last executing test programs: 2m27.665173938s ago: executing program 0 (id=1141): r0 = openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f0000000140)='/proc/fs/ext4/sda1/es_shrinker_info\x00', 0x0, 0x0) ppoll$auto(&(0x7f00000000c0)={r0, 0xf81, 0x27f}, 0x3, 0x0, 0x0, 0x8) r2 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv6/conf/wlan1/forwarding\x00', 0x202, 0x0) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x40802, 0x0) sendmsg$auto_NL80211_CMD_GET_INTERFACE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x20018048}, 0x0) mprotect$auto(0x1ffff000, 0x8000000000000001, 0x4) r3 = socket(0xa, 0x5, 0x0) getsockopt$auto(r3, 0x84, 0xc, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) write$auto(0x3, 0x0, 0xfdef) sendfile$auto(r2, r1, 0x0, 0x401) 2m24.808263756s ago: executing program 0 (id=1152): sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x24}}, 0x4000000) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x200000000000404, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x80002, 0x73) socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) io_uring_setup$auto(0x1, 0x0) setsockopt$auto(0x3, 0x10000000084, 0x7b, 0x0, 0x8) write$auto(0x3, 0x0, 0x1a000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) close_range$auto(0x2, 0x8, 0x0) 2m24.060653488s ago: executing program 0 (id=1155): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_seg6(&(0x7f0000000480), r0) close_range$auto(0xffffffffffffffff, r0, 0x7f) sendmsg$auto_SEG6_CMD_SETHMAC(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000c40)={0x2c, r1, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@SEG6_ATTR_SECRETLEN={0x5}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x6}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x40000) r2 = socket(0x1, 0x5, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) sysfs$auto(0x2, 0x0, 0x0) fsopen$auto(0x0, 0x1) close_range$auto(0x0, 0xfffffffffffff000, 0x2) r3 = socket(0x2, 0x6, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) connect$auto(r2, 0x0, 0x1) epoll_create$auto(0x4) epoll_ctl$auto(0x5, 0x1, r2, 0x0) r4 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0) sendmsg$auto_NL80211_CMD_GET_INTERFACE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000700)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010026bd7000fcdbdf250f00000008000300", @ANYRES32], 0x1c}, 0x1, 0x0, 0x0, 0x4000001}, 0x40010) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) sendmsg$auto_NFC_CMD_DEV_DOWN(0xffffffffffffffff, 0x0, 0x8000) mremap$auto(0x0, 0x7, 0x3fd6, 0x3, 0x20000000) openat$auto_sg_fops_sg(0xffffffffffffff9c, 0x0, 0x800, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) poll$auto(0x0, 0x4, 0xfffff800) ioctl$auto_SG_EMULATED_HOST(0xffffffffffffffff, 0x2203, 0x0) connect$auto(0xffffffffffffffff, &(0x7f0000000080), 0x9) mbind$auto(0x0, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) sendmmsg$auto(0xffffffffffffffff, 0x0, 0x7, 0x4008) write$auto(0x3, 0x0, 0xfffffdef) 2m19.342467623s ago: executing program 0 (id=1168): r0 = open(0x0, 0x80842, 0x91) read$auto(r0, 0x0, 0x1) close_range$auto(0x2, 0x8, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/system/cpu/cpu1/hotplug/fail\x00', 0x100, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket(0xa, 0x2, 0x73) pipe2$auto(&(0x7f0000000040)=0xffffffffffffffff, 0x0) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty46\x00', 0x0, 0x0) ioctl$auto(r2, 0x540a, 0x0) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty46\x00', 0x0, 0x0) ioctl$auto(r3, 0x540a, r1) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/platform/vhci_hcd.0/detach\x00', 0x2501, 0x0) 2m17.425907252s ago: executing program 0 (id=1173): mmap$auto(0x0, 0x1000, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) pipe$auto(0x0) writev$auto(0x5, &(0x7f0000000100)={0x0, 0x7}, 0x201) socket(0x18, 0x4, 0x1) r0 = openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f0000000000), 0xc0040, 0x0) ioctl$auto_SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x4, 0x15f4da0a, 0x1, 0x3, 0x0, 0x80000001, 0x7, 0x6d3c, 0x5, 0x2]}, 0x0) vmsplice$auto(0x4, &(0x7f0000000040)={0x0, 0x80000000002}, 0x3, 0x4) 2m14.987374137s ago: executing program 0 (id=1180): ioperm$auto(0x7, 0x6, 0x2) r0 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000180), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_TIPC_NL_MON_PEER_GET(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000006100)={&(0x7f0000000280)=ANY=[@ANYBLOB="4c060000", @ANYRES16=r0, @ANYBLOB="11072cbd7000ffdbdf2513000000360609808d0302"], 0x64c}, 0x1, 0x0, 0x0, 0xc411}, 0x4c848) time$auto(0x0) r2 = open(0x0, 0x2a002, 0x32) lseek$auto(r2, 0x4, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendfile$auto(0x6, 0x3, 0x0, 0xc01) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000003680)={'wlan0\x00'}) sendmsg$auto_NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000004880)={&(0x7f0000000000)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x840) sendmmsg$auto(0x3, 0x0, 0x3, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x40000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) write$auto(0x4, 0x0, 0x100082) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) setreuid$auto(0x8, 0x9d7) r4 = socket(0x2, 0x1, 0x0) getsockopt$auto(r4, 0x6, 0x23, 0x0, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mmap$auto(0x0, 0x2, 0x100000df, 0x1d, 0x2, 0x8000) socket(0x2, 0x3, 0xa) read$auto(0x3, 0x0, 0x7) unshare$auto(0x40000080) 1m59.808561672s ago: executing program 32 (id=1180): ioperm$auto(0x7, 0x6, 0x2) r0 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000180), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_TIPC_NL_MON_PEER_GET(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000006100)={&(0x7f0000000280)=ANY=[@ANYBLOB="4c060000", @ANYRES16=r0, @ANYBLOB="11072cbd7000ffdbdf2513000000360609808d0302"], 0x64c}, 0x1, 0x0, 0x0, 0xc411}, 0x4c848) time$auto(0x0) r2 = open(0x0, 0x2a002, 0x32) lseek$auto(r2, 0x4, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendfile$auto(0x6, 0x3, 0x0, 0xc01) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000003680)={'wlan0\x00'}) sendmsg$auto_NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000004880)={&(0x7f0000000000)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x840) sendmmsg$auto(0x3, 0x0, 0x3, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x40000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) write$auto(0x4, 0x0, 0x100082) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) setreuid$auto(0x8, 0x9d7) r4 = socket(0x2, 0x1, 0x0) getsockopt$auto(r4, 0x6, 0x23, 0x0, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mmap$auto(0x0, 0x2, 0x100000df, 0x1d, 0x2, 0x8000) socket(0x2, 0x3, 0xa) read$auto(0x3, 0x0, 0x7) unshare$auto(0x40000080) 52.775973373s ago: executing program 2 (id=1448): openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp1\x00', 0x20b42, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/card1/pcm0p/sub0/hw_params\x00', 0x149082, 0x0) socket(0x2c, 0x3, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x1, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x801, 0x84) socket(0x10, 0x2, 0x0) socket(0x10, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x801, 0x84) socket(0x2, 0x801, 0x106) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) socket(0xa, 0x2, 0x0) socket(0xa, 0x2, 0x3a) io_uring_setup$auto(0x6, 0x0) getcwd$auto(0x0, 0xffffffffffffffff) r0 = socket(0xa, 0x2, 0x88) close_range$auto(0x0, 0xfffffffffffff000, 0x2) bpf$auto(0x0, &(0x7f0000000000)=@link_update={r0, @new_prog_fd=0x4, 0x8, @old_prog_fd=r0}, 0xa3) bpf$auto(0x1, &(0x7f0000000040)=@query={@target_ifindex, 0x4, 0x7, 0x9, 0x7f, @prog_cnt=0x42c, 0x0, 0x80000000, 0xc, 0xb, 0x5}, 0x7) 51.030049865s ago: executing program 2 (id=1455): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f0000000100)='/dev/usbmon4\x00', 0xc00, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x9, 0x3, 0x24, 0x940, 0x1ffde, 0x3, 0x6, 0x8000002, 0x9, 0x5, 0x2, 0x4, 0xb0, 0x7, 0x2, 0x3, 0x5, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, [0x0, 0x0, 0x0, 0x243efbdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe6e]}, 0x1fe, 0x81) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) r0 = socket(0x10, 0x2, 0x0) r1 = openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/tracing/set_event\x00', 0x20001, 0x0) write$auto(r1, &(0x7f0000000480)='nbd\x00', 0x4) mmap$auto(0xfffffffffffffffe, 0x400008, 0xb, 0x9b77, 0x3ff, 0x8000000000000000) socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) ioperm$auto(0x7, 0x6, 0x80) setsockopt$auto(0x3, 0x10f, 0x8a, 0x0, 0x14) listmount$auto(&(0x7f0000000140)={0x4, @inferred, 0x8, 0x4, 0x3ff}, &(0x7f0000000440)=0x10, 0x8, 0x8) sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) stat$auto(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x5, 0x7, 0x8000, 0xee00, 0xffffffffffffffff, 0x0, 0x6, 0x4ff, 0x8, 0x800, 0xa, 0xa58, 0x3, 0x4, 0xce, 0x8}) shmctl$auto(0x9, 0x92c00000, &(0x7f0000000240)={{0x2, 0x0, 0xee01, 0x9e5, 0x4, 0xfff, 0x7}, 0xb, 0x3, 0x10000000, 0x35, @inferred, @inferred, 0x2, 0x0, &(0x7f00000001c0), &(0x7f0000000200)}) r4 = getgid() shmctl$auto(0x0, 0x1, &(0x7f0000000380)={{0x5, r3, r4, 0xa9, 0x0, 0x52, 0x3}, 0x6e98e4ec, 0x2, 0x7fffffffffffffff, 0x1, @inferred, @inferred, 0x1d1b, 0x0, &(0x7f0000000300), &(0x7f0000000340)}) chown$auto(&(0x7f0000000080)='./cgroup.cpu/cgroup.procs\x00', 0x0, r4) setfsgid$auto(r4) shmctl$auto(0x6, 0x4, &(0x7f00000001c0)={{0x7, 0xee00, 0x0, 0x7d, 0xe5a61ce, 0xb97, 0x1}, 0x5, 0x9, 0x8, 0x8, @inferred, @inferred, 0x362, 0x0, &(0x7f00000004c0)="bb188662ce07e4", 0x0}) r6 = getegid() setresgid$auto(r4, r5, r6) fstat$auto(r0, &(0x7f0000000380)={0x27, 0x1, 0x3, 0x1, r2, r4, 0x0, 0x9, 0x6, 0x9, 0x200, 0xd0ac159200000, 0xb95, 0x100000000, 0x34ba, 0xffffffff00000000, 0xe}) socket(0xa, 0x5, 0x0) socket(0xa, 0x2, 0x0) getsockopt$auto(0x4, 0x1, 0x4b, 0x0, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x0, 0xffffffffffff0001, 0x15) mmap$auto(0x3, 0x4, 0x4000000000dc, 0x40eb2, 0xa1c, 0x8) 49.609559136s ago: executing program 2 (id=1460): setreuid$auto(0x0, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) r0 = getpid() sendmsg$auto_NETDEV_CMD_PAGE_POOL_GET(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000580)=ANY=[@ANYBLOB="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", @ANYRES16=0x0, @ANYBLOB="010026bd7000ffdbdf25050000000c00010007000000000000000c00010004000000000000000c00010040000000000000000c00010004000000000000000c0001000000000000000000"], 0x50}, 0x1, 0x0, 0x0, 0x4048000}, 0x0) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x4000080}, 0x800) socket(0xa, 0x3, 0xff) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) fcntl$auto(0x3, 0xf, 0x5) process_vm_readv$auto(r0, &(0x7f0000000000)={0x0, 0xfff}, 0x1, &(0x7f0000000280)={&(0x7f0000000080), 0xffffffff}, 0x6, 0x0) r1 = openat$auto_i2cdev_fops_i2c_dev(0xffffffffffffff9c, &(0x7f0000000200), 0xe0080, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0xa, 0x1, 0x44f, 0x7, 0x5, 0x7181, 0x1ffde, 0x7, 0x3, 0x8, 0x9, 0x80003, 0x4, 0x200000000001, 0x384, 0x9, 0x8, 0x10006, 0x400007f, 0x0, 0x0, 0xe, 0x22000, 0x200, 0x0, 0x84, [0x3, 0x2, 0xffffffffffffffff, 0x2, 0x0, 0x402000, 0x0, 0xe, 0x1, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x8, 0x0, 0x6, 0x0, 0x8, 0x20000, 0x8, 0x10000000000, 0xffffffffffffffff, 0x4, 0x2f, 0x0, 0x0, 0x1006, 0x400000000005b8, 0xffff, 0x0, 0x100, 0x0, 0x6, 0x2, 0x88e, 0x40, 0xfffffffffffffffc, 0x8, 0xa38, 0x4, 0x3, 0xfffffffffffffffc, 0x2, 0x8, 0x10000000007, 0xc567]}, 0x1fa, 0xd) r2 = openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f0000000180), 0x1541, 0x0) ioctl$auto__ctl_fops_dm_ioctl(r2, 0x2, &(0x7f0000000380)="dcbb5fd7054bed139fb7f9fb1dca8fe1d88f65ee057c0e6faac40d106e4f0d52edf6e31c48e8d983ae3431fa707225c2c387e1a200b38759ba8e9187200e6d044ef46a534de751b1436f20ed7071b254509700aa726ea003a1b7b9ce2313756dc84bc4556ddac694c4553d72ed13a885176712c9cff968f74bd1d14ff734ad08e60cf7e7a7dd07d2b6ca9cb21ddaae68d2969afcf6c734f6ee1c63b1c93abf32264f9ec022b64c903276298739ee8ae7ac1fe14534ad54004f39ea1b99964702554c1494e1742baeae527cf3007d50fc92e924f73b6288e5d9fd071d2fba76b2fabd3faf5229f4c3168226346e3087026d3d2c8aed398d4988971e05ff0ab9f5f2328e7f51d5061584b44581a4c83e413718d3a82f87daf87d1d5a2c32fbaa58f095fbf34ccc603b632155c27289cb5598049a7c9160dfe8a01d5a1983408082941eb39db2a09c5a34dc876dfa58a589687aa0cf6be7b5b084a8f753758332896ec3adad7a79b751908ee2b3d25131f44185a0ed8d20e9b6b8a1ed11402b02e544b67caf3177eda039e64aaf295eca7953c165fa73afca96d7750663711101c6e14e44817c6ad4b1474132dd441ca5c9d7776c871ffacbd96910496cad7010b9b526135e84") ioctl$auto__ctl_fops_dm_ioctl(r2, 0xfffffff7effffd05, &(0x7f00000001c0)) ioctl$auto_I2C_RDWR(r1, 0x707, 0x0) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) r3 = io_uring_setup$auto(0x1, 0x0) r4 = socket(0x11, 0x80003, 0x300) setsockopt$auto(r4, 0x107, 0x1, 0x0, 0x8004) r5 = epoll_create$auto(0x6) close_range$auto(r3, r5, 0x100) unshare$auto(0x40000080) close_range$auto(0x2, 0x8, 0x0) 48.568929345s ago: executing program 2 (id=1463): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xfffffffffffefffd, 0x17) madvise$auto(0x0, 0xffffffffffff0001, 0x15) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x3, 0x19d0, 0xfffffffffffffffa, 0x8000) mkdir$auto(0x0, 0x8001) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r0, 0x0, 0x4044820) mount$auto(0x0, &(0x7f0000000100), 0x0, 0x100000, 0x0) unshare$auto(0x20000) setns(0xffffffffffffffff, 0x0) futex_waitv$auto(&(0x7f0000000000)={0xf, 0x100000000005d94, 0x4, 0x4}, 0x77, 0x0, 0x0, 0x62bd) fcntl$auto(0xff80000000000000, 0x4, 0xfffffffffffffffc) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) clone$auto(0x20003b44, 0x2, 0x0, 0x0, 0x2) ioctl$auto(0x3, 0x800005411, 0x38) mprotect$auto(0x1ffff000, 0x8000000000000001, 0x4) clone$auto(0x440f, 0x6, &(0x7f00000000c0)=0x10001, &(0x7f0000000180)=0x9, 0x8) io_uring_setup$auto(0x40005, &(0x7f0000000000)={0x6, 0x1, 0x400, 0x7, 0x1005, 0x6, 0x7, [0x4, 0x2e9, 0x8], {0x0, 0x1, 0x8, 0x7, 0x5, 0x100005, 0x1, 0x0, 0x7}, {0x4, 0xfff, 0xffff7fff, 0x2, 0xc005, 0x200, 0x3, 0x0, 0x3}}) madvise$auto(0x108000, 0x800034, 0x9) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) 47.386427582s ago: executing program 2 (id=1470): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = io_uring_setup$auto(0x6, 0x0) getpid() fcntl$getown(r0, 0x9) capget$auto(&(0x7f00000002c0)={0x10001}, 0x0) r1 = getpid() process_vm_readv$auto(r1, 0x0, 0x1, 0x0, 0x6, 0x0) r2 = getpid() pidfd_open$auto(r2, 0x0) syz_clone3(0x0, 0x0) open(0x0, 0x22240, 0x155) mmap$auto_fb_fops_fb_chrdev(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x100010, r0, 0x9e) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) io_uring_setup$auto(0x1, 0x0) futex$auto(0x0, 0x6, 0x8, 0x0, 0x0, 0xffffffd6) io_uring_enter$auto(0xffffffffffffffff, 0x100, 0xffff230a, 0x9, 0x0, 0x7fff) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) read$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) madvise$auto(0x0, 0x2003f0, 0x4) tkill$auto(0x1, 0x7) creat$auto(0x0, 0x4) swapon$auto(0x0, 0x3) 43.426754058s ago: executing program 2 (id=1489): mmap$auto(0x0, 0x4020009, 0xdb, 0xeb1, 0x401, 0x8000) write$auto_mtd_fops_mtdchar(0xffffffffffffffff, &(0x7f0000000040)="05614c6bfa0103a7c84cfe75d47677f91779dd7f8b34109102052a54545bde2b2b47235809467a16f7f9e88a64786c4597", 0x31) read$auto_proc_iter_file_ops_compat_inode(0xffffffffffffffff, 0x0, 0xfffffe13) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_smc_pnetid(&(0x7f0000000140), r0) write$auto(0xffffffffffffffff, 0x0, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x801, 0x84) io_uring_setup$auto(0x4, 0x0) mmap$auto(0x0, 0x9, 0xffb, 0x8000000008011, 0x3, 0x0) move_pages$auto(0x0, 0x1002, 0x0, 0x0, 0x0, 0x2) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) io_uring_enter$auto(0x3, 0x0, 0x1, 0x3, 0x0, 0x2) io_uring_enter$auto(0x3, 0x7, 0x2688, 0xe, 0x0, 0x7) socket(0x10, 0x2, 0x6) 42.988198679s ago: executing program 33 (id=1489): mmap$auto(0x0, 0x4020009, 0xdb, 0xeb1, 0x401, 0x8000) write$auto_mtd_fops_mtdchar(0xffffffffffffffff, &(0x7f0000000040)="05614c6bfa0103a7c84cfe75d47677f91779dd7f8b34109102052a54545bde2b2b47235809467a16f7f9e88a64786c4597", 0x31) read$auto_proc_iter_file_ops_compat_inode(0xffffffffffffffff, 0x0, 0xfffffe13) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_smc_pnetid(&(0x7f0000000140), r0) write$auto(0xffffffffffffffff, 0x0, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x801, 0x84) io_uring_setup$auto(0x4, 0x0) mmap$auto(0x0, 0x9, 0xffb, 0x8000000008011, 0x3, 0x0) move_pages$auto(0x0, 0x1002, 0x0, 0x0, 0x0, 0x2) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) io_uring_enter$auto(0x3, 0x0, 0x1, 0x3, 0x0, 0x2) io_uring_enter$auto(0x3, 0x7, 0x2688, 0xe, 0x0, 0x7) socket(0x10, 0x2, 0x6) 14.753212025s ago: executing program 1 (id=1558): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/nbd11/trace/act_mask\x00', 0x129982, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/vmcoreinfo\x00', 0x20000, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f00000008c0)=""/61, 0x3d) r2 = geteuid() setreuid$auto(r2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f00000038c0), 0xffffffffffffffff) write$auto_tracing_mark_raw_fops_trace(r3, &(0x7f0000000240)="c1c22ea9e6c40dfb055978f5a26dd54b00e3497eac316c54159254d41433b8c1a7a1bc11846494203070e3ab86cf5340a78e7d7be08875b65340678f287b21c6193d3250312de9978ba7b21d6835ee0183990e99b3f822288b76a88c54b4da20cc02d2a09e0d142fb912e81873257b1b7a2259a83018bf84a315146d6b5cb2727cdf7642eb5bf3142d6161824404d2a02fe753759e10de97f620dc73a7eac35c484c62ab213f192fe6037085269fe2771abcbbc5fcd92c023b37c707b265f3970c420e305c413d83f89c91602f8c0b2726014c8d645a6f25390541a5f5c0fa0905a10686eb4e", 0xe6) sendmsg$auto_L2TP_CMD_TUNNEL_MODIFY(r3, &(0x7f0000003980)={0x0, 0x0, &(0x7f0000003940)={&(0x7f0000003900)={0x1c, r4, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0xba}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8080}, 0x20008800) msgctl$auto(0x6, 0x3, &(0x7f00000001c0)={{0x1, r2, 0xee01, 0x6, 0x0, 0x6, 0x3}, 0x0, 0x0, 0x8, 0x9, 0x1, 0x205, 0x5b73, 0x49, 0x9, 0x2, @raw=0xb0}) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x800) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) move_pages$auto(0x0, 0xf54, 0x0, 0x0, 0x0, 0x8000000000000000) r5 = openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) ioctl$auto_dvb_demux_fops_dmxdev(r5, 0x40026f33, 0x0) pwrite64$auto(0xc8, &(0x7f0000000040)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x86\xdde\x1cJ\x99\x00\x00\x00\x00\x00\x00\xfd\xfd\xd3\xd3\x1d\xf8\xbe\x01\x00\x00\x00\'\x03\x00\x00\x9f\x1e\xf9\xa4*\x01\x00\x00\x00^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e#\xae\xa9i8W\xe5Iq\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2E\xd8?\'\x8dg\x81K*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00,,\x93\xba\x88\x93\xc6#\xe5\xaae\x9d\xb6\x1a\x7f\xc0%\xb0\rfOJ+\x02\x9b#)\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd0\xbdn\x1d\x00\xeb]B\xa0\x99\xb0R\xb4J}\xa8\xa1\x84]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\xde8\xf7\xc1\xa6\xf2\xc1\"\xact\xee\xc9\x00'/231, 0xfdf2, 0x3a) r6 = open(&(0x7f0000000100)='.\x00', 0x591002, 0x408) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) write$auto(0x3, 0x0, 0xfffffdef) linkat$auto(r6, 0x0, 0xffffffffffffff9c, &(0x7f0000000080)='&&\x00', 0x1000) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/bus/input/devices\x00', 0x400, 0x0) symlinkat$auto(0xfffffffffffffffe, 0x8, 0x0) select$auto(0x5, &(0x7f0000000080)={[0x20000009, 0x9, 0x9, 0x5, 0xc, 0x4000003, 0x3, 0x1ffe000, 0xcad, 0x2, 0x9, 0xf, 0xa657, 0x202, 0x6, 0x1]}, 0x0, 0x0, 0x0) r7 = socket(0xa, 0x2, 0x3a) setsockopt$auto(r7, 0x29, 0x40, &(0x7f00000002c0)='\x15!\xa8^J/\xddCx4!\x00\xd3\x8f\xff\x1b\x01\x1e\xe2\xa8\xd6\xd9\xc0\xa2\x0f\x88\xb1e\x8a\xd8?\xfe\xda\xc4\xef\xff(i\xc6@\xf2Vw\xbe\x1c$\xddm\x8a\x9d\x91_\vBj\x0eQ\xce\x16\'C\x8c\x01\x80\x92u\xd5\xb8\\\x82,\xe2=y\x9bR\xbcn\xa0c\x16~\x86\"t\x00\x00\x00\x00\xe4\xa5\xfe\xb5h\xae\xec%\xf9\x94>\xd6,\xf3\x98\'\xb0\t~~\xb4\x98\xbb3=A\x9c\x17\xaa\xce\fh-M\xdb-\x15VX\xfe\xca+\xb5\x95\xb3JL\x0fl\xe84\xbd\xa3nO\x9f\xfa\xb1\x06$\b$i3\x83\xd7\x06\xd6\x1e\xdbB\x9bb\x1cXC\x8c\x8b\xd9\xff\xf2Bf\x99!Z\x13\xff\xca\xf3e\x015\x9b\x86\xd6$\x1a\r3\x91\xb7\x942\xeb\xadVA\xfc\x1f\xbf1\xb7T\xc1\xbf\xc0\xc2\xfc\xe8w\xd33\xb2,&\xd5z\xe6\x93\xb9\aE\x825\x94U\xbbNeb\xd2\xa9\x0f\xed\x8b\xea\xfa\x8a\x04.\xffMIw\x0f\xd6\xae^\xd2\xf1j\xcb\r\xa4\x1d0d\xca\x81\x9c\x80GL\x0e\xe6\x19\x8au\x1a7\xc5|\xf6\x1e\xe00\xc6\"\x83\x1c\xa2\x9e\a\x1c\xea\xa3\x9c\xe1BF\x05b\xf6\xdcf\x04\xd9B\xb9\x98\x9cq\xbd\xfb\xb5~\xf2\x8d\x9f`\xec\xd0\xafY\xcf\x84', 0x18000110) pread64$auto(r0, 0x0, 0x4, 0x6) 12.373835705s ago: executing program 1 (id=1562): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) splice$auto(0x4, 0x0, 0x2, 0x0, 0x1000, 0xf) syslog$auto(0x3, &(0x7f0000000000)='\x00', 0xa) fcntl$auto(0x0, 0x407, 0xffffffff80000000) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) r0 = openat$auto_l2cap_debugfs_fops_(0xffffffffffffff9c, &(0x7f0000000100), 0x2182, 0x0) ioctl$auto(r0, 0x1ff, 0x1) modify_ldt$auto(0x6b26, &(0x7f0000000100), 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x801, 0x100) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NBD_CMD_CONNECT(r1, 0x0, 0x20040000) socket(0xa, 0x801, 0x84) mmap$auto(0x0, 0x8, 0x1000000004, 0x9b72, 0x2, 0x8000) mlockall$auto(0x9) ioctl$auto(0xc8, 0x6, 0x5d6e859b) madvise$auto(0x0, 0xffffffffffff0001, 0x9) open(&(0x7f0000000000)='./file0\x00', 0x261c2, 0x84) fallocate$auto(0x8000000000000003, 0x8000000, 0xd, 0x2cbd5d) close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x3, 0x6) r2 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f00000007c0), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_TUNNEL_INFO_GET(0xffffffffffffffff, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)={&(0x7f0000000140)={0x2c, r2, 0x705, 0x70bd25, 0x25dfdbfb, {}, [@ETHTOOL_A_TUNNEL_INFO_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x880) readv$auto(0x3, 0x0, 0x1) lstat$auto(0x0, &(0x7f0000000180)={0x4, 0x10, 0x9, 0x63, 0x0, 0x0, 0x0, 0x0, 0x40000000000f, 0x7, 0x40000402, 0x7ffffffb, 0x9, 0xffffffff80000000, 0x9, 0x7, 0x200000100103}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x89fc, &(0x7f0000000040)={'bridge0\x00'}) 8.596312526s ago: executing program 1 (id=1570): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socketpair$auto(0x1e, 0x5, 0x8, 0x0) r1 = socket(0xa, 0x801, 0x84) getsockopt$auto(r1, 0x84, 0x75, 0x0, &(0x7f0000000000)=0x9000c) r2 = openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$auto_DMA_HEAP_IOCTL_ALLOC(r2, 0xc0184800, 0x0) close_range$auto(0x2, 0x8, 0x0) r3 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x0, 0x0) read$auto_tomoyo_operations_securityfs_if(r3, &(0x7f0000000080)=""/4096, 0x105c) r4 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/swradio0\x00', 0x1600, 0x0) process_vm_readv$auto(0x0, &(0x7f0000000080)={0x0, 0x6}, 0x26, 0x0, 0x6, 0x0) readv$auto(0x3, &(0x7f0000000040)={&(0x7f0000000000), 0x36a}, 0x6) read$auto(r3, &(0x7f0000001200)='\xefI5\x1d\xc4~\xd0>\xd2;\xbcj\xce\x18+\x9blE\x18\xa1>V\n\xa4\x90cgy\x98O\xf4\x7f\xe0\xbf\xbb\x9f\xfc\xfb\x870l0\xcf\xb4\rx\xcb\bpg0x0}) sendmsg$auto_WG_CMD_GET_DEVICE(r0, &(0x7f0000000640)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000600)={&(0x7f00000010c0)={0x144, 0x0, 0x1, 0x70bd25, 0x25dfdbfb, {}, [@WGDEVICE_A_PUBLIC_KEY={0x5c, 0x4, "c9ad830a876b9b451304026c1ea967d59ae48fdf701a40490776076b4cceadf0ad24a8e1f197be2e928ed41ee8b801ea8f45378443058b1f61f3423011c1ec04883beb0adf117d00a3fe44734f11f9c3bebd89e32052a12d"}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x5}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x83f1}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e21}, @WGDEVICE_A_PRIVATE_KEY={0x4}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r3}, @WGDEVICE_A_PRIVATE_KEY={0x9a, 0x3, "bafb2d0882c149a2c4209d1ca97e4a96c7043412356032e110f2f4f32c7739ce8b0ba8641575831a760f79fbb25c3bd6656b8314374e7554fdf7f9083f48708e3906089fbef0aad08c8c4194d1dbb8578cdb656f44c8fa4dc1d5bd52fd537c94f8d5cfc435cab3153dee1d3f896f22ec5b811e259e4cf9b0521835a1b8f60d8bba3c6123ae8e692eb2db6b333929be28a44f92e1da64"}]}, 0x144}, 0x1, 0x0, 0x0, 0x4000}, 0x1) 5.175944394s ago: executing program 4 (id=1582): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) unshare$auto(0x40000080) mmap$auto(0x0, 0x3, 0xdf, 0x9b72, 0x2, 0x8000) setrlimit$auto(0x1000000007, 0x0) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) getrandom$auto(0x0, 0x6000000, 0x3) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) mlockall$auto(0x7) madvise$auto(0x0, 0x7, 0xfffffffa) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x60044061}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x801, 0x84) connect$auto(0x3, &(0x7f0000000140), 0x59) listen$auto(0x3, 0x81) accept$auto(0x3, 0x0, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) mlockall$auto(0x7) shmat$auto(0x0, &(0x7f0000000580)='(\x00', 0xfffffffe) epoll_create1$auto(0x8000000000000000) mremap$auto(0x0, 0x8000000000000008, 0x3fd6, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_NEW_INTERFACE(r0, 0x0, 0x2) sendmsg$auto_NL80211_CMD_ABORT_SCAN(0xffffffffffffffff, 0x0, 0x4000000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8000, 0x0) 5.042421505s ago: executing program 5 (id=1583): r0 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snd/controlC2\x00', 0x8ac0, 0x0) ioctl$auto(0x3, 0xc1485544, 0xb551) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x16f602, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) write$auto(r1, 0x0, 0xfffefdef) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x8001, 0x0) recvmmsg$auto(r1, 0x0, 0x3, 0x4, 0x0) r2 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000540)='/proc/sys/kernel/kexec_load_limit_panic\x00', 0x40141, 0x0) write$auto_proc_sys_file_operations_proc_sysctl(r2, 0x0, 0x0) write$auto(0x3, 0x0, 0xfffffdef) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NET_SHAPER_CMD_DELETE(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYRESDEC=r0, @ANYRESOCT=r1, @ANYBLOB="d5c1f3325d0bc2e0ef00f05e0736b19b1fec3bd562a46f713aed1a93eacfe8ace5143049952eac45", @ANYRES32=r4], 0x30}, 0x1, 0x0, 0x0, 0x44000}, 0xc050) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mprotect$auto(0xfffffffffffffff3, 0x8000000000000001, 0x6c25) madvise$auto(0x0, 0xa, 0x7f) ioctl$auto_KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x1) madvise$auto(0x0, 0x20499d, 0x9) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xc18, 0x8000) capget$auto(0x0, 0xfffffffffffffffe) r5 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000540)='/dev/sequencer2\x00', 0x1c8340, 0x0) ioctl$auto(r5, 0x40085112, 0x2) madvise$auto(0x0, 0xffffffffffff0001, 0x15) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) futex_waitv$auto(&(0x7f0000000000)={0x8, 0x5d94, 0x4, 0x4}, 0x77, 0x0, 0x0, 0x62bd) 3.797447366s ago: executing program 1 (id=1586): prctl$auto(0x1000000001c, 0x5, 0x8, 0x9, 0x80001) setreuid$auto(0x15, 0x5) eventfd$auto(0x8c) socket(0x10, 0x2, 0x4) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x4, &(0x7f0000000000), 0x1) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x19) clone$auto(0x1, 0x1, 0x0, 0x0, 0x7) mmap$auto(0x0, 0x9, 0xdf, 0xeb1, 0xfffffffffffffffd, 0x8000) openat$auto_vcs_fops_vc_screen(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa1\x00', 0x48080, 0x0) r0 = openat$auto_mousedev_fops_mousedev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/mice\x00', 0x42, 0x0) bind$auto(r0, &(0x7f0000000080)=@vsock={0x28, 0x0, 0x2711}, 0x0) write$auto_mousedev_fops_mousedev(r0, &(0x7f0000000040)='\\', 0x1) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/fs/o2cb/logmask/ERROR\x00', 0x122d82, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000db, 0xeb1, 0x400, 0x8000) read$auto(0x3, 0x0, 0x80) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_macsec(&(0x7f00000001c0), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) statx$auto(0xffffffffffffff9c, 0x0, 0x2, 0x9, &(0x7f0000001400)={0x1, 0xe23b, 0xebee, 0x80000001, 0xffffffffffffffff, 0x0, 0x81, 0x1, 0xffff, 0xc, 0x4, 0x8, {0x0, 0xfb0}, {0x7, 0x401}, {0xb03, 0x6}, {0x7, 0x9}, 0x3, 0x7, 0x5, 0x9, 0x7, 0x7, 0x6, 0x3, 0xff, 0x40, 0x8001, 0x401, [0x9b, 0x0, 0x7fff, 0x3, 0x935c, 0x9, 0x4, 0x9e1]}) sendmsg$auto_MACSEC_CMD_UPD_OFFLOAD(r1, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f00000012c0)=ANY=[@ANYBLOB="44010000", @ANYRES16=r2, @ANYBLOB="01002dbd7000fddbdf250a00000008000100", @ANYRES32, @ANYBLOB="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", @ANYRES32, @ANYBLOB="0b0042006d6163736563000014002d00fc010000000000000000000000000001080001"], 0x144}, 0x1, 0x0, 0x0, 0x4040085}, 0x0) newfstatat$auto(0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x9, 0x180000, 0xa, 0x5, 0xee00, 0x0, 0x0, 0x8001, 0x1, 0xd, 0x0, 0x100000001, 0xb2, 0x1000, 0x12, 0x2, 0x2}, 0xf375) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) io_uring_setup$auto(0x6, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000100)='/dev/midi2\x00', 0x42841, 0x0) writev$auto(0x4, &(0x7f0000000080)={&(0x7f0000000040), 0x8}, 0x5) 3.537828925s ago: executing program 3 (id=1587): mmap$auto(0x0, 0xdc, 0x3, 0xeb1, 0xfffffffffffffffa, 0x7ffc) mmap$auto(0x6, 0x1, 0x6, 0xff, 0x400, 0x7) r0 = openat$auto_rfkill_fops_core(0xffffffffffffff9c, &(0x7f0000000140), 0x382, 0x0) ppoll$auto(&(0x7f0000000040)={r0, 0x9, 0x5}, 0x9, 0x0, 0x0, 0x8) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0xa, 0x1, 0x84) migrate_pages$auto(0x0, 0x2, &(0x7f0000000000)=0x73, &(0x7f0000000040)=0x80000001) setsockopt$auto(0x3, 0x10000000084, 0x85, 0x0, 0x90) r1 = socket(0xa, 0x1, 0x0) listen$auto(0x3, 0x81) sendmmsg$auto(r1, 0x0, 0x1, 0x4) close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x3, 0x6) recvfrom$auto(0x3, 0x0, 0x800000000e, 0xfffff4a4, 0x0, 0xfffffffffffffffd) r2 = io_uring_setup$auto(0x1, 0x0) r3 = epoll_create$auto(0x6) close_range$auto(r2, r3, 0x100) capset$auto(&(0x7f0000000080)={0x5, 0x0}, &(0x7f00000000c0)={0x4, 0x80000000, 0x13f2}) r5 = gettid() ioctl$auto_SNDRV_CTL_IOCTL_ELEM_WRITE(r3, 0xc4c85513, &(0x7f0000000440)={{@inferred=r4, 0x4, 0x3, 0x2, "6915133f0d8d3104456755e66ac66ec39be06740d85e693eafde0e394504e995f0d6c2e18e5a6e107955c169", @inferred=r5}, 0x1, @integer=@value=[0xc, 0x7, 0x100000000, 0x5, 0x1, 0x5, 0x0, 0x4, 0x2, 0x5, 0x3, 0x5, 0xd, 0x3, 0x2, 0xd731, 0x9, 0xff, 0x5, 0xb4d, 0x1, 0x3, 0x6, 0x2, 0x5a3a, 0x6, 0x54, 0x3, 0xfff, 0xffffffffffffff3c, 0x3d, 0x5, 0x4002, 0x4, 0x8, 0x9, 0x9, 0x4, 0x24d4, 0x6, 0xff, 0xffffffffffffff7f, 0xfffffffffffffffd, 0x9, 0x9, 0x7, 0x0, 0x10001, 0x851, 0x9, 0x6, 0x401, 0x5d8e, 0x8000000000000000, 0xfffffffffffffffe, 0x9, 0x1, 0x0, 0x1, 0x8001, 0x5, 0xfffffffffffffffd, 0x2, 0x8, 0x7fffffffffffffff, 0x8, 0x0, 0x800, 0x564, 0x20, 0x3, 0x7, 0x9, 0x100000000, 0x0, 0x8000000000000000, 0x400, 0x2, 0x5, 0xfffffffffffff801, 0x5, 0x5, 0x5, 0x8, 0x2, 0x9, 0x2, 0x9, 0xfffffffffffffffc, 0x8, 0x8, 0x0, 0x6, 0x4, 0x5, 0x9, 0x100, 0x2abb, 0x7, 0x9, 0x7, 0x0, 0x0, 0x100000001, 0xb3e2, 0xfffffffffffffff9, 0x5, 0x0, 0x8, 0x8, 0x200, 0x1a7406c3, 0x0, 0xfffffffffffff03b, 0x273e, 0xbe, 0x3446, 0xfffffffffffffffc, 0x40, 0x40e, 0x6e76, 0x5, 0x5, 0x43b, 0x4, 0x8034, 0x8000000000000000, 0x3ff], "a4087085b5ea4ee09e34bdbca79889ad7909e718c5c6d02c866a8addd0e53ed1e4b5e47a9c9691978939a08d85654e19e3aa765ffaf749305d5b536d849502adfc1852817acfa1c725f3ca98301b2458020b9b6fb0b56c416327c59b9964bebea3fb640c7168dba0c92d40eb3d512a9f0426c96f2fcfba630f243c248f2d8a86"}) r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000340)='/sys/kernel/mm/mempolicy/weighted_interleave/node0\x00', 0x101640, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r6, &(0x7f0000000380)=""/137, 0x89) r7 = socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) statmount$auto(0x0, &(0x7f0000000180)={0x9, 0x1, 0x100000000, 0x5, 0x1b, 0x940, 0x1ffde, 0x3, 0x2000000000000006, 0x2, 0x9, 0x5, 0xffffffffffffffff, 0x8, 0xae, 0x9, 0x2, 0x7, 0x5, 0x7, 0x3, 0x0, 0x0, 0x200, 0x0, 0x0, [0x0, 0x4, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0xfffffffffffffffd, 0x1, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x400000, 0x0, 0x80000000000, 0x400000000000000, 0x0, 0x8000000000000000, 0x80000000000000, 0x0, 0xfffffffffffffffd, 0x0, 0xfffffffffffffbfe, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x8, 0xfffffffffffffffe, 0x80000000, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x80000001]}, 0x1fe, 0x81) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) sendmmsg$auto(r7, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008) 2.820433956s ago: executing program 5 (id=1588): mmap$auto(0x0, 0x4020009, 0xdb, 0xeb1, 0x401, 0x8000) write$auto_mtd_fops_mtdchar(0xffffffffffffffff, &(0x7f0000000040)="05614c6bfa0103a7c84cfe75d47677f91779dd7f8b34109102052a54545bde2b2b47235809467a16f7f9e88a64786c4597", 0x31) read$auto_proc_iter_file_ops_compat_inode(0xffffffffffffffff, 0x0, 0xfffffe13) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_smc_pnetid(&(0x7f0000000140), r0) write$auto(0xffffffffffffffff, 0x0, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x801, 0x84) io_uring_setup$auto(0x4, 0x0) mmap$auto(0x0, 0x9, 0xffb, 0x8000000008011, 0x3, 0x0) move_pages$auto(0x0, 0x1002, 0x0, 0x0, 0x0, 0x2) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) io_uring_enter$auto(0x3, 0x7, 0x2688, 0xe, 0x0, 0x7) socket(0x10, 0x2, 0x6) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x80000, 0x0) 2.619043394s ago: executing program 4 (id=1589): mmap$auto(0x0, 0x400005, 0xfffffffffffffffe, 0x9b72, 0x2, 0x8000) sendmsg$auto_WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x4008810}, 0x2000c041) r0 = socket(0x2a, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000080), 0x6b) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) fcntl$auto(0xffffffffffffffff, 0x401, 0x5) sendmsg$auto_OVS_METER_CMD_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc0}, 0x40) write$auto(0x3, 0x0, 0xfffffdef) setsockopt$auto(0xffffffffffffffff, 0x4, 0x8001, 0x0, 0x2) unshare$auto(0x40000080) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) sysfs$auto(0x2, 0x10000000000002d, 0x0) syz_genetlink_get_family_id$auto_ovs_datapath(0x0, r0) mbind$auto(0x0, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) r1 = gettid() connect$auto(0xffffffffffffffff, 0x0, 0x55) mmap$auto(0x7, 0x5, 0x3, 0x16, 0x3, 0xfffffffffffffffd) sendfile$auto(0x6, 0xffffffffffffffff, 0x0, 0x8000) unshare$auto(0x40000080) writev$auto(0x1, &(0x7f0000000100)={0x0, 0x400000000000fdef}, 0x1) madvise$auto(0x0, 0x20200, 0x15) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r2 = open(0x0, 0x400, 0x23) fchdir$auto(r2) mkdir$auto(&(0x7f0000000140)='MAC80211_HWSIM\x00', 0x1) rmdir$auto(&(0x7f0000000340)='MAC80211_HWSIM\x00') process_vm_readv$auto(r1, &(0x7f0000000040)={0x0, 0x8}, 0x4, &(0x7f00000000c0)={0x0, 0x100000000000002}, 0x6, 0x0) move_pages$auto(r1, 0x4, &(0x7f0000000100)=&(0x7f0000000040), &(0x7f0000000140)=0x3, 0x0, 0x0) 2.588775025s ago: executing program 3 (id=1590): mmap$auto(0x0, 0x4020009, 0xdb, 0xeb1, 0x401, 0x8000) write$auto_mtd_fops_mtdchar(0xffffffffffffffff, &(0x7f0000000040)="05614c6bfa0103a7c84cfe75d47677f91779dd7f8b34109102052a54545bde2b2b47235809467a16f7f9e88a64786c4597", 0x31) read$auto_proc_iter_file_ops_compat_inode(0xffffffffffffffff, 0x0, 0xfffffe13) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_smc_pnetid(&(0x7f0000000140), r0) write$auto(0xffffffffffffffff, 0x0, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x801, 0x84) io_uring_setup$auto(0x4, 0x0) mmap$auto(0x0, 0x9, 0xffb, 0x8000000008011, 0x3, 0x0) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) io_uring_enter$auto(0x3, 0x0, 0x1, 0x3, 0x0, 0x2) io_uring_enter$auto(0x3, 0x7, 0x2688, 0xe, 0x0, 0x7) socket(0x10, 0x2, 0x6) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x80000, 0x0) 2.470069638s ago: executing program 3 (id=1591): mmap$auto(0x0, 0x8, 0x4000000000df, 0x44eb1, 0x6, 0x300000000000) r0 = socketpair$auto(0x1e, 0x1, 0x0, 0x0) sendfile$auto(r0, 0xffffffffffffffff, 0x0, 0x7fffe000) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) mmap$auto(0x0, 0x8, 0x4000000000df, 0x44eb1, 0x6, 0x300000000000) socket(0x2c, 0x3, 0x0) statmount$auto(0x0, 0x0, 0xe3c, 0x0) mbind$auto(0xe, 0x2, 0x5, &(0x7f0000000000)=0x1, 0x7, 0x9) madvise$auto(0x1, 0x7, 0x10000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000003240), 0x20001, 0x0) mremap$auto(0x1ff000, 0xfee0, 0x3fd6, 0x3, 0xfffff000) mremap$auto(0x0, 0x4, 0x4, 0x7, 0x100000000) mmap$auto(0x0, 0x9, 0x3ff57696, 0x9b72, 0x2, 0x8000000000008000) mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x5, 0x2) 2.421270646s ago: executing program 5 (id=1592): r0 = socket(0x2, 0x1, 0x0) socket(0x2, 0x1, 0x0) socket(0x2, 0x6, 0x0) openat$auto_tap_fops_tap(0xffffffffffffff9c, 0x0, 0x2000, 0x0) epoll_create$auto(0x4) r1 = epoll_create$auto(0xf774) r2 = socket$nl_generic(0x10, 0x3, 0x10) getdents$auto(r2, 0x0, 0x3) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x3fd, 0x8000) socket(0x18, 0x5, 0x80) ioctl$auto_KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae03, 0x60) setitimer$auto(0x2, &(0x7f0000000000)={{0x100000000000002, 0x7f}, {0x800000004, 0x2}}, 0x0) write$auto(0x800000000000c8, 0x0, 0x1a) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000001040)='/sys/devices/virtual/nfc/nfc1/rfkill1/index\x00', 0x2000, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0xffff, @remote}, 0x6a) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0xfffffffd, 0x20000000) mmap$auto(0x0, 0x402000b, 0xdf, 0xeb2, 0x401, 0x8000) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f000000fc00), 0x3, 0x0) ioctl$auto_BTRFS_IOC_FORGET_DEV(r1, 0x50009405, 0x0) move_pages$auto(0x0, 0x1002, 0x0, 0x0, 0x0, 0x2) sendmsg$auto_NL80211_CMD_GET_SURVEY(0xffffffffffffffff, 0x0, 0x20008001) ioctl$auto_KVM_CREATE_VM(0xffffffffffffffff, 0xc004ae0a, 0x88) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f000000fc00), 0x3, 0x0) ioctl$auto_KVM_CREATE_VM(r3, 0xc008ae88, 0x88) socket(0x2, 0x3, 0xa) socketpair$auto(0x1e, 0x9, 0x8000000000000000, 0x0) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0xfffffffe, &(0x7f00000002c0)={0x0, 0x20000000000c4}, 0x1, 0x0, 0x0, 0x9}, 0x3}, 0x1, 0x0) write$auto(0x3, 0x0, 0xfdf3) 2.218629179s ago: executing program 1 (id=1593): unshare$auto(0x40000080) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) removexattr$auto(0x0, 0x0) mmap$auto(0x4, 0x2020009, 0x8, 0xeb1, 0xffffffffffeffffa, 0x7ffd) getrandom$auto(0x0, 0x6000000, 0x3) r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/net/rxrpc/calls\x00', 0x100, 0x0) read$auto_proc_reg_file_ops_compat_inode(r0, &(0x7f0000000040)=""/88, 0x58) read$auto_proc_reg_file_ops_compat_inode(r0, &(0x7f0000001080)=""/4092, 0xffc) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_WG_CMD_GET_DEVICE(0xffffffffffffffff, 0x0, 0x4000) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) socketpair$auto(0x1d, 0x2, 0x2, 0x0) open(0x0, 0x252802, 0x190) socket(0x1, 0x1, 0x0) setsockopt$auto(0x3, 0x1, 0xf44, 0x0, 0x9) connect$auto(0x3, &(0x7f00000001c0), 0x55) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0xfffffffffffefffd, 0x17) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) madvise$auto(0x0, 0x80000001, 0x8) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x2020009, 0xffff, 0xeb1, 0xfffffffffffffffa, 0x8000) remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0x6, 0x4) 1.727185071s ago: executing program 3 (id=1594): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_seg6(&(0x7f0000000480), r0) close_range$auto(0xffffffffffffffff, r0, 0x7f) sendmsg$auto_SEG6_CMD_SETHMAC(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000c40)={0x2c, r1, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@SEG6_ATTR_SECRETLEN={0x5}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x6}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x40000) r2 = socket(0x1, 0x5, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) sysfs$auto(0x2, 0x0, 0x0) fsopen$auto(0x0, 0x1) close_range$auto(0x0, 0xfffffffffffff000, 0x2) r3 = socket(0x2, 0x6, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) connect$auto(r2, 0x0, 0x1) epoll_create$auto(0x4) epoll_ctl$auto(0x5, 0x1, r2, 0x0) r4 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$auto_NL80211_CMD_GET_INTERFACE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000700)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010026bd7000fcdbdf250f000000080003", @ANYRES32=r6], 0x1c}, 0x1, 0x0, 0x0, 0x4000001}, 0x40010) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) sendmsg$auto_NFC_CMD_DEV_DOWN(0xffffffffffffffff, 0x0, 0x8000) mremap$auto(0x0, 0x7, 0x3fd6, 0x3, 0x20000000) openat$auto_sg_fops_sg(0xffffffffffffff9c, 0x0, 0x800, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) poll$auto(0x0, 0x4, 0xfffff800) ioctl$auto_SG_EMULATED_HOST(0xffffffffffffffff, 0x2203, 0x0) connect$auto(0xffffffffffffffff, &(0x7f0000000080), 0x9) mbind$auto(0x0, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) sendmmsg$auto(0xffffffffffffffff, 0x0, 0x7, 0x4008) write$auto(0x3, 0x0, 0xfffffdef) 1.307184762s ago: executing program 5 (id=1595): mmap$auto(0x0, 0x202000b, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) close_range$auto(r0, r0, 0x0) openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000200), 0x400, 0x3f) r1 = openat$auto_adf_hb_cfg_fops_adf_heartbeat_dbgfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/ieee80211/phy0/netdev:wlan0/uapsd_queues\x00', 0x20c02, 0x0) lseek$auto(0x3, 0x7fffffffffffffff, 0x76) openat$auto_event_trigger_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/tracing/events/vmalloc/purge_vmap_area_lazy/trigger\x00', 0x20280, 0x0) read$auto_event_trigger_fops_trace(r0, &(0x7f0000000080)=""/128, 0x80) write$auto_event_trigger_fops_trace(r0, &(0x7f0000000140)="153c968e6ae5d1a1007809d9ea3f366a62cf75bc776aa186ace78ab22259e05933a2256fb1def74820deba7f0aa28b9182b0606b5b177b27d44b5ceb0b9d1e860c92d85d0bcde2f9a310db5513791b8ee05e835eecc7a1fc71d1e152060f5437b134583bb83fbc16ad6034a6cc7d75c4e406074d85b8e15223bf5ddd7d665263571162a4abf7503e17db1f7ce91e9d836e569ad0553a280552b3956b69", 0x9d) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) mmap$auto(0x0, 0x2020005, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) prctl$auto(0x6, 0x7fffffffffffafff, 0x0, 0x5, 0x3) shutdown$auto(r1, 0xffff) fanotify_init$auto(0x65, 0x2) socket(0xa, 0x806, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb2, 0xfffffffffffffffb, 0x8000) socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) sysfs$auto(0x1, 0x7, 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) syz_clone(0xc5200211, 0x0, 0x9, 0x0, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x1, 0x4, 0x87) bpf$auto(0x0, &(0x7f0000000240)=@token_create={0xf, r2}, 0xa3) msgsnd$auto(0x0, &(0x7f0000000000)={0x1, 0x5}, 0x8, 0x9) io_uring_setup$auto(0x3, 0x0) r3 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0) write$auto(r3, 0x0, 0xe) 371.725705ms ago: executing program 3 (id=1596): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_tcp_metrics(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_TCP_METRICS_CMD_DEL(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x14, r1, 0x1, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0xc004}, 0x8004) sendmsg$auto_TCP_METRICS_CMD_DEL(r0, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0x58, r1, 0x20, 0x70bd2b, 0x25dfdbfb, {}, [@TCP_METRICS_ATTR_SADDR_IPV6={0x14, 0xc, @loopback}, @TCP_METRICS_ATTR_ADDR_IPV6={0x14, 0x2, @loopback}, @TCP_METRICS_ATTR_SADDR_IPV6={0x14, 0xc, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x10}}}, @TCP_METRICS_ATTR_SADDR_IPV4={0x8, 0xb, @private=0xa010100}]}, 0x58}, 0x1, 0x0, 0x0, 0x8c0}, 0x0) sendmsg$auto_OVS_DP_CMD_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, 0x0, 0x1, 0x2070bd26, 0x25dfdbf8, {}, [@OVS_DP_ATTR_UPCALL_PID={0x8, 0x2, 0x4}, @OVS_DP_ATTR_NAME={0x8, 0x1, 'HfR\x00'}, @OVS_DP_ATTR_IFINDEX={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x801}, 0x80) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'veth1_to_team\x00'}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'veth1_to_hsr\x00'}) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) sendmsg$auto_NL80211_CMD_SET_WIPHY(0xffffffffffffffff, 0x0, 0x80) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'wlan0\x00'}) r2 = socket(0xa, 0x2, 0x88) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'bond0\x00', 0x0}) bpf$auto(0x0, 0x0, 0xf) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) r4 = syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000140), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000f40)={'batadv0\x00', 0x0}) sendmsg$auto_BATADV_CMD_SET_MESH(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000240)={0x24, r4, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r7}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x24}}, 0x140000e4) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$auto_macsec(&(0x7f0000000240), 0xffffffffffffffff) r10 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000080)={'macsec0\x00', 0x0}) sendmsg$auto_MACSEC_CMD_ADD_RXSC(r8, &(0x7f0000004100)={0x0, 0x0, &(0x7f00000040c0)={&(0x7f0000004140)={0x2c, r9, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@MACSEC_ATTR_RXSC_CONFIG={0x10, 0x2, 0x0, 0x1, [@typed={0xc, 0x1, 0x0, 0x0, @u64=0x6}]}, @MACSEC_ATTR_IFINDEX={0x8, 0x1, r11}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20040801}, 0x4000000) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'bridge0\x00'}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) sendmsg$auto_ETHTOOL_MSG_TUNNEL_INFO_GET(r0, &(0x7f0000000600)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000440)={0xb8, 0x0, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@ETHTOOL_A_TUNNEL_INFO_HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_TUNNEL_INFO_HEADER={0x4}, @ETHTOOL_A_TUNNEL_INFO_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @ETHTOOL_A_TUNNEL_INFO_HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}]}, @ETHTOOL_A_TUNNEL_INFO_HEADER={0x4}, @ETHTOOL_A_TUNNEL_INFO_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0xb8}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) 338.443156ms ago: executing program 4 (id=1597): process_vm_writev$auto(0x0, &(0x7f00000011c0)={&(0x7f00000001c0)="42777dd1330b458d0b5c44ca32e94fc00cfbce962ee7d8f31c0f90c327830f55adfdceafcc0f7b5a21ea23bdf5344d47d49d60218e57bb33118d04fdd37f5fd17f96a318132a5dd282782f8535b3d80698e45e0442c802a7", 0x9}, 0x7, 0x0, 0x7, 0x5) sendmsg$auto_TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000002a80)={&(0x7f00000000c0)=ANY=[@ANYBLOB="18000000", @ANYRES8=0x0, @ANYBLOB="01000200000000006bbc9d65365cbf8013"], 0x18}, 0x1, 0x0, 0x0, 0x4000094}, 0x8080) socket(0x11, 0x3, 0x9) r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/fs/cifs/dfscache\x00', 0x8f3b7a51b84bfb01, 0x0) write$auto_proc_reg_file_ops_compat_inode(r0, &(0x7f0000000040)="20edd9d1027e0dc0023af10e9bfa1babfa3a3753ca9aee370a", 0x19) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/kernel/sem\x00', 0x80401, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = socket(0xa, 0x2, 0x0) sendmmsg$auto(0xffffffffffffffff, 0x0, 0x4, 0x8) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0xc0) sendmmsg$auto(0xffffffffffffffff, 0x0, 0x7, 0x0) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, 0x0, 0xc0) syz_genetlink_get_family_id$auto_802_15_4_mac(&(0x7f0000000540), 0xffffffffffffffff) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/profiling\x00', 0x8d80, 0x0) setsockopt$auto(r1, 0x800, 0xc1, &(0x7f0000000040)='\"\x81=\xff{>\xca\xd8w@\xd0\xc4\xfb&L\xeb=j\a\xf1y\xb3\x1d', 0x7) mprotect$auto(0x1ffff000, 0x80000008, 0xd) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/block/zram0/algorithm_params\x00', 0xa001, 0x0) write$auto(r2, &(0x7f0000000540)='\"\x81=\xff{>\xca\xd8w@\xd0\xc4\xfb&L\xeb=j\a\xf1y\xb3\x1d', 0x1) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/nbd7/queue/max_discard_segments\x00', 0x80000, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) dup2$auto(r4, r4) mq_open$auto(&(0x7f0000000280)='\\*)A ', 0x7e, 0x9, 0x0) mq_notify$auto(0x5, &(0x7f00000000c0)={@sival_int=0x9d2, @inferred, 0x1}) mq_timedsend$auto(0x5, &(0x7f0000000000)=']#%$\x00', 0x5, 0x9, 0x0) read$auto(r3, 0x0, 0x9) openat$auto_stats_fops_(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/kfence/stats\x00', 0x20000, 0x0) close_range$auto(0x2, 0xa, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 103.600756ms ago: executing program 4 (id=1598): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r0 = socket(0x2, 0x1, 0x0) bind$auto(r0, &(0x7f0000000040)=@in={0x2, 0x4e23}, 0x67) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x2, 0xb}, 0x800009}, 0x5, 0x20000000) rseq$auto(0x0, 0x8000, 0x0, 0x6) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) r1 = socket(0xa, 0x2, 0x0) select$auto(0x3, 0x0, 0x0, 0x0, 0x0) connect$auto(0x3, 0x0, 0xfffff001) write$auto(0x3, 0x0, 0x200000000fdef) recvmmsg$auto(0x3, 0x0, 0x10000, 0x6, 0x0) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, 0x0, 0x400c000) shutdown$auto(0x200000003, 0x2) write$auto(0x3, 0x0, 0x296) pipe2$auto(&(0x7f0000000000), 0x4) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r2 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r3 = socket(0x29, 0x2, 0x0) r4 = socket(0x10, 0x2, 0x0) sendmsg$auto_ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x2000000}, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200", @ANYBLOB="5de1"], 0x1ac}}, 0x40000) recvmmsg$auto(r4, &(0x7f0000000140)={{0x0, 0xfffffffe, 0x0, 0x5, 0x0, 0x200002, 0x8}, 0x801}, 0xfffffff9, 0x10, 0x0) ioctl$auto(r3, 0x89f2, 0x24) ioctl$auto_VHOST_SET_OWNER(r2, 0xaf01, 0x5) ioctl$auto(r2, 0x4004af07, 0x0) openat$auto_proc_timens_offsets_operations_base(0xffffffffffffff9c, 0x0, 0x810c41, 0x0) 0s ago: executing program 3 (id=1599): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x34, r1, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@ETHTOOL_A_PAUSE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_PAUSE_RX={0x5, 0x3, 0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x4040000) mmap$auto(0x0, 0x400005, 0xfffffffffffffffe, 0x9b72, 0x2, 0x8000) sendmsg$auto_WG_CMD_GET_DEVICE(0xffffffffffffffff, 0x0, 0x2000c041) r2 = socket(0x2a, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000080), 0x6b) connect$auto(0x3, &(0x7f00000000c0), 0x55) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) fcntl$auto(0xffffffffffffffff, 0x401, 0x5) write$auto(0x3, 0x0, 0xfffffdef) setsockopt$auto(0xffffffffffffffff, 0x4, 0x8001, 0x0, 0x2) unshare$auto(0x40000080) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) sysfs$auto(0x2, 0x10000000000002d, 0x0) syz_genetlink_get_family_id$auto_ovs_datapath(0x0, r2) mbind$auto(0x0, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) gettid() connect$auto(0xffffffffffffffff, 0x0, 0x55) mmap$auto(0x0, 0x5, 0x3, 0x16, 0x3, 0x8000) sendfile$auto(0x6, 0xffffffffffffffff, 0x0, 0x8000) unshare$auto(0x40000080) writev$auto(0x1, &(0x7f0000000100)={0x0, 0x400000000000fdef}, 0x1) madvise$auto(0x0, 0x20200, 0x15) r3 = open(&(0x7f0000000200)='./cgroup\x00', 0x400, 0x23) fchdir$auto(r3) mkdir$auto(&(0x7f0000000140)='MAC80211_HWSIM\x00', 0x1) rmdir$auto(&(0x7f0000000340)='MAC80211_HWSIM\x00') kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.10.46' (ED25519) to the list of known hosts. [ 78.194454][ T5824] cgroup: Unknown subsys name 'net' [ 78.325858][ T5824] cgroup: Unknown subsys name 'cpuset' [ 78.334756][ T5824] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 79.754554][ T5824] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 81.562773][ T5845] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 81.572401][ T5845] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 81.580253][ T5844] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 81.581495][ T5845] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 81.590870][ T5844] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 81.600118][ T5845] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 81.613418][ T5845] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 81.622092][ T5845] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 81.622761][ T5844] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 81.631426][ T5845] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 81.646616][ T5845] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 81.656854][ T5844] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 81.656975][ T5845] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 81.664958][ T5847] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 81.674375][ T5845] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 81.680404][ T5844] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 81.688368][ T5845] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 81.703954][ T5843] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 81.716449][ T5843] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 81.716747][ T5845] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 81.734223][ T5845] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 81.746678][ T5845] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 81.768068][ T5845] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 81.776883][ T5845] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 82.080666][ T5834] chnl_net:caif_netlink_parms(): no params data found [ 82.213499][ T5835] chnl_net:caif_netlink_parms(): no params data found [ 82.276001][ T5833] chnl_net:caif_netlink_parms(): no params data found [ 82.301256][ T5834] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.310742][ T5834] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.320164][ T5834] bridge_slave_0: entered allmulticast mode [ 82.327633][ T5834] bridge_slave_0: entered promiscuous mode [ 82.337205][ T5836] chnl_net:caif_netlink_parms(): no params data found [ 82.357709][ T5834] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.367580][ T5834] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.376451][ T5834] bridge_slave_1: entered allmulticast mode [ 82.385675][ T5834] bridge_slave_1: entered promiscuous mode [ 82.470894][ T5834] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.485653][ T5834] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.525010][ T5835] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.532637][ T5835] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.540576][ T5835] bridge_slave_0: entered allmulticast mode [ 82.548044][ T5835] bridge_slave_0: entered promiscuous mode [ 82.556633][ T5835] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.564548][ T5835] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.574913][ T5835] bridge_slave_1: entered allmulticast mode [ 82.582487][ T5835] bridge_slave_1: entered promiscuous mode [ 82.667098][ T5835] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.685355][ T5835] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.700514][ T5834] team0: Port device team_slave_0 added [ 82.710307][ T5834] team0: Port device team_slave_1 added [ 82.737588][ T5833] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.746910][ T5833] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.761323][ T5833] bridge_slave_0: entered allmulticast mode [ 82.769878][ T5833] bridge_slave_0: entered promiscuous mode [ 82.800674][ T5836] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.812637][ T5836] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.821562][ T5836] bridge_slave_0: entered allmulticast mode [ 82.829728][ T5836] bridge_slave_0: entered promiscuous mode [ 82.837965][ T5833] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.846011][ T5833] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.854107][ T5833] bridge_slave_1: entered allmulticast mode [ 82.861288][ T5833] bridge_slave_1: entered promiscuous mode [ 82.886560][ T5836] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.894652][ T5836] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.902662][ T5836] bridge_slave_1: entered allmulticast mode [ 82.910332][ T5836] bridge_slave_1: entered promiscuous mode [ 82.936166][ T5835] team0: Port device team_slave_0 added [ 82.945642][ T5835] team0: Port device team_slave_1 added [ 82.954601][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.962892][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.993860][ T5834] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.041621][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.049674][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.080197][ T5834] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.095580][ T5836] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.109864][ T5833] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.123499][ T5833] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.149387][ T5836] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.178567][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.188052][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.218301][ T5835] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.233378][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.241034][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.278048][ T5835] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.326472][ T5836] team0: Port device team_slave_0 added [ 83.335274][ T5836] team0: Port device team_slave_1 added [ 83.346084][ T5833] team0: Port device team_slave_0 added [ 83.355853][ T5833] team0: Port device team_slave_1 added [ 83.387568][ T5834] hsr_slave_0: entered promiscuous mode [ 83.394659][ T5834] hsr_slave_1: entered promiscuous mode [ 83.424928][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.432682][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.461678][ T5836] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.498131][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.506296][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.535060][ T5836] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.548240][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.556026][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.584361][ T5833] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.597889][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.605690][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.635039][ T5833] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.683422][ T5835] hsr_slave_0: entered promiscuous mode [ 83.693262][ T5835] hsr_slave_1: entered promiscuous mode [ 83.700657][ T5835] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 83.711081][ T5835] Cannot create hsr debugfs directory [ 83.791829][ T5833] hsr_slave_0: entered promiscuous mode [ 83.800560][ T5833] hsr_slave_1: entered promiscuous mode [ 83.808752][ T5838] Bluetooth: hci2: command tx timeout [ 83.815086][ T5845] Bluetooth: hci0: command tx timeout [ 83.822666][ T5144] Bluetooth: hci3: command tx timeout [ 83.832839][ T5833] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 83.843066][ T5833] Cannot create hsr debugfs directory [ 83.858408][ T5836] hsr_slave_0: entered promiscuous mode [ 83.865130][ T5836] hsr_slave_1: entered promiscuous mode [ 83.874041][ T5836] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 83.883071][ T5144] Bluetooth: hci1: command tx timeout [ 83.883749][ T5836] Cannot create hsr debugfs directory [ 84.127200][ T5834] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 84.152052][ T5834] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 84.164850][ T5834] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 84.203306][ T5834] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 84.239784][ T5835] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 84.253579][ T5835] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 84.288642][ T5835] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 84.300775][ T5835] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 84.340624][ T5833] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 84.366684][ T5833] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 84.390223][ T5833] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 84.414166][ T5833] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 84.461164][ T5836] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 84.487805][ T5836] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 84.507283][ T5836] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 84.518172][ T5836] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 84.585728][ T5834] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.637705][ T5835] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.666588][ T5834] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.701266][ T1140] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.710038][ T1140] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.726878][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.734593][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.754834][ T5835] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.784922][ T5833] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.806103][ T82] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.814827][ T82] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.827656][ T82] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.835554][ T82] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.849602][ T5836] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.886254][ T5833] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.920444][ T5836] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.936384][ T82] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.944192][ T82] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.966818][ T82] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.975051][ T82] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.999032][ T82] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.007060][ T82] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.030656][ T3546] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.038372][ T3546] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.158798][ T5836] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 85.183608][ T5836] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 85.420994][ T5834] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.448697][ T5833] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.564027][ T5834] veth0_vlan: entered promiscuous mode [ 85.571177][ T5833] veth0_vlan: entered promiscuous mode [ 85.597498][ T5833] veth1_vlan: entered promiscuous mode [ 85.611639][ T5834] veth1_vlan: entered promiscuous mode [ 85.626447][ T5835] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.689750][ T5836] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.704509][ T5834] veth0_macvtap: entered promiscuous mode [ 85.719526][ T5833] veth0_macvtap: entered promiscuous mode [ 85.737676][ T5834] veth1_macvtap: entered promiscuous mode [ 85.755848][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.765957][ T5833] veth1_macvtap: entered promiscuous mode [ 85.798401][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.826601][ T5834] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.838865][ T5834] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.851088][ T5834] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.860768][ T5834] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.876665][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.888763][ T5838] Bluetooth: hci0: command tx timeout [ 85.888862][ T5144] Bluetooth: hci3: command tx timeout [ 85.892925][ T5144] Bluetooth: hci2: command tx timeout [ 85.896331][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.923748][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.935658][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.947843][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.961496][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.969880][ T5144] Bluetooth: hci1: command tx timeout [ 85.986810][ T5835] veth0_vlan: entered promiscuous mode [ 86.006023][ T5833] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.017436][ T5833] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.027778][ T5833] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.039192][ T5833] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.071326][ T5835] veth1_vlan: entered promiscuous mode [ 86.079904][ T5836] veth0_vlan: entered promiscuous mode [ 86.130607][ T5836] veth1_vlan: entered promiscuous mode [ 86.247169][ T5835] veth0_macvtap: entered promiscuous mode [ 86.269824][ T3460] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.276525][ T5836] veth0_macvtap: entered promiscuous mode [ 86.283141][ T3460] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.299732][ T5835] veth1_macvtap: entered promiscuous mode [ 86.325844][ T5836] veth1_macvtap: entered promiscuous mode [ 86.387247][ T3504] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.398685][ T82] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.404822][ T5835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.413898][ T3504] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.430353][ T82] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.440566][ T5835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.457589][ T5835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.469870][ T5835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.484013][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.494165][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.506001][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.518559][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.531150][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.548118][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.559935][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.572036][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.594582][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.606754][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.618828][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.630978][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.644111][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.678251][ T1140] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.693855][ T1140] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.697768][ T5835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.704890][ T5834] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 86.718623][ T5835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.741626][ T5835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.752940][ T5835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.763674][ T5835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.775308][ T5835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.787324][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.795988][ T5836] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.809020][ T5836] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.819040][ T5836] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.828503][ T5836] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.848256][ T5835] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.857711][ T5835] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.866781][ T5835] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.875987][ T5835] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.137394][ T3504] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.147243][ T82] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.157663][ T82] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.173713][ T3504] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.241662][ T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.284072][ T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.449318][ T3504] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.459783][ T3504] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.589097][ T5907] binder: 5903:5907 ioctl c0046209 3 returned -22 [ 87.964231][ T5144] Bluetooth: hci2: command tx timeout [ 87.971592][ T5838] Bluetooth: hci3: command tx timeout [ 87.971609][ T5845] Bluetooth: hci0: command tx timeout [ 88.062407][ T5144] Bluetooth: hci1: command tx timeout [ 88.093450][ T5922] netlink: 52 bytes leftover after parsing attributes in process `syz.3.11'. [ 88.534602][ T5932] mmap: syz.3.16 (5932) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 88.579970][ T5925] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 89.502294][ T5964] netlink: 'syz.1.22': attribute type 2 has an invalid length. [ 89.532322][ T5964] netlink: 674 bytes leftover after parsing attributes in process `syz.1.22'. [ 90.043703][ T5144] Bluetooth: hci2: command tx timeout [ 90.049603][ T5838] Bluetooth: hci3: command tx timeout [ 90.049618][ T5845] Bluetooth: hci0: command tx timeout [ 90.123528][ T5845] Bluetooth: hci1: command tx timeout [ 91.020133][ T5994] netlink: 28 bytes leftover after parsing attributes in process `syz.3.27'. [ 91.997124][ T5994] team0: Port device team_slave_0 removed [ 92.303854][ T6015] netlink: 52 bytes leftover after parsing attributes in process `syz.1.31'. [ 92.551357][ T6022] netlink: 'syz.0.34': attribute type 2 has an invalid length. [ 92.582448][ T6022] netlink: 674 bytes leftover after parsing attributes in process `syz.0.34'. [ 92.944520][ T9] cfg80211: failed to load regulatory.db [ 96.117041][ T6077] netlink: 52 bytes leftover after parsing attributes in process `syz.2.50'. [ 96.589408][ T6091] openvswitch: netlink: IP tunnel TTL not specified. [ 97.512600][ T6109] netlink: 'syz.0.57': attribute type 2 has an invalid length. [ 97.542497][ T6109] netlink: 674 bytes leftover after parsing attributes in process `syz.0.57'. [ 104.583068][ T6220] netlink: 52 bytes leftover after parsing attributes in process `syz.0.86'. [ 105.368408][ T6234] openvswitch: netlink: nsh attr 160 is out of range max 3 [ 106.457927][ T6253] nvme_fabrics: missing parameter 'transport=%s' [ 106.471164][ T6253] nvme_fabrics: missing parameter 'nqn=%s' [ 108.044015][ T6280] netlink: 52 bytes leftover after parsing attributes in process `syz.2.104'. [ 108.633432][ T6297] netlink: 28 bytes leftover after parsing attributes in process `syz.3.106'.                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                   syzkaller syzkaller login: [ 264.410280][ T8651] netlink: 'syz.0.684': attribute type 1 has an invalid length. [ 264.470633][ T8651] netlink: 'syz.0.684': attribute type 1 has an invalid length. [ 264.610991][ T8654] netlink: 'syz.3.686': attribute type 2 has an invalid length. [ 264.766755][ T8654] netlink: 674 bytes leftover after parsing attributes in process `syz.3.686'. [ 266.287481][ T8684] Process accounting resumed [ 267.193023][ T8687] batman_adv: Routing algorithm '' is not supported [ 267.613611][ T55] Bluetooth: hci0: SCO packet too small [ 274.030039][ T8772] random: crng reseeded on system resumption [ 274.060848][ T8774] i2c i2c-0: delete_device: Can't find device in list [ 274.395089][ T8780] netlink: 28 bytes leftover after parsing attributes in process `syz.1.714'. [ 274.794239][ T8780] hsr_slave_1 (unregistering): left promiscuous mode [ 276.905835][ T8808] Process accounting resumed [ 278.117277][ T8821] kAFS: bad VL server IP address [ 280.034079][ T8844] netlink: 28 bytes leftover after parsing attributes in process `syz.0.729'. [ 281.315273][ T8859] kAFS: bad VL server IP address [ 281.459081][ T8863] Process accounting resumed [ 283.072690][ T8884] i2c i2c-0: Invalid block write size 128 [ 283.679658][ T8898] netlink: 28 bytes leftover after parsing attributes in process `syz.0.743'. [ 284.270388][ T8898] hsr_slave_1 (unregistering): left promiscuous mode [ 284.572539][ T8908] Process accounting resumed [ 285.697645][ C1] sd 0:0:1:0: [sda] tag#23 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 285.708039][ C1] sd 0:0:1:0: [sda] tag#23 CDB: Write(6) 0a 00 00 00 00 00 00 00 00 00 00 00 [ 290.302687][ T9018] UHID_CREATE from different security context by process 716 (syz.0.775), this is not allowed. [ 292.392802][ T9052] netlink: 'syz.0.786': attribute type 2 has an invalid length. [ 292.400535][ T9052] netlink: 674 bytes leftover after parsing attributes in process `syz.0.786'. [ 294.210653][ T9087] netlink: 28 bytes leftover after parsing attributes in process `syz.1.795'. [ 294.473915][ T9091] netlink: 'syz.0.796': attribute type 2 has an invalid length. [ 294.512434][ T9091] netlink: 674 bytes leftover after parsing attributes in process `syz.0.796'. [ 294.645430][ T9087] team0: Port device team_slave_0 removed [ 297.288980][ T9143] netlink: 28 bytes leftover after parsing attributes in process `syz.3.812'. [ 300.360498][ T9204] netlink: 28 bytes leftover after parsing attributes in process `syz.3.827'. [ 303.478102][ T9266] netlink: 28 bytes leftover after parsing attributes in process `syz.2.841'. [ 304.339779][ T9266] team0: Port device team_slave_0 removed [ 306.709661][ T9330] vivid-009: ================= START STATUS ================= [ 306.752192][ T9330] vivid-009: Enable Output Cropping: true [ 306.765890][ T9330] vivid-009: Enable Output Composing: true [ 306.782256][ T9330] vivid-009: Enable Output Scaler: true [ 306.815813][ T9330] vivid-009: Tx RGB Quantization Range: Automatic [ 306.867381][ T9330] vivid-009: Transmit Mode: HDMI [ 306.875895][ T9330] vivid-009: Hotplug Present: 0x00000000 [ 306.893521][ T9330] vivid-009: RxSense Present: 0x00000000 [ 306.911694][ T9330] vivid-009: EDID Present: 0x00000000 [ 306.938222][ T9330] vivid-009: ================== END STATUS ================== [ 308.384113][ T9361] netlink: 28 bytes leftover after parsing attributes in process `syz.0.860'. [ 311.416187][ T9411] netlink: 28 bytes leftover after parsing attributes in process `syz.1.876'. [ 315.535897][ T9485] netlink: 338 bytes leftover after parsing attributes in process `syz.2.893'. [ 315.564232][ T9486] netlink: 338 bytes leftover after parsing attributes in process `syz.2.893'. [ 317.339080][ T9520] capability: warning: `syz.2.903' uses 32-bit capabilities (legacy support in use) [ 318.043001][ T9537] netlink: 28 bytes leftover after parsing attributes in process `syz.0.908'. [ 318.212553][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 318.218912][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 319.479659][ T9570] netlink: 326 bytes leftover after parsing attributes in process `syz.1.918'. [ 319.565097][ T9570] veth0_macvtap: left promiscuous mode [ 320.666960][ T9597] netlink: 28 bytes leftover after parsing attributes in process `syz.1.925'. [ 322.214461][ T9628] netlink: zone id is out of range [ 322.290732][ T9628] netlink: zone id is out of range [ 322.320702][ T9628] netlink: set zone limit has 8 unknown bytes [ 322.856123][ T9643] netlink: 'syz.3.936': attribute type 2 has an invalid length. [ 322.882358][ T9643] netlink: 674 bytes leftover after parsing attributes in process `syz.3.936'. [ 323.069889][ T9647] netlink: 334 bytes leftover after parsing attributes in process `syz.0.937'. [ 325.320875][ T9706] netlink: 342 bytes leftover after parsing attributes in process `syz.2.955'. [ 326.054173][ T9727] sctp: [Deprecated]: syz.0.957 (pid 9727) Use of int in maxseg socket option. [ 326.054173][ T9727] Use struct sctp_assoc_value instead [ 327.743414][ T9765] netlink: zone id is out of range [ 327.854314][ T9765] netlink: zone id is out of range [ 327.870630][ T9765] netlink: set zone limit has 8 unknown bytes [ 328.405009][ T9783] netlink: 24 bytes leftover after parsing attributes in process `syz.0.970'. [ 329.364607][ T9805] netlink: 290 bytes leftover after parsing attributes in process `syz.3.976'. [ 329.832964][ T9820] netlink: 24 bytes leftover after parsing attributes in process `syz.3.979'. [ 332.465698][ T9863] netlink: 24 bytes leftover after parsing attributes in process `syz.2.989'. [ 332.983173][ T9884] netlink: 342 bytes leftover after parsing attributes in process `syz.1.994'. nvalid length. [ 334.051069][ T9897] netlink: 674 bytes leftover after parsing attributes in process `syz.2.997'. [ 336.748407][ T9954] sp0: Synchronizing with TNC [ 337.951809][ T9974] netlink: 'syz.0.1021': attribute type 2 has an invalid length. [ 337.980822][ T9974] netlink: 674 bytes leftover after parsing attributes in process `syz.0.1021'. [ 338.131405][ T9984] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1024'. [ 341.775189][T10029] netlink: 'syz.2.1033': attribute type 2 has an invalid length. [ 341.822201][T10029] netlink: 674 bytes leftover after parsing attributes in process `syz.2.1033'. [ 343.170869][ T29] audit: type=1800 audit(1735209313.900:2): pid=10053 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1040" name="discovery_nqn" dev="configfs" ino=19111 res=0 errno=0 [ 345.258194][T10078] netlink: 'syz.0.1048': attribute type 2 has an invalid length. [ 345.382164][T10078] netlink: 674 bytes leftover after parsing attributes in process `syz.0.1048'. [ 351.112696][T10141] netlink: 'syz.2.1068': attribute type 2 has an invalid length. [ 351.120501][T10141] netlink: 674 bytes leftover after parsing attributes in process `syz.2.1068'. [ 355.634907][T10185] sp0: Synchronizing with TNC [ 359.367038][T10235] mkiss: ax0: crc mode is auto. [ 360.832470][T10249] netlink: 93 bytes leftover after parsing attributes in process `syz.2.1097'. [ 360.844891][T10247] netlink: 93 bytes leftover after parsing attributes in process `syz.2.1097'. [ 363.522518][T10206] syz.3.1079 (10206) used greatest stack depth: 21280 bytes left [ 365.901266][T10308] netlink: 342 bytes leftover after parsing attributes in process `syz.1.1116'. [ 365.969185][T10308] netlink: 306 bytes leftover after parsing attributes in process `syz.1.1116'. [ 370.005497][T10236] syz.0.1094 (10236) used greatest stack depth: 20832 bytes left [ 370.852600][T10339] netlink: 'syz.2.1126': attribute type 2 has an invalid length. [ 370.882292][T10339] netlink: 674 bytes leftover after parsing attributes in process `syz.2.1126'. [ 371.867899][T10347] Falling back ldisc for ttyS2. [ 373.833679][T10372] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1135'. [ 375.039568][T10393] serio: Serial port ptm0 [ 375.962598][T10384] syz.2.1139 (10384) used greatest stack depth: 19680 bytes left [ 376.616094][ T9948] syz.0.1006 (9948) used greatest stack depth: 18576 bytes left [ 378.842818][T10441] nbd: nbd7 already in use [ 379.656452][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.663256][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.693966][T10449] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1156'. [ 380.498336][T10462] netlink: 'syz.1.1158': attribute type 2 has an invalid length. [ 380.534791][T10462] netlink: 10 bytes leftover after parsing attributes in process `syz.1.1158'. [ 380.565089][T10462] netlink: 'syz.1.1158': attribute type 2 has an invalid length. [ 381.904372][T10479] netlink: 'syz.2.1162': attribute type 2 has an invalid length. [ 381.944938][T10479] netlink: 674 bytes leftover after parsing attributes in process `syz.2.1162'. [ 382.927439][T10486] serio: Serial port ptm0 [ 383.699085][T10487] [U]  [ 383.911462][T10493] netlink: 'syz.2.1169': attribute type 2 has an invalid length. [ 383.968875][T10493] netlink: 674 bytes leftover after parsing attributes in process `syz.2.1169'. [ 385.533970][T10508] Invalid ELF header magic: != ELF [ 386.015574][T10515] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1174'. [ 389.624899][T10565] netlink: 'syz.0.1180': attribute type 2 has an invalid length. [ 389.689286][T10565] netlink: 674 bytes leftover after parsing attributes in process `syz.0.1180'. [ 392.303408][T10591] syz.1.1191 uses obsolete (PF_INET,SOCK_PACKET) [ 398.007740][T10640] zram0: detected capacity change from 0 to 8 [ 398.477224][ T9951] syz.3.1013 (9951) used greatest stack depth: 17856 bytes left [ 401.858561][T10673] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1223'. [ 403.597201][ T5144] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 403.606109][ T5144] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 403.614668][ T5144] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 403.622652][ T5144] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 403.630116][ T5144] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 403.636928][ T5144] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 404.345813][T10692] chnl_net:caif_netlink_parms(): no params data found [ 405.064797][ T82] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 405.427591][ T82] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 405.567155][T10692] bridge0: port 1(bridge_slave_0) entered blocking state [ 405.586864][T10692] bridge0: port 1(bridge_slave_0) entered disabled state [ 405.603616][T10692] bridge_slave_0: entered allmulticast mode [ 405.610149][T10692] bridge_slave_0: entered promiscuous mode [ 405.693749][ T82] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 405.743521][T10692] bridge0: port 2(bridge_slave_1) entered blocking state [ 405.750267][T10692] bridge0: port 2(bridge_slave_1) entered disabled state [ 405.768261][T10692] bridge_slave_1: entered allmulticast mode [ 405.786560][T10692] bridge_slave_1: entered promiscuous mode [ 405.875413][ T82] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 405.885286][ T55] Bluetooth: hci4: command tx timeout [ 406.033562][T10692] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 406.145753][T10692] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 406.257014][T10731] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1232'. [ 406.299841][T10692] team0: Port device team_slave_0 added [ 406.332867][ T82] bridge_slave_1: left allmulticast mode [ 406.338399][ T82] bridge_slave_1: left promiscuous mode [ 406.353419][ T82] bridge0: port 2(bridge_slave_1) entered disabled state [ 406.401102][ T82] bridge_slave_0: left allmulticast mode [ 406.408829][ T82] bridge_slave_0: left promiscuous mode [ 406.423851][ T82] bridge0: port 1(bridge_slave_0) entered disabled state [ 407.305736][ T82] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 407.354598][ T82] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 407.370804][ T82] bond0 (unregistering): Released all slaves [ 407.424575][T10692] team0: Port device team_slave_1 added [ 407.533892][T10692] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 407.540216][T10692] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 407.572472][T10692] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 407.648306][T10692] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 407.658600][T10692] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 407.690055][T10692] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 407.979798][ T55] Bluetooth: hci4: command tx timeout [ 408.238297][T10692] hsr_slave_0: entered promiscuous mode [ 408.271939][T10692] hsr_slave_1: entered promiscuous mode [ 408.291535][T10692] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 408.308561][T10692] Cannot create hsr debugfs directory [ 408.344523][T10748] netlink: 338 bytes leftover after parsing attributes in process `syz.2.1235'. [ 408.609708][ T82] hsr_slave_0: left promiscuous mode [ 408.622772][ T82] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 408.632288][ T82] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 408.651733][ T82] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 408.670594][ T82] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 408.727056][ T82] veth1_macvtap: left promiscuous mode [ 408.742723][ T82] veth0_macvtap: left promiscuous mode [ 408.757169][ T82] veth1_vlan: left promiscuous mode [ 408.786987][ T82] veth0_vlan: left promiscuous mode [ 409.519408][T10779] Process accounting resumed [ 409.817599][T10773] kexec: Could not allocate control_code_buffer [ 409.833041][ T82] team0 (unregistering): Port device team_slave_1 removed [ 410.055507][ T55] Bluetooth: hci4: command tx timeout [ 410.652949][T10796] netlink: 326 bytes leftover after parsing attributes in process `syz.3.1243'. [ 410.978239][T10770] netlink: 338 bytes leftover after parsing attributes in process `syz.2.1235'. [ 411.005575][T10748] netlink: 110 bytes leftover after parsing attributes in process `syz.2.1235'. [ 411.029051][T10748] veth0_macvtap: left promiscuous mode [ 411.133587][T10796] bridge0: port 2(bridge_slave_1) entered disabled state [ 411.140631][T10796] bridge0: port 1(bridge_slave_0) entered disabled state [ 411.452278][T10692] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 411.504981][T10692] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 411.570172][T10692] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 411.630572][T10692] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 411.983396][T10692] 8021q: adding VLAN 0 to HW filter on device bond0 [ 412.086071][T10692] 8021q: adding VLAN 0 to HW filter on device team0 [ 412.122207][ T55] Bluetooth: hci4: command tx timeout [ 412.134267][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 412.140720][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 412.204419][T10826] bridge0: port 2(bridge_slave_1) entered blocking state [ 412.210946][T10826] bridge0: port 2(bridge_slave_1) entered forwarding state [ 412.858833][T10847] netlink: zone id is out of range [ 412.997005][T10692] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 413.621377][T10692] veth0_vlan: entered promiscuous mode [ 413.684593][T10692] veth1_vlan: entered promiscuous mode [ 413.787778][T10692] veth0_macvtap: entered promiscuous mode [ 413.812862][T10692] veth1_macvtap: entered promiscuous mode [ 413.883838][T10692] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 413.901398][T10692] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 413.932127][T10692] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 413.961482][T10692] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 413.977555][T10692] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 413.988929][T10692] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 414.008922][T10692] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 414.163648][T10692] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 414.204392][T10692] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 414.242280][T10692] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 414.265860][T10692] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 414.302204][T10692] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 414.311731][T10692] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 414.354370][T10692] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 414.428218][T10692] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 414.457104][T10692] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 414.484356][T10692] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 414.512218][T10692] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 415.682749][ T82] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 415.689946][ T82] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 415.815331][ T82] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 415.848245][ T82] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 417.689715][T10965] Invalid ELF header magic: != ELF [ 419.878149][T11002] lo: entered allmulticast mode [ 419.923608][T11002] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1261'. [ 419.993079][T11009] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1262'. [ 420.082166][T11002] hsr_slave_0: left promiscuous mode [ 420.533735][T11001] lo: left allmulticast mode [ 421.072591][T11024] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1265'. [ 422.157530][T11046] netlink: zone id is out of range [ 422.248922][T11046] netlink: set zone limit has 8 unknown bytes [ 430.076353][T11172] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1291'. [ 430.164694][T11137] Process accounting resumed [ 437.221014][T11319] random: crng reseeded on system resumption [ 438.086129][T11339] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1310'. [ 438.171109][T11341] Process accounting resumed [ 439.639608][T11367] Invalid ELF header magic: != ELF [ 441.102723][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 441.108467][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 443.002984][T11393] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1317'. [ 444.272659][T11420] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1323'. [ 444.329948][T11422] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1323'. [ 445.060446][T11428] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1326'. [ 448.629339][T11462] smc: net device syz_tun applied user defined pnetid ETHTOOL [ 448.750983][T11460] Invalid ELF header magic: != ELF [ 450.643128][T11492] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 450.661893][T11492] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db                                                                                                                                                                                                                                                                                                                                                                                                                  [ 486.461609][T12102] hsr_slave_0: left promiscuous mode [ 486.469147][T12102] hsr_slave_1: left promiscuous mode [ 486.758507][T12069] chnl_net:caif_netlink_parms(): no params data found [ 487.002113][ T55] Bluetooth: hci1: command tx timeout [ 487.773965][ T29] audit: type=1326 audit(4294967336.130:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12146 comm="syz.3.1509" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f79ce185d29 code=0x0 [ 487.889939][T12069] bridge0: port 1(bridge_slave_0) entered blocking state [ 487.898584][T12069] bridge0: port 1(bridge_slave_0) entered disabled state [ 487.907312][T12069] bridge_slave_0: entered allmulticast mode [ 487.916053][T12069] bridge_slave_0: entered promiscuous mode [ 487.925069][T12069] bridge0: port 2(bridge_slave_1) entered blocking state [ 487.933662][T12069] bridge0: port 2(bridge_slave_1) entered disabled state [ 487.942842][T12069] bridge_slave_1: entered allmulticast mode [ 487.951082][T12069] bridge_slave_1: entered promiscuous mode [ 488.103155][T12182] random: crng reseeded on system resumption [ 488.117461][T12069] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 488.162838][T12069] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 488.372910][T12069] team0: Port device team_slave_0 added [ 488.405697][T12069] team0: Port device team_slave_1 added [ 488.908920][T12069] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 488.932106][T12069] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 489.032203][T12069] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 489.074201][T12069] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 489.082977][ T55] Bluetooth: hci1: command tx timeout [ 489.112156][T12069] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 489.212137][T12069] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 489.634612][T12069] hsr_slave_0: entered promiscuous mode [ 489.680746][T12069] hsr_slave_1: entered promiscuous mode [ 490.184148][T12069] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 490.230100][T12069] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 490.264830][T12069] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 490.302698][T12069] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 490.640210][T12069] 8021q: adding VLAN 0 to HW filter on device bond0 [ 490.762219][T12069] 8021q: adding VLAN 0 to HW filter on device team0 [ 490.837669][T10826] bridge0: port 1(bridge_slave_0) entered blocking state [ 490.846278][T10826] bridge0: port 1(bridge_slave_0) entered forwarding state [ 490.933524][T10826] bridge0: port 2(bridge_slave_1) entered blocking state [ 490.942117][T10826] bridge0: port 2(bridge_slave_1) entered forwarding state [ 491.421576][T12069] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 492.114991][T12069] veth0_vlan: entered promiscuous mode [ 492.273646][T12069] veth1_vlan: entered promiscuous mode [ 492.337745][T12069] veth0_macvtap: entered promiscuous mode [ 492.368840][T12069] veth1_macvtap: entered promiscuous mode [ 492.550145][T12069] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 492.584394][T12069] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 492.613135][T12069] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 492.634856][T12069] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 492.667070][T12069] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 492.687224][T12069] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 492.700279][T12069] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 492.771602][T12069] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 492.812109][T12069] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 492.859463][T12069] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 492.881613][T12069] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 492.893807][T12069] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 492.906555][T12069] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 492.919385][T12069] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 492.944307][T12069] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 492.954946][T12069] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 492.966268][T12069] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 492.977485][T12069] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 493.071898][ T3546] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 493.117167][ T3546] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 493.197330][ T3546] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 493.218519][T12285] netlink: 338 bytes leftover after parsing attributes in process `syz.4.1521'. [ 493.250881][ T3546] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 493.273459][T12287] netlink: 338 bytes leftover after parsing attributes in process `syz.4.1521'. [ 493.429342][T12282] netlink: 134 bytes leftover after parsing attributes in process `syz.4.1521'. [ 493.482376][T12285] netlink: 134 bytes leftover after parsing attributes in process `syz.4.1521'. [ 493.618270][T12296] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1490'. [ 494.153605][T12296] team0: Port device team_slave_0 removed [ 495.875747][T12345] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1528'. [ 498.230969][T12381] lo: entered allmulticast mode [ 498.272988][T12381] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1535'. [ 498.353419][T12383] lo: left allmulticast mode [ 499.293949][T12390] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1536'. [ 501.160837][T12314] syz.1.1523: vmalloc error: size 8003584, failed to allocated page array size 15632, mode:0x400cc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 501.332289][T12314] CPU: 0 UID: 0 PID: 12314 Comm: syz.1.1523 Not tainted 6.13.0-rc4-syzkaller-00012-g9b2ffa6148b1 #0 [ 501.345262][T12314] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 501.357365][T12314] Call Trace: [ 501.361312][T12314] [ 501.365153][T12314] dump_stack_lvl+0x16c/0x1f0 [ 501.370800][T12314] warn_alloc+0x24d/0x3a0 [ 501.376028][T12314] ? __pfx_warn_alloc+0x10/0x10 [ 501.381890][T12314] ? __get_vm_area_node+0x1b0/0x2f0 [ 501.388182][T12314] ? __get_vm_area_node+0x1dc/0x2f0 [ 501.394454][T12314] __vmalloc_node_range_noprof+0x1105/0x1530 [ 501.401668][T12314] ? __do_sys_listmount+0x1be/0xe90 [ 501.407940][T12314] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 501.415574][T12314] ? rcu_is_watching+0x12/0xc0 [ 501.421317][T12314] ? trace_kmalloc+0x2d/0xd0 [ 501.426850][T12314] ? __kmalloc_node_noprof.cold+0x5a/0x5f [ 501.433742][T12314] ? __do_sys_listmount+0x1be/0xe90 [ 501.440000][T12314] __kvmalloc_node_noprof+0x14f/0x1a0 [ 501.446480][T12314] ? __do_sys_listmount+0x1be/0xe90 [ 501.452744][T12314] __do_sys_listmount+0x1be/0xe90 [ 501.458801][T12314] ? __x64_sys_futex+0x1e1/0x4c0 [ 501.464753][T12314] ? __x64_sys_futex+0x1ea/0x4c0 [ 501.470709][T12314] ? __pfx___do_sys_listmount+0x10/0x10 [ 501.477382][T12314] ? xfd_validate_state+0x5d/0x180 [ 501.483547][T12314] do_syscall_64+0xcd/0x250 [ 501.488972][T12314] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 501.496068][T12314] RIP: 0033:0x7f45fdf85d29 [ 501.501375][T12314] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 501.524926][T12314] RSP: 002b:00007f45fedec038 EFLAGS: 00000246 ORIG_RAX: 00000000000001ca [ 501.535049][T12314] RAX: ffffffffffffffda RBX: 00007f45fe175fa0 RCX: 00007f45fdf85d29 [ 501.544636][T12314] RDX: 00000000000f4240 RSI: 0000000000000000 RDI: 0000000020000100 [ 501.554224][T12314] RBP: 00007f45fe001b08 R08: 0000000000000000 R09: 0000000000000000 [ 501.563814][T12314] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 501.573397][T12314] R13: 0000000000000000 R14: 00007f45fe175fa0 R15: 00007ffe7fea8808 [ 501.582999][T12314] [ 501.641281][T12314] Mem-Info: [ 501.664183][T12314] active_anon:42211 inactive_anon:52731 isolated_anon:0 [ 501.664183][T12314] active_file:9787 inactive_file:39485 isolated_file:0 [ 501.664183][T12314] unevictable:9309 dirty:645 writeback:0 [ 501.664183][T12314] slab_reclaimable:11042 slab_unreclaimable:96950 [ 501.664183][T12314] mapped:46558 shmem:90323 pagetables:1108 [ 501.664183][T12314] sec_pagetables:0 bounce:0 [ 501.664183][T12314] kernel_misc_reclaimable:0 [ 501.664183][T12314] free:1234789 free_pcp:8102 free_cma:0 [ 501.905726][T12314] Node 0 active_anon:164312kB inactive_anon:210924kB active_file:30540kB inactive_file:157124kB unevictable:35748kB isolated(anon):0kB isolated(file):0kB mapped:189624kB dirty:2580kB writeback:0kB shmem:355160kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11228kB pagetables:4604kB sec_pagetables:0kB all_unreclaimable? no [ 502.082217][T12314] Node 1 active_anon:2048kB inactive_anon:0kB active_file:0kB inactive_file:4kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:3584kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 502.186009][T12314] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 502.326865][T12411] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1539'. [ 502.400291][T12314] lowmem_reserve[]: 0 2465 2466 0 0 [ 502.518831][T12314] Node 0 DMA32 free:1057464kB boost:0kB min:34200kB low:42748kB high:51296kB reserved_highatomic:0KB active_anon:171360kB inactive_anon:209924kB active_file:38628kB inactive_file:156696kB unevictable:21180kB writepending:2580kB present:3129332kB managed:2551336kB mlocked:19640kB bounce:0kB free_pcp:4124kB local_pcp:1368kB free_cma:0kB [ 502.582622][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 502.590585][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.761436][T12314] lowmem_reserve[]: 0 0 0 0 0 [ 502.767908][T12314] Node 0 Normal free:8kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:824kB unevictable:0kB writepending:0kB present:1048580kB managed:876kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:0kB free_cma:0kB [ 502.809091][T12314] lowmem_reserve[]: 0 0 0 0 0 [ 502.814885][T12314] Node 1 Normal free:3882700kB boost:0kB min:55688kB low:69608kB high:83528kB reserved_highatomic:0KB active_anon:2048kB inactive_anon:0kB active_file:0kB inactive_file:4kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:25164kB local_pcp:11520kB free_cma:0kB [ 502.884663][T12314] lowmem_reserve[]: 0 0 0 0 0 [ 502.919697][T12314] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 502.988679][T12314] Node 0 DMA32: 6976*4kB (UME) 2273*8kB (UME) 879*16kB (UME) 614*32kB (UME) 211*64kB (UME) 397*128kB (UME) 633*256kB (UME) 206*512kB (UME) 71*1024kB (UM) 11*2048kB (UME) 139*4096kB (UM) = 1076216kB [ 503.214778][T12314] Node 0 Normal: 2*4kB (M) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 503.352066][T12314] Node 1 Normal: 135*4kB (UM) 62*8kB (UME) 43*16kB (UME) 192*32kB (UE) 89*64kB (UME) 30*128kB (UME) 12*256kB (UME) 4*512kB (UE) 4*1024kB (UME) 1*2048kB (U) 941*4096kB (M) = 3883004kB [ 503.585307][T12314] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 503.816690][T12314] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 503.906298][T12314] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 504.021656][T12314] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 504.037712][T12314] 142078 total pagecache pages [ 504.043556][T12314] 68 pages in swap cache [ 504.048756][T12314] Free swap = 102436kB [ 504.053884][T12314] Total swap = 124996kB [ 504.059164][T12314] 2097051 pages RAM [ 504.069263][T12314] 0 pages HighMem/MovableOnly [ 504.212133][T12314] 427367 pages reserved [ 504.217171][T12314] 0 pages cma reserved [ 505.675579][T12475] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1550'. [ 507.100255][T12500] lo: entered allmulticast mode [ 507.160579][T12503] lo: left allmulticast mode [ 508.287090][T12530] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1559'. [ 509.606922][T12542] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1560'. [ 509.663671][T12544] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1560'. [ 510.008200][T12530] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 510.072994][T12530] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 510.259369][T12530] bond0 (unregistering): Released all slaves [ 510.860690][T12557] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1563'. [ 511.026746][T12557] mac80211_hwsim hwsim8 wlan0: entered promiscuous mode [ 511.075554][T12557] mac80211_hwsim hwsim8 wlan0: entered allmulticast mode [ 513.289636][T12606] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1568'. [ 515.908323][T12668] netlink: 322 bytes leftover after parsing attributes in process `syz.3.1575'. [ 518.222197][T12681] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1577'. [ 519.447152][T12720] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1587'. [ 520.112314][T12717] netlink: 'syz.1.1586': attribute type 1 has an invalid length. [ 523.072211][T12758] ================================================================== [ 523.081937][T12758] BUG: KASAN: slab-use-after-free in force_devcd_write+0x31f/0x350 [ 523.091427][T12758] Read of size 8 at addr ffff888026de2800 by task syz.5.1595/12758 [ 523.100910][T12758] [ 523.103700][T12758] CPU: 0 UID: 0 PID: 12758 Comm: syz.5.1595 Not tainted 6.13.0-rc4-syzkaller-00012-g9b2ffa6148b1 #0 [ 523.116735][T12758] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 523.128811][T12758] Call Trace: [ 523.132757][T12758] [ 523.136276][T12758] dump_stack_lvl+0x116/0x1f0 [ 523.141908][T12758] print_report+0xc3/0x620 [ 523.147235][T12758] ? __virt_addr_valid+0x5e/0x590 [ 523.153288][T12758] ? __phys_addr+0xc6/0x150 [ 523.158716][T12758] kasan_report+0xd9/0x110 [ 523.164040][T12758] ? force_devcd_write+0x31f/0x350 [ 523.170173][T12758] ? force_devcd_write+0x31f/0x350 [ 523.176308][T12758] force_devcd_write+0x31f/0x350 [ 523.182229][T12758] ? __pfx_force_devcd_write+0x10/0x10 [ 523.188771][T12758] ? debugfs_file_get+0x21c/0x5c0 [ 523.194800][T12758] ? __pfx_debugfs_file_get+0x10/0x10 [ 523.201248][T12758] ? rcu_is_watching+0x12/0xc0 [ 523.206962][T12758] ? trace_lock_acquire+0x14e/0x1f0 [ 523.213202][T12758] full_proxy_write+0xfb/0x1b0 [ 523.218913][T12758] ? __pfx_full_proxy_write+0x10/0x10 [ 523.225352][T12758] vfs_write+0x24c/0x1150 [ 523.230542][T12758] ? __fget_files+0x1fc/0x3a0 [ 523.236149][T12758] ? __pfx___mutex_lock+0x10/0x10 [ 523.242190][T12758] ? __pfx_vfs_write+0x10/0x10 [ 523.247917][T12758] ? __fget_files+0x206/0x3a0 [ 523.253538][T12758] ksys_write+0x12b/0x250 [ 523.258732][T12758] ? __pfx_ksys_write+0x10/0x10 [ 523.264547][T12758] do_syscall_64+0xcd/0x250 [ 523.269950][T12758] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 523.277042][T12758] RIP: 0033:0x7ff2f1185d29 [ 523.282342][T12758] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 523.305888][T12758] RSP: 002b:00007ff2f1f0e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 523.315977][T12758] RAX: ffffffffffffffda RBX: 00007ff2f1376160 RCX: 00007ff2f1185d29 [ 523.325529][T12758] RDX: 000000000000000e RSI: 0000000000000000 RDI: 000000000000000d [ 523.335076][T12758] RBP: 00007ff2f1201b08 R08: 0000000000000000 R09: 0000000000000000 [ 523.344634][T12758] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 523.354187][T12758] R13: 0000000000000000 R14: 00007ff2f1376160 R15: 00007ffdcd3a47a8 [ 523.363747][T12758] [ 523.367356][T12758] [ 523.370122][T12758] Allocated by task 35: [ 523.375085][T12758] kasan_save_stack+0x33/0x60 [ 523.380688][T12758] kasan_save_track+0x14/0x30 [ 523.386289][T12758] __kasan_kmalloc+0xaa/0xb0 [ 523.391787][T12758] __kmalloc_node_track_caller_noprof+0x21d/0x520 [ 523.399480][T12758] kmalloc_reserve+0xef/0x2c0 [ 523.405079][T12758] pskb_expand_head+0x236/0x1170 [ 523.410997][T12758] batadv_skb_head_push+0xf5/0x290 [ 523.417126][T12758] batadv_send_skb_packet+0x115/0x770 [ 523.423560][T12758] batadv_iv_send_outstanding_bat_ogm_packet+0x70a/0x8d0 [ 523.431976][T12758] process_one_work+0x958/0x1b30 [ 523.437922][T12758] worker_thread+0x6c8/0xf00 [ 523.443415][T12758] kthread+0x2c1/0x3a0 [ 523.448290][T12758] ret_from_fork+0x45/0x80 [ 523.453575][T12758] ret_from_fork_asm+0x1a/0x30 [ 523.459288][T12758] [ 523.462056][T12758] Freed by task 35: [ 523.466600][T12758] kasan_save_stack+0x33/0x60 [ 523.472206][T12758] kasan_save_track+0x14/0x30 [ 523.477809][T12758] kasan_save_free_info+0x3b/0x60 [ 523.483824][T12758] __kasan_slab_free+0x51/0x70 [ 523.489530][T12758] kfree+0x14f/0x4b0 [ 523.494191][T12758] skb_free_head+0x108/0x1d0 [ 523.499697][T12758] skb_release_data+0x560/0x730 [ 523.505520][T12758] sk_skb_reason_drop+0x129/0x1a0 [ 523.511544][T12758] __netif_receive_skb_core.constprop.0+0x5cb/0x4470 [ 523.519545][T12758] __netif_receive_skb_one_core+0xb1/0x1e0 [ 523.526505][T12758] __netif_receive_skb+0x1d/0x160 [ 523.532529][T12758] process_backlog+0x443/0x15f0 [ 523.538337][T12758] __napi_poll.constprop.0+0xb7/0x550 [ 523.544773][T12758] net_rx_action+0xa94/0x1010 [ 523.550373][T12758] handle_softirqs+0x213/0x8f0 [ 523.556078][T12758] do_softirq+0xb2/0xf0 [ 523.561050][T12758] __local_bh_enable_ip+0x100/0x120 [ 523.567279][T12758] __dev_queue_xmit+0x8b0/0x43e0 [ 523.573195][T12758] batadv_send_skb_packet+0x588/0x770 [ 523.579632][T12758] batadv_iv_send_outstanding_bat_ogm_packet+0x70a/0x8d0 [ 523.588050][T12758] process_one_work+0x958/0x1b30 [ 523.593961][T12758] worker_thread+0x6c8/0xf00 [ 523.599456][T12758] kthread+0x2c1/0x3a0 [ 523.604327][T12758] ret_from_fork+0x45/0x80 [ 523.609622][T12758] ret_from_fork_asm+0x1a/0x30 [ 523.615334][T12758] [ 523.618106][T12758] The buggy address belongs to the object at ffff888026de2800 [ 523.618106][T12758] which belongs to the cache kmalloc-1k of size 1024 [ 523.634985][T12758] The buggy address is located 0 bytes inside of [ 523.634985][T12758] freed 1024-byte region [ffff888026de2800, ffff888026de2c00) [ 523.651448][T12758] [ 523.654222][T12758] The buggy address belongs to the physical page: [ 523.661901][T12758] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x26de0 [ 523.672395][T12758] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 523.682601][T12758] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 523.691739][T12758] page_type: f5(slab) [ 523.696505][T12758] raw: 00fff00000000040 ffff88801ac41dc0 dead000000000100 dead000000000122 [ 523.706893][T12758] raw: 0000000000000000 0000000000100010 00000001f5000000 0000000000000000 [ 523.717187][T12758] head: 00fff00000000040 ffff88801ac41dc0 dead000000000100 dead000000000122 [ 523.727577][T12758] head: 0000000000000000 0000000000100010 00000001f5000000 0000000000000000 [ 523.737967][T12758] head: 00fff00000000003 ffffea00009b7801 ffffffffffffffff 0000000000000000 [ 523.748362][T12758] head: 0000000000000008 0000000000000000 00000000ffffffff 0000000000000000 [ 523.758751][T12758] page dumped because: kasan: bad access detected [ 523.766432][T12758] page_owner tracks the page as allocated [ 523.773269][T12758] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x252800(GFP_NOWAIT|__GFP_NORETRY|__GFP_COMP|__GFP_THISNODE), pid 64, tgid 64 (kworker/u8:4), ts 10853500719, free_ts 0 [ 523.795247][T12758] post_alloc_hook+0x2d1/0x350 [ 523.800960][T12758] get_page_from_freelist+0xfce/0x2f80 [ 523.807509][T12758] __alloc_pages_noprof+0x223/0x25b0 [ 523.813849][T12758] new_slab+0xca/0x410 [ 523.818722][T12758] ___slab_alloc+0xce2/0x1650 [ 523.824328][T12758] __slab_alloc.constprop.0+0x56/0xb0 [ 523.830762][T12758] __kmalloc_cache_node_noprof+0xfb/0x3f0 [ 523.837621][T12758] blk_mq_alloc_and_init_hctx+0x639/0x11b0 [ 523.844584][T12758] blk_mq_realloc_hw_ctxs+0x8e0/0xbe0 [ 523.851023][T12758] blk_mq_init_allocated_queue+0x39e/0x11f0 [ 523.858082][T12758] blk_mq_alloc_queue+0x1ef/0x2e0 [ 523.864099][T12758] scsi_alloc_sdev+0x890/0xd80 [ 523.869801][T12758] scsi_probe_and_add_lun+0x789/0xda0 [ 523.876237][T12758] __scsi_scan_target+0x1ea/0x580 [ 523.882255][T12758] scsi_scan_channel+0x149/0x1e0 [ 523.888170][T12758] scsi_scan_host_selected+0x302/0x400 [ 523.894712][T12758] page_owner free stack trace missing [ 523.901132][T12758] [ 523.903899][T12758] Memory state around the buggy address: [ 523.910636][T12758] ffff888026de2700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 523.920297][T12758] ffff888026de2780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 523.929957][T12758] >ffff888026de2800: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 523.939638][T12758] ^ [ 523.944508][T12758] ffff888026de2880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 523.954170][T12758] ffff888026de2900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 523.963825][T12758] ================================================================== [ 524.042823][ T5144] Bluetooth: hci2: command 0x0406 tx timeout [ 524.113589][T12758] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 524.122261][T12758] CPU: 0 UID: 0 PID: 12758 Comm: syz.5.1595 Not tainted 6.13.0-rc4-syzkaller-00012-g9b2ffa6148b1 #0 [ 524.135185][T12758] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 524.147253][T12758] Call Trace: [ 524.151186][T12758] [ 524.154702][T12758] dump_stack_lvl+0x3d/0x1f0 [ 524.160223][T12758] panic+0x71d/0x800 [ 524.164912][T12758] ? __pfx_panic+0x10/0x10 [ 524.170229][T12758] ? preempt_schedule_thunk+0x1a/0x30 [ 524.176683][T12758] ? preempt_schedule_common+0x44/0xc0 [ 524.183245][T12758] check_panic_on_warn+0xab/0xb0 [ 524.189186][T12758] end_report+0x117/0x180 [ 524.194404][T12758] kasan_report+0xe9/0x110 [ 524.199740][T12758] ? force_devcd_write+0x31f/0x350 [ 524.205898][T12758] ? force_devcd_write+0x31f/0x350 [ 524.212045][T12758] force_devcd_write+0x31f/0x350 [ 524.217972][T12758] ? __pfx_force_devcd_write+0x10/0x10 [ 524.224530][T12758] ? debugfs_file_get+0x21c/0x5c0 [ 524.230569][T12758] ? __pfx_debugfs_file_get+0x10/0x10 [ 524.237024][T12758] ? rcu_is_watching+0x12/0xc0 [ 524.242752][T12758] ? trace_lock_acquire+0x14e/0x1f0 [ 524.249005][T12758] full_proxy_write+0xfb/0x1b0 [ 524.254734][T12758] ? __pfx_full_proxy_write+0x10/0x10 [ 524.261194][T12758] vfs_write+0x24c/0x1150 [ 524.266420][T12758] ? __fget_files+0x1fc/0x3a0 [ 524.272046][T12758] ? __pfx___mutex_lock+0x10/0x10 [ 524.278084][T12758] ? __pfx_vfs_write+0x10/0x10 [ 524.283819][T12758] ? __fget_files+0x206/0x3a0 [ 524.289448][T12758] ksys_write+0x12b/0x250 [ 524.294659][T12758] ? __pfx_ksys_write+0x10/0x10 [ 524.300494][T12758] do_syscall_64+0xcd/0x250 [ 524.305932][T12758] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 524.313028][T12758] RIP: 0033:0x7ff2f1185d29 [ 524.318332][T12758] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 524.341882][T12758] RSP: 002b:00007ff2f1f0e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 524.351990][T12758] RAX: ffffffffffffffda RBX: 00007ff2f1376160 RCX: 00007ff2f1185d29 [ 524.361585][T12758] RDX: 000000000000000e RSI: 0000000000000000 RDI: 000000000000000d [ 524.371167][T12758] RBP: 00007ff2f1201b08 R08: 0000000000000000 R09: 0000000000000000 [ 524.380736][T12758] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 524.390305][T12758] R13: 0000000000000000 R14: 00007ff2f1376160 R15: 00007ffdcd3a47a8 [ 524.399900][T12758] [ 524.403816][T12758] Kernel Offset: disabled [ 524.409010][T12758] Rebooting in 86400 seconds..