff47b880b3d0f3135ddfcdf7dca4a2357a5f517f9360cbd548e580043f2934cd7b31e2e209dc92c6f22e4f720c88b4553926db3221d0141480144bd944d61b56af3559154907f2e90d5e83d8609462cb3e977988d9af806090b3fb947772900534382a77f834f053d9dded939a3a4b5abcd706549abc6393f0266b6b0de66344a4c68501f132e9e60ee18eb37e358a0733e1898845a4125aba9ad1d6a3ea248d3b5e948a87abfd39e8385b884a5efed4f1ab825e964609ab2686983684a0305b2c2f01952a742a628cbf033e463d5bc620a3d6f2ab311b5ce7af34c66f5987487d0b6c1620e6077b8383313af0096e6a86d29f114061d09abe4ceb8fd2410f0e0f235da9740a20836def67d434e74e2ba19bac16cac4351770fa129504845b25886384abf7f1db6ee62965c8b4479fb1cd074e717619ba3a30523ec06e69f3fec71738aa628b4fa1dfde4788f5606c507a8a944c50a978d9efe34ce904771cdd969a6c21c6608fd301e31416a7701477fa4d9e0bcae78ff36f8c7e0e3daff77d5cf792900b27ded1c2457445d9deadc95f44cb5e11ed0751a2051556df5bf37d1b81707f5acf82c1e97cebe2c4b03e3aa3b9f90ebe62aec178383ad240b77c57ffb4f4ce7ac0d808df677a9961b0ecda9e8a1fc7f2488771d06c6dbdf3b69647cacdcd224ce63ed86bfbc33bcebc9bf9d393c0ce27866e68ab32afe32ded544437aead3466a2aa19e700d969a270943789167c32682795ac97edafd3ca41", @generic="71ce043f86f45699dfa4c8b1ee5633dcd8f3562f09c8b0278e0dfb655f0e37d8437f30f16b6cda12a68dd007a08b71f65091519c1a5b3855582dd2c3683a6c98320b481c44bcd5b9bddb288ea6ac973ce71900829236d8b881e75340dc3e90a9dc2fa8e85cad8121bfff8a97f20430a43729b3601f3c5ee50e1fb81cf4355dffb959146603d614af26de75eb42263215940a4a2fda301275e411635555b67273cd31f243aeb5879e65cbd40d8b12392f05088e8bdd54c82f4bd38880c5f491a1238b10fadb2f95535f20ebf37ebec929545513c75f41f8723cd16726f349d758671e477925", @generic="06bbfa412bc145efba0c437b6f4ed19f80375d0ad2cbc0678aaca6a79389226b9a2bf6112607e42ebc637a355ae3db05cea613223837d43e48ee133d36854b3459c8fe05d4ca94097754c092c2052a27fe365f1116ae9b9454fa055cbc9ec827bd2d62ba1193dc074449d50c525b2ccfcc52e0ade9cc35fbc09210f25d001c011d4a9b9ae08d0c97f74ea5c2a297ded4607f6df38bf0cb47dde28c3fb0c11b3c"]}, @nested={0x225, 0x107, 0x0, 0x1, [@nested={0x4, 0x107}, @nested={0x4, 0xed}, @typed={0xd6, 0xf1, 0x0, 0x0, @binary="a125141d74098404086e30c19513b669af170ea491ac662d8f54d56c829cfd012cd29b68b6ff46e6fbd94b9ad3afe349212a755e1f9517642eec905176dcaa27e6388edad9fbb1be83c1f9e388870453782e391919990df6ad694b86519fef2e045a8ed8571fada76ed2b1fcdfb06173334ed6c90974cfbe310a67ff16159aab9f307de33cf5eb59180143b6acbb623cdbed2b0067d9d0a64e37b21087622df26935b6d791f8a37d9c794dd648895c00a8f50c749403cf041ca80def16c21abb0e28ab0f19b0fba917654f172840112e7da9"}, @generic="fce71cd82f7fa69ae817746aff597d54f4dce2f3dc22ed7ab49683d3249e89999f5ba5e6833863e09766b3dddd3b9412fa768ceebbc1578653c3e413a70cfb8834ada55a75f633f2c794252e5dada09b8b8e0d2e80e9a0d415dcf879dea1416d19116e55e4028a145b960f86c175ebcdd6a1b9c144b98a60af859e5aafe686", @generic="c602721364581ca8790da2995e01884e8dd7964c7b1ec458baaec44a9d6b7197260610a610a26ca58ba8303068199589728647903b5a013f3638dd7e21ad9f08bb4ffa272ab00e7b6d635d72ab9b67b5c25eb62ef5b714d5d0e2cda21eab61cb36b1507ee440dcadc3b287b73b06d85bf0fc0353f99f064281740d1f84c53d20dda4d7ba021758a4a7bcc2429dbb1a903c17de8b3c446310d4a1ccb96a1130fc202bc9e97449a78462d5b4d18756cf9a1c38", @nested={0x4, 0x40}, @nested={0x4, 0x73}, @nested={0x4, 0x124}, @nested={0x4, 0xed}]}, @typed={0x8, 0x117, 0x0, 0x0, @pid=0xffffffffffffffff}, @typed={0x7, 0x14b, 0x0, 0x0, @str='-(\x00'}, @generic="136333ea8f3227745c16287d136f2a4c0bba08c7ed565dba1073944da8f15fc170ae0b319945bc32f9b6f4ef31cde104ab3e4894960625dbe962f1b72192901a10338f3ca46e98ec44d6fe7ba3df489587fc6a695905b23b14fda55dfa12a2ae28027a4a8c7e13c81562b1f2178fb276cd2757756d113f5a07129dfe98d08326be6af9799dc780d7895f3af7de0484a40f9592e8ebf3cca0c3790b7da57a1ae76599", @nested={0x1b5, 0xde, 0x0, 0x1, [@typed={0xd9, 0x7b, 0x0, 0x0, @binary="a4ffdd8932fa1231a48ba8a89eae752132886da9961ba5abe198ea8a53eb8e1a94d47155ba088c4f8f0b826ec115c0cb2ac12e67ff36c6b97c141ee1fda6e56548bcd0cd175e8a70589ff92ffd45d4a7da2e0b856f5414a5dfef6bd84a1f5fbc1f3dd882ea52491a44a89458a9b85ba3537c648c3bf914696284e9d99f12ef784aabb41216fc40084bc8dc68c62029166b38c0e720a2ed5267a731eacaf6ba533356359b5e583b56974b595537215b6cf1a79389d26078c42152cc5172739fe6bb24a41ad9bb72545fbc1a5ba7fd90700bf784c5a2"}, @nested={0x4, 0x5c}, @generic="b18aeb055a72e70282412e4fa1b52b57f26fc2927a4bfcb408b81b99d3c02e23e89966c5cb01677fae1589adfff0d98d86f3b237e70d1cb6be333b5f53661181501ebc048640a64c96894a34251088344544d1b39fe0243b7b80d1fb26e25931e8ab0f600076f495cf2e3b34e3d808c58ef4ee6df123f8a97561f7c56d9ce619ecb8030a0713cf59e5b74c119cc860689ff93e28496a4f9c1fee40efc79f776579c19104705df1356abb50a3313fd939a6bd784e9de8e6a75b00e19402ed53a33e2e19d82b4a444efee049855bcb91b187"]}]}, @TIPC_NLA_BEARER={0x210, 0x1, 0x0, 0x1, [@typed={0xf, 0x51, 0x0, 0x0, @str='%\\/\xd0}\\(&)-\x00'}, @nested={0x1bd, 0xc2, 0x0, 0x1, [@generic="eff9e46ceb9a3401dcc928fc4f69d4352873fe2f524499ac9bd691d5dab0f57842ce8fd724829bed5af7eb2a858c82bb0dcb86af37d102df2af070bb47fdc1882b503bde7e753d00c6d4023fc3", @generic="8745beabb2875c79f84b0e57d2c94e14f96ece18a5d23b126d0b02d7bf997a169ac2a71f96937f33173201bf989a9bf49167bbe7ff4b2182f18268f5ef894aabb72b645cea18021d2f9fae2b323ea522515b981ad0040c74fe5737c416151748cde52b7b03da109f875ca7b7e30d0943039564aeba00865eddb5e4faa11af75a1b401c6be33cc626dc9c9d11d010a59e5ab34ff0f6f0e4df8a6d9a11d6f76cfda987e5c406fd603718f30f15e6b717bc7bbd0daae6ad864b4cf01fe227c37823a3261b3fd8dd41c78bae2aa1c0", @nested={0x4, 0x142}, @typed={0x8, 0xf5, 0x0, 0x0, @u32=0xffffffff}, @generic="392286648978110811564f7785b0fca1fba74d5734702dd27c0dcd16f32c1dc67102556496ca3b4d76c74b5a1da81c34a8be9894507b791ce3a253d22bebfa91f689f78187325080db5af5e7e54498831f7b9c21dc9addfd44323471320b26c7adc6a2292acff3a7e42ee63fe47760885a3b933f1c17e72ac65604e7e47cc3e52bb383073b40775b8c73c948ac85a0", @typed={0x4, 0x10c}]}, @nested={0x27, 0x13e, 0x0, 0x1, [@typed={0x8, 0xa4, 0x0, 0x0, @u32=0x7fffffff}, @generic="588a249454e451e3e6a69a004d8abb323e2fbf", @nested={0x4, 0x112}, @nested={0x4, 0x76}]}, @typed={0x9, 0xdb, 0x0, 0x0, @str='&\xbfB.\x00'}, @typed={0x8, 0x9, 0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}]}, @TIPC_NLA_BEARER={0x11ef, 0x1, 0x0, 0x1, [@generic="bd1641cff2bd541916dbd78a8d0ac96ba0bb61f7f6f339f10f58b410d61f0b5041653e412d23d72517820cb38e53b900b8ac5dd511d5b554ca1d3d254d2cd6bc7bba6f3537060d668b971270b0708d9e596c8b5f383086b85a2389a7388be500d099921755ef7f9ba5c52e99a1fee796f120f2fc5fde875fe1fb57e2a784ce447a681c4e8ed0283b446883761b8d0e144b23aeef33054c6c499d", @nested={0x8, 0xd0, 0x0, 0x1, [@nested={0x4, 0xe7}]}, @typed={0x3e, 0x106, 0x0, 0x0, @str='/sys/kernel/tracing/events/vmalloc/alloc_vmap_area/filter\x00'}, @generic="190f2948a050a41e49414fc009400999e5e868144d842d770e7cbb21102d77a71834144924b6bc33df5ca7f678419cf17795bf699215ad138b2fc7b84dfa6c3af492a1953f6c4993739a58095aa1e7f6da8798791128f16781ae249fbd6b853c1b49c5c5e5c0eb2a9870e05ef42ab210479de7952c9f5ccb570724e3860d77b0fb187471967afe53ca49d0626154cd7f68e1fca93aecbd0465a5c7a80754642e77f3b7da23b2a7c8a3236bbd02508175259d46b5ccf27fc3f0e708d841f761a7db7e1c337d85811376aed94e5ab498d501e791ad450e34f34231639266948da6a8dcdc650eba89ef01f3f7328ae45f1c3cad75ddadd9959d", @generic="62c028f2932e036156", @nested={0x1008, 0x68, 0x0, 0x1, [@nested={0x4, 0xd3}, @generic="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"]}]}]}, 0x3154}, 0x1, 0x0, 0x0, 0x4005}, 0x40000) write$auto(0x3, 0x0, 0x5c8) 2.021669165s ago: executing program 6 (id=4846): socket(0xa, 0x3, 0xff) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x3c, r1, 0x1, 0x70bd2d, 0x25dfdbf9, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x8}, @L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x11e789c}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_FD={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x48080) connect$auto(0x3, &(0x7f0000000140)=@isdn={0x22, 0x0, 0xde, 0x5, 0x6}, 0x55) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x5, 0x3, 0x19, 0x940, 0x1, 0x3, 0x6, 0x4, 0x80, 0x5, 0x2, 0x9, 0xb0, 0x20000009, 0x2, 0x3, 0x5, 0x7}, 0x4, 0x81) r2 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event0\x00', 0x80, 0x0) ioctl$auto_evdev_fops_evdev(r2, 0xffffffff80004525, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) listmount$auto(&(0x7f0000000000)={0x5, 0x10001, 0x4, 0xffffffff, 0x5}, &(0x7f0000000380)=0xc000000000000000, 0x4, 0x6) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_REG(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x4000) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000003c0)={'pim6reg\x00'}) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000040)={{0x0, 0x0, 0x0, 0x5, &(0x7f0000000240), 0x8000, 0x40}, 0x8}, 0x1, 0x9) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000640), 0xffffffffffffffff) sendmmsg$auto(0x3, 0x0, 0xb, 0x0) r4 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}, 0x1, 0x2000000}, 0x40000) 1.958113061s ago: executing program 0 (id=4847): r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptyr7\x00', 0xa0002, 0x0) mmap$auto(0x0, 0x40009, 0x3, 0x9b72, 0x7, 0x28000) mmap$auto(0x1000, 0x2, 0x7, 0x19, 0xe83b, 0x100000004) ioctl$auto_TIOCMSET2(r0, 0x5418, 0x0) mmap$auto(0x2, 0x0, 0xfffffffffffffe01, 0x19, 0x101, 0x6) 1.869117065s ago: executing program 5 (id=4848): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x8, 0xdf, 0x18, 0xe67, 0x8000) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x402, 0x300000000000) r0 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000480)='/dev/video18\x00', 0x802, 0x0) write$auto_v4l2_fops_v4l2_dev(r0, &(0x7f00000004c0)="c9432739b5580773d9", 0x9) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_nbd(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$auto_NBD_CMD_CONNECT(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={0x30, r2, 0x11, 0x70bd2b, 0x25dfdbfe, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x4000}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SIZE_BYTES={0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0xc055}, 0x20000000) sysfs$auto(0x2, 0x3, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket(0x2, 0x2, 0x1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket(0xa, 0x3, 0x100) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) sendmsg$auto_HWSIM_CMD_DEL_RADIO(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x4) r5 = open(&(0x7f0000000000)='./file0\x00', 0x261c2, 0x84) close_range$auto(0x2, 0x8000, 0x0) r6 = socket(0xa, 0x2, 0x88) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) bpf$auto(0x0, &(0x7f00000000c0)=@link_update={r3, @new_map_fd=r4, 0xa, @old_map_fd=r6}, 0x10) bpf$auto(0x2, &(0x7f00000001c0)=@raw_tracepoint={0x5, r5, 0x0, 0x3}, 0xc) bpf$auto(0x2, &(0x7f00000001c0)=@raw_tracepoint={0x5, r7, 0x0, 0x4}, 0x103) fsopen$auto(0x0, 0x1) close_range$auto(0x2, 0x8, 0x0) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x29, 0x2, 0x0) socket(0x10, 0x2, 0x0) 1.529772222s ago: executing program 0 (id=4849): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/cgroup.threads\x00', 0x20000, 0x0) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/scsi/device_info\x00', 0x48041, 0x0) write$auto_proc_reg_file_ops_compat_inode(r1, &(0x7f0000000080)="22edd92f26638cc0023a8686bd579dcf16f50e9bfa20abfa3a", 0x19) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000000040)=""/156, 0x9c) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x10000007ffe) r2 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$auto_NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="24010000f85c80e18f4b991bcf8ef69fb5bde3209df0090180430fa4e33e538ad677f76ae8f24c22ac07c42c2faad32f6328db62380f2836df6d3d114f8954e56cda0d4dc96ce9d4da4a022562d728d8f755fe1e3e12d51edba2cc6233756449a9ae5c049c7920fdca150874de11eea25de2f6b3", @ANYRES16=r2, @ANYBLOB="000226bd7000fcdbdf251000000008000100ff0300000800050000080000"], 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x4044001) msgsnd$auto(0x0, &(0x7f0000000000)={0x1, 0x5}, 0x8, 0x9) msgrcv$auto(0x2, 0x0, 0x0, 0x9, 0x8) r3 = socket(0x2, 0x801, 0x100) listen$auto(0x3, 0x81) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r4 = socket$nl_generic(0x11, 0x3, 0x10) mmap$auto(0x0, 0xff, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) inotify_init1$auto(0x3000000000000) io_uring_setup$auto(0x4, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x806, 0x0) ioctl$auto(r4, 0x8936, 0x18) semctl$auto(0x201, 0xfffffffffffffffa, 0x3, 0x0) rt_tgsigqueueinfo$auto(0x3, 0x7, 0x7, &(0x7f0000000180)={@siginfo_0_0={0x401, 0x1, 0x80, @_timer={0xaabe, 0xb7d, @sival_ptr=0x0, 0x8}}}) close_range$auto(0x2, 0x8, 0x0) socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) r5 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/net/ip_vs_stats_percpu\x00', 0x100, 0x0) read$auto_proc_reg_file_ops_compat_inode(r5, &(0x7f0000000040)=""/99, 0x63) write$auto(r5, &(0x7f0000000040)='P-\'.-])-:@p\xc6\x00', 0x80) r6 = socket(0x11, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r6, 0x8955, 0x0) poll$auto(&(0x7f0000000180)={r3, 0x6, 0x6}, 0x6, 0x8) 1.490196253s ago: executing program 6 (id=4850): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) socket(0x2, 0x1, 0x0) socket(0x2, 0x6, 0x0) sysfs$auto(0x2, 0x0, 0x0) epoll_create$auto(0x4) epoll_ctl$auto(0x5, 0x1, 0x8000000000000000, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) epoll_ctl$auto(0x5, 0x1, r0, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) epoll_ctl$auto(0x5, 0x3, r0, 0x0) epoll_wait$auto(0x5, 0x0, 0x2, 0xfffffffd) lsm_list_modules$auto(0x0, 0x0, 0x0) lsm_list_modules$auto(&(0x7f0000000000)=0x6, &(0x7f0000000040)=0x4, 0x2) close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x5, 0x0) syz_genetlink_get_family_id$auto_ovs_meter(&(0x7f0000003040), 0xffffffffffffffff) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) 1.132048881s ago: executing program 6 (id=4851): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) bpf$auto(0x0, &(0x7f0000000100)=@task_fd_query={0x9, 0x21e9, 0x7ff, 0x6, 0x2, 0xb, 0x2e, 0x0, 0x3}, 0x6f4) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) bpf$auto(0x2, &(0x7f00000001c0)=@raw_tracepoint={0x5, 0xffff, 0x0, 0x3}, 0xf) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x0, 0xffffffffffff0001, 0x15) mmap$auto(0x3, 0x4, 0x4000000000dc, 0x40eb2, 0xa1c, 0x8) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x53, 0x9) prctl$auto(0x1, 0xae0, 0x1ff, 0xffffffffffffff59, 0x8) syz_genetlink_get_family_id$auto_ovs_meter(0x0, 0xffffffffffffffff) remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0x3, 0x4) bpf$auto(0x3, &(0x7f00000001c0)=@raw_tracepoint={0x5, 0xffff, 0x0, 0x3}, 0xc) 1.043965021s ago: executing program 5 (id=4852): r0 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) socket(0xa, 0x801, 0x106) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000021}, 0x48004) connect$auto(0x3, &(0x7f0000000140), 0x55) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) ioctl$auto(0x3, 0x80000541b, 0x38) write$auto_console_fops_tty_io(r0, &(0x7f0000000100)="c80d1b38", 0x4) 975.29987ms ago: executing program 0 (id=4853): r0 = socket(0x23, 0x2, 0x0) sendmsg$auto_NL80211_CMD_EXTERNAL_AUTH(r0, &(0x7f0000000100)={&(0x7f0000000080)={0x23, 0x0, 0x0, 0x1080020}, 0x1a, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="450000ff", @ANYRES16=0x0, @ANYBLOB="200029bd7000fddbdf257f000000"], 0xfffffdcf}, 0x1, 0x0, 0x0, 0x4048800}, 0x40) 569.116574ms ago: executing program 5 (id=4854): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ovs_ct_limit(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$auto_OVS_CT_LIMIT_CMD_DEL(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000003440)={&(0x7f0000000940)=ANY=[@ANYBLOB="e0130000", @ANYRES16=r1, @ANYBLOB="010029bd700000dcdf250200000004000180c51301809c8a4b1868d1464e8082837790cb3a0ff41a201756de"], 0x13e0}, 0x1, 0x0, 0x0, 0x20000895}, 0x8800) 546.914319ms ago: executing program 0 (id=4855): openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x60742, 0x0) r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/net/rpc/nfs4.nametoid/content\x00', 0x44000, 0x0) open(&(0x7f0000000000)='./file0\x00', 0xa240, 0x15e) r1 = socket(0xa, 0x3, 0x3a) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x0, 0xeb5, 0xfffffffffffffff7, 0x8000) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) write$auto_console_fops_tty_io(r2, &(0x7f0000000100)="dcc3804522a394e452b2a77035e15fc100830fdf62dc939a8923eac0c256e79ef01691e49f3b89a115976ce2ad46f8b0ac736ee86d9babaa8a44847e4452905ec49d58667bf56de81d77a52836d5ac5c1cf744d97923266e66e9f941e5df7147a6018d7e236cc944d021b46034f967030258fdb68d23b0872385d2c082a3688de57a0902cb5010da24d7159d2db036f393bd9846264fbbea72a1491deefc55fb75a36f54bce0cae12ff289975511820f39bf1428e3424120fe56847461361c929d365cc00520e815921cbd215b6d3d0ff5a0afa2", 0xd4) socket(0xa, 0x2, 0x88) bpf$auto(0xfffffffe, &(0x7f0000000000)=@link_update={r0, @new_prog_fd=0x4, 0x4, @old_prog_fd=r1}, 0xa3) socket(0xa, 0x3, 0x6) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/ieee80211/phy2/addresses\x00', 0x0, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r3, &(0x7f0000000200)=""/96, 0x60) socket(0xa, 0x801, 0x106) mmap$auto(0x0, 0x0, 0x40000000000000db, 0x9b72, 0x5, 0x8000) r4 = socket(0x10, 0x2, 0x0) setsockopt$auto(r4, 0x104000000000010e, 0x4, 0x0, 0x16) socket$nl_generic(0x10, 0x3, 0x10) eventfd$auto(0x3) eventfd$auto(0x0) socket(0x2, 0x3, 0x1) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket(0x1, 0xa, 0x4000008c) bpf$auto(0x0, &(0x7f0000000000)=@link_update={r5, @new_prog_fd=0x4, 0x4, @old_map_fd=r1}, 0xa3) 327.49618ms ago: executing program 5 (id=4856): r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/conf/ip6gretap0/forwarding\x00', 0x40802, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x321342, 0x1c9) landlock_restrict_self$auto(0x1000, 0x0) read$auto(r0, &(0x7f00000001c0)='/dev/raw-gadget\x00', 0x3) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0x8000000000000000, 0x8000) mmap$auto(0x0, 0x9, 0x3, 0x800019b72, 0x9, 0x8000000000008000) capget$auto(0x0, 0xfffffffffffffffe) capset$auto(0x0, &(0x7f0000000180)={0x1, 0x7, 0x6}) r1 = open(&(0x7f0000000000)='./file0\x00', 0x4041, 0x1a1) fallocate$auto(r1, 0x9, 0x7, 0x61) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/kcore\x00', 0x101000, 0x0) 146.772172ms ago: executing program 5 (id=4857): select$auto(0xff, &(0x7f0000000080)={[0x10, 0x7, 0x7, 0x7f, 0xc, 0x5, 0x81, 0x42, 0x1, 0x5e, 0x36b68000, 0xfffffffffffffffa, 0xd, 0x1de, 0x10000, 0x7b2d00000]}, &(0x7f00000001c0)={[0x9, 0x4, 0x3, 0x4eda, 0x0, 0x6, 0x6, 0x800, 0x8000, 0x4, 0x2, 0x27a, 0x2, 0xe, 0xffff, 0x200]}, &(0x7f0000000240)={[0x1e, 0x3, 0x1, 0x33a, 0x9, 0x7, 0x7ff, 0x800, 0x2, 0x0, 0x7, 0x5, 0x5, 0x5, 0xfffffffffffffffb, 0x6]}, &(0x7f0000000140)={0x6, 0x5}) r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/net/snmp\x00', 0x80, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) statx$auto(0x2, 0x0, 0x1000, 0xbdfa, 0x0) r1 = socket(0x2b, 0x1, 0x1) setsockopt$auto(r1, 0x29, 0x1b, 0x0, 0x201) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) lsm_list_modules$auto(0x0, &(0x7f0000000100)=0xbefc, 0x0) r2 = openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) ioctl$auto_USB_RAW_IOCTL_EP_CLEAR_HALT(r2, 0x4004550e, 0x0) sendmmsg$auto(0x15, &(0x7f0000000040)={{0x0, 0x6, 0x0, 0x7f, 0x0, 0x8000, 0x2}, 0x7}, 0x20000003, 0x0) ioctl$auto_USB_RAW_IOCTL_EP0_WRITE(r2, 0x40085503, &(0x7f00000002c0)={0x7, 0xfffd, 0x0, "b5771beb9994cb1fbf6adc8678fd9c57eb44b0716716dc3626b3e51b443c8fe9adf97826660bca2c82fb83456fc8761cc072857bd543fb7d3ccad8745cf509ce07f7949011286014d3b90b823b9fc3fa943129b5d11d85bdddd8ff13489e906348d4ee0c3a45c2c608690fda253b25a69e52f35b618de6f476c3b604684dd6320e0c7af7370d572d5e914987a534e3802133db1ae8078de1"}) sendmmsg$auto(0x3, &(0x7f0000000000)={{0x0, 0x2, 0x0, 0x106, 0x0, 0x1, 0x3}, 0xed7138c}, 0x7, 0x0) read$auto(r0, &(0x7f0000000180)='!@:)*%+{\x00', 0x4) 108.232891ms ago: executing program 0 (id=4858): openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000000380)='/dev/cuse\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_ftrace_event_format_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000640)='/sys/kernel/tracing/events/vmalloc/alloc_vmap_area/format\x00', 0x40, 0x0) socket(0xa, 0x3, 0x6) socket(0x2a, 0x2, 0x0) socket(0x23, 0x80805, 0x0) memfd_secret$auto(0x0) r0 = getpgid(0x0) pidfd_open$auto(r0, 0x0) socket(0x2b, 0x1, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r1 = open(&(0x7f0000000000)='./file0\x00', 0x261c2, 0x84) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="0000ed00", @ANYRES64=r1], 0x5f}, 0x1, 0x0, 0x0, 0x200408d5}, 0x5) r2 = socket(0x11, 0x2, 0x4) mprotect$auto(0x1ffff000, 0x8000000000000001, 0xd) sendmsg$auto_NL802154_CMD_GET_INTERFACE(r2, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x1000000, 0x4040}, 0x20004010) 0s ago: executing program 4 (id=4859): eventfd$auto(0x5) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = openat$auto_nvram_misc_fops_nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x101080, 0x0) ioctl$auto(r2, 0xa7, 0x0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000001080)='/sys/devices/system/cpu/cpu1/cache/index0/shared_cpu_map\x00', 0x0, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r3, &(0x7f0000000040)=""/4110, 0x100e) sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r1, 0x301, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x4000) setreuid$auto(0x0, 0xffffffffffffffff) r4 = syz_genetlink_get_family_id$auto_nfc(&(0x7f0000001100), r0) sendmsg$auto_NFC_CMD_GET_SE(r0, &(0x7f0000001240)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001200)={&(0x7f0000001140)={0x98, r4, 0x400, 0x70bd29, 0x25dfdbff, {}, [@NFC_ATTR_VENDOR_DATA={0x7a, 0x1f, "5efaf8cf90aa72d4b6f47b1c77b1429ee007306295194e4857b0c83797e2f9ac9c09c833cb6f9f96477ecf9ae21de8ee8b35ccd0439cb66031e87182f4a38254462d6a45a523802d15b9bca11e63e70f6a8519c52521243c1a3e34108a429f2ec114f847b3b265de3c39479e88f5b8facab03af937c1"}, @NFC_ATTR_IM_PROTOCOLS={0x8, 0xd, 0x10}]}, 0x98}}, 0x8080) recvmmsg$auto(r0, &(0x7f0000000340)={{0x0, 0x8, &(0x7f00000002c0)={&(0x7f0000000280), 0x7fffffff}, 0x3, 0x0, 0x401, 0xfffffffd}, 0x1}, 0x3, 0x5076, 0x0) listmount$auto(0x0, 0x0, 0xf4240, 0x1) rseq$auto(&(0x7f0000000000)={0x2, 0x2, 0x7, 0x80000000, 0x6, 0x8, "332ef40d8d121ed55b21b7d5fc4ff155afa674d3770ea36d37ba8235502f2aa207f1f53587939dc26f671ac11932fb7dc1dedc7f86dc7bcc992528e5ddbc9e"}, 0x1, 0xba, 0xc35) socket(0xa, 0x801, 0x84) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x2, 0x0) socket(0x29, 0x1, 0x89) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mincore$auto(0x1000, 0x8001, 0x0) ppoll$auto(0x0, 0x100, 0x0, 0x0, 0x8) r5 = socket(0xa, 0xa, 0x83) getsockopt$auto(r5, 0x84, 0x73, 0x0, 0x0) getsockopt$auto(0x6, 0x84, 0x7d, 0x0, &(0x7f00000000c0)=0x10000) eventfd$auto(0x8) move_pages$auto(0x1, 0x0, 0xfffffffffffffffd, 0xfffffffffffffffd, 0x0, 0x8000000000000000) alarm$auto(0x0) kernel console output (not intermixed with test programs): ern Generator [ 387.100476][T12384] vivid-009: S-Video 009-0 Is Connected To: Test Pattern Generator [ 387.108671][T12384] vivid-009: Enable Capture Cropping: true [ 387.114696][T12384] vivid-009: Enable Capture Composing: true [ 387.120779][T12384] vivid-009: Enable Capture Scaler: true [ 387.126660][T12384] vivid-009: Timestamp Source: End of Frame [ 387.132679][T12384] vivid-009: Colorspace: sRGB [ 387.137690][T12384] vivid-009: Transfer Function: Default [ 387.143369][T12384] vivid-009: Y'CbCr Encoding: Default [ 387.155222][T12384] vivid-009: HSV Encoding: Hue 0-179 [ 387.160728][T12384] vivid-009: Quantization: Default [ 387.166162][T12384] vivid-009: Apply Alpha To Red Only: false [ 387.172247][T12384] vivid-009: Standard Aspect Ratio: 4x3 [ 387.178065][T12384] vivid-009: DV Timings Signal Mode: Current DV Timings inactive [ 387.186226][T12384] vivid-009: DV Timings: 640x480p59 inactive [ 387.192872][T12384] vivid-009: DV Timings Aspect Ratio: Source Width x Height [ 387.200504][T12384] vivid-009: Maximum EDID Blocks: 2 [ 387.205976][T12384] vivid-009: Limited RGB Range (16-235): false [ 387.214878][T12384] vivid-009: Rx RGB Quantization Range: Automatic [ 387.221464][T12384] vivid-009: Power Present: 0x00000001 [ 387.231620][T12384] tpg source WxH: 640x360 (Y'CbCr) [ 387.236901][T12384] tpg field: 1 [ 387.240381][T12384] tpg crop: 640x360@0x0 [ 387.244712][T12384] tpg compose: 640x360@0x0 [ 387.249217][T12384] tpg colorspace: 8 [ 387.253121][T12384] tpg transfer function: 0/0 [ 387.258314][T12384] tpg Y'CbCr encoding: 0/0 [ 387.263244][T12384] tpg quantization: 0/0 [ 387.267878][T12384] tpg RGB range: 0/2 [ 387.272016][T12384] vivid-009: ================== END STATUS ================== [ 387.920494][T12407] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1747'. [ 393.399196][T12480] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1766'. [ 396.035952][T12550] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1793'. [ 396.128054][T12547] XFS: irix_sgid_inherit sysctl option is deprecated. [ 398.568970][T12597] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 398.595727][T12597] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 398.681424][T12600] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1808'. [ 398.705118][T12600] openvswitch: netlink: ufid size 17 bytes exceeds the range (1, 16) [ 398.713274][T12600] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 399.590498][T12611] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1813'. [ 401.736522][T12642] lo: entered allmulticast mode [ 401.799172][T12636] lo: left allmulticast mode [ 402.235586][T12647] sp0: Synchronizing with TNC [ 404.540950][T12674] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1831'. [ 404.779222][T12678] XFS: irix_sgid_inherit sysctl option is deprecated. [ 405.413692][T12664] Bluetooth: hci4: command 0x0406 tx timeout [ 405.421463][T12664] Bluetooth: hci5: command 0x0406 tx timeout [ 405.427516][T12664] Bluetooth: hci6: command 0x0406 tx timeout [ 405.542480][T12692] netlink: 330 bytes leftover after parsing attributes in process `syz.6.1838'. [ 405.609405][T12692] : renamed from wg0 (while UP) [ 406.460343][T12712] FAULT_INJECTION: forcing a failure. [ 406.460343][T12712] name failslab, interval 1, probability 0, space 0, times 0 [ 406.543736][T12712] CPU: 0 UID: 0 PID: 12712 Comm: syz.6.1844 Not tainted 6.13.0-rc2-syzkaller-00292-ga446e965a188 #0 [ 406.554612][T12712] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 406.564702][T12712] Call Trace: [ 406.568015][T12712] [ 406.570968][T12712] dump_stack_lvl+0x16c/0x1f0 [ 406.575689][T12712] should_fail_ex+0x497/0x5b0 [ 406.580402][T12712] ? fs_reclaim_acquire+0xae/0x150 [ 406.585558][T12712] should_failslab+0xc2/0x120 [ 406.590272][T12712] kmem_cache_alloc_noprof+0x6e/0x3b0 [ 406.595684][T12712] ? mpol_new+0x11b/0x2d0 [ 406.600056][T12712] mpol_new+0x11b/0x2d0 [ 406.604250][T12712] do_mbind+0x219/0xe90 [ 406.608442][T12712] ? __pfx_do_mbind+0x10/0x10 [ 406.613150][T12712] ? __might_fault+0xe3/0x190 [ 406.617888][T12712] ? __pfx_get_nodes+0x10/0x10 [ 406.622688][T12712] ? __fget_files+0x206/0x3a0 [ 406.627403][T12712] kernel_mbind+0x1e8/0x200 [ 406.631960][T12712] ? __pfx_kernel_mbind+0x10/0x10 [ 406.637022][T12712] do_syscall_64+0xcd/0x250 [ 406.641577][T12712] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 406.647508][T12712] RIP: 0033:0x7fd688585d19 [ 406.651946][T12712] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 406.671676][T12712] RSP: 002b:00007fd6893d3038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ed [ 406.680126][T12712] RAX: ffffffffffffffda RBX: 00007fd688776080 RCX: 00007fd688585d19 [ 406.688127][T12712] RDX: 0000000000000001 RSI: 0000000000000002 RDI: 0000000000000000 [ 406.696130][T12712] RBP: 00007fd6893d3090 R08: 0000000000000005 R09: 0000000000000000 [ 406.704132][T12712] R10: 0000000020002100 R11: 0000000000000246 R12: 0000000000000001 [ 406.712128][T12712] R13: 0000000000000000 R14: 00007fd688776080 R15: 00007ffcf9159b68 [ 406.720143][T12712] [ 406.883297][T12715] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 407.064004][T12718] XFS: irix_sgid_inherit sysctl option is deprecated. [ 408.438361][T12748] netlink: 'syz.6.1855': attribute type 27 has an invalid length. [ 408.486947][T12748] netlink: 'syz.6.1855': attribute type 28 has an invalid length. [ 408.513601][T12748] netlink: 'syz.6.1855': attribute type 29 has an invalid length. [ 408.554193][T12748] netlink: 'syz.6.1855': attribute type 30 has an invalid length. [ 408.562095][T12748] netlink: 'syz.6.1855': attribute type 31 has an invalid length. [ 408.643495][T12748] netlink: 'syz.6.1855': attribute type 32 has an invalid length. [ 408.651918][T12748] netlink: 'syz.6.1855': attribute type 33 has an invalid length. [ 408.771453][T12748] netlink: 'syz.6.1855': attribute type 35 has an invalid length. [ 408.872848][T12748] netlink: 'syz.6.1855': attribute type 37 has an invalid length. [ 408.894319][T12748] netlink: 'syz.6.1855': attribute type 39 has an invalid length. [ 408.914509][T12748] netlink: 14 bytes leftover after parsing attributes in process `syz.6.1855'. [ 409.367007][T12759] XFS: irix_sgid_inherit sysctl option is deprecated. [ 409.824467][T12766] netlink: 53 bytes leftover after parsing attributes in process `syz.6.1860'. [ 409.869230][T12766] netlink: 53 bytes leftover after parsing attributes in process `syz.6.1860'. [ 411.688202][T12794] netlink: 326 bytes leftover after parsing attributes in process `syz.6.1870'. [ 412.996308][T12813] FAULT_INJECTION: forcing a failure. [ 412.996308][T12813] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 413.031943][T12813] CPU: 1 UID: 0 PID: 12813 Comm: syz.5.1875 Not tainted 6.13.0-rc2-syzkaller-00292-ga446e965a188 #0 [ 413.042766][T12813] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 413.052952][T12813] Call Trace: [ 413.056251][T12813] [ 413.059199][T12813] dump_stack_lvl+0x16c/0x1f0 [ 413.063900][T12813] should_fail_ex+0x497/0x5b0 [ 413.068592][T12813] _copy_to_user+0x32/0xd0 [ 413.073023][T12813] simple_read_from_buffer+0xd0/0x160 [ 413.078415][T12813] proc_fail_nth_read+0x198/0x270 [ 413.083450][T12813] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 413.089009][T12813] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 413.094565][T12813] vfs_read+0x1df/0xbe0 [ 413.098725][T12813] ? __fget_files+0x1fc/0x3a0 [ 413.103452][T12813] ? __pfx___mutex_lock+0x10/0x10 [ 413.108485][T12813] ? __pfx_vfs_read+0x10/0x10 [ 413.113172][T12813] ? __fget_files+0x206/0x3a0 [ 413.117863][T12813] ksys_read+0x12b/0x250 [ 413.122110][T12813] ? __pfx_ksys_read+0x10/0x10 [ 413.126887][T12813] do_syscall_64+0xcd/0x250 [ 413.131406][T12813] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 413.137309][T12813] RIP: 0033:0x7f4d9e18472c [ 413.141815][T12813] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 413.161432][T12813] RSP: 002b:00007f4d9eefd030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 413.169855][T12813] RAX: ffffffffffffffda RBX: 00007f4d9e376160 RCX: 00007f4d9e18472c [ 413.177828][T12813] RDX: 000000000000000f RSI: 00007f4d9eefd0a0 RDI: 0000000000000004 [ 413.185800][T12813] RBP: 00007f4d9eefd090 R08: 0000000000000000 R09: 0000000000000000 [ 413.193777][T12813] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 413.201748][T12813] R13: 0000000000000001 R14: 00007f4d9e376160 R15: 00007fff8dca2f28 [ 413.209741][T12813] [ 413.612884][T12819] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 413.667959][T12819] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 415.570603][T12823] netlink: 504 bytes leftover after parsing attributes in process `syz.4.1879'. [ 419.806542][T12932] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1908'. [ 420.456568][T12944] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1912'. [ 420.725892][T12954] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1914'. [ 420.750562][T12954] mac80211_hwsim hwsim18 wlan0: entered promiscuous mode [ 420.770392][T12954] mac80211_hwsim hwsim18 wlan0: entered allmulticast mode [ 423.216399][T12994] ubi0: attaching mtd0 [ 423.248838][T12994] ubi0: scanning is finished [ 423.253502][T12994] ubi0: empty MTD device detected [ 424.019587][T12994] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 424.053423][T12994] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 424.061170][T12994] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 424.103072][T12994] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 424.110512][T12994] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 424.152888][T12994] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 424.161340][T12994] ubi0: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 1233825022 [ 424.222488][T12994] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 424.263600][T13004] ubi0: background thread "ubi_bgt0d" started, PID 13004 [ 425.556734][T13012] netlink: 146 bytes leftover after parsing attributes in process `syz.0.1934'. [ 426.879553][T13043] netlink: 342 bytes leftover after parsing attributes in process `syz.4.1939'. [ 426.913386][T13043] IPv6: NLM_F_CREATE should be specified when creating new route [ 426.985060][T13043] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 426.992902][T13043] IPv6: NLM_F_CREATE should be set when creating new route [ 427.000189][T13043] IPv6: NLM_F_CREATE should be set when creating new route [ 428.307312][T13076] validate_nla: 3 callbacks suppressed [ 428.307334][T13076] netlink: 'syz.6.1950': attribute type 2 has an invalid length. [ 429.038074][T13089] XFS: irix_sgid_inherit sysctl option is deprecated. [ 431.823591][T13136] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 431.874221][T13136] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 431.891501][T13136] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 431.939285][T13136] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 431.963315][T13136] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 431.990159][T13136] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 432.031963][T13136] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 433.836881][ T5839] Bluetooth: hci2: command 0x0c1a tx timeout [ 433.904915][ T5839] Bluetooth: hci4: command 0x0406 tx timeout [ 433.982843][ T5839] Bluetooth: hci6: command 0x0406 tx timeout [ 433.982863][T12662] Bluetooth: hci5: command 0x0406 tx timeout [ 435.225656][T13192] nfsd: Unknown parameter 'nfsd' [ 435.497110][T13190] delete_channel: no stack [ 435.971584][ T5839] Bluetooth: hci4: command 0x0406 tx timeout [ 436.058990][ T5839] Bluetooth: hci6: command 0x0406 tx timeout [ 436.065245][ T5839] Bluetooth: hci5: command 0x0406 tx timeout [ 437.029698][T13221] netlink: 'syz.4.1995': attribute type 9 has an invalid length. [ 437.471687][T13235] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2002'. [ 438.304971][T13250] Process accounting resumed [ 438.319134][T13250] kernel write not supported for file netdevsim/netdevsim0/psample/latency_max (pid: 13250 comm: syz.4.2006) [ 438.529907][T13254] kernel write not supported for file netdevsim/netdevsim0/psample/latency_max (pid: 13254 comm: syz.4.2007) [ 438.857563][T13260] ubi: mtd0 is already attached to ubi0 [ 438.889035][T13256] kernel write not supported for file netdevsim/netdevsim0/psample/latency_max (pid: 13256 comm: syz.4.2009) [ 439.027875][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.034592][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 439.055470][T13267] kernel write not supported for file netdevsim/netdevsim0/psample/latency_max (pid: 13267 comm: syz.4.2013) [ 439.391864][T13276] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2015'. [ 439.555473][T13265] kernel write not supported for file netdevsim/netdevsim0/psample/latency_max (pid: 13265 comm: syz.4.2013) [ 439.716940][T13284] kernel write not supported for file netdevsim/netdevsim0/psample/latency_max (pid: 13284 comm: syz.4.2019) [ 439.832730][T13290] kernel write not supported for file netdevsim/netdevsim0/psample/latency_max (pid: 13290 comm: syz.4.2021) [ 440.112430][T13293] kernel write not supported for file netdevsim/netdevsim0/psample/latency_max (pid: 13293 comm: syz.4.2024) [ 441.187072][T13303] kernel write not supported for file netdevsim/netdevsim0/psample/latency_max (pid: 13303 comm: syz.4.2025) [ 441.291706][T13321] CIFS mount error: No usable UNC path provided in device string! [ 441.291706][T13321] [ 441.345287][T13321] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 441.377869][T13323] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2032'. [ 441.431953][T13325] kernel write not supported for file netdevsim/netdevsim0/psample/latency_max (pid: 13325 comm: syz.4.2033) [ 442.723396][T13349] nbd: must specify a size in bytes for the device [ 443.468569][T13364] netlink: 'syz.0.2046': attribute type 29 has an invalid length. [ 443.468597][T13364] netlink: 334 bytes leftover after parsing attributes in process `syz.0.2046'. [ 444.314241][T13361] warn_unsupported: 1 callbacks suppressed [ 444.314263][T13361] kernel write not supported for file netdevsim/netdevsim0/psample/latency_max (pid: 13361 comm: syz.4.2044) [ 444.529349][T13383] kernel write not supported for file netdevsim/netdevsim0/psample/latency_max (pid: 13383 comm: syz.4.2053) [ 445.157024][T13389] kernel write not supported for file netdevsim/netdevsim0/psample/latency_max (pid: 13389 comm: syz.4.2055) [ 445.474015][T13401] kernel write not supported for file netdevsim/netdevsim0/psample/latency_max (pid: 13401 comm: syz.4.2060) [ 446.104272][T13418] nbd: must specify a size in bytes for the device [ 446.217060][T13422] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2067'. [ 446.515611][T13410] kernel write not supported for file netdevsim/netdevsim0/psample/latency_max (pid: 13410 comm: syz.4.2062) [ 446.954969][T13438] FAULT_INJECTION: forcing a failure. [ 446.954969][T13438] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 447.027036][T13438] CPU: 1 UID: 0 PID: 13438 Comm: syz.5.2070 Not tainted 6.13.0-rc2-syzkaller-00292-ga446e965a188 #0 [ 447.037879][T13438] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 447.047966][T13438] Call Trace: [ 447.051269][T13438] [ 447.054226][T13438] dump_stack_lvl+0x16c/0x1f0 [ 447.058943][T13438] should_fail_ex+0x497/0x5b0 [ 447.063669][T13438] ? fs_reclaim_acquire+0xae/0x150 [ 447.068825][T13438] should_fail_alloc_page+0xe7/0x130 [ 447.074153][T13438] prepare_alloc_pages.constprop.0+0x16f/0x560 [ 447.080354][T13438] __alloc_pages_noprof+0x190/0x25b0 [ 447.085678][T13438] ? __pfx_mark_lock+0x10/0x10 [ 447.090497][T13438] ? __pfx_mark_lock+0x10/0x10 [ 447.095389][T13438] ? is_bpf_text_address+0x8a/0x1a0 [ 447.100626][T13438] ? __pfx_lock_release+0x10/0x10 [ 447.105693][T13438] ? trace_lock_acquire+0x14e/0x1f0 [ 447.110933][T13438] ? __pfx___alloc_pages_noprof+0x10/0x10 [ 447.116735][T13438] ? mark_lock+0xb5/0xc60 [ 447.121113][T13438] ? hlock_class+0x4e/0x130 [ 447.125668][T13438] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 447.131599][T13438] ? policy_nodemask+0xea/0x4e0 [ 447.136500][T13438] alloc_pages_mpol_noprof+0x2c9/0x610 [ 447.142012][T13438] ? __pfx_alloc_pages_mpol_noprof+0x10/0x10 [ 447.148040][T13438] ? find_held_lock+0x2d/0x110 [ 447.152857][T13438] __pmd_alloc+0x3f/0x860 [ 447.157225][T13438] __handle_mm_fault+0x94a/0x2a40 [ 447.162298][T13438] ? __pfx___handle_mm_fault+0x10/0x10 [ 447.167796][T13438] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 447.173480][T13438] ? find_vma+0xc0/0x140 [ 447.177753][T13438] ? __pfx_find_vma+0x10/0x10 [ 447.182465][T13438] handle_mm_fault+0x3fa/0xaa0 [ 447.187272][T13438] do_user_addr_fault+0x7a3/0x13f0 [ 447.192413][T13438] exc_page_fault+0x5c/0xc0 [ 447.196948][T13438] asm_exc_page_fault+0x26/0x30 [ 447.201835][T13438] RIP: 0010:__put_user_8+0x11/0x20 [ 447.206982][T13438] Code: 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 89 cb 48 c1 fb 3f 48 09 d9 0f 01 cb <48> 89 01 31 c9 0f 01 ca c3 cc cc cc cc 66 90 90 90 90 90 90 90 90 [ 447.226624][T13438] RSP: 0018:ffffc90003777eb0 EFLAGS: 00050206 [ 447.232726][T13438] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000009 [ 447.240722][T13438] RDX: 1ffff11005f71323 RSI: ffffffff81494b30 RDI: ffff88802fb89918 [ 447.248721][T13438] RBP: 0000000000000009 R08: 0000000000000000 R09: fffffbfff20398ea [ 447.256719][T13438] R10: ffffffff901cc757 R11: 0000000000000000 R12: ffff88802fb88000 [ 447.264720][T13438] R13: 000000000000009e R14: 0000000000000000 R15: 0000000000000000 [ 447.272731][T13438] ? shstk_prctl+0x300/0x6a0 [ 447.277366][T13438] shstk_prctl+0x333/0x6a0 [ 447.281819][T13438] do_arch_prctl_64+0x249/0x710 [ 447.286713][T13438] __x64_sys_arch_prctl+0x63/0xc0 [ 447.291779][T13438] do_syscall_64+0xcd/0x250 [ 447.296321][T13438] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 447.302513][T13438] RIP: 0033:0x7f4d9e185d19 [ 447.306954][T13438] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 447.326594][T13438] RSP: 002b:00007f4d9ef3f038 EFLAGS: 00000246 ORIG_RAX: 000000000000009e [ 447.335045][T13438] RAX: ffffffffffffffda RBX: 00007f4d9e375fa0 RCX: 00007f4d9e185d19 [ 447.343052][T13438] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 0000000000005005 [ 447.351064][T13438] RBP: 00007f4d9ef3f090 R08: 0000000000000000 R09: 0000000000000000 [ 447.359070][T13438] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 447.367074][T13438] R13: 0000000000000000 R14: 00007f4d9e375fa0 R15: 00007fff8dca2f28 [ 447.375098][T13438] [ 447.378191][ C1] vkms_vblank_simulate: vblank timer overrun [ 447.664407][T13448] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2074'. [ 449.863757][T12662] Bluetooth: hci2: SCO packet for unknown connection handle 0 [ 449.879585][T13432] kernel write not supported for file netdevsim/netdevsim0/psample/latency_max (pid: 13432 comm: syz.4.2068) [ 450.309289][T13495] CIFS mount error: No usable UNC path provided in device string! [ 450.309289][T13495] [ 450.357375][T13495] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 450.733619][T13497] Process accounting resumed [ 450.738383][T13497] kernel write not supported for file netdevsim/netdevsim0/psample/latency_max (pid: 13497 comm: syz.5.2089) [ 451.519341][T13509] kernel write not supported for file netdevsim/netdevsim0/psample/latency_max (pid: 13509 comm: syz.5.2090) [ 451.688537][T13530] kernel write not supported for file netdevsim/netdevsim0/psample/latency_max (pid: 13530 comm: syz.5.2095) [ 451.854263][T13429] kernel write not supported for file netdevsim/netdevsim0/psample/latency_max (pid: 13429 comm: syz.5.2066) [ 451.981200][T13535] kernel write not supported for file netdevsim/netdevsim0/psample/latency_max (pid: 13535 comm: syz.5.2097) [ 452.144462][T13523] kernel write not supported for file netdevsim/netdevsim0/psample/latency_max (pid: 13523 comm: syz.4.2088) [ 452.244615][T13546] kernel write not supported for file netdevsim/netdevsim0/psample/latency_max (pid: 13546 comm: syz.4.2100) [ 452.332073][T13548] kernel write not supported for file netdevsim/netdevsim0/psample/latency_max (pid: 13548 comm: syz.4.2101) [ 452.379625][ T29] audit: type=1804 audit(4294967485.464:40): pid=13548 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.2101" name="/newroot/sys/kernel/debug/tracing/per_cpu/cpu0/stats" dev="tracefs" ino=1225 res=1 errno=0 [ 452.633832][T13543] openvswitch: netlink: Flow actions attr not present in new flow. [ 452.811658][T13542] kernel write not supported for file netdevsim/netdevsim0/psample/latency_max (pid: 13542 comm: syz.5.2099) [ 453.404626][T13595] netlink: 334 bytes leftover after parsing attributes in process `syz.4.2115'. [ 454.384563][T13614] openvswitch: netlink: IP tunnel dst address not specified [ 454.406068][T13620] netlink: 'syz.6.2123': attribute type 46 has an invalid length. [ 454.448909][T13614] openvswitch: netlink: Message has 4 unknown bytes. [ 454.734744][T13636] netlink: 'syz.6.2127': attribute type 2 has an invalid length. [ 455.295684][T13641] warn_unsupported: 3 callbacks suppressed [ 455.295705][T13641] kernel write not supported for file netdevsim/netdevsim0/psample/latency_max (pid: 13641 comm: syz.5.2129) [ 455.391069][T13663] netlink: 'syz.0.2134': attribute type 1 has an invalid length. [ 455.399305][T13663] nbd: error processing sock list [ 455.500258][T13663] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2134'. [ 455.556548][T13666] kernel write not supported for file netdevsim/netdevsim0/psample/latency_max (pid: 13666 comm: syz.5.2135) [ 455.671940][T13675] kernel write not supported for file netdevsim/netdevsim0/psample/latency_max (pid: 13675 comm: syz.5.2137) [ 455.763565][T13683] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2139'. [ 455.877322][T13685] kernel write not supported for file netdevsim/netdevsim0/psample/latency_max (pid: 13685 comm: syz.5.2140) [ 456.102994][T13693] kernel write not supported for file netdevsim/netdevsim0/psample/latency_max (pid: 13693 comm: syz.5.2142) [ 456.631788][T13705] kernel write not supported for file netdevsim/netdevsim0/psample/latency_max (pid: 13705 comm: syz.5.2144) [ 457.038365][T13723] kernel write not supported for file netdevsim/netdevsim0/psample/latency_max (pid: 13723 comm: syz.5.2148) [ 457.724214][T13752] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2155'. [ 457.827357][T13752] bond0: (slave bond_slave_0): Releasing backup interface [ 458.061546][T13760] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2158'. [ 458.075807][T13760] macsec0: entered allmulticast mode [ 458.098695][T13760] veth1_macvtap: entered allmulticast mode [ 458.533542][T13741] kernel write not supported for file netdevsim/netdevsim0/psample/latency_max (pid: 13741 comm: syz.5.2153) [ 459.840659][T13773] kernel write not supported for file netdevsim/netdevsim0/psample/latency_max (pid: 13773 comm: syz.5.2163) [ 459.919645][T13815] nbd: must specify at least one socket [ 460.149971][T13700] kernel write not supported for file netdevsim/netdevsim0/psample/latency_max (pid: 13700 comm: syz.5.2142) [ 460.328458][T13823] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2172'. [ 460.870496][T13817] kernel write not supported for file netdevsim/netdevsim0/psample/latency_max (pid: 13817 comm: syz.5.2171) [ 461.107294][T13823] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 461.198846][T13835] kernel write not supported for file netdevsim/netdevsim0/psample/latency_max (pid: 13835 comm: syz.5.2176) [ 461.215418][T13823] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 461.258822][T13823] bond0 (unregistering): Released all slaves [ 461.864476][T13847] kernel write not supported for file netdevsim/netdevsim0/psample/latency_max (pid: 13847 comm: syz.5.2178) [ 462.494511][T13858] netlink: 504 bytes leftover after parsing attributes in process `syz.5.2185'. [ 462.746521][T13865] kernel write not supported for file netdevsim/netdevsim0/psample/latency_max (pid: 13865 comm: syz.5.2185) [ 462.796778][T13861] kernel write not supported for file netdevsim/netdevsim0/psample/latency_max (pid: 13861 comm: syz.5.2185) [ 462.981066][T13870] kernel write not supported for file netdevsim/netdevsim0/psample/latency_max (pid: 13870 comm: syz.5.2189) [ 463.130174][ T29] audit: type=1800 audit(4294967496.260:41): pid=13878 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.2191" name="trace_pipe" dev="tracefs" ino=1222 res=0 errno=0 [ 463.213441][T13869] netlink: 93 bytes leftover after parsing attributes in process `syz.6.2187'. [ 463.945624][T13880] kernel write not supported for file netdevsim/netdevsim0/psample/latency_max (pid: 13880 comm: syz.5.2190) [ 464.143327][T13892] kernel write not supported for file netdevsim/netdevsim0/psample/latency_max (pid: 13892 comm: syz.5.2196) [ 464.454023][T13903] kernel write not supported for file netdevsim/netdevsim0/psample/latency_max (pid: 13903 comm: syz.5.2199) [ 464.588127][T13902] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2198'. [ 464.861258][T13915] kernel write not supported for file netdevsim/netdevsim0/psample/latency_max (pid: 13915 comm: syz.5.2202) [ 465.076526][T13921] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2203'. [ 466.103501][T13932] warn_unsupported: 1 callbacks suppressed [ 466.103522][T13932] kernel write not supported for file netdevsim/netdevsim0/psample/latency_max (pid: 13932 comm: syz.5.2207) [ 467.117789][T13972] sock: sock_set_timeout: `syz.4.2219' (pid 13972) tries to set negative timeout [ 467.699532][T13983] netlink: 172 bytes leftover after parsing attributes in process `syz.4.2222'. [ 467.716206][T13983] netlink: 172 bytes leftover after parsing attributes in process `syz.4.2222'. [ 468.246887][T13953] kernel write not supported for file netdevsim/netdevsim0/psample/latency_max (pid: 13953 comm: syz.5.2211) [ 468.467204][T13989] kernel write not supported for file netdevsim/netdevsim0/psample/latency_max (pid: 13989 comm: syz.5.2224) [ 468.607381][T14002] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2226'. [ 468.794474][T13999] netlink: 338 bytes leftover after parsing attributes in process `syz.5.2228'. [ 469.159156][T14006] kernel write not supported for file netdevsim/netdevsim0/psample/latency_max (pid: 14006 comm: syz.5.2228) [ 469.522759][T14014] kernel write not supported for file netdevsim/netdevsim0/psample/latency_max (pid: 14014 comm: syz.5.2232) [ 469.786364][T14029] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2235'. [ 470.008378][T14029] bond0: (slave bond_slave_0): Releasing backup interface [ 470.032926][T14031] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2234'. [ 470.569599][T14023] kernel write not supported for file netdevsim/netdevsim0/psample/latency_max (pid: 14023 comm: syz.5.2235) [ 471.909457][T14070] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2245'. [ 472.651399][T14095] netlink: 326 bytes leftover after parsing attributes in process `syz.6.2249'. [ 473.426568][T14052] kernel write not supported for file netdevsim/netdevsim0/psample/latency_max (pid: 14052 comm: syz.5.2242) [ 474.371229][T14113] kernel write not supported for file netdevsim/netdevsim0/psample/latency_max (pid: 14113 comm: syz.5.2256) [ 474.731429][T14132] kernel write not supported for file netdevsim/netdevsim0/psample/latency_max (pid: 14132 comm: syz.5.2260) [ 474.947282][T14144] kernel write not supported for file netdevsim/netdevsim0/psample/latency_max (pid: 14144 comm: syz.5.2263) [ 475.578928][T14159] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2267'. [ 477.854148][T14217] dyndbg: bad flag-op 6, at start of 65536 [ 477.883477][T14217] dyndbg: flags parse failed [ 478.318846][T14227] netlink: 338 bytes leftover after parsing attributes in process `syz.6.2290'. [ 479.054129][T14243] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2296'. [ 481.929085][T14289] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2303'. [ 482.153491][T14285] netlink: 338 bytes leftover after parsing attributes in process `syz.6.2307'. [ 484.064588][ T29] audit: type=1804 audit(4294967517.309:42): pid=14333 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.2322" name="#)-\&[}" dev="mqueue" ino=40420 res=1 errno=0 [ 484.064600][T14333] kernel read not supported for file /#)-\&[} (pid: 14333 comm: syz.5.2322) [ 484.224539][ T29] audit: type=1804 audit(4294967517.470:43): pid=14336 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.5.2322" name="#)-\&[}" dev="mqueue" ino=40420 res=1 errno=0 [ 484.265394][ T29] audit: type=1804 audit(4294967517.470:44): pid=14336 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.5.2322" name="#)-\&[}" dev="mqueue" ino=40420 res=1 errno=0 [ 484.300320][ T29] audit: type=1800 audit(4294967517.500:45): pid=14333 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.2322" name="#)-\&[}" dev="mqueue" ino=40420 res=0 errno=0 [ 486.493913][ T29] audit: type=1800 audit(4294967519.752:46): pid=14368 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.2332" name="SYSV00000008" dev="hugetlbfs" ino=0 res=0 errno=0 [ 486.654112][T14378] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2334'. [ 486.680353][T14378] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 487.413847][T14401] netlink: 342 bytes leftover after parsing attributes in process `syz.0.2339'. [ 487.526317][T14404] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2340'. [ 487.544549][T14404] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2340'. [ 487.804344][T14412] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2342'. [ 488.538899][T14442] lo: entered allmulticast mode [ 488.547599][T14441] lo: left allmulticast mode [ 488.819709][T14455] dyndbg: bad flag-op 4, at start of 4096 [ 488.825491][T14455] dyndbg: flags parse failed [ 489.031276][T14463] FAULT_INJECTION: forcing a failure. [ 489.031276][T14463] name failslab, interval 1, probability 0, space 0, times 0 [ 489.101649][T14463] CPU: 1 UID: 0 PID: 14463 Comm: syz.4.2362 Not tainted 6.13.0-rc2-syzkaller-00292-ga446e965a188 #0 [ 489.112479][T14463] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 489.122572][T14463] Call Trace: [ 489.125876][T14463] [ 489.128833][T14463] dump_stack_lvl+0x16c/0x1f0 [ 489.133547][T14463] should_fail_ex+0x497/0x5b0 [ 489.138260][T14463] ? fs_reclaim_acquire+0xae/0x150 [ 489.143404][T14463] should_failslab+0xc2/0x120 [ 489.148119][T14463] __kmalloc_node_noprof+0xd1/0x520 [ 489.153356][T14463] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 489.158758][T14463] ? __kvmalloc_node_noprof+0xad/0x1a0 [ 489.164257][T14463] __kvmalloc_node_noprof+0xad/0x1a0 [ 489.169585][T14463] proc_sys_call_handler+0x2f6/0x5d0 [ 489.174908][T14463] ? __pfx_proc_sys_call_handler+0x10/0x10 [ 489.180762][T14463] vfs_write+0x5ae/0x1150 [ 489.185128][T14463] ? __pfx_proc_sys_write+0x10/0x10 [ 489.190357][T14463] ? __pfx_lock_release+0x10/0x10 [ 489.195415][T14463] ? __pfx_vfs_write+0x10/0x10 [ 489.200362][T14463] ? lock_acquire+0x2f/0xb0 [ 489.204869][T14463] ? __fget_files+0x40/0x3a0 [ 489.209477][T14463] __x64_sys_pwrite64+0x1f6/0x250 [ 489.214514][T14463] ? __pfx___x64_sys_pwrite64+0x10/0x10 [ 489.220085][T14463] do_syscall_64+0xcd/0x250 [ 489.224598][T14463] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 489.230499][T14463] RIP: 0033:0x7fba75985d19 [ 489.235003][T14463] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 489.254701][T14463] RSP: 002b:00007fba76870038 EFLAGS: 00000246 ORIG_RAX: 0000000000000012 [ 489.263118][T14463] RAX: ffffffffffffffda RBX: 00007fba75b75fa0 RCX: 00007fba75985d19 [ 489.271093][T14463] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000004 [ 489.279065][T14463] RBP: 00007fba76870090 R08: 0000000000000000 R09: 0000000000000000 [ 489.287039][T14463] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000001 [ 489.295009][T14463] R13: 0000000000000000 R14: 00007fba75b75fa0 R15: 00007fff8c4cf048 [ 489.302993][T14463] [ 489.306127][ C1] vkms_vblank_simulate: vblank timer overrun [ 489.635361][T14480] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 489.729555][T14480] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 491.428632][T14519] netlink: 130 bytes leftover after parsing attributes in process `syz.6.2379'. [ 492.309853][T14539] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2386'. [ 492.364465][T14539] HfR: entered promiscuous mode [ 492.380661][T14542] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2386'. [ 492.943671][T14558] netlink: 4352 bytes leftover after parsing attributes in process `syz.0.2393'. [ 493.161427][T14549] netlink: 93 bytes leftover after parsing attributes in process `syz.6.2388'. [ 493.939868][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 494.794858][T14604] futex_wake_op: syz.4.2401 tries to shift op by 64; fix this program [ 494.922138][T14603] ima: policy update failed [ 494.955289][ T29] audit: type=1802 audit(4294967528.266:47): pid=14603 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.4.2401" res=0 errno=0 [ 495.174775][T14600] netlink: 'syz.6.2399': attribute type 9 has an invalid length. [ 495.187031][T14615] serio: Serial port ptm0 [ 497.405047][T14680] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2426'. [ 497.960458][T14700] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2430'. [ 498.543190][T14712] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2433'. [ 500.129841][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 500.136265][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 500.735457][T14756] kernel read not supported for file /#)-\&[} (pid: 14756 comm: syz.0.2449) [ 500.811201][ T29] audit: type=1800 audit(4294967534.146:48): pid=14756 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2449" name="#)-\&[}" dev="mqueue" ino=7108 res=0 errno=0 [ 501.978195][T14798] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2464'. [ 502.286936][T14812] dyndbg: bad flag-op 4, at start of 4096 [ 502.293316][T14812] dyndbg: flags parse failed [ 502.412831][T14816] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2468'. [ 502.463095][T14818] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2468'. [ 502.764627][T14832] CIFS mount error: No usable UNC path provided in device string! [ 502.764627][T14832] [ 502.803702][T14832] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 502.878513][T14830] netlink: 334 bytes leftover after parsing attributes in process `syz.6.2472'. [ 503.591026][T14851] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2477'. [ 503.712203][T14854] dyndbg: bad flag-op 4, at start of 4096 [ 503.724037][T14854] dyndbg: flags parse failed [ 504.396906][T14865] netlink: 'syz.0.2485': attribute type 9 has an invalid length. [ 504.567144][T14885] dyndbg: bad flag-op 4, at start of 4096 [ 504.574858][T14885] dyndbg: flags parse failed [ 505.285871][T14913] netlink: 334 bytes leftover after parsing attributes in process `syz.6.2501'. [ 506.146663][ T5839] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 506.163499][ T5839] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 506.193556][ T5839] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 506.235951][ T5839] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 506.285714][ T5839] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 506.293078][ T5839] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 506.691414][T14931] chnl_net:caif_netlink_parms(): no params data found [ 506.790323][T14931] bridge0: port 1(bridge_slave_0) entered blocking state [ 506.801078][T14931] bridge0: port 1(bridge_slave_0) entered disabled state [ 506.810212][T14931] bridge_slave_0: entered allmulticast mode [ 506.817757][T14931] bridge_slave_0: entered promiscuous mode [ 506.826664][T14931] bridge0: port 2(bridge_slave_1) entered blocking state [ 506.834169][T14931] bridge0: port 2(bridge_slave_1) entered disabled state [ 506.841462][T14931] bridge_slave_1: entered allmulticast mode [ 506.849009][T14931] bridge_slave_1: entered promiscuous mode [ 506.877591][T14931] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 506.889274][T14931] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 506.990993][T14931] team0: Port device team_slave_0 added [ 507.046361][T14931] team0: Port device team_slave_1 added [ 507.137669][T14931] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 507.156081][T14931] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 507.182021][ C1] vkms_vblank_simulate: vblank timer overrun [ 507.220853][T14931] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 507.247864][T14931] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 507.255325][T14931] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 507.281268][ C1] vkms_vblank_simulate: vblank timer overrun [ 507.300353][T14931] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 507.443026][T14931] hsr_slave_0: entered promiscuous mode [ 507.460224][T14931] hsr_slave_1: entered promiscuous mode [ 507.769581][T14968] netlink: 206 bytes leftover after parsing attributes in process `syz.5.2519'. [ 508.047932][T14931] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 508.212672][T14931] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 508.315482][T14931] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 508.316070][ T5839] Bluetooth: hci0: command tx timeout [ 508.477314][T14931] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 508.697641][T14931] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 508.725450][T14931] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 508.748217][T14931] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 508.757852][T14931] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 508.897083][T14931] 8021q: adding VLAN 0 to HW filter on device bond0 [ 508.992642][T14931] 8021q: adding VLAN 0 to HW filter on device team0 [ 509.004433][ T9705] bridge0: port 1(bridge_slave_0) entered blocking state [ 509.011617][ T9705] bridge0: port 1(bridge_slave_0) entered forwarding state [ 509.065440][ T9705] bridge0: port 2(bridge_slave_1) entered blocking state [ 509.072614][ T9705] bridge0: port 2(bridge_slave_1) entered forwarding state [ 509.905144][T14931] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 510.054967][T14931] veth0_vlan: entered promiscuous mode [ 510.092217][T14931] veth1_vlan: entered promiscuous mode [ 510.189078][T14931] veth0_macvtap: entered promiscuous mode [ 510.219437][T14931] veth1_macvtap: entered promiscuous mode [ 510.306282][T14931] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 510.336759][T14931] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 510.368867][T14931] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 510.403463][ T5839] Bluetooth: hci0: command tx timeout [ 510.433995][T14931] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 510.468340][T14931] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 510.516100][T14931] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 510.549033][T14931] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 510.571104][T14931] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 510.602325][T14931] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 510.626194][T14931] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 510.650852][T14931] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 510.674135][T14931] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 510.695033][T14931] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 510.717537][T14931] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 510.741336][T14999] netlink: 342 bytes leftover after parsing attributes in process `syz.4.2525'. [ 510.758961][T14931] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 510.774942][T14931] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 510.792286][T14931] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 510.807887][T14931] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 510.936678][ T9705] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 510.961770][ T9705] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 511.019190][ T9702] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 511.029829][ T9702] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 512.463620][ T5839] Bluetooth: hci0: command tx timeout [ 512.984644][T15054] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2542'. [ 513.203409][T15062] netlink: 342 bytes leftover after parsing attributes in process `syz.6.2543'. [ 514.522929][ T5839] Bluetooth: hci0: command tx timeout [ 514.788410][T15118] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2556'. [ 515.028610][T15124] netlink: 'syz.5.2558': attribute type 27 has an invalid length. [ 515.043960][T15124] netlink: 'syz.5.2558': attribute type 28 has an invalid length. [ 515.087633][T15124] netlink: 'syz.5.2558': attribute type 29 has an invalid length. [ 515.112832][T15124] netlink: 'syz.5.2558': attribute type 30 has an invalid length. [ 515.133694][T15124] netlink: 'syz.5.2558': attribute type 31 has an invalid length. [ 515.150074][T15124] netlink: 'syz.5.2558': attribute type 32 has an invalid length. [ 515.167244][T15124] netlink: 'syz.5.2558': attribute type 33 has an invalid length. [ 515.180332][T15124] netlink: 'syz.5.2558': attribute type 35 has an invalid length. [ 515.228831][T15124] netlink: 'syz.5.2558': attribute type 37 has an invalid length. [ 515.266097][T15124] netlink: 'syz.5.2558': attribute type 39 has an invalid length. [ 515.304647][T15124] netlink: 14 bytes leftover after parsing attributes in process `syz.5.2558'. [ 517.603198][T15191] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2578'. [ 517.643964][T15191] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2578'. [ 517.968497][T15204] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2580'. [ 519.015201][T15210] kexec: Could not allocate control_code_buffer [ 521.076044][T15284] validate_nla: 2 callbacks suppressed [ 521.076065][T15284] netlink: 'syz.6.2606': attribute type 2 has an invalid length. [ 521.201875][T15286] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2608'. [ 521.212855][T15286] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2608'. [ 521.743927][T15305] netlink: 504 bytes leftover after parsing attributes in process `syz.0.2612'. [ 524.208234][T15356] HfR: entered promiscuous mode [ 524.311613][T15356] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2627'. [ 525.312436][T15375] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2636'. [ 526.508682][T15403] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2642'. [ 527.068579][T15415] netlink: 146 bytes leftover after parsing attributes in process `syz.0.2645'. [ 528.523305][T15436] ecryptfs_miscdev_write: Dropping miscdev message of unrecognized type [0] [ 529.455989][T15445] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2655'. [ 529.634631][T15451] futex_wake_op: syz.4.2657 tries to shift op by 64; fix this program [ 529.690398][ T29] audit: type=1807 audit(4294967563.136:49): UNKNOWN=$ res=0 [ 529.698865][ T29] audit: type=1802 audit(4294967563.136:50): pid=15451 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.4.2657" res=0 errno=0 [ 530.519601][T15450] ima: policy update failed [ 530.525256][ T29] audit: type=1802 audit(4294967564.011:51): pid=15450 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.4.2657" res=0 errno=0 [ 530.978025][T15486] futex_wake_op: syz.0.2664 tries to shift op by 64; fix this program [ 531.118704][T15492] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2664'. [ 531.866101][T15509] netlink: 'syz.5.2672': attribute type 1 has an invalid length. [ 531.877180][T15507] netlink: 342 bytes leftover after parsing attributes in process `syz.4.2671'. [ 531.889536][T15507] netlink: 342 bytes leftover after parsing attributes in process `syz.4.2671'. [ 532.310519][T15526] can: request_module (can-proto-3) failed. [ 534.634956][T15582] netlink: 'syz.5.2695': attribute type 4 has an invalid length. [ 536.707300][T15630] dyndbg: bad flag-op 4, at start of 4096 [ 536.732692][T15630] dyndbg: flags parse failed [ 537.087969][T15619] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2710'. [ 537.809363][T15657] smc: net device syz_tun applied user defined pnetid ETHTOOL [ 539.195789][T15689] netlink: zone id is out of range [ 539.205764][T15689] netlink: zone id is out of range [ 539.210916][T15689] netlink: zone id is out of range [ 539.248135][T15689] netlink: zone id is out of range [ 539.253305][T15689] netlink: zone id is out of range [ 539.291553][T15689] netlink: zone id is out of range [ 539.306146][T15689] netlink: zone id is out of range [ 539.312253][T15689] netlink: zone id is out of range [ 539.331615][T15689] netlink: zone id is out of range [ 539.341702][T15689] netlink: zone id is out of range [ 540.647217][T15710] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2740'. [ 542.644592][T15735] netlink: 'syz.4.2749': attribute type 46 has an invalid length. [ 543.054824][T15748] netlink: 'syz.5.2752': attribute type 1 has an invalid length. [ 543.068186][T15748] nbd: error processing sock list [ 543.623364][T15754] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2754'. [ 544.167066][T15773] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2760'. [ 544.313515][T15773] hsr_slave_1 (unregistering): left promiscuous mode [ 544.964227][T15795] netlink: 334 bytes leftover after parsing attributes in process `syz.6.2767'. [ 545.519595][T15809] netlink: 342 bytes leftover after parsing attributes in process `syz.0.2770'. [ 545.955865][T15829] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2775'. [ 545.976855][T15829] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 546.005870][T15829] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 546.042482][T15829] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 546.079252][T15829] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 546.348762][T15846] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2779'. [ 546.879647][T15853] Invalid ELF header magic: != ELF [ 550.725844][T15985] netlink: 'syz.4.2820': attribute type 1 has an invalid length. [ 553.593546][T16044] netlink: 342 bytes leftover after parsing attributes in process `syz.4.2841'. [ 555.341409][T16066] misc userio: Invalid payload size [ 558.342086][T16119] net_ratelimit: 3 callbacks suppressed [ 558.342109][T16119] openvswitch: netlink: nsh attr 160 is out of range max 3 [ 558.505478][T16119] Invalid ELF header magic: != ELF [ 558.710441][T16128] lo: entered allmulticast mode [ 558.745287][T16128] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2863'. [ 558.766517][T16127] lo: left allmulticast mode [ 559.088371][ T9690] [drm:drm_crtc_add_crc_entry] *ERROR* Overflow of CRC buffer, userspace reads too slow. [ 559.233795][T16144] kernel read not supported for file /#)-\&[} (pid: 16144 comm: syz.6.2866) [ 559.240159][ T29] audit: type=1804 audit(4294967592.870:52): pid=16144 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.6.2866" name="#)-\&[}" dev="mqueue" ino=47314 res=1 errno=0 [ 559.319813][ T29] audit: type=1800 audit(4294967592.940:53): pid=16144 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.2866" name="#)-\&[}" dev="mqueue" ino=47314 res=0 errno=0 [ 559.378700][ T29] audit: type=1804 audit(4294967592.940:54): pid=16145 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.6.2866" name="#)-\&[}" dev="mqueue" ino=47314 res=1 errno=0 [ 559.449895][ T29] audit: type=1804 audit(4294967592.940:55): pid=16145 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.6.2866" name="#)-\&[}" dev="mqueue" ino=47314 res=1 errno=0 [ 560.863431][T16182] can: request_module (can-proto-5) failed. [ 561.252146][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 561.258479][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 562.480228][T16221] netlink: 56 bytes leftover after parsing attributes in process `syz.6.2891'. [ 562.587687][T16216] netlink: 342 bytes leftover after parsing attributes in process `syz.0.2887'. [ 562.834065][T16228] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2894'. [ 564.179042][T16251] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 566.353260][T16294] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 566.378379][T16294] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 568.746567][T16343] FAULT_INJECTION: forcing a failure. [ 568.746567][T16343] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 568.780711][T16343] CPU: 1 UID: 0 PID: 16343 Comm: syz.4.2932 Not tainted 6.13.0-rc2-syzkaller-00292-ga446e965a188 #0 [ 568.791539][T16343] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 568.801629][T16343] Call Trace: [ 568.804927][T16343] [ 568.807878][T16343] dump_stack_lvl+0x16c/0x1f0 [ 568.812596][T16343] should_fail_ex+0x497/0x5b0 [ 568.817327][T16343] _copy_from_iter+0x29b/0x1400 [ 568.822219][T16343] ? trace_lock_acquire+0x14e/0x1f0 [ 568.827460][T16343] ? __pfx__copy_from_iter+0x10/0x10 [ 568.832785][T16343] ? __virt_addr_valid+0x1a4/0x590 [ 568.837944][T16343] ? __virt_addr_valid+0x5e/0x590 [ 568.843031][T16343] ? __phys_addr_symbol+0x30/0x80 [ 568.848090][T16343] ? __check_object_size+0x488/0x710 [ 568.853419][T16343] proc_sys_call_handler+0x361/0x5d0 [ 568.858744][T16343] ? __pfx_proc_sys_call_handler+0x10/0x10 [ 568.864599][T16343] vfs_write+0x5ae/0x1150 [ 568.868971][T16343] ? __pfx_proc_sys_write+0x10/0x10 [ 568.874216][T16343] ? __pfx_lock_release+0x10/0x10 [ 568.879290][T16343] ? __pfx_vfs_write+0x10/0x10 [ 568.884090][T16343] ? lock_acquire+0x2f/0xb0 [ 568.888602][T16343] ? __fget_files+0x40/0x3a0 [ 568.893215][T16343] __x64_sys_pwrite64+0x1f6/0x250 [ 568.898249][T16343] ? __pfx___x64_sys_pwrite64+0x10/0x10 [ 568.903814][T16343] do_syscall_64+0xcd/0x250 [ 568.908329][T16343] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 568.914235][T16343] RIP: 0033:0x7fba75985d19 [ 568.918655][T16343] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 568.938271][T16343] RSP: 002b:00007fba76870038 EFLAGS: 00000246 ORIG_RAX: 0000000000000012 [ 568.946695][T16343] RAX: ffffffffffffffda RBX: 00007fba75b75fa0 RCX: 00007fba75985d19 [ 568.954683][T16343] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000004 [ 568.962654][T16343] RBP: 00007fba76870090 R08: 0000000000000000 R09: 0000000000000000 [ 568.970628][T16343] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000001 [ 568.978600][T16343] R13: 0000000000000000 R14: 00007fba75b75fa0 R15: 00007fff8c4cf048 [ 568.986594][T16343] [ 568.989715][ C1] vkms_vblank_simulate: vblank timer overrun [ 569.596501][T16366] netlink: 334 bytes leftover after parsing attributes in process `syz.4.2936'. [ 572.363385][T16455] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2960'. [ 572.414560][T16459] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2960'. [ 572.416565][T16455] HfR: entered promiscuous mode [ 574.043773][T16492] futex_wake_op: syz.4.2971 tries to shift op by 64; fix this program [ 574.158829][T16492] ima: policy update failed [ 574.186855][ T29] audit: type=1802 audit(4294967607.888:56): pid=16492 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.4.2971" res=0 errno=0 [ 575.005614][T16518] openvswitch: netlink: Geneve opt len 2 is not a multiple of 4. [ 575.242442][T16533] vivid-009: ================= START STATUS ================= [ 575.262586][T16533] vivid-009: Test Pattern: 75% Colorbar [ 575.270623][T16533] vivid-009: Fill Percentage of Frame: 100 [ 575.284347][T16533] vivid-009: Horizontal Movement: No Movement [ 575.293074][T16533] vivid-009: Vertical Movement: No Movement [ 575.300388][T16533] vivid-009: OSD Text Mode: All [ 575.305298][T16533] vivid-009: Show Border: false [ 575.323776][T16533] vivid-009: Show Square: false [ 575.331784][T16533] vivid-009: Sensor Flipped Horizontally: false [ 575.353457][T16533] vivid-009: Sensor Flipped Vertically: false [ 575.373686][T16533] vivid-009: Insert SAV Code in Image: false [ 575.386325][T16533] vivid-009: Insert EAV Code in Image: false [ 575.411305][T16533] vivid-009: Insert Video Guard Band: false [ 575.426185][T16533] vivid-009: Reduced Framerate: false [ 575.438980][T16533] vivid-009: HDMI 009-0 Is Connected To: Test Pattern Generator [ 575.460467][T16533] vivid-009: S-Video 009-0 Is Connected To: Test Pattern Generator [ 575.475857][T16533] vivid-009: Enable Capture Cropping: true [ 575.489572][T16533] vivid-009: Enable Capture Composing: true [ 575.523193][T16533] vivid-009: Enable Capture Scaler: true [ 575.557329][T16533] vivid-009: Timestamp Source: End of Frame [ 575.589129][T16533] vivid-009: Colorspace: sRGB [ 575.606514][T16533] vivid-009: Transfer Function: Default [ 575.620534][T16533] vivid-009: Y'CbCr Encoding: Default [ 575.648577][T16533] vivid-009: HSV Encoding: Hue 0-179 [ 575.671661][T16533] vivid-009: Quantization: Default [ 575.688424][T16533] vivid-009: Apply Alpha To Red Only: false [ 575.711176][T16533] vivid-009: Standard Aspect Ratio: 4x3 [ 575.730820][T16533] vivid-009: DV Timings Signal Mode: Current DV Timings inactive [ 575.751650][T16533] vivid-009: DV Timings: 640x480p59 inactive [ 575.759265][T16533] vivid-009: DV Timings Aspect Ratio: Source Width x Height [ 575.776750][T16533] vivid-009: Maximum EDID Blocks: 2 [ 575.782196][T16533] vivid-009: Limited RGB Range (16-235): false [ 575.791228][T16533] vivid-009: Rx RGB Quantization Range: Automatic [ 575.799230][T16533] vivid-009: Power Present: 0x00000001 [ 575.810367][T16533] tpg source WxH: 640x360 (Y'CbCr) [ 575.818972][T16533] tpg field: 1 [ 575.822500][T16533] tpg crop: 640x360@0x0 [ 575.829551][T16533] tpg compose: 640x360@0x0 [ 575.846484][T16533] tpg colorspace: 8 [ 575.851883][T16533] tpg transfer function: 0/0 [ 575.861339][T16533] tpg Y'CbCr encoding: 0/0 [ 575.870810][T16533] tpg quantization: 0/0 [ 575.879385][T16533] tpg RGB range: 0/2 [ 575.891997][T16533] vivid-009: ================== END STATUS ================== [ 577.130561][T16563] misc userio: No port type given on /dev/userio [ 577.848146][T16574] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2996'. [ 579.118837][T16590] netlink: 504 bytes leftover after parsing attributes in process `syz.6.3000'. [ 580.621352][T16612] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3005'. [ 580.693496][T16612] vxcan1: entered promiscuous mode [ 581.439456][T16634] RDS: rds_bind could not find a transport for ::ffff:172.30.0.5, load rds_tcp or rds_rdma? [ 582.031187][T16644] binder: 16643:16644 ioctl c00c620f 800000000000003 returned -14 [ 582.439143][T16662] mmap: syz.0.3022 (16662): VmData 37470208 exceed data ulimit 3. Update limits or use boot option ignore_rlimit_data. [ 582.787373][T16670] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3024'. [ 583.011250][T16675] openvswitch: HSR: Dropping previously announced user features [ 583.802054][T16693] CIFS mount error: No usable UNC path provided in device string! [ 583.802054][T16693] [ 583.842516][T16693] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 584.905640][T16724] CIFS mount error: No usable UNC path provided in device string! [ 584.905640][T16724] [ 584.997298][T16724] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 588.381212][T16795] FAULT_INJECTION: forcing a failure. [ 588.381212][T16795] name failslab, interval 1, probability 0, space 0, times 0 [ 588.445311][T16795] CPU: 1 UID: 0 PID: 16795 Comm: syz.4.3065 Not tainted 6.13.0-rc2-syzkaller-00292-ga446e965a188 #0 [ 588.456140][T16795] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 588.466313][T16795] Call Trace: [ 588.469616][T16795] [ 588.472572][T16795] dump_stack_lvl+0x16c/0x1f0 [ 588.477285][T16795] should_fail_ex+0x497/0x5b0 [ 588.481997][T16795] ? fs_reclaim_acquire+0xae/0x150 [ 588.487147][T16795] should_failslab+0xc2/0x120 [ 588.491865][T16795] __kmalloc_noprof+0xce/0x4f0 [ 588.496666][T16795] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 588.502329][T16795] ? tomoyo_realpath_from_path+0xbf/0x710 [ 588.508087][T16795] tomoyo_realpath_from_path+0xbf/0x710 [ 588.513669][T16795] ? tomoyo_path_number_perm+0x235/0x5b0 [ 588.519345][T16795] tomoyo_path_number_perm+0x248/0x5b0 [ 588.524850][T16795] ? tomoyo_path_number_perm+0x235/0x5b0 [ 588.530543][T16795] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 588.536597][T16795] ? __pfx_lock_release+0x10/0x10 [ 588.541663][T16795] ? trace_lock_acquire+0x14e/0x1f0 [ 588.546906][T16795] ? lock_acquire+0x2f/0xb0 [ 588.551435][T16795] ? __fget_files+0x40/0x3a0 [ 588.556064][T16795] ? __fget_files+0x206/0x3a0 [ 588.560776][T16795] security_file_ioctl+0x9b/0x240 [ 588.565833][T16795] __x64_sys_ioctl+0xb7/0x200 [ 588.570563][T16795] do_syscall_64+0xcd/0x250 [ 588.575099][T16795] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 588.581113][T16795] RIP: 0033:0x7fba75985d19 [ 588.585565][T16795] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 588.605204][T16795] RSP: 002b:00007fba76870038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 588.613657][T16795] RAX: ffffffffffffffda RBX: 00007fba75b75fa0 RCX: 00007fba75985d19 [ 588.621658][T16795] RDX: 100000000000afcb RSI: 0000000000004b72 RDI: 0000000000000003 [ 588.629659][T16795] RBP: 00007fba76870090 R08: 0000000000000000 R09: 0000000000000000 [ 588.637664][T16795] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 588.645678][T16795] R13: 0000000000000000 R14: 00007fba75b75fa0 R15: 00007fff8c4cf048 [ 588.653705][T16795] [ 588.675487][T16795] ERROR: Out of memory at tomoyo_realpath_from_path. [ 588.892931][T16802] netlink: 342 bytes leftover after parsing attributes in process `syz.6.3068'. [ 588.927052][T16802] netlink: 342 bytes leftover after parsing attributes in process `syz.6.3068'. [ 588.945142][T16802] netlink: 146 bytes leftover after parsing attributes in process `syz.6.3068'. [ 590.226872][T16821] netlink: 334 bytes leftover after parsing attributes in process `syz.6.3073'. [ 590.708964][T16831] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3077'. [ 593.993967][T16870] Invalid ELF header magic: != ELF [ 594.852844][T16870] Invalid ELF header magic: != ELF [ 598.896107][T16990] openvswitch: HfR: Dropping previously announced user features [ 599.412406][T16990] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3117'. [ 601.114901][T17026] Invalid ELF header magic: != ELF [ 601.195669][T17026] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3129'. [ 605.312661][T17094] openvswitch: HfR: Dropping previously announced user features [ 605.341401][T17094] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3153'. [ 605.785286][T17098] netlink: 'syz.0.3155': attribute type 46 has an invalid length. [ 607.890044][T17141] netlink: 'syz.4.3167': attribute type 8 has an invalid length. [ 607.918663][T17141] netlink: 'syz.4.3167': attribute type 9 has an invalid length. [ 607.960023][T17141] netlink: 162 bytes leftover after parsing attributes in process `syz.4.3167'. [ 609.384779][T17160] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3174'. [ 609.449546][T17160] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3174'. [ 609.592666][T17162] can: request_module (can-proto-5) failed. [ 610.287674][T17187] netlink: 496 bytes leftover after parsing attributes in process `syz.6.3182'. [ 610.313576][T17187] netlink: 496 bytes leftover after parsing attributes in process `syz.6.3182'. [ 613.896289][T17229] netlink: 'syz.4.3196': attribute type 11 has an invalid length. [ 613.904164][T17229] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3196'. [ 620.145866][T17341] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3230'. [ 621.313552][T17362] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3236'. [ 621.663279][T17375] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3240'. [ 621.689238][T17375] openvswitch: netlink: ufid size 17 bytes exceeds the range (1, 16) [ 621.705714][T17375] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 622.376072][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 622.396692][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 623.829307][T17423] netlink: 'syz.6.3253': attribute type 1 has an invalid length. [ 623.843260][T17423] nbd: error processing sock list [ 624.122363][T17422] netlink: 'syz.4.3250': attribute type 46 has an invalid length. [ 624.675084][T17459] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3264'. [ 624.859206][T17467] netlink: 342 bytes leftover after parsing attributes in process `syz.5.3266'. [ 625.994171][T17491] Invalid ELF header magic: != ELF [ 626.742155][T17524] netlink: 74 bytes leftover after parsing attributes in process `syz.6.3285'. [ 627.085979][T17531] netlink: 330 bytes leftover after parsing attributes in process `syz.6.3286'. [ 627.346467][T17538] delete_channel: no stack [ 628.726731][T17574] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3300'. [ 628.863296][T17574] netdevsim netdevsim6 netdevsim2: entered allmulticast mode [ 629.081425][T17592] rtc_cmos 00:00: Alarms can be up to one day in the future [ 629.525060][T12662] Bluetooth: hci0: command 0x0406 tx timeout [ 629.929120][T17609] program syz.4.3309 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 629.940972][T17609] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 630.608361][T17630] netlink: 'syz.6.3316': attribute type 8 has an invalid length. [ 632.611117][T17694] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3336'. [ 633.320151][T17718] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3342'. [ 634.015983][T17739] netlink: 342 bytes leftover after parsing attributes in process `syz.4.3346'. [ 634.096725][T17746] netlink: 'syz.5.3350': attribute type 11 has an invalid length. [ 635.186924][T17768] kernel read not supported for file /#)-\&[} (pid: 17768 comm: syz.5.3358) [ 635.215203][T12662] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 635.224897][T12662] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 635.232903][T12662] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 635.244096][T12662] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 635.251894][T12662] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 635.277323][T12662] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 635.336432][ T29] audit: type=1800 audit(4294969722.374:57): pid=17768 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.3358" name="#)-\&[}" dev="mqueue" ino=40420 res=0 errno=0 [ 636.152292][T17792] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3363'. [ 636.209166][T17769] chnl_net:caif_netlink_parms(): no params data found [ 636.451989][T17769] bridge0: port 1(bridge_slave_0) entered blocking state [ 636.459813][T17769] bridge0: port 1(bridge_slave_0) entered disabled state [ 636.467012][T17769] bridge_slave_0: entered allmulticast mode [ 636.474623][T17769] bridge_slave_0: entered promiscuous mode [ 636.483924][T17769] bridge0: port 2(bridge_slave_1) entered blocking state [ 636.491539][T17769] bridge0: port 2(bridge_slave_1) entered disabled state [ 636.499230][T17769] bridge_slave_1: entered allmulticast mode [ 636.506358][T17769] bridge_slave_1: entered promiscuous mode [ 636.592790][T17769] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 636.630370][T17769] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 636.769375][T17769] team0: Port device team_slave_0 added [ 636.798393][T17769] team0: Port device team_slave_1 added [ 636.893307][T17769] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 636.911175][T17769] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 636.976305][T17769] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 637.008137][T17769] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 637.015128][T17769] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 637.082147][T17769] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 637.315951][T17769] hsr_slave_0: entered promiscuous mode [ 637.324332][T12662] Bluetooth: hci1: command tx timeout [ 637.344465][T17769] hsr_slave_1: entered promiscuous mode [ 637.364899][T17769] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 637.405789][T17769] Cannot create hsr debugfs directory [ 637.945016][T17769] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 638.132195][T17769] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 638.175492][T17843] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3378'. [ 638.206356][T17843] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3378'. [ 638.416645][T17769] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 638.439364][T17852] netlink: 'syz.6.3381': attribute type 29 has an invalid length. [ 638.477567][T17852] netlink: 334 bytes leftover after parsing attributes in process `syz.6.3381'. [ 638.652223][T17769] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 639.025425][T17769] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 639.075207][T17769] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 639.101177][T17769] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 639.147527][T17769] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 639.361397][T17769] 8021q: adding VLAN 0 to HW filter on device bond0 [ 639.395281][T12662] Bluetooth: hci1: command tx timeout [ 639.455935][T17769] 8021q: adding VLAN 0 to HW filter on device team0 [ 639.578244][T15888] bridge0: port 1(bridge_slave_0) entered blocking state [ 639.585406][T15888] bridge0: port 1(bridge_slave_0) entered forwarding state [ 639.646658][ T9697] bridge0: port 2(bridge_slave_1) entered blocking state [ 639.653879][ T9697] bridge0: port 2(bridge_slave_1) entered forwarding state [ 639.833330][T17769] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 640.105926][T17769] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 640.507402][T17769] veth0_vlan: entered promiscuous mode [ 640.542275][T17769] veth1_vlan: entered promiscuous mode [ 640.581087][T17769] veth0_macvtap: entered promiscuous mode [ 640.604629][T17769] veth1_macvtap: entered promiscuous mode [ 640.635726][T17769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 640.652561][T17769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 640.662519][T17769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 640.679816][T17769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 640.692134][T17769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 640.712081][T17769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 640.726000][T17769] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 640.750603][T17769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 640.765818][T17769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 640.781491][T17769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 640.792040][T17769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 640.802216][T17769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 640.822876][T17769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 640.849634][T17769] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 640.870349][T17769] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 640.886125][T17769] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 640.894868][T17769] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 640.912086][T17769] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 641.106284][ T9690] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 641.114146][ T9690] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 641.124002][ T9690] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 641.131973][ T9690] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 641.468550][T12662] Bluetooth: hci1: command tx timeout [ 641.971687][T17900] netlink: 'syz.0.3393': attribute type 9 has an invalid length. [ 641.980334][ T5839] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 641.996463][ T5839] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 642.005331][ T5839] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 642.013666][ T5839] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 642.025941][ T5839] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 642.034295][ T5839] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 642.936175][T17902] chnl_net:caif_netlink_parms(): no params data found [ 643.122893][T17902] bridge0: port 1(bridge_slave_0) entered blocking state [ 643.150108][T17902] bridge0: port 1(bridge_slave_0) entered disabled state [ 643.164297][T17902] bridge_slave_0: entered allmulticast mode [ 643.170936][T17902] bridge_slave_0: entered promiscuous mode [ 643.212808][T17902] bridge0: port 2(bridge_slave_1) entered blocking state [ 643.236626][T17902] bridge0: port 2(bridge_slave_1) entered disabled state [ 643.262025][T17902] bridge_slave_1: entered allmulticast mode [ 643.277823][T17902] bridge_slave_1: entered promiscuous mode [ 643.330573][T17902] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 643.362442][T17902] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 643.502739][T17902] team0: Port device team_slave_0 added [ 643.523709][T17902] team0: Port device team_slave_1 added [ 643.554062][T12662] Bluetooth: hci1: command tx timeout [ 643.744280][T17902] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 643.763457][T17902] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 643.809410][T17902] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 643.873123][T17902] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 643.890029][T17902] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 643.930234][T17902] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 644.026960][T17902] hsr_slave_0: entered promiscuous mode [ 644.053779][T17902] hsr_slave_1: entered promiscuous mode [ 644.064466][T17902] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 644.079659][T17902] Cannot create hsr debugfs directory [ 644.089470][T12662] Bluetooth: hci2: command tx timeout [ 644.365435][T17902] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 644.476357][T17902] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 644.688557][T17902] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 644.914528][T17902] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 645.215433][T17902] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 645.246988][T17902] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 645.286391][T17902] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 645.308658][T17902] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 645.728626][T17902] 8021q: adding VLAN 0 to HW filter on device bond0 [ 645.775457][T17902] 8021q: adding VLAN 0 to HW filter on device team0 [ 645.807444][T17122] bridge0: port 1(bridge_slave_0) entered blocking state [ 645.814642][T17122] bridge0: port 1(bridge_slave_0) entered forwarding state [ 645.858589][T17122] bridge0: port 2(bridge_slave_1) entered blocking state [ 645.865761][T17122] bridge0: port 2(bridge_slave_1) entered forwarding state [ 645.888153][T17981] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3416'. [ 645.947826][T17979] lo: entered allmulticast mode [ 646.168806][T12662] Bluetooth: hci2: command tx timeout [ 646.184727][ T29] audit: type=1326 audit(8277292042.890:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17982 comm="syz.5.3417" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4d9e185d19 code=0x0 [ 646.255983][T17978] lo: left allmulticast mode [ 646.585046][T17902] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 647.172012][T17902] veth0_vlan: entered promiscuous mode [ 647.239973][T17902] veth1_vlan: entered promiscuous mode [ 647.323401][T18007] XFS: irix_sgid_inherit sysctl option is deprecated. [ 647.328960][T17902] veth0_macvtap: entered promiscuous mode [ 647.330724][T18007] FAULT_INJECTION: forcing a failure. [ 647.330724][T18007] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 647.368312][T17902] veth1_macvtap: entered promiscuous mode [ 647.422131][T17902] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 647.446714][T17902] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 647.451468][T18007] CPU: 1 UID: 0 PID: 18007 Comm: syz.4.3420 Not tainted 6.13.0-rc2-syzkaller-00292-ga446e965a188 #0 [ 647.467326][T18007] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 647.469109][T17902] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 647.477475][T18007] Call Trace: [ 647.477487][T18007] [ 647.477497][T18007] dump_stack_lvl+0x16c/0x1f0 [ 647.477531][T18007] should_fail_ex+0x497/0x5b0 [ 647.477564][T18007] _copy_to_user+0x32/0xd0 [ 647.477596][T18007] simple_read_from_buffer+0xd0/0x160 [ 647.477652][T18007] proc_fail_nth_read+0x198/0x270 [ 647.477685][T18007] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 647.515814][T17902] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 647.518506][T18007] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 647.530428][T17902] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 647.533841][T18007] vfs_read+0x1df/0xbe0 [ 647.533876][T18007] ? __fget_files+0x1fc/0x3a0 [ 647.533910][T18007] ? __pfx___mutex_lock+0x10/0x10 [ 647.533938][T18007] ? __pfx_vfs_read+0x10/0x10 [ 647.533971][T18007] ? __fget_files+0x206/0x3a0 [ 647.534006][T18007] ksys_read+0x12b/0x250 [ 647.534030][T18007] ? __pfx_ksys_read+0x10/0x10 [ 647.534066][T18007] do_syscall_64+0xcd/0x250 [ 647.534099][T18007] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 647.534130][T18007] RIP: 0033:0x7fcd0fb8472c [ 647.534151][T18007] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 647.534181][T18007] RSP: 002b:00007fcd108db030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 647.534207][T18007] RAX: ffffffffffffffda RBX: 00007fcd0fd75fa0 RCX: 00007fcd0fb8472c [ 647.534226][T18007] RDX: 000000000000000f RSI: 00007fcd108db0a0 RDI: 0000000000000005 [ 647.534242][T18007] RBP: 00007fcd108db090 R08: 0000000000000000 R09: 0000000000000000 [ 647.550301][T17902] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 647.554315][T18007] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000001 [ 647.554334][T18007] R13: 0000000000000000 R14: 00007fcd0fd75fa0 R15: 00007ffc8bdd9358 [ 647.554367][T18007] [ 647.691060][T17902] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 647.701958][T17902] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 647.721455][T17902] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 647.731751][T17902] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 647.750091][T17902] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 647.760541][T17902] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 647.792287][T17902] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 647.822591][T17902] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 647.854044][T17902] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 647.874584][T17902] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 647.899521][T17902] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 647.930411][T17902] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 647.972375][T17902] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 648.008803][T17902] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 648.017575][T17902] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 648.062550][T17902] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 648.228686][T12662] Bluetooth: hci2: command tx timeout [ 648.329201][ T9694] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 648.375429][ T9694] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 648.487000][ T9714] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 648.494872][ T9714] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 648.694130][T18022] netlink: 334 bytes leftover after parsing attributes in process `syz.5.3425'. [ 650.312574][T12662] Bluetooth: hci2: command tx timeout [ 650.403777][T18052] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3434'. [ 650.493404][T18051] CIFS mount error: No usable UNC path provided in device string! [ 650.493404][T18051] [ 650.539641][T18051] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 650.884086][T18058] netlink: 146 bytes leftover after parsing attributes in process `syz.5.3435'. [ 651.665973][T18080] snd_virmidi snd_virmidi.0: control 4365:65536:6:щ'x?FЂщ/шьzFЫЗfCЊсЊ:8 is already present [ 651.757732][T18084] ecryptfs_miscdev_write: Dropping miscdev message of unrecognized type [0] [ 652.424938][T18098] kernel read not supported for file /#)-\&[} (pid: 18098 comm: syz.5.3444) [ 652.475829][ T29] audit: type=1800 audit(8277292038.528:59): pid=18098 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.3444" name="#)-\&[}" dev="mqueue" ino=40420 res=0 errno=0 [ 652.840508][T18112] CIFS mount error: No usable UNC path provided in device string! [ 652.840508][T18112] [ 652.859284][T18112] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 653.120879][T17122] team0: left allmulticast mode [ 653.142225][T17122] team_slave_0: left allmulticast mode [ 653.148194][T17122] team_slave_1: left allmulticast mode [ 653.171805][T17122] team0: left promiscuous mode [ 653.191598][T17122] team_slave_0: left promiscuous mode [ 653.207474][T17122] team_slave_1: left promiscuous mode [ 653.227651][T17122] bridge0: port 3(team0) entered disabled state [ 653.252059][T17122] bridge_slave_1: left allmulticast mode [ 653.257839][T17122] bridge_slave_1: left promiscuous mode [ 653.273193][T17122] bridge0: port 2(bridge_slave_1) entered disabled state [ 653.359358][T17122] bridge_slave_0: left allmulticast mode [ 653.369285][T17122] bridge_slave_0: left promiscuous mode [ 653.384738][T17122] bridge0: port 1(bridge_slave_0) entered disabled state [ 654.567661][T17122] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 654.603849][T17122] bond0 (unregistering): Released all slaves [ 654.690093][T17122] HSR: left promiscuous mode [ 654.856420][T18153] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3462'. [ 654.873610][T18153] openvswitch: netlink: ufid size 17 bytes exceeds the range (1, 16) [ 654.881874][T18153] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 654.908886][T18132] Invalid ELF header magic: != ELF [ 655.809789][T17122] hsr_slave_1: left promiscuous mode [ 655.857242][T17122] veth1_macvtap: left promiscuous mode [ 655.874296][T17122] veth0_macvtap: left promiscuous mode [ 655.888253][T17122] veth0_vlan: left promiscuous mode [ 655.990830][T18180] Invalid ELF header magic: != ELF [ 656.051811][T18180] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3478'. [ 656.591701][T18187] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3471'. [ 657.211914][T17122] team0 (unregistering): Port device team_slave_1 removed [ 657.297363][T17122] team0 (unregistering): Port device team_slave_0 removed [ 657.306876][T18191] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3473'. [ 658.566376][T18195] netlink: 322 bytes leftover after parsing attributes in process `syz.4.3474'. [ 658.597868][T18191] bond0: (slave bond_slave_1): Releasing backup interface [ 661.342272][ T9690] [drm:drm_crtc_add_crc_entry] *ERROR* Overflow of CRC buffer, userspace reads too slow. [ 662.981521][T18257] netlink: 'syz.0.3495': attribute type 2 has an invalid length. [ 663.084630][T18257] delete_channel: no stack [ 664.524459][T18284] lo: entered allmulticast mode [ 664.530799][T18284] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3507'. [ 664.561186][T18283] lo: left allmulticast mode [ 664.742037][T18286] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3506'. [ 665.985955][ T29] audit: type=1800 audit(8277292052.098:60): pid=18316 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.3518" name="features" dev="configfs" ino=57389 res=0 errno=0 [ 666.052897][ T29] audit: type=1800 audit(8277292052.128:61): pid=18316 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.3518" name="features" dev="configfs" ino=57389 res=0 errno=0 [ 666.110813][ T29] audit: type=1800 audit(8277292052.128:62): pid=18316 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.3518" name="features" dev="configfs" ino=57389 res=0 errno=0 [ 666.179916][ T29] audit: type=1800 audit(8277292052.128:63): pid=18316 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.3518" name="features" dev="configfs" ino=57389 res=0 errno=0 [ 666.200383][ C0] vkms_vblank_simulate: vblank timer overrun [ 666.268820][ T29] audit: type=1800 audit(8277292052.128:64): pid=18316 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.3518" name="features" dev="configfs" ino=57389 res=0 errno=0 [ 666.347117][ T29] audit: type=1800 audit(8277292052.128:65): pid=18316 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.3518" name="features" dev="configfs" ino=57389 res=0 errno=0 [ 666.367471][ C0] vkms_vblank_simulate: vblank timer overrun [ 666.437377][ T29] audit: type=1800 audit(8277292052.128:66): pid=18316 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.3518" name="features" dev="configfs" ino=57389 res=0 errno=0 [ 666.509516][ T29] audit: type=1800 audit(8277292052.128:67): pid=18316 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.3518" name="features" dev="configfs" ino=57389 res=0 errno=0 [ 666.529947][ C0] vkms_vblank_simulate: vblank timer overrun [ 666.678780][ T29] audit: type=1800 audit(8277292052.128:68): pid=18316 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.3518" name="features" dev="configfs" ino=57389 res=0 errno=0 [ 666.699141][ C0] vkms_vblank_simulate: vblank timer overrun [ 666.843791][ T29] audit: type=1800 audit(8277292052.128:69): pid=18316 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.3518" name="features" dev="configfs" ino=57389 res=0 errno=0 [ 666.864145][ C0] vkms_vblank_simulate: vblank timer overrun [ 669.088378][T18361] netlink: 96 bytes leftover after parsing attributes in process `syz.5.3531'. [ 670.880588][T18411] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3549'. [ 671.925108][T18428] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3554'. [ 677.018580][T18486] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3566'. [ 677.183372][T18486] veth1_macvtap: left promiscuous mode [ 678.201902][T18508] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3573'. [ 679.011892][T18521] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3575'. [ 680.898589][T18565] CIFS mount error: No usable UNC path provided in device string! [ 680.898589][T18565] [ 680.974329][T18565] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 681.971669][T18585] CIFS mount error: No usable UNC path provided in device string! [ 681.971669][T18585] [ 682.011806][T18585] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 683.491300][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 683.497910][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 685.511300][ T5839] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 685.524445][ T5839] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 685.555638][ T5839] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 685.601238][ T5839] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 685.621664][ T5839] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 685.629170][ T5839] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 685.805356][T18572] smc: removing net device syz_tun with user defined pnetid ETHTOOL [ 685.869007][T18656] netlink: 342 bytes leftover after parsing attributes in process `syz.0.3616'. [ 686.402614][ T9694] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 686.744814][ T9694] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 686.846172][T18690] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3623'. [ 686.878558][T18690] mac80211_hwsim hwsim32 wlan0: entered promiscuous mode [ 686.887187][T18690] mac80211_hwsim hwsim32 wlan0: entered allmulticast mode [ 686.933239][T18659] chnl_net:caif_netlink_parms(): no params data found [ 687.131166][ T9694] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 687.164432][T18701] netlink: 334 bytes leftover after parsing attributes in process `syz.0.3626'. [ 687.366334][ T9694] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 687.391785][T18700] netlink: 342 bytes leftover after parsing attributes in process `syz.6.3625'. [ 687.515047][T18659] bridge0: port 1(bridge_slave_0) entered blocking state [ 687.522254][T18659] bridge0: port 1(bridge_slave_0) entered disabled state [ 687.543586][T18659] bridge_slave_0: entered allmulticast mode [ 687.550521][T18659] bridge_slave_0: entered promiscuous mode [ 687.558898][T18708] netlink: 342 bytes leftover after parsing attributes in process `syz.0.3635'. [ 687.605401][T18659] bridge0: port 2(bridge_slave_1) entered blocking state [ 687.612532][T18659] bridge0: port 2(bridge_slave_1) entered disabled state [ 687.620382][T18659] bridge_slave_1: entered allmulticast mode [ 687.627740][T18659] bridge_slave_1: entered promiscuous mode [ 687.702973][ T5839] Bluetooth: hci3: command tx timeout [ 687.818434][T18659] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 687.864172][T18659] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 687.919938][ T9694] team0: left allmulticast mode [ 687.925466][ T9694] team_slave_0: left allmulticast mode [ 687.945645][ T9694] team_slave_1: left allmulticast mode [ 687.959162][ T9694] team0: left promiscuous mode [ 687.990814][ T9694] team_slave_0: left promiscuous mode [ 687.996374][ T9694] team_slave_1: left promiscuous mode [ 688.003773][ T9694] bridge0: port 3(team0) entered disabled state [ 688.031238][ T9694] bridge_slave_1: left allmulticast mode [ 688.040569][ T9694] bridge_slave_1: left promiscuous mode [ 688.046327][ T9694] bridge0: port 2(bridge_slave_1) entered disabled state [ 688.110979][ T9694] bridge_slave_0: left allmulticast mode [ 688.116685][ T9694] bridge_slave_0: left promiscuous mode [ 688.139376][ T9694] bridge0: port 1(bridge_slave_0) entered disabled state [ 688.951622][ T9694] bond0 (unregistering): Released all slaves [ 689.129947][ T9694] HfR: left promiscuous mode [ 689.203979][T18659] team0: Port device team_slave_0 added [ 689.240274][T18659] team0: Port device team_slave_1 added [ 689.446821][T18659] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 689.470010][T18659] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 689.525082][T18659] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 689.565640][T18746] netlink: 342 bytes leftover after parsing attributes in process `syz.4.3639'. [ 689.630674][T18659] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 689.664905][T18659] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 689.746548][T18659] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 689.779858][ T5839] Bluetooth: hci3: command tx timeout [ 690.115529][T18659] hsr_slave_0: entered promiscuous mode [ 690.150907][T18659] hsr_slave_1: entered promiscuous mode [ 690.182786][T18659] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 690.199175][T18659] Cannot create hsr debugfs directory [ 691.096722][ T9694] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 691.107091][ T9694] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 691.118859][ T9694] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 691.143942][ T9694] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 691.202159][ T9694] veth1_macvtap: left promiscuous mode [ 691.218051][ T9694] veth0_macvtap: left promiscuous mode [ 691.235776][ T9694] veth1_vlan: left promiscuous mode [ 691.249482][ T9694] veth0_vlan: left promiscuous mode [ 691.631544][T18812] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3650'. [ 691.840702][ T5839] Bluetooth: hci3: command tx timeout [ 692.229787][ T9694] team0 (unregistering): Port device team_slave_1 removed [ 692.307345][ T9694] team0 (unregistering): Port device team_slave_0 removed [ 693.209893][T18798] netlink: 342 bytes leftover after parsing attributes in process `syz.0.3649'. [ 693.917129][ T5839] Bluetooth: hci3: command tx timeout [ 694.348930][T18831] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3655'. [ 694.417095][T18659] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 694.593880][T18831] hsr_slave_0 (unregistering): left promiscuous mode [ 694.618783][T18659] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 694.652545][T18659] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 694.736062][T18659] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 694.958107][T18659] 8021q: adding VLAN 0 to HW filter on device bond0 [ 695.028235][T18659] 8021q: adding VLAN 0 to HW filter on device team0 [ 695.088435][ T1102] bridge0: port 1(bridge_slave_0) entered blocking state [ 695.095601][ T1102] bridge0: port 1(bridge_slave_0) entered forwarding state [ 695.150100][T18854] openvswitch: HfR: Dropping previously announced user features [ 695.214277][ T9714] bridge0: port 2(bridge_slave_1) entered blocking state [ 695.221391][ T9714] bridge0: port 2(bridge_slave_1) entered forwarding state [ 695.613205][T18659] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 696.282225][T18659] veth0_vlan: entered promiscuous mode [ 696.332667][T18659] veth1_vlan: entered promiscuous mode [ 696.389730][T18659] veth0_macvtap: entered promiscuous mode [ 696.449069][T18659] veth1_macvtap: entered promiscuous mode [ 696.511666][T18659] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 696.576067][T18659] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 696.611804][T18659] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 696.653488][T18659] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 696.681470][T18659] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 696.695567][T18659] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 696.722288][T18659] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 696.747406][T18659] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 696.768983][T18659] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 696.795258][T18659] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 696.814123][T18659] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 696.828178][T18659] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 696.876552][T18659] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 696.896835][T18659] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 696.944142][T18659] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 696.964020][T18659] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 696.996589][T18659] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 697.025939][T18659] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 697.049509][T18933] netlink: 334 bytes leftover after parsing attributes in process `syz.0.3674'. [ 697.081482][T18659] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 697.113305][T18659] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 697.122053][T18659] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 697.163049][T18659] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 697.347778][ T3566] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 697.392244][ T3566] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 697.457718][ T9714] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 697.492421][ T9714] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 697.573016][T18948] netlink: 330 bytes leftover after parsing attributes in process `syz.6.3678'. [ 699.828780][T19028] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3692'. [ 700.259382][T19037] dyndbg: bad flag-op 4, at start of 4096 [ 700.281585][T19037] dyndbg: flags parse failed [ 701.646777][T19084] netlink: 'syz.6.3707': attribute type 2 has an invalid length. [ 701.888844][T19092] binder: 19091:19092 ioctl 40046205 800000000000003 returned -22 [ 702.503476][T19099] HfR: entered promiscuous mode [ 702.575111][T19099] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3713'. [ 702.811405][T19105] netlink: 334 bytes leftover after parsing attributes in process `syz.6.3715'. [ 703.478712][T19121] netlink: 'syz.0.3722': attribute type 46 has an invalid length. [ 703.669804][T19136] netlink: 334 bytes leftover after parsing attributes in process `syz.0.3728'. [ 703.717066][T19143] netlink: 93 bytes leftover after parsing attributes in process `syz.6.3724'. [ 703.958996][T19151] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3729'. [ 705.203623][T19188] netlink: 334 bytes leftover after parsing attributes in process `syz.5.3738'. [ 706.389065][T19226] netlink: 334 bytes leftover after parsing attributes in process `syz.6.3748'. [ 706.962472][T19235] netlink: zone id is out of range [ 706.967638][T19235] netlink: zone id is out of range [ 707.076251][T19235] netlink: zone id is out of range [ 707.146859][T19235] netlink: zone id is out of range [ 707.190863][T19235] netlink: zone id is out of range [ 707.248494][T19235] netlink: zone id is out of range [ 707.277293][T19235] netlink: zone id is out of range [ 707.304377][T19235] netlink: zone id is out of range [ 707.336853][T19235] netlink: zone id is out of range [ 707.373861][T19235] netlink: zone id is out of range [ 707.956925][T19249] netlink: 342 bytes leftover after parsing attributes in process `syz.0.3756'. [ 708.940386][T19273] netlink: 130 bytes leftover after parsing attributes in process `syz.0.3763'. [ 712.227007][T19314] futex_wake_op: syz.5.3776 tries to shift op by 64; fix this program [ 712.262649][ T29] kauditd_printk_skb: 23 callbacks suppressed [ 712.262669][ T29] audit: type=1807 audit(2051.980:93): UNKNOWN=|эЪ!СKдE!Ш res=0 [ 712.293368][ T29] audit: type=1802 audit(2052.000:94): pid=19314 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.5.3776" res=0 errno=0 [ 712.312214][T19314] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3776'. [ 712.494676][T19313] ima: policy update failed [ 712.515180][ T29] audit: type=1802 audit(2052.221:95): pid=19313 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.5.3776" res=0 errno=0 [ 713.035067][T19327] netlink: 334 bytes leftover after parsing attributes in process `syz.6.3781'. [ 714.404857][T19353] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3789'. [ 714.573538][T19356] netlink: 334 bytes leftover after parsing attributes in process `syz.0.3791'. [ 714.814262][T19351] misc userio: No port type given on /dev/userio [ 716.071811][T19391] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3799'. [ 716.674391][T19400] netlink: 334 bytes leftover after parsing attributes in process `syz.0.3802'. [ 717.224786][T19413] futex_wake_op: syz.6.3807 tries to shift op by 64; fix this program [ 717.304964][ T29] audit: type=1807 audit(2057.046:96): UNKNOWN=$ res=0 [ 717.318204][ T29] audit: type=1802 audit(2057.046:97): pid=19413 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.6.3807" res=0 errno=0 [ 717.426921][T19416] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3807'. [ 718.038998][T19436] netlink: 334 bytes leftover after parsing attributes in process `syz.5.3813'. [ 718.102617][T19411] ima: policy update failed [ 718.107724][ T29] audit: type=1802 audit(4294967297.201:98): pid=19411 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.6.3807" res=0 errno=0 [ 719.370341][T19465] netlink: 334 bytes leftover after parsing attributes in process `syz.4.3823'. [ 719.688578][T19473] dyndbg: bad flag-op 4, at start of 4096 [ 719.694542][T19473] dyndbg: flags parse failed `syz.0.3828'. [ 721.030245][T19502] netlink: 342 bytes leftover after parsing attributes in process `syz.6.3835'. [ 721.740257][T19520] dyndbg: bad flag-op 4, at start of 4096 [ 721.769877][T19520] dyndbg: flags parse failed [ 721.996668][T19528] netlink: 342 bytes leftover after parsing attributes in process `syz.0.3844'. [ 722.196061][T19533] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3848'. [ 722.652745][T19542] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 722.687260][T19542] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 722.724128][T19542] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 722.743637][T19542] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 722.858735][T19542] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 722.949757][T19542] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 722.955972][T19542] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 723.021009][T19542] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 723.054048][T19542] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 723.060257][T19542] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 723.142879][T19542] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 723.242744][T19553] Process accounting resumed [ 723.368610][T19553] Process accounting resumed [ 723.377137][T19553] Process accounting resumed [ 723.450062][T19553] Process accounting resumed [ 723.510001][T19553] Process accounting resumed [ 723.580498][T19573] netlink: 342 bytes leftover after parsing attributes in process `syz.6.3858'. [ 723.591216][T19553] Process accounting resumed [ 723.614891][T19553] Process accounting resumed [ 723.649458][T19553] Process accounting resumed [ 723.746819][T19553] Process accounting resumed [ 723.824779][T19553] Process accounting resumed [ 723.885344][T19553] Process accounting resumed [ 723.905810][T19553] Process accounting resumed [ 724.037115][T19553] Process accounting resumed [ 724.100974][T19553] Process accounting resumed [ 724.514582][T19589] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3864'. [ 724.545587][T19567] Process accounting resumed [ 724.711747][ T5839] Bluetooth: hci0: command 0x0406 tx timeout [ 724.789705][ T5839] Bluetooth: hci1: command 0x0c1a tx timeout [ 724.953017][ T5839] Bluetooth: hci2: command 0x0c1a tx timeout [ 725.107885][ T5839] Bluetooth: hci3: command 0x0c1a tx timeout [ 725.706208][T19619] netlink: 342 bytes leftover after parsing attributes in process `syz.4.3869'. [ 725.969001][T19630] netlink: 342 bytes leftover after parsing attributes in process `syz.6.3875'. [ 726.688871][T19656] netlink: 342 bytes leftover after parsing attributes in process `syz.6.3882'. [ 726.785838][ T5839] Bluetooth: hci0: command 0x0406 tx timeout [ 726.858623][ T5839] Bluetooth: hci1: command 0x0c1a tx timeout [ 727.027472][ T5839] Bluetooth: hci2: command 0x0c1a tx timeout [ 727.180277][ T5839] Bluetooth: hci3: command 0x0c1a tx timeout [ 727.646162][T19669] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3888'. [ 728.927985][ T5839] Bluetooth: hci1: command 0x0c1a tx timeout [ 729.095240][ T5839] Bluetooth: hci2: command 0x0c1a tx timeout [ 729.245768][T19685] netlink: 342 bytes leftover after parsing attributes in process `syz.5.3894'. [ 729.255448][ T5839] Bluetooth: hci3: command 0x0c1a tx timeout [ 729.342602][T19676] netlink: 'syz.4.3890': attribute type 46 has an invalid length. [ 729.368964][ T1102] [drm:drm_crtc_add_crc_entry] *ERROR* Overflow of CRC buffer, userspace reads too slow. [ 730.428298][T19713] netlink: 'syz.6.3904': attribute type 4 has an invalid length. [ 730.479876][T19713] netlink: 314 bytes leftover after parsing attributes in process `syz.6.3904'. [ 730.539759][T19713] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 730.547053][T19713] IPv6: NLM_F_CREATE should be set when creating new route [ 730.631203][T19715] netlink: 342 bytes leftover after parsing attributes in process `syz.0.3905'. [ 732.727461][T19752] netlink: 342 bytes leftover after parsing attributes in process `syz.0.3916'. [ 734.793439][T19790] netlink: 342 bytes leftover after parsing attributes in process `syz.0.3926'. [ 737.753696][T19830] netlink: 342 bytes leftover after parsing attributes in process `syz.4.3938'. [ 739.712553][T19852] net_ratelimit: 411 callbacks suppressed [ 739.712575][T19852] openvswitch: netlink: Duplicate or invalid key (type 0). [ 741.302446][T19881] netlink: 342 bytes leftover after parsing attributes in process `syz.6.3950'. [ 743.770695][T19897] bridge0: port 3(syz_tun) entered blocking state [ 743.777482][T19897] bridge0: port 3(syz_tun) entered disabled state [ 744.019681][T19897] syz_tun: entered allmulticast mode [ 744.026169][T19897] syz_tun: entered promiscuous mode [ 744.214726][T19897] bridge0: port 3(syz_tun) entered blocking state [ 744.221316][T19897] bridge0: port 3(syz_tun) entered forwarding state [ 744.616632][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 744.622974][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 746.379628][T19927] netlink: 342 bytes leftover after parsing attributes in process `syz.0.3963'. [ 747.285540][T19950] netlink: zone id is out of range [ 747.291149][T19950] netlink: zone id is out of range [ 747.342024][T19950] netlink: zone id is out of range [ 747.361893][T19950] netlink: zone id is out of range [ 747.415317][T19950] netlink: zone id is out of range [ 747.420504][T19950] netlink: zone id is out of range [ 747.491228][T19950] netlink: zone id is out of range [ 747.496854][T19950] netlink: zone id is out of range [ 747.572394][T19950] netlink: zone id is out of range [ 747.577589][T19950] netlink: zone id is out of range [ 747.660965][ T29] audit: type=1807 audit(4294967326.904:99): UNKNOWN=$ res=0 [ 747.668440][ T29] audit: type=1802 audit(4294967326.904:100): pid=19958 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.6.3970" res=0 errno=0 [ 747.691520][T19958] ima: policy update failed [ 747.756382][ T29] audit: type=1802 audit(4294967326.934:101): pid=19958 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.6.3970" res=0 errno=0 [ 748.179373][T19970] netlink: 342 bytes leftover after parsing attributes in process `syz.4.3973'. [ 750.270084][T20008] netlink: 342 bytes leftover after parsing attributes in process `syz.4.3983'. [ 751.531015][T20047] netlink: 326 bytes leftover after parsing attributes in process `syz.0.3996'. [ 752.152480][T20066] netlink: 342 bytes leftover after parsing attributes in process `syz.4.4001'. [ 753.731962][T20103] nbd: illegal input index -33554433 [ 755.411334][T20142] netlink: 36 bytes leftover after parsing attributes in process `syz.6.4026'. [ 756.267136][T20151] net_ratelimit: 1253 callbacks suppressed [ 756.267158][T20151] netlink: zone id is out of range [ 756.305473][T20151] netlink: zone id is out of range [ 756.310642][T20151] netlink: zone id is out of range [ 756.350326][T20151] netlink: zone id is out of range [ 756.360439][T20151] netlink: zone id is out of range [ 756.375073][T20151] netlink: zone id is out of range [ 756.380364][T20151] netlink: zone id is out of range [ 756.390472][T20151] netlink: zone id is out of range [ 756.400564][T20151] netlink: zone id is out of range [ 756.410663][T20151] netlink: zone id is out of range [ 757.211228][T20173] kernel read not supported for file /#)-\&[} (pid: 20173 comm: syz.0.4034) [ 757.220084][ T29] audit: type=1804 audit(4294967336.504:102): pid=20173 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.4034" name="#)-\&[}" dev="mqueue" ino=63193 res=1 errno=0 [ 757.288980][ T29] audit: type=1800 audit(4294967336.574:103): pid=20173 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.4034" name="#)-\&[}" dev="mqueue" ino=63193 res=0 errno=0 [ 757.359880][ T29] audit: type=1804 audit(4294967336.604:104): pid=20173 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.4034" name="#)-\&[}" dev="mqueue" ino=63193 res=1 errno=0 [ 757.429532][ T29] audit: type=1804 audit(4294967336.604:105): pid=20173 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.4034" name="#)-\&[}" dev="mqueue" ino=63193 res=1 errno=0 [ 759.719455][ T29] audit: type=1800 audit(4294967339.017:106): pid=20234 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="" name="members" dev="configfs" ino=63827 res=0 errno=0 [ 759.881941][T20248] CIFS mount error: No usable UNC path provided in device string! [ 759.881941][T20248] [ 759.942035][T20248] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 759.943445][T20254] CIFS mount error: No usable UNC path provided in device string! [ 759.943445][T20254] [ 760.065813][T20254] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 762.545602][T17119] [drm:drm_crtc_add_crc_entry] *ERROR* Overflow of CRC buffer, userspace reads too slow. [ 765.572216][T20338] kexec: Could not allocate control_code_buffer [ 769.017916][T20426] net_ratelimit: 412 callbacks suppressed [ 769.017938][T20426] openvswitch: netlink: Multiple metadata blocks provided [ 771.263760][T20471] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4131'. [ 771.835753][T20481] netlink: 334 bytes leftover after parsing attributes in process `syz.6.4133'. [ 772.555954][T20490] ptrace attach of "./syz-executor exec"[14931] was attempted by "ђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђ [ 772.658624][T20499] ptrace attach of "./syz-executor exec"[14931] was attempted by ""[20499] [ 775.674958][ T0] NOHZ tick-stop error: local softirq work is pending, handler #242!!! [ 777.420783][T20584] netlink: 334 bytes leftover after parsing attributes in process `syz.5.4160'. [ 778.951599][T20603] netlink: Conntrack attr has 16 unknown bytes [ 786.730120][T20740] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4213'. [ 788.144684][T20766] futex_wake_op: syz.4.4221 tries to shift op by 64; fix this program [ 788.727272][T20783] openvswitch: netlink: VXLAN extension 0 has unexpected len 1 expected 0 [ 788.928006][T20783] openvswitch: netlink: VXLAN extension 0 has unexpected len 1 expected 0 [ 790.087187][T20825] lo: entered promiscuous mode [ 790.158555][T20833] lo: left promiscuous mode [ 790.231746][T20832] can: request_module (can-proto-0) failed. [ 790.257130][T20837] netlink: 330 bytes leftover after parsing attributes in process `syz.0.4243'. [ 790.425201][T20832] CIFS mount error: No usable UNC path provided in device string! [ 790.425201][T20832] [ 790.462084][T20832] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 790.613156][T20846] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4245'. [ 793.246905][ T9714] [drm:drm_crtc_add_crc_entry] *ERROR* Overflow of CRC buffer, userspace reads too slow. [ 793.310560][T20890] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4262'. [ 793.395734][T20893] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4263'. [ 797.991022][T20925] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4275'. [ 798.015948][T20925] vxcan1: entered promiscuous mode [ 798.331929][T20936] lo: entered promiscuous mode [ 798.392121][T20936] lo: left promiscuous mode [ 799.671671][T20980] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4291'. [ 800.095026][T20986] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4292'. [ 800.212065][T20980] bond0: (slave bond_slave_1): Releasing backup interface [ 800.852856][T21009] netlink: 'syz.6.4298': attribute type 4 has an invalid length. [ 802.552335][T21056] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4313'. [ 802.823652][T21064] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4316'. [ 803.371787][T21076] openvswitch: netlink: Key type 29 is not supported [ 803.908157][T21089] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4323'. [ 805.428919][T21126] openvswitch: netlink: Geneve opt len 2 is not a multiple of 4. [ 805.648277][T21130] CIFS mount error: No usable UNC path provided in device string! [ 805.648277][T21130] [ 805.732664][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 805.739641][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 805.810582][T21130] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 805.856504][T21148] netlink: 'syz.5.4346': attribute type 11 has an invalid length. [ 806.298511][T21161] CIFS mount error: No usable UNC path provided in device string! [ 806.298511][T21161] [ 806.330082][T21161] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 806.749303][T21172] Process accounting resumed [ 806.773796][T21172] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4353'. [ 807.313540][T21186] netlink: 342 bytes leftover after parsing attributes in process `syz.5.4357'. [ 807.460284][T21192] netlink: 146 bytes leftover after parsing attributes in process `syz.5.4357'. [ 809.000410][T21241] netlink: 'syz.0.4375': attribute type 2 has an invalid length. [ 809.379776][T21243] netlink: 'syz.0.4375': attribute type 2 has an invalid length. [ 812.972783][T21292] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4389'. [ 815.680752][T21337] netlink: 'syz.5.4402': attribute type 4 has an invalid length. [ 815.767855][T21344] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4405'. [ 816.251079][T21344] hsr_slave_0 (unregistering): left promiscuous mode [ 817.822290][T21394] device-mapper: ioctl: ioctl interface mismatch: kernel(4.48.0), user(4.262149.0), cmd(49) [ 817.995539][T21396] openvswitch: HfR: Dropping previously announced user features [ 818.049922][T21399] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4424'. [ 818.050460][T21396] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4432'. [ 818.241279][T21399] hsr_slave_0 (unregistering): left promiscuous mode [ 818.452684][T21407] netlink: zone id is out of range [ 818.468401][T21407] netlink: zone id is out of range [ 818.473903][T21407] netlink: zone id is out of range [ 818.484244][T21407] netlink: zone id is out of range [ 818.499748][T21407] netlink: zone id is out of range [ 818.525332][T21407] netlink: zone id is out of range [ 818.542356][T21407] netlink: zone id is out of range [ 818.552475][T21407] netlink: zone id is out of range [ 818.561782][T21407] netlink: zone id is out of range [ 818.567137][T21407] netlink: zone id is out of range [ 819.621414][T21440] netlink: 'syz.0.4441': attribute type 2 has an invalid length. [ 821.378969][T21485] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4455'. [ 822.035162][T21497] netlink: 'syz.0.4457': attribute type 46 has an invalid length. [ 823.184676][T21525] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4463'. [ 824.272585][T21545] openvswitch: HfR: Dropping previously announced user features [ 824.338799][T21545] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4471'. [ 826.289286][T21592] futex_wake_op: syz.4.4486 tries to shift op by 64; fix this program [ 826.466377][T21593] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4486'. [ 826.853979][T21600] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4489'. [ 830.207404][T21681] futex_wake_op: syz.6.4517 tries to shift op by 64; fix this program [ 830.341166][T21683] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4517'. [ 832.574596][T21754] netlink: 85 bytes leftover after parsing attributes in process `syz.6.4540'. [ 836.021641][T21853] netlink: 'syz.4.4572': attribute type 46 has an invalid length. [ 836.734401][T21888] sctp: [Deprecated]: syz.4.4583 (pid 21888) Use of struct sctp_assoc_value in delayed_ack socket option. [ 836.734401][T21888] Use struct sctp_sack_info instead [ 836.913882][T21883] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4583'. [ 837.007089][T21883] netdevsim netdevsim4 netdevsim2: entered allmulticast mode [ 838.081048][T21890] Invalid ELF header magic: != ELF [ 838.663784][T21940] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4596'. [ 843.994679][T22068] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4631'. [ 845.374489][T22104] delete_channel: no stack [ 845.590658][T22108] netlink: 326 bytes leftover after parsing attributes in process `syz.6.4643'. [ 845.874255][T22110] svc: failed to register nfsdv3 RPC service (errno 111). [ 845.911911][T22110] svc: failed to register nfsaclv3 RPC service (errno 111). [ 847.819217][T22161] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4658'. [ 848.143560][T22168] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4663'. [ 848.178677][T22168] netlink: 36 bytes leftover after parsing attributes in process `syz.6.4663'. [ 848.501414][T22184] kernel read not supported for file /#)-\&[} (pid: 22184 comm: syz.5.4667) [ 848.506041][T22179] netlink: 'syz.4.4665': attribute type 1 has an invalid length. [ 848.510409][ T29] audit: type=1804 audit(4294967428.269:107): pid=22184 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.4667" name="#)-\&[}" dev="mqueue" ino=71142 res=1 errno=0 [ 848.573239][ T29] audit: type=1800 audit(4294967428.329:108): pid=22184 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.4667" name="#)-\&[}" dev="mqueue" ino=71142 res=0 errno=0 [ 848.603631][ T29] audit: type=1804 audit(4294967428.369:109): pid=22184 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.5.4667" name="#)-\&[}" dev="mqueue" ino=71142 res=1 errno=0 [ 848.635021][ T29] audit: type=1804 audit(4294967428.369:110): pid=22184 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.5.4667" name="#)-\&[}" dev="mqueue" ino=71142 res=1 errno=0 [ 851.139701][T22267] net_ratelimit: 110 callbacks suppressed [ 851.139724][T22267] netlink: zone id is out of range [ 851.190456][T22267] netlink: zone id is out of range [ 851.210610][T22267] netlink: zone id is out of range [ 851.232175][T22267] netlink: zone id is out of range [ 851.254620][T22267] netlink: zone id is out of range [ 851.283982][T22267] netlink: zone id is out of range [ 851.331716][T22267] netlink: zone id is out of range [ 851.377824][T22267] netlink: zone id is out of range [ 851.406768][T22267] netlink: zone id is out of range [ 851.444566][T22267] netlink: zone id is out of range [ 852.075334][T22298] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4700'. [ 852.760033][T22315] netlink: 350 bytes leftover after parsing attributes in process `syz.6.4705'. [ 853.380130][T22340] netlink: 36 bytes leftover after parsing attributes in process `syz.6.4714'. [ 855.353858][T22405] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4734'. [ 855.492062][ T29] audit: type=1800 audit(4294967435.255:111): pid=22419 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.4737" name="SYSV00010000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 855.524979][T22421] netlink: 334 bytes leftover after parsing attributes in process `syz.6.4738'. [ 855.794817][T22428] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4740'. [ 858.517950][T22519] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4766'. [ 858.946467][T22533] net_ratelimit: 17 callbacks suppressed [ 858.946491][T22533] netlink: zone id is out of range [ 858.962098][T22533] netlink: del zone limit has 8 unknown bytes [ 859.020176][T22535] netlink: del zone limit has 8 unknown bytes [ 859.552582][T22549] lo: entered allmulticast mode [ 859.645950][T22549] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4775'. [ 860.203169][T22546] lo: left allmulticast mode [ 860.229824][T22564] netlink: zone id is out of range [ 860.243191][T22564] netlink: del zone limit has 8 unknown bytes [ 862.380193][ T5839] Bluetooth: hci0: SCO packet for unknown connection handle 0 [ 863.968136][T22634] netlink: zone id is out of range [ 864.001482][T22634] netlink: zone id is out of range [ 864.012029][T22634] netlink: del zone limit has 8 unknown bytes [ 864.514420][T22642] delete_channel: no stack [ 864.747719][T22653] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4801'. [ 865.829762][T22670] netlink: del zone limit has 8 unknown bytes [ 865.987985][T22677] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4810'. [ 866.051985][T22677] vxcan1: entered promiscuous mode [ 866.853406][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 866.860780][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 869.461855][T22777] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4839'. [ 869.666909][T22778] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4838'. [ 870.282787][T22792] netlink: zone id is out of range [ 870.287957][T22792] netlink: zone id is out of range [ 870.313234][T22792] netlink: del zone limit has 8 unknown bytes [ 870.813818][T22807] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4846'. [ 872.021726][T22829] netlink: zone id is out of range [ 872.039877][T22829] netlink: zone id is out of range [ 872.054150][T22829] netlink: del zone limit has 8 unknown bytes [ 872.431395][T22837] [ 872.433766][T22837] ====================================================== [ 872.440896][T22837] WARNING: possible circular locking dependency detected [ 872.447936][T22837] 6.13.0-rc2-syzkaller-00292-ga446e965a188 #0 Not tainted [ 872.455074][T22837] ------------------------------------------------------ [ 872.462105][T22837] syz.5.4857/22837 is trying to acquire lock: [ 872.468185][T22837] ffffffff8fabe088 (rtnl_mutex){+.+.}-{4:4}, at: do_ipv6_setsockopt+0x1f4d/0x4660 [ 872.477472][T22837] [ 872.477472][T22837] but task is already holding lock: [ 872.484856][T22837] ffff888035a0cfa8 (&smc->clcsock_release_lock){+.+.}-{4:4}, at: smc_setsockopt+0x101/0xc00 [ 872.495021][T22837] [ 872.495021][T22837] which lock already depends on the new lock. [ 872.495021][T22837] [ 872.505445][T22837] [ 872.505445][T22837] the existing dependency chain (in reverse order) is: [ 872.514479][T22837] [ 872.514479][T22837] -> #2 (&smc->clcsock_release_lock){+.+.}-{4:4}: [ 872.523129][T22837] __mutex_lock+0x19b/0xa60 [ 872.528196][T22837] smc_switch_to_fallback+0x2d/0xa00 [ 872.534049][T22837] smc_sendmsg+0x13d/0x520 [ 872.539035][T22837] ____sys_sendmsg+0x9ae/0xb40 [ 872.544350][T22837] ___sys_sendmsg+0x135/0x1e0 [ 872.549589][T22837] __sys_sendmsg+0x16e/0x220 [ 872.554757][T22837] do_syscall_64+0xcd/0x250 [ 872.559817][T22837] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 872.566365][T22837] [ 872.566365][T22837] -> #1 (sk_lock-AF_INET6){+.+.}-{0:0}: [ 872.574227][T22837] lock_sock_nested+0x3a/0xf0 [ 872.579464][T22837] sockopt_lock_sock+0x54/0x70 [ 872.584793][T22837] do_ip_setsockopt+0x101/0x38c0 [ 872.590281][T22837] ip_setsockopt+0x59/0xf0 [ 872.595248][T22837] ipv6_setsockopt+0x155/0x170 [ 872.600586][T22837] sctp_setsockopt+0x16a/0xb880 [ 872.605999][T22837] do_sock_setsockopt+0x222/0x480 [ 872.611602][T22837] __sys_setsockopt+0x1a0/0x230 [ 872.617015][T22837] __x64_sys_setsockopt+0xbd/0x160 [ 872.622694][T22837] do_syscall_64+0xcd/0x250 [ 872.627785][T22837] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 872.634245][T22837] [ 872.634245][T22837] -> #0 (rtnl_mutex){+.+.}-{4:4}: [ 872.641505][T22837] __lock_acquire+0x249e/0x3c40 [ 872.646929][T22837] lock_acquire.part.0+0x11b/0x380 [ 872.652623][T22837] __mutex_lock+0x19b/0xa60 [ 872.657699][T22837] do_ipv6_setsockopt+0x1f4d/0x4660 [ 872.663460][T22837] ipv6_setsockopt+0xcb/0x170 [ 872.668696][T22837] tcp_setsockopt+0xa4/0x100 [ 872.673844][T22837] smc_setsockopt+0x1b4/0xc00 [ 872.679083][T22837] do_sock_setsockopt+0x222/0x480 [ 872.684672][T22837] __sys_setsockopt+0x1a0/0x230 [ 872.690077][T22837] __x64_sys_setsockopt+0xbd/0x160 [ 872.695744][T22837] do_syscall_64+0xcd/0x250 [ 872.700815][T22837] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 872.707271][T22837] [ 872.707271][T22837] other info that might help us debug this: [ 872.707271][T22837] [ 872.717623][T22837] Chain exists of: [ 872.717623][T22837] rtnl_mutex --> sk_lock-AF_INET6 --> &smc->clcsock_release_lock [ 872.717623][T22837] [ 872.731284][T22837] Possible unsafe locking scenario: [ 872.731284][T22837] [ 872.738728][T22837] CPU0 CPU1 [ 872.744112][T22837] ---- ---- [ 872.749470][T22837] lock(&smc->clcsock_release_lock); [ 872.754846][T22837] lock(sk_lock-AF_INET6); [ 872.761867][T22837] lock(&smc->clcsock_release_lock); [ 872.769754][T22837] lock(rtnl_mutex); [ 872.773734][T22837] [ 872.773734][T22837] *** DEADLOCK *** [ 872.773734][T22837] [ 872.781955][T22837] 1 lock held by syz.5.4857/22837: [ 872.787061][T22837] #0: ffff888035a0cfa8 (&smc->clcsock_release_lock){+.+.}-{4:4}, at: smc_setsockopt+0x101/0xc00 [ 872.797609][T22837] [ 872.797609][T22837] stack backtrace: [ 872.803488][T22837] CPU: 1 UID: 0 PID: 22837 Comm: syz.5.4857 Not tainted 6.13.0-rc2-syzkaller-00292-ga446e965a188 #0 [ 872.814260][T22837] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 872.824321][T22837] Call Trace: [ 872.827652][T22837] [ 872.830602][T22837] dump_stack_lvl+0x116/0x1f0 [ 872.835288][T22837] print_circular_bug+0x41c/0x610 [ 872.840328][T22837] check_noncircular+0x31a/0x400 [ 872.845272][T22837] ? __pfx_check_noncircular+0x10/0x10 [ 872.850829][T22837] ? hlock_class+0x4e/0x130 [ 872.855424][T22837] ? hlock_class+0x4e/0x130 [ 872.859935][T22837] ? lockdep_lock+0xc6/0x200 [ 872.864528][T22837] ? __pfx_lockdep_lock+0x10/0x10 [ 872.869642][T22837] ? __pfx_mark_lock+0x10/0x10 [ 872.874418][T22837] __lock_acquire+0x249e/0x3c40 [ 872.879281][T22837] ? __pfx___lock_acquire+0x10/0x10 [ 872.884486][T22837] ? __lock_acquire+0x15a9/0x3c40 [ 872.889675][T22837] lock_acquire.part.0+0x11b/0x380 [ 872.894893][T22837] ? do_ipv6_setsockopt+0x1f4d/0x4660 [ 872.900273][T22837] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 872.905925][T22837] ? rcu_is_watching+0x12/0xc0 [ 872.910697][T22837] ? trace_lock_acquire+0x14e/0x1f0 [ 872.915902][T22837] ? do_ipv6_setsockopt+0x1f4d/0x4660 [ 872.921275][T22837] ? lock_acquire+0x2f/0xb0 [ 872.925773][T22837] ? do_ipv6_setsockopt+0x1f4d/0x4660 [ 872.931453][T22837] __mutex_lock+0x19b/0xa60 [ 872.936224][T22837] ? do_ipv6_setsockopt+0x1f4d/0x4660 [ 872.941615][T22837] ? __pfx_mark_lock+0x10/0x10 [ 872.946569][T22837] ? do_ipv6_setsockopt+0x1f4d/0x4660 [ 872.951948][T22837] ? __pfx___mutex_lock+0x10/0x10 [ 872.956998][T22837] ? __pfx_register_lock_class+0x10/0x10 [ 872.963163][T22837] ? finish_task_switch.isra.0+0x217/0xcc0 [ 872.968971][T22837] ? __switch_to+0x749/0x1190 [ 872.973750][T22837] ? hlock_class+0x4e/0x130 [ 872.978267][T22837] ? do_ipv6_setsockopt+0x1f4d/0x4660 [ 872.983657][T22837] ? rtnl_lock+0x9/0x20 [ 872.987837][T22837] do_ipv6_setsockopt+0x1f4d/0x4660 [ 872.993070][T22837] ? __pfx_do_ipv6_setsockopt+0x10/0x10 [ 872.998649][T22837] ? lock_acquire.part.0+0x11b/0x380 [ 873.003947][T22837] ? __mutex_trylock_common+0xea/0x250 [ 873.009411][T22837] ? __pfx___mutex_trylock_common+0x10/0x10 [ 873.015325][T22837] ? smc_setsockopt+0x101/0xc00 [ 873.020187][T22837] ? rcu_is_watching+0x12/0xc0 [ 873.024953][T22837] ? trace_contention_end+0xee/0x140 [ 873.030237][T22837] ? __mutex_lock+0x1cc/0xa60 [ 873.034934][T22837] ? __pfx___futex_wait+0x10/0x10 [ 873.039962][T22837] ? smc_setsockopt+0x101/0xc00 [ 873.044827][T22837] ? __pfx___mutex_lock+0x10/0x10 [ 873.049855][T22837] ? ipv6_setsockopt+0xcb/0x170 [ 873.054720][T22837] ipv6_setsockopt+0xcb/0x170 [ 873.059417][T22837] tcp_setsockopt+0xa4/0x100 [ 873.064022][T22837] smc_setsockopt+0x1b4/0xc00 [ 873.068714][T22837] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 873.074625][T22837] ? __pfx_smc_setsockopt+0x10/0x10 [ 873.079853][T22837] ? __pfx_smc_setsockopt+0x10/0x10 [ 873.085057][T22837] do_sock_setsockopt+0x222/0x480 [ 873.090181][T22837] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 873.095743][T22837] ? lock_acquire+0x2f/0xb0 [ 873.100342][T22837] __sys_setsockopt+0x1a0/0x230 [ 873.105210][T22837] __x64_sys_setsockopt+0xbd/0x160 [ 873.110428][T22837] ? do_syscall_64+0x91/0x250 [ 873.115117][T22837] ? lockdep_hardirqs_on+0x7c/0x110 [ 873.120319][T22837] do_syscall_64+0xcd/0x250 [ 873.124833][T22837] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 873.130730][T22837] RIP: 0033:0x7fad26b85d19 [ 873.135139][T22837] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 873.154831][T22837] RSP: 002b:00007fad27a87038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 873.163244][T22837] RAX: ffffffffffffffda RBX: 00007fad26d75fa0 RCX: 00007fad26b85d19 [ 873.171220][T22837] RDX: 000000000000001b RSI: 0000000000000029 RDI: 0000000000000004 [ 873.179191][T22837] RBP: 00007fad26c01a20 R08: 0000000000000201 R09: 0000000000000000 [ 873.187157][T22837] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 873.195122][T22837] R13: 0000000000000000 R14: 00007fad26d75fa0 R15: 00007ffc6b80c968 [ 873.203094][T22837]