last executing test programs: 9m59.012801535s ago: executing program 32 (id=10): r0 = socket(0x2, 0x6, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffefffffffffa, 0x5) getsockopt$auto(r0, 0x10d, 0xa, 0x0, &(0x7f00000000c0)=0x4) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000001280)='./cgroup/cpu.stat\x00', 0x1c1800, 0x0) semget$auto(0x8b, 0x1f, 0x9) getpgid(0xffffffffffffffff) socket(0x2, 0x1, 0x0) socket(0x1f, 0xa, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_GTP_CMD_ECHOREQ(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYRESOCT=r1, @ANYRES16=0x0, @ANYBLOB="030225bd7000ffdbdf25030000000800040000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) socket(0xa, 0x3, 0xff) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0xa, 0x801, 0x84) semctl$auto(0x1ff, 0x2, 0x13, 0x4) setsockopt$auto(0x3, 0x10000000084, 0x77, 0x0, 0x8) connect$auto(0x3, &(0x7f0000000140), 0x55) mmap$auto(0x0, 0x2020009, 0x3, 0xd9, 0xfffffffffffffffa, 0x8000) process_vm_readv$auto(0x0, 0x0, 0x80, 0x0, 0x7, 0x0) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x2d}, 0x7}, 0x3, 0x0) ioperm$auto(0x7, 0x8, 0x3) mlockall$auto(0x3) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) setsockopt$auto(0x3, 0x0, 0xf, 0x0, 0xb) mmap$auto(0x0, 0x9, 0x3ff57696, 0x9b72, 0x2, 0x8000000000008000) io_uring_setup$auto(0x6, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8, 0x0) ioperm$auto(0x7, 0x6, 0x2) mmap$auto(0x0, 0x2020009, 0x6, 0xeb1, 0x7, 0x0) 9m58.597231432s ago: executing program 33 (id=11): r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x20000, 0x0) ioctl$auto_SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000004900)=0x40000) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000002540)='/sys/fs/btrfs/features/free_space_tree\x00', 0x100, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f00000001c0)=""/150, 0x96) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_SET_MAC_ACL(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200010}, 0xc, &(0x7f0000000100)={&(0x7f0000000140)={0x30, r3, 0x800, 0x70bd26, 0x25dfdbf9, {}, [@NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0xa}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0xc031}]}, 0x30}, 0x1, 0x0, 0x0, 0x4008800}, 0x4049884) 8m47.668485113s ago: executing program 5 (id=192): mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) io_uring_setup$auto(0x1, 0x0) futex$auto(0x0, 0x6, 0x8, 0x0, 0x0, 0xffffffd6) syz_genetlink_get_family_id$auto_seg6(&(0x7f0000000080), 0xffffffffffffffff) tkill$auto(0x1, 0x7) close_range$auto(0x2, 0x8000, 0x0) io_uring_setup$auto(0x6, 0x0) mbind$auto(0x0, 0x100000004, 0x4, 0x0, 0x20000000000006, 0x2) 8m47.081669344s ago: executing program 5 (id=194): unlink$auto(&(0x7f0000000000)='./cgroup\x00') 8m46.754364982s ago: executing program 34 (id=194): unlink$auto(&(0x7f0000000000)='./cgroup\x00') 8m31.070904755s ago: executing program 35 (id=210): select$auto(0x7, 0x0, &(0x7f0000000080)={[0x209f, 0xe9e, 0x4, 0x15, 0x1000, 0x100000001, 0xa, 0xf, 0x0, 0x0, 0xe, 0x9, 0x101, 0xff, 0x2, 0x80080001]}, 0x0, 0x0) 7m46.152815672s ago: executing program 36 (id=448): read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, &(0x7f0000000080)=""/174, 0xae) 7m43.39267425s ago: executing program 37 (id=462): socket(0x1e, 0x4, 0x0) mmap$auto(0x0, 0x400005, 0xfffffffffffffffe, 0x9b72, 0x2, 0x8000) bind$auto(0x3, &(0x7f0000000000), 0x68) sendmsg$auto_WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x4008810}, 0x20008000) socket(0x2, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000080), 0x6b) connect$auto(0x3, &(0x7f00000000c0), 0x55) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) write$auto(0x3, 0x0, 0xfdef) madvise$auto(0x0, 0xffffffffffff0001, 0x15) sendmmsg$auto(0x3, &(0x7f0000000000)={{0x0, 0x2, 0x0, 0x106, 0x0, 0x1, 0x697b}, 0xed7138c}, 0x9a6, 0xe000) unshare$auto(0x40000080) io_setup$auto(0x8001, &(0x7f0000000040)=0x10) kcmp$auto(0x5, 0x6, 0xc, 0x1d, 0x40) socket(0x2, 0x3, 0x106) mmap$auto(0x0, 0x400005, 0xfffffffffffffffe, 0x9b72, 0xc76, 0x8000) getsockopt$auto(0x3, 0xff, 0x20, 0x0, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mmap$auto(0x0, 0x8, 0x4000000000df, 0x44eb1, 0x6, 0x300000000000) mmap$auto(0xfffffffffffffffb, 0x8, 0x0, 0x11, 0x7f, 0x3) kexec_load$auto(0x2, 0x7, 0x0, 0x4) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) setresuid$auto(0x2, 0x5, 0x200) open_by_handle_at$auto(0x0, 0xfffffffffffffffc, 0x3) sysfs$auto(0x2, 0x100000000000034, 0x0) fsopen$auto(0x0, 0x1) mmap$auto(0x7a, 0xfc00000000000000, 0x6, 0x80000010, 0x4, 0x5) mremap$auto(0x0, 0x7, 0x3fd6, 0x3, 0x420000000) 7m34.283415828s ago: executing program 38 (id=487): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socket(0x10, 0x2, 0x0) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="c40b000000000000000000000000000000000000009569e9000000000000"], 0x24}, 0x1, 0x0, 0x0, 0x40000021}, 0x8004) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1c"], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f0000000180)='/proc/thread-self/net/dev_snmp6/bond0\x00', 0x121040, 0x0) socket(0x11, 0xa, 0x300) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) futex$auto(0x0, 0x8d, 0x4, 0x0, 0x0, 0x1e90) r0 = openat$auto_qrtr_tun_ops_tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) write$auto_qrtr_tun_ops_tun(r0, &(0x7f0000000080)="01", 0x1) setsockopt$auto(0x3, 0x1, 0x28, 0x0, 0x808) mmap$auto(0x0, 0x20009, 0x10000000000df, 0xeb2, 0x401, 0x8000) io_uring_setup$auto(0x6, 0x0) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x8, 0x1000000004, 0x9b72, 0x2, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0x23, 0x80805, 0x0) getsockopt$auto(0x6, 0x113, 0x7, 0xfffffffffffffffe, 0x0) r1 = openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/per_cpu/cpu1/trace_pipe_raw\x00', 0x10d080, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/nbd11/trace/act_mask\x00', 0x129982, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r2, &(0x7f0000000080)=""/174, 0xae) openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/uptime\x00', 0x40082, 0x0) mmap$auto(0x0, 0x11d, 0xdf, 0x2eb1, 0x401, 0x8000) read$auto(0x3, 0x0, 0x80) read$auto_tracing_buffers_fops_trace(r1, &(0x7f0000000040)=""/111, 0x6f) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmmsg$auto(0x3, &(0x7f0000000040)={{0x0, 0x2, &(0x7f0000000080)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x7}, 0x7}, 0x18, 0x0) 7m31.697197252s ago: executing program 39 (id=499): symlink$auto(&(0x7f00000001c0)='-\x00', &(0x7f0000000280)=')s:\x00') unlink$auto(&(0x7f0000000300)=')s:\x00') close_range$auto(0x0, 0xfffffffffffff000, 0x2) r0 = openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, &(0x7f0000002640), 0x0, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) getcwd$auto(0x0, 0xfffffffffffffff4) move_mount$auto(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x277) ioctl$auto_USB_RAW_IOCTL_INIT(r0, 0x41015500, &(0x7f0000000140)={"a7a018b09bb196a05739a38a73473b93f5452886bc599ef976a84a71a5dc79483a251405ce72a9af15390e93a8760df83859e16320e8d0b1361f13d1dc2183c5c2d1f50d58396aa98d3504ca020000001964249251e57f404417c419b0e3974dc2a89edac932b8859c767780d65e849700", "e600d778751f5f9e03e1f2b96e39a8ac08de7e036d650e2184857e6b64f6a2c7fb08e7f5ce3828fb4e9498c076bef49c99c9cd91332e12b53664dc20fa879020fbd184b8d300c13be6e57970685ce029fb2387ae6e132c1c6adbcfbd873a3b925d397a08fb733e19ef5ec4f40b0b453c72efd18b8a9e9f3d12c5e44468922beb", 0x5}) ioctl$auto_USB_RAW_IOCTL_RUN(r0, 0x5501, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000040), 0xffffffffffffffff) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/devices/virtual/block/loop10/mq/0/nr_tags\x00', 0x0, 0x0) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYRESHEX=r0, @ANYRES16=r2, @ANYBLOB="01002bbd7000fcdbdf250400000005000b002e000000", @ANYBLOB="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", @ANYRESHEX=0x0], 0x1c}}, 0x44820) open(&(0x7f0000000000)='.\x00', 0x72000, 0x160) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00') mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) prctl$auto(0x28, 0x1, 0x8b5, 0x2, 0x1000000000001) socket(0x28, 0x1, 0x0) setsockopt$auto(0x1, 0x1, 0x12, &(0x7f0000000040)='\x00\x89e\xad\x97\xc5\xe8\x91g\xc1\xceE\xea=\x0f\xf4\xba4\x05>y/21\xfd\'\xc7\x1c\xaeV`\xc7^\x05\"H\xb8\x12\x99\x1fF\xdc\xc4\x02FV\x04D&9?\xa8d\xc97B\x9f)\xc6\xbb\x15_\xfd\xa5\xaf\xf8\xb8\x8a\x186\xa9\x0eY;\x9a\xe32T\xddn\xa6zK\xef\xf7\x04\x81\xb4\xb7;\x12\x1ch$\xbd\xd1x\x15\xa8\x9c\xba\x83\xa7\xbdwf8\xc03z|\xcd\xbc\xa1+8\xcet\x960\a\x80\x88!\x9e\x96\xcd\xb5oB\xc1L\xb2\xb1\xe6\xf9\x92\xd4\xcd\v0|G\xb7\xc3+\xb5\xa9\xb4\x05>ry\xa1\xf1)#\xc0\x8d(', 0xbb) mmap$auto(0x3ffffe, 0x20000000000000, 0xe1, 0xbd6, 0x2, 0x7fff) socket(0x23, 0x80805, 0x0) memfd_secret$auto(0x0) socketpair$auto(0x1, 0x7, 0x8000000000000000, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) socket$nl_generic(0x10, 0x3, 0x10) memfd_secret$auto(0x0) socket(0x2, 0x5, 0x0) socket(0x2b, 0x1, 0x1) socket$nl_generic(0x10, 0x3, 0x10) 7m2.525710938s ago: executing program 40 (id=652): openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/user/max_fanotify_groups\x00', 0x20202, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0x0) socket(0x15, 0x5, 0x1) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0x7ffffffffffffffc, 0xc) prctl$auto(0x43, 0x17, 0x0, 0x0, 0x0) open(&(0x7f00000000c0)='./cgroup\x00', 0x0, 0xb5d1af1605322df2) socket(0x10, 0x2, 0x0) r0 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000006140), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_LINKINFO_SET(0xffffffffffffffff, &(0x7f0000006800)={0x0, 0x0, &(0x7f00000067c0)={&(0x7f0000006740)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="0100dbdf25030061703000"/22], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004) statmount$auto(0x0, &(0x7f0000000180)={0x0, 0x1, 0x9, 0xf, 0x3b, 0x4909b6fb, 0x1ffde, 0x4, 0x6, 0x2, 0x9, 0x3, 0x6, 0x4, 0xb4, 0x9, 0x2, 0x10000, 0x80, 0x7, 0x40000, 0x7, 0x2000, 0x200, 0x0, 0x84, [0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x100, 0xa, 0x70624ce7, 0x0, 0x6, 0xb, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0xfffffffffffffffd, 0x7, 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x400000000005b8, 0xc, 0x0, 0x804, 0x0, 0x7, 0xffffffffffffffff, 0x5, 0x8000000000008, 0xfffffffffffffffc, 0x3, 0xa38, 0x4, 0x4000000000000, 0xfffffffffffffffc, 0x2, 0x3ffffffffc, 0x0, 0x2, 0xffff]}, 0x8001, 0xd) io_uring_setup$auto(0x6, 0x0) prctl$auto(0x21, 0x1, 0x1, 0x0, 0x0) setsockopt$auto(0x3, 0x0, 0x29, 0x0, 0x28) r1 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000001c80)='/dev/fb0\x00', 0x20401, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x4611, 0x0) 6m58.880191392s ago: executing program 41 (id=672): r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mtrr\x00', 0xc0000, 0x0) mmap$auto(0x0, 0x400008, 0xc, 0x9b72, 0x8000000002, 0x8000) lsm_list_modules$auto(0x0, 0x0, 0x0) r1 = openat$auto_fops_u32_(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/netdevsim/netdevsim0/ports/1/ethtool/ring/rx_max_pending\x00', 0x400, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/card1/pcm0c/sub0/sw_params\x00', 0x4a09c2, 0x0) read$auto_fops_u32_(r1, 0x0, 0x0) pwrite64$auto(r0, &(0x7f00000000c0)='/sys/kernel/debug/netdevsim/netdevsim0/ports/1/ethtool/ring/rx_max_pending\x00', 0x6, 0x6) lsm_list_modules$auto(0x0, 0x0, 0x0) ioctl$auto(0x3, 0xc0104d03, 0x5) 6m58.196198438s ago: executing program 42 (id=675): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_taskstats(0x0, r0) close_range$auto(0x0, 0xfffff004, 0x2) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) r2 = socket(0xa, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket(0xa, 0x2, 0x88) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) bpf$auto(0x0, &(0x7f00000000c0)=@bpf_attr_5={@target_ifindex=r5, r4, 0x4, 0xf, r3, @relative_fd, 0xe600}, 0xf) bpf$auto(0x2, &(0x7f00000001c0)=@raw_tracepoint={0x5, 0xffffffffffffffff, 0x0, 0x3}, 0x4) close_range$auto(0x0, 0xfffffffffffff000, 0x0) sendmsg$auto_TASKSTATS_CMD_GET(r0, &(0x7f0000000200)={0x0, 0xf3e0fff77c47799f, &(0x7f00000001c0)={&(0x7f0000000040)={0x24, r1, 0xa01, 0x70bd25, 0x25dfdbfd, {}, [@TASKSTATS_CMD_ATTR_DEREGISTER_CPUMASK={0xe}]}, 0x24}, 0x1, 0x0, 0x0, 0x4001}, 0x20000000) 6m57.452618317s ago: executing program 43 (id=677): mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0x8, 0x0) chdir$auto(&(0x7f0000000000)='}[,&*}\x00') open(0x0, 0x161342, 0x100) setresuid$auto(0x8, 0x8, 0x0) mkdir$auto(&(0x7f00000001c0)='}[,&*}\x00', 0xc001) mmap$auto(0x0, 0x100040009, 0xdc, 0x9b72, 0x0, 0x28000) close_range$auto(0x2, 0x8000, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x100) rseq$auto(&(0x7f0000000300)={0xe, 0x401, 0x0, 0x6, 0xffffffff, 0x2}, 0x8000, 0x0, 0x6) mmap$auto(0x0, 0xa, 0xdb, 0x9b72, 0x5, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0xffffffffffff0001, 0x15) madvise$auto(0x0, 0xffffffffffff0005, 0x19) sync_file_range$auto(r0, 0x0, 0x1, 0x7) sendfile$auto(0x1, 0x0, 0x0, 0xc01) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x1, 0x0, 0x0) 6m44.836426328s ago: executing program 5 (id=660): r0 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$auto(0x3, 0x541b, 0xfffffffffffff4e0) close_range$auto(0x2, r0, 0xe9e0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x2, 0x1, 0x0) io_uring_setup$auto(0x78e6, 0x0) mprotect$auto(0x1ffff000, 0x8000000000000001, 0xd) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) nanosleep$auto(0x0, &(0x7f0000000140)={0x101, 0x20000000}) socket(0xa, 0x801, 0x84) socket(0x11, 0x2, 0x1) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ttyS0\x00', 0x48140, 0x0) ioctl$auto_TIOCSTI2(r1, 0x5412, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r2 = open(&(0x7f0000000100)='.\x00', 0x0, 0x408) getdents$auto(r2, 0x0, 0x40) close_range$auto(0x2, 0x8000, 0x0) socket(0xa, 0x3, 0x3a) r3 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$auto_VHOST_SET_OWNER(r3, 0xaf01, 0x5) ioctl$auto(0x3, 0x4008af03, 0x0) keyctl$auto(0x15, 0xfffffffd, 0x5, 0x4, 0x9) socket(0x2, 0x80002, 0x73) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) keyctl$auto(0xc, 0xffffffff, 0x0, 0x7, 0x40) poll$auto(0x0, 0x80, 0x400400) syz_open_procfs$namespace(0x0, 0x0) syz_open_procfs$namespace(0x0, 0x0) 6m44.176831131s ago: executing program 5 (id=679): mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) r0 = socket(0x2, 0x1, 0x0) mknod$auto(&(0x7f0000000040)='}[,&*}\x00\bt\\{\xb3\x9a\xe6\xfc\xf0\xf4\xc3n\x84\xff(\x7f\f\x1e\xe9\xd7\"n\x17\xb7\x90|+\xb8\xbe\x8fP\xb1>\xf5\xfd\xe1\x86\xd7\xa8uk~6w\x85(]\xbe\xc7\x046a\xe7\xfdm\x86bltj\xf9\x7f4\xb4k\xbfC\x8c\xd2\xb3\x1a\xe1\x98', 0x1, 0x4) madvise$auto(0x0, 0xffffffffffff0001, 0x14) madvise$auto(0x1ffff000, 0x620d, 0x8) sysfs$auto(0x3, 0x7, 0x3) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x0, @remote}, 0x6a) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x5, 0x20000000) getpriority$auto(0x1, 0x5) write$auto(0x3, 0x0, 0xfdf3) ioctl$auto(0x4000000000000c8, 0x800454cf, 0x3) setsockopt$auto(0x3, 0x1, 0x21, 0x0, 0x9) mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x40eb2, 0xd, 0x300000000000) r1 = socket(0x22, 0x2, 0x24) getsockopt$auto(r1, 0x3, 0x1, 0x0, &(0x7f00000000c0)=0x7) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) write$auto(0x3, 0x0, 0xfffffdef) brk$auto(0x7) 6m43.933423978s ago: executing program 5 (id=680): mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) io_uring_setup$auto(0x1, 0x0) futex$auto(0x0, 0x6, 0x8, 0x0, 0x0, 0xffffffd6) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r0 = socket(0x10, 0x2, 0x0) r1 = syz_genetlink_get_family_id$auto_seg6(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$auto_SEG6_CMD_GET_TUNSRC(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010027bd7000fddbdf250400000014000100fcf3ff00006c6daab4298da559a5020ca60000000000000000000001"], 0x28}, 0x1, 0x0, 0x0, 0x20000088}, 0x20000000) r2 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000004000)='/dev/audio\x00', 0x102, 0x0) ioctl$auto_SNDCTL_DSP_GETOSPACE(r2, 0x8010500c, &(0x7f0000004040)={0x2, 0xff, 0x4, 0x2}) tkill$auto(0x1, 0x7) close_range$auto(0x2, 0x8000, 0x0) io_uring_setup$auto(0x6, 0x0) mbind$auto(0x0, 0x100000004, 0x4, 0x0, 0x20000000000006, 0x2) 6m43.238748604s ago: executing program 5 (id=681): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000340)='/sys/devices/platform/vivid.0/video4linux/radio20/power/control\x00', 0x8080, 0x0) r1 = openat$auto_fops_u32_(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/netdevsim/netdevsim0/ports/1/ethtool/ring/rx_max_pending\x00', 0x400, 0x0) read$auto_fops_u32_(r1, 0x0, 0x0) openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mtd0\x00', 0x8080, 0x0) unshare$auto(0x40000080) r2 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1e00df45"], 0x1ac}}, 0x40010) sendmsg$auto_NL80211_CMD_GET_REG(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB='&'], 0x1ac}}, 0x40000) ioctl$auto(0x3, 0xc0104d08, 0x1) close_range$auto(0x0, 0xfffffffffffff000, 0x2) mmap$auto(0x4b0e, 0x4, 0x1000000000e1, 0x10011, 0x401, 0x8000) pipe2$auto(0x0, 0x80) r3 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x801, 0x0) mmap$auto(0x0, 0x4020009, 0xdb, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0xa, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1e, 0x4, 0x0) r4 = socket(0x1e, 0x1, 0x0) get_robust_list$auto(0x0, 0x0, 0x0) setsockopt$auto(r4, 0x10f, 0x87, 0x0, 0x14) setsockopt$auto(0x3, 0x10f, 0x87, 0x0, 0x14) write$auto(0x3, 0x0, 0xd7d) r5 = syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_OVS_FLOW_CMD_GET(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x124, r5, 0x1, 0x70bd29, 0x25dfdc00, {}, [@OVS_FLOW_ATTR_PROBE={0x4}, @OVS_FLOW_ATTR_KEY={0x10c, 0x1, 0x0, 0x1, [@nested={0x108, 0x10, 0x0, 0x1, [@typed={0x104, 0x8, 0x0, 0x0, @binary="f5410300000086ed0a2185b6d50b7a195a4bb64bd40742b2d1bdd2db61685198fc0ddc18d62c0bc98dec4106d0effd7dcf69854a5a3552db9f7e1eb364745b5582714d0909309e2031a7632e8715e020e42398908cc4be88234d97971f626832eb0da89bddcbf7e1d18c39f4af9d9dc002672f0207da76011279c06826d54d93fde4cb2c68065fb6c32f52c5a3b7a6b174c53e47db7b36e887a2a0229fbf3f7c76b03a4e35ea7813f5024b635efb7a5b232fef6f8d7c0dd4906cc5b0d9e32587d5c223fe082365c78b76591dfee39b4a94cd222bc26667dacefc9738abdef504fbd722b546a9fc06918e36274e400144e01000496297b7755d72a531fec479ee"}]}]}]}, 0x124}, 0x1, 0x0, 0x0, 0x200400f0}, 0x800) write$auto(r3, &(0x7f00000001c0)='\\%]\x00', 0x2) openat$auto_nvram_misc_fops_nvram(0xffffffffffffff9c, &(0x7f0000009000), 0x101181, 0x0) write$auto_seq_oss_f_ops_seq_oss(r3, &(0x7f00000000c0)="fdaeba49", 0x4) ioctl$auto(0x1, 0x5760, 0x100000101) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000000040)=""/9, 0x9) 6m42.962498425s ago: executing program 44 (id=681): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000340)='/sys/devices/platform/vivid.0/video4linux/radio20/power/control\x00', 0x8080, 0x0) r1 = openat$auto_fops_u32_(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/netdevsim/netdevsim0/ports/1/ethtool/ring/rx_max_pending\x00', 0x400, 0x0) read$auto_fops_u32_(r1, 0x0, 0x0) openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mtd0\x00', 0x8080, 0x0) unshare$auto(0x40000080) r2 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1e00df45"], 0x1ac}}, 0x40010) sendmsg$auto_NL80211_CMD_GET_REG(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB='&'], 0x1ac}}, 0x40000) ioctl$auto(0x3, 0xc0104d08, 0x1) close_range$auto(0x0, 0xfffffffffffff000, 0x2) mmap$auto(0x4b0e, 0x4, 0x1000000000e1, 0x10011, 0x401, 0x8000) pipe2$auto(0x0, 0x80) r3 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x801, 0x0) mmap$auto(0x0, 0x4020009, 0xdb, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0xa, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1e, 0x4, 0x0) r4 = socket(0x1e, 0x1, 0x0) get_robust_list$auto(0x0, 0x0, 0x0) setsockopt$auto(r4, 0x10f, 0x87, 0x0, 0x14) setsockopt$auto(0x3, 0x10f, 0x87, 0x0, 0x14) write$auto(0x3, 0x0, 0xd7d) r5 = syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_OVS_FLOW_CMD_GET(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x124, r5, 0x1, 0x70bd29, 0x25dfdc00, {}, [@OVS_FLOW_ATTR_PROBE={0x4}, @OVS_FLOW_ATTR_KEY={0x10c, 0x1, 0x0, 0x1, [@nested={0x108, 0x10, 0x0, 0x1, [@typed={0x104, 0x8, 0x0, 0x0, @binary="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"}]}]}]}, 0x124}, 0x1, 0x0, 0x0, 0x200400f0}, 0x800) write$auto(r3, &(0x7f00000001c0)='\\%]\x00', 0x2) openat$auto_nvram_misc_fops_nvram(0xffffffffffffff9c, &(0x7f0000009000), 0x101181, 0x0) write$auto_seq_oss_f_ops_seq_oss(r3, &(0x7f00000000c0)="fdaeba49", 0x4) ioctl$auto(0x1, 0x5760, 0x100000101) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000000040)=""/9, 0x9) 6m29.9841199s ago: executing program 6 (id=716): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0xa, 0x801, 0x84) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0xa, 0x5, 0x0) setsockopt$auto(0x3, 0x10000000084, 0x80, 0x0, 0x7ff) sendto$auto(r0, 0x0, 0x404, 0x101, &(0x7f0000000000)=@generic={0xa, "e2e18340cbf767d0b2000000f26b"}, 0x1c) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) socket(0xa, 0x801, 0x84) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) socket(0xa, 0x5, 0x0) (async) setsockopt$auto(0x3, 0x10000000084, 0x80, 0x0, 0x7ff) (async) sendto$auto(r0, 0x0, 0x404, 0x101, &(0x7f0000000000)=@generic={0xa, "e2e18340cbf767d0b2000000f26b"}, 0x1c) (async) 6m29.040567268s ago: executing program 6 (id=722): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), r0) sendmsg$auto_ETHTOOL_MSG_FEC_GET(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00', @ANYRES16=r1, @ANYBLOB="11032cbd700001dcdf25150000000c0001800800030007"], 0x20}, 0x1, 0x0, 0x0, 0x4010}, 0x800) 6m28.831133979s ago: executing program 6 (id=723): mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket(0x28, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) open(&(0x7f0000000800)='./file0\x00', 0x2240, 0x154) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NFC_CMD_LLC_SET_PARAMS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x0, 0xde8065d277046c55, 0x70bd29, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0xc000}, 0x0) sendmsg$auto_IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x800) syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000180), r0) mprotect$auto(0x1ffff000, 0x8000000000000001, 0x4) connect$auto(0x3, &(0x7f0000000000), 0x55) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000001d80), r0) sysfs$auto(0x2, 0x0, 0x0) fsopen$auto(0x0, 0x1) epoll_create$auto(0x4) epoll_ctl$auto(0x5, 0x1, 0x8000000000000000, 0x0) 6m25.409642647s ago: executing program 6 (id=738): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socket(0x10, 0x2, 0x0) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@NFSD_A_SERVER_LEASETIME={0x8}, @NFSD_A_SERVER_GRACETIME={0x8, 0x2, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0xc0) (async) personality$auto(0x1000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="180027"], 0x1ac}}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 6m24.426164401s ago: executing program 6 (id=742): mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) io_uring_setup$auto(0x1, 0x0) futex$auto(0x0, 0x6, 0x8, 0x0, 0x0, 0xffffffd6) syz_genetlink_get_family_id$auto_seg6(0x0, 0xffffffffffffffff) tkill$auto(0x1, 0x7) close_range$auto(0x2, 0x8000, 0x0) io_uring_setup$auto(0x6, 0x0) mbind$auto(0x0, 0x100000004, 0x4, 0x0, 0x20000000000006, 0x2) (fail_nth: 2) 6m23.385746756s ago: executing program 6 (id=745): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/firmware/acpi/interrupts/ff_pmtimer\x00', 0x6a040, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) read$auto(r0, 0x0, 0x13) r1 = socket(0x11, 0x80003, 0x300) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r2 = socket(0x11, 0x80003, 0x300) setsockopt$auto(r2, 0x107, 0x12, 0x0, 0x5) ioctl$auto(0x4000000000000c8, 0x800454d3, 0x3) setsockopt$auto(r1, 0x107, 0x12, 0x0, 0x4) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mmap$auto(0x0, 0x8, 0x4000000000df, 0x44eb1, 0x6, 0x300000000000) socket(0x9, 0x3, 0x0) statmount$auto(0x0, 0x0, 0xe3c, 0x0) mbind$auto(0x0, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) socket(0x25, 0x5, 0x8) mbind$auto(0x8000, 0xffff, 0x1, &(0x7f0000000040)=0x8, 0x40, 0xb167) socket$nl_generic(0x10, 0x3, 0x10) socket(0x23, 0x2, 0x0) r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self/net/udplite6\x00', 0x200, 0x0) read$auto_proc_reg_file_ops_compat_inode(r3, &(0x7f0000000040)=""/91, 0x94) read$auto_proc_reg_file_ops_compat_inode(r3, &(0x7f0000000380)=""/177, 0xb1) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x9, 0x3ff57696, 0x9b72, 0x2, 0x8000000000008000) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x5, 0x2) open(0x0, 0x22240, 0x154) mprotect$auto(0x0, 0x8000000000000001, 0x6) 6m22.853444967s ago: executing program 45 (id=745): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/firmware/acpi/interrupts/ff_pmtimer\x00', 0x6a040, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) read$auto(r0, 0x0, 0x13) r1 = socket(0x11, 0x80003, 0x300) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r2 = socket(0x11, 0x80003, 0x300) setsockopt$auto(r2, 0x107, 0x12, 0x0, 0x5) ioctl$auto(0x4000000000000c8, 0x800454d3, 0x3) setsockopt$auto(r1, 0x107, 0x12, 0x0, 0x4) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mmap$auto(0x0, 0x8, 0x4000000000df, 0x44eb1, 0x6, 0x300000000000) socket(0x9, 0x3, 0x0) statmount$auto(0x0, 0x0, 0xe3c, 0x0) mbind$auto(0x0, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) socket(0x25, 0x5, 0x8) mbind$auto(0x8000, 0xffff, 0x1, &(0x7f0000000040)=0x8, 0x40, 0xb167) socket$nl_generic(0x10, 0x3, 0x10) socket(0x23, 0x2, 0x0) r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self/net/udplite6\x00', 0x200, 0x0) read$auto_proc_reg_file_ops_compat_inode(r3, &(0x7f0000000040)=""/91, 0x94) read$auto_proc_reg_file_ops_compat_inode(r3, &(0x7f0000000380)=""/177, 0xb1) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x9, 0x3ff57696, 0x9b72, 0x2, 0x8000000000008000) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x5, 0x2) open(0x0, 0x22240, 0x154) mprotect$auto(0x0, 0x8000000000000001, 0x6) 6m0.835407276s ago: executing program 7 (id=831): close_range$auto(0x2, 0x8, 0x0) (async) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) mq_timedreceive$auto(0x6b76, 0x0, 0xe, 0x0, &(0x7f0000000140)={0x3, 0x8000000000000000}) (async, rerun: 32) r0 = socket(0x1e, 0x1, 0x0) (rerun: 32) sendmsg$auto_ETHTOOL_MSG_MM_GET(r0, &(0x7f0000000100)={&(0x7f0000000140)={0x1e, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f00000012c0)={0x48, 0x0, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@ETHTOOL_A_MM_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0xfffffff4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}]}, @ETHTOOL_A_MM_HEADER={0x4}, @ETHTOOL_A_MM_HEADER={0x4}, @ETHTOOL_A_MM_HEADER={0x4}]}, 0x48}, 0x1, 0x0, 0x0, 0x40400c0}, 0x14002881) (async) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) (async) recvmsg$auto(0x4, 0x0, 0x33c) (async) r1 = openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x40000, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) (async, rerun: 32) madvise$auto(0x0, 0xffffffffffff0005, 0x19) (rerun: 32) madvise$auto(0x0, 0xffffffffffff0001, 0x15) (async) madvise$auto(0x0, 0xffffffffffff0005, 0x19) (async) move_mount$auto(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x91e4) (async, rerun: 32) mmap$auto(0x0, 0x200003, 0x4000000000df, 0x40eb2, 0x402, 0x300000000000) (rerun: 32) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x200000, 0x200006, 0x1, 0x40eb1, 0x602, 0xb00000000000) (async) r2 = openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f0000000000), 0xc0040, 0x0) ioctl$auto_SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f00000000c0)={0x1, "e6c26c22ab89af11056b0001ac097e0a0728d9300000c500", 0x8}) ioctl$auto_SW_SYNC_IOC_INC(r2, 0x40045701, &(0x7f0000000040)=0x5) (async) r3 = openat$auto_userio_fops_userio(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0) ioctl$auto_FUSE_DEV_IOC_BACKING_OPEN(r1, 0x4010e501, &(0x7f0000000080)={r3, 0xa}) (async) close_range$auto(0x2, 0x8, 0x0) (async) capget$auto(&(0x7f0000001480)={0xc014, 0xffffffffffffffff}, &(0x7f00000014c0)={0x6, 0x7fffffff, 0x7}) r6 = syz_clone3(&(0x7f00000013c0)={0x0, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000280), {0xc}, &(0x7f00000002c0)=""/4096, 0x1000, &(0x7f0000001500)=""/161, &(0x7f0000001380)=[r5, 0x0, 0xffffffffffffffff, 0x0, 0x0], 0x5, {r4}}, 0x58) syz_open_procfs$namespace(r6, &(0x7f0000001440)='ns/mnt\x00') eventfd2$auto(0xf1, 0x1) (async) readv$auto(0x3, &(0x7f0000000600)={&(0x7f0000000540), 0xc}, 0x1da) (async) prctl$auto(0x10000000016, 0x1, 0x4, 0x5, 0x0) statx$auto(0x2, &(0x7f0000000200)='\xa3x\x0fw9\xe1\xec\xa1\x82\x914d\xca\x86\x06\xffyc\xfatGGZ\xb3\xe9/\x9f\xcd\x14\xe6\xb1\xb7\xaa\x91\xef\xbd\x8f\x1c\xed\xb9X}\xc1\x14J\xb5Ik\x8f\xad\xa6\x85\t\x17\x02\xe8%\xdb\x0eg\xd12\x1a\xc0G\xe0\x9c\n\x0f\xe6\xa1\xe6\xf3\\\xf4\t\xd1\xb5\x15\xe0\xc5\xa4\x03p\xd0.mS\xb5\x86j\xec\xc1\xfd\x9d\a\nE\xb8\xc9\xa1\xd4k\xbd\x81', 0x1000, 0x8, 0x0) 5m59.669524452s ago: executing program 7 (id=835): mmap$auto(0x0, 0x40007, 0xdf, 0x8010, 0x7, 0x6) sysfs$auto(0x112, 0x1, 0x9) r0 = socket(0x2, 0x1, 0x106) listen$auto(r0, 0x6) mmap$auto(0x0, 0x5, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x0, 0xfffffffffffff001, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x6, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(r1, r1, 0x41000) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x5, 0x0) mmap$auto(0x0, 0x9, 0xdf, 0x9b72, 0x800000002, 0x8000) mremap$auto(0x3ffe, 0xfeda, 0xc275, 0x10003, 0xfffff000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mremap$auto(0xb7, 0x180, 0x5, 0x6, 0x1) io_uring_setup$auto(0x6, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(r0, 0x8000, 0x0) r3 = socket(0xa, 0x2, 0x88) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'wg0\x00', 0x0}) bpf$auto(0x0, &(0x7f00000000c0)=@bpf_attr_5={@target_ifindex=r5, r4, 0x4, 0x1, r3, @relative_fd, 0xe600}, 0xf) bpf$auto(0x2, &(0x7f00000001c0)=@raw_tracepoint={0x5, 0xffffffffffffffff, 0x0, 0x3}, 0xc) bpf$auto(0x3, &(0x7f00000001c0)=@raw_tracepoint={0x5, 0xffff, 0x0, 0x3}, 0xf) socket(0x2c, 0x801, 0x1) connect$auto(0x3, 0x0, 0x55) listen$auto(0x3, 0x81) accept$auto(0x3, 0x0, 0x0) 5m59.253036411s ago: executing program 7 (id=837): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000010c0), 0xffffffffffffffff) sendmsg$auto_CTRL_CMD_GETPOLICY(r0, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000001180)={&(0x7f0000001100)={0x14, r1, 0x301, 0x70bd25, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x51}, 0xc040810) (async) ioctl$auto_UDMABUF_CREATE_LIST(0xffffffffffffffff, 0x40087543, &(0x7f0000000000)={0x9, 0xab, [{r0, 0x0, 0x8001, 0x8}, {r0, 0x0, 0x80000000, 0x9}]}) syz_genetlink_get_family_id$auto_ovs_flow(0xfffffffffffffffe, r2) 5m59.021673024s ago: executing program 7 (id=839): mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0xffffffffffff0004, 0x19) madvise$auto(0x0, 0x80000001, 0x8) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) madvise$auto(0x400000, 0x2002003f0, 0x15) 5m58.606041781s ago: executing program 7 (id=841): mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) io_uring_setup$auto(0x1, 0x0) futex$auto(0x0, 0x6, 0x8, 0x0, 0x0, 0xffffffd6) syz_genetlink_get_family_id$auto_seg6(0x0, 0xffffffffffffffff) tkill$auto(0x1, 0x7) close_range$auto(0x2, 0x8000, 0x0) io_uring_setup$auto(0x6, 0x0) mbind$auto(0x0, 0x100000004, 0x4, 0x0, 0x20000000000006, 0x2) 5m57.853381387s ago: executing program 7 (id=844): mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0x0) r0 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x183800, 0x0) ioctl$auto(r0, 0xc00c55ca, 0x81) r1 = socket(0x15, 0x5, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x34}}, 0x54) getpeername$auto(r1, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mlock$auto(0x81, 0xffff) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0x6, 0x17) madvise$auto(0x0, 0xffffffffffff0001, 0x15) mmap$auto(0x3, 0x4, 0x4000000000dc, 0x40eb2, 0xa1c, 0x8) madvise$auto(0xfffffffffffffffc, 0xffffffff00000001, 0x19) madvise$auto(0x0, 0x53, 0x9) syz_genetlink_get_family_id$auto_ovs_meter(0x0, 0xffffffffffffffff) remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0x3, 0x4) 5m57.429858377s ago: executing program 46 (id=844): mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0x0) r0 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x183800, 0x0) ioctl$auto(r0, 0xc00c55ca, 0x81) r1 = socket(0x15, 0x5, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x34}}, 0x54) getpeername$auto(r1, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mlock$auto(0x81, 0xffff) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0x6, 0x17) madvise$auto(0x0, 0xffffffffffff0001, 0x15) mmap$auto(0x3, 0x4, 0x4000000000dc, 0x40eb2, 0xa1c, 0x8) madvise$auto(0xfffffffffffffffc, 0xffffffff00000001, 0x19) madvise$auto(0x0, 0x53, 0x9) syz_genetlink_get_family_id$auto_ovs_meter(0x0, 0xffffffffffffffff) remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0x3, 0x4) 5m38.393797171s ago: executing program 4 (id=928): openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8002) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0xfffffffffffffffe, 0x1, 0x1) madvise$auto(0x0, 0xffffffffffff0005, 0x19) execveat$auto(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)=0x0, 0x76000000) write$auto(0x3, 0x0, 0xfffffdef) write$auto(0xffffffffffffffff, 0x0, 0x2fe) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) pwrite64$auto(0xc8, &(0x7f0000000080)='\vX\xb5\x85\x91p\xe6\x1eRN8\x90\x86\xdde\x1cJ\x99\x00\x11\x89\x14\r>\x94\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\xf1`\x9f\x1e\xf9\xa4*\xc0\xc1\xf2\x14^\x0fo\x84\xfc\x89\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2E\xd8?\'\x8dg\x81K*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00,,\x93\xba\x88\x93\xc6#\xe5\xaae\x9d\xb6\x1a\x7f\xc0%\xb0\rfOJ+\x02\x9b#\x1c\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd0\xbdn\x1d\x00\xeb]B\xa0\x99\xb0R\xb4J}\xa8\xa1\x84]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\xde8\xf7\xc1\xaf\n1\x80\x1a\xbc_\xef\x8b\t\xcc\xa6\xf2\xc1\"\xact\xee\xc9\x00'/232, 0xfdef, 0x3) madvise$auto(0x0, 0xf663, 0x15) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socket(0x21, 0x2, 0xa) 5m36.607431912s ago: executing program 4 (id=934): r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x20000, 0x0) ioctl$auto_SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000004900)=0x40000) 5m36.40012318s ago: executing program 4 (id=937): listxattr$auto(0x0, &(0x7f0000000040)='+\x13\x00', 0xff) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) setns$auto(0x0, 0xb) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0xa, 0x3, 0x100) setsockopt$auto(0x400000000000003, 0x29, 0x1b, 0x0, 0x56b) setsockopt$auto(0x400000000000003, 0x29, 0x1c, 0x0, 0x56b) r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/net/vlan/config\x00', 0x800, 0x0) mmap$auto(0x6d, 0x18, 0x0, 0x17, 0x5, 0xfffffffffffff28c) read$auto_proc_reg_file_ops_compat_inode(r0, &(0x7f0000000180)=""/228, 0xe4) munmap$auto(0x1000000, 0x2000000c) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x401, 0x8000) 5m35.573395738s ago: executing program 4 (id=940): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000001080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x48000}, 0x0) io_uring_setup$auto(0x6, 0x0) r3 = socket(0xa, 0x2, 0x3a) setsockopt$auto(r3, 0x29, 0x3b, &(0x7f0000000080)='\x15!\xa8^J/\xddCx4!\x00\xd3\x8f\x1e\x1b\xc3 \xe2\xa8\xd6\xd9\xc0\xa2\x0f\x88\xb1e\x8a\xd8?\xfe\xda\xc4\xef\xff(i\xc6@\x91[\vBj\x0eQ\xce\x16\'C\x8cYA\x92u\xd5\xb8\\\x82,\xe2=y\x9bR\xbcn\xa0c\x16~\x86\"t\xde\x14\xe4\xa5\xfe\xb5', 0x110) setsockopt$auto(0x400000000000003, 0x29, 0x37, 0xffffffffffffffff, 0x0) io_uring_register$auto(r0, 0x0, &(0x7f0000000200)="146251f6c675251f015264d3", 0x3) io_uring_register$auto(0x2, 0x0, 0x0, 0x3) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$auto_NL80211_CMD_GET_WIPHY(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000156ee21a8d4002bd0578ec38a5c5a0c157c50452e62dbb079d580d0e3558ed57098641fef91825d7da23633816132c97ee56288c3d07946a64e574ad1fba072e45033fb3b4772b29e8f6d39a68e484d70481d2874324f58991aff1e1a41c93610bf822b2f9620f0e4229a472a7c3b5b293ddd795dd2565ed3cdf72794e8973ca9d7f725473aaa363ae2907a2c0e615403dc53931f3a6b8ceed3cfe9a21e8cf158011b775cc30eab2f2e3b8fa9bf2b43247fc92c2ea07965678815f32", @ANYRES16=r1, @ANYBLOB="010025bd7000fbdbdf250100000008000300", @ANYRES32=r4, @ANYBLOB, @ANYRESHEX=r0, @ANYBLOB="efa6b26b4b35f1a8efe26c1c3ea1c569d9339275acae2da880370547e4ef75411bf39e595b7e6ac8376cb5aa5743a723150fad1cb3c46ab02a13"], 0x1c}, 0x1, 0x0, 0x0, 0x20000084}, 0x0) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) r5 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/card1\x00', 0x0, 0x0) ioctl$auto(r5, 0x961064a0, 0x600000000200007) madvise$auto(0x0, 0xffffffffffff0005, 0x19) keyctl$auto(0x2000000000000016, 0x1000, 0xfffffffffffffffb, 0x103, 0x7ffffffd) madvise$auto(0x0, 0xffffffffffff0004, 0x19) madvise$auto(0x0, 0x80000001, 0x8) mbind$auto(0x8, 0x2091d2, 0x44, 0x0, 0x6, 0x2) madvise$auto(0x0, 0x2002003f0, 0x15) clone$auto(0x2, 0x44d4, &(0x7f0000000080)=0x31, &(0x7f00000000c0)=0x9f5, 0x82) socket(0x5, 0x80006, 0xffff8001) 5m33.632175202s ago: executing program 4 (id=948): mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) io_uring_setup$auto(0x1, 0x0) futex$auto(0x0, 0x6, 0x8, 0x0, 0x0, 0xffffffd6) syz_genetlink_get_family_id$auto_seg6(0x0, 0xffffffffffffffff) tkill$auto(0x1, 0x7) close_range$auto(0x2, 0x8000, 0x0) io_uring_setup$auto(0x6, 0x0) mbind$auto(0xf0, 0x100000004, 0x4, 0x0, 0x20000000000006, 0x2) 5m32.923357895s ago: executing program 3 (id=953): r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x20000, 0x0) ioctl$auto_SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000004900)=0x4fdfd) 5m32.645701528s ago: executing program 3 (id=955): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000005c0)='/sys/devices/virtual/net/bond0/queues/tx-10/xps_cpus\x00', 0x8080, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000000040)=""/9, 0x9) (fail_nth: 4) 5m32.194338153s ago: executing program 3 (id=956): mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) r0 = socket(0x21, 0x2, 0x2) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x1d, 0x2, 0x2) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) connect$auto(0x5, 0x0, 0x9) sendmsg$auto_HSR_C_GET_NODE_STATUS(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYRES32=r1, @ANYRES32=r0, @ANYRESDEC=0x0], 0x38}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_IPVS_CMD_GET_SERVICE(r3, &(0x7f00000015c0)={0x0, 0x0, &(0x7f0000001580)={&(0x7f00000002c0)={0x14, r4, 0x301, 0x70bd2d, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x2004000d}, 0x20000800) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/mtdblock0\x00', 0x10d441, 0x0) mmap$auto(0x0, 0xda, 0x1, 0xeb1, 0x40000000000a5, 0x8000) keyctl$auto(0x2000000000000011, 0xfffffffffffffffd, 0x8, 0x4, 0xfffffffffffffff8) socket(0x2, 0x801, 0x100) ioctl$auto(0x3, 0x541b, 0x10000000000402) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000226bd7000fedbdf25030000000800030004020000060007000080000000000600010000000a0005000000000000000000b3fc010000000000000000000a0001000000000000000000060006000500000008000200", @ANYRES32=0x0, @ANYBLOB="080004000301"], 0x68}, 0x1, 0x0, 0x0, 0x40080}, 0x40090) socket(0x2, 0x3, 0x100) socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="13"], 0x1ac}}, 0x4004) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) close_range$auto(0x2, 0x8, 0x0) socketpair$auto(0x1e, 0x8000001, 0x6, 0x0) sendmmsg$auto(r2, &(0x7f0000000140)={{0x0, 0x6, &(0x7f00000000c0)={0x0, 0x1}, 0xea, 0x0, 0x2, 0x5}, 0x8}, 0xd, 0x181) recvmmsg$auto(r2, &(0x7f0000000300)={{0x0, 0x36, &(0x7f0000000280)={0x0, 0x40009}, 0xc, &(0x7f0000000340)="9fc52f9d30f58b0a9cfeb033ab196aa52c69db8410f0060ceaf4544305bc2bc294fd9412981d4a5c464920eea8a48333131112760f75347f86d8d7843bea1e79e56dad37974296ea0d0eb6d47c10798e608d66a7fcb4ab8cefd466455b6d9168e62465e5ccbe732b09ce16d6b0c96c3c95a490a79d395fc1fd2272d127e9a2813533c0db4c95105c6be6646235ed579d90281d7f7895daa4f1419395675ab484742a7e78d433037d65377a979d045b5f9792559b92e2eb9ea226d566ea538abe0868d773ac228ff475041e3c549ab8", 0x406, 0x8}, 0x5a57}, 0x80000, 0x1, 0x0) close_range$auto(0x2, 0x8, 0x0) 5m32.194078832s ago: executing program 9 (id=957): r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x20000, 0x0) ioctl$auto_SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000004900)=0x40000) 5m31.964704801s ago: executing program 9 (id=958): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000001080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x48000}, 0x0) io_uring_setup$auto(0x6, 0x0) r3 = socket(0xa, 0x2, 0x3a) setsockopt$auto(r3, 0x29, 0x3b, &(0x7f0000000080)='\x15!\xa8^J/\xddCx4!\x00\xd3\x8f\x1e\x1b\xc3 \xe2\xa8\xd6\xd9\xc0\xa2\x0f\x88\xb1e\x8a\xd8?\xfe\xda\xc4\xef\xff(i\xc6@\x91[\vBj\x0eQ\xce\x16\'C\x8cYA\x92u\xd5\xb8\\\x82,\xe2=y\x9bR\xbcn\xa0c\x16~\x86\"t\xde\x14\xe4\xa5\xfe\xb5', 0x110) setsockopt$auto(0x400000000000003, 0x29, 0x37, 0xffffffffffffffff, 0x0) io_uring_register$auto(r0, 0x0, &(0x7f0000000200)="146251f6c675251f015264d3", 0x3) io_uring_register$auto(0x2, 0x0, 0x0, 0x3) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$auto_NL80211_CMD_GET_WIPHY(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000156ee21a8d4002bd0578ec38a5c5a0c157c50452e62dbb079d580d0e3558ed57098641fef91825d7da23633816132c97ee56288c3d07946a64e574ad1fba072e45033fb3b4772b29e8f6d39a68e484d70481d2874324f58991aff1e1a41c93610bf822b2f9620f0e4229a472a7c3b5b293ddd795dd2565ed3cdf72794e8973ca9d7f725473aaa363ae2907a2c0e615403dc53931f3a6b8ceed3cfe9a21e8cf158011b775cc30eab2f2e3b8fa9bf2b43247fc92c2ea07965678815f32", @ANYRES16=r1, @ANYBLOB="010025bd7000fbdbdf250100000008000300", @ANYRES32=r4, @ANYBLOB, @ANYRESHEX=r0, @ANYBLOB="efa6b26b4b35f1a8efe26c1c3ea1c569d9339275acae2da880370547e4ef75411bf39e595b7e6ac8376cb5aa5743a723150fad1cb3c46ab02a13"], 0x1c}, 0x1, 0x0, 0x0, 0x20000084}, 0x0) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) r5 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/card1\x00', 0x0, 0x0) ioctl$auto(r5, 0x961064a0, 0x600000000200007) madvise$auto(0x0, 0xffffffffffff0005, 0x19) keyctl$auto(0x2000000000000016, 0x1000, 0xfffffffffffffffb, 0x103, 0x7ffffffd) madvise$auto(0x0, 0xffffffffffff0004, 0x19) madvise$auto(0x0, 0x80000001, 0x8) mbind$auto(0x8, 0x2091d2, 0x44, 0x0, 0x6, 0x2) madvise$auto(0x0, 0x2002003f0, 0x15) clone$auto(0x2, 0x44d4, &(0x7f0000000080)=0x31, &(0x7f00000000c0)=0x9f5, 0x82) socket(0x5, 0x80006, 0xffff8001) 5m31.793500293s ago: executing program 4 (id=959): syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00') close_range$auto(0x0, 0xfffffffffffff000, 0x2) bpf$auto(0x5, &(0x7f0000000000)=@iter_create={0x15, 0x8}, 0x7) mprotect$auto(0x1ffff000, 0x8000000000002001, 0x4) bpf$auto(0x0, &(0x7f0000000000)=@bpf_attr_7={@btf_id=0xe9f, 0x4, 0x1c}, 0xa3) mmap$auto(0x0, 0x25, 0x7ffff000, 0x8011, 0x0, 0x8000) keyctl$auto(0x1e, 0xfffffffffffffffc, 0x1, 0xfffffffffffffffd, 0x1) futex$auto(&(0x7f0000000000)=0x9, 0x3, 0x4, &(0x7f0000000040)={0x1000}, &(0x7f0000000080)=0xf1f, 0x6) futex_waitv$auto(&(0x7f0000000000)={0xf, 0x5d94, 0x4, 0x4}, 0x77, 0x0, 0x0, 0x62bd) close_range$auto(0x2, 0x8, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0xa240, 0x15e) r1 = socket(0xa, 0x3, 0x3a) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffff7, 0x8000) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x3, 0x6) socket(0xa, 0x801, 0x106) socket$nl_generic(0x10, 0x3, 0x10) eventfd$auto(0x3) eventfd$auto(0x0) ppoll$auto(&(0x7f00000001c0)={r0, 0x3, 0x8}, 0x7, &(0x7f0000000200)={0x3, 0x9}, &(0x7f0000000240)={0x7}, 0x8) r2 = socket(0xa, 0x2, 0x88) bpf$auto(0x0, &(0x7f0000000000)=@link_update={r2, @new_prog_fd=0x4, 0x4, @old_map_fd=r1}, 0xa3) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/tty/ptyqc/dev\x00', 0x200, 0x0) ppoll$auto(&(0x7f0000000100)={r3, 0x9065, 0x1}, 0x6, &(0x7f0000000140)={0x3, 0xff}, &(0x7f0000000180), 0x8) 5m31.330526372s ago: executing program 47 (id=959): syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00') close_range$auto(0x0, 0xfffffffffffff000, 0x2) bpf$auto(0x5, &(0x7f0000000000)=@iter_create={0x15, 0x8}, 0x7) mprotect$auto(0x1ffff000, 0x8000000000002001, 0x4) bpf$auto(0x0, &(0x7f0000000000)=@bpf_attr_7={@btf_id=0xe9f, 0x4, 0x1c}, 0xa3) mmap$auto(0x0, 0x25, 0x7ffff000, 0x8011, 0x0, 0x8000) keyctl$auto(0x1e, 0xfffffffffffffffc, 0x1, 0xfffffffffffffffd, 0x1) futex$auto(&(0x7f0000000000)=0x9, 0x3, 0x4, &(0x7f0000000040)={0x1000}, &(0x7f0000000080)=0xf1f, 0x6) futex_waitv$auto(&(0x7f0000000000)={0xf, 0x5d94, 0x4, 0x4}, 0x77, 0x0, 0x0, 0x62bd) close_range$auto(0x2, 0x8, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0xa240, 0x15e) r1 = socket(0xa, 0x3, 0x3a) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffff7, 0x8000) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x3, 0x6) socket(0xa, 0x801, 0x106) socket$nl_generic(0x10, 0x3, 0x10) eventfd$auto(0x3) eventfd$auto(0x0) ppoll$auto(&(0x7f00000001c0)={r0, 0x3, 0x8}, 0x7, &(0x7f0000000200)={0x3, 0x9}, &(0x7f0000000240)={0x7}, 0x8) r2 = socket(0xa, 0x2, 0x88) bpf$auto(0x0, &(0x7f0000000000)=@link_update={r2, @new_prog_fd=0x4, 0x4, @old_map_fd=r1}, 0xa3) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/tty/ptyqc/dev\x00', 0x200, 0x0) ppoll$auto(&(0x7f0000000100)={r3, 0x9065, 0x1}, 0x6, &(0x7f0000000140)={0x3, 0xff}, &(0x7f0000000180), 0x8) 5m31.310043274s ago: executing program 3 (id=961): r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x20000, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r1 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000540)='/dev/sequencer2\x00', 0x1c8340, 0x0) ioctl$auto(r1, 0xc0045405, 0x3) ioperm$auto(0x7, 0x6, 0x3) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) mmap$auto(0x0, 0x2020009, 0x3, 0xeb2, 0xfffffffffffffffb, 0x8000) socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) clone$auto(0x21, 0x9, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x6) read$auto(0x3, 0x0, 0x7ffffffff000) socket(0x10, 0x2, 0x0) r2 = socket(0x18, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x80047437, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x9, 0x3, 0x13, 0x940, 0x1ffe0, 0x3, 0x6, 0x2, 0x9, 0x5, 0x2, 0x7, 0xb0, 0x9, 0x5, 0x3, 0x5, 0x7}, 0x1fe, 0x81) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40001) ioctl$auto_SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000004900)=0x40000) 5m30.800905076s ago: executing program 9 (id=962): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), r0) sendmsg$auto_ETHTOOL_MSG_FEC_GET(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="11032cbd700001dcdf25150000000c0001800800030007"], 0x20}, 0x1, 0x0, 0x0, 0x4010}, 0x800) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptys4\x00', 0x2, 0x0) write$auto(r2, &(0x7f0000000040)='\x00', 0xdb01) ioctl$auto_TIOCVHANGUP2(r2, 0x5437, 0x0) r3 = open(&(0x7f00000000c0)='./file0\x00', 0x62240, 0x0) rename$auto(&(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='./file0\x00') execveat$auto(r3, &(0x7f0000000200)='\x00', 0x0, 0x0, 0x1000) r4 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000140), r0) sendmsg$auto_NL80211_CMD_GET_COALESCE(r3, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000540)={0x11dc, r4, 0x20, 0x70bd28, 0x25dfdbff, {}, [@NL80211_ATTR_SCAN_FREQUENCIES={0x130, 0x2c, 0x0, 0x1, [@typed={0x8, 0xd2, 0x0, 0x0, @u32=0x800}, @nested={0x11e, 0x97, 0x0, 0x1, [@nested={0x4, 0xb5}, @generic="6676fdddd47de1e847bbd08e0c3b73e8c20e78033302d86825cc7d81f1519808fd7612068ee414fbfe56d33ab2460fe7b91194d1a11f4c18bc715f799764c4aaea6a33689e2ca5755353a3e2a106af7672910a52e88d509dbbebe98e1dfcd34b513cfea1dd99c083c7e5eef71c67d9d2465b67d4a6cd23ad6b8975de7d95c2f640ca4e1421ffafc333c838b42730de08", @typed={0x8, 0x12, 0x0, 0x0, @ipv4=@broadcast}, @nested={0x4, 0x2f}, @nested={0x4, 0xae}, @nested={0x4, 0x8d}, @generic="0206caffd6ad5c35bdc36746bf3b2572d0e0e3418c4adada50fece28d840d1f20090a259b8322876fae52d8c515212423d123c9fed15b988bb6a2b14c4db4bbc01075b15b56368655cf6c4d0a8bbdbe1234a3bf1b6ec4a028e7604cc6eb34a415cf171cc333de2774b0cbe167e52cf0de0d7"]}, @typed={0x4, 0xc9}]}, @NL80211_ATTR_COLOR_CHANGE_COUNT={0x5, 0x12f, 0x32}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x7fff}, @NL80211_ATTR_MESH_ID={0x10, 0x18, "f571d0d3dc9f1fccc24e123b"}, @NL80211_ATTR_HT_CAPABILITY={0x1004, 0x1f, "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"}, @NL80211_ATTR_SCAN_FREQ_KHZ={0x6d, 0x124, 0x0, 0x1, [@generic="19eb8856a81c3479cfc850a8c6f4085a7114a5b27952dcafcf158b8842a3fc47f42baf6e54d8b4d568a275abf1b4de2aa384c6fd325802b2f4d35b1ad67ea4af8dce21823d8179a9728f91b1981064502a414c562d", @typed={0x14, 0x57, 0x0, 0x0, @ipv6=@private1}]}, @NL80211_ATTR_TX_RATES={0x4}]}, 0x11dc}, 0x1, 0x0, 0x0, 0x4884}, 0x810) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/mnt\x00') socket(0xa, 0x3, 0x3a) socket(0x2a, 0x2, 0x0) socket(0xf, 0x3, 0x2) socket(0x840000000002, 0x3, 0xff) socket(0xa, 0x801, 0x106) mmap$auto(0x0, 0x8, 0x4000000000df, 0x44eb1, 0x6, 0x300000000000) socket(0xa, 0x3, 0x6) socketpair$auto(0xbcb, 0x5, 0x8000000000000000, 0x0) bpf$auto(0x10, 0x0, 0x9) vmsplice$auto(0x2, &(0x7f00000000c0)={&(0x7f0000000000), 0x7ff}, 0x8000000000000001, 0x0) r5 = socket(0x10, 0x2, 0x9) sendmsg$auto_NL80211_CMD_DEL_MPATH(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000005304"], 0x14}, 0x1, 0x0, 0x0, 0x4040040}, 0x40010) getsockopt$auto(0x3, 0x200000000001, 0x1c, 0x0, 0x0) close_range$auto(r3, r3, 0x6) 5m30.304851052s ago: executing program 3 (id=963): mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) io_uring_setup$auto(0x1, 0x0) futex$auto(0x0, 0x6, 0x8, 0x0, 0x0, 0xffffffd6) waitid$auto(0x3, 0x80000001, 0x0, 0x4, 0x0) r0 = syz_genetlink_get_family_id$auto_seg6(0x0, 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_macsec(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$auto_MACSEC_CMD_ADD_RXSC(r1, &(0x7f0000004100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYRES8=r0, @ANYBLOB="097acbe8e46f78f4e61c5c376fdb8df9220fa99711373aad7125e71231c0cf42ed10430254730988c35f73fa0c371542ac90053e0327691a5bb1fe364f917ca3e7b790ad8789fffa71837821c4e99c670568fea6a148aad23fe18f5c82d49fdd9db4d4b31b2ae0c11d2a949d1cc29c6ea79c62ea0d5ae837927a9746543b83241447b517b2d85411fac5111b75602f6453d077a8edd2ba6fe66355fcf375de24ebf424906f42ce678ca02940981a70ac8889ebb26448138a3dc2d14af14ae77d0a0b407c12d4dac55de704a3bc8814090867f2e57adc266915246f0cba23facf09fc4c38907a15e6337f07a3140c3c0a0e785916af883f50099f07cdf8bb6247c644fa2087ad055d3b54126c91884e4de0d4646f07e2b587de083408b7981ffc355e9a558d2fc05c976bee0c78b1aa9f6a76c34a104d6145df2054c3228048631b0113037d5ccabad776ce83a3ce4d5562e86033f79d847c993cbd34489a0ea7be04d5ae0b5e56dc3e8dced3977d74c009e1c5b00d5a1e195abf637c3d5433bd4abddd9f65d180caed49e653d0696b16800e152c2409431cdaebba179ffdc4de1c37b885725ed7dacbb71ec58a9cad65ab5573a2b431132b1e93c1f39348fbeb78014c560d378b5e5b1ecc30960724e31d5e45e201cdd74045bc9941dc8ecea086e6a031611b95e866f7a52d53ff5679858d4df0709b776448c2f18de3402722bfb025ad4d94737d12e2e3bd1ddc1ac18e6c211fc5fc2c5e415f9563e4a864662ac33248493c6fdcf5dc077ea8717332eb4231606eed8825c64f7c093946e7049e5433c82b78e317c7eebd9029220ec54b8b42af761ee4cf9c38397ee0bfab56d02dd045a36f926a99f6732d0fd69430b7689be6e6460cc70226a0ff9467bf61d14ce4192417e2e279ceb96fb45397e04d4ffbe0c6ceecdb7ceb7f36e44d0c53cd10bc9db62303b59f530c7f013c65c9461add5ace1c3016bb5b14a09a2a7a4a1980088fcc94f33155b330deb530b6a287daeb59b1f56f1dd9f265206b192b382ad375f7ba55dfd10557d70fa10cf32170fd8e8d041c8a7c4cbbf499a33224416ea91ebc333e02040572028aa853edafabab628af5601fb140e32dd507045a24cccfe934f4a0c18a45450251ecf8b26dcd1da8ad2470a5850164e8c2a1a3417d2e387bc2db83d4bba4cef390167650f67cf76ae2516ac8ecb6cfbbb64c8c6ad50a45acc95c7c7b1f24afa4ca062e0c8b2a349cd72758f77172cdfe2bc52ed2c98f51bd2915a6a2a332f03319b13e0629d79597f567855cc102ce91dcf0fcb6b3e16153793d9189c3514a6f230431a26e3b2e43b43b3aa09df25c87541a10e424ce1bc9e8b924f96fa48a2eab1d0eeb832cde3016e9ebae4df0b9306d32e8ed015f6579502a31c05c67bf463589d72fab4740009a00fe71b9bdc06f770d65ea0f59298300ebdbf656336a817e365097cf96e24cd2ee466a2197c66596d2a33f66b0f7026fc180bf7bcf0c14c3dc2ce7788312b1eb02cbe10646df87dfe0ba9938546e4e0ac8ba580c7ca6923cc2f81dc60b7b28eb5d53e81c7e965bd6d13d9810a6a1a5b877c5e8dacf9a8dd893664df8422b6472c689dabc7eb91289736b95374f5d7ce6149735ec4d7a4ba79d3961be0cc1b22c179ecb69f3affa6c5f9842a47d0a5dc26d4a9c24b0c05ebafefec2023e2411ca97216026fb8ac84fe2b087729c0b73e623cea539936689962bae419b8c6902af2fc5ecfc95458ac212dc6fbcd010f8542dcccd271ba929e4c1cac83b515a46401f170c3c48e7f52a82962afcbc03ddb6bd04b3110dc94071b3732f302a3684511d1bf2b1b1470a1ba9b09ab0509f711866e178bfd5c8a41bc68945c7409c51b365309e986e352d80dc0865124bf8096c40e19de65e1eef28ebd3dc0936e2fb53265337a5c8703f356ee6398b7029385b296057ed8e8121032abfed44bc092b9b19977628befc7094dded8b1ac82c60581287132002800bff8226d96354f80ba156ba1c3651353ced4adeb78ff687838dafeb597037e64011e3b08fbf9ce8edaf2c353753f46c77ab4668d4cc47ebee6e46124185d5a055ce7eef3bb2a739e29b3f1b3f170792914fc5fd77d0ec4a931855d1691eecc85e3b011806475167055fda8a8ed0f5ad8519e1777daa9da4d383d1a9da5e86b70afa5b2505652affb718f15ea1a56d941e5a829797fd4cf41f3d76168b963be0f328299433c68f80b65b03142e68790536d703b48aa42cbaed7ce5258c0658b46ab6570cb4ac524b920a6ab29b5aa7ce96fd8ed5e33633bae3e62f1caa6a0f49ef758506b6d06dbcfb26a29382efb4f417f3a66a259e3cbe78ed1cd8124634d3c04cc0c5650f2c79176224f38e5a008960ecba1b5e2dd1a302d45cafc699dde371fee567a5c20b1f73e1e09808d70692bd124f7cc0366141a06474151007ee81450a12946116f8ac5db4f720cebf3ee82ac83913278b0f2320f73375088c9253392e8926bc83919f76aab6213b5ccee735bdd443bc8451af2972aa77ae3e9154678418a379bccfae6f6aa532cfd6e94e07edaae398a1709ee6dbe69698340bf72b4908c43324674fa34e02621220dcc6a30505985004d787d5e327d13c4a12a2eaf7a2ccefdbff72fb0d93f161d4ed4edeed4d820870b03001500e1ec3a823e73f4970bd060e6cb70b000221ce5cb21a64992620b70670dfd561071a5357b7580fde7cec31663b8d72de1dba71807b61549d5526d7b10735e65843c1daed78f0b14bc097259510ccf7292793548e0a1d19e0e51ff316eb447b9c42388696582796e8d13cc17d3f8cdcb9fbeb3dcf035e1622f79dae29435805703c0a41d1404ae7acef12767c831ac576b14fab59c2cf40840d40b6b30b152c2696109172430ef8196e6402596c3f5f56a8e1caa3aa08ffaeedec70c1a7bd1db57ce6b7a5773e1d85dde6953fdb533a26f726ae9fc79d47f04780941f6efb67f9206c81ffe93a01a41d0bdfa26bdce7b06db5a131f797bccb6e20778c80d3f6cdb66e4fe88cf8483a1252e733706849f2aeb0c4313c4141c1e107bb53028cf482178db80a3da5438d2d5ae74687263ad8763683cd5ded30139207915d21280a5703aac0c935e618aca909d22afc9a40510ade1c81bb0eed3f21a4cd584ff3b32646d2fd64d8f9929ee79bf061d3e76a1e30c4273a8b701b3d52f7dbfd3bb87af8920e3172a2c4abd7e75daddaa35aba2a64cb65415aa037a2c74d40482086ee212678e9893d34ce26ecb202c1d27ef60dbe9ee89805012047962f9a639b0da4d36bb8e9b924ef1211424e03686d057214d54ba6f68da10757990471a563fb4a6d9bffb240f201ccd017030426bee5a51e1a5bc94fe61ef8d5e8da903151954f91271cf432865f1cd46ee8dc463bef3d9bff8644383793e5f31eabf357d25644308946e5cf29688a4a85142c23a2a6daf7e42aae94d0e0aa48267e5ebece5d0962a9b281956f47e4d2e082e290d01c369d48657fae1814d3662eb179835bfeea4e6fce863f69fa585dfd27b23a105bf4b548142eb07e3c93b8be9ea26041a8497239841cdf939a4f982a835d168bae9698b3038facd4f66100fdbf0eb4108ab2feeb3eb8dd310cecf73aece3501417af16b47b07f3a65614b345dfc8ee054e1b3946453540c09ce9f28457acdaf078c6a0bea988ed183b120aaff17847c07375ae1f161ce741754df66a1081f5bf2971fcbd475974103385d911cdb70f3ceb0c3c2eabce0c5edf386739eb33fc71b1ecf873f2c09e3a860e09c1dfa9840458a4ba82b72bbb775418c2dab4ebceaa0c7c3b5637e6ac6d7159d1cb1a349b1e0a9ffb63662997cfd185c8540621ca9bb50d77184be4782d2c1253f2570f6363c6e9ed0b984d0ba6604fe6b815e5e9eba4f198ff3300c381aabc3a65b97ab4c604dd0c43011e6c55c2cac013a5e52a867b81bfa9bc527accc3ade19fbbe17e3f95059a4274cdc492eda30a0acfea0b4e50dbbddc07c073ec1e4c0d9b07443244c83ef5e9b2dfdfed38f4fb4f35419cd5706c4bfd6e7fc0b1dbd93be96054e7936b7159aef01b2ab1c312fa685ccc1ca17b9dda7a8458778778171444aa58a17bae4a9874a6d096a8de59728c138f8a8d33f9cada1643d30e7e27ce96d44ecf09158458b15cabe58e4d985157c5471789766d7a0628adb85d7eabb1c74b594ec9f579183a0978d9ad394170d5cf41f380c428b9562cb510b6c8a76da2e438725feb4734940c7d6ad84900813bcf9e4a53a161e97450d1859e8c546d91ac6db7402fd57adfe4032a2b0cf5424e91dd1d5aa1fbc136f196ee4cff0af03f7164b3878fde2b722a51c2c1b1968e64824cb19b76334effc123e5d86553d1bc83524509389f4b8c6347296e447c4a344d41548e397d870918625e1b80f1b39af29682441ee3a5d01a4d125a007404bf4777e0962a03245c3d9cf02112c40fb97711dca65479891832628984746f520027fb6db92bc4ff137b9a76ecbd929f52550294d8a86c40100f57036ff871ab2542af3f47d0b543013949c420a0584742d00c088bff258c91230fef2eaa7516c2484119773bf1365f937e880c3313533e8cde7ddf8c005765243914f0ee30e158d6e1a9234be3ba2654abb8f0e652c260e553a2a3f75ce3a09f0c48d9b64f2e217c7b17c3bd6b2bb2c590709b84ddc05c832dfb27fa9c5f27608866c0d2c85ff7603bff689407f67656a37eeed40488e573e6b07784633fe74dcdc946274c0be6a16d3eeafbd19e7e8d27c8d42b7fe203af0208596b45c0882884b820e54104597f1c1cfec5de8c6222941ad608e214bfa0c6b6759bc545992a022eddc41dcedfa482602d81125691d9a64fa8d0810b59455a3f35f820aeb2f25a88afe1b9e1d593f1d70445f46aae8fcf08df49345b0b7a2a42aab82a63331d64fb88329ac0a40eecae8328d99f11e99a976746bfbac01aeabcc7c2d465dd2f2a276766a59f67cd166bb0d857db6da9f8479317bcc6b6a7a5ebbea8a49517d23a39068838aa88a8fcdd181072620c4e5869c78568167a7bcb450d3dd5a6352a9e3ea9ddf5b38f9e76adc050b4f38bdd703f2e67406a4330d39beab0c99c03f4c17cc8ef55405783be3951d96dd78fb8d26b569b95ddb75359ae6ebf75b18282b853d4c96dcd74e1cc5da9552d7bb21e16d0b82bd68076bd32a3acdcf150b7b3e455cb6c9646960c51612da9eac407bc0fdb943096d95232e98c98cccd9eb9d8031594251ab5589b9ae978b37f2ac615517608a19553d36b1535f6e7ebc584fba22a09534df3a2825ac06daedd87a1d00d860e4c415437b6eb9302fdb1f2d173731e0bd798c0e1bc88a4e78cc2e7e177a517e4f906f7f46961ef131d1967eac4ad673f04c2e20865e7ecbc74eca5ce61965ada5ed07a7a95b087dd3e9c04851b3d86143d9b2b5fbb944380fe733539b3b3ab71bd30333f6d1c563ac1a71918c5f1612d5e49984124d9f7e7ce6aeff1aeacb2631ab1b525ab266131adbc0d779b01ac22a5c9b75a326b1d6cd9eb287613f253d8b28aca51a1dcf45746b455db3a84d7a3808acee1b1bc9b38b3d367a75b32d32ad0f57cba7dbcc9e690e8d112d5865603e13c7c7ac070d3876a6b4b2ce1a1d74013071e655ba4f354bd7307524acd715c4aa6eed3ef8813fbd5744de819157933ec670d946939d05c32f377b1a4ffea4b2b1b21f8ba161815145343cc78c21bef8ce2f1053cfbbd9c083a74da3cff55f99edadc8ae54166340887c7f7bacd8cb1735fce5c33a892", @ANYRES8=0x0, @ANYRES32=r0, @ANYBLOB="0f000501"], 0x34}, 0x1, 0x0, 0x0, 0x20040801}, 0x4000040) tkill$auto(0x1, 0x7) close_range$auto(0x2, 0x8000, 0x0) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event0\x00', 0x80, 0x0) ioctl$auto(0x3, 0x541b, 0x38) io_uring_setup$auto(0x6, 0x0) mbind$auto(0x0, 0x4e72, 0x4, 0x0, 0x20000000000006, 0xffffffff) 5m29.490844208s ago: executing program 9 (id=965): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) io_uring_setup$auto(0x6, 0x0) r0 = socket(0x2, 0x1, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000140), 0x402000, 0x0) setsockopt$auto(r0, 0x6, 0x9, 0x0, 0x3da) ioctl$auto_COMEDI_INSNLIST(0xffffffffffffffff, 0x8010640b, &(0x7f0000000200)={0x6, &(0x7f00000001c0)={0x2, 0x3, &(0x7f0000000180)=0x8, 0x5, 0x8}}) getsockopt$auto(r0, 0x6, 0x9, 0x0, 0x0) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/ip6_mr_vif\x00', 0xe40, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0x800000000000eb1, 0xfffffffffffffff6, 0x8000) read$auto_proc_reg_file_ops_compat_inode(r1, &(0x7f0000000000)=""/48, 0x30) socket(0x2, 0x80002, 0x73) bind$auto(0x3, &(0x7f0000000080), 0x6b) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x18, 0x5, 0x0) msgctl$auto(0x2, 0xc, &(0x7f0000000080)={{0x2, 0x0, 0x2, 0x6, 0x9, 0x6, 0x6}, 0x0, 0x0, 0x7, 0x80000001, 0xce0a, 0xf3, 0x80, 0x412f, 0x1, 0x125a, 0x9, 0x1}) socket(0xa, 0x800, 0x73) pipe2$auto(&(0x7f0000000040)=r2, 0x0) madvise$auto(0x0, 0x2000040080000016, 0xe) futex_waitv$auto(&(0x7f0000000000)={0xf, 0x5d94, 0x4, 0x4}, 0x77, 0x0, 0x0, 0x62bd) mprotect$auto(0x24, 0x8000000000000001, 0x4) io_uring_setup$auto(0x40005, &(0x7f0000000000)={0x6, 0x1, 0x400, 0x7, 0x1005, 0x6, 0x7, [0x4, 0x2ec, 0x8], {0x0, 0x1, 0xdffffff8, 0x7, 0x5, 0x100005, 0x1, 0xfffffffc, 0x7}, {0x4, 0x1001, 0x1, 0x2, 0x8, 0x200, 0x3, 0x0, 0x2}}) mprotect$auto(0x3, 0x1000, 0xfff) clone$auto(0x200, 0xff, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x100000000) socket(0x2, 0x80002, 0x73) bind$auto(0x3, &(0x7f0000000080), 0x6b) close_range$auto(0x0, 0xffffffffffffffff, 0x2) r3 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000540)='/dev/sequencer2\x00', 0x1c8340, 0x0) ioctl$auto(r3, 0x40085112, 0x3) write$auto_seq_oss_f_ops_seq_oss(r3, &(0x7f00000000c0)="84553b7e28ebdfc0872cc42d446b092ee7674b557e395de46908f5ff6ced951eb2b9bf7e290f04aed1bb9f60a1b23bf78296e35aff39801fa346364579d5ed69d127e0c1229b6510be2db6f10e5863f30511b7529b320e6b1e749e0e82fa28496476d1667816", 0x66) 5m29.141598598s ago: executing program 3 (id=966): mmap$auto(0xfe, 0x40009, 0x3, 0xf35a, 0x5, 0x80000028000) capset$auto(&(0x7f0000000080)={0x19980330}, 0x0) r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv6/conf/veth1/accept_ra_from_local\x00', 0x80002, 0x0) write$auto_proc_sys_file_operations_proc_sysctl(r0, 0x0, 0x0) 5m28.643137332s ago: executing program 48 (id=966): mmap$auto(0xfe, 0x40009, 0x3, 0xf35a, 0x5, 0x80000028000) capset$auto(&(0x7f0000000080)={0x19980330}, 0x0) r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv6/conf/veth1/accept_ra_from_local\x00', 0x80002, 0x0) write$auto_proc_sys_file_operations_proc_sysctl(r0, 0x0, 0x0) 5m28.492631847s ago: executing program 9 (id=969): mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) io_uring_setup$auto(0x1, 0x0) futex$auto(0x0, 0x6, 0x8, 0x0, 0x0, 0xffffffd6) syz_genetlink_get_family_id$auto_seg6(0x0, 0xffffffffffffffff) tkill$auto(0x1, 0x7) close_range$auto(0x2, 0x8000, 0x0) io_uring_setup$auto(0x6, 0x0) mbind$auto(0xf0, 0x100000004, 0x4, 0x0, 0x20000000000006, 0x2) 5m25.94259856s ago: executing program 9 (id=973): statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x1ff, 0x7, 0x1f, 0x7181, 0x1ffde, 0x7, 0x3, 0x9, 0x9, 0x3, 0x4, 0x1, 0xb4, 0x9, 0x8, 0x10003, 0x80, 0x4, 0x0, 0xa, 0x22000, 0x200, 0x0, 0x84, [0x3, 0x2, 0x0, 0x2, 0x0, 0x2000, 0x0, 0xe, 0x70624ce7, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x4000, 0x0, 0x6, 0x0, 0xfffffffffffbfffd, 0x4, 0x1, 0x10000000000, 0xffffffffffffffff, 0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x400000000005b8, 0xffff, 0x0, 0x0, 0x0, 0x6, 0xffffffffffffffff, 0x88e, 0x8000000000008, 0xfffffffffffffffc, 0x9, 0xa38, 0x0, 0x3, 0xfffffffffffffffc, 0x2, 0x1, 0x4]}, 0x1fe, 0xd) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="10002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0xf7374674b920089e) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) r0 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f00000001c0), 0x7, 0xa505}, 0x800}, 0x7, 0x4008) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) madvise$auto(0x0, 0xf663, 0x15) 5m25.549815322s ago: executing program 49 (id=973): statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x1ff, 0x7, 0x1f, 0x7181, 0x1ffde, 0x7, 0x3, 0x9, 0x9, 0x3, 0x4, 0x1, 0xb4, 0x9, 0x8, 0x10003, 0x80, 0x4, 0x0, 0xa, 0x22000, 0x200, 0x0, 0x84, [0x3, 0x2, 0x0, 0x2, 0x0, 0x2000, 0x0, 0xe, 0x70624ce7, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x4000, 0x0, 0x6, 0x0, 0xfffffffffffbfffd, 0x4, 0x1, 0x10000000000, 0xffffffffffffffff, 0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x400000000005b8, 0xffff, 0x0, 0x0, 0x0, 0x6, 0xffffffffffffffff, 0x88e, 0x8000000000008, 0xfffffffffffffffc, 0x9, 0xa38, 0x0, 0x3, 0xfffffffffffffffc, 0x2, 0x1, 0x4]}, 0x1fe, 0xd) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="10002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0xf7374674b920089e) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) r0 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f00000001c0), 0x7, 0xa505}, 0x800}, 0x7, 0x4008) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) madvise$auto(0x0, 0xf663, 0x15) 2.11077209s ago: executing program 2 (id=5659): openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) mmap$auto(0x0, 0x200001, 0x4000000000df, 0x40eb2, 0x402, 0x1) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) io_uring_setup$auto(0x6, 0x0) read$auto(0x3, 0x0, 0x80) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x10, 0x2, 0x9) sendmsg$auto_NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="1400"], 0x5f}, 0x1, 0x0, 0x0, 0x40040094}, 0x40) 1.89730457s ago: executing program 2 (id=5665): mmap$auto(0xffffffffffffffff, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) capget$auto(0x0, 0xfffffffffffffffe) capset$auto(0x0, &(0x7f0000000000)={0x1, 0x7, 0x8}) symlink$auto(&(0x7f0000000140)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000240)='./file0\x00') mmap$auto(0x3, 0xd41, 0x3, 0x10010, 0x4, 0x7) creat$auto(&(0x7f0000000680)='./file0\x00', 0x3) openat$auto_msr_fops_msr(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cpu/1/msr\x00', 0x20000, 0x0) pipe$auto(&(0x7f0000000000)) socket(0x1d, 0x2, 0x7) r0 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'team_slave_1\x00', 0x0}) connect$auto(0x3, &(0x7f00000018c0)=@can={0x1d, r1}, 0x18) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sda\x00', 0x8001, 0x0) ioctl$auto_def_blk_fops_fs(r2, 0x1, &(0x7f0000000000)) socket(0x8, 0x2, 0x88) r3 = open(&(0x7f0000000480)='./cgroup.cpu/cgroup.procs\x00', 0x80842, 0x91) read$auto(r3, 0x0, 0x1) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mbind$auto(0x0, 0x40, 0x4, 0x0, 0x3, 0x0) syz_clone(0x880180, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) sysfs$auto(0x2, 0x100000000000034, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r3, &(0x7f0000000000)=""/153, 0x99) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/kernel/shm_next_id\x00', 0x140, 0x0) unshare$auto(0x8000000) mprotect$auto(0x1ffff000, 0x8000000000000001, 0xd) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x0, 0x0) 1.679210271s ago: executing program 1 (id=5670): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x2, 0x1, 0x0) newfstatat$auto(0xffffffffffffffff, 0x0, 0x0, 0x6) bind$auto(0x3, 0x0, 0x6a) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x5, 0x20000000) write$auto(0x3, 0x0, 0xfdf3) read$auto(r0, 0x0, 0x2) setsockopt$auto(0x3, 0x1, 0x21, 0x0, 0x9) write$auto(0x3, 0x0, 0xfffffdef) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) 1.437589524s ago: executing program 2 (id=5680): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x4, 0x8000) lstat$auto(0x0, &(0x7f00000000c0)={0xa, 0x90000, 0x100000001, 0xffff, 0x0, 0xee00, 0x0, 0x1, 0x6, 0x6, 0x0, 0x2, 0xd0, 0x10001, 0x100, 0x8, 0xffffffff93ef807e}) r0 = socket(0x15, 0x5, 0x0) sendmsg$auto(r0, &(0x7f0000000000)={&(0x7f00000000c0), 0x7fc, 0x0, 0x3, 0x0, 0x200, 0x4}, 0x0) 1.426807532s ago: executing program 1 (id=5673): openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000340)='/dev/v4l-subdev2\x00', 0x80000, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) io_uring_setup$auto(0x6, 0x0) ioctl$auto(0x3, 0x4020565b, 0x38) 1.381370254s ago: executing program 0 (id=5674): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000200)='/sys/fs/ocfs2/active_cluster_plugin\x00', 0x22100, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000003480)=""/247, 0xf7) 1.210113406s ago: executing program 8 (id=5676): syz_open_procfs$namespace(0x0, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) ioctl$auto(0x4000000000000c8, 0x80, 0x3) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket$nl_generic(0x10, 0x3, 0x10) pipe2$auto(0x0, 0x800) socket$nl_generic(0x10, 0x3, 0x10) socketpair$auto(0x1, 0x5, 0x1, 0x0) dup2$auto(0x5, 0x4) splice$auto(0x4, 0x0, 0x2, 0x0, 0x80000001, 0x9) landlock_restrict_self$auto(0xffffffffffffffff, 0x5) mprotect$auto(0x1ffff000, 0x8000000000000004, 0xd) 1.125297991s ago: executing program 0 (id=5677): mmap$auto(0x0, 0x2000a, 0x10000000000df, 0xeb2, 0x401, 0x8000) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000226bd7000fedbdf25030000000800030000020000060007000080000008000200", @ANYRES32=0x0, @ANYBLOB="0a00050000000000000000000a00010000000000000000000a000500000000000000000008000200", @ANYRES32, @ANYBLOB="08000200", @ANYRES32=0x0, @ANYBLOB="e0001300"], 0x68}, 0x1, 0x0, 0x0, 0x40080}, 0x40090) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="13"], 0x1ac}}, 0x4004) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 1.05369697s ago: executing program 8 (id=5678): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x18, 0xa, 0x1) socket(0xa, 0x3, 0x3a) setsockopt$auto(0x400000000000003, 0x29, 0xc8, 0x0, 0x567) connect$auto(0x3, 0x0, 0x55) write$auto(0x3, 0x0, 0xfdf3) 963.613511ms ago: executing program 1 (id=5679): close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x2, 0x88) io_uring_setup$auto(0x6, 0x0) io_uring_setup$auto(0x6, 0x0) socket(0xa, 0x2, 0x3a) openat$auto_random_fops_random(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) pipe$auto(0x0) dup2$auto(0x5, 0x4) write$auto(0x6, 0x0, 0x100000001) 813.658591ms ago: executing program 0 (id=5681): r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/est_cpulist\x00', 0x0, 0x0) read$auto(r0, &(0x7f0000000040)='\x00', 0x461d) setreuid$auto(0x0, 0x0) read$auto(0x3, 0x0, 0x80) 744.295372ms ago: executing program 8 (id=5682): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) pselect6$auto(0x9, &(0x7f0000000000)={[0xbd12, 0x4, 0x20000000, 0x6, 0x485c, 0x2bc9, 0xfff, 0x9, 0x5, 0xffffffff, 0x8000000000000001, 0xfffffffffffffffd, 0x2f, 0x100, 0x8, 0x1]}, 0x0, 0x0, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) r0 = openat$auto_o2hb_debug_fops_heartbeat(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/o2hb/livenodes\x00', 0x0, 0x0) read$auto_o2hb_debug_fops_heartbeat(r0, 0x0, 0x0) r1 = socket(0xa, 0x2, 0x0) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22240, 0x155) socket(0xa, 0x2, 0x73) sendmmsg$auto(r1, &(0x7f0000000180)={{&(0x7f0000000040), 0xb8, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x9}, 0x1, 0x8008) 711.514685ms ago: executing program 2 (id=5683): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x2, 0x1, 0x0) newfstatat$auto(0xffffffffffffffff, 0x0, 0x0, 0x6) bind$auto(0x3, 0x0, 0x6a) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x5, 0x20000000) write$auto(0x3, 0x0, 0xfdf3) read$auto(r0, 0x0, 0x2) setsockopt$auto(0x3, 0x1, 0x21, 0x0, 0x9) write$auto(0x3, 0x0, 0xfffffdef) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) 657.525613ms ago: executing program 0 (id=5684): r0 = open(&(0x7f00000001c0)='./cgroup\x00', 0x0, 0x6f) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22240, 0x155) r1 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000100), 0x80081, 0x0) ioctl$auto_PPPIOCSMRU(r1, 0xc004743e, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) write$auto(0x3, 0x0, 0xfffffdef) openat$auto_vcs_fops_vc_screen(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcsa1\x00', 0x48080, 0x0) write$auto_snd_pcm_oss_f_reg_pcm_oss(r0, &(0x7f0000000000)="f886af3b", 0x4) 568.778479ms ago: executing program 8 (id=5685): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB='H'], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x3, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 509.479493ms ago: executing program 1 (id=5686): mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) socket(0x10, 0x2, 0x0) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00211459a600fbdbdf25020000000800030000000000"], 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0xc0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) r1 = syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$auto_BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0xffffffffffffff7c, &(0x7f00000002c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYRES64=r0], 0x1c}, 0x1, 0x0, 0x0, 0xae31e9c9e702e50}, 0x40001) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYRES32=r1, @ANYBLOB="18"], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 465.434391ms ago: executing program 2 (id=5687): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/mtd/mtd0/ecc_strength\x00', 0x0, 0x0) read$auto(r0, 0x0, 0x8000) 322.846236ms ago: executing program 0 (id=5688): bpf$auto(0x0, 0x0, 0x10) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0xdd, 0x8000) r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x48041, 0x0) r1 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000340)='/proc/sys/net/ipv4/neigh/bridge0/retrans_time\x00', 0x101000, 0x0) read$auto(r1, 0x0, 0x1ff) write$auto(r0, 0x0, 0x6) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/net/bond0/bonding/primary_reselect\x00', 0x400, 0x0) mprotect$auto(0x1ffff000, 0x8000000000000001, 0xd) r2 = openat$auto_fops_init_pkru_pkeys(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$auto_fops_init_pkru_pkeys(r2, 0x0, 0x2b) socket(0x2b, 0x1, 0x1) 322.739071ms ago: executing program 8 (id=5689): mmap$auto(0x0, 0x2000a, 0x10000000000df, 0xeb2, 0x401, 0x8000) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000226bd7000fedbdf25030000000800030000020000060007000080000008000200", @ANYRES32=0x0, @ANYBLOB="0a00050000000000000000000a00010000000000000000000a000500000000000000000008000200", @ANYRES32, @ANYBLOB="08000200", @ANYRES32=0x0, @ANYBLOB="e0001300"], 0x68}, 0x1, 0x0, 0x0, 0x40080}, 0x40090) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="13"], 0x1ac}}, 0x4004) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 134.918352ms ago: executing program 1 (id=5690): acct$auto(&(0x7f0000000040)='/sys/kernel/mm/transparent_hugepage/use_zero_page\x00') acct$auto(0x0) 71.17102ms ago: executing program 2 (id=5691): r0 = openat$auto_nsim_pp_hold_fops_netdev(0xffffffffffffff9c, &(0x7f0000001480)='/sys/kernel/debug/netdevsim/netdevsim5/ports/2/pp_hold\x00', 0x2, 0x0) write$auto_nsim_pp_hold_fops_netdev(r0, &(0x7f0000001a80)="7476bdd9080e", 0x6) 71.083677ms ago: executing program 8 (id=5692): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x18, 0xa, 0x1) socket(0xa, 0x3, 0x3a) setsockopt$auto(0x400000000000003, 0x29, 0xc8, 0x0, 0x567) connect$auto(0x3, 0x0, 0x55) write$auto(0x3, 0x0, 0xfdf3) 13.643213ms ago: executing program 1 (id=5693): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) pselect6$auto(0x9, &(0x7f0000000000)={[0xbd12, 0x4, 0x20000000, 0x6, 0x485c, 0x2bc9, 0xfff, 0x9, 0x5, 0xffffffff, 0x8000000000000001, 0xfffffffffffffffd, 0x2f, 0x100, 0x8, 0x1]}, 0x0, 0x0, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) r0 = openat$auto_o2hb_debug_fops_heartbeat(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/o2hb/livenodes\x00', 0x0, 0x0) read$auto_o2hb_debug_fops_heartbeat(r0, 0x0, 0x0) r1 = socket(0xa, 0x2, 0x0) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22240, 0x155) socket(0xa, 0x2, 0x73) sendmmsg$auto(r1, &(0x7f0000000180)={{&(0x7f0000000040), 0xb8, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x9}, 0x1, 0x8008) 0s ago: executing program 0 (id=5694): syz_genetlink_get_family_id$auto_ovs_flow(0x0, 0xffffffffffffffff) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/mm/transparent_hugepage/defrag\x00', 0x400, 0x0) mprotect$auto(0x1ffff000, 0x8000000000000001, 0xd) r0 = openat$auto_ecryptfs_miscdev_fops_miscdev(0xffffffffffffff9c, &(0x7f00000001c0), 0x1, 0x0) write$auto(r0, &(0x7f0000000c40)='ethtool\x00', 0x5) kernel console output (not intermixed with test programs): 352.623533][T11706] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 352.635455][T11706] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 352.650383][T11706] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 352.660819][T11706] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 352.673042][T11706] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 352.686319][T11706] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 352.697077][T11706] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 352.707253][T11706] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 352.721736][T11706] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 352.732851][T11706] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 352.744221][T11706] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 352.756592][T11706] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 352.771786][T11820] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 352.795306][T11706] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 352.804587][T11706] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 352.814760][T11706] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 352.835908][T11706] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 352.898294][T11760] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 353.056971][ T5839] Bluetooth: hci2: command tx timeout [ 353.104864][ T4234] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 353.108109][T11760] veth0_vlan: entered promiscuous mode [ 353.124271][ T4234] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 353.216451][T11760] veth1_vlan: entered promiscuous mode [ 353.251776][T11820] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 353.268407][ T7185] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 353.297400][ T7185] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 353.307637][T11760] veth0_macvtap: entered promiscuous mode [ 353.354349][T11760] veth1_macvtap: entered promiscuous mode [ 353.447718][T11760] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 353.487519][T11760] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 353.511399][T11760] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 353.557118][T11760] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 353.605890][T11760] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 353.636012][T11760] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 353.656009][T11760] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 353.668761][T11760] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 353.679942][T11760] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 353.703585][T11760] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 353.724222][T11760] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 353.743968][T11760] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 353.764622][T11760] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 353.777444][T11760] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 353.788240][T11760] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 353.799165][T11760] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 353.820518][T11760] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 353.908704][T11760] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 353.945991][T11760] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 353.985290][T11760] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 354.013085][T11760] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 354.037812][T11760] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 354.053884][T11760] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 354.077564][T11760] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 354.088611][T11966] sd 0:0:1:0: PR command failed: 1026 [ 354.094334][T11966] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 354.112694][T11760] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 354.126066][T11966] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 354.141609][T11760] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 354.177623][T11966] netlink: Unknown conntrack attr (type=64, max=9) [ 354.184316][T11760] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 354.224491][T11760] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 354.257696][ T5839] Bluetooth: hci0: command tx timeout [ 354.266144][T11760] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 354.289509][T11760] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 354.303189][T11760] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 354.313504][T11760] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 354.324671][T11760] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 354.351427][T11760] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 354.411844][T11760] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 354.433083][T11760] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 354.446687][T11760] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 354.455623][T11760] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 354.596098][T11820] veth0_vlan: entered promiscuous mode [ 354.725518][ T54] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 354.726855][T11820] veth1_vlan: entered promiscuous mode [ 354.747915][ T54] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 354.885992][ T54] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 354.915754][ T54] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 354.951833][T11820] veth0_macvtap: entered promiscuous mode [ 354.998110][T11820] veth1_macvtap: entered promiscuous mode [ 355.098368][T11820] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 355.137273][ T5839] Bluetooth: hci2: command tx timeout [ 355.143111][T11820] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 355.183431][T11820] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 355.208415][T11820] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 355.229146][T11820] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 355.245707][T11820] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 355.266187][T11820] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 355.303935][T11820] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 355.334247][T11820] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 355.376900][T11820] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 355.415537][T11820] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 355.446049][T11820] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 355.472450][T11820] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 355.492299][ T29] audit: type=1107 audit(1734217976.932:9): pid=11998 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 355.498411][T11820] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 355.526605][T11820] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 355.541966][T11820] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 355.571331][T11820] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 355.596857][T11820] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 355.631943][T11820] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 355.827728][T11820] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 355.857281][T11820] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 355.875306][T11820] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 355.888026][T11820] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 355.903108][T11820] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 355.914064][T11820] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 355.924363][T11820] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 355.935241][T11820] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 355.946997][T11820] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 355.973623][T11820] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 355.994135][T11820] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 356.019621][T11820] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 356.042964][T11820] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 356.057822][T11820] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 356.079935][T11820] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 356.106367][T11820] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 356.125851][T11820] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 356.148151][T11820] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 356.168076][T11820] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 356.340332][ T11] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 356.389400][T11820] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 356.428499][T11820] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 356.438567][T11820] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 356.457075][T11820] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 356.544609][ T11] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 356.829088][ T11] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 357.021862][ T11] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 357.144621][ T297] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 357.172299][ T297] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 357.216882][ T5839] Bluetooth: hci2: command tx timeout [ 357.317396][ T297] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 357.369419][ T297] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 357.453635][ T11] bridge_slave_1: left allmulticast mode [ 357.465053][ T5834] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 357.475451][ T5834] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 357.487862][ T5834] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 357.496272][ T5834] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 357.515471][ T5834] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 357.517821][ T11] bridge_slave_1: left promiscuous mode [ 357.532969][ T5834] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 357.547817][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 357.556926][ T11] bridge_slave_0: left allmulticast mode [ 357.562607][ T11] bridge_slave_0: left promiscuous mode [ 357.575390][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 359.122328][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 359.172552][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 359.210796][ T11] bond0 (unregistering): Released all slaves [ 359.642940][T12161] FAULT_INJECTION: forcing a failure. [ 359.642940][T12161] name failslab, interval 1, probability 0, space 0, times 0 [ 359.655989][ T5834] Bluetooth: hci1: command tx timeout [ 359.656139][T12161] CPU: 0 UID: 0 PID: 12161 Comm: syz.1.995 Not tainted 6.13.0-rc2-syzkaller-00333-ga0e3919a2df2 #0 [ 359.672325][T12161] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 359.682411][T12161] Call Trace: [ 359.685719][T12161] [ 359.688680][T12161] dump_stack_lvl+0x16c/0x1f0 [ 359.693395][T12161] should_fail_ex+0x497/0x5b0 [ 359.698103][T12161] ? fs_reclaim_acquire+0xae/0x150 [ 359.703251][T12161] should_failslab+0xc2/0x120 [ 359.707968][T12161] __kmalloc_noprof+0xce/0x4f0 [ 359.712773][T12161] ? __pfx_d_absolute_path+0x10/0x10 [ 359.718086][T12161] ? tomoyo_encode2+0x100/0x3e0 [ 359.722952][T12161] tomoyo_encode2+0x100/0x3e0 [ 359.727642][T12161] ? rcu_is_watching+0x12/0xc0 [ 359.732417][T12161] tomoyo_realpath_from_path+0x1a7/0x710 [ 359.738061][T12161] tomoyo_check_open_permission+0x2ad/0x3c0 [ 359.743983][T12161] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 359.750435][T12161] ? __pfx_hook_file_open+0x10/0x10 [ 359.755658][T12161] ? lock_acquire+0x2f/0xb0 [ 359.760167][T12161] tomoyo_file_open+0x6b/0x90 [ 359.764856][T12161] security_file_open+0x84/0x1e0 [ 359.769807][T12161] do_dentry_open+0x57e/0x1ea0 [ 359.774586][T12161] vfs_open+0x82/0x3f0 [ 359.778674][T12161] ? may_open+0x1f2/0x400 [ 359.783019][T12161] path_openat+0x1e6a/0x2d60 [ 359.787646][T12161] ? __pfx_path_openat+0x10/0x10 [ 359.792592][T12161] ? __pfx___lock_acquire+0x10/0x10 [ 359.797804][T12161] ? lock_acquire.part.0+0x11b/0x380 [ 359.803090][T12161] ? find_held_lock+0x2d/0x110 [ 359.807873][T12161] do_filp_open+0x20c/0x470 [ 359.812383][T12161] ? __pfx_do_filp_open+0x10/0x10 [ 359.817412][T12161] ? find_held_lock+0x2d/0x110 [ 359.822201][T12161] ? alloc_fd+0x41f/0x760 [ 359.826544][T12161] do_sys_openat2+0x17a/0x1e0 [ 359.831232][T12161] ? __pfx_do_sys_openat2+0x10/0x10 [ 359.836447][T12161] ? __fget_files+0x206/0x3a0 [ 359.841141][T12161] __x64_sys_openat+0x175/0x210 [ 359.846002][T12161] ? __pfx___x64_sys_openat+0x10/0x10 [ 359.851386][T12161] ? ksys_write+0x1ba/0x250 [ 359.855914][T12161] do_syscall_64+0xcd/0x250 [ 359.860430][T12161] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 359.866333][T12161] RIP: 0033:0x7fb7b9b85d19 [ 359.870754][T12161] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 359.890367][T12161] RSP: 002b:00007fb7baa34038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 359.898788][T12161] RAX: ffffffffffffffda RBX: 00007fb7b9d75fa0 RCX: 00007fb7b9b85d19 [ 359.906764][T12161] RDX: 00000000001c1800 RSI: 0000000020001280 RDI: ffffffffffffff9c [ 359.914743][T12161] RBP: 00007fb7baa34090 R08: 0000000000000000 R09: 0000000000000000 [ 359.922723][T12161] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 359.930698][T12161] R13: 0000000000000001 R14: 00007fb7b9d75fa0 R15: 00007ffef6c4acd8 [ 359.938689][T12161] [ 359.946326][T12161] ERROR: Out of memory at tomoyo_realpath_from_path. [ 360.210776][T12174] capability: warning: `syz.1.996' uses 32-bit capabilities (legacy support in use) [ 360.365323][ T11] hsr_slave_0: left promiscuous mode [ 360.413794][ T11] hsr_slave_1: left promiscuous mode [ 360.421168][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 360.435977][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 360.457068][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 360.474731][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 360.556612][ T11] veth1_macvtap: left promiscuous mode [ 360.564743][ T11] veth0_macvtap: left promiscuous mode [ 360.581862][ T11] veth1_vlan: left promiscuous mode [ 360.596290][ T11] veth0_vlan: left promiscuous mode [ 361.696877][ T5834] Bluetooth: hci1: command tx timeout [ 361.914725][ T11] team0 (unregistering): Port device team_slave_1 removed [ 362.042006][ T11] team0 (unregistering): Port device team_slave_0 removed [ 363.583916][T12075] chnl_net:caif_netlink_parms(): no params data found [ 363.615124][T12195] netlink: 342 bytes leftover after parsing attributes in process `syz.2.1002'. [ 363.776246][ T5834] Bluetooth: hci1: command tx timeout [ 364.017866][T12075] bridge0: port 1(bridge_slave_0) entered blocking state [ 364.046015][T12075] bridge0: port 1(bridge_slave_0) entered disabled state [ 364.053288][T12075] bridge_slave_0: entered allmulticast mode [ 364.090169][T12075] bridge_slave_0: entered promiscuous mode [ 364.133118][T12075] bridge0: port 2(bridge_slave_1) entered blocking state [ 364.150892][T12075] bridge0: port 2(bridge_slave_1) entered disabled state [ 364.166897][T12075] bridge_slave_1: entered allmulticast mode [ 364.199910][T12075] bridge_slave_1: entered promiscuous mode [ 364.333355][T12075] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 364.383196][T12075] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 364.534706][T12075] team0: Port device team_slave_0 added [ 364.549269][T12075] team0: Port device team_slave_1 added [ 364.603993][T12075] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 364.621527][T12075] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 364.690333][T12075] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 364.704947][T12075] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 364.711975][T12075] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 364.738572][T12075] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 365.029615][T12075] hsr_slave_0: entered promiscuous mode [ 365.080754][T12320] FAULT_INJECTION: forcing a failure. [ 365.080754][T12320] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 365.096747][T12075] hsr_slave_1: entered promiscuous mode [ 365.131178][T12075] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 365.146156][T12075] Cannot create hsr debugfs directory [ 365.160643][T12320] CPU: 1 UID: 0 PID: 12320 Comm: syz.1.1019 Not tainted 6.13.0-rc2-syzkaller-00333-ga0e3919a2df2 #0 [ 365.171458][T12320] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 365.181540][T12320] Call Trace: [ 365.184841][T12320] [ 365.187806][T12320] dump_stack_lvl+0x16c/0x1f0 [ 365.192521][T12320] should_fail_ex+0x497/0x5b0 [ 365.197235][T12320] ? fs_reclaim_acquire+0xae/0x150 [ 365.202381][T12320] should_fail_alloc_page+0xe7/0x130 [ 365.207704][T12320] prepare_alloc_pages.constprop.0+0x16f/0x560 [ 365.213906][T12320] ? mark_lock+0xb5/0xc60 [ 365.218285][T12320] ? __pfx_mark_lock+0x10/0x10 [ 365.223097][T12320] __alloc_pages_noprof+0x190/0x25b0 [ 365.228420][T12320] ? __pfx_mark_lock+0x10/0x10 [ 365.233223][T12320] ? hlock_class+0x4e/0x130 [ 365.237759][T12320] ? mark_lock+0xb5/0xc60 [ 365.242135][T12320] ? __pfx_mark_lock+0x10/0x10 [ 365.246972][T12320] ? __pfx___alloc_pages_noprof+0x10/0x10 [ 365.252748][T12320] ? hlock_class+0x4e/0x130 [ 365.257292][T12320] ? mark_lock+0xb5/0xc60 [ 365.261670][T12320] ? hlock_class+0x4e/0x130 [ 365.266290][T12320] ? __lock_acquire+0xcc5/0x3c40 [ 365.271249][T12320] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 365.277154][T12320] ? policy_nodemask+0xea/0x4e0 [ 365.282028][T12320] alloc_pages_mpol_noprof+0x2c9/0x610 [ 365.287509][T12320] ? __pfx_alloc_pages_mpol_noprof+0x10/0x10 [ 365.293505][T12320] ? hlock_class+0x4e/0x130 [ 365.298025][T12320] folio_alloc_mpol_noprof+0x36/0xd0 [ 365.303329][T12320] vma_alloc_folio_noprof+0xee/0x1b0 [ 365.308628][T12320] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 365.314547][T12320] ? find_held_lock+0x2d/0x110 [ 365.319328][T12320] do_pte_missing+0x2017/0x3e00 [ 365.324204][T12320] __handle_mm_fault+0x103c/0x2a40 [ 365.329331][T12320] ? find_held_lock+0x2d/0x110 [ 365.334196][T12320] ? __pfx___handle_mm_fault+0x10/0x10 [ 365.339661][T12320] ? follow_page_pte+0x3c3/0x1b20 [ 365.344694][T12320] ? __pfx_lock_release+0x10/0x10 [ 365.349739][T12320] ? follow_page_pte+0x3f7/0x1b20 [ 365.354777][T12320] handle_mm_fault+0x3fa/0xaa0 [ 365.359555][T12320] __get_user_pages+0x8d9/0x3b50 [ 365.364507][T12320] ? __pfx_mt_find+0x10/0x10 [ 365.369108][T12320] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 365.374745][T12320] ? __pfx___get_user_pages+0x10/0x10 [ 365.380126][T12320] ? __mm_populate+0x21d/0x380 [ 365.384902][T12320] populate_vma_page_range+0x27f/0x3a0 [ 365.390373][T12320] ? __pfx_populate_vma_page_range+0x10/0x10 [ 365.396358][T12320] ? __pfx_find_vma_intersection+0x10/0x10 [ 365.402169][T12320] ? vm_mmap_pgoff+0x25b/0x360 [ 365.406954][T12320] __mm_populate+0x1d6/0x380 [ 365.411554][T12320] ? __pfx___mm_populate+0x10/0x10 [ 365.416676][T12320] ? up_write+0x1b2/0x520 [ 365.421016][T12320] vm_mmap_pgoff+0x293/0x360 [ 365.425618][T12320] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 365.430743][T12320] ? __fget_files+0x206/0x3a0 [ 365.435439][T12320] ksys_mmap_pgoff+0x7d/0x5c0 [ 365.440164][T12320] ? __pfx_ksys_write+0x10/0x10 [ 365.445028][T12320] __x64_sys_mmap+0x125/0x190 [ 365.449717][T12320] do_syscall_64+0xcd/0x250 [ 365.454229][T12320] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 365.460130][T12320] RIP: 0033:0x7fb7b9b85d19 [ 365.464547][T12320] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 365.484592][T12320] RSP: 002b:00007fb7baa34038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 365.493007][T12320] RAX: ffffffffffffffda RBX: 00007fb7b9d75fa0 RCX: 00007fb7b9b85d19 [ 365.500980][T12320] RDX: 00000000000000df RSI: 0000000000400008 RDI: 0000000000000000 [ 365.508950][T12320] RBP: 00007fb7baa34090 R08: 0000000000000002 R09: 0000000000008000 [ 365.516920][T12320] R10: 0000000000009b72 R11: 0000000000000246 R12: 0000000000000002 [ 365.524892][T12320] R13: 0000000000000001 R14: 00007fb7b9d75fa0 R15: 00007ffef6c4acd8 [ 365.532879][T12320] [ 365.713565][T12291] netlink: 28 bytes leftover after parsing attributes in process `syz.8.1016'. [ 365.855076][T12291] bridge_slave_1: left allmulticast mode [ 365.861147][ T5834] Bluetooth: hci1: command tx timeout [ 365.908324][T12291] bridge_slave_1: left promiscuous mode [ 365.924375][T12291] bridge0: port 2(bridge_slave_1) entered disabled state [ 365.958591][T12291] bridge_slave_0: left allmulticast mode [ 365.989916][T12291] bridge_slave_0: left promiscuous mode [ 366.004830][T12291] bridge0: port 1(bridge_slave_0) entered disabled state [ 366.423433][T12350] MTRR 1 not used [ 366.934890][T12075] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 366.986250][T12075] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 367.008992][T12075] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 367.037636][T12075] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 367.093637][T12374] netlink: 342 bytes leftover after parsing attributes in process `syz.8.1029'. [ 367.302438][T12075] 8021q: adding VLAN 0 to HW filter on device bond0 [ 367.355272][T12075] 8021q: adding VLAN 0 to HW filter on device team0 [ 367.419216][ T69] bridge0: port 1(bridge_slave_0) entered blocking state [ 367.426420][ T69] bridge0: port 1(bridge_slave_0) entered forwarding state [ 367.452254][ T69] bridge0: port 2(bridge_slave_1) entered blocking state [ 367.459438][ T69] bridge0: port 2(bridge_slave_1) entered forwarding state [ 367.949882][T12408] Setting dangerous option i915.request_timeout_ms - tainting kernel [ 368.063481][T12075] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 368.110605][T12075] veth0_vlan: entered promiscuous mode [ 368.121722][T12075] veth1_vlan: entered promiscuous mode [ 368.179727][T12075] veth0_macvtap: entered promiscuous mode [ 368.205968][T12075] veth1_macvtap: entered promiscuous mode [ 368.230054][T12075] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 368.240870][T12075] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 368.251008][T12075] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 368.261925][T12075] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 368.272065][T12075] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 368.283578][T12075] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 368.294709][T12075] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 368.305328][T12075] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 368.316673][T12075] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 368.328136][T12075] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 368.338101][T12075] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 368.348612][T12075] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 368.358574][T12075] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 368.369064][T12075] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 368.378995][T12075] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 368.390420][T12075] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 368.401252][T12075] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 368.412098][T12075] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 368.423826][T12075] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 368.438739][T12075] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 368.449259][T12075] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 368.459204][T12075] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 368.469677][T12075] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 368.479611][T12075] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 368.491051][T12075] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 368.501870][T12075] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 368.512414][T12075] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 368.522316][T12075] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 368.532859][T12075] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 368.543222][T12075] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 368.553761][T12075] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 368.564022][T12075] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 368.574566][T12075] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 368.586047][T12075] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 368.597827][T12075] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 368.608551][T12075] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 368.619082][T12075] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 368.630623][T12075] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 368.712172][T12075] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 368.721632][T12075] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 368.721678][T12075] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 368.721717][T12075] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 368.968413][T12435] Process accounting resumed [ 369.027677][ T69] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 369.038498][ T69] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 369.119300][ T4234] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 369.127961][ T4234] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 369.402143][T12454] bond0: option updelay: invalid value (/','}:--$:) [ 369.465912][T12454] bond0: option updelay: allowed values 0 - 2147483647 [ 369.818128][T12478] Process accounting resumed [ 371.591782][T12554] binder: 12551:12554 ioctl c018620b 9 returned -14 [ 372.321328][T12591] binder: 12590:12591 ioctl c018620b 9 returned -14 [ 373.023381][T12619] binder: 12618:12619 ioctl c018620b 9 returned -14 [ 375.197637][T12705] netlink: 342 bytes leftover after parsing attributes in process `syz.8.1139'. [ 375.593326][T12726] rnbd_client L213: map_device: Parameters missing [ 375.806679][T12739] netlink: 342 bytes leftover after parsing attributes in process `syz.8.1151'. [ 376.517266][T12769] netlink: 342 bytes leftover after parsing attributes in process `syz.1.1160'. [ 377.304957][T12804] netlink: 342 bytes leftover after parsing attributes in process `syz.1.1172'. [ 378.051842][T12832] rnbd_client L213: map_device: Parameters missing [ 378.696363][T12864] netlink: 'syz.1.1191': attribute type 5 has an invalid length. [ 378.706164][T12864] netlink: 314 bytes leftover after parsing attributes in process `syz.1.1191'. [ 378.823608][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.831623][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 381.198522][T12983] Process accounting resumed [ 383.374835][T13089] netlink: 342 bytes leftover after parsing attributes in process `syz.0.1266'. [ 387.161030][T13280] openvswitch: netlink: IPv6 tunnel dst address is zero [ 387.968350][ T29] audit: type=1800 audit(1734218009.402:10): pid=13320 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1342" name="version" dev="configfs" ino=39744 res=0 errno=0 [ 392.420262][ T29] audit: type=1800 audit(1734218013.862:11): pid=13524 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1420" name="version" dev="configfs" ino=41067 res=0 errno=0 [ 393.096483][ T29] audit: type=1800 audit(1734218014.532:12): pid=13556 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1432" name="version" dev="configfs" ino=41113 res=0 errno=0 [ 393.402904][T13567] Process accounting resumed [ 394.448478][T13619] netlink: 314 bytes leftover after parsing attributes in process `syz.0.1455'. [ 394.546840][T13623] netlink: 342 bytes leftover after parsing attributes in process `syz.8.1456'. [ 394.976132][T13641] Process accounting resumed [ 395.089469][T13647] netlink: 206 bytes leftover after parsing attributes in process `syz.0.1464'. [ 395.188325][T13650] netlink: 342 bytes leftover after parsing attributes in process `syz.1.1467'. [ 395.822767][T13685] netlink: 314 bytes leftover after parsing attributes in process `syz.0.1478'. [ 396.066482][T13697] netlink: 342 bytes leftover after parsing attributes in process `syz.2.1480'. [ 396.289763][T13712] netlink: 206 bytes leftover after parsing attributes in process `syz.2.1487'. [ 396.463241][T13720] udc dummy_udc.0: soft-connect without a gadget driver [ 399.762962][T13868] syz.2.1539: vmalloc error: size 4503599627371522, exceeds total pages, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 399.852162][T13868] CPU: 0 UID: 0 PID: 13868 Comm: syz.2.1539 Tainted: G U 6.13.0-rc2-syzkaller-00333-ga0e3919a2df2 #0 [ 399.864472][T13868] Tainted: [U]=USER [ 399.868301][T13868] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 399.878383][T13868] Call Trace: [ 399.881688][T13868] [ 399.884654][T13868] dump_stack_lvl+0x16c/0x1f0 [ 399.889378][T13868] warn_alloc+0x24d/0x3a0 [ 399.893756][T13868] ? __pfx_warn_alloc+0x10/0x10 [ 399.898652][T13868] ? __pfx_mark_lock+0x10/0x10 [ 399.903471][T13868] ? lock_acquire.part.0+0x11b/0x380 [ 399.908799][T13868] __vmalloc_node_range_noprof+0x10df/0x1530 [ 399.914801][T13868] ? rcu_is_watching+0x12/0xc0 [ 399.919581][T13868] ? trace_contention_end+0xee/0x140 [ 399.924898][T13868] ? dvb_demux_do_ioctl+0x54d/0x1340 [ 399.930221][T13868] ? dvb_demux_do_ioctl+0x496/0x1340 [ 399.935533][T13868] ? __pfx___mutex_lock+0x10/0x10 [ 399.940574][T13868] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 399.946930][T13868] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 399.952856][T13868] ? dvb_demux_do_ioctl+0x54d/0x1340 [ 399.958171][T13868] vmalloc_noprof+0x6b/0x90 [ 399.962690][T13868] ? dvb_demux_do_ioctl+0x54d/0x1340 [ 399.968001][T13868] dvb_demux_do_ioctl+0x54d/0x1340 [ 399.973146][T13868] dvb_usercopy+0x165/0x320 [ 399.977659][T13868] ? __pfx_dvb_demux_do_ioctl+0x10/0x10 [ 399.983227][T13868] ? __pfx_dvb_usercopy+0x10/0x10 [ 399.988266][T13868] ? __pfx_lock_release+0x10/0x10 [ 399.993322][T13868] ? __fget_files+0x206/0x3a0 [ 399.998021][T13868] dvb_demux_ioctl+0x29/0x40 [ 400.002624][T13868] ? __pfx_dvb_demux_ioctl+0x10/0x10 [ 400.007921][T13868] __x64_sys_ioctl+0x190/0x200 [ 400.012708][T13868] do_syscall_64+0xcd/0x250 [ 400.017227][T13868] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 400.023138][T13868] RIP: 0033:0x7fbad8585d19 [ 400.027561][T13868] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 400.047182][T13868] RSP: 002b:00007fbad948b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 400.055611][T13868] RAX: ffffffffffffffda RBX: 00007fbad8775fa0 RCX: 00007fbad8585d19 [ 400.063761][T13868] RDX: 0010000000000402 RSI: 0000000000006f2d RDI: 0000000000000003 [ 400.071739][T13868] RBP: 00007fbad8601a20 R08: 0000000000000000 R09: 0000000000000000 [ 400.079713][T13868] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 400.087687][T13868] R13: 0000000000000000 R14: 00007fbad8775fa0 R15: 00007ffd952b23a8 [ 400.095675][T13868] [ 400.206608][T13868] Mem-Info: [ 400.209795][T13868] active_anon:10434 inactive_anon:0 isolated_anon:0 [ 400.209795][T13868] active_file:5347 inactive_file:51729 isolated_file:0 [ 400.209795][T13868] unevictable:768 dirty:105 writeback:0 [ 400.209795][T13868] slab_reclaimable:11332 slab_unreclaimable:115637 [ 400.209795][T13868] mapped:24081 shmem:1435 pagetables:725 [ 400.209795][T13868] sec_pagetables:0 bounce:0 [ 400.209795][T13868] kernel_misc_reclaimable:0 [ 400.209795][T13868] free:1310501 free_pcp:3026 free_cma:0 [ 400.288032][T13868] Node 0 active_anon:41736kB inactive_anon:0kB active_file:21388kB inactive_file:206840kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:96324kB dirty:420kB writeback:0kB shmem:4204kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11576kB pagetables:3000kB sec_pagetables:0kB all_unreclaimable? no [ 400.371109][T13868] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 400.470581][T13868] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 400.541229][T13868] lowmem_reserve[]: 0 2465 2466 0 0 [ 400.576269][T13868] Node 0 DMA32 free:1329032kB boost:0kB min:34200kB low:42748kB high:51296kB reserved_highatomic:0KB active_anon:41500kB inactive_anon:0kB active_file:21388kB inactive_file:206008kB unevictable:1536kB writepending:420kB present:3129332kB managed:2551344kB mlocked:0kB bounce:0kB free_pcp:2272kB local_pcp:972kB free_cma:0kB [ 400.775994][T13868] lowmem_reserve[]: 0 0 0 0 0 [ 400.780839][T13868] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:36kB inactive_anon:0kB active_file:0kB inactive_file:832kB unevictable:0kB writepending:0kB present:1048580kB managed:876kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 400.873515][T13868] lowmem_reserve[]: 0 0 0 0 0 [ 400.878450][T13868] Node 1 Normal free:3897328kB boost:0kB min:55688kB low:69608kB high:83528kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:9924kB local_pcp:4232kB free_cma:0kB [ 400.953033][T13868] lowmem_reserve[]: 0 0 0 0 0 [ 400.995870][T13868] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 401.027035][T13868] Node 0 DMA32: 1192*4kB (UME) 2205*8kB (UME) 1683*16kB (UME) 1287*32kB (UME) 784*64kB (UME) 544*128kB (UME) 379*256kB (M) 230*512kB (M) 105*1024kB (UM) 22*2048kB (UME) 183*4096kB (UM) = 1327256kB [ 401.106477][T13868] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 401.145877][T13868] Node 1 Normal: 171*4kB (UME) 49*8kB (UME) 39*16kB (UME) 192*32kB (UME) 86*64kB (UME) 34*128kB (UME) 15*256kB (UME) 10*512kB (UME) 4*1024kB (UM) 6*2048kB (UME) 941*4096kB (M) = 3897380kB [ 401.228353][T13868] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 401.292516][T13868] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 401.336258][T13868] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 401.379460][T13868] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 401.451669][T13868] 58516 total pagecache pages [ 401.475546][T13868] 0 pages in swap cache [ 401.509202][T13868] Free swap = 124440kB [ 401.513409][T13868] Total swap = 124996kB [ 401.569440][T13868] 2097051 pages RAM [ 401.573713][T13868] 0 pages HighMem/MovableOnly [ 401.593992][T13868] 427365 pages reserved [ 401.604130][T13868] 0 pages cma reserved [ 403.047864][T13996] netlink: 206 bytes leftover after parsing attributes in process `syz.8.1578'. [ 403.792920][T14032] netlink: 206 bytes leftover after parsing attributes in process `syz.0.1590'. [ 404.586447][T14071] netlink: 206 bytes leftover after parsing attributes in process `syz.0.1601'. [ 404.798342][T14081] netlink: 314 bytes leftover after parsing attributes in process `syz.0.1605'. [ 405.189744][T14102] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 406.288299][T14155] netlink: 206 bytes leftover after parsing attributes in process `syz.1.1625'. [ 406.447918][T14161] netlink: 314 bytes leftover after parsing attributes in process `syz.1.1627'. [ 406.646036][T14170] Process accounting resumed [ 407.714752][T14216] netlink: 86 bytes leftover after parsing attributes in process `syz.8.1643'. [ 409.964883][T14330] netlink: 314 bytes leftover after parsing attributes in process `syz.2.1684'. [ 410.546716][T14357] netlink: 206 bytes leftover after parsing attributes in process `syz.2.1690'. [ 410.723865][T14364] netlink: 314 bytes leftover after parsing attributes in process `syz.1.1695'. [ 411.009500][T14378] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 411.267601][T14392] netlink: 206 bytes leftover after parsing attributes in process `syz.2.1705'. [ 411.996739][T14427] netlink: 206 bytes leftover after parsing attributes in process `syz.0.1718'. [ 412.402210][T14447] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 412.652292][T14456] netlink: 334 bytes leftover after parsing attributes in process `syz.0.1728'. [ 413.327667][T14486] netlink: 314 bytes leftover after parsing attributes in process `syz.1.1735'. [ 414.715999][T14554] netlink: 334 bytes leftover after parsing attributes in process `syz.0.1755'. [ 414.917339][T14562] netlink: 314 bytes leftover after parsing attributes in process `syz.0.1759'. [ 416.586046][T14637] netlink: 314 bytes leftover after parsing attributes in process `syz.8.1780'. [ 417.920690][T14705] netlink: 86 bytes leftover after parsing attributes in process `syz.0.1799'. [ 418.301030][T14722] netlink: 314 bytes leftover after parsing attributes in process `syz.0.1804'. [ 418.706772][T14742] netlink: 86 bytes leftover after parsing attributes in process `syz.0.1810'. [ 419.154801][T14762] netlink: 314 bytes leftover after parsing attributes in process `syz.8.1816'. [ 419.666651][T14784] netlink: 86 bytes leftover after parsing attributes in process `syz.2.1822'. [ 420.230163][T14808] netlink: 314 bytes leftover after parsing attributes in process `syz.8.1828'. [ 420.464897][T14824] netlink: 86 bytes leftover after parsing attributes in process `syz.8.1833'. [ 420.996139][T14843] netlink: 314 bytes leftover after parsing attributes in process `syz.8.1840'. [ 421.441495][T14855] netlink: 86 bytes leftover after parsing attributes in process `syz.8.1844'. [ 422.314525][T14891] netlink: 86 bytes leftover after parsing attributes in process `syz.8.1853'. [ 423.645279][T14951] netlink: 314 bytes leftover after parsing attributes in process `syz.0.1871'. [ 424.788416][T14999] netlink: 86 bytes leftover after parsing attributes in process `syz.1.1889'. [ 425.837251][T15043] netlink: 314 bytes leftover after parsing attributes in process `syz.8.1903'. [ 426.310882][T15071] netlink: 342 bytes leftover after parsing attributes in process `syz.0.1909'. [ 426.351185][T15071] netlink: 274 bytes leftover after parsing attributes in process `syz.0.1909'. [ 426.394814][T15071] netlink: 274 bytes leftover after parsing attributes in process `syz.0.1909'. [ 426.724987][T15090] netlink: 86 bytes leftover after parsing attributes in process `syz.2.1916'. [ 427.519664][T15126] netlink: 86 bytes leftover after parsing attributes in process `syz.8.1929'. [ 427.564995][T15128] netlink: 314 bytes leftover after parsing attributes in process `syz.2.1928'. [ 428.264752][T15166] netlink: 86 bytes leftover after parsing attributes in process `syz.1.1940'. [ 428.511864][T15178] netlink: 314 bytes leftover after parsing attributes in process `syz.1.1942'. [ 430.101365][T15255] netlink: 314 bytes leftover after parsing attributes in process `syz.1.1970'. [ 430.796745][T15289] netlink: 86 bytes leftover after parsing attributes in process `syz.0.1982'. [ 432.300826][T15356] netlink: 342 bytes leftover after parsing attributes in process `syz.8.2000'. [ 433.729620][T15414] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 434.707926][T15460] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 434.966928][T15471] netlink: 342 bytes leftover after parsing attributes in process `syz.0.2037'. [ 435.017641][T15471] netlink: 274 bytes leftover after parsing attributes in process `syz.0.2037'. [ 435.363010][T15490] netlink: 86 bytes leftover after parsing attributes in process `syz.0.2042'. [ 436.086595][T15523] netlink: 342 bytes leftover after parsing attributes in process `syz.0.2051'. [ 436.926995][T15565] netlink: 342 bytes leftover after parsing attributes in process `syz.2.2068'. [ 438.934919][T15652] netlink: 342 bytes leftover after parsing attributes in process `syz.1.2097'. [ 439.048423][T15652] netlink: 342 bytes leftover after parsing attributes in process `syz.1.2097'. [ 440.162118][T15700] netlink: 342 bytes leftover after parsing attributes in process `syz.2.2111'. [ 440.262410][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.269020][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.989456][T15728] netlink: 342 bytes leftover after parsing attributes in process `syz.2.2121'. [ 441.757147][T15752] netlink: 342 bytes leftover after parsing attributes in process `syz.2.2131'. [ 441.811673][T15752] netlink: 342 bytes leftover after parsing attributes in process `syz.2.2131'. [ 443.061115][T15792] netlink: 342 bytes leftover after parsing attributes in process `syz.8.2143'. [ 443.150295][T15792] netlink: 342 bytes leftover after parsing attributes in process `syz.8.2143'. [ 444.589877][T15844] netlink: 342 bytes leftover after parsing attributes in process `syz.1.2159'. [ 444.615713][T15844] netlink: 342 bytes leftover after parsing attributes in process `syz.1.2159'. [ 446.897614][T15912] netlink: 342 bytes leftover after parsing attributes in process `syz.0.2181'. [ 448.287412][T15941] netlink: 86 bytes leftover after parsing attributes in process `syz.8.2190'. [ 450.631731][T15988] netlink: 86 bytes leftover after parsing attributes in process `syz.0.2204'. [ 451.147780][T15995] Process accounting resumed [ 451.172377][T15995] Format for adding new device is "id port_count num_queues" (uint uint unit). [ 451.897861][T16014] netlink: 342 bytes leftover after parsing attributes in process `syz.8.2218'. [ 452.638514][T16029] netlink: 342 bytes leftover after parsing attributes in process `syz.0.2222'. [ 453.336441][T16042] Process accounting resumed [ 453.381177][T16042] Format for adding new device is "id port_count num_queues" (uint uint unit). [ 454.016168][T16064] netlink: 342 bytes leftover after parsing attributes in process `syz.1.2229'. [ 455.670777][T16098] netlink: 86 bytes leftover after parsing attributes in process `syz.8.2236'. [ 457.054490][T16127] netlink: 342 bytes leftover after parsing attributes in process `syz.8.2244'. [ 457.458466][T16125] Process accounting resumed [ 457.574508][T16125] Format for adding new device is "id port_count num_queues" (uint uint unit). [ 458.474413][T16162] device-mapper: ioctl: Invalid ioctl structure: uuid , name , dev 400008000010006 [ 458.575845][T16152] Format for adding new device is "id port_count num_queues" (uint uint unit). [ 459.369951][T16178] netlink: 82 bytes leftover after parsing attributes in process `syz.0.2258'. [ 459.438618][T16175] netlink: 342 bytes leftover after parsing attributes in process `syz.8.2254'. [ 459.466132][T16180] Process accounting resumed [ 459.470992][T16180] Format for adding new device is "id port_count num_queues" (uint uint unit). [ 459.955052][T16183] Format for adding new device is "id port_count num_queues" (uint uint unit). [ 461.017436][T16218] netlink: 82 bytes leftover after parsing attributes in process `syz.1.2267'. [ 461.053912][T16208] Format for adding new device is "id port_count num_queues" (uint uint unit). [ 461.707534][T16235] Format for adding new device is "id port_count num_queues" (uint uint unit). [ 462.099251][T16250] netlink: 86 bytes leftover after parsing attributes in process `syz.0.2277'. [ 462.747723][T16263] device-mapper: ioctl: Invalid ioctl structure: uuid , name , dev 400008000010006 [ 463.054554][T16274] netlink: 342 bytes leftover after parsing attributes in process `syz.0.2282'. [ 463.521952][T16293] netlink: 86 bytes leftover after parsing attributes in process `syz.8.2288'. [ 464.093678][T16314] device-mapper: ioctl: ioctl interface mismatch: kernel(4.48.0), user(0.0.0), cmd(12) [ 465.022558][T16342] netlink: 86 bytes leftover after parsing attributes in process `syz.0.2302'. [ 466.580822][T16390] netlink: 206 bytes leftover after parsing attributes in process `syz.2.2312'. [ 466.677011][T16387] netlink: 342 bytes leftover after parsing attributes in process `syz.0.2313'. [ 467.976387][ T5839] Bluetooth: hci3: command 0x0406 tx timeout [ 469.322143][T16444] netlink: 206 bytes leftover after parsing attributes in process `syz.0.2327'. [ 472.242956][T16511] netlink: 206 bytes leftover after parsing attributes in process `syz.8.2338'. [ 473.049369][T16491] Bluetooth: hci0: command 0x0406 tx timeout [ 473.055759][T16491] Bluetooth: hci2: command 0x0406 tx timeout [ 477.581242][T16623] netlink: 206 bytes leftover after parsing attributes in process `syz.2.2363'. [ 479.490235][T16649] netlink: 206 bytes leftover after parsing attributes in process `syz.0.2374'. [ 481.710954][T16673] netlink: 206 bytes leftover after parsing attributes in process `syz.2.2385'. [ 483.276406][ T5834] Bluetooth: hci1: command 0x0406 tx timeout [ 484.078478][T16704] netlink: 206 bytes leftover after parsing attributes in process `syz.0.2399'. [ 491.021337][T16795] netlink: 206 bytes leftover after parsing attributes in process `syz.8.2438'. [ 492.779096][T16826] netlink: 206 bytes leftover after parsing attributes in process `syz.2.2449'. [ 494.700628][T16856] netlink: 206 bytes leftover after parsing attributes in process `syz.0.2462'. [ 495.646819][T16867] Process accounting resumed [ 496.959591][T16886] netlink: 206 bytes leftover after parsing attributes in process `syz.2.2473'. [ 497.302617][T16892] Process accounting resumed [ 499.278457][T16920] netlink: 342 bytes leftover after parsing attributes in process `syz.1.2486'. [ 499.955858][T16935] kAFS: bad VL server IP address [ 501.041409][T16961] netlink: 206 bytes leftover after parsing attributes in process `syz.8.2508'. [ 501.690237][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.696572][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.510090][T16983] netlink: 206 bytes leftover after parsing attributes in process `syz.2.2518'. [ 506.194224][T17058] Process accounting resumed [ 506.733440][T17067] netlink: 206 bytes leftover after parsing attributes in process `syz.1.2556'. [ 507.741997][T17083] Process accounting resumed [ 508.946183][T17108] Process accounting resumed [ 510.578505][ T5839] Bluetooth: hci3: ACL packet too small [ 511.617195][T17188] Process accounting resumed [ 512.830013][ T5839] Bluetooth: hci2: ACL packet too small [ 513.576966][T17252] netlink: 206 bytes leftover after parsing attributes in process `syz.0.2649'. [ 513.811798][ T5839] Bluetooth: hci0: ACL packet too small [ 514.426303][T17273] netlink: 206 bytes leftover after parsing attributes in process `syz.1.2652'. [ 518.066958][T17425] netlink: 206 bytes leftover after parsing attributes in process `syz.1.2721'. [ 518.541783][T17445] Process accounting resumed [ 518.676422][T17450] netlink: 206 bytes leftover after parsing attributes in process `syz.1.2733'. [ 519.338714][T17469] Process accounting resumed [ 519.602621][T17478] netlink: 206 bytes leftover after parsing attributes in process `syz.8.2745'. [ 522.173081][T17557] program syz.8.2777 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 522.560192][T17572] netlink: 'syz.0.2784': attribute type 1 has an invalid length. [ 522.589624][T17575] netlink: 206 bytes leftover after parsing attributes in process `syz.8.2785'. [ 523.345221][T17603] netlink: 206 bytes leftover after parsing attributes in process `syz.0.2797'. [ 524.298295][T17630] netlink: 206 bytes leftover after parsing attributes in process `syz.2.2808'. [ 524.780637][T17648] Process accounting resumed [ 524.792009][T17648] synth uevent: /devices/system/cpu/cpu0/cache: unknown uevent action string [ 524.805920][T17648] cache: uevent: failed to send synthetic uevent: -22 [ 524.937681][T17653] program syz.0.2819 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 526.417391][T17701] Process accounting resumed [ 526.695210][T17715] netlink: 'syz.2.2849': attribute type 1 has an invalid length. [ 527.899325][T17757] Process accounting resumed [ 527.929190][T17758] program syz.8.2867 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 528.373656][T17772] program syz.0.2875 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 529.080847][T17799] program syz.8.2886 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 529.676521][T17818] binder: 17817:17818 ioctl c018620c 9 returned -22 [ 529.982733][T17830] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2903'. [ 531.000434][T17873] netlink: 334 bytes leftover after parsing attributes in process `syz.1.2923'. [ 531.010067][T17873] IPv6: NLM_F_CREATE should be specified when creating new route [ 531.509905][T17891] binder: 17890:17891 ioctl c018620c 9 returned -22 [ 532.241217][T17922] binder: 17921:17922 ioctl c018620c 9 returned -14 [ 532.456701][T17934] netlink: 5216 bytes leftover after parsing attributes in process `syz.1.2950'. [ 532.475766][T17934] netlink: 'syz.1.2950': attribute type 1 has an invalid length. [ 532.902632][T17952] binder: 17951:17952 ioctl c018620c 9 returned -14 [ 533.823386][T17994] netlink: 206 bytes leftover after parsing attributes in process `syz.2.2980'. [ 534.044145][T18004] program syz.0.2985 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 534.394175][T18018] netlink: 206 bytes leftover after parsing attributes in process `syz.1.2992'. [ 534.654379][T18028] program syz.0.2997 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 535.705674][T18072] Process accounting resumed [ 535.710365][T18072] synth uevent: /devices/system/cpu/cpu0/cache: unknown uevent action string [ 535.755295][T18072] cache: uevent: failed to send synthetic uevent: -22 [ 535.940658][T18079] binder: 18078:18079 ioctl c018620c 9 returned -22 [ 536.030442][T18086] netlink: 'syz.8.3025': attribute type 1 has an invalid length. [ 536.416005][T18104] program syz.8.3032 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 537.786283][T18166] program syz.2.3062 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 537.837161][T18167] netlink: 330 bytes leftover after parsing attributes in process `syz.1.3063'. [ 539.428734][T18241] binder: 18240:18241 ioctl c018620c 9 returned -1 [ 539.754854][T18261] netlink: 342 bytes leftover after parsing attributes in process `syz.8.3100'. [ 539.987438][T18269] binder: 18268:18269 ioctl c018620c 9 returned -1 [ 540.400208][T18292] netlink: 342 bytes leftover after parsing attributes in process `syz.2.3114'. [ 540.654382][T18300] binder: 18299:18300 ioctl c018620c 9 returned -1 [ 540.739884][T18305] netlink: 342 bytes leftover after parsing attributes in process `syz.1.3127'. [ 540.827344][T18307] netlink: 330 bytes leftover after parsing attributes in process `syz.2.3120'. [ 541.326424][T18332] binder: 18329:18332 ioctl c018620c 9 returned -1 [ 541.944594][T18353] binder: 18352:18353 ioctl c018620c 9 returned -1 [ 542.186027][T18365] netlink: 342 bytes leftover after parsing attributes in process `syz.0.3142'. [ 542.882685][T18398] netlink: 342 bytes leftover after parsing attributes in process `syz.8.3156'. [ 543.278945][T18414] Process accounting resumed [ 543.524531][T18427] netlink: 342 bytes leftover after parsing attributes in process `syz.1.3171'. [ 543.806746][T18438] binder: 18437:18438 ioctl c018620c 9 returned -14                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            [ 605.441376][T21313] netlink: 'syz.8.4407': attribute type 4 has an invalid length. [ 605.479709][T21313] netlink: 'syz.8.4407': attribute type 4 has an invalid length. [ 605.587122][T21315] Process accounting resumed [ 605.738408][T21322] netlink: 282 bytes leftover after parsing attributes in process `syz.1.4412'. [ 606.377011][T21349] netlink: 282 bytes leftover after parsing attributes in process `syz.8.4422'. [ 608.133666][ T29] audit: type=1800 audit(1734225897.600:14): pid=21427 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.4458" name="discovery_nqn" dev="configfs" ino=68546 res=0 errno=0 [ 608.347554][T21438] Process accounting resumed [ 608.636013][T21450] can0: slcan on pty48. [ 608.733645][T21449] can0 (unregistered): slcan off pty48. [ 608.769837][T21462] Process accounting resumed [ 608.940218][T21474] netlink: 330 bytes leftover after parsing attributes in process `syz.2.4475'. [ 609.153159][T21488] netlink: 342 bytes leftover after parsing attributes in process `syz.8.4478'. [ 609.738621][T21520] netlink: 282 bytes leftover after parsing attributes in process `syz.8.4491'. [ 610.309291][T21556] netlink: 282 bytes leftover after parsing attributes in process `syz.8.4503'. [ 610.628022][T21575] Process accounting resumed [ 610.704405][T21580] netlink: 282 bytes leftover after parsing attributes in process `syz.2.4514'. [ 610.713330][T21569] bond0: no command found in slaves file - use +ifname or -ifname [ 611.812450][T21625] Scaler: ================= START STATUS ================= [ 611.820894][T21625] Scaler: ================== END STATUS ================== [ 612.344796][T21649] Process accounting resumed [ 612.805605][T21667] FAULT_INJECTION: forcing a failure. [ 612.805605][T21667] name fail_futex, interval 1, probability 0, space 0, times 1 [ 612.826465][T21667] CPU: 0 UID: 0 PID: 21667 Comm: syz.8.4552 Tainted: G U 6.13.0-rc2-syzkaller-00333-ga0e3919a2df2 #0 [ 612.838777][T21667] Tainted: [U]=USER [ 612.842605][T21667] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 612.852725][T21667] Call Trace: [ 612.856343][T21667] [ 612.859302][T21667] dump_stack_lvl+0x16c/0x1f0 [ 612.864028][T21667] should_fail_ex+0x497/0x5b0 [ 612.868756][T21667] should_fail_futex+0x4c/0x60 [ 612.873578][T21667] __x64_sys_futex+0x260/0x4c0 [ 612.878394][T21667] ? __pfx___x64_sys_futex+0x10/0x10 [ 612.883726][T21667] ? rcu_is_watching+0x12/0xc0 [ 612.888545][T21667] do_syscall_64+0xcd/0x250 [ 612.893095][T21667] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 612.899034][T21667] RIP: 0033:0x7f9fb1985d19 [ 612.903481][T21667] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 612.923130][T21667] RSP: 002b:00007ffd8482a7c8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 612.931593][T21667] RAX: ffffffffffffffda RBX: 00007ffd8482a8f0 RCX: 00007f9fb1985d19 [ 612.939602][T21667] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f9fb1b75fac [ 612.947616][T21667] RBP: 00007f9fb1b75fac R08: 00007f9fb27ce000 R09: 00007ffd8482aabf [ 612.955626][T21667] R10: 00007ffd8482a8d0 R11: 0000000000000246 R12: 00000000000959f2 [ 612.963633][T21667] R13: 00007ffd8482a8d0 R14: 0000000000000032 R15: 00000000000959c0 [ 612.971661][T21667] [ 613.289120][T21679] netlink: 342 bytes leftover after parsing attributes in process `syz.8.4557'. [ 613.327922][T21679] netlink: 342 bytes leftover after parsing attributes in process `syz.8.4557'. [ 614.477900][T21724] bond0: option primary_reselect: invalid value () [ 615.223193][T21747] netlink: 'syz.2.4583': attribute type 11 has an invalid length. [ 615.232673][T21747] netlink: 'syz.2.4583': attribute type 11 has an invalid length. [ 615.249967][T21747] netlink: 'syz.2.4583': attribute type 11 has an invalid length. [ 615.266869][T21747] netlink: 'syz.2.4583': attribute type 11 has an invalid length. [ 615.282878][T21747] netlink: 'syz.2.4583': attribute type 11 has an invalid length. [ 615.295640][T21747] netlink: 'syz.2.4583': attribute type 11 has an invalid length. [ 615.448606][T21754] program syz.0.4586 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 616.007447][T21774] netlink: 'syz.0.4596': attribute type 2 has an invalid length. [ 616.155367][T21780] scsi_dev_info_list_add_str: bad dev info string 'fCAw wqSv;} ,uX%Q~c{Q- T1j)`b~lYq+Oy4RV2/4"W%' '' '' [ 616.323838][T21785] Process accounting resumed [ 617.907296][T21840] netlink: 'syz.2.4626': attribute type 4 has an invalid length. [ 617.918501][T21840] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4626'. [ 617.957007][T21840] netlink: 'syz.2.4626': attribute type 4 has an invalid length. [ 617.964816][T21840] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4626'. [ 618.225689][T21851] Process accounting resumed [ 619.577306][T21905] program syz.8.4652 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 621.727963][T21961] bond0: option primary_reselect: invalid value (100) [ 621.866163][T21966] Process accounting resumed [ 622.095963][T21974] delete_channel: no stack [ 624.096934][T22021] perf: Dynamic interrupt throttling disabled, can hang your system! [ 624.552989][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.558887][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 625.366979][T22051] Process accounting resumed [ 625.967120][T22067] openvswitch: netlink: IPv4 tunnel dst address is zero [ 628.016917][T22122] program syz.0.4744 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 631.003366][T22201] Process accounting resumed [ 631.415839][T22218] openvswitch: netlink: IP tunnel dst address not specified [ 631.434094][T22218] netlink: 6 bytes leftover after parsing attributes in process `syz.2.4783'. [ 631.445612][T22218] openvswitch: netlink: IP tunnel dst address not specified [ 631.985969][T22238] binder: 22237:22238 ioctl 400c620e 9 returned -14 [ 632.110348][T22246] netlink: 'syz.1.4795': attribute type 33 has an invalid length. [ 632.118784][T22246] netlink: 322 bytes leftover after parsing attributes in process `syz.1.4795'. [ 632.141458][T22246] netlink: 'syz.1.4795': attribute type 33 has an invalid length. [ 632.156227][T22246] netlink: 322 bytes leftover after parsing attributes in process `syz.1.4795'. [ 632.247604][T22250] netlink: 342 bytes leftover after parsing attributes in process `syz.2.4797'. [ 632.280204][T22250] netlink: 342 bytes leftover after parsing attributes in process `syz.2.4797'. [ 632.309148][T22250] netlink: 342 bytes leftover after parsing attributes in process `syz.2.4797'. [ 632.332248][T22255] netlink: 'syz.2.4797': attribute type 3 has an invalid length. [ 632.345857][T22250] netlink: 342 bytes leftover after parsing attributes in process `syz.2.4797'. [ 632.355815][T22255] netlink: 294 bytes leftover after parsing attributes in process `syz.2.4797'. [ 632.375144][T22250] netlink: 342 bytes leftover after parsing attributes in process `syz.2.4797'. [ 632.376438][T22255] IPv6: NLM_F_CREATE should be specified when creating new route [ 632.435619][T22255] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 632.442761][T22255] IPv6: NLM_F_CREATE should be set when creating new route [ 632.449360][T22255] IPv6: NLM_F_CREATE should be set when creating new route [ 632.519491][T22261] binder: 22260:22261 ioctl 400c620e 9 returned -14 [ 632.812977][T22273] netlink: 'syz.8.4808': attribute type 33 has an invalid length. [ 632.820454][T22273] netlink: 322 bytes leftover after parsing attributes in process `syz.8.4808'. [ 632.832294][T22273] netlink: 'syz.8.4808': attribute type 33 has an invalid length. [ 633.056932][T22284] netlink: 'syz.0.4812': attribute type 3 has an invalid length. [ 633.065303][T22284] IPv6: NLM_F_CREATE should be specified when creating new route [ 633.078616][T22284] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 633.085187][T22284] IPv6: NLM_F_CREATE should be set when creating new route [ 633.091784][T22284] IPv6: NLM_F_CREATE should be set when creating new route [ 633.120176][T22287] binder: 22286:22287 ioctl 400c620e 9 returned -14 [ 633.324696][T22297] netlink: 'syz.0.4818': attribute type 33 has an invalid length. [ 633.335206][T22297] netlink: 'syz.0.4818': attribute type 33 has an invalid length. [ 633.826373][T22329] netlink: 'syz.1.4831': attribute type 3 has an invalid length. [ 633.833931][T22329] IPv6: NLM_F_CREATE should be specified when creating new route [ 633.841247][T22329] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 633.847826][T22329] IPv6: NLM_F_CREATE should be set when creating new route [ 633.854332][T22329] IPv6: NLM_F_CREATE should be set when creating new route [ 634.617077][T22337] netlink: 'syz.2.4833': attribute type 33 has an invalid length. [ 634.984337][T22356] IPv6: NLM_F_CREATE should be specified when creating new route [ 635.009305][T22356] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 635.015979][T22356] IPv6: NLM_F_CREATE should be set when creating new route [ 635.022530][T22356] IPv6: NLM_F_CREATE should be set when creating new route [ 635.702633][T22388] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 636.680375][T22450] __nla_validate_parse: 21 callbacks suppressed [ 636.680396][T22450] netlink: 322 bytes leftover after parsing attributes in process `syz.0.4893'. [ 636.707116][T22450] netlink: 322 bytes leftover after parsing attributes in process `syz.0.4893'. [ 636.987635][T22467] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4902'. [ 637.005178][T22467] vcan0: entered promiscuous mode [ 637.249912][T22482] validate_nla: 7 callbacks suppressed [ 637.249989][T22482] netlink: 'syz.0.4909': attribute type 33 has an invalid length. [ 637.285226][T22482] netlink: 322 bytes leftover after parsing attributes in process `syz.0.4909'. [ 637.301379][T22482] netlink: 'syz.0.4909': attribute type 33 has an invalid length. [ 637.318867][T22482] netlink: 322 bytes leftover after parsing attributes in process `syz.0.4909'. [ 637.573490][T22500] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4917'. [ 637.589236][T22500] vcan0: entered promiscuous mode [ 637.772852][T22512] netlink: 'syz.0.4922': attribute type 33 has an invalid length. [ 637.780562][T22512] netlink: 322 bytes leftover after parsing attributes in process `syz.0.4922'. [ 638.175737][T22534] netlink: 'syz.1.4934': attribute type 33 has an invalid length. [ 638.184498][T22534] netlink: 322 bytes leftover after parsing attributes in process `syz.1.4934'. [ 638.343393][T22548] netlink: 'syz.1.4947': attribute type 33 has an invalid length. [ 638.350636][T22548] netlink: 322 bytes leftover after parsing attributes in process `syz.1.4947'. [ 638.380156][T22546] netlink: 28 bytes leftover after parsing attributes in process `syz.8.4939'. [ 638.393308][T22546] vcan0: entered promiscuous mode [ 638.776750][T22571] netlink: 'syz.8.4952': attribute type 33 has an invalid length. [ 639.069463][T22588] vcan0: entered promiscuous mode [ 639.138096][T22591] netlink: 'syz.0.4962': attribute type 33 has an invalid length. [ 639.493869][T22609] binder: 22608:22609 ioctl c00c620f c returned -14 [ 639.615955][T22617] netlink: 'syz.1.4973': attribute type 33 has an invalid length. [ 641.832751][T22743] __nla_validate_parse: 5 callbacks suppressed [ 641.832774][T22743] netlink: 1 bytes leftover after parsing attributes in process `syz.8.5034'. [ 642.262738][T22769] netlink: 1 bytes leftover after parsing attributes in process `syz.1.5047'. [ 644.679147][T22906] Process accounting resumed [ 645.452321][T22949] netlink: 'syz.1.5133': attribute type 19 has an invalid length. [ 645.476633][T22949] netlink: 114 bytes leftover after parsing attributes in process `syz.1.5133'. [ 645.533464][T22954] netlink: 342 bytes leftover after parsing attributes in process `syz.0.5135'. [ 645.996030][T22979] perf: Dynamic interrupt throttling disabled, can hang your system! [ 647.199937][T23022] Process accounting resumed [ 648.603682][T23086] netlink: 'syz.8.5195': attribute type 19 has an invalid length. [ 648.610933][T23086] netlink: 114 bytes leftover after parsing attributes in process `syz.8.5195'.                                                                                    [ 659.190167][T23604] netlink: 'syz.0.5419': attribute type 4 has an invalid length. [ 659.266051][T23604] netlink: 'syz.0.5419': attribute type 4 has an invalid length. [ 661.830352][T23718] Process accounting resumed [ 662.176295][T23736] Process accounting resumed [ 662.423230][T23751] netlink: 330 bytes leftover after parsing attributes in process `syz.0.5487'. [ 663.964360][T23836] bond0: no command found in slaves file - use +ifname or -ifname [ 664.208700][T23848] netlink: 342 bytes leftover after parsing attributes in process `syz.8.5534'. [ 664.605683][T23870] Scaler: ================= START STATUS ================= [ 664.613115][T23870] Scaler: ================== END STATUS ================== [ 664.841969][T23880] netlink: 29 bytes leftover after parsing attributes in process `syz.2.5548'. [ 665.636369][T23917] FAULT_INJECTION: forcing a failure. [ 665.636369][T23917] name fail_futex, interval 1, probability 0, space 0, times 0 [ 665.657602][T23917] CPU: 1 UID: 0 PID: 23917 Comm: syz.2.5564 Tainted: G U 6.13.0-rc2-syzkaller-00333-ga0e3919a2df2 #0 [ 665.669890][T23917] Tainted: [U]=USER [ 665.673691][T23917] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 665.683749][T23917] Call Trace: [ 665.687024][T23917] [ 665.690047][T23917] dump_stack_lvl+0x16c/0x1f0 [ 665.694736][T23917] should_fail_ex+0x497/0x5b0 [ 665.699426][T23917] should_fail_futex+0x4c/0x60 [ 665.704199][T23917] __x64_sys_futex+0x260/0x4c0 [ 665.708975][T23917] ? __pfx___x64_sys_futex+0x10/0x10 [ 665.714269][T23917] ? rcu_is_watching+0x12/0xc0 [ 665.719048][T23917] do_syscall_64+0xcd/0x250 [ 665.723560][T23917] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 665.729465][T23917] RIP: 0033:0x7fd660785d19 [ 665.733884][T23917] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 665.753500][T23917] RSP: 002b:00007ffe26dfa998 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 665.761926][T23917] RAX: ffffffffffffffda RBX: 00007ffe26dfaac0 RCX: 00007fd660785d19 [ 665.769903][T23917] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fd660975fac [ 665.777887][T23917] RBP: 00007fd660975fac R08: 00007fd6614e7000 R09: 00007ffe26dfac8f [ 665.785871][T23917] R10: 00007ffe26dfaaa0 R11: 0000000000000246 R12: 00000000000a2850 [ 665.793844][T23917] R13: 00007ffe26dfaaa0 R14: 0000000000000032 R15: 00000000000a281e [ 665.801833][T23917] [ 665.867270][T23922] netlink: 29 bytes leftover after parsing attributes in process `syz.0.5566'. [ 666.628408][T23955] netlink: 29 bytes leftover after parsing attributes in process `syz.2.5580'. [ 666.730869][T23960] bond0: option primary_reselect: invalid value () [ 667.251515][T23977] netlink: 29 bytes leftover after parsing attributes in process `syz.2.5597'. [ 667.674841][T23991] netlink: 'syz.1.5595': attribute type 11 has an invalid length. [ 667.693135][T23991] netlink: 'syz.1.5595': attribute type 11 has an invalid length. [ 667.712061][T23991] netlink: 'syz.1.5595': attribute type 11 has an invalid length. [ 667.725597][T23991] netlink: 'syz.1.5595': attribute type 11 has an invalid length. [ 667.743549][T23991] netlink: 'syz.1.5595': attribute type 11 has an invalid length. [ 667.761989][T23991] netlink: 'syz.1.5595': attribute type 11 has an invalid length. [ 668.146338][T24007] netlink: 29 bytes leftover after parsing attributes in process `syz.0.5600'. [ 668.799266][T24028] scsi_dev_info_list_add_str: bad dev info string 'fCAw wqSv;} ,uX%Q~c{Q- T1j)`b~lYq+Oy4RV2/4"W%' '' '' [ 668.886582][T24031] netlink: 29 bytes leftover after parsing attributes in process `syz.8.5614'. [ 668.990372][T24032] Process accounting resumed [ 669.408225][T24052] netlink: 29 bytes leftover after parsing attributes in process `syz.2.5624'. [ 670.422959][T24084] netlink: 29 bytes leftover after parsing attributes in process `syz.0.5634'. [ 670.995751][T24101] Process accounting resumed [ 671.081156][T24107] netlink: 29 bytes leftover after parsing attributes in process `syz.0.5646'. [ 671.880470][T24143] netlink: 29 bytes leftover after parsing attributes in process `syz.1.5662'. [ 671.979990][T24151] program syz.2.5665 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 672.498412][T24174] netlink: 29 bytes leftover after parsing attributes in process `syz.8.5675'. [ 672.708948][T18719] Bluetooth: hci3: command 0x0406 tx timeout [ 673.515995][T24199] netlink: 29 bytes leftover after parsing attributes in process `syz.1.5686'. [ 673.640259][T24205] bond0: option primary_reselect: invalid value (100) [ 673.728881][T24209] Process accounting resumed [ 673.863044][T24214] [ 673.865190][T24214] ================================================ [ 673.871064][T24214] WARNING: lock held when returning to user space! [ 673.876934][T24214] 6.13.0-rc2-syzkaller-00333-ga0e3919a2df2 #0 Tainted: G U [ 673.884685][T24214] ------------------------------------------------ [ 673.890554][T24214] syz.2.5691/24214 is leaving the kernel with locks still held! [ 673.897444][T24214] 1 lock held by syz.2.5691/24214: [ 673.902064][T24214] #0: ffffffff8fabe008 (rtnl_mutex){+.+.}-{4:4}, at: nsim_pp_hold_write+0x105/0x4d0 [ 675.745941][T18525] ================================================================== [ 675.753228][T18525] BUG: KASAN: slab-use-after-free in mutex_can_spin_on_owner+0x1d9/0x210 [ 675.760803][T18525] Read of size 4 at addr ffff88802c9dda34 by task kworker/u10:3/18525 [ 675.768137][T18525] [ 675.770273][T18525] CPU: 0 UID: 0 PID: 18525 Comm: kworker/u10:3 Tainted: G U 6.13.0-rc2-syzkaller-00333-ga0e3919a2df2 #0 [ 675.781622][T18525] Tainted: [U]=USER [ 675.785036][T18525] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 675.794238][T18525] Workqueue: ipv6_addrconf addrconf_verify_work [ 675.799868][T18525] Call Trace: [ 675.802824][T18525] [ 675.805462][T18525] dump_stack_lvl+0x116/0x1f0 [ 675.809690][T18525] print_report+0xc3/0x620 [ 675.813667][T18525] ? __virt_addr_valid+0x5e/0x590 [ 675.818186][T18525] ? __phys_addr+0xc6/0x150 [ 675.822240][T18525] kasan_report+0xd9/0x110 [ 675.826225][T18525] ? mutex_can_spin_on_owner+0x1d9/0x210 [ 675.831312][T18525] ? mutex_can_spin_on_owner+0x1d9/0x210 [ 675.836379][T18525] mutex_can_spin_on_owner+0x1d9/0x210 [ 675.841296][T18525] __mutex_lock+0x23d/0xa60 [ 675.845359][T18525] ? lock_acquire+0x2f/0xb0 [ 675.849403][T18525] ? debug_object_deactivate+0x13b/0x370 [ 675.854488][T18525] ? addrconf_verify_work+0x12/0x30 [ 675.859163][T18525] ? do_raw_spin_unlock+0x172/0x230 [ 675.863848][T18525] ? __pfx___mutex_lock+0x10/0x10 [ 675.868381][T18525] ? rcu_is_watching+0x12/0xc0 [ 675.872665][T18525] ? lock_release+0x4e2/0x6f0 [ 675.876875][T18525] ? trace_lock_acquire+0x14e/0x1f0 [ 675.881552][T18525] ? __schedule+0xe60/0x5ad0 [ 675.885677][T18525] ? process_one_work+0x8bb/0x1b30 [ 675.890283][T18525] ? addrconf_verify_work+0x12/0x30 [ 675.894958][T18525] ? rtnl_lock+0x9/0x20 [ 675.898700][T18525] addrconf_verify_work+0x12/0x30 [ 675.903223][T18525] process_one_work+0x958/0x1b30 [ 675.907754][T18525] ? __pfx_process_one_work+0x10/0x10 [ 675.912590][T18525] ? rcu_is_watching+0x12/0xc0 [ 675.916888][T18525] ? assign_work+0x1a0/0x250 [ 675.921021][T18525] worker_thread+0x6c8/0xf00 [ 675.925148][T18525] ? __kthread_parkme+0x148/0x220 [ 675.929669][T18525] ? __pfx_worker_thread+0x10/0x10 [ 675.934267][T18525] kthread+0x2c1/0x3a0 [ 675.938099][T18525] ? _raw_spin_unlock_irq+0x23/0x50 [ 675.942773][T18525] ? __pfx_kthread+0x10/0x10 [ 675.946920][T18525] ret_from_fork+0x45/0x80 [ 675.950888][T18525] ? __pfx_kthread+0x10/0x10 [ 675.955014][T18525] ret_from_fork_asm+0x1a/0x30 [ 675.959311][T18525] [ 675.962021][T18525] [ 675.964106][T18525] Allocated by task 24212: [ 675.968080][T18525] kasan_save_stack+0x33/0x60 [ 675.972288][T18525] kasan_save_track+0x14/0x30 [ 675.976492][T18525] __kasan_slab_alloc+0x89/0x90 [ 675.980858][T18525] kmem_cache_alloc_node_noprof+0x1ca/0x3b0 [ 675.986262][T18525] copy_process+0x49c/0x6f20 [ 675.990399][T18525] kernel_clone+0xfd/0x960 [ 675.994374][T18525] __do_sys_clone3+0x1f9/0x270 [ 675.998660][T18525] do_syscall_64+0xcd/0x250 [ 676.002712][T18525] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 676.008013][T18525] [ 676.010101][T18525] Freed by task 24160: [ 676.013763][T18525] kasan_save_stack+0x33/0x60 [ 676.017982][T18525] kasan_save_track+0x14/0x30 [ 676.022345][T18525] kasan_save_free_info+0x3b/0x60 [ 676.026860][T18525] __kasan_slab_free+0x51/0x70 [ 676.031155][T18525] kmem_cache_free+0x152/0x4c0 [ 676.035447][T18525] delayed_put_task_struct+0x119/0x2f0 [ 676.040378][T18525] rcu_core+0x79d/0x14d0 [ 676.044203][T18525] handle_softirqs+0x213/0x8f0 [ 676.048610][T18525] __irq_exit_rcu+0x109/0x170 [ 676.052817][T18525] irq_exit_rcu+0x9/0x30 [ 676.056633][T18525] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 676.061712][T18525] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 676.067122][T18525] [ 676.069293][T18525] Last potentially related work creation: [ 676.074427][T18525] kasan_save_stack+0x33/0x60 [ 676.078645][T18525] __kasan_record_aux_stack+0xba/0xd0 [ 676.083489][T18525] __call_rcu_common.constprop.0+0x99/0x7a0 [ 676.088788][T18525] put_task_struct_rcu_user+0x75/0xc0 [ 676.093703][T18525] __schedule+0xe60/0x5ad0 [ 676.097670][T18525] preempt_schedule_common+0x44/0xc0 [ 676.102422][T18525] preempt_schedule_thunk+0x1a/0x30 [ 676.107093][T18525] _raw_spin_unlock_irq+0x44/0x50 [ 676.111847][T18525] shmem_add_to_page_cache+0x600/0xa70 [ 676.116753][T18525] shmem_alloc_and_add_folio+0x65f/0xc00 [ 676.122283][T18525] shmem_get_folio_gfp+0x689/0x1530 [ 676.126954][T18525] shmem_write_begin+0x161/0x300 [ 676.131392][T18525] generic_perform_write+0x2ba/0x920 [ 676.136146][T18525] shmem_file_write_iter+0x10e/0x140 [ 676.141004][T18525] __kernel_write_iter+0x318/0xa80 [ 676.145611][T18525] dump_user_range+0x389/0x8c0 [ 676.149905][T18525] elf_core_dump+0x2787/0x3880 [ 676.154189][T18525] do_coredump+0x2dd5/0x43e0 [ 676.158321][T18525] get_signal+0x23f3/0x2610 [ 676.162373][T18525] arch_do_signal_or_restart+0x90/0x7e0 [ 676.167363][T18525] irqentry_exit_to_user_mode+0x13f/0x280 [ 676.172519][T18525] asm_exc_page_fault+0x26/0x30 [ 676.176886][T18525] [ 676.178975][T18525] The buggy address belongs to the object at ffff88802c9dda00 [ 676.178975][T18525] which belongs to the cache task_struct of size 7424 [ 676.191692][T18525] The buggy address is located 52 bytes inside of [ 676.191692][T18525] freed 7424-byte region [ffff88802c9dda00, ffff88802c9df700) [ 676.204117][T18525] [ 676.206208][T18525] The buggy address belongs to the physical page: [ 676.211986][T18525] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff88802c9d9e00 pfn:0x2c9d8 [ 676.221054][T18525] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 676.228691][T18525] memcg:ffff8880322cf9c1 [ 676.232656][T18525] flags: 0xfff00000000240(workingset|head|node=0|zone=1|lastcpupid=0x7ff) [ 676.240302][T18525] page_type: f5(slab) [ 676.243885][T18525] raw: 00fff00000000240 ffff88801bafe500 ffffea0000b0ce10 ffffea0000990210 [ 676.251605][T18525] raw: ffff88802c9d9e00 0000000000040003 00000001f5000000 ffff8880322cf9c1 [ 676.259342][T18525] head: 00fff00000000240 ffff88801bafe500 ffffea0000b0ce10 ffffea0000990210 [ 676.267171][T18525] head: ffff88802c9d9e00 0000000000040003 00000001f5000000 ffff8880322cf9c1 [ 676.274972][T18525] head: 00fff00000000003 ffffea0000b27601 ffffffffffffffff 0000000000000000 [ 676.282771][T18525] head: 0000000000000008 0000000000000000 00000000ffffffff 0000000000000000 [ 676.290577][T18525] page dumped because: kasan: bad access detected [ 676.296344][T18525] page_owner tracks the page as allocated [ 676.301481][T18525] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 11, tgid 11 (kworker/u8:0), ts 14941425691, free_ts 0 [ 676.319604][T18525] post_alloc_hook+0x2d1/0x350 [ 676.323919][T18525] get_page_from_freelist+0xfce/0x2f80 [ 676.328830][T18525] __alloc_pages_noprof+0x223/0x25b0 [ 676.333587][T18525] alloc_pages_mpol_noprof+0x2c9/0x610 [ 676.338500][T18525] new_slab+0x2c9/0x410 [ 676.342238][T18525] ___slab_alloc+0xce2/0x1650 [ 676.346440][T18525] __slab_alloc.constprop.0+0x56/0xb0 [ 676.351267][T18525] kmem_cache_alloc_node_noprof+0xf2/0x3b0 [ 676.356491][T18525] copy_process+0x49c/0x6f20 [ 676.360619][T18525] kernel_clone+0xfd/0x960 [ 676.364586][T18525] user_mode_thread+0xb4/0xf0 [ 676.368789][T18525] call_usermodehelper_exec_work+0xcb/0x170 [ 676.374097][T18525] process_one_work+0x958/0x1b30 [ 676.378585][T18525] worker_thread+0x6c8/0xf00 [ 676.382883][T18525] kthread+0x2c1/0x3a0 [ 676.386579][T18525] ret_from_fork+0x45/0x80 [ 676.390555][T18525] page_owner free stack trace missing [ 676.395395][T18525] [ 676.397478][T18525] Memory state around the buggy address: [ 676.402535][T18525] ffff88802c9dd900: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 676.409791][T18525] ffff88802c9dd980: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 676.417045][T18525] >ffff88802c9dda00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 676.424296][T18525] ^ [ 676.429364][T18525] ffff88802c9dda80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 676.436621][T18525] ffff88802c9ddb00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 676.443865][T18525] ================================================================== [ 676.455183][T18525] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 676.461710][T18525] CPU: 0 UID: 0 PID: 18525 Comm: kworker/u10:3 Tainted: G U 6.13.0-rc2-syzkaller-00333-ga0e3919a2df2 #0 [ 676.473038][T18525] Tainted: [U]=USER [ 676.476468][T18525] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 676.485560][T18525] Workqueue: ipv6_addrconf addrconf_verify_work [ 676.491211][T18525] Call Trace: [ 676.494178][T18525] [ 676.496825][T18525] dump_stack_lvl+0x3d/0x1f0 [ 676.500960][T18525] panic+0x71d/0x800 [ 676.504481][T18525] ? __pfx_panic+0x10/0x10 [ 676.508470][T18525] ? trace_irq_enable.constprop.0+0xea/0x140 [ 676.513862][T18525] ? check_panic_on_warn+0x1f/0xb0 [ 676.518493][T18525] check_panic_on_warn+0xab/0xb0 [ 676.522943][T18525] end_report+0x117/0x180 [ 676.526842][T18525] kasan_report+0xe9/0x110 [ 676.530842][T18525] ? mutex_can_spin_on_owner+0x1d9/0x210 [ 676.535915][T18525] ? mutex_can_spin_on_owner+0x1d9/0x210 [ 676.540984][T18525] mutex_can_spin_on_owner+0x1d9/0x210 [ 676.545894][T18525] __mutex_lock+0x23d/0xa60 [ 676.549950][T18525] ? lock_acquire+0x2f/0xb0 [ 676.553995][T18525] ? debug_object_deactivate+0x13b/0x370 [ 676.559068][T18525] ? addrconf_verify_work+0x12/0x30 [ 676.563744][T18525] ? do_raw_spin_unlock+0x172/0x230 [ 676.568429][T18525] ? __pfx___mutex_lock+0x10/0x10 [ 676.572958][T18525] ? rcu_is_watching+0x12/0xc0 [ 676.577247][T18525] ? lock_release+0x4e2/0x6f0 [ 676.581465][T18525] ? trace_lock_acquire+0x14e/0x1f0 [ 676.586153][T18525] ? __schedule+0xe60/0x5ad0 [ 676.590287][T18525] ? process_one_work+0x8bb/0x1b30 [ 676.594898][T18525] ? addrconf_verify_work+0x12/0x30 [ 676.599594][T18525] ? rtnl_lock+0x9/0x20 [ 676.603338][T18525] addrconf_verify_work+0x12/0x30 [ 676.607859][T18525] process_one_work+0x958/0x1b30 [ 676.612316][T18525] ? __pfx_process_one_work+0x10/0x10 [ 676.617155][T18525] ? rcu_is_watching+0x12/0xc0 [ 676.621446][T18525] ? assign_work+0x1a0/0x250 [ 676.625581][T18525] worker_thread+0x6c8/0xf00 [ 676.629749][T18525] ? __kthread_parkme+0x148/0x220 [ 676.634304][T18525] ? __pfx_worker_thread+0x10/0x10 [ 676.638902][T18525] kthread+0x2c1/0x3a0 [ 676.642563][T18525] ? _raw_spin_unlock_irq+0x23/0x50 [ 676.647241][T18525] ? __pfx_kthread+0x10/0x10 [ 676.651370][T18525] ret_from_fork+0x45/0x80 [ 676.655341][T18525] ? __pfx_kthread+0x10/0x10 [ 676.659475][T18525] ret_from_fork_asm+0x1a/0x30 [ 676.663772][T18525] [ 676.666625][T18525] Kernel Offset: disabled [ 676.670515][T18525] Rebooting in 86400 seconds..