last executing test programs: 2m40.604851823s ago: executing program 2 (id=1465): madvise$auto(0x0, 0x7fffffffffffffff, 0xa) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x2, 0x80002, 0x73) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x80502, 0x0) mmap$auto(0x0, 0x20004, 0x1ff, 0xeb1, 0x8000000000000024, 0x8000) socket(0xa, 0x3, 0x7) close_range$auto(0x2, 0x8, 0x0) pipe$auto(0x0) r1 = openat$auto_ocfs2_control_fops_stack_user(0xffffffffffffff9c, &(0x7f00000000c0), 0x82, 0x0) read$auto_ocfs2_control_fops_stack_user(r1, &(0x7f0000000100)=""/4096, 0x1000) write$auto(0xffffffffffffffff, 0x0, 0x4) write$auto_tty_fops_tty_io(r0, 0x0, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mmap$auto(0x0, 0x8, 0x1000000004, 0x9b72, 0x2, 0x8000) mmap$auto(0xb, 0x20009, 0xdf, 0xeb1, 0xfffffffffffff54c, 0x7ffc) socket(0x18, 0xa, 0x300) socket$nl_generic(0x10, 0x3, 0x10) socket(0x28, 0x5, 0x0) mmap$auto(0x2, 0x402000c, 0xe0, 0xfffffffffffffffd, 0xfffffffffffffffe, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2b, 0x4, 0x0) close_range$auto(0x2, 0xa, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2b, 0x800, 0x1) get_robust_list$auto(0x0, 0x0, 0x0) close_range$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x3) openat$auto_tracing_entries_fops_trace(0xffffffffffffff9c, 0x0, 0x0, 0x0) poll$auto(0x0, 0x8, 0x7fff) setsockopt$auto(0x3, 0x10f, 0x87, 0x0, 0x14) socket$nl_generic(0x10, 0x3, 0x10) 2m39.410076829s ago: executing program 2 (id=1470): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) io_uring_setup$auto(0x6, 0x0) signalfd4$auto(0xffffffff, 0x0, 0x8, 0x0) (async) signalfd4$auto(0xffffffff, 0x0, 0x8, 0x0) socket(0x11, 0x80003, 0x300) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x89b1, 0x0) socket(0x2, 0x5, 0x0) setsockopt$auto(0x6, 0x10000000084, 0x21, 0x0, 0x4) (async) setsockopt$auto(0x6, 0x10000000084, 0x21, 0x0, 0x4) r1 = gettid() process_vm_writev$auto(r1, &(0x7f0000000100)={&(0x7f0000000000)="1293ee6b11340702379ea11b639aeb399a87515f334468d60c3ac7c12008c888622804fd3670af0229025a1ab272ec2047ea916d6b24d4a3ecaf2040b43ef8f1eec3847c6c73dacd6f136484463a09e09d35f0da96f7aa726e2943ea9aff9ee4da2e8326e4e688774b62d5842494de86a7a6cca8814eb77023ebb375e18763ca2617c0d506abb1016cef21ebccf082616c6380564c54e39cd117570479a16b8d98f76afa7ffe25e8359420e8c6438bd8b855763350e1de6d787c658dcff8a4409a9607e261fbdfb5c4d6c3f42a", 0xff80}, 0x10000, &(0x7f0000000240)={&(0x7f0000000140)="0891fb974e75509c2eccf01807e75b87ae72b825fbb93989e82e0b31c3a2a91096b552415dc0e488cfce454837c67b7a422fd0c13ed673d3a8e7249bdba07ab3f1397141fb20ca2209268bf319304b1725f77c50d446d7bbab0fd2517c7fab1f9e92a5b1e96e8338bc74ecf63790bcda85bd05e2d4cd67b0fce39ffa25a2827b81a41999276b6884c96981e4cc1611e680550561eb2cfcdcd27d5675dd9dc8227d2800859aa0c57b99fe5a36b81720c8c9c600f579d21bb276198666106bd44712a92dd33f012814950ccf13ca5eb7dd4f7814f7f3d9bbcfbacb4154d12dd3e36e0e2dbe01b9f87b59d46a02218f", 0x5}, 0x3b, 0xffffffffffffffff) 2m38.963768806s ago: executing program 2 (id=1471): r0 = socket(0x2, 0x3, 0x1) mkdir$auto(&(0x7f00000001c0)='}[,&*}\x00', 0xc001) mprotect$auto(0x1ffff000, 0x8000000000000001, 0x4) madvise$auto(0x635, 0xfffffffffffefffe, 0x4) r1 = socket(0xa, 0x2, 0x88) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000280)={'dummy0\x00', 0x0}) bpf$auto(0x0, &(0x7f00000000c0)=@bpf_attr_5={@target_ifindex=r3, r2, 0x4, 0x1ff, r1, @relative_id=0x13, 0xe600}, 0xf) bind$auto(r0, &(0x7f0000000100)=@can={0x1d, r3}, 0xfffffff9) r4 = gettid() pwrite64$auto(0xc8, &(0x7f0000000200)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x86\xdde\x1cJ\x99\x00\x00\x00\x00\x00\x00\xfd\xfd\xd3\xd3\x1d\x00^\x0fo\x97\xfc\x89\v\xea\xc2\x95\xafQ;C>\x15L\x90\xad\xa4\x1648W\t\x00\x00\x00\x00\x00\x00\x00@X\xb9_\xdd\xa6\xa2E\xd8?\'\x8dg\x81h*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00,,\x93\xba\x88\x93\xc6#\xe5\xaae\x9d\xb6\x1a\x7f\xc0%\xb0\rfOJ+\x02\x9b#)\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd0\xbdn\x1d\x00\xeb]B\xa0\x99\xb0R\xb4J}]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&%`_[\xde\x7f\xde8\xf7\xc1\x94\xf2\xc1\"\xact\xee\xc9\x00\x00\x00\x00\x00\x00\x00\x00\xee\xa9\x0eX\x01\xa3g\xba\x9cc\x90\xe3\xae\xa9\xde\x00\x00\x00B\xb4\xf2&\x00\xe2\xead\xd0\"\x16\x84v\n\xcdN\xb6\xa4\xe0\xb7e\x97 ?\xb5\xa1E=t\x96\xbd\xfd\xc5\xebn\xb7\n\xc2\xbc\xa2\xa8\x04#\x84\xa7R|\xed\x8f\x03\x01\x10wLT\vay\x12\xb63\x9e\a\x8e\xbd\x18y<\xb3\v\x14\x82\x97&\xfcm\x86\x10o\xdc\xf3x\xfd\x06\x87t\xb9$\x94,f\x9b0\xcd\xd3\r\xb1e\'\x19\xc1\xe7>*\xad\xa5+\xa8\x1c\x88\xa1\x0e[\x99\xb6LKZ\x9e\r\xd0r\xe2Ct\xc1\x99\x1b/\xc5P.aUdq\x97\x94\xb9\xa8qU\xae*g\x86\xc9\xa4\xe7\n\vh-v\"o.\xbf6\x13\tFK\x8e\xc6&&\x13\x81\x00\x8c7PS\x9c\xa3\xfb\x1d\xa9\x98\xd47\n\xa7\xd1\x10\xb3i\xd2\xa8\x18f\xb3K\x9b\x9b\x8c\xe8\x84\xa3,5-\xd6\xae\xbd\x1d\xf2o\x99\x02\x1azw9\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\bl\x042\x935\x9e\xeeH\x87\xda\x10\x8f^1\x89L`\xf4[\x06\xf6\xc7\xd0#\xdb\xb1\\\xc3\xb1\xb8\xe8\xde2\xbb\xf8I\x9c\x17KI\x8c\f\x1d\xaa\xa0\xdb\xc7\x9e\x81\x90CTe\xfa\x8dq&\x17\x908\xc9T\xffm\x930\x1d\x91\xf8|t\xfd\x18\xd5\xb0\xcbH\xa7\xb6T\n\x11%\xba\x16o\r\xf6\x90k\xfb\a\xa1\x15\x0e\xe1\xce0Q\xd0\x00\xc1\x1a\x1f\xaa8\xfbo)rtYK\"c\xe2c\xbeM\x9bT\x05\xf3\xccC\x8c\x00\xdf\x8c\x1b+\xca\x80', 0x84, 0xe83) rt_sigqueueinfo$auto(r4, 0x11, &(0x7f0000000000)={@siginfo_0_0={0x76bb, 0x3, 0x4, @_sigfault={0x0, @_trapno=0xfffffffe}}}) get_robust_list$auto(0x8000, 0xfffffffffffffffd, 0xfffffffffffffffe) execve$auto(&(0x7f0000000000)='}[,&*}\x00', &(0x7f00000000c0)=&(0x7f0000000080)='%,#\x00', &(0x7f0000000180)=&(0x7f0000000140)='\'%/@/.\x00N\xc2\x9e\xb1\xec$\x9fJ.\x15\xc2\xa3\xd5V') 2m38.515460856s ago: executing program 2 (id=1472): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/system/memory/memory1/online\x00', 0x0, 0x0) mprotect$auto(0x1ffff000, 0x8000000001000001, 0xd) r1 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/conf/wg0/drop_gratuitous_arp\x00', 0x202, 0x0) sendfile$auto(r1, r1, 0x0, 0x7fffe000) mlockall$auto(0x7) rt_sigaction$auto(0x2, &(0x7f0000000140)={0x0, 0x6, 0x0, {0xb967}}, 0x0, 0x8) r2 = socket(0x10, 0x2, 0x0) sendfile$auto(r1, r0, 0x0, 0xc01) sendmsg$auto_NL80211_CMD_GET_REG(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYBLOB='^\x00\'a', @ANYRES64=r2, @ANYRES32=r2, @ANYBLOB="4e43cbc37c"], 0x1ac}, 0x1, 0x0, 0x0, 0x40}, 0x40000) mlockall$auto(0x7) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) bind$auto(0x2, &(0x7f00000001c0), 0xb) getpeername$auto(0x3, 0x0, 0x0) mmap$auto(0x0, 0x20009, 0x8, 0xeb1, 0x401, 0x8000) mlock$auto(0xcd2, 0x7) mlockall$auto(0x5) 2m37.855885206s ago: executing program 2 (id=1475): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000a00), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_FLUSH_PMKSA(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="916c5296", @ANYRES16=r1, @ANYBLOB="010026bd7000fedbdf253600000008000300", @ANYRES32=0x0, @ANYBLOB="0c0099000200000000000000"], 0x28}}, 0x2004c054) 2m37.444667909s ago: executing program 2 (id=1476): mkdir$auto(&(0x7f00000003c0)='}[,&*}\x00', 0x6) (async) chroot$auto(&(0x7f0000000000)='}[,&*}\x00') rseq$auto(&(0x7f0000000300)={0xe, 0x401, 0x0, 0x6, 0xffffffff, 0x2}, 0x8000, 0x0, 0x6) (async) rseq$auto(&(0x7f0000000300)={0xe, 0x401, 0x0, 0x6, 0xffffffff, 0x2}, 0x8002, 0x0, 0x6) mount$auto(0x0, &(0x7f0000000100)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0x10001, 0x0) (async) lstat$auto(&(0x7f0000000040)='}[,&*}/../file0\x00', 0x0) 2m33.024994681s ago: executing program 0 (id=1488): mmap$auto(0x0, 0x20009, 0x7fffffff, 0xeb1, 0x401, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x10004) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r0 = open(&(0x7f0000000000)='./file0\x00', 0x4bb43, 0x100) sendmsg$auto_NL802154_CMD_SET_PAN_ID(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16, @ANYBLOB="010027bd7000fddbdf250a0005000700000000000000080001"], 0x24}, 0x1, 0x0, 0x0, 0x4088}, 0x20000010) sendmsg$auto_TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f00000079c0)={0x0, 0x0, &(0x7f0000007980)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="010072e0fa60fddbdf2500000000000000003c1b73"], 0x1c}, 0x1, 0x0, 0x0, 0x40010}, 0x2) r1 = socket(0xa, 0x1, 0x84) mmap$auto(0x0, 0x9a, 0x4, 0xeb1, 0x401, 0x8003) getsockopt$auto(r1, 0x80000000, 0x9, 0x0, &(0x7f0000000000)=0x9b) newfstatat$auto(0x0, 0xfffffffffffffffd, 0xfffffffffffffffe, 0xfffffffffffffff7) futex_waitv$auto(&(0x7f0000000000)={0xf, 0x5d94, 0x4002, 0x4}, 0x77, 0xfffffffc, 0x0, 0x62bd) r2 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1c003b", @ANYRES8=r2], 0x1ac}, 0x1, 0x0, 0x0, 0x800}, 0x40000) getpgid(0x0) setsockopt$auto(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x8002) mount_setattr$auto(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x283) syz_genetlink_get_family_id$auto_nfsd(0x0, 0xffffffffffffffff) socket(0x10, 0x3, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socket(0x25, 0x5, 0x0) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16, @ANYBLOB="1b0026bd7400fddbdf250300000004000800100003800c0009"], 0x40}, 0x1, 0x0, 0x0, 0x4004040}, 0xc800) sendmsg$auto_NETDEV_CMD_QUEUE_GET(0xffffffffffffffff, &(0x7f0000003040)={0x0, 0x0, &(0x7f0000003000)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="010600bd7000fbdbdf250a"], 0x1c}, 0x1, 0x0, 0x0, 0x20040004}, 0x20008810) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="18"], 0x1ac}}, 0x40000) sendmmsg$auto(r0, &(0x7f0000000080)={{0x0, 0x1c04, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x5, 0x9}, 0xfffffff8}, 0x3, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) mmap$auto(0x5, 0xfffffffffffffffe, 0xa245, 0x410, 0x3, 0x7) utime$auto(&(0x7f0000000000)='./file0\x00', 0x0) 2m32.312164996s ago: executing program 0 (id=1489): r0 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/015/001\x00', 0xa901, 0x0) ioctl$auto(0x3, 0x4008550d, 0x1) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) r1 = openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, 0x0, 0x1541, 0x0) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x7, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$auto__ctl_fops_dm_ioctl(r1, 0x4020aed2, 0x0) r3 = openat$auto_clear_warn_once_fops_(0xffffffffffffff9c, &(0x7f0000000000), 0x129680, 0x0) close_range$auto(r0, r3, 0x8) 2m31.942778268s ago: executing program 0 (id=1490): r0 = syz_clone(0x4008000, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid$auto(r0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/devices/virtual/net/erspan0/queues/tx-0/byte_queue_limits/stall_max\x00', 0x400, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f0000000240)=""/138, 0x8a) mmap$auto(0x0, 0xa, 0xdb, 0x9b72, 0x5, 0x8000) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x6c, 0x0, 0x800, 0x70bd2c, 0x25dfdbfe, {}, [@HSR_A_IFINDEX={0x8}, @HSR_A_IF2_SEQ={0x6, 0x7, 0x8000}, @HSR_A_IFINDEX={0x8}, @HSR_A_NODE_ADDR_B={0xa, 0x5, @remote}, @HSR_A_NODE_ADDR={0xa}, @HSR_A_NODE_ADDR={0xa, 0x1, @broadcast}, @HSR_A_IF1_SEQ={0x6, 0x6, 0xf}, @HSR_A_IF2_AGE={0x8, 0x4, 0x88000001}, @HSR_A_NODE_ADDR={0xa}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40080}, 0x6004000) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0xc0189436, 0x0) close_range$auto(0x2, 0x8, 0x0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/mm/transparent_hugepage/khugepaged/pages_to_scan\x00', 0x88282, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r3, &(0x7f0000000000)="5e80", 0x2) socket(0x2, 0x3, 0x100) socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="13"], 0x1ac}}, 0x4004) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) syz_genetlink_get_family_id$auto_macsec(&(0x7f00000000c0), 0xffffffffffffffff) lstat$auto(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)={0xc, 0x8000000000000001, 0x5, 0x4, 0xffffffffffffffff, 0xee00, 0x0, 0x0, 0x80000000, 0x589, 0xfffffffffffffffb, 0x7fff, 0x7, 0x10000, 0x3, 0x4, 0x7c52}) r4 = getpgid(0x0) sched_setparam$auto(r4, &(0x7f0000000080)={0xfffffffd}) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000b80)='/proc/sys/kernel/kptr_restrict\x00', 0x202, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @loopback}, 0x54) sendmmsg$auto(0x3, 0x0, 0x3, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) move_pages$auto(0x0, 0x33b, &(0x7f0000000080)=0x0, 0x0, 0x0, 0x4) 2m30.949356643s ago: executing program 0 (id=1491): r0 = openat$auto_hwsim_fops_ps_(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/ieee80211/phy14/hwsim/ps\x00', 0x101000, 0x0) setsockopt$auto(r0, 0x9, 0xee3, &(0x7f0000000140)='*\x00', 0x6c) socket(0x2, 0x3, 0xa) mmap$auto(0x0, 0x4, 0xdf, 0x80000000000eb1, 0x3, 0x0) socket(0x11, 0x80003, 0x300) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) readv$auto(0x4, &(0x7f0000000100)={0x0, 0x1000}, 0x8) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) modify_ldt$auto(0x1, &(0x7f00000001c0), 0x10) r1 = gettid() rt_sigqueueinfo$auto(r1, 0x10, &(0x7f0000000000)={@siginfo_0_0={0x7, 0x7, 0xfffffffa, @_rt={r1, 0x0, @sival_ptr=0x0}}}) clone3$auto(0x0, 0x9) clone$auto(0x1000, 0x9, 0xfffffffffffffffc, 0xfffffffffffffffc, 0x5) clone$auto(0x3, 0x0, &(0x7f0000000080)=0x100, 0x0, 0x0) 2m28.110256055s ago: executing program 32 (id=1452): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000080), r0) sendmsg$auto_NFSD_CMD_THREADS_SET(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r1, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@NFSD_A_SERVER_THREADS={0x8, 0x1, 0x8}]}, 0x1c}}, 0x44000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000080), r0) (async) sendmsg$auto_NFSD_CMD_THREADS_SET(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r1, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@NFSD_A_SERVER_THREADS={0x8, 0x1, 0x8}]}, 0x1c}}, 0x44000) (async) 2m26.934185178s ago: executing program 0 (id=1494): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$auto_netdev(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_NETDEV_CMD_NAPI_SET(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x44, r1, 0x300, 0x70bd26, 0x25dfdbfe, {}, [@NETDEV_A_NAPI_DEFER_HARD_IRQS={0x8, 0x5, 0x1}, @NETDEV_A_NAPI_DEFER_HARD_IRQS={0x8, 0x5, 0x7}, @NETDEV_A_NAPI_IRQ_SUSPEND_TIMEOUT={0xc, 0x7, 0x7}, @NETDEV_A_NAPI_DEFER_HARD_IRQS={0x8, 0x5, 0x9}, @NETDEV_A_NAPI_IRQ_SUSPEND_TIMEOUT={0xc, 0x7, 0x9}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x4048000) r2 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000001c0), r0) sendmsg$auto_CTRL_CMD_GETPOLICY(r0, &(0x7f0000000280)={&(0x7f0000000180), 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x38, r2, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@CTRL_ATTR_FAMILY_ID={0x6, 0x1, 0x6}, @CTRL_ATTR_FAMILY_NAME={0x6, 0x2, '%\x00'}, @CTRL_ATTR_FAMILY_NAME={0xc, 0x2, '[(\xbd#-]}\x00'}, @CTRL_ATTR_OP={0x8, 0xa, 0x9}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000891}, 0xc0) (async) mprotect$auto(0x2, 0xfff, 0x8) (async) r3 = syz_genetlink_get_family_id$auto_ipvs(&(0x7f0000000300), r0) (async) fstat$auto(r0, &(0x7f0000000340)={0x0, 0x6, 0x9, 0x8000, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2bb0, 0x89b, 0x24, 0x5, 0x1, 0x0, 0xd, 0x1, 0x100, 0x1}) (async) statx$auto(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x5, 0x1f, &(0x7f0000000440)={0x7, 0x4, 0x7, 0x4, 0xee00, 0xffffffffffffffff, 0xff, 0x7, 0x3, 0x9, 0x9, 0x7, {0x98, 0x5}, {0x100000000, 0x4}, {0xbb5, 0xaf}, {0x9, 0x5}, 0x8, 0xe814, 0x100, 0x6, 0x100, 0x4, 0x2, 0x9, 0x2a0e, 0x0, 0x3, 0xbed7e75, [0xfffffffffffff25a, 0xfff, 0x8000000000000001, 0x0, 0x1, 0x3, 0x9, 0xd76, 0xd]}) (async) lstat$auto(&(0x7f0000000540)='./file0\x00', &(0x7f0000000580)={0x4, 0x1, 0x7, 0x7fffffff, 0xee00, 0xee01, 0x0, 0x69e6, 0x6, 0x2, 0x8, 0x1, 0xa, 0x9, 0x3, 0x1ff, 0xfff}) (async) capset$auto(&(0x7f0000000640)={0x3ff, 0xffffffffffffffff}, &(0x7f0000000680)={0x7fffffff, 0xf57, 0x7}) sendmsg$auto_IPVS_CMD_GET_INFO(r0, &(0x7f0000000bc0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x412000}, 0xc, &(0x7f0000000b80)={&(0x7f00000006c0)={0x484, r3, 0x20, 0x70bd27, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xcd}, @IPVS_CMD_ATTR_DAEMON={0x114, 0x3, 0x0, 0x1, [@typed={0xc, 0x140, 0x0, 0x0, @u64=0x1}, @generic="48bba52f90b2ebc37affe2828df0f9e53c7ef88a251afe75f02b4438a4b007693abfece166ffa3e8f4d26415b90ab08ee5d47edec478e2fa3e89ebfbcea0ed1209", @generic="ce85ee6255391bf6bf10819dfdcf040eb18a761000849270825e868a734ec8fc4a99a2685aa34c9ba49321f568f38e188a5b948bb935d06a6e7781f7b9bf6ba6b5585d920341acbce3d892b7484d4b22a7e43bf09c3fb7b6dd06d5a9c0161cfea811affe3107eb8f89174b6adf02ef9f9e26f34a63888a4b2ace5557c74d7b32fc2b47605436f6d0df0ff65a1bda03cfff586f44cf5a216169b0e61f5ca8dadceb5947fd327699dbd1a53de2b18718ecb7b16197bcee858c31cdcecfc43a7e3e1b27d3"]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7}, @IPVS_CMD_ATTR_DAEMON={0x130, 0x3, 0x0, 0x1, [@typed={0xc, 0xef, 0x0, 0x0, @u64=0x6}, @generic="42d6dfbdbaba3df7324928851d8f2e6af476fda2808c464c41dd56d115dd8583db36582175dc78f37ccd0bb33b6dbe464e339d3352d353a0cd386925481c0a080f4c486773ba2246f1fac52bb8581ca7853e3b638a475ecbd36b", @typed={0x8, 0xdc, 0x0, 0x0, @ipv4=@loopback}, @typed={0x8, 0x114, 0x0, 0x0, @u32=0x2}, @generic="7feae79a66a6810d5b55d73145c1ae6d8087375bf3803ebd8bceeb458b60a45e49c5efdd886471767c22d88223de557cb3c6644f9a73a80fe442f944ce2b323fab1bdeaeb3b8db1c9d88823c512e3d6f04f70e9ca9390f91dba19903757eabbdd2e8f29be98df34a4ec00d6dfc513bdc17923f1467b54f0fb21ffcf48a4976c201884f891719f95b5ae56d13feefa3474935da48e5e05df18fe1d065f74fe65782a1528cc0d0c2382a923ffa796527dc2ff3d9b4f94c"]}, @IPVS_CMD_ATTR_SERVICE={0x201, 0x1, 0x0, 0x1, [@nested={0xcd, 0x8c, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @uid=r4}, @generic="35e7c88eda817158be5f8247282d2af05d3064a0290a1ccf7e63d1bcb488629c33ba862a4d012c6e77f0", @nested={0x4, 0xca}, @generic="5c331d693ee4bb97caf3099844b18f120e631e235d0f6aeab5effc4cf98d451c22eab939fd39560435c2586d46ecd6bde210abed22c30e78a7cd871759e7a245072d835a8ea0", @nested={0x4, 0x116}, @typed={0x8, 0x13a, 0x0, 0x0, @ipv4=@broadcast}, @typed={0x8, 0x27, 0x0, 0x0, @uid=r5}, @typed={0x8, 0x7f, 0x0, 0x0, @uid=r6}, @generic="6cc86cd5554931e978b11c1c69aad8360aacef461b2e6a76cf4218e9900670a9d25af797f45ec597f755e91197f861f4fb"]}, @nested={0x18, 0x105, 0x0, 0x1, [@nested={0x4, 0x4c}, @typed={0x4, 0x8a}, @nested={0x4, 0x117}, @typed={0x8, 0x104, 0x0, 0x0, @u32=0x9}]}, @typed={0xc3, 0x1b, 0x0, 0x0, @binary="15b3192ce1546334af88ec4869f14ad4abcfd15c16bd550d55f60970b93a8aae125ded3dfa9a6d20f6857a0ae66757c5e226e7171c11b8b785e0865bf87f4ef5873ec39a9bbf18c02dc4dc2040bdfd29a88666b38211ed06462b2a764b9c557a823a35e44858870917699e63ef04f9a1a2d38a3865f22fa55666f03c48f1635638446c0d72684e7012feb0c0cdb9b3832e77a4488dc027b61fc169a5d56c1d8562db0c249fb98e296200f2ff382cfd5d630a528166905e971ae0276d11a656"}, @typed={0x8, 0x73, 0x0, 0x0, @pid=r7}, @generic="e78877e8d6f9a1a9c385fd3389e0091e9a6a1abcbd91a3587e329ebb84600fda2dcf7b2762b8aac77abee2a172e2a592507ad7e80957e6e00551729cd2c242b45898feec647927eee1"]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xa0db}]}, 0x484}, 0x1, 0x0, 0x0, 0x2c004000}, 0x4) r8 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000c40), r0) (async) r9 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) sendmsg$auto_NL802154_CMD_TRIGGER_SCAN(r0, &(0x7f0000000f80)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000f40)={&(0x7f0000000c80)={0x29c, r8, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@NL802154_ATTR_SUPPORTED_COMMANDS={0x70, 0x19, 0x0, 0x1, [@generic="34a02da08417373a34ebe8c07a6e676c98aaaf96d849ec7ad423d4ea5cb0cdb5d56e1e492c5a538197124569ae437fed49cce617dbdb6c632722ebdabffaa06413290337a6f8b44607c327926a59e576465efcd21dbde7f70b6ae1dce63c7fcd4e8bbb5b", @typed={0x8, 0x11c, 0x0, 0x0, @pid=r7}]}, @NL802154_ATTR_PEER={0xc, 0x28, 0x0, 0x1, [@typed={0x8, 0x61, 0x0, 0x0, @u32=0x80000000}]}, @NL802154_ATTR_MAX_ASSOCIATIONS={0x8, 0x27, 0xffff7fff}, @NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5, 0x12, 0x4}, @NL802154_ATTR_PAGE={0x5, 0x7, 0x9}, @NL802154_ATTR_NETNS_FD={0x8, 0x1d, r9}, @NL802154_ATTR_MAX_ASSOCIATIONS={0x8}, @NL802154_ATTR_COORDINATOR={0x1da, 0x1e, 0x0, 0x1, [@nested={0x28, 0x46, 0x0, 0x1, [@nested={0x4, 0xbd}, @nested={0x4, 0xfb}, @typed={0x8, 0xc2, 0x0, 0x0, @uid=r5}, @typed={0x8, 0xb8, 0x0, 0x0, @uid=r5}, @typed={0x6, 0xed, 0x0, 0x0, @str='+\x00'}, @nested={0x4, 0xe4}]}, @typed={0x5, 0x5, 0x0, 0x0, @str='\x00'}, @nested={0x68, 0x48, 0x0, 0x1, [@nested={0x4, 0xa6}, @nested={0x4, 0x87}, @typed={0x8, 0x107, 0x0, 0x0, @ipv4=@private=0xa010101}, @nested={0x4, 0xb7}, @typed={0x4f, 0xf0, 0x0, 0x0, @binary="6ccfaccf4adca9e7c1a1ad86e5164de8b93307e2a32c6a0d7d569b6fa3eac79ab44ad962be6f3878a59cf397e6e631928f2046c7fd31e52ce8c8443eb545778c3e53f2473c60611eb664ae"}]}, @generic="fef5ac4f22089e7a9f9f514dfbbb3062a49671eb1772c9d9721b679f6fc0ea8dbf5465f8239815b25591c28376a80dc45e37f5711a9f3d9bc39e95def8f591113cf881cfe6b84fc87e700c0f7e2389c2893593d77a855dc441294feeed4e3bcdfa87b9976de2da3973b0f4364595769b0bd3b1e34608672961fbfb1ce598e66820cba0d1bd39c4cf81ccbf5cd7e38e5f0934a322a3e48c32862628c47c385afd3f0d7e87994a1d110788d37549df1dd6891edbde403c99063a5c28c0af7ff8af06f1d55e2ec964d518506f325eff9103b5c1e9520489c17c4b8a", @nested={0x61, 0x2d, 0x0, 0x1, [@nested={0x4, 0xd5}, @nested={0x4, 0x6c}, @generic="40a2af73e6c72eecc50dd58569cf087cecd15006e6c290a1aa241259645afa7d99f4a267935a04c013ed954d481ae58db88b7eb767dd1e61347edf027f176cad43268a840a0bb38c714e7fce4193f36ecc", @nested={0x4, 0xa6}]}]}, @NL802154_ATTR_SCAN_DONE_REASON={0x5, 0x25, 0x7f}]}, 0x29c}, 0x1, 0x0, 0x0, 0x40000}, 0x24000880) mprotect$auto(0xafd, 0x1, 0x1) r10 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000001000), r0) sendmsg$auto_NL80211_CMD_START_NAN(r0, &(0x7f0000003040)={&(0x7f0000000fc0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000003000)={&(0x7f0000001040)={0x1f8c, r10, 0x50c, 0x70bd2d, 0x25dfdbff, {}, [@NL80211_ATTR_MLO_LINKS={0x1778, 0x138, 0x0, 0x1, [{0x1774, 0x0, 0x0, 0x1, [@NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}, @NL80211_ATTR_MESH_CONFIG={0x134, 0x23, 0x0, 0x1, [@typed={0x8, 0xa0, 0x0, 0x0, @uid=r4}, @typed={0xc, 0x143, 0x0, 0x0, @u64=0x61}, @generic="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", @typed={0x7, 0xb8, 0x0, 0x0, @str='^&\x00'}, @typed={0x14, 0xb1, 0x0, 0x0, @ipv6=@empty}, @typed={0x4, 0x85}]}, @NL80211_ATTR_SAE_PASSWORD={0x2f, 0x115, "b114158725109ee069f146cd082ead87cc5ea925756adbc2ea7a31874f23c9da916405181eeb8b0384ac6c"}, @NL80211_ATTR_KEY={0x13, 0x50, 0x0, 0x1, [@generic="d1d83cba91176d457ddea9685bed4e"]}, @NL80211_ATTR_SCAN_FREQ_KHZ={0x15f1, 0x124, 0x0, 0x1, [@nested={0x10, 0xd7, 0x0, 0x1, [@nested={0x4, 0x6c}, @nested={0x4, 0x141}, @nested={0x4, 0xbe}]}, @nested={0x15a, 0x110, 0x0, 0x1, [@nested={0x4, 0x138}, @nested={0x4, 0x134}, @generic="c51fd61ebe03785510892840739be7d447c3bbb7f9437d627a1608a45d520d4b1fec2649cbdb04e3325d9af892c88b8ff93a41e4b7503bb110dcec9672ff161abffabbe470205e7f5bee33aca7a3af9bad09d1a4ac42606ed506f106f51b3c03501e596bef2e93600eab6426e3a831ba5aa74fda1a173ae5afd319fb7031f12ecb9c7dab1f7b0c46e53f3d66fcc1f8bf8883", @nested={0x4, 0xe0}, @typed={0xb7, 0x94, 0x0, 0x0, @binary="fdb5440c61339c6d2ee40740934e85af66f651c38b0d721a2a4c45b7659667a92b24f9c1bdb75f86ca3b90d98643a95933fdff015e6e0d3b108d83cfd6d25ccc48fda8f730066b2c84ea7ea2b7ded9e55059c96ea9c5a78a954eff34a0f575066a9c791eda75cd64a443ba2a3d63d75e76fa5875313b287100de8fbd6fe4522ea42541d5376117ce6b77bed9973b7f9269df8ce4799be38baf7c4b594dbd29814fadf4e8707cdd93b5be2d76dee57eae3cc7ef"}]}, @generic="96dc272f2cf8b2e00e4b8b36478c591ac2133e30cc175f094f256cb76cbc06be2c3b95138c1a1f375d5675e279fc5221b410e375d5ef9da58f8b642809da743df1", @nested={0x108, 0xe6, 0x0, 0x1, [@typed={0x8, 0x9d, 0x0, 0x0, @u32=0xe}, @nested={0x4, 0x13c}, @generic="efa3f4ffb9e7", @generic="3e31f511cfa08ed584a831900d1a5e59b417a8af7151e98b04e31a7a4507edd872c4e96b9e203a63884774b0aa6393e7fea42c941e9c4bed16e3b81428aca9c794cfd0427fcecab0ca74e4879337939e8e91657e1fbceeffa31de1d45894a46a6c9dd3f31f895747a8292ee368bc4d0284b58d660571e2518c31bdeae33e47aebce38288f229df9b4da5306f58d5944c34e15ed3bec5ef2f0d80b182b937e4a83ad95989aa4201573d6158d75633b3a3e69d1721622ab1589c17b0fcb1a7fdeb757d7647236807b5aa5d6d8fa174b83792d56f62d0c4234a4d333affd513ab18e93475d9c6cc54548e58b5a64cf71b4bf81b"]}, @generic="43fd08a053ace00d20a07f484a0aa50260d5e52d8484b02612ba3e3bf70fdef5d145a0f119911d94c39a", @generic="35445195e211cdbacf87fdc9aa77e720e22c9c9625b5a295b1a327358354938b7060d6fb89fde3616e630f5efb79fc67789087672afbafc223111ae237ea997c1fbe4d6eb059f262db647b3dc86a1bf1c881884e1356b2cee75e04e15d9addc0cfe08b1633bb5239", @nested={0x11ee, 0x93, 0x0, 0x1, [@typed={0x4, 0x136}, @nested={0x4, 0x92}, @typed={0x8, 0x67, 0x0, 0x0, @u32=0x6}, @generic="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", @generic="7c4a1991b475feac9adb47c19bb679674e088ee8d59022f13365f1923d6d7ce9b5dc9310214bea7ab12b1bcf15f74ca66a313269466d75992ceb199e785c8e922ccd9673669fa5f2d09296bbcfbc997a741b9dfb5e3f54b8fd42705a8eb7668dd875ed854399d047ca90a73242e54ab60e68698b862d7b336b2ac3b5d4fda02e16992d1b30e87522a1f1f65309e53776faefacf01e28c87525c8adc06819e828420997587258cf7fe76cb66cd3c3c3208256f2484944a9b9cf17439e3add28be932e4cb6d4b1281a6cb62e46dcc85162076a86d2ffb22442b6", @nested={0x4, 0x7f}, @generic="fa7e857e469eeee4967f9550aa4b74d8f492315acac7ec5b5c92aeeb0f209e857d06d319da6690b700345e48e5a6bc2ed9e0facb88ccd1eaa5df484119123e6f37c58960d2599af297005c55a394850a56f47eed950a2b28e0d14bbba2d2911e52e55eb64bf99bb193c30ebd85fbb5588e83a6b6446414efb5f259c382e62f140a6120d2181e09d40687b2de28ec75015d716175d77bc36dc8c1bb688ecdc1b5dd34f06729bfed54cc1e1f0b6381ba3ad4856a3eac0878da18ed5adf04ad8452369df874913ace4d5d8bb1bfd4a4a8fb4a6c37b10d3936dfc89115527f5ee27fdec979d54dc0d269424b044102139703a078fe6dd6", @nested={0x4, 0x4b}, @nested={0x4, 0x11b}]}, @nested={0x87, 0x15, 0x0, 0x1, [@nested={0x4, 0x77}, @generic="0a27a2b498017d165f7f9e39bbc71519651b3d1f5af5f702e205bd59d5b14b0104e856070bf51b365d1f6b7feaee7670a4f1815ccd998741911eb0715f058a6982f1101b61b657fff92d373395122d6508c2ba57604277f445fd0d054cf2fdc446154af7e7d8c15178de0a87f4b21af551712d9054074517", @generic="df08ad2db43536"]}, @generic="39c38293f75561ba6bc312dbf617760a901fe5b2c8a57338584113dc471edfe0ee03854d06285490f75cf88a644b"]}]}]}, @NL80211_ATTR_BEACON_TAIL={0x7fa, 0xf, "bdaa219754db69a8ebe6eeee992ac027e3f409eb0d86b07567c635c37150baa2597f3a9f518d04aabad00f05a9299bd260a1c5df09879d20c5cd1674dab828a5952368699851e512146a31949b2a33420f6ac6475adfb1e1a6a4419914cb895ef3a0bcecd571a724b7983b1d196ca2205a0201ef9abcdc66096ece84f605f59bccd0a68e1972ece8785eba611d186e0131b9e6345dd213079ec34d1362c350a761148e1b57ee1085dad63798dd0d882e5d35570f87dbd9b06422e7491b51a715c1155e5d3a954154110a318dfffff0d827269839458cf00e7c2fa8e924c929480d914ea6f9b1476349c7b75b66921bc4f90c5c294001c01ca456db2edb43d584e40066a94c9ea48e6983e36b83215f9b157f5fffcb44429367d83bbb0db83624a89d2fde7178c45c7ddfa04eb0cc30be50ded1713c4a0196e5881d6d905ae86f76089c0f4b4038ab59fbacdf05ef0aa70378a34632112633d3e7d373df9f6b3556a76e67c0594c876b78f7698b41ff40ebd388300857e86e9c64cf0bea6ce6d72fcd39c4ca9aff538a36ff4203e2cb01c0962f1a4a6df327cc5624336c44bb23993237fd94dd704dc265d866787d006f02560b91fe5cac6a5a8b22389dc6638f3952518d6da746589a529957ee0cd304e25b9ca0ef5846b3b316959b10f1100b3ade7d973272c423a48f5d0df1e68480a8500842ebf6bf4cb03cc57ca17bdd13abd1ceada11e0b48105670d0804d7066d8eb467dfd0ba6849717b197a0ba76f416fbdf8e398ec7d68abd39f526d0ca111abf133a6e905d77242353d9a6f1df0d066ebdb25f40cf4e9c0ddcad64ed5273d4c2e3da3f032ff821fcbd12d51238c851250ff7229bba1119c2d56d9da0c64e2960937ced70ceb44da03c69ba45e459c02672dabd0d01a33eac697834863e4678f4ad424c67bac420a0abdafa2c87612429ffc76b307f0792fdeac05d9f86cb8d607a92dd45be17f104ffed3201dcf40fbe43e102a680630295a93ba53fe7bd923a42ec49490e50c769d68f5de4a89fd589e9b612db41be116d78b2b37ff241c52012db6a457a62e7f1a2bfd1428ee594376b5f31fc7b9922e7d4a28929a93a4803e155887bcf6f6bf7a08b222862317b374981133f5fb78fc8a5b19791939d1aae35251a2a9c430632a65ebe4f18d8a369660cebb5f4a63edc7eb96cc2b5d9196298feb3205c74a5773cb8f03a7136733b6b2f79e491987c0567403334ae4e47b125db3b652f21ea547de226d4c46feb583e04f5b1cd4c94eeefed35eb0434379297ae24bfa3e62b5c19fad31df6b54f1404f883841314bfcd80b1c904d48bd9c76f32d9926352ee6671ca5fc8d4dd72fcc73aeb29cd2a90e86e8b2f3241c7c798ef4b38eb141dc7d1a194a88b16168bcbff0c86489c9887c6abda7128e5693604a3342306030e1436a1e4f76ea28c74fd1ea6b8db923cc8c0571a3dd1b2903ba0c86abcdd66d62545207269ecb9e38d9a904efdcfd36ac1054f8f97f62c458d17d738da59f212ce2563b6a2a79dcd7b98466798de4e41d36340984542d0c128abac5103aa02a4e20358203449d561abe710391dbe696dcb1548bc0661a04a22b9b8693b1f6828b02e9c08faa929c44a273f5f6a033bb9df244aa4b3f1e6df2ffe93ad955328f270e7c895de15f80aa3f544f7eff40e40f4080a7ee72690ca7732ee43fcb27d35107ddf56c402cd25b0e9bf91cd93a47d14c4d40e6a2616fe3d0579b5abbade1acbcc5229d0148b02ed3972ad583a8e53ca304ad61ae7d28f0b380e4b74410dbd3932a0a507f98a0a9236cc0f64a20d950cfff6fe837d3a30edef8ffbec77f28341c7ae8a1c19c6c24f7f81ca113c40686bcf80c5b150a94c1ecf86da980b209ad39894ac74409601ce76cdea141b17048046d7173595e963ee8e74b1ad12413632752311dbd32865f8940ade4d7e44258bb7a6e14ade831e648c3d99b5ed2dd5656ba16be469931b826c3acca99ad6f8f155df349a8d4744737f4c5a89074642ec868209f4ccc98949950b7e6389f967ceefa1345894ee126d3bf3f7184b68b3b730c0fbb8595c0405e36267278d4bf93a78bd128b725014d7d6c4fbf7fcb58ed192a7fae32f9502577b0a6e6678067209bab98814d548c29485e8976cfc20baafe42b1ef3109c21a30f3192d08855cc8ab9e36aaadb8464d20168a5a1c8f5fcfc7dc956c6585aac2db5297b25b9a1826caf52debc5ee18d5b3fcab9b6255a083a0d632951c86735181edc0d2335a3a7617e7206d55aa9cc0672abf0f1172a2c3b222bce86d8225e610c352c8c3f4f09f68a9060e38e646405c0ffc6bbb454696aab290fcd03c111b8f5db3a698857eedab4fb386111ae20335aa414269bada51d540b82db375ac2dcbae7e438d7481aa52c1ec74cc48df134f5e70e28652edc6a260fd57e2ef699fa7d7511b581b933c900edc75c58a37fbdbe4d9d8690b6fb28d780b8bcb4379b3c17352efe32b695b31c365aebc90fc401ea289fc18f6b765ad150989d0de0ebb7d97dd88b7b3c15c2ba62124484da145392522d454dbd664a6a0fa76d7701354d91933639464509c0d08c347ddd5698b2a66ad53503d46d4fbfd923f24760cfc7ceec23f34479243885e37d102357726e276a514f30f2ddda02247aff5f643b02d2821093ffad362b3220ae4cc0080f4df00821a47fc390d1a514ac7aa951b4e3868b1003fc1dc038eb71db607750e0e13fd0734689232a876f616f78f7127d970144b8303ea02eecf56c4118c59b4851516b94f77a0d7a8fc83efa9b742986853ed3358d6d8ab994110759b4024c5b2637172afee3571e9f6a6cd230ef7426ebf88bf6385d89a751070c1a4603f8ab1a8871be3644"}, @NL80211_ATTR_DISABLE_HE={0x4}]}, 0x1f8c}, 0x1, 0x0, 0x0, 0x805}, 0x20000001) (async) readv$auto(0x4, &(0x7f0000003180)={&(0x7f0000003080)="f7b6fa7abb9147f8de077c9a1abd8cd80b128c8a33efd4179b67cb6f6312dfae13bc15d14e3b76dd270947eef93a0af555b065592014fe280964a3d78dac44fb829fb93ad9a4fd7d96be6cce5584c3373d6b7724d888fba9b3f588e706a76d35c4776c2ddb460130402383d10a5b37acf3ae4041355e0457cd9c14c2a4c8ac68febd4cf3a8e93184a9fa7536ca22c418f042f236d05a6adc5017c4f2193a24fc55867ef7d44783040520292289ffd82f4785058fe9e2d6f465bd21d45d75130551017280b255d231d39aa3cde3df10a780900db192e603a6fc5d8ae852a0c6d5", 0xfd9}, 0x7c4c) sendmsg$auto_NETDEV_CMD_QUEUE_GET(r0, &(0x7f0000003280)={&(0x7f00000031c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000003240)={&(0x7f0000003200)={0x3c, r1, 0x300, 0x70bd2b, 0x25dfdbfd, {}, [@NETDEV_A_QUEUE_TYPE={0x8, 0x3, 0x2}, @NETDEV_A_QUEUE_TYPE={0x8, 0x3, 0x40}, @NETDEV_A_QUEUE_IFINDEX={0x8}, @NETDEV_A_QUEUE_TYPE={0x8, 0x3, 0xfff}, @NETDEV_A_QUEUE_ID={0x8, 0x1, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4801}, 0x4000) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000003300)={'veth1_to_hsr\x00', 0x0}) sendmsg$auto_NETDEV_CMD_QUEUE_GET(0xffffffffffffffff, &(0x7f0000003400)={&(0x7f00000032c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000033c0)={&(0x7f0000003340)={0x44, r1, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@NETDEV_A_QUEUE_IFINDEX={0x8}, @NETDEV_A_QUEUE_TYPE={0x8, 0x3, 0x9}, @NETDEV_A_QUEUE_IFINDEX={0x8}, @NETDEV_A_QUEUE_ID={0x8, 0x1, 0xb}, @NETDEV_A_QUEUE_TYPE={0x8, 0x3, 0x3}, @NETDEV_A_QUEUE_IFINDEX={0x8, 0x2, r11}]}, 0x44}, 0x1, 0x0, 0x0, 0x8010}, 0x20004881) r12 = socket(0x21, 0x80009, 0x4) chmod$auto(&(0x7f0000003440)='./file0\x00', 0x8001) (async) fchmod$auto(r12, 0x7fff) (async) fcntl$auto(0xffffffffffffffff, 0x2, 0x95) (async) openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000003480), 0x80000, 0x0) (async) r13 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000003500), r0) sendmsg$auto_ETHTOOL_MSG_PLCA_SET_CFG(r0, &(0x7f0000003600)={&(0x7f00000034c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000035c0)={&(0x7f0000003540)={0x5c, r13, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@ETHTOOL_A_PLCA_BURST_TMR={0x8, 0x9, 0x329}, @ETHTOOL_A_PLCA_ENABLED={0x5, 0x3, 0x1}, @ETHTOOL_A_PLCA_TO_TMR={0x8, 0x7, 0x3}, @ETHTOOL_A_PLCA_TO_TMR={0x8, 0x7, 0x65}, @ETHTOOL_A_PLCA_NODE_CNT={0x8, 0x5, 0x5}, @ETHTOOL_A_PLCA_BURST_TMR={0x8, 0x9, 0x200}, @ETHTOOL_A_PLCA_BURST_CNT={0x8, 0x8, 0x5}, @ETHTOOL_A_PLCA_BURST_TMR={0x8, 0x9, 0x1000}, @ETHTOOL_A_PLCA_NODE_ID={0x8, 0x6, 0x5}]}, 0x5c}, 0x1, 0x0, 0x0, 0x11}, 0xc0) ioctl$auto_TIOCVHANGUP2(0xffffffffffffffff, 0x5437, 0x0) 2m25.491767818s ago: executing program 0 (id=1497): r0 = openat$auto_adf_hb_cfg_fops_adf_heartbeat_dbgfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/ieee80211/phy1/netdev:wlan1/smps\x00', 0x20a00, 0x0) read$auto_adf_hb_cfg_fops_adf_heartbeat_dbgfs(r0, 0x0, 0x0) ppoll$auto(&(0x7f0000000040)={0xffffffffffffffff, 0x5, 0xff}, 0x1, &(0x7f0000000080)={0x0, 0x8}, &(0x7f00000000c0)={0x86}, 0x8) r2 = syz_genetlink_get_family_id$auto_nl802154(0x0, 0xffffffffffffffff) openat$auto_fops_u64_ro_(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/ramdisk_pages/ram9\x00', 0x80, 0x0) sendmsg$auto_NL802154_CMD_STOP_BEACONS(0xffffffffffffffff, &(0x7f00000014c0)={&(0x7f0000001380)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001480)={&(0x7f0000000300)={0x40, r2, 0x400, 0x70bd2a, 0x25dfdbfe, {}, [@NL802154_ATTR_PAN_ID={0x6, 0x9, 0x3}, @NL802154_ATTR_EXTENDED_ADDR={0xc, 0x17, 0x58b}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SCAN_DONE_REASON={0x5, 0x25, 0x10}, @NL802154_ATTR_IFTYPE={0x8, 0x5, 0xd45}]}, 0x40}, 0x1, 0x0, 0x0, 0x8}, 0x4000000) r3 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snd/controlC0\x00', 0x0, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_WRITE(r3, 0xc4c85513, &(0x7f0000000700)={{0x9, 0x3, 0x9, 0x9, "d08a4a423bd019632e5f87b2b8ec3974f013d38093481a3c5611a9e4c5920983f395aa88531ab223832009dd", 0x4}, 0x1, @iec958={"5def5b535dca61e30f1197bd1c6e0700e1631ee71ece3983", "1963d81073684057075ffd2ef807fe95cc44281c954525ee5bf84b07abc0f217869974d6dc513dc3f9c7ceb47965d10af303debe3609d8a4a98d69dfdabb143fb68d3e6d4f7491095b3fd61ace361a32f4e32ed410273621efefc714023105f2255582382eafa6de32f1875d839edf5c77b1122e3cf82e1d34b78e2988029131dc8fc7528f8d3ff2fcb0ce01a275ebdacd1952", 0x0, "0ce8cc04"}, "c75e96eb1fbd078af5ba88ed2ba6685283483138540699e4a5f5d43d269f95bb2ec9c400fc32c207db7ba36ddc5fbbfded04790fcaea61ad8eb1aa27372817e8e41e0b78383dae5587408cf355c6c7eb6d63cb2df1028da1c9583e422a911c528587bc1c6598b38a12a08c222564eda2e8d810c41a410795d28c3963d9f12aec"}) sendmsg$auto_NL802154_CMD_SET_LBT_MODE(r1, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000280)={&(0x7f0000000140)={0x118, r2, 0x800, 0x70bd2c, 0x25dfdbfc, {}, [@NL802154_ATTR_SEC_DEVICE={0xfc, 0x2e, 0x0, 0x1, [@generic="8a4b9d8b4b5bb0de714fd0db7931c216c90fd6620227f16adad717cc8b8e033e3f76c954c0852ad173f68c5ad73d8087db4b29171b0735e20a8c14848404868716d90396b4e062bd200cff811bb20391875f647d98364be82b59951bf467ae5df116c715a7e8fe27ae34a778cf41ffdedc48c1e6335b78dc3ce72101a27f8e9d0aceeb71ddd760bce94ed5378c1c7f92fc05d83ac364269f3c4f346b51e5060c7d37", @generic="e45e135502b92c78261db72af6e6c56b31bb4db3831188c35f5036522c81e70e32478380a3885e5ffd04006aec56db77777ee12dff242456efadf3b46b2f724927c3f4ac18fbea4e7065569944523dd86379061aed0a"]}, @NL802154_ATTR_PAN_ID={0x6}]}, 0x118}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) mknod$auto(&(0x7f0000000580)='u[,&*}\x00\a\x00\x00\x00?\xa4\x1fN\xa1~5Z\xc7\r\f}M4\xa8m\xe6\x19[11\xab\xff-E\xac9(\xb4O\xa0t4h\x9f-gn\x1f\x01\x00\x00\x00\x00\x00\x00\x00\xaeR\x81\r_\x0e\x19\b\x85\bvv(e\xdax)\t\x15\xf6\xc8\xee\x04\x16\xc1\x9a!\x87I7\x8cD&zg\xb0a\xab|E\xde\x14\xee[\xc8\xc0\xa8Nh\x0f\xa3\xdbT\xb3\xb8\xd2F\xa0\xc4]\xaf\xc43&\xe4\x01\x05\xd2\x15\xf8\xf1!\x9d\x92\xbbH\xd3^aD\x87\xd8\xe7\xd2\xf3[r\xc5S&}D[\x97\xf1\xd9\xf8Y\x1c\x03\x84\xb4\xd7\x16\x19\xe5\x17\x10\xd8fcG:\xfbY8\x17w\x98?\x03@\xe5\x02\x05\x93h\xb9\xf7\xef\x84\x8aGlN\a\x1e\x00\x00\x00\x00\x00\x00\x00\xf1p\xeb\xe9(%\x89\xef\x85\xdfr\xce\x00\x00\x00\x00\xff\x00\xa2M\'d\x12\x1c\x12\xca\xa5_\x8d\xdf\xc5\x8d\x19?\xfc~\xb3X\x14\xa7\xa9M\x87\xfcTW\x1bR\xbci\x8d\x8aNEO\xb3~~\xa8\xa6\x894\x80;s\xb7\xa3V\x1b\x14|\x9e\xd4\x05\x85\x0f!\xab-E\'\x97Y\xb7\xe8fMv_\xf8\xa0S\xef\xb7\b\xe7!T.g\x92\x87\t$\x06\xa4\xfb\x83\x8c\x17^\x82\xe7\xd3\xf6q\x1a\xa0\xf82[W\x90\xdd\xe3\xde\xa9\xde\x94`-\x9a\x1e}\xebO*\xb85,v.\xfc5\xba?vlt\xda%\x06a\x15I\x1f\xe3\x05+\x810T2\xf9\x9b\xc7\xd1\t\x03\xf2\x8d\x8a\x90\xb54\bH<9\xf1\x91 D\x85g,\xaa\xca\xcd\xd5\xcb\x9a\xb1j\xf2F\xce\x14\x92\xf9\xd7\xec\xc5\x1e\x8aq2\xce\x881f\xd7\xd4\x9e\xf6\xb6P\x01\xe8T\xb5X\xb9d-I\xd6\x91\xc3\xe2\x88S\x82l=\x02t$p\t\x8cY\x06\r\x83\xb0\x86\xc6\x84\x1c\xce\xb6\xf0\xdfC\x9fj<\xfe\xa4\x1f\x82L\xe4\x13+H\x00\x00\x00\x00\x00\x00\x00\x01M\x16\xa0\xbeB6\xfb\xa2-\x17\x93Q\x9fKusl5\xa2$M\xb4\x18\x1db\xf3\xce\x8c\xe5Rna\xd5\xbbQ\xc7\xa7+\vH\xc1l\x1bIv\xe8_', 0x1081, 0x9) acct$auto(&(0x7f0000000380)='u[,&*}\x00\a\x00\x00\x00?\xa4\x1fN\xa1~5Z\xc7\r\f}M4\xa8m\xe6\x19[11\xab\xff-E\xac9(\xb4O\xa0t4h\x9f-gn\x1f\x0f\x18\xc5\x82=s\x83\xe6\xae\x00\x00\x00\x00\x0e\x19\x12\x85\bvf(e\xda\x92\x97\t\x15\xf6\xc8\xee\x04\x16\xc1\x1a!\x1d\xe0\xb7\x06D&zg\xb0a\xab|E\xde\x14\xee[\xe1\xc0\xa8Nh\x0f\xa3\xdfT\xb3\xb8\xd2F\xa0\xc4]\xaf\xc43&\xe4\x01\x05\xd2\x15\xf8\xf1!\x9d\x92\xbbHL9aD\xb4\x80\xed\xba>\"\xb6\x7f\xa3f\x1d\a\xa1\x87\x84uA\xd8\xe7\xd2\xf3[r\xc5S&}D[\x97\xf1\xd9\xf8Y\xc5OA\xa0\xc4%\xfa\x12\x10\xd8\ncG:\xfbY8\x17w\x98?\x03@\xe5\x02\x05\x93h\xb9\xf7\xef\x84\x8aGlN\a\x1e\v\xe7|v\xb4*\xf1\xfb\x96\xeb\x87[\xed}\xa5\x99\xae\xed\x9f\xeb\xb7\xd8}\b\xabYq\x94_\xf8\x9cg\xd8X\xa1\xe2\x81^3\x9d$ =\x97\x9a\x8d') openat$dir(0xffffffffffffff9c, &(0x7f0000001340)='u[,&*}\x00\a\x00\x00\x00?\xa4\x1fN\xa1~5Z\xc7\r\f}M4\xa8m\xe6\x19[11\xab\xff-E\xac9(\xb4O\xa0t4h\x9f-gn\x1f\x01\x00\x00\x00\x00\x00\x00\x00\xaeR\x81\r_\x0e\x19\b\x85\bvv(e\xdax)\t\x15\xf6\xc8\xee\x04\x16\xc1\x9a!\x87I7\x8cD&zg\xb0a\xab|E\xde\x14\xee[\xc8\xc0\xa8Nh\x0f\xa3\xdbT\xb3\xb8\xd2F\xa0\xc4]\xaf\xc43&\xe4\x01\x05\xd2\x15\xf8\xf1!\x9d\x92\xbbH\xd3^aD\x87\xd8\xe7\xd2\xf3[r\xc5S&}D[\x97\xf1\xd9\xf8Y\x1c\x03\x84\xb4\xd7\x16\x19\xe5\x17\x10\xd8fcG:\xfbY8\x17w\x98?\x03@\xe5\x02\x05\x93h\xb9\xf7\xef\x84\x8aGlN\a\x1e\x00\x00\x00\x00\x00\x00\x00\xf1p\xeb\xe9(%\x89\xef\x85\xdfr\xce\x00\x00\x00\x00\xff\x00\xa2M\'d\x12\x1c\x12\xca\xa5_\x8d\xdf\xc5\x8d\x19?\xfc~\xb3X\x14\xa7\xa9M\x87\xfcTW\x1bR\xbci\x8d\x8aNEO\xb3~~\xa8\xa6\x894\x80;s\xb7\xa3V\x1b\x14|\x9e\xd4\x05\x85\x0f!\xab-E\'\x97Y\xb7\xe8fMv_\xf8\xa0S\xef\xb7\b\xe7!T.g\x92\x87\t$\x06\xa4\xfb\x83\x8c\x17^\x82\xe7\xd3\xf6q\x1a\xa0\xf82[W\x90\xdd\xe3\xde\xa9\xde\x94`-\x9a\x1e}\xebO*\xb85,v.\xfc5\xba?vlt\xda%\x06a\x15I\x1f\xe3\x05+\x810T2\xf9\x9b\xc7\xd1\t\x03\xf2\x8d\x8a\x90\xb54\bH<9\xf1\x91 D\x85g,\xaa\xca\xcd\xd5\xcb\x9a\xb1j\xf2F\xce\x14\x92\xf9\xd7\xec\xc5\x1e\x8aq2\xce\x881f\xd7\xd4\x9e\xf6\xb6P\x01\xe8T\xb5X\xb9d-I\xd6\x91\xc3\xe2\x88S\x82l=\x02t$p\t\x8cY\x06\r\x83\xb0\x86\xc6\x84\x1c\xce\xb6\xf0\xdfC\x9fj<\xfe\xa4\x1f\x82L\xe4\x13+H\x00\x00\x00\x00\x00\x00\x00\x01M\x16\xa0\xbeB6\xfb\xa2-\x17\x93Q\x9fKusl5\xa2$M\xb4\x18\x1db\xf3\xce\x8c\xe5Rna\xd5\xbbQ\xc7\xa7+\vH\xc1l\x1bIv\xe8_/file0\x00', 0x40000, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram14\x00', 0x20201, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x19) ioctl$auto(0x3, 0x80081270, 0x38) r4 = openat$auto_rfkill_fops_core(0xffffffffffffff9c, &(0x7f0000000140), 0x382, 0x0) write$auto_rfkill_fops_core(r4, 0x0, 0x700) close_range$auto(r0, r4, 0x800) 2m22.238075468s ago: executing program 33 (id=1476): mkdir$auto(&(0x7f00000003c0)='}[,&*}\x00', 0x6) (async) chroot$auto(&(0x7f0000000000)='}[,&*}\x00') rseq$auto(&(0x7f0000000300)={0xe, 0x401, 0x0, 0x6, 0xffffffff, 0x2}, 0x8000, 0x0, 0x6) (async) rseq$auto(&(0x7f0000000300)={0xe, 0x401, 0x0, 0x6, 0xffffffff, 0x2}, 0x8002, 0x0, 0x6) mount$auto(0x0, &(0x7f0000000100)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0x10001, 0x0) (async) lstat$auto(&(0x7f0000000040)='}[,&*}/../file0\x00', 0x0) 2m15.267537304s ago: executing program 4 (id=1516): r0 = openat$auto_mousedev_fops_mousedev(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/mouse0\x00', 0x341, 0x0) write$auto_mousedev_fops_mousedev(r0, &(0x7f0000000000)="8a", 0x1) poll$auto(&(0x7f0000000040)={r0, 0xc, 0xb6d}, 0x7, 0x0) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x400c000) mmap$auto(0x0, 0x40000a, 0xdf, 0x9b72, 0x2, 0x8000) getsockname$auto(0xffffffffffffffff, &(0x7f0000000000)=@tipc=@nameseq={0x1e, 0x1, 0x3, {0x42, 0x1, 0x1}}, 0x0) r1 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/conf/wg1/disable_xfrm\x00', 0x143402, 0x0) r2 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/kernel/perf_cpu_time_max_percent\x00', 0xa042, 0x0) sendfile$auto(r2, r1, 0x0, 0x48) close_range$auto(0x2, 0xa, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'lo\x00', 0x0}) sendmsg$auto_ETHTOOL_MSG_RINGS_GET(r3, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="788ffa00", @ANYRES16=0x0, @ANYBLOB="020026bd7000fedbdf250f000000200001800800030009000000140002006261746164765f736c6176655f3100004400018008000100", @ANYRES32=r4, @ANYBLOB="140002006970366772657461703000000000000008000100", @ANYRES32=r5, @ANYBLOB="080003006d1100001400020062617461647630000000000000000000"], 0x78}, 0x1, 0x0, 0x0, 0x4}, 0x24000804) socket(0x1e, 0x4, 0x0) r6 = socket(0x1e, 0x4, 0x0) get_robust_list$auto(0x0, 0x0, 0x0) setsockopt$auto(r6, 0x10f, 0x87, 0x0, 0x14) setsockopt$auto(0x3, 0x10f, 0x87, 0x0, 0x14) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket(0xa, 0x2, 0x73) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000180)='ns/ipc\x00') socket(0x2, 0x5, 0x0) openat$auto_tomoyo_self_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000001c00), 0xc0b40, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 2m14.871561367s ago: executing program 4 (id=1517): syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000015c0), 0xffffffffffffffff) (async) bpf$auto(0x5, 0xfffffffffffffffe, 0x0) (async) mlockall$auto(0x7) (async) close_range$auto(0x0, 0xfffffffffffff000, 0x2) (async) r0 = socket(0x2, 0x1, 0x0) (async) socket(0xa, 0x3, 0x3a) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r1 = getpgid(0x0) sendmsg$auto_NL802154_CMD_DISASSOCIATE(r0, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000180)={&(0x7f0000000280)={0x4c, 0x0, 0x400, 0x70bd2b, 0x25dfdbfe, {}, [@NL802154_ATTR_SEC_FRAME_COUNTER={0x8, 0x2c, 0x4}, @NL802154_ATTR_MIN_BE={0x5, 0x11, 0x2}, @NL802154_ATTR_TX_POWER={0x8, 0xb, 0x4000}, @NL802154_ATTR_SCAN_CHANNELS={0x8, 0x21, 0x200}, @NL802154_ATTR_SCAN_DURATION={0x5}, @NL802154_ATTR_SEC_FRAME_COUNTER={0x8, 0x2c, 0x2}, @NL802154_ATTR_PID={0x8, 0x1c, r1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000045}, 0x200040c0) r2 = socket(0xa, 0x2, 0x88) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'bond0\x00', 0x0}) bpf$auto(0x0, &(0x7f00000000c0)=@bpf_attr_5={@target_ifindex=r4, r3, 0x4, 0x1ff, r2, @relative_id=0x13, 0xe600}, 0xf) (async) waitid$auto(0x7, 0x0, &(0x7f0000000380)={@siginfo_0_0={0x3ff, 0x6, 0x7ff, @_sigsys={&(0x7f0000000340)="8c24378ebe6c686d89f98791eb58d4dc443eb5081e1b38e5d1475744e6ea82975be71950e06952e69b27a464a769368a50124d2e810f123daefc8b22e37b", 0x100, 0x101}}}, 0x8, &(0x7f0000000400)={{0x7fff, 0x101}, {0xfffffffffffffff8}, 0x30ba, 0x401, 0x0, 0x2, 0x2, 0x0, 0x10000, 0xc25, 0x1e, 0x0, 0x3, 0x7f, 0x5, 0x9}) (async) r5 = open(&(0x7f0000000000)='./file0\x00', 0x261c2, 0x84) bpf$auto(0x2, &(0x7f00000001c0)=@raw_tracepoint={0x5, r5, 0x0, 0x3}, 0xc) (async) mbind$auto(0x0, 0x100000004, 0x100000000, 0x0, 0x20000000000004, 0x2) 2m14.671803965s ago: executing program 4 (id=1519): r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x4040, 0x75) socket(0xa, 0x2, 0x3a) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "ab06fdffff00fff500"}, 0x55) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r0, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000dc0)={&(0x7f0000000340)={0x1c, 0x0, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [@HWSIM_ATTR_REG_CUSTOM_REG={0x8, 0xc, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040014}, 0x4010) 2m14.631363568s ago: executing program 4 (id=1520): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r0 = openat$auto_nvram_misc_fops_nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$auto(r0, &(0x7f00000000c0)=',+\x00', 0xb28) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000040), r1) write$auto(r0, 0x0, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_clone3(&(0x7f00000002c0)={0x8000000, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180), {0x3c}, &(0x7f00000001c0)=""/143, 0x8f, &(0x7f0000000580)=""/4096, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff], 0x6}, 0x58) get_robust_list$auto(r3, &(0x7f0000000500)=&(0x7f00000004c0)={{&(0x7f0000000380)={&(0x7f0000000340)}}, 0x9, &(0x7f0000000440)={&(0x7f0000000400)={&(0x7f00000003c0)}}}, &(0x7f0000001580)=0xfff) r4 = syz_genetlink_get_family_id$auto_seg6(&(0x7f0000000480), r2) sendmsg$auto_SEG6_CMD_SETHMAC(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)={0x14, r4, 0x8, 0x70bd26, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4004015}, 0x48040) 2m13.936036886s ago: executing program 4 (id=1522): mkdir$auto(&(0x7f00000001c0)='}[,&*}\x00', 0x2) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_ovs_vport(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_OVS_VPORT_CMD_DEL(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r2, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@OVS_VPORT_ATTR_PORT_NO={0x8, 0x1, 0x7ff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'bond0\x00', 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000880), r4) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000940)={'batadv0\x00', 0x0}) sendmsg$auto_BATADV_CMD_GET_ORIGINATORS(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000380)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="93ab2cbd7000fbdbdf250800000008000300", @ANYRES32=r7, @ANYBLOB="08000600002b49"], 0x24}, 0x1, 0x0, 0x0, 0xc811}, 0x10) sendmsg$auto_OVS_VPORT_CMD_NEW(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000000c0)={&(0x7f00000002c0)={0x2dc, r2, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@OVS_VPORT_ATTR_IFINDEX={0x8, 0x8, r3}, @OVS_VPORT_ATTR_IFINDEX={0x8, 0x8, r7}, @OVS_VPORT_ATTR_NAME={0xa, 0x3, '.%@^,\x00'}, @OVS_VPORT_ATTR_TYPE={0x8, 0x2, 0xfffffffa}, @OVS_VPORT_ATTR_PORT_NO={0x8, 0x1, 0x2}, @OVS_VPORT_ATTR_UPCALL_STATS={0x268, 0xa, 0x0, 0x1, [@nested={0x1a8, 0x10a, 0x0, 0x1, [@generic="d628895125bdea509539bebcdbb3bb62f6c095edb6eacd2c363b5ef40736fbee93dd2919891b38f6c41196c718203d4f7db040e6b4d2", @typed={0x14, 0x91, 0x0, 0x0, @ipv6=@private0={0xfc, 0x0, '\x00', 0x1}}, @generic="87be19367d810cbe5bc78f45f9d69dac4b9faecb61bebebcdc7c6f166406efc3e2ed60d9b81325dc1bb922bb2873b5", @nested={0x4, 0x10c}, @nested={0x4, 0x129}, @typed={0x37, 0xa2, 0x0, 0x0, @binary="f98b631bb8ecdb7442e93106030cfe73e0426e40516023b0e69d98a2db6b1aa25855051db6bc08ab7e2a0b50cfeded855fa096"}, @generic="4682f7c57fdaeeaae948fe1432c0e59ea7084760f120283f81ea97cf1617d25caa145530bf0549c5511ac987fcfcbc71b61b9b1ad4ca631f7f5eab2342eafc3813922f9d8190e9f086c3a2300d6aa13ab362795c42f3ffcb7f6b47335af56a5b075c5541f52c8da34c082d064f823d83905c2317784781bf6f00f05399d489e8f941559c2b0e9a759957f17ec6c11107afb0ed0a3e47870c113a9301e0a4063f86fe26500033374614b5427ba79bb962c3eb1ef545eead2f324abc4e4cb1a890740ef8c0fd915447406739db9623518ebe0a88cd2acc44f64463f069bc1cd7b51c557712dc38ef46f53c4a"]}, @generic="08f68ffc40a3316af2a062654d13ac39cb2b00f6538981f2c692e6abe0b199187d70b2d9714a08f0f7bb1561b8ca6281519b09c1a687d1591a9dd35902041c961bed6a164340ff45013c5eeefd7ce7b804fd845aeb9dbceca878d5a4a2207ace83b1be5fdb0971b6385b3074e8d2b4917f970e785437ac5b31648142c39ff7c8e9f471708c94c47a75927f2c0c6d8d19ca1ae0f32c02e3b62f96de0a83a1b51e35a04aa4620a890876810a07e1fa08cbc147b5225e85d68ac27a79b5"]}, @OVS_VPORT_ATTR_UPCALL_PID={0x34, 0x5, "ff02015b4ac9472c0306a369462e706c4e7d0308e4acb4567aaa1340ed894baba50c9c3f1fa8ff25f6b7129367f3c4fa"}]}, 0x2dc}, 0x1, 0x0, 0x0, 0x40000}, 0x0) rename$auto(&(0x7f0000000000)='}[,&*}\x00', &(0x7f00000000c0)='}[,&*}\x00') mount$auto(0x0, &(0x7f0000000100)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0x10001, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0x800000000000eb1, 0xfffffffffffffffa, 0x8000) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS0\x00', 0x48140, 0x0) sendmsg$auto_NL80211_CMD_SET_PMKSA(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x24, 0x0, 0x200, 0x70bd2c, 0x25dfdbfb, {}, [@NL80211_ATTR_WIPHY_RETRY_LONG={0x5, 0x3e, 0xce}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0xd2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x40050) ioctl$auto(0x3, 0x5407, 0x38) chdir$auto(&(0x7f0000000040)='}[,&*}\x00') r8 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='}[,&*}\x00', 0xa00, 0x60) getxattrat$auto(r8, &(0x7f0000000200)='}[,&*}\x00', 0x0, &(0x7f0000000240)='%:\x1a$.:^#]*:@\x00', &(0x7f00000002c0)={0x2, 0x0, 0x6}, 0x0) syz_clone3(&(0x7f00000009c0)={0x80000000, &(0x7f00000006c0), &(0x7f0000000700), &(0x7f0000000740)=0x0, {0x17}, &(0x7f0000000780)=""/234, 0xea, &(0x7f00000008c0)=""/47, &(0x7f0000000980)=[0xffffffffffffffff], 0x1}, 0x58) r10 = openat$auto_trace_options_core_fops_trace(0xffffffffffffff9c, &(0x7f0000000a40)='/sys/kernel/debug/tracing/options/disable_on_free\x00', 0x80000, 0x0) bpf$auto(0x8, &(0x7f0000000a80)=@task_fd_query={r9, r10, 0x0, 0xe, 0x8, 0xf179, r8, 0xfffffffffffffe01, 0xc1}, 0xc) timerfd_settime$auto(0xffffffffffffffff, 0x1, &(0x7f0000002f40)={{0xffffffffffffffff, 0x3ff}, {0x37e, 0x2}}, 0x0) r11 = openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x2400, 0x8) fremovexattr$auto(r11, &(0x7f0000000080)='#\x88') 2m13.233338103s ago: executing program 4 (id=1524): r0 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000540)='/dev/sequencer2\x00', 0x80011, 0x0) write$auto_seq_oss_f_ops_seq_oss(r0, &(0x7f0000000740)="fe18a2b6ff964fdd", 0x8) socket(0x2, 0x800, 0x4) listen$auto(0x3, 0x83) accept$auto(0x3, 0xffffffffffffffff, 0xfffffffffffffffd) shutdown$auto(0x200000003, 0x2) 2m10.346278976s ago: executing program 34 (id=1497): r0 = openat$auto_adf_hb_cfg_fops_adf_heartbeat_dbgfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/ieee80211/phy1/netdev:wlan1/smps\x00', 0x20a00, 0x0) read$auto_adf_hb_cfg_fops_adf_heartbeat_dbgfs(r0, 0x0, 0x0) ppoll$auto(&(0x7f0000000040)={0xffffffffffffffff, 0x5, 0xff}, 0x1, &(0x7f0000000080)={0x0, 0x8}, &(0x7f00000000c0)={0x86}, 0x8) r2 = syz_genetlink_get_family_id$auto_nl802154(0x0, 0xffffffffffffffff) openat$auto_fops_u64_ro_(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/ramdisk_pages/ram9\x00', 0x80, 0x0) sendmsg$auto_NL802154_CMD_STOP_BEACONS(0xffffffffffffffff, &(0x7f00000014c0)={&(0x7f0000001380)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001480)={&(0x7f0000000300)={0x40, r2, 0x400, 0x70bd2a, 0x25dfdbfe, {}, [@NL802154_ATTR_PAN_ID={0x6, 0x9, 0x3}, @NL802154_ATTR_EXTENDED_ADDR={0xc, 0x17, 0x58b}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SCAN_DONE_REASON={0x5, 0x25, 0x10}, @NL802154_ATTR_IFTYPE={0x8, 0x5, 0xd45}]}, 0x40}, 0x1, 0x0, 0x0, 0x8}, 0x4000000) r3 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snd/controlC0\x00', 0x0, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_WRITE(r3, 0xc4c85513, &(0x7f0000000700)={{0x9, 0x3, 0x9, 0x9, "d08a4a423bd019632e5f87b2b8ec3974f013d38093481a3c5611a9e4c5920983f395aa88531ab223832009dd", 0x4}, 0x1, @iec958={"5def5b535dca61e30f1197bd1c6e0700e1631ee71ece3983", "1963d81073684057075ffd2ef807fe95cc44281c954525ee5bf84b07abc0f217869974d6dc513dc3f9c7ceb47965d10af303debe3609d8a4a98d69dfdabb143fb68d3e6d4f7491095b3fd61ace361a32f4e32ed410273621efefc714023105f2255582382eafa6de32f1875d839edf5c77b1122e3cf82e1d34b78e2988029131dc8fc7528f8d3ff2fcb0ce01a275ebdacd1952", 0x0, "0ce8cc04"}, "c75e96eb1fbd078af5ba88ed2ba6685283483138540699e4a5f5d43d269f95bb2ec9c400fc32c207db7ba36ddc5fbbfded04790fcaea61ad8eb1aa27372817e8e41e0b78383dae5587408cf355c6c7eb6d63cb2df1028da1c9583e422a911c528587bc1c6598b38a12a08c222564eda2e8d810c41a410795d28c3963d9f12aec"}) sendmsg$auto_NL802154_CMD_SET_LBT_MODE(r1, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000280)={&(0x7f0000000140)={0x118, r2, 0x800, 0x70bd2c, 0x25dfdbfc, {}, [@NL802154_ATTR_SEC_DEVICE={0xfc, 0x2e, 0x0, 0x1, [@generic="8a4b9d8b4b5bb0de714fd0db7931c216c90fd6620227f16adad717cc8b8e033e3f76c954c0852ad173f68c5ad73d8087db4b29171b0735e20a8c14848404868716d90396b4e062bd200cff811bb20391875f647d98364be82b59951bf467ae5df116c715a7e8fe27ae34a778cf41ffdedc48c1e6335b78dc3ce72101a27f8e9d0aceeb71ddd760bce94ed5378c1c7f92fc05d83ac364269f3c4f346b51e5060c7d37", @generic="e45e135502b92c78261db72af6e6c56b31bb4db3831188c35f5036522c81e70e32478380a3885e5ffd04006aec56db77777ee12dff242456efadf3b46b2f724927c3f4ac18fbea4e7065569944523dd86379061aed0a"]}, @NL802154_ATTR_PAN_ID={0x6}]}, 0x118}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) mknod$auto(&(0x7f0000000580)='u[,&*}\x00\a\x00\x00\x00?\xa4\x1fN\xa1~5Z\xc7\r\f}M4\xa8m\xe6\x19[11\xab\xff-E\xac9(\xb4O\xa0t4h\x9f-gn\x1f\x01\x00\x00\x00\x00\x00\x00\x00\xaeR\x81\r_\x0e\x19\b\x85\bvv(e\xdax)\t\x15\xf6\xc8\xee\x04\x16\xc1\x9a!\x87I7\x8cD&zg\xb0a\xab|E\xde\x14\xee[\xc8\xc0\xa8Nh\x0f\xa3\xdbT\xb3\xb8\xd2F\xa0\xc4]\xaf\xc43&\xe4\x01\x05\xd2\x15\xf8\xf1!\x9d\x92\xbbH\xd3^aD\x87\xd8\xe7\xd2\xf3[r\xc5S&}D[\x97\xf1\xd9\xf8Y\x1c\x03\x84\xb4\xd7\x16\x19\xe5\x17\x10\xd8fcG:\xfbY8\x17w\x98?\x03@\xe5\x02\x05\x93h\xb9\xf7\xef\x84\x8aGlN\a\x1e\x00\x00\x00\x00\x00\x00\x00\xf1p\xeb\xe9(%\x89\xef\x85\xdfr\xce\x00\x00\x00\x00\xff\x00\xa2M\'d\x12\x1c\x12\xca\xa5_\x8d\xdf\xc5\x8d\x19?\xfc~\xb3X\x14\xa7\xa9M\x87\xfcTW\x1bR\xbci\x8d\x8aNEO\xb3~~\xa8\xa6\x894\x80;s\xb7\xa3V\x1b\x14|\x9e\xd4\x05\x85\x0f!\xab-E\'\x97Y\xb7\xe8fMv_\xf8\xa0S\xef\xb7\b\xe7!T.g\x92\x87\t$\x06\xa4\xfb\x83\x8c\x17^\x82\xe7\xd3\xf6q\x1a\xa0\xf82[W\x90\xdd\xe3\xde\xa9\xde\x94`-\x9a\x1e}\xebO*\xb85,v.\xfc5\xba?vlt\xda%\x06a\x15I\x1f\xe3\x05+\x810T2\xf9\x9b\xc7\xd1\t\x03\xf2\x8d\x8a\x90\xb54\bH<9\xf1\x91 D\x85g,\xaa\xca\xcd\xd5\xcb\x9a\xb1j\xf2F\xce\x14\x92\xf9\xd7\xec\xc5\x1e\x8aq2\xce\x881f\xd7\xd4\x9e\xf6\xb6P\x01\xe8T\xb5X\xb9d-I\xd6\x91\xc3\xe2\x88S\x82l=\x02t$p\t\x8cY\x06\r\x83\xb0\x86\xc6\x84\x1c\xce\xb6\xf0\xdfC\x9fj<\xfe\xa4\x1f\x82L\xe4\x13+H\x00\x00\x00\x00\x00\x00\x00\x01M\x16\xa0\xbeB6\xfb\xa2-\x17\x93Q\x9fKusl5\xa2$M\xb4\x18\x1db\xf3\xce\x8c\xe5Rna\xd5\xbbQ\xc7\xa7+\vH\xc1l\x1bIv\xe8_', 0x1081, 0x9) acct$auto(&(0x7f0000000380)='u[,&*}\x00\a\x00\x00\x00?\xa4\x1fN\xa1~5Z\xc7\r\f}M4\xa8m\xe6\x19[11\xab\xff-E\xac9(\xb4O\xa0t4h\x9f-gn\x1f\x0f\x18\xc5\x82=s\x83\xe6\xae\x00\x00\x00\x00\x0e\x19\x12\x85\bvf(e\xda\x92\x97\t\x15\xf6\xc8\xee\x04\x16\xc1\x1a!\x1d\xe0\xb7\x06D&zg\xb0a\xab|E\xde\x14\xee[\xe1\xc0\xa8Nh\x0f\xa3\xdfT\xb3\xb8\xd2F\xa0\xc4]\xaf\xc43&\xe4\x01\x05\xd2\x15\xf8\xf1!\x9d\x92\xbbHL9aD\xb4\x80\xed\xba>\"\xb6\x7f\xa3f\x1d\a\xa1\x87\x84uA\xd8\xe7\xd2\xf3[r\xc5S&}D[\x97\xf1\xd9\xf8Y\xc5OA\xa0\xc4%\xfa\x12\x10\xd8\ncG:\xfbY8\x17w\x98?\x03@\xe5\x02\x05\x93h\xb9\xf7\xef\x84\x8aGlN\a\x1e\v\xe7|v\xb4*\xf1\xfb\x96\xeb\x87[\xed}\xa5\x99\xae\xed\x9f\xeb\xb7\xd8}\b\xabYq\x94_\xf8\x9cg\xd8X\xa1\xe2\x81^3\x9d$ =\x97\x9a\x8d') openat$dir(0xffffffffffffff9c, &(0x7f0000001340)='u[,&*}\x00\a\x00\x00\x00?\xa4\x1fN\xa1~5Z\xc7\r\f}M4\xa8m\xe6\x19[11\xab\xff-E\xac9(\xb4O\xa0t4h\x9f-gn\x1f\x01\x00\x00\x00\x00\x00\x00\x00\xaeR\x81\r_\x0e\x19\b\x85\bvv(e\xdax)\t\x15\xf6\xc8\xee\x04\x16\xc1\x9a!\x87I7\x8cD&zg\xb0a\xab|E\xde\x14\xee[\xc8\xc0\xa8Nh\x0f\xa3\xdbT\xb3\xb8\xd2F\xa0\xc4]\xaf\xc43&\xe4\x01\x05\xd2\x15\xf8\xf1!\x9d\x92\xbbH\xd3^aD\x87\xd8\xe7\xd2\xf3[r\xc5S&}D[\x97\xf1\xd9\xf8Y\x1c\x03\x84\xb4\xd7\x16\x19\xe5\x17\x10\xd8fcG:\xfbY8\x17w\x98?\x03@\xe5\x02\x05\x93h\xb9\xf7\xef\x84\x8aGlN\a\x1e\x00\x00\x00\x00\x00\x00\x00\xf1p\xeb\xe9(%\x89\xef\x85\xdfr\xce\x00\x00\x00\x00\xff\x00\xa2M\'d\x12\x1c\x12\xca\xa5_\x8d\xdf\xc5\x8d\x19?\xfc~\xb3X\x14\xa7\xa9M\x87\xfcTW\x1bR\xbci\x8d\x8aNEO\xb3~~\xa8\xa6\x894\x80;s\xb7\xa3V\x1b\x14|\x9e\xd4\x05\x85\x0f!\xab-E\'\x97Y\xb7\xe8fMv_\xf8\xa0S\xef\xb7\b\xe7!T.g\x92\x87\t$\x06\xa4\xfb\x83\x8c\x17^\x82\xe7\xd3\xf6q\x1a\xa0\xf82[W\x90\xdd\xe3\xde\xa9\xde\x94`-\x9a\x1e}\xebO*\xb85,v.\xfc5\xba?vlt\xda%\x06a\x15I\x1f\xe3\x05+\x810T2\xf9\x9b\xc7\xd1\t\x03\xf2\x8d\x8a\x90\xb54\bH<9\xf1\x91 D\x85g,\xaa\xca\xcd\xd5\xcb\x9a\xb1j\xf2F\xce\x14\x92\xf9\xd7\xec\xc5\x1e\x8aq2\xce\x881f\xd7\xd4\x9e\xf6\xb6P\x01\xe8T\xb5X\xb9d-I\xd6\x91\xc3\xe2\x88S\x82l=\x02t$p\t\x8cY\x06\r\x83\xb0\x86\xc6\x84\x1c\xce\xb6\xf0\xdfC\x9fj<\xfe\xa4\x1f\x82L\xe4\x13+H\x00\x00\x00\x00\x00\x00\x00\x01M\x16\xa0\xbeB6\xfb\xa2-\x17\x93Q\x9fKusl5\xa2$M\xb4\x18\x1db\xf3\xce\x8c\xe5Rna\xd5\xbbQ\xc7\xa7+\vH\xc1l\x1bIv\xe8_/file0\x00', 0x40000, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram14\x00', 0x20201, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x19) ioctl$auto(0x3, 0x80081270, 0x38) r4 = openat$auto_rfkill_fops_core(0xffffffffffffff9c, &(0x7f0000000140), 0x382, 0x0) write$auto_rfkill_fops_core(r4, 0x0, 0x700) close_range$auto(r0, r4, 0x800) 2m9.698070855s ago: executing program 3 (id=1534): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) mmap$auto(0x4, 0x1, 0x60, 0x10, 0x7, 0x6) r0 = socket(0x10, 0x2, 0x0) statmount$auto(0x0, &(0x7f0000000040)={0x7, 0x10000, 0xffffffffffffd2e4, 0x8, 0x6, 0x6de, 0x1, 0x1, 0x6, 0x8, 0x4, 0x2, 0x80, 0x3, 0x8, 0xdd2, 0x4, 0xe91, 0x6, 0x81}, 0x7fff, 0x80000001) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022abd7000fbdbdf25020000000800021d00020000080003"], 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0xc0) sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB=' \x00\''], 0x1ac}}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 2m9.180555256s ago: executing program 3 (id=1535): openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x82802, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) socket(0x2, 0x6, 0x0) epoll_create$auto(0x4) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x10, 0x3, 0x6) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mmap$auto(0xfffffffffffffffe, 0x75da, 0xffffffffffffffff, 0x9b7e, 0x10000000000002, 0x800008000) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x4, 0x300000000000) sigaltstack$auto(0x0, 0x0) io_uring_setup$auto(0x6, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket(0x15, 0x5, 0x0) r2 = socket(0x10, 0x2, 0xc) sendmsg$auto_ETHTOOL_MSG_WOL_SET(0xffffffffffffffff, &(0x7f0000002cc0)={0x0, 0x0, &(0x7f0000002c80)={&(0x7f0000000340)={0x18, 0x0, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@ETHTOOL_A_WOL_MODES={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x801}, 0x40) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=ANY=[@ANYRES16, @ANYRESDEC=r2, @ANYRES8=r2], 0x18}, 0x1, 0x0, 0x0, 0x60008004}, 0x80) socket(0x10, 0x2, 0xc) mprotect$auto(0x1ffff000, 0x8000000000000001, 0xd) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ttynull\x00', 0xa801, 0x0) ioctl$auto_TIOCVHANGUP2(r3, 0x5437, 0x0) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x4000000) r4 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_TUNNEL_INFO_GET(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, r4, 0x400, 0x70bd28, 0x25dfdbfe, {}, [@ETHTOOL_A_TUNNEL_INFO_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000000}, 0x4000000) socket$nl_generic(0x10, 0x3, 0x10) select$auto(0xc, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0xffffffff, 0x15f4da0a, 0x1, 0x3, 0x0, 0x7fffffff, 0x7, 0x6d3c, 0x5, 0x2]}, 0x0) write$auto(0x3, 0x0, 0xd7d) 2m8.648728279s ago: executing program 3 (id=1537): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x4000008000) r0 = socket(0x2, 0x1, 0x0) close_range$auto(0x2, 0x8, 0x0) memfd_create$auto(0x0, 0xe) socket(0x2, 0x1, 0x106) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @loopback}, 0x6a) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x5, 0x20000000) ppoll$auto(0x0, 0x7, 0x0, 0x0, 0x8) socket$nl_generic(0x10, 0x3, 0x10) prctl$auto(0x0, 0x81, 0xb, 0x8000000000000001, 0x1) process_vm_readv$auto(0x0, 0x0, 0x1, 0x0, 0x6, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, 0x0, 0x4, 0x0) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) poll$auto(0x0, 0x5, 0x400) write$auto(0x3, 0x0, 0xfdf3) 2m7.547240971s ago: executing program 3 (id=1540): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ram2\x00', 0x8001, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x100) close_range$auto(0x0, 0xfffffffffffff000, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x0, 0xfffffffffffff000, 0x2) landlock_create_ruleset$auto(&(0x7f0000000000)={0xdaa0, 0x1, 0x8}, 0x9, 0x0) landlock_restrict_self$auto(r1, 0x0) r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/net/netlink\x00', 0x0, 0x0) read$auto_proc_reg_file_ops_compat_inode(r2, &(0x7f0000000040)=""/203, 0xcb) truncate$auto(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$auto_def_blk_fops_fs(r0, 0x2203, 0x0) sendmsg$auto_BATADV_CMD_GET_GATEWAYS(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={0xfffffffffffffffe}, 0x1, 0x0, 0x0, 0x4000}, 0xc000) 2m7.281706989s ago: executing program 3 (id=1543): r0 = socket(0x10, 0x2, 0x0) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/version\x00', 0x46000, 0x0) acct$auto(&(0x7f0000000040)=')%)$\x00') r1 = openat$auto_vcs_fops_vc_screen(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsu\x00', 0x149000, 0x0) read$auto_vcs_fops_vc_screen(r1, &(0x7f0000000200)=""/4096, 0x1000) r2 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYBLOB='f\x00', @ANYBLOB="5de1"], 0x1ac}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000080), 0xfc2}, 0xffffffffffffffff, &(0x7f0000000040), 0x7, 0xa505}, 0x800}, 0x3, 0x8) 2m4.327424909s ago: executing program 3 (id=1545): openat$auto_proc_timers_operations_base(0xffffffffffffff9c, &(0x7f0000000040), 0x1a3540, 0x0) mknod$auto(0x0, 0x1001, 0x4) r0 = open(0x0, 0xa240, 0x15e) close_range$auto(r0, r0, 0x6) mmap$auto(0x33be, 0x20009, 0x4000000000df, 0xeb1, 0x404, 0x7ffe) r1 = socket(0x22, 0x2, 0x1) getpeername$auto(0x3, 0x0, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x800) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), r1) r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x9c) mount$auto(0x0, &(0x7f0000000100)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0x10001, 0x0) mount$auto(0x0, &(0x7f0000000740)='}[,&*}\x00', 0x0, 0xfffe, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_DISASSOCIATE(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)=ANY=[@ANYBLOB="2ffffffe", @ANYRES16=r2, @ANYBLOB="21002dbd7000fedbdf252800000008000300", @ANYRES32=r3, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x60040080}, 0x4000000) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="009f", @ANYRES16=0x0, @ANYBLOB="000325bd7000fddbdf251100000020000180080003000100000014000200766c616e3100"/46], 0x34}, 0x1, 0x0, 0x0, 0x40800}, 0x80d0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0xa, 0x0) socket(0x11, 0x1, 0x3) socket(0xa, 0x2, 0x0) connect$auto(0x3, &(0x7f00000018c0)=@in={0x2, 0x4e23, @local}, 0x55) sendmmsg$auto(0xffffffffffffffff, &(0x7f00000000c0)={{0x0, 0x8, 0x0, 0xe, 0x0, 0x8e, 0x8}, 0x8}, 0x1, 0xb) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0xfffffffffffffffd, 0x40000008000) ioperm$auto(0x6, 0x6, 0xfffffffd) setuid$auto(0x800000000008) sched_setaffinity$auto(0x1, 0x1, 0x0) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, 0x0, 0x40001, 0x0, 0x4, 0x9}, 0x20000007}, 0x3, 0x0) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event2\x00', 0x40180, 0x0) 1m58.131575432s ago: executing program 35 (id=1524): r0 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000540)='/dev/sequencer2\x00', 0x80011, 0x0) write$auto_seq_oss_f_ops_seq_oss(r0, &(0x7f0000000740)="fe18a2b6ff964fdd", 0x8) socket(0x2, 0x800, 0x4) listen$auto(0x3, 0x83) accept$auto(0x3, 0xffffffffffffffff, 0xfffffffffffffffd) shutdown$auto(0x200000003, 0x2) 1m48.763914113s ago: executing program 36 (id=1545): openat$auto_proc_timers_operations_base(0xffffffffffffff9c, &(0x7f0000000040), 0x1a3540, 0x0) mknod$auto(0x0, 0x1001, 0x4) r0 = open(0x0, 0xa240, 0x15e) close_range$auto(r0, r0, 0x6) mmap$auto(0x33be, 0x20009, 0x4000000000df, 0xeb1, 0x404, 0x7ffe) r1 = socket(0x22, 0x2, 0x1) getpeername$auto(0x3, 0x0, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x800) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), r1) r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x9c) mount$auto(0x0, &(0x7f0000000100)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0x10001, 0x0) mount$auto(0x0, &(0x7f0000000740)='}[,&*}\x00', 0x0, 0xfffe, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_DISASSOCIATE(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)=ANY=[@ANYBLOB="2ffffffe", @ANYRES16=r2, @ANYBLOB="21002dbd7000fedbdf252800000008000300", @ANYRES32=r3, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x60040080}, 0x4000000) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="009f", @ANYRES16=0x0, @ANYBLOB="000325bd7000fddbdf251100000020000180080003000100000014000200766c616e3100"/46], 0x34}, 0x1, 0x0, 0x0, 0x40800}, 0x80d0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0xa, 0x0) socket(0x11, 0x1, 0x3) socket(0xa, 0x2, 0x0) connect$auto(0x3, &(0x7f00000018c0)=@in={0x2, 0x4e23, @local}, 0x55) sendmmsg$auto(0xffffffffffffffff, &(0x7f00000000c0)={{0x0, 0x8, 0x0, 0xe, 0x0, 0x8e, 0x8}, 0x8}, 0x1, 0xb) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0xfffffffffffffffd, 0x40000008000) ioperm$auto(0x6, 0x6, 0xfffffffd) setuid$auto(0x800000000008) sched_setaffinity$auto(0x1, 0x1, 0x0) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, 0x0, 0x40001, 0x0, 0x4, 0x9}, 0x20000007}, 0x3, 0x0) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event2\x00', 0x40180, 0x0) 1m5.606518363s ago: executing program 6 (id=1772): mmap$auto(0xcef, 0x72, 0x1, 0xeb1, 0xfffffffffffffffa, 0x7fffffffffffffff) (async) mmap$auto(0x2, 0xd1, 0x9, 0xcf6, 0x401, 0x7fffffffffffffff) (async) statx$auto(0xffffff9c, 0x0, 0x1000, 0x1, 0x0) (async) r0 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000001c80)='/dev/fb0\x00', 0x20401, 0x0) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) (async, rerun: 64) sysfs$auto(0x2, 0x100000000000035, 0x0) (rerun: 64) r1 = socket(0xa, 0x2, 0x0) setsockopt$auto(r1, 0x29, 0x37, &(0x7f0000000080)='\x15!\xa8^J/\xddCx4!\x00\xd3\x8f\x1e\x1b\xc3 \xe2\xa8\xd6\xd9\xc0\xa2\x0f\x88\xb1e\x8a\xd8?\xfe\xda\xc4\xef\xff(i\xc6@\x91[\vBj\x0eQ\xce\x16\'C\x8cYA\x92u\xd5\xb8\\\x82,\xe2=y\x9bR\xbcn\xa0c\x16~\x86\"t\xde\x14\xe4\xa5\xfe\xb5', 0x110) r2 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_NL802154_CMD_SET_BACKOFF_EXPONENT(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="ac828447", @ANYRES16=r2, @ANYBLOB="020029bd7000fedbdf251000000005002600f6000000"], 0x1c}, 0x1, 0x0, 0x0, 0x20000001}, 0x20040004) (async, rerun: 64) fsopen$auto(0x0, 0x1) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX(r0, 0x4606, 0x0) 1m5.007775095s ago: executing program 6 (id=1774): sendmsg$auto_NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000048c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x14, 0x0, 0x400, 0x70bd29, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x890) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000002040)={'veth0\x00', 0x0}) sendmsg$auto_ETHTOOL_MSG_CABLE_TEST_TDR_ACT(r0, &(0x7f0000021740)={0x0, 0x0, &(0x7f0000021700)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1], 0x20}, 0x1, 0x0, 0x0, 0x86010}, 0x800) 1m4.730262413s ago: executing program 6 (id=1775): mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x4, 0x300000000000) getsockopt$auto(0x6, 0x40000000029, 0x4c, 0xfffffffffffffffe, 0x0) name_to_handle_at$auto(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1001) r0 = socket(0x10, 0x3, 0xa) r1 = syz_genetlink_get_family_id$auto_hsr(&(0x7f0000000080), r0) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="00012cbd7000fedbdf25030000000a000100aaaaaaaaaa1c00000600000a000100bbbbbbbbbbbb000000000015000000000000000046231b6cad68f42973e16f3f1c5d065c7fd8"], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x40440c8) sendmsg$auto_NL802154_CMD_SET_PAN_ID(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16, @ANYBLOB="010027bd7000fddbdf250a0005000700000000000000080001"], 0x24}, 0x1, 0x0, 0x0, 0x4088}, 0x20000010) (async) socket(0xa, 0x2, 0x3a) (async) recvfrom$auto(0x3, 0x0, 0x100, 0x101, 0x0, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1c00"], 0x1ac}}, 0x40000) mprotect$auto(0x1ffff000, 0x8000000000000001, 0x4) (async, rerun: 64) r2 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) r3 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000780), r2) sendmsg$auto_TIPC_NL_BEARER_GET(r2, &(0x7f00000023c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b00)={0x14, r3, 0x1, 0x70bd28, 0x25dfdbfe}, 0x14}}, 0x40000) (async, rerun: 64) r4 = socket(0x10, 0x2, 0x0) (rerun: 64) sendmsg$auto_NL80211_CMD_GET_REG(r4, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x40000) setsockopt$auto(r0, 0xfffffff3, 0x7ff, &(0x7f0000000000)='!\x00', 0x8) sendmsg$auto_NL802154_CMD_NEW_SEC_DEV(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000d80)={0x20, 0x0, 0x8, 0x70bd2c, 0x25dfdbfe, {}, [@NL802154_ATTR_SEC_KEY={0xc, 0x30, 0x0, 0x1, [@typed={0x6, 0xe, 0x0, 0x0, @str='!\x00'}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x810) 1m3.507700098s ago: executing program 6 (id=1778): r0 = openat$auto_evm_key_ops_evm_secfs(0xffffffffffffff9c, &(0x7f00000000c0), 0x40802, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xb, 0x8000) r1 = open(&(0x7f0000000480)='./cgroup.cpu/cgroup.procs\x00', 0x80842, 0x91) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x402, 0x300000000000) r2 = openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f000000c340)='/proc/thread-self/pagemap\x00', 0x8000, 0x0) ioctl$auto_PAGEMAP_SCAN(r2, 0xc0606610, &(0x7f000000c380)={0x60, 0x0, 0x100000, 0x7fffffffefff, 0xfffffffffffffffe, 0x1, 0x0, 0x50b301a, 0x2c, 0x2c, 0xe4, 0x2}) close_range$auto(0x2, 0x8, 0x0) socketpair$auto(0x1e, 0x5, 0x8, 0x0) r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/net/rxrpc/locals\x00', 0x0, 0x0) read$auto_proc_reg_file_ops_compat_inode(r3, &(0x7f0000000280)=""/120, 0x78) read$auto_proc_reg_file_ops_compat_inode(r3, &(0x7f0000000100)=""/248, 0xf8) r4 = socket(0xa, 0x801, 0x84) getsockopt$auto(r4, 0x84, 0x75, 0x0, &(0x7f0000000000)=0x9000c) r5 = openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, &(0x7f00000002c0), 0x40000, 0x0) ioctl$auto_DMA_HEAP_IOCTL_ALLOC(r5, 0xc0184800, 0x0) close_range$auto(0x2, 0x8, 0x0) read$auto(r1, 0x0, 0x1) write$auto_evm_key_ops_evm_secfs(r0, 0x0, 0xa) 1m2.936423632s ago: executing program 6 (id=1780): mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) (async) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) io_uring_setup$auto(0x1, 0x0) socket(0x11, 0x80003, 0x300) (async) r0 = socket(0x11, 0x80003, 0x300) setsockopt$auto(r0, 0x107, 0x1, 0x0, 0x8004) unshare$auto(0x40000080) close_range$auto(0x2, 0x8, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x3, 0xff) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) fstat$auto(0x3, 0x0) (async) fstat$auto(0x3, 0x0) fcntl$auto(0x2, 0x5, 0x1) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x20004, 0x1ff, 0xeb1, 0x8000000000000024, 0x8000) mknod$auto(0x0, 0x1001, 0x4) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp1\x00', 0x20b42, 0x0) ioctl$auto_SNDCTL_DSP_SETTRIGGER(r1, 0x40045010, 0x0) (async) ioctl$auto_SNDCTL_DSP_SETTRIGGER(r1, 0x40045010, 0x0) write$auto_snd_pcm_oss_f_reg_pcm_oss(r1, &(0x7f0000000280)="c282709c589333e2", 0x8) (async) write$auto_snd_pcm_oss_f_reg_pcm_oss(r1, &(0x7f0000000280)="c282709c589333e2", 0x8) ioctl$auto_SNDCTL_DSP_SYNC(r1, 0x5001, 0x7) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) io_setup$auto(0x7ffe, &(0x7f0000000000)) (async) io_setup$auto(0x7ffe, &(0x7f0000000000)) mq_open$auto(&(0x7f0000000280)='nfsd\x00', 0xff, 0xb, &(0x7f00000002c0)={0x1, 0x18000000000, 0x8, 0x7fffffff}) open(0x0, 0x22240, 0x155) socket(0x15, 0x5, 0x0) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "abe6de3d64688be86d547a05c861"}, 0x55) mount$auto(0x0, &(0x7f0000000100)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0x10001, 0x0) mount$auto(0x0, &(0x7f0000000100), 0x0, 0x7d, 0x0) 1m1.677470491s ago: executing program 6 (id=1783): r0 = openat$auto_proc_environ_operations_base(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/environ\x00', 0x2000, 0x0) read$auto_proc_environ_operations_base(r0, &(0x7f0000000240)=""/80, 0x50) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/virtual/tty/console/active\x00', 0xa800, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r3, &(0x7f00000000c0)=""/40, 0x28) r4 = getpid() r5 = getuid() sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="a0020000", @ANYRES16=r2, @ANYBLOB="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", @ANYRES32=r4, @ANYBLOB="0400768004003c80040022800400750010004d004cec029c40e655b73c60b579040008000800cc00", @ANYRES32=r5, @ANYBLOB="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"], 0x2a0}, 0x1, 0x0, 0x0, 0x4004040}, 0xc800) mlockall$auto(0x3) mmap$auto(0x0, 0x9, 0x5, 0x35, 0x6, 0x8000) mmap$auto(0x5, 0x4, 0x10001, 0xffffffffffffff56, 0x2, 0x2) move_pages$auto(0x1, 0xf54, 0x0, 0x0, 0x0, 0x8000000000000000) madvise$auto(0x0, 0x200007, 0x19) madvise$auto(0x9b, 0x71e, 0x7) 45.901944779s ago: executing program 37 (id=1783): r0 = openat$auto_proc_environ_operations_base(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/environ\x00', 0x2000, 0x0) read$auto_proc_environ_operations_base(r0, &(0x7f0000000240)=""/80, 0x50) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/virtual/tty/console/active\x00', 0xa800, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r3, &(0x7f00000000c0)=""/40, 0x28) r4 = getpid() r5 = getuid() sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="a0020000", @ANYRES16=r2, @ANYBLOB="1b0026bd7400fddbdf250300000012000100535ec6e6c32fb994d0bc94aa33d300000c000b0000000000000000006b020380ad6c8f0960138d7051544f9ed4097ca35cb7d26ef90bbb683c1b064a4b5465f44f37a268ab7c4c60b5a002fd2bb8b1e1ac89c93cdb69326a1e9e357bb1fac4e4d374f94b7abde7cfbf811a32de81c2e82a8c97f96e2aa9546bec0e3f6f68a0a7fab6831ed4d5ad262342c21dc0b64fb07ab56fa728c26d542724c35c37d6374bcaeec6671c5d68a8437a8cabb4b198f7335a40475371132a6a7c7fd1f0a1631ecec9824800371222b854603c7d564f675db7f6b8577dd88849a97cbbef08002800ac14140b3000358008008b00", @ANYRES32=r4, @ANYBLOB="0400768004003c80040022800400750010004d004cec029c40e655b73c60b579040008000800cc00", @ANYRES32=r5, @ANYBLOB="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"], 0x2a0}, 0x1, 0x0, 0x0, 0x4004040}, 0xc800) mlockall$auto(0x3) mmap$auto(0x0, 0x9, 0x5, 0x35, 0x6, 0x8000) mmap$auto(0x5, 0x4, 0x10001, 0xffffffffffffff56, 0x2, 0x2) move_pages$auto(0x1, 0xf54, 0x0, 0x0, 0x0, 0x8000000000000000) madvise$auto(0x0, 0x200007, 0x19) madvise$auto(0x9b, 0x71e, 0x7) 34.666367376s ago: executing program 9 (id=1812): syz_genetlink_get_family_id$auto_nfsd(0x0, 0xffffffffffffffff) socket(0x10, 0x2, 0xf) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) ioctl$auto(0xc8, 0x400454d9, 0x5c8d) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x7f, 0x8000) sendmmsg$auto(0x3, 0x0, 0x3, 0x0) pselect6$auto(0x4, 0x0, &(0x7f0000000180)={[0x33e59eb6, 0x9, 0x2da0000, 0xff, 0x101, 0x200000001c00000, 0xa1, 0x4, 0xfffffffffffffffe, 0x8, 0x4, 0x9, 0x1, 0x0, 0xe, 0x80000001]}, 0x0, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x48000}, 0x0) io_uring_setup$auto(0x6, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x3) io_uring_setup$auto(0x6, 0x0) clone$auto(0x7, 0x7fffffffffffffff, 0xffffffffffffffff, 0x0, 0x1) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x14, r1, 0x1, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x48080) umask$auto(0x6) r2 = open(&(0x7f0000000080)='./file0\x00', 0x22ac2, 0x5d745cb200ae4d7b) fchown$auto(r2, 0xe5a, 0x5) 33.78754945s ago: executing program 9 (id=1837): r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) socket(0x2, 0x1, 0x106) getcwd$auto(0x0, 0xffffffffffffffff) inotify_init1$auto(0x3000000000000) inotify_add_watch$auto(0x4, 0x0, 0x9) getcwd$auto(0x0, 0xffffffffffffffff) inotify_add_watch$auto(0x4, 0x0, 0x9) socket(0xa, 0x801, 0x106) setsockopt$auto(0x3, 0x0, 0x1, 0x0, 0x2) clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) close_range$auto(0x2, 0x8, 0x0) r1 = open(0x0, 0x4040, 0x75) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/mpls/platform_labels\x00', 0x202, 0x0) sendfile$auto(0x2, 0x3, 0x0, 0xc3e0) socket(0xa, 0x2, 0x3a) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "ab06fdffff00fff500"}, 0x55) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r0, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000dc0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="80000000", @ANYRES16=0x0, @ANYBLOB="01002abd7000fcdbdf250400000061000200d985676638e0dfd36e2094dc1619653f003c46a07abfa3909c5c03852f4f6506304f7964d9eb47b08e35922533315871b53819dcdb82bfed2bf58b603c59346b3f9598cf04531958ce6cf4297a9a5e92efb2c5858c3e51c11f064f641f00000008000c0006000000644534d9b685d902af729a2a5c28089c1fabbc67a526d64865d68f483f5487bcc5895fdb6070061d417b786e6d8ff8f5a5400ddc0fc2073ab8c67903513e2ddc9d1c8c7d4d59183b3d5db648a3"], 0x80}, 0x1, 0x0, 0x0, 0x4040014}, 0x4010) sendmmsg$auto(r1, &(0x7f0000000180)={{&(0x7f0000000000)="521984ba89da088a7d1bbd0b201d1b2531cd28c3c527f6614c2aa5b4033aff4b17d560a9122d5da2aafaf1c2f2e7a16e08e63f03c179991e3683c8b3e1556d529cfd748d823b29aec6f08461bde2acc2a6a90bb0ffe189f8f004ae923ec4114bfed7102cc53e590ecd226eb4ff5f634d99f42feab6598c80f248bc498ea5", 0x240000, &(0x7f0000000100)={&(0x7f0000000080)="13cb9b0dd9d260124aa46cb950ecb4b278fb286a7d13fa3a014f5cebdae1bd56e4b7e07fcb9c3cdfd3632fdb3ccef03213da2044fed6e6265527254d5ca7bd5fe2cf917c0869b5d57e7b14321b39c94e9bbc2d6bffb9829f6b8c0d61bb5118ed26d52cf4f1a754", 0xcf}, 0x800, &(0x7f0000000140)="5d84e1d9be6fcc0015349025ff6c60dcf8552bb998a8b886022f2482aed05d9229af065e4e4514dfb60369a3b1797e9791decbd13cf918b557", 0x157e, 0x5f}, 0x9}, 0x4, 0x7) 33.637200576s ago: executing program 9 (id=1838): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) sendmsg$auto_NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x40084) mmap$auto(0xfffffffffffffffc, 0x400008, 0xdb, 0x9b72, 0x2, 0x5) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) r0 = socket(0x2, 0x1, 0x106) r1 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000040), r0) syz_clone3(&(0x7f0000000440)={0x42048200, &(0x7f0000000100), &(0x7f00000001c0), &(0x7f0000000200)=0x0, {0x2a}, &(0x7f0000000300)=""/72, 0x48, &(0x7f0000000380)=""/188, &(0x7f0000000240)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x5}, 0x58) sendmsg$auto_NL802154_CMD_GET_SEC_LEVEL(r0, &(0x7f0000000500)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000004c0)={&(0x7f00000009c0)={0x988, r1, 0x2, 0x70bd28, 0x25dfdbfd, {}, [@NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5, 0x12, 0xa}, @NL802154_ATTR_TX_POWER={0x8, 0xb, 0x5}, @NL802154_ATTR_SCAN_DONE_REASON={0x5, 0x25, 0x7}, @NL802154_ATTR_PEER={0x76c, 0x28, 0x0, 0x1, [@generic="3e0aa47bd84c2935d9e220cd11ea6efbb452ffd9ef84770e8221c0e997348cfd74be340e44c35559a66f5b6c7afd0b004e588fc51c71c2e27e10ec273d0044a282a08eb8ae3c7d4769f141342c1eb3555be7b5c3d09348c6af4553d1e635fc0255408523750ece3c7677e662723b4a2a49623809dab2c857d869eb0e954347ecc4f9c7aed8e2203b1f483538647e542d16c164bc40ffab69d8c55e3a80e0e23ed806a9485ab2dfdb2ff6a2f76bf128c3662ac04e27cfd2f4277841c753aab8410e2be553fcffea88de721a2937ddd111a72fa1d8785f22da3db3c9484526c094ce28b39c3b", @typed={0x4, 0x7f}, @generic="747cb59cdd4ccf1db9d599f2aaa06aa2627d642d66944306b2dbcdcb68da015416a3586cef912c9960a94cb0e302cd20047a5552fb6371ef309d7e210b6069d064cb48543a2ee586ada45db099d16afc9c5d167fdb7363d7781f6eacde82360600a3b0b15da14b7f3ea902a3e6eef1f10edd130bfd020917c18ffb28951dfbd870298b081ab2755e62d84d99e7d1c1040e1b52ddee616e", @nested={0x1f5, 0x134, 0x0, 0x1, [@nested={0x4, 0x17}, @typed={0x102, 0x10a, 0x0, 0x0, @binary="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"}, @generic="0c8d8fb2892db52500b12f09e421fd49e7f542471ed4fbcddd6df7680c84f802663e8298eb569c4d89dd4de0a9f40ace4dcabedfa49502a2409bb3c72854a3ff2ee957c71ce4ff41a108703135b931559266eff2840868e6fe0300ab4433182346ad49f2a247c6e81c715d2ebfdb1f5d41babfaa2fc10bfb19f171e2d23ea438063238ce9b611656ae4712168755c0498aa386881424507573eea94d78", @generic="c587504a73ab99af59231181b065bc99ac44f3ed22d17f3541c8cce126be00820a7dafe80320fa5bcfb4418e6053c864fdaa1eed66f5f57d00ee6821c20eb178301a5417a9a055badb6e9021"]}, @nested={0x4, 0x13b}, @typed={0x8, 0x131, 0x0, 0x0, @ipv4=@local}, @nested={0x7c, 0x13a, 0x0, 0x1, [@generic="1fa733dec53a06e62a140b77f06add3bd0d43d06f90082bef957643e8c1c7fbd18a15ca4302acf0b6366936403144c4223223be1bb4773700649da1da2f1347b356c1dd8065c327d4be512b60eb41e146f5ef7049d495a1c50f46cd5beedc699f93a4aee850ff1a064f0537286728c95e25e79a8b54731a4"]}, @generic="23742a5968a5fcec659e0f208f34cddb121ff35dd326c8eb3dd8de1c", @nested={0x1a2, 0xb4, 0x0, 0x1, [@typed={0x8, 0x12e, 0x0, 0x0, @pid}, @nested={0x4, 0xc8}, @generic="708e150f4438ea834875a94f85418afd5f3d17c5a784df79f78ac185fd16c040a90d4b275b065be045b7ca1abf0d055b55379a5be3ec99acb0f9b421dada080c8429fd8afdaf1839815bf67493ba03a6707b90e7a8eb01153156c8b2721c0a9bff06a872bd0e56dcf626287157b556e7c008020f5462e632e9a837281a3316b507f9d20d12d66acf2c1eeaa0361e4ce2eb7d2fc732da55fe2d891ae24dcbef6ca9cd531eb733ef6daa4463e6821797cf2f03fc6eb1bb11512a088f3823f92c6fdd9cd4a484b582d92b0122b6cc62d9d632a696f4a2867e2651e47a05f160d3d20c1f55fb25c91d5ba5100450bb032aee4f1d0829da", @nested={0x4, 0x4a}, @generic="233551ce3b13f2d63fd6b8b47dc64f5e9ae8be73976dc61ec374ebd8755dd7648b2ed529eca22371de202842f10fc9e5d3a0f948021637ff5c87d9e78113371c66609c82b0d1f310f18e1b966cd8f26287a8cd06a077507475822225687f2d0917c33f19bed1ac838de1ad2b6a33f154d22622f813329bcec2f4e1d006c3490c8c66cde7e0", @typed={0x14, 0xf3, 0x0, 0x0, @ipv6=@local}]}, @nested={0x1a7, 0xdb, 0x0, 0x1, [@generic="cbbfdb6959ee2054c4efef68c7aa83f6c00bed675c04432748c29e3a67630215be269e6d2bb17304b473e34da21e7ea157740da6368fd3a4683609b0f17c07599533456654d8fdf6fe1c2c296f4a68fa870b223e093f9baa8839e0f082f97c4c8ba53a3d5a7709cfa4440ddac125b034446ef1af3e4b3fe5d3a5191cd56feecfb59a85b76123f2e93cd7154d3cf338f5319e685442b53d9fb16a2bbda81458d718b0579823358c56ea", @typed={0xc, 0xd8, 0x0, 0x0, @str='nl80211\x00'}, @nested={0x4, 0x4c}, @generic="49c6d5b5ff7f82628045d48ef63c37a38056a9994d225738b65b4c5a2e0767b0de4d5bdbc8503607a01f2cf825127ee094744c0317c07acce47ff4610103e8f95e18d14cd7bb540279b9502fd4befc16a31ccc0a2af0c3f598da85b8d9d3b73216d8b3ba9a0f08caa04abcc6e948a8ced69545e589babb6db65ab4f4", @typed={0x8, 0xc3, 0x0, 0x0, @ipv4=@empty}, @generic="575c57c2bc5f49a1a4ec63a7ea7f48277e5768314f86258c563379b83ddc5f33b58e9e", @typed={0x8, 0x99, 0x0, 0x0, @pid=r2}, @generic="2071f554547086363b614f06a2576e43015174e1831e59e5c2844268894aa0d7f5e039e4d103632028dac7f235cac290136602", @nested={0x4, 0xd4}, @nested={0x4, 0xac}]}]}, @NL802154_ATTR_SCAN_DURATION={0x5}, @NL802154_ATTR_WPAN_PHY_NAME={0x7, 0x2, '\\-\x00'}, @NL802154_ATTR_CHANNEL={0x5, 0x8, 0x9}, @NL802154_ATTR_SUPPORTED_COMMANDS={0x1d5, 0x19, 0x0, 0x1, [@typed={0x8, 0x112, 0x0, 0x0, @uid=0xffffffffffffffff}, @nested={0x15c, 0x93, 0x0, 0x1, [@typed={0x4, 0x1}, @generic="5b86da28d18a1c8291a76f255c7d4acd231c332c164d69f668dc5310b12acb1d3e625598ab8b68b49ff517f2a440614973b43d23d97be88225aa22cf8300fee732a81b16a6a439af164fc5b63d2c18d18b9f3b6ed3d8ba4982e2e97266b5b05b44627415b8ac40a741a16ef00a2c62cfa430c0fc82e83219c9ce41fb321b", @generic="f527eba09b45872a135c1d27e4cf52d4f36a79e6655a738677ed421c2d1dc73501897d1c7c2fd57b2cbbd00f17f3060504cda2a11d6a00cebb4ba07a7af2ed8ce305f3b2565af45eaad3af3bf5e179c84684ed2620888dd3f25fa41a0410c750a791fe256cc0f7cf0f8e11523447dbb24282c43829c063f7d172b6ec40a6fc3511b1bd6f8c01bbba55f9873059c9458144803940a3d7f33de6aae8dfacad1e8c2033d648e25893e62cd1ebea37e3a4f0f5956b71", @generic="c3a8", @typed={0x8, 0x82, 0x0, 0x0, @fd=r0}, @nested={0x4, 0xb1}, @nested={0x4, 0x54}, @nested={0x4, 0x3a}, @typed={0x8, 0x0, 0x0, 0x0, @u32}, @nested={0x4, 0x9c}]}, @typed={0x14, 0x0, 0x0, 0x0, @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}}, @generic="ea2030cf6e588b7dea73180cb0f6221a3597637bb5eeb692307e8cc42c3ecaeb42f434ee2c41f5cfeb7923c84455f955adc83760fc4891bf13", @typed={0x14, 0x127, 0x0, 0x0, @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}}, @typed={0x4, 0x102}, @typed={0x4, 0x70}, @typed={0x4, 0xd8}]}]}, 0x988}}, 0x8804) madvise$auto(0x0, 0xffffffffffff0005, 0x19) signalfd$auto(0xffffffff, 0x0, 0x8) fremovexattr$auto(0x3, &(0x7f0000000080)='\\-\x00') recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) read$auto(0x3, 0x0, 0x7) madvise$auto(0x0, 0xffffffffffff0001, 0x15) writev$auto(0xe, &(0x7f0000000140)={&(0x7f0000000040), 0x8}, 0xe) madvise$auto(0x0, 0x7ffffffffffffffc, 0xc) close_range$auto(0x2, 0x8000, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), r3) keyctl$auto(0x1f, 0x1, 0x0, 0x3, 0x400110000000001) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) socket(0x2, 0x5, 0x0) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) setsockopt$auto(0x3, 0x10000000084, 0x85, 0x0, 0x90) sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000980)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="2f212cbd7000fc39ad872c00000008000300", @ANYRES32], 0x40}}, 0x4000000) 30.443426687s ago: executing program 9 (id=1844): r0 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8000, 0x0) open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) (async) r1 = open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) prctl$auto(0x1000000001c, 0x5, 0x8, 0x9, 0x80001) setreuid$auto(0x15, 0x5) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) (async) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0xf, 0x0) chroot$auto(&(0x7f0000000080)='}[,&*}\x00') (async) chroot$auto(&(0x7f0000000080)='}[,&*}\x00') pivot_root$auto(&(0x7f0000000300)='.\x00\xaf\xeb)\xae$\xfc\x00\xf8\x05AC\x9f\xbbR\xec\xc6c\x85\xc8\xa7\xe84sF\xe3U\x94\x99\x8fR\xd0\x98\f\xa5\xb1S\x7f\xc3\xa5\xc0\x97\x10qa\r\x02\xd2\xc8\xd2\x8e\xc7\x80\x11\x06#\xf5\x18|\xdc\x81Ai\xb6\x96iaR\xdbA\x04\x10\x99\xe6\xdb\xae`G\x1d9`T\xd8\xc6\xea\xf7\x96\xb5\xe9\x164e\xb1 S\x8f\x12_\x15y\x91F\xc89\xb1\xd24?\x89.,Z\xba,\"v\xde\xc4\xe0\x84\xca|\"\x96V\xd5P\xe4\xb9\xea\x88\x15\xacs\xc6\x83\xd6\x81\xd7\x11\x88\x9c\xdd\x8a\x0e\xea\x19|\x7f\xe3A8x\xce\xc1!q\xbbi\\\xd8\xa9\xe0\xed\x9e\x19\xc0IC9^\xfcJG\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000280)='.\x00') (async) pivot_root$auto(&(0x7f0000000300)='.\x00\xaf\xeb)\xae$\xfc\x00\xf8\x05AC\x9f\xbbR\xec\xc6c\x85\xc8\xa7\xe84sF\xe3U\x94\x99\x8fR\xd0\x98\f\xa5\xb1S\x7f\xc3\xa5\xc0\x97\x10qa\r\x02\xd2\xc8\xd2\x8e\xc7\x80\x11\x06#\xf5\x18|\xdc\x81Ai\xb6\x96iaR\xdbA\x04\x10\x99\xe6\xdb\xae`G\x1d9`T\xd8\xc6\xea\xf7\x96\xb5\xe9\x164e\xb1 S\x8f\x12_\x15y\x91F\xc89\xb1\xd24?\x89.,Z\xba,\"v\xde\xc4\xe0\x84\xca|\"\x96V\xd5P\xe4\xb9\xea\x88\x15\xacs\xc6\x83\xd6\x81\xd7\x11\x88\x9c\xdd\x8a\x0e\xea\x19|\x7f\xe3A8x\xce\xc1!q\xbbi\\\xd8\xa9\xe0\xed\x9e\x19\xc0IC9^\xfcJG\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000280)='.\x00') mknodat$auto(r1, &(0x7f0000000040)='./file0\x00', 0x400, 0x2) open(&(0x7f0000000000)='./file0\x00', 0xe600, 0x20) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) ioctl$sock_SIOCGIFINDEX(r0, 0x40086602, 0x0) 30.053007475s ago: executing program 9 (id=1846): r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) close_range$auto(r0, r0, 0x1) open(0x0, 0x4040, 0x75) socket(0xa, 0x2, 0x3a) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "ab06fdffff00fff500"}, 0x55) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r0, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000dc0)={&(0x7f0000000340)={0x80, 0x0, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [@HWSIM_ATTR_ADDR_TRANSMITTER={0x61, 0x2, "d985676638e0dfd36e2094dc1619653f003c46a07abfa3909c5c03852f4f6506304f7964d9eb47b08e35922533315871b53819dcdb8269bc08b18b603c59346b3f9598cf04531958ce6cf4297a9a5e92efb2c5858c3e51c11f064f641f"}, @HWSIM_ATTR_REG_CUSTOM_REG={0x8, 0xc, 0x6}]}, 0x80}, 0x1, 0x0, 0x0, 0x4040014}, 0x4010) 20.182783815s ago: executing program 8 (id=1891): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x4000008000) r0 = socket(0x2, 0x1, 0x0) close_range$auto(0x2, 0x8, 0x0) memfd_create$auto(0x0, 0xe) socket(0x2, 0x1, 0x106) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @loopback}, 0x6a) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x5, 0x20000000) r1 = socket(0xa, 0x2, 0x88) bpf$auto(0x0, &(0x7f0000000000)=@link_update={r1, @new_prog_fd=0x4, 0x4, @old_map_fd=0x3ff}, 0xa3) mprotect$auto(0x1ffff000, 0x8000000000000001, 0xd) listxattrat$auto(r2, &(0x7f0000000180)='./file0\x00', 0x1000, 0x0, 0x0) connect$auto(0x3, 0x0, 0x55) 20.032061894s ago: executing program 8 (id=1892): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) close_range$auto(0x2, 0x8, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sg0\x00', 0xaed42, 0x0) (async) ioctl$auto(0x3, 0x2275, 0x38) 19.851806774s ago: executing program 8 (id=1893): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, 0x0, 0xa0000, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_ovs_meter(&(0x7f0000003040), 0xffffffffffffffff) sendmsg$auto_OVS_METER_CMD_SET(r1, &(0x7f0000003240)={0x0, 0x0, &(0x7f0000003200)={&(0x7f0000000380)={0x2c, r2, 0x159198c6007aa95d, 0x70bd28, 0x25dfdbfc, {}, [@OVS_METER_ATTR_KBPS={0x4}, @OVS_METER_ATTR_BANDS={0xc, 0x4, 0x0, 0x1, [@nested={0x4, 0xf9}, @nested={0x4, 0x48}]}, @OVS_METER_ATTR_ID={0x8, 0x1, 0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc0}, 0x40) ioctl$auto_SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_nlbl_cipsov4(&(0x7f0000000040), r1) r5 = getuid() setresuid$auto(0x0, r5, 0xee00) sendmsg$auto_NLBL_CIPSOV4_C_ADD(r3, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f00000003c0)={0x898, r4, 0x8, 0x70bd2b, 0x25dfdbfe, {}, [@NLBL_CIPSOV4_A_TAGLST={0xc, 0x4, 0x0, 0x1, [@typed={0x8, 0x134, 0x0, 0x0, @u32=0x3}]}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1e6}, @NLBL_CIPSOV4_A_MLSLVLLST={0xad, 0x8, 0x0, 0x1, [@nested={0x8, 0xad, 0x0, 0x1, [@nested={0x4, 0x74}]}, @typed={0x8, 0x28, 0x0, 0x0, @fd=r1}, @generic="7bfdad1d5bab254bbe5d33c7c7ade3ac4a373fa307ed8d13b0193a6fecd40943ef3defc7a88e6afa629a6efba39ba6fb3e16c5afca4c112a4012d0296b4ba12f3e9926423d21fb34ff7ca991ae02a4a9ebeb8ab683579ab4ca48a8749b8adbfaac1f49ccd2130f514ec3af0c00aec37e7deafe1877e2e38f269574c59aa4696d2ba049ccf9", @nested={0xc, 0x4, 0x0, 0x1, [@typed={0x5, 0xba, 0x0, 0x0, @str='\x00'}]}, @typed={0x8, 0x37, 0x0, 0x0, @uid=r5}]}, @NLBL_CIPSOV4_A_TAGLST={0x458, 0x4, 0x0, 0x1, [@typed={0x4, 0x4e}, @generic="0d9c8c390d79881be2d0396dc10d07563c66879431be7ab39b2111d5386d66860df66e1ef6d0cf8aaa67635a459b483885c16a599002cd6639684b3bf0a6ff829dc9b0a7349b2f5033f7bcd9bd39e237ebe2f7d63820212234252643d91ae0795894ba56953f50a608147ef19ecd63197ebb6a15e58dd590e1ae142c19ef46ae48b02903d3d37125eb469dc9372259bbb9b859943ecc6b51f6194b0442672f2189eb771c6d2651cf8aca0ef4c9bdef28f0cd26464ce83c6aaed57c44719ec256a17b215daec3", @generic="442c9886f12a9bda9cd045ebcf589d4ac782eca8b259bbe527a4cd804208b13396a3773e1c4776ffe06bed487b9af8a03931d316fdd52fcb8f1c7fd066995c5a837afd1717e49f0df7647a3895e90aac1fbc4d423ec042d5d8a5aaff7b73559e8b76bbc6ec66149bd2d45d19f99c108646c14cafab803ebaa5ddf0aa409b371b81f052b88f03c3d6cdf4e3a5e18f9629032385eb91cb5176c741d8b1a4a384f3222d81b6035961a2e3ddf74f64f75cfee04f8a64d0e6877350ffe53570264d20747b46fdaf2c181ecf01ff19c731", @typed={0x8, 0xf9, 0x0, 0x0, @u32=0x5}, @nested={0x18f, 0x30, 0x0, 0x1, [@typed={0x8, 0xbb, 0x0, 0x0, @fd=r1}, @typed={0x9, 0x65, 0x0, 0x0, @binary="68be06a12c"}, @nested={0x4, 0xfa}, @typed={0xc, 0x129, 0x0, 0x0, @u64=0x1}, @generic="4a73c1d0b0b2897ba6c6bd821e8d427fa20113d4202825e2bfc42bb6213908a807f091464a45bbfa704b9647ba74220ef1a02f0ba30c49950f3312f5a8691cbf73c30534b697664e5df196cae28a3b844ae410317e57f43319bc0483ad84c30bd13e20cd0f746f05eddd2a84125c061c55115f6307015c2efc71666271e592f3e708b7fe5c73972b573fa504f765ee1c8966581002d3c71fefa2c3623a9426ac086c48dda98fe702d75fb56caf6becfd31cae2ce77369b48176447c5ca63a429ca48c4fac828661b84244a08f1980ef03777419bd5109bec0f6a03c692eb738b97e87ab9ce0229cbb379e3433181ae4c50", @generic="69bf1cc9ea053ca8bf056bb208609edd55b11e0445ed52f56382413a12d45e39ec1dd8db4b3090cb77e74a32a893ce391b6c10614c6e99a7fb93d7cafea86cb3a3f909fe303e8fc2df41664daacc3cff518edba13259fa94e1511b757b59eaa90237d96e0090", @typed={0xe, 0x84, 0x0, 0x0, @str='ovs_meter\x00'}]}, @nested={0x122, 0x43, 0x0, 0x1, [@typed={0x8, 0x146, 0x0, 0x0, @ipv4=@rand_addr=0x64010101}, @generic="a99123b0b4245235bce05ca85cef0a81f5ca1cbfbe51553025392c6e1bcd642f75e985aeea40a6ebc21226ce54d0833af2e1a5be67fbf0c0", @generic="b21c172adf40686b4ab5f4707b411006d37acc0aa077467789a79b6852d95b1e92257592480e4a5251f7bb5a120a38799e03735018d4ed5e892f30db656e44246683864e19f3f5e2130799c8940c528e234f130f29279a11ea744060e7f353da95888639ca93d1dd719e65b4f1f64cecd5118fa8977b7301660134043d3b0e59fcfcbe23f33b355d0b378e0d332e8daf52ea83d2dbdcb83a6eec4265e83d299a5b8bb27f34be12a5c684a049840d1fe5a344a992525770166f5e6c898acde3188107d94b53f88f1a19a439668bec6eacd027d4a67a4b", @typed={0x8, 0x10f, 0x0, 0x0, @pid=0xffffffffffffffff}]}]}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xff}, @NLBL_CIPSOV4_A_MLSCATLST={0x35f, 0xc, 0x0, 0x1, [@typed={0x8, 0x3b, 0x0, 0x0, @ipv4=@local}, @typed={0xc, 0x57, 0x0, 0x0, @u64}, @nested={0x1aa, 0x97, 0x0, 0x1, [@nested={0x4, 0xdc}, @generic="ea5df25a4465350c7085e777a3c4c75ae7e10986064aafcd409cca762c62a6473cbb5a01cc9db360b9bf45b830631158071ab68a6b983373308ca9f96578d8298f29ea307595a4cd5a64c8e529fc9c6bb01aeeffdc43227abfa483154d85785fa2781919c5a92830e3f56377e9966dd20be36171eec9c02ed11cbcaf275439477616b73466fdb0c589898d10b648dc53473a51b4a6f600ecff6baa47296a31f68087128b050a89e3ba6f5b", @generic="33c8ebc03babc907ff74df808aa741eff100e4f3cfcd7dabdc835001ce4e7e3ee7febd767f56f17ba115694f5b8b0b32aeb347dc017545bb07c00af91e77b040b30be449df6e5583bd2d68538e742fde995a8fe7c86975261913623cfd2fcef44b08d85879bfbe73db1e911e6f281d8f87da81b536da09403d9073ff04c567ec6a3f1defd8722cabde1bcb04753a28aba5225eda9483940b0f7aebba334561b8523447224e60c3bda4ee20ab5c84403b07d4e54f1d614ff5170fd949d4b3f0b3f3bd8308fb9f67de9c1d12f6fcfc407ea3bf602f32748017f05b3fbc90fc100f488d21", @typed={0x14, 0xbf, 0x0, 0x0, @ipv6=@loopback}]}, @generic="e15d3d7174ed656ddf4b66a540507c83d0aff945be41c6a6ea8c2511c0783eaabe7ea4e3b8ae4e6dcd0d2a2c1a9b3f7e824db269ef2916866f97034c06e461bb28e944d3122cd9adc71595", @nested={0x14, 0xb9, 0x0, 0x1, [@typed={0xe, 0xbc, 0x0, 0x0, @str='ovs_meter\x00'}]}, @generic="f520020c46188af183f673b5713dd9c1093740cc0835a2c15cbbc9a7dfa7d4b59b90653a039a17fb1bf38f9869a5b48475c58816690cd5dff5fe2286c9f082f61ce11d16a2dee48ed8453aa7dd518cb8c832f76b30633c91397c93c5f8c914740822ff480796ee", @generic="23acffc258aca4c0001697fa3078de0ac73d1a3f56dd58ae2d6051d6aada17b99e0db48a21e7e9b5f674e938d7b60c3c14d411ffebe76be152ef6113f0422e1b28257fb83119707bbb64c4c547b869964979d72a28b3a43d9080faf81da3d9af98883ed3b5d46bfe95214771a2315373e580fd77f379b7273db7745693403515611ee930d27dd620d631468c7f1ade55eae54a7d6e0637a38f3b100418e2f35f3abb1445aeddf29c61f1fe46fc7dc150741e92f48edb8f57b67eb307f21840b3ad4448f4112310279b98e8b6e2f4fd90394b9f2ab0"]}]}, 0x898}, 0x1, 0x0, 0x0, 0x20000010}, 0x10) socket(0x6, 0x800, 0x0) openat$auto_rfkill_fops_core(0xffffffffffffff9c, 0x0, 0x382, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xfffffffffffffffe, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) madvise$auto(0x0, 0x200007, 0x8) 19.520006495s ago: executing program 8 (id=1895): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket(0x5, 0x2, 0x73) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000180)='ns/ipc\x00') socket(0x2, 0x5, 0x3) socket(0x3, 0x80003, 0x300) open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) io_uring_setup$auto(0x6, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) eventfd$auto(0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x3, 0x6) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x2, 0x88) socketpair$auto(0x1, 0x5, 0xf, 0x0) bind$auto(0x3, 0x0, 0x6b) bind$auto(0x3, 0x0, 0x6b) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0xa182, 0x0) lseek$auto(0x3, 0x7fffffffffffffff, 0x1) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) iopl$auto(0x3) madvise$auto(0x6, 0xffffffffffff0001, 0x4) madvise$auto(0x1ff, 0xfffffffffffffff5, 0x1) mmap$auto(0x0, 0x8, 0xffffffffffffffff, 0x9b72, 0x2, 0x8000) 19.241156733s ago: executing program 8 (id=1896): mmap$auto(0x0, 0x400008, 0x9, 0x9b72, 0x2, 0x8000) io_uring_setup$auto(0x8, 0x0) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) (async, rerun: 32) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYRES8=r0, @ANYRES16=0x0, @ANYBLOB="1b0026"], 0x28}, 0x1, 0x0, 0x0, 0x4004040}, 0xc800) (async, rerun: 32) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1a"], 0x1ac}}, 0x4045044) r1 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r1, &(0x7f0000000080)={{0x0, 0x8002, &(0x7f00000002c0)={0x0, 0xc4}, 0x2, 0x0, 0x0, 0x1}, 0x5}, 0x3, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/shm\x00', 0x141200, 0x0) (async) r2 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r3, &(0x7f0000004240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000008", @ANYRES16=r2, @ANYBLOB="010025bd7000fcdbdf2504000000070011002e2e0000"], 0x1c}, 0x1, 0x0, 0x0, 0x40c8}, 0x4048000) socket$nl_generic(0x10, 0x3, 0x10) (async) ioperm$auto(0x7, 0x6, 0x2) (async) unshare$auto(0x20000) (async, rerun: 32) r4 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/mnt\x00') (rerun: 32) setns(r4, 0x0) (async) mount$auto(0x0, &(0x7f00000000c0)='.\x00', &(0x7f0000000180)='nfsd\x00', 0x8, 0x0) rt_sigaction$auto(0x3, 0x0, 0x0, 0x8) (async) pivot_root$auto(&(0x7f0000000040)='..\x00', &(0x7f0000000080)='.\x00') (async, rerun: 64) syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002f00), 0xffffffffffffffff) (rerun: 64) r5 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000080), 0x40000, 0x0) ioctl$auto_KVM_CREATE_VM(r5, 0xae01, 0x0) 18.539838779s ago: executing program 8 (id=1898): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async, rerun: 64) setregid$auto(0x0, 0x3) (async, rerun: 64) clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) (async) msgrcv$auto(0x0, 0x0, 0x1000, 0xffffffffffffffff, 0xb1) wait4$auto(0x0, 0xfffffffffffffffc, 0x60000002, 0x0) (async) ioctl$auto(0x3, 0x4020940c, 0x5) 14.892469553s ago: executing program 38 (id=1846): r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) close_range$auto(r0, r0, 0x1) open(0x0, 0x4040, 0x75) socket(0xa, 0x2, 0x3a) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "ab06fdffff00fff500"}, 0x55) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r0, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000dc0)={&(0x7f0000000340)={0x80, 0x0, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [@HWSIM_ATTR_ADDR_TRANSMITTER={0x61, 0x2, "d985676638e0dfd36e2094dc1619653f003c46a07abfa3909c5c03852f4f6506304f7964d9eb47b08e35922533315871b53819dcdb8269bc08b18b603c59346b3f9598cf04531958ce6cf4297a9a5e92efb2c5858c3e51c11f064f641f"}, @HWSIM_ATTR_REG_CUSTOM_REG={0x8, 0xc, 0x6}]}, 0x80}, 0x1, 0x0, 0x0, 0x4040014}, 0x4010) 5.710693473s ago: executing program 1 (id=1952): sendmsg$auto_HANDSHAKE_CMD_DONE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400c4}, 0x40010) r0 = socket$nl_generic(0x10, 0x3, 0x10) gettid() getuid() geteuid() close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = open(&(0x7f0000000000)='./file0\x00', 0x261c2, 0x84) io_uring_setup$auto(0x6, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8000, 0x0) prctl$auto(0x1000000001c, 0x5, 0x8, 0x9, 0x80001) setreuid$auto(0x15, 0x5) keyctl$auto(0x4, 0xfffff7ffffffffff, 0x0, 0x8, 0x8) faccessat2$auto(0x1, &(0x7f0000000040)='\x00', 0x4, 0x1000) r3 = socket(0xa, 0x2, 0x88) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'wg0\x00', 0x0}) bpf$auto(0x0, &(0x7f00000000c0)=@bpf_attr_5={@target_ifindex=r5, r4, 0x4, 0x1, r3, @relative_id=0x13, 0xe600}, 0xf) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000080), r6) sendmsg$auto_ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000000400)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000680)=ANY=[@ANYRES64, @ANYRES16=r2, @ANYBLOB="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"], 0x14}, 0x1, 0x0, 0x0, 0x40044080}, 0x20000000) bpf$auto(0x2, &(0x7f00000001c0)=@raw_tracepoint={0x5, r1, 0x0, 0x3}, 0xc) bpf$auto(0x1, &(0x7f00000001c0)=@raw_tracepoint={0x5, 0xffff, 0x0, 0x3}, 0xf) sendmsg$auto_IPVS_CMD_NEW_SERVICE(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40020c0}, 0x4) socket(0x4, 0x2, 0x20088) mmap$auto(0x0, 0x2020009, 0x7, 0xeb1, 0xfffffffffffffffa, 0x8000) getsockopt$auto(0xffffffffffffffff, 0x114, 0x2714, 0xfffffffffffffffc, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x42a, 0x3, 0x7, 0x998, 0x10000, 0x3, 0x6, 0x2, 0x9, 0x5, 0xffffffffffffffff, 0xe67, 0xb2, 0x800000000000009, 0x2, 0x3, 0x5, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3, 0x8000000000]}, 0x1fe, 0x3) 5.392147291s ago: executing program 1 (id=1954): openat$auto_tracing_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/per_cpu/cpu1/trace\x00', 0x80800, 0x0) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x9, 0x3, 0x8012, 0x3, 0x8000) sendfile$auto(0x6, 0x3, 0x0, 0x8000) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) unshare$auto(0x40000080) writev$auto(0x1, &(0x7f0000000100)={0x0, 0x400000000000fdef}, 0x1) madvise$auto(0x0, 0xffffffffffff0005, 0x19) munmap$auto(0x20001000, 0x7) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) poll$auto(&(0x7f0000000040)={0x3, 0x1, 0xa}, 0x5, 0x108) setsockopt$auto(0x3, 0x1, 0x20, 0x0, 0x9) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) mmap$auto(0xfffffffffffffffe, 0x8, 0x8003, 0xeb3, 0xfffffffffffffff9, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) timer_create$auto(0x3, 0x0, &(0x7f0000000140)=0x6) symlinkat$auto(0xfffffffffffffffe, 0x8, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) timer_settime$auto(0x0, 0xffff8000, &(0x7f00000000c0)={{0xf, 0x10007}, {0x0, 0x800}}, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x8c3a, 0x2, 0xf) socket(0x2, 0x3, 0xa) lsm_list_modules$auto(0x0, &(0x7f0000000100)=0xbefc, 0x0) ioctl$auto(0x1, 0x89a0, 0x8) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000008640)='/sys/devices/platform/vidtv.0/i2c-0/i2c-dev/i2c-0/name\x00', 0x400, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000008680)=""/4096, 0x1000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r1 = socket(0x2, 0x1, 0x0) bind$auto(r1, &(0x7f0000000040)=@in={0x2, 0x4e23}, 0x67) 5.392038177s ago: executing program 5 (id=1955): openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/pcm0p/sub6/hw_params\x00', 0x88802, 0x0) (async, rerun: 32) close_range$auto(0x2, 0x8, 0x0) (rerun: 32) 4.95978059s ago: executing program 5 (id=1956): openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio1\x00', 0x8000, 0x0) socket(0x21, 0x2, 0x2) write$auto(0x3, 0x0, 0x7d) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x1, 0xfffffffd) socket(0x21, 0x2, 0x2) write$auto(0x3, 0x0, 0x81) close_range$auto(0x0, 0xfffffffffffff000, 0x2) mmap$auto(0x0, 0x400008, 0x6, 0x7f, 0x4, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/platform/vidtv.0/i2c-0/0-0060/uevent\x00', 0x8a600, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000001c00)=""/4111, 0x100f) r1 = socket(0x10, 0x3, 0x0) r2 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000000c0), 0xffffffffffffffff) r3 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio1\x00', 0x100, 0x0) ioctl$auto_SNDCTL_DSP_RESET(r3, 0x5000, 0x0) sendmsg$auto_CTRL_CMD_GETPOLICY(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="f50128bd7007fbdbdf250a0000000000000004000000"], 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x2000000) r4 = openat$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/block/loop15/hctx0/tags\x00', 0x80, 0x0) read$auto_blk_mq_debugfs_fops_blk_mq_debugfs(r4, &(0x7f0000000040)=""/73, 0x49) fcntl$auto(0x0, 0x1, 0xffffffff7ffffffd) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x20008010}, 0x400d0) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/v4l-subdev5\x00', 0x280, 0x0) r5 = getpid() process_vm_readv$auto(r5, &(0x7f0000000000)={0x0, 0xfff}, 0x1, &(0x7f0000000280)={&(0x7f00000000c0), 0xffffffff}, 0x6, 0x0) ioctl$auto(0x3, 0xc040563e, 0x38) socket(0xa, 0x1, 0x84) mmap$auto(0xee7, 0x2000, 0xda, 0x8000000000009b7d, 0x10000000000008, 0x5) io_uring_setup$auto(0x6, 0x0) 3.842576504s ago: executing program 7 (id=1958): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x4000008000) r0 = socket(0x2, 0x1, 0x0) close_range$auto(0x2, 0x8, 0x0) memfd_create$auto(0x0, 0xe) r1 = socket(0x2, 0x1, 0x106) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @loopback}, 0x6a) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x5, 0x20000000) unshare$auto(0x40000080) r2 = socket(0x10, 0x2, 0x0) rseq$auto(&(0x7f0000000180)={0xe, 0x3, 0x2000000000003, 0x80006, 0xffffffff, 0x1003, "a897cc12077d89"}, 0x408000, 0x3, 0x3) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) clone$auto(0x2020003b46, 0x2, 0x0, 0x0, 0x8000000000000001) setresuid$auto(0x0, 0x8, 0x8000) pidfd_getfd$auto(0x3, 0x9, 0x100000000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="ac010600", @ANYBLOB="1e00df"], 0x1ac}}, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB=','], 0x1ac}}, 0x40000) r3 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/net/arp_tables_targets\x00', 0x10b080, 0x0) read$auto_proc_iter_file_ops_compat_inode(r3, &(0x7f0000000180)=""/46, 0x2e) mprotect$auto(0x1ffff000, 0x8000000000000001, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(r2, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x40000) lseek$auto(r1, 0x1, 0x360000) ppoll$auto(0x0, 0x7, 0x0, 0x0, 0x8) socket$nl_generic(0x10, 0x3, 0x10) prctl$auto(0x0, 0x52d, 0xb, 0x1, 0x1) process_vm_readv$auto(0x0, 0x0, 0x1, 0x0, 0x6, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, 0x0, 0x4, 0x0) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) poll$auto(&(0x7f0000000d40)={0x3, 0x1, 0xa}, 0x5, 0x400) write$auto(0x3, 0x0, 0xfdf3) 3.788936579s ago: executing program 5 (id=1959): symlink$auto(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='./file0\x00') r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x40400, 0x48) fchmod$auto(r0, 0x9) setreuid$auto(0x4, 0x8) link$auto(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='./file1\x00') 3.495143193s ago: executing program 39 (id=1898): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async, rerun: 64) setregid$auto(0x0, 0x3) (async, rerun: 64) clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) (async) msgrcv$auto(0x0, 0x0, 0x1000, 0xffffffffffffffff, 0xb1) wait4$auto(0x0, 0xfffffffffffffffc, 0x60000002, 0x0) (async) ioctl$auto(0x3, 0x4020940c, 0x5) 3.460943493s ago: executing program 5 (id=1961): mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) (async) move_pages$auto(0x1, 0xf54, 0x0, 0x0, 0x0, 0x8000000000000000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:21/uevent\x00', 0x40040, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000000040)=""/195, 0xc3) (async) mmap$auto(0x0, 0x20009, 0xe3, 0x100000eb1, 0x40000000000a1, 0x8000) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) (async) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0) fsopen$auto(&(0x7f0000000000)='nlctrl\x00', 0x3) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) mmap$auto(0x0, 0x9, 0x400000072, 0x8b72, 0x1000000002, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) (async) socketpair$auto(0x1e, 0x5, 0x8, 0x0) r1 = socket(0xa, 0x801, 0x84) getsockopt$auto(r1, 0x84, 0x75, 0x0, &(0x7f0000000000)=0x9000c) (async) r2 = openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, &(0x7f00000002c0), 0x40000, 0x0) (async) madvise$auto(0x0, 0x54, 0x6) ioctl$auto_DMA_HEAP_IOCTL_ALLOC(r2, 0xc0184800, 0x0) (async) mmap$auto(0x0, 0x9, 0xff7, 0x8000000008012, 0x1000000004, 0x0) statx$auto(0xffffff9c, 0x0, 0x1000, 0x1, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000010c0), 0xffffffffffffffff) (async) socket(0x10, 0x2, 0x0) (async) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x1ff, 0x7, 0x45, 0x4909b6f8, 0x1ffdf, 0x7, 0x200003, 0x2, 0xa121, 0x3, 0x6, 0x4, 0xb4, 0xa, 0x6, 0x10001, 0x80, 0x100000000, 0x0, 0x7, 0x2100, 0x200, 0x0, 0x84, [0x0, 0x0, 0x0, 0x50100000000000, 0x0, 0x2000, 0x0, 0xa, 0x70624ce7, 0x0, 0xfffffffffffffffd, 0xfffffffffffffffd, 0x0, 0x0, 0x2, 0x0, 0xffffffffffffbffd, 0xfffffffffffffffd, 0x1, 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x2000000000000000, 0x0, 0x0, 0x400000000005b8, 0xc, 0x0, 0x0, 0x0, 0x6, 0xffffffffffffffff, 0x88e, 0x8000000000008, 0xfffffffffffffffc, 0x9, 0xa38, 0x0, 0x3, 0xfffffffffffffffa, 0x8, 0x4000000000, 0x7]}, 0x1fe, 0xd) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="10002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) socket(0x10, 0x2, 0x0) (async) statmount$auto(0x0, &(0x7f0000000380)={0x8, 0x1, 0x9, 0x3, 0x7, 0x0, 0x401, 0x3, 0x2000000000010006, 0x0, 0x7, 0x5, 0x2, 0x7, 0xaf, 0x9, 0x2, 0x8dd, 0x105, 0x3, 0x0, 0x0, 0x2, 0x0, 0x0, 0x4, [0x1b16, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x77, 0x0, 0x0, 0x0, 0x4, 0x0, 0xc06f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x953a, 0x0, 0x9, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x107, 0x6, 0x0, 0xfffffffffffffffe, 0x4, 0x0, 0x8000000000000000]}, 0x201, 0x81) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) 2.579495778s ago: executing program 7 (id=1962): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x4000008000) r0 = socket(0x2, 0x1, 0x0) close_range$auto(0x2, 0x8, 0x0) memfd_create$auto(0x0, 0xe) socket(0x2, 0x1, 0x106) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @loopback}, 0x6a) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x5, 0x20000000) socket(0xa, 0x2, 0x88) connect$auto(0x3, 0x0, 0x55) 2.281045753s ago: executing program 7 (id=1963): mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) io_uring_setup$auto(0x6, 0x0) close_range$auto(0x2, 0x8, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000140)={0x0, 0x74, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002dbd7001f9dbca250100000008000a00000000000500070000000000080009009c781e01060002000000000008001700", @ANYRES32], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x48080) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) fanotify_init$auto(0x69, 0xda6c) (async) fanotify_init$auto(0x69, 0xda6c) r2 = openat$auto_tracing_stats_fops_trace(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing/per_cpu/cpu0/stats\x00', 0x101000, 0x0) sendmmsg$auto(r2, &(0x7f0000000240)={{&(0x7f0000000080)="ef5f35ba870291c7da89baa2c97dd1afa3d53b57aee97f2d6511407e61759daa274ae157800282168f84eb4a50647bdc8ab47c65a0b4873da57f84b57ba5e054dd40638bc85b8350583ac2b75472b554a5bbb1b627626055f710bf485a6c1695c4dc6cc627c14c4243cf07c7eef9464507977b78971493e2b9308fb8d54f54d3a865ff43fcbadaaae1c9c5888b66a59f30fde1de6ef94024be95aa", 0x10, &(0x7f0000000200)={&(0x7f0000000180)="84a3467593ca513ff2bc15da1402e54cd9649a0cb42f4133712cf4bda5291efc387c6f0c091e45170f696b7fa30bd5aad57a43173f1558dbda5e537c4d3048b10237b6c0ddd32dd5ff4bcaa381d94fa563039d0f99e92cd6a65fcb2a620eefed4d9cbcc41938d77a66d1f18aa1c71521f7f5cb42405e113d32bd2c1646ef11", 0x5}, 0x115, &(0x7f00000002c0)="217cf40a701d457a819bd7801f150b29e150895f9b0ec8d51e80dc1fc2cf35cf8978c2642a581318ecc12a5bfa79be655256c55111b421cfd7ffff895cc4c8bd96ed11185701892481f11296713809714ba43ffc0593223f6f441b3044279af5110afd5f712d9919c8082cf8bfb8313e49e8692631e9e207338f49dd3f35ec7dd017f108ca65062179979bd2e1666139c61711256e55b736645c972381e6221c10b47646f88820785400fde647313dc2c4047ac79c745f888051dc7777fdf754f333ccf9f2a6c53e7a055bdf3bba762ee105650df431a7b393c3fda0e3b499c8ef52007eb19792f4c949a2e60608067e5911a0953e253eb78f2f42b02f", 0x2, 0xd12}, 0x8}, 0x7f, 0x5) pipe$auto(0x0) (async) pipe$auto(0x0) dup2$auto(0x5, 0x4) write$auto(0x6, 0x0, 0x100000001) 2.227000977s ago: executing program 1 (id=1964): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_binder_ctl_fops_binderfs(0xffffffffffffff9c, &(0x7f00000001c0), 0x200, 0x0) ioctl$auto_BINDER_CTL_ADD(r1, 0xc1086201, &(0x7f0000000200)={"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", 0x5, 0x7}) r2 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000001180), 0xffffffffffffffff) r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), r0) mmap$auto(0x0, 0x2020009, 0x3, 0x800000000000eb1, 0xfffffffffffffffa, 0x8000) r4 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ptmx\x00', 0x189000, 0x0) iopl$auto(0x4) r5 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event0\x00', 0x80, 0x0) ioctl$auto_evdev_fops_evdev(r5, 0x80084502, 0x0) ioctl$auto_TIOCSETD2(r4, 0x5423, 0x0) close_range$auto(0x2, 0x8, 0x0) syz_clone3(&(0x7f0000000b00)={0x118000100, &(0x7f0000000180), &(0x7f0000000800)=0x0, &(0x7f0000000880), {0xa}, &(0x7f00000008c0)=""/196, 0xc4, &(0x7f00000009c0)=""/224, &(0x7f0000000ac0)=[0x0], 0x1}, 0x58) process_vm_readv$auto(r6, &(0x7f0000000b80)={&(0x7f0000001a80)="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", 0xd}, 0x1b, &(0x7f0000000c00)={&(0x7f0000000bc0), 0x564c1c1f}, 0x1a508000, 0x5aa9) socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_SET_REG(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r8, 0x1, 0x70bd25, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0xc050}, 0x4800) sendmsg$auto_NL80211_CMD_GET_MESH_CONFIG(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000300)={0x4ec, r3, 0x2, 0x70bd28, 0x25dfdbfe, {}, [@NL80211_ATTR_IE_PROBE_RESP={0x26e, 0x7f, "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"}, @NL80211_ATTR_WIPHY_TXQ_PARAMS={0x21c, 0x25, 0x0, 0x1, [@nested={0x6f, 0xf8, 0x0, 0x1, [@generic="437f490ebe7297e5c988dcad5267a3c0f999ca4a97c2b88ed605dea1cc4b6368f8015cbf1a3bfc7bb9f9e5285d05fe14784395be85f6b33926df7b70df38096d0926541c4d531b76d1963a1e5890ff3035bb35a6ba29bb8a9278135bbe71069a46c752e7ffe3481003ccad"]}, @nested={0x19e, 0xd4, 0x0, 0x1, [@generic="44698d6d36baded25a1cbd93e7e0653cb297f49971f2d5ca3d11f4f7", @typed={0x13, 0x112, 0x0, 0x0, @str='MAC80211_HWSIM\x00'}, @generic="7fa424e9386341d09e6fc935931727f4f169ae15e0b3032c478f1b5f0fef19931eadc2c25f0706356864cd372ad6fc24ad9f79d5adc46012ce099715723e3d5368f2678c7e7e8d61182ba3fde0eda8f7d54464927a6e499d1a0d3369d1ff8c7579b69327ca45088f0a5b6045e6f5e7ce00ee1cbb4440381a23652abea2e6a949ac01719c6efcbb698e461f1546fead811604fdc23e4cf8c715664e53ea820e51e81b2c9ca01e885d683347f5130d09d899779de4a9520e65f1bddd1a56b48dd463638de867259a4f516f2bf5ffc8fe4791d94bac42a9497d1f99b8783452919beb9dd4", @generic, @nested={0x4, 0xad}, @generic="69557b68c317cf584236225818c19f8c8252417cd942d1005f1e0a34d130283201e33f6c599447033857f8a01873a5986a88888ad194303dff9d3fe153e5bb814720ffb8b97b67d6657d953a916eb65e634fc6a7e2ce57b3052d503d3ad61c040880f9aeb14750", @nested={0x4, 0x147}, @nested={0x4, 0x55}, @typed={0x14, 0x11e, 0x0, 0x0, @ipv6=@remote}]}, @typed={0x8, 0xa4, 0x0, 0x0, @ipv4=@remote}]}, @NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0x3}, @NL80211_ATTR_WIPHY_DYN_ACK={0x4}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x80}, @NL80211_ATTR_BSS_BASIC_RATES={0x1e, 0x24, "75ae431ae214cdf3a1e87c55b486a4efa121544a3610f5cf5e8a"}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x2a}, @NL80211_ATTR_WDEV={0xc, 0x99, 0x3}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x4ec}, 0x1, 0x0, 0x0, 0x8880}, 0x20000000) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)={0x1c, r2, 0x1, 0x70bd26, 0x25dfdbff, {}, [@HWSIM_ATTR_PMSR_SUPPORT={0x8, 0x1a, 0x0, 0x1, [@NL80211_PMSR_ATTR_TYPE_CAPA={0x4}]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x894}, 0x4) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_READ(0xffffffffffffffff, 0xc4c85512, &(0x7f0000000c40)={{0xcf9e, 0x400, 0x6, 0x3, "5f5e4283c1e767ae81e303474b3b8616c19020fd65b7ab59774298e2c9bcf381a2e4faa9fb8796c6ca5e5f2e", 0x1}, 0x1, @integer64=@value_ptr=&(0x7f0000000bc0)=0xfffffffffffffffd, "f0604e9c0fad56e9d6da566643931c8ab14a9f5ad9f2b89b42f00d739604d34df3c9b9a3d96fad029a5862f4e9a6d2e667c39dadd70c7451dc1a881563e9fdf57a1e6c45c805c460e9175cc8f8629383bf80f76be186182c50e49725d42146e3685535cb42ae5e23744ec962e75d74401a66e34cdeb009154a6455652d3d4289"}) 1.999890645s ago: executing program 5 (id=1965): r0 = open(&(0x7f0000000040)='./file0\x00', 0x149443, 0x0) (async) mount$auto(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='nfs4\x00', 0x200, 0x0) timerfd_gettime$auto(r0, &(0x7f0000000000)={{0x7, 0x8}, {0x1, 0x6}}) 1.864860986s ago: executing program 7 (id=1966): close_range$auto(0x2, 0x8, 0x0) (async) socket(0x2, 0x80002, 0x73) (async) r0 = socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) (async) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) (async) poll$auto(&(0x7f0000000480)={r0, 0x8000, 0xff81}, 0x7, 0x54b) syz_genetlink_get_family_id$auto_802_15_4_mac(0x0, 0xffffffffffffffff) (async) sendmsg$auto_IEEE802154_LLSEC_DEL_DEVKEY(r1, 0x0, 0x4000801) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r2 = socket(0x1, 0x805, 0x8) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f0000001100), r3) sendmsg$auto_CTRL_CMD_GETFAMILY(r3, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000001180)={&(0x7f0000001140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="01002dbd7000ffdbdf25030000000600010030"], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x20000044) (async) r5 = syz_genetlink_get_family_id$auto_thermal(&(0x7f0000000200), r3) sendmsg$auto_THERMAL_GENL_CMD_TZ_GET_ID(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="21022cbd0000fbdbdf2501"], 0x1c}, 0x1, 0x0, 0x0, 0x20004800}, 0x4000000) (async) sendmsg$auto_THERMAL_GENL_CMD_TZ_GET_GOV(r2, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x44, r5, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@THERMAL_GENL_ATTR_TZ_GOV_NAME={0x9, 0xe, '\\\x88&,+'}, @THERMAL_GENL_ATTR_TZ_GOV_NAME={0x4}, @THERMAL_GENL_ATTR_THRESHOLD_DIRECTION={0x8, 0x1b, 0x2}, @THERMAL_GENL_ATTR_TZ_GOV_NAME={0x4}, @THERMAL_GENL_ATTR_CDEV_NAME={0x14, 0x13, 'wg2\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x8800}, 0x854) write$auto(0x3, 0x0, 0xfdef) 1.781900355s ago: executing program 5 (id=1967): mmap$auto(0x0, 0x128009, 0xdf, 0xeb1, 0x401, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x2, 0x80002, 0x73) close_range$auto(0x0, 0xfffffffffffff000, 0x0) (async) close_range$auto(0x0, 0xfffffffffffff000, 0x0) bpf$auto(0x0, &(0x7f00000001c0)=@task_fd_query={0x9, r0, 0x7ff, 0x6, 0x0, 0x100000b, 0x5f, 0x2}, 0x10) bpf$auto(0x1b, &(0x7f00000002c0)=@task_fd_query={0x0, r0, 0x1ff, 0x6, 0x867, 0x9, r1, 0x401, 0x9}, 0x92) (async) bpf$auto(0x1b, &(0x7f00000002c0)=@task_fd_query={0x0, r0, 0x1ff, 0x6, 0x867, 0x9, r1, 0x401, 0x9}, 0x92) sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x8000}, 0x4000804) (async) sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x8000}, 0x4000804) lstat$auto(0x0, &(0x7f0000000180)={0x7, 0x7, 0x5, 0x7bc, 0x0, 0x0, 0x0, 0x6, 0x46, 0x6, 0x5, 0x7fffffff, 0x900000000, 0xffffffff80000000, 0x9, 0x62, 0x103}) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x89fc, &(0x7f0000000040)={'vxcan1\x00'}) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) io_uring_setup$auto(0x6, 0x0) mmap$auto(0x8, 0x7, 0x4, 0x18, 0xfff, 0x2) openat$auto_proc_projid_map_operations_base(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/projid_map\x00', 0x400, 0x0) (async) r3 = openat$auto_proc_projid_map_operations_base(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/projid_map\x00', 0x400, 0x0) read$auto_proc_projid_map_operations_base(r3, &(0x7f0000000280)=""/107, 0x6b) ioctl$auto_IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, 0x0) (async) ioctl$auto_IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, 0x0) rt_sigpending$auto(0xfffffffffffffffe, 0x0) write$auto_proc_projid_map_operations_base(r3, &(0x7f0000000300)="c250468d476dc6e067fbad4757e383dd8d63258fa26addd0658157b5409842d11a10b90d78d2d6f4fdbb4e4bfd976727e78bbb04d7fde257ad2bead51cf9e3d1d3300334ddc72e133188834bd9d87d71c4296aadc22a50d0c31cda6fa5c763db54f12087d568aaa678e75c8914fc4f6ee6380577f1f639805dfde66795eff5cd1632cc37920cf89ed84d36137483b658e304b410dab787fab05d34e1495e40ac20814cec0a3b18e98b87e565", 0xac) (async) write$auto_proc_projid_map_operations_base(r3, &(0x7f0000000300)="c250468d476dc6e067fbad4757e383dd8d63258fa26addd0658157b5409842d11a10b90d78d2d6f4fdbb4e4bfd976727e78bbb04d7fde257ad2bead51cf9e3d1d3300334ddc72e133188834bd9d87d71c4296aadc22a50d0c31cda6fa5c763db54f12087d568aaa678e75c8914fc4f6ee6380577f1f639805dfde66795eff5cd1632cc37920cf89ed84d36137483b658e304b410dab787fab05d34e1495e40ac20814cec0a3b18e98b87e565", 0xac) mmap$auto(0x0, 0xfff, 0xdf, 0x9b72, 0x400, 0x28000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) (async) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mount$auto(0x0, &(0x7f00000000c0)='.\x00', &(0x7f00000001c0)='nfsd\x00\xee\x1a\x8f\xa2~?\xe2\x82fg\xb3G\xbe\xc8\x12\xae\xc3\xc0@[\x99\xec\xbf(\xec\xc3\xb2\xf2\x15Zi\xc4S6\'\x14\x05\t\x8c\xd5?\xa0\x00\xd8\xe4\xafW\xcc\xa3\xce\tI\x95\xe12\xaclJ\xba\xeb\xe4\x83Z\xaev\xd7\xd9\xdd_\x14O\x84\xaa\x13W\xb7\x06\'fvQ\x95\xc5\xd1\x98\xe3T\xcdfk\xc7\xe9\x96\r\x91\xb0\xc46\xf2\xfc\xef\xfe\xa0\xc9d\xb3h$\xeb\xad\xa4P\x8f\xc3bM{4RQ\x00\x9d)_\xd81(\x03\xfd\rw\xca1\x88|\xe5\x1e\x10\x89X\x01\xe9\xf6g\x95xx\xaf\xa9~m\x05\xe1\xa8\xda\x80\xc5\x8f\xb41\x81\xf0\xa3\xa2\xe4\x81\xb9\x92\xda\x13\xfe5\xfb\xc6\xd8>\x01\xd4\x14', 0x5, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) keyctl$auto(0x5, 0xfffffffd, 0x101, 0x1, 0x4000000000b8c) socket(0x21, 0x2, 0x2) (async) socket(0x21, 0x2, 0x2) setsockopt$auto(0x3, 0x1000000110, 0x2, 0x0, 0xdf) (async) setsockopt$auto(0x3, 0x1000000110, 0x2, 0x0, 0xdf) umount2$auto(&(0x7f0000000040)='.\x00', 0x4) umount2$auto(&(0x7f0000000000)='.\x00', 0x4) 1.622816097s ago: executing program 1 (id=1968): openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x28641, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) bind$auto(0x3, 0x0, 0x6a) r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/kernel/domainname\x00', 0x88042, 0x0) write$auto(r0, &(0x7f0000000000)=')\x00', 0x8) r1 = getpgrp(0xffffffffffffffff) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio1\x00', 0x8000, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) ioctl$auto(0x3, 0x80044dfb, 0x38) syz_open_procfs$namespace(r1, &(0x7f0000000040)='ns/cgroup\x00') ioctl$auto(0x3, 0x5386, 0x3b) openat$auto_lowpan_control_fops_6lowpan(0xffffffffffffff9c, &(0x7f0000001400), 0x4002, 0x0) 1.367764304s ago: executing program 7 (id=1969): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0x9, 0xfffffffd) close_range$auto(0x0, 0xfffffffffffff000, 0x2) r0 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x0, 0xfffffffffffff000, 0x2) poll$auto(&(0x7f0000000180)={r0, 0x1, 0x569}, 0x60, 0x8) read$auto_o2hb_debug_fops_heartbeat(r1, &(0x7f0000000080)=""/211, 0xd3) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) setsockopt$auto(r2, 0x110, 0x4, 0x0, 0x4) landlock_create_ruleset$auto(&(0x7f0000000000)={0xdaa3, 0x8, 0x6}, 0x9, 0x0) getcwd$auto(0x0, 0xffffffffffffffff) landlock_restrict_self$auto(r0, 0x0) link$auto(0x0, &(0x7f0000000200)='./file1\x00') 1.108644027s ago: executing program 7 (id=1970): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$auto(0x0, &(0x7f00000001c0)=@task_fd_query={0x2, 0x4, 0x3, 0x2, 0x8, 0xc, 0xe3, 0x400000000a, 0x3}, 0x6f4) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptywa\x00', 0x400, 0x0) ioctl$auto(0x3, 0x540a, 0x38) init_module$auto(0x0, 0xffff9, &(0x7f0000000140)='/sys/devices/platform/dummy_hcd.6/usb7/power/wakeup_active_count\x00') bpf$auto(0x5, &(0x7f0000000000)=@bpf_attr_3={0x8, 0x2, 0x18c, 0x4, 0x2, 0x8, 0x4, 0x57b8, 0xfffffff8, "63acf0e05b2d33ebc15774e816ef77cf", 0x0, 0x543, 0xffffffffffffffff, 0x207, 0x0, 0x4, 0x4, 0x2, 0xe, 0xa, @attach_btf_obj_fd, 0xc, 0x7fb, 0x80000200006, 0xa, 0x48000000, 0xa7c2}, 0x102) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) semctl$auto(0x1ff, 0x2, 0x13, 0x1) sendmmsg$auto(0x3, &(0x7f0000000000)={{0x0, 0x2, &(0x7f0000000040)={0x0, 0x34000}, 0x4, 0x0, 0x1}, 0xed7138c}, 0x2, 0x9) setsockopt$auto(0x3, 0x1, 0x20, 0x0, 0x9) shutdown$auto(0x200000003, 0x2) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2000000080000001, 0x3) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) capget$auto(0x0, 0xfffffffffffffffe) capset$auto(0x0, &(0x7f0000000000)={0x3, 0x7, 0x8}) r1 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x80, 0x0) read$auto_proc_iter_file_ops_compat_inode(r1, &(0x7f0000000040)=""/142, 0x8e) move_mount$auto(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x91e4) mmap$auto(0xc, 0x200006, 0x1, 0x11, 0x602, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NETDEV_CMD_DEV_GET(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x24040050) madvise$auto(0x0, 0xffffffffffff0005, 0x17) mmap$auto(0x0, 0x40000a, 0xdf, 0x12, 0xa, 0x8000) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000001100)=""/4106, 0x100a) 698.086847ms ago: executing program 1 (id=1971): r0 = openat$auto_tracing_mark_raw_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/trace_marker_raw\x00', 0x420000, 0x0) pwrite64$auto(r0, &(0x7f0000000140)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x86\xdde\x1cJ\x99\x00\x00\x00\x00\x00\x00\xfd\xfd\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\x00\x00\x9f\x1e\xf9\xa4*\x01\x00\x00\x00^\x0fo\x84\xfc\x89\v\xea\xc2\x95\xafQ;CL\"\x01\x0e\x9a\xd2b\xb8\xcb#\xae\xa9i8W\xe5Iq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2E\xd8?\'\x8dg\x81K*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00,,\x93\xba\x88\x93\xc6#\xe5\xaae\x9d\x00\xfb\x9bM\xad\xb6\x1a\x7f\xc0%\xb0\rfOJk\x02\x9b#)\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd0\xbdn\x1d\x00\xeb]B\xa0\x99\xb0R\xb4J}\xa8\xa1\x84]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\xde8\xf7\xc1\xa6\xf2\xc1\"\xadt\xee\xc9\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x7f{/\xbb[\x16\xcb(qT.\x8eIq4>\xa2\x98\'\x9c\xb5\xc7\xd7|p\xc07v\xe3<\xbd\xc7\xd4<,H\x7f\x10P\x80\xca\xdf\xaf\xf3\xb9\xa4\x91t\xea\x98\xda\x8fw \xf1\xf44Ve\xab 8\xe2Y\xd8jN!=\x0ex\xa6q\xd5\xb3f\xeerH\x15\x93\xa5\xb5\xa7_e\x89\x1f\xee\x06$^u\x82\xc0\xde\x7f&\x03\xe4v\xa1+\x95\xea\x98\x05\x85\x1ao\xe7\xd0\x1do\xdbz6\x8d\x822{\xf1\x83\x9bG\xd4\v\x9ei\xb7\xd9\a\xb1nJ\xfc\xafV`v\xae\xda\xbbC&\xad7j\xce\x13x\xaeHg\xfe\xe3\xf6CPr', 0x1, 0x44) unshare$auto(0x40000080) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) shmctl$auto(0x2, 0x2, &(0x7f0000000280)={{0x2, 0xee01, 0x0, 0x48, 0x456a, 0x1, 0x8000}, 0x2, 0x3, 0x2, 0x4, 0xc, 0x1, 0x7, 0x0, 0x0, 0x0}) r1 = socket(0x10, 0x3, 0x0) r2 = syz_genetlink_get_family_id$auto_netdev(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$auto_NETDEV_CMD_QUEUE_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010025bd7000fbdbdf0002"], 0x1c}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ram6\x00', 0x61ad41, 0x0) r4 = syz_genetlink_get_family_id$auto_netdev(&(0x7f0000001500), 0xffffffffffffffff) r5 = socket(0x10, 0x2, 0x0) sendmsg$auto_NETDEV_CMD_QUEUE_GET(r5, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010026bd7010fddbdf250a00000008000300fffbffff"], 0x1c}, 0x1, 0x0, 0x0, 0xc000}, 0x810) ioctl$auto_def_blk_fops_fs(r3, 0xab07, 0x0) 0s ago: executing program 1 (id=1972): mmap$auto(0x80000007, 0x2020009, 0x3, 0xeb1, 0xa, 0x8000) (async) mmap$auto(0x80000007, 0x2020009, 0x3, 0xeb1, 0xa, 0x8000) faccessat2$auto(0xf, 0xfffffffffffffffe, 0x3, 0x1fc) (async) faccessat2$auto(0xf, 0xfffffffffffffffe, 0x3, 0x1fc) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) ioctl$auto(0x3, 0x4b71, 0x38) pipe2$auto(&(0x7f0000000040)=r0, 0x101) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000400), r2) (async) r3 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000400), r2) sendmsg$auto_NFSD_CMD_VERSION_SET(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000c40)={0x24, r3, 0x1, 0x70bd25, 0x25dfdbfb, {}, [@NFSD_A_SERVER_PROTO_VERSION={0x10, 0x1, 0x0, 0x1, [@NFSD_A_VERSION_MAJOR={0x8, 0x1, 0x2}, @NFSD_A_VERSION_ENABLED={0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24000001}, 0x4010) sendmsg$auto_NFSD_CMD_RPC_STATUS_GET(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r3, 0x20, 0x70bd26, 0x25dfdbfe, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x2}, 0x4c800) kernel console output (not intermixed with test programs): yz.2.666'. [ 198.661947][ T8605] mac80211_hwsim hwsim8 wlan0: entered promiscuous mode [ 198.668979][ T8605] mac80211_hwsim hwsim8 wlan0: entered allmulticast mode [ 200.037924][ T8642] bridge0: port 3(veth1_to_hsr) entered blocking state [ 200.091696][ T8642] bridge0: port 3(veth1_to_hsr) entered disabled state [ 200.155215][ T8642] veth1_to_hsr: entered allmulticast mode [ 200.187979][ T8642] veth1_to_hsr: entered promiscuous mode [ 200.227289][ T8642] bridge0: port 3(veth1_to_hsr) entered blocking state [ 200.234353][ T8642] bridge0: port 3(veth1_to_hsr) entered forwarding state [ 200.465488][ T8654] netlink: 'syz.3.677': attribute type 27 has an invalid length. [ 200.533584][ T8654] netlink: 334 bytes leftover after parsing attributes in process `syz.3.677'. [ 201.291494][ T8670] block nbd0: Unsupported socket: shutdown callout must be supported. [ 201.475894][ T8673] netlink: 12 bytes leftover after parsing attributes in process `syz.0.682'. [ 201.502245][ T8677] netlink: 4 bytes leftover after parsing attributes in process `syz.3.684'. [ 201.530914][ T8673] netlink: 12 bytes leftover after parsing attributes in process `syz.0.682'. [ 205.894730][ T8793] netlink: 28 bytes leftover after parsing attributes in process `syz.1.710'. [ 206.194912][ T8785] netlink: 4 bytes leftover after parsing attributes in process `syz.3.708'. [ 206.466394][ T8785] netlink: 342 bytes leftover after parsing attributes in process `syz.3.708'. [ 206.520812][ T8785] netlink: 4 bytes leftover after parsing attributes in process `syz.3.708'. [ 207.791726][ T8818] netlink: ct family unspecified [ 208.367014][ T8824] netlink: 420 bytes leftover after parsing attributes in process `syz.0.719'. [ 208.397080][ T8824] openvswitch: netlink: Flow key attr not present in new flow. [ 209.252750][ T8835] netlink: 20 bytes leftover after parsing attributes in process `syz.2.722'. [ 210.319884][ T8844] netlink: 28 bytes leftover after parsing attributes in process `syz.2.725'. [ 212.800630][ T8909] kernel read not supported for file /éçTµhÊYdèܨ3ô`Ãüå—e&jdˆKÜBUXàØ0z¾Lš¼æÆ84³ÿÿÿÿ (pid: 8909 comm: syz.0.735) [ 212.847578][ T29] audit: type=1800 audit(4294967454.589:6): pid=8909 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.735" name=E9E71E54B568CA0E5964E8DCA833F46006C310FCE59765266A64884BDC425558E01BD8307A04BE4C9ABCE6C63834B3FFFFFFFF dev="mqueue" ino=18998 res=0 errno=0 [ 215.132112][ T8972] netlink: Conntrack attr has 16 unknown bytes [ 215.144009][ T8972] workqueue: name exceeds WQ_NAME_LEN. Truncating to: !PjE ùrõ£Ò„yù*›"¤l-ý¤ôy–ú„ [ 215.249151][ T8973] HSR: entered promiscuous mode [ 215.263233][ T8973] openvswitch: HSR: Dropping previously announced user features [ 215.288385][ T8973] openvswitch: HSR: Dropping previously announced user features [ 215.314251][ T8973] openvswitch: HSR: Dropping previously announced user features [ 215.348582][ T8973] openvswitch: HSR: Dropping previously announced user features [ 215.373418][ T8973] openvswitch: HSR: Dropping previously announced user features [ 215.412812][ T8973] openvswitch: HSR: Dropping previously announced user features [ 215.483940][ T8973] openvswitch: HSR: Dropping previously announced user features [ 215.530746][ T8973] openvswitch: HSR: Dropping previously announced user features [ 215.580093][ T8973] openvswitch: HSR: Dropping previously announced user features [ 215.682072][ T8973] openvswitch: HSR: Dropping previously announced user features [ 215.781909][ T8973] openvswitch: HSR: Dropping previously announced user features [ 215.790397][ T8973] openvswitch: HSR: Dropping previously announced user features [ 215.799016][ T8973] openvswitch: HSR: Dropping previously announced user features [ 215.807643][ T8973] openvswitch: HSR: Dropping previously announced user features [ 215.826966][ T8989] netlink: 'syz.1.752': attribute type 4 has an invalid length. [ 215.845107][ T8989] netlink: 314 bytes leftover after parsing attributes in process `syz.1.752'. [ 215.871999][ T8989] IPv6: NLM_F_CREATE should be specified when creating new route [ 215.900605][ T8989] IPv6: NLM_F_REPLACE set, but no existing node found! [ 215.921669][ T8973] openvswitch: HSR: Dropping previously announced user features [ 216.649535][ T29] audit: type=1326 audit(4294967458.389:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9000 comm="syz.1.758" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f94ccf85d19 code=0x0 [ 217.660193][ T9018] netlink: 4 bytes leftover after parsing attributes in process `syz.1.762'. [ 217.956700][ T9027] netlink: 4 bytes leftover after parsing attributes in process `syz.3.763'. [ 218.951575][ T9032] netlink: 4 bytes leftover after parsing attributes in process `syz.3.763'. [ 219.274346][ T9055] openvswitch: netlink: IP tunnel dst address not specified [ 219.660080][ T9077] netlink: 'syz.3.769': attribute type 1 has an invalid length. [ 219.701889][ T9077] netlink: 322 bytes leftover after parsing attributes in process `syz.3.769'. [ 219.795435][ T9083] Invalid ELF header magic: != ELF [ 220.595217][ T9108] QAT: Device 0 not found [ 221.278897][ T9138] netlink: 146 bytes leftover after parsing attributes in process `syz.1.786'. [ 222.526071][ T9166] netlink: 28 bytes leftover after parsing attributes in process `syz.0.792'. [ 223.014364][ T9177] ubi0: attaching mtd0 [ 223.061377][ T9177] ubi0 error: ubi_attach_mtd_dev: bad VID header (150994944) or data offsets (150995008) [ 223.297394][ T9188] netlink: 354 bytes leftover after parsing attributes in process `syz.2.796'. [ 223.392628][ T9177] netlink: 4 bytes leftover after parsing attributes in process `syz.0.794'. [ 223.929989][ T9213] netlink: 'syz.3.803': attribute type 1 has an invalid length. [ 223.985536][ T9213] netlink: 8 bytes leftover after parsing attributes in process `syz.3.803'. [ 224.192422][ T9224] netlink: 354 bytes leftover after parsing attributes in process `syz.3.806'. [ 224.221584][ T9225] netlink: 'syz.2.814': attribute type 1 has an invalid length. [ 224.649756][ T9238] netlink: 330 bytes leftover after parsing attributes in process `syz.2.809'. [ 224.746518][ T9243] ptrace attach of "./syz-executor exec"[5831] was attempted by "./syz-executor exec"[9243] [ 229.332489][ T9314] netlink: 4 bytes leftover after parsing attributes in process `syz.1.830'. [ 231.151190][ T9344] netlink: 'syz.3.836': attribute type 1 has an invalid length. [ 231.497935][ T9362] netlink: 350 bytes leftover after parsing attributes in process `syz.3.839'. [ 231.522219][ T9362] netlink: 'syz.3.839': attribute type 4 has an invalid length. [ 231.530727][ T9362] netlink: 314 bytes leftover after parsing attributes in process `syz.3.839'. [ 232.892982][ T9392] netlink: 'syz.2.847': attribute type 11 has an invalid length. [ 236.541099][ T9479] netlink: 28 bytes leftover after parsing attributes in process `syz.3.870'. [ 237.470356][ T9483] netlink: 36 bytes leftover after parsing attributes in process `syz.2.869'. [ 243.645548][ T9630] netlink: 8 bytes leftover after parsing attributes in process `syz.1.905'. [ 243.696878][ T9630] netlink: 28 bytes leftover after parsing attributes in process `syz.1.905'. [ 243.775272][ T9630] veth0_macvtap: left promiscuous mode [ 246.221169][ T29] audit: type=1800 audit(4294967299.260:8): pid=9665 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.915" name="SYSV00000008" dev="hugetlbfs" ino=0 res=0 errno=0 [ 246.277813][ T9676] netlink: 8 bytes leftover after parsing attributes in process `syz.2.917'. [ 246.351988][ T9676] netlink: 28 bytes leftover after parsing attributes in process `syz.2.917'. [ 246.490375][ T9676] veth0_macvtap: left promiscuous mode [ 247.454143][ T9691] netlink: 342 bytes leftover after parsing attributes in process `syz.1.919'. [ 249.902049][ T9740] netlink: 8 bytes leftover after parsing attributes in process `syz.3.930'. [ 250.032107][ T9740] netlink: 28 bytes leftover after parsing attributes in process `syz.3.930'. [ 250.882628][ T9747] netlink: 334 bytes leftover after parsing attributes in process `syz.2.934'. [ 251.240147][ T9752] netlink: 28 bytes leftover after parsing attributes in process `syz.1.935'. [ 252.954885][ T29] audit: type=1800 audit(4294967306.010:9): pid=9781 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.941" name="SYSV00000008" dev="hugetlbfs" ino=0 res=0 errno=0 [ 255.219702][ T9813] CIFS mount error: No usable UNC path provided in device string! [ 255.219702][ T9813] [ 255.237810][ T9813] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 255.776165][ T9805] Process accounting resumed [ 256.079998][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.086541][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 259.231994][ T9876] bridge0: port 3(team0) entered blocking state [ 259.312340][ T9876] bridge0: port 3(team0) entered disabled state [ 259.319065][ T9876] team0: entered allmulticast mode [ 259.351397][ T9876] team_slave_1: entered allmulticast mode [ 259.422700][ T9876] team0: entered promiscuous mode [ 259.427802][ T9876] team_slave_1: entered promiscuous mode [ 259.483251][ T9876] bridge0: port 3(team0) entered blocking state [ 259.489681][ T9876] bridge0: port 3(team0) entered forwarding state [ 262.188965][ T9890] netlink: 'syz.0.959': attribute type 14 has an invalid length. [ 262.241215][ T9890] netlink: 330 bytes leftover after parsing attributes in process `syz.0.959'. [ 263.873990][ T9922] kernel read not supported for file /#)-\&[} (pid: 9922 comm: syz.0.966) [ 263.903226][ T29] audit: type=1800 audit(4294967316.960:10): pid=9922 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.966" name="#)-\&[}" dev="mqueue" ino=14629 res=0 errno=0 [ 264.219465][ T9920] netlink: 28 bytes leftover after parsing attributes in process `syz.0.966'. [ 266.212516][ T9939] GUP no longer grows the stack in syz.0.970 (9939): 1000-401000 (0) [ 266.273834][ T9939] CPU: 1 UID: 0 PID: 9939 Comm: syz.0.970 Not tainted 6.13.0-rc3-syzkaller-00017-gf44d154d6e3d #0 [ 266.284664][ T9939] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 266.294755][ T9939] Call Trace: [ 266.298058][ T9939] [ 266.301009][ T9939] dump_stack_lvl+0x16c/0x1f0 [ 266.305719][ T9939] gup_vma_lookup+0x1d2/0x220 [ 266.310430][ T9939] __get_user_pages+0x236/0x3b50 [ 266.315414][ T9939] ? __pfx_rwsem_read_trylock+0x10/0x10 [ 266.320995][ T9939] ? __gup_longterm_locked+0x123/0x1870 [ 266.326660][ T9939] ? __gup_longterm_locked+0x123/0x1870 [ 266.332251][ T9939] ? __pfx___get_user_pages+0x10/0x10 [ 266.337660][ T9939] ? down_read_killable+0xcc/0x380 [ 266.342811][ T9939] ? __pfx_down_read_killable+0x10/0x10 [ 266.348396][ T9939] ? __pfx___lock_acquire+0x10/0x10 [ 266.353646][ T9939] __gup_longterm_locked+0x211/0x1870 [ 266.359071][ T9939] ? __pfx___gup_longterm_locked+0x10/0x10 [ 266.364911][ T9939] ? gup_fast_fallback+0x84c/0x2690 [ 266.370139][ T9939] ? __pfx_lock_release+0x10/0x10 [ 266.375188][ T9939] ? lock_acquire+0x2f/0xb0 [ 266.379714][ T9939] ? __pte_offset_map+0x42/0x540 [ 266.384674][ T9939] ? sanity_check_pinned_pages+0x23/0x11e0 [ 266.390529][ T9939] gup_fast_fallback+0x1802/0x2690 [ 266.395674][ T9939] ? blkdev_direct_IO+0xcfd/0x1ad0 [ 266.400825][ T9939] ? __pfx_gup_fast_fallback+0x10/0x10 [ 266.406318][ T9939] ? hlock_class+0x4e/0x130 [ 266.410863][ T9939] ? __lock_acquire+0xcc5/0x3c40 [ 266.415849][ T9939] pin_user_pages_fast+0xa8/0x100 [ 266.420914][ T9939] ? __pfx_pin_user_pages_fast+0x10/0x10 [ 266.426600][ T9939] ? rcu_is_watching+0x12/0xc0 [ 266.431420][ T9939] iov_iter_extract_pages+0x3a5/0x2010 [ 266.436921][ T9939] ? find_held_lock+0x2d/0x110 [ 266.441779][ T9939] ? __pfx_iov_iter_extract_pages+0x10/0x10 [ 266.447717][ T9939] ? bio_associate_blkg_from_css+0x394/0x13e0 [ 266.453815][ T9939] ? __pfx_lock_release+0x10/0x10 [ 266.458864][ T9939] ? trace_lock_acquire+0x14e/0x1f0 [ 266.464088][ T9939] ? _raw_spin_unlock+0x28/0x50 [ 266.468962][ T9939] ? find_held_lock+0x2d/0x110 [ 266.473762][ T9939] ? bio_associate_blkg+0x137/0x2a0 [ 266.479002][ T9939] bio_iov_iter_get_pages+0x37c/0x1100 [ 266.484518][ T9939] ? __pfx_bio_iov_iter_get_pages+0x10/0x10 [ 266.490453][ T9939] ? __pfx_bio_alloc_bioset+0x10/0x10 [ 266.496202][ T9939] ? iov_iter_is_aligned+0xf2/0x5a0 [ 266.501431][ T9939] ? find_held_lock+0x2d/0x110 [ 266.506228][ T9939] blkdev_direct_IO+0x1054/0x1ad0 [ 266.511278][ T9939] ? __mark_inode_dirty+0x53d/0xe50 [ 266.516522][ T9939] ? __pfx_blkdev_direct_IO+0x10/0x10 [ 266.521939][ T9939] blkdev_read_iter+0x258/0x480 [ 266.526819][ T9939] vfs_read+0x87f/0xbe0 [ 266.531002][ T9939] ? __pfx_vfs_read+0x10/0x10 [ 266.535731][ T9939] ? do_futex+0x123/0x350 [ 266.540106][ T9939] ? __fget_files+0x40/0x3a0 [ 266.544754][ T9939] ksys_read+0x12b/0x250 [ 266.549023][ T9939] ? __pfx_ksys_read+0x10/0x10 [ 266.553824][ T9939] do_syscall_64+0xcd/0x250 [ 266.558363][ T9939] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 266.564282][ T9939] RIP: 0033:0x7f96fc585d19 [ 266.568717][ T9939] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 266.588350][ T9939] RSP: 002b:00007f96fd45e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 266.596799][ T9939] RAX: ffffffffffffffda RBX: 00007f96fc775fa0 RCX: 00007f96fc585d19 [ 266.604806][ T9939] RDX: 0000000080000001 RSI: 0000000000000000 RDI: 0000000000000005 [ 266.612801][ T9939] RBP: 00007f96fc601a20 R08: 0000000000000000 R09: 0000000000000000 [ 266.620796][ T9939] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 266.628789][ T9939] R13: 0000000000000000 R14: 00007f96fc775fa0 R15: 00007ffd59b8ba48 [ 266.636888][ T9939] [ 268.922013][ T9954] openvswitch: netlink: Flow actions attr not present in new flow. [ 268.935630][ T9559] syz.3.890 (9559) used greatest stack depth: 19568 bytes left [ 270.684937][ T9989] kernel read not supported for file /#)-\&[} (pid: 9989 comm: syz.1.985) [ 270.734235][ T9989] netlink: 28 bytes leftover after parsing attributes in process `syz.1.985'. [ 270.741042][ T29] audit: type=1800 audit(4294967323.780:11): pid=9989 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.985" name="#)-\&[}" dev="mqueue" ino=11466 res=0 errno=0 [ 270.787636][ T9989] ipvlan0: entered allmulticast mode [ 270.801273][ T9989] veth0_vlan: entered allmulticast mode [ 270.935382][ T9433] syz.3.859 (9433) used greatest stack depth: 18576 bytes left [ 271.995790][T10012] netlink: 12 bytes leftover after parsing attributes in process `syz.3.990'. [ 272.025440][T10012] mac80211_hwsim hwsim5 ›: entered promiscuous mode [ 272.091144][T10012] mac80211_hwsim hwsim5 ›: entered allmulticast mode [ 272.355046][T10026] netlink: 20 bytes leftover after parsing attributes in process `syz.0.996'. [ 272.372712][T10026] netlink: 32 bytes leftover after parsing attributes in process `syz.0.996'. [ 272.530007][ T29] audit: type=1804 audit(4294967325.580:12): pid=10030 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.997" name="#)-\&[}" dev="mqueue" ino=23121 res=1 errno=0 [ 272.573781][T10030] kernel read not supported for file /#)-\&[} (pid: 10030 comm: syz.3.997) [ 272.604150][T10032] netlink: 28 bytes leftover after parsing attributes in process `syz.3.997'. [ 272.654205][ T29] audit: type=1800 audit(4294967325.710:13): pid=10030 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.997" name="#)-\&[}" dev="mqueue" ino=23121 res=0 errno=0 [ 272.755678][ T29] audit: type=1804 audit(4294967325.810:14): pid=10030 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.997" name="#)-\&[}" dev="mqueue" ino=23121 res=1 errno=0 [ 272.806408][ T29] audit: type=1804 audit(4294967325.830:15): pid=10030 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.997" name="#)-\&[}" dev="mqueue" ino=23121 res=1 errno=0 [ 273.090093][T10032] ipvlan0: entered allmulticast mode [ 273.105922][T10032] veth0_vlan: entered allmulticast mode [ 274.698139][T10069] kAFS: No cell specified [ 280.054512][T10164] netlink: 178 bytes leftover after parsing attributes in process `syz.0.1032'. [ 280.252344][T10167] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1033'. [ 280.378873][T10168] svc: failed to register nfsdv3 RPC service (errno 111). [ 280.447699][T10168] svc: failed to register nfsaclv3 RPC service (errno 111). [ 281.269516][T10185] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1042'. [ 281.285210][T10185] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1042'. [ 283.856015][T10225] HfR: entered promiscuous mode [ 288.190058][T10248] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1052'. [ 288.307919][T10256] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1053'. [ 289.017713][T10271] ptrace attach of "./syz-executor exec"[5825] was attempted by "./syz-executor exec"[10271] [ 289.030474][T10271] Process accounting resumed [ 289.323922][T10260] svc: failed to register nfsdv3 RPC service (errno 101). [ 289.351943][T10260] svc: failed to register nfsaclv3 RPC service (errno 101). [ 290.038840][T10300] netlink: 342 bytes leftover after parsing attributes in process `syz.3.1068'. [ 290.064389][T10300] netlink: 342 bytes leftover after parsing attributes in process `syz.3.1068'. [ 291.924670][T10344] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1081'. [ 291.972831][T10344] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1081'. [ 291.991316][T10344] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1081'. [ 292.000417][T10344] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1081'. [ 292.104185][T10342] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1080'. [ 292.402930][T10356] netlink: 334 bytes leftover after parsing attributes in process `syz.3.1084'. [ 292.911497][T10374] lo: entered allmulticast mode [ 293.011464][T10375] lo: left allmulticast mode [ 294.132804][T10392] __nla_validate_parse: 1 callbacks suppressed [ 294.132826][T10392] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1091'. [ 295.644390][T10427] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1102'. [ 295.671024][T10427] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1102'. [ 298.176684][T10484] mtrr: base(0xffff00000000000) is not aligned on a size(0x0000) boundary [ 299.702623][T10503] lo: entered allmulticast mode [ 299.817159][T10505] lo: left allmulticast mode [ 301.280115][ T9657] syz.2.913 (9657) used greatest stack depth: 17344 bytes left [ 304.155189][T10549] lo: entered allmulticast mode [ 304.242023][T10549] lo: left allmulticast mode [ 307.982858][T10603] openvswitch: netlink: nsh attribute has 14 unknown bytes. [ 308.528225][T10606] netlink: 330 bytes leftover after parsing attributes in process `syz.1.1151'. [ 313.782474][T10687] netlink: 'syz.0.1180': attribute type 1 has an invalid length. [ 314.090669][T10693] netlink: 330 bytes leftover after parsing attributes in process `syz.0.1173'. [ 314.171091][T10693] mac80211_hwsim hwsim18 ›: renamed from wlan0 [ 317.082209][T10736] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1184'. [ 317.514188][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.520538][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.751088][ T29] audit: type=1326 audit(4294967370.800:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10746 comm="syz.1.1187" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f94ccf85d19 code=0x0 [ 318.984297][T10766] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1192'. [ 322.204653][T10782] HSR: entered promiscuous mode [ 322.273730][T10786] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1196'. [ 322.370559][T10786] smc: removing net device syz_tun with user defined pnetid ETHTOOL [ 322.654381][T10745] syz.3.1186: vmalloc error: size 3411968, failed to allocated page array size 6664, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 322.803941][T10745] CPU: 1 UID: 0 PID: 10745 Comm: syz.3.1186 Not tainted 6.13.0-rc3-syzkaller-00017-gf44d154d6e3d #0 [ 322.814787][T10745] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 322.824969][T10745] Call Trace: [ 322.828279][T10745] [ 322.831246][T10745] dump_stack_lvl+0x16c/0x1f0 [ 322.835970][T10745] warn_alloc+0x24d/0x3a0 [ 322.840345][T10745] ? __pfx_warn_alloc+0x10/0x10 [ 322.845261][T10745] ? __get_vm_area_node+0x1b0/0x2f0 [ 322.850505][T10745] ? __get_vm_area_node+0x1dc/0x2f0 [ 322.855756][T10745] __vmalloc_node_range_noprof+0x1105/0x1530 [ 322.861789][T10745] ? ip_set_sockfn_get+0x185/0xc50 [ 322.866951][T10745] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 322.873326][T10745] ? __get_vm_area_node+0x1b0/0x2f0 [ 322.878563][T10745] ? __get_vm_area_node+0x1dc/0x2f0 [ 322.883802][T10745] __vmalloc_node_range_noprof+0xd85/0x1530 [ 322.889731][T10745] ? ip_set_sockfn_get+0x185/0xc50 [ 322.894876][T10745] ? __pfx___lock_acquire+0x10/0x10 [ 322.900122][T10745] ? ip_set_sockfn_get+0x185/0xc50 [ 322.905277][T10745] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 322.911652][T10745] ? apparmor_capable+0x114/0x1d0 [ 322.916714][T10745] ? ip_set_sockfn_get+0x185/0xc50 [ 322.921858][T10745] vmalloc_noprof+0x6b/0x90 [ 322.926395][T10745] ? ip_set_sockfn_get+0x185/0xc50 [ 322.931536][T10745] ip_set_sockfn_get+0x185/0xc50 [ 322.936511][T10745] ? __pfx_lock_release+0x10/0x10 [ 322.941565][T10745] ? __pfx_ip_set_sockfn_get+0x10/0x10 [ 322.947065][T10745] ? nf_sockopt_find.constprop.0+0x221/0x290 [ 322.953096][T10745] nf_getsockopt+0x79/0xe0 [ 322.957552][T10745] ip_getsockopt+0x18e/0x1e0 [ 322.962172][T10745] ? __pfx_ip_getsockopt+0x10/0x10 [ 322.967403][T10745] ? __schedule+0xe60/0x5ad0 [ 322.972023][T10745] ? __pfx___lock_acquire+0x10/0x10 [ 322.977274][T10745] ipv6_getsockopt+0x230/0x280 [ 322.982077][T10745] ? __pfx_ipv6_getsockopt+0x10/0x10 [ 322.987395][T10745] ? __pfx_mark_lock+0x10/0x10 [ 322.992214][T10745] sctp_getsockopt+0x1d2/0x7ae0 [ 322.997110][T10745] ? hlock_class+0x4e/0x130 [ 323.001656][T10745] ? mark_lock+0xb5/0xc60 [ 323.006021][T10745] ? aa_label_sk_perm+0x19d/0x5a0 [ 323.011098][T10745] ? __pfx_sctp_getsockopt+0x10/0x10 [ 323.016422][T10745] ? __lock_acquire+0x15a9/0x3c40 [ 323.021499][T10745] ? __pfx___lock_acquire+0x10/0x10 [ 323.026748][T10745] ? find_held_lock+0x2d/0x110 [ 323.031553][T10745] ? __might_fault+0x13b/0x190 [ 323.036450][T10745] ? __pfx_lock_release+0x10/0x10 [ 323.041508][T10745] ? trace_lock_acquire+0x14e/0x1f0 [ 323.046746][T10745] ? lock_acquire+0x2f/0xb0 [ 323.051277][T10745] ? __might_fault+0xe3/0x190 [ 323.055996][T10745] ? __might_fault+0xe3/0x190 [ 323.060730][T10745] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 323.066672][T10745] ? do_sock_getsockopt+0x3fe/0x870 [ 323.071898][T10745] do_sock_getsockopt+0x3fe/0x870 [ 323.076955][T10745] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 323.082793][T10745] ? lock_acquire+0x2f/0xb0 [ 323.087324][T10745] ? __fget_files+0x40/0x3a0 [ 323.091958][T10745] ? __fget_files+0x206/0x3a0 [ 323.096680][T10745] __sys_getsockopt+0x12f/0x260 [ 323.101576][T10745] __x64_sys_getsockopt+0xbd/0x160 [ 323.106719][T10745] ? do_syscall_64+0x91/0x250 [ 323.111529][T10745] ? lockdep_hardirqs_on+0x7c/0x110 [ 323.116770][T10745] do_syscall_64+0xcd/0x250 [ 323.121329][T10745] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 323.127264][T10745] RIP: 0033:0x7fc8e7b85d19 [ 323.131715][T10745] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 323.151372][T10745] RSP: 002b:00007fc8e8a68038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 323.159836][T10745] RAX: ffffffffffffffda RBX: 00007fc8e7d75fa0 RCX: 00007fc8e7b85d19 [ 323.167842][T10745] RDX: 0000000000000053 RSI: 0000000000000000 RDI: 0000000000000009 [ 323.175942][T10745] RBP: 00007fc8e7c01a20 R08: 0000000020000040 R09: 0000000000000000 [ 323.183959][T10745] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 323.191966][T10745] R13: 0000000000000000 R14: 00007fc8e7d75fa0 R15: 00007ffebb554918 [ 323.200287][T10745] [ 323.231234][T10745] Mem-Info: [ 323.234418][T10745] active_anon:49009 inactive_anon:58048 isolated_anon:25 [ 323.234418][T10745] active_file:8290 inactive_file:50821 isolated_file:0 [ 323.234418][T10745] unevictable:769 dirty:378 writeback:0 [ 323.234418][T10745] slab_reclaimable:11598 slab_unreclaimable:96285 [ 323.234418][T10745] mapped:49632 shmem:94927 pagetables:1026 [ 323.234418][T10745] sec_pagetables:0 bounce:0 [ 323.234418][T10745] kernel_misc_reclaimable:0 [ 323.234418][T10745] free:1145186 free_pcp:33211 free_cma:0 [ 323.355297][T10745] Node 0 active_anon:181680kB inactive_anon:232124kB active_file:33160kB inactive_file:201124kB unevictable:1540kB isolated(anon):0kB isolated(file):0kB mapped:196416kB dirty:1596kB writeback:0kB shmem:368340kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11640kB pagetables:3880kB sec_pagetables:0kB all_unreclaimable? no [ 323.395578][T10745] Node 1 active_anon:64kB inactive_anon:0kB active_file:0kB inactive_file:2160kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:2112kB dirty:4kB writeback:0kB shmem:1600kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 323.426481][T10745] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 323.453713][T10745] lowmem_reserve[]: 0 2465 2466 0 0 [ 323.459012][T10745] Node 0 DMA32 free:773080kB boost:0kB min:34200kB low:42748kB high:51296kB reserved_highatomic:0KB active_anon:189144kB inactive_anon:232124kB active_file:33160kB inactive_file:200300kB unevictable:1540kB writepending:1596kB present:3129332kB managed:2551332kB mlocked:0kB bounce:0kB free_pcp:26640kB local_pcp:3344kB free_cma:0kB [ 323.491130][T10745] lowmem_reserve[]: 0 0 0 0 0 [ 323.495919][T10745] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:36kB inactive_anon:0kB active_file:0kB inactive_file:824kB unevictable:0kB writepending:0kB present:1048580kB managed:876kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:12kB free_cma:0kB [ 323.522994][T10745] lowmem_reserve[]: 0 0 0 0 0 [ 323.527773][T10745] Node 1 Normal free:3847824kB boost:0kB min:55688kB low:69608kB high:83528kB reserved_highatomic:0KB active_anon:64kB inactive_anon:0kB active_file:0kB inactive_file:2160kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:58036kB local_pcp:31828kB free_cma:0kB [ 323.561093][T10745] lowmem_reserve[]: 0 0 0 0 0 [ 323.565883][T10745] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 323.578761][T10745] Node 0 DMA32: 22884*4kB (UME) 8964*8kB (UME) 3234*16kB (UM) 1727*32kB (UME) 886*64kB (UME) 575*128kB (ME) 198*256kB (M) 58*512kB (UM) 12*1024kB (UME) 2*2048kB (ME) 68*4096kB (M) = 775856kB [ 323.598270][T10745] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 323.609961][T10745] Node 1 Normal: 1109*4kB (UME) 188*8kB (UME) 155*16kB (UME) 287*32kB (UME) 166*64kB (UME) 65*128kB (UME) 46*256kB (UME) 25*512kB (UME) 6*1024kB (UME) 4*2048kB (UM) 921*4096kB (M) = 3847876kB [ 323.631313][T10745] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 323.641102][T10745] Node 0 hugepages_total=3 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 323.650443][T10745] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 323.660510][T10745] Node 1 hugepages_total=1 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 323.670229][T10745] 152858 total pagecache pages [ 323.675400][T10745] 11 pages in swap cache [ 323.679669][T10745] Free swap = 104548kB [ 323.684140][T10745] Total swap = 124996kB [ 323.688362][T10745] 2097051 pages RAM [ 323.692785][T10745] 0 pages HighMem/MovableOnly [ 323.697581][T10745] 427368 pages reserved [ 323.701993][T10745] 0 pages cma reserved [ 324.031621][T10794] [U] d [ 324.034794][T10794] [U] [ 324.037601][T10794] [U] [ 324.040320][T10794] [U] [ 324.167469][T10794] [U] [ 324.170245][T10794] [U] [ 324.172986][T10794] [U] [ 324.175727][T10794] [U] [ 324.348979][T10794] [U] [ 324.351762][T10794] [U] [ 324.354477][T10794] [U] [ 324.357187][T10794] [U] [ 324.443889][T10794] [U] [ 324.446646][T10794] [U] [ 324.449366][T10794] [U] [ 324.452090][T10794] [U] [ 325.283234][T10819] [U] [ 326.459717][T10839] ptm ptm6: ldisc open failed (-12), clearing slot 6 [ 337.937676][T10994] cgroup: fork rejected by pids controller in /syz0 [ 338.055145][T10994] KVM: debugfs: duplicate directory 10994-3 [ 338.084310][T10994] KVM: debugfs: duplicate directory 10994-4 [ 338.144348][T10994] KVM: debugfs: duplicate directory 10994-5 [ 338.324373][T10994] KVM: debugfs: duplicate directory 10994-5 [ 343.031147][T11108] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1263'. [ 347.661835][T11178] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1282'. [ 349.129981][T11196] can: request_module (can-proto-0) failed. [ 349.190638][T11200] netlink: 342 bytes leftover after parsing attributes in process `syz.3.1287'. [ 356.365205][T11280] : Can't lookup blockdev [ 359.360986][T11316] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1315'. [ 359.380200][T11316] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 360.071724][T11314] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1314'. [ 360.752173][T11333] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1319'. [ 361.282318][T11368] Process accounting resumed [ 361.949475][T11376] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1328'. [ 362.014641][T11376] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 363.944542][T11454] netlink: 338 bytes leftover after parsing attributes in process `syz.3.1345'. [ 364.746433][T11486] netlink: 122 bytes leftover after parsing attributes in process `syz.2.1356'. [ 364.767287][T11486] netlink: 452 bytes leftover after parsing attributes in process `syz.2.1356'. [ 364.953934][T11490] TCP: TCP_TX_DELAY enabled [ 367.136537][T11542] netlink: 342 bytes leftover after parsing attributes in process `syz.0.1373'. [ 369.115618][T11573] HfR: entered promiscuous mode [ 370.298287][T11603] netlink: 334 bytes leftover after parsing attributes in process `syz.2.1389'. [ 370.531482][T11600] ptrace attach of "./syz-executor exec"[5826] was attempted by "./syz-executor exec"[11600] [ 373.911350][T11663] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1402'. [ 374.951290][T11701] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1413'. [ 378.951579][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.957948][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.921284][T11774] netlink: zone id is out of range [ 379.951021][T11774] netlink: zone id is out of range [ 380.010344][T11774] netlink: zone id is out of range [ 380.064466][T11774] netlink: zone id is out of range [ 380.155893][T11774] netlink: zone id is out of range [ 380.231086][T11774] netlink: zone id is out of range [ 380.261097][T11774] netlink: zone id is out of range [ 380.323442][T11774] netlink: zone id is out of range [ 380.366354][T11774] netlink: zone id is out of range [ 380.417891][T11774] netlink: zone id is out of range [ 386.789708][T11805] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1439'. [ 393.135622][T11881] Invalid ELF header magic: != ELF [ 395.801788][T11925] netlink: 74 bytes leftover after parsing attributes in process `syz.0.1469'. [ 395.981663][T11925] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 396.031253][T11925] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 396.182833][T11925] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 396.209733][T11925] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 396.432606][T11925] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 396.471220][T11925] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 396.587450][T11925] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 396.641267][T11925] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 397.359771][T11939] net_ratelimit: 15 callbacks suppressed [ 397.359794][T11939] netlink: zone id is out of range [ 397.532402][T11939] netlink: set zone limit has 8 unknown bytes [ 397.981152][ T5143] Bluetooth: hci1: command 0x0406 tx timeout [ 398.221146][ T5143] Bluetooth: hci2: command 0x0406 tx timeout [ 398.461147][ T5143] Bluetooth: hci0: command 0x0406 tx timeout [ 398.621097][ T5143] Bluetooth: hci3: command 0x0406 tx timeout [ 399.984143][T11960] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1481'. [ 400.081138][ T5143] Bluetooth: hci1: command 0x0406 tx timeout [ 400.301061][ T5838] Bluetooth: hci2: command 0x0406 tx timeout [ 400.541146][ T5838] Bluetooth: hci0: command 0x0406 tx timeout [ 400.701075][ T5838] Bluetooth: hci3: command 0x0406 tx timeout [ 401.612589][T11977] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1486'. [ 402.140002][T11984] netlink: 334 bytes leftover after parsing attributes in process `syz.0.1488'. [ 407.404435][ T5143] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 407.414808][ T5143] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 407.424904][ T5143] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 407.443087][ T5143] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 407.453066][ T5143] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 407.460443][ T5143] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 407.779598][T12003] chnl_net:caif_netlink_parms(): no params data found [ 407.973813][T12003] bridge0: port 1(bridge_slave_0) entered blocking state [ 407.995388][T12003] bridge0: port 1(bridge_slave_0) entered disabled state [ 408.011892][T12003] bridge_slave_0: entered allmulticast mode [ 408.019017][T12003] bridge_slave_0: entered promiscuous mode [ 408.046894][T12003] bridge0: port 2(bridge_slave_1) entered blocking state [ 408.066174][T12003] bridge0: port 2(bridge_slave_1) entered disabled state [ 408.082695][T12003] bridge_slave_1: entered allmulticast mode [ 408.089785][T12003] bridge_slave_1: entered promiscuous mode [ 408.179130][T12003] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 408.224808][T12003] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 408.274669][T12003] team0: Port device team_slave_0 added [ 408.284354][T12003] team0: Port device team_slave_1 added [ 408.348574][T12003] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 408.361763][T12003] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 408.411415][T12003] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 408.424112][T12003] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 408.431157][T12003] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 408.457110][T12003] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 408.774835][T12003] hsr_slave_0: entered promiscuous mode [ 408.806399][T12003] hsr_slave_1: entered promiscuous mode [ 408.851109][T12003] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 408.858849][T12003] Cannot create hsr debugfs directory [ 409.323751][T12003] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 409.355464][T12003] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 409.404294][T12003] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 409.488745][T12003] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 409.501172][ T5838] Bluetooth: hci4: command tx timeout [ 409.774212][T12003] 8021q: adding VLAN 0 to HW filter on device bond0 [ 409.789955][T12003] 8021q: adding VLAN 0 to HW filter on device team0 [ 409.825076][T12003] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 409.835784][T12003] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 409.855499][ T7967] bridge0: port 1(bridge_slave_0) entered blocking state [ 409.862685][ T7967] bridge0: port 1(bridge_slave_0) entered forwarding state [ 409.880608][ T7967] bridge0: port 2(bridge_slave_1) entered blocking state [ 409.887802][ T7967] bridge0: port 2(bridge_slave_1) entered forwarding state [ 410.152567][T12003] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 410.516636][T12003] veth0_vlan: entered promiscuous mode [ 410.551938][T12003] veth1_vlan: entered promiscuous mode [ 410.806793][T12003] veth0_macvtap: entered promiscuous mode [ 410.908732][T12003] veth1_macvtap: entered promiscuous mode [ 410.966952][T12003] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 410.991223][T12003] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 411.021208][T12003] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 411.031807][T12003] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 411.049769][T12003] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 411.093620][T12003] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 411.145650][T12003] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 411.177171][T12003] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 411.221098][T12003] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 411.248943][T12003] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 411.275109][T12003] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 411.287721][T12003] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 411.297425][T12003] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 411.314071][T12003] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 411.595360][ T5838] Bluetooth: hci4: command tx timeout [ 411.675429][ T8732] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 411.721101][ T8732] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 411.786450][ T9833] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 411.795424][ T9833] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 413.534411][ T5143] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 413.547801][ T5143] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 413.557381][ T5143] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 413.566870][ T5143] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 413.574901][ T5143] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 413.661663][ T5143] Bluetooth: hci4: command tx timeout [ 413.772760][ T5143] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 414.074058][T12066] chnl_net:caif_netlink_parms(): no params data found [ 414.386102][T12066] bridge0: port 1(bridge_slave_0) entered blocking state [ 414.417513][T12066] bridge0: port 1(bridge_slave_0) entered disabled state [ 414.441256][T12066] bridge_slave_0: entered allmulticast mode [ 414.448371][T12066] bridge_slave_0: entered promiscuous mode [ 414.467887][T12066] bridge0: port 2(bridge_slave_1) entered blocking state [ 414.496640][T12066] bridge0: port 2(bridge_slave_1) entered disabled state [ 414.504416][T12066] bridge_slave_1: entered allmulticast mode [ 414.539304][T12066] bridge_slave_1: entered promiscuous mode [ 414.649609][T12066] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 414.673595][T12066] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 414.783422][T12066] team0: Port device team_slave_0 added [ 414.802179][T12066] team0: Port device team_slave_1 added [ 414.944621][T12066] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 414.977743][T12066] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 415.052060][T12066] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 415.096297][T12066] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 415.137289][T12066] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 415.171351][T12066] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 415.484596][T12066] hsr_slave_0: entered promiscuous mode [ 415.541428][T12066] hsr_slave_1: entered promiscuous mode [ 415.751049][ T5838] Bluetooth: hci4: command tx timeout [ 415.771215][T12066] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 415.778835][T12066] Cannot create hsr debugfs directory [ 415.851181][ T5838] Bluetooth: hci5: command tx timeout [ 416.264840][T12066] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 416.280469][T12066] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 416.304010][T12066] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 416.344452][T12066] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 416.563626][T12066] 8021q: adding VLAN 0 to HW filter on device bond0 [ 416.626061][T12066] 8021q: adding VLAN 0 to HW filter on device team0 [ 416.674992][ T7967] bridge0: port 1(bridge_slave_0) entered blocking state [ 416.682179][ T7967] bridge0: port 1(bridge_slave_0) entered forwarding state [ 416.726091][ T8725] bridge0: port 2(bridge_slave_1) entered blocking state [ 416.733256][ T8725] bridge0: port 2(bridge_slave_1) entered forwarding state [ 417.150698][T12066] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 417.632348][T12066] veth0_vlan: entered promiscuous mode [ 417.663874][T12066] veth1_vlan: entered promiscuous mode [ 417.715888][T12066] veth0_macvtap: entered promiscuous mode [ 417.725265][T12066] veth1_macvtap: entered promiscuous mode [ 417.749846][T12066] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 417.760609][T12066] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 417.770563][T12066] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 417.781347][T12066] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 417.791483][T12066] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 417.801985][T12066] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 417.813020][T12066] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 417.838763][T12066] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 417.855293][T12066] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 417.881090][T12066] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 417.892799][T12066] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 417.905745][ T5838] Bluetooth: hci5: command tx timeout [ 417.911602][T12066] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 418.005934][T12066] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 418.036919][T12066] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 418.054137][T12066] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 418.112003][T12066] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 418.120766][T12066] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 418.207104][T12066] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 418.733820][ T8733] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 418.752057][ T8733] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 418.837198][ T7967] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 418.877707][ T7967] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 419.069533][T12120] netlink: 334 bytes leftover after parsing attributes in process `syz.5.1503'. [ 419.128045][T12120] netlink: 334 bytes leftover after parsing attributes in process `syz.5.1503'. [ 419.982854][ T5838] Bluetooth: hci5: command tx timeout [ 420.066925][T12132] perf: Dynamic interrupt throttling disabled, can hang your system! [ 421.217159][T12157] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1522'. [ 422.061321][ T5838] Bluetooth: hci5: command tx timeout [ 425.400272][ T5143] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 425.413297][ T5143] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 425.421617][ T5143] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 425.430549][ T5143] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 425.440006][ T5143] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 425.447528][ T5143] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 425.619413][T12197] netlink: 334 bytes leftover after parsing attributes in process `syz.3.1534'. [ 425.688870][T12202] netlink: 334 bytes leftover after parsing attributes in process `syz.3.1534'. [ 425.976383][T12193] chnl_net:caif_netlink_parms(): no params data found [ 426.482673][T12193] bridge0: port 1(bridge_slave_0) entered blocking state [ 426.489810][T12193] bridge0: port 1(bridge_slave_0) entered disabled state [ 426.499816][T12193] bridge_slave_0: entered allmulticast mode [ 426.516859][T12193] bridge_slave_0: entered promiscuous mode [ 426.526553][T12193] bridge0: port 2(bridge_slave_1) entered blocking state [ 426.551426][T12193] bridge0: port 2(bridge_slave_1) entered disabled state [ 426.558701][T12193] bridge_slave_1: entered allmulticast mode [ 426.577106][T12193] bridge_slave_1: entered promiscuous mode [ 426.776445][T12193] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 426.834033][T12193] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 426.948121][T12193] team0: Port device team_slave_0 added [ 426.987438][T12193] team0: Port device team_slave_1 added [ 427.070043][T12193] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 427.080108][T12193] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 427.155731][T12193] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 427.199747][T12193] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 427.220489][T12193] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 427.295501][T12193] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 427.597444][ T5143] Bluetooth: hci6: command tx timeout [ 427.672791][T12193] hsr_slave_0: entered promiscuous mode [ 427.679473][T12193] hsr_slave_1: entered promiscuous mode [ 427.762787][T12193] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 427.782893][T12193] Cannot create hsr debugfs directory [ 428.444781][T12193] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 428.503862][T12193] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 428.543912][T12193] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 428.564358][T12193] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 428.719680][T12193] 8021q: adding VLAN 0 to HW filter on device bond0 [ 428.758420][T12193] 8021q: adding VLAN 0 to HW filter on device team0 [ 428.786301][ T7967] bridge0: port 1(bridge_slave_0) entered blocking state [ 428.793483][ T7967] bridge0: port 1(bridge_slave_0) entered forwarding state [ 428.835937][ T7135] bridge0: port 2(bridge_slave_1) entered blocking state [ 428.843108][ T7135] bridge0: port 2(bridge_slave_1) entered forwarding state [ 428.922880][T12193] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 428.941884][T12193] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 429.188675][T12193] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 429.662041][ T5143] Bluetooth: hci6: command tx timeout [ 429.730927][T12193] veth0_vlan: entered promiscuous mode [ 429.747952][T12193] veth1_vlan: entered promiscuous mode [ 429.782990][T12193] veth0_macvtap: entered promiscuous mode [ 429.816906][T12193] veth1_macvtap: entered promiscuous mode [ 429.868610][T12193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 429.901762][T12193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 429.928633][T12193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 429.941194][T12193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 429.961569][T12193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 429.981785][T12193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 429.992029][T12193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 430.011411][T12193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 430.023034][T12193] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 430.051752][T12193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 430.072218][T12193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 430.082605][T12193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 430.101469][T12193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 430.121423][T12193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 430.132529][T12193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 430.151496][T12193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 430.171140][T12193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 430.182619][T12193] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 430.206432][T12193] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 430.215390][T12193] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 430.231149][T12193] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 430.251336][T12193] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 430.367239][ T8725] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 430.399618][ T8725] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 430.429875][ T7135] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 430.441121][ T7135] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 430.807499][T12255] netlink: 334 bytes leftover after parsing attributes in process `syz.6.1544'. [ 430.856372][T12255] netlink: 334 bytes leftover after parsing attributes in process `syz.6.1544'. [ 430.946229][T12249] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1551'. [ 431.071373][T12249] hsr_slave_1 (unregistering): left promiscuous mode [ 431.739242][ T29] audit: type=1800 audit(4294967484.790:17): pid=12267 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1548" name="discovery_nqn" dev="configfs" ino=34727 res=0 errno=0 [ 431.765050][ T5143] Bluetooth: hci6: command tx timeout [ 433.149088][T12282] netlink: 'syz.5.1553': attribute type 1 has an invalid length. [ 433.821084][ T5143] Bluetooth: hci6: command tx timeout [ 434.653483][T12303] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1558'. [ 434.791862][T12303] hsr_slave_1 (unregistering): left promiscuous mode [ 436.382856][T12353] netlink: 334 bytes leftover after parsing attributes in process `syz.5.1566'. [ 436.428333][T12356] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1567'. [ 436.603564][T12356] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 436.629658][T12356] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 436.732718][T12360] netlink: 326 bytes leftover after parsing attributes in process `syz.5.1568'. [ 436.747075][T12360] bridge0: port 2(bridge_slave_1) entered disabled state [ 436.756603][T12360] bridge0: port 1(bridge_slave_0) entered disabled state [ 437.382012][ T5838] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 437.393935][ T5838] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 437.409252][ T5838] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 437.418795][ T5838] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 437.431877][ T5838] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 437.441343][ T5838] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 437.957888][T12369] chnl_net:caif_netlink_parms(): no params data found [ 438.252647][T12369] bridge0: port 1(bridge_slave_0) entered blocking state [ 438.278233][T12369] bridge0: port 1(bridge_slave_0) entered disabled state [ 438.308223][T12369] bridge_slave_0: entered allmulticast mode [ 438.322767][T12369] bridge_slave_0: entered promiscuous mode [ 438.383199][T12369] bridge0: port 2(bridge_slave_1) entered blocking state [ 438.390358][T12369] bridge0: port 2(bridge_slave_1) entered disabled state [ 438.398229][T12369] bridge_slave_1: entered allmulticast mode [ 438.409679][T12369] bridge_slave_1: entered promiscuous mode [ 438.472872][T12369] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 438.503337][T12369] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 438.542914][T12369] team0: Port device team_slave_0 added [ 438.551740][T12369] team0: Port device team_slave_1 added [ 438.588064][T12369] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 438.595290][T12369] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 438.623377][T12369] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 438.641615][T12369] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 438.651510][T12369] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 438.678298][T12369] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 438.729887][T12369] hsr_slave_0: entered promiscuous mode [ 438.736883][T12369] hsr_slave_1: entered promiscuous mode [ 438.743688][T12369] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 438.752147][T12369] Cannot create hsr debugfs directory [ 438.879236][T12369] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 438.888482][T12369] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 438.902900][T12369] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 438.912891][T12369] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 438.983571][T12369] 8021q: adding VLAN 0 to HW filter on device bond0 [ 439.005274][T12369] 8021q: adding VLAN 0 to HW filter on device team0 [ 439.018959][ T7135] bridge0: port 1(bridge_slave_0) entered blocking state [ 439.026189][ T7135] bridge0: port 1(bridge_slave_0) entered forwarding state [ 439.059068][ T7135] bridge0: port 2(bridge_slave_1) entered blocking state [ 439.066209][ T7135] bridge0: port 2(bridge_slave_1) entered forwarding state [ 439.207686][T12369] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 439.440732][T12369] veth0_vlan: entered promiscuous mode [ 439.500347][T12369] veth1_vlan: entered promiscuous mode [ 439.511349][ T5143] Bluetooth: hci1: command tx timeout [ 439.521271][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 439.572039][T12369] veth0_macvtap: entered promiscuous mode [ 439.583731][T12369] veth1_macvtap: entered promiscuous mode [ 439.602588][T12369] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 439.614146][ T29] audit: type=1800 audit(4294967492.670:18): pid=12412 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.1578" name="discovery_nqn" dev="configfs" ino=37126 res=0 errno=0 [ 439.635302][T12369] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 439.647974][T12369] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 439.660693][T12369] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 439.677360][T12369] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 439.692079][T12369] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 439.705291][T12369] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 439.715918][T12369] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 439.726858][T12369] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 439.737466][T12369] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 439.762503][T12369] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 439.794248][T12369] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 439.805128][T12369] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 439.816846][T12369] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 439.828685][T12369] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 439.839254][T12369] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 439.851386][T12369] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 439.861687][T12369] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 439.877655][T12369] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 439.893249][T12369] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 439.922869][T12369] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 439.942162][T12369] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 439.966606][T12369] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 439.982385][T12369] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 440.001413][T12369] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 440.020274][T12369] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 440.093219][T12423] netlink: 130 bytes leftover after parsing attributes in process `syz.6.1581'. [ 440.183188][ T8732] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 440.211040][ T8732] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 440.265099][ T8733] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 440.289196][ T8733] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 440.385101][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.392001][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.930385][T12442] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1585'. [ 441.001082][ T29] audit: type=1800 audit(4294967494.050:19): pid=12450 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.1588" name="discovery_nqn" dev="configfs" ino=37239 res=0 errno=0 [ 441.364735][T12459] FAULT_INJECTION: forcing a failure. [ 441.364735][T12459] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 441.399406][T12459] CPU: 0 UID: 0 PID: 12459 Comm: syz.7.1589 Not tainted 6.13.0-rc3-syzkaller-00017-gf44d154d6e3d #0 [ 441.410237][T12459] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 441.420304][T12459] Call Trace: [ 441.423590][T12459] [ 441.426527][T12459] dump_stack_lvl+0x16c/0x1f0 [ 441.431229][T12459] should_fail_ex+0x497/0x5b0 [ 441.435924][T12459] _copy_from_iter+0x29b/0x1400 [ 441.440799][T12459] ? trace_lock_acquire+0x14e/0x1f0 [ 441.446013][T12459] ? __pfx__copy_from_iter+0x10/0x10 [ 441.451319][T12459] ? __virt_addr_valid+0x1a4/0x590 [ 441.456467][T12459] ? __virt_addr_valid+0x5e/0x590 [ 441.461505][T12459] ? __phys_addr+0xc6/0x150 [ 441.466020][T12459] ? __phys_addr_symbol+0x30/0x80 [ 441.471054][T12459] ? __check_object_size+0x488/0x710 [ 441.476371][T12459] mptcp_sendmsg+0x1010/0x1f20 [ 441.481161][T12459] ? __pfx_mptcp_sendmsg+0x10/0x10 [ 441.486283][T12459] ? __pfx_aa_sk_perm+0x10/0x10 [ 441.491156][T12459] ? find_held_lock+0x2d/0x110 [ 441.495936][T12459] ? __pfx_mptcp_sendmsg+0x10/0x10 [ 441.501061][T12459] inet_sendmsg+0x119/0x140 [ 441.505585][T12459] sock_write_iter+0x4ac/0x5b0 [ 441.510364][T12459] ? __pfx_sock_write_iter+0x10/0x10 [ 441.515666][T12459] ? bpf_lsm_file_permission+0x9/0x10 [ 441.521054][T12459] ? security_file_permission+0x71/0x210 [ 441.526700][T12459] vfs_write+0x5ae/0x1150 [ 441.531041][T12459] ? __pfx_sock_write_iter+0x10/0x10 [ 441.536338][T12459] ? __pfx_vfs_write+0x10/0x10 [ 441.541119][T12459] ? __fget_files+0x40/0x3a0 [ 441.545736][T12459] ksys_write+0x207/0x250 [ 441.550077][T12459] ? __pfx_ksys_write+0x10/0x10 [ 441.554951][T12459] do_syscall_64+0xcd/0x250 [ 441.559471][T12459] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 441.565376][T12459] RIP: 0033:0x7effc5985d19 [ 441.569796][T12459] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 441.589415][T12459] RSP: 002b:00007effc67a4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 441.597840][T12459] RAX: ffffffffffffffda RBX: 00007effc5b76160 RCX: 00007effc5985d19 [ 441.605820][T12459] RDX: 000000000000fdf3 RSI: 0000000000000000 RDI: 0000000000000003 [ 441.613812][T12459] RBP: 00007effc67a4090 R08: 0000000000000000 R09: 0000000000000000 [ 441.621877][T12459] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 441.629856][T12459] R13: 0000000000000001 R14: 00007effc5b76160 R15: 00007ffc007f1bf8 [ 441.637855][T12459] [ 441.658374][ T5143] Bluetooth: hci1: command tx timeout [ 442.308447][T12475] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1593'. [ 442.332247][T12475] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 442.339740][T12475] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 442.392730][T12475] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 442.400215][T12475] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 443.416203][T12477] Process accounting resumed [ 443.741355][ T5143] Bluetooth: hci1: command tx timeout [ 445.821362][ T5143] Bluetooth: hci1: command tx timeout [ 446.495022][ T5838] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 446.508988][ T5838] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 446.518944][ T5838] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 446.528534][ T5838] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 446.537402][ T5838] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 446.545423][ T5838] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 446.668381][T12492] chnl_net:caif_netlink_parms(): no params data found [ 446.719557][T12492] bridge0: port 1(bridge_slave_0) entered blocking state [ 446.727155][T12492] bridge0: port 1(bridge_slave_0) entered disabled state [ 446.734555][T12492] bridge_slave_0: entered allmulticast mode [ 446.741779][T12492] bridge_slave_0: entered promiscuous mode [ 446.750710][T12492] bridge0: port 2(bridge_slave_1) entered blocking state [ 446.758181][T12492] bridge0: port 2(bridge_slave_1) entered disabled state [ 446.765736][T12492] bridge_slave_1: entered allmulticast mode [ 446.773369][T12492] bridge_slave_1: entered promiscuous mode [ 446.804482][T12492] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 446.816882][T12492] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 446.846732][T12492] team0: Port device team_slave_0 added [ 446.855399][T12492] team0: Port device team_slave_1 added [ 446.878209][T12492] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 446.885468][T12492] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 446.911541][T12492] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 446.926536][T12492] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 446.933596][T12492] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 446.959679][T12492] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 446.995983][T12492] hsr_slave_0: entered promiscuous mode [ 447.002394][T12492] hsr_slave_1: entered promiscuous mode [ 447.008479][T12492] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 447.018270][T12492] Cannot create hsr debugfs directory [ 447.123840][T12492] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 447.133973][T12492] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 447.143879][T12492] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 447.152973][T12492] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 447.178627][T12492] bridge0: port 2(bridge_slave_1) entered blocking state [ 447.185873][T12492] bridge0: port 2(bridge_slave_1) entered forwarding state [ 447.193326][T12492] bridge0: port 1(bridge_slave_0) entered blocking state [ 447.200691][T12492] bridge0: port 1(bridge_slave_0) entered forwarding state [ 447.256094][T12492] 8021q: adding VLAN 0 to HW filter on device bond0 [ 447.273100][ T8725] bridge0: port 1(bridge_slave_0) entered disabled state [ 447.281660][ T8725] bridge0: port 2(bridge_slave_1) entered disabled state [ 447.297935][T12492] 8021q: adding VLAN 0 to HW filter on device team0 [ 447.314553][ T7967] bridge0: port 1(bridge_slave_0) entered blocking state [ 447.321658][ T7967] bridge0: port 1(bridge_slave_0) entered forwarding state [ 447.373378][ T7967] bridge0: port 2(bridge_slave_1) entered blocking state [ 447.380523][ T7967] bridge0: port 2(bridge_slave_1) entered forwarding state [ 447.438943][T12492] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 447.451458][T12492] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 447.499556][T12511] FAULT_INJECTION: forcing a failure. [ 447.499556][T12511] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 447.499844][T12511] CPU: 0 UID: 0 PID: 12511 Comm: syz.5.1601 Not tainted 6.13.0-rc3-syzkaller-00017-gf44d154d6e3d #0 [ 447.499876][T12511] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 447.499892][T12511] Call Trace: [ 447.499901][T12511] [ 447.499912][T12511] dump_stack_lvl+0x16c/0x1f0 [ 447.499947][T12511] should_fail_ex+0x497/0x5b0 [ 447.499979][T12511] ? fs_reclaim_acquire+0xae/0x150 [ 447.500010][T12511] should_fail_alloc_page+0xe7/0x130 [ 447.500047][T12511] prepare_alloc_pages.constprop.0+0x16f/0x560 [ 447.500076][T12511] ? __pfx_mark_lock+0x10/0x10 [ 447.500116][T12511] __alloc_pages_noprof+0x190/0x25b0 [ 447.500151][T12511] ? hlock_class+0x4e/0x130 [ 447.500183][T12511] ? hlock_class+0x4e/0x130 [ 447.500213][T12511] ? mark_lock+0xb5/0xc60 [ 447.500253][T12511] ? __pfx_mark_lock+0x10/0x10 [ 447.500289][T12511] ? __pfx___alloc_pages_noprof+0x10/0x10 [ 447.500336][T12511] ? hlock_class+0x4e/0x130 [ 447.500366][T12511] ? __pfx___lock_acquire+0x10/0x10 [ 447.500405][T12511] ? hlock_class+0x4e/0x130 [ 447.500434][T12511] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 447.500466][T12511] ? policy_nodemask+0xea/0x4e0 [ 447.500503][T12511] alloc_pages_mpol_noprof+0x2c9/0x610 [ 447.500550][T12511] ? __pfx_alloc_pages_mpol_noprof+0x10/0x10 [ 447.500586][T12511] ? __pfx___lock_acquire+0x10/0x10 [ 447.500622][T12511] ? page_ext_put+0x3e/0xd0 [ 447.500662][T12511] pte_alloc_one+0x20/0x390 [ 447.500688][T12511] do_pte_missing+0x1ae7/0x3e00 [ 447.500730][T12511] __handle_mm_fault+0x103c/0x2a40 [ 447.500769][T12511] ? __pfx___handle_mm_fault+0x10/0x10 [ 447.500797][T12511] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 447.500841][T12511] ? find_vma+0xc0/0x140 [ 447.500867][T12511] ? __pfx_find_vma+0x10/0x10 [ 447.500899][T12511] handle_mm_fault+0x3fa/0xaa0 [ 447.500943][T12511] do_user_addr_fault+0x7a3/0x13f0 [ 447.500970][T12511] exc_page_fault+0x5c/0xc0 [ 447.500996][T12511] asm_exc_page_fault+0x26/0x30 [ 447.501023][T12511] RIP: 0010:rep_movs_alternative+0x4a/0x70 [ 447.501057][T12511] Code: 75 f1 c3 cc cc cc cc 66 0f 1f 84 00 00 00 00 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 df 83 f9 08 73 e8 eb c9 a4 c3 cc cc cc cc 48 89 c8 48 c1 e9 03 83 e0 07 f3 48 a5 89 c1 [ 447.501081][T12511] RSP: 0018:ffffc9000c117950 EFLAGS: 00050202 [ 447.501104][T12511] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 0000000000007fd8 [ 447.501119][T12511] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff8880a4df8028 [ 447.501136][T12511] RBP: ffffc9000c117c58 R08: 0000000000000001 R09: ffffed10149bffff [ 447.501153][T12511] R10: ffff8880a4dfffff R11: 0000000000000000 R12: 0000000000007fd8 [ 447.501170][T12511] R13: 00007ffffffff000 R14: ffff8880a4df8028 R15: 0000000000007fd8 [ 447.501205][T12511] _copy_from_iter+0x384/0x1400 [ 447.501238][T12511] ? trace_lock_acquire+0x14e/0x1f0 [ 447.501270][T12511] ? __pfx__copy_from_iter+0x10/0x10 [ 447.501299][T12511] ? __virt_addr_valid+0x1a4/0x590 [ 447.501331][T12511] ? __virt_addr_valid+0x5e/0x590 [ 447.501356][T12511] ? __phys_addr+0xc6/0x150 [ 447.501381][T12511] ? __phys_addr_symbol+0x30/0x80 [ 447.501406][T12511] ? __check_object_size+0x488/0x710 [ 447.501442][T12511] mptcp_sendmsg+0x1010/0x1f20 [ 447.501482][T12511] ? __pfx_mptcp_sendmsg+0x10/0x10 [ 447.501508][T12511] ? __pfx_aa_sk_perm+0x10/0x10 [ 447.501552][T12511] ? find_held_lock+0x2d/0x110 [ 447.501583][T12511] ? __pfx_mptcp_sendmsg+0x10/0x10 [ 447.501611][T12511] inet_sendmsg+0x119/0x140 [ 447.501638][T12511] sock_write_iter+0x4ac/0x5b0 [ 447.501668][T12511] ? __pfx_sock_write_iter+0x10/0x10 [ 447.501709][T12511] ? bpf_lsm_file_permission+0x9/0x10 [ 447.501745][T12511] ? security_file_permission+0x71/0x210 [ 447.501779][T12511] vfs_write+0x5ae/0x1150 [ 447.501808][T12511] ? __pfx_sock_write_iter+0x10/0x10 [ 447.501839][T12511] ? __pfx_vfs_write+0x10/0x10 [ 447.501870][T12511] ? __fget_files+0x40/0x3a0 [ 447.501918][T12511] ksys_write+0x207/0x250 [ 447.501946][T12511] ? __pfx_ksys_write+0x10/0x10 [ 447.501984][T12511] do_syscall_64+0xcd/0x250 [ 447.502017][T12511] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 447.502047][T12511] RIP: 0033:0x7fecd4185d19 [ 447.502069][T12511] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 447.502093][T12511] RSP: 002b:00007fecd1fd5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 447.502119][T12511] RAX: ffffffffffffffda RBX: 00007fecd4376160 RCX: 00007fecd4185d19 [ 447.502137][T12511] RDX: 000000000000fdf3 RSI: 0000000000000000 RDI: 0000000000000003 [ 447.502153][T12511] RBP: 00007fecd1fd5090 R08: 0000000000000000 R09: 0000000000000000 [ 447.502171][T12511] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 447.502187][T12511] R13: 0000000000000001 R14: 00007fecd4376160 R15: 00007fff7c4b0058 [ 447.502223][T12511] [ 447.687775][T12492] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 448.016009][ T29] audit: type=1800 audit(4294967501.070:20): pid=12520 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.1602" name="version" dev="configfs" ino=37575 res=0 errno=0 [ 448.606707][T12492] veth0_vlan: entered promiscuous mode [ 448.624793][ T5143] Bluetooth: hci7: command tx timeout [ 448.647253][T12492] veth1_vlan: entered promiscuous mode [ 448.708912][T12492] veth0_macvtap: entered promiscuous mode [ 448.774321][T12492] veth1_macvtap: entered promiscuous mode [ 448.833214][T12492] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 448.869541][T12492] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 448.899944][T12492] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 448.941032][T12492] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 448.961103][T12492] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 448.981021][T12492] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 448.991231][T12492] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 449.001796][T12492] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 449.011692][T12492] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 449.022299][T12492] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 449.034398][T12492] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 449.044292][T12492] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 449.054844][T12492] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 449.065526][T12492] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 449.076733][T12492] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 449.086895][T12492] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 449.097463][T12492] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 449.107532][T12492] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 449.118285][T12492] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 449.128421][T12492] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 449.139482][T12492] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 449.150593][T12492] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 449.200593][T12492] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 449.221074][T12492] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 449.229845][T12492] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 449.239019][T12492] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 449.405190][ T7131] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 449.441261][ T7131] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 449.512090][ T7131] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 449.520114][ T7131] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 449.725299][T12563] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1611'. [ 449.974071][ T29] audit: type=1800 audit(4294967503.030:21): pid=12565 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.1598" name="discovery_nqn" dev="configfs" ino=38164 res=0 errno=0 [ 450.281488][T12575] FAULT_INJECTION: forcing a failure. [ 450.281488][T12575] name failslab, interval 1, probability 0, space 0, times 1 [ 450.305864][T12575] CPU: 1 UID: 0 PID: 12575 Comm: syz.8.1613 Not tainted 6.13.0-rc3-syzkaller-00017-gf44d154d6e3d #0 [ 450.316699][T12575] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 450.326805][T12575] Call Trace: [ 450.330108][T12575] [ 450.333066][T12575] dump_stack_lvl+0x16c/0x1f0 [ 450.337787][T12575] should_fail_ex+0x497/0x5b0 [ 450.342503][T12575] ? fs_reclaim_acquire+0xae/0x150 [ 450.347645][T12575] should_failslab+0xc2/0x120 [ 450.352357][T12575] kmem_cache_alloc_noprof+0x6e/0x3b0 [ 450.357763][T12575] ? ptlock_alloc+0x1f/0x70 [ 450.362318][T12575] ptlock_alloc+0x1f/0x70 [ 450.366692][T12575] pte_alloc_one+0x74/0x390 [ 450.371259][T12575] do_pte_missing+0x1ae7/0x3e00 [ 450.376171][T12575] __handle_mm_fault+0x103c/0x2a40 [ 450.381355][T12575] ? __pfx___handle_mm_fault+0x10/0x10 [ 450.386848][T12575] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 450.392517][T12575] ? find_vma+0xc0/0x140 [ 450.396774][T12575] ? __pfx_find_vma+0x10/0x10 [ 450.401473][T12575] handle_mm_fault+0x3fa/0xaa0 [ 450.406260][T12575] do_user_addr_fault+0x7a3/0x13f0 [ 450.411434][T12575] exc_page_fault+0x5c/0xc0 [ 450.415954][T12575] asm_exc_page_fault+0x26/0x30 [ 450.420826][T12575] RIP: 0010:rep_movs_alternative+0x4a/0x70 [ 450.426652][T12575] Code: 75 f1 c3 cc cc cc cc 66 0f 1f 84 00 00 00 00 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 df 83 f9 08 73 e8 eb c9 a4 c3 cc cc cc cc 48 89 c8 48 c1 e9 03 83 e0 07 f3 48 a5 89 c1 [ 450.446269][T12575] RSP: 0018:ffffc90003c7f950 EFLAGS: 00050202 [ 450.452348][T12575] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 0000000000007fd8 [ 450.460326][T12575] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff888028fa8028 [ 450.468306][T12575] RBP: ffffc90003c7fc58 R08: 0000000000000001 R09: ffffed10051f5fff [ 450.476291][T12575] R10: ffff888028faffff R11: 0000000000000000 R12: 0000000000007fd8 [ 450.484275][T12575] R13: 00007ffffffff000 R14: ffff888028fa8028 R15: 0000000000007fd8 [ 450.492268][T12575] _copy_from_iter+0x384/0x1400 [ 450.497139][T12575] ? trace_lock_acquire+0x14e/0x1f0 [ 450.502710][T12575] ? __pfx__copy_from_iter+0x10/0x10 [ 450.508184][T12575] ? __virt_addr_valid+0x1a4/0x590 [ 450.513328][T12575] ? __virt_addr_valid+0x5e/0x590 [ 450.518380][T12575] ? __phys_addr+0xc6/0x150 [ 450.522899][T12575] ? __phys_addr_symbol+0x30/0x80 [ 450.527938][T12575] ? __check_object_size+0x488/0x710 [ 450.533250][T12575] mptcp_sendmsg+0x1010/0x1f20 [ 450.538048][T12575] ? __pfx_mptcp_sendmsg+0x10/0x10 [ 450.543169][T12575] ? __pfx_aa_sk_perm+0x10/0x10 [ 450.548042][T12575] ? find_held_lock+0x2d/0x110 [ 450.552827][T12575] ? __pfx_mptcp_sendmsg+0x10/0x10 [ 450.557948][T12575] inet_sendmsg+0x119/0x140 [ 450.562464][T12575] sock_write_iter+0x4ac/0x5b0 [ 450.567291][T12575] ? __pfx_sock_write_iter+0x10/0x10 [ 450.572598][T12575] ? bpf_lsm_file_permission+0x9/0x10 [ 450.578373][T12575] ? security_file_permission+0x71/0x210 [ 450.584037][T12575] vfs_write+0x5ae/0x1150 [ 450.588495][T12575] ? __pfx_sock_write_iter+0x10/0x10 [ 450.594056][T12575] ? __pfx_vfs_write+0x10/0x10 [ 450.598834][T12575] ? __fget_files+0x40/0x3a0 [ 450.603477][T12575] ksys_write+0x207/0x250 [ 450.607824][T12575] ? __pfx_ksys_write+0x10/0x10 [ 450.612694][T12575] do_syscall_64+0xcd/0x250 [ 450.617220][T12575] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 450.623131][T12575] RIP: 0033:0x7f7f05f85d19 [ 450.627554][T12575] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 450.647189][T12575] RSP: 002b:00007f7f03db4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 450.655619][T12575] RAX: ffffffffffffffda RBX: 00007f7f06176160 RCX: 00007f7f05f85d19 [ 450.663603][T12575] RDX: 000000000000fdf3 RSI: 0000000000000000 RDI: 0000000000000003 [ 450.671588][T12575] RBP: 00007f7f03db4090 R08: 0000000000000000 R09: 0000000000000000 [ 450.679570][T12575] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 450.687549][T12575] R13: 0000000000000001 R14: 00007f7f06176160 R15: 00007ffc08731d18 [ 450.695540][T12575] [ 450.771073][ T5143] Bluetooth: hci7: command tx timeout [ 452.072687][T12604] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1621'. [ 452.084118][T12604] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1621'. [ 452.554536][T12622] binder: 12621:12622 ioctl c0105512 1 returned -22 [ 452.782794][ T5143] Bluetooth: hci7: command tx timeout [ 454.187283][T12657] HSR: entered promiscuous mode [ 454.394779][T12657] delete_channel: no stack [ 454.852549][T12672] nl80211: entered promiscuous mode [ 454.871460][ T5143] Bluetooth: hci7: command tx timeout [ 455.961143][ T29] audit: type=1807 audit(4294967509.010:22): UNKNOWN=$ res=0 [ 455.968590][ T29] audit: type=1802 audit(4294967509.010:23): pid=12702 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.5.1643" res=0 errno=0 [ 456.001137][T12702] ima: policy update failed [ 456.041547][ T29] audit: type=1802 audit(4294967509.060:24): pid=12702 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.5.1643" res=0 errno=0 [ 458.434959][T12746] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1658'. [ 458.488261][T12743] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1658'. [ 458.802293][T12743] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1658'. [ 458.891164][T12750] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1658'. [ 458.929954][T12757] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1651'. [ 459.142467][T12759] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1654'. [ 459.205708][T12759] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1654'. [ 459.226580][T12766] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 459.351051][T12766] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 459.385555][T12767] Process accounting resumed [ 459.697654][T12778] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 460.961849][T12798] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1667'. [ 460.991450][T12798] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1667'. [ 462.972831][T12819] binder: 12818:12819 ioctl c0105512 1 returned -22 [ 466.252279][T12863] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1679'. [ 466.370583][T12863] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1679'. [ 466.760618][ T29] audit: type=1326 audit(4294967519.810:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12886 comm="syz.6.1686" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1f16585d19 code=0x0 [ 467.611411][T12900] nfs: Bad value for 'source' [ 471.038912][T12977] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1719'. [ 471.148399][T12984] binder: 12978:12984 ioctl c0105512 1 returned -22 [ 471.780227][T13004] sp0: Synchronizing with TNC [ 476.882289][T13060] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1729'. [ 479.669724][T13112] netlink: 'syz.7.1742': attribute type 1 has an invalid length. [ 482.806607][T13145] FAULT_INJECTION: forcing a failure. [ 482.806607][T13145] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 482.958592][T13145] CPU: 0 UID: 0 PID: 13145 Comm: syz.5.1752 Not tainted 6.13.0-rc3-syzkaller-00017-gf44d154d6e3d #0 [ 482.969431][T13145] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 482.979523][T13145] Call Trace: [ 482.982835][T13145] [ 482.985791][T13145] dump_stack_lvl+0x16c/0x1f0 [ 482.990511][T13145] should_fail_ex+0x497/0x5b0 [ 482.995229][T13145] _copy_from_user+0x2e/0xd0 [ 482.999841][T13145] copy_msghdr_from_user+0x99/0x160 [ 483.005074][T13145] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 483.010993][T13145] ___sys_sendmsg+0xff/0x1e0 [ 483.015612][T13145] ? __pfx____sys_sendmsg+0x10/0x10 [ 483.020842][T13145] ? __pfx_lock_release+0x10/0x10 [ 483.025878][T13145] ? trace_lock_acquire+0x14e/0x1f0 [ 483.031100][T13145] ? __fget_files+0x206/0x3a0 [ 483.035792][T13145] __sys_sendmsg+0x16e/0x220 [ 483.040419][T13145] ? __pfx___sys_sendmsg+0x10/0x10 [ 483.045673][T13145] do_syscall_64+0xcd/0x250 [ 483.050213][T13145] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 483.056142][T13145] RIP: 0033:0x7fecd4185d19 [ 483.060570][T13145] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 483.080296][T13145] RSP: 002b:00007fecd4eed038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 483.088726][T13145] RAX: ffffffffffffffda RBX: 00007fecd4375fa0 RCX: 00007fecd4185d19 [ 483.096763][T13145] RDX: 0000000000004010 RSI: 0000000020000e00 RDI: 0000000000000003 [ 483.104845][T13145] RBP: 00007fecd4eed090 R08: 0000000000000000 R09: 0000000000000000 [ 483.112914][T13145] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 483.120997][T13145] R13: 0000000000000000 R14: 00007fecd4375fa0 R15: 00007fff7c4b0058 [ 483.128999][T13145] [ 485.893910][T13175] FAULT_INJECTION: forcing a failure. [ 485.893910][T13175] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 486.031127][T13175] CPU: 0 UID: 0 PID: 13175 Comm: syz.5.1761 Not tainted 6.13.0-rc3-syzkaller-00017-gf44d154d6e3d #0 [ 486.041967][T13175] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 486.052064][T13175] Call Trace: [ 486.055373][T13175] [ 486.058335][T13175] dump_stack_lvl+0x16c/0x1f0 [ 486.063494][T13175] should_fail_ex+0x497/0x5b0 [ 486.068224][T13175] _copy_from_iter+0x29b/0x1400 [ 486.073126][T13175] ? hlock_class+0x4e/0x130 [ 486.077665][T13175] ? mark_lock+0xb5/0xc60 [ 486.082018][T13175] ? __pfx__copy_from_iter+0x10/0x10 [ 486.087317][T13175] ? __pfx_mark_lock+0x10/0x10 [ 486.092094][T13175] ? hlock_class+0x4e/0x130 [ 486.096610][T13175] ? mark_lock+0xb5/0xc60 [ 486.100976][T13175] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 486.106977][T13175] ? __check_object_size+0xad/0x710 [ 486.112279][T13175] ping_common_sendmsg+0xc7/0x2d0 [ 486.117437][T13175] ping_v6_sendmsg+0x220/0x15e0 [ 486.122297][T13175] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 486.127695][T13175] ? __pfx_ping_v6_sendmsg+0x10/0x10 [ 486.133009][T13175] ? __pfx___might_resched+0x10/0x10 [ 486.138324][T13175] ? __pfx_aa_sk_perm+0x10/0x10 [ 486.143199][T13175] ? __pfx_ping_v6_sendmsg+0x10/0x10 [ 486.148494][T13175] inet_sendmsg+0x119/0x140 [ 486.153182][T13175] ____sys_sendmsg+0x907/0xb40 [ 486.157952][T13175] ? copy_msghdr_from_user+0x10b/0x160 [ 486.163426][T13175] ? __pfx_____sys_sendmsg+0x10/0x10 [ 486.168752][T13175] ___sys_sendmsg+0x135/0x1e0 [ 486.173476][T13175] ? __pfx____sys_sendmsg+0x10/0x10 [ 486.178712][T13175] ? __pfx_lock_release+0x10/0x10 [ 486.183752][T13175] ? trace_lock_acquire+0x14e/0x1f0 [ 486.189153][T13175] ? __fget_files+0x206/0x3a0 [ 486.193944][T13175] __sys_sendmsg+0x16e/0x220 [ 486.198647][T13175] ? __pfx___sys_sendmsg+0x10/0x10 [ 486.203785][T13175] do_syscall_64+0xcd/0x250 [ 486.208299][T13175] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 486.214291][T13175] RIP: 0033:0x7fecd4185d19 [ 486.218708][T13175] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 486.238342][T13175] RSP: 002b:00007fecd4eed038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 486.246781][T13175] RAX: ffffffffffffffda RBX: 00007fecd4375fa0 RCX: 00007fecd4185d19 [ 486.254772][T13175] RDX: 0000000000004010 RSI: 0000000020000e00 RDI: 0000000000000003 [ 486.262750][T13175] RBP: 00007fecd4eed090 R08: 0000000000000000 R09: 0000000000000000 [ 486.270741][T13175] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 486.278735][T13175] R13: 0000000000000000 R14: 00007fecd4375fa0 R15: 00007fff7c4b0058 [ 486.286734][T13175] [ 487.330965][T13193] netlink: 342 bytes leftover after parsing attributes in process `syz.7.1765'. [ 488.931146][T13208] netlink: 'syz.6.1769': attribute type 27 has an invalid length. [ 488.939016][T13208] netlink: 334 bytes leftover after parsing attributes in process `syz.6.1769'. [ 488.971823][T13211] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1766'. [ 489.160148][T13211] geneve1: entered allmulticast mode [ 489.450391][T13210] Process accounting paused [ 489.542837][T13216] FAULT_INJECTION: forcing a failure. [ 489.542837][T13216] name failslab, interval 1, probability 0, space 0, times 0 [ 489.619763][T13216] CPU: 1 UID: 0 PID: 13216 Comm: syz.7.1771 Not tainted 6.13.0-rc3-syzkaller-00017-gf44d154d6e3d #0 [ 489.630599][T13216] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 489.640690][T13216] Call Trace: [ 489.643994][T13216] [ 489.646947][T13216] dump_stack_lvl+0x16c/0x1f0 [ 489.651669][T13216] should_fail_ex+0x497/0x5b0 [ 489.656407][T13216] ? fs_reclaim_acquire+0xae/0x150 [ 489.661570][T13216] should_failslab+0xc2/0x120 [ 489.666298][T13216] kmem_cache_alloc_node_noprof+0x72/0x3b0 [ 489.672153][T13216] ? __alloc_skb+0x2b3/0x380 [ 489.676784][T13216] __alloc_skb+0x2b3/0x380 [ 489.681236][T13216] ? __pfx___alloc_skb+0x10/0x10 [ 489.686202][T13216] ? mark_lock+0xb5/0xc60 [ 489.690565][T13216] ? is_dynamic_key+0x1a0/0x280 [ 489.695439][T13216] ? __pfx_mark_lock+0x10/0x10 [ 489.700226][T13216] ? __pfx_mark_lock+0x10/0x10 [ 489.705099][T13216] alloc_skb_with_frags+0xe4/0x850 [ 489.710232][T13216] ? hlock_class+0x4e/0x130 [ 489.714753][T13216] sock_alloc_send_pskb+0x7f1/0x980 [ 489.719972][T13216] ? __pfx_mark_lock+0x10/0x10 [ 489.724776][T13216] ? __lock_acquire+0xcc5/0x3c40 [ 489.729738][T13216] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 489.735478][T13216] ? __pfx___lock_acquire+0x10/0x10 [ 489.740697][T13216] ? hlock_class+0x4e/0x130 [ 489.745215][T13216] ? __lock_acquire+0x15a9/0x3c40 [ 489.750285][T13216] __ip6_append_data.isra.0+0x2ac3/0x45e0 [ 489.756292][T13216] ? __pfx_ping_getfrag+0x10/0x10 [ 489.761342][T13216] ? __pfx___ip6_append_data.isra.0+0x10/0x10 [ 489.767429][T13216] ? ip6_mtu+0x231/0x4a0 [ 489.771780][T13216] ? ip6_setup_cork+0xc60/0x1460 [ 489.776743][T13216] ip6_append_data+0x1e6/0x500 [ 489.781525][T13216] ? __pfx_ping_getfrag+0x10/0x10 [ 489.786573][T13216] ping_v6_sendmsg+0xbb9/0x15e0 [ 489.791446][T13216] ? __pfx_ping_v6_sendmsg+0x10/0x10 [ 489.796781][T13216] ? __pfx___might_resched+0x10/0x10 [ 489.802093][T13216] ? __pfx_aa_sk_perm+0x10/0x10 [ 489.806965][T13216] ? __pfx_ping_v6_sendmsg+0x10/0x10 [ 489.812266][T13216] inet_sendmsg+0x119/0x140 [ 489.816787][T13216] ____sys_sendmsg+0x907/0xb40 [ 489.821602][T13216] ? copy_msghdr_from_user+0x10b/0x160 [ 489.827342][T13216] ? __pfx_____sys_sendmsg+0x10/0x10 [ 489.832662][T13216] ___sys_sendmsg+0x135/0x1e0 [ 489.837362][T13216] ? __pfx____sys_sendmsg+0x10/0x10 [ 489.842591][T13216] ? __pfx_lock_release+0x10/0x10 [ 489.847649][T13216] ? trace_lock_acquire+0x14e/0x1f0 [ 489.852886][T13216] ? __fget_files+0x206/0x3a0 [ 489.857587][T13216] __sys_sendmsg+0x16e/0x220 [ 489.862211][T13216] ? __pfx___sys_sendmsg+0x10/0x10 [ 489.867362][T13216] do_syscall_64+0xcd/0x250 [ 489.871895][T13216] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 489.877801][T13216] RIP: 0033:0x7effc5985d19 [ 489.882223][T13216] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 489.901844][T13216] RSP: 002b:00007effc67e6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 489.910271][T13216] RAX: ffffffffffffffda RBX: 00007effc5b75fa0 RCX: 00007effc5985d19 [ 489.918258][T13216] RDX: 0000000000004010 RSI: 0000000020000e00 RDI: 0000000000000003 [ 489.926244][T13216] RBP: 00007effc67e6090 R08: 0000000000000000 R09: 0000000000000000 [ 489.934224][T13216] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 489.942202][T13216] R13: 0000000000000000 R14: 00007effc5b75fa0 R15: 00007ffc007f1bf8 [ 489.950193][T13216] [ 490.889448][T13233] netlink: 334 bytes leftover after parsing attributes in process `syz.6.1775'. [ 492.270805][T13253] lo: entered allmulticast mode [ 492.359606][T13254] lo: left allmulticast mode [ 497.076334][T13293] Process accounting resumed [ 498.431911][T12776] syz.8.1656 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 498.625028][T12776] CPU: 1 UID: 0 PID: 12776 Comm: syz.8.1656 Not tainted 6.13.0-rc3-syzkaller-00017-gf44d154d6e3d #0 [ 498.635863][T12776] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 498.645964][T12776] Call Trace: [ 498.649272][T12776] [ 498.652234][T12776] dump_stack_lvl+0x16c/0x1f0 [ 498.656971][T12776] dump_header+0x101/0x900 [ 498.661459][T12776] oom_kill_process+0x270/0xa60 [ 498.666445][T12776] ? mem_cgroup_out_of_memory+0x8d/0x270 [ 498.672127][T12776] out_of_memory+0x351/0x1700 [ 498.676860][T12776] ? __pfx_out_of_memory+0x10/0x10 [ 498.682007][T12776] ? rcu_read_unlock+0x17/0x60 [ 498.686817][T12776] ? find_held_lock+0x2d/0x110 [ 498.691636][T12776] mem_cgroup_out_of_memory+0x207/0x270 [ 498.697227][T12776] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 498.703343][T12776] ? do_raw_spin_unlock+0x172/0x230 [ 498.708569][T12776] try_charge_memcg+0x54c/0xaf0 [ 498.713446][T12776] ? __pfx_try_charge_memcg+0x10/0x10 [ 498.718837][T12776] ? get_mem_cgroup_from_mm+0x87/0x5f0 [ 498.724313][T12776] ? get_mem_cgroup_from_mm+0x87/0x5f0 [ 498.729795][T12776] ? get_mem_cgroup_from_mm+0x131/0x5f0 [ 498.735358][T12776] __mem_cgroup_charge+0x9b/0x280 [ 498.740413][T12776] shmem_alloc_and_add_folio+0x507/0xc00 [ 498.746066][T12776] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 498.751972][T12776] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 498.758134][T12776] ? shmem_huge_global_enabled+0x176/0x250 [ 498.763960][T12776] ? shmem_allowable_huge_orders+0xcd/0x3e0 [ 498.769873][T12776] shmem_get_folio_gfp+0x689/0x1530 [ 498.775089][T12776] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 498.780741][T12776] ? find_held_lock+0x2d/0x110 [ 498.785529][T12776] shmem_write_begin+0x161/0x300 [ 498.790486][T12776] ? __pfx_shmem_write_begin+0x10/0x10 [ 498.795960][T12776] ? timestamp_truncate+0x21f/0x2e0 [ 498.801182][T12776] ? balance_dirty_pages_ratelimited_flags+0x92/0x1270 [ 498.808055][T12776] generic_perform_write+0x2ba/0x920 [ 498.813360][T12776] ? __pfx_generic_perform_write+0x10/0x10 [ 498.819191][T12776] ? inode_needs_update_time.part.0+0x191/0x270 [ 498.825459][T12776] shmem_file_write_iter+0x10e/0x140 [ 498.830787][T12776] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 498.836611][T12776] __kernel_write_iter+0x318/0xa80 [ 498.841741][T12776] ? __pfx___kernel_write_iter+0x10/0x10 [ 498.847391][T12776] ? get_dump_page+0x15b/0x230 [ 498.852174][T12776] ? __pfx___might_resched+0x10/0x10 [ 498.857476][T12776] dump_user_range+0x389/0x8c0 [ 498.862265][T12776] ? __pfx_dump_user_range+0x10/0x10 [ 498.867568][T12776] ? elf_coredump_extra_notes_write+0xbe/0x430 [ 498.873908][T12776] ? __pfx_writenote+0x10/0x10 [ 498.878688][T12776] elf_core_dump+0x2787/0x3880 [ 498.883473][T12776] ? __pfx_elf_core_dump+0x10/0x10 [ 498.888591][T12776] ? kasan_save_stack+0x42/0x60 [ 498.893456][T12776] ? kasan_save_stack+0x33/0x60 [ 498.898332][T12776] ? kasan_save_track+0x14/0x30 [ 498.903302][T12776] ? __kasan_kmalloc+0xaa/0xb0 [ 498.908087][T12776] ? __kvmalloc_node_noprof+0xad/0x1a0 [ 498.913739][T12776] ? do_coredump+0x1665/0x43e0 [ 498.918522][T12776] ? get_signal+0x23f3/0x2610 [ 498.923253][T12776] ? rcu_is_watching+0x12/0xc0 [ 498.928032][T12776] ? trace_lock_acquire+0x14e/0x1f0 [ 498.933249][T12776] ? __pfx_sort+0x10/0x10 [ 498.937610][T12776] ? get_signal+0x23f3/0x2610 [ 498.942308][T12776] ? do_coredump+0x2dd5/0x43e0 [ 498.947091][T12776] do_coredump+0x2dd5/0x43e0 [ 498.951718][T12776] ? __pfx_do_coredump+0x10/0x10 [ 498.956674][T12776] ? irqentry_exit_to_user_mode+0x13f/0x280 [ 498.962662][T12776] get_signal+0x23f3/0x2610 [ 498.967206][T12776] ? __pfx_get_signal+0x10/0x10 [ 498.972071][T12776] ? rcu_is_watching+0x12/0xc0 [ 498.976849][T12776] ? trace_irq_disable.constprop.0+0xea/0x140 [ 498.982937][T12776] arch_do_signal_or_restart+0x90/0x7e0 [ 498.988511][T12776] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 498.994797][T12776] ? do_user_addr_fault+0xa4b/0x13f0 [ 499.000203][T12776] irqentry_exit_to_user_mode+0x13f/0x280 [ 499.005944][T12776] asm_exc_page_fault+0x26/0x30 [ 499.010815][T12776] RIP: 0033:0x0 [ 499.014281][T12776] Code: Unable to access opcode bytes at 0xffffffffffffffd6. [ 499.021650][T12776] RSP: 002b:000000000000000a EFLAGS: 00010217 [ 499.027734][T12776] RAX: 0000000000000000 RBX: 00007f7f06175fa0 RCX: 00007f7f05f85d19 [ 499.035724][T12776] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000020003b46 [ 499.043806][T12776] RBP: 00007f7f06001a20 R08: 0000000000000002 R09: 0000000000000000 [ 499.051794][T12776] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 499.059773][T12776] R13: 0000000000000000 R14: 00007f7f06175fa0 R15: 00007ffc08731d18 [ 499.067771][T12776] [ 499.204776][T12776] memory: usage 304552kB, limit 307200kB, failcnt 21015 [ 499.211783][T12776] memory+swap: usage 429096kB, limit 9007199254740988kB, failcnt 0 [ 499.302524][T12776] kmem: usage 3088kB, limit 9007199254740988kB, failcnt 0 [ 499.365206][T12776] Memory cgroup stats for /syz8: [ 499.365607][T12776] cache 299552768 [ 499.374237][T12776] rss 5124096 [ 499.463147][T12776] rss_huge 0 [ 499.514574][T12776] shmem 299552768 [ 499.518284][T12776] mapped_file 39968768 [ 499.522477][T12776] dirty 0 [ 499.595839][T12776] writeback 0 [ 499.599184][T12776] workingset_refault_anon 56 [ 499.646530][T12776] workingset_refault_file 0 [ 499.651118][T12776] swap 127533056 [ 499.754775][T12776] swapcached 159744 [ 499.758658][T12776] pgpgin 123518 [ 499.762140][T12776] pgpgout 49095 [ 499.802622][T12776] pgfault 34667 [ 499.824774][T12776] pgmajfault 9 [ 499.828208][T12776] inactive_anon 200765440 [ 499.832555][T12776] active_anon 104067072 [ 499.887311][T12776] inactive_file 0 [ 499.892762][T12776] active_file 0 [ 499.951337][T12776] unevictable 0 [ 499.982463][T12776] hierarchical_memory_limit 314572800 [ 500.061402][T12776] hierarchical_memsw_limit 9223372036854771712 [ 500.101758][T12776] total_cache 299552768 [ 500.111899][T12776] total_rss 5124096 [ 500.144326][T12776] total_rss_huge 0 [ 500.206651][T12776] total_shmem 299552768 [ 500.210863][T12776] total_mapped_file 39968768 [ 500.262217][T12776] total_dirty 0 [ 500.266131][T12776] total_writeback 0 [ 500.270403][T12776] total_workingset_refault_anon 56 [ 500.294307][T12776] total_workingset_refault_file 0 [ 500.299384][T12776] total_swap 127533056 [ 500.303491][T12776] total_swapcached 159744 [ 500.322455][T12776] total_pgpgin 123518 [ 500.344221][T12776] total_pgpgout 49095 [ 500.354132][T12776] total_pgfault 34667 [ 500.358183][T12776] total_pgmajfault 9 [ 500.374731][T12776] total_inactive_anon 200765440 [ 500.379632][T12776] total_active_anon 104067072 [ 500.408714][T12776] total_inactive_file 0 [ 500.412931][T12776] total_active_file 0 [ 500.447254][T12776] total_unevictable 0 [ 500.451560][T12776] anon_cost 0 [ 500.474177][T12776] file_cost 0 [ 500.477547][T12776] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz8,task_memcg=/syz8,task=syz.8.1642,pid=12699,uid=0 [ 500.546446][T12776] Memory cgroup out of memory: Killed process 12699 (syz.8.1642) total-vm:134408kB, anon-rss:920kB, file-rss:63900kB, shmem-rss:18432kB, UID:0 pgtables:252kB oom_score_adj:1000 [ 501.820299][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.826926][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 506.313805][T13393] netlink: 240 bytes leftover after parsing attributes in process `syz.5.1808'. [ 508.662425][T13405] sctp: [Deprecated]: syz.8.1811 (pid 13405) Use of int in max_burst socket option deprecated. [ 508.662425][T13405] Use struct sctp_assoc_value instead [ 509.903049][T13414] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 509.959532][T13414] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 509.990143][T13414] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 509.998605][T13414] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 510.031303][T13414] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 510.047390][T13414] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 510.430117][T13412] chnl_net:caif_netlink_parms(): no params data found [ 511.007778][T13411] erspan0: entered allmulticast mode [ 511.264406][T13412] bridge0: port 1(bridge_slave_0) entered blocking state [ 511.308753][T13412] bridge0: port 1(bridge_slave_0) entered disabled state [ 511.328953][T13412] bridge_slave_0: entered allmulticast mode [ 511.336238][T13412] bridge_slave_0: entered promiscuous mode [ 511.421811][T13412] bridge0: port 2(bridge_slave_1) entered blocking state [ 511.442718][T13412] bridge0: port 2(bridge_slave_1) entered disabled state [ 511.466494][T13412] bridge_slave_1: entered allmulticast mode [ 511.484373][T13412] bridge_slave_1: entered promiscuous mode [ 512.129548][T13414] Bluetooth: hci8: command tx timeout [ 512.344851][T13412] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 512.430373][T13412] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 514.110094][T13412] team0: Port device team_slave_0 added [ 514.131824][T13412] team0: Port device team_slave_1 added [ 514.217217][T13414] Bluetooth: hci8: command tx timeout [ 514.858872][T13412] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 514.865869][T13412] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 514.948291][T13412] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 515.497266][T13412] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 515.504290][T13412] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 515.592426][T13412] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 516.122570][T13412] hsr_slave_0: entered promiscuous mode [ 516.227124][T13412] hsr_slave_1: entered promiscuous mode [ 516.249220][T13412] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 516.259135][T13412] Cannot create hsr debugfs directory [ 516.286238][T13414] Bluetooth: hci8: command tx timeout [ 517.214554][T13412] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 517.336681][T13412] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 517.429507][T13412] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 517.510735][T13412] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 517.734589][T13412] 8021q: adding VLAN 0 to HW filter on device bond0 [ 517.784402][T13412] 8021q: adding VLAN 0 to HW filter on device team0 [ 517.840648][ T7131] bridge0: port 1(bridge_slave_0) entered blocking state [ 517.847864][ T7131] bridge0: port 1(bridge_slave_0) entered forwarding state [ 517.867638][ T7131] bridge0: port 2(bridge_slave_1) entered blocking state [ 517.874827][ T7131] bridge0: port 2(bridge_slave_1) entered forwarding state [ 518.265667][T13471] netlink: 338 bytes leftover after parsing attributes in process `syz.7.1823'. [ 518.359742][T13471] bridge0: port 2(bridge_slave_1) entered disabled state [ 518.367366][T13414] Bluetooth: hci8: command tx timeout [ 518.368587][T13471] bridge0: port 1(bridge_slave_0) entered disabled state [ 518.502532][T13412] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 518.698604][T13484] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1825'. syzkaller syzkaller login: [ 519.187355][T13412] veth0_vlan: entered promiscuous mode [ 519.209819][T13412] veth1_vlan: entered promiscuous mode [ 519.275323][T13412] veth0_macvtap: entered promiscuous mode [ 519.284888][T13412] veth1_macvtap: entered promiscuous mode [ 519.301619][T13412] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 519.312244][T13412] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 519.322154][T13412] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 519.332946][T13412] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 519.342976][T13412] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 519.353484][T13412] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 519.363411][T13412] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 519.374096][T13412] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 519.384183][T13412] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 519.394733][T13412] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 519.405163][T13412] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 519.416184][T13412] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 519.427473][T13412] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 519.437488][T13412] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 519.448011][T13412] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 519.457949][T13412] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 519.468552][T13412] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 519.478643][T13412] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 519.489259][T13412] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 519.499718][T13412] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 519.510795][T13412] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 519.520785][T13412] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 519.531303][T13412] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 519.541270][T13412] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 519.551910][T13412] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 519.562974][T13412] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 519.616753][T13412] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 519.634574][T13412] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 519.653546][T13412] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 519.662861][T13412] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 519.976876][ T7135] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 519.986186][ T7135] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 520.081324][ T8732] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 520.095489][ T8732] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 522.904264][T13543] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 522.951362][T13543] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 522.953652][T13549] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1842'. [ 523.042156][T13543] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 523.082507][T13549] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 523.140024][T13543] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 523.149976][T13549] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 523.183635][T13543] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 523.241202][T13549] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 523.293146][T13549] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 523.393008][T13549] geneve0: entered allmulticast mode [ 523.398904][T13543] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 523.553727][T13543] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 523.652894][T13543] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 523.705850][T13552] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1843'. [ 523.756413][T13551] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1843'. [ 523.928035][T13543] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 524.089384][T13543] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 524.199754][T13543] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 524.255953][T13539] netlink: 36 bytes leftover after parsing attributes in process `syz.9.1838'. [ 524.283857][T13543] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 524.383903][T13543] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 524.492684][T13543] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 524.781197][T13543] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 524.939789][T13414] Bluetooth: hci2: command 0x0406 tx timeout [ 525.002170][T13414] Bluetooth: hci0: command 0x0406 tx timeout [ 525.009853][T13543] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 525.082067][T13414] Bluetooth: hci3: command 0x0406 tx timeout [ 525.099285][T13543] Bluetooth: hci7: Opcode 0x0406 failed: -4 [ 525.153040][T13543] Bluetooth: hci7: Opcode 0x0406 failed: -4 [ 525.162194][T13414] Bluetooth: hci4: command 0x0c1a tx timeout [ 525.218990][T13543] Bluetooth: hci8: Opcode 0x0c1a failed: -4 [ 525.235721][T13543] Bluetooth: hci8: Opcode 0x0406 failed: -4 [ 525.272457][T13543] Bluetooth: hci8: Opcode 0x0406 failed: -4 [ 525.562337][T13414] Bluetooth: hci5: command 0x0c1a tx timeout [ 526.121333][T13414] Bluetooth: hci6: command 0x0c1a tx timeout [ 526.441701][T13414] Bluetooth: hci1: command 0x0c1a tx timeout [ 527.080904][T13414] Bluetooth: hci7: command 0x0c1a tx timeout [ 527.241045][T13414] Bluetooth: hci8: command 0x0c1a tx timeout [ 527.248471][ T5143] Bluetooth: hci4: command 0x0c1a tx timeout [ 527.549421][T13593] QAT: Device 5 not found [ 527.641257][T13414] Bluetooth: hci5: command 0x0c1a tx timeout [ 527.853170][T13602] netlink: 28 bytes leftover after parsing attributes in process `syz.8.1857'. [ 527.980859][T13602] geneve0: entered allmulticast mode [ 528.201040][T13414] Bluetooth: hci6: command 0x0c1a tx timeout [ 528.520143][T13414] Bluetooth: hci1: command 0x0c1a tx timeout [ 529.200872][T13414] Bluetooth: hci7: command 0x0c1a tx timeout [ 529.320116][T13414] Bluetooth: hci8: command 0x0c1a tx timeout [ 529.327254][T13414] Bluetooth: hci4: command 0x0c1a tx timeout [ 529.720219][T13414] Bluetooth: hci5: command 0x0c1a tx timeout [ 530.222285][T13656] openvswitch: netlink: IP tunnel TTL not specified. [ 530.283716][T13414] Bluetooth: hci6: command 0x0c1a tx timeout [ 530.601470][T13414] Bluetooth: hci1: command 0x0c1a tx timeout [ 530.757858][T13664] Invalid ELF header magic: != ELF [ 531.258818][T13414] Bluetooth: hci7: command 0x0c1a tx timeout [ 531.408861][ T5143] Bluetooth: hci8: command 0x0c1a tx timeout [ 533.266745][T13694] netlink: 1448 bytes leftover after parsing attributes in process `syz.5.1878'. [ 533.284853][T13694] openvswitch: netlink: Flow get message rejected, Key attribute missing. getty: ttyS0: read error: Resource temporarily unavailable [ 537.791981][T13792] netlink: 'syz.7.1902': attribute type 10 has an invalid length. [ 537.841360][T13792] netlink: 230 bytes leftover after parsing attributes in process `syz.7.1902'. [ 538.760399][T13817] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1909'. [ 538.776209][T13817] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1909'. [ 540.483134][T13414] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 540.494447][T13414] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 540.503798][T13414] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 540.516345][T13414] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 540.553309][T13414] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 540.564403][T13414] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 540.982921][T13855] chnl_net:caif_netlink_parms(): no params data found [ 541.252405][T13855] bridge0: port 1(bridge_slave_0) entered blocking state [ 541.259770][T13855] bridge0: port 1(bridge_slave_0) entered disabled state [ 541.277981][T13855] bridge_slave_0: entered allmulticast mode [ 541.287049][T13855] bridge_slave_0: entered promiscuous mode [ 541.296113][T13855] bridge0: port 2(bridge_slave_1) entered blocking state [ 541.312644][T13855] bridge0: port 2(bridge_slave_1) entered disabled state [ 541.320097][T13855] bridge_slave_1: entered allmulticast mode [ 541.336894][T13855] bridge_slave_1: entered promiscuous mode [ 541.423197][T13855] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 541.446262][T13855] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 541.547937][T13855] team0: Port device team_slave_0 added [ 541.576307][T13855] team0: Port device team_slave_1 added [ 541.669838][T13884] netlink: 342 bytes leftover after parsing attributes in process `syz.7.1931'. [ 541.685461][T13855] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 541.692907][T13855] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 541.763435][T13855] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 541.789442][T13855] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 541.805719][T13855] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 541.857657][T13855] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 542.018151][T13855] hsr_slave_0: entered promiscuous mode [ 542.034191][T13855] hsr_slave_1: entered promiscuous mode [ 542.069360][T13855] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 542.083262][T13855] Cannot create hsr debugfs directory [ 542.543209][T13855] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 542.681696][ T5143] Bluetooth: hci9: command tx timeout [ 542.715241][T13855] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 542.922344][T13855] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 543.074784][T13855] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 543.372979][T13855] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 543.414875][T13855] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 543.455588][T13855] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 543.475452][T13855] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 543.651659][T13855] 8021q: adding VLAN 0 to HW filter on device bond0 [ 543.670970][T13855] 8021q: adding VLAN 0 to HW filter on device team0 [ 543.723419][ T9831] bridge0: port 1(bridge_slave_0) entered blocking state [ 543.730567][ T9831] bridge0: port 1(bridge_slave_0) entered forwarding state [ 543.772269][ T9825] bridge0: port 2(bridge_slave_1) entered blocking state [ 543.779441][ T9825] bridge0: port 2(bridge_slave_1) entered forwarding state [ 544.166737][T13855] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 544.270651][T13855] veth0_vlan: entered promiscuous mode [ 544.304545][T13855] veth1_vlan: entered promiscuous mode [ 544.384336][T13855] veth0_macvtap: entered promiscuous mode [ 544.394281][T13855] veth1_macvtap: entered promiscuous mode [ 544.429359][T13855] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 544.472723][T13855] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 544.492187][T13855] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 544.522135][T13855] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 544.542065][T13855] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 544.562023][T13855] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 544.571890][T13855] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 544.602380][T13855] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 544.632107][T13855] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 544.652079][T13855] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 544.673623][T13855] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 544.692185][T13855] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 544.712597][T13855] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 544.723153][T13855] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 544.734709][T13855] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 544.745163][T13855] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 544.756746][ T5143] Bluetooth: hci9: command tx timeout [ 544.762742][T13855] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 544.772990][T13855] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 544.785386][T13855] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 544.796298][T13855] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 544.807351][T13855] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 544.817357][T13855] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 544.828287][T13855] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 544.838501][T13855] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 544.851945][T13855] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 544.872269][T13855] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 544.892033][T13855] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 544.941969][T13855] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 544.972049][T13855] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 544.993007][T13855] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 545.046335][T13855] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 545.061914][T13855] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 545.070666][T13855] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 545.091754][T13855] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 545.374051][ T9826] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 545.393872][ T9826] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 syzkaller syzkaller login: [ 545.469523][ T1100] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 545.484666][ T1100] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 546.842838][ T5143] Bluetooth: hci9: command tx timeout [ 547.487317][T13966] nbd: must specify at least one socket [ 548.910005][ T5143] Bluetooth: hci9: command tx timeout [ 551.903945][T13414] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 551.920441][T13414] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 551.929115][T13414] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 551.939192][T13414] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 551.958991][T13414] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3 [ 551.966495][T13414] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 552.672484][T14041] chnl_net:caif_netlink_parms(): no params data found [ 553.167421][T14041] bridge0: port 1(bridge_slave_0) entered blocking state [ 553.195786][T14041] bridge0: port 1(bridge_slave_0) entered disabled state [ 553.203559][T14041] bridge_slave_0: entered allmulticast mode [ 553.233127][T14041] bridge_slave_0: entered promiscuous mode [ 553.317778][T14041] bridge0: port 2(bridge_slave_1) entered blocking state [ 553.324920][T14041] bridge0: port 2(bridge_slave_1) entered disabled state [ 553.358015][T14041] bridge_slave_1: entered allmulticast mode [ 553.365191][T14041] bridge_slave_1: entered promiscuous mode [ 553.555820][T14041] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 553.625646][T14041] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 553.794704][T14041] team0: Port device team_slave_0 added [ 553.823004][T14041] team0: Port device team_slave_1 added [ 553.976662][T14041] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 553.998515][T14041] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 554.077279][T14041] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 554.107454][ T5143] Bluetooth: hci10: command tx timeout [ 554.120271][T14041] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 554.137382][T14041] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 554.189718][T14041] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 554.351200][T14041] hsr_slave_0: entered promiscuous mode [ 554.397924][T14041] hsr_slave_1: entered promiscuous mode [ 554.435737][T14041] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 554.457206][T14041] Cannot create hsr debugfs directory [ 554.513294][T14081] Invalid ELF header magic: != ELF [ 554.798200][T14086] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1971'. [ 554.906588][T14087] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1971'. [ 555.119930][T14041] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 555.279695][T14041] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 555.387950][T14041] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 555.501751][T14041] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 555.547880][ T30] INFO: task syz.2.1476:11947 blocked for more than 143 seconds. [ 555.555757][ T30] Not tainted 6.13.0-rc3-syzkaller-00017-gf44d154d6e3d #0 [ 555.566506][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 555.575221][ T30] task:syz.2.1476 state:D stack:28576 pid:11947 tgid:11944 ppid:5825 flags:0x00000006 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 555.606042][ T30] Call Trace: [ 555.626285][ T30] [ 555.630410][ T30] __schedule+0xe58/0x5ad0 [ 555.634887][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 555.656777][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 555.672283][ T30] ? __pfx___schedule+0x10/0x10 [ 555.677375][ T30] ? schedule+0x298/0x350 [ 555.681754][ T30] ? __pfx_lock_release+0x10/0x10 [ 555.706980][ T30] ? __mutex_trylock_common+0x78/0x250 [ 555.712520][ T30] ? lock_acquire+0x2f/0xb0 [ 555.736437][ T30] ? schedule+0x1fd/0x350 [ 555.740918][ T30] schedule+0xe7/0x350 [ 555.745040][ T30] schedule_preempt_disabled+0x13/0x30 [ 555.761145][ T30] __mutex_lock+0x62b/0xa60 [ 555.765959][ T30] ? nfsd_shutdown_threads+0x5b/0xf0 [ 555.786913][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 555.796452][ T30] ? __pfx_lock_release+0x10/0x10 [ 555.801553][ T30] ? nfsd_shutdown_threads+0x5b/0xf0 [ 555.826591][ T30] nfsd_shutdown_threads+0x5b/0xf0 [ 555.836402][ T30] nfsd_umount+0x48/0xe0 [ 555.840724][ T30] deactivate_locked_super+0xbe/0x1a0 [ 555.856677][ T30] deactivate_super+0xde/0x100 [ 555.861541][ T30] cleanup_mnt+0x222/0x450 [ 555.866041][ T30] task_work_run+0x14e/0x250 [ 555.886429][ T30] ? __pfx_task_work_run+0x10/0x10 [ 555.896503][ T30] ? __pfx___x64_sys_mount+0x10/0x10 [ 555.917917][ T30] syscall_exit_to_user_mode+0x27b/0x2a0 [ 555.936589][ T30] do_syscall_64+0xda/0x250 [ 555.941172][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 555.986415][ T30] RIP: 0033:0x7face5d85d19 [ 555.990894][ T30] RSP: 002b:00007face6c31038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 556.021552][ T30] RAX: ffffffffffffffea RBX: 00007face5f76080 RCX: 00007face5d85d19 [ 556.041825][ T30] RDX: 0000000020000140 RSI: 0000000020000100 RDI: 0000000000000000 [ 556.076401][ T30] RBP: 00007face5e01a20 R08: 0000000000000000 R09: 0000000000000000 [ 556.084445][ T30] R10: 0000000000010001 R11: 0000000000000246 R12: 0000000000000000 [ 556.118284][ T30] R13: 0000000000000000 R14: 00007face5f76080 R15: 00007ffdce4ee598 [ 556.146359][ T30] [ 556.149493][ T30] [ 556.149493][ T30] Showing all locks held in the system: [ 556.187177][ T5143] Bluetooth: hci10: command tx timeout [ 556.188428][ T30] 1 lock held by khungtaskd/30: [ 556.226203][ T30] #0: ffffffff8ddba940 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x7f/0x390 [ 556.263871][ T30] 2 locks held by kworker/u9:0/56: [ 556.272101][ T30] #0: ffff88802572b148 ((wq_completion)nbd0-recv){+.+.}-{0:0}, at: process_one_work+0x12cd/0x1b30 [ 556.296684][ T30] #1: ffffc9000121fd80 ((work_completion)(&args->work)){+.+.}-{0:0}, at: process_one_work+0x8bb/0x1b30 [ 556.308679][ T30] 2 locks held by kworker/u8:35/9825: [ 556.314073][ T30] #0: ffff8880b873ed18 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x29/0x130 [ 556.324111][ T30] #1: ffff8880b8728a88 (&per_cpu_ptr(group->pcpu, cpu)->seq){-.-.}-{0:0}, at: psi_task_switch+0x203/0x8e0 [ 556.335643][ T30] 3 locks held by kworker/u8:39/9831: [ 556.341105][ T30] #0: ffff88801baed948 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x12cd/0x1b30 [ 556.353191][ T30] #1: ffffc90002f27d80 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x8bb/0x1b30 [ 556.363288][ T30] #2: ffffffff8ddc6140 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x48/0x700 [ 556.373414][ T30] 2 locks held by syz.1.1452/11859: [ 556.378966][ T30] #0: ffffffff8fb5db50 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 556.387731][ T30] #1: ffffffff8e1baa88 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_set_doit+0x694/0xbe0 [ 556.397999][ T30] 2 locks held by syz.2.1476/11947: [ 556.403215][ T30] #0: ffff88807f22e0e0 (&type->s_umount_key#51){+.+.}-{4:4}, at: deactivate_super+0xd6/0x100 [ 556.413863][ T30] #1: ffffffff8e1baa88 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 556.423542][ T30] 2 locks held by syz-executor/12003: [ 556.429068][ T30] #0: ffff888032d0e0e0 (&type->s_umount_key#51){+.+.}-{4:4}, at: deactivate_super+0xd6/0x100 [ 556.439445][ T30] #1: ffffffff8e1baa88 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 556.450925][ T30] 2 locks held by syz-executor/12066: [ 556.456526][ T30] #0: ffffffff8fabf2c8 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x38/0x230 [ 556.465580][ T30] #1: ffffffff8ddc6278 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x282/0x3b0 [ 556.475786][ T30] 2 locks held by syz-executor/12193: [ 556.481223][ T30] #0: ffff8880348fe0e0 (&type->s_umount_key#51){+.+.}-{4:4}, at: deactivate_super+0xd6/0x100 [ 556.492023][ T30] #1: ffffffff8e1baa88 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 556.501747][ T30] 2 locks held by syz.3.1545/12252: [ 556.507038][ T30] #0: ffff88805d68c0e0 (&type->s_umount_key#51){+.+.}-{4:4}, at: deactivate_super+0xd6/0x100 [ 556.517704][ T30] #1: ffffffff8e1baa88 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 556.527450][ T30] 2 locks held by syz-executor/12492: [ 556.532834][ T30] #0: ffff88805f62e0e0 (&type->s_umount_key#51){+.+.}-{4:4}, at: deactivate_super+0xd6/0x100 [ 556.543171][ T30] #1: ffffffff8e1baa88 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 556.554201][ T30] 2 locks held by syz-executor/13412: [ 556.559674][ T30] #0: ffff88807c9d60e0 (&type->s_umount_key#51){+.+.}-{4:4}, at: deactivate_super+0xd6/0x100 [ 556.570211][ T30] #1: ffffffff8e1baa88 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 556.579938][ T30] 2 locks held by getty/13919: [ 556.584856][ T30] #0: ffff88803118b0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 556.594925][ T30] #1: ffffc900037b52f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0xfba/0x1480 [ 556.605164][ T30] 7 locks held by syz-executor/14041: [ 556.610609][ T30] #0: ffff8880358ea420 (sb_writers#8){.+.+}-{0:0}, at: ksys_write+0x12b/0x250 [ 556.620009][ T30] #1: ffff88807bb0ec88 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x27b/0x500 [ 556.629904][ T30] #2: ffff8880276df2d8 (kn->active#49){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x29e/0x500 [ 556.640022][ T30] #3: ffffffff8f073d88 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd2/0x4b0 [ 556.651759][ T30] #4: ffff888079dac0e8 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xa4/0x610 [ 556.662408][ T30] #5: ffff888079dad250 (&devlink->lock_key#4){+.+.}-{4:4}, at: nsim_drv_remove+0x4a/0x1d0 [ 556.672584][ T30] #6: ffffffff8ddc6278 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x1a4/0x3b0 [ 556.682889][ T30] 2 locks held by syz.5.1967/14072: [ 556.688497][ T30] #0: ffff888011c700e0 (&type->s_umount_key#51){+.+.}-{4:4}, at: deactivate_super+0xd6/0x100 [ 556.698911][ T30] #1: ffffffff8e1baa88 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 556.708670][ T30] 2 locks held by syz.1.1972/14090: [ 556.713880][ T30] #0: ffffffff8fb5db50 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 556.722389][ T30] #1: ffffffff8e1baa88 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_version_set_doit+0xc5/0x7a0 [ 556.733503][ T30] [ 556.746440][ T30] ============================================= [ 556.746440][ T30] [ 556.774697][ T30] NMI backtrace for cpu 0 [ 556.779080][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.13.0-rc3-syzkaller-00017-gf44d154d6e3d #0 [ 556.789615][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 556.799708][ T30] Call Trace: [ 556.803000][ T30] [ 556.805942][ T30] dump_stack_lvl+0x116/0x1f0 [ 556.810659][ T30] nmi_cpu_backtrace+0x27b/0x390 [ 556.815644][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 556.821675][ T30] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 556.827707][ T30] watchdog+0xf14/0x1240 [ 556.831990][ T30] ? __pfx_watchdog+0x10/0x10 [ 556.836699][ T30] ? lockdep_hardirqs_on+0x7c/0x110 [ 556.841925][ T30] ? __kthread_parkme+0x148/0x220 [ 556.846979][ T30] ? __pfx_watchdog+0x10/0x10 [ 556.851668][ T30] kthread+0x2c1/0x3a0 [ 556.855745][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 556.860952][ T30] ? __pfx_kthread+0x10/0x10 [ 556.865551][ T30] ret_from_fork+0x45/0x80 [ 556.869970][ T30] ? __pfx_kthread+0x10/0x10 [ 556.874567][ T30] ret_from_fork_asm+0x1a/0x30 [ 556.879353][ T30] [ 556.885894][ T30] Sending NMI from CPU 0 to CPUs 1: [ 556.892730][ C1] NMI backtrace for cpu 1 [ 556.892752][ C1] CPU: 1 UID: 0 PID: 13362 Comm: syz.7.1803 Not tainted 6.13.0-rc3-syzkaller-00017-gf44d154d6e3d #0 [ 556.892777][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 556.892788][ C1] RIP: 0010:do_raw_spin_trylock+0x32/0x180 [ 556.892816][ C1] Code: 00 00 00 49 bc 00 00 00 00 00 fc ff df 55 53 48 89 fb 48 83 ec 60 48 89 e5 48 c7 04 24 b3 8a b5 41 48 c7 44 24 08 a6 d4 6f 8d <48> c1 ed 03 48 c7 44 24 10 a0 c4 76 81 4a 8d 44 25 00 c7 00 f1 f1 [ 556.892836][ C1] RSP: 0018:ffffc9000fa77948 EFLAGS: 00000286 [ 556.892853][ C1] RAX: 0000000000000002 RBX: ffff8880b8744d80 RCX: 1ffffffff3475f14 [ 556.892873][ C1] RDX: 0000000000000000 RSI: 0000000000000004 RDI: ffff8880b8744d80 [ 556.892885][ C1] RBP: ffffc9000fa77948 R08: 0000000000000001 R09: 0000000000000000 [ 556.892898][ C1] R10: ffffed100d752e00 R11: 0000000000000000 R12: dffffc0000000000 [ 556.892912][ C1] R13: 000000000006ba97 R14: ffff88813fffb540 R15: 0000000000000740 [ 556.892926][ C1] FS: 0000000000000000(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 556.892946][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 556.892961][ C1] CR2: 000055d1f6886088 CR3: 0000000033dcc000 CR4: 00000000003526f0 [ 556.892974][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 556.892987][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 556.893000][ C1] Call Trace: [ 556.893005][ C1] [ 556.893013][ C1] ? nmi_cpu_backtrace+0x1d8/0x390 [ 556.893044][ C1] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 556.893073][ C1] ? nmi_handle+0x1ac/0x5d0 [ 556.893094][ C1] ? do_raw_spin_trylock+0x32/0x180 [ 556.893116][ C1] ? default_do_nmi+0x6a/0x160 [ 556.893144][ C1] ? exc_nmi+0x170/0x1e0 [ 556.893171][ C1] ? end_repeat_nmi+0xf/0x53 [ 556.893200][ C1] ? do_raw_spin_trylock+0x32/0x180 [ 556.893222][ C1] ? do_raw_spin_trylock+0x32/0x180 [ 556.893245][ C1] ? do_raw_spin_trylock+0x32/0x180 [ 556.893268][ C1] [ 556.893274][ C1] [ 556.893282][ C1] ? page_ext_put+0x48/0xd0 [ 556.893307][ C1] _raw_spin_trylock+0x1b/0x80 [ 556.893327][ C1] free_unref_page+0x3c0/0x1080 [ 556.893354][ C1] vfree+0x17a/0x890 [ 556.893376][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 556.893398][ C1] ? __pfx_kcov_close+0x10/0x10 [ 556.893416][ C1] kcov_put+0x2a/0x40 [ 556.893433][ C1] kcov_close+0xd/0x20 [ 556.893450][ C1] __fput+0x3f8/0xb60 [ 556.893476][ C1] ? cleanup_mnt+0x266/0x450 [ 556.893497][ C1] task_work_run+0x14e/0x250 [ 556.893526][ C1] ? __pfx_task_work_run+0x10/0x10 [ 556.893557][ C1] do_exit+0xadd/0x2d70 [ 556.893584][ C1] ? get_signal+0x8f7/0x2610 [ 556.893605][ C1] ? __pfx_do_exit+0x10/0x10 [ 556.893627][ C1] ? do_raw_spin_lock+0x12d/0x2c0 [ 556.893646][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 556.893670][ C1] do_group_exit+0xd3/0x2a0 [ 556.893696][ C1] get_signal+0x2576/0x2610 [ 556.893720][ C1] ? do_user_addr_fault+0xdc7/0x13f0 [ 556.893738][ C1] ? reacquire_held_locks+0x20b/0x4c0 [ 556.893769][ C1] ? __pfx_get_signal+0x10/0x10 [ 556.893791][ C1] ? __pfx_do_futex+0x10/0x10 [ 556.893817][ C1] ? find_held_lock+0x2d/0x110 [ 556.893841][ C1] arch_do_signal_or_restart+0x90/0x7e0 [ 556.893874][ C1] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 556.893908][ C1] syscall_exit_to_user_mode+0x150/0x2a0 [ 556.893932][ C1] do_syscall_64+0xda/0x250 [ 556.893956][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 556.893979][ C1] RIP: 0033:0x7effc5985d19 [ 556.893994][ C1] Code: Unable to access opcode bytes at 0x7effc5985cef. [ 556.894003][ C1] RSP: 002b:00007effc67e60e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 556.894022][ C1] RAX: fffffffffffffe00 RBX: 00007effc5b75fa8 RCX: 00007effc5985d19 [ 556.894036][ C1] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007effc5b75fa8 [ 556.894049][ C1] RBP: 00007effc5b75fa0 R08: 0000000000000000 R09: 0000000000000000 [ 556.894061][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 00007effc5b75fac [ 556.894074][ C1] R13: 0000000000000000 R14: 00007ffc007f1b10 R15: 00007ffc007f1bf8 [ 556.894093][ C1] [ 557.326696][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 557.333602][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.13.0-rc3-syzkaller-00017-gf44d154d6e3d #0 [ 557.344140][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 557.354222][ T30] Call Trace: [ 557.357523][ T30] [ 557.360464][ T30] dump_stack_lvl+0x3d/0x1f0 [ 557.365088][ T30] panic+0x71d/0x800 [ 557.369018][ T30] ? __pfx_panic+0x10/0x10 [ 557.373465][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 557.378878][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 557.384893][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 557.390297][ T30] ? watchdog+0xd7e/0x1240 [ 557.394743][ T30] ? watchdog+0xd71/0x1240 [ 557.399200][ T30] watchdog+0xd8f/0x1240 [ 557.403484][ T30] ? __pfx_watchdog+0x10/0x10 [ 557.408186][ T30] ? lockdep_hardirqs_on+0x7c/0x110 [ 557.413423][ T30] ? __kthread_parkme+0x148/0x220 [ 557.418483][ T30] ? __pfx_watchdog+0x10/0x10 [ 557.423194][ T30] kthread+0x2c1/0x3a0 [ 557.427295][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 557.432523][ T30] ? __pfx_kthread+0x10/0x10 [ 557.437165][ T30] ret_from_fork+0x45/0x80 [ 557.441610][ T30] ? __pfx_kthread+0x10/0x10 [ 557.446238][ T30] ret_from_fork_asm+0x1a/0x30 [ 557.451045][ T30] [ 557.454372][ T30] Kernel Offset: disabled [ 557.458696][ T30] Rebooting in 86400 seconds..