last executing test programs: 8.26419586s ago: executing program 1 (id=461): unshare$auto(0xfffffffffffffff5) mmap$auto(0xfffffffffffffffc, 0x2020009, 0x7f, 0x200000000eb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0xfffffffffffffffc, 0x18, 0x40017) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) futex_requeue$auto(0x0, 0x80, 0x2, 0x101) bpf$auto(0x23, 0x0, 0x101) socket$nl_generic(0x10, 0x3, 0x10) clone$auto(0x100000001, 0x2, 0x0, 0x0, 0xfffffffffffffffe) socket(0x18, 0x5, 0x2) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) unshare$auto(0x40000080) mmap$auto(0x6, 0x4, 0xdf, 0x9b72, 0x2, 0xe4) close_range$auto(0x2, 0x8, 0x0) r0 = memfd_create$auto(0x0, 0x4) socket(0x28, 0x3, 0x20001fe) connect$auto(0x3, &(0x7f00000000c0), 0x55) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x2, 0x8000) mmap$auto(0xc682, 0x9, 0x101, 0x9b72, 0xffffffffffffffff, 0x200000000008000) madvise$auto(0x0, 0x5075, 0x19) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0xffffffffffff0001, 0x15) mmap$auto(0x3, 0x2020009, 0x7, 0x7b1, r0, 0xb) getrandom$auto(0x0, 0x6000000, 0x3) ioctl$auto(0xc8, 0x400454d9, 0x5c8d) mlockall$auto(0x7) r1 = openat$auto_trace_fops_debugfs(0xffffffffffffff9c, &(0x7f0000000000), 0x84000, 0x0) mmap$auto(0x1, 0x20006, 0x4000000000df, 0xebd, r1, 0x8000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, 0x0, 0x1, 0x0, 0x28, 0x9}, 0x7}, 0x5, 0x0) socket(0x10, 0x2, 0x0) 7.34659909s ago: executing program 2 (id=467): openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000000), 0x90680, 0x0) (async) openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000000), 0x90680, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r0, @ANYRESDEC], 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x885) (async) sendmsg$auto_ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r0, @ANYRESDEC], 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x885) mmap$auto(0x0, 0x400005, 0xfffffffffffffffe, 0x9b72, 0x2, 0x1) (async) mmap$auto(0x0, 0x400005, 0xfffffffffffffffe, 0x9b72, 0x2, 0x1) timer_create$auto(0x4, 0x0, 0x0) socket(0x2a, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000080), 0x6b) (async) bind$auto(0x3, &(0x7f0000000080), 0x6b) connect$auto(0x3, &(0x7f00000000c0), 0x55) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) (async) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) fcntl$auto(0xffffffffffffffff, 0x401, 0x5) (async) fcntl$auto(0xffffffffffffffff, 0x401, 0x5) sendmsg$auto_OVS_METER_CMD_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc0}, 0x40) (async) sendmsg$auto_OVS_METER_CMD_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc0}, 0x40) setsockopt$auto(0xffffffffffffffff, 0x4, 0x8001, 0x0, 0x2) (async) setsockopt$auto(0xffffffffffffffff, 0x4, 0x8001, 0x0, 0x2) unshare$auto(0x40000080) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) sysfs$auto(0x2, 0x10000000000002d, 0x0) mbind$auto(0x0, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) gettid() connect$auto(0xffffffffffffffff, 0x0, 0x55) (async) connect$auto(0xffffffffffffffff, 0x0, 0x55) mmap$auto(0x0, 0x5, 0x3, 0x16, 0x3, 0x8000) writev$auto(0x1, &(0x7f0000000100)={0x0, 0x400000000000fdef}, 0x1) (async) writev$auto(0x1, &(0x7f0000000100)={0x0, 0x400000000000fdef}, 0x1) madvise$auto(0xfffffffffffffffd, 0x20200, 0x9) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r1 = open(&(0x7f0000000200)='./cgroup\x00', 0x14501, 0x20) fchdir$auto(r1) open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x100) fcntl$auto(0x3, 0x400, 0x1) close_range$auto(0x2, 0x8, 0x0) mprotect$auto(0x1ffff000, 0x8000000000000001, 0xd) 6.062175684s ago: executing program 1 (id=473): openat$auto_configfs_file_operations_configfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/config/nvmet/discovery_nqn\x00', 0x189002, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_handshake(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$auto_HANDSHAKE_CMD_ACCEPT(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000b2bdadaada6571896a6f6fb3531a26b95e78b3d86343057afe687b28024c4e121fe393d9cec1655a60cb274f49d547ceee15d5b9d94c4fa3d2f57597f91141972a0d0392c1377c9fc8f3997644d5d6bf25741cd6eaf26cb5e542acaada3f239084ca9b7a1647eb38495bd0f68d29beca6b52929277c3d6", @ANYRES16=r1, @ANYBLOB="010027bd700000dcdf25020000000800020002000000"], 0x1c}, 0x1, 0x0, 0x0, 0x2840}, 0x2004881c) acct$auto(&(0x7f0000000140)='/sys/kernel/config/nvmet/discovery_nqn\x00') openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS1\x00', 0x20400, 0x0) move_pages$auto(0x1, 0xf54, 0x0, 0x0, 0x0, 0x8000000000000000) mmap$auto(0x0, 0x20009, 0xe3, 0x100000eb1, 0x40000000000a1, 0x8000) r2 = syz_clone(0x5000400, 0x0, 0x0, 0x0, 0x0, 0x0) wait4$auto(r2, 0x0, 0xc0000000, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_taskstats(&(0x7f0000000d80), r3) sendmsg$auto_CGROUPSTATS_CMD_GET(r3, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000e00)={&(0x7f0000000dc0)={0x1c, r4, 0x1, 0x70bd29, 0x25dfdbff, {}, [@CGROUPSTATS_CMD_ATTR_FD={0x8, 0x1, r3}]}, 0x1c}}, 0x20000004) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r5 = openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) ioctl$auto_VHOST_VSOCK_SET_RUNNING(r5, 0x4004af61, 0x0) fsopen$auto(&(0x7f0000000000)='nlctrl\x00', 0x3) socketpair$auto(0xf, 0x7fff, 0x4, &(0x7f00000000c0)=0xe9) mmap$auto(0x0, 0x9, 0x400000072, 0x8b72, 0x1000000002, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) readv$auto(0x0, &(0x7f0000000080)={&(0x7f0000000040), 0x6}, 0x7ff) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000001180)={&(0x7f0000001100)={0x14, 0x0, 0x301, 0x70bd25, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20000800}, 0xc040810) r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/platform/i8042/serio0/extra\x00', 0x0, 0x0) read$auto(r6, &(0x7f00000000c0)='/sys/devices/platform/vhci_hcd.7/usb23/23-0:1.0/ep_81/interval\x00', 0x3) mmap$auto(0x0, 0x20006, 0x4000000000df, 0xeb1, 0x4, 0x8000) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7fffffe) read$auto(0x4, 0x0, 0xfdef) 5.928981144s ago: executing program 2 (id=474): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_seg6(&(0x7f0000000480), r0) prctl$auto(0x4a, 0x4, 0x8, 0x7, 0xffffffffffff7658) madvise$auto(0x0, 0x2000040080000004, 0xe) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x402, 0x300000000000) socket$nl_generic(0x10, 0x3, 0x10) move_pages$auto(0x1, 0x2000000000003, 0xffffffffffffffff, 0x0, 0x0, 0x8000000000000000) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x402, 0x300000000000) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)) getdents$auto(0x600000000, 0xfffffffffffffffd, 0xd00) setsockopt$auto(0x3, 0x29, 0x39, 0xffffffffffffffff, 0x1) close_range$auto(r0, 0xfffffffffffff000, 0x2) socket(0xa, 0x3, 0x6) mbind$auto(0xf000, 0x8000000000000001, 0x100000000, 0x0, 0x6, 0x2) clone$auto(0x0, 0x5, 0xfffffffffffffffc, 0xfffffffffffffffd, 0x9) pipe2$auto(0x0, 0x80) sendmsg$auto_SEG6_CMD_SETHMAC(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000c40)=ANY=[@ANYBLOB="9e7cf900", @ANYRES16=r1, @ANYBLOB="010028bd7000fddbdf2501000000050005000000000008000300060000000500060002000000"], 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x40000) socket$nl_generic(0x10, 0x3, 0x10) 5.286239005s ago: executing program 2 (id=478): write$auto(0x1, &(0x7f0000000000)='//\xf2\x00', 0x80000000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/mm/mempolicy/weighted_interleave/node0\x00', 0xc2082, 0x0) write$auto(0x3, 0x0, 0x1) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x2, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0xd, 0x0, 0x4}, 0x800009}, 0x5, 0x20000000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x100007}, 0x31cd3c7c, 0xb1) sendmsg$auto_IEEE802154_LLSEC_GETPARAMS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x24008051) connect$auto(0x3, &(0x7f00000000c0), 0x55) sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x4000804) syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000180), 0xffffffffffffffff) sendmmsg$auto(0x3, &(0x7f0000000000)={{0x0, 0x2, 0x0, 0x106, 0x0, 0x1, 0x697b}, 0xed7138c}, 0x9a6, 0xe000) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000048c0)='/dev/dsp1\x00', 0x20000, 0x0) select$auto(0x4, 0x0, &(0x7f0000000100)={[0x9, 0x7, 0xfffffffffffffff9, 0x9, 0x7ff, 0x3, 0x6, 0x2, 0x9, 0xffff, 0x1ff, 0xd, 0x3, 0x200000201, 0x7, 0x6]}, 0x0, 0x0) socket(0xa, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) getsockopt$auto(0x4, 0x6, 0x1b, 0xfffffffffffffffc, 0x0) r1 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/radio2\x00', 0x0, 0x0) read$auto_v4l2_fops_v4l2_dev(r3, &(0x7f0000000100)=""/4096, 0x1000) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r2, &(0x7f0000004240)={0x0, 0x0, &(0x7f0000004200)={&(0x7f00000041c0)={0x14, r1, 0x1, 0x70bd25, 0x25dfdbfe}, 0x14}}, 0x4048000) memfd_create$auto(&(0x7f0000000040)=':@\x00', 0x4) 4.96808525s ago: executing program 1 (id=479): mprotect$auto(0x200001ffff000, 0x8000000000000001, 0x4) (async, rerun: 32) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r0 = openat$auto_kmsg_fops_printk(0xffffffffffffff9c, &(0x7f0000000540), 0x80800, 0x0) lseek$auto(r0, 0x0, 0x2) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) socket(0xa, 0x2, 0x0) (async, rerun: 64) setsockopt$auto(0x4, 0x88, 0x1, &(0x7f0000000000)='!/*:(*\'\x00', 0xe) (rerun: 64) 4.08624061s ago: executing program 3 (id=481): mmap$auto(0x0, 0x4020009, 0x6, 0x1b, 0x401, 0x8000) r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020006, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sendmsg$auto_MACSEC_CMD_ADD_RXSA(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x2cb8}, 0x1, 0x0, 0x0, 0x40}, 0x2404c084) close_range$auto(0x2, 0xa, 0x63594046) socket(0x18, 0xa, 0x1) socket(0xa, 0x2, 0x88) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "ab06fdffff00fff500"}, 0x55) bpf$auto(0x0, &(0x7f0000000000)=@iter_create={0xffffffffffffffff, 0x6fc}, 0x7f) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0xa005) mmap$auto(0x0, 0x20109, 0xe3, 0xdb970, 0x40000000000a1, 0x8000) r1 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0) write$auto(0x3, 0x0, 0xffd8) mmap$auto(0x0, 0x20006, 0x4000000000df, 0xeb1, 0x4, 0x8000) read$auto(0x4, 0x0, 0xfdef) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f0000001100), r2) sendmsg$auto_CTRL_CMD_GETFAMILY(r2, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000001180)={&(0x7f0000001140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="01002dbd7000ffdbdf25030000000600010030"], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x20000044) r5 = syz_genetlink_get_family_id$auto_thermal(&(0x7f0000000200), r2) sendmsg$auto_THERMAL_GENL_CMD_TZ_GET_TRIP(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=ANY=[@ANYRESDEC=r1, @ANYRES64=0x0, @ANYRES64=r3], 0x1c}}, 0x4000010) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRESOCT=r5, @ANYRES16=0x0, @ANYBLOB="000826bd7000fedbdf250300000008000400b70a0000060007000080000008000200", @ANYRES8=r4, @ANYBLOB="0a0005000180c200000e00000a0001000180c200000e00000a000100000000000000000008000200", @ANYRES32=r0, @ANYBLOB="060006ff05000000080003009b"], 0x68}, 0x1, 0x0, 0x0, 0x40080}, 0x40) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXPWRBN:00/input/input0/id/vendor\x00', 0x840, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) read$auto(0x3, 0x0, 0x80) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000002ac0), r6) sendmsg$auto_NL802154_CMD_GET_WPAN_PHY(r6, &(0x7f0000002bc0)={0x0, 0x0, &(0x7f0000002b80)={&(0x7f0000002b00)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="831f2abd7000fbdfdf3f010000000800010000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x20004041}, 0x40004) socket(0x2, 0x3, 0x100) socket(0x10, 0x2, 0x0) 3.861567388s ago: executing program 1 (id=483): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_net_shaper(&(0x7f0000001500), r0) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x5, 0x8000) clone$auto(0x7, 0x7fffffffffffffff, 0xffffffffffffffff, 0x0, 0x1) mlock$auto(0xfbe8, 0x4) mlock$auto(0x7c88, 0x7fff) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/est_cpulist\x00', 0x0, 0x0) read$auto(0x3, 0x0, 0x80) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001540)={'netdevsim0\x00'}) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r2 = socket(0x10, 0x2, 0x0) sendmsg$auto_IPVS_CMD_GET_SERVICE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x6dc}, 0x1, 0x0, 0x0, 0x4004080}, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200", @ANYBLOB="5de1"], 0x1ac}}, 0x40000) sendmsg$auto_NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16, @ANYBLOB="01002a"], 0x24}, 0x1, 0x0, 0x0, 0x404c0c0}, 0x80) recvmmsg$auto(r2, &(0x7f0000000140)={{0x0, 0x4, &(0x7f0000000080)={0x0, 0x803}, 0x5, 0x0, 0x2, 0x8}, 0x800}, 0x10a, 0x8, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x6, 0x8000) socket(0x10, 0x2, 0x0) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022abd7000fbdbdf25020000000800030000000000080016"], 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0xc0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="180027"], 0x1ac}}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) r3 = socket(0xa, 0x801, 0x84) getsockopt$auto(r3, 0x40000000029, 0xb, 0xfffffffffffffffe, 0x0) sendmsg$auto_NET_SHAPER_CMD_GROUP(r0, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000015c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="30005b80", @ANYRES16=r1, @ANYBLOB="010029bd7000fedbdf25040000000c000180080001000600000004000a800c0005007448000000000000"], 0x30}, 0x1, 0x0, 0x0, 0x44000}, 0x14) 3.714209178s ago: executing program 2 (id=484): r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) prctl$auto(0x16, 0x2, 0x2, 0x4000000d, 0x100) r1 = open_tree$auto(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x7) setns(r1, 0x4000000) ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x48000}, 0x0) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x3) io_uring_register$auto(0x2, 0x0, 0x0, 0x3) ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x0) mmap$auto(0x0, 0xc, 0x9c0f, 0x44eb1, 0x10006, 0x300000000000) mmap$auto(0x0, 0x20009, 0x20004000000000df, 0xeb1, 0x401, 0x8000) r2 = openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$auto_IOCTL_VMCI_VERSION2(r2, 0x7a7, 0x0) ioctl$auto_IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, 0x6) ioctl$auto_IOCTL_VMCI_QUEUEPAIR_DETACH(r2, 0x7aa, 0x0) 3.07907464s ago: executing program 3 (id=487): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async) statx$auto(0xffffff9c, 0x0, 0x1000, 0x700a, 0x0) (async) r0 = socket(0x2, 0x1, 0x0) sendmsg$auto_NLBL_MGMT_C_REMOVEDEF(r0, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x80, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x400}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x81}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x25}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x80}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x40}, @NLBL_MGMT_A_DOMAIN={0xe, 0x1, '/dev/vmci\x00'}, @NLBL_MGMT_A_DOMAIN={0xe, 0x1, '/dev/vmci\x00'}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_DOMAIN={0x11, 0x1, '/dev/video55\x00'}]}, 0x80}, 0x1, 0x0, 0x0, 0x200048c4}, 0x80) (async) r1 = openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) (async) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) (async) pselect6$auto(0x101, &(0x7f0000000080)={[0x6, 0x7, 0xffffffffffffffff, 0x3, 0x1, 0x6, 0x9, 0x7, 0x4, 0x4, 0x9, 0x4, 0x4, 0x7, 0xcb2a, 0x9]}, 0x0, 0x0, 0x0, 0x0) r2 = getpid() process_vm_readv$auto(r2, &(0x7f0000000040)={0x0, 0xfff}, 0x1, &(0x7f0000000280)={&(0x7f00000000c0), 0xf}, 0x6, 0x0) r3 = openat$auto_i2cdev_fops_i2c_dev(0xffffffffffffff9c, &(0x7f0000000080), 0x8000, 0x0) ioctl$auto_I2C_RDWR(r3, 0x707, 0x0) (async) ioctl$auto_IOCTL_VMCI_CTX_SET_CPT_STATE(r1, 0x7b2, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp1\x00', 0x20b42, 0x0) (async) select$auto(0xa, 0x0, &(0x7f0000000100)={[0x20000000000d, 0x203, 0x0, 0xc, 0x5, 0x3, 0x5, 0x2000000000000002, 0x9, 0x8, 0x400000000ff, 0xa, 0x4, 0xaab, 0x5, 0x7]}, 0x0, 0x0) (async) ioctl$auto_IOCTL_VMCI_QUEUEPAIR_ALLOC(r1, 0x7a8, 0x0) (async) rt_sigprocmask$auto(0x0, &(0x7f0000000000)={0xfffffffffffffe01}, 0x0, 0x8) (async) write$auto(0x3, 0x0, 0xfffffdef) (async) ppoll$auto(&(0x7f0000000080)={0xffffffffffffffff, 0xe73, 0xbb}, 0x20, 0x0, &(0x7f0000000100)={0x6}, 0x8) (async) r4 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video55\x00', 0x280, 0x0) ioctl$auto(r4, 0x4020565b, 0x38) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) unshare$auto(0x200) r5 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/mnt\x00') setns(r5, 0x0) syz_clone(0x98280000, 0x0, 0x0, 0x0, 0x0, 0x0) ioprio_set$auto(0x3, 0x0, 0x4b34) (async) mmap$auto(0xf000, 0x8, 0x1000000003, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0xa, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket(0xa, 0x3, 0x3a) 2.526036623s ago: executing program 2 (id=489): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) close_range$auto(0x2, 0x8, 0x0) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000226bd7000fedbdf25030000000800030004020000060007000080000008000200dfe097ffd4ff109f27a3874a035af7e745737ac5060ed53fac7c6eeacebb4b88c42afbaed79a1ad04ade9711a3", @ANYRES32=0x0, @ANYBLOB="0a000500dd000000000000000a000100987874e64b8500000a0001007572c85c318e0000060007000a00000008000200", @ANYRESHEX, @ANYBLOB="080004"], 0x68}, 0x1, 0x0, 0x0, 0x18a64d47ddeca1f0}, 0x40090) socket(0x2, 0x3, 0x100) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) stat$auto(0x0, 0x0) madvise$auto(0x0, 0x2003f0, 0x11) socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="13"], 0x1ac}}, 0x4004) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x806, 0x0) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa}, 0x55) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) clone$auto(0x2, 0x401, &(0x7f0000000000)=0x7fffffff, &(0x7f0000000040)=0xfffffffd, 0x4) recvmmsg$auto(0x3, 0x0, 0x7bf, 0x7bd6, 0x0) 2.426276762s ago: executing program 3 (id=490): mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000826bd7000fedbdf250300000008000400b70a0000060007000080000008000200", @ANYRES32, @ANYBLOB="0a0005000180c200000e00000a0001000180c200000e00000a000100000000000000000008000200", @ANYRES32, @ANYBLOB="060006ff05000000080003009b"], 0x68}, 0x1, 0x0, 0x0, 0x40080}, 0x40) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x3, 0x100) socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="13"], 0x1ac}}, 0x4004) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) (fail_nth: 15) 2.123432273s ago: executing program 0 (id=492): r0 = openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/pagemap\x00', 0x80, 0x0) mmap$auto(0x89, 0x6, 0x5, 0xff, r0, 0x4) io_uring_enter$auto(r0, 0x80000000, 0x40, 0x10, &(0x7f0000000040)="652215f174d4ddef8cdf15e87303b23836adcd54e2ebe751dbadadb261a2a1ae5adf49dc95afbe5e16bc37e82b1a0c89505098c8258d00155db89efa84786f6807cae2863f2bd24165fcd2958b4e922d749886a8207cf5159152eb532eb21158e5690c657aee3c19bb1948d360fdfac472eedf64bb9342197b9e5575e0f0530e64e374f76facbeff243910328a4c3a5f9ea52e1dd4f4626139c647452e80105c7a321edde142beb9ba47c87ef256396c9f91", 0x6) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_smc_gen_netlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$auto_SMC_NETLINK_ADD_UEID(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x2c, r2, 0x1, 0x70bd2a, 0x25dfdbff, {}, [@SMC_NLA_EID_TABLE_ENTRY={0x17, 0x1, '/proc/self/pagemap\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8010}, 0x20000000) openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000240), 0x100, 0x0) r3 = bpf$auto(0x40, &(0x7f0000000280)=@bpf_attr_7={@prog_id=0x4, 0x3, 0x8}, 0x6) r4 = syz_genetlink_get_family_id$auto_ovs_meter(&(0x7f0000000380), r1) sendmsg$auto_OVS_METER_CMD_SET(r1, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x34, r4, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@OVS_METER_ATTR_KBPS={0x4}, @OVS_METER_ATTR_STATS={0x14, 0x3, {0x7, 0x1}}, @OVS_METER_ATTR_ID={0x8, 0x1, 0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x20000040) ioctl$auto_PPPIOCSMRU(r3, 0x40047452, &(0x7f0000000480)=0x2) r5 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/sg1\x00', 0x40, 0x0) sendmsg$auto_NBD_CMD_STATUS(r1, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0xd973491a8b5732c4}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x20, 0x0, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x7f}]}, 0x20}, 0x1, 0x0, 0x0, 0x880}, 0x10) mmap$auto_snd_pcm_f_ops_pcm1(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x9, 0x20010, r3, 0x6) r6 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000640), r3) sendmsg$auto_NFSD_CMD_POOL_MODE_SET(r3, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x30, r6, 0x100, 0x70bd2d, 0x25dfdbfd, {}, [@NFSD_A_POOL_MODE_MODE={0x5, 0x1, '\x00'}, @NFSD_A_POOL_MODE_MODE={0x14, 0x1, 'SMC_GEN_NETLINK\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x4080}, 0x8800) r7 = epoll_create$auto(0x5) read$auto_fault_around_bytes_fops_(r7, &(0x7f0000000740)=""/81, 0x51) r8 = accept$auto(r5, &(0x7f00000007c0)=@tipc=@name={0x1e, 0x2, 0x2, {{0x40, 0x1}, 0x3}}, &(0x7f0000000800)=0x2) r9 = syz_genetlink_get_family_id$auto_nfc(&(0x7f0000000880), r3) sendmsg$auto_NFC_CMD_GET_DEVICE(r8, &(0x7f0000000ac0)={&(0x7f0000000840), 0xc, &(0x7f0000000a80)={&(0x7f00000008c0)={0x1a0, r9, 0x100, 0x70bd25, 0x25dfdbff, {}, [@NFC_ATTR_RF_MODE={0x5, 0xb, 0x9}, @NFC_ATTR_DEVICE_POWERED={0x5, 0xc, 0x5}, @NFC_ATTR_LLC_SDP={0x145, 0x13, 0x0, 0x1, [@generic="8f3af9ec1d11f569b1198f19a24c336d7ff7729472e87771cdaf4bdf4950224f16a3b74e3dfb2a5fa0cb474b0b276544aa5b49292bb4dab78e5d252e734fd339dfd114f3df819e999d724bd959a31e1e1ab4e2689af2e6a03be789209d2079147f8241daf27a7d7fe33a5b6ff991bbdda95615f0ba1836d0dcb5435d73b2ccf9f820011f00e2b459883d30cd69a3cd5e077470a055924158f0fc2312d5b2ba22094391e90cbd20607d129fb36b6c485ea470dc317f5723586bd030f799e6dbf0da487da61678cb4dad86127d80d16b598daa5b96f575a6725ed8ccf96fc6136de2cfbf57c108a7", @typed={0x8, 0x14b, 0x0, 0x0, @fd=r7}, @generic="20521fd48f2c40fc41a748ffb02428c334669a5ec625543ab25b8212ec7159e37328c4ee998f13f97c8dc9d8e43419eeb7447768ec7a75f95b3f935878ad872c2dc817f44789683439834302bcd4537a60d0"]}, @NFC_ATTR_VENDOR_ID={0x8}, @NFC_ATTR_TM_PROTOCOLS={0x8, 0xe, 0xffff0006}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, 0x7}, @NFC_ATTR_FIRMWARE_NAME={0x9, 0x14, ',*[#\x9c'}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, 0x8001}, @NFC_ATTR_LLC_PARAM_LTO={0x5, 0xf, 0x4}]}, 0x1a0}, 0x1, 0x0, 0x0, 0x4000000}, 0x480c0) openat$dir(0xffffffffffffff9c, &(0x7f0000000b00)='./file0\x00', 0x40040, 0xa) r10 = getsid$auto(0x0) prctl$auto(0x0, 0x200, r10, 0x1, 0x1) sysfs$auto(0x5, 0x2, 0x2) socket(0x2a, 0x80000, 0xffffffe6) madvise$auto(0x6, 0xd5, 0x5842) madvise$auto(0x900, 0x8, 0x1469) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_REMOVE(r7, 0xc0405519, &(0x7f0000000b40)={@inferred=r10, 0x1, 0x3, 0x5, "6c11d9da5f75dc2c9185fe1f33dbe63855fb1a8cec212fa3c84443e163287e2dca885669329fcdc6b69716bb", @raw=0xfff}) sendmsg$auto_L2TP_CMD_SESSION_GET(r1, &(0x7f0000000cc0)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x12}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c00)={0x78, 0x0, 0x100, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_DATA_SEQ={0x5}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'netpci0\x00'}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @rand_addr=' \x01\x00'}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x9}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e24}, @L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x7}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e24}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'netdevsim0\x00'}]}, 0x78}, 0x1, 0x0, 0x0, 0x8080}, 0x20048810) 1.974172997s ago: executing program 3 (id=493): r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f000000fc00), 0x801, 0x0) r1 = open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x100) sync_file_range$auto(r1, 0x0, 0x1, 0x7) statx$auto(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x5, 0x1, &(0x7f00000000c0)={0x9, 0x10, 0x7fffffff, 0x25c, 0x0, 0xffffffffffffffff, 0x4, 0x7fff, 0xa1, 0x6, 0x3, 0xfffffffffffffffa, {0x8, 0x5}, {0x6, 0x7}, {0x9, 0x4}, {0x6, 0x9}, 0x1, 0x0, 0x1, 0x2, 0x3a50, 0x5, 0xfd, 0x1, 0x1, 0xff, 0x80000001, 0x0, [0x4, 0x8, 0x7, 0x2, 0x9, 0x7, 0xfffffffffffffff9, 0x4cc, 0x80000001]}) newfstatat$auto(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)={0xfffffffffffffff9, 0x5, 0x12000000000, 0x5, 0xee00, 0x0, 0x0, 0x2, 0x3, 0x10001, 0x7, 0xffffffffffffffff, 0x9, 0x4, 0x100, 0x3, 0x3}, 0x6) newfstatat$auto(r1, &(0x7f0000000000)='./file0\x00', &(0x7f00000002c0)={0x100000001, 0x1, 0x2, 0x9, r2, r3, 0x0, 0x2, 0x7fffffffffffffff, 0x4, 0x0, 0x100000000, 0x3, 0x44, 0x7, 0x8, 0xfffffffffffffff5}, 0x15) setrlimit$auto(0x6, &(0x7f0000000040)={0x4, 0xffffffff}) ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x1) 1.858227068s ago: executing program 0 (id=494): mknod$auto(&(0x7f0000000180)=':,\x00', 0xcb, 0xfffffffa) execve$auto(&(0x7f0000000000)=':,\x00', 0x0, 0x0) socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040), 0x69) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) r0 = socket(0x2, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x5, 0x20000000) ioperm$auto(0x7, 0x6, 0x2) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) open(&(0x7f0000000100)='.\x00', 0x0, 0x408) getdents64$auto(0x0, 0x0, 0x18) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_batadv(&(0x7f00000002c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000f40)={'batadv0\x00', 0x0}) sendmsg$auto_BATADV_CMD_GET_HARDIF(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000007c0)={0x24, r2, 0x14264b2b184ca509, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x4) sendmsg$auto_SMC_NETLINK_ADD_UEID(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x400c005) syz_genetlink_get_family_id$auto_batadv(0x0, r0) mmap$auto(0x0, 0x400008, 0x400000000000df, 0x19, 0x2, 0x8000) r5 = openat$auto_mousedev_fops_mousedev(0xffffffffffffff9c, 0x0, 0x42, 0x0) write$auto_mousedev_fops_mousedev(r5, &(0x7f0000000040)='\\', 0x1) r6 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f00000000c0), 0x400, 0x0) ioctl$auto_DMA_HEAP_IOCTL_ALLOC(r6, 0x80585414, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) readv$auto(0x3, &(0x7f00000001c0)={0x0, 0x1000}, 0x100000007) listen$auto(0x3, 0x81) 1.665080894s ago: executing program 1 (id=495): open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) (async) fcntl$auto(0x3, 0x400, 0x1) (async) open(&(0x7f0000000000)='./file0\x00', 0x8d783, 0x29) (async) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/controlC0\x00', 0x10000, 0x0) (async) fcntl$auto(0x3, 0x401, 0x3) 1.397020279s ago: executing program 0 (id=496): mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000826bd7000fedbdf250300000008000400b70a0000060007000080000008000200", @ANYRES32, @ANYBLOB="0a0005000180c200000e00000a0001000180c200000e00000a000100000000000000000008000200", @ANYRES32, @ANYBLOB="060006ff05000000080003009b"], 0x68}, 0x1, 0x0, 0x0, 0x40080}, 0x40) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x3, 0x100) socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="72012bb759ae6964e43e2200eec2814aab167195cc67f4b25c37af5500f7b5fddcc7216d5b3f6d648735c8b486fcd9a9bae108636d121000f0ca32396ed86cf6acd0dc50b3be82e9203717e5ef1b2ffe74046000"/93, @ANYBLOB="1329302d4b63f40faadcca810ea1c3f0fdecf17c35631464ba56ce4d5aa6e6b41f9719bf8b5f7c6d62825be5842e"], 0x1ac}, 0x1, 0x0, 0x0, 0x8000}, 0x4004) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 1.286263194s ago: executing program 3 (id=497): r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) prctl$auto(0x16, 0x2, 0x2, 0x4000000d, 0x100) r1 = open_tree$auto(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x7) setns(r1, 0x4000000) ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x48000}, 0x0) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x3) io_uring_register$auto(0x2, 0x0, 0x0, 0x3) ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x0) mmap$auto(0x0, 0xc, 0x9c0f, 0x44eb1, 0x10006, 0x300000000000) io_uring_setup$auto(0x6, 0x0) r2 = openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$auto_IOCTL_VMCI_VERSION2(r2, 0x7a7, 0x0) ioctl$auto_IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, 0x6) ioctl$auto_IOCTL_VMCI_QUEUEPAIR_DETACH(r2, 0x7aa, 0x0) 1.173710992s ago: executing program 0 (id=498): close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) socket(0xa, 0x5, 0x0) r0 = socket(0x2, 0x1, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000200)='/sys/power/suspend_stats/failed_suspend\x00', 0x400, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r1, 0x0, 0x0) fstat$auto(0x2, 0x0) close_range$auto(0x2, 0x8, 0x0) memfd_create$auto(0x0, 0xe) lchown$auto(&(0x7f0000000000)='.\x00', 0x0, 0x6) r2 = socket(0x2, 0x1, 0x106) r3 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000180), 0xffffffffffffffff) r4 = getpid() sched_setparam$auto(r4, &(0x7f00000000c0)={0x5}) r5 = openat$auto_virtual_ncidev_fops_virtual_ncidev(0xffffffffffffff9c, &(0x7f00000001c0), 0x101000, 0x0) r6 = getpgrp(0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$auto_taskstats(&(0x7f0000000140), r7) r9 = getpgrp(0x0) sendmsg$auto_TASKSTATS_CMD_GET(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x1c, r8, 0xa01, 0x70bd2b, 0x25dfdbfb, {}, [@TASKSTATS_CMD_ATTR_TGID={0x8, 0x2, r9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4001}, 0x20000000) sendmsg$auto_TIPC_NL_MEDIA_GET(r0, &(0x7f0000000840)={&(0x7f0000000100), 0xc, &(0x7f0000000800)={&(0x7f0000000240)={0x5bc, r3, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@TIPC_NLA_NET={0x300, 0x7, 0x0, 0x1, [@typed={0x8, 0x12a, 0x0, 0x0, @pid=r4}, @typed={0x2b, 0x90, 0x0, 0x0, @str='/sys/kernel/debug/tracing/trace_marker\x00'}, @nested={0x274, 0x2b, 0x0, 0x1, [@generic="c9d3fca4915c3d25246e0eaf8e61e0641edadde240d99afacc454beaa399d3b13d6000bf5ba34a92373f90a617a938f7832e2e98809b27d793459076c8be1ab1871f74a2527295af3b8d4b5ad9708bb7a59af3310625f4bebafdab4dd7f8d1f523e683afe2de842e0a6bcb29ad7be5f0166af913a7c27f31346b5a2e03fb82087bb174f048a01a6953af61c200ed17fa9178558668ef17db3de0b9f9b988af712292683844a43a90c8265d921c89ba2dc25ded7e62e25009aa9c2b344c8bdd6b287b17be183922d61e570eeafa022df0", @typed={0x8, 0x10b, 0x0, 0x0, @fd=r5}, @generic="c50106bd967cfefc5d25fea767784317ef8fc60847a0636330eacacc58363f4d77758ac4e7864d7e3b98bcaf457a0086591572269faab227178b3d680345a85f60143e8d2b0d6237fa776e778c31d83aea76ea083e6d686f42499a5852d347b6c2ccc1afbc95f30a943ddd59a39fcb0e8655209163a7f36469a5cd05ac5e7e19cdc063043457621a716d1b8ec7a4513274a6e43bbb42488b81c1bcd70e6674e2ccbfa3486313f888935f69fd37787331ec9f1b171b067688b24f2532f22e11732bc34b21112fe2692e513d47d8b7d04c956f03fe0e7406cd4c9d8e832782ffaa76941e9dab20724b2a9dd080d73d1ba8280ac7ee6b48", @generic="a7e1639bd8915d0c7761266aac78492e05af5709b2cce6c419c3f5a5f7e0345058b470302c06429f9769c05f967c2335a2ccd5f8b5e75ea7ffeb92808ed6ad942d689f19ee03eaa710d6b57efb4206ac49ccf580a42d190abfeddc84", @generic="12deb5b38a0f4ce8dde0a78718a0d70d070f9b8318820d4571939594ac61265048ba614b68522d2deeeb73fa6e46e8cdff64", @nested={0x4, 0xfd}, @typed={0x8, 0x49, 0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}, @typed={0x8, 0x14b, 0x0, 0x0, @u32=0xfff}]}, @typed={0x8, 0xe4, 0x0, 0x0, @u32=0x401}, @generic="20e731a5c112c0ee5d5ca91302654c3285866df7221bc94d7ed2f9de5586fa2d7e10d0129c69136693f080e1993e09c0239b4044f1b1a93a37e5c11c9491190c7d9af38e", @typed={0x7, 0x37, 0x0, 0x0, @str='.\'\x00'}]}, @TIPC_NLA_MON={0x2a7, 0x9, 0x0, 0x1, [@generic="0abfe4d81daeb6460bc023e3e2b0e98b98c0839ec36f5fcbfa752f8a6f0569", @nested={0x1ba, 0x140, 0x0, 0x1, [@nested={0x4, 0x63}, @generic="5710851d2bcd263b78a3e8ee287c0407f8d2dcf4b957cf84bbfc577d1bf9e061e80469a7c668d98742611113a4216eff593ccc7658faf6622d2b0c2ad0672aad7dd47c318cf7a8a7705574677fd1c3042d4cb1a7d5ae3bf1febf2e0458b110fba8fa9c3d9514a0d939dc35a95dfeb176414b77b7815d59d2caa8241b8807dc842e09eb244d6434d9f216c041af3fad9d8a0955e060523852bad1c774e30a24fd72cf9128f855cb2ba8db3bb646ba7a64f9606ad8f02d07bddd589fac22700c206ec107a68d85e863c6a4f0eb96eaf2a56114dd29d49a0fee273ea86b054b69d953168b9761ff8bd9f453862bcc58e6", @typed={0xa, 0x1e, 0x0, 0x0, @str='&2:%%\x00'}, @generic="1e480c80b6493210c5d3e1644785a59f39a9c4a7d5a9a1b67684a68ed80bf2a6748e50a38395ca5380971916900ee7281a4825314d1b861301221a0791fc639a3d8b32870640d9e0858718dd8c0857dfcb14c8d0ca29e2f4ac849453da657e0158b50a460490c3418ec4add7a4ef45cbb0dab35dc84e84754751c96b290e3c0d4188d3640b930a5e9f451c282996722360f7df0bbc658f8436d10194847a497541400dc6d9b94b3987cfed9146035356f7d504834917f5"]}, @nested={0xc, 0x38, 0x0, 0x1, [@typed={0x8, 0xb2, 0x0, 0x0, @uid}]}, @nested={0x14, 0xda, 0x0, 0x1, [@typed={0x8, 0x20, 0x0, 0x0, @ipv4=@multicast2}, @nested={0x4, 0xc5}, @typed={0x4, 0xe4}]}, @typed={0x8, 0xdd, 0x0, 0x0, @pid=r6}, @generic="2a2d9b7a51726f03802ef29a33d2484a96d06aefbe5091d8b17c9db6782e129f9e6014c953f14d114fb2d466155929700605080d5ed89df0bc8a21f866afa8dc116fd445", @nested={0x20, 0xd5, 0x0, 0x1, [@nested={0x4, 0x57}, @nested={0x4, 0x2c}, @nested={0x4, 0x115}, @nested={0x4, 0x38}, @typed={0x8, 0x3f, 0x0, 0x0, @pid=r9}, @typed={0x4, 0x1e}]}, @nested={0x3b, 0x91, 0x0, 0x1, [@generic="5b963b8d39219cf0956bd563cf95c5a69106ff01453a90683ab77a9fc5448d6fa6ec8e8576d7a27c1706e26c25b1a26b4f7826", @nested={0x4, 0xe3}]}]}]}, 0x5bc}, 0x1, 0x0, 0x0, 0x40004}, 0x8000) setsockopt$auto(r2, 0x1, 0x20, 0x0, 0x7) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @loopback}, 0x6a) openat$auto_tracing_mark_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/tracing/trace_marker\x00', 0x1, 0x0) openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/usbmon0\x00', 0x400, 0x0) writev$auto(0x3, &(0x7f0000000040)={0x0, 0x7111}, 0x1) 824.004556ms ago: executing program 0 (id=499): r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv6/conf/all/addr_gen_mode\x00', 0xa0202, 0x0) sendfile$auto(r0, r0, 0x0, 0x7fffe000) 730.118696ms ago: executing program 2 (id=500): r0 = openat$auto_loop_ctl_fops_loop(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x401bf, 0x7352, 0x32, 0x65f, 0x1ffde, 0x7, 0x3, 0x20000002, 0x9, 0x3, 0x6, 0x4, 0xb4, 0x9, 0x6, 0x10003, 0x80, 0x4, 0x0, 0x7, 0x2000, 0x203, 0x0, 0x84, [0x0, 0x0, 0x0, 0x8050100000000000, 0x0, 0x100100001, 0x0, 0xa, 0x70624ce7, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0, 0x1, 0x3, 0x0, 0xfffffffffffffffd, 0x2, 0x200000000004, 0x8, 0xffffffffefffffff, 0x200000000000004, 0x0, 0x0, 0x0, 0x0, 0x400000000005b8, 0xc, 0x0, 0x0, 0x4, 0x6, 0xffffffffffffffff, 0x890, 0x8000000000008, 0xfffffffffffffffc, 0x1000, 0xa38, 0x0, 0x0, 0xfffffffffffffffc, 0x2, 0x4000000000, 0x10006]}, 0x1fe, 0xd) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) syz_genetlink_get_family_id$auto_nlctrl(&(0x7f0000000380), 0xffffffffffffffff) r1 = openat$auto_generic(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = syz_genetlink_get_family_id$auto_netdev(&(0x7f0000001500), 0xffffffffffffffff) r3 = socket(0x10, 0x2, 0x0) sendmsg$auto_NETDEV_CMD_QUEUE_GET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x2c, r2, 0x1, 0x70bd26, 0x25dfdbfd, {}, [@NETDEV_A_QUEUE_TYPE={0x8, 0x3, 0x9}, @NETDEV_A_QUEUE_ID={0x8, 0x1, 0x1000}, @NETDEV_A_QUEUE_ID={0x8, 0x1, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x810) read$auto_snd_ctl_f_ops_control(r1, 0x0, 0x0) mknod$auto(0x0, 0x1, 0x4) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) io_uring_setup$auto(0x1, 0x0) r4 = socket(0x11, 0x80003, 0x300) setsockopt$auto(r4, 0x107, 0x1, 0x0, 0x8004) bpf$auto(0x6, &(0x7f0000000040)=@token_create={0x400, r1}, 0x7) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) r5 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r5, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008) socket(0x2, 0x3, 0x2) setsockopt$auto(0x3, 0x0, 0xd0, 0xfffffffffffffffc, 0xfd72) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_WOL_GET(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x2c, r7, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [@ETHTOOL_A_WOL_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x0) openat$auto_page_owner_stack_operations_page_owner(0xffffffffffffff9c, &(0x7f0000000140), 0x80000, 0x0) ioctl$auto_LOOP_CTL_ADD(r0, 0x4c80, 0x6c) 596.529349ms ago: executing program 0 (id=501): mmap$auto(0x0, 0x400005, 0xfffffffffffffffe, 0x9b72, 0x2, 0x8000) sendmsg$auto_WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYRESHEX, @ANYRES64=0x0], 0x14}, 0x1, 0x0, 0x0, 0x4008810}, 0x2000c045) r0 = socket(0x2a, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000080), 0x6b) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000140)) mknod$auto(&(0x7f0000000080)=':,\x00', 0xcc, 0x8) execve$auto(&(0x7f0000000000)=':,\x00', 0x0, 0x0) socket(0xf, 0x80000, 0x9) r1 = open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) execveat$auto(r1, &(0x7f00000001c0)=':,\x00', 0x0, &(0x7f0000000100)=&(0x7f00000002c0)='\x01=\r\xa2u\xab\xefk\xdc\x15nnXg7', 0x2) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) r2 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) sendmmsg$auto(r3, &(0x7f0000000000)={{0x0, 0x8, 0x0, 0xe, &(0x7f0000000a40), 0x8e, 0x40}, 0x8}, 0x1, 0x8) read$auto(0x3, 0x0, 0x10) mmap$auto(0x0, 0xf83, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8000, 0x0) io_uring_setup$auto(0x6, 0x0) sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYRES16=r2], 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x4000804) io_uring_register$auto(0x2, 0x13, &(0x7f00000001c0), 0x2) connect$auto(r0, &(0x7f0000000040)=@can, 0x8) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) fcntl$auto(0xffffffffffffffff, 0x401, 0x5) write$auto(0x3, 0x0, 0xfffffdef) unshare$auto(0x40000080) socket(0xa, 0x3, 0x3a) epoll_wait$auto(r0, 0x0, 0x7ff, 0x6) 356.160725ms ago: executing program 1 (id=502): socket(0x8, 0xa, 0x1) socket(0xb, 0x2, 0x2) (async) socket(0xb, 0x2, 0x2) socket(0xa, 0x801, 0x84) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0) mmap$auto(0x0, 0x10020009, 0x4000000000e2, 0xeb1, 0x401, 0x8000) socket(0x10, 0x2, 0x0) (async) r0 = socket(0x10, 0x2, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x15, 0x5, 0x0) socket(0x2, 0x1, 0x84) (async) socket(0x2, 0x1, 0x84) openat$auto_fops_init_pkru_pkeys(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) (async) openat$auto_fops_init_pkru_pkeys(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r1 = getpid() process_vm_readv$auto(r1, &(0x7f0000000080)={0x0, 0xfff}, 0x4800000001, &(0x7f0000000040)={&(0x7f0000000000), 0x200000004}, 0x59, 0x0) setsockopt$auto(0x3, 0x87, 0xb, 0x0, 0x5) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0xe}}, 0x54) (async) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0xe}}, 0x54) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) recvmmsg$auto(r0, &(0x7f0000000100)={{0x0, 0x4, &(0x7f0000000080)={0x0, 0xcb}, 0x3, 0x0, 0x80000000, 0x6}, 0x9}, 0x7, 0x6, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) r3 = socket(0x15, 0x5, 0x0) socket(0x10, 0x2, 0xc) (async) r4 = socket(0x10, 0x2, 0xc) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000013c0)=ANY=[@ANYBLOB="18000000", @ANYRES8=r4, @ANYRES8=r2, @ANYRES32], 0x18}}, 0x80) mprotect$auto(0x1ffff000, 0x8000000000000001, 0xd) (async) mprotect$auto(0x1ffff000, 0x8000000000000001, 0xd) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'veth1_vlan\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'veth1_vlan\x00'}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'macvlan0\x00'}) socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$auto_net_shaper(&(0x7f0000001500), r5) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000001540)={'netdevsim0\x00'}) sendmsg$auto_NET_SHAPER_CMD_GROUP(0xffffffffffffffff, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000015c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="14000000fe0744c46009ae6e9fcd42678f2bcc284d619f9972b974222a6bb24424842c47bdf7794917ac99db082d65a9e7f1706c16460e89144aebdb9c6eea652f74dddf3da97ff2953b71a8e28e3f597fe0921af35e6c9b90eb5663c55aec479b0180c006c052e74d5ecf4f5999e4a828785b571779339273db42f7c2950f2e774fb4b8d31c7141df194b7624a8bf02f609729ce0e29f8e9d9dff", @ANYRES16=r6, @ANYBLOB="010026bd7000fedbdf2504000000"], 0x14}, 0x1, 0x0, 0x0, 0x44000}, 0x14) 0s ago: executing program 3 (id=503): getrandom$auto(&(0x7f0000000000)='}p\x00', 0x65, 0x1000) r0 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x48, r0, 0x4, 0x70bd25, 0x25dfdbff, {}, [@ETHTOOL_A_CHANNELS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}]}, @ETHTOOL_A_CHANNELS_HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0xea10}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x48080}, 0x20000880) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_STATION(r1, &(0x7f0000000480)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000440)={&(0x7f0000000240)={0x1fc, r2, 0x4, 0x70bd27, 0x25dfdbfb, {}, [@NL80211_ATTR_CONTROL_PORT_NO_PREAUTH={0x4}, @NL80211_ATTR_PID={0x8, 0x52, 0xffffffffffffffff}, @NL80211_ATTR_PMKR0_NAME={0x9a, 0x102, "0d568d0216a708b3260e36fa63a66fad35a817c31901fcb78807cddbc62118b964e901b3a939143e5b3a2e3c67649a7db18cb831c3244df0625db84a91704ddd76d718bd46cc4c84a76d0654ed4bc3f69b54b7b4ff5b5afdb0b30d26f80ff2a3509eb41b1e1b73c18f89e52428cc7c6b59b28b7b4d78cd710bb29d66328b0491e2416232ba52069b0e315274cc7ab636d54608fdf56e"}, @NL80211_ATTR_FTM_RESPONDER={0x140, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_LCI={0xf5, 0x2, "f0a582ac1ace0b449bd749f01cf762776947d2f980f607035700edddceed0e4bd9f7720ee6d6e7e3014c87a6700c37cda2f2413f8196830fe0a5ca40b71871a8255b864f288f86929bd566165857cc144e923d9f1a2d42d23323279e591034a68a1dc9de08cf0f69de8cf3754caae43566085877372ee59774a3551944f70b0b83c561650d99b75865f9eda2510f1188536a305a00432cc5adcce901f3dfe46bb30919e2f212951c8b37193c2fe406809038187cd163d4352eea5ca70c873afad05636298f356547e0734f42a23dd7132c6c31a0ea70ddb28ad46fcea73cf251f17d4ed694c44af53413462329c435678e"}, @NL80211_FTM_RESP_ATTR_LCI={0x43, 0x2, "c6636aa58bc24befc7061cc8438f87a013105c49a9d742cbcf894f37a661dea25f267bcc0176068aaa2a55e0e732caa02dc374feb52dec9f16e2adb620c321"}]}]}, 0x1fc}, 0x1, 0x0, 0x0, 0x20000004}, 0x4008800) syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000004c0), r1) setitimer$auto(0xde7, &(0x7f0000000500)={{0x0, 0x2611}, {0x10000, 0x401}}, &(0x7f0000000540)={{0x80, 0x5}, {0x13, 0x1}}) r3 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000580)='/dev/adsp1\x00', 0x80000, 0x0) ioctl$auto_SNDCTL_DSP_SPEED(r3, 0xc0045002, &(0x7f00000005c0)=0x8) r4 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000640), r1) sendmsg$auto_NL80211_CMD_START_NAN(r1, &(0x7f0000000740)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x4c, r4, 0x8, 0x70bd26, 0x25dfdbfe, {}, [@NL80211_ATTR_REG_ALPHA2={0x27, 0x21, "851c0dc402ab360cd770027e357f99b9113b5892cc91b49a1213dd65338385edcfd5e7"}, @NL80211_ATTR_BSS_BASIC_RATES={0xf, 0x24, "8a1cbed1c79eea8451c71e"}]}, 0x4c}, 0x1, 0x0, 0x0, 0x800}, 0x4000) futex$auto(&(0x7f0000000780)=0x10000, 0x5, 0x6, &(0x7f00000007c0)={0x0, 0xf0b}, &(0x7f0000000800)=0x8, 0xfe) recvfrom$auto(0xffffffffffffffff, &(0x7f0000000840)="61585529747e021ea031b6790d04b395a107a5502ba29364cd566648ed741cc3a4dbc54b60fa8e8435ea929df20bae70de540716479c", 0x1, 0x9, &(0x7f0000000880)=@ax25={0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x3}, &(0x7f00000008c0)=0xd) r5 = socket$nl_generic(0x10, 0x3, 0x10) write$auto(r5, &(0x7f0000000900)='/dev/adsp1\x00', 0x7) syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000940), r5) mknod$auto(&(0x7f0000000980)='\x00', 0x7, 0x7) sendmsg$auto_BATADV_CMD_GET_MESH(r1, &(0x7f0000000ac0)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x800f00}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a00)={0x44, 0x0, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_LAST_SEEN_MSECS={0x8, 0x17, 0x80000001}, @BATADV_ATTR_NEIGH_ADDRESS={0xa, 0x18, @random="4e062ce6caf7"}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xa7c9}, @BATADV_ATTR_DAT_CACHE_IP4ADDRESS={0x8, 0x23, @dev={0xac, 0x14, 0x14, 0x14}}, @BATADV_ATTR_FLAG_BEST={0x4}, @BATADV_ATTR_TT_VID={0x6, 0x14, 0x1c00}]}, 0x44}, 0x1, 0x0, 0x0, 0x10008005}, 0x40880) mmap$auto(0x3, 0x8, 0x8000000000000001, 0x17, r3, 0x4) mmap$auto(0x3, 0x401, 0xe17, 0x1a, r1, 0x2) mprotect$auto(0x8, 0x2, 0x0) mprotect$auto(0x4, 0xcba, 0x2) r6 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/asound/card1/pcm1p/oss\x00', 0x2d0803, 0x0) read$auto_proc_reg_file_ops_compat_inode(r6, &(0x7f0000000b40)=""/4096, 0x1000) sendmsg$auto_TCP_METRICS_CMD_GET(r1, &(0x7f0000001c40)={&(0x7f0000001b40)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001c00)={&(0x7f0000001b80)={0x74, 0x0, 0x100, 0x70bd29, 0x25dfdbff, {}, [@TCP_METRICS_ATTR_SADDR_IPV4={0x8, 0xb, @initdev={0xac, 0x1e, 0x1, 0x0}}, @TCP_METRICS_ATTR_SADDR_IPV6={0x14, 0xc, @mcast1}, @TCP_METRICS_ATTR_SADDR_IPV4={0x8, 0xb, @dev={0xac, 0x14, 0x14, 0x27}}, @TCP_METRICS_ATTR_ADDR_IPV6={0x14, 0x2, @ipv4={'\x00', '\xff\xff', @loopback}}, @TCP_METRICS_ATTR_ADDR_IPV6={0x14, 0x2, @private2}, @TCP_METRICS_ATTR_SADDR_IPV6={0x14, 0xc, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, 0x74}, 0x1, 0x0, 0x0, 0x20008044}, 0x40) r7 = clone3$auto(&(0x7f0000001c80)={0x0, 0x2, 0x100000000, 0xc, 0x2, 0x5f68, 0x0, 0xfffffffffffffff8, 0xbb, 0x2, 0x99db}, 0xa2) wait4$auto(r7, &(0x7f0000001d00)=0x7, 0x2, &(0x7f0000001d40)={{0x5, 0x4}, {0x55, 0x4}, 0x9, 0x4, 0xbd67, 0xffffffffffffffff, 0x10, 0x1, 0x3, 0x772f, 0x4, 0x1, 0x73, 0x9, 0x800, 0x3}) mprotect$auto(0x800, 0x4, 0xa5f) sendmsg$auto_NL802154_CMD_SET_ACKREQ_DEFAULT(r5, &(0x7f00000027c0)={&(0x7f0000001e00)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000002780)={&(0x7f0000001f80)={0x7e0, 0x0, 0x300, 0x70bd29, 0x25dfdbfc, {}, [@NL802154_ATTR_CCA_ED_LEVEL={0x8, 0xe, 0x9}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x7}, @NL802154_ATTR_SCAN_DURATION={0x5, 0x24, 0x9}, @NL802154_ATTR_SCAN_DURATION={0x5, 0x24, 0x10}, @NL802154_ATTR_WPAN_PHY_CAPS={0x2e8, 0x18, 0x0, 0x1, [@nested={0x2e4, 0x46, 0x0, 0x1, [@generic="a250d2560d90facf956139e470589b0ebb624d4b94c838451a95d154e31f3b4b3b2ac81b8e82197d46efd0eaa0d4dca9d76942997f71ec024d931e88b2e23d92ab1be399b895dc87f8cc02", @generic="a0839701b00bdf166c205c60f621717ba16ca72152f4215ddd5b43a02e9bc1a54cb4d24ee1db17bdb20c3226", @generic="640fde84dcbdb965e1b71e343f0e54e9b346", @generic="1054f78a63640c7336dfe3626c4a7041a1dfea574f7c47b1bac21c168ee1b99e1fe4f4ba06407933", @generic="cbe8dcd58c7e500358f56a3777882a7c86bf9e64183e4bac2e5830a19e901d711ecdb670c9fe901d84dfbc8964225f240c186722f70ed5b568edc2d88d213be9fa976096d9fda56cded9750ff5c659ecdd80c9690f098e0a7fc26fa82fbef799cfa1322a9e633485313eb32faf63a772f1314ad1b364b3e1fa9b7e09df0b3b65cf9a26", @typed={0xd6, 0x0, 0x0, 0x0, @binary="29f2929ee99c46383b92e6ce1222bcf2c32d66906f58ab7e9936b2483c27ea86a8e9abed11bfabfc7f678974e6e002e491c085c2849fdc18275d434eb4e8783946a836cabb73526b28902213f2c4570ec420b2c266cfff07567b1251701109ac0f6c8fb44894552676bea71416c2bed437cc1ca230897d17118354a0937d11f793c0e989ca76c3e3e76ddf356626fd7d5f851034e9504de566c3167e8ccb6d6ba3bcee31c3b7329e24cdc5afbc59a6f63c2c9962dd572c6f3c0aaef9900d59f086947b3dbe1369698b741c9b35b617103398"}, @generic="82ee3088e994ed408a3481447f38d86f5b98911e4355e7cd20179c76ed758ca2c118f3dcb6a6e720178d4da097a807e9e9390f66673300c44741d7eeea8ced198f4822e09ea784f6d63385019f2bbaf8ca2dfeea8e57bdbcdb8c09e7384dea73170ee9a2f22dcfd2ce3294616c5c091fb1a6ce2f50017c97c2f88a735d678f3604e025fe9bea905a01244d5345fdd1b01236927e71cc7100ce81e83121efb5a71b971c84705962ed6ff872695602d75ff3284006adc5a35e27a525f8674f53809c4c4f96539b650bd2483957685a795d3a5d4d79"]}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0xaf5a}, @NL802154_ATTR_IFTYPE={0x8, 0x5, 0x6}, @NL802154_ATTR_TX_POWER={0x8, 0xb, 0x9}, @NL802154_ATTR_MAX_ASSOCIATIONS={0x8, 0x27, 0x4}, @NL802154_ATTR_SEC_LEVEL={0x49d, 0x2d, 0x0, 0x1, [@nested={0xc, 0xdc, 0x0, 0x1, [@typed={0x8, 0xcf, 0x0, 0x0, @u32=0xfffffbd4}]}, @typed={0x8, 0x1e, 0x0, 0x0, @u32=0x8}, @nested={0x175, 0xf0, 0x0, 0x1, [@typed={0x8, 0x78, 0x0, 0x0, @uid}, @nested={0x4, 0xcb}, @typed={0x4, 0x6c}, @generic="276862cfd84caebe8aec464e0fda3c67eed15a709226233bd7ead8422dd5fb73b2c1ae07cfa7d157314b00d4b7cf932bdadd77875599c3333804e98d264be40729a6855c7f36ada95426f7d63a4c2d15072d8f26a3c528d9ca81c4f637c7a7010c097fa9a4266f12eef87fbb9dd73f46f86a970c79aaf14d9ff3865c5f36ef5b3635281ee5d822b1793d87627770b3825f0c3925b7be6ea392858b273700c4", @generic="acc2671ad5be2c081b24685bd599d78eecf534fecef1386d6b1be761438100fdbd2f12ebcb4ee0a54eb3870c6954e866e84698e5af0c2663182ea6f361a747db400442f846fe3035450c25425527531252cca58b66c7f66bbdc2e291d1ce48faf1bf5b36befb2deb05ab4e79d8509cf91975066aca1f8afcec14d0f80c5d57a4797507afaa949539d8483a9f3e52768a20a23010ae7f1dd5a9287adcc8fb7a2d5e14d3a53017cf9d0fbcd65fa24d62a203bfbacdb0904393c9425d59a7a9", @nested={0x4, 0xef}]}, @generic="980255d3da69daa91b2fee65c5fd3b59da9952519b46bcf8bacd93c10c7d0f49fb2cf1484d0261db3cacbae55ec9bfae7361e2389ed32e4a704c8fb96c5bb6a17b1d582439e9fb744c60117725f040d7c759937a4b4de7aa676135895006bafbd49bf365c9dad01b95b7e83d238a339d1eb2851596f7224dca2d837c7c232e93b1482967fd4b7e67f93c1052402772dd2a5f0c41352f90d36eca1147177a06e172e7c5baaa0b6edf530a3f8c13043683401864ff3a8439707bdd16d68e3ef1fd2a44d8881a13b20f06d32d853cf69747859189ddd9a7059ea51dbfb086ebbd34b535a86fd434e78bc279c8", @generic="fecab6c472dc0c688b3a7c89e2d91d9ac0967ba47094345903b23eb51710524beda2ac470a247bacc10cf41c04a635592815375220a7ea5f7af4fca45ab90cf18538ef8189717ffbacb6023482f4328cdfc6dc038786fdc6acf9cb3543c680135dc2aafac6fd4aa8fbe96dcc1bae4f653739415e660d253c9b869eeebe94c03f62f031fcbad93dec8b4a591d1a5faed70c93a957d73cd3059ab4d25654bb7d408ede515d0a9182d309aa70156179ae16c0496b1755413f0420c841dae6f8a95afb07df3017d7a676594f84a2bec6997d581fea295efce4e99160d4940bbccaef", @typed={0x8, 0x5d, 0x0, 0x0, @u32=0x1}, @generic="59d75e2e68406efb0963dfa24257b9052fa6f504a6922f1476c82417b518319bc3cf397846d6881537699eb2d129f8183af51a7844dfed99ec16fe52b0909d642ccde93b34292bdfe29e447e82fd55a3439566f44c1b7649920b603019af3fe7daf340433e2f8cef4acb77e04ed93629c7de11bd4ed81a89ceaeb2934071fef5c5ffcda167255216195c31e1ac8abe11d294b00153e235555331afcb12d0895d1d234507db9fc8c8f6130379296d8680f48c90750f024f0b01610fc11633e109fbaa82447a7d47560b818c8769eeed87a3ff91a08f27af8729766437ff6355d0a2d395e1b17792ee076c", @generic="cd1a77d16f3ff5f407365c8d571187e0f882978102d3456600c80b1f559f207b3a6f484a6618935df814ddc61aabf61c48392cedf4619f0f1471831fb555381beb9c71b428cf73fd804704f24d402cf1", @generic]}]}, 0x7e0}, 0x1, 0x0, 0x0, 0x4000}, 0x10) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.5' (ED25519) to the list of known hosts. [ 83.341048][ T5823] cgroup: Unknown subsys name 'net' [ 83.500397][ T5823] cgroup: Unknown subsys name 'cpuset' [ 83.508506][ T5823] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 85.212827][ T5823] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 87.274281][ T5844] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 87.283317][ T5844] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 87.291925][ T5847] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 87.292209][ T5844] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 87.306167][ T5847] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 87.306710][ T5847] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 87.317870][ T5844] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 87.321353][ T5847] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 87.336628][ T5849] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 87.337701][ T5850] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 87.343792][ T5846] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 87.353014][ T5850] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 87.365752][ T5850] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 87.373114][ T5850] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 87.380376][ T5846] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 87.390158][ T5846] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 87.395333][ T5850] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 87.398049][ T5846] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 87.417410][ T5846] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 87.417702][ T5849] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 87.430298][ T5846] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 87.441529][ T5846] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 87.460276][ T5840] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 87.475584][ T5840] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 87.849250][ T5833] chnl_net:caif_netlink_parms(): no params data found [ 87.868733][ T5835] chnl_net:caif_netlink_parms(): no params data found [ 87.922417][ T5834] chnl_net:caif_netlink_parms(): no params data found [ 87.973178][ T5832] chnl_net:caif_netlink_parms(): no params data found [ 88.076023][ T5835] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.083253][ T5835] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.091950][ T5835] bridge_slave_0: entered allmulticast mode [ 88.098955][ T5835] bridge_slave_0: entered promiscuous mode [ 88.108945][ T5835] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.116188][ T5835] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.123372][ T5835] bridge_slave_1: entered allmulticast mode [ 88.130824][ T5835] bridge_slave_1: entered promiscuous mode [ 88.177233][ T5833] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.184400][ T5833] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.192920][ T5833] bridge_slave_0: entered allmulticast mode [ 88.199775][ T5833] bridge_slave_0: entered promiscuous mode [ 88.208377][ T5833] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.215884][ T5833] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.223029][ T5833] bridge_slave_1: entered allmulticast mode [ 88.230151][ T5833] bridge_slave_1: entered promiscuous mode [ 88.291651][ T5835] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.313130][ T5832] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.320549][ T5832] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.327893][ T5832] bridge_slave_0: entered allmulticast mode [ 88.334627][ T5832] bridge_slave_0: entered promiscuous mode [ 88.342234][ T5832] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.349446][ T5832] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.357062][ T5832] bridge_slave_1: entered allmulticast mode [ 88.363887][ T5832] bridge_slave_1: entered promiscuous mode [ 88.370789][ T5834] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.378005][ T5834] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.385367][ T5834] bridge_slave_0: entered allmulticast mode [ 88.392083][ T5834] bridge_slave_0: entered promiscuous mode [ 88.401577][ T5835] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.420109][ T5833] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.437266][ T5834] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.444452][ T5834] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.451789][ T5834] bridge_slave_1: entered allmulticast mode [ 88.458821][ T5834] bridge_slave_1: entered promiscuous mode [ 88.477231][ T5833] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.513773][ T5835] team0: Port device team_slave_0 added [ 88.530289][ T5832] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.550306][ T5835] team0: Port device team_slave_1 added [ 88.566366][ T5833] team0: Port device team_slave_0 added [ 88.574114][ T5832] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.594701][ T5834] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.606960][ T5833] team0: Port device team_slave_1 added [ 88.631674][ T5834] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.652037][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.659164][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.685669][ T5835] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.701889][ T5832] team0: Port device team_slave_0 added [ 88.725535][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.732518][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.758834][ T5835] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.771707][ T5832] team0: Port device team_slave_1 added [ 88.789225][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.796597][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.822942][ T5833] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.871700][ T5834] team0: Port device team_slave_0 added [ 88.879646][ T5834] team0: Port device team_slave_1 added [ 88.887943][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.894913][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.921076][ T5833] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.937978][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.945297][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.971389][ T5832] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.012601][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.025116][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.052069][ T5832] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.076380][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.083378][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.109784][ T5834] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.127353][ T5835] hsr_slave_0: entered promiscuous mode [ 89.134144][ T5835] hsr_slave_1: entered promiscuous mode [ 89.151957][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.159260][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.186576][ T5834] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.258208][ T5833] hsr_slave_0: entered promiscuous mode [ 89.268236][ T5833] hsr_slave_1: entered promiscuous mode [ 89.274375][ T5833] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 89.282817][ T5833] Cannot create hsr debugfs directory [ 89.308669][ T5832] hsr_slave_0: entered promiscuous mode [ 89.314966][ T5832] hsr_slave_1: entered promiscuous mode [ 89.321594][ T5832] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 89.329295][ T5832] Cannot create hsr debugfs directory [ 89.344446][ T5834] hsr_slave_0: entered promiscuous mode [ 89.351295][ T5834] hsr_slave_1: entered promiscuous mode [ 89.358133][ T5834] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 89.365795][ T5834] Cannot create hsr debugfs directory [ 89.486396][ T5840] Bluetooth: hci2: command tx timeout [ 89.489059][ T55] Bluetooth: hci3: command tx timeout [ 89.498253][ T5145] Bluetooth: hci1: command tx timeout [ 89.565810][ T5145] Bluetooth: hci0: command tx timeout [ 89.692402][ T5833] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 89.704413][ T5833] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 89.725633][ T5833] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 89.740420][ T5833] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 89.794318][ T5834] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 89.805340][ T5834] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 89.821764][ T5834] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 89.840233][ T5834] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 89.910296][ T5835] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 89.930280][ T5835] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 89.940747][ T5835] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 89.967114][ T5835] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 90.023390][ T5832] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 90.040486][ T5832] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 90.067629][ T5832] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 90.077858][ T5832] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 90.096707][ T5833] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.136839][ T5833] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.178543][ T3459] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.185904][ T3459] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.199532][ T3459] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.206698][ T3459] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.330259][ T5835] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.382183][ T5834] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.402869][ T5832] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.417414][ T5835] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.449274][ T5834] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.464236][ T62] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.471485][ T62] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.495857][ T82] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.502996][ T82] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.523517][ T5832] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.541393][ T82] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.548610][ T82] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.573774][ T82] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.580942][ T82] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.619741][ T82] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.626900][ T82] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.650450][ T82] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.657620][ T82] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.713441][ T5833] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.870622][ T5833] veth0_vlan: entered promiscuous mode [ 90.899372][ T5833] veth1_vlan: entered promiscuous mode [ 90.977275][ T5833] veth0_macvtap: entered promiscuous mode [ 90.998234][ T5833] veth1_macvtap: entered promiscuous mode [ 91.069027][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.103073][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.138526][ T5833] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.149790][ T5833] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.159428][ T5833] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.169014][ T5833] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.213244][ T5834] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.256654][ T5835] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.284473][ T5832] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.354742][ T5834] veth0_vlan: entered promiscuous mode [ 91.370814][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.389101][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.428487][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.437184][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.448246][ T5834] veth1_vlan: entered promiscuous mode [ 91.518787][ T5835] veth0_vlan: entered promiscuous mode [ 91.544502][ T5832] veth0_vlan: entered promiscuous mode [ 91.553270][ T5833] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 91.555901][ T5834] veth0_macvtap: entered promiscuous mode [ 91.574341][ T5145] Bluetooth: hci1: command tx timeout [ 91.580321][ T5145] Bluetooth: hci3: command tx timeout [ 91.586143][ T55] Bluetooth: hci2: command tx timeout [ 91.603730][ T5835] veth1_vlan: entered promiscuous mode [ 91.629798][ T5834] veth1_macvtap: entered promiscuous mode [ 91.644832][ T5832] veth1_vlan: entered promiscuous mode [ 91.651393][ T5145] Bluetooth: hci0: command tx timeout [ 91.681697][ T5835] veth0_macvtap: entered promiscuous mode [ 91.691589][ T5835] veth1_macvtap: entered promiscuous mode [ 91.708670][ T5835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.719521][ T5835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.733095][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.779709][ T5834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.790325][ T5834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.800478][ T5834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.811514][ T5834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.823792][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.859316][ T5834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.869964][ T5834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.881209][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.893545][ T5832] veth0_macvtap: entered promiscuous mode [ 91.907775][ T5835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.921526][ T5835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.932816][ T5835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.947333][ T5835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.961179][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.975696][ T5835] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.984486][ T5835] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.994016][ T5835] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.003572][ T5835] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.021228][ T5834] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.030518][ T5834] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.039931][ T5834] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.057125][ T8] cfg80211: failed to load regulatory.db [ 92.064071][ T5834] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.090387][ T5832] veth1_macvtap: entered promiscuous mode [ 92.113939][ T5832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.126905][ T5832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.138627][ T5832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.149639][ T5832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.159942][ T5832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.170916][ T5832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.182700][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.209642][ T5832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.220764][ T5832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.231493][ T5832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.242438][ T5832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.252805][ T5832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.263704][ T5832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.281139][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.341621][ T5832] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.354705][ T5832] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.366113][ T5832] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.374948][ T5832] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.511292][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.536411][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.620850][ T1088] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.653376][ T1088] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.763183][ T1088] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.780485][ T1088] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.933441][ T3005] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.960492][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.973775][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.977737][ T3005] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.052654][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.068498][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.253722][ T5910] Zero length message leads to an empty skb [ 93.436467][ T5916] binder: 5915:5916 ioctl 40044900 800000000000003 returned -22 [ 93.647973][ T5145] Bluetooth: hci3: command tx timeout [ 93.654067][ T55] Bluetooth: hci2: command tx timeout [ 93.663043][ T55] Bluetooth: hci1: command tx timeout [ 93.725469][ T5840] Bluetooth: hci0: command tx timeout [ 94.453598][ T5925] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7'. [ 94.685840][ T5921] binder: 5915:5921 ioctl c040564b 38 returned -22 [ 94.832975][ T5932] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 95.730531][ T55] Bluetooth: hci1: command tx timeout [ 95.737056][ T55] Bluetooth: hci3: command tx timeout [ 95.742522][ T55] Bluetooth: hci2: command tx timeout [ 95.820095][ T5840] Bluetooth: hci0: command tx timeout [ 98.536362][ T5988] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 100.061575][ T5992] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 100.864469][ T6040] netlink: 244 bytes leftover after parsing attributes in process `syz.1.33'. [ 101.061875][ T6046] binder: 6043:6046 ioctl 40044900 800000000000003 returned -22 [ 101.813887][ T6058] binder: 6043:6058 ioctl c040564b 38 returned -22 [ 102.235986][ T6067] ======================================================= [ 102.235986][ T6067] WARNING: The mand mount option has been deprecated and [ 102.235986][ T6067] and is ignored by this kernel. Remove the mand [ 102.235986][ T6067] option from the mount to silence this warning. [ 102.235986][ T6067] ======================================================= [ 102.588126][ T6072] netlink: 342 bytes leftover after parsing attributes in process `syz.2.39'. [ 107.822500][ T6151] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 109.871948][ T6200] Invalid ELF header magic: != ELF [ 110.465804][ T6210] sock: sock_set_timeout: `syz.0.75' (pid 6210) tries to set negative timeout [ 110.977085][ T6223] binder: 6221:6223 ioctl 1 3 returned -22 [ 112.423058][ T6243] netlink: 342 bytes leftover after parsing attributes in process `syz.3.83'. [ 117.947967][ T6318] netlink: 8 bytes leftover after parsing attributes in process `syz.3.95'. [ 120.949483][ T6405] netlink: 28 bytes leftover after parsing attributes in process `syz.0.115'. [ 121.090669][ T6409] mmap: syz.3.116 (6409) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 121.976063][ T29] audit: type=1806 audit(1735279487.751:2): xattr="." res=0 [ 123.555585][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 123.745280][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 124.331112][ T6507] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 124.401097][ T6507] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 124.641831][ T6531] netlink: 334 bytes leftover after parsing attributes in process `syz.2.135'. [ 125.930860][ T6561] netlink: 342 bytes leftover after parsing attributes in process `syz.2.142'. [ 127.769202][ T6601] netlink: 8 bytes leftover after parsing attributes in process `syz.0.149'. [ 127.934467][ T6598] delete_channel: no stack [ 129.490389][ T6622] smc: net device syz_tun applied user defined pnetid ETHTOOL [ 131.995562][ T6667] netlink: 4 bytes leftover after parsing attributes in process `syz.3.167'. [ 132.604335][ T6681] block nbd0: not configured, cannot reconfigure [ 132.948802][ T6689] HfR: entered promiscuous mode [ 133.025556][ T6681] ceph: Failed to parse sending metrics switch value 'J' [ 134.097152][ T6707] can: request_module (can-proto-0) failed. [ 134.139860][ T6695] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 135.105336][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 136.135161][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 136.143483][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 136.215219][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 136.223727][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 136.232371][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 136.289985][ T6750] netlink: 314 bytes leftover after parsing attributes in process `syz.0.190'. [ 138.431186][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.437890][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 139.026217][ T6789] netlink: 'syz.0.200': attribute type 1 has an invalid length. [ 139.272139][ T6800] [U] [ 139.275166][ T6800] [U] [ 139.277936][ T6800] [U] [ 139.280702][ T6800] [U] [ 139.284782][ T6800] [U] [ 139.287573][ T6800] [U] [ 139.290351][ T6800] [U] [ 139.293111][ T6800] [U] [ 139.297914][ T6800] [U] [ 139.300695][ T6800] [U] [ 139.303460][ T6800] [U] [ 139.306280][ T6800] [U] [ 139.311227][ T6800] [U] [ 139.314035][ T6800] [U] [ 139.316794][ T6800] [U] [ 139.319554][ T6800] [U] [ 139.323693][ T6800] [U] [ 139.326470][ T6800] [U] [ 139.329274][ T6800] [U] [ 139.332040][ T6800] [U] [ 139.335956][ T6800] [U] [ 139.338844][ T6800] [U] [ 139.341595][ T6800] [U] [ 139.344351][ T6800] [U] [ 139.350829][ T6800] [U] [ 139.353613][ T6800] [U] [ 139.356379][ T6800] [U] [ 139.359142][ T6800] [U] [ 139.373866][ T6800] [U] [ 139.376678][ T6800] [U] [ 139.379445][ T6800] [U] [ 139.382215][ T6800] [U] [ 139.426675][ T6800] [U] [ 139.429484][ T6800] [U] [ 139.432253][ T6800] [U] [ 139.435024][ T6800] [U] [ 139.455473][ T6800] [U] [ 139.458271][ T6800] [U] [ 139.461063][ T6800] [U] [ 139.463832][ T6800] [U] [ 139.473577][ T6800] [U] [ 139.476379][ T6800] [U] [ 139.479147][ T6800] [U] [ 139.481914][ T6800] [U] [ 139.515721][ T6800] [U] [ 139.518529][ T6800] [U] [ 139.521291][ T6800] [U] [ 139.524054][ T6800] [U] [ 139.552257][ T6800] [U] [ 139.555058][ T6800] [U] [ 139.557821][ T6800] [U] [ 139.560590][ T6800] [U] [ 139.590919][ T6800] [U] [ 139.593723][ T6800] [U] [ 139.596537][ T6800] [U] [ 139.599297][ T6800] [U] [ 139.620062][ T6808] random: crng reseeded on system resumption [ 139.638460][ T6800] [U] [ 139.641260][ T6800] [U] [ 139.644028][ T6800] [U] [ 139.646794][ T6800] [U] [ 139.676070][ T6800] [U] [ 139.678872][ T6800] [U] [ 139.681628][ T6800] [U] [ 139.684383][ T6800] [U] [ 139.726625][ T6800] [U] [ 139.729417][ T6800] [U] [ 139.732190][ T6800] [U] [ 139.734947][ T6800] [U] [ 139.756907][ T6800] [U] [ 139.759714][ T6800] [U] [ 139.762477][ T6800] [U] [ 139.765248][ T6800] [U] [ 139.774438][ T6800] [U] [ 139.777226][ T6800] [U] [ 139.779984][ T6800] [U] [ 139.782747][ T6800] [U] [ 139.795435][ T6800] [U] [ 139.798224][ T6800] [U] [ 139.800987][ T6800] [U] [ 139.803750][ T6800] [U] [ 139.842429][ T6800] [U] [ 139.845235][ T6800] [U] [ 139.848000][ T6800] [U] [ 139.850765][ T6800] [U] [ 139.887694][ T6800] [U] [ 139.890501][ T6800] [U] [ 139.893266][ T6800] [U] [ 139.896038][ T6800] [U] [ 139.921038][ T6800] [U] [ 139.923836][ T6800] [U] [ 139.926605][ T6800] [U] [ 139.929368][ T6800] [U] [ 140.035445][ T6800] [U] [ 140.038252][ T6800] [U] [ 140.041028][ T6800] [U] [ 140.043790][ T6800] [U] [ 140.144316][ T6800] [U] [ 140.147108][ T6800] [U] [ 140.149871][ T6800] [U] [ 140.152627][ T6800] [U] [ 140.294083][ T6800] [U] [ 140.296891][ T6800] [U] [ 140.299655][ T6800] [U] [ 140.302398][ T6800] [U] [ 140.335843][ T6800] [U] [ 140.338653][ T6800] [U] [ 140.341418][ T6800] [U] [ 140.344180][ T6800] [U] [ 140.387290][ T6800] [U] [ 140.678900][ T6809] warning: `syz.0.205' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 142.443934][ T6852] process 'syz.3.214' launched ':,' with NULL argv: empty string added [ 142.806568][ T6859] netlink: 4 bytes leftover after parsing attributes in process `syz.3.216'. [ 143.077023][ T6867] netlink: 28 bytes leftover after parsing attributes in process `syz.1.217'. [ 143.511837][ T6874] device-mapper: ioctl: Invalid ioctl structure: uuid , name , dev 400008000010006 [ 144.023465][ T6893] netlink: 5995 bytes leftover after parsing attributes in process `syz.2.224'. [ 145.842501][ T6933] netlink: 354 bytes leftover after parsing attributes in process `syz.3.233'. [ 146.259790][ T6939] delete_channel: no stack [ 146.293626][ T6942] could not allocate digest TFM handle [ 146.753138][ T6947] could not allocate digest TFM handle [ 147.270189][ T6982] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 148.514513][ T7011] netlink: 4 bytes leftover after parsing attributes in process `syz.1.250'. [ 149.653664][ T7038] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 150.115935][ T7051] Invalid input. Must be >= 4608 [ 150.316379][ T7053] openvswitch: netlink: IP tunnel TTL not specified. [ 150.898133][ T7069] netlink: 40 bytes leftover after parsing attributes in process `syz.1.264'. [ 152.024181][ T7092] netlink: 28 bytes leftover after parsing attributes in process `syz.0.267'. [ 152.780601][ T7092] bond0: (slave bond_slave_1): Releasing backup interface [ 154.895640][ T29] audit: type=1807 audit(2175.360:3): UNKNOWN=$ res=0 [ 154.902545][ T29] audit: type=1802 audit(2175.360:4): pid=7128 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.0.279" res=0 errno=0 [ 154.947802][ T7127] netlink: 7 bytes leftover after parsing attributes in process `syz.2.281'. [ 154.958759][ T7127] netlink: 7 bytes leftover after parsing attributes in process `syz.2.281'. [ 155.086888][ T7097] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 155.308320][ T7136] netlink: 4 bytes leftover after parsing attributes in process `syz.2.283'. [ 155.635451][ T7118] ima: policy update failed [ 155.641225][ T29] audit: type=1802 audit(2176.130:5): pid=7118 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.0.279" res=0 errno=0 [ 156.955521][ T7146] netlink: 326 bytes leftover after parsing attributes in process `syz.0.286'. [ 157.437633][ T7158] netlink: 11 bytes leftover after parsing attributes in process `syz.1.288'. [ 158.084420][ T7167] binder: 7166:7167 ioctl c0306201 0 returned -14 [ 158.946814][ T7178] Invalid input. Must be >= 4608 [ 159.153542][ T7182] openvswitch: netlink: IP tunnel TTL not specified. [ 162.571962][ T7261] QAT: failed to copy from user cfg_data. [ 162.691389][ T7262] program syz.2.304 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 162.755416][ T7265] futex_wake_op: syz.2.304 tries to shift op by 64; fix this program [ 162.825821][ T7265] futex_wake_op: syz.2.304 tries to shift op by 64; fix this program [ 162.877096][ T7261] syz.2.304 uses obsolete (PF_INET,SOCK_PACKET) [ 166.920655][ T7325] netlink: 7 bytes leftover after parsing attributes in process `syz.3.316'. [ 166.948456][ T7325] netlink: 7 bytes leftover after parsing attributes in process `syz.3.316'. [ 167.947914][ T7343] netlink: 326 bytes leftover after parsing attributes in process `syz.3.320'. [ 168.696508][ T7358] netlink: 8 bytes leftover after parsing attributes in process `syz.0.324'. [ 171.616515][ T7405] netlink: 330 bytes leftover after parsing attributes in process `syz.3.333'. [ 171.747431][ T7412] netlink: 28 bytes leftover after parsing attributes in process `syz.0.337'. [ 173.986752][ T7449] netlink: 330 bytes leftover after parsing attributes in process `syz.0.347'. [ 174.503336][ T7456] netlink: 330 bytes leftover after parsing attributes in process `syz.2.348'. [ 175.775923][ T7452] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 175.792910][ T7452] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 175.853276][ T7452] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 175.891479][ T7452] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 175.903030][ T7452] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 175.964576][ T7452] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 176.037003][ T7452] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 176.044604][ T7452] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 176.099707][ T7452] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 176.133214][ T7452] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 176.144787][ T7482] binder: 7481:7482 ioctl c0306201 0 returned -14 [ 176.159902][ T7452] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 176.193608][ T7452] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 176.605084][ T5840] Bluetooth: hci0: command 0x0c1a tx timeout [ 177.975402][ T5840] Bluetooth: hci2: command 0x0c1a tx timeout [ 178.045702][ T5840] Bluetooth: hci1: command 0x0c1a tx timeout [ 178.215163][ T5840] Bluetooth: hci3: command 0x0c1a tx timeout [ 178.685146][ T5840] Bluetooth: hci0: command 0x0c1a tx timeout [ 180.046177][ T5840] Bluetooth: hci2: command 0x0c1a tx timeout [ 180.090114][ T7534] netlink: 4 bytes leftover after parsing attributes in process `syz.0.366'. [ 180.125890][ T5840] Bluetooth: hci1: command 0x0c1a tx timeout [ 180.285243][ T5840] Bluetooth: hci3: command 0x0c1a tx timeout [ 180.765105][ T5840] Bluetooth: hci0: command 0x0c1a tx timeout [ 181.627568][ T29] audit: type=1800 audit(4294967302.980:6): pid=7568 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.376" name="SYSV0000000a" dev="hugetlbfs" ino=0 res=0 errno=0 [ 182.080488][ T7574] syz.0.377(7574): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 182.161755][ T5840] Bluetooth: hci2: command 0x0c1a tx timeout [ 182.205233][ T5840] Bluetooth: hci1: command 0x0c1a tx timeout [ 182.365106][ T5840] Bluetooth: hci3: command 0x0c1a tx timeout [ 185.613274][ T7594] netlink: 330 bytes leftover after parsing attributes in process `syz.1.383'. [ 187.562950][ T7643] netlink: 330 bytes leftover after parsing attributes in process `syz.3.395'. [ 188.228549][ T7657] netlink: 4 bytes leftover after parsing attributes in process `syz.2.399'. [ 188.521029][ T7652] netlink: 4 bytes leftover after parsing attributes in process `syz.1.398'. [ 188.742810][ T7655] cgroup: fork rejected by pids controller in /syz3 [ 189.078791][ T7655] KVM: debugfs: duplicate directory 7655-3 [ 189.098641][ T7655] KVM: debugfs: duplicate directory 7655-4 [ 189.452805][ T7655] KVM: debugfs: duplicate directory 7655-4 [ 189.476290][ T7655] KVM: debugfs: duplicate directory 7655-5 [ 189.868761][ T7655] KVM: debugfs: duplicate directory 7655-5 [ 190.251240][ T7728] netlink: 334 bytes leftover after parsing attributes in process `syz.0.410'. [ 190.518561][ T7732] snd_aloop snd_aloop.0: control 1:6:6:ͺΈθ^ [ 190.518561][ T7732] :0 is already present [ 192.143573][ T7756] netlink: Unknown conntrack attr (type=64, max=9) [ 194.615864][ T7806] netlink: 28 bytes leftover after parsing attributes in process `syz.1.430'. [ 195.006319][ T7806] team0: Port device team_slave_0 removed [ 196.477631][ T7851] FAULT_INJECTION: forcing a failure. [ 196.477631][ T7851] name failslab, interval 1, probability 0, space 0, times 1 [ 196.498119][ T7851] CPU: 0 UID: 0 PID: 7851 Comm: syz.3.441 Not tainted 6.13.0-rc4-syzkaller-00054-gd6ef8b40d075 #0 [ 196.508790][ T7851] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 196.518900][ T7851] Call Trace: [ 196.522212][ T7851] [ 196.525179][ T7851] dump_stack_lvl+0x16c/0x1f0 [ 196.529927][ T7851] should_fail_ex+0x497/0x5b0 [ 196.534665][ T7851] ? fs_reclaim_acquire+0xae/0x150 [ 196.539833][ T7851] should_failslab+0xc2/0x120 [ 196.544569][ T7851] kmem_cache_alloc_node_noprof+0x72/0x3b0 [ 196.550450][ T7851] ? __alloc_skb+0x2b3/0x380 [ 196.555118][ T7851] __alloc_skb+0x2b3/0x380 [ 196.559612][ T7851] ? __pfx___alloc_skb+0x10/0x10 [ 196.564632][ T7851] netlink_alloc_large_skb+0x69/0x130 [ 196.570062][ T7851] netlink_sendmsg+0x689/0xd70 [ 196.574896][ T7851] ? __pfx_netlink_sendmsg+0x10/0x10 [ 196.580252][ T7851] ____sys_sendmsg+0x9ae/0xb40 [ 196.585065][ T7851] ? copy_msghdr_from_user+0x10b/0x160 [ 196.590595][ T7851] ? __pfx_____sys_sendmsg+0x10/0x10 [ 196.595938][ T7851] ? __lock_acquire+0xcc5/0x3c40 [ 196.600930][ T7851] ? hlock_class+0x4e/0x130 [ 196.605494][ T7851] ? __lock_acquire+0x15a9/0x3c40 [ 196.610570][ T7851] ___sys_sendmsg+0x135/0x1e0 [ 196.615315][ T7851] ? __pfx____sys_sendmsg+0x10/0x10 [ 196.620577][ T7851] ? __pfx___lock_acquire+0x10/0x10 [ 196.625853][ T7851] ? __pfx___might_resched+0x10/0x10 [ 196.631187][ T7851] ? __might_fault+0xe3/0x190 [ 196.635938][ T7851] __sys_sendmmsg+0x201/0x420 [ 196.640679][ T7851] ? __pfx___sys_sendmmsg+0x10/0x10 [ 196.645955][ T7851] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 196.652014][ T7851] ? fput+0x67/0x440 [ 196.655984][ T7851] ? ksys_write+0x1ba/0x250 [ 196.660550][ T7851] ? __pfx_ksys_write+0x10/0x10 [ 196.665464][ T7851] __x64_sys_sendmmsg+0x9c/0x100 [ 196.670471][ T7851] ? lockdep_hardirqs_on+0x7c/0x110 [ 196.675741][ T7851] do_syscall_64+0xcd/0x250 [ 196.680317][ T7851] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 196.686262][ T7851] RIP: 0033:0x7f46a9585d29 [ 196.690718][ T7851] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 196.710401][ T7851] RSP: 002b:00007f46aa3ad038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 196.718866][ T7851] RAX: ffffffffffffffda RBX: 00007f46a9775fa0 RCX: 00007f46a9585d29 [ 196.726885][ T7851] RDX: 0000000000000003 RSI: 0000000020000080 RDI: 0000000000000003 [ 196.734911][ T7851] RBP: 00007f46aa3ad090 R08: 0000000000000000 R09: 0000000000000000 [ 196.742927][ T7851] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 196.750934][ T7851] R13: 0000000000000000 R14: 00007f46a9775fa0 R15: 00007ffe15806f68 [ 196.758965][ T7851] [ 198.465621][ T7882] netlink: 338 bytes leftover after parsing attributes in process `syz.2.447'. [ 199.531440][ T7939] FAULT_INJECTION: forcing a failure. [ 199.531440][ T7939] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 199.568079][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.574834][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 199.585238][ T7939] CPU: 0 UID: 0 PID: 7939 Comm: syz.0.460 Not tainted 6.13.0-rc4-syzkaller-00054-gd6ef8b40d075 #0 [ 199.595918][ T7939] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 199.606029][ T7939] Call Trace: [ 199.609352][ T7939] [ 199.612323][ T7939] dump_stack_lvl+0x16c/0x1f0 [ 199.617070][ T7939] should_fail_ex+0x497/0x5b0 [ 199.621830][ T7939] _copy_from_iter+0x29b/0x1400 [ 199.626759][ T7939] ? trace_lock_acquire+0x14e/0x1f0 [ 199.632029][ T7939] ? __alloc_skb+0x200/0x380 [ 199.636694][ T7939] ? __pfx__copy_from_iter+0x10/0x10 [ 199.642046][ T7939] ? __virt_addr_valid+0x1a4/0x590 [ 199.647230][ T7939] ? __virt_addr_valid+0x5e/0x590 [ 199.652329][ T7939] ? __phys_addr_symbol+0x30/0x80 [ 199.657427][ T7939] ? __check_object_size+0x488/0x710 [ 199.662787][ T7939] netlink_sendmsg+0x813/0xd70 [ 199.667618][ T7939] ? __pfx_netlink_sendmsg+0x10/0x10 [ 199.672981][ T7939] ____sys_sendmsg+0x9ae/0xb40 [ 199.677810][ T7939] ? copy_msghdr_from_user+0x10b/0x160 [ 199.683346][ T7939] ? __pfx_____sys_sendmsg+0x10/0x10 [ 199.688693][ T7939] ? __lock_acquire+0xcc5/0x3c40 [ 199.693687][ T7939] ? hlock_class+0x4e/0x130 [ 199.698254][ T7939] ? __lock_acquire+0x15a9/0x3c40 [ 199.703338][ T7939] ___sys_sendmsg+0x135/0x1e0 [ 199.708086][ T7939] ? __pfx____sys_sendmsg+0x10/0x10 [ 199.713351][ T7939] ? __pfx___lock_acquire+0x10/0x10 [ 199.718645][ T7939] ? __pfx___might_resched+0x10/0x10 [ 199.723990][ T7939] ? __might_fault+0xe3/0x190 [ 199.728751][ T7939] __sys_sendmmsg+0x201/0x420 [ 199.733507][ T7939] ? __pfx___sys_sendmmsg+0x10/0x10 [ 199.738799][ T7939] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 199.744858][ T7939] ? fput+0x67/0x440 [ 199.748823][ T7939] ? ksys_write+0x1ba/0x250 [ 199.753381][ T7939] ? __pfx_ksys_write+0x10/0x10 [ 199.758299][ T7939] __x64_sys_sendmmsg+0x9c/0x100 [ 199.763312][ T7939] ? lockdep_hardirqs_on+0x7c/0x110 [ 199.768578][ T7939] do_syscall_64+0xcd/0x250 [ 199.773147][ T7939] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 199.779113][ T7939] RIP: 0033:0x7f4ba9f85d29 [ 199.783586][ T7939] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 199.803253][ T7939] RSP: 002b:00007f4baae34038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 199.811810][ T7939] RAX: ffffffffffffffda RBX: 00007f4baa175fa0 RCX: 00007f4ba9f85d29 [ 199.819845][ T7939] RDX: 0000000000000003 RSI: 0000000020000080 RDI: 0000000000000003 [ 199.827868][ T7939] RBP: 00007f4baae34090 R08: 0000000000000000 R09: 0000000000000000 [ 199.835890][ T7939] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 199.843909][ T7939] R13: 0000000000000000 R14: 00007f4baa175fa0 R15: 00007ffda4eb7028 [ 199.851950][ T7939] [ 201.416060][ T7990] FAULT_INJECTION: forcing a failure. [ 201.416060][ T7990] name failslab, interval 1, probability 0, space 0, times 0 [ 201.455383][ T7990] CPU: 1 UID: 0 PID: 7990 Comm: syz.0.471 Not tainted 6.13.0-rc4-syzkaller-00054-gd6ef8b40d075 #0 [ 201.466086][ T7990] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 201.476184][ T7990] Call Trace: [ 201.479488][ T7990] [ 201.482455][ T7990] dump_stack_lvl+0x16c/0x1f0 [ 201.487173][ T7990] should_fail_ex+0x497/0x5b0 [ 201.491889][ T7990] should_failslab+0xc2/0x120 [ 201.496616][ T7990] kmem_cache_alloc_noprof+0x6e/0x3b0 [ 201.502026][ T7990] ? skb_clone+0x190/0x3f0 [ 201.506485][ T7990] skb_clone+0x190/0x3f0 [ 201.510788][ T7990] netlink_deliver_tap+0xafd/0xca0 [ 201.515939][ T7990] netlink_unicast+0x5e1/0x7f0 [ 201.520765][ T7990] ? __pfx_netlink_unicast+0x10/0x10 [ 201.526079][ T7990] ? __phys_addr_symbol+0x30/0x80 [ 201.531134][ T7990] ? __check_object_size+0x488/0x710 [ 201.536461][ T7990] netlink_sendmsg+0x8b8/0xd70 [ 201.541262][ T7990] ? __pfx_netlink_sendmsg+0x10/0x10 [ 201.546600][ T7990] ____sys_sendmsg+0x9ae/0xb40 [ 201.551397][ T7990] ? copy_msghdr_from_user+0x10b/0x160 [ 201.556992][ T7990] ? __pfx_____sys_sendmsg+0x10/0x10 [ 201.562308][ T7990] ? __lock_acquire+0xcc5/0x3c40 [ 201.567276][ T7990] ? hlock_class+0x4e/0x130 [ 201.571819][ T7990] ? __lock_acquire+0x15a9/0x3c40 [ 201.576884][ T7990] ___sys_sendmsg+0x135/0x1e0 [ 201.581606][ T7990] ? __pfx____sys_sendmsg+0x10/0x10 [ 201.586846][ T7990] ? __pfx___lock_acquire+0x10/0x10 [ 201.592101][ T7990] ? __pfx___might_resched+0x10/0x10 [ 201.597419][ T7990] ? __might_fault+0xe3/0x190 [ 201.602143][ T7990] __sys_sendmmsg+0x201/0x420 [ 201.606862][ T7990] ? __pfx___sys_sendmmsg+0x10/0x10 [ 201.612114][ T7990] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 201.618143][ T7990] ? fput+0x67/0x440 [ 201.622078][ T7990] ? ksys_write+0x1ba/0x250 [ 201.626615][ T7990] ? __pfx_ksys_write+0x10/0x10 [ 201.631531][ T7990] __x64_sys_sendmmsg+0x9c/0x100 [ 201.636513][ T7990] ? lockdep_hardirqs_on+0x7c/0x110 [ 201.641751][ T7990] do_syscall_64+0xcd/0x250 [ 201.646299][ T7990] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 201.652229][ T7990] RIP: 0033:0x7f4ba9f85d29 [ 201.656666][ T7990] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 201.676395][ T7990] RSP: 002b:00007f4baae34038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 201.684840][ T7990] RAX: ffffffffffffffda RBX: 00007f4baa175fa0 RCX: 00007f4ba9f85d29 [ 201.692840][ T7990] RDX: 0000000000000003 RSI: 0000000020000080 RDI: 0000000000000003 [ 201.700835][ T7990] RBP: 00007f4baae34090 R08: 0000000000000000 R09: 0000000000000000 [ 201.708830][ T7990] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 201.716823][ T7990] R13: 0000000000000000 R14: 00007f4baa175fa0 R15: 00007ffda4eb7028 [ 201.724834][ T7990] [ 201.805247][ T7990] netlink: 330 bytes leftover after parsing attributes in process `syz.0.471'. [ 202.357394][ T29] audit: type=1800 audit(8277292047.720:7): pid=8000 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.473" name="discovery_nqn" dev="configfs" ino=16182 res=0 errno=0 [ 202.967946][ T8008] Process accounting resumed [ 203.601148][ T8029] netlink: 330 bytes leftover after parsing attributes in process `syz.0.480'. [ 203.628368][ T8029] FAULT_INJECTION: forcing a failure. [ 203.628368][ T8029] name failslab, interval 1, probability 0, space 0, times 0 [ 203.651766][ T8029] CPU: 0 UID: 0 PID: 8029 Comm: syz.0.480 Not tainted 6.13.0-rc4-syzkaller-00054-gd6ef8b40d075 #0 [ 203.662457][ T8029] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 203.672571][ T8029] Call Trace: [ 203.675888][ T8029] [ 203.678865][ T8029] dump_stack_lvl+0x16c/0x1f0 [ 203.683608][ T8029] should_fail_ex+0x497/0x5b0 [ 203.688350][ T8029] ? fs_reclaim_acquire+0xae/0x150 [ 203.693522][ T8029] should_failslab+0xc2/0x120 [ 203.698786][ T8029] kmem_cache_alloc_node_noprof+0x72/0x3b0 [ 203.704664][ T8029] ? __alloc_skb+0x2b3/0x380 [ 203.709324][ T8029] __alloc_skb+0x2b3/0x380 [ 203.713817][ T8029] ? __pfx___alloc_skb+0x10/0x10 [ 203.718841][ T8029] ? rtnetlink_rcv_msg+0x3e6/0xea0 [ 203.724025][ T8029] netlink_ack+0x164/0xb20 [ 203.728507][ T8029] netlink_rcv_skb+0x327/0x410 [ 203.733328][ T8029] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 203.738863][ T8029] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 203.744227][ T8029] ? netlink_deliver_tap+0x1ae/0xca0 [ 203.749572][ T8029] netlink_unicast+0x53c/0x7f0 [ 203.754406][ T8029] ? __pfx_netlink_unicast+0x10/0x10 [ 203.759755][ T8029] ? __phys_addr_symbol+0x30/0x80 [ 203.764837][ T8029] ? __check_object_size+0x488/0x710 [ 203.770187][ T8029] netlink_sendmsg+0x8b8/0xd70 [ 203.775014][ T8029] ? __pfx_netlink_sendmsg+0x10/0x10 [ 203.780368][ T8029] ____sys_sendmsg+0x9ae/0xb40 [ 203.785194][ T8029] ? copy_msghdr_from_user+0x10b/0x160 [ 203.790721][ T8029] ? __pfx_____sys_sendmsg+0x10/0x10 [ 203.796055][ T8029] ? __lock_acquire+0xcc5/0x3c40 [ 203.801046][ T8029] ? hlock_class+0x4e/0x130 [ 203.805610][ T8029] ? __lock_acquire+0x15a9/0x3c40 [ 203.810698][ T8029] ___sys_sendmsg+0x135/0x1e0 [ 203.815448][ T8029] ? __pfx____sys_sendmsg+0x10/0x10 [ 203.820710][ T8029] ? __pfx___lock_acquire+0x10/0x10 [ 203.825990][ T8029] ? __pfx___might_resched+0x10/0x10 [ 203.831337][ T8029] ? __might_fault+0xe3/0x190 [ 203.836100][ T8029] __sys_sendmmsg+0x201/0x420 [ 203.840861][ T8029] ? __pfx___sys_sendmmsg+0x10/0x10 [ 203.846153][ T8029] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 203.852208][ T8029] ? fput+0x67/0x440 [ 203.856169][ T8029] ? ksys_write+0x1ba/0x250 [ 203.860726][ T8029] ? __pfx_ksys_write+0x10/0x10 [ 203.865637][ T8029] __x64_sys_sendmmsg+0x9c/0x100 [ 203.870639][ T8029] ? lockdep_hardirqs_on+0x7c/0x110 [ 203.875893][ T8029] do_syscall_64+0xcd/0x250 [ 203.880467][ T8029] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 203.886429][ T8029] RIP: 0033:0x7f4ba9f85d29 [ 203.890890][ T8029] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 203.910568][ T8029] RSP: 002b:00007f4baae34038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 203.919036][ T8029] RAX: ffffffffffffffda RBX: 00007f4baa175fa0 RCX: 00007f4ba9f85d29 [ 203.927054][ T8029] RDX: 0000000000000003 RSI: 0000000020000080 RDI: 0000000000000003 [ 203.935068][ T8029] RBP: 00007f4baae34090 R08: 0000000000000000 R09: 0000000000000000 [ 203.943083][ T8029] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 203.951097][ T8029] R13: 0000000000000000 R14: 00007f4baa175fa0 R15: 00007ffda4eb7028 [ 203.959131][ T8029] [ 205.871796][ T8071] netlink: 330 bytes leftover after parsing attributes in process `syz.3.490'. [ 207.587286][ T8106] lo: entered allmulticast mode [ 207.639842][ T8106] netlink: 28 bytes leftover after parsing attributes in process `syz.2.500'. [ 208.127729][ T8116] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000007: 0000 [#1] PREEMPT SMP KASAN PTI [ 208.140385][ T8116] KASAN: null-ptr-deref in range [0x0000000000000038-0x000000000000003f] [ 208.148830][ T8116] CPU: 1 UID: 0 PID: 8116 Comm: syz.1.502 Not tainted 6.13.0-rc4-syzkaller-00054-gd6ef8b40d075 #0 [ 208.159461][ T8116] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 208.169556][ T8116] RIP: 0010:sctp_copy_local_addr_list+0x2bc/0x5a0 [ 208.176030][ T8116] Code: 20 00 0f 85 ac 02 00 00 48 8b 1b 4c 39 fb 0f 84 98 01 00 00 e8 f5 d4 3c f7 48 8d 7b 3d 48 89 f8 48 89 fa 48 c1 e8 03 83 e2 07 <42> 0f b6 04 20 38 d0 7f 08 84 c0 0f 85 86 02 00 00 44 0f b6 6b 3d [ 208.195773][ T8116] RSP: 0018:ffffc900035b7a40 EFLAGS: 00010206 [ 208.201886][ T8116] RAX: 0000000000000007 RBX: 0000000000000000 RCX: ffffffff8a5c7a8c [ 208.209887][ T8116] RDX: 0000000000000005 RSI: ffffffff8a5c7a5b RDI: 000000000000003d [ 208.217874][ T8116] RBP: ffffc900035b7b20 R08: 0000000000000001 R09: 0000000000000000 [ 208.225859][ T8116] R10: 0000000000000000 R11: 0000000000000000 R12: dffffc0000000000 [ 208.233859][ T8116] R13: 0000000000000000 R14: 0000000000000000 R15: ffff888034232e08 [ 208.241849][ T8116] FS: 00007f6e7360c6c0(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 208.250799][ T8116] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 208.257398][ T8116] CR2: 00007ffe15805fa8 CR3: 0000000024458000 CR4: 00000000003526f0 [ 208.265387][ T8116] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 208.273374][ T8116] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 208.281380][ T8116] Call Trace: [ 208.284671][ T8116] [ 208.287612][ T8116] ? die_addr+0x3b/0xa0 [ 208.291805][ T8116] ? exc_general_protection+0x155/0x230 [ 208.297907][ T8116] ? asm_exc_general_protection+0x26/0x30 [ 208.303654][ T8116] ? sctp_copy_local_addr_list+0x2dc/0x5a0 [ 208.309483][ T8116] ? sctp_copy_local_addr_list+0x2ab/0x5a0 [ 208.315318][ T8116] ? sctp_copy_local_addr_list+0x2bc/0x5a0 [ 208.321153][ T8116] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 208.327337][ T8116] ? sctp_auth_asoc_copy_shkeys+0x2a7/0x360 [ 208.333256][ T8116] ? sctp_bind_addr_copy+0xe0/0x530 [ 208.338503][ T8116] sctp_bind_addr_copy+0xe0/0x530 [ 208.343603][ T8116] sctp_connect_new_asoc+0x1d8/0x790 [ 208.348920][ T8116] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 208.354758][ T8116] ? sctp_get_af_specific+0x62/0x70 [ 208.359980][ T8116] __sctp_connect+0x3f5/0xc60 [ 208.364692][ T8116] ? sctp_inet_connect+0xac/0x200 [ 208.369745][ T8116] ? __pfx___sctp_connect+0x10/0x10 [ 208.374973][ T8116] ? __pfx_sctp_inet_connect+0x10/0x10 [ 208.380477][ T8116] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 208.386396][ T8116] ? __pfx_sctp_inet_connect+0x10/0x10 [ 208.391881][ T8116] sctp_inet_connect+0x15f/0x200 [ 208.396864][ T8116] __sys_connect_file+0x13e/0x1a0 [ 208.401914][ T8116] __sys_connect+0x14f/0x170 [ 208.406528][ T8116] ? __pfx___sys_connect+0x10/0x10 [ 208.411671][ T8116] ? rcu_is_watching+0x12/0xc0 [ 208.416513][ T8116] __x64_sys_connect+0x72/0xb0 [ 208.421300][ T8116] ? lockdep_hardirqs_on+0x7c/0x110 [ 208.426524][ T8116] do_syscall_64+0xcd/0x250 [ 208.431054][ T8116] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 208.436980][ T8116] RIP: 0033:0x7f6e72785d29 [ 208.441408][ T8116] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 208.461032][ T8116] RSP: 002b:00007f6e7360c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 208.469466][ T8116] RAX: ffffffffffffffda RBX: 00007f6e72976080 RCX: 00007f6e72785d29 [ 208.477450][ T8116] RDX: 0000000000000054 RSI: 0000000020000080 RDI: 0000000000000003 [ 208.485433][ T8116] RBP: 00007f6e72801b08 R08: 0000000000000000 R09: 0000000000000000 [ 208.493414][ T8116] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 208.501396][ T8116] R13: 0000000000000000 R14: 00007f6e72976080 R15: 00007fffc1a43078 [ 208.509386][ T8116] [ 208.512429][ T8116] Modules linked in: [ 208.517202][ T8116] ---[ end trace 0000000000000000 ]--- [ 208.585072][ T8116] RIP: 0010:sctp_copy_local_addr_list+0x2bc/0x5a0 [ 208.591705][ T8116] Code: 20 00 0f 85 ac 02 00 00 48 8b 1b 4c 39 fb 0f 84 98 01 00 00 e8 f5 d4 3c f7 48 8d 7b 3d 48 89 f8 48 89 fa 48 c1 e8 03 83 e2 07 <42> 0f b6 04 20 38 d0 7f 08 84 c0 0f 85 86 02 00 00 44 0f b6 6b 3d [ 208.637045][ T8116] RSP: 0018:ffffc900035b7a40 EFLAGS: 00010206 [ 208.646606][ T8116] RAX: 0000000000000007 RBX: 0000000000000000 RCX: ffffffff8a5c7a8c [ 208.697460][ T8116] RDX: 0000000000000005 RSI: ffffffff8a5c7a5b RDI: 000000000000003d [ 208.715100][ T8116] RBP: ffffc900035b7b20 R08: 0000000000000001 R09: 0000000000000000 [ 208.735116][ T8116] R10: 0000000000000000 R11: 0000000000000000 R12: dffffc0000000000 [ 208.754196][ T8116] R13: 0000000000000000 R14: 0000000000000000 R15: ffff888034232e08 [ 208.763922][ T8116] FS: 00007f6e7360c6c0(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 208.773565][ T8116] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 208.781830][ T8116] CR2: 0000000000000000 CR3: 0000000024458000 CR4: 00000000003526f0 [ 208.790309][ T8116] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 208.800140][ T8116] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 208.808360][ T8116] Kernel panic - not syncing: Fatal exception [ 208.814806][ T8116] Kernel Offset: disabled [ 208.819137][ T8116] Rebooting in 86400 seconds..