last executing test programs: 15m0.103051468s ago: executing program 32 (id=256): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) ioperm$auto(0x7, 0x6, 0x2) bpf$auto(0x100000001, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) readv$auto(0x3, 0x0, 0x400) semctl$auto(0x1ff, 0x2, 0x13, 0x20001) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mbind$auto(0x2002, 0x100000004, 0x100000003, 0x0, 0x6, 0x2) set_mempolicy$auto(0x3, &(0x7f0000000000)=0x3, 0x388) mmap$auto(0x0, 0x8, 0x4000000000df, 0x44eb1, 0x6, 0x300000000000) kexec_load$auto(0x8, 0xc, 0x0, 0x0) mmap$auto(0x0, 0x9, 0xdf, 0xeb1, 0x401, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) getcwd$auto(0x0, 0xffffffffffffffff) mremap$auto(0x0, 0x7, 0x3fd6, 0x3, 0x20000000) socket(0x1e, 0x5, 0x0) recvfrom$auto(0x3, 0x0, 0x100, 0x101, 0x0, 0x0) mbind$auto(0x0, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) 14m56.042236931s ago: executing program 33 (id=267): rename$auto(&(0x7f0000000180)='\xfd\x90\x8f2\x14\x92\x00\xbf\xdf\xcf\x9a\xae}\xd9\xf95\xc5gV\x82\f\xe5h\xfe\x83\xe4\xbe\x8c\x1f\xa5\xf1_T\xde\xf7\xd4\x83D\x9eXS\xd6\x90T\xc1v\xad#\xc4q\x8b\xed2\xadW:0\xef\x9c.=\xba\x0fy\x8f\xcd\xd6\xde\xa9i\xec\xe8\xca\x9f\xf3\x82b\xa2y\xa87J\xfc \xc5\xd8\x80\xba\xaaV\x8f{\x1f\x1b\xb0\n\x97\\\xa7\xe3\xdf\xc29-*;#r\xc8\xd1\x14RcF\x87\xe4\x1c\x1fGL\xa5\x19\x90\xd6\x8d*\xe6\b(\x1a\xea\x95\xdc\xa6)5\xae&yAl\x1e\xe3j Lp\x91\r\xed%\xafZ\xf8w\xf2}\xcdGS\xce\xb9\xdck\x86\x00.6\xe6{\xc1\x00\x1bW5\x81\xda!\xcb.O\xa9\xf3\xa7\x88+\xb9\xf3\x9a7\xa4\xe6)<\xa79\xa4\x87\\\xb4\xbf\v\x03\x87\xac\x87r\x02\x05\xdb\xe4\xde,V\xb6G\xba.WR\xe2<~\xdd\xb2\xe53hj_;\xa5qm\x92\xc7P\xc9.\x82w8\x1f\xfcX\xe4\x14\xc72cC\xd3\x00', 0x0) r0 = socket(0x10, 0x2, 0x4) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket(0x10, 0x2, 0x14) r1 = socket$nl_generic(0x10, 0x3, 0x10) pidfd_open$auto(0x1, 0x0) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$auto_NL80211_CMD_SET_WIPHY(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYRESDEC=r2, @ANYRESHEX=r1, @ANYBLOB="0700008dd492d20e9f840b00000008000300", @ANYRES32=r4], 0x24}, 0x1, 0x0, 0x0, 0x24048080}, 0x80) r5 = socket(0x10, 0x2, 0x0) sendmsg$auto_NFSD_CMD_THREADS_SET(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="110000001200c7"], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x2400c0c0) tgkill$auto(0x1, 0x1, 0x5) read$auto(0x3, 0x0, 0xfdef) sendmsg$auto_NL80211_CMD_START_P2P_DEVICE(r5, &(0x7f0000001480)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001440)={&(0x7f00000014c0)=ANY=[@ANYBLOB="60110000a02d453c9bb6db9456c5345c89790e9d20fe8ab88ff75764f0d2d17d04912d70b18659daf8cedcda6ff69ce11fb1b3e8ee197f173ea17d9b4eb3577633e84b80bfb0902719d156252eb4f1279157a76752f8fdc3954d3da7309a2166a34ff56a9446853deb66c873c5c4976163d43321d3847e7ad92f0e7878ab786acce25566a74ac7e77fff7b98a258056bc1aa02cb444bae41a2ec0ea22aea667340af589e7e3b20d4d7bab085b572fbe5857c787cbd9defa4c55dd4c0b460f9753b82c647bd1cc1badd449ce88465bb4c02e7c3373b1e7af7c973c2ca370e8d965ace6626a40b812a9777", @ANYRES16=0x0, @ANYBLOB="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"], 0x1160}, 0x1, 0x0, 0x0, 0x1}, 0x20000000) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) capget$auto(0x0, &(0x7f0000000100)={0x3, 0x400, 0x1ff}) syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/pid_for_children\x00') mprotect$auto(0x1ffff000, 0x8000000000000001, 0xd) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) bpf$auto(0x5, &(0x7f0000000100)=@task_fd_query={0x2, 0x2, 0x4, 0xfffffffe, 0x85, 0x7, 0x9, 0x6, 0x8001}, 0x101) statmount$auto(0x0, &(0x7f0000000040)={0x0, 0x5, 0x36, 0x828, 0x9, 0x8000000000000000, 0x10000008, 0x7, 0x7, 0x2, 0x5, 0x6, 0x3, 0x8, 0x5, 0xf, 0x0, 0x9, 0x10001, 0x7, [0x9, 0x7f, 0x77, 0x1, 0x7ffffffffffffffb, 0x7ff, 0x400, 0x3, 0x80000000, 0x8, 0x3, 0xfffffffffffffff9, 0x10, 0x3, 0x35c4, 0x1, 0x6, 0xe08, 0xea8, 0x8, 0xd9, 0x8, 0x5, 0x6, 0x200000000803, 0x9, 0x5, 0x401, 0x800, 0x8000000000000000, 0x2ab, 0x5, 0x7ff, 0x80bc, 0x1, 0x3, 0xffffffffffff0000, 0x6b, 0xfffffffffffffff9, 0x4, 0x2b7, 0x4, 0xf, 0xffffffffffffff26, 0xecc, 0x7fffffff, 0x1, 0x7d, 0xdc]}, 0x5, 0x0) r6 = socket(0x10, 0x2, 0x4) sendmsg$auto_NFSD_CMD_THREADS_SET(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="2c0000001400c792c4ad92fd788cdab50e123ebfe08fdde4684c39c07db03dcdcbf0572a5992d5de9d1259681c1c7fce0e86aa18c286505bad9689c63583cc4f27711815bcb319a276af002e7b2e786f3246536ce8df7f9629408532c87689c7fbed6f7bbb23733aa82ce9947a81d7bfce4f69bb6abcffcd20b07bd3c6f4199f321834ace618abb1eee0fe906633b960dc899b315de97e30386d6e0760e6e7f41b3579b08d824471ebb5442e9a49032d085dec250ce4a821e5e83eedcec2a00b3953987584d71eb99bc65114"], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x400c000) syz_genetlink_get_family_id$auto_batadv(0x0, r0) mmap$auto(0x1291, 0xfffffffffffffffe, 0xd, 0x10010, 0x1, 0x2) syz_genetlink_get_family_id$auto_ethtool(0x0, r0) read$auto(0x3, 0x0, 0x80) 12m53.745503101s ago: executing program 34 (id=634): socket$nl_generic(0x10, 0x3, 0x10) semctl$auto(0x80000001, 0x1, 0x3, 0x4) inotify_init1$auto(0x3000000000000) mmap$auto(0x0, 0x8, 0x1000000004, 0x9b72, 0x2, 0x8000) socket(0x15, 0x5, 0x0) getsockopt$auto(0x4, 0x114, 0x7, 0xfffffffffffffffc, 0x0) socket(0x1e, 0x2, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) connect$auto(0x4, 0x0, 0x10) mlockall$auto(0x7) set_mempolicy$auto(0x2005, &(0x7f0000000080)=0x87e, 0x4) close_range$auto(0x0, 0xfffffffffffff001, 0x2) socket(0x2, 0x1, 0x0) socket(0x18, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) memfd_create$auto(&(0x7f0000000000)='\xc4--:\xdd:,./-${\x00', 0x4) mmap$auto(0x0, 0x8, 0x1000000016, 0x13, 0x3, 0x400180000000) fallocate$auto(0x8000000000000003, 0x0, 0xf, 0x200000002) mmap$auto(0x0, 0x80000000, 0x4, 0x44eb2, 0x10006, 0x300000000000) 12m5.625992503s ago: executing program 35 (id=910): syz_genetlink_get_family_id$auto_802_15_4_MAC(&(0x7f0000002280), 0xffffffffffffffff) r0 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2002210}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r0, 0x2, 0x70bd29, 0x25dfdbfd, {}, [@NL80211_ATTR_WIPHY_TX_POWER_LEVEL={0x8, 0x62, 0x81}, @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x810}, 0x400e015) madvise$auto(0x0, 0xffffffffffff0001, 0x15) mprotect$auto(0x1ffff000, 0x8007, 0x6) clone3$auto(&(0x7f0000000400)={0x100000000, 0x980, 0x4, 0x6, 0x2, 0x80000000, 0x1, 0x8, 0xe, 0x9, 0x3}, 0x40) syz_genetlink_get_family_id$auto_802_15_4_MAC(&(0x7f0000002280), 0xffffffffffffffff) (async) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) sendmsg$auto_NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2002210}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r0, 0x2, 0x70bd29, 0x25dfdbfd, {}, [@NL80211_ATTR_WIPHY_TX_POWER_LEVEL={0x8, 0x62, 0x81}, @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x810}, 0x400e015) (async) madvise$auto(0x0, 0xffffffffffff0001, 0x15) (async) mprotect$auto(0x1ffff000, 0x8007, 0x6) (async) clone3$auto(&(0x7f0000000400)={0x100000000, 0x980, 0x4, 0x6, 0x2, 0x80000000, 0x1, 0x8, 0xe, 0x9, 0x3}, 0x40) (async) 10m58.167729343s ago: executing program 36 (id=1212): close_range$auto(0x0, 0xfffffffffffff001, 0x2) socket(0x2, 0x1, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) pipe$auto(0x0) rseq$auto(&(0x7f0000000300)={0xe, 0x401, 0x0, 0x6, 0xffffffff, 0x2}, 0x8002, 0x0, 0x6) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mmap$auto(0x0, 0x2020009, 0xa, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0xffffffffffff0001, 0x15) madvise$auto(0x0, 0xffffffffffff0005, 0x19) getsid$auto(0x4) socket(0x1e, 0x1, 0x0) socket(0x10, 0x2, 0x0) memfd_create$auto(&(0x7f0000000000)='\xc4--:\xdd:,./-${\x00', 0x4) mmap$auto(0x0, 0x8, 0x1000000016, 0x13, 0x3, 0x400180000000) read$auto(0x3, 0x0, 0x4c0) 10m50.337262069s ago: executing program 37 (id=1244): socket(0x2, 0x3, 0x1) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r0 = syz_genetlink_get_family_id$auto_tcp_metrics(&(0x7f0000000300), 0xffffffffffffffff) r1 = socket(0x10, 0x2, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x3, 0x6) sendmsg$auto_TCP_METRICS_CMD_GET(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="01"], 0x5c}, 0x1, 0x0, 0x0, 0x40004000}, 0x40001000) ioctl$auto(0x3, 0x8000089e1, 0x38) socket$nl_generic(0x10, 0x3, 0x10) 9m49.184657809s ago: executing program 38 (id=1502): bpf$auto(0x800000000000001f, 0xfffffffffffffffe, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0x10eb1, 0x401, 0x7) mknod$auto(&(0x7f0000000240)='\xef(\xe6\x1a\x9a1\xa8\xdd\xc2\xd7\xb73\x19e\rp\xe9Gu\x98\x9b\xbd\xa7*\xff\xfc%\x9b\x8eZ\xe5\xe7\xd4\x93\xb2\xac#\xf6\x95\x85\xfc\xc5\xd6\x8b\x99\xff\xff\xa0\x92\xbfy\xe2:X\xc0\x01xZ\x0e\x95\xe9\x895\xed\xf4U\xe7F\xecyp\xf40\xf8\x9a\xcf\x9b\xd6R\xdfL}\xcb\x19\x96\xb9h\xb4z\xa9%\xadu\x02\f\x8b\xba\xd7t\xd3\xb9\xc1\xeb\xa9\xcb:\xbb \xd9\xa2\x18\xc2\xa1\x135\xe3Gzhu\x91L\x882\x157\xa5\x19\xf5+\xe3\xe6\x86<\xc5\x8d\xa3\x1fhdEF\xd4\xa8x\xd1 \xee\x17>\x84\xd5\xc4\x8eJ\x95', 0xc6, 0xc8) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket(0x2, 0x1, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x23, 0x80805, 0x0) read$auto(r0, &(0x7f0000000180)='\'\x00', 0xb) socket(0x25, 0x1, 0x3) setsockopt$auto(0x3, 0x10000000116, 0x7f, 0xfffffffffffffffd, 0x3) execve$auto(&(0x7f0000000000)=':,\x00', 0x0, 0x0) connect$auto(0x3, 0x0, 0x52) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x27, 0x2, 0x3) keyctl$auto(0xb, 0xfffffffd, 0x5, 0x0, 0xb) accept$auto(0x3, 0x0, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x19) prctl$auto(0x23, 0x2, 0x2008, 0x0, 0x0) waitid$auto(0x7f, 0x9, &(0x7f0000000000)={@siginfo_0_0={0x3, 0x8, 0xfff, @_timer={0x7, 0x0, @sival_int=0x6, 0xf}}}, 0x2, 0x0) mprotect$auto(0x81, 0x81, 0x9) mlockall$auto(0x7) mremap$auto(0x0, 0x4, 0x4, 0x7, 0x100000000) mmap$auto(0x8, 0x5, 0x80000003, 0x200000013, 0x3686, 0xfffffffffffffff9) io_uring_setup$auto(0x8, 0x0) sendmsg$auto_WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x4008810}, 0x20008000) madvise$auto(0x4, 0x5cd, 0x1000) sendmsg$auto_BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000326bd7000fedbdf250200000800130001"], 0x24}, 0x1, 0x0, 0x0, 0x4c894}, 0x4) socket(0x1f, 0x2, 0xfffffffe) sendmsg$auto_NL80211_CMD_GET_REG(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB="b3d7370746f172012a1f00d8ad00", @ANYRESDEC, @ANYRES32, @ANYRES16], 0x1ac}, 0x1, 0x0, 0x0, 0x8000}, 0x4004005) 7m58.119834534s ago: executing program 39 (id=1960): r0 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) socket(0x29, 0x3, 0x1) sendmsg$auto_NL80211_CMD_SET_WIPHY(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={0x24, r0, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r3}, @NL80211_ATTR_TXQ_LIMIT={0x8, 0x10a, 0xfffffffa}]}, 0x24}, 0x1, 0x0, 0x0, 0x22048800}, 0x80) 7m15.461870054s ago: executing program 40 (id=2054): unshare$auto(0x20000) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/mnt\x00') socket(0xa, 0x801, 0x106) setsockopt$auto(0x3, 0x0, 0x33, 0xffffffffffffffff, 0x0) (async) setsockopt$auto(0x3, 0x0, 0x33, 0xffffffffffffffff, 0x0) setns(r0, 0x0) mount$auto(0x0, &(0x7f00000000c0)='.\x00', &(0x7f0000000180)='nfsd\x00', 0x8, 0x0) (async) mount$auto(0x0, &(0x7f00000000c0)='.\x00', &(0x7f0000000180)='nfsd\x00', 0x8, 0x0) rseq$auto(&(0x7f0000000340)={0xe, 0x401, 0x0, 0x6, 0xffffffff, 0x2, "132054e2cd8bb4f83fadcb604ff80424ac2f8592787bf1b282ce783bcd147c56bde779b5be7dab61f6c08c03a1faffffffffffffff0f603431348c0d25b9c6ed61064a415730b195acbd6078988d3a6c5e14cb1f356c118aa7d9b82674bd1bfd4caceedcee659c7ca5fee230181defb7705f3f5752bdca3256878893fe5d8d9fd87c889e1a6af40d3dd6043449797fbdb081b846871c3bedd3b32a93e8c62ef3a3c9cac2008ad74051be9fefb97ff871772964450e95f03d73d28f2e99a1a58b97ff"}, 0x8000, 0x0, 0x6) lsm_get_self_attr$auto(0xfc9, 0x0, &(0x7f0000000040)=0x8, 0x9) mmap$auto(0x0, 0x3, 0xdf, 0x9b72, 0x2, 0x8000) (async) mmap$auto(0x0, 0x3, 0xdf, 0x9b72, 0x2, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) (async) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x402, 0x300000000000) getgroups$auto(0xeda, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) bpf$auto(0x0, &(0x7f0000000000)=@link_update={0x2, @new_prog_fd=0x4, 0x7, @old_prog_fd=0x8000}, 0xa3) socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) bpf$auto(0x3, &(0x7f0000000100)=@raw_tracepoint={0x5, r1, 0x0, 0x7}, 0xe) pivot_root$auto(&(0x7f0000000040)='..\x00', &(0x7f0000000080)='.\x00') mount$auto(0x0, &(0x7f00000000c0)='.\x00', &(0x7f0000000180)='nfsd\x00', 0x8, 0x0) (async) mount$auto(0x0, &(0x7f00000000c0)='.\x00', &(0x7f0000000180)='nfsd\x00', 0x8, 0x0) pivot_root$auto(&(0x7f0000000200)='(-Zi\xe2\x92\x16\xaa\xc04W\xc5\x00', &(0x7f0000000140)='\x1a\xf6\x9f\xe6\xf7\x1c\xfdr`\t\xa2\xf6\x1a\xba&\t') 7m13.003158775s ago: executing program 41 (id=2065): socket(0xa, 0x2, 0x0) (async) socket(0xa, 0x2, 0x0) r0 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$auto_NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="01002dbdd907c0e9b3b57095000008000300", @ANYRES32=r2], 0x24}, 0x1, 0x0, 0x0, 0x803}, 0x80) mprotect$auto(0x1ffff000, 0x8000000000000001, 0x4) (async) mprotect$auto(0x1ffff000, 0x8000000000000001, 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL802154_CMD_SET_LBT_MODE(r3, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24040081}, 0x8040) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) io_uring_setup$auto(0x6, 0x0) setsockopt$auto(0x3, 0x0, 0x1, 0x0, 0x9) select$auto(0x3, 0x0, &(0x7f0000000100)={[0xd, 0x80000003, 0x0, 0xc, 0x8, 0x3, 0x6, 0x2, 0x9, 0x5e582970, 0x4000000000000003, 0x2, 0x4, 0x5, 0x8, 0x6]}, 0x0, 0x0) connect$auto(0x3, &(0x7f0000000140)={0xa, @sa_data_min="c4aeed448dc7fe8000"}, 0x55) (async) connect$auto(0x3, &(0x7f0000000140)={0xa, @sa_data_min="c4aeed448dc7fe8000"}, 0x55) write$auto(0x3, 0x0, 0xfdef) 6m47.436566404s ago: executing program 42 (id=2171): ioctl$auto(0xc8, 0x800454df, 0x2000000000000acd) keyctl$auto(0x1f, 0x8, 0x0, 0xfffffffffffffffd, 0x5) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$auto(0x5, 0x10f, 0x1, 0xfffffffffffffffe, 0x4) r0 = socket(0xa, 0x6, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) ioperm$auto(0xde, 0x9, 0x500402) cachestat$auto(0x0, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) socket(0xa, 0x801, 0x4) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) pipe$auto(0x0) dup2$auto(0x5, 0x4) splice$auto(0x4, 0x0, 0x2, 0x0, 0x80000001, 0x9) socket(0xa, 0x2, 0x88) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'vlan0\x00', 0x0}) sendmsg$auto_NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x1c, 0x0, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24048080}, 0x80) connect$auto(0x3, &(0x7f0000000140)={0xa, @sa_data_min="c4aeed448dc7fe8000"}, 0x55) mmap$auto(0x0, 0x200006, 0x2, 0x40eb1, 0x602, 0x300000000000) mlockall$auto(0x7) madvise$auto(0x0, 0x20499d, 0x9) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) connect$auto(0x3, &(0x7f0000000000)={0x2, @sockaddr_1_1}, 0x55) write$auto(0x3, 0x0, 0xfdef) madvise$auto(0x0, 0xffffffffffff0001, 0x15) mmap$auto(0x0, 0x8, 0x1000000004, 0x9b72, 0x2, 0x8000) get_mempolicy$auto(0xfffffffffffffffe, 0x0, 0x3, 0x1ff, 0x3) fanotify_mark$auto(0x0, 0x205, 0x7, 0x4, 0x0) 6m32.640647804s ago: executing program 7 (id=2206): socket(0xa, 0x2, 0x88) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) select$auto(0x3, 0x0, &(0x7f0000000100)={[0x9, 0x7, 0x0, 0x9, 0xfffffffffffffffc, 0x3, 0x6, 0x2, 0x9, 0xffff, 0x4000000000000000, 0xd, 0x3, 0x200000201, 0x7, 0x6]}, 0x0, 0x0) ioperm$auto(0x3, 0x5, 0x149) (async) ioperm$auto(0x3, 0x5, 0x149) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) (async) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)) sync_file_range$auto(0x0, 0x6, 0xffffffff, 0x2) (async) sync_file_range$auto(0x0, 0x6, 0xffffffff, 0x2) connect$auto(0x3, &(0x7f0000000140)={0xa, @sa_data_min="c4aeed448dc7fe8000"}, 0x55) sendto$auto(0x3, 0x0, 0xf, 0xe, &(0x7f0000000100)={0x2, @sa_data_min="c449e000000d6b00"}, 0x19) 6m32.592201787s ago: executing program 7 (id=2207): mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) stat$auto(&(0x7f0000000000)='..\x00\x00', 0x0) futex_waitv$auto(&(0x7f0000000000)={0xffffffffffffffff, 0x80000000000f2, 0x80000001, 0x8001}, 0x77, 0x2, 0x0, 0x42bd) mprotect$auto(0x1ffff000, 0x8000000000000001, 0x4) close_range$auto(0x0, 0xfffffffffffff000, 0x2) io_uring_setup$auto(0x48, 0x0) io_uring_setup$auto(0x5, &(0x7f0000000000)={0x6, 0x1, 0x400, 0x7, 0x5, 0x6, 0x7, [0x4, 0x2e9, 0x8], {0x20, 0x1, 0x7, 0x7, 0x5, 0x5, 0x1, 0xfffffffc, 0x7}, {0x4, 0xfffff654, 0xffff7fff, 0x2, 0x8, 0x200, 0x2, 0x0, 0x3}}) io_uring_setup$auto(0x7fffffff, &(0x7f0000000000)={0xfffe, 0xa7f9, 0xe, 0x0, 0x80, 0x1000, 0x200, [0x7, 0x4, 0xdabe], {0x80000001, 0x0, 0x3, 0xb6, 0xfffffa1c, 0x10001, 0x6, 0x5, 0xfffffffffffffb2a}, {0x3, 0xfff, 0x8, 0x44000, 0x8, 0xffff, 0x4, 0xfffffffb, 0x1}}) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) fcntl$auto(0x3, 0x4, 0xa553) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0) r0 = getpgid(0x0) pidfd_open$auto(r0, 0x4) close_range$auto(0x0, 0xfffffffffffff000, 0x2) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/cgroup\x00') r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/net\x00') ioctl$NS_GET_PARENT(r1, 0xb701, 0x0) socket(0x23, 0x80805, 0x0) socket$nl_generic(0x10, 0x3, 0x10) fanotify_init$auto(0x5, 0x2000000000002) syz_open_procfs$namespace(r0, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x2, 0x0) setsockopt$auto(0x400000000000003, 0x29, 0x23, 0x0, 0x1003) connect$auto(0x3, &(0x7f0000000180)={0x23, @sockaddr_1_1}, 0x54) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) writev$auto(0xdd, 0xfffffffffffffffe, 0x4) socket(0xa, 0x801, 0x106) 6m32.300382391s ago: executing program 7 (id=2208): sendmsg$auto_WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x4008810}, 0x20008000) setresuid$auto(0x8, 0x8, 0x0) setfsuid$auto(0x0) socket(0x2, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000080)={0x2, @sockaddr_1_1}, 0x6b) connect$auto(0x3, &(0x7f00000000c0)={0x2, @sockaddr_1_1}, 0x55) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000000c40), r0) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r0, &(0x7f0000001d40)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x3c, r1, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@OVS_PACKET_ATTR_PROBE={0x4}, @OVS_PACKET_ATTR_PROBE={0x4}, @OVS_PACKET_ATTR_PACKET={0x12, 0x1, "4f1980af25430d91ee91098bd96e"}, @OVS_PACKET_ATTR_ACTIONS={0x4}, @OVS_PACKET_ATTR_KEY={0x8, 0x2, "03000000"}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000040}, 0x88000) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) sendfile$auto(0x1, 0x3, 0x0, 0xc01) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) socket(0x10, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) close_range$auto(0x2, 0x8, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000680)='ns/net\x00') sendmsg$auto_IOAM6_CMD_DEL_SCHEMA(0xffffffffffffffff, 0x0, 0x4000000) setresuid$auto(0xffffffffffffffff, 0x8, 0x8000) 6m32.009161136s ago: executing program 7 (id=2210): keyctl$auto(0x1c, 0x80, 0x8, 0x5, 0x400000008) 6m31.836610341s ago: executing program 7 (id=2211): r0 = socket(0x2, 0x801, 0x84) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) setsockopt$auto(r0, 0x20000, 0x0, 0x0, 0x5) connect$auto(0x3, &(0x7f00000001c0)={0x2, @sa_data_min="9aceb6b47600d1e75e60707d94e2"}, 0x55) umask$auto(0x6) open(&(0x7f0000000080)='./file0\x00', 0x22ac2, 0x5d745cb200ae4d7b) rt_sigqueueinfo$auto(0x1, 0x7, &(0x7f0000000040)={@siginfo_0_0={0x0, 0x5, 0xfffffffb, @_sigpoll={0x52, 0x7}}}) migrate_pages$auto(0x1, 0x9, 0x0, &(0x7f0000000840)=0x2) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) fanotify_init$auto(0x5, 0x2000000000002) socket$nl_generic(0x10, 0x3, 0x10) socket(0x26, 0x80805, 0x0) open(&(0x7f0000000080)='./file1\x00', 0x4242, 0xe1d2b27bdc14aabe) setresuid$auto(0x0, 0x8, 0x8000) ftruncate$auto(0x3, 0x43e) open(&(0x7f0000000000)='./file0\x00', 0xe600, 0x20) listen$auto(0x3, 0x81) accept$auto(r0, 0xffffffffffffffff, 0xffffffffffffffff) 6m31.23798581s ago: executing program 7 (id=2214): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) sendmsg$auto_WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x4008844}, 0x2000c000) r0 = socket(0x2, 0x1, 0x106) bind$auto(0x3, &(0x7f0000000080)={0x2, @sockaddr_1_1}, 0x6b) connect$auto(0x3, &(0x7f00000000c0)={0x2, @sockaddr_1_1}, 0x55) setsockopt$auto(0x3, 0x1, 0x21, 0x0, 0x9) write$auto(r0, 0x0, 0xfffffdef) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/ipc\x00') syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') clone$auto(0x4003b45, 0x5, 0xfffffffffffffffe, 0x0, 0x100000000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mq_open$auto(&(0x7f0000000000)='.\x00', 0xd, 0x41, 0x0) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) r2 = socket(0x2, 0x2, 0x0) r3 = socket(0xf, 0x3, 0x2) sendmsg$auto_NL80211_CMD_DEL_INTERFACE(r3, 0x0, 0x4805) readv$auto(0x3, 0x0, 0x400) prctl$auto(0x1000000003b, 0x1, 0x4, 0x3, 0x7) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x402, 0x300000000000) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) r4 = syz_genetlink_get_family_id$auto_gtp(&(0x7f0000000140), r2) sendmsg$auto_GTP_CMD_ECHOREQ(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x44, r4, 0x20, 0x70bd27, 0x25dfdbfc, {}, [@GTPA_VERSION={0x8, 0x2, 0x200}, @GTPA_I_TEI={0x8, 0x8, 0x63}, @GTPA_LINK={0x8, 0x1, 0x7}, @GTPA_NET_NS_FD={0x8, 0x7, r1}, @GTPA_MS_ADDRESS={0x8, 0x5, 0x7fff}, @GTPA_LINK={0x8, 0x1, 0x800}]}, 0x44}, 0x1, 0x0, 0x0, 0x2040001}, 0x49) socket(0x2, 0x1, 0x0) socket(0xa, 0x801, 0x106) listen$auto(0x3, 0x81) select$auto(0x4, 0x0, 0x0, &(0x7f00000002c0)={[0xcec, 0x9, 0x0, 0x80000001, 0x5, 0x9, 0x2, 0x8, 0xb, 0x6, 0x1, 0x4394, 0x0, 0x80, 0x7, 0x7]}, 0x0) shutdown$auto(0x200000003, 0x2) times$auto(0xfffffffffffffffc) read$auto(0x3, 0x0, 0x80) 6m30.841017086s ago: executing program 43 (id=2214): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) sendmsg$auto_WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x4008844}, 0x2000c000) r0 = socket(0x2, 0x1, 0x106) bind$auto(0x3, &(0x7f0000000080)={0x2, @sockaddr_1_1}, 0x6b) connect$auto(0x3, &(0x7f00000000c0)={0x2, @sockaddr_1_1}, 0x55) setsockopt$auto(0x3, 0x1, 0x21, 0x0, 0x9) write$auto(r0, 0x0, 0xfffffdef) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/ipc\x00') syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') clone$auto(0x4003b45, 0x5, 0xfffffffffffffffe, 0x0, 0x100000000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mq_open$auto(&(0x7f0000000000)='.\x00', 0xd, 0x41, 0x0) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) r2 = socket(0x2, 0x2, 0x0) r3 = socket(0xf, 0x3, 0x2) sendmsg$auto_NL80211_CMD_DEL_INTERFACE(r3, 0x0, 0x4805) readv$auto(0x3, 0x0, 0x400) prctl$auto(0x1000000003b, 0x1, 0x4, 0x3, 0x7) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x402, 0x300000000000) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) r4 = syz_genetlink_get_family_id$auto_gtp(&(0x7f0000000140), r2) sendmsg$auto_GTP_CMD_ECHOREQ(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x44, r4, 0x20, 0x70bd27, 0x25dfdbfc, {}, [@GTPA_VERSION={0x8, 0x2, 0x200}, @GTPA_I_TEI={0x8, 0x8, 0x63}, @GTPA_LINK={0x8, 0x1, 0x7}, @GTPA_NET_NS_FD={0x8, 0x7, r1}, @GTPA_MS_ADDRESS={0x8, 0x5, 0x7fff}, @GTPA_LINK={0x8, 0x1, 0x800}]}, 0x44}, 0x1, 0x0, 0x0, 0x2040001}, 0x49) socket(0x2, 0x1, 0x0) socket(0xa, 0x801, 0x106) listen$auto(0x3, 0x81) select$auto(0x4, 0x0, 0x0, &(0x7f00000002c0)={[0xcec, 0x9, 0x0, 0x80000001, 0x5, 0x9, 0x2, 0x8, 0xb, 0x6, 0x1, 0x4394, 0x0, 0x80, 0x7, 0x7]}, 0x0) shutdown$auto(0x200000003, 0x2) times$auto(0xfffffffffffffffc) read$auto(0x3, 0x0, 0x80) 4m13.422864549s ago: executing program 3 (id=2808): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) sendmsg$auto_WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x4008810}, 0x20008000) r0 = socket(0x2, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000080)={0x2, @sockaddr_1_1}, 0x6b) open$dir(&(0x7f0000000040)='./file0\x00', 0x404c00, 0x4) connect$auto(0x3, &(0x7f00000000c0)={0x2, @sockaddr_1_1}, 0x55) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_TASKSTATS(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_TASKSTATS_CMD_GET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x24, r2, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [@TASKSTATS_CMD_ATTR_REGISTER_CPUMASK={0xd, 0x3, 'N-N,.+--%'}]}, 0x24}, 0x1, 0x0, 0x0, 0x8001}, 0x1020) sendmsg$auto_NL80211_CMD_SET_WIPHY(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x841}, 0xc094) close_range$auto(0x2, 0x8, 0x0) socket(0x11, 0x80003, 0x300) socket(0x11, 0x3, 0x2) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) connect$auto(0x3, &(0x7f0000000140)={0x2, @sa_data_min="09ae0300"}, 0x155) sendto$auto(0x3, 0x0, 0xf, 0x101, &(0x7f0000000140)={0x2, @sockaddr_1_1}, 0x1c) mincore$auto(0x1000, 0x8001, 0x0) 4m12.908199241s ago: executing program 3 (id=2804): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) sendmsg$auto_WG_CMD_GET_DEVICE(0xffffffffffffffff, 0x0, 0x20018010) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x1, 0x106) bind$auto(0x3, 0x0, 0x6b) mmap$auto(0x0, 0x8, 0xdf, 0x9b7e, 0x2, 0x40008000) futex$auto(0x0, 0x6, 0x47, 0x0, 0x0, 0x0) mmap$auto(0x0, 0xd, 0xdf, 0x9b72, 0x2, 0x8000) io_uring_setup$auto(0x6, 0x0) socket(0x29, 0x5, 0x0) splice$auto(0x4, 0x0, 0x2, 0x0, 0x4, 0xf) close_range$auto(0x2, 0x8, 0x0) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/mnt\x00') unshare$auto(0x40000080) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x18, 0x4, 0x6) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket(0x10, 0x2, 0x4) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) socketpair$auto(0x1, 0x1, 0x3, 0x0) r1 = socket(0x11, 0x80003, 0x300) setsockopt$auto(r1, 0x107, 0x1, 0x0, 0x8004) setns(r0, 0x0) close_range$auto(0x2, 0x8, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid_for_children\x00') socket(0xa, 0x3, 0x3a) setsockopt$auto(0x400000000000003, 0x29, 0xcc, 0x0, 0x567) setsockopt$auto(0x400000000000003, 0x29, 0xcd, 0x0, 0x567) 4m10.480925205s ago: executing program 3 (id=2807): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x48000}, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x19) close_range$auto(0x2, 0x8000, 0x0) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x3) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) close_range$auto(0x0, 0xfffffffffffff000, 0x2) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/time\x00') r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/net\x00') ioctl$NS_GET_PARENT(r0, 0xb701, 0x0) socket(0x1d, 0x2, 0x7) connect$auto(0x3, &(0x7f0000000200)={0x1d, @sockaddr_1_1={"fb7efb39e5744711655754f84f3007792a"}}, 0x54) setresuid$auto(0x8, 0x8, 0x0) setfsuid$auto(0x0) clone3$auto(0xfffffffffffffffd, 0x8001) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) setresuid$auto(0xffffffffffffffff, 0x8, 0x8) 4m10.02877923s ago: executing program 3 (id=2809): io_cancel$auto(0x9, &(0x7f0000000000)={0x1, 0x633, 0x3, 0x800, 0x98, 0x4, 0x1, 0x7f, 0x4, 0x0, 0x6, 0xffffffffffffffff}, &(0x7f0000000040)={0x19, 0x800, 0xa, 0x4}) fanotify_mark$auto(0xffffffffffffffff, 0x1, 0xe91, r0, &(0x7f0000000080)='%])!@,,\x00') utimes$auto(&(0x7f00000000c0)='\x1e(&-\\/\x00', &(0x7f0000000100)={0x7fffffff, 0x3}) dup2$auto(r0, r0) setns(r0, 0x8e285a63b07c511a) mprotect$auto(0x101, 0x4, 0x9) fchdir$auto(r0) creat$auto(&(0x7f0000000140)='\x00', 0x1200) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_netdev(&(0x7f00000001c0), r0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'veth1_vlan\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'wlan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'pimreg1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'gre0\x00', 0x0}) sendmsg$auto_NETDEV_CMD_QUEUE_GET1(r1, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x3c, r2, 0x8, 0x70bd28, 0x25dfdbff, {}, [@NETDEV_A_QUEUE_IFINDEX={0x8, 0x2, r3}, @NETDEV_A_QUEUE_IFINDEX={0x8, 0x2, r4}, @NETDEV_A_QUEUE_IFINDEX={0x8, 0x2, r5}, @NETDEV_A_QUEUE_IFINDEX={0x8, 0x2, r6}, @NETDEV_A_QUEUE_IFINDEX={0x8, 0x2, r7}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000001}, 0x1889134e3c69a11d) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000440), r0) sendmsg$auto_NL80211_CMD_VENDOR(r9, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x24, r10, 0x200, 0x70bd2c, 0x25dfdbfb, {}, [@NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0x8}, @NL80211_ATTR_HIDDEN_SSID={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x8050}, 0xc810) mprotect$auto(0x4, 0x81, 0x1) r11 = syz_genetlink_get_family_id$auto_netdev(&(0x7f0000000580), r1) sendmsg$auto_NETDEV_CMD_NAPI_GET(r1, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x2c, r11, 0x120, 0x70bd2b, 0x25dfdbfe, {}, [@NETDEV_A_NAPI_ID={0x8, 0x2, 0xfffffffc}, @NETDEV_A_NAPI_ID={0x8, 0x2, 0x71}, @NETDEV_A_NAPI_ID={0x8, 0x2, 0xfbc5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4091}, 0x20008084) socket(0x27, 0x5, 0x8000) membarrier$auto(0x1ff, 0xc0000000, 0x2) mprotect$auto(0x2, 0x1, 0x6) futex$auto(&(0x7f0000000680)=0x9, 0x3, 0x8, &(0x7f00000006c0)={0x4, 0x66}, &(0x7f0000000700)=0x2, 0x3) r12 = syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000780), r9) sendmsg$auto_BATADV_CMD_GET_TRANSTABLE_LOCAL(r8, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x24, r12, 0x300, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8}, @BATADV_ATTR_TT_CRC32={0x8, 0x13, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4044001}, 0x20000040) creat$auto(&(0x7f0000000880)='-$)-\x00', 0x2) 4m9.803344926s ago: executing program 3 (id=2810): r0 = socket(0xa, 0x5, 0x4) rseq$auto(&(0x7f0000000100)={0x11, 0x401, 0x0, 0x6, 0x6, 0x2}, 0x7ffe, 0x0, 0x6) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) rt_sigsuspend$auto(0x0, 0x400000000000009) mlockall$auto(0x7) (async) r1 = syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000040), r0) sendmsg$auto_BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r1, 0x800, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_TPMETER_COOKIE={0x8, 0xd, 0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x40004}, 0x8800) (async) mmap$auto(0xcb56, 0x2, 0x3, 0x100000011, 0x2359, 0x7fffffffffffffff) (async) socket(0x18, 0xa, 0xc) (async) tkill$auto(0x80000000000001, 0x7) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$auto_TASKSTATS(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_TASKSTATS_CMD_GET(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c00000005b882ee", @ANYRES16=r3, @ANYBLOB="01002abd7000fcdbdf250100000008000100", @ANYRES32=0x1, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x8001}, 0x20011030) bind$auto(0x3, &(0x7f0000000000)={0x10, @sa_data_min="d059b8a5b5bce4bdf082c36111fd"}, 0xf) (async) close_range$auto(0x2, 0x8000, 0x0) setreuid$auto(0xffffffffffffffff, 0x0) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x280, 0x100) r5 = open(&(0x7f0000000040)='./file0\x00', 0x84c1, 0x0) poll$auto(&(0x7f00000000c0)={r4, 0xd, 0x9}, 0x10, 0x2) read$auto(r6, &(0x7f0000000100)='+*\x00', 0x5) (async) lseek$auto(r5, 0x1000, 0x72) (async) setresuid$auto(0xd, 0x0, 0x221) (async) setrlimit$auto(0x6, &(0x7f0000000140)={0x0, 0x6}) (async) sendmsg$auto_OVS_FLOW_CMD_DEL(0xffffffffffffffff, 0x0, 0x800) (async) prctl$auto(0x1000000003b, 0x1, 0x4, 0x3, 0x7) (async) sched_getscheduler$auto(0x1) setresuid$auto(0x0, 0x8, 0x8000) (async) setrlimit$auto(0x8, 0x0) (async) mlock$auto(0xfbe8, 0x4) 4m8.400658342s ago: executing program 3 (id=2815): r0 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) open(&(0x7f0000000080)='./cgroup/../file0\x00', 0x42b00, 0x0) copy_file_range$auto(0x2, 0x0, 0x2, 0x0, 0x8001, 0x9) open(&(0x7f0000000180)='./cgroup/../file0\x00', 0xb8040, 0xba) open(&(0x7f0000000000)='./cgroup\x00', 0x2e0d00, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) mprotect$auto(0x1ffff000, 0x8000000000000001, 0x4) ioperm$auto(0x800, 0x5, 0xd) acct$auto(&(0x7f0000000000)='::J/}:\\-*\x00') prctl$auto(0x21, 0x5, 0x3, 0x34, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)={0x14, r0, 0x1, 0x70bd2d, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_macsec(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_MACSEC_CMD_ADD_RXSC(r2, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000001380)={0x14, r3, 0x1, 0x70bd25, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x40b4ff743f26f506}, 0x0) sendmsg$auto_MACSEC_CMD_ADD_TXSA(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x6c, r3, 0x10, 0x70bd25, 0x25dfdbff, {}, [@MACSEC_ATTR_OFFLOAD={0x56, 0x9, "ab5aead3465029d0815269000f5e5d707bd8b12db6342a049de9271d0e0a3f534fd50946e568ecfeff6daa299061ee072cc7e24125d91a4dcf59834567b904c733b238e0b0b494c577c38325c33fdc19b4e6"}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4}, 0x44) 4m8.184315821s ago: executing program 44 (id=2815): r0 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) open(&(0x7f0000000080)='./cgroup/../file0\x00', 0x42b00, 0x0) copy_file_range$auto(0x2, 0x0, 0x2, 0x0, 0x8001, 0x9) open(&(0x7f0000000180)='./cgroup/../file0\x00', 0xb8040, 0xba) open(&(0x7f0000000000)='./cgroup\x00', 0x2e0d00, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) mprotect$auto(0x1ffff000, 0x8000000000000001, 0x4) ioperm$auto(0x800, 0x5, 0xd) acct$auto(&(0x7f0000000000)='::J/}:\\-*\x00') prctl$auto(0x21, 0x5, 0x3, 0x34, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)={0x14, r0, 0x1, 0x70bd2d, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_macsec(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_MACSEC_CMD_ADD_RXSC(r2, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000001380)={0x14, r3, 0x1, 0x70bd25, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x40b4ff743f26f506}, 0x0) sendmsg$auto_MACSEC_CMD_ADD_TXSA(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x6c, r3, 0x10, 0x70bd25, 0x25dfdbff, {}, [@MACSEC_ATTR_OFFLOAD={0x56, 0x9, "ab5aead3465029d0815269000f5e5d707bd8b12db6342a049de9271d0e0a3f534fd50946e568ecfeff6daa299061ee072cc7e24125d91a4dcf59834567b904c733b238e0b0b494c577c38325c33fdc19b4e6"}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4}, 0x44) 4m1.92107953s ago: executing program 6 (id=2824): madvise$auto(0x0, 0x2000040080000004, 0xe) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/pid_for_children\x00') munmap$auto(0x20001000, 0x2000000c) mbind$auto(0x0, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) fchownat$auto(0x2, &(0x7f0000000080)='\x00', 0x4, 0x8001, 0x1000) 4m1.779592687s ago: executing program 6 (id=2826): unshare$auto(0x40000080) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x5, 0x0) connect$auto(0x3, &(0x7f0000000000)={0xa, @sa_data_min="07af03b7ba75eb248981df837039"}, 0x52) socket(0x15, 0x5, 0x0) r1 = socket(0x1e, 0x1, 0x6) r2 = syz_genetlink_get_family_id$auto_nfc(&(0x7f0000000080), r0) sendmsg$auto_NFC_CMD_ACTIVATE_TARGET(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, r2, 0x100, 0x70bd28, 0x25dfdbff, {}, [@NFC_ATTR_SE_INDEX={0x8, 0x15, 0x2}, @NFC_ATTR_DEVICE_NAME={0x8, 0x2, '{.{\''}, @NFC_ATTR_SE_INDEX={0x8}, @NFC_ATTR_LLC_PARAM_MIUX={0x6, 0x11, 0xfffa}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) 3m58.225497154s ago: executing program 6 (id=2831): madvise$auto(0x0, 0x2000040080000004, 0xe) madvise$auto(0x3, 0x6, 0x7fffffff) syz_genetlink_get_family_id$auto_IPVS(&(0x7f0000000040), 0xffffffffffffffff) clone$auto(0x1005, 0x9, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x9) sched_rr_get_interval$auto(0x0, &(0x7f0000001280)={0x3, 0x6}) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x7ff, 0x14, 0xfffffffffffffffa, 0x8001) socket(0x28, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x801, 0x100) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) fstatfs$auto(0x0, 0xfffffffffffffffe) getsockopt$auto(0x4, 0x6, 0x18, 0xfffffffffffffffc, 0x0) getsockopt$auto(0x6, 0x28, 0x7, 0xfffffffffffffffd, 0x0) r0 = socket(0xa, 0x2, 0x3a) setsockopt$auto(r0, 0x29, 0x3b, &(0x7f0000000080)='\x15!\xa8^J/\xddCx4!\x00\xd3\x8f\x1e\x1b\xc3 \xe2\xa8\xd6\xd9\xc0\xa2\x0f\x88\xb1e\x8a\xd8?\xfe\xda\xc4\xef\xff(i\xc6@\x91[\vBj\x0eQ\xce\x16\'C\x8cYA\x92u\xd5\xb8\\\x82,\xe2=y\x9bR\xbcn\xa0c\x16~\x86\"t\xde\x14\xe4\xa5\xfe\xb5', 0x110) setsockopt$auto(0x400000000000003, 0x29, 0x39, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f00000022c0)='ns/time_for_children\x00') epoll_create$auto(0x3) madvise$auto(0xffffffffffffffff, 0x0, 0x6) 3m57.92806846s ago: executing program 6 (id=2833): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x48000}, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x19) close_range$auto(0x2, 0x8000, 0x0) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x3) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) close_range$auto(0x0, 0xfffffffffffff000, 0x2) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/time\x00') r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/net\x00') ioctl$NS_GET_PARENT(r0, 0xb701, 0x0) socket(0x1d, 0x2, 0x7) connect$auto(0x3, &(0x7f0000000200)={0x1d, @sockaddr_1_1={"fb7efb39e5744711655754f84f3007792a"}}, 0x54) setresuid$auto(0x8, 0x8, 0x0) setresuid$auto(0xffffffffffffffff, 0x8, 0x8) 3m57.344262584s ago: executing program 6 (id=2836): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) (async) madvise$auto(0x0, 0xffffffffffff0001, 0x15) mmap$auto(0x3, 0x4, 0x4000000000dc, 0x40eb2, 0xa1c, 0x8) (async) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x53, 0x9) (async) socket(0xa, 0x2, 0x73) (async, rerun: 32) socket(0x18, 0xa, 0xc) (async, rerun: 32) tkill$auto(0x80000000000001, 0x7) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$auto_TASKSTATS(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_TASKSTATS_CMD_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="01002abdf0000000f4ff00f4000000000000ab467c75ccadadfd027fb1e8cbd9f5ecda7dcdaa84197c2fd245aae56f41dcd183a7e0095db5378e2c2d1632320f5f0976a187d9225c71342aa5ce79c2a12f3835616f492946e34805ece48eb85e38ceff15e487960c27a7403e84a0", @ANYRES32=0x1, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x8001}, 0x4051031) (async) bind$auto(0x3, &(0x7f0000000000)={0x10, @sa_data_min="d059b8a5b5bce4bdf082c36111fd"}, 0xf) (async) close_range$auto(0x2, 0x8000, 0x0) (async) setreuid$auto(0xffffffffffffffff, 0x0) (async) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x280, 0x100) (async) r3 = open(&(0x7f0000000040)='./file0\x00', 0x84c1, 0x0) poll$auto(&(0x7f00000000c0)={r2, 0xd, 0x9}, 0x10, 0x2) read$auto(r4, &(0x7f0000000100)='+*\x00', 0x5) (async, rerun: 32) lseek$auto(r3, 0x1000, 0x72) (async, rerun: 32) setresuid$auto(0xd, 0x0, 0x221) setrlimit$auto(0x6, &(0x7f0000000140)={0x0, 0x6}) (async, rerun: 32) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) (async, rerun: 32) sendmsg$auto_OVS_FLOW_CMD_DEL(0xffffffffffffffff, 0x0, 0x800) (async) prctl$auto(0x1000000003b, 0x1, 0x4, 0x3, 0x7) (async, rerun: 64) sched_getscheduler$auto(0x1) (async, rerun: 64) setresuid$auto(0x0, 0x8, 0x8000) (async) setrlimit$auto(0x8, 0x0) (async) mlock$auto(0xfbe8, 0x4) clone$auto(0xc8, 0x7, 0xfffffffffffffffe, 0x0, 0xd) 3m56.326535331s ago: executing program 6 (id=2837): mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x9, 0x3ff57696, 0x9b72, 0x2, 0x8000000000008000) io_uring_setup$auto(0x6, 0x0) io_uring_setup$auto(0x6, 0x0) socket(0xa, 0x801, 0x106) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mmap$auto(0x6, 0x6, 0x2, 0x17, 0x5e62, 0xd71) mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) futex_waitv$auto(&(0x7f0000000000)={0xf, 0x5d94, 0x4, 0x4}, 0x77, 0x0, 0x0, 0x62bd) mprotect$auto(0x1ffff000, 0x8000000000000001, 0x4) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x402, 0x300000000000) io_uring_setup$auto(0x40005, &(0x7f0000000000)={0x6, 0x1, 0x400, 0x7, 0x1005, 0x6, 0x7, [0x4, 0x2e9, 0x8], {0x0, 0x1, 0x8, 0x7, 0x5, 0x5, 0x1, 0xfffffffc, 0x7}, {0x4, 0x1000fff, 0xffff7fff, 0x2, 0x8, 0x200, 0x3, 0x0, 0x3}}) sysfs$auto(0x2, 0x23, 0x0) fsopen$auto(0x0, 0x1) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) sysfs$auto(0x2, 0x49, 0x0) futex_waitv$auto(&(0x7f0000000000)={0x0, 0x5, 0x0, 0xffff}, 0x7, 0x0, &(0x7f0000000040)={0xd2, 0x6}, 0x0) fsopen$auto(0x0, 0x1) close_range$auto(0x2, 0x8000, 0x0) 3m55.969886178s ago: executing program 45 (id=2837): mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x9, 0x3ff57696, 0x9b72, 0x2, 0x8000000000008000) io_uring_setup$auto(0x6, 0x0) io_uring_setup$auto(0x6, 0x0) socket(0xa, 0x801, 0x106) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mmap$auto(0x6, 0x6, 0x2, 0x17, 0x5e62, 0xd71) mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) futex_waitv$auto(&(0x7f0000000000)={0xf, 0x5d94, 0x4, 0x4}, 0x77, 0x0, 0x0, 0x62bd) mprotect$auto(0x1ffff000, 0x8000000000000001, 0x4) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x402, 0x300000000000) io_uring_setup$auto(0x40005, &(0x7f0000000000)={0x6, 0x1, 0x400, 0x7, 0x1005, 0x6, 0x7, [0x4, 0x2e9, 0x8], {0x0, 0x1, 0x8, 0x7, 0x5, 0x5, 0x1, 0xfffffffc, 0x7}, {0x4, 0x1000fff, 0xffff7fff, 0x2, 0x8, 0x200, 0x3, 0x0, 0x3}}) sysfs$auto(0x2, 0x23, 0x0) fsopen$auto(0x0, 0x1) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) sysfs$auto(0x2, 0x49, 0x0) futex_waitv$auto(&(0x7f0000000000)={0x0, 0x5, 0x0, 0xffff}, 0x7, 0x0, &(0x7f0000000040)={0xd2, 0x6}, 0x0) fsopen$auto(0x0, 0x1) close_range$auto(0x2, 0x8000, 0x0) 3m3.042675196s ago: executing program 5 (id=3090): setresuid$auto(0x8, 0x8, 0x0) setfsuid$auto(0x0) setresuid$auto(0xffffffffffffffff, 0x8, 0x8) 3m2.975171975s ago: executing program 5 (id=3091): rseq$auto(&(0x7f0000000000)={0xe, 0x401, 0x0, 0x6, 0xffffffff, 0x2}, 0x8000, 0x0, 0x6) mknod$auto(&(0x7f0000000180)='u[,&*}\x00\a\x00\x00\x00?\xa4\x1fN\xa1~5Z\xc7\r\f}M4\xa8m\xe6\x19[11\xab\xff-E\xac9(\xb4O\xa0t4h\x9f-gn\x1f\x0f\x18\xc5\x82-s\x83\xe6\xaeR\x81\r_\x0e\x19\x12\x85\bvf(e\xday)\t\x15\xf6\xc8\xee\x04\x16\xc1\x9a!\x87I7\x8cD&zg\xb0a\xab|E\xde\x14\xee[\xc8\xc0\xa8Nh\x0f\xa3\xdbT\xb3\xb8\xd2F\xa0\xc4]\xaf\xc43&\xe4\x01\x05\xd2\x15\xf8\xf1!\x9d\x92\xbbHL9aD\xb4\x80\xed\xba>\"\xb6\x7f\xa3f\x1d\a\xa1\x87\x84uA\xd8\xe7\xd2\xf3[r\xc5S&}D[\x97\xf1\xd9\xf8Y\x03\x84\xb4\xd7\x16\x19\xe5\x17\x10\xd8fcG:\xfbY8\x17w\x98?\x03@\xe5\x02\x05\x93h\xb9\xf7\xef\x84\x8aGlN\a\x1e', 0x1, 0x4) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000240), r0) sendmsg$auto_NL802154_CMD_SET_MAX_ASSOCIATIONS(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000280)={0x14, r1, 0xa11, 0x70bd2b, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x840000000002, 0x3, 0xff) connect$auto(0x3, &(0x7f00000000c0)={0x2, @sockaddr_1_1}, 0x55) recvfrom$auto(0xffffffffffffffff, &(0x7f0000000040)=[0xa07, 0x7, 0x6, 0x104], 0x9, 0x3, 0x0, 0x0) semctl$auto(0x1ff, 0x2, 0x13, 0x1) lsm_list_modules$auto(0x0, 0x0, 0x0) sendmmsg$auto(0x3, &(0x7f0000000000)={{0x0, 0x2, 0x0, 0x106, 0x0, 0x6c, 0x697b}, 0xed7138c}, 0x9a6, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000900), 0xffffffffffffffff) mmap$auto(0x0, 0x8, 0x1000000004, 0x9b72, 0x2, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket(0x1e, 0x2, 0x0) socket(0x23, 0x80805, 0x0) socket(0x23, 0x2, 0x0) ioctl$auto(0x8000000000000001, 0x89ef, 0x9) sendmsg$auto_BATADV_CMD_GET_BLA_BACKBONE(r3, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000100)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="030328bd7000f8dbdf250c00000008000300", @ANYRES32], 0x40}}, 0x4010) sendmsg$auto_NL80211_CMD_SET_TX_BITRATE_MASK(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x0, 0x4, 0x6, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4000010}, 0x800) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000280), r2) r5 = syz_genetlink_get_family_id$auto_macsec(&(0x7f0000000400), r2) sendmsg$auto_MACSEC_CMD_ADD_RXSC(r2, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000600)={0x1c, r5, 0x8ff972b65c311bf5, 0x70bd26, 0x25dfdbfe, {}, [@MACSEC_ATTR_SA_CONFIG={0x8, 0x3, "95c2f61d"}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8090}, 0x4000) sendmsg$auto_MACSEC_CMD_DEL_RXSC(r0, &(0x7f0000000800)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000480)={0x380, r5, 0x600, 0x70bd26, 0x25dfdbff, {}, [@MACSEC_ATTR_SA_CONFIG={0x60, 0x3, "7c22fd3295f1605b26017b805a94cf308e2ed2562be6a5b54fdf5a7e4b38fb6fe3aea8980e9f0dc577b8c1bbadcf364e2f670d6bb095bb4a5d74117b2682e34f84a57c92d499e63f4072617f690ca23b2afeb804652e598df12537af"}, @MACSEC_ATTR_RXSC_CONFIG={0x3b, 0x2, "bea42e6f57a6883b3ef91c6291709c2bc8e9024077de3f65f6a51e14692eba8ad46c08fb03f6131dee924de31f9a2da11952e6623a575c"}, @MACSEC_ATTR_SA_CONFIG={0xbd, 0x3, "0b2986835737c1134b74c4e93c2e8a757104358c7ec34f19c8d3dd177d40d16f40c13d18d5d97a49dab79fad50a5af137728f51b049a1394dec6130fc7f1b1fa7010cca1a3f720eb62872219f0c2b90c28d9f8a911e97abf7f71ef383653936ccbbd78440f32d5f60a89c01c73ec60405d0b1c48ae33b289824e8446e3dfa181b11caa8f831309a7535a3e36a8f3b548f5472ef81a2f9a316428621292ebdc6d395845da47c2883da944c3fc9f9c4feae48602cb7c5031c20a"}, @MACSEC_ATTR_SA_CONFIG={0x73, 0x3, "41fec33538f94fedcc391b82eff144bc12a6dae0709f979c1c4b00b937ea32fe98c13ec6843cb2e5da6d7704b9280ac8cf23865a863cbe9b053d7d80fbb90185c9dbd28ad303e15159c2d2d5b701d8005c0dd904f4af6af398afa5a3262972517f236ea64229a9647f184cc1c99263"}, @MACSEC_ATTR_OFFLOAD={0x13, 0x9, "dcd1cc6eabfd458dad5a1f820adc87"}, @MACSEC_ATTR_OFFLOAD={0x8c, 0x9, "bd6a41c77781ed1d829abdd442aaa619d51d9d3f596c82bafc4b5b947de42519a113814b0c4173efe224d37b53791ecf781b8fd8a40ab4d809abc824bdf1b5605c42e0cb5a326d6f55c6f57dc9cb59994e198fb94a1d5ec31c92d63f1dc7c6ea60f3ab4073af7c6392799e08a976031287e0752c7112ac67068434606eb08ce90b420978a22c9fd0"}, @MACSEC_ATTR_OFFLOAD={0xf9, 0x9, "a21b1976013b29402cf55483797f3ea5629404c174e4b9684dc8294b3134d16e2f37e2897fe0abed1754c802ed5ad6a4db45afdf0064c6a3c1f4da8b8f39313bdf4be80985d893be6e0b4498a9231ec29a20eae39d438c03c11c4f378f44692142be7e4266e8a7cc1c830b244618d8d5c381c8ecd8db907ab9b0acf5da898798b398c3e0b73865308c16a305f2f59556f61bddbe5acbc9cedd86ef88c91fe497adf9f7b990c11c7b81342dfaf9acf59c53d56f256b3487b881ddce24b0623752d07c746c0ad27d55a27d3bf769ed9eb42ee0bc680a5273564637bcc5a3c0badc4737da9929ffd4df7a39dcd689d1dda0818dd2a453"}]}, 0x380}, 0x1, 0x0, 0x0, 0x8000}, 0x80) sendmsg$auto_NL802154_CMD_SET_CCA_MODE(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000a80)={0x180, r1, 0x400, 0x70bd28, 0x25dfdbfc, {}, [@NL802154_ATTR_SEC_FRAME_COUNTER={0x8, 0x2c, 0x4}, @NL802154_ATTR_SCAN_MEAN_PRF={0xa2, 0x23, "56937f3d8c99aea2cecded5dd307a2842a1284df26fd74fbcdd7fac994a56449ebb53741c03b0d9ad922cecf4225c5ffe2d374422a448ebac2386b70b077f0a3de926004b4dd124102c4a6d9605a568c3b7ff8bcdbe15a856e7ae18f39c23e661b98b55de92d069cbe04e8cc1c48f24c2c31b2738364aff9bac14bf4afe6fdd00e3dd7cb796348511afcd3c6530ac35e6571490ebe73db8de7b63481536b"}, @NL802154_ATTR_WPAN_PHY_CAPS={0xb7, 0x18, "31436b31ca28f58882a4671820dd2c5e2994a050e776eaf548544d6f8aed6c9e972c93549784082bdb6f3f8861c655c0e9497e5fd1f867176a1591bbad5d6d723e5243950355303d83959fbe97eb360007fcc3acf73f01206ee00d81408699bb79bdb20233da5dc43b49de7572af1aef232612f5921669c35c23f9e68bbe0571d1e9ffe1a132627127ec3f1c0d5dd6ea1961846410d13869178a494542087a1a9c5c6004093ba8d2ee5a98c335760920d938bb"}, @NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5, 0x12, 0x4}]}, 0x180}, 0x1, 0x0, 0x0, 0x40480d0}, 0x85) acct$auto(&(0x7f0000000380)='u[,&*}\x00\a\x00\x00\x00?\xa4\x1fN\xa1~5Z\xc7\r\f}M4\xa8m\xe6\x19[11\xab\xff-E\xac9(\xb4O\xa0t4h\x9f-gn\x1f\x0f\x18\xc5\x82-s\x83\xe6\xaeR\x81\r_\x0e\x19\x12\x85\bvf(e\xday)\t\x15\xf6\xc8\xee\x04\x16\xc1\x9a!\x87I7\x8cD&zg\xb0a\xab|E\xde\x14\xee[\xc8\xc0\xa8Nh\x0f\xa3\xdbT\xb3\xb8\xd2F\xa0\xc4]\xaf\xc43&\xe4\x01\x05\xd2\x15\xf8\xf1!\x9d\x92\xbbHL9aD\xb4\x80\xed\xba>\"\xb6\x7f\xa3f\x1d\a\xa1\x87\x84uA\xd8\xe7\xd2\xf3[r\xc5S&}D[\x97\xf1\xd9\xf8Y\x03\x84\xb4\xd7\x16\x19\xe5\x17\x10\xd8fcG:\xfbY8\x17w\x98?\x03@\xe5\x02\x05\x93h\xb9\xf7\xef\x84\x8aGlN\a\x1e') acct$auto(0x0) 2m59.663126982s ago: executing program 5 (id=3106): r0 = socket(0xa, 0x2, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x9, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) r1 = socket(0xa, 0x2, 0x73) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) socket(0x2, 0x80002, 0x73) getsockopt$auto(0x3, 0x200000000001, 0x1c, 0x0, 0x0) connect$auto(0x3, &(0x7f0000000140)={0xa}, 0x55) mmap$auto(0x7, 0x200006, 0x5, 0x40eb1, 0x68, 0x4) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) get_robust_list$auto(0x0, 0x0, 0x0) creat$auto(0x0, 0xfff9) r3 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$auto(0x5, 0x1, 0x4b, 0x0, 0x9) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) sendmsg$auto_WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYRES16=r3, @ANYRES64=r1, @ANYRESHEX=r3, @ANYRES16=r2, @ANYRES32=r0], 0x14}, 0x1, 0x0, 0x0, 0xc810}, 0x2000c000) close_range$auto(0x2, 0x8, 0x0) r4 = socket(0x15, 0x5, 0x0) r5 = socket(0x2, 0x1, 0x106) sendmsg$auto_TIPC_NL_NODE_GET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYRESDEC=r4, @ANYRES16=0x0, @ANYBLOB="04002abd7000ffdbdf254d00000019000500d5c7f5a9727f2d60c075b334dcb2bc2c1761d11fa60000002c000900d91aef2b96e5eb4019deae6d58c8582987de7bc7a61dbf57a626e7addf6181bf2c0a8f72e80f47ab", @ANYBLOB], 0x5c}, 0x1, 0x0, 0x0, 0x24000454}, 0x4000000) bind$auto(0x3, &(0x7f0000000080)={0x2, @sockaddr_1_1}, 0x6b) connect$auto(0x3, &(0x7f00000000c0)={0x2, @sockaddr_1_1}, 0x55) setsockopt$auto(0x3, 0x1, 0x21, 0x0, 0x9) write$auto(r5, 0x0, 0xfffffdef) ioperm$auto(0x0, 0x4005, 0x5) mmap$auto(0x0, 0xa19b, 0xdf, 0x9b72, 0x5, 0x8000) writev$auto(0xca, &(0x7f0000000000)={&(0x7f0000000080)=[0x96, 0x3], 0x2}, 0x9) 2m58.754166329s ago: executing program 5 (id=3107): mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x40008000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) io_submit$auto(0x55d5e100, 0x5, &(0x7f0000000040)=&(0x7f0000000000)={0x4, 0x0, 0x3, 0x9, 0x1, 0x7fffffff, 0xa4dd, 0x3a15, 0x36b3, 0x0, 0x5, 0xffffffffffffffff}) getsockopt$auto(r0, 0x2, 0x7, &(0x7f0000000080)='\x00', &(0x7f00000000c0)=0x9) socket(0x25, 0x2, 0x6) io_uring_setup$auto(0x6, 0x0) io_uring_setup$auto(0x6, 0x0) socket(0x2, 0x6, 0x0) sysfs$auto(0x2, 0x0, 0x0) fsopen$auto(0x0, 0x1) epoll_create$auto(0x4) epoll_ctl$auto(0x5, 0x1, 0x8000000000000000, 0x0) 2m58.687327027s ago: executing program 5 (id=3108): socket(0x2, 0x3, 0xa) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x6683, 0x300000000000) socket(0x2, 0x3, 0xa) io_uring_setup$auto(0x6, 0x0) setsockopt$auto(0x3, 0x0, 0x5, 0x0, 0x28) close_range$auto(0x2, 0x5, 0x0) socket(0xa, 0x2, 0x88) select$auto(0x1, 0x0, &(0x7f0000000100)={[0x9, 0x2, 0x0, 0x7, 0x7, 0x4, 0x6, 0x2, 0x0, 0x10000005e58296f, 0x1e, 0x7, 0x3, 0x200, 0x8, 0x46]}, 0x0, 0x0) connect$auto(0x3, &(0x7f0000000140)={0xa, @sa_data_min="c4aeed448dc7fe8000"}, 0x55) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) lsm_list_modules$auto(0x0, 0x0, 0x0) sendmmsg$auto(0x15, &(0x7f0000000100)={{0x0, 0x6, 0x0, 0x7f, 0x0, 0x8000, 0x2}, 0x7}, 0x3, 0x0) tkill$auto(0x80000000000001, 0x7) keyctl$auto(0x2000000000000012, 0x7fff, 0x5069, 0x1, 0x65c) sendmmsg$auto(0x3, &(0x7f0000000000)={{0x0, 0x2, 0x0, 0x106, 0x0, 0x1, 0x3}, 0xed7138c}, 0x7, 0x0) 2m57.840626774s ago: executing program 5 (id=3111): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x5, 0x0) mmap$auto(0x0, 0x26, 0x80000000000000df, 0x400000009b72, 0x2, 0x8000) io_setup$auto(0x8, 0xfffffffffffffffe) adjtimex$auto(0x0) getsockopt$auto(0x6, 0x40000000084, 0x0, 0xfffffffffffffffe, 0x0) 2m57.731515797s ago: executing program 46 (id=3111): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x5, 0x0) mmap$auto(0x0, 0x26, 0x80000000000000df, 0x400000009b72, 0x2, 0x8000) io_setup$auto(0x8, 0xfffffffffffffffe) adjtimex$auto(0x0) getsockopt$auto(0x6, 0x40000000084, 0x0, 0xfffffffffffffffe, 0x0) 2m9.012732194s ago: executing program 2 (id=3291): mmap$auto(0x0, 0x7fffffff, 0xa, 0xeb1, 0xfffffffffffffffa, 0xb9) mkdir$auto(&(0x7f00000001c0), 0x6) mount$auto(0x0, &(0x7f0000000100)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0x10001, 0x0) r0 = socket(0xa, 0x2, 0x3a) select$auto(0x3, 0x0, &(0x7f0000000100)={[0xd, 0x7, 0x0, 0xc, 0x9, 0x3, 0x6, 0x2, 0x9, 0x5e58296f, 0x4000000000000000, 0xa, 0x4, 0x5, 0x8, 0x6]}, 0x0, 0x0) connect$auto(0x3, &(0x7f0000000140)={0xa, @sa_data_min="c4aeed448dc7fe8000"}, 0x55) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/mnt\x00') mmap$auto(0x1ffc0, 0xfffffffffffffffb, 0x400000000006, 0xeb1, 0xfffffffffffffff6, 0x8000) getrandom$auto(0x0, 0x6000000, 0x3) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) bpf$auto(0x0, &(0x7f0000000040)=@bpf_attr_5={@target_ifindex=r3, 0x7f, 0x99, 0x8, 0x1, @relative_id=0x8, 0x5}, 0x92) bpf$auto(0x2, &(0x7f00000001c0)=@raw_tracepoint={0x5, 0xffff, 0x0, 0x3}, 0xc) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) fanotify_init$auto(0x5, 0x2) io_uring_setup$auto(0x6, 0x0) io_uring_setup$auto(0x6, 0x0) socket(0xa, 0x801, 0x106) setsockopt$auto(0x3, 0x6, 0x19, 0x0, 0xfb3) sendmsg$auto_GTP_CMD_NEWPDP(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x200c88c0) close_range$auto(0x2, 0x8, 0x0) sendmsg$auto_NL80211_CMD_DEL_PMK(r0, &(0x7f0000000280)={0x0, 0x30, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="80000000", @ANYRES16=0x0, @ANYBLOB="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"], 0x5a8}, 0x1, 0x0, 0x0, 0x4001}, 0x40000) mprotect$auto(0x1ffff000, 0x8000000000000001, 0x4) open(&(0x7f0000000100)='.\x00', 0x0, 0x408) mmap$auto(0x0, 0x8, 0x1000000004, 0x9b72, 0x2, 0x8000) setrlimit$auto(0x1000000007, 0x0) socket(0x22, 0x3, 0x0) getdents$auto(0x0, 0x0, 0x100) 2m8.563358305s ago: executing program 2 (id=3292): memfd_create$auto(&(0x7f0000000000)='A^^\x02\x00\xef\x97\x8aY\x00\x00\x100\xc1\xd2\x01\\\xb2\xbf247{\xde\t8\f\x00\x00\x17\x85J\x14\"K\xe1IIT\x00'/54, 0x2) fallocate$auto(0x3, 0x0, 0xe, 0x8ec5) setreuid$auto(0x3, 0x7) bpf$auto(0x8000000000000012, 0x0, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0) write$auto(0x3, 0x0, 0x81) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x2, 0x88) select$auto(0x3, 0x0, &(0x7f0000000100)={[0x9, 0x200, 0x800000000000000, 0x0, 0x4, 0x7ff, 0x0, 0x5, 0xb, 0x5e5c296f, 0x4000000000000000, 0x3, 0x3, 0x800000200, 0x8]}, 0x0, 0x0) connect$auto(0x3, &(0x7f0000000140)={0xa, @sa_data_min="c4aeed448dc7fe8000"}, 0x55) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) connect$auto(0x3, &(0x7f0000000040)={0x2, @sa_data_min="9057130be82ba522e95cf480395e"}, 0x55) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x9fe) pipe2$auto(&(0x7f0000000140)=0x2, 0x800) read$auto(0x4, 0x0, 0x80) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) prctl$auto(0x23, 0xe, 0x2009, 0x68, 0x0) finit_module$auto(0x3, 0xfffffffffffffffe, 0x400000000004) memfd_create$auto(&(0x7f0000000040)='A^^\x02\x00\xef\x97\x8aY\x00\x00\x100\xc1\xd2\x01\\\xb2\xbf247{\xde\t8\f\x00\x00\x17\x85J\x14\"K\xe1IIT\x00', 0x7) socket$nl_generic(0x10, 0x3, 0x10) 2m8.275507986s ago: executing program 2 (id=3293): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) rseq$auto(&(0x7f0000000300)={0xe, 0x401, 0x0, 0x6, 0xffffffff, 0x2}, 0x8000, 0x0, 0x6) prctl$auto(0x9, 0x1, 0x3, 0x99, 0x7) (async) madvise$auto(0x0, 0xffffffffffff0005, 0x19) (async) madvise$auto(0x0, 0xffffffffffff0001, 0x15) (async) madvise$auto(0xfffffffffffffffb, 0x8, 0x2) (async, rerun: 64) madvise$auto(0x0, 0xffffffffffff0005, 0x19) (async, rerun: 64) madvise$auto(0x2, 0x8, 0x2) (async) socket(0x2, 0x1, 0x0) (async, rerun: 64) getsockopt$auto(0x3, 0x6, 0xd, &(0x7f0000000200)='\x99\x93', &(0x7f0000000000)=0x7f) (async, rerun: 64) timer_create$auto(0x8, 0x0, 0x0) 2m7.232107005s ago: executing program 2 (id=3297): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000003a40)={&(0x7f0000000000)={0x24, r1, 0x1, 0x70bd29, 0x25dfdc03, {}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x2}, @NL80211_ATTR_VENDOR_ID={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0xecac9eb1bdd4400c}, 0x0) 2m4.969368229s ago: executing program 2 (id=3311): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) syz_open_procfs$namespace(0xffffffffffffffff, 0x0) close_range$auto(0x2, 0x8, 0x0) sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x48000}, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x19) io_uring_setup$auto(0x8, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x3) r0 = socket(0xa, 0x2, 0x3a) bpf$auto(0x6, &(0x7f00000000c0)=@link_update={r0, @new_prog_fd=r0, 0x1488, @old_map_fd=r0}, 0x15d8bad) bind$auto(0x3, &(0x7f0000000000)={0xa, @sockaddr_1_1={"5533ce1e00db6ee8aa58410898ca7f9042c8395f813b75"}}, 0x6b) tkill$auto(0x1, 0x7) process_vm_writev$auto(0x1, &(0x7f0000002980)={0x0, 0x4}, 0x3, &(0x7f0000002a40)={0x0, 0x7}, 0x4, 0x0) sendmsg$auto_BATADV_CMD_SET_HARDIF(0xffffffffffffffff, 0x0, 0x24000800) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) clone$auto(0x7, 0x7fffffffffffffff, 0xffffffffffffffff, 0x0, 0x1) io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x3) 2m3.720446946s ago: executing program 2 (id=3316): unshare$auto(0x101) unshare$auto(0xa02) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) (async) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) (async) mmap$auto(0x0, 0x9, 0x3ff57697, 0x9b72, 0x2, 0x8000000000008000) (async) socket(0xa, 0x1, 0x6) (async) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000021}, 0x8004) (async) connect$auto(0x3, &(0x7f0000000140)={0xa, @sa_data_min="c4aeed448dc7fe8000"}, 0x55) (async) io_uring_setup$auto(0x6, 0x0) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x3f000000) (async) close_range$auto(0x2, 0x8, 0x0) (async) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) clone$auto(0x21, 0x9, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x6) (async) close_range$auto(0x2, 0xa, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x14, 0x0, 0x4, 0x70bd27, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x48891}, 0x20) (async) setsockopt$auto(0x3, 0x1, 0x21, 0x0, 0x9) (async) syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000040), r0) mq_notify$auto(0x5cf5, &(0x7f00000006c0)={@sival_ptr=0x0, 0x3, 0x2, @_sigev_thread={0x0, 0x0}}) 2m3.449809644s ago: executing program 47 (id=3316): unshare$auto(0x101) unshare$auto(0xa02) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) (async) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) (async) mmap$auto(0x0, 0x9, 0x3ff57697, 0x9b72, 0x2, 0x8000000000008000) (async) socket(0xa, 0x1, 0x6) (async) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000021}, 0x8004) (async) connect$auto(0x3, &(0x7f0000000140)={0xa, @sa_data_min="c4aeed448dc7fe8000"}, 0x55) (async) io_uring_setup$auto(0x6, 0x0) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x3f000000) (async) close_range$auto(0x2, 0x8, 0x0) (async) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) clone$auto(0x21, 0x9, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x6) (async) close_range$auto(0x2, 0xa, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x14, 0x0, 0x4, 0x70bd27, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x48891}, 0x20) (async) setsockopt$auto(0x3, 0x1, 0x21, 0x0, 0x9) (async) syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000040), r0) mq_notify$auto(0x5cf5, &(0x7f00000006c0)={@sival_ptr=0x0, 0x3, 0x2, @_sigev_thread={0x0, 0x0}}) 58.294395777s ago: executing program 4 (id=3594): mmap$auto(0x20000000, 0x8001, 0xe0, 0xebe, 0x4, 0x769f) socket(0xa, 0x2, 0x0) socket(0x2b, 0x1, 0x1) setsockopt$auto(0x3, 0x6, 0x21, 0xfffffffffffffffc, 0x10) connect$auto(0x3, &(0x7f0000000140)={0xa, @sa_data_min="00000000f5ffffffffffffff00"}, 0x55) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0) setreuid$auto(0x7eb3, 0x2) mmap$auto(0x6, 0x3, 0x2a3f5b66, 0x10, 0xfff, 0xe10e) 57.950334723s ago: executing program 4 (id=3597): mmap$auto(0x0, 0x61, 0x100001000000007, 0x78, 0x400, 0x8000) (async) copy_file_range$auto(0x2, 0x0, 0x2, 0x0, 0x8001, 0x9) (async) sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x4000804) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) (async) r0 = socket(0xa, 0x2, 0x88) connect$auto(0x3, &(0x7f00000000c0)={0x2, @sockaddr_1_1}, 0x55) (async, rerun: 64) connect$auto(0x3, &(0x7f0000000000)={0x2, @sa_data_min="0800e00000000000c1728d2af766"}, 0x55) (async, rerun: 64) syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000180), 0xffffffffffffffff) (async, rerun: 32) sendmmsg$auto(r0, &(0x7f0000000000)={{0x0, 0x2, 0x0, 0x106, 0x0, 0x0, 0x697b}, 0xed7138c}, 0x9a6, 0x2) (rerun: 32) mremap$auto(0x0, 0x2, 0x3fd6, 0x0, 0x7fffffffb000) 57.257873458s ago: executing program 4 (id=3599): mmap$auto(0x100000800, 0x400008, 0xdf, 0x9b72, 0x800000002, 0x7ffe) r0 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) (async, rerun: 32) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$auto_NL80211_CMD_SET_WIPHY(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r0, @ANYBLOB="01002dbd7000fddbdf256000000008000300", @ANYRES32=r3], 0x1c}, 0x1, 0x0, 0x0, 0x803}, 0x80) (async) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) (async, rerun: 64) sendto$auto(0x4, 0x0, 0xff, 0x6, 0x0, 0xe) (rerun: 64) 56.508704485s ago: executing program 4 (id=3602): mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) mmap$auto(0x0, 0xe, 0x8, 0x9b72, 0x2, 0x5) sendmsg$auto_WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x4008810}, 0x20008000) close_range$auto(0x2, 0x8, 0x0) socket(0x15, 0x5, 0x0) socket(0x2, 0x1, 0x106) bind$auto(0x3, &(0x7f0000000080)={0x2, @sockaddr_1_1}, 0x6b) socket(0xa, 0x1, 0x0) mmap$auto(0x0, 0x9, 0x3ff57697, 0x9b72, 0x2, 0x8000000000008000) io_uring_setup$auto(0x6, 0x0) setsockopt$auto(0x3, 0x0, 0x1a, 0x0, 0x4) connect$auto(0x3, &(0x7f00000000c0)={0x2, @sockaddr_1_1}, 0x55) connect$auto(0x3, 0x0, 0x55) prctl$auto(0x1000000003b, 0x1, 0x4, 0x3, 0x7) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x800008000) r0 = gettid() syz_open_procfs$namespace(r0, &(0x7f0000000040)='ns/time\x00') mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) memfd_create$auto(0x0, 0xe) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_netdev(&(0x7f0000000000), r1) sendmsg$auto_NETDEV_CMD_DEV_GET(r1, &(0x7f0000001840)={0x0, 0x0, &(0x7f0000001800)={&(0x7f00000017c0)={0x14, r2, 0x301, 0x70bd26, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x28044004) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) read$auto(0x3, 0x0, 0xf34) 55.237100616s ago: executing program 4 (id=3611): signalfd4$auto(0xffffffff, &(0x7f0000000080)={0x8000}, 0x8, 0x0) (async) select$auto(0x2a, &(0x7f0000000000)={[0xeb, 0x8001, 0x4, 0xd1, 0xb, 0x1ff, 0x500000, 0x10000, 0x7ffffffff7ffffff, 0x4, 0x105, 0x10001, 0x0, 0x4, 0xfffffffffffffffd, 0x1]}, 0x0, 0x0, 0x0) (async) mmap$auto(0x0, 0x4, 0x4000000000df, 0x13, 0x402, 0x300000000000) r0 = socket(0x2, 0x6, 0x0) listen$auto(r0, 0x7d) (async) ioctl$auto(r0, 0x3, 0xa1d) ioperm$auto(0x7, 0x6, 0x2) setitimer$auto(0xfffffffb, &(0x7f0000000000)={{0x56, 0xfffffffffffffffa}, {0xd44b, 0x5}}, 0x0) rt_sigqueueinfo$auto(0x1, 0x7, &(0x7f0000000040)={@siginfo_0_0={0x0, 0x5, 0xfffffffb, @_sigpoll={0x52, 0x7}}}) sendmsg$auto_NL80211_CMD_NEW_KEY(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x840001}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="38000000fbfc9d5b91373ac5c63952d485ec74905f188eaa8d4c0a609ca9ff3712ffcf8e9eafa4cb43b7cc1f640d7447330d965d9b82d2d672138e7ec55a3bf1f55bd4c75d7933701c5e6168ca9737b0bb75a9403e696d827c4e4d1adbcb51554dc9f3874682e43b5cdcd1eba5b482e67720ab5764179ca46baa9fb8586960b5d2585311506261a257df3a5f559a9f4fc8aecf0a5e8be477d1d6278d55b0825d689eeffd91251d7bffe0bbfaec1f5902119252f67b09484c02b9fbea", @ANYRES16=0x0, @ANYBLOB="00082cbd7000ffdbdf250b0000000b000a007e647a9f48afd0000400cc000900a6009b1b80d7110000000500920006000000"], 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x2000c040) (async) r2 = fcntl$getown(r1, 0x9) move_pages$auto(r2, 0x80, &(0x7f00000002c0)=&(0x7f0000000100)=[0x9], &(0x7f0000000300)=0x8001, &(0x7f0000000340)=0x71, 0x3ff) (async) setreuid$auto(0x80000000, 0x7fffffffffffffff) (async) setreuid$auto(0x0, 0x0) (async) kill$auto(0x0, 0x11) 51.760693489s ago: executing program 4 (id=3630): futex_waitv$auto(&(0x7f0000000000)={0xf, 0x5d94, 0x4, 0x4}, 0x77, 0x0, 0x0, 0x62bd) mprotect$auto(0x1ffff000, 0x8000000000000001, 0x4) (async) mknod$auto(&(0x7f0000000000)='\x00\x00\x00\x00\x00\x00\x00', 0x1001, 0x4) (async) socket(0x2, 0x3, 0xa) (async) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) (async) sendmsg$auto_NL802154_CMD_GET_SEC_DEV(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000001}, 0x80) connect$auto(0x3, &(0x7f00000000c0)={0x2, @sockaddr_1_1}, 0x55) (async, rerun: 32) sendmmsg$auto(0x3, &(0x7f0000000000)={{0x0, 0x2, 0x0, 0x106, 0x0, 0x1, 0x697b}, 0xed7138c}, 0x9a6, 0x14) (async, rerun: 32) io_uring_setup$auto(0x3, &(0x7f0000000040)={0x1, 0xf, 0x9, 0xb9c5, 0xc, 0x9, 0xffffffffffffffff, [0x1, 0x0, 0x9], {0x8, 0x2, 0x3, 0xfa, 0x7f, 0x1, 0x80000001, 0xf76f, 0x40000000800}, {0x5, 0x7, 0x0, 0x5, 0x9, 0x9, 0x3, 0x4, 0x3567c3b9}}) fcntl$getown(r0, 0x9) (async) open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x100) open(&(0x7f0000000000)='./file0\x00', 0xa2a41, 0x1) 51.408669834s ago: executing program 48 (id=3630): futex_waitv$auto(&(0x7f0000000000)={0xf, 0x5d94, 0x4, 0x4}, 0x77, 0x0, 0x0, 0x62bd) mprotect$auto(0x1ffff000, 0x8000000000000001, 0x4) (async) mknod$auto(&(0x7f0000000000)='\x00\x00\x00\x00\x00\x00\x00', 0x1001, 0x4) (async) socket(0x2, 0x3, 0xa) (async) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) (async) sendmsg$auto_NL802154_CMD_GET_SEC_DEV(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000001}, 0x80) connect$auto(0x3, &(0x7f00000000c0)={0x2, @sockaddr_1_1}, 0x55) (async, rerun: 32) sendmmsg$auto(0x3, &(0x7f0000000000)={{0x0, 0x2, 0x0, 0x106, 0x0, 0x1, 0x697b}, 0xed7138c}, 0x9a6, 0x14) (async, rerun: 32) io_uring_setup$auto(0x3, &(0x7f0000000040)={0x1, 0xf, 0x9, 0xb9c5, 0xc, 0x9, 0xffffffffffffffff, [0x1, 0x0, 0x9], {0x8, 0x2, 0x3, 0xfa, 0x7f, 0x1, 0x80000001, 0xf76f, 0x40000000800}, {0x5, 0x7, 0x0, 0x5, 0x9, 0x9, 0x3, 0x4, 0x3567c3b9}}) fcntl$getown(r0, 0x9) (async) open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x100) open(&(0x7f0000000000)='./file0\x00', 0xa2a41, 0x1) 4.196805081s ago: executing program 9 (id=3827): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000000c0)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x4008000) r1 = syz_genetlink_get_family_id$auto_MAC80211_HWSIM(&(0x7f0000000040), 0xffffffffffffffff) syz_genetlink_get_family_id$auto_SMC_PNETID(0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$auto_TIPCv2(0x0, r0) vmsplice$auto(r0, &(0x7f0000000140)={&(0x7f0000000100)=[0x0, 0x40, 0x2, 0x3, 0x6, 0x8, 0x1], 0xfffffffffffffff9}, 0x4, 0x1) close_range$auto(0x0, 0xfffffffffffff000, 0x2) mmap$auto(0x6, 0x5, 0x10001, 0x18, 0x7, 0xc) socket(0x10, 0x2, 0x14) socket$nl_generic(0x10, 0x3, 0x10) pidfd_open$auto(0x1, 0x0) socket(0x10, 0x2, 0x0) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$auto_nfsd(0x0, 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_FRAME(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=ANY=[@ANYBLOB="18000000", @ANYRES16=r1, @ANYBLOB="030125bd7000040002000000000000000000"], 0x18}, 0x1, 0x0, 0x0, 0x4010}, 0x80) r2 = open(&(0x7f0000000000)='./cgroup\x00', 0x80000, 0x23) fchdir$auto(r2) mkdir$auto(&(0x7f0000000040)='Z\x81\xe4\x95(\xbb\xdd\xd8\x95\x9e\xbb_\xb0\x0e\xc0-\xe6\x93\xd8\xa9<\xa8AP\xf3\xec\x13K\xee)M\xb1\xa2\xe3f\xd8\xc7\xd8\xde\xd7\xdc\xa8Q\x14\xb7\'\xba\xdd\xbf\x93/\xaa6\x00>\t\xb3\xcfV\xdf\xcc!\x12\xf3\xa0$\xc0z\xe4Qg%\xccY\xdb\xa0\xb0zY\a%\xc4\xfe\x90\xeb\x05@\x90\xc5\x85\x05!8\xaa]\xa8\x99\x87\"\x90\x04\x0e\t\x04\x84r\xfa\xb3\xb2H;q\x9f\xa3o\xc5\xcf\x89\xb9r\x9d\x8b\x00\xfd\x1eO}8}\xe0\xdd\xb1\xdc\x05\xe5\xdd%[\v\xed\xac\xbev\xe3H\x8c\x7fj-\xd2\x1b\xc7\xf5yZX\xf5\x1e\xa9\xd7\x1f\xa6&\x02E\xe6\x03\x13\xa6,\xd7\xa4\x9c\x89\x88\xc3\x0e\xc49q4P\xb7\xc4Z2h\xfcv\xb0\x9d\xbc\xf0i\xd0\xba(~=\xbe@\x14*\x1a\bL\xbc\xff', 0x100000, 0x0) mmap$auto(0x0, 0x200006, 0x2, 0x40eb1, 0x602, 0x300000000000) get_mempolicy$auto(0x0, 0x0, 0x0, 0x2, 0x7f) move_pages$auto(0x1, 0x3, 0x0, 0x0, 0x0, 0x8000000000000000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/pid_for_children\x00') socket(0x11, 0x80003, 0x300) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) syz_genetlink_get_family_id$auto_nbd(&(0x7f0000000140), 0xffffffffffffffff) ioctl$auto(0x1, 0x541b, 0x8) io_uring_setup$auto(0x6, 0x0) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) mmap$auto(0x0, 0x8, 0x1000df, 0x2000000209b72, 0x4e577f5a, 0x8000) clone$auto(0x21002, 0x9, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x9) 3.520820447s ago: executing program 1 (id=3830): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) syz_genetlink_get_family_id$auto_NLBL_UNLBL(0x0, 0xffffffffffffffff) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0x8000000000000000, 0x15) mlockall$auto(0x7) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) memfd_create$auto(0x0, 0x4) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) ioprio_get$auto(0x3, 0x0) mbind$auto(0x10001, 0x7f, 0xfffffffffffffff9, &(0x7f00000000c0)=0x101, 0x3, 0x7) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x3, 0x100) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0xa, 0x801, 0x100) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'hsr0\x00'}) socket(0xa, 0x3, 0x6) socket$nl_generic(0x10, 0x3, 0x10) eventfd$auto(0x3) r1 = socket(0xa, 0x2, 0x88) bpf$auto(0x0, &(0x7f0000000000)=@link_update={r1, @new_prog_fd=0x4, 0x4, @old_map_fd=0x3ff}, 0xa3) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) setfsgid$auto(0x0) 2.962465121s ago: executing program 8 (id=3831): ioperm$auto(0xc5, 0x4, 0x2) r0 = socket(0x10, 0x3, 0x0) r1 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$auto_CTRL_CMD_GETPOLICY(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)={0x14, r1, 0x1f5, 0x70bd28, 0x25dfdbfc, {0xa, 0x0, 0xa00}}, 0x14}, 0x1, 0x0, 0x0, 0x200484c}, 0x22044080) r2 = geteuid() r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'virt_wifi0\x00'}) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) r4 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/mnt\x00') socket(0xa, 0x3, 0x3a) r5 = socket(0xf, 0x3, 0x2) r6 = socket(0x2, 0xa, 0xe57a) r7 = getpid() r8 = syz_genetlink_get_family_id$auto_nfc(&(0x7f00000007c0), r5) sendmsg$auto_NFC_CMD_DEP_LINK_DOWN(r5, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x24, r8, 0x20, 0x70bd27, 0x25dfdbfe, {}, [@NFC_ATTR_COMM_MODE={0x5, 0xa, 0x2}, @NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$auto_NL802154_CMD_SET_ACKREQ_DEFAULT(r6, &(0x7f0000000700)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000540)={&(0x7f00000005c0)={0x12c, 0x0, 0x4, 0x70bd26, 0x25dfdbfc, {}, [@NL802154_ATTR_SEC_DEVKEY={0xf6, 0x2f, "5fc359f9d7a2e64f6f923e342d271f7445a8726ea3a58baf4125a7cc818bbf682e4dc2860eee2e2b6c8d25a04a695dd7383dbac624252f8088e38fc04ec3136a503d3042e83ac604c5303300987b4a98e9c47c78c994332966142220943df63c880db726497b8e22d047b9e496601103bbd1990675e48ab6843fc26ede83831f008f0d63ab6d833dcd11a75dbe9013453db13e36a39e1b78a4b0c6148dd7c13b5b60efd27c303ed0e0e416156d63746dd7d9ac26d120c0c4b84d7c368673afb3a87a099dad8831bd2b08ec6e55645815a7ddff31a550a78570474a188eb95762aec466471820f56d9fa988602ab94f825c33"}, @NL802154_ATTR_PID={0x8, 0x1c, r7}, @NL802154_ATTR_NETNS_FD={0x8, 0x1d, r4}, @NL802154_ATTR_SEC_OUT_LEVEL={0x8, 0x2a, 0x8}, @NL802154_ATTR_BEACON_INTERVAL={0x5, 0x26, 0x1}]}, 0x12c}, 0x1, 0x0, 0x0, 0x20000000}, 0x2) getsockopt$auto(0x3, 0x200000000001, 0x1c, 0x0, 0x0) fstat$auto(r3, &(0x7f0000000380)={0x7fff, 0x2, 0x3, 0xe5, 0x0, 0xffffffffffffffff, 0x0, 0xeeeb, 0xe, 0x8000, 0x9, 0x3ff, 0x5, 0x1, 0x9, 0x4, 0x1}) r11 = getgid() r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$auto_OVS_FLOW_CMD_NEW(r12, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r13, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@OVS_FLOW_ATTR_PROBE={0x4}, @OVS_FLOW_ATTR_PROBE={0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8051}, 0x4000) stat$auto(&(0x7f0000000280)='}[,&*}\x00\xa2\xbd\xac\x1b\xa6\xee+\xbb\xddh\xf9Bb\xee.\x06nt\xf6`\xa5\xfaJ\x01\xfb\xff87\x830^\x8c\xf8\xa7\xbcXs\x06w\x7f}g\xa1\xccBV\xb4\x84\x15\x97;eO\xebKV\xe8\x11\x1b&\x96f\x9b.\xb1J\x81\t\x98\x92\xc4\xfb\xf0]f\x18\x1b\xabCK<\xf0\xfcI\xc3*\x96\x8cHvh\x06L\xfdC\xc2\x01\xaf6dA\xd6\x8d7\n\xc7y\xbbV\x13\xb8\a\xe9\xba7w\xd5v\x1d\x95\xcer\xaap\xa0\x7f\x9f\x02\xc3]\xf4\xe89\x86S\xfb\xc1\x03OZ\'7\f\xcc>\xf8\xa9\xa8\xc8\x02\xc4\xc1\xe0\r\xd7\xc2(\x18w\xc9\x85\b\xd7\xef\xbbg\x96\xe5\xdc/\xa5V\x90#\v\xbd\xe8}\x1d\\}\x8f\x16w1\x00n\xd1\xa7\xd1s\x19d\xff)g', &(0x7f0000000440)={0x50, 0x4, 0x9, 0x5, r9, r11, 0x0, 0x4, 0x0, 0xffffffffffff7fff, 0x1, 0x4, 0x3ff, 0x1ff, 0x4, 0x8000, 0x9}) fstat$auto(0xffffffffffffffff, &(0x7f0000000000)={0x2000000000005, 0x8b, 0x2, 0x3, r2, r11, 0x0, 0x2, 0x8, 0x9, 0x8, 0x7, 0x3, 0x6be718d3, 0x5, 0x0, 0x200}) newfstatat$auto(0xffffffffffffffff, &(0x7f00000000c0)='-!\x00', &(0x7f0000000100)={0x4, 0x2, 0xfffffffffffffffe, 0x80000001, 0xee01, 0xee01, 0x0, 0x219, 0x8, 0x200, 0xd, 0x5, 0x5a3, 0x8, 0x4d, 0x80000000, 0x800}, 0x7e) shmctl$auto(0x8, 0x3, &(0x7f0000000240)={{0x4, r14, r10, 0x8, 0x9, 0x6, 0x3}, 0x6, 0x7, 0x7, 0x3, 0x9, 0x4, 0x8, 0x0, &(0x7f00000001c0)=[0x1, 0x9, 0x1, 0x5, 0x9, 0xa0c6, 0x4], &(0x7f0000000200)=[0x1, 0x4e6f, 0x6, 0x3, 0x3]}) writev$auto(0xc8, &(0x7f00000028c0)={0x0, 0x7ffff000}, 0x9) munmap$auto(0x1000000, 0x2000000c) 2.843280584s ago: executing program 9 (id=3832): socket(0xa, 0x2, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x0, 0xffffeffe, 0x2) pipe$auto(0x0) pipe$auto(0x0) tee$auto(0x2000000000000, 0x3, 0x3ff, 0x9) socket(0x2, 0x5, 0x0) setsockopt$auto(0x3, 0x10000000084, 0x64, 0x0, 0x3ff) ioctl$auto(0x3, 0x800005411, 0x710) 2.701570101s ago: executing program 0 (id=3833): mmap$auto(0x0, 0x402000b, 0x40, 0x10000000000eb1, 0x4, 0xffffffffffffffff) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) futex_waitv$auto(&(0x7f0000000000)={0x7, 0x4, 0x1003, 0x4}, 0xa, 0xfff, 0x0, 0x62bd) mprotect$auto(0x1ffff000, 0x8000000000000001, 0x4) mknod$auto(&(0x7f0000000000)='\x00\x00\x00\x00\x00\x00\x00', 0x1001, 0x4) open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x100) write$auto(0x3, 0x0, 0xfdef) write$auto(0x3, 0x0, 0x81) bpf$auto(0x0, &(0x7f0000000100)=@task_fd_query={0x7, 0x4, 0x200, 0x3, 0x8, 0xc, 0x2e, 0x0, 0x3}, 0x6f4) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) socket(0x2, 0x801, 0x100) io_uring_setup$auto(0x6, 0x0) setsockopt$auto(r0, 0x2, 0x40, 0x0, 0x10001) bpf$auto(0x4, &(0x7f00000001c0)=@bpf_attr_1={0x3, 0xca99, @value=0x5, 0xa}, 0xc) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x12004) madvise$auto(0x0, 0xffffffffffff0005, 0x19) open(0x0, 0x4400, 0x100) open(0x0, 0x22000, 0x50) mmap$auto(0x0, 0x40000005, 0x4000000000df, 0x19, 0x401, 0x8000) sendfile$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8000) prctl$auto(0x3f, 0x1, 0x4, 0x5, 0x10004) getrlimit$auto(0x1000, 0x0) mmap$auto(0x1000, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) bpf$auto(0x8000000000000020, 0xffffffffffffffff, 0x0) mmap$auto(0x7, 0xfffffffffffffbff, 0x0, 0x12, 0x2, 0xfffffffffffffffb) clone$auto(0x400000008, 0x3, 0xffffffffffffffff, 0xfffffffffffffffc, 0xfe) writev$auto(0x1, &(0x7f0000000100)={&(0x7f0000000140), 0x400000000000fdef}, 0x1) mmap$auto(0x1ff, 0x4, 0x4a8a, 0xfd, 0x800, 0x8000000000000000) vmsplice$auto(0x3, 0x0, 0x9, 0x7) madvise$auto(0x0, 0xffffffffffff0004, 0x1) 2.596973564s ago: executing program 1 (id=3834): mprotect$auto(0x1ffff000, 0x7ffffffffffffffd, 0x4) ioperm$auto(0x7, 0x6, 0x2) socket(0x2, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_WG_CMD_GET_DEVICE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14000000", @ANYBLOB="01c251"], 0x14}, 0x1, 0x0, 0x0, 0x8d1}, 0x20008000) syz_genetlink_get_family_id$auto_SMC_GEN_NETLINK(&(0x7f0000000000), r1) r2 = syz_genetlink_get_family_id$auto_MAC802154_HWSIM(&(0x7f0000000040), r1) sendmsg$auto_MAC802154_HWSIM_CMD_SET_EDGE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000c40)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="8f632dbd7000fddbdf2505"], 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x40) fcntl$auto(0x0, 0x0, 0x8001) ioctl$auto(0xc8, 0x400454ce, 0x5c8d) readv$auto(0x3, &(0x7f00000000c0)={0x0, 0x8}, 0x400) 2.589461269s ago: executing program 8 (id=3835): socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) getsockopt$auto(0x3, 0x200000000001, 0x11, 0x0, 0x0) bind$auto(0x3, 0x0, 0x6b) recvmmsg$auto(0x3, 0x0, 0x10000, 0x6, 0x0) shutdown$auto(0x200000003, 0x2) unshare$auto(0x40000080) syz_genetlink_get_family_id$auto_IPVS(0x0, 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) sysfs$auto(0xff, 0x6, 0x2000) r1 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), r0) sendmsg$auto_ETHTOOL_MSG_EEE_GET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, r1, 0x704, 0x70bd27, 0x25dfdbfc, {}, [@ETHTOOL_A_EEE_HEADER={0x7, 0x1, "07991a"}, @ETHTOOL_A_EEE_HEADER={0x7, 0x1, "9cde19"}, @ETHTOOL_A_EEE_HEADER={0x7, 0x1, "11dd13"}]}, 0x2c}, 0x1, 0x0, 0x0, 0x48080}, 0x4010) ioprio_set$auto(0x2, 0x800000000, 0x8) mmap$auto(0x0, 0x4, 0x5, 0x40eb2, 0x402, 0x300000000000) io_uring_setup$auto(0x6, 0x0) clone$auto(0x646a8dac, 0x8, 0x0, 0x0, 0x4) 2.264997719s ago: executing program 1 (id=3836): sendmsg$auto_WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x4008810}, 0x20008000) (async) r0 = socket(0x2, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000080)={0x2, @sockaddr_1_1}, 0x6b) (async) sendmsg$auto_NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x11}, 0x4840) (async) sendmsg$auto_IEEE802154_LIST_PHY(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x44}, 0x1, 0x0, 0x0, 0x8800}, 0x4090) (async, rerun: 32) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) (async, rerun: 32) connect$auto(0x3, &(0x7f00000000c0)={0x2, @sockaddr_1_1}, 0x55) (async) sendmmsg$auto(0x3, &(0x7f0000000000)={{0x0, 0x6, 0x0, 0xff, 0x0, 0x4, 0x3}, 0xed7138c}, 0x7, 0x9) (async) recvmmsg$auto(r0, 0x0, 0x97, 0x40, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f0000000040), r1) close_range$auto(0x0, 0xfffffffffffff000, 0x2) (async, rerun: 32) socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) pidfd_open$auto(0x1, 0x0) (async, rerun: 32) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/mnt\x00') (async, rerun: 32) socket(0x10, 0x2, 0x0) (async, rerun: 64) sendmsg$auto_CTRL_CMD_GETFAMILY(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002abd77dcb7fcdf2d03000000210000000000000001"], 0x24}, 0x1, 0x0, 0x0, 0x4008810}, 0x10000000) (rerun: 64) 2.054733007s ago: executing program 0 (id=3837): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_TIPCv2(&(0x7f0000001500), 0xffffffffffffffff) sendmsg$auto_TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)={0x14, r1, 0x301, 0x70bd26, 0x2}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x4c0c0) r2 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) (async) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) futex$auto(0x0, 0x6, 0x8, 0x0, 0x0, 0x80000001) mq_open$auto(0x0, 0xde8, 0xb, 0x0) (async) mq_open$auto(0x0, 0xde8, 0xb, 0x0) setresuid$auto(0xe60, 0x2, 0x0) mq_unlink$auto(0x0) (async) mq_unlink$auto(0x0) recvfrom$auto(r2, &(0x7f0000000040)=[0x3ce8eb1e, 0x4, 0x5, 0x104], 0x7, 0x3, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x5, 0xeb2, 0xfffffffffffffffa, 0x8000) (async) mmap$auto(0x0, 0x2020009, 0x5, 0xeb2, 0xfffffffffffffffa, 0x8000) semctl$auto(0x1ff, 0x2, 0x13, 0x1) sendmmsg$auto(0x3, &(0x7f0000000000)={{0x0, 0x2, &(0x7f0000000040)={0x0, 0x34000}, 0x4, 0x0, 0x1}, 0xed7138c}, 0x2, 0x9) setsockopt$auto(0x3, 0x1, 0x20, 0x0, 0x9) mmap$auto(0x0, 0x200004, 0x4000000000df, 0x40eb2, 0x402, 0x300000000000) mremap$auto(0x0, 0x4, 0x4, 0x3, 0x200000) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) socket(0xa, 0x1, 0x0) (async) socket(0xa, 0x1, 0x0) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000021}, 0x8004) connect$auto(0x3, &(0x7f0000000140)={0xa, @sa_data_min="c4aeed448dc7fe8000"}, 0x55) (async) connect$auto(0x3, &(0x7f0000000140)={0xa, @sa_data_min="c4aeed448dc7fe8000"}, 0x55) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) pipe2$auto(0x0, 0x763c4a16) setsockopt$auto(0x3, 0x1, 0x9, 0x0, 0x8) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) connect$auto(0x3, 0x0, 0x55) (async) connect$auto(0x3, 0x0, 0x55) timer_create$auto(0xfffffff9, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000080), r3) sendmsg$auto_NFSD_CMD_THREADS_SET(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r4, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@NFSD_A_SERVER_THREADS={0x8, 0x1, 0x7fffffff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000021}, 0x8004) 1.757934155s ago: executing program 9 (id=3838): socket(0x22, 0x2, 0x24) socket$nl_generic(0x10, 0x3, 0x10) modify_ldt$auto(0x1, &(0x7f00000001c0), 0x10) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) clone$auto(0x9001, 0x5, 0xffffffffffffffff, 0xfffffffffffffffc, 0x6) syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000080), 0xffffffffffffffff) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) madvise$auto(0x6, 0x664, 0xfffffffd) socket(0x2, 0x1, 0x106) prctl$auto(0x1000000001c, 0x5, 0x8, 0x9, 0x80001) setreuid$auto(0x15, 0x5) keyctl$auto(0x4, 0xfffff7ffffffffff, 0x8081, 0x8, 0x8) socket(0x2b, 0x1, 0x1) rseq$auto(&(0x7f0000000000)={0xe, 0x401, 0x0, 0x6, 0xffffffff, 0x2}, 0x7ffe, 0x0, 0x6) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x621f, 0x10004) socket(0xa, 0x5, 0x0) pipe2$auto(0x0, 0x80) setsockopt$auto(0x3, 0x1, 0xf, 0x0, 0x8) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000021}, 0x8004) connect$auto(0x3, &(0x7f0000000140)={0xa, @sa_data_min="c4aeed448dc7fe8000"}, 0x55) listen$auto(0x3, 0x83) move_mount$auto(0x1, &(0x7f0000000000)='\x00', 0x8000, 0x0, 0x6) madvise$auto(0x0, 0xffffffffffff0002, 0x19) madvise$auto(0x0, 0xffffffffffff0001, 0x15) madvise$auto(0x0, 0xffffffffffff0005, 0x19) dup3$auto(0x1, 0x0, 0x40000000000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) getsockopt$auto(0x4, 0x6, 0x1c, 0xfffffffffffffffc, 0x0) exit$auto(0x7) 1.456340016s ago: executing program 8 (id=3839): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) arch_prctl$auto(0x5003, 0x5) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) (async) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) socket$nl_generic(0x10, 0x3, 0x10) msync$auto(0x0, 0x5, 0x6) 1.240717497s ago: executing program 8 (id=3840): setfsuid$auto(0x401) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000080), r0) syz_genetlink_get_family_id$auto_SMC_GEN_NETLINK(&(0x7f0000000240), r0) syz_genetlink_get_family_id$auto_nfsd(&(0x7f00000000c0), r0) sendmsg$auto_NFSD_CMD_THREADS_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x38, r1, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@NFSD_A_SERVER_GRACETIME={0x8, 0x2, 0x9}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0x75}, @NFSD_A_SERVER_SCOPE={0x14, 0x4, 'SMC_GEN_NETLINK\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000021}, 0x8004) sendmsg$auto_NFSD_CMD_VERSION_SET(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x44, r1, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@NFSD_A_SERVER_PROTO_VERSION={0x7, 0x1, "1bb5c5"}, @NFSD_A_SERVER_PROTO_VERSION={0x7, 0x1, "efaaad"}, @NFSD_A_SERVER_PROTO_VERSION={0x7, 0x1, "e54c44"}, @NFSD_A_SERVER_PROTO_VERSION={0x7, 0x1, "f91938"}, @NFSD_A_SERVER_PROTO_VERSION={0x7, 0x1, "d14b0f"}, @NFSD_A_SERVER_PROTO_VERSION={0x7, 0x1, "f4e22e"}]}, 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x4) 1.240374278s ago: executing program 0 (id=3841): madvise$auto(0x0, 0xffffffffffff0005, 0x5) syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000040), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_WG_CMD_SET_DEVICE(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x20004040}, 0x80) listen$auto(r0, 0x80) 1.17136781s ago: executing program 1 (id=3842): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r1, 0x1, 0x70bd27, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x8108}, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) clone$auto(0x81000005, 0x6, 0xfffffffffffffffd, 0xffffffffffffffff, 0x80000001) madvise$auto(0x0, 0xc60, 0x9) mmap$auto(0x0, 0x400008, 0x1005, 0x9b76, 0x3, 0x8000) writev$auto(0x1, &(0x7f0000000100)={0x0, 0x400000000000fdef}, 0x1) mmap$auto(0x0, 0x400008, 0xe0, 0x9b72, 0x2, 0x8000) 1.079882308s ago: executing program 8 (id=3843): clone$auto(0x1, 0x579, &(0x7f0000000000)=0x7, &(0x7f0000000040)=0x380a, 0x1) r0 = socket(0x8, 0x1, 0x84fd) capset$auto(&(0x7f0000000080)={0xc0000000, 0xffffffffffffffff}, &(0x7f00000000c0)={0x9, 0x1, 0x9}) kill$auto(r1, 0x7) r2 = open$dir(&(0x7f0000000100)='./file0\x00', 0x8000, 0x100) mount_setattr$auto(r2, &(0x7f0000000140)='\x00', 0x7, &(0x7f0000000180)={0x9, 0x2f14, 0xfffffffffffffffd, 0x4}, 0x1) read$auto(r2, &(0x7f00000001c0)='\x00', 0x7) fallocate$auto(r0, 0x7, 0x5, 0x5) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x20) fcntl$auto(r3, 0x10, 0x1) clone$auto(0x8, 0x4, &(0x7f0000000240)=0x8, &(0x7f0000000280)=0x40, 0x10000) ioctl$auto(r0, 0x199, 0xffffffff) fchmodat2$auto(r3, &(0x7f00000002c0)='\x00', 0x5, 0x3) syslog$auto(0x4, &(0x7f0000000300)='\x00', 0x6) r4 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000380), r0) sendmsg$auto_NL80211_CMD_SET_MCAST_RATE(r0, &(0x7f0000001580)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001540)={&(0x7f00000003c0)={0x1148, r4, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@NL80211_ATTR_STA_FLAGS={0xd8, 0x11, "75b9f9606db32c63e499f8a7230a10384a82f971f8b1ba687268c6146ada911ce07b990d4c2eaacdb2733b519edee7e2c20476108b7ec7b890e06708dd606bbc8189331edc5590c094fa0c70669923b4cd9a29c546752b05741432cd3e1d02e7336cd02291d6a8215dfef2f9d0bde30e6c588144b1557044fbc87dd2e738832712d149ff37b208b4c16ecee51de339ab3e44f9bcf8132911516283fe8953950ed0f2dae6a2006ff6c139b7b0248ef2d00c59dca8b5114ba32bc46da012aa80072932de30a65bcd413cd564b8303f434cc3a1bf29"}, @NL80211_ATTR_PUNCT_BITMAP={0x8, 0x142, 0x228b}, @NL80211_ATTR_REG_ALPHA2={0x1004, 0x21, "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"}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_USE_RRM={0x4}, @NL80211_ATTR_FILS_KEK={0x42, 0xf2, "e0f092751a84039d0051c35fe39c8f2378c206ee2d7ef81f666123c7b86e9067be6dd828af729dc0fd57ea0f1a95a771a2f3226d063934b55588ee540f77"}]}, 0x1148}, 0x1, 0x0, 0x0, 0x91}, 0x40084) socketpair$auto(0x2, 0x80, 0xcc, &(0x7f00000015c0)=0x7ff) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001640)={'bond0\x00', 0x0}) sendmsg$auto_NL802154_CMD_GET_SEC_DEVKEY(r0, &(0x7f00000017c0)={&(0x7f0000001600)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001780)={&(0x7f0000001680)={0xec, 0x0, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@NL802154_ATTR_SCAN_DONE_REASON={0x5, 0x25, 0x2}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_WPAN_PHY_NAME={0x5, 0x2, '\x00'}, @NL802154_ATTR_SEC_FRAME_COUNTER={0x8, 0x2c, 0x3ff}, @NL802154_ATTR_SEC_DEVKEY={0xa8, 0x2f, "31476f9f007c2a698a7377d6c8217f2dcafa962180c0095db03c2c2c76bb50619f70668e1a972c6589929d580e948fd2ccda2925fa89039888111c34b8bc32e7708d019aa86a25f51c3974f9c048775144198f5899d2ebe6a8b693ef1b6118d5ba0835fc41e202f8783c6e30f3a96393c1c4b13b690da8b063b39789e610f10ecf359ee1e20d56e038afbba8d2ef331c308ab28778e197f195387ca6114363fe98b8a2dd"}, @NL802154_ATTR_CCA_OPT={0x8, 0xd, 0x4}]}, 0xec}, 0x1, 0x0, 0x0, 0x10000081}, 0x44040) clone$auto(0xffffffff, 0xffffffff, &(0x7f0000001800)=0x7, &(0x7f0000001840)=0xe, 0x2) clock_nanosleep$auto(0x3, 0x6, &(0x7f0000001880)={0x760f, 0x3}, &(0x7f00000018c0)={0x245, 0x3}) sendmsg$auto_L2TP_CMD_NOOP(r0, &(0x7f0000001ac0)={&(0x7f0000001900)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001a80)={&(0x7f0000001940)={0x110, 0x0, 0x20, 0x70bd25, 0x25dfdbff, {}, [@L2TP_ATTR_NONE={0xfb, 0x0, "46d9f0873b29ba0170ef54524e0a6ec8ab0f6a712cc3bb403d70327b9912105d92add912dbb097d0158a35d0ce6e83bbf332ee62479967c0bcc03bf2ed8b95c166cd0b00a4a2cedf272cb400b3e84c46f48d9ef2ad61e8d03ad4d957161ccb9aa8a2ac9749205fa090098f5536d391215ef8a60a5b95ffdb4039a52b4fc0c496cf220999bf36f32a8a05097cb436ed1ff7600da0541f8c83ce3a3985324a7d81b8efd37d8026453f3e564ed5d8502d14605341194900dcc360082b7705d19d9f8e5ef867222dd96778edc1b532818f9c303ded03fd8dc38367a493b0620a74983afd674c60172f576e8d44d9a7c5f5da00e461d21e2ff9"}]}, 0x110}, 0x1, 0x0, 0x0, 0x8000880}, 0xc840) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001b00)={'veth1_vlan\x00'}) madvise$auto(0x0, 0xd68, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$auto_HSR(&(0x7f0000001b80), r0) sendmsg$auto_HSR_C_GET_NODE_LIST(r6, &(0x7f0000001c40)={&(0x7f0000001b40)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001c00)={&(0x7f0000001bc0)={0x1c, r7, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@HSR_A_IF2_AGE={0x8, 0x4, 0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004091}, 0x4048815) mknod$auto(&(0x7f0000001c80)='veth1_vlan\x00', 0x2, 0x1ff) sendmsg$auto_NL80211_CMD_SET_SAR_SPECS(r6, &(0x7f0000003880)={&(0x7f0000001cc0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000003840)={&(0x7f0000001d00)={0x1b24, r4, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@NL80211_ATTR_COLOR_CHANGE_ELEMS={0x150, 0x131, "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"}, @NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0x1004, 0xbe, "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"}, @NL80211_ATTR_PROBE_RESP={0x8d9, 0x91, "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"}, @NL80211_ATTR_WOWLAN_TRIGGERS={0xdd, 0x75, "bde75fd0ba87b63044c6b1cce45fb5d101285b384c6d52e5deec28927e277f9d039ff4341c29e5ff4a31fa324e7a69063c286f6c01ec05c8a5fc557e820e3468852af560665cc7dfff1fc97aabfa6eae43230af2fdf5c97f0afa592bb56fb5646b028986deabfda30e10ba2916bcdb935dcaf18ddc3f1d173df0a1961050c2dc985674dc97480836a7a8d4fcc213897c3e709d4029b42c329001a89f6badd23a06314bf25d8f5d20b51f9570ee8eeef5d8b69638575526628fdf342e28c50053ab77a741feb4885a57f91cbd5aeaea286ab5694a74429b8263"}]}, 0x1b24}, 0x1, 0x0, 0x0, 0x20000000}, 0x10) sendmsg$auto_ETHTOOL_MSG_RSS_GET(0xffffffffffffffff, &(0x7f00000039c0)={&(0x7f00000038c0), 0xc, &(0x7f0000003980)={&(0x7f0000003940)={0x24, 0x0, 0x800, 0x70bd26, 0x25dfdbfb, {}, [@ETHTOOL_A_RSS_START_CONTEXT={0x8, 0x7, 0x225b}, @ETHTOOL_A_RSS_CONTEXT={0x8, 0x2, 0x9}]}, 0x24}, 0x1, 0x0, 0x0, 0x20040000}, 0x4000000) 985.649626ms ago: executing program 0 (id=3844): mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) socket$nl_generic(0x10, 0x3, 0x10) socket(0x5, 0x2, 0x2ec893ab) bind$auto(0x4, 0xfffffffffffffffe, 0x0) socket(0xa, 0x2, 0x0) socket(0x1e, 0x1, 0x0) getsockopt$auto(0x4, 0x6, 0x6, 0xfffffffffffffffc, 0x0) 811.327352ms ago: executing program 1 (id=3845): socket(0xa, 0x2, 0x88) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) mknod$auto(&(0x7f0000000000)='\x00', 0x253, 0x15) select$auto(0x3, 0x0, &(0x7f0000000100)={[0x9, 0x7, 0x0, 0x9, 0xfffffffffffffffc, 0x3, 0x6, 0x2, 0x9, 0xffff, 0x4000000000000000, 0xd, 0x3, 0x200000201, 0x7, 0x6]}, 0x0, 0x0) r0 = socket(0x2, 0x3, 0xa) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x402, 0x300000000000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_REG(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r2, 0x703, 0x70bd26, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x4) r3 = syz_genetlink_get_family_id$auto_wireguard(&(0x7f00000000c0), r0) sendmsg$auto_WG_CMD_GET_DEVICE(r1, &(0x7f0000001340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001300)={&(0x7f0000000180)={0x117c, r3, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}, @WGDEVICE_A_PEERS={0xa3, 0x8, "ead5fdac95b655a23dbbbef144bb147b2e1f79dd55a388620c604ef03b68ea808a392907332e58e2e4530abfb738dafa04ce932de4b55a567668d10a5180dd6121420ec313cb47886d6b4ee3b2641f41a830195fefc4c424414dff8984d5c2e9c76be390ea1b19074f75e1f50a8b79800fe922e2f0d89a29dec13c7a029b09534c3a765fd614e91f5a9b20843e2a140a712c4b499be94ba766e5d73225c4a8"}, @WGDEVICE_A_PUBLIC_KEY={0x1004, 0x4, "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"}, @WGDEVICE_A_PEERS={0xa5, 0x8, "ca859afaa57a5882b8e2505604b9586bb0e593ee179fa7b82475dacff11e01bb391961f33eb0f7587f3090a1995e35fb506930465add2f6761580338839303baabf5ada1586da8627eb6ffbcd3e633b72f4f28cc1c0906e7a376e7f259c6c2b14e202dc48efadaff2d09c28c3514b523b4717011d9d7463375ce30fb819a834e301856414322c8be386cc23eb103efa22eab0d796de902294ff260fdfbf3d730d7"}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x59c}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x7e}]}, 0x117c}, 0x1, 0x0, 0x0, 0x20040048}, 0x40) io_uring_setup$auto(0x6, 0x0) setsockopt$auto(0x3, 0x0, 0x5, 0x0, 0x3) connect$auto(0x3, &(0x7f0000000140)={0xa, @sa_data_min="c4aeed448dc7fe8000"}, 0x55) sendto$auto(0x3, 0x0, 0xf, 0xe, &(0x7f0000000100)={0x2, @sa_data_min="c449e000000d6b00"}, 0x19) sendto$auto(r0, &(0x7f0000000040), 0x8000000000000001, 0xd48b, &(0x7f0000000080)={0x7, @sa_data_min="f241e86cff83446c2afdfc153070"}, 0xfffffff5) 704.668199ms ago: executing program 8 (id=3846): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x3e, 0x0, 0x4, 0x5, 0x7) mknod$auto(&(0x7f0000000000)='}[\t&*}\x00', 0x1, 0x4) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x800008000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1a, 0x3, 0x6) bpf$auto(0x0, &(0x7f00000001c0)=@task_fd_query={0x9, 0x21eb, 0x7ff, 0x6, 0xa, 0x1000009, 0x5f}, 0x6f3) socket(0x15, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x1, 0x0) r0 = socket(0x1d, 0x2, 0x7) bpf$auto(0x8, &(0x7f0000000000)=@iter_create={0x2, 0xe}, 0x463) bind$auto(0x7, &(0x7f0000000000)={0x1d, @sockaddr_1_1}, 0x3e) madvise$auto(0x0, 0xffffffffffff0001, 0x15) shmctl$auto(0xf5b, 0xb, 0x0) mbind$auto(0x0, 0x100000008, 0x983e, 0x0, 0x20400000000006, 0x2) open(&(0x7f0000000080)='./file0\x00', 0x1ffd, 0x12) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) write$auto(0x3, 0x0, 0x100082) fallocate$auto(0x3, 0x3, 0xe, 0x8000008ec5) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) clock_gettime$auto(0x8, 0x0) io_uring_setup$auto(0xdbb3, &(0x7f0000000280)={0x9eac, 0x401, 0x3, 0x6603, 0xbba8, 0xe7, r0, [0x7, 0x4, 0x3], {0x1, 0x2, 0x2, 0x8, 0x1, 0x7ff, 0x2, 0xbb60, 0x9}, {0xfffffffe, 0xfffffffc, 0x1, 0x5, 0x1, 0x0, 0x1ff, 0x6, 0x9463}}) close_range$auto(0x0, 0xfffffffffffff000, 0x2) bpf$auto(0x0, &(0x7f0000000100)=@task_fd_query={0x2, 0x4, 0x8201, 0x2, 0x8, 0xc, 0xe3, 0x4000000002, 0x3}, 0x6f4) bpf$auto(0x6, 0xffffffffffffffff, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) listxattr$auto(&(0x7f0000000040)='}[,&*}\x00', 0x0, 0x0) sendmsg$auto_BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, 0x0, 0x10) 692.111921ms ago: executing program 9 (id=3847): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x402000d, 0x8, 0xeb1, 0x401, 0x8001) sendmmsg$auto(0x3, &(0x7f0000000000)={{0x0, 0x2, 0x0, 0x106, 0x0, 0x2, 0x697b}, 0xed7138c}, 0x9a6, 0x0) io_uring_setup$auto(0x40000002c55, 0x0) madvise$auto(0x0, 0x20200, 0x15) recvmsg$auto(0x4, 0x0, 0x33c) r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_INTERFACE(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000700)={0x14, r1, 0xb01, 0x70bd27, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x4000080) 441.990636ms ago: executing program 9 (id=3848): mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) connect$auto(0x3, &(0x7f0000000140)={0xa}, 0x55) mmap$auto(0x0, 0x20009, 0x1, 0xeb1, 0x9, 0x8000) mmap$auto(0x0, 0x200004, 0x4000000000df, 0x40eb2, 0x402, 0x300000000000) mlockall$auto(0x7) mprotect$auto(0x0, 0x8000000000000001, 0x6) clone3$auto(&(0x7f0000000240)={0x100000003, 0x980, 0x401, 0x101, 0x2, 0x1, 0xff7fffffffffffff, 0xc, 0xe, 0x9, 0x3}, 0xe4) getrandom$auto(0x0, 0x6000000, 0x3) mbind$auto(0x0, 0x100000004, 0x100000000, 0x0, 0x20000000000006, 0x2) madvise$auto(0x0, 0x2000000080000001, 0x3) setuid$auto(0xe) syz_genetlink_get_family_id$auto_nbd(&(0x7f0000000140), 0xffffffffffffffff) bpf$auto(0x5, &(0x7f0000003c80)=@bpf_attr_7={@map_id=0x8, 0x81, 0xf}, 0x5) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) getrandom$auto(0x0, 0x6000000, 0x3) remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0x3, 0x4) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) memfd_create$auto(&(0x7f0000000040)='A^^\x02\x00\xef\x97\x8aY\x00\x00\xd2\x8c\xb05\x03\\\xb2\xbf247{\xde\t8\f\x00\x00\v\x00\x82\xcc\"K\xe1IIT\x00'/54, 0x4) fallocate$auto(0x3, 0x0, 0xe, 0x8ec5) mlockall$auto(0x7) mmap$auto(0x0, 0x200006, 0x2, 0x40eb1, 0x602, 0x300000000000) open(0x0, 0x4242, 0x0) mlockall$auto(0x7) madvise$auto(0x0, 0x80000001, 0x9) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$auto_NL802154_CMD_SEND_BEACONS(0xffffffffffffffff, 0x0, 0x8080) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) io_uring_setup$auto(0x8, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0) socket(0xa, 0x2, 0x88) 429.720889ms ago: executing program 1 (id=3849): mmap$auto(0x7, 0x9, 0x0, 0x12, 0x10000, 0xbf3c) mmap$auto(0x7ff6, 0x6, 0x401, 0x33, 0x27f0ea6b, 0x4) mmap$auto(0x3, 0xd, 0x7, 0x14, 0x81, 0x637) futex_wake$auto(&(0x7f0000000000)=[0xffffffffffff4601, 0x6, 0x7fff, 0xfffffffffffffffd], 0x8, 0xffffffff, 0x3) io_uring_setup$auto(0x60, &(0x7f0000000040)={0xffff6c10, 0x0, 0x5, 0xfffffffc, 0x3, 0xfc000000, 0xffffffffffffffff, [0x5, 0x10000, 0x800], {0x9, 0x5, 0x5, 0xb, 0x1, 0x1, 0x7fff, 0x4, 0xc}, {0x1ff, 0xff, 0x4, 0x1ff, 0xffffffff, 0xe, 0x2, 0xfe7, 0x400}}) sendto$auto(r0, &(0x7f00000000c0)=[0x2, 0x6db], 0x9, 0x4, &(0x7f0000000100)={0x0, @sockaddr_1_1={"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"}}, 0x200) clone$auto(0x9, 0x5, &(0x7f0000001140), &(0x7f0000001180)=0x1, 0x4) r1 = geteuid() stat$auto(&(0x7f00000011c0)='&.]\x00', &(0x7f0000001200)={0x8000000000, 0x80000000, 0xe, 0x2, 0xffffffffffffffff, 0x0, 0x0, 0x9, 0x1, 0x5, 0x2, 0x821, 0x2, 0xe02, 0x8000, 0x7, 0x4}) shmctl$auto(0x4, 0x141, &(0x7f0000001380)={{0x66b, r1, r2, 0x8001, 0x6, 0x3, 0x6}, 0x776f, 0xfffffffffffffff9, 0x2, 0x8000000000000001, 0x4, 0x0, 0xd, 0x0, &(0x7f00000012c0)=[0x9, 0x6, 0x7, 0x870, 0x80000001, 0x9, 0x3, 0x0, 0x1ff, 0x8], &(0x7f0000001340)=[0x73, 0x7, 0x4, 0x40, 0xc, 0xe, 0xcc, 0x1000]}) recvmsg$auto(r0, &(0x7f0000001500)={&(0x7f0000001400)=[0x800, 0x7fffffffffffffff, 0x0, 0x6], 0x100, &(0x7f0000001480)={&(0x7f0000001440)=[0x6], 0x7fffffffffffffff}, 0xcfa9, &(0x7f00000014c0)=[0x263, 0x5, 0x87b, 0x9, 0x0, 0x6], 0x100000001, 0xe}, 0x6) pipe2$auto(&(0x7f0000001540)=0x8, 0x8) mmap$auto(0x1, 0xcff7, 0x86, 0xde, 0x401, 0xc) mmap$auto(0x0, 0x2ca1, 0x1238b0eb, 0xffffffffffffbf79, 0x9, 0x2) r3 = syz_genetlink_get_family_id$auto_macsec(&(0x7f00000015c0), r0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001600)={'ipvlan1\x00', 0x0}) sendmsg$auto_MACSEC_CMD_ADD_TXSA(r0, &(0x7f00000016c0)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001680)={&(0x7f0000001640)={0x30, r3, 0x202, 0x70bd2b, 0x25dfdbfd, {}, [@MACSEC_ATTR_RXSC_CONFIG={0x14, 0x2, "40a10e44be06083ae519d64bb3f7ef52"}, @MACSEC_ATTR_IFINDEX={0x8, 0x1, r4}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x20000841) ioperm$auto(0x45c2, 0x5, 0x10001) io_getevents$auto(0x1, 0xa, 0x43132bac, &(0x7f0000001700)={0x6, 0x5, 0x5, 0x4}, &(0x7f0000001740)={0x5, 0xfffffff9}) setreuid$auto(0x1a, 0x800) open_by_handle_at$auto(r0, &(0x7f0000001780)={0x4d, 0x2a, "ef025706d0c200331224eb8425d6e466ee36ff73f058adc0d9827fbbacf458ec032fc1eed4d1b69c32815c71609e428639f6be2aa5ef781ff47a64cea5d8de4ce221c942711a1b79bd1aac1c52"}, 0x35) mmap$auto(0x10000, 0xf6, 0x84d1, 0x7fffffff, 0x10001, 0x4) madvise$auto(0x100, 0x4da9d14a, 0x7309eff4) r5 = syz_genetlink_get_family_id$auto_NET_DM(&(0x7f0000001840), r0) sendmsg$auto_NET_DM_CMD_START(r0, &(0x7f0000001900)={&(0x7f0000001800)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000018c0)={&(0x7f0000001880)={0x20, r5, 0xc01, 0x70bd27, 0x25dfdbff, {}, [@NET_DM_ATTR_QUEUE_LEN={0x8, 0xb, 0x1}, @NET_DM_ATTR_SW_DROPS={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0xc030}, 0x11) exit$auto(0x1) io_uring_setup$auto(0x0, &(0x7f0000001940)={0xe, 0x3, 0x200, 0x2, 0xffff, 0x7, r0, [0x8b6, 0x3ff, 0x8], {0x43, 0xfffffeff, 0x7573, 0x0, 0x8, 0x6, 0x1, 0x9, 0x80000000}, {0x7, 0x8, 0x4, 0xfffffffb, 0x800, 0x2, 0x5, 0x200, 0xc331}}) r6 = socket(0x2b, 0x800, 0x5) r7 = syz_genetlink_get_family_id$auto_802_15_4_MAC(&(0x7f0000001a00), r6) sendmsg$auto_IEEE802154_DEL_IFACE(0xffffffffffffffff, &(0x7f0000001b00)={&(0x7f00000019c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001ac0)={&(0x7f0000001a40)={0x48, r7, 0x400, 0x70bd25, 0x25dfdbfd, {}, [@IEEE802154_ATTR_CHANNELS={0x8}, @IEEE802154_ATTR_LLSEC_KEY_USAGE_COMMANDS={0x24, 0x32, "fc28e21e7bf7994fefa7703a15d890fb4b5c1a24b0a270e5f983d7575ae24d37"}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x4054}, 0x40) 377.659257ms ago: executing program 0 (id=3850): socket(0xa, 0x3, 0x3a) r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x801, 0x106) connect$auto(0x3, &(0x7f0000000140)={0xa, @sa_data_min="c40400"}, 0x55) getsockopt$auto(0x3, 0x6, 0xb, &(0x7f0000000200)=':\x00', &(0x7f0000000000)=0x9) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) eventfd$auto(0x3) eventfd$auto(0x0) syz_genetlink_get_family_id$auto_IPVS(&(0x7f00000000c0), r0) r1 = socket(0xa, 0x2, 0x88) close_range$auto(0x0, 0xfffffffffffff000, 0x2) bpf$auto(0x0, &(0x7f0000000100)=@task_fd_query={0x2, 0x4, 0x8201, 0x2, 0x8, 0xc, 0xe3, 0x4000000002, 0x3}, 0x6f4) r3 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x2b, 0x1, 0x1) mmap$auto(0x0, 0xfff, 0xdf, 0x9b72, 0x400, 0x28000) ioctl$auto(0x3, 0x894b, 0x38) bpf$auto(0x0, &(0x7f0000000000)=@link_update={r1, @new_map_fd=r3, 0x4, @old_map_fd=r2}, 0xa3) 0s ago: executing program 0 (id=3851): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket(0x2, 0x1, 0x0) (async) r0 = socket(0x23, 0x2, 0x0) (async) socket(0x2, 0x6, 0x0) socket$nl_generic(0x10, 0x3, 0x10) pkey_free$auto(0xffffffffffffffff) (async) pipe$auto(0x0) (async) vmsplice$auto(0x4, &(0x7f0000000040)={0x0, 0x2}, 0x2, 0x5) (async) io_uring_setup$auto(0xb, &(0x7f0000000080)={0x0, 0x1, 0x6, 0x4, 0x7fff, 0x2dbe, r0, [0x30000, 0x10f, 0xe6], {0x3, 0xfffffffd, 0x5, 0x7b, 0x1000, 0x6, 0x9, 0x8, 0x6}, {0xe1, 0x7f, 0x8001, 0x1, 0xc89, 0x6, 0x2eb, 0x2, 0xb}}) kernel console output (not intermixed with test programs): r0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 821.784319][T24617] Invalid ELF header magic: != ELF [ 821.879529][T24621] FAULT_INJECTION: forcing a failure. [ 821.879529][T24621] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 821.922932][T24621] CPU: 1 UID: 0 PID: 24621 Comm: syz.5.3041 Not tainted 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 821.933766][T24621] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 821.943854][T24621] Call Trace: [ 821.947160][T24621] [ 821.950118][T24621] dump_stack_lvl+0x16c/0x1f0 [ 821.954835][T24621] should_fail_ex+0x497/0x5b0 [ 821.959547][T24621] ? fs_reclaim_acquire+0xae/0x150 [ 821.964702][T24621] should_fail_alloc_page+0xe7/0x130 [ 821.970037][T24621] prepare_alloc_pages.constprop.0+0x16f/0x560 [ 821.976240][T24621] __alloc_pages_noprof+0x190/0x25a0 [ 821.981582][T24621] ? __pfx_mark_lock+0x10/0x10 [ 821.986393][T24621] ? __pfx___lock_acquire+0x10/0x10 [ 821.991634][T24621] ? __pfx___alloc_pages_noprof+0x10/0x10 [ 821.997405][T24621] ? hlock_class+0x4e/0x130 [ 822.001944][T24621] ? __lock_acquire+0xbdd/0x3ce0 [ 822.006918][T24621] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 822.012835][T24621] ? policy_nodemask+0xea/0x4e0 [ 822.017702][T24621] alloc_pages_mpol_noprof+0x2c9/0x610 [ 822.023179][T24621] ? __pfx_alloc_pages_mpol_noprof+0x10/0x10 [ 822.029178][T24621] ? find_held_lock+0x2d/0x110 [ 822.033954][T24621] folio_alloc_mpol_noprof+0x36/0xd0 [ 822.039252][T24621] shmem_alloc_folio+0x135/0x160 [ 822.044200][T24621] shmem_alloc_and_add_folio+0x48b/0xc00 [ 822.049846][T24621] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 822.056009][T24621] ? shmem_allowable_huge_orders+0xcd/0x3f0 [ 822.061915][T24621] shmem_get_folio_gfp+0x689/0x1530 [ 822.067126][T24621] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 822.072766][T24621] ? filemap_map_pages+0xf93/0x16a0 [ 822.077980][T24621] shmem_fault+0x200/0xae0 [ 822.082409][T24621] ? __pfx_shmem_fault+0x10/0x10 [ 822.087371][T24621] ? do_pte_missing+0xdc2/0x3e50 [ 822.092321][T24621] ? __pfx_lock_release+0x10/0x10 [ 822.097362][T24621] __do_fault+0x10a/0x490 [ 822.101700][T24621] do_pte_missing+0xea8/0x3e50 [ 822.106482][T24621] __handle_mm_fault+0x100a/0x2a10 [ 822.111609][T24621] ? __pfx_mt_find+0x10/0x10 [ 822.116206][T24621] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 822.121851][T24621] ? __pfx___handle_mm_fault+0x10/0x10 [ 822.127332][T24621] ? find_vma+0xc0/0x140 [ 822.131583][T24621] ? __pfx_find_vma+0x10/0x10 [ 822.136269][T24621] handle_mm_fault+0x3fa/0xaa0 [ 822.141050][T24621] do_user_addr_fault+0x7a3/0x13f0 [ 822.146181][T24621] exc_page_fault+0x5c/0xc0 [ 822.150696][T24621] asm_exc_page_fault+0x26/0x30 [ 822.155561][T24621] RIP: 0010:rep_movs_alternative+0x30/0x70 [ 822.161378][T24621] Code: f9 40 73 40 83 f9 08 73 21 85 c9 74 0f 8a 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 c3 cc cc cc cc 66 0f 1f 84 00 00 00 00 00 <48> 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 df 83 f9 08 [ 822.180989][T24621] RSP: 0018:ffffc9000b2579d8 EFLAGS: 00050206 [ 822.187062][T24621] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 0000000000000038 [ 822.195037][T24621] RDX: fffff5200164af4e RSI: 0000000000000000 RDI: ffffc9000b257a38 [ 822.203014][T24621] RBP: 0000000000000038 R08: 0000000000000001 R09: fffff5200164af4d [ 822.210988][T24621] R10: ffffc9000b257a6f R11: 0000000000000000 R12: 0000000000000038 [ 822.218962][T24621] R13: ffffc9000b257a38 R14: 00007fffffffefff R15: 0000000000000000 [ 822.226953][T24621] _copy_from_user+0xd9/0x100 [ 822.231643][T24621] copy_msghdr_from_user+0x99/0x160 [ 822.236846][T24621] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 822.242664][T24621] ? __pfx___lock_acquire+0x10/0x10 [ 822.247877][T24621] ___sys_sendmsg+0xff/0x1e0 [ 822.252473][T24621] ? __pfx____sys_sendmsg+0x10/0x10 [ 822.257688][T24621] ? lock_acquire+0x2f/0xb0 [ 822.262199][T24621] ? __fget_files+0x40/0x3f0 [ 822.266804][T24621] ? fdget+0x176/0x210 [ 822.270883][T24621] __sys_sendmmsg+0x1a1/0x450 [ 822.275570][T24621] ? __pfx___sys_sendmmsg+0x10/0x10 [ 822.280772][T24621] ? vfs_write+0x306/0x1150 [ 822.285291][T24621] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 822.291295][T24621] ? fput+0x30/0x390 [ 822.295199][T24621] ? ksys_write+0x1ad/0x260 [ 822.299707][T24621] ? __pfx_ksys_write+0x10/0x10 [ 822.304569][T24621] __x64_sys_sendmmsg+0x9c/0x100 [ 822.309510][T24621] ? lockdep_hardirqs_on+0x7c/0x110 [ 822.314727][T24621] do_syscall_64+0xcd/0x250 [ 822.319238][T24621] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 822.325146][T24621] RIP: 0033:0x7f259617e719 [ 822.329569][T24621] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 822.349179][T24621] RSP: 002b:00007f2596fe9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 822.357599][T24621] RAX: ffffffffffffffda RBX: 00007f2596336058 RCX: 00007f259617e719 [ 822.365573][T24621] RDX: 000000000000000b RSI: 0000000000000000 RDI: 0000000000000003 [ 822.373547][T24621] RBP: 00007f2596fe9090 R08: 0000000000000000 R09: 0000000000000000 [ 822.381518][T24621] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 822.389494][T24621] R13: 0000000000000000 R14: 00007f2596336058 R15: 00007ffe2bfdebf8 [ 822.397484][T24621] [ 822.580184][T24463] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 823.093573][T24463] veth0_vlan: entered promiscuous mode [ 823.166895][T24463] veth1_vlan: entered promiscuous mode [ 823.259925][T24463] veth0_macvtap: entered promiscuous mode [ 823.273968][T24463] veth1_macvtap: entered promiscuous mode [ 823.343120][T24463] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 823.353754][T24463] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 823.371215][T24463] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 823.390703][T24463] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 823.400879][T24463] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 823.411599][T24463] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 823.422853][T24463] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 823.461917][T24463] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 823.473598][T24463] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 823.502008][T24463] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 823.512952][T24463] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 823.531553][T24463] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 823.542336][T24463] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 823.558431][T24463] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 823.602587][T24463] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 823.621324][T24463] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 823.630075][T24463] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 823.653512][T24463] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 823.785908][ T5975] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 823.809253][ T5975] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 823.878493][ T8374] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 823.902796][ T8374] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 824.347996][T24676] FAULT_INJECTION: forcing a failure. [ 824.347996][T24676] name failslab, interval 1, probability 0, space 0, times 0 [ 824.370108][T24676] CPU: 0 UID: 0 PID: 24676 Comm: syz.5.3051 Not tainted 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 824.380929][T24676] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 824.391012][T24676] Call Trace: [ 824.394314][T24676] [ 824.397269][T24676] dump_stack_lvl+0x16c/0x1f0 [ 824.401978][T24676] should_fail_ex+0x497/0x5b0 [ 824.406684][T24676] ? fs_reclaim_acquire+0xae/0x150 [ 824.411833][T24676] should_failslab+0xc2/0x120 [ 824.416552][T24676] kmem_cache_alloc_node_noprof+0x71/0x310 [ 824.422390][T24676] ? __alloc_skb+0x2b3/0x380 [ 824.427020][T24676] __alloc_skb+0x2b3/0x380 [ 824.431475][T24676] ? __pfx___alloc_skb+0x10/0x10 [ 824.436465][T24676] ? __pfx___lock_acquire+0x10/0x10 [ 824.441710][T24676] ? hlock_class+0x4e/0x130 [ 824.446247][T24676] ? __lock_acquire+0x163e/0x3ce0 [ 824.451326][T24676] __ip6_append_data.isra.0+0x2a9e/0x4540 [ 824.457105][T24676] ? __pfx_raw6_getfrag+0x10/0x10 [ 824.462186][T24676] ? __pfx___ip6_append_data.isra.0+0x10/0x10 [ 824.468307][T24676] ? ip6_mtu+0x231/0x4a0 [ 824.472587][T24676] ? ip6_setup_cork+0xc1b/0x1360 [ 824.477556][T24676] ip6_append_data+0x1e6/0x500 [ 824.482338][T24676] ? __pfx_raw6_getfrag+0x10/0x10 [ 824.487379][T24676] rawv6_sendmsg+0x1578/0x43e0 [ 824.492168][T24676] ? __pfx_rawv6_sendmsg+0x10/0x10 [ 824.497308][T24676] ? __up_read+0x1fb/0x760 [ 824.501747][T24676] ? __pfx___up_read+0x10/0x10 [ 824.506524][T24676] ? do_user_addr_fault+0x83d/0x13f0 [ 824.511823][T24676] ? __pfx___might_resched+0x10/0x10 [ 824.517119][T24676] ? __pfx_aa_sk_perm+0x10/0x10 [ 824.521986][T24676] ? __pfx_rawv6_sendmsg+0x10/0x10 [ 824.527107][T24676] ? inet_sendmsg+0x119/0x140 [ 824.531788][T24676] inet_sendmsg+0x119/0x140 [ 824.536299][T24676] ____sys_sendmsg+0x907/0xb40 [ 824.541075][T24676] ? copy_msghdr_from_user+0x10b/0x160 [ 824.546539][T24676] ? __pfx_____sys_sendmsg+0x10/0x10 [ 824.552100][T24676] ? __pfx___lock_acquire+0x10/0x10 [ 824.557313][T24676] ___sys_sendmsg+0x135/0x1e0 [ 824.561995][T24676] ? __pfx____sys_sendmsg+0x10/0x10 [ 824.567206][T24676] ? lock_acquire+0x2f/0xb0 [ 824.571728][T24676] ? __fget_files+0x40/0x3f0 [ 824.576331][T24676] ? fdget+0x176/0x210 [ 824.580407][T24676] __sys_sendmmsg+0x1a1/0x450 [ 824.585091][T24676] ? __pfx___sys_sendmmsg+0x10/0x10 [ 824.590292][T24676] ? vfs_write+0x306/0x1150 [ 824.594809][T24676] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 824.600814][T24676] ? fput+0x30/0x390 [ 824.604719][T24676] ? ksys_write+0x1ad/0x260 [ 824.609228][T24676] ? __pfx_ksys_write+0x10/0x10 [ 824.614093][T24676] __x64_sys_sendmmsg+0x9c/0x100 [ 824.619035][T24676] ? lockdep_hardirqs_on+0x7c/0x110 [ 824.624249][T24676] do_syscall_64+0xcd/0x250 [ 824.628763][T24676] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 824.634666][T24676] RIP: 0033:0x7f259617e719 [ 824.639082][T24676] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 824.658692][T24676] RSP: 002b:00007f2596fe9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 824.667110][T24676] RAX: ffffffffffffffda RBX: 00007f2596336058 RCX: 00007f259617e719 [ 824.675084][T24676] RDX: 000000000000000b RSI: 0000000000000000 RDI: 0000000000000003 [ 824.683060][T24676] RBP: 00007f2596fe9090 R08: 0000000000000000 R09: 0000000000000000 [ 824.691040][T24676] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 824.699010][T24676] R13: 0000000000000000 R14: 00007f2596336058 R15: 00007ffe2bfdebf8 [ 824.706995][T24676] [ 825.930183][T24727] __nla_validate_parse: 6 callbacks suppressed [ 825.930213][T24727] netlink: 56 bytes leftover after parsing attributes in process `syz.9.3060'. [ 826.001550][T24724] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3056'. [ 827.263723][T24787] FAULT_INJECTION: forcing a failure. [ 827.263723][T24787] name failslab, interval 1, probability 0, space 0, times 0 [ 827.291142][T24787] CPU: 1 UID: 8 PID: 24787 Comm: syz.9.3067 Not tainted 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 827.301975][T24787] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 827.312069][T24787] Call Trace: [ 827.315367][T24787] [ 827.318317][T24787] dump_stack_lvl+0x16c/0x1f0 [ 827.323038][T24787] should_fail_ex+0x497/0x5b0 [ 827.327756][T24787] ? fs_reclaim_acquire+0xae/0x150 [ 827.332910][T24787] should_failslab+0xc2/0x120 [ 827.337632][T24787] kmem_cache_alloc_noprof+0x6e/0x2f0 [ 827.343079][T24787] ? prepare_creds+0x2e/0x750 [ 827.347800][T24787] prepare_creds+0x2e/0x750 [ 827.352343][T24787] __sys_setresuid+0x46d/0x1160 [ 827.357229][T24787] do_syscall_64+0xcd/0x250 [ 827.361761][T24787] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 827.367690][T24787] RIP: 0033:0x7f4f22f7e719 [ 827.372125][T24787] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 827.391752][T24787] RSP: 002b:00007f4f23e0d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000075 [ 827.400172][T24787] RAX: ffffffffffffffda RBX: 00007f4f23135f80 RCX: 00007f4f22f7e719 [ 827.408145][T24787] RDX: 0000000000000008 RSI: 0000000000000008 RDI: ffffffffffffffff [ 827.416118][T24787] RBP: 00007f4f23e0d090 R08: 0000000000000000 R09: 0000000000000000 [ 827.424092][T24787] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 827.432068][T24787] R13: 0000000000000000 R14: 00007f4f23135f80 R15: 00007ffc986a9bf8 [ 827.440061][T24787] [ 828.808036][T12458] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 829.095031][T12458] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 829.284304][T12458] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 829.447477][T12458] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 829.706711][ T5152] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 829.716950][ T5152] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 829.730833][ T5152] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 829.761442][ T5152] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 829.769870][ T5152] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 829.777448][ T5152] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 829.891460][T12458] bridge_slave_1: left allmulticast mode [ 829.897453][T12458] bridge_slave_1: left promiscuous mode [ 829.941417][T12458] bridge0: port 2(bridge_slave_1) entered disabled state [ 829.973040][T12458] bridge_slave_0: left allmulticast mode [ 829.978761][T12458] bridge_slave_0: left promiscuous mode [ 829.995048][T12458] bridge0: port 1(bridge_slave_0) entered disabled state [ 830.735911][T12458] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 830.748834][T12458] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 830.760605][T12458] bond0 (unregistering): Released all slaves [ 831.046630][T24886] chnl_net:caif_netlink_parms(): no params data found [ 831.547855][T12458] hsr_slave_0: left promiscuous mode [ 831.567356][T12458] hsr_slave_1: left promiscuous mode [ 831.575671][T12458] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 831.610686][T12458] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 831.649382][T12458] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 831.669008][T12458] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 831.736673][T12458] veth1_macvtap: left promiscuous mode [ 831.751314][T12458] veth0_macvtap: left promiscuous mode [ 831.761225][T12458] veth1_vlan: left promiscuous mode [ 831.766595][T12458] veth0_vlan: left promiscuous mode [ 831.873934][T17995] Bluetooth: hci0: command tx timeout [ 833.740652][T12458] team0 (unregistering): Port device team_slave_1 removed [ 833.849286][T12458] team0 (unregistering): Port device team_slave_0 removed [ 833.961388][T17995] Bluetooth: hci0: command tx timeout [ 835.234693][T24886] bridge0: port 1(bridge_slave_0) entered blocking state [ 835.243518][T24886] bridge0: port 1(bridge_slave_0) entered disabled state [ 835.250744][T24886] bridge_slave_0: entered allmulticast mode [ 835.268552][T24886] bridge_slave_0: entered promiscuous mode [ 835.276758][T24886] bridge0: port 2(bridge_slave_1) entered blocking state [ 835.294175][T24886] bridge0: port 2(bridge_slave_1) entered disabled state [ 835.309663][T24886] bridge_slave_1: entered allmulticast mode [ 835.322479][T24886] bridge_slave_1: entered promiscuous mode [ 835.402290][T25022] netlink: 334 bytes leftover after parsing attributes in process `syz.9.3105'. [ 835.686527][T24886] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 835.703660][T25045] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3110'. [ 835.793768][T24886] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 835.997162][T24886] team0: Port device team_slave_0 added [ 836.031141][T17995] Bluetooth: hci0: command tx timeout [ 836.040329][T24886] team0: Port device team_slave_1 added [ 836.309862][ T5152] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 836.319744][ T5152] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 836.328666][ T5152] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 836.337332][ T5152] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 836.351830][T24886] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 836.359344][ T5152] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 836.359508][T24886] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 836.393376][ T5152] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 836.517227][T24886] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 836.617355][T24886] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 836.647881][T24886] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 836.686371][T24886] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 836.758660][T25069] netlink: 400 bytes leftover after parsing attributes in process `syz.8.3115'. [ 836.915597][T24886] hsr_slave_0: entered promiscuous mode [ 836.949680][T24886] hsr_slave_1: entered promiscuous mode [ 836.956792][T24886] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 836.980445][T24886] Cannot create hsr debugfs directory [ 837.405222][T12458] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 837.628856][T12458] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 837.827103][T25104] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3118'. [ 837.838450][T12458] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 838.034226][T12458] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 838.111272][ T5152] Bluetooth: hci0: command tx timeout [ 838.130188][T25061] chnl_net:caif_netlink_parms(): no params data found [ 838.439158][T25061] bridge0: port 1(bridge_slave_0) entered blocking state [ 838.441152][ T5152] Bluetooth: hci3: command tx timeout [ 838.451644][T25061] bridge0: port 1(bridge_slave_0) entered disabled state [ 838.459078][T25061] bridge_slave_0: entered allmulticast mode [ 838.472155][T25061] bridge_slave_0: entered promiscuous mode [ 838.480064][T25061] bridge0: port 2(bridge_slave_1) entered blocking state [ 838.487218][T25061] bridge0: port 2(bridge_slave_1) entered disabled state [ 838.494568][T25061] bridge_slave_1: entered allmulticast mode [ 838.501825][T25061] bridge_slave_1: entered promiscuous mode [ 838.685849][T25061] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 838.707187][T25061] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 838.916254][T25061] team0: Port device team_slave_0 added [ 838.974663][T25061] team0: Port device team_slave_1 added [ 838.980748][T12458] bridge_slave_1: left allmulticast mode [ 839.013443][T12458] bridge_slave_1: left promiscuous mode [ 839.020507][T12458] bridge0: port 2(bridge_slave_1) entered disabled state [ 839.052695][T12458] bridge_slave_0: left allmulticast mode [ 839.064424][T12458] bridge_slave_0: left promiscuous mode [ 839.074763][T12458] bridge0: port 1(bridge_slave_0) entered disabled state [ 839.818764][T12458] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 839.854843][T12458] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 839.883863][T12458] bond0 (unregistering): Released all slaves [ 840.096250][T25061] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 840.115879][T25061] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 840.188711][T25061] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 840.213111][T25061] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 840.220099][T25061] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 840.281498][T25061] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 840.511134][ T5152] Bluetooth: hci3: command tx timeout [ 840.573544][T25061] hsr_slave_0: entered promiscuous mode [ 840.597503][T25061] hsr_slave_1: entered promiscuous mode [ 840.617559][T25061] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 840.642616][T25061] Cannot create hsr debugfs directory [ 840.709019][T24886] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 840.726453][T24886] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 840.750839][T24886] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 840.789897][T24886] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 840.839402][T12458] hsr_slave_0: left promiscuous mode [ 840.867231][T12458] hsr_slave_1: left promiscuous mode [ 840.874200][T12458] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 840.898529][T12458] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 840.912854][T12458] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 840.930614][T12458] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 840.976273][T12458] veth1_macvtap: left promiscuous mode [ 840.992031][T12458] veth0_macvtap: left promiscuous mode [ 841.007934][T12458] veth1_vlan: left promiscuous mode [ 841.013430][T12458] veth0_vlan: left promiscuous mode [ 841.748073][T12458] team0 (unregistering): Port device team_slave_1 removed [ 841.797568][T12458] team0 (unregistering): Port device team_slave_0 removed [ 842.591083][ T5152] Bluetooth: hci3: command tx timeout [ 842.950718][T24886] 8021q: adding VLAN 0 to HW filter on device bond0 [ 843.008307][T24886] 8021q: adding VLAN 0 to HW filter on device team0 [ 843.090430][ T3464] bridge0: port 1(bridge_slave_0) entered blocking state [ 843.097646][ T3464] bridge0: port 1(bridge_slave_0) entered forwarding state [ 843.106643][ T3464] bridge0: port 2(bridge_slave_1) entered blocking state [ 843.113818][ T3464] bridge0: port 2(bridge_slave_1) entered forwarding state [ 843.252186][T24886] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 843.262894][T24886] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 843.660773][T24886] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 844.014108][T25061] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 844.033497][T25061] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 844.062972][T25061] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 844.088424][T25061] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 844.233604][T24886] veth0_vlan: entered promiscuous mode [ 844.273911][T24886] veth1_vlan: entered promiscuous mode [ 844.346734][T24886] veth0_macvtap: entered promiscuous mode [ 844.379183][T24886] veth1_macvtap: entered promiscuous mode [ 844.405810][T25061] 8021q: adding VLAN 0 to HW filter on device bond0 [ 844.437982][T24886] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 844.461096][T24886] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 844.481941][T24886] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 844.501180][T24886] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 844.521438][T24886] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 844.544332][T25061] 8021q: adding VLAN 0 to HW filter on device team0 [ 844.573758][T24886] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 844.634447][T24886] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 844.644445][T24886] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 844.654959][T24886] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 844.666092][T24886] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 844.675522][ T5152] Bluetooth: hci3: command tx timeout [ 844.681842][T24886] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 844.690575][T24886] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 844.699563][T24886] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 844.708634][T24886] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 844.736679][ T5975] bridge0: port 1(bridge_slave_0) entered blocking state [ 844.743864][ T5975] bridge0: port 1(bridge_slave_0) entered forwarding state [ 844.790235][T12456] bridge0: port 2(bridge_slave_1) entered blocking state [ 844.797422][T12456] bridge0: port 2(bridge_slave_1) entered forwarding state [ 844.985421][T25061] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 845.017427][T25061] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 845.054319][ T3464] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 845.075108][ T3464] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 845.179452][ T3464] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 845.226517][ T3464] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 845.394324][T25061] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 845.455293][T25282] FAULT_INJECTION: forcing a failure. [ 845.455293][T25282] name failslab, interval 1, probability 0, space 0, times 0 [ 845.482403][T25061] veth0_vlan: entered promiscuous mode [ 845.500101][T25282] CPU: 0 UID: 8 PID: 25282 Comm: syz.4.3077 Not tainted 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 845.510929][T25282] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 845.512313][T25061] veth1_vlan: entered promiscuous mode [ 845.520988][T25282] Call Trace: [ 845.520999][T25282] [ 845.521010][T25282] dump_stack_lvl+0x16c/0x1f0 [ 845.521042][T25282] should_fail_ex+0x497/0x5b0 [ 845.521065][T25282] ? fs_reclaim_acquire+0xae/0x150 [ 845.547227][T25282] should_failslab+0xc2/0x120 [ 845.551950][T25282] __kmalloc_noprof+0xcb/0x410 [ 845.556755][T25282] lsm_blob_alloc+0x68/0x90 [ 845.561291][T25282] security_prepare_creds+0x30/0x270 [ 845.566612][T25282] prepare_creds+0x53e/0x750 [ 845.570608][T25061] veth0_macvtap: entered promiscuous mode [ 845.571222][T25282] __sys_setresuid+0x46d/0x1160 [ 845.571258][T25282] do_syscall_64+0xcd/0x250 [ 845.582560][T25061] veth1_macvtap: entered promiscuous mode [ 845.586285][T25282] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 845.586324][T25282] RIP: 0033:0x7fe50537e719 [ 845.602373][T25282] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 845.618864][T25061] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 845.621989][T25282] RSP: 002b:00007fe5061b0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000075 [ 845.622019][T25282] RAX: ffffffffffffffda RBX: 00007fe505535f80 RCX: 00007fe50537e719 [ 845.622036][T25282] RDX: 0000000000000008 RSI: 0000000000000008 RDI: ffffffffffffffff [ 845.622051][T25282] RBP: 00007fe5061b0090 R08: 0000000000000000 R09: 0000000000000000 [ 845.622067][T25282] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 845.632799][T25061] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 845.640933][T25282] R13: 0000000000000000 R14: 00007fe505535f80 R15: 00007ffca9d3e828 [ 845.640969][T25282] [ 845.721938][T25061] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 845.738394][T25061] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 845.761116][T25061] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 845.772779][T25061] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 845.784773][T25061] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 845.834599][T25061] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 845.876323][T25061] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 845.909732][T25061] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 845.950754][T25061] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 845.977303][T25061] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 846.003994][T25061] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 846.029295][T25061] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 846.086416][T25061] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 846.128107][T25061] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 846.151054][T25061] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 846.170087][T25061] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 846.384494][ T8374] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 846.424660][ T8374] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 846.493936][ T8373] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 846.541065][ T8373] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 847.695034][T25359] FAULT_INJECTION: forcing a failure. [ 847.695034][T25359] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 847.748019][T25359] CPU: 1 UID: 8 PID: 25359 Comm: syz.9.3147 Not tainted 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 847.758852][T25359] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 847.768941][T25359] Call Trace: [ 847.772246][T25359] [ 847.775204][T25359] dump_stack_lvl+0x16c/0x1f0 [ 847.779916][T25359] should_fail_ex+0x497/0x5b0 [ 847.784631][T25359] _copy_to_user+0x32/0xd0 [ 847.789092][T25359] simple_read_from_buffer+0xd0/0x160 [ 847.794506][T25359] proc_fail_nth_read+0x198/0x270 [ 847.799570][T25359] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 847.805156][T25359] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 847.810738][T25359] vfs_read+0x1df/0xbe0 [ 847.814927][T25359] ? __fget_files+0x23a/0x3f0 [ 847.819635][T25359] ? fdget_pos+0x24c/0x360 [ 847.824082][T25359] ? __pfx_lock_release+0x10/0x10 [ 847.829141][T25359] ? trace_lock_acquire+0x14a/0x1d0 [ 847.834378][T25359] ? __pfx_vfs_read+0x10/0x10 [ 847.839082][T25359] ? __pfx___mutex_lock+0x10/0x10 [ 847.844145][T25359] ? __fget_files+0x244/0x3f0 [ 847.848834][T25359] ksys_read+0x12f/0x260 [ 847.853087][T25359] ? __pfx_ksys_read+0x10/0x10 [ 847.857862][T25359] do_syscall_64+0xcd/0x250 [ 847.862375][T25359] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 847.868296][T25359] RIP: 0033:0x7f4f22f7d15c [ 847.872717][T25359] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 847.892331][T25359] RSP: 002b:00007f4f23e0d030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 847.900748][T25359] RAX: ffffffffffffffda RBX: 00007f4f23135f80 RCX: 00007f4f22f7d15c [ 847.908723][T25359] RDX: 000000000000000f RSI: 00007f4f23e0d0a0 RDI: 0000000000000003 [ 847.916701][T25359] RBP: 00007f4f23e0d090 R08: 0000000000000000 R09: 0000000000000000 [ 847.924675][T25359] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 847.932671][T25359] R13: 0000000000000000 R14: 00007f4f23135f80 R15: 00007ffc986a9bf8 [ 847.940682][T25359] [ 850.151756][T25441] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3159'. [ 853.321343][T25545] Process accounting resumed [ 855.210692][T25597] netlink: 342 bytes leftover after parsing attributes in process `syz.4.3179'. [ 859.208295][T25700] Malformed UNC in devname [ 859.208295][T25700] [ 859.233880][T25700] CIFS: VFS: Malformed UNC in devname [ 860.454579][T25733] sctp: [Deprecated]: syz.2.3199 (pid 25733) Use of struct sctp_assoc_value in delayed_ack socket option. [ 860.454579][T25733] Use struct sctp_sack_info instead [ 861.245666][T25765] delete_channel: no stack [ 863.913816][T17995] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 863.959686][T17995] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 863.968370][T17995] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 863.976468][T17995] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 863.985364][T17995] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 863.993900][T17995] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 864.165657][T12458] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 864.434216][T12458] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 864.844200][T12458] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 865.279379][T12458] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 866.069177][T25844] chnl_net:caif_netlink_parms(): no params data found [ 866.141127][ T5152] Bluetooth: hci2: command tx timeout [ 866.571210][T25882] netlink: 2 bytes leftover after parsing attributes in process `syz.4.3218'. [ 867.030196][T12458] bridge_slave_1: left allmulticast mode [ 867.036109][T12458] bridge_slave_1: left promiscuous mode [ 867.047157][T12458] bridge0: port 2(bridge_slave_1) entered disabled state [ 867.060017][T12458] bridge_slave_0: left allmulticast mode [ 867.066551][T12458] bridge_slave_0: left promiscuous mode [ 867.076554][T12458] bridge0: port 1(bridge_slave_0) entered disabled state [ 867.263520][T25895] FAULT_INJECTION: forcing a failure. [ 867.263520][T25895] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 867.277171][T25895] CPU: 0 UID: 0 PID: 25895 Comm: syz.4.3221 Not tainted 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 867.287974][T25895] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 867.298060][T25895] Call Trace: [ 867.301364][T25895] [ 867.304305][T25895] dump_stack_lvl+0x16c/0x1f0 [ 867.309001][T25895] should_fail_ex+0x497/0x5b0 [ 867.313676][T25895] _copy_from_user+0x32/0x100 [ 867.318350][T25895] copy_msghdr_from_user+0x99/0x160 [ 867.323541][T25895] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 867.329368][T25895] ? hlock_class+0x4e/0x130 [ 867.333895][T25895] ? __lock_acquire+0x163e/0x3ce0 [ 867.338960][T25895] ___sys_sendmsg+0xff/0x1e0 [ 867.343553][T25895] ? __pfx____sys_sendmsg+0x10/0x10 [ 867.348760][T25895] ? __pfx___lock_acquire+0x10/0x10 [ 867.354026][T25895] ? __pfx___might_resched+0x10/0x10 [ 867.359334][T25895] ? __might_fault+0xe3/0x190 [ 867.364010][T25895] __sys_sendmmsg+0x1a1/0x450 [ 867.368685][T25895] ? __pfx___sys_sendmmsg+0x10/0x10 [ 867.373878][T25895] ? vfs_write+0x306/0x1150 [ 867.378385][T25895] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 867.384395][T25895] ? fput+0x30/0x390 [ 867.388326][T25895] ? ksys_write+0x1ad/0x260 [ 867.392854][T25895] ? __pfx_ksys_write+0x10/0x10 [ 867.397710][T25895] __x64_sys_sendmmsg+0x9c/0x100 [ 867.402645][T25895] ? lockdep_hardirqs_on+0x7c/0x110 [ 867.407877][T25895] do_syscall_64+0xcd/0x250 [ 867.412379][T25895] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 867.418273][T25895] RIP: 0033:0x7fe50537e719 [ 867.422693][T25895] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 867.442298][T25895] RSP: 002b:00007fe50618f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 867.450708][T25895] RAX: ffffffffffffffda RBX: 00007fe505536058 RCX: 00007fe50537e719 [ 867.458678][T25895] RDX: 000000000000000b RSI: 0000000000000000 RDI: 0000000000000003 [ 867.466644][T25895] RBP: 00007fe50618f090 R08: 0000000000000000 R09: 0000000000000000 [ 867.474609][T25895] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 867.482595][T25895] R13: 0000000000000000 R14: 00007fe505536058 R15: 00007ffca9d3e828 [ 867.490616][T25895] [ 867.764344][T12458] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 867.775583][T12458] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 867.786572][T12458] bond0 (unregistering): Released all slaves [ 867.960417][T25844] bridge0: port 1(bridge_slave_0) entered blocking state [ 867.974728][T25844] bridge0: port 1(bridge_slave_0) entered disabled state [ 867.982325][T25844] bridge_slave_0: entered allmulticast mode [ 867.989034][T25844] bridge_slave_0: entered promiscuous mode [ 868.005150][T25844] bridge0: port 2(bridge_slave_1) entered blocking state [ 868.019095][T25844] bridge0: port 2(bridge_slave_1) entered disabled state [ 868.056267][T25844] bridge_slave_1: entered allmulticast mode [ 868.082568][T25844] bridge_slave_1: entered promiscuous mode [ 868.191063][ T5152] Bluetooth: hci2: command tx timeout [ 868.225292][T25844] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 868.299565][T25844] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 868.467971][T25844] team0: Port device team_slave_0 added [ 868.506216][T25844] team0: Port device team_slave_1 added [ 868.576651][T12458] hsr_slave_0: left promiscuous mode [ 868.615363][T12458] hsr_slave_1: left promiscuous mode [ 868.626465][T12458] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 868.641031][T12458] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 868.661824][T12458] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 868.669280][T12458] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 868.702203][T12458] veth1_macvtap: left promiscuous mode [ 868.707806][T12458] veth0_macvtap: left promiscuous mode [ 868.721200][T12458] veth1_vlan: left promiscuous mode [ 868.726572][T12458] veth0_vlan: left promiscuous mode [ 869.895253][T12458] team0 (unregistering): Port device team_slave_1 removed [ 870.007208][T12458] team0 (unregistering): Port device team_slave_0 removed [ 870.201608][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.208325][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.271229][ T5152] Bluetooth: hci2: command tx timeout [ 870.779137][T25844] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 870.796815][T25844] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 870.829738][T25844] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 870.842657][T25844] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 870.849629][T25844] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 870.876098][T25844] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 871.040128][T25844] hsr_slave_0: entered promiscuous mode [ 871.051845][T25844] hsr_slave_1: entered promiscuous mode [ 871.069991][T25844] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 871.100754][T25844] Cannot create hsr debugfs directory [ 871.766347][T25844] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 871.783042][T25844] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 871.808127][T25844] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 871.827883][T25844] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 872.016850][T25844] 8021q: adding VLAN 0 to HW filter on device bond0 [ 872.059814][T25844] 8021q: adding VLAN 0 to HW filter on device team0 [ 872.122214][T12458] bridge0: port 1(bridge_slave_0) entered blocking state [ 872.129332][T12458] bridge0: port 1(bridge_slave_0) entered forwarding state [ 872.173925][ T8373] bridge0: port 2(bridge_slave_1) entered blocking state [ 872.181135][ T8373] bridge0: port 2(bridge_slave_1) entered forwarding state [ 872.352638][ T5152] Bluetooth: hci2: command tx timeout [ 872.723317][T25844] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 873.397158][T25844] veth0_vlan: entered promiscuous mode [ 873.474947][T25844] veth1_vlan: entered promiscuous mode [ 873.637945][T25844] veth0_macvtap: entered promiscuous mode [ 873.668602][T25844] veth1_macvtap: entered promiscuous mode [ 873.712282][ T29] audit: type=1326 audit(8277292038.740:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26015 comm="syz.8.3243" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe5a417e719 code=0x0 [ 873.749392][T25844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 873.761773][T25844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 873.774491][T25844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 873.810766][T25844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 873.840096][T25844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 873.859750][T25844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 873.883568][T25844] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 873.918638][T25844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 873.942267][T25844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 873.958473][T25844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 873.971544][T25844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 874.001075][T25844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 874.031546][T25844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 874.062011][T25844] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 874.078355][T25844] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 874.087544][T25844] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 874.105718][T25844] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 874.117970][T25844] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 874.405117][T12458] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 874.415351][T12458] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 874.565563][ T5963] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 874.593465][ T5963] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 881.224585][ T5975] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 881.559039][ T5975] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 881.866839][T17995] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 881.881815][T17995] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 881.890090][T17995] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 881.904693][T17995] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 881.914690][T17995] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 881.932911][T17995] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 882.038507][ T5975] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 882.499322][ T5975] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 882.756354][T26318] Invalid ELF header magic: != ELF [ 883.064605][T26318] can: request_module (can-proto-5) failed. [ 883.134967][ T5975] bridge_slave_1: left allmulticast mode [ 883.160773][ T5975] bridge_slave_1: left promiscuous mode [ 883.167803][ T5975] bridge0: port 2(bridge_slave_1) entered disabled state [ 883.291819][ T5975] bridge_slave_0: left allmulticast mode [ 883.297538][ T5975] bridge_slave_0: left promiscuous mode [ 883.329757][ T5975] bridge0: port 1(bridge_slave_0) entered disabled state [ 883.617159][ T29] audit: type=1326 audit(8277292048.630:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26341 comm="syz.2.3290" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc1ab57e719 code=0x0 [ 884.031078][ T5152] Bluetooth: hci2: command tx timeout [ 885.327393][ T5975] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 885.355072][ T5975] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 885.377348][ T5975] bond0 (unregistering): Released all slaves [ 885.415089][T26296] chnl_net:caif_netlink_parms(): no params data found [ 885.819190][T26296] bridge0: port 1(bridge_slave_0) entered blocking state [ 885.832835][T26296] bridge0: port 1(bridge_slave_0) entered disabled state [ 885.848205][T26296] bridge_slave_0: entered allmulticast mode [ 885.864491][T26296] bridge_slave_0: entered promiscuous mode [ 885.879737][T26296] bridge0: port 2(bridge_slave_1) entered blocking state [ 885.892879][T26296] bridge0: port 2(bridge_slave_1) entered disabled state [ 885.907360][T26296] bridge_slave_1: entered allmulticast mode [ 885.920736][T26296] bridge_slave_1: entered promiscuous mode [ 886.095292][T26296] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 886.112285][T17995] Bluetooth: hci2: command tx timeout [ 886.146538][T26296] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 886.265400][ T5975] hsr_slave_0: left promiscuous mode [ 886.326424][ T5975] hsr_slave_1: left promiscuous mode [ 886.357896][ T5975] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 886.372328][ T5975] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 886.427597][ T5975] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 886.449809][ T5975] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 886.508009][ T5975] veth1_macvtap: left promiscuous mode [ 886.522020][ T5975] veth0_macvtap: left promiscuous mode [ 886.527809][ T5975] veth1_vlan: left promiscuous mode [ 886.543878][ T5975] veth0_vlan: left promiscuous mode [ 887.482511][ T5975] team0 (unregistering): Port device team_slave_1 removed [ 887.659992][T17995] Bluetooth: hci1: command 0x0406 tx timeout [ 887.690057][ T5975] team0 (unregistering): Port device team_slave_0 removed [ 888.135557][T26421] Process accounting resumed [ 888.192016][ T5152] Bluetooth: hci2: command tx timeout [ 888.306562][T26424] delete_channel: no stack [ 888.312508][T26424] delete_channel: no stack [ 888.524819][T26296] team0: Port device team_slave_0 added [ 888.562921][T26296] team0: Port device team_slave_1 added [ 888.694419][T26296] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 888.721226][T26296] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 888.801068][T26296] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 888.819289][T26451] FAULT_INJECTION: forcing a failure. [ 888.819289][T26451] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 888.853351][T26296] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 888.860347][T26296] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 888.891097][T26451] CPU: 0 UID: 0 PID: 26451 Comm: syz.4.3312 Not tainted 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 888.901915][T26451] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 888.911982][T26451] Call Trace: [ 888.915262][T26451] [ 888.918202][T26451] dump_stack_lvl+0x16c/0x1f0 [ 888.922887][T26451] should_fail_ex+0x497/0x5b0 [ 888.927572][T26451] _copy_from_user+0x32/0x100 [ 888.932258][T26451] copy_msghdr_from_user+0x99/0x160 [ 888.937458][T26451] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 888.943272][T26451] ? hlock_class+0x4e/0x130 [ 888.947781][T26451] ? __lock_acquire+0x163e/0x3ce0 [ 888.952822][T26451] ___sys_sendmsg+0xff/0x1e0 [ 888.957423][T26451] ? __pfx____sys_sendmsg+0x10/0x10 [ 888.962621][T26451] ? __pfx___lock_acquire+0x10/0x10 [ 888.967850][T26451] ? __pfx___might_resched+0x10/0x10 [ 888.973137][T26451] ? __might_fault+0xe3/0x190 [ 888.977821][T26451] __sys_sendmmsg+0x1a1/0x450 [ 888.982504][T26451] ? __pfx___sys_sendmmsg+0x10/0x10 [ 888.987707][T26451] ? vfs_write+0x306/0x1150 [ 888.992229][T26451] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 888.998233][T26451] ? fput+0x30/0x390 [ 889.002140][T26451] ? ksys_write+0x1ad/0x260 [ 889.006651][T26451] ? __pfx_ksys_write+0x10/0x10 [ 889.011513][T26451] __x64_sys_sendmmsg+0x9c/0x100 [ 889.016453][T26451] ? lockdep_hardirqs_on+0x7c/0x110 [ 889.021664][T26451] do_syscall_64+0xcd/0x250 [ 889.026173][T26451] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 889.032079][T26451] RIP: 0033:0x7fe50537e719 [ 889.036496][T26451] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 889.056108][T26451] RSP: 002b:00007fe50618f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 889.064525][T26451] RAX: ffffffffffffffda RBX: 00007fe505536058 RCX: 00007fe50537e719 [ 889.072497][T26451] RDX: 000000000000000b RSI: 0000000000000000 RDI: 0000000000000003 [ 889.080467][T26451] RBP: 00007fe50618f090 R08: 0000000000000000 R09: 0000000000000000 [ 889.088437][T26451] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 889.096416][T26451] R13: 0000000000000000 R14: 00007fe505536058 R15: 00007ffca9d3e828 [ 889.104409][T26451] [ 889.136923][T26296] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 889.185550][T26458] netlink: zone id is out of range [ 889.190840][T26458] netlink: zone id is out of range [ 889.200330][T26458] netlink: zone id is out of range [ 889.209621][T26458] netlink: zone id is out of range [ 889.242017][T26296] hsr_slave_0: entered promiscuous mode [ 889.249234][T26458] netlink: del zone limit has 4 unknown bytes [ 889.261194][T26296] hsr_slave_1: entered promiscuous mode [ 889.269933][T26296] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 889.287636][T26296] Cannot create hsr debugfs directory [ 889.974466][T12456] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 890.148446][T12456] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 890.187907][T26479] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3319'. [ 890.271882][ T5152] Bluetooth: hci2: command tx timeout [ 890.359177][T12456] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 890.455944][T17995] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 890.473522][T17995] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 890.482982][T17995] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 890.492972][T17995] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 890.542071][T17995] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 890.549660][T17995] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 890.553493][T12456] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 891.060026][T26296] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 891.147058][T26296] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 891.212164][T26296] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 891.292334][T12456] bridge_slave_1: left allmulticast mode [ 891.298042][T12456] bridge_slave_1: left promiscuous mode [ 891.304016][T12456] bridge0: port 2(bridge_slave_1) entered disabled state [ 891.357791][T26518] FAULT_INJECTION: forcing a failure. [ 891.357791][T26518] name failslab, interval 1, probability 0, space 0, times 0 [ 891.381693][T12456] bridge_slave_0: left allmulticast mode [ 891.387397][T12456] bridge_slave_0: left promiscuous mode [ 891.407326][T26518] CPU: 1 UID: 0 PID: 26518 Comm: syz.4.3323 Not tainted 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 891.418152][T26518] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 891.428236][T26518] Call Trace: [ 891.431543][T26518] [ 891.434495][T26518] dump_stack_lvl+0x16c/0x1f0 [ 891.439205][T26518] should_fail_ex+0x497/0x5b0 [ 891.443912][T26518] ? fs_reclaim_acquire+0xae/0x150 [ 891.449063][T26518] should_failslab+0xc2/0x120 [ 891.453777][T26518] kmem_cache_alloc_node_noprof+0x71/0x310 [ 891.459623][T26518] ? __alloc_skb+0x2b3/0x380 [ 891.464258][T26518] __alloc_skb+0x2b3/0x380 [ 891.468718][T26518] ? __pfx___alloc_skb+0x10/0x10 [ 891.473699][T26518] ? __pfx___lock_acquire+0x10/0x10 [ 891.478947][T26518] ? hlock_class+0x4e/0x130 [ 891.483479][T26518] ? __lock_acquire+0x163e/0x3ce0 [ 891.488547][T26518] __ip6_append_data.isra.0+0x2a9e/0x4540 [ 891.494321][T26518] ? __pfx_raw6_getfrag+0x10/0x10 [ 891.499390][T26518] ? __pfx___ip6_append_data.isra.0+0x10/0x10 [ 891.505498][T26518] ? ip6_mtu+0x231/0x4a0 [ 891.509774][T26518] ? ip6_setup_cork+0xc1b/0x1360 [ 891.514753][T26518] ip6_append_data+0x1e6/0x500 [ 891.519553][T26518] ? __pfx_raw6_getfrag+0x10/0x10 [ 891.524610][T26518] rawv6_sendmsg+0x1578/0x43e0 [ 891.529421][T26518] ? __pfx_rawv6_sendmsg+0x10/0x10 [ 891.534579][T26518] ? __pfx___lock_acquire+0x10/0x10 [ 891.539826][T26518] ? __pfx___might_resched+0x10/0x10 [ 891.541223][T12456] bridge0: port 1(bridge_slave_0) entered disabled state [ 891.545132][T26518] ? __pfx_aa_sk_perm+0x10/0x10 [ 891.557000][T26518] ? lock_acquire+0x2f/0xb0 [ 891.561543][T26518] ? __pfx_rawv6_sendmsg+0x10/0x10 [ 891.566694][T26518] ? inet_sendmsg+0x119/0x140 [ 891.571403][T26518] inet_sendmsg+0x119/0x140 [ 891.575945][T26518] ____sys_sendmsg+0x907/0xb40 [ 891.580746][T26518] ? copy_msghdr_from_user+0x10b/0x160 [ 891.586233][T26518] ? __pfx_____sys_sendmsg+0x10/0x10 [ 891.591561][T26518] ? hlock_class+0x4e/0x130 [ 891.596097][T26518] ? __lock_acquire+0x163e/0x3ce0 [ 891.601174][T26518] ___sys_sendmsg+0x135/0x1e0 [ 891.605904][T26518] ? __pfx____sys_sendmsg+0x10/0x10 [ 891.611131][T26518] ? __pfx___lock_acquire+0x10/0x10 [ 891.616406][T26518] ? __pfx___might_resched+0x10/0x10 [ 891.621729][T26518] ? __might_fault+0xe3/0x190 [ 891.626448][T26518] __sys_sendmmsg+0x1a1/0x450 [ 891.631170][T26518] ? __pfx___sys_sendmmsg+0x10/0x10 [ 891.636400][T26518] ? vfs_write+0x306/0x1150 [ 891.640955][T26518] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 891.646991][T26518] ? fput+0x30/0x390 [ 891.650925][T26518] ? ksys_write+0x1ad/0x260 [ 891.655456][T26518] ? __pfx_ksys_write+0x10/0x10 [ 891.660344][T26518] __x64_sys_sendmmsg+0x9c/0x100 [ 891.665314][T26518] ? lockdep_hardirqs_on+0x7c/0x110 [ 891.670551][T26518] do_syscall_64+0xcd/0x250 [ 891.675086][T26518] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 891.681016][T26518] RIP: 0033:0x7fe50537e719 [ 891.685455][T26518] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 891.705094][T26518] RSP: 002b:00007fe50618f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 891.713628][T26518] RAX: ffffffffffffffda RBX: 00007fe505536058 RCX: 00007fe50537e719 [ 891.721629][T26518] RDX: 000000000000000b RSI: 0000000000000000 RDI: 0000000000000003 [ 891.729633][T26518] RBP: 00007fe50618f090 R08: 0000000000000000 R09: 0000000000000000 [ 891.737638][T26518] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 891.745637][T26518] R13: 0000000000000000 R14: 00007fe505536058 R15: 00007ffca9d3e828 [ 891.753656][T26518] [ 892.440108][T12456] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 892.456978][T12456] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 892.523270][T12456] bond0 (unregistering): Released all slaves [ 892.551119][T26296] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 892.567066][T26490] chnl_net:caif_netlink_parms(): no params data found [ 892.673674][T17995] Bluetooth: hci3: command tx timeout [ 893.262981][T26490] bridge0: port 1(bridge_slave_0) entered blocking state [ 893.273276][T26490] bridge0: port 1(bridge_slave_0) entered disabled state [ 893.291831][T26490] bridge_slave_0: entered allmulticast mode [ 893.322770][T26490] bridge_slave_0: entered promiscuous mode [ 893.439990][T26490] bridge0: port 2(bridge_slave_1) entered blocking state [ 893.470291][T26490] bridge0: port 2(bridge_slave_1) entered disabled state [ 893.483037][T26490] bridge_slave_1: entered allmulticast mode [ 893.490560][T26490] bridge_slave_1: entered promiscuous mode [ 893.570451][T12456] hsr_slave_0: left promiscuous mode [ 893.587485][T12456] hsr_slave_1: left promiscuous mode [ 893.606898][T12456] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 893.621235][T12456] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 893.639462][T12456] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 893.658969][T12456] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 893.703243][T12456] veth1_macvtap: left promiscuous mode [ 893.709559][T12456] veth0_macvtap: left promiscuous mode [ 893.715342][T12456] veth1_vlan: left promiscuous mode [ 893.721458][T12456] veth0_vlan: left promiscuous mode [ 894.406107][T12456] team0 (unregistering): Port device team_slave_1 removed [ 894.453058][T12456] team0 (unregistering): Port device team_slave_0 removed [ 894.751110][T17995] Bluetooth: hci3: command tx timeout [ 894.940550][T26490] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 894.954054][T26490] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 895.085086][T26490] team0: Port device team_slave_0 added [ 895.115124][T26490] team0: Port device team_slave_1 added [ 895.158752][T26296] 8021q: adding VLAN 0 to HW filter on device bond0 [ 895.200092][T26490] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 895.219904][T26490] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 895.290986][T26490] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 895.353309][T26490] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 895.360378][T26490] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 895.397843][T26490] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 895.446690][T26296] 8021q: adding VLAN 0 to HW filter on device team0 [ 895.562241][T12462] bridge0: port 1(bridge_slave_0) entered blocking state [ 895.569376][T12462] bridge0: port 1(bridge_slave_0) entered forwarding state [ 895.595474][T12462] bridge0: port 2(bridge_slave_1) entered blocking state [ 895.602701][T12462] bridge0: port 2(bridge_slave_1) entered forwarding state [ 895.637429][T26490] hsr_slave_0: entered promiscuous mode [ 895.649895][T26490] hsr_slave_1: entered promiscuous mode [ 895.671274][T26490] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 895.678940][T26490] Cannot create hsr debugfs directory [ 895.846613][ T5152] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 895.860379][ T5152] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 895.877875][ T5152] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 895.889949][ T5152] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 895.899924][ T5152] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 895.908119][ T5152] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 895.987749][T12456] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 896.117545][T12456] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 896.312398][T12456] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 896.507007][T12456] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 896.620501][T26296] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 896.842540][T17995] Bluetooth: hci3: command tx timeout [ 896.958913][T12456] bridge_slave_1: left allmulticast mode [ 896.966499][T12456] bridge_slave_1: left promiscuous mode [ 896.983414][T12456] bridge0: port 2(bridge_slave_1) entered disabled state [ 897.002185][T12456] bridge_slave_0: left allmulticast mode [ 897.007878][T12456] bridge_slave_0: left promiscuous mode [ 897.026294][T12456] bridge0: port 1(bridge_slave_0) entered disabled state [ 897.602316][T12456] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 897.620537][T12456] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 897.642764][T12456] bond0 (unregistering): Released all slaves [ 897.665299][T26609] chnl_net:caif_netlink_parms(): no params data found [ 897.744132][T12456] ovs_datapath: left promiscuous mode [ 897.819268][T26490] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 897.846353][T26490] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 897.951303][T17995] Bluetooth: hci1: command tx timeout [ 897.964171][T26490] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 897.974940][T26490] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 898.195441][T26609] bridge0: port 1(bridge_slave_0) entered blocking state [ 898.211962][T26609] bridge0: port 1(bridge_slave_0) entered disabled state [ 898.219209][T26609] bridge_slave_0: entered allmulticast mode [ 898.248440][T26609] bridge_slave_0: entered promiscuous mode [ 898.311232][T26609] bridge0: port 2(bridge_slave_1) entered blocking state [ 898.321426][T26609] bridge0: port 2(bridge_slave_1) entered disabled state [ 898.328656][T26609] bridge_slave_1: entered allmulticast mode [ 898.342251][T26609] bridge_slave_1: entered promiscuous mode [ 898.389168][T12456] hsr_slave_0: left promiscuous mode [ 898.408424][T12456] hsr_slave_1: left promiscuous mode [ 898.414983][T12456] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 898.429933][T12456] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 898.446393][T12456] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 898.460409][T12456] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 898.491140][T12456] veth1_macvtap: left promiscuous mode [ 898.498323][T12456] veth0_macvtap: left promiscuous mode [ 898.510637][T12456] veth1_vlan: left promiscuous mode [ 898.527109][T12456] veth0_vlan: left promiscuous mode [ 898.911458][T17995] Bluetooth: hci3: command tx timeout [ 899.405124][T12456] team0 (unregistering): Port device team_slave_1 removed [ 899.483621][T12456] team0 (unregistering): Port device team_slave_0 removed [ 900.031188][T17995] Bluetooth: hci1: command tx timeout [ 900.444771][T26609] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 900.541575][T26609] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 900.773602][T26609] team0: Port device team_slave_0 added [ 900.806655][T26609] team0: Port device team_slave_1 added [ 900.826223][T26296] veth0_vlan: entered promiscuous mode [ 900.972534][T26490] 8021q: adding VLAN 0 to HW filter on device bond0 [ 900.998000][T26296] veth1_vlan: entered promiscuous mode [ 901.044094][T26609] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 901.055242][T26609] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 901.103783][T26609] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 901.194040][T26609] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 901.211048][T26609] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 901.257964][T26609] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 901.282802][T26296] veth0_macvtap: entered promiscuous mode [ 901.406238][T26490] 8021q: adding VLAN 0 to HW filter on device team0 [ 901.424220][T26296] veth1_macvtap: entered promiscuous mode [ 901.532547][T26296] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 901.553797][T26296] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 901.575860][T26296] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 901.653366][T12430] bridge0: port 1(bridge_slave_0) entered blocking state [ 901.660567][T12430] bridge0: port 1(bridge_slave_0) entered forwarding state [ 901.709897][T26609] hsr_slave_0: entered promiscuous mode [ 901.716643][T26609] hsr_slave_1: entered promiscuous mode [ 901.821480][ T4959] bridge0: port 2(bridge_slave_1) entered blocking state [ 901.828622][ T4959] bridge0: port 2(bridge_slave_1) entered forwarding state [ 901.862429][T26296] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 901.882596][T26296] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 901.902513][T26296] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 902.003522][T26296] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 902.031329][T26296] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 902.040086][T26296] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 902.069219][T26296] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 902.111577][T17995] Bluetooth: hci1: command tx timeout [ 902.274115][T26490] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 902.491825][ T8373] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 902.499692][ T8373] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 902.526727][T26490] veth0_vlan: entered promiscuous mode [ 902.589250][T26490] veth1_vlan: entered promiscuous mode [ 902.704263][ T4959] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 902.714007][ T4959] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 902.765758][T26490] veth0_macvtap: entered promiscuous mode [ 902.802223][T26490] veth1_macvtap: entered promiscuous mode [ 902.828111][T26490] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 902.851097][T26490] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 902.877102][T26490] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 902.901489][T26490] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 902.933353][T26490] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 903.009040][T26490] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 903.047702][T26490] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 903.062860][T26490] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 903.091027][T26490] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 903.112355][T26490] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 903.125820][T26490] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 903.140182][T26753] nbd: must specify at least one socket [ 903.155088][T26490] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 903.181043][T26490] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 903.189802][T26490] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 903.477114][T12462] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 903.490304][T12462] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 903.548709][ T8373] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 903.581232][ T8373] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 903.698924][T26609] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 903.738045][T26609] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 903.766819][T26609] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 903.818069][T26609] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 904.092866][T26609] 8021q: adding VLAN 0 to HW filter on device bond0 [ 904.150528][T26609] 8021q: adding VLAN 0 to HW filter on device team0 [ 904.188990][ T8373] bridge0: port 1(bridge_slave_0) entered blocking state [ 904.196199][ T8373] bridge0: port 1(bridge_slave_0) entered forwarding state [ 904.202033][T17995] Bluetooth: hci1: command tx timeout [ 904.283350][ T8373] bridge0: port 2(bridge_slave_1) entered blocking state [ 904.290503][ T8373] bridge0: port 2(bridge_slave_1) entered forwarding state [ 904.465610][T26791] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3347'. [ 904.786223][T26609] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 904.923904][T26816] FAULT_INJECTION: forcing a failure. [ 904.923904][T26816] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 904.969309][T26816] CPU: 1 UID: 0 PID: 26816 Comm: syz.9.3351 Not tainted 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 904.980150][T26816] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 904.990245][T26816] Call Trace: [ 904.993550][T26816] [ 904.996505][T26816] dump_stack_lvl+0x16c/0x1f0 [ 905.001219][T26816] should_fail_ex+0x497/0x5b0 [ 905.005929][T26816] _copy_to_iter+0x29b/0x1400 [ 905.010649][T26816] ? __pfx__copy_to_iter+0x10/0x10 [ 905.015798][T26816] ? __virt_addr_valid+0x1a4/0x590 [ 905.020954][T26816] ? __virt_addr_valid+0x5e/0x590 [ 905.026013][T26816] ? __phys_addr_symbol+0x30/0x80 [ 905.031069][T26816] ? __check_object_size+0x488/0x710 [ 905.036491][T26816] simple_copy_to_iter+0x4f/0x80 [ 905.041470][T26816] __skb_datagram_iter+0x122/0x8c0 [ 905.046619][T26816] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 905.052295][T26816] ? skb_recv_datagram+0x89/0xc0 [ 905.057271][T26816] ? rcu_is_watching+0x12/0xc0 [ 905.062070][T26816] skb_copy_datagram_iter+0x40/0x50 [ 905.067318][T26816] netlink_recvmsg+0x299/0xf30 [ 905.072127][T26816] ? __pfx_netlink_recvmsg+0x10/0x10 [ 905.077444][T26816] ? aa_sk_perm+0x2f5/0xb20 [ 905.081992][T26816] ? __pfx_aa_sk_perm+0x10/0x10 [ 905.086965][T26816] ? aa_file_perm+0x4d5/0xfe0 [ 905.091689][T26816] sock_recvmsg+0x1f6/0x250 [ 905.096240][T26816] sock_read_iter+0x2bb/0x3b0 [ 905.100954][T26816] ? __pfx_sock_read_iter+0x10/0x10 [ 905.106198][T26816] ? bpf_lsm_file_permission+0x9/0x10 [ 905.111601][T26816] ? security_file_permission+0x71/0x210 [ 905.117269][T26816] vfs_read+0xa4c/0xbe0 [ 905.121463][T26816] ? __pfx_vfs_read+0x10/0x10 [ 905.126262][T26816] ? __fget_files+0x40/0x3f0 [ 905.130895][T26816] ksys_read+0x1fa/0x260 [ 905.135168][T26816] ? __pfx_ksys_read+0x10/0x10 [ 905.139974][T26816] do_syscall_64+0xcd/0x250 [ 905.144508][T26816] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 905.150443][T26816] RIP: 0033:0x7efe40f7e719 [ 905.154881][T26816] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 905.174525][T26816] RSP: 002b:00007efe41d8f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 905.182984][T26816] RAX: ffffffffffffffda RBX: 00007efe41135f80 RCX: 00007efe40f7e719 [ 905.190983][T26816] RDX: 0000000000000f34 RSI: 0000000000000000 RDI: 0000000000000003 [ 905.198992][T26816] RBP: 00007efe41d8f090 R08: 0000000000000000 R09: 0000000000000000 [ 905.206996][T26816] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 905.214998][T26816] R13: 0000000000000000 R14: 00007efe41135f80 R15: 00007ffe5199ae88 [ 905.223014][T26816] [ 905.480006][T26609] veth0_vlan: entered promiscuous mode [ 905.523057][T26609] veth1_vlan: entered promiscuous mode [ 905.616335][T26609] veth0_macvtap: entered promiscuous mode [ 905.664002][T26609] veth1_macvtap: entered promiscuous mode [ 905.781750][T26609] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 905.792419][T26609] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 905.802390][T26609] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 905.812914][T26609] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 905.823012][T26609] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 905.833521][T26609] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 905.844895][T26609] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 905.854855][T26609] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 905.865443][T26609] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 905.875609][T26609] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 905.886302][T26609] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 905.896942][T26609] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 905.907835][T26609] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 905.920214][T26609] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 905.930822][T26609] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 905.939595][T26609] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 905.948414][T26609] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 905.957401][T26609] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 906.138085][T12462] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 906.175495][T12462] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 906.272409][ T8373] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 906.280280][ T8373] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 906.453755][T26862] netlink: 342 bytes leftover after parsing attributes in process `syz.9.3358'. [ 906.515375][T26863] netlink: 342 bytes leftover after parsing attributes in process `syz.9.3358'. [ 907.750526][T26902] FAULT_INJECTION: forcing a failure. [ 907.750526][T26902] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 907.816718][T26902] CPU: 0 UID: 0 PID: 26902 Comm: syz.4.3362 Not tainted 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 907.827553][T26902] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 907.837638][T26902] Call Trace: [ 907.840940][T26902] [ 907.843898][T26902] dump_stack_lvl+0x16c/0x1f0 [ 907.848603][T26902] should_fail_ex+0x497/0x5b0 [ 907.853315][T26902] ? fs_reclaim_acquire+0xae/0x150 [ 907.858463][T26902] should_fail_alloc_page+0xe7/0x130 [ 907.863789][T26902] prepare_alloc_pages.constprop.0+0x16f/0x560 [ 907.869982][T26902] __alloc_pages_noprof+0x190/0x25a0 [ 907.875311][T26902] ? __pfx___lock_acquire+0x10/0x10 [ 907.880549][T26902] ? hlock_class+0x4e/0x130 [ 907.885081][T26902] ? mark_lock+0xb5/0xc60 [ 907.889445][T26902] ? __pfx___alloc_pages_noprof+0x10/0x10 [ 907.895305][T26902] ? __pfx_mark_lock+0x10/0x10 [ 907.900120][T26902] ? trace_lock_acquire+0x14a/0x1d0 [ 907.905363][T26902] ? hlock_class+0x4e/0x130 [ 907.909902][T26902] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 907.915839][T26902] ? policy_nodemask+0xea/0x4e0 [ 907.920735][T26902] alloc_pages_mpol_noprof+0x2c9/0x610 [ 907.926241][T26902] ? __pfx_alloc_pages_mpol_noprof+0x10/0x10 [ 907.932265][T26902] ? __pfx___lock_acquire+0x10/0x10 [ 907.937513][T26902] ? __pfx_filemap_map_pages+0x10/0x10 [ 907.943014][T26902] pte_alloc_one+0x20/0x360 [ 907.947549][T26902] __do_fault+0x320/0x490 [ 907.951912][T26902] ? __pfx_filemap_map_pages+0x10/0x10 [ 907.957409][T26902] do_pte_missing+0x1a8/0x3e50 [ 907.962227][T26902] __handle_mm_fault+0x100a/0x2a10 [ 907.967384][T26902] ? __pfx_mt_find+0x10/0x10 [ 907.972002][T26902] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 907.977677][T26902] ? __pfx___handle_mm_fault+0x10/0x10 [ 907.983191][T26902] ? find_vma+0xc0/0x140 [ 907.987468][T26902] ? __pfx_find_vma+0x10/0x10 [ 907.992180][T26902] handle_mm_fault+0x3fa/0xaa0 [ 907.996989][T26902] do_user_addr_fault+0x7a3/0x13f0 [ 908.002147][T26902] exc_page_fault+0x5c/0xc0 [ 908.006683][T26902] asm_exc_page_fault+0x26/0x30 [ 908.011569][T26902] RIP: 0010:rep_movs_alternative+0x4a/0x70 [ 908.017416][T26902] Code: 75 f1 c3 cc cc cc cc 66 0f 1f 84 00 00 00 00 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 df 83 f9 08 73 e8 eb c9 a4 c3 cc cc cc cc 48 89 c8 48 c1 e9 03 83 e0 07 f3 48 a5 89 c1 [ 908.037065][T26902] RSP: 0018:ffffc90004307890 EFLAGS: 00050202 [ 908.043177][T26902] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 0000000000000f34 [ 908.051177][T26902] RDX: ffffed100b94cbbf RSI: ffff88805ca64ec0 RDI: 0000000000000000 [ 908.059181][T26902] RBP: ffffc90004307c60 R08: 0000000000000000 R09: ffffed100b94cbbe [ 908.067186][T26902] R10: ffff88805ca65df3 R11: 0000000000000000 R12: 0000000000000f34 [ 908.075188][T26902] R13: 00007fffffffefff R14: ffff88805ca64ec0 R15: 0000000000000f34 [ 908.083206][T26902] _copy_to_iter+0x384/0x1400 [ 908.087928][T26902] ? __pfx__copy_to_iter+0x10/0x10 [ 908.093068][T26902] ? __virt_addr_valid+0x1a4/0x590 [ 908.098221][T26902] ? __virt_addr_valid+0x5e/0x590 [ 908.103278][T26902] ? __phys_addr_symbol+0x30/0x80 [ 908.108333][T26902] ? __check_object_size+0x488/0x710 [ 908.113665][T26902] simple_copy_to_iter+0x4f/0x80 [ 908.118641][T26902] __skb_datagram_iter+0x122/0x8c0 [ 908.123796][T26902] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 908.129466][T26902] ? skb_recv_datagram+0x89/0xc0 [ 908.134443][T26902] ? rcu_is_watching+0x12/0xc0 [ 908.139245][T26902] skb_copy_datagram_iter+0x40/0x50 [ 908.144482][T26902] netlink_recvmsg+0x299/0xf30 [ 908.149284][T26902] ? __pfx_netlink_recvmsg+0x10/0x10 [ 908.154601][T26902] ? aa_sk_perm+0x2f5/0xb20 [ 908.159157][T26902] ? __pfx_aa_sk_perm+0x10/0x10 [ 908.164049][T26902] ? aa_file_perm+0x4d5/0xfe0 [ 908.168775][T26902] sock_recvmsg+0x1f6/0x250 [ 908.173317][T26902] sock_read_iter+0x2bb/0x3b0 [ 908.178032][T26902] ? __pfx_sock_read_iter+0x10/0x10 [ 908.183281][T26902] ? bpf_lsm_file_permission+0x9/0x10 [ 908.188684][T26902] ? security_file_permission+0x71/0x210 [ 908.194355][T26902] vfs_read+0xa4c/0xbe0 [ 908.198549][T26902] ? __pfx_vfs_read+0x10/0x10 [ 908.203264][T26902] ? __fget_files+0x40/0x3f0 [ 908.207900][T26902] ksys_read+0x1fa/0x260 [ 908.212173][T26902] ? __pfx_ksys_read+0x10/0x10 [ 908.216979][T26902] do_syscall_64+0xcd/0x250 [ 908.221513][T26902] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 908.227442][T26902] RIP: 0033:0x7fe50537e719 [ 908.231889][T26902] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 908.251534][T26902] RSP: 002b:00007fe5061b0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 908.259989][T26902] RAX: ffffffffffffffda RBX: 00007fe505535f80 RCX: 00007fe50537e719 [ 908.267986][T26902] RDX: 0000000000000f34 RSI: 0000000000000000 RDI: 0000000000000003 [ 908.275983][T26902] RBP: 00007fe5061b0090 R08: 0000000000000000 R09: 0000000000000000 [ 908.283978][T26902] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 908.291971][T26902] R13: 0000000000000000 R14: 00007fe505535f80 R15: 00007ffca9d3e828 [ 908.299981][T26902] [ 909.919575][T26928] FAULT_INJECTION: forcing a failure. [ 909.919575][T26928] name failslab, interval 1, probability 0, space 0, times 0 [ 909.950607][T26928] CPU: 1 UID: 0 PID: 26928 Comm: syz.8.3371 Not tainted 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 909.961437][T26928] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 909.971522][T26928] Call Trace: [ 909.974826][T26928] [ 909.977789][T26928] dump_stack_lvl+0x16c/0x1f0 [ 909.982503][T26928] should_fail_ex+0x497/0x5b0 [ 909.987205][T26928] ? fs_reclaim_acquire+0xae/0x150 [ 909.992350][T26928] should_failslab+0xc2/0x120 [ 909.997065][T26928] kmem_cache_alloc_noprof+0x6e/0x2f0 [ 910.002475][T26928] ? ptlock_alloc+0x1f/0x70 [ 910.007018][T26928] ? __pfx_filemap_map_pages+0x10/0x10 [ 910.012511][T26928] ptlock_alloc+0x1f/0x70 [ 910.016877][T26928] pte_alloc_one+0x74/0x360 [ 910.021411][T26928] __do_fault+0x320/0x490 [ 910.025779][T26928] ? __pfx_filemap_map_pages+0x10/0x10 [ 910.031269][T26928] do_pte_missing+0x1a8/0x3e50 [ 910.036083][T26928] __handle_mm_fault+0x100a/0x2a10 [ 910.041237][T26928] ? __pfx_mt_find+0x10/0x10 [ 910.045855][T26928] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 910.051526][T26928] ? __pfx___handle_mm_fault+0x10/0x10 [ 910.057044][T26928] ? find_vma+0xc0/0x140 [ 910.061324][T26928] ? __pfx_find_vma+0x10/0x10 [ 910.066045][T26928] handle_mm_fault+0x3fa/0xaa0 [ 910.070859][T26928] do_user_addr_fault+0x7a3/0x13f0 [ 910.076014][T26928] exc_page_fault+0x5c/0xc0 [ 910.080561][T26928] asm_exc_page_fault+0x26/0x30 [ 910.085448][T26928] RIP: 0010:rep_movs_alternative+0x4a/0x70 [ 910.091290][T26928] Code: 75 f1 c3 cc cc cc cc 66 0f 1f 84 00 00 00 00 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 df 83 f9 08 73 e8 eb c9 a4 c3 cc cc cc cc 48 89 c8 48 c1 e9 03 83 e0 07 f3 48 a5 89 c1 [ 910.110933][T26928] RSP: 0018:ffffc90003d2f890 EFLAGS: 00050202 [ 910.117032][T26928] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 0000000000000f34 [ 910.125031][T26928] RDX: ffffed10103b8bbf RSI: ffff888081dc4ec0 RDI: 0000000000000000 [ 910.133032][T26928] RBP: ffffc90003d2fc60 R08: 0000000000000000 R09: ffffed10103b8bbe [ 910.141028][T26928] R10: ffff888081dc5df3 R11: 0000000000000000 R12: 0000000000000f34 [ 910.149029][T26928] R13: 00007fffffffefff R14: ffff888081dc4ec0 R15: 0000000000000f34 [ 910.157048][T26928] _copy_to_iter+0x384/0x1400 [ 910.161771][T26928] ? __pfx__copy_to_iter+0x10/0x10 [ 910.166923][T26928] ? __virt_addr_valid+0x1a4/0x590 [ 910.172078][T26928] ? __virt_addr_valid+0x5e/0x590 [ 910.177154][T26928] ? __phys_addr_symbol+0x30/0x80 [ 910.182219][T26928] ? __check_object_size+0x488/0x710 [ 910.187549][T26928] simple_copy_to_iter+0x4f/0x80 [ 910.192528][T26928] __skb_datagram_iter+0x122/0x8c0 [ 910.197682][T26928] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 910.203354][T26928] ? skb_recv_datagram+0x89/0xc0 [ 910.208336][T26928] ? rcu_is_watching+0x12/0xc0 [ 910.213138][T26928] skb_copy_datagram_iter+0x40/0x50 [ 910.218380][T26928] netlink_recvmsg+0x299/0xf30 [ 910.223195][T26928] ? __pfx_netlink_recvmsg+0x10/0x10 [ 910.228516][T26928] ? aa_sk_perm+0x2f5/0xb20 [ 910.233062][T26928] ? __pfx_aa_sk_perm+0x10/0x10 [ 910.237945][T26928] ? aa_file_perm+0x4d5/0xfe0 [ 910.242662][T26928] sock_recvmsg+0x1f6/0x250 [ 910.247202][T26928] sock_read_iter+0x2bb/0x3b0 [ 910.251915][T26928] ? __pfx_sock_read_iter+0x10/0x10 [ 910.257163][T26928] ? bpf_lsm_file_permission+0x9/0x10 [ 910.262571][T26928] ? security_file_permission+0x71/0x210 [ 910.268239][T26928] vfs_read+0xa4c/0xbe0 [ 910.272430][T26928] ? __pfx_vfs_read+0x10/0x10 [ 910.277133][T26928] ? __fget_files+0x40/0x3f0 [ 910.281775][T26928] ksys_read+0x1fa/0x260 [ 910.286048][T26928] ? __pfx_ksys_read+0x10/0x10 [ 910.290846][T26928] do_syscall_64+0xcd/0x250 [ 910.295374][T26928] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 910.301297][T26928] RIP: 0033:0x7f363397e719 [ 910.305736][T26928] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 910.325379][T26928] RSP: 002b:00007f3634726038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 910.333824][T26928] RAX: ffffffffffffffda RBX: 00007f3633b35f80 RCX: 00007f363397e719 [ 910.341822][T26928] RDX: 0000000000000f34 RSI: 0000000000000000 RDI: 0000000000000003 [ 910.349812][T26928] RBP: 00007f3634726090 R08: 0000000000000000 R09: 0000000000000000 [ 910.357806][T26928] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 910.365800][T26928] R13: 0000000000000000 R14: 00007f3633b35f80 R15: 00007ffd10b6a2f8 [ 910.373817][T26928] [ 912.315003][T26998] FAULT_INJECTION: forcing a failure. [ 912.315003][T26998] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 912.381122][T26998] CPU: 1 UID: 0 PID: 26998 Comm: syz.4.3383 Not tainted 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 912.391949][T26998] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 912.402032][T26998] Call Trace: [ 912.405316][T26998] [ 912.408248][T26998] dump_stack_lvl+0x16c/0x1f0 [ 912.412943][T26998] should_fail_ex+0x497/0x5b0 [ 912.417622][T26998] ? fs_reclaim_acquire+0xae/0x150 [ 912.422742][T26998] should_fail_alloc_page+0xe7/0x130 [ 912.428040][T26998] prepare_alloc_pages.constprop.0+0x16f/0x560 [ 912.434206][T26998] ? __lock_acquire+0xbdd/0x3ce0 [ 912.439159][T26998] __alloc_pages_noprof+0x190/0x25a0 [ 912.444458][T26998] ? __pfx_mark_lock+0x10/0x10 [ 912.449251][T26998] ? __pfx___lock_acquire+0x10/0x10 [ 912.454472][T26998] ? hlock_class+0x4e/0x130 [ 912.459001][T26998] ? __pfx___alloc_pages_noprof+0x10/0x10 [ 912.464734][T26998] ? find_held_lock+0x2d/0x110 [ 912.469508][T26998] ? hlock_class+0x4e/0x130 [ 912.474017][T26998] ? __lock_acquire+0xbdd/0x3ce0 [ 912.478969][T26998] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 912.484873][T26998] ? policy_nodemask+0xea/0x4e0 [ 912.489739][T26998] alloc_pages_mpol_noprof+0x2c9/0x610 [ 912.495214][T26998] ? __pfx_alloc_pages_mpol_noprof+0x10/0x10 [ 912.501216][T26998] ? find_held_lock+0x2d/0x110 [ 912.505991][T26998] folio_alloc_mpol_noprof+0x36/0xd0 [ 912.511299][T26998] shmem_alloc_folio+0x135/0x160 [ 912.516241][T26998] shmem_alloc_and_add_folio+0x48b/0xc00 [ 912.521892][T26998] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 912.528056][T26998] ? shmem_allowable_huge_orders+0xcd/0x3f0 [ 912.533964][T26998] shmem_get_folio_gfp+0x689/0x1530 [ 912.539171][T26998] ? mark_lock+0xb5/0xc60 [ 912.543511][T26998] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 912.549160][T26998] ? __pfx_mark_lock+0x10/0x10 [ 912.553936][T26998] shmem_fault+0x200/0xae0 [ 912.558360][T26998] ? __pfx_shmem_fault+0x10/0x10 [ 912.563303][T26998] ? __pfx_lock_release+0x10/0x10 [ 912.568337][T26998] ? __pfx_filemap_map_pages+0x10/0x10 [ 912.573805][T26998] ? mark_held_locks+0x9f/0xe0 [ 912.578580][T26998] ? pte_alloc_one+0x293/0x360 [ 912.583352][T26998] ? __pfx_filemap_map_pages+0x10/0x10 [ 912.588816][T26998] __do_fault+0x10a/0x490 [ 912.593152][T26998] ? __pfx_filemap_map_pages+0x10/0x10 [ 912.598619][T26998] do_pte_missing+0x1a8/0x3e50 [ 912.603403][T26998] __handle_mm_fault+0x100a/0x2a10 [ 912.608531][T26998] ? __pfx_mt_find+0x10/0x10 [ 912.613123][T26998] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 912.618765][T26998] ? __pfx___handle_mm_fault+0x10/0x10 [ 912.624244][T26998] ? find_vma+0xc0/0x140 [ 912.628497][T26998] ? __pfx_find_vma+0x10/0x10 [ 912.633185][T26998] handle_mm_fault+0x3fa/0xaa0 [ 912.637964][T26998] do_user_addr_fault+0x7a3/0x13f0 [ 912.643144][T26998] exc_page_fault+0x5c/0xc0 [ 912.647665][T26998] asm_exc_page_fault+0x26/0x30 [ 912.652530][T26998] RIP: 0010:rep_movs_alternative+0x4a/0x70 [ 912.658347][T26998] Code: 75 f1 c3 cc cc cc cc 66 0f 1f 84 00 00 00 00 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 df 83 f9 08 73 e8 eb c9 a4 c3 cc cc cc cc 48 89 c8 48 c1 e9 03 83 e0 07 f3 48 a5 89 c1 [ 912.677955][T26998] RSP: 0018:ffffc90003bcf890 EFLAGS: 00050202 [ 912.684026][T26998] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 0000000000000f34 [ 912.692000][T26998] RDX: ffffed100d6c9bbf RSI: ffff88806b64cec0 RDI: 0000000000000000 [ 912.699970][T26998] RBP: ffffc90003bcfc60 R08: 0000000000000000 R09: ffffed100d6c9bbe [ 912.707944][T26998] R10: ffff88806b64ddf3 R11: 0000000000000000 R12: 0000000000000f34 [ 912.715932][T26998] R13: 00007fffffffefff R14: ffff88806b64cec0 R15: 0000000000000f34 [ 912.723919][T26998] _copy_to_iter+0x384/0x1400 [ 912.728618][T26998] ? __pfx__copy_to_iter+0x10/0x10 [ 912.733732][T26998] ? __virt_addr_valid+0x1a4/0x590 [ 912.738855][T26998] ? __virt_addr_valid+0x5e/0x590 [ 912.743887][T26998] ? __phys_addr_symbol+0x30/0x80 [ 912.748917][T26998] ? __check_object_size+0x488/0x710 [ 912.754218][T26998] simple_copy_to_iter+0x4f/0x80 [ 912.759316][T26998] __skb_datagram_iter+0x122/0x8c0 [ 912.764454][T26998] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 912.770118][T26998] ? skb_recv_datagram+0x89/0xc0 [ 912.775071][T26998] ? rcu_is_watching+0x12/0xc0 [ 912.779855][T26998] skb_copy_datagram_iter+0x40/0x50 [ 912.785067][T26998] netlink_recvmsg+0x299/0xf30 [ 912.789844][T26998] ? __pfx_netlink_recvmsg+0x10/0x10 [ 912.795134][T26998] ? aa_sk_perm+0x2f5/0xb20 [ 912.799650][T26998] ? __pfx_aa_sk_perm+0x10/0x10 [ 912.804513][T26998] ? aa_file_perm+0x4d5/0xfe0 [ 912.809202][T26998] sock_recvmsg+0x1f6/0x250 [ 912.813721][T26998] sock_read_iter+0x2bb/0x3b0 [ 912.818406][T26998] ? __pfx_sock_read_iter+0x10/0x10 [ 912.823624][T26998] ? bpf_lsm_file_permission+0x9/0x10 [ 912.829004][T26998] ? security_file_permission+0x71/0x210 [ 912.834646][T26998] vfs_read+0xa4c/0xbe0 [ 912.838810][T26998] ? __pfx_vfs_read+0x10/0x10 [ 912.843500][T26998] ? __fget_files+0x40/0x3f0 [ 912.848109][T26998] ksys_read+0x1fa/0x260 [ 912.852361][T26998] ? __pfx_ksys_read+0x10/0x10 [ 912.857136][T26998] do_syscall_64+0xcd/0x250 [ 912.861651][T26998] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 912.867557][T26998] RIP: 0033:0x7fe50537e719 [ 912.871976][T26998] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 912.891589][T26998] RSP: 002b:00007fe5061b0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 912.900008][T26998] RAX: ffffffffffffffda RBX: 00007fe505535f80 RCX: 00007fe50537e719 [ 912.907982][T26998] RDX: 0000000000000f34 RSI: 0000000000000000 RDI: 0000000000000003 [ 912.915957][T26998] RBP: 00007fe5061b0090 R08: 0000000000000000 R09: 0000000000000000 [ 912.923929][T26998] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 912.931900][T26998] R13: 0000000000000000 R14: 00007fe505535f80 R15: 00007ffca9d3e828 [ 912.939886][T26998] [ 913.448445][T27020] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3386'. [ 915.841212][T27092] delete_channel: no stack [ 917.753798][T27142] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3408'. [ 917.813687][T27145] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3408'. [ 917.877160][T27142] team0: entered promiscuous mode [ 917.924744][T27142] team_slave_0: entered promiscuous mode [ 917.930586][T27142] team_slave_1: entered promiscuous mode [ 918.544863][T27170] netlink: 229 bytes leftover after parsing attributes in process `syz.4.3410'. [ 920.874621][T27250] FAULT_INJECTION: forcing a failure. [ 920.874621][T27250] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 920.971448][T27250] CPU: 1 UID: 0 PID: 27250 Comm: syz.4.3424 Not tainted 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 920.982289][T27250] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 920.992376][T27250] Call Trace: [ 920.995689][T27250] [ 920.998650][T27250] dump_stack_lvl+0x16c/0x1f0 [ 921.003366][T27250] should_fail_ex+0x497/0x5b0 [ 921.008168][T27250] _copy_to_user+0x32/0xd0 [ 921.012624][T27250] simple_read_from_buffer+0xd0/0x160 [ 921.018044][T27250] proc_fail_nth_read+0x198/0x270 [ 921.023108][T27250] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 921.028696][T27250] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 921.034279][T27250] vfs_read+0x1df/0xbe0 [ 921.038472][T27250] ? __fget_files+0x23a/0x3f0 [ 921.043178][T27250] ? fdget_pos+0x24c/0x360 [ 921.047627][T27250] ? __pfx_lock_release+0x10/0x10 [ 921.052688][T27250] ? trace_lock_acquire+0x14a/0x1d0 [ 921.057923][T27250] ? __pfx_vfs_read+0x10/0x10 [ 921.062631][T27250] ? __pfx___mutex_lock+0x10/0x10 [ 921.067712][T27250] ? __fget_files+0x244/0x3f0 [ 921.072431][T27250] ksys_read+0x12f/0x260 [ 921.076709][T27250] ? __pfx_ksys_read+0x10/0x10 [ 921.081515][T27250] do_syscall_64+0xcd/0x250 [ 921.086052][T27250] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 921.091988][T27250] RIP: 0033:0x7fe50537d15c [ 921.096429][T27250] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 921.116075][T27250] RSP: 002b:00007fe5061b0030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 921.124528][T27250] RAX: ffffffffffffffda RBX: 00007fe505535f80 RCX: 00007fe50537d15c [ 921.132507][T27250] RDX: 000000000000000f RSI: 00007fe5061b00a0 RDI: 0000000000000004 [ 921.140484][T27250] RBP: 00007fe5061b0090 R08: 0000000000000000 R09: 0000000000000000 [ 921.148465][T27250] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 921.156442][T27250] R13: 0000000000000000 R14: 00007fe505535f80 R15: 00007ffca9d3e828 [ 921.164431][T27250] [ 924.716895][T27387] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3445'. [ 925.588013][T27414] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3449'. [ 927.866162][T27484] netlink: 136 bytes leftover after parsing attributes in process `syz.9.3461'. [ 930.542300][T27603] netlink: 'syz.4.3477': attribute type 11 has an invalid length. [ 930.550191][T27603] netlink: 'syz.4.3477': attribute type 11 has an invalid length. [ 931.635372][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.642205][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 933.049751][ T29] audit: type=1326 audit(8277292045.490:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27701 comm="syz.0.3491" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8310f7e719 code=0x0 [ 934.267073][T27757] netlink: 5 bytes leftover after parsing attributes in process `syz.0.3497'. [ 934.340658][ T29] audit: type=1326 audit(8277292046.780:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27752 comm="syz.8.3499" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f363397e719 code=0x0 [ 938.995892][T27925] RDS: rds_bind could not find a transport for ::ffff:118.81.195.0, load rds_tcp or rds_rdma? [ 943.477494][T28075] kexec: Could not allocate control_code_buffer [ 944.794934][T28130] Process accounting resumed [ 952.683009][T28327] ptrace attach of "./syz-executor exec"[24886] was attempted by "./syz-executor exec"[28327] [ 954.291254][T28331] Bluetooth: hci0: command 0x0406 tx timeout [ 954.973409][T28403] netlink: 152 bytes leftover after parsing attributes in process `syz.8.3593'. [ 956.495768][T17995] Bluetooth: hci3: Received unexpected HCI Event 0x00 [ 957.501360][T28479] netlink: 'syz.9.3603': attribute type 11 has an invalid length. [ 957.522181][T28479] netlink: 44 bytes leftover after parsing attributes in process `syz.9.3603'. [ 959.577247][T28561] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3618'. [ 959.856317][ T5975] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 960.274581][ T5975] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 960.463283][ T5975] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 960.617480][ T5975] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 960.977019][ T5975] bridge_slave_1: left allmulticast mode [ 960.983446][ T5975] bridge_slave_1: left promiscuous mode [ 960.989195][ T5975] bridge0: port 2(bridge_slave_1) entered disabled state [ 961.070169][ T5975] bridge_slave_0: left allmulticast mode [ 961.078823][ T5975] bridge_slave_0: left promiscuous mode [ 961.085109][ T5975] bridge0: port 1(bridge_slave_0) entered disabled state [ 962.609200][T28331] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 962.631031][T28331] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 962.639486][T28331] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 962.647597][T28331] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 962.651897][T28663] netlink: 28 bytes leftover after parsing attributes in process `syz.9.3634'. [ 962.669069][T28331] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 962.676702][T28331] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 963.184694][ T5975] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 963.332582][ T5975] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 963.428719][ T5975] bond0 (unregistering): Released all slaves [ 964.751186][T28331] Bluetooth: hci0: command tx timeout [ 965.478239][T28664] chnl_net:caif_netlink_parms(): no params data found [ 965.649244][ T5975] hsr_slave_0: left promiscuous mode [ 965.666417][ T5975] hsr_slave_1: left promiscuous mode [ 965.695876][ T5975] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 965.719375][ T5975] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 965.741900][ T5975] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 965.765022][ T5975] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 965.836902][ T5975] veth1_macvtap: left promiscuous mode [ 965.861084][ T5975] veth0_macvtap: left promiscuous mode [ 965.866742][ T5975] veth1_vlan: left promiscuous mode [ 965.891130][ T5975] veth0_vlan: left promiscuous mode [ 966.843990][T28331] Bluetooth: hci0: command tx timeout [ 967.917319][ T5975] team_slave_1 (unregistering): left promiscuous mode [ 967.972848][ T5975] team0 (unregistering): Port device team_slave_1 removed [ 968.045003][ T5975] team_slave_0 (unregistering): left promiscuous mode [ 968.056302][ T5975] team0 (unregistering): Port device team_slave_0 removed [ 968.795802][T28664] bridge0: port 1(bridge_slave_0) entered blocking state [ 968.809108][T28664] bridge0: port 1(bridge_slave_0) entered disabled state [ 968.819351][T28664] bridge_slave_0: entered allmulticast mode [ 968.843361][T28664] bridge_slave_0: entered promiscuous mode [ 968.853495][T28664] bridge0: port 2(bridge_slave_1) entered blocking state [ 968.860638][T28664] bridge0: port 2(bridge_slave_1) entered disabled state [ 968.887554][T28664] bridge_slave_1: entered allmulticast mode [ 968.924581][T28664] bridge_slave_1: entered promiscuous mode [ 968.994630][T28331] Bluetooth: hci0: command tx timeout [ 969.128685][T28664] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 969.152479][T28664] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 969.264358][T28664] team0: Port device team_slave_0 added [ 969.318634][T28664] team0: Port device team_slave_1 added [ 969.416998][T28664] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 969.432654][T28664] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 969.500996][T28664] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 969.630335][ T5975] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 969.648381][T17995] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 969.653800][T28664] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 969.666022][T28664] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 969.666092][T17995] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 969.709047][T28664] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 969.736536][T17995] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 969.778844][T17995] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 969.816148][T17995] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 969.827976][T17995] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 969.924385][ T5975] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 969.954204][T28664] hsr_slave_0: entered promiscuous mode [ 969.993246][T28664] hsr_slave_1: entered promiscuous mode [ 969.999606][T28664] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 970.010208][T28664] Cannot create hsr debugfs directory [ 970.150707][ T5975] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 970.237740][T28803] .': entered promiscuous mode [ 970.316279][ T5975] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 970.755887][T28782] chnl_net:caif_netlink_parms(): no params data found [ 970.946056][ T5975] bridge_slave_1: left allmulticast mode [ 970.957838][ T5975] bridge_slave_1: left promiscuous mode [ 970.981813][ T5975] bridge0: port 2(bridge_slave_1) entered disabled state [ 970.994300][ T5975] bridge_slave_0: left allmulticast mode [ 971.000018][ T5975] bridge_slave_0: left promiscuous mode [ 971.030687][ T5975] bridge0: port 1(bridge_slave_0) entered disabled state [ 971.071876][T28331] Bluetooth: hci0: command tx timeout [ 971.958589][T28331] Bluetooth: hci3: command tx timeout [ 972.086317][ T5975] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 972.114002][ T5975] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 972.126327][ T5975] bond0 (unregistering): Released all slaves [ 972.370389][T28878] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 972.429481][T28878] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 972.957890][T28782] bridge0: port 1(bridge_slave_0) entered blocking state [ 972.965888][T28782] bridge0: port 1(bridge_slave_0) entered disabled state [ 972.999814][T28782] bridge_slave_0: entered allmulticast mode [ 973.012397][T28782] bridge_slave_0: entered promiscuous mode [ 973.032792][T28782] bridge0: port 2(bridge_slave_1) entered blocking state [ 973.039915][T28782] bridge0: port 2(bridge_slave_1) entered disabled state [ 973.067538][T28782] bridge_slave_1: entered allmulticast mode [ 973.081212][T28782] bridge_slave_1: entered promiscuous mode [ 973.258166][ T5975] hsr_slave_0: left promiscuous mode [ 973.288161][ T5975] hsr_slave_1: left promiscuous mode [ 973.294882][ T5975] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 973.321257][ T5975] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 973.335228][ T5975] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 973.348641][ T5975] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 973.383025][ T5975] veth1_macvtap: left promiscuous mode [ 973.388619][ T5975] veth0_macvtap: left promiscuous mode [ 973.411395][ T5975] veth1_vlan: left promiscuous mode [ 973.416772][ T5975] veth0_vlan: left promiscuous mode [ 974.047720][T28331] Bluetooth: hci3: command tx timeout [ 974.455661][ T5975] team0 (unregistering): Port device team_slave_1 removed [ 974.546307][ T5975] team0 (unregistering): Port device team_slave_0 removed [ 975.441310][T28782] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 975.478165][T28782] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 975.564777][T28664] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 975.595976][T28664] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 975.633718][T28664] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 975.649425][T28664] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 975.740475][T28782] team0: Port device team_slave_0 added [ 975.750268][T28782] team0: Port device team_slave_1 added [ 975.826514][T28782] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 975.841100][T28782] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 975.901026][T28782] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 975.929184][T28782] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 975.941251][T28782] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 975.990986][T28782] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 976.111455][T28331] Bluetooth: hci3: command tx timeout [ 976.121438][T28782] hsr_slave_0: entered promiscuous mode [ 976.131408][T28782] hsr_slave_1: entered promiscuous mode [ 976.141313][T28782] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 976.148925][T28782] Cannot create hsr debugfs directory [ 976.296524][T28664] 8021q: adding VLAN 0 to HW filter on device bond0 [ 976.375654][T28664] 8021q: adding VLAN 0 to HW filter on device team0 [ 976.436406][ T5963] bridge0: port 1(bridge_slave_0) entered blocking state [ 976.443579][ T5963] bridge0: port 1(bridge_slave_0) entered forwarding state [ 976.577911][ T5963] bridge0: port 2(bridge_slave_1) entered blocking state [ 976.585110][ T5963] bridge0: port 2(bridge_slave_1) entered forwarding state [ 976.946296][T28782] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 976.975993][T28782] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 977.001402][T28782] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 977.025851][T28782] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 977.115257][T28664] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 977.255196][T28664] veth0_vlan: entered promiscuous mode [ 977.346416][T28782] 8021q: adding VLAN 0 to HW filter on device bond0 [ 977.356468][T28664] veth1_vlan: entered promiscuous mode [ 977.380567][T28664] veth0_macvtap: entered promiscuous mode [ 977.389859][T28664] veth1_macvtap: entered promiscuous mode [ 977.406452][T28664] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 977.417236][T28664] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 977.427379][T28664] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 977.438190][T28664] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 977.450026][T28664] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 977.484599][T28664] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 977.495536][T28664] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 977.505481][T28664] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 977.516059][T28664] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 977.528117][T28664] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 977.539058][T28664] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 977.547868][T28664] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 977.556822][T28664] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 977.565816][T28664] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 977.599535][T28782] 8021q: adding VLAN 0 to HW filter on device team0 [ 977.652590][ T5963] bridge0: port 1(bridge_slave_0) entered blocking state [ 977.659796][ T5963] bridge0: port 1(bridge_slave_0) entered forwarding state [ 977.678999][ T5963] bridge0: port 2(bridge_slave_1) entered blocking state [ 977.686200][ T5963] bridge0: port 2(bridge_slave_1) entered forwarding state [ 977.836774][T28972] netlink: 16 bytes leftover after parsing attributes in process `syz.8.3676'. [ 977.885677][ T5963] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 977.912073][ T5963] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 977.975829][ T5963] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 978.013365][ T5963] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 978.147548][T28978] can: request_module (can-proto-0) failed. [ 978.191472][T28331] Bluetooth: hci3: command tx timeout [ 978.211371][ T29] audit: type=1326 audit(8277292036.120:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28985 comm="syz.1.3631" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5efd57e719 code=0x0 [ 978.294870][T28782] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 978.378941][T28782] veth0_vlan: entered promiscuous mode [ 978.399771][T28782] veth1_vlan: entered promiscuous mode [ 978.466615][T28997] netlink: 28 bytes leftover after parsing attributes in process `syz.8.3681'. [ 978.541907][T28996] netlink: 28 bytes leftover after parsing attributes in process `syz.8.3681'. [ 978.554202][T28782] veth0_macvtap: entered promiscuous mode [ 978.570065][T28782] veth1_macvtap: entered promiscuous mode [ 978.586292][T28782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 978.596998][T28782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 978.606943][T28782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 978.617560][T28782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 978.627559][T28782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 978.638395][T28782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 978.650294][T28782] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 978.682685][T28782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 978.694648][T28782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 978.712196][T28782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 978.723181][T28782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 978.733587][T28782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 978.745307][T28782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 978.758624][T28782] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 978.775523][T28782] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 978.785144][T28782] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 978.797807][T28782] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 978.807434][T28782] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 978.904965][ T4959] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 978.928018][ T4959] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 978.957030][T12456] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 978.965667][T12456] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 979.177934][T29011] kernel read not supported for file /#)-\&[} (pid: 29011 comm: syz.1.3685) [ 979.180419][ T29] audit: type=1804 audit(8277292037.110:21): pid=29011 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.3685" name="#)-\&[}" dev="mqueue" ino=111628 res=1 errno=0 [ 979.247208][ T29] audit: type=1800 audit(8277292037.130:22): pid=29011 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.3685" name="#)-\&[}" dev="mqueue" ino=111628 res=0 errno=0 [ 980.528074][T29070] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3696'. [ 983.396743][T29198] kernel read not supported for file /#)-\&[} (pid: 29198 comm: syz.1.3712) [ 983.435590][ T29] audit: type=1800 audit(8277292041.360:23): pid=29198 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.3712" name="#)-\&[}" dev="mqueue" ino=111628 res=0 errno=0 [ 985.494236][T29255] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3721'. [ 986.140084][T29260] lo: entered allmulticast mode [ 986.330655][T29260] lo: left allmulticast mode [ 988.483639][T29355] svc: failed to register nfsdv3 RPC service (errno 111). [ 988.532340][T29355] svc: failed to register nfsaclv3 RPC service (errno 111). [ 988.766652][T29368] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3741'. [ 993.121368][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.127715][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.541437][T29540] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3767'. [ 996.083442][T12420] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 996.357146][T12420] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 996.534608][T12420] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 996.629222][T17995] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 996.642346][T17995] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 996.665018][T17995] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 996.678568][T17995] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 996.687802][T17995] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 996.697851][T17995] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 996.904424][T12420] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 997.591595][T12420] bridge_slave_1: left allmulticast mode [ 997.597312][T12420] bridge_slave_1: left promiscuous mode [ 997.623708][T12420] bridge0: port 2(bridge_slave_1) entered disabled state [ 997.657626][T12420] bridge_slave_0: left allmulticast mode [ 997.668733][T12420] bridge_slave_0: left promiscuous mode [ 997.681706][T12420] bridge0: port 1(bridge_slave_0) entered disabled state [ 998.751085][T28331] Bluetooth: hci1: command tx timeout [ 999.136184][T29697] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3787'. [ 999.234738][T12420] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 999.278539][T12420] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 999.319797][T12420] bond0 (unregistering): Released all slaves [ 999.395812][T29640] chnl_net:caif_netlink_parms(): no params data found [ 999.642359][T12420] .': left promiscuous mode [ 1000.688128][T29640] bridge0: port 1(bridge_slave_0) entered blocking state [ 1000.701953][T29640] bridge0: port 1(bridge_slave_0) entered disabled state [ 1000.709191][T29640] bridge_slave_0: entered allmulticast mode [ 1000.745936][T29640] bridge_slave_0: entered promiscuous mode [ 1000.831202][T28331] Bluetooth: hci1: command tx timeout [ 1000.896051][T29640] bridge0: port 2(bridge_slave_1) entered blocking state [ 1000.913894][T29640] bridge0: port 2(bridge_slave_1) entered disabled state [ 1000.931733][T29640] bridge_slave_1: entered allmulticast mode [ 1000.951221][T29640] bridge_slave_1: entered promiscuous mode [ 1001.232176][T29640] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1001.253710][T29640] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1001.418513][T29640] team0: Port device team_slave_0 added [ 1001.633046][T29640] team0: Port device team_slave_1 added [ 1001.799935][T29640] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1001.824082][T29640] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1001.858176][T29640] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1001.958681][T12420] hsr_slave_0: left promiscuous mode [ 1001.998220][T12420] hsr_slave_1: left promiscuous mode [ 1002.008608][T12420] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1002.035464][T12420] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1002.073727][T12420] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1002.099011][T12420] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1002.167769][T12420] veth1_macvtap: left promiscuous mode [ 1002.188013][T12420] veth0_macvtap: left promiscuous mode [ 1002.198214][T12420] veth1_vlan: left promiscuous mode [ 1002.207925][T12420] veth0_vlan: left promiscuous mode [ 1002.914743][T28331] Bluetooth: hci1: command tx timeout [ 1003.497565][T12420] team0 (unregistering): Port device team_slave_1 removed [ 1003.548901][T12420] team0 (unregistering): Port device team_slave_0 removed [ 1004.194936][T29640] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1004.203426][T29640] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1004.230202][T29640] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1004.399474][T29640] hsr_slave_0: entered promiscuous mode [ 1004.423601][T29640] hsr_slave_1: entered promiscuous mode [ 1004.933469][T29828] nbd: socks must be embedded in a SOCK_ITEM attr [ 1004.998705][T28331] Bluetooth: hci1: command tx timeout [ 1005.392005][T28331] Bluetooth: hci2: command 0x0406 tx timeout [ 1005.700179][T29640] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1005.764538][T29640] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1005.834787][T29640] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1005.897007][T29640] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1006.233973][T29640] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1006.443131][T29640] 8021q: adding VLAN 0 to HW filter on device team0 [ 1006.483674][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 1006.490802][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1006.548259][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 1006.555462][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1006.604692][T29640] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1006.615417][T29640] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1006.777831][T29883] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3812'. [ 1006.835629][T29640] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1006.941209][T29909] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3815'. [ 1007.364676][T29640] veth0_vlan: entered promiscuous mode [ 1007.383593][T29640] veth1_vlan: entered promiscuous mode [ 1007.444334][T29640] veth0_macvtap: entered promiscuous mode [ 1007.487289][T29640] veth1_macvtap: entered promiscuous mode [ 1007.630738][T29640] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1007.654968][T29640] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1007.681139][T29640] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1007.701208][T29640] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1007.721185][T29640] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1007.740988][T29640] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1007.772406][T29640] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1007.787105][T29640] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1007.810852][T29640] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1007.840975][T29640] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1007.867888][T29640] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1007.890976][T29640] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1007.910964][T29640] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1007.932226][T29640] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1008.187508][T29640] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1008.198850][T29640] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1008.226350][T29640] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1008.251142][T29640] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1008.732473][ T5975] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1008.740341][ T5975] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1008.821770][T12448] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1008.829700][T12448] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1011.456568][T30073] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3836'. [ 1011.541747][T30073] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3836'. [ 1011.759412][T30073] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3836'. [ 1011.840996][T30073] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3836'. [ 1011.874457][T30073] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3836'. [ 1011.912344][T30073] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3836'. [ 1011.952952][T30073] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3836'. [ 1011.985715][T30073] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3836'. [ 1012.054567][T30073] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3836'. [ 1012.081492][T30073] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3836'. [ 1012.090658][T30073] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3836'. [ 1012.181209][T30073] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3836'. [ 1012.730280][T30085] delete_channel: no stack [ 1013.845548][T30125] [ 1013.847934][T30125] ====================================================== [ 1013.854971][T30125] WARNING: possible circular locking dependency detected [ 1013.862016][T30125] 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 Not tainted [ 1013.869148][T30125] ------------------------------------------------------ [ 1013.876184][T30125] syz.8.3846/30125 is trying to acquire lock: [ 1013.882271][T30125] ffff88807694e098 (&mm->mmap_lock){++++}-{3:3}, at: lock_mm_and_find_vma+0x3a9/0x6a0 [ 1013.891899][T30125] [ 1013.891899][T30125] but task is already holding lock: [ 1013.899276][T30125] ffff8880273c1ce8 (&sb->s_type->i_mutex_key#12){+.+.}-{3:3}, at: shmem_file_write_iter+0x86/0x140 [ 1013.910041][T30125] [ 1013.910041][T30125] which lock already depends on the new lock. [ 1013.910041][T30125] [ 1013.920465][T30125] [ 1013.920465][T30125] the existing dependency chain (in reverse order) is: [ 1013.929497][T30125] [ 1013.929497][T30125] -> #1 (&sb->s_type->i_mutex_key#12){+.+.}-{3:3}: [ 1013.938234][T30125] down_write+0x93/0x200 [ 1013.943029][T30125] process_measurement+0x39c/0x2370 [ 1013.948777][T30125] ima_file_mmap+0x146/0x1d0 [ 1013.953917][T30125] security_mmap_file+0x8bd/0x990 [ 1013.959489][T30125] __do_sys_remap_file_pages+0x526/0x900 [ 1013.965675][T30125] do_syscall_64+0xcd/0x250 [ 1013.970724][T30125] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1013.977173][T30125] [ 1013.977173][T30125] -> #0 (&mm->mmap_lock){++++}-{3:3}: [ 1013.984765][T30125] __lock_acquire+0x250b/0x3ce0 [ 1013.990178][T30125] lock_acquire.part.0+0x11b/0x380 [ 1013.995853][T30125] down_read_killable+0x9d/0x380 [ 1014.001344][T30125] lock_mm_and_find_vma+0x3a9/0x6a0 [ 1014.007087][T30125] do_user_addr_fault+0x2b5/0x13f0 [ 1014.012741][T30125] exc_page_fault+0x5c/0xc0 [ 1014.017776][T30125] asm_exc_page_fault+0x26/0x30 [ 1014.023158][T30125] fault_in_readable+0x160/0x200 [ 1014.028625][T30125] fault_in_iov_iter_readable+0x101/0x2c0 [ 1014.034868][T30125] generic_perform_write+0x21b/0x920 [ 1014.040678][T30125] shmem_file_write_iter+0x10e/0x140 [ 1014.046492][T30125] vfs_write+0x5ae/0x1150 [ 1014.051345][T30125] ksys_write+0x12f/0x260 [ 1014.056194][T30125] do_syscall_64+0xcd/0x250 [ 1014.061220][T30125] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1014.067647][T30125] [ 1014.067647][T30125] other info that might help us debug this: [ 1014.067647][T30125] [ 1014.077871][T30125] Possible unsafe locking scenario: [ 1014.077871][T30125] [ 1014.085311][T30125] CPU0 CPU1 [ 1014.090664][T30125] ---- ---- [ 1014.096019][T30125] lock(&sb->s_type->i_mutex_key#12); [ 1014.101485][T30125] lock(&mm->mmap_lock); [ 1014.108333][T30125] lock(&sb->s_type->i_mutex_key#12); [ 1014.116315][T30125] rlock(&mm->mmap_lock); [ 1014.120726][T30125] [ 1014.120726][T30125] *** DEADLOCK *** [ 1014.120726][T30125] [ 1014.128860][T30125] 3 locks held by syz.8.3846/30125: [ 1014.134058][T30125] #0: ffff888032b302b8 (&f->f_pos_lock){+.+.}-{3:3}, at: fdget_pos+0x24c/0x360 [ 1014.143123][T30125] #1: ffff888079f64420 (sb_writers#5){.+.+}-{0:0}, at: ksys_write+0x12f/0x260 [ 1014.152277][T30125] #2: ffff8880273c1ce8 (&sb->s_type->i_mutex_key#12){+.+.}-{3:3}, at: shmem_file_write_iter+0x86/0x140 [ 1014.163444][T30125] [ 1014.163444][T30125] stack backtrace: [ 1014.169322][T30125] CPU: 0 UID: 0 PID: 30125 Comm: syz.8.3846 Not tainted 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 1014.180085][T30125] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1014.190135][T30125] Call Trace: [ 1014.193409][T30125] [ 1014.196339][T30125] dump_stack_lvl+0x116/0x1f0 [ 1014.201028][T30125] print_circular_bug+0x419/0x5d0 [ 1014.206074][T30125] check_noncircular+0x31a/0x400 [ 1014.211019][T30125] ? __pfx_check_noncircular+0x10/0x10 [ 1014.216573][T30125] ? lockdep_lock+0xc6/0x200 [ 1014.221172][T30125] ? __pfx_lockdep_lock+0x10/0x10 [ 1014.226199][T30125] ? finish_task_switch.isra.0+0x217/0xcc0 [ 1014.232025][T30125] __lock_acquire+0x250b/0x3ce0 [ 1014.236906][T30125] ? __pfx___lock_acquire+0x10/0x10 [ 1014.242116][T30125] lock_acquire.part.0+0x11b/0x380 [ 1014.247239][T30125] ? lock_mm_and_find_vma+0x3a9/0x6a0 [ 1014.252619][T30125] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 1014.258259][T30125] ? rcu_is_watching+0x12/0xc0 [ 1014.263023][T30125] ? trace_lock_acquire+0x14a/0x1d0 [ 1014.268230][T30125] ? lock_mm_and_find_vma+0x3a9/0x6a0 [ 1014.273607][T30125] ? lock_acquire+0x2f/0xb0 [ 1014.278117][T30125] ? lock_mm_and_find_vma+0x3a9/0x6a0 [ 1014.283494][T30125] down_read_killable+0x9d/0x380 [ 1014.288433][T30125] ? lock_mm_and_find_vma+0x3a9/0x6a0 [ 1014.293810][T30125] ? __pfx_down_read_killable+0x10/0x10 [ 1014.299354][T30125] ? __pfx_search_extable+0x10/0x10 [ 1014.304555][T30125] ? fault_in_readable+0x160/0x200 [ 1014.309673][T30125] lock_mm_and_find_vma+0x3a9/0x6a0 [ 1014.314879][T30125] do_user_addr_fault+0x2b5/0x13f0 [ 1014.320006][T30125] exc_page_fault+0x5c/0xc0 [ 1014.324529][T30125] asm_exc_page_fault+0x26/0x30 [ 1014.329386][T30125] RIP: 0010:fault_in_readable+0x160/0x200 [ 1014.335111][T30125] Code: 42 e8 45 31 f6 e8 70 36 ba ff 48 39 eb 75 13 eb 2e e8 64 36 ba ff 48 81 c3 00 10 00 00 48 39 eb 74 1d e8 53 36 ba ff 45 89 f7 <8a> 03 31 ff 44 89 fe 88 44 24 28 e8 80 38 ba ff 45 85 ff 74 d2 e8 [ 1014.354718][T30125] RSP: 0018:ffffc90004987b18 EFLAGS: 00050283 [ 1014.360782][T30125] RAX: 000000000001aa0d RBX: 0000000000085000 RCX: ffffc9000c8b1000 [ 1014.368750][T30125] RDX: 0000000000040000 RSI: ffffffff81d26f9d RDI: 0000000000000005 [ 1014.376720][T30125] RBP: 0000000000101000 R08: 0000000000000005 R09: 0000000000000000 [ 1014.384686][T30125] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000100082 [ 1014.392653][T30125] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1014.400624][T30125] ? fault_in_readable+0x15d/0x200 [ 1014.405745][T30125] ? fault_in_readable+0x15d/0x200 [ 1014.410859][T30125] ? __pfx_fault_in_readable+0x10/0x10 [ 1014.416323][T30125] ? find_held_lock+0x2d/0x110 [ 1014.421094][T30125] ? inode_to_bdi+0x9e/0x160 [ 1014.425701][T30125] fault_in_iov_iter_readable+0x101/0x2c0 [ 1014.431428][T30125] generic_perform_write+0x21b/0x920 [ 1014.436721][T30125] ? __mark_inode_dirty+0x6b0/0xe60 [ 1014.441924][T30125] ? __pfx_generic_perform_write+0x10/0x10 [ 1014.447742][T30125] ? __mark_inode_dirty+0x71a/0xe60 [ 1014.452943][T30125] ? generic_update_time+0xcf/0xf0 [ 1014.458058][T30125] ? mnt_put_write_access_file+0x45/0xf0 [ 1014.463702][T30125] shmem_file_write_iter+0x10e/0x140 [ 1014.468995][T30125] vfs_write+0x5ae/0x1150 [ 1014.473326][T30125] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 1014.479139][T30125] ? trace_lock_acquire+0x14a/0x1d0 [ 1014.484341][T30125] ? __pfx_vfs_write+0x10/0x10 [ 1014.489102][T30125] ? __pfx___mutex_lock+0x10/0x10 [ 1014.494142][T30125] ksys_write+0x12f/0x260 [ 1014.498470][T30125] ? __pfx_ksys_write+0x10/0x10 [ 1014.503323][T30125] do_syscall_64+0xcd/0x250 [ 1014.507826][T30125] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1014.513735][T30125] RIP: 0033:0x7f18e577e719 [ 1014.518149][T30125] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1014.537764][T30125] RSP: 002b:00007f18e663b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1014.546180][T30125] RAX: ffffffffffffffda RBX: 00007f18e5935f80 RCX: 00007f18e577e719 [ 1014.554157][T30125] RDX: 0000000000100082 RSI: 0000000000000000 RDI: 0000000000000003 [ 1014.562131][T30125] RBP: 00007f18e57f132e R08: 0000000000000000 R09: 0000000000000000 [ 1014.570098][T30125] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1014.578066][T30125] R13: 0000000000000000 R14: 00007f18e5935f80 R15: 00007fff77ba2e38 [ 1014.586041][T30125]