last executing test programs: 7m26.582538777s ago: executing program 0 (id=1639): ioperm$auto(0x8, 0x0, 0x3) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0004, 0x19) close_range$auto(0x2, 0x8, 0x0) open(&(0x7f0000000000)='./cgroup.cpu/cgroup.procs\x00', 0x8802, 0x32) r1 = open(&(0x7f0000000040)='./cgroup.cpu/cgroup.procs\x00', 0x2020, 0xd4) close_range$auto(0x0, r1, 0x2) mprotect$auto(0x1ffff000, 0x8000000000000001, 0xd) swapon$auto(&(0x7f0000000000)='X))\x00', 0x5259) 7m26.051748776s ago: executing program 0 (id=1647): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x0, 0xffffffffffffffff, 0x4000000000002) fanotify_init$auto(0x5, 0x800) pipe2$auto(0x0, 0x80) socket(0xa, 0x2, 0x73) connect$auto(0x3, &(0x7f0000000140)={0xa, @sa_data_min="ff00"}, 0x55) 7m25.937168307s ago: executing program 0 (id=1649): sched_setaffinity$auto(0x0, 0x80000000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) fanotify_init$auto(0x200, 0x2010000000000) r0 = open(&(0x7f0000000000)='./file1\x00', 0x10677d, 0x37e5c9853cd1b999) fanotify_mark$auto(0x400000000000, 0x101, 0x8040, r0, 0x0) clone3$auto(0x0, 0x1000) 7m25.816550938s ago: executing program 0 (id=1651): mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) io_uring_setup$auto(0x6, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket(0x21, 0x2, 0x2) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) 7m25.727364155s ago: executing program 0 (id=1652): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = socket(0xa, 0x3, 0x3a) setsockopt$auto(0x400000000000003, 0x29, 0xcc, 0x0, 0x567) mlockall$auto(0x7) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) io_uring_setup$auto(0x1, 0x0) futex$auto(0x0, 0x6, 0x8, 0x0, 0x0, 0xffffffd6) mmap$auto(0x0, 0x8, 0x1000000004, 0x9b72, 0x2, 0x8000) tkill$auto(0x1, 0x7) mmap$auto(0x7, 0x7, 0x2, 0x17, 0x4, 0x7f) setsockopt$auto(0x400000000000003, 0x29, 0xcc, 0x0, 0x567) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) setsockopt$auto(r0, 0x2, 0x2, &(0x7f0000000080)='#\xec\x00', 0x6) iopl$auto(0x3) clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) poll$auto(&(0x7f0000000000)={0xffffffffffffffff, 0xe, 0xffff}, 0x2, 0x1) setsockopt$auto(r1, 0x8001, 0x7fff, &(0x7f0000000040)='#\xec\x00', 0x448) 7m24.928621836s ago: executing program 0 (id=1659): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8000, 0x0) io_uring_setup$auto(0x3ff, 0x0) socket(0xa, 0x3, 0x3a) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x3, 0x6) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) eventfd$auto(0x3) eventfd$auto(0x0) r0 = socket(0xa, 0x2, 0x88) bpf$auto(0x0, &(0x7f0000000000)=@link_update={r0, @new_prog_fd=0x4, 0x4}, 0xa3) (fail_nth: 3) 7m24.544982337s ago: executing program 32 (id=1659): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8000, 0x0) io_uring_setup$auto(0x3ff, 0x0) socket(0xa, 0x3, 0x3a) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x3, 0x6) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) eventfd$auto(0x3) eventfd$auto(0x0) r0 = socket(0xa, 0x2, 0x88) bpf$auto(0x0, &(0x7f0000000000)=@link_update={r0, @new_prog_fd=0x4, 0x4}, 0xa3) (fail_nth: 3) 3m30.711615977s ago: executing program 1 (id=3113): setreuid$auto(0x3, 0x7) get_mempolicy$auto(&(0x7f00000001c0)=0x5, 0x0, 0x2d0000000000000, 0x59, 0x4) r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x200006, 0x2, 0x40eb1, 0x602, 0x300000000000) r1 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000010c0), 0xffffffffffffffff) sendmsg$auto_CTRL_CMD_GETPOLICY(r0, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x20, r1, 0x301, 0x4070bd25, 0x25dfdbff, {}, [@CTRL_ATTR_FAMILY_NAME={0xc, 0x2, 'nl80211\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x30000881}, 0xc040810) recvfrom$auto(0x3, 0x0, 0x800000000e, 0xfffff4a4, 0x0, 0xfffffffffffffffd) r2 = socket$nl_generic(0x10, 0x3, 0x10) get_mempolicy$auto(&(0x7f0000000080)=0x8, &(0x7f00000000c0)=0x100000000, 0xba6e, 0x1, 0x2) r3 = syz_genetlink_get_family_id$auto_SMC_PNETID(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$auto_SMC_PNETID_ADD(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010029bd7000fcdbdf25b0c3fd49cf0200a791d035191e87b06c0900000d000100007b2727257b2e2800000000"], 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x10) close_range$auto(0x0, 0xfffffffffffff000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x3, 0x6) faccessat2$auto(0x1, &(0x7f0000000100)='\x00', 0x0, 0x1000) mmap$auto(0x0, 0x8000000000000000, 0x9, 0xffffffff, 0x7, 0xee) madvise$auto(0x0, 0x7ffffffffffffffc, 0xc) mremap$auto(0x4000, 0x1fee0, 0x3fd6, 0x3, 0xfffff000) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f00000003c0), 0xffffffffffffffff) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) fanotify_init$auto(0x5, 0x2) io_uring_setup$auto(0x6, 0x0) io_uring_setup$auto(0x6, 0x0) socket(0xa, 0x801, 0x106) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, 0x0, 0x8004) connect$auto(0x3, &(0x7f0000000140)={0xa, @sa_data_min="c4aeed448dc7fe8000"}, 0x55) ioctl$auto(0x3, 0x5411, 0x38) sendmsg$auto_ETHTOOL_MSG_PAUSE_SET(r4, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000004c0)={&(0x7f00000002c0)={0x78, r5, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@ETHTOOL_A_PAUSE_TX={0x5, 0x4, 0xc5}, @ETHTOOL_A_PAUSE_TX={0x5, 0x4, 0xd}, @ETHTOOL_A_PAUSE_HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0xffffffbb}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_PAUSE_TX={0x5, 0x4, 0x7}]}, 0x78}, 0x1, 0x0, 0x0, 0x10001}, 0x0) 3m30.56603516s ago: executing program 1 (id=3114): sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x2, 0x1, 0x106) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_TASKSTATS(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_TASKSTATS_CMD_GET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x24, r2, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [@TASKSTATS_CMD_ATTR_REGISTER_CPUMASK={0xd, 0x3, 'N-N:4+--%'}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) shutdown$auto(0x200000003, 0x2) bind$auto(0x3, 0x0, 0x6b) poll$auto(&(0x7f0000000000)={r0, 0x8001, 0x100}, 0x4, 0x4) unshare$auto(0x40000080) mmap$auto(0x0, 0xc, 0x4000000000df, 0x44eb2, 0x10006, 0x300000000000) socket(0x10, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0x5, 0x15) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0xdd, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) io_uring_setup$auto(0x6, 0x0) open(0x0, 0x22240, 0x155) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) fcntl$auto(0x8000000000000001, 0x26, 0x8) io_uring_setup$auto(0x1, 0x0) fcntl$auto(0x8000000000000001, 0x26, 0x4) mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0xf, 0x0) chdir$auto(&(0x7f0000000000)='}[,&*}\x00') statx$auto(0xffffff9c, 0x0, 0x1000, 0x1, 0x0) rename$auto(0x0, 0x0) madvise$auto(0x0, 0x200007, 0x19) pipe$auto(&(0x7f0000000180)=r1) 3m29.802546719s ago: executing program 1 (id=3119): close_range$auto(0x0, 0xfffffffffffff000, 0x2) r0 = open(&(0x7f0000000000)='./file0\x00', 0x4242, 0xe1d2b27bdc14aabc) mmap$auto(0x0, 0x8, 0x2, 0x9b72, 0x5, 0x0) prctl$auto(0x1000000003b, 0x1, 0x4, 0x3, 0x7) munmap$auto(0x20001004, 0x2000000c) mmap$auto(0x0, 0xc, 0x4000000000df, 0x44eb2, 0x10006, 0x300000000000) clone$auto(0x2, 0x4, 0xfffffffffffffffe, 0xfffffffffffffffc, 0x7) r1 = gettid() process_vm_readv$auto(r1, &(0x7f0000000040)={0x0, 0x8}, 0x4, &(0x7f00000000c0)={0x0, 0x2}, 0x2, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) fanotify_init$auto(0x5, 0x2) io_uring_setup$auto(0x6, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) socket(0x2, 0x5, 0x0) setsockopt$auto(0x3, 0x10000000084, 0x72, 0x0, 0xc) flock$auto(r0, 0x5) 3m29.449639321s ago: executing program 1 (id=3125): mmap$auto(0x0, 0x4, 0xdf, 0x80000000000eb1, 0x3, 0x0) memfd_secret$auto(0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000280)={{0x0, 0x1, &(0x7f00000002c0)={0x0}, 0x5, 0x0, 0x1, 0x697b}, 0xed7138c}, 0x2, 0x9) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000001180)={&(0x7f0000000300)=ANY=[@ANYBLOB="14000000", @ANYBLOB="010323"], 0x14}, 0x1, 0x0, 0x0, 0x20000800}, 0x0) recvmmsg$auto(0x4, &(0x7f0000000200)={{0x0, 0x0, 0x0, 0x66a, 0x0, 0x8000000000000000, 0x801}, 0x1000}, 0x4, 0x0, 0x0) close_range$auto(0x2, 0x8000, 0x4000000000) socket(0x2, 0x801, 0x84) settimeofday$auto(&(0x7f0000000080)={0x3, 0xffffffffffffffa0}, 0x0) socket(0x200000000000011, 0x2, 0x0) r0 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x100, 0x4}, 0x18) sendmmsg$auto(r0, &(0x7f00000001c0)={{&(0x7f00000000c0)=[0x120000000000000, 0x2, 0x2, 0x800000000000, 0x6], 0xdf5, &(0x7f0000000140)={&(0x7f0000000100)=[0x1, 0x4, 0x4, 0x1000, 0x9, 0xfffffffffffffffb, 0x8000000000000001], 0x6}, 0x40, &(0x7f0000000180)=[0x0, 0x8000000000000000, 0x1, 0xfffffffffffffffe, 0xfffffffffffffff9, 0x394], 0x58, 0x6}, 0x9}, 0x351, 0x5) socket(0x11, 0x80003, 0x300) ioperm$auto(0xc5, 0x4, 0x2) pwritev$auto(0x5, 0x0, 0x6, 0xd6, 0x0) getsockopt$auto(0x6, 0x40000000029, 0x46, 0xfffffffffffffffe, 0x0) prctl$auto(0x1000000003b, 0x1, 0x4, 0x3, 0x7) prctl$auto(0x2, 0xffffffffffff0000, 0xfffffffffffffc00, 0x80006, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) kexec_load$auto(0x100, 0x1, &(0x7f0000000080)={@buf=0x0, 0x2, 0x3e0000000000, 0x3000}, 0x4) 3m29.163257598s ago: executing program 1 (id=3128): mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_netdev(&(0x7f00000000c0), r0) mmap$auto(0x7, 0x4, 0x400, 0x10, 0x0, 0x8) socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) futex_waitv$auto(&(0x7f0000000000)={0xf, 0x5d94, 0x4, 0x4}, 0x77, 0x0, 0x0, 0x62bd) tkill$auto(0x80000000000001, 0x7) setuid$auto(0xe) keyctl$auto(0x2000000000000012, 0x7fff, 0x5069, 0x1, 0x65c) mprotect$auto(0x1ffff000, 0x8000000000000001, 0x4) r1 = socket(0x2, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000000)={0x2, @sockaddr_1_1={"90927f"}}, 0x68) unshare$auto(0x9a) connect$auto(0x3, &(0x7f0000000000)={0x2, @sockaddr_1_1}, 0x55) socket(0xa, 0x801, 0x84) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x801, 0x84) socket(0xa, 0x5, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f0000000040), r2) sendmsg$auto_CTRL_CMD_GETFAMILY(r2, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000001180)={&(0x7f0000001140)={0x1c, r3, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@CTRL_ATTR_FAMILY_ID={0x6, 0x1, 0x34}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x20000854) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_thermal(&(0x7f0000000200), r2) sendmsg$auto_THERMAL_GENL_CMD_TZ_GET_ID(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x1c, r5, 0x221, 0x70bd2c, 0x25dfdbeb, {}, [@THERMAL_GENL_ATTR_CPU_CAPABILITY_EFFICIENCY={0x8, 0x17, 0x4102}]}, 0x1c}, 0x1, 0x0, 0x0, 0x400c050}, 0x4000080) socket(0xa, 0x3, 0x6) clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) getsockopt$auto(0x6, 0x84, 0x25, 0x0, &(0x7f00000000c0)=0x10000) sendmsg$auto_NL80211_CMD_START_SCHED_SCAN(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x600440c0}, 0x48884) close_range$auto(0x2, 0x8, 0x0) 3m28.38646339s ago: executing program 1 (id=3134): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x5, 0x1, 0x28040de9, 0x18, 0x5, 0x10001) mmap$auto(0x0, 0x20009, 0xe3, 0x100000eb1, 0x40000000000a1, 0x8000) socket(0x1d, 0x2, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) connect$auto(0x3, 0x0, 0x54) socket$nl_generic(0x10, 0x3, 0x10) setresgid$auto(0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff) open(&(0x7f0000000000)='./file0\x00', 0x241c2, 0x84) bpf$auto(0x49, &(0x7f0000000000)=@bpf_attr_3={0x8, 0xffffffef, 0x18c, 0x6a, 0x0, 0x8, 0x5, 0xb, 0xfffffff8, "63acf0e0414200", 0x0, 0x10000000, 0x4, 0x10001, 0x6d, 0x1, 0x4, 0x2, 0xe, 0x5, @attach_btf_obj_fd=0x3, 0x166, 0x3fc, 0x6, 0x6, 0x48000000, 0xa7c2}, 0x7) r0 = syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000140), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000f40)={'batadv0\x00'}) sendmsg$auto_BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010026bd7000fbdbdf250f00000008000300", @ANYBLOB='\b\x00.'], 0x24}, 0x1, 0x0, 0x0, 0xc050}, 0x140000e4) mprotect$auto(0x1ffff000, 0x8000000000000001, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_STOP_SCHED_SCAN(r2, &(0x7f00000005c0)={0x0, 0xaa, 0x0, 0x1, 0x0, 0x0, 0x48834}, 0x44014) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) write$auto(0x3, 0x0, 0xffd8) close_range$auto(0x2, 0x8000, 0x0) 3m28.096916544s ago: executing program 33 (id=3134): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x5, 0x1, 0x28040de9, 0x18, 0x5, 0x10001) mmap$auto(0x0, 0x20009, 0xe3, 0x100000eb1, 0x40000000000a1, 0x8000) socket(0x1d, 0x2, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) connect$auto(0x3, 0x0, 0x54) socket$nl_generic(0x10, 0x3, 0x10) setresgid$auto(0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff) open(&(0x7f0000000000)='./file0\x00', 0x241c2, 0x84) bpf$auto(0x49, &(0x7f0000000000)=@bpf_attr_3={0x8, 0xffffffef, 0x18c, 0x6a, 0x0, 0x8, 0x5, 0xb, 0xfffffff8, "63acf0e0414200", 0x0, 0x10000000, 0x4, 0x10001, 0x6d, 0x1, 0x4, 0x2, 0xe, 0x5, @attach_btf_obj_fd=0x3, 0x166, 0x3fc, 0x6, 0x6, 0x48000000, 0xa7c2}, 0x7) r0 = syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000140), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000f40)={'batadv0\x00'}) sendmsg$auto_BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010026bd7000fbdbdf250f00000008000300", @ANYBLOB='\b\x00.'], 0x24}, 0x1, 0x0, 0x0, 0xc050}, 0x140000e4) mprotect$auto(0x1ffff000, 0x8000000000000001, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_STOP_SCHED_SCAN(r2, &(0x7f00000005c0)={0x0, 0xaa, 0x0, 0x1, 0x0, 0x0, 0x48834}, 0x44014) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) write$auto(0x3, 0x0, 0xffd8) close_range$auto(0x2, 0x8000, 0x0) 28.984931984s ago: executing program 3 (id=3766): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) rseq$auto(&(0x7f0000000140)={0xe, 0x6, 0x0, 0x100006, 0xffffffff, 0x2, "33ee5f8cb83648fafb0f9d6996f9a0cde45e1926c0e443002a13e7276daeced4c21ca9b8d0a02a718b9b6c978f0bcca5d2e1be3041470e89603316e936d777b0ba3d126e8e13fb2403a3c00ca1f4f5e671c34472a9741b6fe0def18df7c260612ddfa94ea21f0a9b0b9d98e81899da7682c7629a9a713696fb25f0d468914091059aac2ecfda4f61295ac27f66bc27cb753dabcf59e17cd27431a7c713f7e6e893bfa611e36028b7858eff831e54426a97b2095a992367b618b85d031c682f03f849a35491bc76ad71c906b6e61b4a9ea37130b8015b15b16698cc0335a1accfe477"}, 0x4, 0x0, 0x6) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) write$auto(0x4, 0x0, 0x100082) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$auto(0xfffffffffffffffc, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x8, 0x4000000000df, 0x44eb1, 0x6, 0x300000000000) mremap$auto(0x0, 0x7, 0x3fd6, 0x3, 0x20000000) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8000, 0x0) io_uring_setup$auto(0x3ff, 0x0) madvise$auto(0x0, 0x3, 0x15) mbind$auto(0x0, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) mkdir$auto(&(0x7f0000000080)='./file0\x00', 0x7ff) r0 = open$dir(&(0x7f0000000000)='./file0\x00', 0x10000, 0x6) rmdir$auto(&(0x7f0000000100)='./file0\x00') openat$auto(r0, &(0x7f00000000c0)='./file0\x00', 0x7fff, 0x7ff) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0xffffffffffff0001, 0x80000000) madvise$auto(0x0, 0xffffffffffff0005, 0x19) writev$auto(0x1, 0x0, 0x1) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket(0x10, 0x2, 0x14) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x5, 0x0) socket(0xa, 0x5, 0x0) 28.586514025s ago: executing program 3 (id=3770): r0 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000000c0)='ns/pid\x00') close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_gtp(&(0x7f0000000080), r2) sendmsg$auto_GTP_CMD_GETPDP(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x2c, r3, 0x401, 0x70bd26, 0x25dfdbfe, {}, [@GTPA_VERSION={0x8, 0x2, 0x38f}, @GTPA_LINK={0x8, 0x1, 0x7}, @GTPA_NET_NS_FD={0x8, 0x7, r1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x8014) r4 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000700), r0) sendmsg$auto_NL80211_CMD_VENDOR(r0, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000200)={0x88, r4, 0x800, 0x70bd2b, 0x25dfdbfc, {}, [@NL80211_ATTR_REG_INDOOR={0x4}, @NL80211_ATTR_CNTDWN_OFFS_PRESP={0x56, 0xbb, "4206f18243d97f94cfe1e9a82aeaedef6e0b0d1b0fe442c493822b3536aa0832879d66d381f8dd03fad58303fc5726045305bcf8a4ac4d40b70d1639cf6336f99e013977a3efec7827af99c2051162c0b246"}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x77d}, @NL80211_ATTR_PMKR0_NAME={0xe, 0x102, "f19af55742aa7027399c"}]}, 0x88}, 0x1, 0x0, 0x0, 0x20044840}, 0x4) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$auto_MAC80211_HWSIM(&(0x7f0000000080), r5) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000300)={0x94, r6, 0x8a00f4e9954364ed, 0x70bd29, 0x25dfdbfd, {}, [@HWSIM_ATTR_RADIO_NAME={0x7f, 0x11, '\xfd\xff\xff\xff\xff\xff\xff\xff-\x9c\xe4\xbe\x9e6y\x93\xd5\xbc\x9f\x8a\xf7\f\x01k\a\x86\xc1a\x12;\xab\xd7+\x99\xe71\x9b)p\x06\x02;/X\xfc+\x8b@\x90\xfc\x00\xbbNvh\x88\x10\x00\x00\f\x11\xe7\xd3:\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xec|\xfd+Q3y\xef\xf1\xb3\x9eI\xa2\x99_f\x0ej\xa7x\x13\x13%^3\x85O\xe2\xe1\x84\xcb\x86\xe6\x16\x9er\xdb[\x89\xb9\x06s\xa5\x1f\xfe\xdf4\x1c'}]}, 0x94}, 0x1, 0x0, 0x0, 0x84}, 0x24000054) sendmsg$auto_NL80211_CMD_SET_CHANNEL(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000780)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010023660b0824de32807500000008000300", @ANYRES32], 0x1c}, 0x1, 0x0, 0x0, 0x4080}, 0x20000000) r7 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$auto_IPVS(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$auto_IPVS_CMD_ZERO(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000000", @ANYRES16=r8, @ANYBLOB="0b0528bd70d3d8917fe4902faaf5"], 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x4008840) 27.848509159s ago: executing program 3 (id=3773): socket(0xa, 0x3, 0xff) select$auto(0x6d0c, 0x0, &(0x7f0000000100)={[0xd, 0x200, 0x800000000000008, 0xc, 0x9, 0x3, 0x6, 0x1, 0x40009, 0x5e582972, 0x4000000000000000, 0x14, 0x93, 0x8, 0x8, 0x6]}, 0x0, 0x0) connect$auto(0x3, &(0x7f0000000140)={0xa, @sa_data_min="c4aeed448dc7fe8000"}, 0x51) socket(0xa, 0x4, 0x84) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x8002, &(0x7f00000002c0)={0x0, 0x27}, 0x1, 0x0, 0x0, 0x9}, 0x9}, 0xffffffff, 0x0) 27.677301085s ago: executing program 3 (id=3776): socket(0x2, 0x1, 0x106) listen$auto(0x3, 0x81) shutdown$auto(0x200000003, 0x2) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) sendmsg$auto_WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x4008810}, 0x2000c041) bind$auto(0x3, &(0x7f0000000080)={0x2, @sockaddr_1_1}, 0x6b) mount$auto(0x0, 0x0, 0x0, 0xdad, 0x0) connect$auto(0x3, &(0x7f00000000c0)={0x2, @sockaddr_1_1}, 0x55) poll$auto(&(0x7f0000000d40)={0x3, 0xc16, 0xa}, 0x5, 0x400) setsockopt$auto(0x3, 0x1, 0x20, 0x0, 0x9) mmap$auto(0x0, 0x40009, 0xdf, 0x12, 0x7, 0x28000) write$auto(0x3, 0x0, 0xfffffdef) unshare$auto(0x40000080) shutdown$auto(0x200000003, 0x2) socket(0xa, 0x3, 0x3a) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ovs_ct_limit(0x0, r0) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, 0x0, 0x400c000) ioperm$auto(0xc, 0x2, 0x3) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) r2 = syz_genetlink_get_family_id$auto_nl80211(0x0, r1) sendmsg$auto_NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f0000002a40)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000002a00)={&(0x7f0000002a80)=ANY=[@ANYBLOB="98280000", @ANYRES16=r2, @ANYBLOB="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"], 0x2898}, 0x1, 0x0, 0x0, 0x40040}, 0x48011) setreuid$auto(0x7fffffff, 0x4) r3 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000080), 0xffffffffffffffff) r4 = socket(0x10, 0x2, 0xf) sendmsg$auto_NFSD_CMD_THREADS_SET(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x14, r3, 0x1, 0x70bd2d, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x40000021}, 0x8004) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x2008000) madvise$auto(0x0, 0xffffffffffff0004, 0x19) close_range$auto(0x2, 0x8, 0x0) 24.564319745s ago: executing program 3 (id=3784): statmount$auto(0x0, &(0x7f0000000040)={0x0, 0x1, 0x5ae, 0x5, 0x7, 0x8000000009, 0x10000, 0x13, 0x5, 0x8, 0x6, 0x9, 0x5, 0x9, 0x1ff, 0x7698, 0x8, 0x10000, 0x0, 0x6, [0x6f, 0x2, 0x80000001, 0x8, 0x4000000001, 0x57b3, 0x81, 0x6, 0xf437, 0x7, 0xa60, 0x7, 0x400006, 0x0, 0x1000001, 0xffffffffffffffe6, 0x0, 0x8, 0x4, 0xffffffffffff9316, 0x807fff, 0x3, 0xca, 0x2000000008, 0x8000000000000007, 0x8000, 0xe, 0xffffffffffffff1d, 0x2, 0x80, 0x5a72c917, 0x6, 0xa, 0x7828, 0x4, 0x40, 0x80000001, 0xd, 0xd, 0x8001, 0x0, 0x100000000005, 0x5, 0x0, 0x1000000000000e47, 0x7fffffffffffffff, 0x4, 0x1, 0x85]}, 0x8, 0x0) sendmsg$auto_HWSIM_CMD_DEL_RADIO(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x20040800}, 0x4004090) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x23, 0x2, 0x0) socket(0x15, 0x5, 0x0) pipe2$auto(0x0, 0x80) keyctl$auto(0x200000000000020, 0xffffffffffffffff, 0x5, 0x5, 0x8) keyctl$auto(0x200000000000020, 0xffffffffffffffff, 0x5, 0xffffffffffffffff, 0x8) 24.408363992s ago: executing program 3 (id=3785): pidfd_open$auto(0x0, 0x0) r0 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="2e00f5"], 0x1ac}}, 0x40000) bpf$auto(0x7, 0x0, 0x3a) mlockall$auto(0x7) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000340), r0) sendmsg$auto_NL80211_CMD_DEL_STATION(r0, &(0x7f0000001400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000013c0)={&(0x7f0000000380)={0x1020, r1, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@NL80211_ATTR_WIPHY_RETRY_SHORT={0x5, 0x3d, 0x8}, @NL80211_ATTR_FILS_CACHE_ID={0x1004, 0xfd, "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"}]}, 0x1020}, 0x1, 0x0, 0x0, 0x8000}, 0x20000081) mmap$auto(0x0, 0x9, 0x3, 0x8012, 0x3, 0x8000) socket(0xa, 0x1, 0x6) setsockopt$auto(0x3, 0x0, 0xb, 0xffffffffffffffff, 0x0) sendfile$auto(0x6, 0x3, 0x0, 0x8000) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x10004) unshare$auto(0x40000080) writev$auto(0x1, &(0x7f0000000100)={0x0, 0x400000000000fdef}, 0x1) vmsplice$auto(0x3, 0x0, 0x9, 0x7) socket(0x2, 0x5, 0x0) munmap$auto(0x20001000, 0x7) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_SEG6(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$auto_SEG6_CMD_SETHMAC(r2, &(0x7f0000000240)={0x0, 0xf0, &(0x7f0000000200)={&(0x7f0000000280)={0x38, r3, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x200}, @SEG6_ATTR_SECRET={0x9, 0x4, "c954a4a057"}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20040014) r4 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x3, 0xa) r5 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000000c0), r4) sendmsg$auto_NL80211_CMD_NEW_KEY(r4, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000280)={&(0x7f0000000140)={0x5c, r5, 0x800, 0x70bd28, 0x25dfdbfc, {}, [@NL80211_ATTR_VHT_CAPABILITY={0x38, 0x9d, "24b578b4a3f4c50ba69b8781b10037ffb99f8f173f93f6508917aa6445db83fef368e9d3819ed65da69209d0f780ad446cc07768"}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x200}, @NL80211_ATTR_P2P_OPPPS={0x5, 0xa3, 0x3}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0xc000) lsm_list_modules$auto(0x0, &(0x7f0000000100)=0xbefc, 0x0) 15.782185174s ago: executing program 4 (id=3793): mmap$auto(0x0, 0x400005, 0xfffffffffffffffe, 0x9b72, 0x2, 0x8000) sendmsg$auto_WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x4008810}, 0x2000c041) r0 = socket(0x2, 0x1, 0x0) syz_clone(0xcc81455747ec94b6, 0x0, 0x0, 0x0, 0x0, 0x0) bind$auto(0x3, &(0x7f0000000080)={0x2, @sockaddr_1_1}, 0x6b) connect$auto(0x3, &(0x7f00000000c0)={0x2, @sockaddr_1_1}, 0x55) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) fcntl$auto(0xffffffffffffffff, 0x401, 0x5) r1 = syz_genetlink_get_family_id$auto_ovs_meter(&(0x7f0000003040), 0xffffffffffffffff) sendmsg$auto_OVS_METER_CMD_SET(0xffffffffffffffff, &(0x7f0000003240)={0x0, 0x0, &(0x7f0000003200)={&(0x7f0000000380)={0x2c, r1, 0x159198c6007aa95d, 0x70bd28, 0x25dfdbfc, {}, [@OVS_METER_ATTR_KBPS={0x4}, @OVS_METER_ATTR_BANDS={0xc, 0x4, 0x0, 0x1, [@nested={0x4, 0xf9}, @nested={0x4, 0x48}]}, @OVS_METER_ATTR_ID={0x8, 0x1, 0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc0}, 0x40) write$auto(0x3, 0x0, 0xfffffdef) setsockopt$auto(r0, 0xd, 0x9f1d, 0x0, 0x9f07) unshare$auto(0x40000080) setsockopt$auto(0x3, 0x6, 0x19, 0x0, 0xfb3) sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, 0x0, 0x200c88c0) mmap$auto(0x1, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) sysfs$auto(0x2, 0x10000000000002d, 0x0) sendmsg$auto_NBD_CMD_RECONFIGURE(0xffffffffffffffff, 0x0, 0x800) mprotect$auto(0x1ffff000, 0x7fffffff, 0x0) mbind$auto(0x0, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) socket$nl_generic(0x10, 0x3, 0x10) set_mempolicy$auto(0x2, &(0x7f0000000080)=0x7e, 0x4) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) move_pages$auto(0x0, 0xf54, 0x0, 0x0, 0x0, 0x8000000000000000) r2 = socket(0x11, 0x3, 0x300) setsockopt$auto(r2, 0x107, 0x1, 0x0, 0x8004) syz_genetlink_get_family_id$auto_netdev(0x0, 0xffffffffffffffff) close_range$auto(0x2, 0x8, 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x17) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) 15.473308111s ago: executing program 5 (id=3794): unshare$auto(0x40000080) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000040), r1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'batadv0\x00'}) sendmsg$auto_BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={0x0}}, 0x4008000) 15.240380391s ago: executing program 2 (id=3795): mmap$auto(0x0, 0x3, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0xa, 0xdb, 0x9b72, 0x5, 0x8000) socket(0xa, 0x801, 0x84) io_uring_setup$auto(0x6, 0x0) setsockopt$auto(0x3, 0x10000000084, 0x81, 0x0, 0x8) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x20006, 0xdf, 0xeb1, 0x401, 0x8000) io_uring_setup$auto(0x6, 0x0) close_range$auto(0x2, 0x8, 0x0) r0 = socket(0x1e, 0x1, 0x0) getsockname$auto(r0, &(0x7f0000000000)={0x1, @sockaddr_1_1}, 0x0) listen$auto(r0, 0x9) r1 = socket(0x1e, 0x1, 0x0) connect$auto(r1, &(0x7f0000000000)={0x1e, @sockaddr_1_1}, 0x10) shutdown$auto(0x200000003, 0x2) socket(0xa, 0x1, 0x84) mmap$auto(0x3, 0x40009, 0xe2, 0x9b72, 0x7, 0x28000) bind$auto(0x3, &(0x7f0000000000)={0x2, @sockaddr_1_1={"90927f"}}, 0x68) sendto$auto(0x3, 0x0, 0x2000f, 0x101, &(0x7f0000000000)={0x2, @sockaddr_1_1}, 0x1c) mmap$auto(0x0, 0xf, 0x4, 0x209b72, 0x4e477f5a, 0x8000) sendmsg$auto(0xffffffffffffffff, 0x0, 0xfffffffc) read$auto(0x3, 0x0, 0x80) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) setsockopt$auto(0x3, 0x10000000084, 0x18, 0x0, 0x8) r2 = socket(0x10, 0x2, 0x0) setsockopt$auto(r2, 0x104000000000010e, 0x4, 0x0, 0x16) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mlockall$auto(0x7) io_uring_setup$auto(0x6, 0x0) 12.730491329s ago: executing program 4 (id=3796): ioperm$auto(0x800, 0x5, 0xd) r0 = socket(0x2c, 0x3, 0x0) poll$auto(0xfffffffffffffffc, 0x0, 0xc) syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000000c0), r0) set_mempolicy$auto(0x2, &(0x7f0000000080)=0x7e, 0x4) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x19) move_pages$auto(0x0, 0xd0, 0x0, &(0x7f0000001140), 0x0, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_IOAM6(&(0x7f0000000080), r1) sendmsg$auto_IOAM6_CMD_DEL_NAMESPACE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)={0x1c, r2, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [@IOAM6_ATTR_NS_ID={0x6, 0x1, 0x400}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x24040090) sendmsg$auto_IOAM6_CMD_DEL_SCHEMA(r0, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x24, r2, 0x400, 0x70bd27, 0x25dfdbff, {}, [@IOAM6_ATTR_SC_ID={0x8, 0x4, 0x8}, @IOAM6_ATTR_SC_ID={0x8, 0x4, 0x7}]}, 0x24}, 0x1, 0x0, 0x0, 0x4048000}, 0x4020001) r3 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x1, 0x1, 0x1) read$auto(0x3, 0x0, 0xfb6) fadvise64$auto(r3, 0x2, 0x4, 0x5) 12.370568479s ago: executing program 5 (id=3797): socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) r0 = open(0x0, 0x22240, 0x155) mmap$auto(0x0, 0x20009, 0x386, 0xeb1, 0x401, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x9) io_destroy$auto(0xfffffffffffffffa) r1 = socket(0x2, 0x1, 0x0) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) connect$auto(0x3, &(0x7f00000001c0)={0x2, @sockaddr_1_1={"c2a172"}}, 0x55) getrusage$auto(0xffffffff, &(0x7f0000000300)={{0x8000000000000000, 0x7fff}, {0x9, 0x2}, 0xffffffffffffffff, 0x8000, 0x4, 0x8, 0xd, 0x3ff, 0x6, 0x1, 0x3d6, 0x1, 0x5, 0x7, 0x8, 0x8000000000000001}) shutdown$auto(0x200000003, 0x2) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket(0xa, 0x2, 0x0) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000280)={'wlan1\x00', 0x0}) sendmsg$auto_NL80211_CMD_NEW_KEY(r2, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="13042bbd7000fbdbdf8d3634680008000300", @ANYRES32=r4], 0x20}, 0x1, 0x0, 0x0, 0x4804}, 0x80) bind$auto(0x3, &(0x7f0000000080)={0x2, @sockaddr_1_1}, 0x6b) io_uring_setup$auto(0x9, 0x0) connect$auto(0x3, &(0x7f00000000c0)={0x2, @sockaddr_1_1}, 0x55) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) write$auto(0x3, 0x0, 0xffd8) connect$auto(0x3, 0x0, 0x54) r5 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)) fcntl$auto(r5, 0x402, 0x80000004) close_range$auto(0x2, r0, 0x68) socket(0x2c, 0x3, 0x0) mmap$auto(0x0, 0x4, 0x10000000000, 0x11, 0x3, 0x100000000) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NFC_CMD_DISABLE_SE(r6, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000040)={&(0x7f00000003c0)={0x48, 0x0, 0x10, 0x70bd28, 0x25dfdbfc, {}, [@NFC_ATTR_IM_PROTOCOLS={0x8, 0xd, 0xfffffffe}, @NFC_ATTR_VENDOR_ID={0x8, 0x1d, 0x1}, @NFC_ATTR_DEVICE_NAME={0x5, 0x2, '('}, @NFC_ATTR_DEVICE_POWERED={0x5, 0xc, 0xd4}, @NFC_ATTR_DEVICE_NAME={0xc, 0x2, '`(!\xaa\x7f^{$'}, @NFC_ATTR_VENDOR_SUBCMD={0x8, 0x1e, 0x800}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000040}, 0x8084) 12.188036198s ago: executing program 2 (id=3798): socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_MACSEC_CMD_DEL_TXSA(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040040}, 0x4081) close_range$auto(0x2, 0x8, 0x0) munmap$auto(0xd4cf, 0x400) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x848000000015, 0x805, 0x0) fremovexattr$auto(r0, &(0x7f0000000080)='{\x00') bind$auto(0x3, &(0x7f0000000000)={0x2, @sockaddr_1_1={"90927f"}}, 0x68) connect$auto(0x3, &(0x7f0000000140)={0xa, @sa_data_min="c4aeed448dc7fe8000"}, 0x55) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) unshare$auto(0x80) sendmsg$auto_HSR_C_GET_NODE_STATUS(r0, &(0x7f0000000040)={0x0, 0xfdef, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x200004d0}, 0x40) 9.686223474s ago: executing program 4 (id=3799): prctl$auto(0x59616d61, 0x1, 0x2, 0xffffffffffffffff, 0x8) listxattr$auto(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='+\x13\x00', 0xff) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) open(0x0, 0x40001, 0x6) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)) open(&(0x7f0000000100)='./cgroup\x00', 0x0, 0x154) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000140)='ns/pid\x00') lseek$auto(0x2, 0xffffffffffffffff, 0x1) socket$nl_generic(0x10, 0x3, 0x10) munmap$auto(0x1000000, 0x2000000c) madvise$auto(0x2000, 0xffffffffffff0001, 0x9) mlockall$auto(0x3) 9.3333936s ago: executing program 5 (id=3800): prctl$auto(0x59616d61, 0x1, 0x2, 0xffffffffffffffff, 0x8) listxattr$auto(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='+\x13\x00', 0xff) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = open(0x0, 0x40001, 0x6) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x801, 0x84) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x801, 0x84) clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) getsockopt$auto(0x6, 0x84, 0x25, 0x0, &(0x7f00000000c0)=0x10000) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) r1 = syz_genetlink_get_family_id$auto_MAC80211_HWSIM(&(0x7f0000000040), 0xffffffffffffffff) sched_getattr$auto(0x0, &(0x7f0000000100)={0x80000001, 0x8, 0x2, 0x7, 0x4e22, 0xd340, 0x200, 0x2, 0x8}, 0x101, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)={0x344, r1, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@HWSIM_ATTR_IFTYPE_SUPPORT={0x8, 0x17, 0xe0d}, @HWSIM_ATTR_PMSR_RESULT={0x328, 0x1c, 0x0, 0x1, [@NL80211_PMSR_ATTR_PEERS={0x22c, 0x5, 0x0, 0x1, [{0x4}, {0x224, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0x57, 0x1, "cccd30da5aa2bba61fa08f74a224e03adadf415043db144a93200e076e03702c9ad5c441bf119e7d287157a64776bdc1cd25f993ab9d2814cfe5b29fbd66dcf03d014ab14ded0559015c277abae0fd421826d0"}, @NL80211_PMSR_PEER_ATTR_RESP={0xc, 0x4, 0x0, 0x1, [@NL80211_PMSR_RESP_ATTR_DATA={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x4}]}]}, @NL80211_PMSR_PEER_ATTR_RESP={0x8, 0x4, 0x0, 0x1, [@NL80211_PMSR_RESP_ATTR_FINAL={0x4}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0x4d, 0x1, "a4e6c2e175682c38c2b7e8179a30d808052f2b759e8fbd7b89d78a7c1a2621065bb343debbd8bd41c432ca70e397b230ad9c8da64819d047837fa93b0cd41d7e8fae273d7600e7f312"}, @NL80211_PMSR_PEER_ATTR_RESP={0x14, 0x4, 0x0, 0x1, [@NL80211_PMSR_RESP_ATTR_FINAL={0x4}, @NL80211_PMSR_RESP_ATTR_HOST_TIME={0xc}]}, @NL80211_PMSR_PEER_ATTR_RESP={0x14c, 0x4, 0x0, 0x1, [@NL80211_PMSR_RESP_ATTR_HOST_TIME={0xc, 0x3, 0x1}, @NL80211_PMSR_RESP_ATTR_AP_TSF={0xc, 0x4, 0x80}, @NL80211_PMSR_RESP_ATTR_FINAL={0x4}, @NL80211_PMSR_RESP_ATTR_FINAL={0x4}, @NL80211_PMSR_RESP_ATTR_HOST_TIME={0xc, 0x3, 0x6}, @NL80211_PMSR_RESP_ATTR_DATA={0x11c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_RESP_ATTR_RTT_VARIANCE={0xc, 0xe, 0x3}, @NL80211_PMSR_FTM_RESP_ATTR_RSSI_AVG={0x8, 0x9, 0x2}, @NL80211_PMSR_FTM_RESP_ATTR_BUSY_RETRY_TIME={0x5, 0x5, 0x6}, @NL80211_PMSR_FTM_RESP_ATTR_LCI={0x5, 0x13, '-'}, @NL80211_PMSR_FTM_RESP_ATTR_BURST_DURATION={0x5, 0x7, 0xad}, @NL80211_PMSR_FTM_RESP_ATTR_RTT_VARIANCE={0xc, 0xe, 0x800}]}, @NL80211_PMSR_TYPE_FTM={0x84, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_RESP_ATTR_RTT_SPREAD={0xc, 0xf, 0x8000000000000001}, @NL80211_PMSR_FTM_RESP_ATTR_NUM_FTMR_ATTEMPTS={0x8, 0x3, 0x40}, @NL80211_PMSR_FTM_RESP_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_RESP_ATTR_DIST_VARIANCE={0xc, 0x11, 0x6}, @NL80211_PMSR_FTM_RESP_ATTR_RTT_AVG={0xc, 0xd, 0x64}, @NL80211_PMSR_FTM_RESP_ATTR_BURST_INDEX={0x6, 0x2, 0x7}, @NL80211_PMSR_FTM_RESP_ATTR_RSSI_AVG={0x8, 0x9, 0x3}, @NL80211_PMSR_FTM_RESP_ATTR_RTT_SPREAD={0xc, 0xf, 0x101}, @NL80211_PMSR_FTM_RESP_ATTR_RTT_SPREAD={0xc}, @NL80211_PMSR_FTM_RESP_ATTR_TX_RATE={0x24, 0xb, 0x0, 0x1, [@HWSIM_RATE_INFO_ATTR_MCS={0x5, 0x2, 0x5}, @HWSIM_RATE_INFO_ATTR_HE_GI={0x5, 0x6, 0x1}, @HWSIM_RATE_INFO_ATTR_HE_GI={0x5, 0x6, 0x6}, @HWSIM_RATE_INFO_ATTR_NSS={0x5, 0x4, 0x7}]}]}, @NL80211_PMSR_TYPE_FTM={0x58, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_RESP_ATTR_FTMS_PER_BURST={0x5, 0x8, 0x85}, @NL80211_PMSR_FTM_RESP_ATTR_NUM_FTMR_ATTEMPTS={0x8, 0x3, 0x11e4774}, @NL80211_PMSR_FTM_RESP_ATTR_FAIL_REASON={0x8, 0x1, 0x2}, @NL80211_PMSR_FTM_RESP_ATTR_DIST_SPREAD={0xc, 0x12, 0x4}, @NL80211_PMSR_FTM_RESP_ATTR_RTT_SPREAD={0xc, 0xf, 0x1}, @NL80211_PMSR_FTM_RESP_ATTR_FTMS_PER_BURST={0x5, 0x8, 0x2}, @NL80211_PMSR_FTM_RESP_ATTR_RTT_AVG={0xc, 0xd, 0xffffffffffffffff}, @NL80211_PMSR_FTM_RESP_ATTR_LCI={0x8, 0x13, '[\x7f\x00)'}, @NL80211_PMSR_FTM_RESP_ATTR_NUM_BURSTS_EXP={0x5, 0x6, 0x1d}]}]}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0x4}]}]}, @NL80211_PMSR_ATTR_PEERS={0xf0, 0x5, 0x0, 0x1, [{0xec, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_RESP={0x10, 0x4, 0x0, 0x1, [@NL80211_PMSR_RESP_ATTR_HOST_TIME={0xc, 0x3, 0x7fff}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0x39, 0x1, "7859f5a94a394d62695f44494fdf729074b1398e805f03f838259d946db4948a3eae70d4a678f90ab2540549da5096485c99f5e732"}, @NL80211_PMSR_PEER_ATTR_ADDR={0x9c, 0x1, "79b4f35d8e604eba7a0da35eca4a49ab96ad61057c47ac580cc35250ef5f5f626cadeac0d589863491aa27166bbb944754a9e74ba04c6ceceec48e7bed0864bf513d3bcca71f0ff0c120c15ad656905a71aa7f342028dfc12026da088fc5530950f9b610a37337ee6c9ef11d256514a5d29110521b76571225f4bc5cfaef9637b4dd85e4ad8bb2ec76de42eb72be796d0c7cbdae8df19af1"}]}]}, @NL80211_PMSR_ATTR_PEERS={0x4}, @NL80211_PMSR_ATTR_PEERS={0x4}]}]}, 0x344}, 0x1, 0x0, 0x0, 0xc080}, 0x810) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)) open(&(0x7f0000000100)='./cgroup\x00', 0x0, 0x154) r2 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) io_uring_setup$auto(0x6, 0x0) select$auto(0xb, 0x0, 0x0, &(0x7f0000000200)={[0x8, 0xffffffffffffff4b, 0x100000001, 0x15, 0x6, 0x1, 0x5, 0x9, 0xe, 0x8, 0x2dde, 0x8, 0xfffffffffffffffa, 0xab, 0x8000000000000, 0x8001]}, &(0x7f0000000040)={0x8000000000, 0x5}) syz_genetlink_get_family_id$auto_gtp(0x0, r2) close_range$auto(0x2, 0x8000, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000140)='ns/pid\x00') lseek$auto(0x2, 0xffffffffffffffff, 0x1) socket$nl_generic(0x10, 0x3, 0x10) munmap$auto(0x1000000, 0x2000000c) madvise$auto(0x0, 0xffffffffffff0001, 0x9) mlockall$auto(0x3) 9.292066954s ago: executing program 34 (id=3785): pidfd_open$auto(0x0, 0x0) r0 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="2e00f5"], 0x1ac}}, 0x40000) bpf$auto(0x7, 0x0, 0x3a) mlockall$auto(0x7) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000340), r0) sendmsg$auto_NL80211_CMD_DEL_STATION(r0, &(0x7f0000001400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000013c0)={&(0x7f0000000380)={0x1020, r1, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@NL80211_ATTR_WIPHY_RETRY_SHORT={0x5, 0x3d, 0x8}, @NL80211_ATTR_FILS_CACHE_ID={0x1004, 0xfd, "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"}]}, 0x1020}, 0x1, 0x0, 0x0, 0x8000}, 0x20000081) mmap$auto(0x0, 0x9, 0x3, 0x8012, 0x3, 0x8000) socket(0xa, 0x1, 0x6) setsockopt$auto(0x3, 0x0, 0xb, 0xffffffffffffffff, 0x0) sendfile$auto(0x6, 0x3, 0x0, 0x8000) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x10004) unshare$auto(0x40000080) writev$auto(0x1, &(0x7f0000000100)={0x0, 0x400000000000fdef}, 0x1) vmsplice$auto(0x3, 0x0, 0x9, 0x7) socket(0x2, 0x5, 0x0) munmap$auto(0x20001000, 0x7) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_SEG6(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$auto_SEG6_CMD_SETHMAC(r2, &(0x7f0000000240)={0x0, 0xf0, &(0x7f0000000200)={&(0x7f0000000280)={0x38, r3, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x200}, @SEG6_ATTR_SECRET={0x9, 0x4, "c954a4a057"}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20040014) r4 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x3, 0xa) r5 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000000c0), r4) sendmsg$auto_NL80211_CMD_NEW_KEY(r4, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000280)={&(0x7f0000000140)={0x5c, r5, 0x800, 0x70bd28, 0x25dfdbfc, {}, [@NL80211_ATTR_VHT_CAPABILITY={0x38, 0x9d, "24b578b4a3f4c50ba69b8781b10037ffb99f8f173f93f6508917aa6445db83fef368e9d3819ed65da69209d0f780ad446cc07768"}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x200}, @NL80211_ATTR_P2P_OPPPS={0x5, 0xa3, 0x3}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0xc000) lsm_list_modules$auto(0x0, &(0x7f0000000100)=0xbefc, 0x0) 9.131419373s ago: executing program 2 (id=3802): ioperm$auto(0x7f, 0x9, 0x6) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0xa, 0x3, 0x33) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000021}, 0x8004) connect$auto(0x3, &(0x7f0000000140)={0xa, @sa_data_min="c40900448dc7fe8000"}, 0x55) socket(0xa, 0x3, 0xff) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) select$auto(0x6d0c, 0x0, &(0x7f0000000100)={[0xd, 0x200, 0x800000000000008, 0xc, 0x9, 0x3, 0x6, 0x1, 0x40009, 0x5e582972, 0x4000000000000000, 0x14, 0x93, 0x8, 0x8, 0x6]}, 0x0, 0x0) connect$auto(0x3, &(0x7f0000000140)={0xa, @sa_data_min="c4aeed448dc7fe8000"}, 0x51) connect$auto(0x3, &(0x7f0000000140)={0xa, @sa_data_min="c457ffffffffffffff000300"}, 0x55) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) sendmmsg$auto(0xffffffffffffffff, &(0x7f00000000c0)={{0x0, 0x6, 0x0, 0xa7, &(0x7f0000000a40)=[0x5b84, 0x10000100000001], 0x8000, 0x40}, 0x8}, 0x1, 0x9) sendmmsg$auto(0x3, &(0x7f0000000000)={{0x0, 0x2, 0x0, 0xff, 0x0, 0x1, 0x3}, 0xed7138c}, 0xb, 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x43, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) io_uring_setup$auto(0x6, 0x0) io_cancel$auto(0x5, &(0x7f0000000000)={0xcd, 0x1, 0x800, 0x44d, 0x4, 0xffffffffffffffff, 0x9f55, 0x2b5, 0xfffffffffffffffd, 0x0, 0x0, 0xffffffffffffffff}, &(0x7f0000000040)={0xfffffffffffffffd, 0x2, 0x1, 0x80000000}) r2 = socket(0x10, 0x2, 0x0) sendmsg$auto_OVS_DP_CMD_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0f0026bd7000fcdbdf9907"], 0x24}, 0x1, 0x0, 0x0, 0x20000800}, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1e"], 0x1ac}}, 0x40000) mprotect$auto(0x1ffff000, 0x8000000000000001, 0x4) sendmsg$auto_NCSI_CMD_SET_PACKAGE_MASK(r2, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4c004}, 0x40080c0) io_submit$auto(0x7fffffff, 0x3dc5d204, &(0x7f00000000c0)=&(0x7f0000000080)={0x6, 0x7f, 0x6, 0x8341, 0x1, r0, 0x3b5, 0x0, 0xb055, 0x0, 0x1, r1}) close_range$auto(r0, r3, 0xae) fanotify_init$auto(0x200, 0x2010000000000) open(0x0, 0x4242, 0xe1d2b27bdc14aabc) socket$nl_generic(0x10, 0x3, 0x10) 6.606656181s ago: executing program 4 (id=3803): io_uring_setup$auto(0x1, 0x0) socket(0x1e, 0x4, 0x0) r0 = socket(0x1e, 0x4, 0x0) get_robust_list$auto(0x0, 0x0, 0x0) setsockopt$auto(r0, 0x10f, 0x87, 0x0, 0x14) write$auto(0x3, 0x0, 0xfdef) writev$auto(0x3, 0x0, 0x8) readv$auto(0x4, &(0x7f0000000100)={0x0, 0x1000}, 0x8) ioperm$auto(0x7f, 0x9, 0x6) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x5, 0x0) clone$auto(0x1002, 0x9, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x9) utimes$auto(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0xdf0, 0x7}) 6.279326471s ago: executing program 5 (id=3804): ioperm$auto(0x800, 0x5, 0xd) r0 = socket(0x2c, 0x3, 0x0) poll$auto(0xfffffffffffffffc, 0x0, 0xc) syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000000c0), r0) set_mempolicy$auto(0x2, &(0x7f0000000080)=0x7e, 0x4) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x19) move_pages$auto(0x0, 0xd0, 0x0, &(0x7f0000001140), 0x0, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_IOAM6(&(0x7f0000000080), r1) sendmsg$auto_IOAM6_CMD_DEL_NAMESPACE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)={0x1c, r2, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [@IOAM6_ATTR_NS_ID={0x6, 0x1, 0x400}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x24040090) sendmsg$auto_IOAM6_CMD_DEL_SCHEMA(r0, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x24, r2, 0x400, 0x70bd27, 0x25dfdbff, {}, [@IOAM6_ATTR_SC_ID={0x8, 0x4, 0x8}, @IOAM6_ATTR_SC_ID={0x8, 0x4, 0x7}]}, 0x24}, 0x1, 0x0, 0x0, 0x4048000}, 0x4020001) r3 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x1, 0x1, 0x1) read$auto(0x3, 0x0, 0xfb6) fadvise64$auto(r3, 0x2, 0x4, 0x5) 6.094735501s ago: executing program 2 (id=3805): request_key$auto(&(0x7f0000000000)='*&*#{\x00', &(0x7f0000000040)='/*%\xb1C\\%\x00', &(0x7f0000000900)='X{b&$\x97/\x01.\xab\x00\x00\x00\x00\x00\x00\x81\xda\x1e\xb3\x80&K\xf9\xec\xc5o\xd7\xf7Faw\xe8\xe6\xa82\xc6\x82\xcaS\rl\b^l4\x95B\xc0y\xd0\xfe\xc07,\xe0\x83-\xe1:\'\xa1\x97\xc5M<\x8e\xe2\x03\xb7,\x93\xd40\x14?B\xa9p\x1fZ\xc8l\x13p\xe4\xf2R+\xbb^\xd4\xef\x9f%\\\x17\xa2y\x9du=\x15\xae#\n3\xcb$\x0f\xde\xbc_\x9f|\x19[\xd4\x10\xb9\x9aE\xe9\xb9BN\xe6\xa4\x0fp\xe8\xac\xdc\xe5\xf1\r\xcc7\x8ee\x14\xec\x95+J%\xa62g\x85\x14\xa6\x8a4\xa5(\xde\xbf\xc0c\x17\x89JT{\x17\xff\bn\xb0a\xbf\xed\x91\x91%41qAy\x1a\xa4\xa5\xf9\xf8\xf8\xd3\x00\x9c\xbb\x9f+0\xd7Z`\xe3\xca\xa6A\xa1\xfd\x049C\x15\xca\x15\x1f\xc2?-\xdd,]\xc4\xea\xcfE\x7f\xbf\xee\x05V9A!\xa8/\fb\xf5\f\xa8\xa3\xef\xf5-U\x00\t\x0e#O\xe5)\x9dq\xd5\t3\xc2\xddn\xa7\t\x89\x85(\xc0%t\xf8\x1e\xdd-\xf9t\xf7\xbf\n\xca\xd8\xb3p`\x9c\x8f\\\x84N\x81Xz\\\xe7\x9a\xb8j\'\xf7\xc0\n\xb3|Qn\xcc\xe4\xd9\xb6\xb4,DL&v', 0x0) prctl$auto(0x23, 0x8f, 0x2008, 0x0, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) sysfs$auto(0x2, 0x10000000000002d, 0x0) r0 = socket(0xa, 0x5, 0x0) getsockopt$auto(r0, 0x84, 0x71, 0x0, 0x0) connect$auto(r0, &(0x7f0000000880)={0x0, @sockaddr_1_1}, 0x3) r1 = socket(0x26, 0x6, 0x0) read$auto(r1, &(0x7f0000000000)='.\x00', 0x4c) setsockopt$auto(0x6, 0x6, 0xd, &(0x7f0000000040)='ns/cg\x0fB\x05\x81>', 0xc) mprotect$auto(0x1ffff000, 0x8000000000000001, 0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/net\x00') r2 = syz_genetlink_get_family_id$auto_gtp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="b3bf"], 0x14}, 0x1, 0x0, 0x0, 0x4048000}, 0x8000) r3 = syz_clone(0x200200, &(0x7f0000000000)="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", 0x821, 0x0, &(0x7f0000001040), &(0x7f0000001080)="666207165be7") fanotify_init$auto(0x105, 0x2) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) socket(0x2, 0x1, 0x106) getsockopt$auto(0x4, 0x1, 0x47, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f00000004c0), r4) sendmsg$auto_ETHTOOL_MSG_PAUSE_GET(r4, &(0x7f0000001a00)={0x0, 0x0, &(0x7f00000019c0)={&(0x7f0000001980)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010727bd7000fcdbdf2515000000180001801400020076657468"], 0x2c}, 0x1, 0x0, 0x0, 0x40080}, 0x0) get_robust_list$auto(r3, &(0x7f0000001300)=0x0, &(0x7f0000001340)=0xfffffffffffffff9) kill$auto(r3, 0x5) mbind$auto(0x2bbb, 0x7, 0x0, &(0x7f0000000840)=0x80000001, 0xd, 0x9) sendto$auto(r1, &(0x7f00000001c0), 0xff, 0xffbffff8, 0x0, 0x0) request_key$auto(&(0x7f0000000a40)='X{b&$\x97/\x01.\xab\x00\x00\x00\x00\x00\x00\x81\xda\x1e\xb3\x80&K\xf9\xec\xc5o\xd7\xf7Faw\xe8\xe6\xa82\xc6\x82\xcaS\rl\b^l4\x95B\xc0y\xd0\xfe\xc07,\xe0\x83-\xe1:\'\xa1\x97\xc5M<\x8e\xe2\x03\xb7,\x93\xd40\x14?B\xa9p\x1fZ\xc8l\x13p\xe4\xf2R+\xbb^\xd4\xef\x9f%\\\x17\xa2y\x9du=\x15\xae#\n3\xcb$\x0f\xde\xbc_\x9f|\x19[\xd4\x10\xb9\x9aE\xe9\xb9BN\xe6\xa4\x0fp\xe8\xac\xdc\xe5\xf1\r\xcc7\x8ee\x14\xec\x95+J%\xa62g\x85\x14\xa6\x8a4\xa5(\xde\xbf\xc0c\x17\x89JT{\x17\xff\bn\xb0a\xbf\xed\x91\x91%41qAy\x1a\xa4\xa5\xf9\xf8\xf8\xd3\x00\x9c\xbb\x9f+0\xd7Z`\xe3\xca\xa6A\xa1\xfd\x049C\x15\xca\x15\x1f\xc2?-\xdd,]\xc4\xea\xcfE\x7f\xbf\xee\x05V9A!\xa8/\fb\xf5\f\xa8\xa3\xef\xf5-U\x00\t\x0e#O\xe5)\x9dq\xd5\t3\xc2\xddn\xa7\t\x89\x85(\xc0%t\xf8\x1e\xdd-\xf9t\xf7\xbf\n\xca\xd8\xb3p`\x9c\x8f\\\x84N\x81Xz\\\xe7\x9a\xb8j\'\xf7\xc0\n\xb3|Qn\xcc\xe4\xd9\xb6\xb4,DL&v', &(0x7f00000008c0)='.\x00', &(0x7f0000000b80)='ns/cg\x0fB\x05\x81>', 0x7ff) 3.602351217s ago: executing program 4 (id=3806): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) close_range$auto(0x2, 0x8000, 0x0) socket(0xa, 0x2, 0x88) sysfs$auto(0x2, 0x100000000000037, 0x0) fsopen$auto(0x0, 0x1) r0 = socket(0x23, 0x80805, 0x0) r1 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000180), r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f00000005c0), r2) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'gretap0\x00', 0x0}) sendmsg$auto_ETHTOOL_MSG_STRSET_GET(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000300)={0x2c, r3, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@ETHTOOL_A_STRSET_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @ETHTOOL_A_STRSET_STRINGSETS={0xc, 0x2, 0x0, 0x1, [@typed={0x8, 0x55, 0x0, 0x0, @u32=0x7}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000004}, 0x10) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x1000, 0x8000) r5 = socket(0xa, 0x801, 0x84) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x801, 0x84) connect$auto(r5, &(0x7f0000000000)={0xa, @sa_data_min="ece45908100018060000c51df10d"}, 0x2055) listen$auto(0x3, 0x81) accept$auto(0x3, 0x0, 0x0) getsockopt$auto(0x6, 0x84, 0x81, 0x0, &(0x7f00000000c0)=0x10000) sendmsg$auto_ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000002c0)={&(0x7f0000000780)={0x61c, r1, 0x100, 0x70bd26, 0x25dfdbfc, {}, [@ETHTOOL_A_STRSET_HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0xfff}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_PHY_INDEX={0x8, 0x4, 0x5c6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x9}]}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0x318, 0x2, 0x0, 0x1, [@generic="0d0bb16b086a642f495e8d14654a08a9f0c17e70f74b390b30005008be32a56d8adbdacce8bb83af15c6eaf992d3296b50b5d61ebc443f3de7c87dccf8b549e22098b0d1d09ea2357c622d9ef8125379c94da40a91ec9b0a807d4bbba677866fd1205c223ad105ab6a6fa13f3974272eafb2e7aa61c48118820e142be36e0b5d6a8d69607a72a882c6c3f6e9cda4219e614b787911fc6d6b832b04d3ae349fc07465c2d3c9c82116985126f57c16edae8fb3ceaa7549ecacdbf4", @generic="066d1549de46932fabd5499830579ae013192d6747f5ad5c76dc7483fae18c2796475520f704dcb3b1ce0891585ed65846f885f25efcee8340db6565f9cd7c7af6cd1799164fa8f7e24752f67142", @nested={0x20c, 0xbb, 0x0, 0x1, [@nested={0x4, 0x25}, @generic="b847a69babaaf965dbe94efa07cd944521907c09c512e033901ba2d87e9aad8a904f7a3dfcb0ea762ba67a3b821903fdcd9707575b8b5206d231e5b033e475156620bad00c7eaae5a628832d357c40596836551d652755f1be9f0a693695de6dc26e458be339eadcf2bcbe322486ed5b6e80dbd82a806304344c008063cbbe00d0e05051230f26408688e2e2dc45a8212bcf922fe1b5bed22f0ed00c3352806b447c513241d9fe0fc21454e5ef2080c3a635b73a08a376901791581be8a9aaa8e12d364c0854952cf22e8a7a8a21431b967276fb5968d73840882016f072ff7e9967a00170a0554f69fabdfc3c78b9a52c", @generic="5ff2d50ffc1717c08d971c7bc639826a1f8a87c4e0afa02392ddfc31ca1307b824334bfde44852db6dcb73b2aad51a0f85b003868abd93a94dacb38cd5b1cdf9c3858ec920c11607f68f24b469d5026b86a4eae01a387bee5a24a6f3855d6bf4db3c7ffbed645b289ac0571b2550f1d8cd7bee3feb517233d4874ab58b7fb285c9ca0167a8eb720814451f9e2c3f1e7d0da7e391a22d5f54fa2c19620a62cdec5ca48c72fc2dff6952ae65044465a197da4c245f", @nested={0x4, 0x49}, @generic="c3e8133aa68260435aadea2320a860bcce666d79e43579ba4af52321f32aa4b88c809affa163293afe8606ef5f3a9711f1b9fe2ebd9f0ec58026cd290fb18cad4b955dcdb7012b128656ff", @nested={0x4, 0x2}, @typed={0x9, 0x149, 0x0, 0x0, @str='l2tp\x00'}]}]}, @ETHTOOL_A_STRSET_STRINGSETS={0x29f, 0x2, 0x0, 0x1, [@nested={0xaf, 0x5c, 0x0, 0x1, [@nested={0x4, 0x96}, @generic="b460c0e7", @generic="cc93144bb9f7d11531c7964bddb4ff91322059b93aa0524b8efccb69c9165e3a2cf9179ed5a25ae53b5f62f62f0579aba25ab6ebad", @generic="8d29f0cd8212db0406bcae35b3412c0e2326f4221742ec353496790860aeb6c288dd933970417f82c532da6b0789339a7f5a35e59207ce3a9a8306be2f3ee3ff1cd2b98c1950c7d75b31250c359fdacff9d8a7e731b51c6afff8", @nested={0x4, 0x1b}, @nested={0x4, 0x11c}, @typed={0x8, 0x20, 0x0, 0x0, @uid}, @nested={0x4, 0x3}]}, @generic="f14b934afd35f096a4bd74893abe02f814da989dc0405e6fb8b374cf7698db82d008bcce6a7284791d3e98eecd32f4547fbd60dec3d7412f8596ca3914ccc001f1d97a8df0f37880f30621c9f3e82df1552e67587a39149c3fe341ff8002ebb28fa866fbe17141e41d4bead387a33717cc2e6ae2af4ec5b1e067ef33383ced37779d810ee78cd1ff7f33c37c62ed242b1c8446ccacc1389f1d1ef340c8", @generic="38b7e063c7ddeeba0e17eb027797f5a8f5f53cad2d1f2c735081ad6e2935714fa740d7cfdc4689e0faef0d9c47c54102edec06cfe25b887c067ac3b176c819cf60c55fda5528d25fa1f34051c834224bd5eed4e8651776186868712fd6528ff604b665ae020f8b4d8db54ebf95fef482e04bf87d6e1e", @nested={0xd8, 0x128, 0x0, 0x1, [@generic="bbbfb36b032744330fce18fb05bdcf8fc2becaad1c8b0ef7961c8ad1031900e42d07d288cdddd12c2707cbcdec14783079c54c8f927eeb294d74d1145edf4a0d79809de8737be267aa508848d22b427d67095f3617a5d3d793a6c43282782c58da83dd63bb26cb11c0373df04ef85f608443b41fe64b392b949294b5bb76fa38465edfe1915957be458b57ea0ae001cd3e9ef3d70658e4ba46e8b2f6589f24fbb659cf79e35efe2f2cc8b75f621d2953b3d3e2033815ad313aaa6bec3624052ff20516f1018567287974ffa6ac09d006", @nested={0x4, 0x7}]}]}]}, 0x61c}, 0x1, 0x0, 0x0, 0x44004}, 0x800) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(r6, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x3c, r7, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x8}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x58}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x11e789c}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x5}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, 0x7ffd}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x48080) r8 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x5, 0x8000) poll$auto(&(0x7f0000003640)={r8, 0x7, 0x6}, 0x6, 0x100000) read$auto(0x3, 0x0, 0x80) socket(0xa, 0x801, 0x106) r10 = syz_genetlink_get_family_id$auto_netdev(&(0x7f0000003900), r8) sendmsg$auto_NETDEV_CMD_QUEUE_GET(r9, &(0x7f00000039c0)={0x0, 0x0, &(0x7f0000003980)={&(0x7f0000003940)=ANY=[@ANYBLOB="14000000", @ANYRES16=r10, @ANYBLOB="010309000000000000000a000000"], 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0xc4) 3.186699465s ago: executing program 5 (id=3807): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0xa, 0x5, 0x0) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) mincore$auto(0x0, 0x1, 0x0) setsockopt$auto(0x3, 0x10000000084, 0x23, 0x0, 0x8) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) socket(0xa, 0x5, 0x0) socketpair$auto(0x3, 0x5, 0x7, 0x0) r1 = socket(0x29, 0x2, 0x0) mmap$auto(0x8000, 0x8, 0xffffffffffff8001, 0x15, 0x2, 0x8000) r2 = socket(0x10, 0x6, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_SMC_NETLINK_GET_DEV_SMCD(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000004340)={&(0x7f0000000000)=ANY=[@ANYRES16=r1, @ANYRES16, @ANYBLOB='\v'], 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x810) syz_genetlink_get_family_id$auto_TIPCv2(&(0x7f0000000040), r3) read$auto(r3, &(0x7f0000000100)='nl80211\x00', 0xbe62) sendmsg$auto_HWSIM_CMD_DEL_RADIO(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="2b714eb507d9fc83eeca5c9984dc436f15957d622db6eb943153e37cd6d471628ca642c27c78301488f3cf3d374fbea95d89040640c79c64f687747ae9fa36eee87b94391d923e294e161a10f3fc06f9c50c28e545ed69d83bd2ce3043dd47a967654301d45c8e9a013f38575b6fa4a084a681807a61e47029ddd8a3cc3bdd8855467dbfbbbfbab0756877b99374a0978017c1fae048f5be003d49929eca23e5046638a9ad040a11d466e1d735aacce5d404ab4f0ae83eea8ab12d83b1c10f51398e417b4b8fd1a818a3f0688ae247e8e033344f87aec8c7ac30b2fe512a159c44cdb9c214df3e3faec121db7bea5783e191a3d1"], 0x14}, 0x1, 0x0, 0x0, 0x20040800}, 0x24004000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYRESHEX, @ANYRESOCT=r3], 0x1ac}}, 0x40000) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000080), r2) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x40000) mprotect$auto(0x1ffff000, 0x8000000000000001, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(r2, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x40000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x3, 0x7) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x1, 0x28000) sysfs$auto(0x2, 0x0, 0x0) open(0x0, 0x22240, 0x155) unlinkat$auto(0xffffffffffffff9c, 0x0, 0x0) 3.041674431s ago: executing program 2 (id=3808): socket$nl_generic(0x10, 0x3, 0x10) stat$auto(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)={0xffff, 0x7ff, 0x8, 0x400, 0x0, 0xffffffffffffffff, 0x0, 0xa94c, 0x4, 0xffffffffffff0001, 0x3ff, 0x3, 0x0, 0xf88, 0x7, 0x8b3, 0x1a00}) r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) socket(0xa, 0x2, 0x0) connect$auto(0x3, &(0x7f0000000140)={0xa}, 0x55) socket(0xa, 0x801, 0x84) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40004821}, 0x40000) mmap$auto(0x0, 0x2020009, 0xa, 0xeb1, 0xfffffffffffffffa, 0x8000) connect$auto(0x3, &(0x7f0000000140)={0xa, @sa_data_min="c40900448dc7fe8000"}, 0x55) connect$auto(0x3, &(0x7f0000000140)={0xa, @sa_data_min="c4aeed448dc7fe8000"}, 0x55) shutdown$auto(0x200000003, 0x2) sendmsg$auto_WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x88d0}, 0x2000c041) sendmsg$auto_MAC802154_HWSIM_CMD_GET_RADIO(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f00000000c0)={0x1d, 0x0, 0x0, 0x1000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x4000001) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x4, 0x9}, 0x20000007}, 0x3, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0) r1 = syz_genetlink_get_family_id$auto_netdev(&(0x7f0000000440), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'veth1_to_bond\x00', 0x0}) sendmsg$auto_NETDEV_CMD_QUEUE_GET(r0, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f00000015c0)={0x2c, r1, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@NETDEV_A_QUEUE_TYPE={0x8}, @NETDEV_A_QUEUE_IFINDEX={0x8, 0x2, r2}, @NETDEV_A_QUEUE_ID={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x810) mknod$auto(&(0x7f0000000180)='\xb2{(\\)[{[\x00', 0x2d, 0x8) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) open(&(0x7f0000000000)='./file0\x00', 0x7ffd, 0x10c) lchown$auto(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) 561.423287ms ago: executing program 4 (id=3809): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) sysfs$auto(0x2, 0x44, 0x0) setsockopt$auto(0x3, 0x1, 0x4c, 0x0, 0x9) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x6, 0x0) pidfd_open$auto(0x1, 0x0) socket(0x10, 0x3, 0x6) fsopen$auto(0x0, 0x1) fsetxattr$auto(0x4, 0x0, 0x0, 0x800, 0x0) mmap$auto(0x7, 0x8, 0x3, 0x13, 0x3, 0x70000) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x4, 0x8000) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x44, r2, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x8}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x58}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x31e789c}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, 0x7ffd}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, 0x8000}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x48080) sendmsg$auto_L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f0000000140)={&(0x7f0000000080), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, r2, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x9}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x8}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x90) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) writev$auto(0x1, 0x0, 0x1) read$auto(0x3, 0x0, 0x7) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) open(&(0x7f0000000000)='./file0\x00', 0x261c2, 0x84) r4 = syz_genetlink_get_family_id$auto_ovs_vport(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_OVS_VPORT_CMD_NEW(r3, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000001180)={&(0x7f0000000340)={0x30, r4, 0x1, 0x70bd26, 0x25dfdbff, {}, [@OVS_VPORT_ATTR_NETNSID={0x8, 0x9, 0x4}, @OVS_VPORT_ATTR_TYPE={0x8, 0x2, 0x4}, @OVS_VPORT_ATTR_NAME={0x6, 0x3, '*\x00'}, @OVS_VPORT_ATTR_UPCALL_PID={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x4040010}, 0x800) 169.525601ms ago: executing program 5 (id=3810): mmap$auto(0x0, 0x400005, 0xfffffffffffffffe, 0x9b72, 0x2, 0x8000) sendmsg$auto_WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x4008810}, 0x4008000) socket(0x2, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x40005, 0xdf, 0x9b72, 0x5, 0x28000) io_uring_setup$auto(0x6, 0x0) select$auto(0x7, 0x0, &(0x7f0000000080)={[0x209c, 0xe9e, 0x6, 0x15, 0x1000, 0x100000005, 0xc, 0xf, 0x0, 0x0, 0xe, 0xd59, 0x101, 0xff, 0x2, 0x80000001]}, 0x0, 0x0) syz_clone(0xcc81455747ec94b6, 0x0, 0x0, 0x0, 0x0, 0x0) bind$auto(0x3, &(0x7f0000000080)={0x2, @sockaddr_1_1}, 0x6b) connect$auto(0x3, &(0x7f00000000c0)={0x2, @sockaddr_1_1}, 0x55) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) fcntl$auto(0xffffffffffffffff, 0x401, 0x5) r0 = syz_genetlink_get_family_id$auto_ovs_meter(&(0x7f0000003040), 0xffffffffffffffff) sendmsg$auto_OVS_METER_CMD_SET(0xffffffffffffffff, &(0x7f0000003240)={0x0, 0x0, &(0x7f0000003200)={&(0x7f0000000380)={0x2c, r0, 0x159198c6007aa95d, 0x70bd28, 0x25dfdbfc, {}, [@OVS_METER_ATTR_KBPS={0x4}, @OVS_METER_ATTR_BANDS={0xc, 0x4, 0x0, 0x1, [@nested={0x4, 0xf9}, @nested={0x4, 0x48}]}, @OVS_METER_ATTR_ID={0x8, 0x1, 0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc0}, 0x40) write$auto(0x3, 0x0, 0xfffffdef) setsockopt$auto(0xffffffffffffffff, 0x4, 0x8001, 0x0, 0x2) unshare$auto(0x40000080) setsockopt$auto(0x3, 0x6, 0x19, 0x0, 0xfb3) sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, 0x0, 0x200c88c0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) sysfs$auto(0x2, 0x10000000000002d, 0x0) sendmsg$auto_NBD_CMD_RECONFIGURE(0xffffffffffffffff, 0x0, 0x800) mprotect$auto(0x1ffff000, 0x7fffffff, 0x0) mbind$auto(0x8970, 0x8, 0x7, 0x0, 0xb, 0x2) socket$nl_generic(0x10, 0x3, 0x10) madvise$auto(0x0, 0xffffffffffff0001, 0x17) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x20006, 0x4000000000df, 0xeb1, 0x4, 0x8000) connect$auto(0x4, 0x0, 0x10) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7fffffe) 0s ago: executing program 2 (id=3811): mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) setpriority$auto(0xc100000000000000, 0x0, 0x9) r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) bpf$auto(0x0, &(0x7f0000000100)=@bpf_attr_5={@target_ifindex=r1, 0x81, 0x9c, 0x7b2, 0x1, @relative_fd=0x7, 0x80}, 0x96) bpf$auto(0x2, &(0x7f00000001c0)=@raw_tracepoint={0x5, 0xffff, 0x0, 0x3}, 0xc) pipe2$auto(&(0x7f0000000280), 0x200) r5 = socket(0x2, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000080)={0x2, @sockaddr_1_1}, 0x6b) connect$auto(0x3, &(0x7f00000000c0)={0x2, @sockaddr_1_1}, 0x55) shutdown$auto(r5, 0x0) execve$auto(&(0x7f0000000000)=':,\x00', 0x0, 0x0) r6 = socket(0x23, 0x80805, 0x0) syz_genetlink_get_family_id$auto_802_15_4_MAC(&(0x7f0000000540), r3) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$auto_ethtool(0x0, r6) sendmsg$auto_ETHTOOL_MSG_RSS_GET(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYRES16=r8, @ANYBLOB="01035a0000000000000002"], 0x14}, 0x1, 0x0, 0x0, 0x604c837}, 0x4004000) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r6, 0x0, 0x4040054) bpf$auto(0x5, &(0x7f0000001540)=@bpf_attr_3={0x9, 0x4, 0x6, 0x1, 0x9, 0x80000000, 0x3, 0x0, 0x7, "06db46e3c94583de4ea9d4bbb9b327ef", 0x0, 0x6, 0x2, 0x4ab2, 0x0, 0x4, 0x0, 0x1, 0x4, 0x5, @attach_btf_obj_fd, 0x5, 0x1, 0x2, 0x101, 0xe4, 0x6}, 0x1000) mprotect$auto(0x1ffff000, 0x8000000000000001, 0xd) r9 = open(&(0x7f0000000800)='./file0\x00', 0x62240, 0x154) rename$auto(&(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='./file0\x00') execveat$auto(r9, &(0x7f0000000200)='\x00', 0x0, 0x0, 0x1000) mount$auto(&(0x7f0000000000)='pimreg\x00', &(0x7f0000000040)='\x00', 0x0, 0x10dfd057, 0x0) syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000300), r2) sendmsg$auto_NL802154_CMD_SET_LBT_MODE(r4, &(0x7f00000004c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, 0x0}, 0x4000000) mount$auto(0x0, &(0x7f0000000040)='\x00', 0x0, 0x7fe, 0x0) kernel console output (not intermixed with test programs): 056][ T11] team_slave_1: left allmulticast mode [ 510.640719][ T11] team0: left promiscuous mode [ 510.645510][ T11] team_slave_0: left promiscuous mode [ 510.652101][ T11] team_slave_1: left promiscuous mode [ 510.658528][ T11] bridge0: port 3(team0) entered disabled state [ 510.687218][ T11] bridge_slave_1: left allmulticast mode [ 510.693364][ T11] bridge_slave_1: left promiscuous mode [ 510.700331][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 510.726575][ T11] bridge_slave_0: left allmulticast mode [ 510.733000][ T11] bridge_slave_0: left promiscuous mode [ 510.738734][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 511.628266][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 511.647639][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 511.666058][ T11] bond0 (unregistering): Released all slaves [ 511.792483][T12774] chnl_net:caif_netlink_parms(): no params data found [ 512.331473][ T55] Bluetooth: hci1: command tx timeout [ 512.617545][T12774] bridge0: port 1(bridge_slave_0) entered blocking state [ 512.625690][T12774] bridge0: port 1(bridge_slave_0) entered disabled state [ 512.640266][T12774] bridge_slave_0: entered allmulticast mode [ 512.647345][T12774] bridge_slave_0: entered promiscuous mode [ 512.677280][T12774] bridge0: port 2(bridge_slave_1) entered blocking state [ 512.700406][T12774] bridge0: port 2(bridge_slave_1) entered disabled state [ 512.719110][T12774] bridge_slave_1: entered allmulticast mode [ 512.727685][T12774] bridge_slave_1: entered promiscuous mode [ 512.941853][T12774] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 513.037551][ T11] hsr_slave_0: left promiscuous mode [ 513.095436][ T11] hsr_slave_1: left promiscuous mode [ 513.130241][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 513.170281][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 513.253480][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 513.270082][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 513.396676][ T11] veth1_macvtap: left promiscuous mode [ 513.402875][ T11] veth1_vlan: left promiscuous mode [ 513.408345][ T11] veth0_vlan: left promiscuous mode [ 514.401975][ T55] Bluetooth: hci1: command tx timeout [ 515.352777][ T11] team0 (unregistering): Port device team_slave_1 removed [ 515.488705][ T11] team0 (unregistering): Port device team_slave_0 removed [ 516.435464][T12774] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 516.480204][ T55] Bluetooth: hci1: command tx timeout [ 516.574614][T12774] team0: Port device team_slave_0 added [ 516.606356][T12774] team0: Port device team_slave_1 added [ 516.718834][T12774] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 516.738970][T12774] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 516.803001][T12774] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 516.816915][T12774] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 516.828437][T12774] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 516.895282][T12774] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 516.979918][T12774] hsr_slave_0: entered promiscuous mode [ 517.015415][T12774] hsr_slave_1: entered promiscuous mode [ 517.031539][T12774] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 517.040415][T12774] Cannot create hsr debugfs directory [ 517.425180][T12774] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 517.471086][T12774] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 517.502688][T12774] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 517.570696][T12774] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 517.714075][T12774] 8021q: adding VLAN 0 to HW filter on device bond0 [ 517.761617][T12774] 8021q: adding VLAN 0 to HW filter on device team0 [ 517.790884][ T1141] bridge0: port 1(bridge_slave_0) entered blocking state [ 517.798062][ T1141] bridge0: port 1(bridge_slave_0) entered forwarding state [ 517.832481][ T1141] bridge0: port 2(bridge_slave_1) entered blocking state [ 517.839672][ T1141] bridge0: port 2(bridge_slave_1) entered forwarding state [ 518.279306][T12774] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 518.566400][ T55] Bluetooth: hci1: command tx timeout [ 518.853437][T12774] veth0_vlan: entered promiscuous mode [ 518.879649][T12774] veth1_vlan: entered promiscuous mode [ 518.992378][T12774] veth0_macvtap: entered promiscuous mode [ 519.013998][T12774] veth1_macvtap: entered promiscuous mode [ 519.069513][T12774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 519.107197][T12774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 519.128052][T12774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 519.152970][T12774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 519.170002][T12774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 519.196344][T12774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 519.217149][T12774] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 519.275862][T12774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 519.330075][T12774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 519.356559][T12892] delete_channel: no stack [ 519.370556][T12774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 519.402572][T12774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 519.418631][T12774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 519.439610][T12774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 519.461489][T12774] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 519.471382][T12917] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1684'. [ 519.586724][T12774] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 519.597554][T12774] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 519.607652][T12774] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 519.635028][T12774] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 519.809445][T12931] FAULT_INJECTION: forcing a failure. [ 519.809445][T12931] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 519.840573][T12931] CPU: 0 UID: 0 PID: 12931 Comm: syz.3.1687 Not tainted 6.12.0-syzkaller-03657-g43fb83c17ba2 #0 [ 519.851040][T12931] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 519.861108][T12931] Call Trace: [ 519.864392][T12931] [ 519.867325][T12931] dump_stack_lvl+0x16c/0x1f0 [ 519.872019][T12931] should_fail_ex+0x497/0x5b0 [ 519.876711][T12931] _copy_from_iter+0x29b/0x1400 [ 519.881578][T12931] ? __pfx__copy_from_iter+0x10/0x10 [ 519.886870][T12931] ? __virt_addr_valid+0x1a4/0x590 [ 519.891992][T12931] ? __virt_addr_valid+0x5e/0x590 [ 519.897022][T12931] ? __phys_addr_symbol+0x30/0x80 [ 519.902071][T12931] ? __check_object_size+0x488/0x710 [ 519.907374][T12931] netlink_sendmsg+0x813/0xd70 [ 519.912144][T12931] ? __pfx_netlink_sendmsg+0x10/0x10 [ 519.917441][T12931] ____sys_sendmsg+0x9ae/0xb40 [ 519.922218][T12931] ? copy_msghdr_from_user+0x10b/0x160 [ 519.927691][T12931] ? __pfx_____sys_sendmsg+0x10/0x10 [ 519.932993][T12931] ___sys_sendmsg+0x135/0x1e0 [ 519.937683][T12931] ? __pfx____sys_sendmsg+0x10/0x10 [ 519.942900][T12931] ? __pfx_lock_release+0x10/0x10 [ 519.947934][T12931] ? trace_lock_acquire+0x14a/0x1d0 [ 519.953145][T12931] ? __fget_files+0x206/0x3a0 [ 519.957836][T12931] __sys_sendmsg+0x16e/0x220 [ 519.962434][T12931] ? __pfx___sys_sendmsg+0x10/0x10 [ 519.967570][T12931] do_syscall_64+0xcd/0x250 [ 519.972091][T12931] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 519.977996][T12931] RIP: 0033:0x7f2faf37e819 [ 519.982418][T12931] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 520.002043][T12931] RSP: 002b:00007f2fb015e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 520.010468][T12931] RAX: ffffffffffffffda RBX: 00007f2faf535fa0 RCX: 00007f2faf37e819 [ 520.018445][T12931] RDX: 00000000000480d0 RSI: 00000000200000c0 RDI: 0000000000000003 [ 520.026421][T12931] RBP: 00007f2fb015e090 R08: 0000000000000000 R09: 0000000000000000 [ 520.034483][T12931] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 520.042456][T12931] R13: 0000000000000000 R14: 00007f2faf535fa0 R15: 00007ffc5306e658 [ 520.050440][T12931] [ 520.101393][T12933] FAULT_INJECTION: forcing a failure. [ 520.101393][T12933] name failslab, interval 1, probability 0, space 0, times 0 [ 520.142811][T12933] CPU: 0 UID: 0 PID: 12933 Comm: syz.2.1688 Not tainted 6.12.0-syzkaller-03657-g43fb83c17ba2 #0 [ 520.153282][T12933] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 520.163365][T12933] Call Trace: [ 520.166666][T12933] [ 520.169613][T12933] dump_stack_lvl+0x16c/0x1f0 [ 520.174333][T12933] should_fail_ex+0x497/0x5b0 [ 520.179042][T12933] ? fs_reclaim_acquire+0xae/0x150 [ 520.184192][T12933] should_failslab+0xc2/0x120 [ 520.188906][T12933] __kmalloc_noprof+0xcb/0x410 [ 520.193705][T12933] ? rcu_is_watching+0x12/0xc0 [ 520.198503][T12933] lsm_blob_alloc+0x68/0x90 [ 520.203044][T12933] security_prepare_creds+0x30/0x270 [ 520.208366][T12933] prepare_creds+0x53e/0x750 [ 520.212990][T12933] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 520.218922][T12933] lookup_user_key+0x96d/0x12f0 [ 520.223801][T12933] ? __pfx_lookup_user_key+0x10/0x10 [ 520.229110][T12933] ? __pfx_lock_release+0x10/0x10 [ 520.234184][T12933] ? __pfx_lookup_user_key_possessed+0x10/0x10 [ 520.240404][T12933] keyctl_chown_key+0x1ca/0xfa0 [ 520.245320][T12933] ? __pfx_keyctl_chown_key+0x10/0x10 [ 520.250735][T12933] ? ksys_write+0x1ba/0x250 [ 520.255289][T12933] ? __pfx_ksys_write+0x10/0x10 [ 520.260192][T12933] __do_sys_keyctl+0x283/0x590 [ 520.265016][T12933] do_syscall_64+0xcd/0x250 [ 520.269568][T12933] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 520.275503][T12933] RIP: 0033:0x7fdb4cd7e819 [ 520.279944][T12933] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 520.299574][T12933] RSP: 002b:00007fdb4dbde038 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 520.308030][T12933] RAX: ffffffffffffffda RBX: 00007fdb4cf35fa0 RCX: 00007fdb4cd7e819 [ 520.316046][T12933] RDX: ffffffffffffffff RSI: 00000000fffffffe RDI: 0000000000000004 [ 520.324055][T12933] RBP: 00007fdb4dbde090 R08: 000000000000000e R09: 0000000000000000 [ 520.332056][T12933] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 520.340085][T12933] R13: 0000000000000001 R14: 00007fdb4cf35fa0 R15: 00007ffcd8b02dd8 [ 520.348097][T12933] [ 520.431697][ T3569] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 520.458920][ T3569] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 520.478250][ T1048] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 520.527636][ T1048] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 521.460229][T12982] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1699'. [ 523.531387][T13046] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1716'. [ 523.560119][T13046] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 523.586652][T13046] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 523.638397][T13046] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 523.664061][T13046] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 523.943680][T13058] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1717'. [ 524.960928][T13066] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1718'. [ 525.895411][T13100] FAULT_INJECTION: forcing a failure. [ 525.895411][T13100] name failslab, interval 1, probability 0, space 0, times 0 [ 525.927334][T13100] CPU: 0 UID: 0 PID: 13100 Comm: syz.4.1725 Not tainted 6.12.0-syzkaller-03657-g43fb83c17ba2 #0 [ 525.937821][T13100] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 525.947906][T13100] Call Trace: [ 525.951204][T13100] [ 525.954153][T13100] dump_stack_lvl+0x16c/0x1f0 [ 525.958871][T13100] should_fail_ex+0x497/0x5b0 [ 525.963684][T13100] should_failslab+0xc2/0x120 [ 525.968423][T13100] kmem_cache_alloc_noprof+0x6e/0x2f0 [ 525.973837][T13100] ? skb_clone+0x190/0x3f0 [ 525.978301][T13100] skb_clone+0x190/0x3f0 [ 525.982591][T13100] netlink_deliver_tap+0xb26/0xcf0 [ 525.987754][T13100] ? __pfx_neightbl_dump_info+0x10/0x10 [ 525.993360][T13100] netlink_dump+0x64f/0xcc0 [ 525.997916][T13100] ? __pfx_netlink_dump+0x10/0x10 [ 526.002992][T13100] ? kfree_skbmem+0x1a4/0x1f0 [ 526.007708][T13100] ? kfree_skbmem+0x1a4/0x1f0 [ 526.012424][T13100] netlink_recvmsg+0xa0d/0xf30 [ 526.017207][T13100] ? __pfx_netlink_recvmsg+0x10/0x10 [ 526.022504][T13100] ? aa_sk_perm+0x2f5/0xb20 [ 526.027025][T13100] ? __pfx_aa_sk_perm+0x10/0x10 [ 526.031889][T13100] ? aa_file_perm+0x4d5/0xfe0 [ 526.036583][T13100] sock_recvmsg+0x1f6/0x250 [ 526.041097][T13100] sock_read_iter+0x2bb/0x3b0 [ 526.045777][T13100] ? __pfx_sock_read_iter+0x10/0x10 [ 526.050988][T13100] ? bpf_lsm_file_permission+0x9/0x10 [ 526.056370][T13100] ? security_file_permission+0x71/0x210 [ 526.062016][T13100] vfs_read+0xa4c/0xbe0 [ 526.066193][T13100] ? __pfx_vfs_read+0x10/0x10 [ 526.070882][T13100] ? __fget_files+0x40/0x3a0 [ 526.075496][T13100] ksys_read+0x207/0x250 [ 526.079746][T13100] ? __pfx_ksys_read+0x10/0x10 [ 526.084528][T13100] do_syscall_64+0xcd/0x250 [ 526.089047][T13100] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 526.094953][T13100] RIP: 0033:0x7eff8077e819 [ 526.099389][T13100] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 526.119174][T13100] RSP: 002b:00007eff8161d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 526.127599][T13100] RAX: ffffffffffffffda RBX: 00007eff80935fa0 RCX: 00007eff8077e819 [ 526.135579][T13100] RDX: 000000000000004c RSI: 0000000020000000 RDI: 0000000000000003 [ 526.143566][T13100] RBP: 00007eff8161d090 R08: 0000000000000000 R09: 0000000000000000 [ 526.151551][T13100] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 526.159529][T13100] R13: 0000000000000000 R14: 00007eff80935fa0 R15: 00007ffc759062f8 [ 526.167529][T13100] [ 526.416558][T13107] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1726'. [ 526.645255][T13117] FAULT_INJECTION: forcing a failure. [ 526.645255][T13117] name failslab, interval 1, probability 0, space 0, times 0 [ 526.683875][T13117] CPU: 0 UID: 0 PID: 13117 Comm: syz.3.1729 Not tainted 6.12.0-syzkaller-03657-g43fb83c17ba2 #0 [ 526.694359][T13117] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 526.704443][T13117] Call Trace: [ 526.707752][T13117] [ 526.710704][T13117] dump_stack_lvl+0x16c/0x1f0 [ 526.715425][T13117] should_fail_ex+0x497/0x5b0 [ 526.720138][T13117] ? fs_reclaim_acquire+0xae/0x150 [ 526.725308][T13117] should_failslab+0xc2/0x120 [ 526.730015][T13117] __kmalloc_noprof+0xcb/0x410 [ 526.734894][T13117] lsm_blob_alloc+0x68/0x90 [ 526.739433][T13117] security_sk_alloc+0x30/0x270 [ 526.744325][T13117] sk_prot_alloc+0xfb/0x2a0 [ 526.748869][T13117] sk_alloc+0x36/0xb90 [ 526.752980][T13117] unix_create1+0xa6/0x6c0 [ 526.757428][T13117] unix_create+0x10e/0x1d0 [ 526.761878][T13117] __sock_create+0x32e/0x840 [ 526.766507][T13117] __sys_socket+0x14f/0x260 [ 526.771049][T13117] ? __pfx___sys_socket+0x10/0x10 [ 526.776195][T13117] ? ksys_write+0x1ba/0x250 [ 526.780745][T13117] ? __pfx_ksys_write+0x10/0x10 [ 526.785650][T13117] __x64_sys_socket+0x72/0xb0 [ 526.790364][T13117] ? lockdep_hardirqs_on+0x7c/0x110 [ 526.795608][T13117] do_syscall_64+0xcd/0x250 [ 526.800160][T13117] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 526.806088][T13117] RIP: 0033:0x7f2faf37e819 [ 526.810530][T13117] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 526.830180][T13117] RSP: 002b:00007f2fb015e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 526.838629][T13117] RAX: ffffffffffffffda RBX: 00007f2faf535fa0 RCX: 00007f2faf37e819 [ 526.846636][T13117] RDX: 0000000000000001 RSI: 0000000000000001 RDI: 0000000000000001 [ 526.854639][T13117] RBP: 00007f2fb015e090 R08: 0000000000000000 R09: 0000000000000000 [ 526.862641][T13117] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 526.870643][T13117] R13: 0000000000000000 R14: 00007f2faf535fa0 R15: 00007ffc5306e658 [ 526.878670][T13117] [ 528.230530][T13163] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1740'. [ 528.555152][T13150] netlink: 342 bytes leftover after parsing attributes in process `syz.4.1738'. [ 530.241267][T13215] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1758'. [ 532.364848][T13254] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1765'. [ 536.660556][T13337] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1777'. [ 536.737089][T13335] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1778'. [ 538.981383][T13402] FAULT_INJECTION: forcing a failure. [ 538.981383][T13402] name failslab, interval 1, probability 0, space 0, times 0 [ 539.013591][T13402] CPU: 0 UID: 0 PID: 13402 Comm: syz.2.1790 Not tainted 6.12.0-syzkaller-03657-g43fb83c17ba2 #0 [ 539.024068][T13402] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 539.034155][T13402] Call Trace: [ 539.037464][T13402] [ 539.040422][T13402] dump_stack_lvl+0x16c/0x1f0 [ 539.045146][T13402] should_fail_ex+0x497/0x5b0 [ 539.049864][T13402] ? fs_reclaim_acquire+0xae/0x150 [ 539.055021][T13402] should_failslab+0xc2/0x120 [ 539.059731][T13402] kmem_cache_alloc_lru_noprof+0x72/0x2f0 [ 539.065485][T13402] ? __d_alloc+0x35/0x8c0 [ 539.069864][T13402] __d_alloc+0x35/0x8c0 [ 539.074064][T13402] d_alloc_pseudo+0x1c/0xc0 [ 539.078616][T13402] alloc_file_pseudo+0xd2/0x200 [ 539.083503][T13402] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 539.089008][T13402] sock_alloc_file+0x50/0x1d0 [ 539.093730][T13402] do_accept+0x23e/0x530 [ 539.098001][T13402] ? do_raw_spin_lock+0x12d/0x2c0 [ 539.103056][T13402] ? __pfx_do_accept+0x10/0x10 [ 539.107871][T13402] __sys_accept4+0xfe/0x1b0 [ 539.112409][T13402] ? __pfx___sys_accept4+0x10/0x10 [ 539.117549][T13402] ? ksys_write+0x1ba/0x250 [ 539.122091][T13402] ? __pfx_ksys_write+0x10/0x10 [ 539.126999][T13402] __x64_sys_accept+0x74/0xb0 [ 539.131717][T13402] ? lockdep_hardirqs_on+0x7c/0x110 [ 539.136959][T13402] do_syscall_64+0xcd/0x250 [ 539.141506][T13402] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 539.147439][T13402] RIP: 0033:0x7fdb4cd7e819 [ 539.151887][T13402] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 539.171531][T13402] RSP: 002b:00007fdb4dbde038 EFLAGS: 00000246 ORIG_RAX: 000000000000002b [ 539.179980][T13402] RAX: ffffffffffffffda RBX: 00007fdb4cf35fa0 RCX: 00007fdb4cd7e819 [ 539.187979][T13402] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 539.195985][T13402] RBP: 00007fdb4dbde090 R08: 0000000000000000 R09: 0000000000000000 [ 539.203991][T13402] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 539.211987][T13402] R13: 0000000000000000 R14: 00007fdb4cf35fa0 R15: 00007ffcd8b02dd8 [ 539.219996][T13402] [ 539.293542][T13401] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 542.076609][T13499] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1805'. [ 542.410271][T13505] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1807'. [ 543.600350][T13534] FAULT_INJECTION: forcing a failure. [ 543.600350][T13534] name failslab, interval 1, probability 0, space 0, times 0 [ 543.660139][T13534] CPU: 1 UID: 0 PID: 13534 Comm: syz.1.1816 Not tainted 6.12.0-syzkaller-03657-g43fb83c17ba2 #0 [ 543.670607][T13534] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 543.680677][T13534] Call Trace: [ 543.683973][T13534] [ 543.686913][T13534] dump_stack_lvl+0x16c/0x1f0 [ 543.691603][T13534] should_fail_ex+0x497/0x5b0 [ 543.696303][T13534] should_failslab+0xc2/0x120 [ 543.701008][T13534] kmem_cache_alloc_noprof+0x6e/0x2f0 [ 543.706408][T13534] ? skb_clone+0x190/0x3f0 [ 543.710849][T13534] skb_clone+0x190/0x3f0 [ 543.715106][T13534] netlink_deliver_tap+0xb26/0xcf0 [ 543.720255][T13534] netlink_unicast+0x5e1/0x7f0 [ 543.725037][T13534] ? __pfx_netlink_unicast+0x10/0x10 [ 543.730337][T13534] ? __phys_addr_symbol+0x30/0x80 [ 543.735372][T13534] ? __check_object_size+0x488/0x710 [ 543.740685][T13534] netlink_sendmsg+0x8b8/0xd70 [ 543.745458][T13534] ? __pfx_netlink_sendmsg+0x10/0x10 [ 543.750757][T13534] ____sys_sendmsg+0x9ae/0xb40 [ 543.755747][T13534] ? copy_msghdr_from_user+0x10b/0x160 [ 543.761239][T13534] ? __pfx_____sys_sendmsg+0x10/0x10 [ 543.766546][T13534] ___sys_sendmsg+0x135/0x1e0 [ 543.771233][T13534] ? __pfx____sys_sendmsg+0x10/0x10 [ 543.776457][T13534] ? __pfx_lock_release+0x10/0x10 [ 543.781496][T13534] ? trace_lock_acquire+0x14a/0x1d0 [ 543.786716][T13534] ? __fget_files+0x206/0x3a0 [ 543.791429][T13534] __sys_sendmsg+0x16e/0x220 [ 543.796031][T13534] ? __pfx___sys_sendmsg+0x10/0x10 [ 543.801169][T13534] do_syscall_64+0xcd/0x250 [ 543.805688][T13534] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 543.811589][T13534] RIP: 0033:0x7f441017e819 [ 543.816005][T13534] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 543.835654][T13534] RSP: 002b:00007f440dff6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 543.844093][T13534] RAX: ffffffffffffffda RBX: 00007f4410335fa0 RCX: 00007f441017e819 [ 543.852783][T13534] RDX: 0000000000008000 RSI: 0000000020001480 RDI: 0000000000000003 [ 543.860770][T13534] RBP: 00007f440dff6090 R08: 0000000000000000 R09: 0000000000000000 [ 543.868767][T13534] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 543.876749][T13534] R13: 0000000000000000 R14: 00007f4410335fa0 R15: 00007ffe97095458 [ 543.884740][T13534] [ 544.141153][T13540] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1818'. [ 545.387334][T13543] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1819'. [ 546.069072][T13575] FAULT_INJECTION: forcing a failure. [ 546.069072][T13575] name failslab, interval 1, probability 0, space 0, times 0 [ 546.086074][T13575] CPU: 1 UID: 0 PID: 13575 Comm: syz.4.1832 Not tainted 6.12.0-syzkaller-03657-g43fb83c17ba2 #0 [ 546.096555][T13575] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 546.106640][T13575] Call Trace: [ 546.109946][T13575] [ 546.112900][T13575] dump_stack_lvl+0x16c/0x1f0 [ 546.117620][T13575] should_fail_ex+0x497/0x5b0 [ 546.122335][T13575] ? fs_reclaim_acquire+0xae/0x150 [ 546.127496][T13575] should_failslab+0xc2/0x120 [ 546.132211][T13575] __kmalloc_cache_noprof+0x6b/0x310 [ 546.137541][T13575] ? alloc_bprm+0x84/0xc50 [ 546.141995][T13575] alloc_bprm+0x84/0xc50 [ 546.146272][T13575] ? strncpy_from_user+0x1e6/0x2c0 [ 546.151425][T13575] do_execveat_common.isra.0+0x1cd/0x630 [ 546.157100][T13575] __x64_sys_execve+0x8c/0xb0 [ 546.161815][T13575] do_syscall_64+0xcd/0x250 [ 546.166359][T13575] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 546.172507][T13575] RIP: 0033:0x7eff8077e819 [ 546.176953][T13575] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 546.196598][T13575] RSP: 002b:00007eff8161d038 EFLAGS: 00000246 ORIG_RAX: 000000000000003b [ 546.205315][T13575] RAX: ffffffffffffffda RBX: 00007eff80935fa0 RCX: 00007eff8077e819 [ 546.213321][T13575] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000000 [ 546.221320][T13575] RBP: 00007eff8161d090 R08: 0000000000000000 R09: 0000000000000000 [ 546.229328][T13575] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 546.237329][T13575] R13: 0000000000000000 R14: 00007eff80935fa0 R15: 00007ffc759062f8 [ 546.245343][T13575] [ 546.379044][T13589] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1836'. [ 547.068177][T13608] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1845'. [ 547.460896][T13625] FAULT_INJECTION: forcing a failure. [ 547.460896][T13625] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 547.475665][T13625] CPU: 1 UID: 0 PID: 13625 Comm: syz.4.1852 Not tainted 6.12.0-syzkaller-03657-g43fb83c17ba2 #0 [ 547.486124][T13625] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 547.496221][T13625] Call Trace: [ 547.499512][T13625] [ 547.500388][T13627] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1851'. [ 547.502431][T13625] dump_stack_lvl+0x16c/0x1f0 [ 547.516069][T13625] should_fail_ex+0x497/0x5b0 [ 547.520762][T13625] ? fs_reclaim_acquire+0xae/0x150 [ 547.525920][T13625] should_fail_alloc_page+0xe7/0x130 [ 547.531238][T13625] prepare_alloc_pages.constprop.0+0x16f/0x560 [ 547.537434][T13625] ? __lock_acquire+0xcc5/0x3c40 [ 547.542419][T13625] __alloc_pages_noprof+0x190/0x25a0 [ 547.547748][T13625] ? __pfx_mark_lock+0x10/0x10 [ 547.552554][T13625] ? __pfx___lock_acquire+0x10/0x10 [ 547.557793][T13625] ? hlock_class+0x4e/0x130 [ 547.562334][T13625] ? __pfx___alloc_pages_noprof+0x10/0x10 [ 547.568086][T13625] ? find_held_lock+0x2d/0x110 [ 547.572893][T13625] ? hlock_class+0x4e/0x130 [ 547.577428][T13625] ? __lock_acquire+0xcc5/0x3c40 [ 547.582412][T13625] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 547.588348][T13625] ? policy_nodemask+0xea/0x4e0 [ 547.593240][T13625] alloc_pages_mpol_noprof+0x2c9/0x610 [ 547.598739][T13625] ? __pfx_alloc_pages_mpol_noprof+0x10/0x10 [ 547.604778][T13625] ? find_held_lock+0x2d/0x110 [ 547.609595][T13625] folio_alloc_mpol_noprof+0x36/0xd0 [ 547.614931][T13625] shmem_alloc_folio+0x135/0x160 [ 547.619928][T13625] shmem_alloc_and_add_folio+0x48b/0xc00 [ 547.625609][T13625] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 547.631801][T13625] ? shmem_allowable_huge_orders+0xcd/0x3f0 [ 547.637734][T13625] shmem_get_folio_gfp+0x689/0x1530 [ 547.643013][T13625] ? mark_lock+0xb5/0xc60 [ 547.647383][T13625] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 547.653056][T13625] ? __pfx_mark_lock+0x10/0x10 [ 547.657872][T13625] shmem_fault+0x200/0xae0 [ 547.662334][T13625] ? __pfx_shmem_fault+0x10/0x10 [ 547.667319][T13625] ? __pfx_lock_release+0x10/0x10 [ 547.672393][T13625] ? __pfx_filemap_map_pages+0x10/0x10 [ 547.677919][T13625] ? mark_held_locks+0x9f/0xe0 [ 547.682726][T13625] ? pte_alloc_one+0x2a3/0x390 [ 547.687516][T13625] ? __pfx_filemap_map_pages+0x10/0x10 [ 547.692981][T13625] __do_fault+0x10a/0x490 [ 547.697313][T13625] ? __pfx_filemap_map_pages+0x10/0x10 [ 547.702782][T13625] do_pte_missing+0x1a8/0x3e70 [ 547.707571][T13625] ? do_raw_spin_unlock+0x172/0x230 [ 547.712788][T13625] ? __pmd_alloc+0x380/0x860 [ 547.717404][T13625] __handle_mm_fault+0x100a/0x2a10 [ 547.722519][T13625] ? __pfx_mt_find+0x10/0x10 [ 547.727112][T13625] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 547.732850][T13625] ? __pfx___handle_mm_fault+0x10/0x10 [ 547.738337][T13625] ? find_vma+0xc0/0x140 [ 547.742582][T13625] ? __pfx_find_vma+0x10/0x10 [ 547.747258][T13625] handle_mm_fault+0x3fa/0xaa0 [ 547.752026][T13625] do_user_addr_fault+0x7a3/0x13f0 [ 547.757167][T13625] exc_page_fault+0x5c/0xc0 [ 547.761671][T13625] asm_exc_page_fault+0x26/0x30 [ 547.766521][T13625] RIP: 0010:__put_user_4+0x11/0x20 [ 547.771634][T13625] Code: 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 89 cb 48 c1 fb 3f 48 09 d9 0f 01 cb <89> 01 31 c9 0f 01 ca c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 [ 547.791248][T13625] RSP: 0018:ffffc900046a7e28 EFLAGS: 00050246 [ 547.797312][T13625] RAX: 0000000000000004 RBX: 0000000000000000 RCX: 0000000000000000 [ 547.805277][T13625] RDX: ffff888031a40000 RSI: ffffffff88ea45f5 RDI: ffffffff8bb164e0 [ 547.813256][T13625] RBP: 1ffff920008d4fc9 R08: 0000000000000000 R09: fffffbfff203b8aa [ 547.821229][T13625] R10: ffffffff901dc557 R11: 0000000000000000 R12: 0000000000000004 [ 547.829195][T13625] R13: 0000000000000005 R14: 0000000000000004 R15: dffffc0000000000 [ 547.837178][T13625] ? __sys_socketpair+0x115/0x5a0 [ 547.842216][T13625] __sys_socketpair+0x121/0x5a0 [ 547.847082][T13625] ? __pfx___sys_socketpair+0x10/0x10 [ 547.852469][T13625] ? fput+0x67/0x440 [ 547.856360][T13625] ? __pfx_ksys_write+0x10/0x10 [ 547.861215][T13625] __x64_sys_socketpair+0x96/0x100 [ 547.866325][T13625] ? lockdep_hardirqs_on+0x7c/0x110 [ 547.871522][T13625] do_syscall_64+0xcd/0x250 [ 547.876058][T13625] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 547.881990][T13625] RIP: 0033:0x7eff8077e819 [ 547.886420][T13625] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 547.906028][T13625] RSP: 002b:00007eff8161d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 547.914439][T13625] RAX: ffffffffffffffda RBX: 00007eff80935fa0 RCX: 00007eff8077e819 [ 547.922407][T13625] RDX: 8000000000000000 RSI: 0000000000000004 RDI: 000000000000001e [ 547.930384][T13625] RBP: 00007eff8161d090 R08: 0000000000000000 R09: 0000000000000000 [ 547.938370][T13625] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 547.946346][T13625] R13: 0000000000000000 R14: 00007eff80935fa0 R15: 00007ffc759062f8 [ 547.954322][T13625] [ 548.227413][T13639] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1856'. [ 548.425978][T13645] FAULT_INJECTION: forcing a failure. [ 548.425978][T13645] name failslab, interval 1, probability 0, space 0, times 0 [ 548.445662][T13645] CPU: 1 UID: 0 PID: 13645 Comm: syz.4.1858 Not tainted 6.12.0-syzkaller-03657-g43fb83c17ba2 #0 [ 548.456137][T13645] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 548.466312][T13645] Call Trace: [ 548.469621][T13645] [ 548.472581][T13645] dump_stack_lvl+0x16c/0x1f0 [ 548.477391][T13645] should_fail_ex+0x497/0x5b0 [ 548.482107][T13645] ? fs_reclaim_acquire+0xae/0x150 [ 548.487263][T13645] should_failslab+0xc2/0x120 [ 548.491974][T13645] __kmalloc_cache_noprof+0x6b/0x310 [ 548.497300][T13645] ? tomoyo_init_log+0x199/0x1f60 [ 548.502360][T13645] ? format_decode+0x2d4/0xba0 [ 548.507161][T13645] tomoyo_init_log+0x199/0x1f60 [ 548.512040][T13645] ? kasan_save_stack+0x33/0x60 [ 548.516942][T13645] ? kasan_save_track+0x14/0x30 [ 548.521826][T13645] ? kasan_save_free_info+0x3b/0x60 [ 548.527045][T13645] ? __kasan_slab_free+0x51/0x70 [ 548.531994][T13645] ? kfree+0x14f/0x4b0 [ 548.536084][T13645] ? tomoyo_realpath_from_path+0x1b7/0x710 [ 548.541913][T13645] ? __pfx_tomoyo_init_log+0x10/0x10 [ 548.547206][T13645] ? tomoyo_profile+0x47/0x60 [ 548.551893][T13645] ? tomoyo_domain_quota_is_ok+0x301/0x5a0 [ 548.557720][T13645] tomoyo_supervisor+0x30c/0x1180 [ 548.562756][T13645] ? __pfx_tomoyo_supervisor+0x10/0x10 [ 548.568240][T13645] ? mark_held_locks+0x9f/0xe0 [ 548.573020][T13645] ? lockdep_hardirqs_on+0x7c/0x110 [ 548.578227][T13645] ? kfree+0x14f/0x4b0 [ 548.582303][T13645] ? tomoyo_check_path_acl+0xad/0x210 [ 548.587685][T13645] ? tomoyo_check_acl+0x1f7/0x410 [ 548.592728][T13645] tomoyo_path_permission+0x270/0x3b0 [ 548.598129][T13645] tomoyo_path_perm+0x364/0x480 [ 548.603007][T13645] ? __pfx_tomoyo_path_perm+0x10/0x10 [ 548.608395][T13645] ? __pfx___lock_acquire+0x10/0x10 [ 548.613611][T13645] ? lock_acquire.part.0+0x11b/0x380 [ 548.618936][T13645] tomoyo_path_unlink+0x92/0xe0 [ 548.623796][T13645] ? __pfx_tomoyo_path_unlink+0x10/0x10 [ 548.629347][T13645] ? d_lookup+0xe9/0x180 [ 548.633599][T13645] security_path_unlink+0x145/0x2b0 [ 548.638810][T13645] do_unlinkat+0x50b/0x760 [ 548.643238][T13645] ? __might_fault+0xe3/0x190 [ 548.647928][T13645] ? __pfx_do_unlinkat+0x10/0x10 [ 548.652872][T13645] ? __might_fault+0xe3/0x190 [ 548.657567][T13645] ? getname_flags.part.0+0x1c5/0x550 [ 548.662946][T13645] __x64_sys_unlink+0xc5/0x110 [ 548.667720][T13645] do_syscall_64+0xcd/0x250 [ 548.672232][T13645] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 548.678215][T13645] RIP: 0033:0x7eff8077e819 [ 548.682631][T13645] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 548.702247][T13645] RSP: 002b:00007eff8161d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000057 [ 548.710663][T13645] RAX: ffffffffffffffda RBX: 00007eff80935fa0 RCX: 00007eff8077e819 [ 548.718636][T13645] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000000 [ 548.726607][T13645] RBP: 00007eff8161d090 R08: 0000000000000000 R09: 0000000000000000 [ 548.734579][T13645] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 548.742551][T13645] R13: 0000000000000000 R14: 00007eff80935fa0 R15: 00007ffc759062f8 [ 548.750539][T13645] [ 549.161297][T13664] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1866'. [ 549.306953][T13672] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1869'. [ 549.311494][T13673] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1868'. [ 549.451352][T13677] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1871'. [ 551.079532][T13713] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1883'. [ 552.651019][ T55] Bluetooth: hci2: unexpected event 0x04 length: 52 > 10 [ 554.730715][ T55] Bluetooth: hci2: command 0x0406 tx timeout [ 555.039301][T13755] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1898'. [ 556.937964][T13802] nfsd: Unknown parameter '64+0xcd/0x250 [ 556.937964][T13802] <4>[ 548.672232][T13645] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 556.937964][T13802] <4>[ 548.678215][T13645] RIP: 0033:0x7eff8077e819 [ 556.937964][T13802] <4>[ 548.682631][T13645] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 556.937964][T13802] <4>[ 548.702247][T13645] RSP: 002b:00007eff8161d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000057 [ 556.937964][T13802] <4>[ 548.710663][T13645] RAX: ffffffffffffffda RBX: 00007eff80935fa0 RCX: 00007eff8077e819 [ 556.937964][T13802] <4>[ 548.718636][T13645] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000000 [ 556.937964][T13802] <4>[ 548.726607][T13645] RBP: 00007eff8161d090 R08: 0000000000000000 R09: 0000000000000000 [ 556.937964][T13802] <4>[ 548.734579][T13645] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 556.937964][T13802] <4>[ 548.742551][T13645] R13: 0000000000000000 R14: 00007eff80935fa0 R15: 00007ffc759062f8 [ 556.937964][T13802] <4>[ 548.750539][T13645] [ 556.937964][T13802] <4>[ 549.161297][T13664] netlink: 28 bytes l [ 559.017250][T13851] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1929'. [ 560.161858][T13883] FAULT_INJECTION: forcing a failure. [ 560.161858][T13883] name failslab, interval 1, probability 0, space 0, times 0 [ 560.201116][T13883] CPU: 0 UID: 0 PID: 13883 Comm: syz.3.1939 Not tainted 6.12.0-syzkaller-03657-g43fb83c17ba2 #0 [ 560.211686][T13883] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 560.221862][T13883] Call Trace: [ 560.225259][T13883] [ 560.228212][T13883] dump_stack_lvl+0x16c/0x1f0 [ 560.232950][T13883] should_fail_ex+0x497/0x5b0 [ 560.237677][T13883] ? fs_reclaim_acquire+0xae/0x150 [ 560.242842][T13883] should_failslab+0xc2/0x120 [ 560.247559][T13883] kmem_cache_alloc_node_noprof+0x71/0x310 [ 560.253415][T13883] ? __alloc_skb+0x2b3/0x380 [ 560.258053][T13883] __alloc_skb+0x2b3/0x380 [ 560.262513][T13883] ? __pfx___alloc_skb+0x10/0x10 [ 560.267496][T13883] ? genl_rcv_msg+0x4bd/0x800 [ 560.272332][T13883] netlink_ack+0x164/0xb20 [ 560.276902][T13883] netlink_rcv_skb+0x327/0x410 [ 560.281705][T13883] ? __pfx_genl_rcv_msg+0x10/0x10 [ 560.287099][T13883] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 560.292429][T13883] ? down_read+0xc9/0x330 [ 560.296780][T13883] ? __pfx_down_read+0x10/0x10 [ 560.301564][T13883] ? netlink_deliver_tap+0x1ae/0xcf0 [ 560.306876][T13883] genl_rcv+0x28/0x40 [ 560.310868][T13883] netlink_unicast+0x53c/0x7f0 [ 560.315641][T13883] ? __pfx_netlink_unicast+0x10/0x10 [ 560.320931][T13883] ? __phys_addr_symbol+0x30/0x80 [ 560.325968][T13883] ? __check_object_size+0x488/0x710 [ 560.331270][T13883] netlink_sendmsg+0x8b8/0xd70 [ 560.336045][T13883] ? __pfx_netlink_sendmsg+0x10/0x10 [ 560.341343][T13883] ____sys_sendmsg+0x9ae/0xb40 [ 560.346114][T13883] ? copy_msghdr_from_user+0x10b/0x160 [ 560.351581][T13883] ? __pfx_____sys_sendmsg+0x10/0x10 [ 560.356886][T13883] ___sys_sendmsg+0x135/0x1e0 [ 560.361666][T13883] ? __pfx____sys_sendmsg+0x10/0x10 [ 560.366975][T13883] ? __pfx_lock_release+0x10/0x10 [ 560.372034][T13883] ? trace_lock_acquire+0x14a/0x1d0 [ 560.377265][T13883] ? __fget_files+0x206/0x3a0 [ 560.381966][T13883] __sys_sendmsg+0x16e/0x220 [ 560.386576][T13883] ? __pfx___sys_sendmsg+0x10/0x10 [ 560.391733][T13883] do_syscall_64+0xcd/0x250 [ 560.396273][T13883] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 560.402187][T13883] RIP: 0033:0x7f2faf37e819 [ 560.406651][T13883] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 560.426532][T13883] RSP: 002b:00007f2fb015e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 560.435005][T13883] RAX: ffffffffffffffda RBX: 00007f2faf535fa0 RCX: 00007f2faf37e819 [ 560.442991][T13883] RDX: 00000000000480d0 RSI: 00000000200000c0 RDI: 0000000000000003 [ 560.450970][T13883] RBP: 00007f2fb015e090 R08: 0000000000000000 R09: 0000000000000000 [ 560.458942][T13883] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 560.466916][T13883] R13: 0000000000000000 R14: 00007f2faf535fa0 R15: 00007ffc5306e658 [ 560.474912][T13883] [ 561.752316][T13920] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1949'. [ 563.203512][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.212551][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 567.295214][T14033] FAULT_INJECTION: forcing a failure. [ 567.295214][T14033] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 567.372783][T14033] CPU: 1 UID: 0 PID: 14033 Comm: syz.3.1987 Not tainted 6.12.0-syzkaller-03657-g43fb83c17ba2 #0 [ 567.383264][T14033] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 567.393343][T14033] Call Trace: [ 567.396636][T14033] [ 567.399591][T14033] dump_stack_lvl+0x16c/0x1f0 [ 567.404312][T14033] should_fail_ex+0x497/0x5b0 [ 567.409029][T14033] ? fs_reclaim_acquire+0xae/0x150 [ 567.414196][T14033] should_fail_alloc_page+0xe7/0x130 [ 567.419519][T14033] prepare_alloc_pages.constprop.0+0x16f/0x560 [ 567.425723][T14033] ? mark_lock+0xb5/0xc60 [ 567.430096][T14033] __alloc_pages_noprof+0x190/0x25a0 [ 567.435415][T14033] ? __pfx_mark_lock+0x10/0x10 [ 567.440219][T14033] ? lock_acquire.part.0+0x11b/0x380 [ 567.445554][T14033] ? __pte_offset_map_lock+0xf1/0x300 [ 567.450961][T14033] ? reacquire_held_locks+0x20b/0x4c0 [ 567.456378][T14033] ? __pfx___alloc_pages_noprof+0x10/0x10 [ 567.462140][T14033] ? hlock_class+0x4e/0x130 [ 567.466678][T14033] ? __lock_acquire+0xcc5/0x3c40 [ 567.471675][T14033] ? __pfx___might_resched+0x10/0x10 [ 567.477004][T14033] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 567.482948][T14033] ? policy_nodemask+0xea/0x4e0 [ 567.487847][T14033] alloc_pages_mpol_noprof+0x2c9/0x610 [ 567.493352][T14033] ? __pfx_alloc_pages_mpol_noprof+0x10/0x10 [ 567.499373][T14033] ? mt_find+0x82d/0xa20 [ 567.503659][T14033] ? __thp_vma_allowable_orders+0x1ca/0xb30 [ 567.509597][T14033] __pmd_alloc+0x3f/0x860 [ 567.513978][T14033] __handle_mm_fault+0x942/0x2a10 [ 567.519042][T14033] ? __pfx_mt_find+0x10/0x10 [ 567.523676][T14033] ? __pfx___handle_mm_fault+0x10/0x10 [ 567.529211][T14033] handle_mm_fault+0x3fa/0xaa0 [ 567.534022][T14033] __get_user_pages+0x8d9/0x3b50 [ 567.539006][T14033] ? __pfx_mt_find+0x10/0x10 [ 567.543642][T14033] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 567.549335][T14033] ? __pfx___get_user_pages+0x10/0x10 [ 567.554763][T14033] populate_vma_page_range+0x27f/0x3a0 [ 567.560266][T14033] ? __pfx_populate_vma_page_range+0x10/0x10 [ 567.566366][T14033] ? __pfx_find_vma_intersection+0x10/0x10 [ 567.572230][T14033] ? __do_sys_mlockall+0x2f0/0x580 [ 567.577376][T14033] __mm_populate+0x1d6/0x380 [ 567.581999][T14033] ? __pfx___mm_populate+0x10/0x10 [ 567.587146][T14033] ? up_write+0x1b2/0x520 [ 567.591509][T14033] __do_sys_mlockall+0x4df/0x580 [ 567.592496][T14037] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1988'. [ 567.596469][T14033] do_syscall_64+0xcd/0x250 [ 567.609932][T14033] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 567.615860][T14033] RIP: 0033:0x7f2faf37e819 [ 567.620298][T14033] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 567.639940][T14033] RSP: 002b:00007f2fb015e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000097 [ 567.648394][T14033] RAX: ffffffffffffffda RBX: 00007f2faf535fa0 RCX: 00007f2faf37e819 [ 567.656398][T14033] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 567.664400][T14033] RBP: 00007f2fb015e090 R08: 0000000000000000 R09: 0000000000000000 [ 567.672403][T14033] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 567.680403][T14033] R13: 0000000000000000 R14: 00007f2faf535fa0 R15: 00007ffc5306e658 [ 567.688428][T14033] [ 570.835487][T14073] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1998'. [ 575.211988][T14179] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2036'. [ 575.301030][T13741] syz.1.1891 (13741) used greatest stack depth: 17376 bytes left [ 576.448180][T14211] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2044'. [ 577.299438][T14236] netlink: 'syz.1.2053': attribute type 2 has an invalid length. [ 580.527091][T14302] tc_dump_action: action bad kind [ 580.733055][T14313] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2078'. [ 580.797304][T14315] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2076'. [ 582.421331][T14372] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2098'. [ 582.530275][T14369] netlink: 'syz.1.2097': attribute type 46 has an invalid length. [ 582.830538][T14379] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2099'. [ 584.465911][T14416] netlink: zone id is out of range [ 584.487507][T14416] netlink: zone id is out of range [ 584.505345][T14416] netlink: zone id is out of range [ 584.533030][T14416] netlink: get zone limit has 4 unknown bytes [ 584.934308][T14426] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2113'. [ 585.361226][T14435] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 586.077852][T14444] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2120'. [ 586.857819][T14472] openvswitch: netlink: Missing valid actions attribute. [ 587.258635][T14480] FAULT_INJECTION: forcing a failure. [ 587.258635][T14480] name failslab, interval 1, probability 0, space 0, times 0 [ 587.307714][T14480] CPU: 1 UID: 0 PID: 14480 Comm: syz.1.2133 Not tainted 6.12.0-syzkaller-03657-g43fb83c17ba2 #0 [ 587.318184][T14480] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 587.328266][T14480] Call Trace: [ 587.331569][T14480] [ 587.334521][T14480] dump_stack_lvl+0x16c/0x1f0 [ 587.339239][T14480] should_fail_ex+0x497/0x5b0 [ 587.343959][T14480] ? fs_reclaim_acquire+0xae/0x150 [ 587.349117][T14480] should_failslab+0xc2/0x120 [ 587.353818][T14480] kmem_cache_alloc_noprof+0x6e/0x2f0 [ 587.359219][T14480] ? security_inode_alloc+0x3b/0x2b0 [ 587.364559][T14480] security_inode_alloc+0x3b/0x2b0 [ 587.369709][T14480] inode_init_always_gfp+0xce4/0x1030 [ 587.375126][T14480] alloc_inode+0x82/0x230 [ 587.379506][T14480] sock_alloc+0x40/0x280 [ 587.383789][T14480] __sock_create+0xc0/0x840 [ 587.388330][T14480] __sys_socketpair+0x1d9/0x5a0 [ 587.393214][T14480] ? __pfx___sys_socketpair+0x10/0x10 [ 587.398617][T14480] ? fput+0x67/0x440 [ 587.402539][T14480] ? __pfx_ksys_write+0x10/0x10 [ 587.407453][T14480] __x64_sys_socketpair+0x96/0x100 [ 587.412600][T14480] ? lockdep_hardirqs_on+0x7c/0x110 [ 587.417809][T14480] do_syscall_64+0xcd/0x250 [ 587.422328][T14480] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 587.428234][T14480] RIP: 0033:0x7f441017e819 [ 587.432651][T14480] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 587.452265][T14480] RSP: 002b:00007f440dff6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 587.460686][T14480] RAX: ffffffffffffffda RBX: 00007f4410335fa0 RCX: 00007f441017e819 [ 587.468664][T14480] RDX: 8000000000000000 RSI: 0000000000000004 RDI: 000000000000001e [ 587.476635][T14480] RBP: 00007f440dff6090 R08: 0000000000000000 R09: 0000000000000000 [ 587.484608][T14480] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 587.492587][T14480] R13: 0000000000000000 R14: 00007f4410335fa0 R15: 00007ffe97095458 [ 587.500570][T14480] [ 587.616498][T14480] socket: no more sockets [ 588.157253][T14489] netlink: 304 bytes leftover after parsing attributes in process `syz.2.2135'. [ 588.407815][T14497] FAULT_INJECTION: forcing a failure. [ 588.407815][T14497] name failslab, interval 1, probability 0, space 0, times 0 [ 588.440112][T14497] CPU: 1 UID: 0 PID: 14497 Comm: syz.1.2137 Not tainted 6.12.0-syzkaller-03657-g43fb83c17ba2 #0 [ 588.450599][T14497] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 588.460693][T14497] Call Trace: [ 588.464006][T14497] [ 588.466965][T14497] dump_stack_lvl+0x16c/0x1f0 [ 588.471693][T14497] should_fail_ex+0x497/0x5b0 [ 588.476410][T14497] ? fs_reclaim_acquire+0xae/0x150 [ 588.481609][T14497] should_failslab+0xc2/0x120 [ 588.486325][T14497] kmem_cache_alloc_noprof+0x6e/0x2f0 [ 588.491734][T14497] ? __thp_vma_allowable_orders+0x1ca/0xb30 [ 588.497673][T14497] ? __pmd_alloc+0xc3/0x860 [ 588.502227][T14497] __pmd_alloc+0xc3/0x860 [ 588.506577][T14497] __handle_mm_fault+0x942/0x2a10 [ 588.511618][T14497] ? __pfx_mt_find+0x10/0x10 [ 588.516226][T14497] ? __pfx___handle_mm_fault+0x10/0x10 [ 588.521710][T14497] handle_mm_fault+0x3fa/0xaa0 [ 588.526483][T14497] __get_user_pages+0x8d9/0x3b50 [ 588.531436][T14497] ? __pfx_mt_find+0x10/0x10 [ 588.536037][T14497] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 588.541684][T14497] ? __pfx___get_user_pages+0x10/0x10 [ 588.547082][T14497] populate_vma_page_range+0x27f/0x3a0 [ 588.552547][T14497] ? __pfx_populate_vma_page_range+0x10/0x10 [ 588.558530][T14497] ? __pfx_find_vma_intersection+0x10/0x10 [ 588.564349][T14497] ? __do_sys_mlockall+0x2f0/0x580 [ 588.569468][T14497] __mm_populate+0x1d6/0x380 [ 588.574060][T14497] ? __pfx___mm_populate+0x10/0x10 [ 588.579174][T14497] ? up_write+0x1b2/0x520 [ 588.583510][T14497] __do_sys_mlockall+0x4df/0x580 [ 588.588454][T14497] do_syscall_64+0xcd/0x250 [ 588.593147][T14497] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 588.599053][T14497] RIP: 0033:0x7f441017e819 [ 588.603468][T14497] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 588.623154][T14497] RSP: 002b:00007f440dff6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000097 [ 588.631578][T14497] RAX: ffffffffffffffda RBX: 00007f4410335fa0 RCX: 00007f441017e819 [ 588.639551][T14497] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 588.647528][T14497] RBP: 00007f440dff6090 R08: 0000000000000000 R09: 0000000000000000 [ 588.655504][T14497] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 588.663477][T14497] R13: 0000000000000000 R14: 00007f4410335fa0 R15: 00007ffe97095458 [ 588.671465][T14497] [ 588.740314][T14493] can: request_module (can-proto-0) failed. [ 590.775301][T14528] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2146'. [ 591.431104][T14543] netlink: 'syz.3.2149': attribute type 46 has an invalid length. [ 593.271538][T14591] netlink: 'syz.4.2164': attribute type 46 has an invalid length. [ 594.714702][T14628] openvswitch: netlink: Missing valid actions attribute. [ 594.930113][T14634] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2174'. [ 595.132482][T14595] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2163'. [ 595.460197][T14647] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2176'. [ 596.408623][T14656] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2180'. [ 596.565130][T14664] netlink: 'syz.2.2182': attribute type 46 has an invalid length. [ 597.530313][T14689] netlink: 304 bytes leftover after parsing attributes in process `syz.2.2190'. [ 597.616627][T14693] netlink: 304 bytes leftover after parsing attributes in process `syz.1.2191'. [ 599.675207][T14749] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2210'. [ 606.433143][T14901] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2259'. [ 606.452192][T14915] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2263'. [ 606.478286][T14916] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2264'. [ 606.608380][T14918] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2265'. [ 606.624118][T14918] HfR: entered promiscuous mode [ 607.378217][T14938] netlink: 304 bytes leftover after parsing attributes in process `syz.1.2271'. [ 607.633663][T14944] netlink: 304 bytes leftover after parsing attributes in process `syz.1.2272'. [ 609.517094][T14988] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2286'. [ 610.655019][T15010] netlink: 304 bytes leftover after parsing attributes in process `syz.2.2296'. [ 610.946027][T15004] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2294'. [ 611.051057][T15016] openvswitch: netlink: Missing valid actions attribute. [ 611.968835][T15032] netlink: 304 bytes leftover after parsing attributes in process `syz.3.2302'. [ 612.506493][T15048] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2306'. [ 613.612522][T15076] openvswitch: netlink: Missing valid actions attribute. [ 613.799685][T15079] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2320'. [ 615.088737][T15130] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2336'. [ 615.201599][T15121] netlink: 'syz.3.2335': attribute type 46 has an invalid length. [ 615.256755][T15115] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2332'. [ 616.108420][ T5854] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 616.118808][ T5854] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 616.127679][ T5854] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 616.138488][ T5854] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 616.149597][ T5854] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 616.157586][ T5854] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 616.582595][ T53] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 616.758395][ T53] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 616.792651][T15152] chnl_net:caif_netlink_parms(): no params data found [ 616.862866][ T53] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 617.065477][ T53] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 617.241604][T15152] bridge0: port 1(bridge_slave_0) entered blocking state [ 617.248760][T15152] bridge0: port 1(bridge_slave_0) entered disabled state [ 617.256582][T15152] bridge_slave_0: entered allmulticast mode [ 617.271385][T15152] bridge_slave_0: entered promiscuous mode [ 617.284958][T15152] bridge0: port 2(bridge_slave_1) entered blocking state [ 617.292252][T15152] bridge0: port 2(bridge_slave_1) entered disabled state [ 617.304086][T15152] bridge_slave_1: entered allmulticast mode [ 617.311389][T15176] openvswitch: netlink: Missing valid actions attribute. [ 617.311610][T15152] bridge_slave_1: entered promiscuous mode [ 617.556695][T15179] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2351'. [ 617.599127][T15152] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 617.613923][T15152] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 617.673598][ T53] bridge_slave_1: left allmulticast mode [ 617.679310][ T53] bridge_slave_1: left promiscuous mode [ 617.695312][ T53] bridge0: port 2(bridge_slave_1) entered disabled state [ 617.761411][ T53] bridge_slave_0: left allmulticast mode [ 617.767109][ T53] bridge_slave_0: left promiscuous mode [ 617.780818][ T53] bridge0: port 1(bridge_slave_0) entered disabled state [ 618.241166][ T55] Bluetooth: hci4: command tx timeout [ 618.588221][ T53] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 618.606504][ T53] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 618.624789][ T53] bond0 (unregistering): Released all slaves [ 618.814808][T15152] team0: Port device team_slave_0 added [ 618.844499][T15152] team0: Port device team_slave_1 added [ 618.942994][T15152] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 618.967267][T15152] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 619.029101][T15152] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 619.052441][T15152] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 619.059433][T15152] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 619.136598][T15152] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 619.392005][T15228] openvswitch: netlink: Missing valid actions attribute. [ 619.584721][T15152] hsr_slave_0: entered promiscuous mode [ 619.612248][T15152] hsr_slave_1: entered promiscuous mode [ 619.626546][T15152] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 619.634438][T15152] Cannot create hsr debugfs directory [ 619.761595][ T53] hsr_slave_0: left promiscuous mode [ 619.813286][ T53] hsr_slave_1: left promiscuous mode [ 619.843505][ T53] veth1_macvtap: left promiscuous mode [ 619.849085][ T53] veth0_macvtap: left promiscuous mode [ 619.854877][ T53] veth1_vlan: left promiscuous mode [ 619.860377][ T53] veth0_vlan: left promiscuous mode [ 620.320161][ T55] Bluetooth: hci4: command tx timeout [ 620.546141][T15257] netlink: 'syz.1.2375': attribute type 46 has an invalid length. [ 621.050740][ T53] team0 (unregistering): Port device team_slave_1 removed [ 621.162427][ T53] team0 (unregistering): Port device team_slave_0 removed [ 622.400444][ T55] Bluetooth: hci4: command tx timeout [ 623.828317][T15152] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 623.891813][T15152] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 623.947371][T15152] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 624.046439][T15152] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 624.348773][T15152] 8021q: adding VLAN 0 to HW filter on device bond0 [ 624.404985][T15152] 8021q: adding VLAN 0 to HW filter on device team0 [ 624.469069][ T1141] bridge0: port 1(bridge_slave_0) entered blocking state [ 624.476270][ T1141] bridge0: port 1(bridge_slave_0) entered forwarding state [ 624.493729][ T55] Bluetooth: hci4: command tx timeout [ 624.504479][ T1141] bridge0: port 2(bridge_slave_1) entered blocking state [ 624.511669][ T1141] bridge0: port 2(bridge_slave_1) entered forwarding state [ 624.670491][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.677472][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 625.262523][T15152] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 625.380615][T15152] veth0_vlan: entered promiscuous mode [ 625.412176][T15152] veth1_vlan: entered promiscuous mode [ 625.512017][T15152] veth0_macvtap: entered promiscuous mode [ 625.558823][T15152] veth1_macvtap: entered promiscuous mode [ 625.636111][T15152] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 625.670186][T15152] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 625.703060][T15152] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 625.738637][T15152] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 625.770171][T15152] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 625.791242][T15152] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 625.831558][T15152] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 625.890450][T15152] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 625.921277][T15152] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 625.959981][T15152] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 625.975240][T15152] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 625.996722][T15152] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 626.019840][T15152] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 626.044191][T15152] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 626.079563][T15152] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 626.113495][T15152] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 626.134487][T15152] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 626.190035][T15152] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 626.368534][ T1048] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 626.417799][ T1048] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 626.509404][ T3002] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 626.545500][ T3002] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 626.783187][T15400] netlink: 304 bytes leftover after parsing attributes in process `syz.1.2403'. [ 627.954809][ T5854] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 627.964720][ T5854] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 627.980885][ T5854] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 628.004234][ T5854] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 628.027019][ T5854] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 628.038807][ T5854] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 628.340299][T15434] netlink: Conntrack attr has 177 unknown bytes [ 628.644329][T15428] chnl_net:caif_netlink_parms(): no params data found [ 628.898020][T15439] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2410'. [ 628.959647][ T1048] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 629.234186][ T1048] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 629.317563][T15428] bridge0: port 1(bridge_slave_0) entered blocking state [ 629.343351][T15428] bridge0: port 1(bridge_slave_0) entered disabled state [ 629.370213][T15428] bridge_slave_0: entered allmulticast mode [ 629.386072][T15428] bridge_slave_0: entered promiscuous mode [ 629.541175][ T1048] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 629.603139][T15428] bridge0: port 2(bridge_slave_1) entered blocking state [ 629.620211][T15428] bridge0: port 2(bridge_slave_1) entered disabled state [ 629.627512][T15428] bridge_slave_1: entered allmulticast mode [ 629.651314][T15428] bridge_slave_1: entered promiscuous mode [ 629.749154][ T1048] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 629.885161][T15428] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 629.922784][T15428] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 630.080759][ T55] Bluetooth: hci2: command tx timeout [ 630.105926][T15428] team0: Port device team_slave_0 added [ 630.119234][T15428] team0: Port device team_slave_1 added [ 630.143294][T15486] netlink: 304 bytes leftover after parsing attributes in process `syz.4.2423'. [ 630.250940][T15489] nbd: illegal input index -33554433 [ 630.269797][T15428] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 630.277477][T15428] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 630.320864][T15428] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 630.369222][T15489] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2424'. [ 630.391757][T15489] tc_dump_action: action bad kind [ 630.404581][T15428] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 630.412190][T15428] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 630.443708][T15428] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 630.524208][ T1048] bridge_slave_1: left allmulticast mode [ 630.529910][ T1048] bridge_slave_1: left promiscuous mode [ 630.537416][ T1048] bridge0: port 2(bridge_slave_1) entered disabled state [ 630.584491][ T1048] bridge_slave_0: left allmulticast mode [ 630.591160][ T1048] bridge_slave_0: left promiscuous mode [ 630.597909][ T1048] bridge0: port 1(bridge_slave_0) entered disabled state [ 631.323987][ T1048] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 631.347756][ T1048] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 631.376998][ T1048] bond0 (unregistering): Released all slaves [ 631.392421][T15428] hsr_slave_0: entered promiscuous mode [ 631.410355][T15428] hsr_slave_1: entered promiscuous mode [ 631.418474][T15428] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 631.427419][T15428] Cannot create hsr debugfs directory [ 631.485281][T15500] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2427'. [ 632.167512][ T55] Bluetooth: hci2: command tx timeout [ 632.254928][T15531] netlink: 'syz.3.2434': attribute type 46 has an invalid length. [ 632.706281][T15552] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2438'. [ 633.296192][ T1048] hsr_slave_0: left promiscuous mode [ 633.425945][ T1048] hsr_slave_1: left promiscuous mode [ 633.490214][ T1048] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 633.497986][ T1048] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 633.602791][ T1048] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 633.610345][ T1048] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 633.702976][ T1048] veth1_macvtap: left promiscuous mode [ 633.715762][ T1048] veth0_macvtap: left promiscuous mode [ 633.727426][ T1048] veth1_vlan: left promiscuous mode [ 633.741371][ T1048] veth0_vlan: left promiscuous mode [ 634.188809][T15575] netlink: 'syz.3.2445': attribute type 46 has an invalid length. [ 634.240057][ T55] Bluetooth: hci2: command tx timeout [ 635.083337][T15588] netlink: 304 bytes leftover after parsing attributes in process `syz.2.2449'. [ 636.060084][T15598] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2452'. [ 636.178300][ T1048] team0 (unregistering): Port device team_slave_1 removed [ 636.324096][ T5854] Bluetooth: hci2: command tx timeout [ 636.334721][ T1048] team0 (unregistering): Port device team_slave_0 removed [ 636.960097][ T5854] Bluetooth: hci1: command 0x0406 tx timeout [ 638.716328][T15428] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 638.907234][T15428] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 639.048589][T15428] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 639.104723][T15428] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 639.519492][T15428] 8021q: adding VLAN 0 to HW filter on device bond0 [ 639.589814][T15428] 8021q: adding VLAN 0 to HW filter on device team0 [ 639.654106][ T1141] bridge0: port 1(bridge_slave_0) entered blocking state [ 639.661285][ T1141] bridge0: port 1(bridge_slave_0) entered forwarding state [ 639.715008][ T1141] bridge0: port 2(bridge_slave_1) entered blocking state [ 639.723135][ T1141] bridge0: port 2(bridge_slave_1) entered forwarding state [ 639.814464][T15428] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 639.854439][T15428] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 640.211999][T15636] IPVS: length: 11322 != 8 [ 640.595736][T15428] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 640.726754][T15428] veth0_vlan: entered promiscuous mode [ 640.765096][T15428] veth1_vlan: entered promiscuous mode [ 640.859280][T15428] veth0_macvtap: entered promiscuous mode [ 640.894423][T15428] veth1_macvtap: entered promiscuous mode [ 640.945613][T15428] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 640.980065][T15428] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 641.004905][T15428] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 641.036051][T15428] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 641.068898][T15428] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 641.097122][T15428] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 641.126537][T15428] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 641.177705][T15428] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 641.215493][T15428] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 641.241017][T15428] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 641.268636][T15428] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 641.329987][T15428] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 641.358204][T15428] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 641.401532][T15428] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 641.454369][T15428] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 641.497256][T15428] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 641.536365][T15428] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 641.590472][T15428] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 641.898893][ T3002] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 641.949075][ T3002] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 642.053496][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 642.089818][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 642.159212][T15660] openvswitch: netlink: Missing valid actions attribute. [ 643.324254][ T5854] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 643.333639][ T5854] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 643.345337][ T5854] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 643.358389][ T5854] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 643.370622][ T5854] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 643.379652][ T5854] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 643.983949][T15668] chnl_net:caif_netlink_parms(): no params data found [ 644.297297][T15668] bridge0: port 1(bridge_slave_0) entered blocking state [ 644.315590][T15668] bridge0: port 1(bridge_slave_0) entered disabled state [ 644.358910][T15668] bridge_slave_0: entered allmulticast mode [ 644.390502][T15668] bridge_slave_0: entered promiscuous mode [ 644.418623][T15668] bridge0: port 2(bridge_slave_1) entered blocking state [ 644.458708][T15668] bridge0: port 2(bridge_slave_1) entered disabled state [ 644.488070][T15668] bridge_slave_1: entered allmulticast mode [ 644.504346][T15668] bridge_slave_1: entered promiscuous mode [ 644.607726][T15668] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 644.648234][T15668] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 644.743188][T15668] team0: Port device team_slave_0 added [ 644.769863][T15668] team0: Port device team_slave_1 added [ 644.963242][T15668] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 644.981854][T15668] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 645.105619][T15668] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 645.184925][T15668] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 645.205555][T15668] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 645.283833][T15668] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 645.441158][ T5854] Bluetooth: hci0: command tx timeout [ 645.451026][T15668] hsr_slave_0: entered promiscuous mode [ 645.469801][T15668] hsr_slave_1: entered promiscuous mode [ 645.510219][T15681] netlink: 'syz.1.2467': attribute type 46 has an invalid length. [ 645.876150][T15668] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 646.152273][T15668] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 646.250664][T15668] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 646.427899][T15668] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 646.496924][T15692] netlink: 'syz.2.2471': attribute type 46 has an invalid length. [ 646.553847][ T1048] bridge_slave_1: left allmulticast mode [ 646.559558][ T1048] bridge_slave_1: left promiscuous mode [ 646.606925][ T1048] bridge0: port 2(bridge_slave_1) entered disabled state [ 646.648606][T15701] netlink: 304 bytes leftover after parsing attributes in process `syz.4.2474'. [ 646.658861][ T1048] bridge_slave_0: left allmulticast mode [ 646.664615][ T1048] bridge_slave_0: left promiscuous mode [ 646.670732][ T1048] bridge0: port 1(bridge_slave_0) entered disabled state [ 647.477662][ T1048] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 647.496479][ T1048] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 647.520528][ T5854] Bluetooth: hci0: command tx timeout [ 647.525335][ T1048] bond0 (unregistering): Released all slaves [ 647.783954][T15668] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 647.801932][T15668] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 647.828097][T15668] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 647.860332][T15668] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 648.075588][T15668] 8021q: adding VLAN 0 to HW filter on device bond0 [ 648.180192][ T1048] hsr_slave_0: left promiscuous mode [ 648.206113][ T1048] hsr_slave_1: left promiscuous mode [ 648.235221][ T1048] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 648.246404][ T1048] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 648.278754][ T1048] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 648.291546][ T1048] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 648.349266][ T1048] veth1_macvtap: left promiscuous mode [ 648.355135][ T1048] veth0_macvtap: left promiscuous mode [ 648.361675][ T1048] veth1_vlan: left promiscuous mode [ 648.367688][ T1048] veth0_vlan: left promiscuous mode [ 648.718141][T15762] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2493'. [ 649.072566][ T1048] team0 (unregistering): Port device team_slave_1 removed [ 649.118429][ T1048] team0 (unregistering): Port device team_slave_0 removed [ 649.519638][T15668] 8021q: adding VLAN 0 to HW filter on device team0 [ 649.547660][ T3002] bridge0: port 1(bridge_slave_0) entered blocking state [ 649.555163][ T3002] bridge0: port 1(bridge_slave_0) entered forwarding state [ 649.605214][ T3569] bridge0: port 2(bridge_slave_1) entered blocking state [ 649.612364][ T3569] bridge0: port 2(bridge_slave_1) entered forwarding state [ 649.620769][ T5854] Bluetooth: hci0: command tx timeout [ 650.056643][T15668] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 650.173872][T15668] veth0_vlan: entered promiscuous mode [ 650.218426][T15668] veth1_vlan: entered promiscuous mode [ 650.454298][T15668] veth0_macvtap: entered promiscuous mode [ 650.477746][T15668] veth1_macvtap: entered promiscuous mode [ 650.544762][T15668] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 650.581627][T15668] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 650.600031][T15668] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 650.620046][T15668] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 650.630102][T15668] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 650.660034][T15668] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 650.672287][T15668] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 650.712988][T15668] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 650.732842][T15668] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 650.746199][T15668] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 650.758453][T15668] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 650.769213][T15668] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 650.797241][T15668] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 650.826433][T15668] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 650.848503][T15668] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 650.868536][T15668] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 650.891860][T15668] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 650.916420][T15668] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 651.031707][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 651.039574][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 651.075031][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 651.112026][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 651.182340][T15805] netlink: 'syz.2.2506': attribute type 46 has an invalid length. [ 651.695917][ T5854] Bluetooth: hci0: command tx timeout [ 652.983692][T15856] openvswitch: netlink: Missing valid actions attribute. [ 653.310983][T15864] RDS: rds_bind could not find a transport for fe80::300:0:0:0, load rds_tcp or rds_rdma? [ 653.397402][T15868] netlink: 304 bytes leftover after parsing attributes in process `syz.1.2528'. [ 654.608897][T15902] netlink: 304 bytes leftover after parsing attributes in process `syz.4.2539'. [ 654.710378][T15903] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2537'. [ 654.723737][T15899] FAULT_INJECTION: forcing a failure. [ 654.723737][T15899] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 654.783146][T15899] CPU: 1 UID: 0 PID: 15899 Comm: syz.3.2538 Not tainted 6.12.0-syzkaller-03657-g43fb83c17ba2 #0 [ 654.793631][T15899] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 654.803717][T15899] Call Trace: [ 654.807021][T15899] [ 654.809978][T15899] dump_stack_lvl+0x16c/0x1f0 [ 654.814696][T15899] should_fail_ex+0x497/0x5b0 [ 654.819416][T15899] _copy_from_user+0x2e/0xd0 [ 654.824058][T15899] copy_msghdr_from_user+0x99/0x160 [ 654.829297][T15899] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 654.835597][T15899] ___sys_sendmsg+0xff/0x1e0 [ 654.840227][T15899] ? __pfx____sys_sendmsg+0x10/0x10 [ 654.845484][T15899] ? __pfx_lock_release+0x10/0x10 [ 654.850545][T15899] ? trace_lock_acquire+0x14a/0x1d0 [ 654.855765][T15899] ? __fget_files+0x206/0x3a0 [ 654.860466][T15899] __sys_sendmsg+0x16e/0x220 [ 654.865065][T15899] ? __pfx___sys_sendmsg+0x10/0x10 [ 654.870199][T15899] do_syscall_64+0xcd/0x250 [ 654.874712][T15899] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 654.880609][T15899] RIP: 0033:0x7ff9fed7e819 [ 654.885032][T15899] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 654.904654][T15899] RSP: 002b:00007ff9ffb72038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 654.913083][T15899] RAX: ffffffffffffffda RBX: 00007ff9fef35fa0 RCX: 00007ff9fed7e819 [ 654.921061][T15899] RDX: 0000000000040000 RSI: 0000000020000240 RDI: 0000000000000005 [ 654.929031][T15899] RBP: 00007ff9ffb72090 R08: 0000000000000000 R09: 0000000000000000 [ 654.937086][T15899] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 654.945057][T15899] R13: 0000000000000000 R14: 00007ff9fef35fa0 R15: 00007ffc95bec8d8 [ 654.953045][T15899] [ 655.455133][T15913] openvswitch: netlink: Missing valid actions attribute. [ 658.374822][T15969] netlink: 304 bytes leftover after parsing attributes in process `syz.4.2560'. [ 660.089389][T15993] netlink: 'syz.3.2569': attribute type 46 has an invalid length. [ 661.595753][T16026] syz.2.2577(16026): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 663.470095][T16053] netlink: 334 bytes leftover after parsing attributes in process `syz.2.2586'. [ 663.518155][T16053] netlink: 334 bytes leftover after parsing attributes in process `syz.2.2586'. [ 664.114399][T16068] netlink: 'syz.2.2591': attribute type 46 has an invalid length. [ 664.615528][T16093] netlink: 304 bytes leftover after parsing attributes in process `syz.2.2600'. [ 665.840150][T16118] netlink: 'syz.4.2606': attribute type 46 has an invalid length. [ 666.616517][T16134] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2610'. [ 667.237449][T16148] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2614'. [ 667.274665][T16148] veth0_macvtap: left promiscuous mode [ 667.299556][T16148] macvtap0: entered promiscuous mode [ 667.305271][T16148] macvtap0: entered allmulticast mode [ 668.867519][T16184] openvswitch: netlink: Missing valid actions attribute. [ 669.931779][T16205] netlink: 'syz.2.2632': attribute type 46 has an invalid length. [ 670.289238][T16216] netlink: 304 bytes leftover after parsing attributes in process `syz.1.2635'. [ 670.668038][T16230] netlink: 'syz.4.2640': attribute type 46 has an invalid length. [ 671.147834][T16249] netlink: 304 bytes leftover after parsing attributes in process `syz.4.2648'. [ 671.160841][T16248] openvswitch: netlink: Missing valid actions attribute. [ 671.890226][T16268] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2652'. [ 672.570330][T16284] openvswitch: netlink: Missing valid actions attribute. [ 673.480842][T16299] netlink: 'syz.1.2662': attribute type 46 has an invalid length. [ 673.759540][T16313] netlink: 304 bytes leftover after parsing attributes in process `syz.1.2670'. [ 674.887896][T16319] Process accounting resumed [ 675.126200][T16338] netlink: 304 bytes leftover after parsing attributes in process `syz.1.2679'. [ 675.262669][T16336] netlink: 'syz.4.2678': attribute type 46 has an invalid length. [ 679.911214][T16451] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2712'. [ 681.150103][T16485] openvswitch: netlink: Missing valid actions attribute. [ 682.046522][T16501] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2729'. [ 682.094161][T16501] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2729'. [ 683.381288][T16515] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2734'. [ 684.611648][T16540] netlink: 'syz.1.2738': attribute type 46 has an invalid length. [ 685.928794][T16560] Process accounting resumed [ 686.082641][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.089104][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 687.066540][T16583] netlink: 304 bytes leftover after parsing attributes in process `syz.4.2752'. [ 688.530430][T16607] netlink: 304 bytes leftover after parsing attributes in process `syz.3.2763'. [ 688.547364][T16609] openvswitch: netlink: nsh attribute has 14 unknown bytes. [ 691.090168][T16655] openvswitch: netlink: Missing valid actions attribute. [ 691.941679][T16685] netlink: 342 bytes leftover after parsing attributes in process `syz.2.2788'. [ 694.038462][T16732] netlink: 304 bytes leftover after parsing attributes in process `syz.3.2803'. [ 694.273406][T16738] openvswitch: netlink: Missing valid actions attribute. [ 697.305922][T16807] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2824'. [ 697.331822][T16807] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2824'. [ 699.878213][T16852] openvswitch: netlink: Missing valid actions attribute. [ 701.245167][T16876] netlink: 304 bytes leftover after parsing attributes in process `syz.2.2847'. [ 701.692389][T16884] openvswitch: netlink: Missing valid actions attribute. [ 710.790969][T17055] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2898'. [ 714.140122][T17105] netlink: 304 bytes leftover after parsing attributes in process `syz.4.2912'. [ 719.082891][T17230] netlink: 304 bytes leftover after parsing attributes in process `syz.4.2947'. [ 722.083340][T17277] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2961'. [ 722.446496][T17271] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2959'. [ 723.101357][T17304] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2967'. [ 724.361908][T17316] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 725.075111][T17344] nbd: socks must be embedded in a SOCK_ITEM attr [ 729.381264][T17435] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3007'. [ 731.642046][T17460] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3015'. [ 732.471719][T17482] netlink: 338 bytes leftover after parsing attributes in process `syz.2.3020'. [ 734.297147][T17547] netlink: 11 bytes leftover after parsing attributes in process `syz.3.3042'. [ 735.181504][T17575] ${](*{-.,+: entered promiscuous mode [ 738.315488][T17631] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3066'. [ 739.360257][ T55] Bluetooth: hci4: command 0x0406 tx timeout [ 740.897330][T17707] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3086'. [ 741.261023][T17712] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3088'. [ 742.081841][T17741] nbd: socks must be embedded in a SOCK_ITEM attr [ 746.136625][ T11] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 746.342043][ T11] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 746.596466][ T11] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 746.767632][ T11] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 746.788708][ T55] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 746.797753][ T55] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 746.807417][ T55] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 746.815772][ T55] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 746.825539][ T55] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 746.833045][ T55] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 746.873689][T17882] netlink: 186 bytes leftover after parsing attributes in process `syz.4.3140'. [ 747.222118][ T11] bridge_slave_1: left allmulticast mode [ 747.228180][ T11] bridge_slave_1: left promiscuous mode [ 747.238440][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 747.274145][T17872] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3138'. [ 747.298437][ T11] bridge_slave_0: left allmulticast mode [ 747.308898][ T11] bridge_slave_0: left promiscuous mode [ 747.316334][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 747.540459][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.546815][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 748.432605][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 748.445025][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 748.461133][ T11] bond0 (unregistering): Released all slaves [ 748.488029][T17897] netlink: 342 bytes leftover after parsing attributes in process `syz.4.3147'. [ 748.884661][ T55] Bluetooth: hci2: command tx timeout [ 749.108929][T17930] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3153'. [ 749.162881][T17879] chnl_net:caif_netlink_parms(): no params data found [ 749.163752][T17917] workqueue: name exceeds WQ_NAME_LEN. Truncating to: -侞6yռ ka; [ 749.480679][ T11] hsr_slave_0: left promiscuous mode [ 749.492328][ T11] hsr_slave_1: left promiscuous mode [ 749.506740][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 749.528824][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 749.552086][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 749.569895][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 749.626856][ T11] veth1_macvtap: left promiscuous mode [ 749.636094][ T11] veth0_macvtap: left promiscuous mode [ 749.645717][ T11] veth1_vlan: left promiscuous mode [ 749.657054][ T11] veth0_vlan: left promiscuous mode [ 750.861435][ T11] team0 (unregistering): Port device team_slave_1 removed [ 750.941561][ T11] team0 (unregistering): Port device team_slave_0 removed [ 750.961279][ T55] Bluetooth: hci2: command tx timeout [ 752.017132][T17945] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3155'. [ 752.212963][T17879] bridge0: port 1(bridge_slave_0) entered blocking state [ 752.260910][T17879] bridge0: port 1(bridge_slave_0) entered disabled state [ 752.269218][T17879] bridge_slave_0: entered allmulticast mode [ 752.292480][T17879] bridge_slave_0: entered promiscuous mode [ 752.309264][T17879] bridge0: port 2(bridge_slave_1) entered blocking state [ 752.327650][T17879] bridge0: port 2(bridge_slave_1) entered disabled state [ 752.339676][T17879] bridge_slave_1: entered allmulticast mode [ 752.357461][T17879] bridge_slave_1: entered promiscuous mode [ 752.551951][T17879] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 752.592459][T17879] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 752.678601][T17986] could not allocate digest TFM handle [ 752.772580][T18005] netlink: 334 bytes leftover after parsing attributes in process `syz.2.3168'. [ 752.838406][T17993] could not allocate digest TFM handle [ 752.990363][T17879] team0: Port device team_slave_0 added [ 753.056143][ T55] Bluetooth: hci2: command tx timeout [ 753.067091][T17879] team0: Port device team_slave_1 added [ 753.160800][T17879] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 753.200309][T17879] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 753.249713][T17879] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 753.645160][T17879] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 753.666511][T17879] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 753.740466][T17879] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 753.981288][T18022] HSR: entered promiscuous mode [ 754.197305][T17879] hsr_slave_0: entered promiscuous mode [ 754.268924][T17879] hsr_slave_1: entered promiscuous mode [ 754.287181][T17879] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 754.304701][T17879] Cannot create hsr debugfs directory [ 754.934732][T17879] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 754.995786][T17879] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 755.048130][T17879] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 755.120157][ T55] Bluetooth: hci2: command tx timeout [ 755.230060][T17879] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 755.699897][T17879] 8021q: adding VLAN 0 to HW filter on device bond0 [ 755.773019][T17879] 8021q: adding VLAN 0 to HW filter on device team0 [ 755.798001][ T1141] bridge0: port 1(bridge_slave_0) entered blocking state [ 755.805171][ T1141] bridge0: port 1(bridge_slave_0) entered forwarding state [ 755.816187][ T1141] bridge0: port 2(bridge_slave_1) entered blocking state [ 755.823344][ T1141] bridge0: port 2(bridge_slave_1) entered forwarding state [ 756.342947][T17879] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 757.103287][T17879] veth0_vlan: entered promiscuous mode [ 757.134681][T17879] veth1_vlan: entered promiscuous mode [ 757.191174][T17879] veth0_macvtap: entered promiscuous mode [ 757.207451][T17879] veth1_macvtap: entered promiscuous mode [ 757.312749][T17879] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 757.325234][T17879] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 757.347271][T17879] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 757.372876][T17879] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 757.398300][T17879] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 757.429330][T17879] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 757.461636][T17879] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 757.559038][T17879] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 757.623417][T17879] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 757.650051][T17879] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 757.679326][T17879] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 757.709863][T17879] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 757.750360][T17879] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 757.812172][T17879] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 757.852427][T17879] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 757.891825][T17879] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 757.910129][T17879] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 757.918879][T17879] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 758.351183][ T1141] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 758.385452][ T1141] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 758.457354][ T1141] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 758.493322][ T1141] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 768.588612][T18399] bridge0: port 3(bond0) entered blocking state [ 768.605769][T18399] bridge0: port 3(bond0) entered disabled state [ 768.618807][T18399] bond0: entered allmulticast mode [ 768.630218][T18399] bond_slave_0: entered allmulticast mode [ 768.667363][T18399] bond_slave_1: entered allmulticast mode [ 768.721686][T18399] bond0: entered promiscuous mode [ 768.744279][T18399] bond_slave_0: entered promiscuous mode [ 768.767448][T18399] bond_slave_1: entered promiscuous mode [ 768.791312][T18399] bridge0: port 3(bond0) entered blocking state [ 768.797712][T18399] bridge0: port 3(bond0) entered forwarding state [ 769.891659][T18435] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3250'. [ 770.095170][ T5854] Bluetooth: hci0: command 0x0406 tx timeout [ 770.541618][T18452] bridge0: port 3(team0) entered blocking state [ 770.580272][T18452] bridge0: port 3(team0) entered disabled state [ 770.600125][T18452] team0: entered allmulticast mode [ 770.611373][T18452] team_slave_0: entered allmulticast mode [ 770.617154][T18452] team_slave_1: entered allmulticast mode [ 770.651516][T18452] team0: entered promiscuous mode [ 770.656605][T18452] team_slave_0: entered promiscuous mode [ 770.686083][T18452] team_slave_1: entered promiscuous mode [ 770.714607][T18452] bridge0: port 3(team0) entered blocking state [ 770.721017][T18452] bridge0: port 3(team0) entered forwarding state [ 771.006299][T18422] kexec: Could not allocate control_code_buffer [ 771.232537][T18433] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3248'. [ 774.629317][T18506] kexec: Could not allocate control_code_buffer [ 777.534463][T18630] kexec: Could not allocate control_code_buffer [ 778.887292][T18683] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3294'. [ 779.557732][T18683] team0 (unregistering): Port device team_slave_0 removed [ 779.586845][T18683] team0 (unregistering): Port device team_slave_1 removed [ 780.466130][T18719] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3300'. [ 781.938052][T18755] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3307'. [ 782.654499][T18763] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3311'. [ 783.592994][T18777] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3313'. [ 785.923931][T18817] netlink: 48 bytes leftover after parsing attributes in process `syz.5.3323'. [ 787.668694][T18860] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3337'. [ 787.846422][T18867] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3339'. [ 788.250179][T18879] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3343'. [ 789.500506][T18911] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3352'. [ 790.588266][T18933] can: request_module (can-proto-3) failed. [ 797.490213][T19117] netlink: 172 bytes leftover after parsing attributes in process `syz.5.3412'. [ 797.518497][T19117] netlink: 172 bytes leftover after parsing attributes in process `syz.5.3412'. [ 799.043814][T19170] netlink: 50 bytes leftover after parsing attributes in process `syz.4.3427'. [ 808.368466][T19411] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3499'. [ 808.411286][T19411] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 808.424703][T19411] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 808.475682][T19411] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 808.504045][T19411] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 808.569653][T19414] netlink: zone id is out of range [ 808.588592][T19414] netlink: zone id is out of range [ 808.596018][T19414] netlink: zone id is out of range [ 808.608486][T19414] netlink: zone id is out of range [ 808.616964][T19414] netlink: zone id is out of range [ 808.638253][T19414] netlink: zone id is out of range [ 808.963567][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.969963][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 809.053594][T19414] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3500'. [ 811.170515][T19480] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3520'. [ 811.213129][T19480] lo: entered promiscuous mode [ 811.229581][T19480] lo: entered allmulticast mode [ 814.058260][T19551] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3541'. [ 814.088090][T19551] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3541'. [ 814.637518][T19567] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 814.661660][T19567] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 815.394869][T19582] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3548'. [ 816.420451][T19609] netlink: 146 bytes leftover after parsing attributes in process `syz.4.3553'. [ 829.603796][T19710] netlink: 304 bytes leftover after parsing attributes in process `syz.4.3581'. [ 830.546883][T19753] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3589'. [ 830.558983][T19753] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3589'. [ 831.093745][T19769] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3594'. [ 833.590364][T19817] bridge0: port 3(bond0) entered blocking state [ 833.596724][T19817] bridge0: port 3(bond0) entered disabled state [ 833.666603][T19817] bond0: entered allmulticast mode [ 833.781281][T19817] bond_slave_0: entered allmulticast mode [ 833.822053][T19817] bond_slave_1: entered allmulticast mode [ 834.032666][T19817] bond0: entered promiscuous mode [ 834.037764][T19817] bond_slave_0: entered promiscuous mode [ 834.065702][T19831] netlink: 146 bytes leftover after parsing attributes in process `syz.4.3611'. [ 834.079877][T19817] bond_slave_1: entered promiscuous mode [ 834.100761][T19817] bridge0: port 3(bond0) entered blocking state [ 834.107170][T19817] bridge0: port 3(bond0) entered forwarding state [ 864.698321][T19879] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3624'. [ 864.718849][T19879] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3624'. [ 867.734568][T19937] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3637'. [ 868.515872][T19964] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3643'. [ 868.525212][T19964] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3643'. [ 868.976416][T19982] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3645'. [ 869.002562][T19982] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3645'. [ 869.141621][T19992] sysfs: cannot create duplicate filename '/class/ieee80211/-侞6yռ ka;+1)p;!X+@' [ 869.165614][T19992] CPU: 1 UID: 0 PID: 19992 Comm: syz.3.3648 Not tainted 6.12.0-syzkaller-03657-g43fb83c17ba2 #0 [ 869.176105][T19992] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 869.186195][T19992] Call Trace: [ 869.189502][T19992] [ 869.192469][T19992] dump_stack_lvl+0x16c/0x1f0 [ 869.197199][T19992] sysfs_warn_dup+0x7f/0xa0 [ 869.201741][T19992] sysfs_do_create_link_sd+0x124/0x140 [ 869.207291][T19992] sysfs_create_link+0x61/0xc0 [ 869.212099][T19992] device_add+0x62e/0x1a70 [ 869.216559][T19992] ? __pfx_device_add+0x10/0x10 [ 869.221446][T19992] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 869.227456][T19992] ? ieee80211_set_bitrate_flags+0x249/0x6a0 [ 869.233498][T19992] wiphy_register+0x20d7/0x2d30 [ 869.238422][T19992] ? __pfx_wiphy_register+0x10/0x10 [ 869.243682][T19992] ieee80211_register_hw+0x2959/0x3fb0 [ 869.249210][T19992] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 869.255064][T19992] ? net_generic+0xea/0x2a0 [ 869.259628][T19992] ? rcu_is_watching+0x12/0xc0 [ 869.264460][T19992] ? trace_hrtimer_init+0x19d/0x220 [ 869.269725][T19992] ? __hrtimer_init+0x106/0x2c0 [ 869.274609][T19992] mac80211_hwsim_new_radio+0x2c47/0x56c0 [ 869.280379][T19992] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 869.286487][T19992] ? __kmalloc_node_track_caller_noprof+0x22d/0x440 [ 869.293119][T19992] ? hwsim_new_radio_nl+0x9ff/0x12b0 [ 869.298532][T19992] hwsim_new_radio_nl+0xb42/0x12b0 [ 869.303675][T19992] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 869.309252][T19992] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 869.316647][T19992] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 869.324051][T19992] genl_family_rcv_msg_doit+0x202/0x2f0 [ 869.329622][T19992] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 869.335742][T19992] ? bpf_lsm_capable+0x9/0x10 [ 869.340443][T19992] ? security_capable+0x7e/0x260 [ 869.345399][T19992] ? ns_capable+0xd7/0x110 [ 869.349825][T19992] genl_rcv_msg+0x565/0x800 [ 869.354345][T19992] ? __pfx_genl_rcv_msg+0x10/0x10 [ 869.359407][T19992] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 869.364987][T19992] netlink_rcv_skb+0x165/0x410 [ 869.369761][T19992] ? __pfx_genl_rcv_msg+0x10/0x10 [ 869.374797][T19992] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 869.380102][T19992] ? down_read+0xc9/0x330 [ 869.384447][T19992] ? __pfx_down_read+0x10/0x10 [ 869.389225][T19992] ? netlink_deliver_tap+0x1ae/0xcf0 [ 869.394533][T19992] genl_rcv+0x28/0x40 [ 869.398523][T19992] netlink_unicast+0x53c/0x7f0 [ 869.403297][T19992] ? __pfx_netlink_unicast+0x10/0x10 [ 869.408589][T19992] ? __phys_addr_symbol+0x30/0x80 [ 869.413624][T19992] ? __check_object_size+0x488/0x710 [ 869.418936][T19992] netlink_sendmsg+0x8b8/0xd70 [ 869.423715][T19992] ? __pfx_netlink_sendmsg+0x10/0x10 [ 869.429019][T19992] ____sys_sendmsg+0x9ae/0xb40 [ 869.433799][T19992] ? copy_msghdr_from_user+0x10b/0x160 [ 869.439273][T19992] ? __pfx_____sys_sendmsg+0x10/0x10 [ 869.444579][T19992] ___sys_sendmsg+0x135/0x1e0 [ 869.449273][T19992] ? __pfx____sys_sendmsg+0x10/0x10 [ 869.454496][T19992] ? __pfx_aa_sk_perm+0x10/0x10 [ 869.459389][T19992] ? do_futex+0x123/0x350 [ 869.463739][T19992] __sys_sendmsg+0x16e/0x220 [ 869.468343][T19992] ? __pfx___sys_sendmsg+0x10/0x10 [ 869.473467][T19992] ? __x64_sys_futex+0x1e1/0x4c0 [ 869.478434][T19992] do_syscall_64+0xcd/0x250 [ 869.482952][T19992] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 869.488856][T19992] RIP: 0033:0x7ff9fed7e819 [ 869.493285][T19992] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 869.512937][T19992] RSP: 002b:00007ff9ffb72038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 869.521363][T19992] RAX: ffffffffffffffda RBX: 00007ff9fef35fa0 RCX: 00007ff9fed7e819 [ 869.529343][T19992] RDX: 0000000024000054 RSI: 0000000020000000 RDI: 0000000000000001 [ 869.537321][T19992] RBP: 00007ff9fedf175e R08: 0000000000000000 R09: 0000000000000000 [ 869.545298][T19992] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 869.553378][T19992] R13: 0000000000000000 R14: 00007ff9fef35fa0 R15: 00007ffc95bec8d8 [ 869.561386][T19992] [ 870.404557][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.412798][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 872.481946][ T5854] Bluetooth: hci2: command 0x0406 tx timeout [ 879.744081][T20003] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3650'. [ 879.791687][T20003] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3650'. [ 880.720217][T20033] delete_channel: no stack [ 880.911464][T20040] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3661'. [ 880.950106][T20040] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3661'. [ 881.244052][T20047] debugfs: Directory '-侞6yռ ka;+1)p;!X+@' with parent 'ieee80211' already present! [ 881.407011][T20050] debugfs: Directory '-侞6yռ ka;+1)p;!X+@' with parent 'ieee80211' already present! [ 881.661480][T20057] netlink: 304 bytes leftover after parsing attributes in process `syz.2.3665'. [ 883.038229][T20096] netlink: 304 bytes leftover after parsing attributes in process `syz.3.3676'. [ 883.047546][T20097] netlink: 334 bytes leftover after parsing attributes in process `syz.2.3677'. [ 894.811629][T20141] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3690'. [ 894.822096][T20141] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3690'. [ 896.244246][T20192] sysfs: cannot create duplicate filename '/class/ieee80211/-侞6yռ ka;+1)p;!X+@' [ 896.280103][T20192] CPU: 0 UID: 0 PID: 20192 Comm: syz.2.3701 Not tainted 6.12.0-syzkaller-03657-g43fb83c17ba2 #0 [ 896.290594][T20192] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 896.300672][T20192] Call Trace: [ 896.304053][T20192] [ 896.306989][T20192] dump_stack_lvl+0x16c/0x1f0 [ 896.311686][T20192] sysfs_warn_dup+0x7f/0xa0 [ 896.316206][T20192] sysfs_do_create_link_sd+0x124/0x140 [ 896.321681][T20192] sysfs_create_link+0x61/0xc0 [ 896.326459][T20192] device_add+0x62e/0x1a70 [ 896.330916][T20192] ? __pfx_device_add+0x10/0x10 [ 896.335824][T20192] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 896.341754][T20192] ? ieee80211_set_bitrate_flags+0x249/0x6a0 [ 896.347763][T20192] wiphy_register+0x20d7/0x2d30 [ 896.352645][T20192] ? __pfx_wiphy_register+0x10/0x10 [ 896.357878][T20192] ieee80211_register_hw+0x2959/0x3fb0 [ 896.363432][T20192] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 896.369257][T20192] ? net_generic+0xea/0x2a0 [ 896.373784][T20192] ? rcu_is_watching+0x12/0xc0 [ 896.378590][T20192] ? trace_hrtimer_init+0x19d/0x220 [ 896.384072][T20192] ? __hrtimer_init+0x106/0x2c0 [ 896.388934][T20192] mac80211_hwsim_new_radio+0x2c47/0x56c0 [ 896.395040][T20192] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 896.401127][T20192] ? __kmalloc_node_track_caller_noprof+0x22d/0x440 [ 896.407729][T20192] ? hwsim_new_radio_nl+0x9ff/0x12b0 [ 896.413039][T20192] hwsim_new_radio_nl+0xb42/0x12b0 [ 896.418172][T20192] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 896.423747][T20192] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 896.431135][T20192] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 896.438784][T20192] genl_family_rcv_msg_doit+0x202/0x2f0 [ 896.444374][T20192] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 896.450461][T20192] ? bpf_lsm_capable+0x9/0x10 [ 896.455155][T20192] ? security_capable+0x7e/0x260 [ 896.460119][T20192] ? ns_capable+0xd7/0x110 [ 896.464566][T20192] genl_rcv_msg+0x565/0x800 [ 896.469084][T20192] ? __pfx_genl_rcv_msg+0x10/0x10 [ 896.474121][T20192] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 896.479694][T20192] netlink_rcv_skb+0x165/0x410 [ 896.484466][T20192] ? __pfx_genl_rcv_msg+0x10/0x10 [ 896.489502][T20192] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 896.494805][T20192] ? down_read+0xc9/0x330 [ 896.499150][T20192] ? __pfx_down_read+0x10/0x10 [ 896.503926][T20192] ? netlink_deliver_tap+0x1ae/0xcf0 [ 896.509254][T20192] genl_rcv+0x28/0x40 [ 896.513258][T20192] netlink_unicast+0x53c/0x7f0 [ 896.518045][T20192] ? __pfx_netlink_unicast+0x10/0x10 [ 896.523346][T20192] ? __phys_addr_symbol+0x30/0x80 [ 896.528387][T20192] ? __check_object_size+0x488/0x710 [ 896.533695][T20192] netlink_sendmsg+0x8b8/0xd70 [ 896.538472][T20192] ? __pfx_netlink_sendmsg+0x10/0x10 [ 896.543775][T20192] ____sys_sendmsg+0x9ae/0xb40 [ 896.548562][T20192] ? copy_msghdr_from_user+0x10b/0x160 [ 896.554040][T20192] ? __pfx_____sys_sendmsg+0x10/0x10 [ 896.559356][T20192] ___sys_sendmsg+0x135/0x1e0 [ 896.564053][T20192] ? __pfx____sys_sendmsg+0x10/0x10 [ 896.569263][T20192] ? __pfx_aa_sk_perm+0x10/0x10 [ 896.574158][T20192] ? do_futex+0x123/0x350 [ 896.578504][T20192] __sys_sendmsg+0x16e/0x220 [ 896.583106][T20192] ? __pfx___sys_sendmsg+0x10/0x10 [ 896.588227][T20192] ? __x64_sys_futex+0x1e1/0x4c0 [ 896.593191][T20192] do_syscall_64+0xcd/0x250 [ 896.597705][T20192] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 896.603609][T20192] RIP: 0033:0x7fbbdad7e819 [ 896.608028][T20192] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 896.627729][T20192] RSP: 002b:00007fbbdbb1b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 896.636159][T20192] RAX: ffffffffffffffda RBX: 00007fbbdaf35fa0 RCX: 00007fbbdad7e819 [ 896.644139][T20192] RDX: 0000000024000054 RSI: 0000000020000000 RDI: 0000000000000001 [ 896.652121][T20192] RBP: 00007fbbdadf175e R08: 0000000000000000 R09: 0000000000000000 [ 896.660101][T20192] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 896.668084][T20192] R13: 0000000000000000 R14: 00007fbbdaf35fa0 R15: 00007ffcbe457ce8 [ 896.676075][T20192] [ 898.316054][T20225] sysfs: cannot create duplicate filename '/class/ieee80211/-侞6yռ ka;+1)p;!X+@' [ 898.329854][T20225] CPU: 0 UID: 0 PID: 20225 Comm: syz.5.3712 Not tainted 6.12.0-syzkaller-03657-g43fb83c17ba2 #0 [ 898.340338][T20225] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 898.350516][T20225] Call Trace: [ 898.353840][T20225] [ 898.356802][T20225] dump_stack_lvl+0x16c/0x1f0 [ 898.361533][T20225] sysfs_warn_dup+0x7f/0xa0 [ 898.366081][T20225] sysfs_do_create_link_sd+0x124/0x140 [ 898.371589][T20225] sysfs_create_link+0x61/0xc0 [ 898.376393][T20225] device_add+0x62e/0x1a70 [ 898.380848][T20225] ? __pfx_device_add+0x10/0x10 [ 898.385733][T20225] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 898.391685][T20225] ? ieee80211_set_bitrate_flags+0x249/0x6a0 [ 898.397729][T20225] wiphy_register+0x20d7/0x2d30 [ 898.402642][T20225] ? __pfx_wiphy_register+0x10/0x10 [ 898.407945][T20225] ieee80211_register_hw+0x2959/0x3fb0 [ 898.413477][T20225] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 898.419339][T20225] ? net_generic+0xea/0x2a0 [ 898.423903][T20225] ? rcu_is_watching+0x12/0xc0 [ 898.428728][T20225] ? trace_hrtimer_init+0x19d/0x220 [ 898.433966][T20225] ? __hrtimer_init+0x106/0x2c0 [ 898.438858][T20225] mac80211_hwsim_new_radio+0x2c47/0x56c0 [ 898.444668][T20225] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 898.450790][T20225] ? __kmalloc_node_track_caller_noprof+0x22d/0x440 [ 898.457416][T20225] ? hwsim_new_radio_nl+0x9ff/0x12b0 [ 898.462754][T20225] hwsim_new_radio_nl+0xb42/0x12b0 [ 898.467923][T20225] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 898.473547][T20225] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 898.480966][T20225] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 898.488393][T20225] genl_family_rcv_msg_doit+0x202/0x2f0 [ 898.493995][T20225] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 898.500119][T20225] ? bpf_lsm_capable+0x9/0x10 [ 898.504847][T20225] ? security_capable+0x7e/0x260 [ 898.509836][T20225] ? ns_capable+0xd7/0x110 [ 898.514304][T20225] genl_rcv_msg+0x565/0x800 [ 898.518855][T20225] ? __pfx_genl_rcv_msg+0x10/0x10 [ 898.523941][T20225] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 898.529555][T20225] netlink_rcv_skb+0x165/0x410 [ 898.534356][T20225] ? __pfx_genl_rcv_msg+0x10/0x10 [ 898.539399][T20225] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 898.544793][T20225] ? down_read+0xc9/0x330 [ 898.549136][T20225] ? __pfx_down_read+0x10/0x10 [ 898.553923][T20225] ? netlink_deliver_tap+0x1ae/0xcf0 [ 898.559227][T20225] genl_rcv+0x28/0x40 [ 898.563246][T20225] netlink_unicast+0x53c/0x7f0 [ 898.568024][T20225] ? __pfx_netlink_unicast+0x10/0x10 [ 898.573320][T20225] ? __phys_addr_symbol+0x30/0x80 [ 898.578354][T20225] ? __check_object_size+0x488/0x710 [ 898.583662][T20225] netlink_sendmsg+0x8b8/0xd70 [ 898.588436][T20225] ? __pfx_netlink_sendmsg+0x10/0x10 [ 898.593743][T20225] ____sys_sendmsg+0x9ae/0xb40 [ 898.598516][T20225] ? copy_msghdr_from_user+0x10b/0x160 [ 898.603999][T20225] ? __pfx_____sys_sendmsg+0x10/0x10 [ 898.609312][T20225] ___sys_sendmsg+0x135/0x1e0 [ 898.614010][T20225] ? __pfx____sys_sendmsg+0x10/0x10 [ 898.619221][T20225] ? __pfx_aa_sk_perm+0x10/0x10 [ 898.624118][T20225] ? do_futex+0x123/0x350 [ 898.628468][T20225] __sys_sendmsg+0x16e/0x220 [ 898.633081][T20225] ? __pfx___sys_sendmsg+0x10/0x10 [ 898.638204][T20225] ? __x64_sys_futex+0x1e1/0x4c0 [ 898.643172][T20225] do_syscall_64+0xcd/0x250 [ 898.647692][T20225] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 898.653594][T20225] RIP: 0033:0x7fea17f7e819 [ 898.658014][T20225] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 898.677625][T20225] RSP: 002b:00007fea18dc5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 898.686150][T20225] RAX: ffffffffffffffda RBX: 00007fea18135fa0 RCX: 00007fea17f7e819 [ 898.694129][T20225] RDX: 0000000024000054 RSI: 0000000020000000 RDI: 0000000000000001 [ 898.702112][T20225] RBP: 00007fea17ff175e R08: 0000000000000000 R09: 0000000000000000 [ 898.710096][T20225] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 898.718082][T20225] R13: 0000000000000000 R14: 00007fea18135fa0 R15: 00007ffc945c96a8 [ 898.726075][T20225] [ 899.573256][T20250] sysfs: cannot create duplicate filename '/class/ieee80211/-侞6yռ ka;+1)p;!X+@' [ 899.610048][T20250] CPU: 0 UID: 0 PID: 20250 Comm: syz.2.3716 Not tainted 6.12.0-syzkaller-03657-g43fb83c17ba2 #0 [ 899.620533][T20250] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 899.630627][T20250] Call Trace: [ 899.633931][T20250] [ 899.636894][T20250] dump_stack_lvl+0x16c/0x1f0 [ 899.641629][T20250] sysfs_warn_dup+0x7f/0xa0 [ 899.646183][T20250] sysfs_do_create_link_sd+0x124/0x140 [ 899.651696][T20250] sysfs_create_link+0x61/0xc0 [ 899.656512][T20250] device_add+0x62e/0x1a70 [ 899.660977][T20250] ? __pfx_device_add+0x10/0x10 [ 899.665862][T20250] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 899.671810][T20250] ? ieee80211_set_bitrate_flags+0x249/0x6a0 [ 899.677843][T20250] wiphy_register+0x20d7/0x2d30 [ 899.682751][T20250] ? __pfx_wiphy_register+0x10/0x10 [ 899.688008][T20250] ieee80211_register_hw+0x2959/0x3fb0 [ 899.693520][T20250] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 899.699349][T20250] ? net_generic+0xea/0x2a0 [ 899.703875][T20250] ? rcu_is_watching+0x12/0xc0 [ 899.708655][T20250] ? trace_hrtimer_init+0x19d/0x220 [ 899.713861][T20250] ? __hrtimer_init+0x106/0x2c0 [ 899.718809][T20250] mac80211_hwsim_new_radio+0x2c47/0x56c0 [ 899.724568][T20250] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 899.730665][T20250] ? __kmalloc_node_track_caller_noprof+0x22d/0x440 [ 899.737287][T20250] ? hwsim_new_radio_nl+0x9ff/0x12b0 [ 899.742607][T20250] hwsim_new_radio_nl+0xb42/0x12b0 [ 899.747749][T20250] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 899.753322][T20250] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 899.760702][T20250] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 899.768100][T20250] genl_family_rcv_msg_doit+0x202/0x2f0 [ 899.773668][T20250] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 899.779751][T20250] ? bpf_lsm_capable+0x9/0x10 [ 899.784447][T20250] ? security_capable+0x7e/0x260 [ 899.789403][T20250] ? ns_capable+0xd7/0x110 [ 899.793835][T20250] genl_rcv_msg+0x565/0x800 [ 899.798358][T20250] ? __pfx_genl_rcv_msg+0x10/0x10 [ 899.803394][T20250] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 899.808984][T20250] netlink_rcv_skb+0x165/0x410 [ 899.813754][T20250] ? __pfx_genl_rcv_msg+0x10/0x10 [ 899.818788][T20250] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 899.824091][T20250] ? down_read+0xc9/0x330 [ 899.828436][T20250] ? __pfx_down_read+0x10/0x10 [ 899.833226][T20250] ? netlink_deliver_tap+0x1ae/0xcf0 [ 899.838546][T20250] genl_rcv+0x28/0x40 [ 899.842538][T20250] netlink_unicast+0x53c/0x7f0 [ 899.847313][T20250] ? __pfx_netlink_unicast+0x10/0x10 [ 899.852608][T20250] ? __phys_addr_symbol+0x30/0x80 [ 899.857905][T20250] ? __check_object_size+0x488/0x710 [ 899.863213][T20250] netlink_sendmsg+0x8b8/0xd70 [ 899.867993][T20250] ? __pfx_netlink_sendmsg+0x10/0x10 [ 899.873296][T20250] ____sys_sendmsg+0x9ae/0xb40 [ 899.878098][T20250] ? copy_msghdr_from_user+0x10b/0x160 [ 899.883568][T20250] ? __pfx_____sys_sendmsg+0x10/0x10 [ 899.888873][T20250] ___sys_sendmsg+0x135/0x1e0 [ 899.893569][T20250] ? __pfx____sys_sendmsg+0x10/0x10 [ 899.898785][T20250] ? __pfx_aa_sk_perm+0x10/0x10 [ 899.903677][T20250] ? do_futex+0x123/0x350 [ 899.908035][T20250] __sys_sendmsg+0x16e/0x220 [ 899.912640][T20250] ? __pfx___sys_sendmsg+0x10/0x10 [ 899.917762][T20250] ? __x64_sys_futex+0x1e1/0x4c0 [ 899.922749][T20250] do_syscall_64+0xcd/0x250 [ 899.927282][T20250] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 899.933197][T20250] RIP: 0033:0x7fbbdad7e819 [ 899.937622][T20250] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 899.957247][T20250] RSP: 002b:00007fbbdbb1b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 899.965671][T20250] RAX: ffffffffffffffda RBX: 00007fbbdaf35fa0 RCX: 00007fbbdad7e819 [ 899.973657][T20250] RDX: 0000000024000054 RSI: 0000000020000000 RDI: 0000000000000001 [ 899.981632][T20250] RBP: 00007fbbdadf175e R08: 0000000000000000 R09: 0000000000000000 [ 899.989610][T20250] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 899.997587][T20250] R13: 0000000000000000 R14: 00007fbbdaf35fa0 R15: 00007ffcbe457ce8 [ 900.005580][T20250] [ 910.568371][T20274] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3725'. [ 925.817358][T20456] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3771'. [ 925.873996][T20454] sysfs: cannot create duplicate filename '/class/ieee80211/-侞6yռ ka;+1)p;!X+@' [ 925.908770][T20454] CPU: 1 UID: 0 PID: 20454 Comm: syz.3.3770 Not tainted 6.12.0-syzkaller-03657-g43fb83c17ba2 #0 [ 925.919274][T20454] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 925.929367][T20454] Call Trace: [ 925.932673][T20454] [ 925.935633][T20454] dump_stack_lvl+0x16c/0x1f0 [ 925.940360][T20454] sysfs_warn_dup+0x7f/0xa0 [ 925.944903][T20454] sysfs_do_create_link_sd+0x124/0x140 [ 925.950404][T20454] sysfs_create_link+0x61/0xc0 [ 925.955209][T20454] device_add+0x62e/0x1a70 [ 925.959667][T20454] ? __pfx_device_add+0x10/0x10 [ 925.964557][T20454] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 925.970504][T20454] ? ieee80211_set_bitrate_flags+0x249/0x6a0 [ 925.976540][T20454] wiphy_register+0x20d7/0x2d30 [ 925.981444][T20454] ? __pfx_wiphy_register+0x10/0x10 [ 925.986711][T20454] ieee80211_register_hw+0x2959/0x3fb0 [ 925.992240][T20454] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 925.998095][T20454] ? net_generic+0xea/0x2a0 [ 926.002665][T20454] ? rcu_is_watching+0x12/0xc0 [ 926.007454][T20454] ? trace_hrtimer_init+0x19d/0x220 [ 926.012666][T20454] ? __hrtimer_init+0x106/0x2c0 [ 926.017524][T20454] mac80211_hwsim_new_radio+0x2c47/0x56c0 [ 926.023292][T20454] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 926.029553][T20454] ? __kmalloc_node_track_caller_noprof+0x22d/0x440 [ 926.036155][T20454] ? hwsim_new_radio_nl+0x9ff/0x12b0 [ 926.041471][T20454] hwsim_new_radio_nl+0xb42/0x12b0 [ 926.046610][T20454] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 926.052186][T20454] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 926.059575][T20454] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 926.066965][T20454] genl_family_rcv_msg_doit+0x202/0x2f0 [ 926.072525][T20454] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 926.078608][T20454] ? bpf_lsm_capable+0x9/0x10 [ 926.083303][T20454] ? security_capable+0x7e/0x260 [ 926.088261][T20454] ? ns_capable+0xd7/0x110 [ 926.092711][T20454] genl_rcv_msg+0x565/0x800 [ 926.097263][T20454] ? __pfx_genl_rcv_msg+0x10/0x10 [ 926.102311][T20454] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 926.107889][T20454] netlink_rcv_skb+0x165/0x410 [ 926.112662][T20454] ? __pfx_genl_rcv_msg+0x10/0x10 [ 926.117698][T20454] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 926.123004][T20454] ? down_read+0xc9/0x330 [ 926.127346][T20454] ? __pfx_down_read+0x10/0x10 [ 926.132124][T20454] ? netlink_deliver_tap+0x1ae/0xcf0 [ 926.137430][T20454] genl_rcv+0x28/0x40 [ 926.141464][T20454] netlink_unicast+0x53c/0x7f0 [ 926.146255][T20454] ? __pfx_netlink_unicast+0x10/0x10 [ 926.151644][T20454] ? __phys_addr_symbol+0x30/0x80 [ 926.156684][T20454] ? __check_object_size+0x488/0x710 [ 926.161997][T20454] netlink_sendmsg+0x8b8/0xd70 [ 926.166781][T20454] ? __pfx_netlink_sendmsg+0x10/0x10 [ 926.172106][T20454] ____sys_sendmsg+0x9ae/0xb40 [ 926.176877][T20454] ? copy_msghdr_from_user+0x10b/0x160 [ 926.182351][T20454] ? __pfx_____sys_sendmsg+0x10/0x10 [ 926.187653][T20454] ? try_to_wake_up+0x158/0x1490 [ 926.192616][T20454] ___sys_sendmsg+0x135/0x1e0 [ 926.197307][T20454] ? __pfx____sys_sendmsg+0x10/0x10 [ 926.202546][T20454] ? do_futex+0x123/0x350 [ 926.206922][T20454] __sys_sendmsg+0x16e/0x220 [ 926.211553][T20454] ? __pfx___sys_sendmsg+0x10/0x10 [ 926.216677][T20454] ? __x64_sys_futex+0x1e1/0x4c0 [ 926.221645][T20454] do_syscall_64+0xcd/0x250 [ 926.226164][T20454] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 926.232069][T20454] RIP: 0033:0x7ff9fed7e819 [ 926.236515][T20454] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 926.256143][T20454] RSP: 002b:00007ff9ffb72038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 926.264573][T20454] RAX: ffffffffffffffda RBX: 00007ff9fef35fa0 RCX: 00007ff9fed7e819 [ 926.272551][T20454] RDX: 0000000024000054 RSI: 0000000020000000 RDI: 0000000000000001 [ 926.280529][T20454] RBP: 00007ff9fedf175e R08: 0000000000000000 R09: 0000000000000000 [ 926.288505][T20454] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 926.296481][T20454] R13: 0000000000000000 R14: 00007ff9fef35fa0 R15: 00007ffc95bec8d8 [ 926.304502][T20454] [ 926.595313][T20452] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3769'. [ 926.708721][T20476] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3777'. [ 927.952618][ T29] audit: type=1326 audit(4294967430.440:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20488 comm="syz.2.3780" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fbbdad7e819 code=0x0 [ 929.731884][T20504] netlink: 'syz.5.3782': attribute type 1 has an invalid length. [ 929.961341][T20511] netlink: 334 bytes leftover after parsing attributes in process `syz.3.3785'. [ 931.844155][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.853107][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.283031][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.289361][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 1054.732081][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.738429][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 1082.880286][ T30] INFO: task kworker/u8:5:1048 blocked for more than 143 seconds. [ 1082.888182][ T30] Not tainted 6.12.0-syzkaller-03657-g43fb83c17ba2 #0 [ 1082.895946][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1082.904751][ T30] task:kworker/u8:5 state:D stack:23472 pid:1048 tgid:1048 ppid:2 flags:0x00004000 [ 1082.915143][ T30] Workqueue: writeback wb_workfn (flush-8:0) [ 1082.921486][ T30] Call Trace: [ 1082.925350][ T30] [ 1082.928325][ T30] __schedule+0xe5a/0x5ae0 [ 1082.933048][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 1082.938302][ T30] ? __pfx___schedule+0x10/0x10 [ 1082.943267][ T30] ? schedule+0x298/0x350 [ 1082.947616][ T30] ? __pfx_lock_release+0x10/0x10 [ 1082.952790][ T30] ? trace_lock_acquire+0x14a/0x1d0 [ 1082.958018][ T30] ? lock_acquire+0x2f/0xb0 [ 1082.962622][ T30] ? schedule+0x1fd/0x350 [ 1082.966973][ T30] schedule+0xe7/0x350 [ 1082.971198][ T30] io_schedule+0xbf/0x130 [ 1082.975557][ T30] bit_wait_io+0x15/0xe0 [ 1082.979793][ T30] __wait_on_bit+0x62/0x180 [ 1082.984570][ T30] ? __pfx_bit_wait_io+0x10/0x10 [ 1082.989541][ T30] out_of_line_wait_on_bit+0xda/0x110 [ 1082.995055][ T30] ? __pfx_out_of_line_wait_on_bit+0x10/0x10 [ 1083.001368][ T30] ? __pfx_wake_bit_function+0x10/0x10 [ 1083.006853][ T30] do_get_write_access+0x933/0x1270 [ 1083.012221][ T30] jbd2_journal_get_write_access+0x1d6/0x280 [ 1083.018511][ T30] __ext4_journal_get_write_access+0x6a/0x390 [ 1083.024704][ T30] ext4_mb_mark_context+0x176/0xdb0 [ 1083.030868][ T30] ? __pfx_lock_release+0x10/0x10 [ 1083.035940][ T30] ? __pfx_ext4_mb_mark_context+0x10/0x10 [ 1083.041739][ T30] ext4_mb_mark_diskspace_used+0x467/0x8c0 [ 1083.047567][ T30] ? ext4_mb_use_preallocated.constprop.0+0xd2/0x1520 [ 1083.054477][ T30] ? __pfx_ext4_mb_mark_diskspace_used+0x10/0x10 [ 1083.060925][ T30] ? kmem_cache_alloc_noprof+0x174/0x2f0 [ 1083.066580][ T30] ? ext4_mb_new_blocks+0x951/0x4e80 [ 1083.072065][ T30] ext4_mb_new_blocks+0xa33/0x4e80 [ 1083.077220][ T30] ? bh_uptodate_or_lock+0x3c/0x140 [ 1083.082508][ T30] ? __read_extent_tree_block+0x2ca/0x630 [ 1083.088256][ T30] ? __pfx_ext4_mb_new_blocks+0x10/0x10 [ 1083.093975][ T30] ? ext4_ext_search_right+0x2c7/0xb80 [ 1083.099470][ T30] ext4_ext_map_blocks+0x1bca/0x5a30 [ 1083.104857][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 1083.110427][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 1083.115662][ T30] ? stack_depot_save_flags+0x28/0x900 [ 1083.121623][ T30] ? __pfx_ext4_ext_map_blocks+0x10/0x10 [ 1083.127305][ T30] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 1083.133784][ T30] ? rcu_is_watching+0x12/0xc0 [ 1083.138589][ T30] ? trace_lock_acquire+0x14a/0x1d0 [ 1083.143909][ T30] ? ext4_map_blocks+0x352/0x1370 [ 1083.148967][ T30] ? lock_acquire+0x2f/0xb0 [ 1083.153648][ T30] ? ext4_map_blocks+0x352/0x1370 [ 1083.158711][ T30] ? __pfx_down_write+0x10/0x10 [ 1083.163688][ T30] ext4_map_blocks+0x457/0x1370 [ 1083.168580][ T30] ? __pfx_ext4_map_blocks+0x10/0x10 [ 1083.174031][ T30] ? rcu_is_watching+0x12/0xc0 [ 1083.178822][ T30] ? trace_kmem_cache_alloc+0x2d/0xe0 [ 1083.184354][ T30] ext4_do_writepages+0x198c/0x32f0 [ 1083.189596][ T30] ? __pfx_ext4_do_writepages+0x10/0x10 [ 1083.195300][ T30] ? do_writepages+0x1b3/0x820 [ 1083.200399][ T30] ? ext4_writepages+0x303/0x730 [ 1083.205346][ T30] ext4_writepages+0x303/0x730 [ 1083.210265][ T30] ? __pfx_ext4_writepages+0x10/0x10 [ 1083.215609][ T30] ? __pfx_ext4_writepages+0x10/0x10 [ 1083.221193][ T30] do_writepages+0x1b3/0x820 [ 1083.225968][ T30] ? ieee80211_parse_ch_switch_ie+0xd63/0x1ff0 [ 1083.232625][ T30] ? __pfx_do_writepages+0x10/0x10 [ 1083.237785][ T30] ? writeback_sb_inodes+0x3a6/0xfa0 [ 1083.243262][ T30] ? reacquire_held_locks+0x20b/0x4c0 [ 1083.248674][ T30] ? writeback_sb_inodes+0x3a6/0xfa0 [ 1083.254040][ T30] ? find_held_lock+0x2d/0x110 [ 1083.258838][ T30] ? wbc_attach_and_unlock_inode+0xee/0x110 [ 1083.264802][ T30] __writeback_single_inode+0x166/0xfa0 [ 1083.270447][ T30] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1083.275860][ T30] ? __pfx___writeback_single_inode+0x10/0x10 [ 1083.284124][ T30] ? do_raw_spin_unlock+0x172/0x230 [ 1083.289382][ T30] writeback_sb_inodes+0x603/0xfa0 [ 1083.294677][ T30] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 1083.300396][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 1083.305616][ T30] ? _raw_spin_unlock+0x28/0x50 [ 1083.310639][ T30] ? move_expired_inodes+0x5a3/0x850 [ 1083.315988][ T30] __writeback_inodes_wb+0xff/0x2e0 [ 1083.321282][ T30] ? __pfx___writeback_inodes_wb+0x10/0x10 [ 1083.327265][ T30] ? queue_io+0x3f8/0x520 [ 1083.331934][ T30] wb_writeback+0x72d/0xb60 [ 1083.337163][ T30] ? __pfx_wb_writeback+0x10/0x10 [ 1083.342338][ T30] ? get_nr_dirty_inodes+0x171/0x1e0 [ 1083.347658][ T30] wb_workfn+0x8c3/0xbc0 [ 1083.352104][ T30] ? __pfx_wb_workfn+0x10/0x10 [ 1083.356902][ T30] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 1083.362949][ T30] ? lock_acquire+0x2f/0xb0 [ 1083.367493][ T30] ? process_one_work+0x8bb/0x1b30 [ 1083.373088][ T30] process_one_work+0x958/0x1b30 [ 1083.378099][ T30] ? __pfx_batadv_iv_send_outstanding_bat_ogm_packet+0x10/0x10 [ 1083.386040][ T30] ? __pfx_process_one_work+0x10/0x10 [ 1083.391619][ T30] ? assign_work+0x1a0/0x250 [ 1083.396258][ T30] worker_thread+0x6c8/0xf00 [ 1083.400980][ T30] ? __kthread_parkme+0x148/0x220 [ 1083.406047][ T30] ? __pfx_worker_thread+0x10/0x10 [ 1083.411345][ T30] kthread+0x2c1/0x3a0 [ 1083.415440][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 1083.420722][ T30] ? __pfx_kthread+0x10/0x10 [ 1083.425331][ T30] ret_from_fork+0x45/0x80 [ 1083.429890][ T30] ? __pfx_kthread+0x10/0x10 [ 1083.434673][ T30] ret_from_fork_asm+0x1a/0x30 [ 1083.440341][ T30] [ 1083.443457][ T30] INFO: task syz.3.3785:20510 blocked for more than 143 seconds. [ 1083.451322][ T30] Not tainted 6.12.0-syzkaller-03657-g43fb83c17ba2 #0 [ 1083.458618][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1083.467397][ T30] task:syz.3.3785 state:D stack:25808 pid:20510 tgid:20510 ppid:15668 flags:0x00004004 [ 1083.477746][ T30] Call Trace: [ 1083.481124][ T30] [ 1083.484079][ T30] __schedule+0xe5a/0x5ae0 [ 1083.488494][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 1083.493846][ T30] ? hlock_class+0x4e/0x130 [ 1083.498376][ T30] ? mark_lock+0xb5/0xc60 [ 1083.502827][ T30] ? __pfx___schedule+0x10/0x10 [ 1083.507715][ T30] ? schedule+0x298/0x350 [ 1083.512236][ T30] ? __pfx_lock_release+0x10/0x10 [ 1083.517301][ T30] ? trace_lock_acquire+0x14a/0x1d0 [ 1083.522688][ T30] ? lock_acquire+0x2f/0xb0 [ 1083.527234][ T30] ? schedule+0x1fd/0x350 [ 1083.531998][ T30] schedule+0xe7/0x350 [ 1083.536117][ T30] io_schedule+0xbf/0x130 [ 1083.541281][ T30] bit_wait_io+0x15/0xe0 [ 1083.545579][ T30] __wait_on_bit+0x62/0x180 [ 1083.550439][ T30] ? __pfx_bit_wait_io+0x10/0x10 [ 1083.555416][ T30] out_of_line_wait_on_bit+0xda/0x110 [ 1083.560888][ T30] ? __pfx_out_of_line_wait_on_bit+0x10/0x10 [ 1083.566911][ T30] ? __pfx_wake_bit_function+0x10/0x10 [ 1083.572564][ T30] do_get_write_access+0x933/0x1270 [ 1083.577804][ T30] jbd2_journal_get_write_access+0x1d6/0x280 [ 1083.583886][ T30] __ext4_journal_get_write_access+0x6a/0x390 [ 1083.590123][ T30] ext4_reserve_inode_write+0x13b/0x270 [ 1083.595713][ T30] __ext4_mark_inode_dirty+0x1a6/0x890 [ 1083.601254][ T30] ? ext4_dirty_inode+0xd9/0x130 [ 1083.606214][ T30] ? rcu_is_watching+0x12/0xc0 [ 1083.611123][ T30] ? __pfx___ext4_mark_inode_dirty+0x10/0x10 [ 1083.617135][ T30] ? rcu_is_watching+0x12/0xc0 [ 1083.622018][ T30] ? trace_jbd2_handle_start+0x1b4/0x240 [ 1083.627686][ T30] ? jbd2__journal_start+0xf6/0x6a0 [ 1083.633306][ T30] ? __ext4_journal_start_sb+0x358/0x660 [ 1083.638986][ T30] ? __ext4_journal_start_sb+0x206/0x660 [ 1083.645477][ T30] ? ext4_dirty_inode+0xa1/0x130 [ 1083.650622][ T30] ? __pfx_ext4_dirty_inode+0x10/0x10 [ 1083.656035][ T30] ext4_dirty_inode+0xd9/0x130 [ 1083.661091][ T30] ? rcu_is_watching+0x12/0xc0 [ 1083.665898][ T30] __mark_inode_dirty+0x1f6/0xe60 [ 1083.671116][ T30] generic_update_time+0xcf/0xf0 [ 1083.676096][ T30] file_update_time+0x17d/0x1c0 [ 1083.681072][ T30] ext4_page_mkwrite+0x368/0x1760 [ 1083.686135][ T30] ? __pfx_ext4_page_mkwrite+0x10/0x10 [ 1083.691751][ T30] ? lock_acquire+0x2f/0xb0 [ 1083.696289][ T30] ? __pte_offset_map+0x42/0x540 [ 1083.701320][ T30] do_page_mkwrite+0x177/0x380 [ 1083.706108][ T30] do_pte_missing+0x29e/0x3e70 [ 1083.711035][ T30] ? lock_vma_under_rcu+0x13e/0x980 [ 1083.716293][ T30] __handle_mm_fault+0x100a/0x2a10 [ 1083.721512][ T30] ? __pfx_lock_release+0x10/0x10 [ 1083.726585][ T30] ? lock_vma_under_rcu+0x13e/0x980 [ 1083.731946][ T30] ? __pfx___handle_mm_fault+0x10/0x10 [ 1083.737607][ T30] handle_mm_fault+0x3fa/0xaa0 [ 1083.742514][ T30] do_user_addr_fault+0x60d/0x13f0 [ 1083.748264][ T30] exc_page_fault+0x5c/0xc0 [ 1083.752957][ T30] asm_exc_page_fault+0x26/0x30 [ 1083.757856][ T30] RIP: 0033:0x7ff9fec5cd8a [ 1083.762416][ T30] RSP: 002b:00007ffc95bec930 EFLAGS: 00010202 [ 1083.768505][ T30] RAX: 0000001b2ef1b000 RBX: 00007ff9ffa65720 RCX: 0000001b2ef1aff8 [ 1083.777032][ T30] RDX: 0000001b2eb20218 RSI: 0000000000000008 RDI: 00007ff9ffa65720 [ 1083.785142][ T30] RBP: ffffffff8b04f33b R08: 00007ff9fef36118 R09: 00007ff9fef22000 [ 1083.793307][ T30] R10: 00007ff9fdffd008 R11: 0000000000000005 R12: 0000000000000005 [ 1083.801385][ T30] R13: 00000000000001e1 R14: ffffffff8b04f8fc R15: 000000000000023e [ 1083.809369][ T30] ? trace_ma_write+0x4c/0x200 [ 1083.814296][ T30] ? mas_dump+0x2db/0x630 [ 1083.818657][ T30] [ 1083.821799][ T30] [ 1083.821799][ T30] Showing all locks held in the system: [ 1083.829525][ T30] 1 lock held by khungtaskd/30: [ 1083.834567][ T30] #0: ffffffff8ddba680 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x7f/0x390 [ 1083.844985][ T30] 6 locks held by kworker/u8:5/1048: [ 1083.851040][ T30] #0: ffff88801da9e148 ((wq_completion)writeback){+.+.}-{0:0}, at: process_one_work+0x1212/0x1b30 [ 1083.861869][ T30] #1: ffffc90004117d80 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_one_work+0x8bb/0x1b30 [ 1083.873816][ T30] #2: ffff8880331140e0 (&type->s_umount_key#32){++++}-{4:4}, at: super_trylock_shared+0x1e/0xf0 [ 1083.884468][ T30] #3: ffff888033116b98 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: do_writepages+0x1b3/0x820 [ 1083.894925][ T30] #4: ffff88814dc6c958 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0xf6c/0x1430 [ 1083.904575][ T30] #5: ffff88804c733df8 (&ei->i_data_sem){++++}-{4:4}, at: ext4_map_blocks+0x352/0x1370 [ 1083.914515][ T30] 2 locks held by klogd/5211: [ 1083.919215][ T30] 2 locks held by getty/5605: [ 1083.923942][ T30] #0: ffff88814cc050a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 1083.933826][ T30] #1: ffffc90002f062f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0xfba/0x1480 [ 1083.944597][ T30] 4 locks held by syz-executor/5831: [ 1083.950821][ T30] #0: ffff888032af8070 (&vma->vm_lock->lock){++++}-{4:4}, at: lock_vma_under_rcu+0x13e/0x980 [ 1083.961308][ T30] #1: ffff888033114518 (sb_pagefaults){.+.+}-{0:0}, at: do_page_mkwrite+0x177/0x380 [ 1083.970962][ T30] #2: ffff88804c734108 (mapping.invalidate_lock){++++}-{4:4}, at: ext4_page_mkwrite+0x37e/0x1760 [ 1083.981725][ T30] #3: ffff88804c733df8 (&ei->i_data_sem){++++}-{4:4}, at: ext4_da_get_block_prep+0x6a0/0x11e0 [ 1083.992475][ T30] 3 locks held by syz.3.3785/20510: [ 1083.997682][ T30] #0: ffff888031f9ed18 (&vma->vm_lock->lock){++++}-{4:4}, at: lock_vma_under_rcu+0x13e/0x980 [ 1084.008086][ T30] #1: ffff888033114518 (sb_pagefaults){.+.+}-{0:0}, at: do_page_mkwrite+0x177/0x380 [ 1084.017735][ T30] #2: ffff88814dc6c958 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0xf6c/0x1430 [ 1084.027389][ T30] 3 locks held by syz-executor/20554: [ 1084.033016][ T30] #0: ffff888033114420 (sb_writers#4){.+.+}-{0:0}, at: filename_create+0x10d/0x530 [ 1084.042754][ T30] #1: ffff88804c7d0de0 (&type->i_mutex_dir_key#3/1){+.+.}-{4:4}, at: filename_create+0x1c2/0x530 [ 1084.054548][ T30] #2: ffff88814dc6c958 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0xf6c/0x1430 [ 1084.064315][ T30] [ 1084.066643][ T30] ============================================= [ 1084.066643][ T30] [ 1084.075207][ T30] NMI backtrace for cpu 1 [ 1084.079541][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.12.0-syzkaller-03657-g43fb83c17ba2 #0 [ 1084.089685][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 1084.099731][ T30] Call Trace: [ 1084.103000][ T30] [ 1084.105918][ T30] dump_stack_lvl+0x116/0x1f0 [ 1084.110597][ T30] nmi_cpu_backtrace+0x27b/0x390 [ 1084.115526][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1084.121508][ T30] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 1084.127479][ T30] watchdog+0xf0c/0x1240 [ 1084.131743][ T30] ? __pfx_watchdog+0x10/0x10 [ 1084.136445][ T30] ? lockdep_hardirqs_on+0x7c/0x110 [ 1084.141642][ T30] ? __kthread_parkme+0x148/0x220 [ 1084.146678][ T30] ? __pfx_watchdog+0x10/0x10 [ 1084.151356][ T30] kthread+0x2c1/0x3a0 [ 1084.155419][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 1084.160611][ T30] ? __pfx_kthread+0x10/0x10 [ 1084.165193][ T30] ret_from_fork+0x45/0x80 [ 1084.169597][ T30] ? __pfx_kthread+0x10/0x10 [ 1084.174177][ T30] ret_from_fork_asm+0x1a/0x30 [ 1084.178943][ T30] [ 1084.182653][ T30] Sending NMI from CPU 1 to CPUs 0: [ 1084.188379][ C0] NMI backtrace for cpu 0 [ 1084.188391][ C0] CPU: 0 UID: 0 PID: 5211 Comm: klogd Not tainted 6.12.0-syzkaller-03657-g43fb83c17ba2 #0 [ 1084.188416][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 1084.188427][ C0] RIP: 0010:unwind_next_frame+0x50b/0x20c0 [ 1084.188455][ C0] Code: 00 0f b6 41 05 83 e0 07 0f 84 61 fe ff ff 3c 01 0f 84 89 fe ff ff 4c 8d 49 04 4c 89 fe 48 b8 00 00 00 00 00 fc ff df 4c 89 ca <48> c1 ee 03 48 c1 ea 03 0f b6 14 02 0f b6 04 06 4c 89 ce 83 e6 07 [ 1084.188474][ C0] RSP: 0018:ffffc900033bf4a0 EFLAGS: 00000202 [ 1084.188491][ C0] RAX: dffffc0000000000 RBX: 0000000000000001 RCX: ffffffff915fd3be [ 1084.188505][ C0] RDX: ffffffff915fd3c2 RSI: ffffffff915fd3c3 RDI: ffffffff90a45da8 [ 1084.188519][ C0] RBP: ffffc900033bf558 R08: ffffffff915fd484 R09: ffffffff915fd3c2 [ 1084.188534][ C0] R10: ffffc900033bf510 R11: 00000000000a2001 R12: ffffc900033bf560 [ 1084.188548][ C0] R13: ffffc900033bf510 R14: ffffc900033bf545 R15: ffffffff915fd3c3 [ 1084.188562][ C0] FS: 00007f9b271ea380(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 1084.188583][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1084.188598][ C0] CR2: 000055edf625fd98 CR3: 000000002fd7e000 CR4: 00000000003526f0 [ 1084.188611][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1084.188623][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1084.188637][ C0] Call Trace: [ 1084.188643][ C0] [ 1084.188650][ C0] ? nmi_cpu_backtrace+0x1d8/0x390 [ 1084.188673][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 1084.188701][ C0] ? nmi_handle+0x1a9/0x5c0 [ 1084.188723][ C0] ? unwind_next_frame+0x50b/0x20c0 [ 1084.188744][ C0] ? default_do_nmi+0x6a/0x160 [ 1084.188763][ C0] ? exc_nmi+0x170/0x1e0 [ 1084.188781][ C0] ? end_repeat_nmi+0xf/0x53 [ 1084.188811][ C0] ? unwind_next_frame+0x50b/0x20c0 [ 1084.188832][ C0] ? unwind_next_frame+0x50b/0x20c0 [ 1084.188854][ C0] ? unwind_next_frame+0x50b/0x20c0 [ 1084.188875][ C0] [ 1084.188881][ C0] [ 1084.188888][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1084.188914][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1084.188939][ C0] arch_stack_walk+0x95/0x100 [ 1084.188963][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1084.188990][ C0] stack_trace_save+0x95/0xd0 [ 1084.189011][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 1084.189037][ C0] save_stack+0x162/0x1f0 [ 1084.189063][ C0] ? __pfx_save_stack+0x10/0x10 [ 1084.189088][ C0] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 1084.189123][ C0] ? free_unref_page+0x661/0x1080 [ 1084.189150][ C0] ? __put_partials+0x14c/0x170 [ 1084.189176][ C0] ? qlist_free_all+0x4e/0x120 [ 1084.189203][ C0] ? kasan_quarantine_reduce+0x195/0x1e0 [ 1084.189230][ C0] ? __kasan_slab_alloc+0x69/0x90 [ 1084.189248][ C0] ? kmem_cache_alloc_node_noprof+0x153/0x310 [ 1084.189267][ C0] ? __alloc_skb+0x2b3/0x380 [ 1084.189290][ C0] ? alloc_skb_with_frags+0xe4/0x850 [ 1084.189317][ C0] ? sock_alloc_send_pskb+0x7f1/0x980 [ 1084.189340][ C0] ? unix_dgram_sendmsg+0x46c/0x1940 [ 1084.189366][ C0] ? __sys_sendto+0x488/0x4f0 [ 1084.189388][ C0] ? __x64_sys_sendto+0xe0/0x1c0 [ 1084.189409][ C0] ? do_syscall_64+0xcd/0x250 [ 1084.189433][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1084.189460][ C0] __reset_page_owner+0x8d/0x400 [ 1084.189490][ C0] free_unref_page+0x661/0x1080 [ 1084.189520][ C0] __put_partials+0x14c/0x170 [ 1084.189548][ C0] qlist_free_all+0x4e/0x120 [ 1084.189576][ C0] kasan_quarantine_reduce+0x195/0x1e0 [ 1084.189604][ C0] __kasan_slab_alloc+0x69/0x90 [ 1084.189623][ C0] kmem_cache_alloc_node_noprof+0x153/0x310 [ 1084.189642][ C0] ? __alloc_skb+0x2b3/0x380 [ 1084.189667][ C0] __alloc_skb+0x2b3/0x380 [ 1084.189690][ C0] ? __pfx___alloc_skb+0x10/0x10 [ 1084.189712][ C0] ? hlock_class+0x4e/0x130 [ 1084.189734][ C0] ? __lock_acquire+0x14b0/0x3c40 [ 1084.189765][ C0] alloc_skb_with_frags+0xe4/0x850 [ 1084.189794][ C0] ? mark_lock+0xb5/0xc60 [ 1084.189821][ C0] sock_alloc_send_pskb+0x7f1/0x980 [ 1084.189849][ C0] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 1084.189873][ C0] ? __pfx_lock_release+0x10/0x10 [ 1084.189904][ C0] ? do_raw_spin_lock+0x12d/0x2c0 [ 1084.189924][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1084.189946][ C0] ? lock_acquire+0x2f/0xb0 [ 1084.189972][ C0] ? unix_dgram_sendmsg+0x8c8/0x1940 [ 1084.189999][ C0] unix_dgram_sendmsg+0x46c/0x1940 [ 1084.190027][ C0] ? aa_sk_perm+0x2f5/0xb20 [ 1084.190056][ C0] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 1084.190082][ C0] ? __pfx_aa_sk_perm+0x10/0x10 [ 1084.190118][ C0] __sys_sendto+0x488/0x4f0 [ 1084.190141][ C0] ? __pfx___sys_sendto+0x10/0x10 [ 1084.190168][ C0] ? rcu_is_watching+0x12/0xc0 [ 1084.190196][ C0] ? __pfx_mem_cgroup_handle_over_high+0x10/0x10 [ 1084.190226][ C0] ? rcu_is_watching+0x12/0xc0 [ 1084.190250][ C0] __x64_sys_sendto+0xe0/0x1c0 [ 1084.190272][ C0] ? do_syscall_64+0x91/0x250 [ 1084.190295][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 1084.190318][ C0] do_syscall_64+0xcd/0x250 [ 1084.190343][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1084.190366][ C0] RIP: 0033:0x7f9b2734c9b5 [ 1084.190381][ C0] Code: 8b 44 24 08 48 83 c4 28 48 98 c3 48 98 c3 41 89 ca 64 8b 04 25 18 00 00 00 85 c0 75 26 45 31 c9 45 31 c0 b8 2c 00 00 00 0f 05 <48> 3d 00 f0 ff ff 76 7a 48 8b 15 44 c4 0c 00 f7 d8 64 89 02 48 83 [ 1084.190400][ C0] RSP: 002b:00007ffd1547ca98 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1084.190419][ C0] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007f9b2734c9b5 [ 1084.190432][ C0] RDX: 000000000000008c RSI: 000055aec60793e0 RDI: 0000000000000003 [ 1084.190445][ C0] RBP: 000055aec6073910 R08: 0000000000000000 R09: 0000000000000000 [ 1084.190458][ C0] R10: 0000000000004000 R11: 0000000000000246 R12: 0000000000000013 [ 1084.190471][ C0] R13: 00007f9b274da212 R14: 00007ffd1547cb98 R15: 0000000000000000 [ 1084.190491][ C0] [ 1084.191548][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 1084.191562][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.12.0-syzkaller-03657-g43fb83c17ba2 #0 [ 1084.191590][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 1084.191604][ T30] Call Trace: [ 1084.191611][ T30] [ 1084.191621][ T30] dump_stack_lvl+0x3d/0x1f0 [ 1084.191654][ T30] panic+0x71d/0x800 [ 1084.191685][ T30] ? __pfx_panic+0x10/0x10 [ 1084.191715][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 1084.191745][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1084.191778][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 1084.191805][ T30] ? watchdog+0xd76/0x1240 [ 1084.191838][ T30] ? watchdog+0xd69/0x1240 [ 1084.191880][ T30] watchdog+0xd87/0x1240 [ 1084.191919][ T30] ? __pfx_watchdog+0x10/0x10 [ 1084.191951][ T30] ? lockdep_hardirqs_on+0x7c/0x110 [ 1084.191980][ T30] ? __kthread_parkme+0x148/0x220 [ 1084.192011][ T30] ? __pfx_watchdog+0x10/0x10 [ 1084.192043][ T30] kthread+0x2c1/0x3a0 [ 1084.192069][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 1084.192094][ T30] ? __pfx_kthread+0x10/0x10 [ 1084.192122][ T30] ret_from_fork+0x45/0x80 [ 1084.192143][ T30] ? __pfx_kthread+0x10/0x10 [ 1084.192171][ T30] ret_from_fork_asm+0x1a/0x30 [ 1084.192216][ T30] [ 1084.880509][ T30] Kernel Offset: disabled [ 1084.884918][ T30] Rebooting in 86400 seconds..