last executing test programs: 5m29.94815475s ago: executing program 1 (id=874): mmap$auto(0x0, 0x9, 0x3ff57696, 0x9b72, 0x2, 0x8000000000008000) (async, rerun: 64) io_uring_setup$auto(0x6, 0x0) (rerun: 64) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) (async, rerun: 32) r0 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) close_range$auto(0x2, 0x8, 0x0) (async) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) futex_wait$auto(0x0, 0x0, 0x80, 0x2, 0x0, 0x1) (async) futex_wake$auto(0x0, 0x7, 0xfffffffb, 0x2) (async, rerun: 64) ioperm$auto(0x7, 0x6, 0x2) (rerun: 64) mmap$auto(0x0, 0x2020009, 0x6, 0xeb1, 0x7, 0x0) futex_wait$auto(0x0, 0x0, 0x7f, 0x2, 0x0, 0x1) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$auto_OVS_FLOW_CMD_NEW(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000140)={0x20, r2, 0x1, 0x70bd2c, 0x24dfdbfc, {}, [@OVS_FLOW_ATTR_PROBE={0x4}, @OVS_FLOW_ATTR_PROBE={0x4}, @OVS_FLOW_ATTR_KEY={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x40) futex_wake$auto(0x0, 0x8, 0x7, 0x2) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) close$auto(r0) (async, rerun: 32) sendto$auto(0x3, 0x0, 0x8, 0x4000000e, &(0x7f0000000180)={0x2, @sa_data_min="7b3018691066b21bbc732bc0783a"}, 0x1c) (async, rerun: 32) bpf$auto(0x4, &(0x7f00000001c0)=@task_fd_query={0x9, 0x21eb, 0x801, 0x10008, 0x8000, 0x1000049, 0x5f, 0x20000000000803, 0x3}, 0x6f3) (async) r3 = socket(0x10, 0x3, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="120027"], 0x1ac}}, 0x40000) (async) mmap$auto(0xf000, 0x8, 0x1000000003, 0x9b72, 0x2, 0x8000) 5m28.901622546s ago: executing program 1 (id=881): mlockall$auto(0x7) io_uring_setup$auto(0x4bf15e08, &(0x7f0000000000)={0x405, 0x8, 0x20000006, 0x9, 0x8a, 0xfffffff7, 0xffffffffffffffff, [0x104, 0x9, 0x7f], {0x2, 0xb, 0x3034, 0xe, 0x4, 0x5, 0x2, 0xfffffff9, 0xf08a2b5}, {0x4000, 0x8, 0x9, 0x0, 0x0, 0xeca8, 0xd5, 0x836, 0x8}}) r0 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYBLOB='_\x00'], 0x1ac}, 0x1, 0x0, 0x0, 0x40}, 0x40000) listmount$auto(0xfffffffffffffffd, 0xfffffffffffffffc, 0x0, 0x1) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) io_cancel$auto(0x8, 0x0, 0x0) 5m28.75004702s ago: executing program 1 (id=883): mmap$auto(0x0, 0x20009, 0x7fffffff, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x9, 0x3, 0x8012, 0x3, 0x8000) madvise$auto(0x6, 0x4000008, 0x17) (async) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x10004) (async) setns(0xffffffffffffffff, 0x0) unshare$auto(0x40000080) (async) clone$auto(0x8001, 0x5, 0xffffffffffffffff, 0xfffffffffffffffc, 0x6) (async) writev$auto(0x1, &(0x7f0000000100)={0x0, 0x400000000000fdef}, 0x1) (async) socket(0x15, 0x5, 0x0) (async) fanotify_init$auto(0x65, 0x2) (async) pipe$auto(&(0x7f00000000c0)) splice$auto(0x4, 0x0, 0x2, 0x0, 0x80, 0x9) write$auto(0x6, &(0x7f0000000000)='(\x00', 0x100000001) (async) madvise$auto(0x0, 0xffffffffffff0005, 0x19) (async) close_range$auto(0x0, 0xfffffffffffff000, 0x2) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00') r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/net\x00') close_range$auto(0x0, 0xfffffffffffff000, 0x2) (async) socket$nl_generic(0x10, 0x3, 0x10) pidfd_open$auto(0x1, 0x0) (async) ioctl$NS_GET_PARENT(r0, 0xff03, 0x0) 5m26.260151358s ago: executing program 1 (id=887): mmap$auto(0x71, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffd, 0x8000) sendmsg$auto_TIPC_NL_PUBL_GET(0xffffffffffffffff, &(0x7f0000001440)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001400)={&(0x7f0000000080)=ANY=[@ANYBLOB="071300", @ANYRES16=0x0, @ANYBLOB="000429bd7000fddbdf2507000000480009000583bfe1cb935773c502cd1a2b2a9903106148fe0cea1e0f5e9ddea45e502110e421b7947d655180465650c326c6744842eeb6e9815994538fcc1530ad1e9ebdeb656bd85a0007008eeb2d306671f0cfac5ae64e0407abd0e16c1e5870b06f3207d324394abd5378786d5999677f2a857fdd5e6d8d893cc6470e8543c86657ff871e15f752e0423746d360840db681b0289db3ad860302d94e9285ca86a10000520002006479dd8150969cfbf6d666173842c2cb28729f186b22a68ad0d01a94eb28c6026b36357efd21f99313994fddfda5b416e53b2c29f047057484aedd7751d0158304a6984ec8ce4e8e4d6db4cc8ff70000e80000004db8d021c34c9090b6f1dbb53e639bd4166d82122bae71b3ae93ea8c056f957f9d30df43efd93395e863dda2bbc11b00d470efaa1fed6165f6493d918931f6c00af6f15fcf0847274858fbea4afb9e2cad07aa0c4bb4aba6ee01112a8861e344399e172c6c2c9ad3481df941c64265ae04799e02a2e2d941a9ab4ce8ef388d31694426afff9da5315bcb3b82349c645010bc76dbf888145c9cbbd129ba234def4f1326f6407ccc807d7188520c2c5d25696c115facf6a924f948a6ef8be112a1be7364503f3a094a2ae59074730ad9bd5a6f797aaedeb59d8b3625ebcf9535d8c4167529ad000200d345619c941912afddb7ea09a9757d5ca111050dcc9a85f58fc931a8975aa27935d05b898af0af1ecd412eceaf7acde661e051400c8ba8b9c66d1acd9dc14b26aa3d7011e7ace4da41c7acbc627add91c757a8cbac64b3d47616da74967bffbc70ae9f164bf958f77476712f20cfe16008cee8bf5b183dd96c9d5151376a88ba95699d4d63b15e65c8b0307c8de2d25407185025df435362cabf13870391d626119d69358eddf48f0a0000001f000400dd24cfd5c3687a80bdda1498e3ed7f35146917eb267adcdb7d438d0067000700bf8d5ab8fc3e9187c5820f1c28b0f71e82f1adde598b0f170dcccf6ac0892788531efeafd121ccdfb242e106dd3cbba12d77cb11cc7cac259a83e042c2c4b9bf5659486475e2ab98796359a161c510f9aa058ae38f1c3121f086a097bfcf9c65455e4200041008009d1149639ba394e8cd1687be0aaca14cd90769ab9a66ff3c90789d3ad7f4e94ec6768934b44bf315cbfd411974320262c3838f4126735c0df07091fa99b1281938c302c0d7c1bd16473283947185c0ec974bc305e5fd73469bd833cd01e13da8b88963127646aff7c3da6b25b3b3430de9ac75ecfada13b79acf5ff699d4e6eedaa33f68d4b316c76eca74f015812bc926c9448adb81473ff178ce6ab37bf2aab0b902049596d4a486cfbf6701b7308a6764e95ed15c440671293b10c2cf35c60c6a759c1b54620a88ba63ffe1dd42bbabcaf66379f88ccae89b19011c8fd21cda00acc23f3541126385a589de4fbdf8265a02c65b0db7e935e69d844d90967230c0a9e1e9b52dd9b9691cb9fc658cd0587cc7e6eed1c87fb7624c5f822022cb0eeba385b74439449e2c0cb64d86d1a139d01fffb110ec041ad9cadc9f6ac2cb936b1ae9e49fa92c697afa82aab77f694806737c8ebd239d67873e0f3c2b4c2d0665e984510ba8b0b7acbfe0b1db23055575ecdeef070d069f8e86d0d9872a59e85e43f0ebb64bc257b01b594e90485d6009c40e4a35bce5b02e258c2defeec81b7800af129616b0dd3fdc7fc91844a2da2c47e5d6e99eecf5abae03bb6481ef9eee687b34f86de26fa7b8190552dad0be4df7d0b7f97931e04c22dd809eb857538eb876998e61a3b60f15f5dc99d35f840b4c269da3f5ce6c1c82e41b661440084382b3be7990a89714402894659d63429a80320872094bd8693a3d85db18ceb25e5904a18fff404ac92fc80ca8bba6ab50ae673e779a938d03a2ef62e60035fbdb31e410abbbf18ffd69e60dc15b496c2b2bea8649e5076f641df194ff601d7b916a0e1f22a5f1b3ef4649bbde772535701084ea5148382954e797d49b2ae97cdea9a029e21cd904e1a8fb03dbeaeddc77a06a6447c43c32e9abb40a76aa802062ca9bcf074b031733c29712eddb8514de7de6ad85ddb189100cde6107c1fc2b3e3fbd2b86e161c660d162b7fe716b9c13db625647b007b2cf9d51edeb40b474fdb6cc84cec0e8fc553c385eab67df20981894f7e0cd531c8479c971ce438319860fe1bc71477b9d2c83839c4bf17ca5f1a15410038001d1d22402f8c92caacdb7369c876a7d92053b681b1bc896c399a8c2d2fc2e5ae7db64ca4b57dec495a65813ed9c8089fe18338c813f20de278ffea18df2c794f1d82d82b677a4338b0a150c149fb4229e708c1d195620d0b899427758e0e8a25d54ff4fc96adea98511d8f5c8c82496e764360b351da63c63b99cde5bb116e737b3cebd4765c6a77e59f761840a0d742db62d6b556c89e0f28794de5859f3a4b38b5643ffc25e1be2ebfd62cff25536945e49f0bdb9850c1672171c2fc5388c81ef4c31aaeae15859c9e004c719a10a07b8cd28ebe23648a1be380c000140b3701622e169274d74835721472b2a0e91aa92f90443e1b5701eb0606be5cb5b5d3d264c303fe71d3b8f6b0d6dd54d7de5f0a88aec2954d39aebf8c587ee96009c5dde2818e9bad320ea52521e5b615dd210f6f159a7e52b3e48a1f37fb090924ef61a9b17a8e85460e66a12b2600782702b051856161c150775258a481587a900fb08abcaa2f56fef8217f24619e7df28ed2783c85b71258455d6bf3f343f63b723ea06256e1b1edc383eeb80ee066c0777341cb5cb08c00f13a984e1e8cdef14e391d41eff54cca65b83f2a3fe7bffe458a2d29fffdd3a845052fc814d203a8e5fe946e0c559e36e89f51cb84612e212916297483485d4ce34d16a4a680ededd3cf0638133628cb7690388d4dc074d43caa4d9baf45703d28861d507f4b107bf1abb9fd7654aa3b29c5cef1e976cadbc249df8aee73d5989d8a24670c31dfd8597bf46dbda1595870ee9ae910cbc56e899b21b60779421b241836be7163b2fb1ee9470bacb7529ae57cfb0d53c21d80dec239e1eb3f4d9d006d80b67c263878441fe2a1b4ee048bfd52d5c27d080043b053670c7e56b8c33892bd9c5424842c70451f1cf203935bb2aaee9addcb4c961d0567788658efa456c36e07873b59b5de0a5b7d32c703b4b1929b699819cf08e856fafed75202585409efb4a83e61d5c3858f29b09dd87c0962848c44a72b622f396f57cfe6b95472825d377695cfa19c55f20dfadfa2c52272c33ee5475830b94695bb9edbd427f3ffde1e12dcfac00cf20e8d97d5372e5be85c4a4f94ae79c1e64ac5d91ea57b924b4791ee3cff92eac70cfa298c995b353b8a70d8a6427053e65e831bd105d364647f5af924c70c7ffbb948588c408a50a62ca961124ccda43e899b39c80e6475eb83b96a1977f15343853dd06d12f693c1445e0b43f49772dcbea5470227a34b79ab54bbdd01d62192e4e5a81b98b7785dc493526a01a52bef6ab98b54b787e5c1e2d9a3d6e03bf7b6c6e2070b9efe1af7ee8407ff626c763f8fbcdef4177b171a472cb202b9deb96313952e3e410a79d32e51532630f0a84bc204d0d2e62dd9655687c03ad2ad90df9bc63981d48ce8514a6c17ed664714ee214ece76e0a40fbac0e1cbb448a669d69885b0dba649e0231a1e05c2db404a3a1c0e7b6b7d8c338ba0712c434d84786644571b67559e0ae416dc030c6e28a9144b903286d97ca85bd030f1c684263f6a1e61b944ac8c63acf1bd2b7df903a6cd87589dc8b979106df6abf4719e3e795e2bffefe3f3382a34ed6d2024e54a3b32ce73b1b605a080c838408fdb1c5e13773a7c46906a9891d662bc10714b9b614358fc6eea36ccdfaf0c36070555108e72eb0760edefad04d0cf369bc167befe2198b21144989f5b9bae5aaa4077a67c58d144aad38014ddfcecc424b2466a22107f81fbd6f1799d277f7285d742b135c768b408743e98d8b80024431cc0efb30858121f19262b404658c19771a34451705b5415c23ba2469b24590b9acd210d64c56fd7b3340a43dfe7c24c6798aec5c953dc9c43e786eeb807e51857a57cbde7be044dd4cbc820582b8d61c2adfa8e9b12366fe55bfbff7b8ab5885a074d7cd525ad4d9d6c907c41cb049a163e0605b54b1f2dd4f715516cb8364092fb6024c424051e955f858371d6dbaa2fb7d001482cf8004b014aec1b3910f6d24b703461fa565d5c63df0d01315be0e78dcb871a9ba178af748762fc487d4843d2f95f180e24df7f425588888a394013b2cb02836f791f344b3c609ff9b9aeaed7ea733b0e1846c286cb9e794198a13698680d1706179d849e69d751cac1ec877c7e90a070e408cffc146abb91b40b3358c8a679ea5f2dae0731133eda60c0f9de1973d13d3a583d3d52cc8dc7d65bb56976941109e3ae28cdaded62213ae88d5840ea87ce24bf8271b0fc453fd82feaf5464c59ade7961251a4196ac4337ad819c2e8afe9d0bd40895bb6b05d4679c1007114055ad688f3d75cc3865fc0c76556783011b3c68aab512aa0f1edd4898e2773c6791b4f6c64336a799a4dd9e8084850e45cd86f7ed9c7b996bc4c2ae77b088ada52d3b39af9d8d77bfece5cd9d9eb24991e73397a321884e559a84ceee6825c578b07fe08c2b77c9a75f5aa6e355dfe0dd0f7112f24e4cbf498e08994cb0ceb61adb754b8a16b1891f1356219fcc1f9bb56036501c4416e08e397c1d731a80ae18ba7e1d1e86cf0e539e23d7572f246fa3f2c0b93b64d62dcc19984a138a05a725525d81dd8421b4fa951ec98a21f9b870392f5ca9fa26ad55ce4a7023b3e9e08433bd698ee2b4a78fc7982f4f0daa85e947bcd00bc3d91fa623c5bb52e1c6b4344040fa2f8f2cff6db0958e136f20dd5e9753299bd0e1b2cab58ac2860042c4193fe500a72224fe2a8e7062c3efad55b747d5914282c63b29527bfac9602c6fc06834844cad5c7252161d484eeb8856000002141079a45293703586307efe0e9e43da10e615779f19d8fe8dfea46a7107b80268368583aee61419fca16055f363ac9075c306fc0e73da9d75bd03b315d6bf404a11c806819d35d164997b8591457078c14864bb46a5150d015ba3b0712efa07761144df5796f633241384df4da59b84b3feef2adf2c68b383389232395707d6caa94a3d0849141f323211a2ca28d2b208a690979bc901ec13e7eb9cf3e8937449694f285f61ab084b64db9712248e3996b07fd50d0c4d30d559337804c708e5c3cd04bbf5dbeb1651e4aad862eefdd135b576aeb8d4de64"], 0x1354}}, 0x40001) socket(0x21, 0x2, 0x2) write$auto(0x3, 0x0, 0x81) setsockopt$auto(0x3, 0x1000000110, 0x3, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'ipvlan0\x00'}) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) socket(0x2, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000000)={0x2, @sockaddr_1_1={"90927f"}}, 0x68) connect$auto(0x3, &(0x7f0000000000)={0x2, @sockaddr_1_1}, 0x55) pipe2$auto(&(0x7f0000000140)=0x2, 0x800) sendto$auto(0x3, 0x0, 0x18, 0x101, &(0x7f0000000140)={0x2, @sockaddr_1_1}, 0x1c) fcntl$auto(0x3, 0x4, 0xa553) bpf$auto(0x0, &(0x7f0000000280)=@bpf_attr_4={0x1e, 0x4, 0xffff, 0x8}, 0x6f4) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0) close_range$auto(0x2, 0x8000, 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) memfd_secret$auto(0x9e) prctl$auto(0x1000000003b, 0x40000000007ff, 0x4, 0x9, 0x40000000000005) mmap$auto(0x0, 0x400008, 0x7f00, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x8, 0x1000000004, 0x9b72, 0x2, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) socket(0xa, 0x801, 0x84) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) setsockopt$auto(0x3, 0x10000000084, 0x81, 0x0, 0x8) setsockopt$auto(0x3, 0x10000000084, 0x80, 0x0, 0x8) setsockopt$auto(0x3, 0x10000000084, 0x81, 0x0, 0x8) 5m25.856976384s ago: executing program 1 (id=894): socket(0x15, 0x5, 0x0) open(0x0, 0x261c2, 0x84) fsopen$auto(0x0, 0x1) gettid() mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r0 = socket(0x10, 0x2, 0xc) r1 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$auto_CTRL_CMD_GETPOLICY(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c003700", @ANYRES16=r1, @ANYBLOB="010028bd7000fbdb9f250a0000000600010008000000"], 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x2000000) statmount$auto(0x0, &(0x7f0000000040)={0x0, 0x2, 0x5ae, 0x5, 0x7, 0x6, 0x10000, 0x10, 0x8, 0x4, 0x6, 0x9, 0x5, 0x4, 0x1ff, 0x7698, 0x8, 0x10000, 0x0, 0x6, [0x13, 0x2, 0x80000001, 0x800, 0x4000000003, 0x57b3, 0x81, 0x6, 0x0, 0x7, 0x4, 0x7, 0x6, 0x8, 0x1, 0xffffffffffffffe6, 0xfffffffffffffffa, 0x8, 0x0, 0xffffffffffff9316, 0x7fff, 0x3, 0xca, 0x8, 0x7, 0x8004, 0xe, 0xffffffffffffff1d, 0x2, 0x80, 0x5a72c916, 0x6, 0x100002, 0x7828, 0x7, 0x40, 0x4, 0xd, 0xd, 0xfffffffffffffff8, 0x0, 0x5, 0x5, 0x6, 0xe47, 0x7fffffffffffffff, 0x4, 0x7fff000000000, 0x85]}, 0x8, 0x0) r2 = open(&(0x7f0000000000)='./file0\x00', 0x261c2, 0x84) ioperm$auto(0x7, 0x6, 0x80) socket(0x15, 0x5, 0x0) open_tree$auto(0xffffffffffffffff, 0x0, 0x9) r3 = gettid() pidfd_open$auto(r3, 0x0) fallocate$auto(0x8000000000000003, 0x0, 0xd, 0x2cbd5d) fchmod$auto(r2, 0x8) open(&(0x7f0000000800)='./file1\x00', 0x22240, 0x2) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0xd4, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket(0x1e, 0x4, 0x0) r5 = socket(0x1e, 0x4, 0x0) get_robust_list$auto(0x0, 0x0, 0x0) setsockopt$auto(r5, 0x10f, 0x87, 0x0, 0x14) ioctl$auto(r4, 0x2, 0x4) setsockopt$auto(0x3, 0x10f, 0x87, 0x0, 0x14) r6 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000300), r5) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000340)={'ipvlan1\x00', 0x0}) sendmsg$auto_NL80211_CMD_ADD_LINK(r2, &(0x7f0000000840)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000007c0)={&(0x7f0000000380)={0x80, r6, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0x4}, @NL80211_ATTR_MBSSID_CONFIG={0x24, 0x132, 0x0, 0x1, [@NL80211_MBSSID_CONFIG_ATTR_EMA={0x4}, @NL80211_MBSSID_CONFIG_ATTR_TX_IFINDEX={0x8, 0x4, r7}, @NL80211_MBSSID_CONFIG_ATTR_MAX_EMA_PROFILE_PERIODICITY={0x5, 0x2, 0x5}, @NL80211_MBSSID_CONFIG_ATTR_EMA={0x4}, @NL80211_MBSSID_CONFIG_ATTR_MAX_EMA_PROFILE_PERIODICITY={0x5, 0x2, 0x8}]}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1}, @NL80211_ATTR_OBSS_COLOR_BITMAP={0xc}, @NL80211_ATTR_WOWLAN_TRIGGERS={0x18, 0x75, 0x0, 0x1, [@typed={0x8, 0xf5, 0x0, 0x0, @ipv4=@rand_addr=0x64010101}, @generic="12ef9957c0b59af0420c31d8"]}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0xe46f}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x8}, @NL80211_ATTR_TDLS_EXTERNAL_SETUP={0x4}]}, 0x80}, 0x1, 0x0, 0x0, 0x4000000}, 0x100) 5m25.603599854s ago: executing program 1 (id=896): mmap$auto(0x0, 0x128009, 0xdf, 0xeb1, 0x401, 0x8000) semctl$auto(0x80202, 0xfdfffffa, 0x3, 0x0) ioctl$auto(0xc8, 0x400454d4, 0xe) mmap$auto(0x2, 0x4400000002020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x7fffffff) close_range$auto(0x0, 0xfffffffffffff001, 0x2) r0 = socket(0x21, 0x3, 0x0) socket(0x1e, 0x5, 0x0) r1 = socket(0xa, 0x2, 0x88) bpf$auto(0x0, &(0x7f0000000000)=@enable_stats, 0x0) mmap$auto(0x0, 0x9, 0x3, 0x8012, 0x3, 0x8000) socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) write$auto(0x4, 0x0, 0x100082) socket(0xa, 0x801, 0x84) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000021}, 0x8004) connect$auto(0x3, &(0x7f0000000140)={0xa, @sa_data_min="c4aeed448dc7fe80000000000100"}, 0x55) connect$auto(0x3, &(0x7f0000000140)={0xa, @sa_data_min="c4aeed448dc7fe8000"}, 0x55) shutdown$auto(0x200000003, 0x2) write$auto(0x3, 0x0, 0x34000) pipe$auto(0x0) open(&(0x7f0000000000)='./file0\x00', 0x261c2, 0x84) mmap$auto(0x0, 0x61, 0x100001000000004, 0xfa31, 0x400, 0x8000) write$auto(0x3, 0x0, 0x296) fallocate$auto(0x8000000000000003, 0x0, 0xd, 0xcbd5d) mmap$auto(0xfffefffffffffffc, 0x3, 0x3, 0x8014, 0x0, 0x8008) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) pipe$auto(&(0x7f0000000000)=0xae8) tee$auto(0x2000000000000, 0x3, 0x3ff, 0x9) setsockopt$auto(r0, 0x10000000084, 0x7b, 0x0, 0x0) setsockopt$auto(r1, 0x20085, 0x0, 0x0, 0x18) 5m25.23472287s ago: executing program 32 (id=896): mmap$auto(0x0, 0x128009, 0xdf, 0xeb1, 0x401, 0x8000) semctl$auto(0x80202, 0xfdfffffa, 0x3, 0x0) ioctl$auto(0xc8, 0x400454d4, 0xe) mmap$auto(0x2, 0x4400000002020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x7fffffff) close_range$auto(0x0, 0xfffffffffffff001, 0x2) r0 = socket(0x21, 0x3, 0x0) socket(0x1e, 0x5, 0x0) r1 = socket(0xa, 0x2, 0x88) bpf$auto(0x0, &(0x7f0000000000)=@enable_stats, 0x0) mmap$auto(0x0, 0x9, 0x3, 0x8012, 0x3, 0x8000) socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) write$auto(0x4, 0x0, 0x100082) socket(0xa, 0x801, 0x84) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000021}, 0x8004) connect$auto(0x3, &(0x7f0000000140)={0xa, @sa_data_min="c4aeed448dc7fe80000000000100"}, 0x55) connect$auto(0x3, &(0x7f0000000140)={0xa, @sa_data_min="c4aeed448dc7fe8000"}, 0x55) shutdown$auto(0x200000003, 0x2) write$auto(0x3, 0x0, 0x34000) pipe$auto(0x0) open(&(0x7f0000000000)='./file0\x00', 0x261c2, 0x84) mmap$auto(0x0, 0x61, 0x100001000000004, 0xfa31, 0x400, 0x8000) write$auto(0x3, 0x0, 0x296) fallocate$auto(0x8000000000000003, 0x0, 0xd, 0xcbd5d) mmap$auto(0xfffefffffffffffc, 0x3, 0x3, 0x8014, 0x0, 0x8008) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) pipe$auto(&(0x7f0000000000)=0xae8) tee$auto(0x2000000000000, 0x3, 0x3ff, 0x9) setsockopt$auto(r0, 0x10000000084, 0x7b, 0x0, 0x0) setsockopt$auto(r1, 0x20085, 0x0, 0x0, 0x18) 2m2.330378714s ago: executing program 3 (id=2145): r0 = socket(0xa, 0x806, 0x0) connect$auto(0x3, &(0x7f0000000140)={0xa, @sa_data_min="c4ff0700"}, 0x55) recvfrom$auto(r0, 0x0, 0x800000004e, 0x2, 0x0, 0xfffffffffffffffd) madvise$auto(0x8000000, 0x2000040080000004, 0xc) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) bpf$auto(0x5, &(0x7f0000000100)=@task_fd_query={0x2, 0x2, 0x4, 0x0, 0xd, 0x7, 0x9, 0x6, 0x8001}, 0x3b) bpf$auto(0x5, &(0x7f0000000100)=@task_fd_query={0x2, 0x2, 0x4, 0x0, 0x85, 0x7, 0x9, 0x6, 0x8001}, 0x101) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) clone$auto(0x1000, 0x9, 0xfffffffffffffffc, 0xfffffffffffffffc, 0x5) 2m2.281354861s ago: executing program 3 (id=2146): open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) socket$nl_generic(0x10, 0x3, 0x10) fcntl$auto(0x3, 0x400, 0x1) fcntl$auto(0x3, 0x8, 0x9ec0000000000000) r0 = open(&(0x7f0000000000)='./file0\x00', 0x4242, 0xe1d2b27bdc14aabc) ioctl$auto(r0, 0x6, 0x6) close_range$auto(0x2, 0x8, 0x0) 2m2.187024791s ago: executing program 3 (id=2147): r0 = socket(0x10, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_MAC80211_HWSIM(&(0x7f0000000080), r1) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000300)={0x94, r2, 0x8a00f4e9954364ed, 0x70bd29, 0x25dfdbfd, {}, [@HWSIM_ATTR_RADIO_NAME={0x7f, 0x11, '\xfd\xff\xff\xff\xff\xff\xff\xff-\x9c\xe4\xbe\x9e6y\x93\xd5\xbc\x9f\x8a\xf7\f\x01k\a\x86\xc1a\x12;\xab\xd7+\x99\xe71\x9b)p\x06\x02;/X\xfc+\x8b@\x90\xfc\x00\xbbNvh\x88\x10\x00\x00\f\x11\xe7\xd3:\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xec|\xfd+Q3y\xef\xf1\xb3\x9eI\xa2\x99_f\x0ej\xa7x\x13\x13%^3\x85O\xe2\xe1\x84\xcb\x86\xe6\x16\x9er\xdb[\x89\xb9\x06s\xa5\x1f\xfe\xdf4\x1c'}]}, 0x94}, 0x1, 0x0, 0x0, 0x84}, 0x24000054) r3 = syz_genetlink_get_family_id$auto_TASKSTATS(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_CGROUPSTATS_CMD_GET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, r3, 0xb6a140a47befd3c9, 0x70bd2a, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x4000000) r4 = syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000080), r0) sendmsg$auto_OVS_FLOW_CMD_SET(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x88, r4, 0x8, 0x70bd29, 0x25dfdbfd, {}, [@OVS_FLOW_ATTR_PROBE={0x4}, @OVS_FLOW_ATTR_CLEAR={0x4}, @OVS_FLOW_ATTR_MASK={0x61, 0x7, 0x0, 0x1, [@generic="c4553806e94ea927e86767fb5c9c1cfc49dd51d26e79d760530aa73c28a287f0ae4d7ddb697d7fcc7b4d34c1536656fb5b0b9bd0ec13f47086d671b858cf6aed191a944e684aa2fa474349be3584e1b538553ca5ae01c192d4ae33b5bb"]}, @OVS_FLOW_ATTR_UFID={0x5, 0x9, 0x4}]}, 0x88}, 0x1, 0x0, 0x0, 0x20000000}, 0x10) 2m2.070616488s ago: executing program 3 (id=2148): socket(0x10, 0x3, 0x6) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_SMC_NETLINK_GET_DEV_SMCD(r0, &(0x7f0000004380)={0x0, 0x0, &(0x7f0000004340)={&(0x7f0000004300)=ANY=[@ANYRES8=r0, @ANYRES16, @ANYBLOB='\v'], 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x810) syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000300), r0) read$auto(r0, &(0x7f0000000100)='nl80211\x00', 0xbe62) sendmsg$auto_HWSIM_CMD_DEL_RADIO(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="01eb"], 0x14}, 0x1, 0x0, 0x0, 0x20040800}, 0x24004000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1200"], 0x1ac}}, 0x40000) socket(0xa, 0x801, 0x84) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) shutdown$auto(0x200000003, 0x2) mmap$auto(0x8, 0x6, 0x10000, 0x15, 0x2, 0x7fffffff80) recvmmsg$auto(0x3, 0x0, 0x10000, 0x300, 0x0) connect$auto(0x3, &(0x7f0000000140)={0x2, @sa_data_min="09ff7f0000000100"}, 0x55) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 2m1.185214432s ago: executing program 3 (id=2161): settimeofday$auto(&(0x7f0000000180)={0x1ed5d7403, 0xfffffffffffffffd}, 0x0) socket(0x2a, 0x2, 0x6) connect$auto(0xffffffffffffffff, &(0x7f0000000300)={0xa, @sa_data_min="67bb1d127c58fb20c5dafd0d1915"}, 0xb) r0 = socket(0x10, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_SMC_NETLINK_GET_DEV_SMCD(r1, &(0x7f0000004380)={0x0, 0x0, &(0x7f0000004340)={&(0x7f0000004300)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB='\v'], 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x810) syz_genetlink_get_family_id$auto_TIPCv2(&(0x7f0000000040), r1) read$auto(r1, &(0x7f0000000100)='nl80211\x00', 0xbe62) socket(0x25, 0x1, 0x5) read$auto(0x3, 0x0, 0x80) sendmsg$auto_SMC_NETLINK_DISABLE_HS_LIMITATION(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022dbd7000ffdbdf2512000000"], 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x884) sendmsg$auto_HWSIM_CMD_DEL_RADIO(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="01eb"], 0x14}, 0x1, 0x0, 0x0, 0x20040800}, 0x24004000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1200"], 0x1ac}}, 0x40000) mmap$auto(0x0, 0x8, 0xdfc6, 0x29b72, 0xbc2a, 0x8000) recvfrom$auto(0x3, 0x0, 0x800000004e, 0x2, 0x0, 0xfffffffffffffffd) mmap$auto(0x0, 0x2020009, 0x3, 0x800000000000eb1, 0xfffffffffffffffa, 0x8000) io_uring_setup$auto(0x6, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socket(0x23, 0x80805, 0x0) memfd_secret$auto(0x0) socket(0x11, 0x4, 0x1) r2 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x5, 0x0) getsockopt$auto(0x6, 0x84, 0x72, 0x0, &(0x7f0000000080)=0x9c8) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="72010000", @ANYBLOB='R', @ANYRESDEC=0x0, @ANYRESHEX=r2], 0x1ac}, 0x1, 0x0, 0x0, 0x8044}, 0x40000) mprotect$auto(0x1ffff000, 0x8000000000000001, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x40000) write$auto(0x3, 0x0, 0x0) 2m1.074105729s ago: executing program 3 (id=2163): prctl$auto(0x10000000016, 0x8, 0x1004, 0x6, 0x0) prctl$auto(0x59616d61, 0x1, 0x2, 0xffffffffffffffff, 0x8) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) open(&(0x7f0000000080)='./cgroup\x00', 0x40001, 0x6) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)) open(&(0x7f0000000100)='./cgroup\x00', 0x0, 0x154) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000140)='ns/pid\x00') mprotect$auto(0x110c230000, 0x85a7, 0x3) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) fsconfig$auto(0x3, 0x3, 0xfffffffffffffffd, 0x0, 0x8000) sendmsg$auto_ILA_CMD_ADD(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x14, 0x0, 0x300, 0x70bd2c, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040001) munmap$auto(0x1000000, 0x2000000c) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x401, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x9) set_mempolicy$auto(0x2, &(0x7f0000000080)=0x7e, 0x4) mmap$auto(0x0, 0x20009, 0xb17a, 0xeb1, 0x3fd, 0x8000) move_pages$auto(0x0, 0xf54, 0x0, 0x0, 0x0, 0x8000000000000000) r1 = socket(0x11, 0x3, 0x300) setsockopt$auto(r1, 0x107, 0x1, 0x0, 0x8004) setpriority$auto(0x2, 0x7, 0xfffffff9) syz_genetlink_get_family_id$auto_netdev(0x0, 0xffffffffffffffff) close_range$auto(0x2, 0x8, 0x0) mlockall$auto(0x3) mlockall$auto(0x7) open(0x0, 0x0, 0xb5d1af1605322df2) 1m45.411069952s ago: executing program 33 (id=2163): prctl$auto(0x10000000016, 0x8, 0x1004, 0x6, 0x0) prctl$auto(0x59616d61, 0x1, 0x2, 0xffffffffffffffff, 0x8) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) open(&(0x7f0000000080)='./cgroup\x00', 0x40001, 0x6) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)) open(&(0x7f0000000100)='./cgroup\x00', 0x0, 0x154) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000140)='ns/pid\x00') mprotect$auto(0x110c230000, 0x85a7, 0x3) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) fsconfig$auto(0x3, 0x3, 0xfffffffffffffffd, 0x0, 0x8000) sendmsg$auto_ILA_CMD_ADD(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x14, 0x0, 0x300, 0x70bd2c, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040001) munmap$auto(0x1000000, 0x2000000c) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x401, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x9) set_mempolicy$auto(0x2, &(0x7f0000000080)=0x7e, 0x4) mmap$auto(0x0, 0x20009, 0xb17a, 0xeb1, 0x3fd, 0x8000) move_pages$auto(0x0, 0xf54, 0x0, 0x0, 0x0, 0x8000000000000000) r1 = socket(0x11, 0x3, 0x300) setsockopt$auto(r1, 0x107, 0x1, 0x0, 0x8004) setpriority$auto(0x2, 0x7, 0xfffffff9) syz_genetlink_get_family_id$auto_netdev(0x0, 0xffffffffffffffff) close_range$auto(0x2, 0x8, 0x0) mlockall$auto(0x3) mlockall$auto(0x7) open(0x0, 0x0, 0xb5d1af1605322df2) 45.565713908s ago: executing program 2 (id=2379): pwrite64$auto(0xc8, &(0x7f0000000000)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x86\xdds\x1cJ\x99\x00:/\x14\r>\x94\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\xf1`\x9f\x1e\xf9\xa4\xf8\x15\x02l@\x18*\xc0\xc1\xf2\x14^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2', 0x4e, 0x3) mprotect$auto(0x1ffff000, 0x8000000000000001, 0xd) r0 = socket(0xa, 0x1, 0x84) mmap$auto(0x0, 0xa, 0xdb, 0x9b72, 0x5, 0x8000) io_uring_setup$auto(0x6, 0x0) setsockopt$auto(0x3, 0x10000000084, 0x81, 0x0, 0x8) getsockopt$auto(r0, 0x84, 0x16, 0x0, &(0x7f0000000040)=0x5) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x1, 0x0) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000021}, 0x8004) connect$auto(0x3, &(0x7f0000000140)={0xa, @sa_data_min="c4aeed448dc7fe8000"}, 0x55) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) setsockopt$auto(0x3, 0x0, 0x4, 0x0, 0x28) sendmsg$auto_TIPC_NL_PEER_REMOVE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYBLOB="04002d"], 0x14}, 0x1, 0x0, 0x0, 0x4004801}, 0x20) setsockopt$auto(0x3, 0x1, 0x21, 0x0, 0x9) syz_genetlink_get_family_id$auto_nl802154(&(0x7f00000004c0), r1) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) 45.344988555s ago: executing program 2 (id=2381): mmap$auto(0x0, 0x5, 0x2, 0x40eb2, 0x401, 0x300000000000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x0, 0x200, 0x70bd2b, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x4000) ppoll$auto(&(0x7f0000000080)={0xffffffffffffffff, 0x11b, 0x7ff}, 0xc, 0x0, 0x0, 0x8) r0 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000000", @ANYBLOB="1e0027"], 0x1ac}, 0x1, 0x0, 0x0, 0x40}, 0x40000) mremap$auto(0x0, 0x7, 0x3fd6, 0x3, 0x20000000) ioprio_set$auto(0x101, 0x6, 0x8) mmap$auto(0x0, 0x4, 0x5, 0x40eb2, 0x402, 0x300000000000) io_uring_setup$auto(0x6, 0x0) mprotect$auto(0x1ffff000, 0x810002, 0x3) 45.188887724s ago: executing program 2 (id=2383): socket(0xa, 0x2, 0x0) mknod$auto(&(0x7f0000000180)=':,\x00', 0xc9, 0xfffffffa) r0 = socket(0x2, 0x6, 0x0) close_range$auto(0x2, 0xfffffffffffff000, 0x2) socket(0x1, 0x2, 0x3a) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x80108907, 0x0) execve$auto(&(0x7f0000000040)=':,\x00', 0x0, 0x0) madvise$auto(0x0, 0x2000040080000004, 0xe) connect$auto(0x3, &(0x7f00000000c0)={0x2, @sockaddr_1_1}, 0x55) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8942, &(0x7f0000000540)={'macvlan0\x00'}) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x1, 0x0) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) bind$auto(0x3, &(0x7f0000000080)={0x2, @sockaddr_1_1}, 0x6b) 45.047516226s ago: executing program 2 (id=2385): getrusage$auto(0x2, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) close_range$auto(0x2, 0x8, 0x0) (async) io_uring_setup$auto(0x6, 0x0) (async) io_uring_register$auto(0x2, 0x5, &(0x7f0000000040), 0x5) (async) r0 = syz_genetlink_get_family_id$auto_netdev(&(0x7f0000001500), 0xffffffffffffffff) (async) io_uring_setup$auto(0x80, &(0x7f00000002c0)={0x8, 0x76739503, 0x5, 0xe, 0x8, 0x2b28019f, 0xffffffffffffffff, [0x8, 0x5, 0x6], {0x5, 0xae2, 0xa43, 0xfa3a, 0x7, 0x4, 0x4, 0xfffffffb, 0xd}, {0x3, 0x5126bb56, 0x9, 0x8, 0x8001, 0x0, 0x80000000, 0x3, 0xfff}}) sync_file_range$auto(r1, 0x2, 0x0, 0xffff) (async) getrusage$auto(0x1000, &(0x7f0000000340)={{0x7f, 0x5}, {0x8, 0x1}, 0x10, 0x4, 0x8001, 0x8001, 0x7, 0x5, 0x80000000, 0x28b, 0x8a91, 0x8, 0x4, 0x35, 0xc7a4, 0x1049}) (async) setfsgid$auto(0x9) (async) bpf$auto(0x13, &(0x7f0000000540)=@bpf_attr_11={0x0, 0x1, 0xfffffffe, 0xa, 0x6, 0x80002000, 0xe1, 0x80000001}, 0xcf) (async) setresgid$auto(0xffffffffffffffff, 0x28000000000000, 0x7) (async) r2 = socket(0x10, 0x2, 0x0) sendmsg$auto_NETDEV_CMD_QUEUE_GET(r2, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r0, @ANYBLOB="010026bd1835a682cae9049f0000"], 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x810) r3 = socket(0x22, 0x2, 0x2) getsockopt$auto(r3, 0xc, 0x0, &(0x7f0000000000)='-+\x00', &(0x7f0000000040)=0x101) (async) sendmsg$auto_OVS_DP_CMD_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0f0026bd7000fcdbdf9907"], 0x24}, 0x1, 0x0, 0x0, 0x20000800}, 0x4) futex_wait$auto(&(0x7f0000000080)=[0x6, 0x7, 0x0], 0x3, 0x6, 0x5, &(0x7f00000001c0)={0x7fffffff, 0x1}, 0x9) r4 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="17000000", @ANYBLOB='V'], 0x1ac}}, 0x40000) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x80044944, 0x0) 44.740098941s ago: executing program 2 (id=2391): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x10, 0x2, 0x2) sendmsg$auto_IOAM6_CMD_ADD_SCHEMA(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20044801}, 0x20004000) mprotect$auto(0x1ffff000, 0x8000000000000001, 0x4) setrlimit$auto(0x0, &(0x7f0000000000)={0x1, 0xfb3}) clone$auto(0x2, 0x81, 0x0, 0x0, 0x3) socket(0xa, 0x3, 0x3c) select$auto(0x6d0c, 0x0, &(0x7f0000000100)={[0xd, 0x200, 0x800000000000008, 0xc, 0x5, 0x7, 0x6, 0x1, 0x40009, 0x5e582972, 0x3ffffffffffffffe, 0x14, 0x93, 0x8, 0x8, 0x6]}, 0x0, 0x0) connect$auto(0x3, &(0x7f0000000140)={0xa, @sa_data_min="c4aeed448dc7fe8000"}, 0x55) mmap$auto(0x0, 0x20009, 0x10000000000df, 0xeb2, 0x401, 0x8000) move_pages$auto(0x0, 0x91, 0x0, 0x0, 0x0, 0x0) write$auto(0x3, 0x0, 0xffd8) connect$auto(0x3, &(0x7f0000000000)={0x2, @sa_data_min="08000000e0000000c1728d2af766"}, 0x55) close_range$auto(0x0, 0xfffffffffffff000, 0x0) fanotify_init$auto(0x5, 0x2) socket$nl_generic(0x10, 0x3, 0x10) pidfd_open$auto(0x1, 0x0) pidfd_send_signal$auto(0x2, 0x7, 0x0, 0x1) getpeername$auto(0x3, 0x0, 0x0) 44.167790444s ago: executing program 2 (id=2398): open(&(0x7f0000000000)='./file0\x00', 0xa61c2, 0x84) socket(0xa, 0x2, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket(0x15, 0x5, 0x0) socket(0xa, 0x801, 0x106) memfd_create$auto(0x0, 0xa) socket(0x2, 0x3, 0xa) socket(0xa, 0x3, 0x84) epoll_create$auto(0x4) epoll_ctl$auto(0x5, 0x1, 0x8000000000000000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x15, 0x5, 0x0) socket(0x2, 0x80002, 0x73) socket(0x2, 0x80002, 0x73) close_range$auto(0x2, 0x8000, 0x0) fallocate$auto(0x8000000000000003, 0x0, 0xd, 0xcbd5d) sendfile$auto(0x6, 0x3, 0x0, 0xfdef) 44.108023827s ago: executing program 4 (id=2399): mmap$auto(0x0, 0x400008, 0xe3, 0x9b72, 0x2, 0x8000) (async) mmap$auto(0x0, 0x8, 0x4, 0x9b72, 0x2, 0x8000) (async) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) (async) io_uring_setup$auto(0x85, 0x0) r0 = socket(0xa, 0x1, 0x84) getsockopt$auto(r0, 0x0, 0x480, 0x0, 0x0) (async, rerun: 64) mmap$auto(0x3, 0x8001, 0x8, 0xd1, 0x2, 0x3) (rerun: 64) getsockopt$auto(0xffffffffffffffff, 0x65, 0x1, 0xffffffffffffffff, 0x0) (async) sendmsg$auto_BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000336bd7000fedb880302cd6c7f6f04afd0760000000802130002000000"], 0x24}, 0x1, 0x0, 0x0, 0xc005}, 0x4) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x34, 0x0, 0x100, 0x70bd28, 0x25dfdbfb, {}, [@NL80211_ATTR_DISABLE_HE={0x4}, @NL80211_ATTR_DISABLE_VHT={0x4}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x9}, @NL80211_ATTR_WIPHY_COVERAGE_CLASS={0x5, 0x59, 0x4}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x9aa}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x20000000) (async) r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000380), r0) sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)=ANY=[@ANYBLOB="e72f4d51", @ANYRES16=r1, @ANYBLOB="20002abd7000fbdbdf251f00000005006000f90000000400d10004003c00"], 0x24}, 0x1, 0x0, 0x0, 0x44000}, 0x5ebc7935ca1ed1e5) (async, rerun: 32) mmap$auto(0xedc, 0xffffffffffff6d31, 0x7, 0x7fffffffffffffff, 0x7, 0x8) (async, rerun: 32) flock$auto(0x1, 0x6) (async) r2 = socket(0x28, 0x6, 0x200) getsockopt$auto(r2, 0x8, 0x9, &(0x7f0000000280)='\x00', &(0x7f0000000300)=0x3861) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB=' \x00\''], 0x1ac}}, 0x40000) mmap$auto(0x7fff, 0xffffffffffffff2c, 0x1, 0x19, 0x3, 0x4) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) (async, rerun: 32) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) syz_genetlink_get_family_id$auto_nbd(0x0, 0xffffffffffffffff) socket(0x22, 0x2, 0x2) (async) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) socket(0x15, 0x5, 0x0) (async, rerun: 32) setsockopt$auto(0x7, 0x114, 0x3, 0xffffffffffffffff, 0xa0) (async) munmap$auto(0x1ffff000, 0x2000000c) (async) io_pgetevents$auto(0xffff, 0x2, 0xfffffffffffff000, 0x0, 0x0, &(0x7f0000000100)={0x0}) (async, rerun: 64) socket(0x1d, 0x2, 0x6) (rerun: 64) getsockopt$auto(0x4, 0x6, 0x17, 0xfffffffffffffffc, 0x0) (async, rerun: 64) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) (rerun: 64) 44.018622803s ago: executing program 34 (id=2398): open(&(0x7f0000000000)='./file0\x00', 0xa61c2, 0x84) socket(0xa, 0x2, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket(0x15, 0x5, 0x0) socket(0xa, 0x801, 0x106) memfd_create$auto(0x0, 0xa) socket(0x2, 0x3, 0xa) socket(0xa, 0x3, 0x84) epoll_create$auto(0x4) epoll_ctl$auto(0x5, 0x1, 0x8000000000000000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x15, 0x5, 0x0) socket(0x2, 0x80002, 0x73) socket(0x2, 0x80002, 0x73) close_range$auto(0x2, 0x8000, 0x0) fallocate$auto(0x8000000000000003, 0x0, 0xd, 0xcbd5d) sendfile$auto(0x6, 0x3, 0x0, 0xfdef) 43.93992055s ago: executing program 4 (id=2402): mmap$auto(0x3, 0x20009, 0xdf, 0x10000000917, 0x7, 0xee2) (async) mmap$auto(0x3, 0x20009, 0xdf, 0x10000000917, 0x7, 0xee2) io_uring_setup$auto(0x6, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) mincore$auto(0x1000, 0x8001, 0x0) (async) mincore$auto(0x1000, 0x8001, 0x0) fcntl$auto(0x8000000000000001, 0x26, 0x8) (async) fcntl$auto(0x8000000000000001, 0x26, 0x8) fcntl$auto(r0, 0x400, 0x3) epoll_pwait2$auto(r0, &(0x7f0000000000)={0x7fff, 0xe}, 0x0, &(0x7f0000000040)={0x2, 0x5}, &(0x7f0000000080), 0x8) 43.808160052s ago: executing program 4 (id=2403): r0 = socket(0x9, 0x2, 0x2) madvise$auto(0x1, 0x7fffffffffffffff, 0x3) mmap$auto(0x5, 0x7126, 0x3, 0xeb1, 0x9, 0x8000) getrandom$auto(0x0, 0x6000000, 0x3) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) mlockall$auto(0x7) madvise$auto(0x0, 0x7, 0xfffffffa) shmat$auto(0x2, &(0x7f00000001c0)='\x00\x00\xb8\x05@\xf5tmr\xba\fA\\\xe5\xe7\x01O\t\xe2\xc7\xd7D\x0f\xdf\xa28\x10G}\xd9\x84\x98\xb6\xa1\xe0\x90\xcb<\xcc\xbb\xc3\xa8\xe9\xbeos\xed\xe5\xad\xb8\xec\xecuQ\xb6\x93$\x8c\xec]c\x8c\xdb\xce\xdc\xad\xf4\xfa\r\xac', 0x1) mmap$auto(0x0, 0x40, 0x800, 0xfffffffffffffffd, 0xf0b, 0x2) setsockopt$auto(r0, 0x10000000084, 0x8, 0x0, 0x6) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) sysinfo$auto(0x0) preadv$auto(0x8, &(0x7f0000000180)={&(0x7f0000000140), 0x82}, 0x3, 0x1, 0xe7e) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_IPVS(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_IPVS_CMD_GET_SERVICE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYRESOCT, @ANYRES16=r2, @ANYBLOB="56638f9ebad14fcace5c013fcb50c97fbb26490ec47ebf93185713ccbcfbbc50b496b892597a63a8ac669b33629813d4038c22435d6a6c1a2e8a0c1148381013a02582eb88883a65fc032187a491349f6fd7667e4763372b0ce2cd2d88ab19ff4c20159a7f81fb2800a67ff6a034fa4e439229731d4e4d63d784067ef0ff1d667a28c22a39d336be7179df43ea08075efff5b370a300"/164], 0x14}, 0x1, 0x0, 0x0, 0x20040010}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket(0x2, 0x5, 0x0) setsockopt$auto(0x4, 0x0, 0x8, 0xfffffffffffffffe, 0x0) pwritev2$auto(0x0, 0xfffffffffffffffc, 0x8000046, 0x5, 0x6, 0x6) getresuid$auto(&(0x7f00000011c0)=0x7, 0x0, 0x0) close_range$auto(0x6, 0xb0, 0x6) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) open(0x0, 0x101000, 0x120) setreuid$auto(0x0, 0x0) fcntl$auto(0xff80000000000000, 0x406, 0x1) bind$auto(r3, &(0x7f0000001200)={0x30, @sockaddr_1_1={"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"}}, 0x12) mmap$auto(0x0, 0x2021009, 0xa, 0xeb1, 0xfffffffffffffffe, 0x8000) preadv$auto(0x2000000000000c8, 0x0, 0x81, 0x7ebf, 0x0) 43.738145637s ago: executing program 4 (id=2404): memfd_secret$auto(0x0) (async) mmap$auto(0x0, 0x6, 0x4000000000df, 0xeb1, 0x400, 0x8000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) mmap$auto(0xfffffffffffffffe, 0x1, 0x8, 0x15, 0x25, 0x3ff) mmap$auto(0x0, 0x2000d, 0xe3, 0x100000eb1, 0x40000000000a1, 0x7fff) (async) r0 = socket(0x1d, 0x2, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) (async) connect$auto(0x3, 0x0, 0x54) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) open(&(0x7f0000000000)='./file0\x00', 0x241c2, 0x84) (async) bpf$auto(0x8, &(0x7f0000000180)=@task_fd_query={0x0, r0, 0x2, 0x6, 0x1, 0x4, 0xffffffffffffffff, 0x2, 0x73bd}, 0x5) (async) syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000040), r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000f40)={'batadv0\x00'}) sendmsg$auto_BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES32, @ANYBLOB="010026bd7000fbdbdf250f00000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00.'], 0x24}, 0x1, 0x0, 0x0, 0xc050}, 0x140000e4) (async) mprotect$auto(0x4, 0x0, 0x1) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_STOP_SCHED_SCAN(r3, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20040811}, 0x44010) (async) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) (async) write$auto(0x3, 0x0, 0xffd8) (async) close_range$auto(0x2, 0x8000, 0x0) (async) io_uring_setup$auto(0x6, 0x0) (async) socket(0xa, 0x3, 0x3a) setsockopt$auto(0x400000000000003, 0x29, 0xca, 0x0, 0x567) r4 = socket(0x2, 0x2, 0x1) write$auto(r4, 0x0, 0x8e) (async) ioctl$auto(r4, 0x3, 0x3) (async) sysfs$auto(0x2, 0x100000000000038, 0x0) 43.336253673s ago: executing program 4 (id=2407): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ovs_vport(&(0x7f0000000040), 0xffffffffffffffff) mmap$auto(0x0, 0x8, 0xdf, 0xeb2, 0x3ff, 0x8000) capget$auto(0x0, 0xfffffffffffffffe) madvise$auto(0x0, 0xffffffffffff0001, 0x15) madvise$auto(0x0, 0x4, 0x3) sendmsg$auto_OVS_VPORT_CMD_NEW(r0, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000001180)={&(0x7f0000000480)={0x24, r1, 0x1, 0x70bd26, 0x25dfdbff, {}, [@OVS_VPORT_ATTR_NETNSID={0x8, 0x9, 0x4}, @OVS_VPORT_ATTR_NAME={0x6, 0x3, '*\x00'}]}, 0x24}, 0x1, 0x0, 0x0, 0x4040010}, 0x800) 33.172603445s ago: executing program 4 (id=2409): msync$auto(0x0, 0x2000000005, 0x6) (async) getcpu$auto(&(0x7f0000000000)=0x8, &(0x7f0000000040)=0x976, &(0x7f0000000080)={[0x3, 0xec, 0x80000000, 0xf, 0x8, 0x19e4, 0xff, 0x8001, 0x1, 0x80000001, 0x3, 0xfa, 0x5, 0x7fffffff, 0x9, 0xada]}) (async) socket(0x3, 0x4, 0x0) (async) rename$auto(0x0, &(0x7f0000000140)='./file0\x00') 29.315648521s ago: executing program 5 (id=2416): set_mempolicy$auto(0x2, &(0x7f0000000080)=0x7e, 0x4) mbind$auto(0x0, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) bpf$auto(0x0, &(0x7f0000000100)=@task_fd_query={0x7, 0x4, 0x200, 0x1, 0x8, 0xf, 0x66b, 0x0, 0x1}, 0x6f4) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mlock$auto(0x4, 0x0) mlock$auto(0x7c89, 0x47fff) remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0x3, 0x4) setresuid$auto(0x8, 0x8, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) prlimit64$auto(r0, 0xa, 0x0, 0x0) clone$auto(0x3, 0x7, 0x0, 0x0, 0xdd6) mlock2$auto(0x1, 0x8001, 0x0) move_pages$auto(0x0, 0xd0, &(0x7f0000001100), &(0x7f0000001140), 0x0, 0x2) remap_file_pages$auto(0x55a, 0x4, 0x980, 0x7ed64580, 0xc) 26.998372986s ago: executing program 0 (id=2417): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x10004) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0xffffffffffff0001, 0x15) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mlock$auto(0x4, 0x0) mlock$auto(0x7c89, 0x47fff) remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0x3, 0x4) mmap$auto(0xffff, 0x8000000000000000, 0x49, 0xfc5b, 0xdaa, 0x5) clone$auto(0x3, 0x7, 0x0, 0x0, 0xdd6) mlock2$auto(0x1, 0x8001, 0x0) bpf$auto(0x20, &(0x7f0000000100)=@enable_stats={0x80000001}, 0x7) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) fanotify_init$auto(0x5, 0x2000000000002) socket(0x26, 0x80805, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000000c0)='ns/ipc\x00') open(&(0x7f0000000040)='./cgroup\x00', 0x745240, 0x40) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) mmap$auto(0xf000, 0x8, 0x1000000003, 0x9b72, 0x2, 0x8000) semctl$auto(0x0, 0xfffffffffffffffa, 0x100000001, 0x95cc) 18.079774613s ago: executing program 6 (id=2418): pipe2$auto(&(0x7f0000000000)=0xffffffffffffffff, 0x9) execveat$auto(r0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)=&(0x7f0000000080)='*#@-\x00', &(0x7f0000000140)=&(0x7f0000000100)='*./*\x00', 0x4) r1 = socket(0x11, 0x4, 0x2) io_uring_setup$auto(0x1, &(0x7f0000000180)={0x81, 0x8, 0x8, 0xcad2, 0x101, 0x1000, r0, [0x40, 0x40, 0x6b39], {0x30, 0x2, 0xb, 0x3, 0xffff8000, 0x22, 0x414f, 0x0, 0x7fff}, {0x4, 0xbb0, 0x5, 0x1, 0xf69, 0x3ff, 0x0, 0x1, 0x1}}) r3 = syz_genetlink_get_family_id$auto_TIPCv2(&(0x7f0000000240), r2) r4 = geteuid() r5 = syz_clone3(&(0x7f0000000580)={0x104800000, &(0x7f0000000280)=0xffffffffffffffff, &(0x7f00000002c0), &(0x7f0000000300), {0x2c}, &(0x7f0000000340)=""/221, 0xdd, &(0x7f0000000440)=""/234, &(0x7f0000000540)=[0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0], 0x4, {r0}}, 0x58) r7 = getpgrp(0x0) sendmsg$auto_TIPC_NL_BEARER_GET(r2, &(0x7f0000002480)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10a0000}, 0xc, &(0x7f0000002440)={&(0x7f0000000600)={0x1e1c, r3, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@TIPC_NLA_PUBL={0x205, 0x3, 0x0, 0x1, [@typed={0x8, 0x78, 0x0, 0x0, @fd=r1}, @nested={0x107, 0xa5, 0x0, 0x1, [@typed={0x14, 0xee, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00'}, @generic="44aef5a70e8c77aa1f689761a769f5ce4eba555218b88b78758332512fbbbfc3cee79d7ac5b76dc97b7f1e336b0d8ee45610287d375819cbbdc3e8bd3285eb394230644b3892ef57e9b9e48fb46ef8daae63bbf2de0d9fad2b138022d8fe6d5ead3622eb05eb3038496acfa66d", @generic="1c5fb3fd1f113c06234979899675f6669ca2ae45aea2ccc90f65866e01ee44683c8a8627cc8ce2e23bf7d2ac39670b0782042d025dc220de1632f35557f7b05bc9877c57ed08692fd3ca4092220584723bd27513bcafad4c426f0bfc4f00f44cc512126b02761d4b443cc1c896e5e61d7188ed5bb715", @typed={0x8, 0x29, 0x0, 0x0, @ipv4=@multicast2}, @nested={0x4, 0xe2}]}, @generic="d5065d32a0ba1b9767730d705451a3227a443924cadd6d1690cc1ec0c3b631b3a1c2f22987245779a38d0752439ebc20d486adc6841786d64285f92bc8a93eeaaca94407ca75891a714988c586f71aec7a6780bc6148ddfa1e8e8e86af705ca8aad86dcd80c3fabab5a3ec1e0541d361fa1c0e76e068f0e4c50eb25de878ad56d61c5c161ac32dc1168fd6ef696e8eab34ec9d2bc589d2b6652e6fdc625d24ce11f7975270524658994427790642e363298c2cfaf68dc0d6abc7aa1f2b9be33116ecaac13e80d79d93c8503fb75f914b2dfd8ad0ba701cb4cc4cfc81a1d6dacfa071f6099f94418d28e01ecc3f59d697bd"]}, @TIPC_NLA_NODE={0x26c, 0x6, 0x0, 0x1, [@typed={0x8, 0xbf, 0x0, 0x0, @ipv4=@private=0xa010101}, @typed={0x8, 0x127, 0x0, 0x0, @ipv4=@private=0xa010101}, @nested={0x31, 0xe6, 0x0, 0x1, [@typed={0x8, 0x3, 0x0, 0x0, @pid}, @generic="762ecfa0966c5068cd2ed907415ca64d834e8cf2212e7e8125bf141981", @nested={0x4, 0x61}, @nested={0x4, 0x5}]}, @nested={0x8, 0x94, 0x0, 0x1, [@nested={0x4, 0x97}]}, @nested={0x1fb, 0x60, 0x0, 0x1, [@generic="c72294df44d44c4918fa59c03a3ba1007d031da681bb7af7cb9014912ace416ac47c3d0b18744851b3b6467a49640b2e139c73f7fba164084a4cc8265e1c4bad1f383a36244bd4f5ce042f6bff8466015d153c63103ebc5f601d09d683a96e62bcb1db69c8b5d8fc4c95aae54bce9d1cf775d4c32db569ce1dd628268a7a79beae6a12105a0b9557952c9667f212c95622853ac526ce24e1fd5fc3ec2b07583ec114807a902d2860c68496097768845e005f92b07568c248498f67bde1f4c5903fd6aaca498b30bf5fad699326a3d913", @typed={0x8, 0x107, 0x0, 0x0, @uid=r4}, @typed={0xc, 0xb9, 0x0, 0x0, @u64=0x7f}, @typed={0x4, 0x2a}, @typed={0x6a, 0x27, 0x0, 0x0, @binary="9baaba5d67ba61831e4632558e7be483da07ca997416591e9a419a2bea159cea0a8bdc6f030757a364808a386d282fabe9d8649248cd58ff250fd6c9a1833b945051e878960c5ddb1fd46d1312354ab26829991172c48e8ce539e1ce3d74b3492eda1bfb3195"}, @typed={0x8, 0x8c, 0x0, 0x0, @u32=0x10000}, @generic="14d44fdae332eb5e7cd51e51a31483200f0a8097ead8ae495b448d01e128de330a891a256eb689a6a26248d13f1b1c9299f1c24dd53ca7e99d8a499638ffd085f0233d9b9de91af42b68a0cc18110a5aa0b02d41d74817ecae307c1472d9f23ca5345115d6f244c32af4fa54a9f1502f71bdfd0d200c469a7655766595a5549af5b24462a1d66f3b544f3909b2978ca2307bb52c657fef7059018a"]}, @typed={0x8, 0xc1, 0x0, 0x0, @ipv4=@private=0xa010101}, @nested={0x8, 0x6c, 0x0, 0x1, [@nested={0x4, 0x107}]}, @typed={0x8, 0x13d, 0x0, 0x0, @uid=0xffffffffffffffff}, @typed={0x8, 0x84, 0x0, 0x0, @u32=0x8}]}, @TIPC_NLA_BEARER={0x168, 0x1, 0x0, 0x1, [@nested={0x164, 0xf6, 0x0, 0x1, [@typed={0xbc, 0x51, 0x0, 0x0, @binary="7b9d701ec3c08c420bdf649dd27de30fd1381f23d0b1371ac97b5a85530029c0831f493cf74af6b820dfedfc649edaba9dd33ff222bb4b338bee31e5ed3690f056c7a62b1cf213d00f2704c354e76ae3964a2fd2f23215b05b1e7b69223b964420c77e5123d5a8dad8da38d45234ed73b636627a769c76dacca25c7fb3aa50e2dfe726bf566a9cae5757493cf6d47cff653f3e74210083d9ce7af2121cb61d6afb9049eb4578158496a5cf9a92b3bef5d44d92832fbe0c25"}, @typed={0x8, 0x135, 0x0, 0x0, @u32=0x1}, @typed={0x8, 0x52, 0x0, 0x0, @u32=0x2}, @generic="b2c6938204ebf315846548b004e975992df7fdbc18a73721736151e065612fa3bd4a3f122674078b418c", @nested={0x4, 0x1e}, @nested={0x4, 0xe6}, @typed={0x8, 0xa4, 0x0, 0x0, @ipv4=@rand_addr=0x64010101}, @generic="c0bb39d95224e977ef3b24b84c0757777ce3e733ba32bf10821c6b96d79418624d626e29827eb7e5251205dd9192867a701e7da65ba54fa05f692ad11e031e66dc19fd3168f8fcd05bd030ff42183c14749c9bcf3cead4a134fb"]}]}, @TIPC_NLA_SOCK={0x1ec, 0x2, 0x0, 0x1, [@typed={0x8, 0x147, 0x0, 0x0, @u32=0x6}, @typed={0x8, 0x126, 0x0, 0x0, @pid=r5}, @nested={0x1d5, 0x65, 0x0, 0x1, [@generic="5c4c160e40fd9829ff293526077929562ad924e66a14f47197282ee7879c3ca700e9b93ed8133afd82c1213578dd15797a9165694a5cbf036cd55184c052294c422c28941457fdaddd3a0f4c504a39b195f93852d40c4ef38b11868c9a5cea0c94590cdf6e38a885eb36d0302f46dcf7d9e2737c0020df513853b7d709f6c33cf85b0ee0ffc31fa766dec599dd56b4208a3fe30c6240b8d7ec05cb3cc37d8c7b33ce066dfa61d32bc093b27acd50ee0fce64613c644269a6a9f1b75275cd0d74ec4fccbdd86a45ba6c32859979f4f6dc373d9eede70d7761f8a69a8ca0da04ec4e4dda762bb6f0bfb79d18033b40db495a723fa5", @generic="758c5176629370be1d909de5167d84c8cf32c2c1ee5337711778f2f2e6a9d3b1571ed476c7a93737357bdb87c164efa3b39116057e88ec1cadae629b10910f657c6e5cae3ef9c0712c4eabf0c4838680c02d1f9be506c53d1c61c6917045184173460a320c0868f170d2085b89333a6d7d96485cc69ec0d0f298d5e59da0d31d9ecd8d8ad33497d7f68242fd28aa407599c99876d86fc4d3d24f32f9f74d974d6a838f8b7ff58b128da22899a3c89c1a0afbd57dbb77e835d9828a458350e1948d", @typed={0x14, 0x105, 0x0, 0x0, @ipv6=@mcast2}, @typed={0x8, 0x95, 0x0, 0x0, @fd=r2}]}]}, @TIPC_NLA_SOCK={0x18, 0x2, 0x0, 0x1, [@nested={0xc, 0x57, 0x0, 0x1, [@nested={0x4, 0x4c}, @typed={0x4, 0x134}]}, @typed={0x8, 0xa1, 0x0, 0x0, @pid=r7}]}, @TIPC_NLA_NET={0x1bc, 0x7, 0x0, 0x1, [@nested={0xef, 0x36, 0x0, 0x1, [@typed={0x8, 0x4d, 0x0, 0x0, @u32=0x9}, @generic="950a3cb2fc8a9c51b3927bfdfd93773f98721558d5354d46f2d2888ddf08b9996977d5d26ede41419c7b303a8632bf1b4af6efc69e28ab", @typed={0x4, 0xf3}, @generic="60efc303b149115187e7ab47846a43e26f1b1d362b991016fe77c70d4f4b442aa492dbdbc92e3ca787db7a6eaf168fa51b8261171762f4ca328f69b4bbf96780c42eb1d37b732fc1a81663c7cf7f25a53fdd39e0d328b8a3fa1553ca00fbfe767f2655b03bb6c45054c36206bcbfbb2be525313b73e94c0c160bf85cb0e5f246c05b060c9dee470c94e4cf787091f97d0d9a026a1d4a6698029990e497665c18", @nested={0x4, 0x123}, @nested={0x4, 0xa0}]}, @nested={0x28, 0x75, 0x0, 0x1, [@nested={0x4, 0x55}, @nested={0x4, 0xfa}, @nested={0x4, 0xd7}, @typed={0x8, 0x2b, 0x0, 0x0, @u32=0x8}, @typed={0x9, 0x99, 0x0, 0x0, @str='*./*\x00'}, @nested={0x4, 0x6}]}, @nested={0x9d, 0x41, 0x0, 0x1, [@generic="0a01", @generic="b671dc90e80c2691be8a35d79fe443ba9e0fafe365aea81d9426ee784800d8e7548ca0172c0a87d998350e4f02e56a5269b204a53f0e074518ef3eb5b6a8a5a7fa07d6f30da1614d6581060aa54a3b4d446778ee672ba2d6cab70062e0a923a9c2ce975b8e493e44", @typed={0x8, 0x23, 0x0, 0x0, @u32=0x9}, @generic="dfe47867e6c8e96d0acdd66d3ba707bdd4dff7e9084d1b4521b7f521d1f880", @typed={0x8, 0xb2, 0x0, 0x0, @pid}]}]}, @TIPC_NLA_LINK={0x326, 0x4, 0x0, 0x1, [@typed={0x8, 0x52, 0x0, 0x0, @u32=0x6}, @generic="34897891cdf347d1645a27fc5f9109869dfdc1f1a911ed72f91d77d5d07e5cbf267aa4c0abaf9a33ee69b71e216f295f3069670ad2780b2b503a620ed112d181641b4b1d438a98e02db5021fe9b26356eb68d25b066511251603d6e9069fa904d6542239eb1f5babdb41b830deb4d5dde55879f824d152b32e7ba3f099afedc4784a28870a5bece142b5bdf97f9d015deda6770a13e1e56e7978f4cb43f35c1642317ce539627af70b", @nested={0x117, 0x76, 0x0, 0x1, [@typed={0x25, 0xf, 0x0, 0x0, @binary="63ed7082bdfc18c44c909e6be3835e97d768391e87e42a8f329fcc9d700884beb1"}, @generic="fbbe1cb99b921b7cc546046c0ce7970e4ae7604e7b8fe7563672699e10e77dda01977c68b172176cce420f91a285a4b457ced7c8263a76797ec3271c4e09477eada2a605167e1ddc329cb8b8f6a3bd1e7ecbff6d5d61f3d1c2e81d30910a33c78778e701423f8d59a5ae20689c54d104675e314de68f7b", @typed={0xc, 0x58, 0x0, 0x0, @u64=0x8be5}, @typed={0x67, 0xf0, 0x0, 0x0, @binary="58eca7405aa3f43c987606528e16d5a5dba06845debbc8a3bb2b920b80e84af827998a67a927eeac30ace1b2c629291888a4aea8a10534d6576a5d826352df60a4130c8b0b9723dadad387815da35d7a274b01406429a8065fc173b3c16af38aa642d7"}]}, @typed={0x14, 0x97, 0x0, 0x0, @ipv6=@private2={0xfc, 0x2, '\x00', 0x1}}, @typed={0x8, 0x34, 0x0, 0x0, @fd=r1}, @typed={0x54, 0x28, 0x0, 0x0, @binary="e7bdf0cbf541e85f66d6bb3feed909ea174e76649b9e5f1bf20d48f26c9b50bca7f593c892b11a3023149ae6b3faac62def4fee106918639fa70e420f5a8677bf71369a2adf98991567f1e293802da38"}, @generic="cbb95849462084cdcf06371272fa5bbb39a05b540e4c167e19daeb733ded7f64c594e2817a5bd09f8b0c5b466bee117ddf5137b4acb33ac743d614c0ffb52becad9d4d18104cedbd948fc0073712f3d7dc2c00018e4458ad775a5610438ab92d3e93989083c8e268f0f09dd3ffa4d9358b1f016bc1fbef05dd74d08e6a1d6094031fb08426dfd8edec9f9cd8cd0677f8ee4375af7708bb86f29203917e8742d72b36dcd3e633fdf308a950b03d4a8433bd04b4703bc50bdeb3f3d3a4ba089041d287cb4a591ad7c54243099f33a1f3ce3e2cb96316", @typed={0x14, 0x2, 0x0, 0x0, @ipv6=@mcast2}]}, @TIPC_NLA_MON={0x1120, 0x9, 0x0, 0x1, [@nested={0x1119, 0x81, 0x0, 0x1, [@typed={0xc, 0x142, 0x0, 0x0, @u64=0x3}, @nested={0x4, 0xbc}, @nested={0x4, 0x2d}, @generic="f1a8fe613eb7d971ea7eb336d2d18e305c6b4a6333f144754b1eb9bdbb9e667a33768a65e09477410658e8e8ac726991031c891dfb84dc93587ef633b558a9757f5376bb5b6acdbc4d36b8f429eb94f57361e458a1ec8438c423", @generic="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", @generic="83d5079227cf9a6228224d4e46cd82ab41bc61c811a164156e16cc529b8783e4ee5aa5575ab443cfd6affee8f65801a44d6a9ffd39ca3ef453c76281ab6000993b69d66f0977a0fefe3707b79f1ddca327fa35332f65cc114c1098d73a7731faa4eaed3f40ce0d1e6cfe7ba99be92a0c059d1b68e1c45ded6e9b13cb8e7ad9d2474fe8dfef40aed391a72ba052d1fb931eebc217c6b745b6708ace772cf9042e97819d591b7372"]}]}, @TIPC_NLA_UNSPEC={0x22, 0x0, "38a6ba6a0dd11beb95c2c12f9ca208e5f7be8c704482fdeb9e3f5c4cbf5c"}]}, 0x1e1c}, 0x1, 0x0, 0x0, 0x4000010}, 0x801) syz_genetlink_get_family_id$auto_MAC802154_HWSIM(&(0x7f00000024c0), r2) sendmsg$auto_NBD_CMD_CONNECT(r1, &(0x7f00000025c0)={&(0x7f0000002500)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000002580)={&(0x7f0000002540)={0x2c, 0x0, 0x8, 0x1000, 0x25dfdbfc, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x7}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x200068c0}, 0x4000000) socketpair$auto(0x4, 0x5, 0xff, &(0x7f0000002600)=0x1) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$auto_nfc(&(0x7f0000002680), r6) sendmsg$auto_NFC_CMD_DEACTIVATE_TARGET(r8, &(0x7f0000002740)={&(0x7f0000002640)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000002700)={&(0x7f00000026c0)={0x2c, r9, 0x4, 0x70bd27, 0x25dfdbfc, {}, [@NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0x8000}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, 0x8}, @NFC_ATTR_LLC_PARAM_LTO={0x5, 0xf, 0x20}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc000}, 0x40000) read$auto(r6, &(0x7f0000002780)='\'\x00', 0x6) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000002800), r0) sendmsg$auto_NL80211_CMD_SET_COALESCE(r10, &(0x7f0000002a00)={&(0x7f00000027c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000029c0)={&(0x7f0000002840)={0x144, r11, 0x200, 0x70bd26, 0x25dfdbfd, {}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0x2}, @NL80211_ATTR_SAE_PASSWORD={0x7f, 0x115, "162ab5dfce4c57d3fec379f038c8009266c7f3b4bf0e96942d5a11dbcc88a25df2bd06baa7bcfd32f016f3020e107f8695ad34780cba2ca839df52c02a3a03b9fe500902bd0dcb9a35678676ea01683ce7372eacbd16d513c8e2bdbe873053427d5569ae6072b208c90b67b0c17cee0a3aed8e5c651b268f77d2a0"}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, "cb0bd34e8d746777b2d9c6d4232e39d5b5da43f24739ea4d7ee1"}, @NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0x2c, 0xbe, "259eadb5ef210ecfa32571fcd434b5eaa5e4d567a1d5f51fd047fff18389e9d2543383cc797dc623"}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x200}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0x4a, 0xe8, "f921211bbf3c340546770098072b2c6b418b635fc9ff32527eaff8eebc532d47cf18c7c877ded1ea2f9d121e2c5bc7f2b02c6dcaa83b35dc23b51d08cfee36ff32aa43f5c5fb"}, @NL80211_ATTR_DISABLE_VHT={0x4}, @NL80211_ATTR_FREQ_FIXED={0x4}]}, 0x144}, 0x1, 0x0, 0x0, 0x804}, 0x801) ioctl$auto(r2, 0x7fff, 0x167) epoll_create$auto(0x1b) sendmmsg$auto(r1, &(0x7f0000002b40)={{&(0x7f0000002a40)=[0x4, 0x0], 0x3, &(0x7f0000002ac0)={&(0x7f0000002a80)=[0x5], 0x8}, 0xfffffffffffffc01, &(0x7f0000002b00)=[0x5, 0x6036, 0x6, 0x3, 0x8, 0xbfd], 0xc0, 0x8}, 0xf}, 0x4, 0x8) statmount$auto(&(0x7f0000002b80)={0x9, 0x0, 0x8, 0x4}, &(0x7f0000002bc0)={0x9, 0x7ff, 0x2, 0xf3, 0xb, 0x1800, 0x0, 0x3, 0x101, 0x11d74ba, 0x8, 0x6, 0x3, 0x4, 0x2, 0x81, 0x1b2, 0x80, 0x8, 0x0, [0x8, 0x9, 0x40, 0x1, 0x0, 0xff, 0x10001, 0x98f5, 0x3a5, 0x7b, 0x7, 0x875d, 0x2, 0x5, 0x0, 0x3, 0x0, 0xc2, 0x2, 0x8, 0x7, 0x0, 0x6, 0x7, 0x6, 0x5, 0xfffffffffffffff3, 0x9, 0x7, 0x1000, 0x8, 0x2, 0x100, 0x0, 0x0, 0x1000, 0xa4, 0x7fff, 0xffff, 0x6, 0x4, 0x4, 0x2, 0x5, 0x8000000000000001, 0xba1, 0x0, 0x1, 0xb], "25be53d94af7d3960af04a417a9e7a"}, 0x7, 0x1200000) close_range$auto(r8, r10, 0x0) bind$auto(r0, &(0x7f0000002e00)={0x5, @sockaddr_1_1={"3db875df6ecd3a56a6ce9a732683e5be186aa050fb3a7fc8597c652601b51b54d796d4c8fa49628df16321fddac2c1cb96499a8f868d1e6c59d01fe32fdacf13f7336963844dacdf5201ed74619b830ce3379eee7a02ae2ae4cf75db8ce519a87d0d21a7084186deb2d1b6068c781e6520ef1b442aef6af01a"}}, 0x5) r12 = ioctl$NS_GET_PARENT(r2, 0xb702, 0x0) setsockopt$auto(r12, 0xf, 0x80000001, &(0x7f0000002e80)=']/}]\x00', 0xfff) keyctl$auto(0x8, 0xff, 0x9f, 0x10001, 0x6) sendmsg$auto_NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r10, &(0x7f0000002f80)={&(0x7f0000002ec0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000002f40)={&(0x7f0000002f00)={0x2c, 0x0, 0x4, 0x70bd2a, 0x25dfdbfb, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, 0x57b}, @NL80211_ATTR_WIPHY_ANTENNA_RX={0x8, 0x6a, 0xd}, @NL80211_ATTR_RECEIVE_MULTICAST={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000810}, 0x24008003) setsockopt$auto(r8, 0x7fff, 0x4, &(0x7f0000002fc0)='nfc\x00', 0x8) 18.07958222s ago: executing program 35 (id=2409): msync$auto(0x0, 0x2000000005, 0x6) (async) getcpu$auto(&(0x7f0000000000)=0x8, &(0x7f0000000040)=0x976, &(0x7f0000000080)={[0x3, 0xec, 0x80000000, 0xf, 0x8, 0x19e4, 0xff, 0x8001, 0x1, 0x80000001, 0x3, 0xfa, 0x5, 0x7fffffff, 0x9, 0xada]}) (async) socket(0x3, 0x4, 0x0) (async) rename$auto(0x0, &(0x7f0000000140)='./file0\x00') 18.079421378s ago: executing program 5 (id=2420): close_range$auto(0x2, 0x8, 0x0) (async) r0 = socket(0xa, 0x3, 0x3a) getsockopt$auto(r0, 0x829, 0xcf, 0x0, 0x0) chdir$auto(0xfffffffffffffffe) (async) r1 = socket(0x32, 0x3, 0xc) (async) socket(0x28, 0x1, 0x0) connect$auto(0x3, &(0x7f0000000180)={0x28, @sockaddr_1_1}, 0x54) (async, rerun: 64) statmount$auto(0x0, &(0x7f0000000040)={0x0, 0x0, 0x36, 0x828, 0x9, 0x8000000000000000, 0x5, 0x7, 0x9, 0x5, 0x5, 0x9, 0x3, 0x8, 0x5, 0xf, 0x0, 0x10009, 0x10001, 0x5, [0x9, 0x7f, 0x77, 0x1, 0x7fffffffffffffff, 0xe06, 0x400, 0x3, 0x80000000, 0x8, 0x3, 0xfffffffffffffff9, 0x10, 0x3, 0x35c4, 0x1, 0x6, 0x8, 0xea8, 0x8, 0xd9, 0x8, 0x5, 0x1, 0x200000000803, 0x9, 0x5, 0x401, 0x800, 0x8000000000000000, 0x2ab, 0x8, 0x6, 0x1, 0x1, 0x3, 0xffffffffffff0000, 0x6b, 0xfffffffffffffff9, 0x4, 0x2b7, 0x4, 0xf, 0xffffffffffffff26, 0xecc, 0x7fffffff, 0x6, 0x7d, 0xdc]}, 0xe3c, 0x0) (async, rerun: 64) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) (async) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) pipe2$auto(0x0, 0x80) (async) ioctl$auto(0x1, 0x5761, 0x4) (async) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) (async) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x200000401, 0x8000) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000240), r1) (async) syz_genetlink_get_family_id$auto_MAC80211_HWSIM(&(0x7f0000000000), r2) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_macsec(&(0x7f0000001fc0), r3) r4 = syz_genetlink_get_family_id$auto_ila(&(0x7f00000022c0), r3) sendmsg$auto_ILA_CMD_DEL(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002340)={&(0x7f0000000080)={0x14, r4, 0x1, 0x70bd24, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x20000000) (async) sendmsg$auto_ILA_CMD_GET(r2, &(0x7f0000000340)={&(0x7f0000000280), 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x38, r4, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@ILA_ATTR_IDENT_TYPE={0x5, 0x8, 0xd}, @ILA_ATTR_LOCATOR={0xc, 0x1, 0x800000}, @ILA_ATTR_CSUM_MODE={0x5, 0x7, 0x6}, @ILA_ATTR_CSUM_MODE={0x5, 0x7, 0xa}]}, 0x38}, 0x1, 0x0, 0x0, 0x24044811}, 0x24000814) close_range$auto(r2, r1, 0x2) fcntl$auto(r2, 0x1, 0x4) connect$auto(0x3, &(0x7f0000000180)={0x28, @sockaddr_1_1}, 0x54) (async) recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0) 18.07916236s ago: executing program 0 (id=2421): socket(0xa, 0x2, 0x88) (async) socket(0xa, 0x2, 0x88) mmap$auto(0x0, 0x4020009, 0x46, 0xeb1, 0x4000401, 0x4) select$auto(0x3, 0x0, &(0x7f0000000100)={[0x9, 0x7, 0x0, 0x9, 0xfffffffffffffffc, 0x3, 0x6, 0x2, 0x9, 0xffff, 0x4000000000000000, 0xd, 0x3, 0x200000201, 0x7, 0x6]}, 0x0, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) io_uring_setup$auto(0x40000002c55, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) (async) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x6, 0x0) (async) socket(0xa, 0x6, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0xdd, 0x8000) (async) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0xdd, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) fanotify_init$auto(0x5, 0x2000000000002) socket(0x2, 0x2, 0x1) socket(0x11, 0x80003, 0x300) (async) socket(0x11, 0x80003, 0x300) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x0, 0x4, 0x6, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4000010}, 0x800) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) fanotify_mark$auto(0x0, 0x21, 0x9, 0x4, 0x0) (async) fanotify_mark$auto(0x0, 0x21, 0x9, 0x4, 0x0) read$auto(0x3, 0x0, 0x80) (async) read$auto(0x3, 0x0, 0x80) r2 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000100), r0) sendmsg$auto_NL802154_CMD_GET_SEC_LEVEL(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x1c, r2, 0xf01, 0x70bd2c, 0x25dfdbff, {}, [@NL802154_ATTR_SCAN_CHANNELS={0x8, 0x21, 0xfffffff9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24040085}, 0x40) getsockopt$auto(0x100000006, 0x0, 0x33, 0xfffffffffffffffe, 0x0) (async) getsockopt$auto(0x100000006, 0x0, 0x33, 0xfffffffffffffffe, 0x0) r3 = socket(0xa, 0x801, 0x84) getsockopt$auto(r3, 0x84, 0x7f, 0x0, 0x0) connect$auto(0x3, &(0x7f0000000140)={0xa, @sa_data_min="c4aeed448dc7fe8000"}, 0x55) sendmmsg$auto(0x3, &(0x7f0000000000)={{0x0, 0x2, 0x0, 0x106, 0x0, 0x2, 0x697b}, 0xed7138c}, 0x9a6, 0x0) (async) sendmmsg$auto(0x3, &(0x7f0000000000)={{0x0, 0x2, 0x0, 0x106, 0x0, 0x2, 0x697b}, 0xed7138c}, 0x9a6, 0x0) 17.207193146s ago: executing program 5 (id=2422): r0 = socket(0x2, 0x80002, 0x73) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000000), r0) mprotect$auto(0x1ffff000, 0x8000000000000002, 0x5) socketpair$auto(0x3, 0x5, 0x7, 0x0) setsockopt$auto(0x3, 0x0, 0x13, 0x0, 0x9) sendto$auto(0x3, 0x0, 0xf, 0xe, &(0x7f0000000100)={0x2, @sa_data_min="c449e72204736b00"}, 0x19) 17.185661868s ago: executing program 0 (id=2423): close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000000c0)='ns/pid\x00') r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x2, 0x88) socket(0xa, 0x2, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) select$auto(0x6d0c, 0x0, &(0x7f0000000100)={[0xd, 0x200, 0x800000000000008, 0xc, 0x9, 0x3, 0x6, 0x1, 0x40009, 0x5e582972, 0x4000000000000000, 0x4, 0x93, 0x8, 0x8, 0x100]}, 0x0, 0x0) connect$auto(0x3, &(0x7f0000000140)={0xa, @sa_data_min="c4aeed448dc7fe8000"}, 0x55) connect$auto(0x3, &(0x7f0000000000)={0x2, @sockaddr_1_1={"d9ef7f"}}, 0x55) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0) mmap$auto(0x0, 0x5f, 0x9, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) mmap$auto(0xf000, 0x8, 0x1000000003, 0x9b72, 0x2, 0x8000) ioctl$auto(r0, 0x0, 0x80000000) mseal$auto(0x8000, 0x7, 0x0) setsockopt$auto(0x400000000000003, 0x29, 0x20, 0x0, 0x856b) 15.052292594s ago: executing program 6 (id=2424): socket(0xa, 0x2, 0x88) (async) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) (async) io_uring_setup$auto(0x6, 0x0) (async) close_range$auto(0x0, 0xfffffffffffff000, 0x2) (async) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/cgroup\x00') (async) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/net\x00') ioctl$NS_GET_PARENT(r0, 0xb701, 0x0) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x5, 0x8000) r1 = socket(0xa, 0x2, 0x3a) bind$auto(r1, &(0x7f0000000000)={0xb, @sockaddr_1_1}, 0xa) (async) madvise$auto(0x0, 0xffffffffffff0001, 0x15) io_pgetevents$auto(0x8, 0x4, 0x6871a176, 0x0, 0x0, 0x0) mlockall$auto(0x7) (async) mprotect$auto(0x0, 0x8000000000000001, 0x6) clone3$auto(0x0, 0x40) getrandom$auto(0x0, 0x6000000, 0x3) mbind$auto(0x0, 0x100000004, 0x100000000, 0x0, 0x20000000000006, 0x2) (async) setuid$auto(0xe) (async) bpf$auto(0x5, 0x0, 0x5) (async) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0xa, 0x801, 0x106) (async) setsockopt$auto(0x3, 0x6, 0x21, 0x0, 0x10) (async) close_range$auto(0x2, 0x8000, 0x0) socket(0x1d, 0x2, 0x7) connect$auto(0x3, &(0x7f0000000180)={0x1d, @sockaddr_1_1}, 0x54) (async) socket(0x1d, 0x2, 0x6) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x100008003) (async) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) 14.148927402s ago: executing program 5 (id=2425): socket(0x22, 0x2, 0x0) socket(0xa, 0x3, 0xff) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) bpf$auto(0x0, &(0x7f00000001c0)=@task_fd_query={0x9, 0x21eb, 0x7ff, 0x6, 0xa, 0x1000009, 0x5f, 0x0, 0x3}, 0x6f3) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x3, 0x100) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) sendmmsg$auto(0x3, &(0x7f0000000000)={{0x0, 0x2, 0x0, 0x106, 0x0, 0x1, 0x3}, 0xed7138c}, 0x7, 0x0) socket(0xa, 0x3, 0x6) socket$nl_generic(0x10, 0x3, 0x10) eventfd$auto(0x3) r0 = socket(0xa, 0x2, 0x88) bpf$auto(0x0, &(0x7f0000000000)=@link_update={r0, @new_prog_fd=0x4, 0x4, @old_map_fd=0x3ff}, 0xa3) bpf$auto(0x0, &(0x7f00000001c0)=@task_fd_query={0x9, 0x21eb, 0x7ff, 0x6, 0xa, 0x1000009, 0x5f, 0x0, 0x3}, 0x6f3) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x3, 0x100) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0xa, 0x3, 0x2f) r2 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYBLOB="5e0027b4839f3015398d3b61", @ANYRES32, @ANYRES32=r1, @ANYRES64], 0x1ac}, 0x1, 0x0, 0x0, 0x40}, 0x40000) 14.124885146s ago: executing program 0 (id=2426): mmap$auto(0x5, 0x1, 0x80000000000000df, 0x19, 0x2a4, 0x8000) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) io_uring_setup$auto(0x6, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x5452, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup\x00', 0x28300, 0x190) r1 = open(&(0x7f00009e1000)='./file0\x00', 0xc162, 0x0) ftruncate$auto(r1, 0x80) unshare$auto(0x40000080) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) ioctl$auto(0xc8, 0x400454d9, 0x5c8d) mlockall$auto(0x7) mmap$auto(0xfffffffffffffffc, 0x5, 0x4000000000df, 0xeb1, 0x7f, 0x8000) sendmmsg$auto(0x3, 0x0, 0x3, 0x0) r2 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYRESHEX=0x0, @ANYRES32=0x0, @ANYBLOB="5de1"], 0x1ac}}, 0x40000) recvmmsg$auto(r2, 0x0, 0x10a, 0x8, 0x0) prctl$auto(0x23, 0xf, 0x8000000000000000, 0x0, 0x0) close_range$auto(r1, r1, 0x7fffffff) close_range$auto(0x0, 0xfffffffffffff000, 0x2) unshare$auto(0x6) r3 = socket(0x25, 0x5, 0x0) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) poll$auto(0x0, 0x2, 0xc) mincore$auto(0x2000000000, 0x2, &(0x7f00000001c0)='nl80211\x00') open(&(0x7f0000000000)='./cgroup\x00', 0x0, 0x123) r4 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_DEL_PMK(r3, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYRESOCT=r0, @ANYRES16=r4, @ANYBLOB="040028bd7000dcdbdf257c0000000800c400ffffffff04004601d43691c24ebe1831c5297b7608499f8cfa9ee2cf05d52c"], 0x20}, 0x1, 0x0, 0x0, 0x20000841}, 0x2400084c) getdents$auto(0x0, 0x0, 0x700) 14.048038103s ago: executing program 6 (id=2427): r0 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sysfs$auto(0x2, 0x4f, 0x0) (async) fsopen$auto(0x0, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'virt_wifi0\x00', 0x0}) sendmsg$auto_NL80211_CMD_SET_WIPHY(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="d0000000", @ANYRES16=r0, @ANYBLOB="01002dbd7000fddbdf250201000008000300", @ANYRES32=r2, @ANYBLOB="b1002500"], 0xd0}, 0x1, 0x0, 0x0, 0x4000023}, 0x80) 14.047546715s ago: executing program 6 (id=2428): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x10004) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0xffffffffffff0001, 0x15) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mlock$auto(0x4, 0x0) mlock$auto(0x7c89, 0x47fff) remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0x3, 0x4) mmap$auto(0xffff, 0x8000000000000000, 0x49, 0xfc5b, 0xdaa, 0x5) clone$auto(0x3, 0x7, 0x0, 0x0, 0xdd6) mlock2$auto(0x1, 0x8001, 0x0) bpf$auto(0x20, &(0x7f0000000100)=@enable_stats={0x80000001}, 0x7) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) fanotify_init$auto(0x5, 0x2000000000002) socket(0x26, 0x80805, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000000c0)='ns/ipc\x00') open(&(0x7f0000000040)='./cgroup\x00', 0x745240, 0x40) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) mmap$auto(0xf000, 0x8, 0x1000000003, 0x9b72, 0x2, 0x8000) semctl$auto(0x0, 0xfffffffffffffffa, 0x100000001, 0x95cc) 3.102450275s ago: executing program 5 (id=2429): r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) ioctl$auto(0x3, 0x800005411, 0x38) r1 = syz_genetlink_get_family_id$auto_SMC_PNETID(&(0x7f0000005800), 0xffffffffffffffff) sendmsg$auto_SMC_PNETID_GET(r0, &(0x7f0000005900)={0x0, 0x0, &(0x7f00000058c0)={&(0x7f0000005840)={0x1c, r1, 0x89, 0x70bd29, 0x25dfdbfb, {}, [@SMC_PNETID_NAME={0x5, 0x1, '\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000082}, 0xc040044) 3.101615662s ago: executing program 0 (id=2430): mmap$auto(0x0, 0x20009, 0x7fffffff, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x9, 0x3, 0x8012, 0x3, 0x8000) madvise$auto(0x0, 0x1d26, 0x17) sendfile$auto(0x6, 0x3, 0x0, 0x8000) mmap$auto(0x0, 0x12, 0xdf, 0xeb6, 0x3fd, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x10004) set_mempolicy_home_node$auto(0x1, 0xb, 0x7, 0x22422f4e) madvise$auto(0x0, 0xffffffffffff0001, 0x15) setns(0xffffffffffffffff, 0x0) unshare$auto(0x40000080) clone$auto(0x8001, 0x5, 0xffffffffffffffff, 0xfffffffffffffffc, 0x6) writev$auto(0x1, &(0x7f0000000100)={0x0, 0x400000000000fdef}, 0x1) vmsplice$auto(0x3, 0x0, 0x9, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x20200, 0x15) r0 = socket(0x2, 0x5, 0x0) fcntl$auto(0x0, 0x407, 0x100000) r1 = open(&(0x7f0000000000)='./file0\x00', 0x8002, 0xa) socket(0x2, 0x1, 0x0) bpf$auto(0x5, &(0x7f0000000000)=@bpf_attr_3={0x8, 0xffffffef, 0x18c, 0x6a, 0x0, 0x8, 0x3, 0x9, 0xfffffff9, "6806185774e816ef77cf00", 0x0, 0x541, 0x4, 0x7, 0x6d, 0x1008, 0x4, 0x2, 0xe, 0x5, @attach_btf_obj_fd=0x3, 0x166, 0x7ff, 0x6, 0x6, 0x48000000, 0xa7c2}, 0x7) connect$auto(0x3, &(0x7f0000000000)={0x2, @sockaddr_1_1={"d9ef7f"}}, 0x3) pselect6$auto(0x2, 0x0, 0x0, 0x0, 0x0, 0x0) socket(0x2b, 0x1, 0x1) unshare$auto(0x40000080) close_range$auto(r0, r1, 0x2) socket$nl_generic(0x10, 0x3, 0x10) munmap$auto(0xd, 0xffeffffffffffff7) 3.101158075s ago: executing program 6 (id=2431): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x6, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0xffffffffffff0001, 0x15) madvise$auto(0x0, 0xffffffffffff0005, 0x19) set_mempolicy_home_node$auto(0x6, 0x400, 0xf, 0x80) getcpu$auto(0x0, 0x0, 0x0) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) ioprio_set$auto(0x1, 0x0, 0x0) ioprio_set$auto(0x40, 0x401, 0xff) ioprio_set$auto(0x6, 0x6, 0x624) r0 = socket(0x2a, 0x2, 0x400) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) clone$auto(0x21, 0x9, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x6) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, 0x0, 0x0) clone$auto(0xffffffff7fffffff, 0x0, &(0x7f0000000000)=0xfd1, &(0x7f0000000080)=0x82, 0x1) clone$auto(0x81000005, 0x6, 0xfffffffffffffffd, 0xffffffffffffffff, 0x80000001) r1 = gettid() setpgid$auto(r1, 0xe83) pidfd_open$auto(r1, 0xfffff001) 78.264648ms ago: executing program 6 (id=2432): close_range$auto(0x0, 0xfffffffffffff000, 0x2) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00') capset$auto(&(0x7f00000000c0)={0x1, 0xffffffffffffffff}, &(0x7f0000000100)={0x0, 0x400, 0x10}) r1 = syz_open_procfs$namespace(r0, &(0x7f0000000080)='ns/uts\x00') ioctl$NS_GET_PARENT(r1, 0xb701, 0x0) r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/net\x00') close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) write$auto(0x3, 0x0, 0xffd8) shutdown$auto(0x200000003, 0x2) read$auto(0x4, 0x0, 0x80) pidfd_open$auto(0x1, 0x0) ioctl$NS_GET_PARENT(r2, 0xff09, 0x0) 177.67µs ago: executing program 0 (id=2433): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x20009, 0x800000000000df, 0xeb1, 0xa, 0x8000) getpriority$auto(0x2, 0x7ff) socket(0x15, 0x5, 0x0) r1 = socket(0xa, 0x2, 0x88) bpf$auto(0x0, &(0x7f0000000000)=@link_update={r1, @new_prog_fd=r1, 0x4, @old_prog_fd=r1}, 0xa3) close_range$auto(0x2, 0x8, 0x0) setsockopt$auto(0x4, 0x1, 0xc, 0x0, 0x6) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) unshare$auto(0x40000080) clone$auto(0xfffffffffffffff8, 0x800000000403, 0xffffffffffffffff, 0xfffffffffffffffc, 0x2) r3 = syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000900), 0xffffffffffffffff) shutdown$auto(r2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$auto_BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="000000004264c0eb986ab384d9198c8f5a3a17980c89e888b9d0e04471845ede0db8d6432c75e9150ffb2a0330836bc4aef53910550ca3b36f523d22bb7e670402f7a64dc3888bb5cf06845e5cf425b66a468319f8fbcb0b8fc3da3fca9ce2c99cc6b3a94432a1c242b0faae4be5bc8ec9697971044b15aeb2f568a60b90fa155305891f417d473e7388c88268373dfb8a1b2f1dc99a64355f3e3e6b8b0bd4f193e26825419d3bc8ac6f90806d1c4d7d793c5241d84e322ca39dc63d7e65563c67e56a4b98b6bc741913726d9bb2215a18c77b", @ANYRES16=r3, @ANYBLOB="010027bd7000fbdbdf250500000008000300", @ANYRES32=r5, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x4800}, 0x4000800) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendmsg$auto_OVS_DP_CMD_DEL(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="100028bd7000fbdbdf25020000000b0001002b491583383d0831410a40293a2e5d000006000157886a65819abcbed592a43f8e2716b8831d9d9948626f72667fb31d4907035a3d948ff55ad9aa9206026b50f32abab39431c63631c979216bda1a0e6c8aa002128cb74f3879f796bd49fc39e6183bd316124febe4aab3fc6e86a9d12680f774724a33152f2e443831226cebccbe125a9a9bb8f7a5d708470ac7f60d4aff1fb5d183", @ANYRES32=r5, @ANYBLOB="0800050001000000080005000180000008000900", @ANYRES32=r6, @ANYBLOB], 0x48}, 0x1, 0x0, 0x0, 0x4008c40}, 0x20008841) r7 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0xffffffffffffffff, 0x1, 0x4, 0x14, 0x34, 0x8) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) setsockopt$auto(r7, 0x7, 0x2, 0x0, 0x9) writev$auto(0x1, &(0x7f0000000100)={0x0, 0x400000000000fdef}, 0x1) madvise$auto(0x0, 0x20200, 0x15) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x25, 0x1, 0x3) clone$auto(0xd2d4, 0x101, 0xffffffffffffffff, 0x0, 0xfffffffffffffffd) madvise$auto(0xffff, 0x8000000000000003, 0xa) 0s ago: executing program 5 (id=2434): ioperm$auto(0x7, 0x6, 0x2) time$auto(0x0) mbind$auto(0x8, 0x100000004, 0x100002000, 0x0, 0x20000000000006, 0x0) r0 = open(&(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x2a002, 0x32) socket$nl_generic(0x10, 0x3, 0x10) lseek$auto(r0, 0x4, 0x20) r1 = socket(0x2, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000000), r1) sendfile$auto(0x6, 0x3, 0x0, 0xc01) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) readlink$auto(&(0x7f0000000c80)='\x00', 0x0, 0x7) keyctl$auto(0x1e, 0x8001, 0x40000000001065, 0x4, 0x1) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYBLOB='N\x00\'a'], 0x1ac}, 0x1, 0x0, 0x0, 0x40}, 0x40000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_wireguard(&(0x7f0000001140), r2) sendmsg$auto_WG_CMD_SET_DEVICE(r2, &(0x7f00000028c0)={0x0, 0x0, &(0x7f0000002880)={&(0x7f0000000000)={0x30, r3, 0x21, 0x70bd26, 0x25dfdbfa, {}, [@WGDEVICE_A_FWMARK={0x8, 0x7, 0x7fffffff}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x841}, 0x80) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) write$auto(0x4, 0x0, 0x100082) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mmap$auto(0x0, 0x2, 0xdf, 0x9b72, 0x2, 0x8000) read$auto(0x3, 0x0, 0x7) clock_gettime$auto(0x1, 0x0) madvise$auto(0x0, 0x200007, 0x19) unshare$auto(0x40000080) close_range$auto(0x2, 0x8, 0x0) open(&(0x7f00009e1000)='./file0\x00', 0xc162, 0x0) kernel console output (not intermixed with test programs): t! [ 74.026841][ T6148] Cannot create hsr debugfs directory [ 74.560518][ T6323] Invalid ELF header magic: != ELF [ 74.677321][ T55] Bluetooth: hci2: command tx timeout [ 74.953003][ T6148] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 74.974532][ T6148] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 75.003527][ T6148] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 75.019092][ T6148] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 75.210678][ T6148] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.224467][ T6148] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.251442][ T6148] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 75.262208][ T6148] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 75.303178][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.310363][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.320018][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.327168][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.489812][ T6148] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.580134][ T6148] veth0_vlan: entered promiscuous mode [ 75.613777][ T6148] veth1_vlan: entered promiscuous mode [ 75.680099][ T6148] veth0_macvtap: entered promiscuous mode [ 75.710357][ T6148] veth1_macvtap: entered promiscuous mode [ 75.787263][ T6148] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.818443][ T6148] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.838586][ T6148] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.863416][ T6148] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.886467][ T6148] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.927145][ T6148] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.939067][ T6148] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.998827][ T6148] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.032012][ T6148] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.044192][ T6148] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.057974][ T6148] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.097092][ T6148] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.118974][ T6148] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.140579][ T6148] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.156256][ T6148] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.168856][ T6148] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.194597][ T6148] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.219264][ T6148] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.328963][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.336819][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.384561][ T1133] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.406197][ T1133] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.569494][ T6420] netlink: 350 bytes leftover after parsing attributes in process `syz.3.93'. [ 76.757576][ T55] Bluetooth: hci2: command tx timeout [ 77.084249][ T6464] process 'syz.3.100' launched ':,' with NULL argv: empty string added [ 77.219746][ T6500] ======================================================= [ 77.219746][ T6500] WARNING: The mand mount option has been deprecated and [ 77.219746][ T6500] and is ignored by this kernel. Remove the mand [ 77.219746][ T6500] option from the mount to silence this warning. [ 77.219746][ T6500] ======================================================= [ 77.902749][ T6547] netlink: 342 bytes leftover after parsing attributes in process `syz.1.108'. [ 77.950557][ T6547] netlink: 342 bytes leftover after parsing attributes in process `syz.1.108'. [ 77.985206][ T6547] netlink: 342 bytes leftover after parsing attributes in process `syz.1.108'. [ 78.029455][ T6547] netlink: 342 bytes leftover after parsing attributes in process `syz.1.108'. [ 78.050349][ T6547] netlink: 342 bytes leftover after parsing attributes in process `syz.1.108'. [ 78.837224][ T55] Bluetooth: hci2: command tx timeout [ 80.346595][ T6652] netlink: 222 bytes leftover after parsing attributes in process `syz.3.125'. [ 81.264756][ T6687] netlink: 28 bytes leftover after parsing attributes in process `syz.2.138'. [ 82.837143][ T6747] svc: failed to register nfsdv3 RPC service (errno 111). [ 82.855376][ T6747] svc: failed to register nfsaclv3 RPC service (errno 111). [ 83.484099][ T6791] netlink: 4 bytes leftover after parsing attributes in process `syz.3.155'. [ 84.358229][ T6830] netlink: 4392 bytes leftover after parsing attributes in process `syz.1.164'. [ 86.217213][ T6884] netlink: 28 bytes leftover after parsing attributes in process `syz.1.176'. [ 86.515521][ T6884] team0 (unregistering): Port device team_slave_0 removed [ 86.559172][ T6884] team0 (unregistering): Port device team_slave_1 removed [ 87.085932][ T9] cfg80211: failed to load regulatory.db [ 87.284405][ T29] audit: type=1326 audit(1732563362.459:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6906 comm="syz.0.183" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fef9c97e819 code=0x0 [ 87.539299][ T6917] netlink: 28 bytes leftover after parsing attributes in process `syz.1.185'. [ 88.757635][ T6950] netlink: 342 bytes leftover after parsing attributes in process `syz.2.192'. [ 91.438389][ T7047] bridge0: port 3(batadv0) entered blocking state [ 91.453818][ T7047] bridge0: port 3(batadv0) entered disabled state [ 91.474593][ T7047] batadv0: entered allmulticast mode [ 91.482798][ T7047] batadv0: entered promiscuous mode [ 91.490707][ T7047] bridge0: port 3(batadv0) entered blocking state [ 91.497753][ T7047] bridge0: port 3(batadv0) entered forwarding state [ 91.676367][ T7067] netlink: 178 bytes leftover after parsing attributes in process `syz.2.215'. [ 91.838388][ T1133] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 91.848455][ T1133] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 92.312007][ T7097] bridge0: port 3(bond0) entered blocking state [ 92.340867][ T7097] bridge0: port 3(bond0) entered disabled state [ 92.376204][ T7097] bond0: entered allmulticast mode [ 92.391962][ T7097] bond_slave_0: entered allmulticast mode [ 92.402061][ T7097] bond_slave_1: entered allmulticast mode [ 92.412550][ T7097] bond0: entered promiscuous mode [ 92.422269][ T7097] bond_slave_0: entered promiscuous mode [ 92.428974][ T7097] bond_slave_1: entered promiscuous mode [ 92.439457][ T7097] bridge0: port 3(bond0) entered blocking state [ 92.445904][ T7097] bridge0: port 3(bond0) entered forwarding state [ 93.630667][ T7154] netlink: 334 bytes leftover after parsing attributes in process `syz.1.238'. [ 93.674245][ T7152] delete_channel: no stack [ 93.837529][ T7163] syz.0.240 uses obsolete (PF_INET,SOCK_PACKET) [ 97.922639][ T7345] netlink: 50 bytes leftover after parsing attributes in process `syz.0.286'. [ 100.823554][ T7496] netlink: 4 bytes leftover after parsing attributes in process `syz.2.323'. [ 101.038869][ T7503] nbd: couldn't find device at index 33904 [ 110.007616][ T7795] netlink: 4 bytes leftover after parsing attributes in process `syz.0.382'. [ 112.003569][ T7871] openvswitch: netlink: nsh attr 1 has unexpected len 14 expected 8 [ 112.029741][ T7871] netlink: 'syz.3.404': attribute type 28 has an invalid length. [ 112.037671][ T7871] netlink: 'syz.3.404': attribute type 29 has an invalid length. [ 112.047527][ T7871] netlink: 'syz.3.404': attribute type 30 has an invalid length. [ 112.058500][ T7871] netlink: 'syz.3.404': attribute type 31 has an invalid length. [ 112.066326][ T7871] netlink: 'syz.3.404': attribute type 32 has an invalid length. [ 112.074239][ T7871] netlink: 'syz.3.404': attribute type 33 has an invalid length. [ 112.082421][ T7871] netlink: 'syz.3.404': attribute type 35 has an invalid length. [ 112.090537][ T7871] netlink: 'syz.3.404': attribute type 37 has an invalid length. [ 112.100864][ T7871] netlink: 'syz.3.404': attribute type 39 has an invalid length. [ 112.129571][ T7871] netlink: 'syz.3.404': attribute type 40 has an invalid length. [ 112.148401][ T7871] netlink: 18 bytes leftover after parsing attributes in process `syz.3.404'. [ 113.830645][ T7942] netlink: 20 bytes leftover after parsing attributes in process `syz.0.421'. [ 114.233034][ T7964] netlink: 4 bytes leftover after parsing attributes in process `syz.1.425'. [ 114.740871][ T7974] netlink: 4 bytes leftover after parsing attributes in process `syz.3.427'. [ 115.097425][ T7982] netlink: 28 bytes leftover after parsing attributes in process `syz.3.428'. [ 115.137450][ T7983] netlink: 28 bytes leftover after parsing attributes in process `syz.3.428'. [ 115.148492][ T7982] netlink: 28 bytes leftover after parsing attributes in process `syz.3.428'. [ 118.069119][ T8060] can: request_module (can-proto-0) failed. [ 123.725322][ T55] Bluetooth: hci3: unexpected event 0x10 length: 11 > 1 [ 123.725399][ T55] Bluetooth: hci3: hardware error 0x00 [ 123.930925][ T8212] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 123.977999][ T8212] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 125.083451][ T8225] Invalid ELF header magic: != ELF [ 125.521118][ T8232] syz.1.489 (8232): attempted to duplicate a private mapping with mremap. This is not supported. [ 125.629992][ T8218] netlink: 8 bytes leftover after parsing attributes in process `syz.3.486'. [ 125.879505][ T55] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 126.685238][ T8272] openvswitch: netlink: nsh attr 3791 is out of range max 3 [ 126.801434][ T8276] netlink: 6661 bytes leftover after parsing attributes in process `syz.2.504'. [ 126.811253][ T8276] tipc: Started in network mode [ 126.816211][ T8276] tipc: Node identity ffffffac, cluster identity 4711 [ 126.824721][ T8276] tipc: Node number set to 4294967212 [ 126.912018][ T8285] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 126.922333][ T8285] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 127.303540][ T8291] Invalid ELF header magic: != ELF [ 127.333205][ T8291] netlink: 8 bytes leftover after parsing attributes in process `syz.0.505'. [ 127.996107][ T8306] netlink: 186 bytes leftover after parsing attributes in process `syz.3.511'. [ 128.032121][ T8322] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 128.045278][ T8322] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 128.505088][ T8333] Invalid ELF header magic: != ELF [ 128.932711][ T8330] netlink: 8 bytes leftover after parsing attributes in process `syz.2.522'. [ 129.922052][ T8365] kernel read not supported for file /#)-\&[} (pid: 8365 comm: syz.3.528) [ 129.931026][ T29] audit: type=1800 audit(8277292071.840:4): pid=8365 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.528" name="#)-\&[}" dev="mqueue" ino=19659 res=0 errno=0 [ 130.043240][ T6476] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.141499][ T6476] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.193536][ T8389] netlink: 4 bytes leftover after parsing attributes in process `syz.1.531'. [ 130.274731][ T6476] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.359075][ T6476] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.395900][ T8389] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 130.423409][ T5163] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 130.428172][ T8389] CIFS mount error: No usable UNC path provided in device string! [ 130.428172][ T8389] [ 130.440982][ T8389] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 130.450109][ T5163] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 130.458678][ T5163] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 130.466403][ T5163] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 130.473897][ T5163] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 130.481203][ T5163] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 130.568364][ T6476] bond0: left allmulticast mode [ 130.573262][ T6476] bond_slave_0: left allmulticast mode [ 130.587208][ T6476] bond_slave_1: left allmulticast mode [ 130.613424][ T6476] bond0: left promiscuous mode [ 130.618400][ T6476] bond_slave_0: left promiscuous mode [ 130.624026][ T6476] bond_slave_1: left promiscuous mode [ 130.629707][ T6476] bridge0: port 3(bond0) entered disabled state [ 130.647034][ T6476] bridge_slave_1: left allmulticast mode [ 130.652893][ T6476] bridge_slave_1: left promiscuous mode [ 130.658697][ T6476] bridge0: port 2(bridge_slave_1) entered disabled state [ 130.667226][ T6476] bridge_slave_0: left allmulticast mode [ 130.679651][ T6476] bridge_slave_0: left promiscuous mode [ 130.687215][ T6476] bridge0: port 1(bridge_slave_0) entered disabled state [ 130.968638][ T6476] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 131.005221][ T6476] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 131.028613][ T6476] bond0 (unregistering): Released all slaves [ 131.088695][ T6476] tipc: Left network mode [ 131.216051][ T8393] chnl_net:caif_netlink_parms(): no params data found [ 131.319125][ T6476] hsr_slave_0: left promiscuous mode [ 131.337478][ T6476] hsr_slave_1: left promiscuous mode [ 131.353361][ T6476] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 131.369241][ T6476] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 131.390902][ T6476] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 131.405614][ T6476] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 131.422469][ T6476] veth1_macvtap: left promiscuous mode [ 131.434106][ T6476] veth1_vlan: left promiscuous mode [ 131.469981][ T6476] veth0_vlan: left promiscuous mode [ 131.734102][ T6476] team0 (unregistering): Port device team_slave_1 removed [ 131.759691][ T6476] team0 (unregistering): Port device team_slave_0 removed [ 131.878408][ T8393] bridge0: port 1(bridge_slave_0) entered blocking state [ 131.907607][ T8393] bridge0: port 1(bridge_slave_0) entered disabled state [ 131.926805][ T8393] bridge_slave_0: entered allmulticast mode [ 131.939928][ T8393] bridge_slave_0: entered promiscuous mode [ 131.952358][ T8393] bridge0: port 2(bridge_slave_1) entered blocking state [ 131.964607][ T8393] bridge0: port 2(bridge_slave_1) entered disabled state [ 131.984050][ T8393] bridge_slave_1: entered allmulticast mode [ 131.996555][ T8393] bridge_slave_1: entered promiscuous mode [ 132.073318][ T8393] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 132.097585][ T8393] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 132.114740][ T8478] netlink: 4 bytes leftover after parsing attributes in process `syz.3.542'. [ 132.140332][ T8393] team0: Port device team_slave_0 added [ 132.158342][ T8393] team0: Port device team_slave_1 added [ 132.237400][ T8478] CIFS mount error: No usable UNC path provided in device string! [ 132.237400][ T8478] [ 132.247536][ T8478] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 132.259719][ T8393] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 132.271736][ T8393] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 132.352449][ T8393] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 132.366926][ T8393] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 132.375649][ T8393] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 132.408834][ T8393] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 132.539840][ T8393] hsr_slave_0: entered promiscuous mode [ 132.560528][ T8393] hsr_slave_1: entered promiscuous mode [ 132.598262][ T55] Bluetooth: hci0: command tx timeout [ 133.159356][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.165693][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.331157][ T8393] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 133.370957][ T8393] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 133.401203][ T8393] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 133.436982][ T8393] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 133.571297][ T8393] 8021q: adding VLAN 0 to HW filter on device bond0 [ 133.608378][ T8393] 8021q: adding VLAN 0 to HW filter on device team0 [ 133.626157][ T6477] bridge0: port 1(bridge_slave_0) entered blocking state [ 133.633338][ T6477] bridge0: port 1(bridge_slave_0) entered forwarding state [ 133.664346][ T6477] bridge0: port 2(bridge_slave_1) entered blocking state [ 133.671512][ T6477] bridge0: port 2(bridge_slave_1) entered forwarding state [ 133.792038][ T8393] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 134.051622][ T8393] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 134.104503][ T8393] veth0_vlan: entered promiscuous mode [ 134.115296][ T8393] veth1_vlan: entered promiscuous mode [ 134.159306][ T8393] veth0_macvtap: entered promiscuous mode [ 134.172633][ T8393] veth1_macvtap: entered promiscuous mode [ 134.204692][ T8393] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 134.237160][ T8393] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.259316][ T8393] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 134.286661][ T8393] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.308232][ T8393] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 134.326033][ T8393] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.348240][ T8393] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 134.388915][ T8393] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 134.408299][ T8393] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.425888][ T8393] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 134.446913][ T8393] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.467596][ T8393] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 134.487475][ T8393] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.500639][ T8393] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 134.540426][ T8393] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.556166][ T8393] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.572527][ T8393] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.585669][ T8393] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.677610][ T55] Bluetooth: hci0: command tx timeout [ 134.722128][ T6477] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 134.737135][ T6477] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 134.782499][ T8182] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 134.800442][ T8182] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 136.002077][ T8646] netlink: 4 bytes leftover after parsing attributes in process `syz.2.562'. [ 136.040001][ T8645] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 136.757516][ T55] Bluetooth: hci0: command tx timeout [ 137.172812][ T8676] netlink: 4 bytes leftover after parsing attributes in process `syz.3.568'. [ 137.253450][ T8683] netlink: 4 bytes leftover after parsing attributes in process `syz.3.568'. [ 137.709500][ T8696] mmap: syz.2.572 (8696): VmData 37523456 exceed data ulimit 3. Update limits or use boot option ignore_rlimit_data. [ 138.837353][ T55] Bluetooth: hci0: command tx timeout [ 139.440290][ T8752] netlink: ct family unspecified [ 139.582698][ T8755] netlink: 28 bytes leftover after parsing attributes in process `syz.2.587'. [ 139.644948][ T8759] netlink: 28 bytes leftover after parsing attributes in process `syz.2.587'. [ 140.347597][ T8790] netlink: 4 bytes leftover after parsing attributes in process `syz.3.595'. [ 140.379607][ T8789] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 141.040567][ T8811] netlink: 'syz.3.601': attribute type 11 has an invalid length. [ 141.490774][ T8846] netlink: 4 bytes leftover after parsing attributes in process `syz.0.611'. [ 141.763544][ T8844] netlink: 4 bytes leftover after parsing attributes in process `syz.1.610'. [ 141.832214][ T8842] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 143.022613][ T8987] netlink: 8 bytes leftover after parsing attributes in process `syz.1.621'. [ 143.268413][ T8987] Invalid ELF header magic: != ELF [ 143.350150][ T9002] netlink: 24 bytes leftover after parsing attributes in process `syz.0.628'. [ 143.623371][ T9013] validate_nla: 2 callbacks suppressed [ 143.623391][ T9013] netlink: 'syz.0.630': attribute type 4 has an invalid length. [ 143.981804][ T9022] netlink: 4 bytes leftover after parsing attributes in process `syz.0.631'. [ 144.043463][ T9022] veth0_macvtap: entered allmulticast mode [ 144.228936][ T9028] netlink: 4 bytes leftover after parsing attributes in process `syz.0.634'. [ 144.319546][ T9028] netlink: 4 bytes leftover after parsing attributes in process `syz.0.634'. [ 144.394153][ T9027] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 146.042646][ T9088] nbd: must specify at least one socket [ 146.503031][ T9113] sctp: [Deprecated]: syz.2.649 (pid 9113) Use of int in maxseg socket option. [ 146.503031][ T9113] Use struct sctp_assoc_value instead [ 147.598985][ T9154] ptrace attach of "./syz-executor exec"[8393] was attempted by "i0\x22OsxNՂB0S5y6&*. 6;tLթA㲔!9~  \x5cd^#yK踣,Xj!NQb_8\x1b ^D!IiA؃_ؚGg?\x5c]0q/rn\x09\x09MS\x22Q\x07m\x0cVh\x07u˜dN;s{H\x1b&ng96U\x07cp.uFhk\x22\x5cy\x22;Oi\x0aVՌe6^A;NNVZh;޼+x_rcrQ?juXgԗX*f݌*Eܨ3@÷@>LjK+ 8'\x0anNҴ__\x22` dv'9v涊)6M͏@s\x0bo=(܇4Pdّfy᫤]oƆonay 1 [ 180.864479][ T5853] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 180.872794][ T5853] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 180.881314][ T5853] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 180.888900][ T5853] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 180.896129][ T5853] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 181.171866][T10121] chnl_net:caif_netlink_parms(): no params data found [ 181.326913][ T6478] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.337861][ T5853] Bluetooth: hci1: command 0x0406 tx timeout [ 181.402618][T10121] bridge0: port 1(bridge_slave_0) entered blocking state [ 181.418554][T10121] bridge0: port 1(bridge_slave_0) entered disabled state [ 181.448732][T10121] bridge_slave_0: entered allmulticast mode [ 181.461157][T10121] bridge_slave_0: entered promiscuous mode [ 181.502351][ T6478] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.525713][T10121] bridge0: port 2(bridge_slave_1) entered blocking state [ 181.577217][T10121] bridge0: port 2(bridge_slave_1) entered disabled state [ 181.584495][T10121] bridge_slave_1: entered allmulticast mode [ 181.608197][T10121] bridge_slave_1: entered promiscuous mode [ 181.713075][ T6478] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.811731][T10121] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 181.823021][T10121] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 181.975949][ T6478] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.237458][T10121] team0: Port device team_slave_0 added [ 182.245013][T10121] team0: Port device team_slave_1 added [ 182.403752][T10121] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 182.411102][T10121] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 182.415846][T10166] openvswitch: netlink: Missing valid actions attribute. [ 182.437420][T10121] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 182.457644][T10121] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 182.464659][T10121] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 182.491046][T10121] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 182.549263][T10121] hsr_slave_0: entered promiscuous mode [ 182.560205][T10121] hsr_slave_1: entered promiscuous mode [ 182.572991][T10121] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 182.595206][T10121] Cannot create hsr debugfs directory [ 182.626303][ T6478] bridge_slave_1: left allmulticast mode [ 182.632655][ T6478] bridge_slave_1: left promiscuous mode [ 182.638419][ T6478] bridge0: port 2(bridge_slave_1) entered disabled state [ 182.639990][T10173] svc: failed to register nfsdv3 RPC service (errno 111). [ 182.654338][ T6478] bridge_slave_0: left allmulticast mode [ 182.655910][T10173] svc: failed to register nfsaclv3 RPC service (errno 111). [ 182.661807][ T6478] bridge_slave_0: left promiscuous mode [ 182.673344][ T6478] bridge0: port 1(bridge_slave_0) entered disabled state [ 182.771624][ T6478] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 182.782122][ T6478] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 182.792643][ T6478] bond0 (unregistering): Released all slaves [ 182.917189][ T55] Bluetooth: hci4: command tx timeout [ 182.942917][T10121] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 182.987635][T10121] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 183.002572][T10121] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 183.022073][T10121] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 183.148566][ T6478] hsr_slave_0: left promiscuous mode [ 183.180171][ T6478] hsr_slave_1: left promiscuous mode [ 183.187569][ T6478] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 183.195012][ T6478] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 183.213927][ T6478] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 183.233445][ T6478] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 183.252520][ T6478] veth1_macvtap: left promiscuous mode [ 183.267663][ T6478] veth0_macvtap: left promiscuous mode [ 183.286953][ T6478] veth1_vlan: left promiscuous mode [ 183.304230][ T6478] veth0_vlan: left promiscuous mode [ 183.775200][T10121] 8021q: adding VLAN 0 to HW filter on device bond0 [ 183.841216][T10121] 8021q: adding VLAN 0 to HW filter on device team0 [ 183.911096][ T6470] bridge0: port 1(bridge_slave_0) entered blocking state [ 183.918246][ T6470] bridge0: port 1(bridge_slave_0) entered forwarding state [ 183.958407][ T6470] bridge0: port 2(bridge_slave_1) entered blocking state [ 183.965583][ T6470] bridge0: port 2(bridge_slave_1) entered forwarding state [ 184.113021][T10228] netlink: 8 bytes leftover after parsing attributes in process `syz.2.920'. [ 184.213978][T10121] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 184.687510][T10121] veth0_vlan: entered promiscuous mode [ 184.720791][T10121] veth1_vlan: entered promiscuous mode [ 184.848881][T10121] veth0_macvtap: entered promiscuous mode [ 184.868907][T10121] veth1_macvtap: entered promiscuous mode [ 184.893476][T10121] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 184.908393][T10121] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 184.918370][T10121] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 184.928920][T10121] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 184.938837][T10121] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 184.949305][T10121] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 184.960027][T10121] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 184.969114][T10121] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 184.979796][T10121] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 184.989831][T10121] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 185.000562][T10121] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.007539][ T55] Bluetooth: hci4: command tx timeout [ 185.010536][T10121] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 185.010555][T10121] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.011413][T10121] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 185.121891][T10121] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.130966][T10121] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.140158][T10121] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.149149][T10121] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.396252][ T6478] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 185.410665][ T6478] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 185.457808][ T6476] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 185.465661][ T6476] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 187.077652][ T55] Bluetooth: hci4: command tx timeout [ 189.179787][ T55] Bluetooth: hci4: command tx timeout [ 189.460832][T10441] netlink: 8 bytes leftover after parsing attributes in process `syz.4.944'. [ 189.772836][T10470] netlink: 9 bytes leftover after parsing attributes in process `syz.3.947'. [ 192.428191][T10520] netlink: 50 bytes leftover after parsing attributes in process `syz.4.958'. [ 192.470734][T10514] netlink: 8 bytes leftover after parsing attributes in process `syz.3.957'. [ 194.607402][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.613763][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 196.566902][T10611] netlink: 4 bytes leftover after parsing attributes in process `syz.3.979'. [ 196.847997][T10632] netlink: 4 bytes leftover after parsing attributes in process `syz.4.982'. [ 196.928402][T10632] ip6gre0: entered allmulticast mode [ 197.163217][T10647] netlink: 28 bytes leftover after parsing attributes in process `syz.3.987'. [ 198.673231][T10718] netlink: 4 bytes leftover after parsing attributes in process `syz.3.998'. [ 199.672696][T10755] netlink: 4449 bytes leftover after parsing attributes in process `syz.4.1002'. [ 202.287801][ C1] bridge0: received packet on geneve0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 202.707932][T10898] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 202.734648][T10898] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 203.091412][T10913] Invalid ELF header magic: != ELF [ 204.307411][T10923] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1021'. [ 205.469134][ T55] Bluetooth: hci0: ACL packet for unknown connection handle 0 [ 207.645426][T11013] netlink: 'syz.0.1047': attribute type 9 has an invalid length. [ 209.780763][ C1] bridge0: received packet on geneve0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 210.847724][ C1] bridge0: received packet on geneve0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 211.887454][ C1] bridge0: received packet on geneve0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 212.491209][T11098] nfs: Unknown parameter ' ' [ 213.281029][T11119] bridge0: port 5(batadv0) entered blocking state [ 213.315731][T11119] bridge0: port 5(batadv0) entered disabled state [ 213.324408][T11119] batadv0: entered allmulticast mode [ 213.351403][T11119] batadv0: entered promiscuous mode [ 213.357029][T11119] bridge0: port 5(batadv0) entered blocking state [ 213.363559][T11119] bridge0: port 5(batadv0) entered forwarding state [ 213.437488][T11115] kernel read not supported for file /#)-\&[} (pid: 11115 comm: syz.0.1072) [ 213.476590][ T29] audit: type=1800 audit(8277292039.400:9): pid=11115 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1072" name="#)-\&[}" dev="mqueue" ino=12518 res=0 errno=0 [ 213.677267][ T6478] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 213.686884][ T6478] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 213.718365][T11127] netlink: 'syz.0.1075': attribute type 11 has an invalid length. [ 213.937328][T11087] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1066'. [ 216.516067][T11172] netlink: 334 bytes leftover after parsing attributes in process `syz.4.1088'. [ 216.888714][T11187] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1091'. [ 217.590845][T11209] nbd: must specify at least one socket [ 218.478301][T11234] nbd: socks must be embedded in a SOCK_ITEM attr [ 218.966730][T11260] netlink: 338 bytes leftover after parsing attributes in process `syz.2.1109'. [ 219.828094][T11288] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1115'. [ 221.119235][T11334] lo: entered allmulticast mode [ 221.191416][T11338] lo: left allmulticast mode [ 223.028138][T11386] Invalid ELF header magic: != ELF [ 223.974522][T11408] netlink: 230 bytes leftover after parsing attributes in process `syz.0.1140'. [ 224.098097][T11410] ptrace attach of "./syz-executor exec"[5848] was attempted by ""[11410] [ 225.606577][T11423] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1145'. [ 226.739553][T11448] netlink: 334 bytes leftover after parsing attributes in process `syz.0.1148'. [ 226.976288][T11452] netlink: 'syz.2.1150': attribute type 9 has an invalid length. [ 227.354757][T11465] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1154'. [ 227.364052][T11465] veth0_macvtap: left allmulticast mode [ 227.750888][T11488] netlink: 334 bytes leftover after parsing attributes in process `syz.4.1162'. [ 227.818308][T11487] netlink: 334 bytes leftover after parsing attributes in process `syz.4.1162'. [ 227.930997][T11496] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 228.948864][T11510] bridge0: port 3(bond0) entered blocking state [ 228.955199][T11510] bridge0: port 3(bond0) entered disabled state [ 228.999419][T11510] bond0: entered allmulticast mode [ 229.004591][T11510] bond_slave_0: entered allmulticast mode [ 229.010443][T11510] bond_slave_1: entered allmulticast mode [ 229.017993][T11510] bond0: entered promiscuous mode [ 229.023053][T11510] bond_slave_0: entered promiscuous mode [ 229.029124][T11510] bond_slave_1: entered promiscuous mode [ 229.035214][T11510] bridge0: port 3(bond0) entered blocking state [ 229.041577][T11510] bridge0: port 3(bond0) entered forwarding state [ 229.694045][T11528] netlink: 230 bytes leftover after parsing attributes in process `syz.4.1173'. [ 232.272569][T11557] ptrace attach of "./syz-executor exec"[10121] was attempted by ""[11557] [ 234.108191][T11598] Invalid ELF header magic: != ELF [ 234.120428][T11614] bridge0: port 6(bond0) entered blocking state [ 234.137267][T11614] bridge0: port 6(bond0) entered disabled state [ 234.155675][T11614] bond0: entered allmulticast mode [ 234.165629][T11614] bond_slave_0: entered allmulticast mode [ 234.187649][T11614] bond_slave_1: entered allmulticast mode [ 234.194618][T11614] bond0: entered promiscuous mode [ 234.236784][T11614] bond_slave_0: entered promiscuous mode [ 234.255444][T11614] bond_slave_1: entered promiscuous mode [ 234.277896][T11614] bridge0: port 6(bond0) entered blocking state [ 234.284289][T11614] bridge0: port 6(bond0) entered forwarding state [ 237.252941][T11676] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1206'. [ 239.740876][T11735] tmpfs: Unknown parameter 'drZNiGW9' [ 242.195007][T11808] h: entered promiscuous mode [ 243.765946][T11662] syz.4.1212 (11662) used greatest stack depth: 19184 bytes left [ 244.076902][T11851] netlink: 2572 bytes leftover after parsing attributes in process `syz.4.1252'. [ 247.593307][T11939] netlink: 'syz.2.1270': attribute type 46 has an invalid length. [ 249.580044][T11979] nfs: Unknown parameter ' ' [ 249.642136][T11979] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1280'. [ 250.656456][T12003] HSR: entered promiscuous mode [ 250.822536][T12003] delete_channel: no stack [ 251.034177][ T5836] syz-executor invoked oom-killer: gfp_mask=0x408d40(GFP_NOFS|__GFP_NOFAIL|__GFP_ZERO|__GFP_ACCOUNT), order=0, oom_score_adj=0 [ 251.071161][ T5836] CPU: 1 UID: 0 PID: 5836 Comm: syz-executor Not tainted 6.12.0-syzkaller-09073-g9f16d5e6f220 #0 [ 251.081721][ T5836] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 251.091820][ T5836] Call Trace: [ 251.095116][ T5836] [ 251.098061][ T5836] dump_stack_lvl+0x16c/0x1f0 [ 251.102788][ T5836] dump_header+0x101/0x900 [ 251.107236][ T5836] oom_kill_process+0x270/0xa60 [ 251.112123][ T5836] out_of_memory+0x351/0x1700 [ 251.116823][ T5836] ? __pfx_out_of_memory+0x10/0x10 [ 251.121959][ T5836] ? rcu_read_unlock+0x17/0x60 [ 251.126756][ T5836] ? __pfx_lock_release+0x10/0x10 [ 251.131808][ T5836] mem_cgroup_out_of_memory+0x207/0x270 [ 251.137384][ T5836] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 251.143474][ T5836] ? do_raw_spin_unlock+0x172/0x230 [ 251.148719][ T5836] try_charge_memcg+0x53f/0xaf0 [ 251.153587][ T5836] ? __pfx_try_charge_memcg+0x10/0x10 [ 251.158966][ T5836] ? get_mem_cgroup_from_objcg+0x183/0x330 [ 251.164784][ T5836] ? lock_acquire+0x2f/0xb0 [ 251.169335][ T5836] ? get_mem_cgroup_from_objcg+0xd3/0x330 [ 251.175060][ T5836] obj_cgroup_charge+0x179/0x4d0 [ 251.180014][ T5836] __memcg_slab_post_alloc_hook+0x1b6/0x9b0 [ 251.185922][ T5836] ? kasan_save_track+0x14/0x30 [ 251.190784][ T5836] kmem_cache_alloc_noprof+0x2cd/0x2f0 [ 251.196519][ T5836] ? alloc_buffer_head+0x21/0x160 [ 251.201556][ T5836] alloc_buffer_head+0x21/0x160 [ 251.206429][ T5836] folio_alloc_buffers+0x2bd/0x830 [ 251.211970][ T5836] create_empty_buffers+0x36/0x480 [ 251.217093][ T5836] folio_create_buffers+0x109/0x150 [ 251.222316][ T5836] __block_write_begin_int+0x321/0x16e0 [ 251.228545][ T5836] ? __pfx_ext4_da_get_block_prep+0x10/0x10 [ 251.234909][ T5836] ? ext4_convert_inline_data+0x1be/0x610 [ 251.240869][ T5836] ? __pfx___block_write_begin_int+0x10/0x10 [ 251.247125][ T5836] ? __pfx___might_resched+0x10/0x10 [ 251.252634][ T5836] ? down_read+0xc9/0x330 [ 251.257188][ T5836] ? __pfx_ext4_da_get_block_prep+0x10/0x10 [ 251.263117][ T5836] block_page_mkwrite+0x3d9/0x4c0 [ 251.268244][ T5836] ext4_page_mkwrite+0x8e2/0x1760 [ 251.273435][ T5836] ? rcu_is_watching+0x12/0xc0 [ 251.278213][ T5836] ? __pfx_ext4_page_mkwrite+0x10/0x10 [ 251.283863][ T5836] ? __pfx_lock_release+0x10/0x10 [ 251.289068][ T5836] ? vm_normal_page+0x13c/0x2b0 [ 251.294018][ T5836] ? __pfx_vm_normal_page+0x10/0x10 [ 251.299399][ T5836] do_page_mkwrite+0x177/0x380 [ 251.304260][ T5836] do_wp_page+0xc4b/0x4670 [ 251.308773][ T5836] ? trace_lock_acquire+0x146/0x1e0 [ 251.313977][ T5836] ? __pte_offset_map+0x42/0x540 [ 251.318938][ T5836] ? __pfx_do_wp_page+0x10/0x10 [ 251.323791][ T5836] ? rcu_is_watching+0x12/0xc0 [ 251.328563][ T5836] ? do_raw_spin_lock+0x12d/0x2c0 [ 251.333599][ T5836] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 251.338978][ T5836] ? lock_acquire+0x2f/0xb0 [ 251.343479][ T5836] ? __handle_mm_fault+0xdfa/0x2a40 [ 251.348688][ T5836] __handle_mm_fault+0x1ade/0x2a40 [ 251.353809][ T5836] ? lock_vma_under_rcu+0x6b9/0x980 [ 251.359013][ T5836] ? __pfx___handle_mm_fault+0x10/0x10 [ 251.364478][ T5836] ? __pfx_down_read_trylock+0x10/0x10 [ 251.369956][ T5836] handle_mm_fault+0x3fa/0xaa0 [ 251.374738][ T5836] do_user_addr_fault+0x60d/0x13f0 [ 251.379869][ T5836] exc_page_fault+0x5c/0xc0 [ 251.384387][ T5836] asm_exc_page_fault+0x26/0x30 [ 251.389249][ T5836] RIP: 0033:0x7f8efe856479 [ 251.393668][ T5836] Code: 43 38 83 43 28 04 48 89 df be 08 00 00 00 48 8d 50 fc 48 89 53 38 89 68 fc 8b 6b 28 e8 20 1d ff ff 48 8b 43 40 be 06 00 00 00 <89> 28 48 83 c0 08 66 89 70 fc 83 43 48 01 66 83 7b 4c 05 48 89 43 [ 251.413467][ T5836] RSP: 002b:00007ffeee62c440 EFLAGS: 00010202 [ 251.419555][ T5836] RAX: 00007f8ef8000210 RBX: 00007ffeee62c550 RCX: 0000000000000000 [ 251.427536][ T5836] RDX: 00007f8ef8000210 RSI: 0000000000000006 RDI: 00007ffeee62c550 [ 251.435526][ T5836] RBP: 0000000000025ebc R08: 0000000000000000 R09: 0000000000000000 [ 251.443506][ T5836] R10: 00007ffeee62c530 R11: 0000000000000000 R12: 0000000000000000 [ 251.451487][ T5836] R13: 0000000000025eb8 R14: fffffffffffda148 R15: 0000000000025eb8 [ 251.459477][ T5836] [ 251.463830][ T5836] memory: usage 307192kB, limit 307200kB, failcnt 22689 [ 251.471915][ T5836] memory+swap: usage 428088kB, limit 9007199254740988kB, failcnt 0 [ 251.480605][ T5836] kmem: usage 3948kB, limit 9007199254740988kB, failcnt 0 [ 251.488081][ T5836] Memory cgroup stats for /syz3: [ 251.488254][ T5836] cache 310476800 [ 251.496833][ T5836] rss 45056 [ 251.500290][ T5836] rss_huge 0 [ 251.506731][ T5836] shmem 310370304 [ 251.510725][ T5836] mapped_file 8192 [ 251.514462][ T5836] dirty 0 [ 251.517756][ T5836] writeback 0 [ 251.521046][ T5836] workingset_refault_anon 7190 [ 251.525809][ T5836] workingset_refault_file 4073 [ 251.531010][ T5836] swap 123797504 [ 251.534570][ T5836] swapcached 0 [ 251.538255][ T5836] pgpgin 842770 [ 251.541726][ T5836] pgpgout 774113 [ 251.545283][ T5836] pgfault 315146 [ 251.549244][ T5836] pgmajfault 874 [ 251.552803][ T5836] inactive_anon 67993600 [ 251.557465][ T5836] active_anon 241111040 [ 251.561640][ T5836] inactive_file 0 [ 251.565276][ T5836] active_file 94208 [ 251.569662][ T5836] unevictable 0 [ 251.576520][ T5836] hierarchical_memory_limit 314572800 [ 251.582220][ T5836] hierarchical_memsw_limit 9223372036854771712 [ 251.588644][ T5836] total_cache 310476800 [ 251.592811][ T5836] total_rss 45056 [ 251.596451][ T5836] total_rss_huge 0 [ 251.600427][ T5836] total_shmem 310370304 [ 251.606196][ T5836] total_mapped_file 8192 [ 251.610523][ T5836] total_dirty 0 [ 251.613990][ T5836] total_writeback 0 [ 251.617919][ T5836] total_workingset_refault_anon 7190 [ 251.623215][ T5836] total_workingset_refault_file 4073 [ 251.628549][ T5836] total_swap 123797504 [ 251.632641][ T5836] total_swapcached 0 [ 251.636562][ T5836] total_pgpgin 842770 [ 251.640686][ T5836] total_pgpgout 774113 [ 251.644854][ T5836] total_pgfault 315146 [ 251.648949][ T5836] total_pgmajfault 874 [ 251.653108][ T5836] total_inactive_anon 67993600 [ 251.657984][ T5836] total_active_anon 241111040 [ 251.662675][ T5836] total_inactive_file 0 [ 251.666836][ T5836] total_active_file 94208 [ 251.671420][ T5836] total_unevictable 0 [ 251.676008][ T5836] anon_cost 0 [ 251.679349][ T5836] file_cost 0 [ 251.682640][ T5836] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.1010,pid=10848,uid=0 [ 251.697572][ T5836] Memory cgroup out of memory: Killed process 10848 (syz.3.1010) total-vm:101460kB, anon-rss:664kB, file-rss:24224kB, shmem-rss:0kB, UID:0 pgtables:144kB oom_score_adj:1000 [ 252.997858][ T5853] Bluetooth: hci0: command 0x0406 tx timeout [ 253.339551][T12034] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1295'. [ 253.613585][T12037] sctp: [Deprecated]: syz.2.1295 (pid 12037) Use of struct sctp_assoc_value in delayed_ack socket option. [ 253.613585][T12037] Use struct sctp_sack_info instead [ 253.729108][ T31] oom_reaper: reaped process 10848 (syz.3.1010), now anon-rss:24kB, file-rss:21708kB, shmem-rss:0kB [ 253.818555][T10824] syz.3.1010 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 254.091139][T10824] CPU: 1 UID: 0 PID: 10824 Comm: syz.3.1010 Not tainted 6.12.0-syzkaller-09073-g9f16d5e6f220 #0 [ 254.101613][T10824] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 254.111692][T10824] Call Trace: [ 254.114986][T10824] [ 254.117931][T10824] dump_stack_lvl+0x16c/0x1f0 [ 254.122641][T10824] dump_header+0x101/0x900 [ 254.127113][T10824] oom_kill_process+0x270/0xa60 [ 254.131990][T10824] ? mem_cgroup_out_of_memory+0x8d/0x270 [ 254.137689][T10824] out_of_memory+0x351/0x1700 [ 254.142489][T10824] ? __pfx_out_of_memory+0x10/0x10 [ 254.147639][T10824] ? rcu_read_unlock+0x17/0x60 [ 254.152436][T10824] ? __pfx_lock_release+0x10/0x10 [ 254.157486][T10824] mem_cgroup_out_of_memory+0x207/0x270 [ 254.163085][T10824] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 254.169198][T10824] ? do_raw_spin_unlock+0x172/0x230 [ 254.174430][T10824] try_charge_memcg+0x53f/0xaf0 [ 254.179318][T10824] ? __pfx_try_charge_memcg+0x10/0x10 [ 254.184720][T10824] ? get_mem_cgroup_from_mm+0x87/0x5f0 [ 254.190205][T10824] ? get_mem_cgroup_from_mm+0x87/0x5f0 [ 254.195672][T10824] ? get_mem_cgroup_from_mm+0x131/0x5f0 [ 254.201221][T10824] __mem_cgroup_charge+0x9b/0x280 [ 254.206257][T10824] shmem_alloc_and_add_folio+0x507/0xc00 [ 254.211902][T10824] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 254.217798][T10824] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 254.223958][T10824] ? shmem_huge_global_enabled+0x176/0x250 [ 254.229773][T10824] ? shmem_allowable_huge_orders+0xcd/0x3e0 [ 254.235675][T10824] shmem_get_folio_gfp+0x689/0x1530 [ 254.240879][T10824] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 254.246516][T10824] ? inode_set_ctime_current+0xa4/0x900 [ 254.252083][T10824] ? timestamp_truncate+0x21f/0x2e0 [ 254.257288][T10824] shmem_write_begin+0x161/0x300 [ 254.262233][T10824] ? __pfx_shmem_write_begin+0x10/0x10 [ 254.267693][T10824] ? inode_set_ctime_current+0x2a7/0x900 [ 254.273334][T10824] ? balance_dirty_pages_ratelimited_flags+0x92/0x1270 [ 254.280628][T10824] ? __pfx_inode_set_ctime_current+0x10/0x10 [ 254.286630][T10824] generic_perform_write+0x2ba/0x920 [ 254.291919][T10824] ? __pfx_generic_perform_write+0x10/0x10 [ 254.297731][T10824] ? __mark_inode_dirty+0x2af/0xe60 [ 254.302938][T10824] ? generic_update_time+0xcf/0xf0 [ 254.308081][T10824] ? mnt_put_write_access_file+0x45/0xf0 [ 254.313717][T10824] shmem_file_write_iter+0x10e/0x140 [ 254.319009][T10824] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 254.324827][T10824] __kernel_write_iter+0x318/0xa80 [ 254.329946][T10824] ? __pfx___kernel_write_iter+0x10/0x10 [ 254.335591][T10824] ? get_dump_page+0x15b/0x230 [ 254.340371][T10824] ? __pfx___might_resched+0x10/0x10 [ 254.345750][T10824] ? copy_mc_enhanced_fast_string+0xa/0x13 [ 254.351568][T10824] dump_user_range+0x389/0x8c0 [ 254.356346][T10824] ? __pfx_dump_user_range+0x10/0x10 [ 254.361637][T10824] ? elf_coredump_extra_notes_write+0xbe/0x430 [ 254.367795][T10824] ? __pfx_writenote+0x10/0x10 [ 254.372569][T10824] elf_core_dump+0x2766/0x3840 [ 254.377429][T10824] ? __pfx_elf_core_dump+0x10/0x10 [ 254.382545][T10824] ? kasan_save_stack+0x42/0x60 [ 254.387427][T10824] ? kasan_save_stack+0x33/0x60 [ 254.392298][T10824] ? __kasan_kmalloc+0xaa/0xb0 [ 254.397068][T10824] ? __kmalloc_node_noprof+0x211/0x440 [ 254.402536][T10824] ? __kvmalloc_node_noprof+0xad/0x1a0 [ 254.408000][T10824] ? irqentry_exit_to_user_mode+0x13f/0x280 [ 254.413902][T10824] ? asm_exc_page_fault+0x26/0x30 [ 254.418935][T10824] ? mas_ascend+0x519/0x930 [ 254.423455][T10824] ? rcu_is_watching+0x12/0xc0 [ 254.428226][T10824] ? trace_lock_acquire+0x146/0x1e0 [ 254.433445][T10824] ? __pfx_sort+0x10/0x10 [ 254.437783][T10824] ? get_signal+0x23f3/0x2610 [ 254.442464][T10824] ? do_coredump+0x2c42/0x4160 [ 254.447237][T10824] do_coredump+0x2c42/0x4160 [ 254.451840][T10824] ? __pfx_do_coredump+0x10/0x10 [ 254.456783][T10824] ? irqentry_exit_to_user_mode+0x13f/0x280 [ 254.462699][T10824] ? rcu_is_watching+0x12/0xc0 [ 254.467579][T10824] get_signal+0x23f3/0x2610 [ 254.472616][T10824] ? force_sig_fault+0xad/0xf0 [ 254.477513][T10824] ? __pfx_get_signal+0x10/0x10 [ 254.482373][T10824] arch_do_signal_or_restart+0x90/0x7e0 [ 254.488023][T10824] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 254.494285][T10824] ? __bad_area_nosemaphore+0x334/0x6a0 [ 254.499836][T10824] ? do_user_addr_fault+0x920/0x13f0 [ 254.505131][T10824] ? rcu_is_watching+0x12/0xc0 [ 254.509915][T10824] irqentry_exit_to_user_mode+0x13f/0x280 [ 254.515638][T10824] asm_exc_page_fault+0x26/0x30 [ 254.520493][T10824] RIP: 0033:0x7f228217e821 [ 254.524906][T10824] Code: 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 254.544518][T10824] RSP: 002b:0000000000000009 EFLAGS: 00010217 [ 254.550594][T10824] RAX: 0000000000000000 RBX: 00007f2282336080 RCX: 00007f228217e819 [ 254.558573][T10824] RDX: 00000000200001c0 RSI: 0000000000000009 RDI: 0000000000000007 [ 254.566542][T10824] RBP: 00007f22821f175e R08: fffffffffffffffe R09: 0000000000000000 [ 254.574509][T10824] R10: 0000000020000200 R11: 0000000000000246 R12: 0000000000000000 [ 254.582482][T10824] R13: 0000000000000001 R14: 00007f2282336080 R15: 00007ffe01c67848 [ 254.590455][T10824] [ 254.624227][T10824] memory: usage 303200kB, limit 307200kB, failcnt 25492 [ 254.631989][T10824] memory+swap: usage 423544kB, limit 9007199254740988kB, failcnt 0 [ 254.681005][T10824] kmem: usage 3760kB, limit 9007199254740988kB, failcnt 0 [ 254.809639][T10824] Memory cgroup stats for /syz3: [ 254.809818][T10824] cache 305172480 [ 254.907998][T10824] rss 45056 [ 254.929091][T10824] rss_huge 0 [ 254.932334][T10824] shmem 305160192 [ 254.983665][T10824] mapped_file 0 [ 254.987565][T10824] dirty 0 [ 254.990515][T10824] writeback 0 [ 254.993811][T10824] workingset_refault_anon 7192 [ 255.052910][T10824] workingset_refault_file 4118 [ 255.083515][T10824] swap 122597376 [ 255.154800][T10824] swapcached 28672 [ 255.167140][T10824] pgpgin 843059 [ 255.170640][T10824] pgpgout 775689 [ 255.174204][T10824] pgfault 315168 [ 255.254361][T10824] pgmajfault 883 [ 255.271371][T10824] inactive_anon 224464896 [ 255.275735][T10824] active_anon 79548416 [ 255.298398][T10824] inactive_file 12288 [ 255.302418][T10824] active_file 0 [ 255.305879][T10824] unevictable 0 [ 255.347158][T10824] hierarchical_memory_limit 314572800 [ 255.352574][T10824] hierarchical_memsw_limit 9223372036854771712 [ 255.611541][T10824] total_cache 305172480 [ 255.615742][T10824] total_rss 45056 [ 255.640912][T10824] total_rss_huge 0 [ 255.644678][T10824] total_shmem 305160192 [ 255.710838][T10824] total_mapped_file 0 [ 255.764310][T10824] total_dirty 0 [ 255.770181][T10824] total_writeback 0 [ 255.774034][T10824] total_workingset_refault_anon 7192 [ 255.817504][T10824] total_workingset_refault_file 4118 [ 255.822840][T10824] total_swap 122597376 [ 255.826957][T10824] total_swapcached 28672 [ 255.968500][T10824] total_pgpgin 843059 [ 255.979006][T10824] total_pgpgout 775689 [ 255.990746][T10824] total_pgfault 315168 [ 255.994874][T10824] total_pgmajfault 883 [ 256.043776][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.050181][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.107610][T10824] total_inactive_anon 224464896 [ 256.135689][T10824] total_active_anon 79548416 [ 256.154234][T10824] total_inactive_file 12288 [ 256.207170][T10824] total_active_file 0 [ 256.234570][T10824] total_unevictable 0 [ 256.257122][T10824] anon_cost 0 [ 256.260444][T10824] file_cost 0 [ 256.263742][T10824] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.1010,pid=10817,uid=0 [ 256.378635][T10824] Memory cgroup out of memory: Killed process 10817 (syz.3.1010) total-vm:101328kB, anon-rss:744kB, file-rss:23108kB, shmem-rss:0kB, UID:0 pgtables:160kB oom_score_adj:1000 [ 257.106911][T12096] netlink: 'syz.3.1289': attribute type 46 has an invalid length. [ 258.519103][ T31] oom_reaper: reaped process 10817 (syz.3.1010), now anon-rss:100kB, file-rss:20560kB, shmem-rss:0kB [ 258.544594][T10824] syz.3.1010 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 258.637139][T10824] CPU: 0 UID: 0 PID: 10824 Comm: syz.3.1010 Not tainted 6.12.0-syzkaller-09073-g9f16d5e6f220 #0 [ 258.647604][T10824] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 258.657689][T10824] Call Trace: [ 258.660980][T10824] [ 258.663928][T10824] dump_stack_lvl+0x16c/0x1f0 [ 258.668639][T10824] dump_header+0x101/0x900 [ 258.673084][T10824] oom_kill_process+0x270/0xa60 [ 258.677965][T10824] ? mem_cgroup_out_of_memory+0x8d/0x270 [ 258.683715][T10824] out_of_memory+0x351/0x1700 [ 258.688425][T10824] ? __pfx_out_of_memory+0x10/0x10 [ 258.693556][T10824] ? rcu_read_unlock+0x17/0x60 [ 258.698343][T10824] ? __pfx_lock_release+0x10/0x10 [ 258.703394][T10824] mem_cgroup_out_of_memory+0x207/0x270 [ 258.708962][T10824] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 258.715055][T10824] ? do_raw_spin_unlock+0x172/0x230 [ 258.720281][T10824] try_charge_memcg+0x53f/0xaf0 [ 258.725166][T10824] ? __pfx_try_charge_memcg+0x10/0x10 [ 258.730569][T10824] ? trace_lock_acquire+0x146/0x1e0 [ 258.735797][T10824] ? get_mem_cgroup_from_mm+0x87/0x5f0 [ 258.741302][T10824] ? get_mem_cgroup_from_mm+0x87/0x5f0 [ 258.746803][T10824] ? get_mem_cgroup_from_mm+0x131/0x5f0 [ 258.752568][T10824] __mem_cgroup_charge+0x9b/0x280 [ 258.757636][T10824] shmem_alloc_and_add_folio+0x507/0xc00 [ 258.763299][T10824] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 258.769220][T10824] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 258.775402][T10824] ? shmem_huge_global_enabled+0x176/0x250 [ 258.781229][T10824] ? shmem_allowable_huge_orders+0xcd/0x3e0 [ 258.787143][T10824] shmem_get_folio_gfp+0x689/0x1530 [ 258.792367][T10824] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 258.798027][T10824] ? lock_release+0x4e2/0x6f0 [ 258.802736][T10824] ? follow_page_pte+0x374/0x1b20 [ 258.807799][T10824] ? rcu_is_watching+0x12/0xc0 [ 258.812590][T10824] shmem_write_begin+0x161/0x300 [ 258.817552][T10824] ? __pfx_shmem_write_begin+0x10/0x10 [ 258.823037][T10824] ? timestamp_truncate+0x21f/0x2e0 [ 258.828349][T10824] ? balance_dirty_pages_ratelimited_flags+0x92/0x1270 [ 258.835237][T10824] generic_perform_write+0x2ba/0x920 [ 258.840553][T10824] ? __pfx_generic_perform_write+0x10/0x10 [ 258.846387][T10824] ? inode_needs_update_time.part.0+0x191/0x270 [ 258.852670][T10824] shmem_file_write_iter+0x10e/0x140 [ 258.857999][T10824] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 258.863846][T10824] __kernel_write_iter+0x318/0xa80 [ 258.869106][T10824] ? __pfx___kernel_write_iter+0x10/0x10 [ 258.874775][T10824] ? get_dump_page+0x15b/0x230 [ 258.879573][T10824] ? __pfx___might_resched+0x10/0x10 [ 258.884883][T10824] ? copy_mc_enhanced_fast_string+0xa/0x13 [ 258.890733][T10824] dump_user_range+0x389/0x8c0 [ 258.895530][T10824] ? __pfx_dump_user_range+0x10/0x10 [ 258.900844][T10824] ? elf_coredump_extra_notes_write+0xbe/0x430 [ 258.907028][T10824] ? __pfx_writenote+0x10/0x10 [ 258.911820][T10824] elf_core_dump+0x2766/0x3840 [ 258.916644][T10824] ? __pfx_elf_core_dump+0x10/0x10 [ 258.921787][T10824] ? kasan_save_stack+0x42/0x60 [ 258.926702][T10824] ? kasan_save_stack+0x33/0x60 [ 258.931588][T10824] ? __kasan_kmalloc+0xaa/0xb0 [ 258.936425][T10824] ? __kmalloc_node_noprof+0x211/0x440 [ 258.941920][T10824] ? __kvmalloc_node_noprof+0xad/0x1a0 [ 258.947424][T10824] ? irqentry_exit_to_user_mode+0x13f/0x280 [ 258.953350][T10824] ? asm_exc_page_fault+0x26/0x30 [ 258.958414][T10824] ? mas_ascend+0x519/0x930 [ 258.962959][T10824] ? rcu_is_watching+0x12/0xc0 [ 258.967757][T10824] ? trace_lock_acquire+0x146/0x1e0 [ 258.972991][T10824] ? __pfx_sort+0x10/0x10 [ 258.977360][T10824] ? get_signal+0x23f3/0x2610 [ 258.982115][T10824] ? do_coredump+0x2c42/0x4160 [ 258.986938][T10824] do_coredump+0x2c42/0x4160 [ 258.991574][T10824] ? __pfx_do_coredump+0x10/0x10 [ 258.996580][T10824] ? irqentry_exit_to_user_mode+0x13f/0x280 [ 259.002589][T10824] ? rcu_is_watching+0x12/0xc0 [ 259.007486][T10824] get_signal+0x23f3/0x2610 [ 259.012038][T10824] ? force_sig_fault+0xad/0xf0 [ 259.016830][T10824] ? __pfx_get_signal+0x10/0x10 [ 259.021724][T10824] arch_do_signal_or_restart+0x90/0x7e0 [ 259.027312][T10824] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 259.033507][T10824] ? __bad_area_nosemaphore+0x334/0x6a0 [ 259.039085][T10824] ? do_user_addr_fault+0x920/0x13f0 [ 259.044404][T10824] ? rcu_is_watching+0x12/0xc0 [ 259.049201][T10824] irqentry_exit_to_user_mode+0x13f/0x280 [ 259.054954][T10824] asm_exc_page_fault+0x26/0x30 [ 259.059838][T10824] RIP: 0033:0x7f228217e821 [ 259.064276][T10824] Code: 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 259.083913][T10824] RSP: 002b:0000000000000009 EFLAGS: 00010217 [ 259.090016][T10824] RAX: 0000000000000000 RBX: 00007f2282336080 RCX: 00007f228217e819 [ 259.098015][T10824] RDX: 00000000200001c0 RSI: 0000000000000009 RDI: 0000000000000007 [ 259.106013][T10824] RBP: 00007f22821f175e R08: fffffffffffffffe R09: 0000000000000000 [ 259.114024][T10824] R10: 0000000020000200 R11: 0000000000000246 R12: 0000000000000000 [ 259.122036][T10824] R13: 0000000000000001 R14: 00007f2282336080 R15: 00007ffe01c67848 [ 259.130038][T10824] [ 259.142292][T10824] memory: usage 307128kB, limit 307200kB, failcnt 27497 [ 259.149527][T10824] memory+swap: usage 423708kB, limit 9007199254740988kB, failcnt 0 [ 259.157709][T10824] kmem: usage 4056kB, limit 9007199254740988kB, failcnt 0 [ 259.164845][T10824] Memory cgroup stats for /syz3: [ 259.165002][T10824] cache 308830208 [ 259.173878][T10824] rss 475136 [ 259.177171][T10824] rss_huge 0 [ 259.180382][T10824] shmem 308826112 [ 259.184022][T10824] mapped_file 0 [ 259.197129][T10824] dirty 0 [ 259.200111][T10824] writeback 0 [ 259.203440][T10824] workingset_refault_anon 7500 [ 259.218724][T10824] workingset_refault_file 4663 [ 259.223533][T10824] swap 119304192 [ 259.237256][T10824] swapcached 1114112 [ 259.247279][T10824] pgpgin 851626 [ 259.251304][T10824] pgpgout 782994 [ 259.254918][T10824] pgfault 315919 [ 259.267178][T10824] pgmajfault 893 [ 259.270770][T10824] inactive_anon 222511104 [ 259.275115][T10824] active_anon 86216704 [ 259.297125][T10824] inactive_file 4096 [ 259.301064][T10824] active_file 0 [ 259.304539][T10824] unevictable 0 [ 259.317167][T10824] hierarchical_memory_limit 314572800 [ 259.322570][T10824] hierarchical_memsw_limit 9223372036854771712 [ 259.397172][T10824] total_cache 308830208 [ 259.401370][T10824] total_rss 475136 [ 259.405092][T10824] total_rss_huge 0 [ 259.557238][T10824] total_shmem 308826112 [ 259.561880][T10824] total_mapped_file 0 [ 259.565894][T10824] total_dirty 0 [ 259.657104][T10824] total_writeback 0 [ 259.661642][T10824] total_workingset_refault_anon 7500 [ 259.696761][T10824] total_workingset_refault_file 4663 [ 259.737111][T10824] total_swap 119304192 [ 259.741309][T10824] total_swapcached 1114112 [ 259.745731][T10824] total_pgpgin 851626 [ 259.818844][T10824] total_pgpgout 782994 [ 259.822961][T10824] total_pgfault 315919 [ 259.898525][T10824] total_pgmajfault 893 [ 259.902830][T10824] total_inactive_anon 222511104 [ 259.958703][T10824] total_active_anon 86216704 [ 260.017380][T10824] total_inactive_file 4096 [ 260.087343][T10824] total_active_file 0 [ 260.091378][T10824] total_unevictable 0 [ 260.095366][T10824] anon_cost 0 [ 260.153813][T10824] file_cost 0 [ 260.297176][T10824] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.1010,pid=10808,uid=0 [ 260.312582][T10824] Memory cgroup out of memory: Killed process 10808 (syz.3.1010) total-vm:101328kB, anon-rss:632kB, file-rss:35672kB, shmem-rss:0kB, UID:0 pgtables:176kB oom_score_adj:1000 [ 261.188929][T12151] FAULT_INJECTION: forcing a failure. [ 261.188929][T12151] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 261.257178][T12151] CPU: 1 UID: 0 PID: 12151 Comm: syz.2.1325 Not tainted 6.12.0-syzkaller-09073-g9f16d5e6f220 #0 [ 261.267646][T12151] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 261.277809][T12151] Call Trace: [ 261.281099][T12151] [ 261.284041][T12151] dump_stack_lvl+0x16c/0x1f0 [ 261.288749][T12151] should_fail_ex+0x497/0x5b0 [ 261.293473][T12151] _copy_from_user+0x2e/0xd0 [ 261.298112][T12151] do_ipv6_setsockopt+0x99f/0x4660 [ 261.303249][T12151] ? lock_release+0x4e2/0x6f0 [ 261.307948][T12151] ? __pfx_do_ipv6_setsockopt+0x10/0x10 [ 261.313525][T12151] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 261.318935][T12151] ? __pfx_kstrtouint+0x10/0x10 [ 261.323814][T12151] ? rcu_is_watching+0x12/0xc0 [ 261.328608][T12151] ? lock_release+0x4e2/0x6f0 [ 261.333301][T12151] ? get_pid_task+0xfc/0x250 [ 261.338265][T12151] ? __pfx_lock_release+0x10/0x10 [ 261.343294][T12151] ? trace_lock_acquire+0x146/0x1e0 [ 261.348501][T12151] ? get_pid_task+0x35/0x250 [ 261.353100][T12151] ? __pfx___might_resched+0x10/0x10 [ 261.358387][T12151] ? lock_release+0x4e2/0x6f0 [ 261.363063][T12151] ? ksys_write+0x12b/0x250 [ 261.367571][T12151] ? aa_sk_perm+0x2f5/0xb20 [ 261.372085][T12151] ? ksys_write+0x191/0x250 [ 261.376663][T12151] ? __pfx_aa_sk_perm+0x10/0x10 [ 261.381526][T12151] ? ipv6_setsockopt+0xcb/0x170 [ 261.386392][T12151] ? sock_common_setsockopt+0x2e/0xf0 [ 261.391794][T12151] ipv6_setsockopt+0xcb/0x170 [ 261.396487][T12151] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 261.402403][T12151] do_sock_setsockopt+0x222/0x480 [ 261.407439][T12151] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 261.412988][T12151] ? __fget_files+0x40/0x3a0 [ 261.417583][T12151] ? lock_acquire+0x2f/0xb0 [ 261.422090][T12151] __sys_setsockopt+0x1a0/0x230 [ 261.426951][T12151] __x64_sys_setsockopt+0xbd/0x160 [ 261.432068][T12151] ? trace_irq_enable.constprop.0+0xe6/0x140 [ 261.438055][T12151] do_syscall_64+0xcd/0x250 [ 261.442577][T12151] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 261.448485][T12151] RIP: 0033:0x7f46acf7e819 [ 261.452938][T12151] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 261.472566][T12151] RSP: 002b:00007f46addc3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 261.480983][T12151] RAX: ffffffffffffffda RBX: 00007f46ad135fa0 RCX: 00007f46acf7e819 [ 261.488949][T12151] RDX: 0000000000000032 RSI: 0000000000000029 RDI: 0000000000000003 [ 261.496932][T12151] RBP: 00007f46addc3090 R08: 0000000010000110 R09: 0000000000000000 [ 261.504920][T12151] R10: 0000000020000180 R11: 0000000000000246 R12: 0000000000000001 [ 261.512897][T12151] R13: 0000000000000000 R14: 00007f46ad135fa0 R15: 00007fff4f30b158 [ 261.520888][T12151] [ 262.625958][T12181] netlink: 'syz.4.1335': attribute type 12 has an invalid length. [ 262.647130][T12181] netlink: 'syz.4.1335': attribute type 13 has an invalid length. [ 263.257691][T12200] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1341'. [ 263.266752][T12200] openvswitch: netlink: Unknown nsh attribute 0 [ 268.488929][T12319] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1369'. [ 271.777397][T12395] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1383'. [ 273.702228][T12443] HfR: entered promiscuous mode [ 273.820833][T12445] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1397'. [ 273.877860][T12445] netlink: 'syz.0.1397': attribute type 1 has an invalid length. [ 274.009763][T12441] netlink: 350 bytes leftover after parsing attributes in process `syz.3.1395'. [ 276.286278][T12083] syz.2.1308 (12083) used greatest stack depth: 19056 bytes left [ 276.491039][T12520] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1413'. [ 276.518948][ C1] bridge0: received packet on geneve0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 276.539868][T12520] bond0: left allmulticast mode [ 276.555579][T12520] bond_slave_0: left allmulticast mode [ 276.576198][T12520] bond_slave_1: left allmulticast mode [ 276.587171][T12520] bond0: left promiscuous mode [ 276.597132][T12520] bond_slave_0: left promiscuous mode [ 276.612220][T12520] bond_slave_1: left promiscuous mode [ 276.631995][T12520] bridge0: port 6(bond0) entered disabled state [ 276.689441][T12520] batadv0: left allmulticast mode [ 276.694921][T12520] batadv0: left promiscuous mode [ 276.705227][T12520] bridge0: port 5(batadv0) entered disabled state [ 276.726663][T12520] geneve0: left allmulticast mode [ 276.731947][T12520] geneve0: left promiscuous mode [ 276.748566][T12520] bridge0: port 4(geneve0) entered disabled state [ 276.756769][T12520] veth1: left allmulticast mode [ 276.767448][T12520] veth1: left promiscuous mode [ 276.772396][T12520] bridge0: port 3(veth1) entered disabled state [ 276.797579][T12520] bridge_slave_1: left allmulticast mode [ 276.803351][T12520] bridge_slave_1: left promiscuous mode [ 276.813633][T12520] bridge0: port 2(bridge_slave_1) entered disabled state [ 276.844744][T12520] bridge_slave_0: left allmulticast mode [ 276.853865][T12520] bridge_slave_0: left promiscuous mode [ 276.868065][T12520] bridge0: port 1(bridge_slave_0) entered disabled state [ 277.954040][T12563] could not allocate digest TFM handle [ 280.404169][T12637] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1438'. [ 285.186107][T12744] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 289.442080][T12837] netlink: 50 bytes leftover after parsing attributes in process `syz.4.1484'. [ 290.095469][T12861] kAFS: unparsable volume name [ 291.635251][T12896] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1499'. [ 291.901007][T12904] kexec: Could not allocate control_code_buffer [ 295.633980][T13000] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1528'. [ 295.982217][T13017] nbd: must specify a size in bytes for the device [ 296.076800][T13022] netlink: 54 bytes leftover after parsing attributes in process `syz.2.1535'. [ 296.198154][T13030] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1537'. [ 296.234967][T13030] syz.2.1537(13030): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 296.609768][T13041] openvswitch: netlink: Missing valid actions attribute. [ 296.739542][T13041] netlink: 350 bytes leftover after parsing attributes in process `syz.0.1541'. [ 296.744162][T13043] bridge0: port 4(batadv0) entered blocking state [ 296.777192][T13043] bridge0: port 4(batadv0) entered disabled state [ 296.783776][T13043] batadv0: entered allmulticast mode [ 296.812625][T13049] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1543'. [ 296.823589][T13043] batadv0: entered promiscuous mode [ 296.845565][T13043] bridge0: port 4(batadv0) entered blocking state [ 296.852225][T13043] bridge0: port 4(batadv0) entered forwarding state [ 297.083840][T13058] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1545'. [ 297.138152][ T6485] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 297.147726][ T6485] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 298.280530][T13096] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1557'. [ 298.318516][T13096] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 298.347764][T13096] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 298.366926][T13096] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 298.401813][T13096] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 298.418220][T13097] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1556'. [ 298.653056][T13103] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1559'. [ 298.708715][T13103] veth0_macvtap: entered allmulticast mode [ 299.355460][T13133] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1565'. [ 299.418763][T13133] lo: entered promiscuous mode [ 299.437774][T13133] lo: entered allmulticast mode [ 300.391062][T13183] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 300.457223][T13183] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 300.694582][T13197] netlink: 'syz.4.1581': attribute type 11 has an invalid length. [ 300.709037][T13198] netlink: 'syz.4.1581': attribute type 11 has an invalid length. [ 300.727156][T13197] netlink: 'syz.4.1581': attribute type 11 has an invalid length. [ 300.727545][T13198] netlink: 'syz.4.1581': attribute type 11 has an invalid length. [ 301.728602][T13214] Dead loop on virtual device ip6_vti0, fix it urgently! [ 301.756901][T13214] Dead loop on virtual device ip6_vti0, fix it urgently! [ 301.786193][T13214] Dead loop on virtual device ip6_vti0, fix it urgently! [ 301.793659][T13214] Dead loop on virtual device ip6_vti0, fix it urgently! [ 301.827347][T13214] Dead loop on virtual device ip6_vti0, fix it urgently! [ 301.834821][T13214] Dead loop on virtual device ip6_vti0, fix it urgently! [ 302.125469][T13248] openvswitch: netlink: Tunnel attr 0 has unexpected len 0 expected 8 [ 302.169007][T13248] openvswitch: netlink: Tunnel attr 0 has unexpected len 0 expected 8 [ 303.577164][T13294] can: request_module (can-proto-0) failed. [ 304.197190][ T5853] Bluetooth: hci4: command 0x0406 tx timeout [ 306.494085][T13398] __nla_validate_parse: 2 callbacks suppressed [ 306.494099][T13398] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1631'. [ 307.395943][T13438] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1642'. [ 310.820630][T13547] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1663'. [ 310.981300][T13549] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1664'. [ 311.483197][T13568] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1669'. [ 315.122739][T13689] kernel read not supported for file /#)-\&[} (pid: 13689 comm: syz.0.1693) [ 315.138122][ T29] audit: type=1800 audit(8277292089.629:10): pid=13689 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1693" name="#)-\&[}" dev="mqueue" ino=12518 res=0 errno=0 [ 317.484191][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.490623][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.868550][T13771] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1712'. [ 319.314628][T13809] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1722'. [ 319.375978][T13805] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 321.080435][T13849] svc: failed to register nfsdv3 RPC service (errno 111). [ 321.135580][T13849] svc: failed to register nfsaclv3 RPC service (errno 111). [ 322.067268][T13864] netlink: 54 bytes leftover after parsing attributes in process `syz.4.1736'. [ 322.117332][T13863] netlink: 54 bytes leftover after parsing attributes in process `syz.4.1736'. [ 323.677456][T13891] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1741'. [ 324.692823][T13911] netlink: 326 bytes leftover after parsing attributes in process `syz.0.1749'. [ 325.563627][T13958] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1758'. [ 325.828632][T13969] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1761'. [ 326.017609][T13979] FAULT_INJECTION: forcing a failure. [ 326.017609][T13979] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 326.075277][T13979] CPU: 0 UID: 0 PID: 13979 Comm: syz.3.1765 Not tainted 6.12.0-syzkaller-09073-g9f16d5e6f220 #0 [ 326.085755][T13979] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 326.095921][T13979] Call Trace: [ 326.099222][T13979] [ 326.102172][T13979] dump_stack_lvl+0x16c/0x1f0 [ 326.106888][T13979] should_fail_ex+0x497/0x5b0 [ 326.111600][T13979] _copy_from_user+0x2e/0xd0 [ 326.116253][T13979] do_sock_getsockopt+0x319/0x870 [ 326.121310][T13979] ? trace_lock_acquire+0x80/0x1e0 [ 326.126467][T13979] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 326.132050][T13979] ? lock_acquire+0x2f/0xb0 [ 326.136589][T13979] ? __fget_files+0x40/0x3a0 [ 326.141225][T13979] ? __fget_files+0x206/0x3a0 [ 326.145935][T13979] __sys_getsockopt+0x12f/0x260 [ 326.150822][T13979] __x64_sys_getsockopt+0xbd/0x160 [ 326.155971][T13979] ? trace_irq_enable.constprop.0+0xe6/0x140 [ 326.161982][T13979] do_syscall_64+0xcd/0x250 [ 326.166519][T13979] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 326.172445][T13979] RIP: 0033:0x7f228217e819 [ 326.176885][T13979] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 326.196620][T13979] RSP: 002b:00007f227fff6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 326.205057][T13979] RAX: ffffffffffffffda RBX: 00007f2282335fa0 RCX: 00007f228217e819 [ 326.213074][T13979] RDX: 000000000000000b RSI: 0000000000000006 RDI: 0000000000000003 [ 326.221069][T13979] RBP: 00007f227fff6090 R08: 0000000000000000 R09: 0000000000000000 [ 326.229066][T13979] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 326.237058][T13979] R13: 0000000000000000 R14: 00007f2282335fa0 R15: 00007ffe01c67848 [ 326.245053][T13979] [ 326.334000][T13988] can: request_module (can-proto-5) failed. [ 326.361056][T13990] can: request_module (can-proto-5) failed. [ 327.265461][T14028] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1777'. [ 327.282576][T14027] FAULT_INJECTION: forcing a failure. [ 327.282576][T14027] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 327.418235][T14027] CPU: 0 UID: 0 PID: 14027 Comm: syz.4.1776 Not tainted 6.12.0-syzkaller-09073-g9f16d5e6f220 #0 [ 327.428721][T14027] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 327.438798][T14027] Call Trace: [ 327.442105][T14027] [ 327.445053][T14027] dump_stack_lvl+0x16c/0x1f0 [ 327.449763][T14027] should_fail_ex+0x497/0x5b0 [ 327.454476][T14027] _copy_from_user+0x2e/0xd0 [ 327.459108][T14027] do_tcp_getsockopt+0x1d8/0x3a90 [ 327.464178][T14027] ? __pfx_do_tcp_getsockopt+0x10/0x10 [ 327.469673][T14027] ? __kernel_text_address+0xd/0x40 [ 327.474921][T14027] ? unwind_get_return_address+0x59/0xa0 [ 327.480599][T14027] ? arch_stack_walk+0xa7/0x100 [ 327.485548][T14027] ? _parse_integer_limit+0x17f/0x1d0 [ 327.490953][T14027] ? rcu_is_watching+0x12/0xc0 [ 327.495749][T14027] ? _kstrtoull+0x146/0x200 [ 327.500278][T14027] ? __pfx__kstrtoull+0x10/0x10 [ 327.505161][T14027] ? aa_label_sk_perm+0x19d/0x5a0 [ 327.510215][T14027] ? __pfx_lock_release+0x10/0x10 [ 327.515266][T14027] ? trace_lock_acquire+0x146/0x1e0 [ 327.520514][T14027] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 327.525914][T14027] ? kstrtouint+0xde/0x130 [ 327.530358][T14027] ? __pfx_kstrtouint+0x10/0x10 [ 327.535238][T14027] ? rcu_is_watching+0x12/0xc0 [ 327.540029][T14027] ? lock_release+0x4e2/0x6f0 [ 327.544729][T14027] ? get_pid_task+0xfc/0x250 [ 327.549347][T14027] ? __pfx_lock_release+0x10/0x10 [ 327.554400][T14027] ? trace_lock_acquire+0x146/0x1e0 [ 327.559723][T14027] ? get_pid_task+0x35/0x250 [ 327.564349][T14027] ? lock_acquire+0x2f/0xb0 [ 327.569052][T14027] ? __pfx___might_resched+0x10/0x10 [ 327.574372][T14027] ? rcu_is_watching+0x12/0xc0 [ 327.579192][T14027] ? lock_release+0x4e2/0x6f0 [ 327.583962][T14027] ? __might_fault+0x13b/0x190 [ 327.588754][T14027] ? __pfx_lock_release+0x10/0x10 [ 327.593796][T14027] ? trace_lock_acquire+0x146/0x1e0 [ 327.599029][T14027] ? lock_release+0x4e2/0x6f0 [ 327.603757][T14027] ? __might_fault+0xe3/0x190 [ 327.608454][T14027] ? lock_acquire+0x2f/0xb0 [ 327.612985][T14027] ? __might_fault+0xe3/0x190 [ 327.617708][T14027] tcp_getsockopt+0xdf/0x100 [ 327.622335][T14027] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 327.628263][T14027] do_sock_getsockopt+0x3fe/0x870 [ 327.633324][T14027] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 327.638902][T14027] ? lock_acquire+0x2f/0xb0 [ 327.643431][T14027] ? __fget_files+0x40/0x3a0 [ 327.648052][T14027] ? __fget_files+0x206/0x3a0 [ 327.652771][T14027] __sys_getsockopt+0x12f/0x260 [ 327.657664][T14027] __x64_sys_getsockopt+0xbd/0x160 [ 327.662828][T14027] ? trace_irq_enable.constprop.0+0xe6/0x140 [ 327.668863][T14027] do_syscall_64+0xcd/0x250 [ 327.673411][T14027] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 327.679367][T14027] RIP: 0033:0x7fee57f7e819 [ 327.683821][T14027] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 327.703463][T14027] RSP: 002b:00007fee58e19038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 327.711912][T14027] RAX: ffffffffffffffda RBX: 00007fee58135fa0 RCX: 00007fee57f7e819 [ 327.719920][T14027] RDX: 000000000000000b RSI: 0000000000000006 RDI: 0000000000000003 [ 327.727922][T14027] RBP: 00007fee58e19090 R08: 0000000000000000 R09: 0000000000000000 [ 327.735912][T14027] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 327.743911][T14027] R13: 0000000000000000 R14: 00007fee58135fa0 R15: 00007fff4f133298 [ 327.751918][T14027] [ 330.532349][T14073] FAULT_INJECTION: forcing a failure. [ 330.532349][T14073] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 330.566386][T14073] CPU: 0 UID: 0 PID: 14073 Comm: syz.2.1789 Not tainted 6.12.0-syzkaller-09073-g9f16d5e6f220 #0 [ 330.576860][T14073] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 330.586947][T14073] Call Trace: [ 330.590243][T14073] [ 330.593188][T14073] dump_stack_lvl+0x16c/0x1f0 [ 330.597896][T14073] should_fail_ex+0x497/0x5b0 [ 330.602605][T14073] _copy_from_user+0x2e/0xd0 [ 330.607227][T14073] do_tcp_getsockopt+0x234d/0x3a90 [ 330.612363][T14073] ? __pfx_do_tcp_getsockopt+0x10/0x10 [ 330.617853][T14073] ? __kernel_text_address+0xd/0x40 [ 330.623078][T14073] ? unwind_get_return_address+0x59/0xa0 [ 330.628737][T14073] ? arch_stack_walk+0xa7/0x100 [ 330.633630][T14073] ? _parse_integer_limit+0x17f/0x1d0 [ 330.639034][T14073] ? rcu_is_watching+0x12/0xc0 [ 330.643828][T14073] ? _kstrtoull+0x146/0x200 [ 330.648358][T14073] ? __pfx__kstrtoull+0x10/0x10 [ 330.653239][T14073] ? aa_label_sk_perm+0x19d/0x5a0 [ 330.658726][T14073] ? __pfx_lock_release+0x10/0x10 [ 330.663791][T14073] ? trace_lock_acquire+0x146/0x1e0 [ 330.669030][T14073] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 330.674437][T14073] ? lock_acquire+0x2f/0xb0 [ 330.678972][T14073] ? __pfx___might_resched+0x10/0x10 [ 330.684288][T14073] ? rcu_is_watching+0x12/0xc0 [ 330.689089][T14073] ? lock_release+0x4e2/0x6f0 [ 330.693804][T14073] ? __might_fault+0x13b/0x190 [ 330.698596][T14073] ? __pfx_lock_release+0x10/0x10 [ 330.703645][T14073] ? trace_lock_acquire+0x146/0x1e0 [ 330.708877][T14073] ? lock_release+0x4e2/0x6f0 [ 330.713591][T14073] ? __might_fault+0xe3/0x190 [ 330.718294][T14073] ? lock_acquire+0x2f/0xb0 [ 330.722822][T14073] ? __might_fault+0xe3/0x190 [ 330.727525][T14073] tcp_getsockopt+0xdf/0x100 [ 330.732157][T14073] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 330.738085][T14073] do_sock_getsockopt+0x3fe/0x870 [ 330.743150][T14073] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 330.748724][T14073] ? lock_acquire+0x2f/0xb0 [ 330.753259][T14073] ? __fget_files+0x40/0x3a0 [ 330.757882][T14073] ? __fget_files+0x206/0x3a0 [ 330.762591][T14073] __sys_getsockopt+0x12f/0x260 [ 330.767479][T14073] __x64_sys_getsockopt+0xbd/0x160 [ 330.772623][T14073] ? trace_irq_enable.constprop.0+0xe6/0x140 [ 330.778638][T14073] do_syscall_64+0xcd/0x250 [ 330.783184][T14073] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 330.789117][T14073] RIP: 0033:0x7f46acf7e819 [ 330.793553][T14073] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 330.813186][T14073] RSP: 002b:00007f46addc3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 330.821630][T14073] RAX: ffffffffffffffda RBX: 00007f46ad135fa0 RCX: 00007f46acf7e819 [ 330.829627][T14073] RDX: 000000000000000b RSI: 0000000000000006 RDI: 0000000000000003 [ 330.837626][T14073] RBP: 00007f46addc3090 R08: 0000000000000000 R09: 0000000000000000 [ 330.845644][T14073] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 330.853644][T14073] R13: 0000000000000000 R14: 00007f46ad135fa0 R15: 00007fff4f30b158 [ 330.861646][T14073] [ 332.111771][T14119] FAULT_INJECTION: forcing a failure. [ 332.111771][T14119] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 332.227168][T14119] CPU: 1 UID: 0 PID: 14119 Comm: syz.2.1801 Not tainted 6.12.0-syzkaller-09073-g9f16d5e6f220 #0 [ 332.237637][T14119] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 332.247722][T14119] Call Trace: [ 332.251013][T14119] [ 332.253958][T14119] dump_stack_lvl+0x16c/0x1f0 [ 332.258681][T14119] should_fail_ex+0x497/0x5b0 [ 332.263393][T14119] _copy_to_user+0x32/0xd0 [ 332.267931][T14119] do_tcp_getsockopt+0x2413/0x3a90 [ 332.273077][T14119] ? __pfx_do_tcp_getsockopt+0x10/0x10 [ 332.278563][T14119] ? __kernel_text_address+0xd/0x40 [ 332.283785][T14119] ? unwind_get_return_address+0x59/0xa0 [ 332.289451][T14119] ? arch_stack_walk+0xa7/0x100 [ 332.294332][T14119] ? _parse_integer_limit+0x17f/0x1d0 [ 332.299730][T14119] ? rcu_is_watching+0x12/0xc0 [ 332.304532][T14119] ? _kstrtoull+0x146/0x200 [ 332.309062][T14119] ? __pfx__kstrtoull+0x10/0x10 [ 332.313936][T14119] ? aa_label_sk_perm+0x19d/0x5a0 [ 332.318983][T14119] ? __pfx_lock_release+0x10/0x10 [ 332.324025][T14119] ? trace_lock_acquire+0x146/0x1e0 [ 332.329248][T14119] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 332.334673][T14119] ? lock_acquire+0x2f/0xb0 [ 332.339193][T14119] ? __pfx___might_resched+0x10/0x10 [ 332.344482][T14119] ? rcu_is_watching+0x12/0xc0 [ 332.349246][T14119] ? lock_release+0x4e2/0x6f0 [ 332.353924][T14119] ? __might_fault+0x13b/0x190 [ 332.358692][T14119] ? __pfx_lock_release+0x10/0x10 [ 332.363718][T14119] ? trace_lock_acquire+0x146/0x1e0 [ 332.368946][T14119] ? lock_release+0x4e2/0x6f0 [ 332.373626][T14119] ? __might_fault+0xe3/0x190 [ 332.378303][T14119] ? lock_acquire+0x2f/0xb0 [ 332.382808][T14119] ? __might_fault+0xe3/0x190 [ 332.387482][T14119] tcp_getsockopt+0xdf/0x100 [ 332.392163][T14119] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 332.398053][T14119] do_sock_getsockopt+0x3fe/0x870 [ 332.403088][T14119] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 332.408636][T14119] ? lock_acquire+0x2f/0xb0 [ 332.413137][T14119] ? __fget_files+0x40/0x3a0 [ 332.417731][T14119] ? __fget_files+0x206/0x3a0 [ 332.422425][T14119] __sys_getsockopt+0x12f/0x260 [ 332.427283][T14119] __x64_sys_getsockopt+0xbd/0x160 [ 332.432397][T14119] ? trace_irq_enable.constprop.0+0xe6/0x140 [ 332.438382][T14119] do_syscall_64+0xcd/0x250 [ 332.442894][T14119] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 332.448795][T14119] RIP: 0033:0x7f46acf7e819 [ 332.453213][T14119] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 332.473259][T14119] RSP: 002b:00007f46addc3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 332.481679][T14119] RAX: ffffffffffffffda RBX: 00007f46ad135fa0 RCX: 00007f46acf7e819 [ 332.489654][T14119] RDX: 000000000000000b RSI: 0000000000000006 RDI: 0000000000000003 [ 332.497626][T14119] RBP: 00007f46addc3090 R08: 0000000000000000 R09: 0000000000000000 [ 332.505605][T14119] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 332.513575][T14119] R13: 0000000000000000 R14: 00007f46ad135fa0 R15: 00007fff4f30b158 [ 332.521555][T14119] [ 332.664785][T14131] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1804'. [ 333.757672][T14166] HfR: entered promiscuous mode [ 333.763857][T14166] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1809'. [ 333.773591][T14166] HfR: left promiscuous mode [ 333.831160][T14166] HfR: entered promiscuous mode [ 335.015227][T14202] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1818'. [ 335.152997][T14202] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 335.175425][T14202] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 335.219790][T14202] bond0 (unregistering): Released all slaves [ 336.199393][T14247] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1830'. [ 336.724707][T14262] netlink: 178 bytes leftover after parsing attributes in process `syz.2.1835'. [ 336.748701][T14264] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1836'. [ 337.312198][T14288] netlink: 168 bytes leftover after parsing attributes in process `syz.0.1843'. [ 338.236712][T14324] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1852'. [ 338.756670][T14347] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 339.152819][ T29] audit: type=1326 audit(8277292113.639:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14379 comm="syz.2.1859" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f46acf7e819 code=0x0 [ 339.273071][T14383] lo: entered promiscuous mode [ 339.980785][T14379] lo: left promiscuous mode [ 340.175033][T14432] netlink: 330 bytes leftover after parsing attributes in process `syz.0.1869'. [ 340.261560][T14434] netlink: zone id is out of range [ 340.266726][T14434] netlink: zone id is out of range [ 340.297290][T14434] netlink: zone id is out of range [ 340.317392][T14434] netlink: zone id is out of range [ 340.337637][T14434] netlink: zone id is out of range [ 340.347643][T14434] netlink: set zone limit has 4 unknown bytes [ 340.373913][T14443] openvswitch: netlink: Tunnel attr 8192 out of range max 16 [ 341.442498][T14467] netlink: 146 bytes leftover after parsing attributes in process `syz.0.1879'. [ 341.938463][T14478] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1881'. [ 344.411818][T14571] sctp: [Deprecated]: syz.0.1900 (pid 14571) Use of int in max_burst socket option deprecated. [ 344.411818][T14571] Use struct sctp_assoc_value instead [ 344.578590][T14574] openvswitch: netlink: Flow key attribute not present in set flow. [ 345.418390][T14593] netlink: 'syz.4.1905': attribute type 4 has an invalid length. [ 345.808495][T14601] netlink: 1300 bytes leftover after parsing attributes in process `syz.0.1907'. [ 345.846088][T14601] netlink: 1300 bytes leftover after parsing attributes in process `syz.0.1907'. [ 345.891090][T14601] netlink: 1300 bytes leftover after parsing attributes in process `syz.0.1907'. [ 345.936142][T14601] netlink: 1300 bytes leftover after parsing attributes in process `syz.0.1907'. [ 345.977469][T14601] netlink: 1300 bytes leftover after parsing attributes in process `syz.0.1907'. [ 346.006145][T14601] netlink: 1300 bytes leftover after parsing attributes in process `syz.0.1907'. [ 346.036174][T14601] netlink: 1300 bytes leftover after parsing attributes in process `syz.0.1907'. [ 346.054869][T14601] netlink: 1300 bytes leftover after parsing attributes in process `syz.0.1907'. [ 346.077519][T14601] netlink: 1300 bytes leftover after parsing attributes in process `syz.0.1907'. [ 346.102720][T14601] netlink: 1300 bytes leftover after parsing attributes in process `syz.0.1907'. [ 348.627028][T14679] raw_sendmsg: syz.2.1924 forgot to set AF_INET. Fix it! [ 348.963015][T14690] tipc: Started in network mode [ 348.994259][T14690] tipc: Node identity 1011eac, cluster identity 4711 [ 349.016551][T14690] tipc: Node number set to 16850604 [ 349.062147][T14694] netlink: 'syz.0.1930': attribute type 28 has an invalid length. [ 349.082569][T14694] netlink: 'syz.0.1930': attribute type 29 has an invalid length. [ 349.103226][T14694] netlink: 'syz.0.1930': attribute type 30 has an invalid length. [ 349.122266][T14694] netlink: 'syz.0.1930': attribute type 31 has an invalid length. [ 349.142430][T14694] netlink: 'syz.0.1930': attribute type 32 has an invalid length. [ 349.156320][T14694] netlink: 'syz.0.1930': attribute type 33 has an invalid length. [ 349.171553][T14694] netlink: 'syz.0.1930': attribute type 35 has an invalid length. [ 349.186432][T14694] netlink: 'syz.0.1930': attribute type 37 has an invalid length. [ 349.204250][T14694] netlink: 'syz.0.1930': attribute type 39 has an invalid length. [ 351.637310][T14769] __nla_validate_parse: 30 callbacks suppressed [ 351.637331][T14769] netlink: 6661 bytes leftover after parsing attributes in process `syz.2.1949'. [ 351.678007][T14769] tipc: Started in network mode [ 351.682912][T14769] tipc: Node identity ffffffac, cluster identity 4711 [ 351.716323][T14769] tipc: Node number set to 4294967212 [ 351.908847][T14771] netlink: 6661 bytes leftover after parsing attributes in process `syz.2.1949'. [ 352.224083][T14799] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1954'. [ 353.627257][T14828] netlink: 342 bytes leftover after parsing attributes in process `syz.2.1960'. [ 354.062375][T14839] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 355.650291][T14878] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 359.217151][ T29] audit: type=1326 audit(4294967313.340:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15010 comm="syz.0.2011" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fef9c97e819 code=0x0 [ 361.130839][T15057] netlink: 146 bytes leftover after parsing attributes in process `syz.0.2015'. [ 361.358458][T15064] Malformed UNC in devname [ 361.358458][T15064] [ 361.365152][T15064] CIFS: VFS: Malformed UNC in devname [ 361.468759][T15068] netlink: 116 bytes leftover after parsing attributes in process `syz.2.2020'. [ 361.922198][T15105] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2027'. [ 362.655981][T15135] netlink: 304 bytes leftover after parsing attributes in process `syz.2.2036'. [ 363.221958][ T55] Bluetooth: hci4: unexpected event 0x30 length: 43 > 3 [ 364.206399][T15141] kexec: Could not allocate control_code_buffer [ 368.494845][ T5853] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 368.520546][ T5853] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 368.536632][ T5853] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 368.548227][ T5853] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 368.555895][ T5853] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 368.563706][ T5853] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 368.648425][T15313] can: request_module (can-proto-0) failed. [ 368.883917][ T6475] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 368.952072][ T6475] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 368.989879][T15319] chnl_net:caif_netlink_parms(): no params data found [ 369.062886][ T6475] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 369.149068][T15319] bridge0: port 1(bridge_slave_0) entered blocking state [ 369.176477][T15319] bridge0: port 1(bridge_slave_0) entered disabled state [ 369.197275][T15319] bridge_slave_0: entered allmulticast mode [ 369.205478][T15319] bridge_slave_0: entered promiscuous mode [ 369.290179][ T6475] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 369.306948][T15319] bridge0: port 2(bridge_slave_1) entered blocking state [ 369.314441][T15319] bridge0: port 2(bridge_slave_1) entered disabled state [ 369.322181][T15319] bridge_slave_1: entered allmulticast mode [ 369.330103][T15319] bridge_slave_1: entered promiscuous mode [ 369.402406][T15354] do_dccp_setsockopt: sockopt(PACKET_SIZE) is deprecated: fix your app [ 369.430832][T15319] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 369.471424][T15319] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 369.485029][T15357] sock: sock_set_timeout: `syz.4.2099' (pid 15357) tries to set negative timeout [ 369.700292][T15319] team0: Port device team_slave_0 added [ 369.720360][T15319] team0: Port device team_slave_1 added [ 369.726336][ T6475] HfR: left promiscuous mode [ 369.763070][T15319] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 369.772427][T15319] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 369.815527][T15319] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 369.844069][T15319] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 369.851679][T15319] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 369.902804][T15319] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 369.976148][T15391] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 369.993985][T15319] hsr_slave_0: entered promiscuous mode [ 370.000903][T15319] hsr_slave_1: entered promiscuous mode [ 370.028135][T15319] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 370.049185][T15319] Cannot create hsr debugfs directory [ 370.096955][T15395] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2111'. [ 370.232619][ T6475] hsr_slave_0: left promiscuous mode [ 370.251127][ T6475] hsr_slave_1: left promiscuous mode [ 370.260299][ T6475] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 370.277179][ T6475] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 370.311961][ T6475] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 370.324710][ T6475] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 370.342211][ T6475] veth1_macvtap: left promiscuous mode [ 370.353024][ T6475] veth0_macvtap: left promiscuous mode [ 370.359650][ T6475] veth1_vlan: left promiscuous mode [ 370.366551][ T6475] veth0_vlan: left promiscuous mode [ 370.597140][ T55] Bluetooth: hci2: command tx timeout [ 370.753305][ T6475] team0 (unregistering): Port device team_slave_1 removed [ 370.808881][ T6475] team0 (unregistering): Port device team_slave_0 removed [ 371.746927][T15319] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 371.777748][T15319] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 371.829980][T15319] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 371.924302][T15319] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 372.139583][T15319] 8021q: adding VLAN 0 to HW filter on device bond0 [ 372.213644][T15319] 8021q: adding VLAN 0 to HW filter on device team0 [ 372.240765][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 372.247934][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 372.287363][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 372.294512][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 372.331776][T15319] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 372.566396][T15319] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 372.639605][T15319] veth0_vlan: entered promiscuous mode [ 372.649485][T15319] veth1_vlan: entered promiscuous mode [ 372.677217][ T55] Bluetooth: hci2: command tx timeout [ 372.696485][T15319] veth0_macvtap: entered promiscuous mode [ 372.725800][T15319] veth1_macvtap: entered promiscuous mode [ 372.776384][T15319] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 372.797432][T15319] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 372.818775][T15319] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 372.861265][T15319] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 372.888033][T15319] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 372.926590][T15319] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 372.967120][T15319] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 373.002434][T15319] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 373.023784][T15319] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 373.044783][T15319] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 373.065825][T15319] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 373.085486][T15319] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 373.107129][T15319] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 373.126664][T15319] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 373.216988][ T1149] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 373.235411][ T1149] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 373.265249][ T1149] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 373.283635][ T1149] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 374.757234][ T55] Bluetooth: hci2: command tx timeout [ 376.837281][ T55] Bluetooth: hci2: command tx timeout [ 378.919844][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.926186][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 382.600352][T15570] workqueue: name exceeds WQ_NAME_LEN. Truncating to: -侞6yռ ka; [ 382.663730][T15570] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2137'. [ 383.515296][T15610] debugfs: Directory '-侞6yռ ka;+1)p;!X+@' with parent 'ieee80211' already present! [ 383.573462][T15610] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2147'. [ 383.748567][T15614] netlink: 354 bytes leftover after parsing attributes in process `syz.3.2148'. [ 383.988343][T15623] could not allocate digest TFM handle [ 384.007858][T15622] could not allocate digest TFM handle [ 385.254293][T15692] netlink: 334 bytes leftover after parsing attributes in process `syz.2.2166'. [ 386.127510][T15713] netlink: 354 bytes leftover after parsing attributes in process `syz.2.2170'. [ 386.769993][T15728] netlink: 342 bytes leftover after parsing attributes in process `syz.0.2174'. [ 397.360976][T15765] netlink: 354 bytes leftover after parsing attributes in process `syz.0.2184'. [ 398.303980][T15781] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2190'. [ 399.389744][T15834] Invalid ELF header magic: != ELF [ 400.419973][T15857] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2206'. [ 400.431470][T15857] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2206'. [ 412.591641][ T6480] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 412.644219][ T5853] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 412.652508][ T5853] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 412.664476][ T5853] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 412.672624][ T5853] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 412.680498][ T5853] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 412.688375][ T5853] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 412.709498][ T6480] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 412.809498][ T6480] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 412.873418][ T6480] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 413.072857][ T6480] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 413.084285][ T6480] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 413.094286][ T6480] bond0 (unregistering): Released all slaves [ 413.124126][T15917] chnl_net:caif_netlink_parms(): no params data found [ 413.150134][ T6480] tipc: Left network mode [ 413.217866][T15917] bridge0: port 1(bridge_slave_0) entered blocking state [ 413.235812][T15917] bridge0: port 1(bridge_slave_0) entered disabled state [ 413.250553][T15917] bridge_slave_0: entered allmulticast mode [ 413.268123][T15917] bridge_slave_0: entered promiscuous mode [ 413.290463][T15917] bridge0: port 2(bridge_slave_1) entered blocking state [ 413.303178][T15917] bridge0: port 2(bridge_slave_1) entered disabled state [ 413.310542][T15917] bridge_slave_1: entered allmulticast mode [ 413.320101][T15917] bridge_slave_1: entered promiscuous mode [ 413.371212][T15917] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 413.395337][T15917] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 413.531448][T15917] team0: Port device team_slave_0 added [ 413.585176][T15917] team0: Port device team_slave_1 added [ 413.758461][T15917] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 413.765542][T15917] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 413.791909][T15917] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 413.805682][T15917] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 413.812799][T15917] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 413.839106][T15917] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 413.880019][T15970] netlink: 334 bytes leftover after parsing attributes in process `syz.2.2229'. [ 413.989810][T15917] hsr_slave_0: entered promiscuous mode [ 414.010447][T15917] hsr_slave_1: entered promiscuous mode [ 414.028069][T15917] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 414.045528][T15917] Cannot create hsr debugfs directory [ 414.424234][T15917] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 414.486773][T15917] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 414.513155][T15998] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2233'. [ 414.531147][T15917] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 414.585503][T15917] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 414.749963][T15917] 8021q: adding VLAN 0 to HW filter on device bond0 [ 414.761223][ T55] Bluetooth: hci1: command tx timeout [ 414.829997][T16009] bridge0: port 5(netdevsim0) entered blocking state [ 414.854995][T16009] bridge0: port 5(netdevsim0) entered disabled state [ 414.871669][T16009] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 414.896970][T16009] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 414.959271][T16009] bridge0: port 5(netdevsim0) entered blocking state [ 414.966053][T16009] bridge0: port 5(netdevsim0) entered forwarding state [ 415.096856][T15917] 8021q: adding VLAN 0 to HW filter on device team0 [ 415.206265][ T6477] bridge0: port 1(bridge_slave_0) entered blocking state [ 415.213437][ T6477] bridge0: port 1(bridge_slave_0) entered forwarding state [ 415.252707][ T6477] bridge0: port 2(bridge_slave_1) entered blocking state [ 415.259875][ T6477] bridge0: port 2(bridge_slave_1) entered forwarding state [ 415.654313][T15917] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 415.727450][T16012] netlink: 8255 bytes leftover after parsing attributes in process `syz.0.2235'. [ 415.926928][T15917] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 416.738554][T15917] veth0_vlan: entered promiscuous mode [ 416.788163][T15917] veth1_vlan: entered promiscuous mode [ 416.838763][ T55] Bluetooth: hci1: command tx timeout [ 417.218078][T15917] veth0_macvtap: entered promiscuous mode [ 417.321985][T15917] veth1_macvtap: entered promiscuous mode [ 417.388619][T15917] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 417.433079][T15917] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 417.496343][T15917] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 417.532895][T15917] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 417.576871][T15917] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 417.617147][T15917] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 417.671866][T15917] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 417.927898][T15917] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 417.969028][T15917] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 418.001012][T15917] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 418.031409][T15917] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 418.057114][T15917] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 418.088387][T15917] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 418.109152][T15917] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 418.170368][T15917] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 418.207204][T15917] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 418.215952][T15917] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 418.257135][T15917] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 418.525832][ T6480] hsr_slave_0: left promiscuous mode [ 418.537945][ T6480] hsr_slave_1: left promiscuous mode [ 418.565907][ T6480] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 418.591641][ T6480] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 418.737519][ T6480] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 418.744978][ T6480] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 418.815048][ T6480] veth1_macvtap: left promiscuous mode [ 418.840374][ T6480] veth0_macvtap: left promiscuous mode [ 418.845959][ T6480] veth1_vlan: left promiscuous mode [ 418.882015][ T6480] veth0_vlan: left promiscuous mode [ 418.917738][ T55] Bluetooth: hci1: command tx timeout [ 419.669697][ T6480] team0 (unregistering): Port device team_slave_1 removed [ 419.693195][ T6480] team0 (unregistering): Port device team_slave_0 removed [ 419.840511][ T8181] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 419.873437][ T8181] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 419.906837][ T6475] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 419.927038][ T6475] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 420.997253][ T55] Bluetooth: hci1: command tx timeout [ 428.342010][T16216] svc: failed to register nfsdv3 RPC service (errno 111). [ 428.372940][T16216] svc: failed to register nfsaclv3 RPC service (errno 111). [ 440.359625][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.366030][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 442.581430][T16469] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 442.627930][T16473] nbd: socks must be embedded in a SOCK_ITEM attr [ 442.645565][T16469] validate_nla: 2 callbacks suppressed [ 442.645585][T16469] netlink: 'syz.2.2294': attribute type 1 has an invalid length. [ 443.141462][T16493] netlink: zone id is out of range [ 443.169088][T16493] netlink: set zone limit has 8 unknown bytes [ 443.367999][T16495] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2301'. [ 443.408209][T16495] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 443.438321][T16495] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 443.468133][T16495] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 443.495244][T16495] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 443.550896][T16495] bridge0: port 4(batadv0) entered disabled state [ 443.563243][T16495] batadv0 (unregistering): left allmulticast mode [ 443.580486][T16495] batadv0 (unregistering): left promiscuous mode [ 443.590960][T16495] bridge0: port 4(batadv0) entered disabled state [ 443.922303][T16515] netlink: 306 bytes leftover after parsing attributes in process `syz.4.2307'. [ 444.763138][T16528] netlink: zone id is out of range [ 444.799984][T16528] netlink: set zone limit has 8 unknown bytes [ 445.496875][T16563] xs_local_setup_socket: unhandled error (13) connecting to /var/run/rpcbind.sock [ 445.771012][T16568] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2323'. [ 445.795326][T16565] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2323'. [ 445.816860][T16578] netlink: 342 bytes leftover after parsing attributes in process `syz.2.2325'. [ 445.861944][T16578] netlink: 342 bytes leftover after parsing attributes in process `syz.2.2325'. [ 458.042952][T16719] openvswitch: netlink: push_nsh: missing base or metadata attributes [ 458.130384][T16720] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2363'. [ 458.167034][T16720] nbd: must specify at least one socket [ 458.372075][T16728] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2364'. [ 458.428052][T16728] netlink: 342 bytes leftover after parsing attributes in process `syz.0.2364'. [ 458.497666][T16736] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2364'. [ 458.519225][T16733] netlink: 342 bytes leftover after parsing attributes in process `syz.0.2364'. [ 460.860594][T16840] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2390'. [ 460.891521][T16840] ip6gre0: left allmulticast mode [ 461.399377][T16851] netlink: 342 bytes leftover after parsing attributes in process `syz.0.2393'. [ 461.456907][T16862] netlink: 334 bytes leftover after parsing attributes in process `syz.4.2397'. [ 461.588520][ T6477] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 461.700642][ T6477] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 461.789578][ T6477] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 461.888268][ T6477] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 461.991960][ T5853] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 462.016396][ T5853] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 462.037643][ T5853] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 462.064439][ T5853] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 462.072673][ T5853] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 462.085891][ T5853] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 462.486564][ T6477] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 462.502816][ T6477] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 462.516183][ T6477] bond0 (unregistering): Released all slaves [ 462.580954][ T6477] HSR: left promiscuous mode [ 462.619056][ T6477] tipc: Left network mode [ 462.637669][T16895] chnl_net:caif_netlink_parms(): no params data found [ 462.693755][T16895] bridge0: port 1(bridge_slave_0) entered blocking state [ 462.701847][T16895] bridge0: port 1(bridge_slave_0) entered disabled state [ 462.709105][T16895] bridge_slave_0: entered allmulticast mode [ 462.715879][T16895] bridge_slave_0: entered promiscuous mode [ 462.729727][T16895] bridge0: port 2(bridge_slave_1) entered blocking state [ 462.740117][T16895] bridge0: port 2(bridge_slave_1) entered disabled state [ 462.747500][T16895] bridge_slave_1: entered allmulticast mode [ 462.754220][T16895] bridge_slave_1: entered promiscuous mode [ 462.779916][T16895] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 462.800993][T16895] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 462.835039][T16895] team0: Port device team_slave_0 added [ 462.845446][T16895] team0: Port device team_slave_1 added [ 462.878247][T16895] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 462.885376][T16895] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 462.919823][T16895] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 462.936332][ T6477] hsr_slave_0: left promiscuous mode [ 462.943510][ T6477] hsr_slave_1: left promiscuous mode [ 462.952252][ T6477] veth1_macvtap: left promiscuous mode [ 462.959078][ T6477] veth1_vlan: left promiscuous mode [ 462.964367][ T6477] veth0_vlan: left promiscuous mode [ 463.041023][ T6477] team0 (unregistering): Port device team_slave_1 removed [ 463.054218][ T6477] team0 (unregistering): Port device team_slave_0 removed [ 463.092537][T16895] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 463.099753][T16895] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 463.126760][T16895] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 463.174086][T16895] hsr_slave_0: entered promiscuous mode [ 463.180241][T16895] hsr_slave_1: entered promiscuous mode [ 463.258611][T16895] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 463.269680][T16895] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 463.279191][T16895] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 463.289857][T16895] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 463.324212][T16895] bridge0: port 2(bridge_slave_1) entered blocking state [ 463.331380][T16895] bridge0: port 2(bridge_slave_1) entered forwarding state [ 463.338775][T16895] bridge0: port 1(bridge_slave_0) entered blocking state [ 463.345897][T16895] bridge0: port 1(bridge_slave_0) entered forwarding state [ 463.425863][T16895] 8021q: adding VLAN 0 to HW filter on device bond0 [ 463.450649][ T4351] bridge0: port 1(bridge_slave_0) entered disabled state [ 463.460221][ T4351] bridge0: port 2(bridge_slave_1) entered disabled state [ 463.486294][T16895] 8021q: adding VLAN 0 to HW filter on device team0 [ 463.499257][ T8181] bridge0: port 1(bridge_slave_0) entered blocking state [ 463.506330][ T8181] bridge0: port 1(bridge_slave_0) entered forwarding state [ 463.518233][ T8181] bridge0: port 2(bridge_slave_1) entered blocking state [ 463.525333][ T8181] bridge0: port 2(bridge_slave_1) entered forwarding state [ 463.666284][T16895] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 463.821111][T16895] veth0_vlan: entered promiscuous mode [ 463.832430][T16895] veth1_vlan: entered promiscuous mode [ 463.862597][T16895] veth0_macvtap: entered promiscuous mode [ 463.871360][T16895] veth1_macvtap: entered promiscuous mode [ 463.883829][T16895] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 463.894773][T16895] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 463.904703][T16895] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 463.916142][T16895] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 463.926998][T16895] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 463.940532][T16895] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 463.951421][T16895] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 463.961742][T16895] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 463.972462][T16895] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 463.983380][T16895] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 463.993273][T16895] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 464.002128][T16895] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 464.011066][T16895] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 464.020097][T16895] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 464.061569][ T6477] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 464.075405][ T6477] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 464.093073][ T6475] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 464.101714][ T6475] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 464.117267][ T55] Bluetooth: hci0: command tx timeout [ 466.197433][ T55] Bluetooth: hci0: command tx timeout [ 468.277365][ T55] Bluetooth: hci0: command tx timeout [ 470.357239][ T55] Bluetooth: hci0: command tx timeout [ 493.637977][T17251] Bluetooth: hci2: command 0x0406 tx timeout [ 501.799135][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.805579][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 539.717239][T17251] Bluetooth: hci1: command 0x0406 tx timeout [ 563.238993][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.245305][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 585.797229][T17251] Bluetooth: hci0: command 0x0406 tx timeout [ 624.680027][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.686473][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 670.118791][ T30] INFO: task kworker/u8:4:62 blocked for more than 143 seconds. [ 670.126535][ T30] Not tainted 6.12.0-syzkaller-09073-g9f16d5e6f220 #0 [ 670.133883][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 670.142662][ T30] task:kworker/u8:4 state:D stack:25408 pid:62 tgid:62 ppid:2 flags:0x00004000 [ 670.153130][ T30] Workqueue: writeback wb_workfn (flush-8:0) [ 670.159472][ T30] Call Trace: [ 670.162761][ T30] [ 670.165705][ T30] __schedule+0xe58/0x5ad0 [ 670.170308][ T30] ? arch_stack_walk+0x74/0x100 [ 670.175185][ T30] ? __pfx___schedule+0x10/0x10 [ 670.180100][ T30] ? lock_release+0x4e2/0x6f0 [ 670.184794][ T30] ? schedule+0x298/0x350 [ 670.189173][ T30] ? __pfx_lock_release+0x10/0x10 [ 670.194504][ T30] ? schedule+0x1fd/0x350 [ 670.198976][ T30] ? lock_acquire+0x2f/0xb0 [ 670.203499][ T30] ? schedule+0x1fd/0x350 [ 670.208108][ T30] schedule+0xe7/0x350 [ 670.212206][ T30] schedule_preempt_disabled+0x13/0x30 [ 670.217859][ T30] rwsem_down_write_slowpath+0x539/0x12a0 [ 670.223604][ T30] ? __pfx_rwsem_down_write_slowpath+0x10/0x10 [ 670.229806][ T30] ? kasan_save_stack+0x42/0x60 [ 670.234689][ T30] ? kasan_save_stack+0x33/0x60 [ 670.239578][ T30] ? __kasan_slab_alloc+0x89/0x90 [ 670.244650][ T30] ? rcu_is_watching+0x12/0xc0 [ 670.249458][ T30] ? rcu_is_watching+0x12/0xc0 [ 670.254396][ T30] ? ext4_map_blocks+0x352/0x1370 [ 670.259779][ T30] ? lock_acquire+0x2f/0xb0 [ 670.264308][ T30] ? ext4_map_blocks+0x352/0x1370 [ 670.269695][ T30] down_write+0x1d8/0x200 [ 670.274053][ T30] ? __pfx_down_write+0x10/0x10 [ 670.278950][ T30] ext4_map_blocks+0x352/0x1370 [ 670.283818][ T30] ? __pfx_ext4_map_blocks+0x10/0x10 [ 670.289245][ T30] ? rcu_is_watching+0x12/0xc0 [ 670.294370][ T30] ? trace_kmem_cache_alloc+0x2d/0xd0 [ 670.299982][ T30] ? kmem_cache_alloc_noprof+0x174/0x2f0 [ 670.305652][ T30] ? ext4_alloc_io_end_vec+0x2b/0x1c0 [ 670.311154][ T30] ext4_do_writepages+0x19a7/0x3320 [ 670.316373][ T30] ? __pfx_ext4_do_writepages+0x10/0x10 [ 670.321991][ T30] ? trace_cfg80211_return_bss+0x192/0x220 [ 670.327951][ T30] ? do_writepages+0x1b3/0x820 [ 670.332744][ T30] ? ext4_writepages+0x303/0x730 [ 670.337996][ T30] ext4_writepages+0x303/0x730 [ 670.342798][ T30] ? __pfx_ext4_writepages+0x10/0x10 [ 670.348159][ T30] ? __pfx_ext4_writepages+0x10/0x10 [ 670.353475][ T30] do_writepages+0x1b3/0x820 [ 670.358948][ T30] ? ieee80211_parse_ch_switch_ie+0xd6f/0x1f60 [ 670.365155][ T30] ? __pfx_do_writepages+0x10/0x10 [ 670.370469][ T30] ? unwind_next_frame+0xe5d/0x20c0 [ 670.375860][ T30] ? arch_stack_walk+0x74/0x100 [ 670.380959][ T30] ? rcu_is_watching+0x12/0xc0 [ 670.385771][ T30] ? lock_release+0x4e2/0x6f0 [ 670.390537][ T30] ? rcu_is_watching+0x12/0xc0 [ 670.395598][ T30] ? wbc_attach_and_unlock_inode+0xee/0x110 [ 670.401761][ T30] __writeback_single_inode+0x166/0xfa0 [ 670.407440][ T30] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 670.412832][ T30] ? __pfx___writeback_single_inode+0x10/0x10 [ 670.418961][ T30] ? do_raw_spin_unlock+0x172/0x230 [ 670.424180][ T30] writeback_sb_inodes+0x603/0xfa0 [ 670.429396][ T30] ? lock_release+0x4e2/0x6f0 [ 670.434086][ T30] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 670.439809][ T30] ? __pfx_lock_release+0x10/0x10 [ 670.445012][ T30] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 670.450536][ T30] ? _raw_spin_unlock+0x28/0x50 [ 670.455400][ T30] ? move_expired_inodes+0x5a3/0x850 [ 670.460905][ T30] __writeback_inodes_wb+0xff/0x2e0 [ 670.466167][ T30] ? __pfx___writeback_inodes_wb+0x10/0x10 [ 670.472105][ T30] ? queue_io+0x3fe/0x530 [ 670.476467][ T30] wb_writeback+0x73e/0xb80 [ 670.481042][ T30] ? lock_release+0x4d2/0x6f0 [ 670.485738][ T30] ? __pfx_wb_writeback+0x10/0x10 [ 670.490973][ T30] ? get_nr_dirty_inodes+0x171/0x1e0 [ 670.496536][ T30] wb_workfn+0x8c0/0xbc0 [ 670.501013][ T30] ? __pfx_wb_workfn+0x10/0x10 [ 670.505892][ T30] ? lock_release+0x4e2/0x6f0 [ 670.510656][ T30] ? process_one_work+0x7b5/0x1b30 [ 670.515781][ T30] ? process_one_work+0x8bb/0x1b30 [ 670.520998][ T30] ? lock_acquire+0x2f/0xb0 [ 670.525512][ T30] ? process_one_work+0x8bb/0x1b30 [ 670.530722][ T30] process_one_work+0x958/0x1b30 [ 670.535702][ T30] ? __pfx_batadv_nc_worker+0x10/0x10 [ 670.541132][ T30] ? __pfx_process_one_work+0x10/0x10 [ 670.546511][ T30] ? rcu_is_watching+0x12/0xc0 [ 670.551485][ T30] ? assign_work+0x1a0/0x250 [ 670.556093][ T30] worker_thread+0x6c8/0xf00 [ 670.560940][ T30] ? __pfx_worker_thread+0x10/0x10 [ 670.566105][ T30] kthread+0x2c1/0x3a0 [ 670.570290][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 670.575500][ T30] ? __pfx_kthread+0x10/0x10 [ 670.580152][ T30] ret_from_fork+0x45/0x80 [ 670.584671][ T30] ? __pfx_kthread+0x10/0x10 [ 670.589366][ T30] ret_from_fork_asm+0x1a/0x30 [ 670.594167][ T30] [ 670.597740][ T30] INFO: task jbd2/sda1-8:5187 blocked for more than 143 seconds. [ 670.605656][ T30] Not tainted 6.12.0-syzkaller-09073-g9f16d5e6f220 #0 [ 670.613118][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 670.621827][ T30] task:jbd2/sda1-8 state:D stack:26712 pid:5187 tgid:5187 ppid:2 flags:0x00004000 [ 670.632115][ T30] Call Trace: [ 670.635388][ T30] [ 670.638368][ T30] __schedule+0xe58/0x5ad0 [ 670.642798][ T30] ? __pfx___blk_mq_sched_dispatch_requests+0x10/0x10 [ 670.649663][ T30] ? lock_release+0x4e2/0x6f0 [ 670.654357][ T30] ? lock_release+0x4e2/0x6f0 [ 670.659108][ T30] ? __pfx___schedule+0x10/0x10 [ 670.664109][ T30] ? lock_release+0x4e2/0x6f0 [ 670.668898][ T30] ? schedule+0x298/0x350 [ 670.673242][ T30] ? __pfx_lock_release+0x10/0x10 [ 670.678310][ T30] ? __wait_on_bit+0xc9/0x180 [ 670.683017][ T30] ? schedule+0x1fd/0x350 [ 670.687495][ T30] ? lock_acquire+0x2f/0xb0 [ 670.692018][ T30] ? schedule+0x1fd/0x350 [ 670.696337][ T30] schedule+0xe7/0x350 [ 670.700752][ T30] io_schedule+0xbf/0x130 [ 670.705209][ T30] bit_wait_io+0x15/0xe0 [ 670.709669][ T30] __wait_on_bit+0x62/0x180 [ 670.714185][ T30] ? __pfx_bit_wait_io+0x10/0x10 [ 670.719187][ T30] out_of_line_wait_on_bit+0xda/0x110 [ 670.724579][ T30] ? __pfx_out_of_line_wait_on_bit+0x10/0x10 [ 670.730661][ T30] ? __pfx_wake_bit_function+0x10/0x10 [ 670.736130][ T30] ? __pfx___might_resched+0x10/0x10 [ 670.741478][ T30] ? jbd2_journal_commit_transaction+0x31a2/0x6ad0 [ 670.748525][ T30] __wait_on_buffer+0x64/0x70 [ 670.753205][ T30] jbd2_journal_commit_transaction+0x3bfa/0x6ad0 [ 670.760372][ T30] ? __pfx_jbd2_journal_commit_transaction+0x10/0x10 [ 670.768391][ T30] ? debug_object_deactivate+0x13b/0x370 [ 670.774347][ T30] ? trace_irq_enable.constprop.0+0xe6/0x140 [ 670.780455][ T30] ? lock_release+0x4e2/0x6f0 [ 670.785145][ T30] ? __try_to_del_timer_sync+0x116/0x170 [ 670.790879][ T30] ? __pfx_lock_release+0x10/0x10 [ 670.795929][ T30] ? trace_irq_enable.constprop.0+0xe6/0x140 [ 670.802004][ T30] kjournald2+0x1f8/0x760 [ 670.806363][ T30] ? __kthread_parkme+0xb7/0x220 [ 670.811527][ T30] ? __pfx_kjournald2+0x10/0x10 [ 670.816409][ T30] ? __pfx_autoremove_wake_function+0x10/0x10 [ 670.822549][ T30] ? lockdep_hardirqs_on+0x7c/0x110 [ 670.827869][ T30] ? __kthread_parkme+0x148/0x220 [ 670.832915][ T30] ? __pfx_kjournald2+0x10/0x10 [ 670.837838][ T30] kthread+0x2c1/0x3a0 [ 670.841923][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 670.847223][ T30] ? __pfx_kthread+0x10/0x10 [ 670.851841][ T30] ret_from_fork+0x45/0x80 [ 670.856272][ T30] ? __pfx_kthread+0x10/0x10 [ 670.860990][ T30] ret_from_fork_asm+0x1a/0x30 [ 670.865772][ T30] [ 670.869032][ T30] INFO: task syz-executor:5836 blocked for more than 144 seconds. [ 670.876872][ T30] Not tainted 6.12.0-syzkaller-09073-g9f16d5e6f220 #0 [ 670.884433][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 670.893290][ T30] task:syz-executor state:D stack:23728 pid:5836 tgid:5836 ppid:5833 flags:0x00000002 [ 670.903565][ T30] Call Trace: [ 670.907179][ T30] [ 670.910250][ T30] __schedule+0xe58/0x5ad0 [ 670.914685][ T30] ? __pfx_lock_release+0x10/0x10 [ 670.919763][ T30] ? trace_lock_acquire+0x146/0x1e0 [ 670.924989][ T30] ? is_bpf_text_address+0x30/0x1a0 [ 670.930381][ T30] ? bpf_ksym_find+0x124/0x1c0 [ 670.935165][ T30] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 670.941421][ T30] ? __pfx___schedule+0x10/0x10 [ 670.946290][ T30] ? lock_release+0x4e2/0x6f0 [ 670.951059][ T30] ? schedule+0x298/0x350 [ 670.955399][ T30] ? __pfx_lock_release+0x10/0x10 [ 670.960527][ T30] ? __wait_on_bit+0xc9/0x180 [ 670.965300][ T30] ? schedule+0x1fd/0x350 [ 670.969759][ T30] ? lock_acquire+0x2f/0xb0 [ 670.974451][ T30] ? schedule+0x1fd/0x350 [ 670.978869][ T30] schedule+0xe7/0x350 [ 670.982975][ T30] io_schedule+0xbf/0x130 [ 670.987399][ T30] bit_wait_io+0x15/0xe0 [ 670.991687][ T30] __wait_on_bit+0x62/0x180 [ 670.996183][ T30] ? __pfx_bit_wait_io+0x10/0x10 [ 671.001224][ T30] out_of_line_wait_on_bit+0xda/0x110 [ 671.006628][ T30] ? __pfx_out_of_line_wait_on_bit+0x10/0x10 [ 671.013496][ T30] ? __pfx_wake_bit_function+0x10/0x10 [ 671.019054][ T30] do_get_write_access+0x933/0x1270 [ 671.024269][ T30] jbd2_journal_get_write_access+0x1d6/0x280 [ 671.030352][ T30] __ext4_journal_get_write_access+0x6a/0x390 [ 671.036451][ T30] ext4_reserve_inode_write+0x13b/0x270 [ 671.042159][ T30] __ext4_mark_inode_dirty+0x1a4/0x860 [ 671.047715][ T30] ? ext4_dirty_inode+0xd9/0x130 [ 671.052672][ T30] ? __pfx___ext4_mark_inode_dirty+0x10/0x10 [ 671.058692][ T30] ? rcu_is_watching+0x12/0xc0 [ 671.063477][ T30] ? trace_jbd2_handle_start+0x1b9/0x240 [ 671.069202][ T30] ? jbd2__journal_start+0xf6/0x6a0 [ 671.074536][ T30] ? __ext4_journal_start_sb+0x19f/0x660 [ 671.080255][ T30] ? __ext4_journal_start_sb+0x1a8/0x660 [ 671.085908][ T30] ? ext4_dirty_inode+0xa1/0x130 [ 671.090941][ T30] ? __pfx_ext4_dirty_inode+0x10/0x10 [ 671.096328][ T30] ext4_dirty_inode+0xd9/0x130 [ 671.101154][ T30] ? rcu_is_watching+0x12/0xc0 [ 671.105948][ T30] __mark_inode_dirty+0x1f7/0xe60 [ 671.111514][ T30] generic_update_time+0xcf/0xf0 [ 671.116658][ T30] file_update_time+0x17d/0x1c0 [ 671.121601][ T30] ext4_page_mkwrite+0x368/0x1760 [ 671.126646][ T30] ? rcu_is_watching+0x12/0xc0 [ 671.131497][ T30] ? __pfx_ext4_page_mkwrite+0x10/0x10 [ 671.136975][ T30] ? __pfx_lock_release+0x10/0x10 [ 671.142050][ T30] ? vm_normal_page+0x13c/0x2b0 [ 671.146912][ T30] ? __pfx_vm_normal_page+0x10/0x10 [ 671.152313][ T30] ? aa_sk_perm+0x2f5/0xb20 [ 671.156834][ T30] do_page_mkwrite+0x177/0x380 [ 671.161920][ T30] do_wp_page+0xc4b/0x4670 [ 671.166403][ T30] ? trace_lock_acquire+0x146/0x1e0 [ 671.171797][ T30] ? __pte_offset_map+0x42/0x540 [ 671.176866][ T30] ? __pfx_do_wp_page+0x10/0x10 [ 671.181811][ T30] ? rcu_is_watching+0x12/0xc0 [ 671.186773][ T30] ? do_raw_spin_lock+0x12d/0x2c0 [ 671.191909][ T30] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 671.197377][ T30] ? lock_acquire+0x2f/0xb0 [ 671.201894][ T30] ? __handle_mm_fault+0xdfa/0x2a40 [ 671.207278][ T30] __handle_mm_fault+0x1ade/0x2a40 [ 671.212685][ T30] ? lock_vma_under_rcu+0x6b9/0x980 [ 671.218149][ T30] ? __pfx___handle_mm_fault+0x10/0x10 [ 671.223639][ T30] ? __pfx_down_read_trylock+0x10/0x10 [ 671.229195][ T30] handle_mm_fault+0x3fa/0xaa0 [ 671.233978][ T30] do_user_addr_fault+0x60d/0x13f0 [ 671.239306][ T30] exc_page_fault+0x5c/0xc0 [ 671.243876][ T30] asm_exc_page_fault+0x26/0x30 [ 671.248895][ T30] RIP: 0033:0x7f8efe8678fc [ 671.253412][ T30] RSP: 002b:00007ffeee62c710 EFLAGS: 00010202 [ 671.259589][ T30] RAX: 00007f8efcbc8000 RBX: 00005555567062b0 RCX: 0000000000000005 [ 671.267638][ T30] RDX: 1ffffffff0417975 RSI: 00005555566f8ad8 RDI: 0000000000000020 [ 671.275623][ T30] RBP: 00007ffeee62cc10 R08: 00005555566f8ad8 R09: 0000000000002f2e [ 671.284673][ T30] R10: 0000000000000001 R11: 0000000000000246 R12: 00007ffeee62ca60 [ 671.292812][ T30] R13: 0000000000000004 R14: 00007ffeee62c780 R15: 00007ffeee62c850 [ 671.300849][ T30] [ 671.303893][ T30] INFO: task kworker/u8:22:6477 blocked for more than 144 seconds. [ 671.311918][ T30] Not tainted 6.12.0-syzkaller-09073-g9f16d5e6f220 #0 [ 671.319639][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 671.328398][ T30] task:kworker/u8:22 state:D stack:24152 pid:6477 tgid:6477 ppid:2 flags:0x00004000 [ 671.338625][ T30] Workqueue: ext4-rsv-conversion ext4_end_io_rsv_work [ 671.345386][ T30] Call Trace: [ 671.348745][ T30] [ 671.351680][ T30] __schedule+0xe58/0x5ad0 [ 671.356092][ T30] ? __pfx___schedule+0x10/0x10 [ 671.361019][ T30] ? lock_release+0x4e2/0x6f0 [ 671.365700][ T30] ? schedule+0x298/0x350 [ 671.370237][ T30] ? __pfx_lock_release+0x10/0x10 [ 671.375288][ T30] ? __wait_on_bit+0xc9/0x180 [ 671.380228][ T30] ? schedule+0x1fd/0x350 [ 671.384582][ T30] ? lock_acquire+0x2f/0xb0 [ 671.389198][ T30] ? schedule+0x1fd/0x350 [ 671.393539][ T30] schedule+0xe7/0x350 [ 671.397683][ T30] io_schedule+0xbf/0x130 [ 671.402022][ T30] bit_wait_io+0x15/0xe0 [ 671.406252][ T30] __wait_on_bit+0x62/0x180 [ 671.410829][ T30] ? __pfx_bit_wait_io+0x10/0x10 [ 671.415783][ T30] out_of_line_wait_on_bit+0xda/0x110 [ 671.421681][ T30] ? __pfx_out_of_line_wait_on_bit+0x10/0x10 [ 671.427786][ T30] ? __pfx_wake_bit_function+0x10/0x10 [ 671.433260][ T30] do_get_write_access+0x933/0x1270 [ 671.438505][ T30] jbd2_journal_get_write_access+0x1d6/0x280 [ 671.444497][ T30] __ext4_journal_get_write_access+0x6a/0x390 [ 671.450655][ T30] ext4_ext_get_access+0x87/0x120 [ 671.455704][ T30] ext4_ext_map_blocks+0x252d/0x5ad0 [ 671.461041][ T30] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 671.466422][ T30] ? lock_acquire+0x2f/0xb0 [ 671.471007][ T30] ? debug_object_activate+0x149/0x4a0 [ 671.476479][ T30] ? do_raw_spin_unlock+0x172/0x230 [ 671.481837][ T30] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 671.487919][ T30] ? __pfx_ext4_ext_map_blocks+0x10/0x10 [ 671.493578][ T30] ? rcu_is_watching+0x12/0xc0 [ 671.498413][ T30] ? rcu_is_watching+0x12/0xc0 [ 671.503186][ T30] ? trace_lock_acquire+0x146/0x1e0 [ 671.508512][ T30] ? trace_irq_enable.constprop.0+0xe6/0x140 [ 671.514526][ T30] ? ext4_map_blocks+0x352/0x1370 [ 671.519957][ T30] ? lock_acquire+0x2f/0xb0 [ 671.524585][ T30] ? ext4_map_blocks+0x352/0x1370 [ 671.529753][ T30] ? __pfx_down_write+0x10/0x10 [ 671.534621][ T30] ext4_map_blocks+0x457/0x1370 [ 671.539523][ T30] ? __pfx_ext4_map_blocks+0x10/0x10 [ 671.544816][ T30] ? start_this_handle+0xd00/0x1430 [ 671.550246][ T30] ? __pfx_start_this_handle+0x10/0x10 [ 671.555716][ T30] ? rcu_is_watching+0x12/0xc0 [ 671.560667][ T30] ext4_convert_unwritten_extents+0x2b7/0x4c0 [ 671.566760][ T30] ? trace_jbd2_handle_start+0x1b9/0x240 [ 671.572532][ T30] ? __pfx_ext4_convert_unwritten_extents+0x10/0x10 [ 671.579174][ T30] ? __ext4_journal_start_reserved+0x24a/0x530 [ 671.585451][ T30] ? ext4_convert_unwritten_io_end_vec+0x3d/0x280 [ 671.592092][ T30] ext4_convert_unwritten_io_end_vec+0x127/0x280 [ 671.598476][ T30] ? trace_irq_enable.constprop.0+0xe6/0x140 [ 671.604446][ T30] ext4_end_io_rsv_work+0x2ca/0x690 [ 671.609736][ T30] ? rcu_is_watching+0x12/0xc0 [ 671.614515][ T30] ? __pfx_ext4_end_io_rsv_work+0x10/0x10 [ 671.620296][ T30] ? __schedule+0xe60/0x5ad0 [ 671.625211][ T30] ? lock_acquire+0x2f/0xb0 [ 671.629981][ T30] ? process_one_work+0x8bb/0x1b30 [ 671.635113][ T30] process_one_work+0x958/0x1b30 [ 671.640128][ T30] ? __pfx_process_one_work+0x10/0x10 [ 671.645517][ T30] ? rcu_is_watching+0x12/0xc0 [ 671.650407][ T30] ? assign_work+0x1a0/0x250 [ 671.655033][ T30] worker_thread+0x6c8/0xf00 [ 671.659704][ T30] ? __pfx_worker_thread+0x10/0x10 [ 671.664927][ T30] kthread+0x2c1/0x3a0 [ 671.669119][ T30] ? trace_irq_enable.constprop.0+0xe6/0x140 [ 671.675122][ T30] ? __pfx_kthread+0x10/0x10 [ 671.679756][ T30] ret_from_fork+0x45/0x80 [ 671.684182][ T30] ? __pfx_kthread+0x10/0x10 [ 671.689029][ T30] ret_from_fork_asm+0x1a/0x30 [ 671.693837][ T30] [ 671.696890][ T30] INFO: task syz.4.2409:17073 blocked for more than 144 seconds. [ 671.704913][ T30] Not tainted 6.12.0-syzkaller-09073-g9f16d5e6f220 #0 [ 671.713305][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 671.722049][ T30] task:syz.4.2409 state:D stack:27248 pid:17073 tgid:17071 ppid:10121 flags:0x00004004 [ 671.732803][ T30] Call Trace: [ 671.736092][ T30] [ 671.739067][ T30] __schedule+0xe58/0x5ad0 [ 671.743675][ T30] ? __pfx_blk_mq_flush_plug_list+0x10/0x10 [ 671.749682][ T30] ? __pfx___schedule+0x10/0x10 [ 671.754550][ T30] ? lock_release+0x4e2/0x6f0 [ 671.759309][ T30] ? schedule+0x298/0x350 [ 671.763647][ T30] ? __pfx_lock_release+0x10/0x10 [ 671.768775][ T30] ? schedule+0x1fd/0x350 [ 671.773125][ T30] ? lock_acquire+0x2f/0xb0 [ 671.777687][ T30] ? schedule+0x1fd/0x350 [ 671.782048][ T30] schedule+0xe7/0x350 [ 671.786120][ T30] io_schedule+0xbf/0x130 [ 671.790680][ T30] folio_wait_bit_common+0x3d8/0x9b0 [ 671.795994][ T30] ? folio_wait_bit_common+0x13c/0x9b0 [ 671.801525][ T30] ? __pfx_folio_wait_bit_common+0x10/0x10 [ 671.807567][ T30] ? __pfx_filemap_get_folios_tag+0x10/0x10 [ 671.813474][ T30] ? __ext4_journal_start_sb+0x19f/0x660 [ 671.819151][ T30] ? __pfx_wake_page_function+0x10/0x10 [ 671.824706][ T30] ? __pfx___might_resched+0x10/0x10 [ 671.830403][ T30] ? lock_release+0x4e2/0x6f0 [ 671.835207][ T30] mpage_prepare_extent_to_map+0xa16/0x1470 [ 671.841194][ T30] ? start_this_handle+0xf6c/0x1430 [ 671.846408][ T30] ? __pfx_mpage_prepare_extent_to_map+0x10/0x10 [ 671.852859][ T30] ? __ext4_journal_start_sb+0x19f/0x660 [ 671.858565][ T30] ? __ext4_journal_start_sb+0x1a8/0x660 [ 671.864195][ T30] ? ext4_do_writepages+0xc18/0x3320 [ 671.869566][ T30] ext4_do_writepages+0xd00/0x3320 [ 671.874702][ T30] ? fs_reclaim_acquire+0xae/0x150 [ 671.879942][ T30] ? __pfx_ext4_do_writepages+0x10/0x10 [ 671.885510][ T30] ? rcu_is_watching+0x12/0xc0 [ 671.890398][ T30] ? do_writepages+0x1b3/0x820 [ 671.895308][ T30] ? ext4_writepages+0x303/0x730 [ 671.900331][ T30] ext4_writepages+0x303/0x730 [ 671.905119][ T30] ? __pfx_ext4_writepages+0x10/0x10 [ 671.910509][ T30] ? lock_release+0x4e2/0x6f0 [ 671.915212][ T30] ? percpu_counter_add_batch+0x174/0x1e0 [ 671.921126][ T30] ? rcu_is_watching+0x12/0xc0 [ 671.925913][ T30] ? __pfx_ext4_writepages+0x10/0x10 [ 671.931586][ T30] do_writepages+0x1b3/0x820 [ 671.936309][ T30] ? __pfx_do_writepages+0x10/0x10 [ 671.941488][ T30] ? wbc_attach_fdatawrite_inode+0x13a/0x190 [ 671.947574][ T30] ? __pfx_lock_release+0x10/0x10 [ 671.952612][ T30] ? do_raw_spin_lock+0x12d/0x2c0 [ 671.957796][ T30] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 671.963216][ T30] ? lock_acquire+0x2f/0xb0 [ 671.967827][ T30] ? wbc_attach_fdatawrite_inode+0x24/0x190 [ 671.973743][ T30] ? do_raw_spin_unlock+0x172/0x230 [ 671.979002][ T30] filemap_fdatawrite_wbc+0x104/0x160 [ 671.984390][ T30] __filemap_fdatawrite_range+0xb3/0xf0 [ 671.990042][ T30] ? __pfx___filemap_fdatawrite_range+0x10/0x10 [ 671.996434][ T30] file_write_and_wait_range+0xca/0x140 [ 672.002053][ T30] ext4_sync_file+0x290/0xf30 [ 672.006753][ T30] ? __pfx___up_read+0x10/0x10 [ 672.011715][ T30] ? __pfx_ext4_sync_file+0x10/0x10 [ 672.016949][ T30] vfs_fsync_range+0x136/0x220 [ 672.021765][ T30] __do_sys_msync+0x3c6/0x5b0 [ 672.026462][ T30] do_syscall_64+0xcd/0x250 [ 672.031503][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 672.037895][ T30] RIP: 0033:0x7fee57f7e819 [ 672.042431][ T30] RSP: 002b:00007fee58e19038 EFLAGS: 00000246 ORIG_RAX: 000000000000001a [ 672.051342][ T30] RAX: ffffffffffffffda RBX: 00007fee58135fa0 RCX: 00007fee57f7e819 [ 672.059387][ T30] RDX: 0000000000000006 RSI: 0000002000000005 RDI: 0000000000000000 [ 672.067473][ T30] RBP: 00007fee57ff175e R08: 0000000000000000 R09: 0000000000000000 [ 672.075452][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 672.083462][ T30] R13: 0000000000000001 R14: 00007fee58135fa0 R15: 00007fff4f133298 [ 672.091519][ T30] [ 672.094538][ T30] INFO: task syz-executor:17225 blocked for more than 145 seconds. [ 672.102627][ T30] Not tainted 6.12.0-syzkaller-09073-g9f16d5e6f220 #0 [ 672.110017][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 672.118745][ T30] task:syz-executor state:D stack:26712 pid:17225 tgid:17225 ppid:5836 flags:0x00004000 [ 672.129019][ T30] Call Trace: [ 672.132297][ T30] [ 672.135462][ T30] __schedule+0xe58/0x5ad0 [ 672.140153][ T30] ? stack_trace_save+0x95/0xd0 [ 672.145036][ T30] ? __pfx_stack_trace_save+0x10/0x10 [ 672.150540][ T30] ? __pfx___schedule+0x10/0x10 [ 672.155405][ T30] ? lock_release+0x4e2/0x6f0 [ 672.160163][ T30] ? schedule+0x298/0x350 [ 672.164527][ T30] ? __pfx_lock_release+0x10/0x10 [ 672.169654][ T30] ? __wait_on_bit+0xc9/0x180 [ 672.174353][ T30] ? schedule+0x1fd/0x350 [ 672.178746][ T30] ? lock_acquire+0x2f/0xb0 [ 672.183259][ T30] ? schedule+0x1fd/0x350 [ 672.187684][ T30] schedule+0xe7/0x350 [ 672.191762][ T30] io_schedule+0xbf/0x130 [ 672.196083][ T30] bit_wait_io+0x15/0xe0 [ 672.200624][ T30] __wait_on_bit+0x62/0x180 [ 672.205368][ T30] ? __pfx_bit_wait_io+0x10/0x10 [ 672.210458][ T30] out_of_line_wait_on_bit+0xda/0x110 [ 672.215849][ T30] ? __pfx_out_of_line_wait_on_bit+0x10/0x10 [ 672.221896][ T30] ? __pfx_wake_bit_function+0x10/0x10 [ 672.227405][ T30] do_get_write_access+0x933/0x1270 [ 672.232622][ T30] jbd2_journal_get_write_access+0x1d6/0x280 [ 672.238631][ T30] __ext4_journal_get_write_access+0x6a/0x390 [ 672.244848][ T30] __ext4_new_inode+0x1737/0x4e90 [ 672.249969][ T30] ? __pfx___ext4_new_inode+0x10/0x10 [ 672.255362][ T30] ? __pfx___dquot_initialize+0x10/0x10 [ 672.260942][ T30] ext4_mkdir+0x283/0xb70 [ 672.265283][ T30] ? __pfx_ext4_mkdir+0x10/0x10 [ 672.270166][ T30] ? security_inode_permission+0xbf/0x260 [ 672.275896][ T30] ? inode_permission+0xdd/0x5f0 [ 672.281124][ T30] vfs_mkdir+0x57d/0x860 [ 672.285399][ T30] do_mkdirat+0x301/0x3a0 [ 672.289772][ T30] ? __pfx_do_mkdirat+0x10/0x10 [ 672.294652][ T30] ? getname_flags.part.0+0x1c5/0x550 [ 672.300149][ T30] __x64_sys_mkdir+0xef/0x140 [ 672.305180][ T30] do_syscall_64+0xcd/0x250 [ 672.309739][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 672.315645][ T30] RIP: 0033:0x7f91fad7d087 [ 672.320166][ T30] RSP: 002b:00007ffdc551db98 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 672.328633][ T30] RAX: ffffffffffffffda RBX: 00007ffdc551dce2 RCX: 00007f91fad7d087 [ 672.336594][ T30] RDX: 00000000021ee716 RSI: 00000000000001c0 RDI: 00007ffdc551dcd0 [ 672.344739][ T30] RBP: f49998db0aa753ff R08: 0000000000000004 R09: 0000000000000001 [ 672.352750][ T30] R10: 0000000000000001 R11: 0000000000000246 R12: 8421084210842109 [ 672.360804][ T30] R13: 00007ffdc551dce2 R14: 00007f91fae12f00 R15: 00000000021ee716 [ 672.368813][ T30] [ 672.371823][ T30] INFO: lockdep is turned off. [ 672.376573][ T30] NMI backtrace for cpu 1 [ 672.380882][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.12.0-syzkaller-09073-g9f16d5e6f220 #0 [ 672.391024][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 672.401064][ T30] Call Trace: [ 672.404331][ T30] [ 672.407261][ T30] dump_stack_lvl+0x116/0x1f0 [ 672.411961][ T30] nmi_cpu_backtrace+0x27b/0x390 [ 672.416907][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 672.422899][ T30] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 672.428892][ T30] watchdog+0xf0c/0x1240 [ 672.433138][ T30] ? __pfx_watchdog+0x10/0x10 [ 672.437831][ T30] ? lockdep_hardirqs_on+0x7c/0x110 [ 672.443029][ T30] ? __kthread_parkme+0x148/0x220 [ 672.448058][ T30] ? __pfx_watchdog+0x10/0x10 [ 672.452736][ T30] kthread+0x2c1/0x3a0 [ 672.456805][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 672.462018][ T30] ? __pfx_kthread+0x10/0x10 [ 672.466608][ T30] ret_from_fork+0x45/0x80 [ 672.471022][ T30] ? __pfx_kthread+0x10/0x10 [ 672.475611][ T30] ret_from_fork_asm+0x1a/0x30 [ 672.480392][ T30] [ 672.483818][ T30] Sending NMI from CPU 1 to CPUs 0: [ 672.489371][ C0] NMI backtrace for cpu 0 [ 672.489384][ C0] CPU: 0 UID: 0 PID: 4351 Comm: kworker/u8:9 Not tainted 6.12.0-syzkaller-09073-g9f16d5e6f220 #0 [ 672.489410][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 672.489424][ C0] Workqueue: events_unbound cfg80211_wiphy_work [ 672.489452][ C0] RIP: 0010:unwind_next_frame+0xac7/0x20c0 [ 672.489479][ C0] Code: ff ff e8 0c e8 c2 ff e9 f0 f8 ff ff 4d 8d 7e f8 ba 08 00 00 00 4c 89 ef 4c 89 4c 24 20 4c 89 fe 48 89 4c 24 18 e8 29 f3 ff ff <4d> 8d 45 34 84 c0 0f 84 81 f8 ff ff 4c 89 ff e8 05 eb ff ff 48 89 [ 672.489499][ C0] RSP: 0018:ffffc9000fc96ee8 EFLAGS: 00000292 [ 672.489515][ C0] RAX: 0000000000000001 RBX: 0000000000000001 RCX: ffffc9000fc98000 [ 672.489528][ C0] RDX: ffffc9000fc97201 RSI: ffffc9000fc972a0 RDI: ffffc9000fc96f58 [ 672.489543][ C0] RBP: ffffc9000fc96fa0 R08: ffffffff90dcd954 R09: ffffffff90dcd8fe [ 672.489558][ C0] R10: ffffc9000fc96f58 R11: 000000000000f068 R12: ffffc9000fc96fa8 [ 672.489572][ C0] R13: ffffc9000fc96f58 R14: ffffc9000fc972a8 R15: ffffc9000fc972a0 [ 672.489587][ C0] FS: 0000000000000000(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 672.489608][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 672.489623][ C0] CR2: 00005627ea0fd600 CR3: 000000000dd7e000 CR4: 00000000003526f0 [ 672.489637][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 672.489650][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 672.489663][ C0] Call Trace: [ 672.489669][ C0] [ 672.489676][ C0] ? nmi_cpu_backtrace+0x1d8/0x390 [ 672.489707][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 672.489737][ C0] ? nmi_handle+0x1a7/0x5c0 [ 672.489760][ C0] ? unwind_next_frame+0xac7/0x20c0 [ 672.489782][ C0] ? default_do_nmi+0x6a/0x160 [ 672.489810][ C0] ? exc_nmi+0x170/0x1e0 [ 672.489836][ C0] ? end_repeat_nmi+0xf/0x53 [ 672.489865][ C0] ? unwind_next_frame+0xac7/0x20c0 [ 672.489887][ C0] ? unwind_next_frame+0xac7/0x20c0 [ 672.489910][ C0] ? unwind_next_frame+0xac7/0x20c0 [ 672.489931][ C0] [ 672.489938][ C0] [ 672.489944][ C0] ? kasan_save_stack+0x33/0x60 [ 672.489971][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 672.490000][ C0] arch_stack_walk+0x95/0x100 [ 672.490025][ C0] ? kasan_save_stack+0x33/0x60 [ 672.490050][ C0] ? cfg80211_inform_single_bss_data+0x5b0/0x1e40 [ 672.490074][ C0] stack_trace_save+0x95/0xd0 [ 672.490099][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 672.490124][ C0] ? ret_from_fork_asm+0x1a/0x30 [ 672.490156][ C0] kasan_save_stack+0x33/0x60 [ 672.490184][ C0] ? kasan_save_stack+0x33/0x60 [ 672.490226][ C0] kasan_save_track+0x14/0x30 [ 672.490249][ C0] __kasan_kmalloc+0xaa/0xb0 [ 672.490273][ C0] __kmalloc_noprof+0x1e8/0x410 [ 672.490298][ C0] ? rcu_is_watching+0x12/0xc0 [ 672.490325][ C0] cfg80211_inform_single_bss_data+0x5b0/0x1e40 [ 672.490351][ C0] ? __pfx_cfg80211_inform_single_bss_data+0x10/0x10 [ 672.490381][ C0] ? ieee802_11_parse_elems_full+0xe6/0x1630 [ 672.490408][ C0] ? stack_trace_save+0x95/0xd0 [ 672.490432][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 672.490458][ C0] ? stack_depot_save_flags+0x28/0x900 [ 672.490487][ C0] ? cfg80211_inform_bss_data+0x254/0x3e40 [ 672.490508][ C0] cfg80211_inform_bss_data+0x254/0x3e40 [ 672.490531][ C0] ? __kmalloc_noprof+0x1e8/0x410 [ 672.490555][ C0] ? ieee802_11_parse_elems_full+0xe6/0x1630 [ 672.490580][ C0] ? ieee80211_ibss_rx_queued_mgmt+0xc54/0x3040 [ 672.490605][ C0] ? ieee80211_iface_work+0xc0b/0xf00 [ 672.490630][ C0] ? worker_thread+0x6c8/0xf00 [ 672.490649][ C0] ? kthread+0x2c1/0x3a0 [ 672.490672][ C0] ? ret_from_fork+0x45/0x80 [ 672.490690][ C0] ? ret_from_fork_asm+0x1a/0x30 [ 672.490719][ C0] ? __pfx_cfg80211_inform_bss_data+0x10/0x10 [ 672.490742][ C0] ? cfg80211_defragment_element+0x22e/0x2e0 [ 672.490773][ C0] ? ieee80211_mle_parse_link+0x849/0x1000 [ 672.490805][ C0] ? trace_kmalloc+0x2d/0xd0 [ 672.490831][ C0] ? cfg80211_defragment_element+0x22e/0x2e0 [ 672.490861][ C0] ? rcu_is_watching+0x12/0xc0 [ 672.490887][ C0] cfg80211_inform_bss_frame_data+0x252/0x8a0 [ 672.490911][ C0] ? ieee80211_bss_info_update+0x1cf/0xab0 [ 672.490938][ C0] ieee80211_bss_info_update+0x311/0xab0 [ 672.490964][ C0] ? __pfx_ieee80211_bss_info_update+0x10/0x10 [ 672.490989][ C0] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 672.491012][ C0] ? ieee80211_ibss_rx_queued_mgmt+0x191c/0x3040 [ 672.491040][ C0] ? ieee80211_mandatory_rates+0x1ab/0x220 [ 672.491070][ C0] ieee80211_ibss_rx_queued_mgmt+0x1956/0x3040 [ 672.491100][ C0] ? __pfx_ieee80211_ibss_rx_queued_mgmt+0x10/0x10 [ 672.491125][ C0] ? __pfx___mutex_trylock_common+0x10/0x10 [ 672.491147][ C0] ? cfg80211_wiphy_work+0x9d/0x560 [ 672.491176][ C0] ? rcu_is_watching+0x12/0xc0 [ 672.491199][ C0] ? lock_release+0x4e2/0x6f0 [ 672.491217][ C0] ? kcov_remote_start+0x370/0x6e0 [ 672.491241][ C0] ? lock_acquire+0x2f/0xb0 [ 672.491260][ C0] ? rcu_is_watching+0x12/0xc0 [ 672.491283][ C0] ? trace_irq_enable.constprop.0+0xe6/0x140 [ 672.491306][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 672.491329][ C0] ieee80211_iface_work+0xc0b/0xf00 [ 672.491357][ C0] cfg80211_wiphy_work+0x3de/0x560 [ 672.491381][ C0] process_one_work+0x958/0x1b30 [ 672.491404][ C0] ? __pfx_cfg80211_wiphy_work+0x10/0x10 [ 672.491428][ C0] ? __pfx_process_one_work+0x10/0x10 [ 672.491447][ C0] ? rcu_is_watching+0x12/0xc0 [ 672.491473][ C0] ? assign_work+0x1a0/0x250 [ 672.491503][ C0] worker_thread+0x6c8/0xf00 [ 672.491525][ C0] ? __kthread_parkme+0x148/0x220 [ 672.491549][ C0] ? __pfx_worker_thread+0x10/0x10 [ 672.491569][ C0] kthread+0x2c1/0x3a0 [ 672.491591][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 672.491610][ C0] ? __pfx_kthread+0x10/0x10 [ 672.491634][ C0] ret_from_fork+0x45/0x80 [ 672.491652][ C0] ? __pfx_kthread+0x10/0x10 [ 672.491675][ C0] ret_from_fork_asm+0x1a/0x30 [ 672.491707][ C0] [ 672.492492][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 673.073686][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.12.0-syzkaller-09073-g9f16d5e6f220 #0 [ 673.083836][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 673.093885][ T30] Call Trace: [ 673.097155][ T30] [ 673.100080][ T30] dump_stack_lvl+0x3d/0x1f0 [ 673.104675][ T30] panic+0x71d/0x800 [ 673.108575][ T30] ? __pfx_panic+0x10/0x10 [ 673.112992][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 673.118365][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 673.124350][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 673.129719][ T30] ? watchdog+0xd76/0x1240 [ 673.134131][ T30] ? watchdog+0xd69/0x1240 [ 673.138544][ T30] watchdog+0xd87/0x1240 [ 673.142784][ T30] ? __pfx_watchdog+0x10/0x10 [ 673.147458][ T30] ? lockdep_hardirqs_on+0x7c/0x110 [ 673.152652][ T30] ? __kthread_parkme+0x148/0x220 [ 673.157677][ T30] ? __pfx_watchdog+0x10/0x10 [ 673.162356][ T30] kthread+0x2c1/0x3a0 [ 673.166432][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 673.171628][ T30] ? __pfx_kthread+0x10/0x10 [ 673.176222][ T30] ret_from_fork+0x45/0x80 [ 673.180632][ T30] ? __pfx_kthread+0x10/0x10 [ 673.185220][ T30] ret_from_fork_asm+0x1a/0x30 [ 673.189992][ T30] [ 673.193288][ T30] Kernel Offset: disabled [ 673.197598][ T30] Rebooting in 86400 seconds..