last executing test programs: 11.220483234s ago: executing program 2 (id=3): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000010c0), 0xffffffffffffffff) sendmsg$auto_CTRL_CMD_GETPOLICY(r0, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="010325bd7040ffdbdf250a0000000600010000020000"], 0x1c}, 0x1, 0x0, 0x0, 0x30000881}, 0xc040810) socket(0x11, 0x1, 0x8) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0xfffffffffffffffe, 0xffffffffffff0005, 0x19) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x4, 0x8000) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) read$auto(0x3, 0x0, 0x7) io_submit$auto(0x6, 0x7f, &(0x7f0000000040)=&(0x7f0000000000)={0x6fffffffffffff, 0xb, 0x8, 0x3, 0x2, 0x3b, 0xfffffffffffffc00, 0x2, 0xfff, 0x0, 0x6}) writev$auto(0xc8, &(0x7f00000028c0)={&(0x7f0000000000), 0x200}, 0x9) madvise$auto(0x0, 0xffffffffffff0001, 0x15) fstatfs$auto(0x3, 0xfffffffffffffffd) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) getcwd$auto(0x0, 0xffffffffffffffff) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) sendmsg$auto_WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x4008810}, 0x2000c041) r2 = socket(0x2, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000080)={0x2, @sockaddr_1_1}, 0x6b) connect$auto(0x3, &(0x7f00000000c0)={0x2, @sockaddr_1_1}, 0x55) sendmsg$auto_NL802154_CMD_SET_CCA_MODE(r2, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000140)={0xa4, 0x0, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@NL802154_ATTR_PEER={0x88, 0x28, 0x0, 0x1, [@generic="cf444a3e5be3abe509c9a63079341725826e2081b51a8db798df8f3770846c654ce2df9bdd34de4cc568a4b53a8ddc1c8f7cdccea18f93ff21641e63d8624c0e5bfdc9677efae87dc24af5bff60736623b9f834c6a739c2643d587f09c8676f0c209a03edc3c0cbd74cb575226c86396bd3d820dafbbd2efed4dccd24575a9425df79eca"]}, @NL802154_ATTR_SEC_OUT_LEVEL={0x8, 0x2a, 0x353}]}, 0xa4}}, 0x80) write$auto(0x3, 0x0, 0xfffffdef) sendfile$auto(0x1, 0x3, 0x0, 0xc01) socket(0x2, 0x1, 0x0) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) 9.141186512s ago: executing program 2 (id=10): openat2$auto(0xffffffffffffffff, 0x0, 0x0, 0xfc) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) r0 = syz_genetlink_get_family_id$auto_wireguard(0x0, 0xffffffffffffffff) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) move_pages$auto(r1, 0x1002, 0x0, &(0x7f0000001140), 0x0, 0x2) ioperm$auto(0x7, 0x6, 0x3) r2 = socket$nl_generic(0x10, 0x3, 0x10) pipe$auto(&(0x7f0000000480)=0x30) read$auto(0x4, 0x0, 0x0) ioperm$auto(0xef78, 0x5, 0x200) arch_prctl$auto(0x1021, 0x3) futex_wake$auto(0x0, 0x8, 0x7, 0x2) sendmsg$auto_BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, 0x0, 0x20008800) r3 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000040), 0xffffffffffffffff) r4 = gettid() kill$auto(r4, 0x11) shmctl$auto(0xa, 0x4, &(0x7f0000000100)={{0x5, 0x0, 0xee01, 0x8, 0xc9}, 0x7, 0x6, 0x3, 0x7fffffff, 0x1, 0x1, 0xf8, 0x0, &(0x7f0000000080)=[0x7, 0x59, 0xdc58, 0x40000000000007ff, 0x6b, 0x7a54, 0x5], &(0x7f00000000c0)=[0x1]}) sendmsg$auto_NL802154_CMD_NEW_SEC_DEVKEY(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000540)={&(0x7f0000000180)=ANY=[@ANYBLOB="a40300d6a58bc437b000", @ANYRES16=r3, @ANYBLOB="000127bd7000ffdbdf251d000000080005000200000008000d000000000008001c00", @ANYRESDEC=r0, @ANYBLOB="08001600ff0f00008c012e8008005300", @ANYRES32=r1, @ANYBLOB="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", @ANYRES32=r5, @ANYRES16=r1], 0x384}, 0x1, 0x0, 0x0, 0x8000}, 0x4000004) clone$auto(0x10051c, 0x6, 0x0, 0xffffffffffffffff, 0x80000001) mmap$auto(0xf000, 0x8, 0x1000000003, 0x9b72, 0x2, 0x8000) shutdown$auto(r2, 0x1) 8.49414304s ago: executing program 2 (id=14): mmap$auto(0xfffffffffffffffd, 0x0, 0x4400000000, 0x100400000000eb1, 0x401, 0x1) (async) mmap$auto(0xfffffffffffffffd, 0x0, 0x4400000000, 0x100400000000eb1, 0x401, 0x1) getrandom$auto(0x0, 0x6000000, 0x3) socket(0x1d, 0x3, 0x1) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x3, 0x6) ioctl$auto(0x3, 0x8936, 0x91) 8.163682481s ago: executing program 2 (id=18): socket(0xa, 0x6, 0x0) mmap$auto(0x0, 0x4020009, 0xfffffffffffffffd, 0xebf, 0x402, 0x8000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socket(0xa, 0x2, 0x0) select$auto(0x3, 0x0, &(0x7f0000000100)={[0x9, 0x200, 0x0, 0x974, 0x9, 0x3, 0x6, 0x2, 0x9, 0x5e58296f, 0x0, 0x9, 0x3, 0x200, 0x8, 0x6]}, 0x0, 0x0) connect$auto(0x3, &(0x7f0000000140)={0xa, @sa_data_min="c4aeed448dc7fe8000"}, 0x55) write$auto(0x3, 0x0, 0xfdef) madvise$auto(0x0, 0x4, 0x15) madvise$auto(0x0, 0x1d26, 0x17) setsockopt$auto(0x400000000000003, 0x10d, 0x36, 0x0, 0x1000) 7.767820691s ago: executing program 0 (id=22): r0 = open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) r1 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x848000000015, 0x805, 0x0) keyctl$auto(0xe, 0x8000000000000000, 0x9b, 0x400000000004, 0xa) bind$auto(0x3, &(0x7f0000000000)={0x2, @sockaddr_1_1={"90927f"}}, 0x68) connect$auto(0x3, &(0x7f0000000140)={0xa, @sa_data_min="c4ae0000c5bc964100"}, 0x55) sendmsg$auto_ETHTOOL_MSG_CHANNELS_SET(r1, &(0x7f0000001cc0)={0x0, 0x0, &(0x7f0000001c80)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="0100c16dbe2abd700000dcdf2512000000b8cef37d92c50dfc15b5ca31199335f6aafa4248235d1964fa93c95997cf2de68d15ba73df2d6da389e7d3732b82aba6c6c5040b7888b370421ad87c8c805dc3661467423c6f2724d32460d7d800b6dbd97a242c7808be88fcdef7c27355c8fdcdc29a9ea2100e0ef55ab72e70e1d750ce10cdcd494453691542f1a4b2f0bf1a91eb"], 0x14}, 0x1, 0x0, 0x0, 0x8800}, 0x0) r3 = gettid() tkill$auto(r3, 0x7) r4 = geteuid() sendmsg$auto_NL802154_CMD_GET_SEC_KEY(r0, &(0x7f00000002c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000280)={&(0x7f0000000840)={0x92c, 0x0, 0x2, 0x70bd2c, 0x25dfdbfb, {}, [@NL802154_ATTR_PEER={0x4c0, 0x28, 0x0, 0x1, [@typed={0x85, 0x6b, 0x0, 0x0, @binary="28251287f70cf264ce1165bcfd7c2d4c2d884568e9224321355f09af4e99aed20b627d136145b63588b8d0e93ca657db7f353430dedd68fbadeafeb2cd9e59c8774b53ab0b08bdc105510636065c0670f971f20bee3b186062b12317a07cb7efafce9a582a8fbc295bdee1baabb0c3d289198720571be6c7d18371591378d69279"}, @generic="fd7a2d1d586918e7c647b7d7d990ac41eabac8d139632710b6c6650e295e3e5fdfc0266cd86338f0a72e2a4ca8a5a4f9565721393738569f327c3655e63ced4ddf820f72d60503ae86665eaacdd56d9d30bd00823976fca704d53b121469c9d267c71c33", @generic="f9db94926773fb8676ed988545fadd9dc8054d9bb140ced02fde19a1df7a49dbbbd3dc18377966eff14bff3c8e987866212555cd8c29f822b206bc70e3a5cd29427825ddfe19c5be2832b3a151bc440d458784eb5401eb57b7f85dc92d4eb80d84365b43", @nested={0x1c, 0x101, 0x0, 0x1, [@nested={0x4, 0x138}, @typed={0x14, 0x63, 0x0, 0x0, @ipv6=@private1}]}, @nested={0x191, 0x8b, 0x0, 0x1, [@nested={0x4, 0x49}, @nested={0x4, 0x14}, @generic="ccda0a87b4758283f269fab8ae4563ff7124266c919728bd94340ada026e8f357d9cea3bf884e477d38a876b12951965a6f9281950a98169e89314a5861aeb5fb874f0a03fdb374d333004442442bea99e217b293513eb1520a5abe1ec49abdd95ecf6b98c54dbc9c38343af3323e80bebabbd6005ca2122a621feeee76e28be9c44d116cdbce96a250982365c07e8ab04b1e6879d4d64b458af58d498460ea498147514", @generic="0be8b98df4b8dc5d25247f51cabff9145393ee8628be229ccb6a8fac5b6dcab55cad11b074ef191c5fe081c61f4b6f00c901aaa61681e746e7f1929d9018db6a4e67f54977f10ba50b82b5185e97a797df8ace73cfca56c6ed8ed6cfe9ef3572d0dd0148c1e96030c1aa3cd47b7ac064be9c52cbabdcc6e6e0b660d4f406e9c2b779bd90e8bbbc1a40f94f2604c318db005d9a5c0add6ca9913b3972a7f76f5cf3cde50e41c2de8303477ebba877186be38f1debcc165ea6e6b954e7e1385f7229750065d24dc4ade3ce3c1b200634fa7fc219db65e96a5c3eaa1e28f4b5eb070f"]}, @nested={0x1bc, 0xcb, 0x0, 0x1, [@generic="91560756c783b8967de4530886229ab2b72d87c07775076d1c729d74a9077cb8826781d552123ab3b9faed29cded7bffc8e48272072707386b78873e6bc492e730a44df811ed038792838105d793ac7568227c076617fa26b5702a69b87b8e32a128779aa9eac9ad4fb2500a3904b39993ef97822b3dfd180fd371c43113a63ff01eb2408aa5e0cd12655a4142db92207eec3054c903a32a09a672", @generic="fe0f9a827838ddb15120e7f4d922b39dbdc53aaec6426701032ba1b7e9d9d5fd0ebe909b373ec9376a28834fdd5106701dfa9b5d4c8ad69911795e180ae0c07878601d065e7fda6740ddfa2a80b97814a5ebabcd0a4a85eefa02d00237d337799d3654efa2842b2a274c1d2ca15ec3ea0bf8e9c4870c9aecc6773f1b06ce31bc3585c8d7d233a163bfb34bb15f942e355c578146ebc585853622bea5", @typed={0x14, 0x13e, 0x0, 0x0, @ipv6=@dev={0xfe, 0x80, '\x00', 0x1f}}, @nested={0x4, 0x7c}, @typed={0x9, 0x72, 0x0, 0x0, @str='nfsd\x00'}, @generic="08cb4e859f7efc02703d89e2048e62c627d27332a2d4f9fdc7ec26dd1dabe95f99e479631e209fdd5c9b9d3063b579befd2df2e620618e4b93ea7f96d66b4aebea11fa3810751477695d0278c1b0cfbcf62c6aa9f2814b4455a5c57d3a"]}]}, @NL802154_ATTR_SEC_KEY={0x38, 0x30, 0x0, 0x1, [@typed={0x8, 0x131, 0x0, 0x0, @fd=r2}, @typed={0x14, 0x7a, 0x0, 0x0, @ipv6=@remote}, @typed={0x4, 0x8}, @typed={0x8, 0xe8, 0x0, 0x0, @pid=r3}, @typed={0x9, 0xe6, 0x0, 0x0, @str='nfsd\x00'}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x1000}, @NL802154_ATTR_WPAN_PHY_CAPS={0x414, 0x18, 0x0, 0x1, [@generic="469f215c909fb11bd52ebc5d635eb98d69d94b6f4664511f15a5681784a3e97847917d289206fc5dca5b094cd4956a06261c352357868dcbf692c24458fe68c529c3903cda72e68be0c25659420ba0a46557a53f35c5d4fc9447abc9a5469f07e1ac08ce2a2d6c3c5eee4e93fee911d0318f1322392fb0a83c6d3307adbd39fc7aadc0926126daa663790b3d74c22a889bd61234b5d5ed2d969fe23b8da0e45027ae4580c40a4c312997d18c9e466433e7129fd553bddb3c892580700a187c6aca94ee9892e272124e8c0d198fbacd8c1becffd80797aae35ebde80ec6b167d22c0b4dc9e29384a2ae188273ac966bb0", @typed={0x8, 0x85, 0x0, 0x0, @uid=r4}, @generic="2cb94eae605dc3d32589942c7638c34281891e7626f9e23fb2b301dbfd7acb130ea3e34786cdd4cc98b7cfa6cd2719b3946b15beeddf21103a1be5b10d08d47a87607b13bf9b349487bd228d9f93135b8f619b6a4cc83894b6e850ce572275f93d9e14f2706fbed502202aee5e3bd5ec6b98435fe916931313a97ffa0c34f106ad59b63a26819cd9b228f35c022ba4faa63f04a178a7d42329587839d66c59f99494cd476f183ecf9a39f66760b011bcdf9219d86e7729a9f173856d1232669bec745db4d239d6013babe10fd9ff85cd6c1967c42b2688c7c0f531d52a321b350debaba4b3fab3d8380acb30", @typed={0x8, 0xbe, 0x0, 0x0, @u32=0xe73d}, @nested={0x1b7, 0x52, 0x0, 0x1, [@typed={0x9, 0x10, 0x0, 0x0, @str='nfsd\x00'}, @generic="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", @nested={0x4, 0x49}, @nested={0x4, 0x137}, @generic="f47dd3aaf87902b8c091266087f96872af35933cae3429b343ab10597ec155d78ab994487ea69dcf9ae714c7580a561c0f3a99c7da5fe08544d30d6cb84359d76ae64edbf5543705d84a1db981d6", @nested={0x4, 0x49}, @generic="65dd2b4b4efe1b8d861f6ee41c1c3d149a7d4e14c61918ba35e4cdea381b3b6efb3e7d5cef53966d7e71b562b42e746faa64f1a3d82b4bdc0d27c867c8b2c59e79ab0af8933d64423cb41ae64b26ae"]}, @nested={0x6c, 0xd3, 0x0, 0x1, [@nested={0x4, 0x134}, @typed={0x60, 0x8e, 0x0, 0x0, @binary="ba66913ee2fca833a943314f6575c7721bcbb75b685f6104e4784377dd50c9ec3def17d612c1359d04c8927c3290715f64adc54f016a9d27bfaff4670b21b5237390f04df3a77786833184cee8f6e6791679a4ed1902a9c359cbb3e5"}, @nested={0x4, 0x64}]}]}]}, 0x92c}}, 0x9080) io_uring_setup$auto(0x5, &(0x7f00000000c0)={0x80000001, 0x3, 0x9, 0x7, 0x10, 0x2, r0, [0x14800000, 0x10000, 0x200], {0x7, 0x9, 0x5, 0x101, 0xc92f, 0x1, 0xfff, 0x7, 0x1}, {0x3, 0x8, 0x90e, 0x1, 0x5, 0xfffffffb, 0x9, 0x0, 0xa71}}) mount$auto(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='nfsd\x00', 0x0, 0x0) 7.732795217s ago: executing program 0 (id=23): openat2$auto(0xffffffffffffffff, 0x0, 0x0, 0xfc) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) syz_genetlink_get_family_id$auto_wireguard(0x0, 0xffffffffffffffff) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) move_pages$auto(r0, 0x1002, 0x0, &(0x7f0000001140), 0x0, 0x2) ioperm$auto(0x7, 0x6, 0x3) socket$nl_generic(0x10, 0x3, 0x10) pipe$auto(&(0x7f0000000480)=0x30) read$auto(0x4, 0x0, 0x0) ioperm$auto(0xef78, 0x5, 0x200) arch_prctl$auto(0x1021, 0x3) futex_wake$auto(0x0, 0x8, 0x7, 0x2) sendmsg$auto_BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, 0x0, 0x20008800) syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000040), 0xffffffffffffffff) r1 = gettid() kill$auto(r1, 0x11) 7.456335349s ago: executing program 0 (id=24): r0 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000580), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NFSD_CMD_POOL_MODE_SET(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYRES64=r1, @ANYBLOB="0b4645e062b63865bd5eb6405870542ff1e543b70f8b68731447656238956eadec5809b60f08071e048073a805d6034f64d2fa144361378e32cd77461aed0d996aed7ee9c48371d9b0a17b6dbd65985dc22568", @ANYRES16=r0], 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x4810) 7.247918011s ago: executing program 0 (id=26): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) r0 = socket(0x1, 0x1, 0x1) r1 = socket(0xa, 0x1, 0x84) mmap$auto(0x2, 0xa, 0x0, 0x9b72, 0x5, 0x4) io_uring_setup$auto(0x6, 0x0) setsockopt$auto(0x3, 0x10000000084, 0x81, 0x0, 0x8) socket(0xa, 0x3, 0x73) r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) mmap$auto(0x2, 0xb4e, 0x5, 0x10, 0x9, 0x8) sendmsg$auto_NL80211_CMD_SET_WIPHY(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010029bd7000fddbdf251f00000008000300", @ANYRES32=r5, @ANYBLOB="0800690000000100"], 0x24}, 0x1, 0x0, 0x0, 0x20040010}, 0x20000084) select$auto(0x6d0c, 0x0, &(0x7f0000000100)={[0xd, 0x42, 0x800000000000008, 0xc, 0x9, 0x3, 0x6, 0x1, 0x40009, 0x5e582972, 0x4000000000000000, 0x14, 0x93, 0x8, 0x8, 0x6]}, 0x0, 0x0) connect$auto(0x3, &(0x7f0000000140)={0xa, @sa_data_min="c4aeed448dc7fe8000"}, 0x55) bind$auto(0x3, &(0x7f00000001c0)={0xa, @sockaddr_1_1={"9d716dd050b0bc70ed3516e24f0213cdf3c73be35ceaa2a545a4f8652152a6b86a92521d5f576c8986757dba55e97e9b6e19222ff0f9afedefdd2292c8c6aac86a099f590908ded3fec2e76662861e4e5305ab1849a92524babdfd70fc5629e355dbb4d27978b9eb8e36b69a8f7859b36d5d6e224586148c423235bfb94f29bf350fb4b99256ddfd0e236a2d98814ce315f14db1fee82bf2f10292e17d2b137fbd507f58ff6a04c2067a44b3b384a9502d0a60155e1b56c7b3d18b9e12db6092fb7c62642e7e00c4743f3ae9995527f8b13a3802b9b5749cd89db5f8a77b714914"}}, 0x7fff) mmap$auto(0x0, 0x2020009, 0xb, 0xeb1, 0xfffffffffffffff7, 0x8000) getrandom$auto(0x0, 0xe06, 0x3) madvise$auto(0x0, 0x3, 0x15) clone$auto(0x2020003b46, 0x2, 0x0, 0x0, 0x8000000000000001) getsockopt$auto(r1, 0x84, 0x16, 0x0, 0x0) bind$auto(r0, &(0x7f0000000140)={0x1, @sa_data_min="5c0000008000"}, 0xd) mprotect$auto(0x1ffff000, 0x8000000000000001, 0xd) connect$auto(0x3, &(0x7f0000000140)={0xa, @sa_data_min="c4aeed448dc7fe8000"}, 0x16d) 6.799994315s ago: executing program 2 (id=28): mmap$auto(0x0, 0xa, 0xdb, 0x9b72, 0x5, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mmap$auto(0x0, 0x2020009, 0xe, 0xeb1, 0x5, 0x8000) rseq$auto(&(0x7f0000000300)={0xe, 0x401, 0x0, 0x6, 0xffffffff, 0x2}, 0x8000, 0x0, 0x6) madvise$auto(0x0, 0xffffffffffff0005, 0x19) (async) madvise$auto(0x0, 0xffffffffffff0005, 0x19) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, 0x0, 0x20040044) madvise$auto(0x0, 0xffffffffffff0001, 0x15) madvise$auto(0x0, 0xffffffffffff0005, 0x19) (async) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mkdir$auto(0x0, 0x8001) (async) mkdir$auto(0x0, 0x8001) socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_IPVS(&(0x7f0000002100), r0) readv$auto(0x6, &(0x7f0000000180)={&(0x7f0000000140)=[0x8, 0x8000000000000000, 0xffffffff], 0x6}, 0x555) (async) readv$auto(0x6, &(0x7f0000000180)={&(0x7f0000000140)=[0x8, 0x8000000000000000, 0xffffffff], 0x6}, 0x555) sendmsg$auto_IPVS_CMD_DEL_DAEMON(r0, &(0x7f0000003400)={0x0, 0x0, &(0x7f00000033c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="14000000", @ANYRESHEX, @ANYBLOB="010027bd7000fbdbf4250a000000"], 0x14}, 0x1, 0x0, 0x0, 0x20000844}, 0x4000870) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_ila(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_ILA_CMD_ADD(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, r2, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@ILA_ATTR_LOCATOR={0xc, 0x1, 0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000001}, 0x2000c040) (async) sendmsg$auto_ILA_CMD_ADD(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, r2, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@ILA_ATTR_LOCATOR={0xc, 0x1, 0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000001}, 0x2000c040) sendmsg$auto_ILA_CMD_ADD(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="00002abd700000050007008000"/22], 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x440040d0) (async) sendmsg$auto_ILA_CMD_ADD(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="00002abd700000050007008000"/22], 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x440040d0) socket(0x10, 0x3, 0x6) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000240), r1) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) (async) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) io_uring_setup$auto(0x1, 0x0) futex$auto(0x0, 0x6, 0x8, 0x0, 0x0, 0xffffffd6) mmap$auto(0x0, 0x8, 0x1000000004, 0x9b72, 0x2, 0x8000) (async) mmap$auto(0x0, 0x8, 0x1000000004, 0x9b72, 0x2, 0x8000) tkill$auto(0x1, 0x7) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) connect$auto(0x3, &(0x7f0000000140)={0xa, @sa_data_min="c4aeed448dc7fe8000"}, 0x55) socket$nl_generic(0x10, 0x3, 0x10) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) (async) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) 5.615441455s ago: executing program 1 (id=32): openat2$auto(0xffffffffffffffff, 0x0, 0x0, 0xfc) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) syz_genetlink_get_family_id$auto_wireguard(0x0, 0xffffffffffffffff) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) move_pages$auto(r0, 0x1002, 0x0, &(0x7f0000001140), 0x0, 0x2) ioperm$auto(0x7, 0x6, 0x3) socket$nl_generic(0x10, 0x3, 0x10) pipe$auto(&(0x7f0000000480)=0x30) read$auto(0x4, 0x0, 0x0) ioperm$auto(0xef78, 0x5, 0x200) arch_prctl$auto(0x1021, 0x3) futex_wake$auto(0x0, 0x8, 0x7, 0x2) sendmsg$auto_BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, 0x0, 0x20008800) syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000040), 0xffffffffffffffff) r1 = gettid() kill$auto(r1, 0x11) 5.222409533s ago: executing program 1 (id=34): mprotect$auto(0x1ffff000, 0x8000000000000001, 0x4) close_range$auto(0x0, 0xfffffffffffff000, 0x2) r0 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x0, 0xfffffffffffff000, 0x4002) socket(0xa, 0x801, 0x106) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) setsockopt$auto(0x3, 0x0, 0x13, 0x0, 0x9) syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/pid\x00') ioctl$sock_SIOCGIFINDEX(r0, 0x40049409, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_IOAM6(&(0x7f0000001340), 0xffffffffffffffff) sendmsg$auto_IOAM6_CMD_ADD_SCHEMA(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000680)=ANY=[@ANYBLOB="14cde3588949c0193c581adb7c27baa9355fbcc2dcc85b9f9a13d43236ebcf0ef64a3d8bd61380bebebbccc271f603a26fca4a3685576b862d17442d6848d7212018186e95df6688ea05d09e2f312974aacb02165c4de50cabb0467fb960cf37e84a013167af77d639436463dcfab3692fd2f62a1d7faf611fbe4342636b36c709f540bb105936f695e97635f0e69feb5222e0a05a3a6cc264eebf6fe620da69c92bb6f021c158d9e13679e84a3a6bae526b6c52c9bba3409ac406e349b6a796d51693458e30cbf163b7b2997c5ff66bacd2f5eebb21b551de2aa5b064917305649e3106a66dbee8d849cf10600000000000000000006ce8121603b0ea31037a1606453e8ca9c554b0bfbc9226e25dd9050caa0e9cefc6b25ad46a967283cc302e0ef24b10b30c4645d690604aac10376691143e0ed2238fbdc96ed4668a4c8802c835f3e087e5e80241304bfb8beddc575420948e4c3927ce183314b15f8e5434dd18be0ac11d87fa433728eb75a35a01b862365f1a9b7f450ef14ddad338b81cbf2ee764f310c912a2d925f54f2c57ae1022d63b41ed2f68037cb96fda321ae290f8b83b3c852daff056fd2affd4b6f693d72bed52f654c45d69b6d12b54652c490048b4a13c2646cc75cdd056253cd30167cd384aa72f991af53339ba4705b887f5cd954c477db3f091b988b41d5a5687381a39fa675f2174dd703bb4511b2a871867ebe6807e01d66391f0aa437b7945820f9a6b33b941635c230106e7d88bc48eb1e878a5c5909345a8b1fdda52adba94bca52934722f9dbc48f66e878adb10dd0dff2967090f4fa9dad013d238ce0e3b6b346215cd7ad42c62bc0b49904476a44559aa92f9cb4dd5e5e296f72ae6078e3d264e77c728906b1ba7761a6ed41ae9a004a78a7ad4313ededec4e7721fac68512634134ad6e85d424f0227955bb8a0581c2000fe4a8f4ac8afa9d3607f69a937ab94da", @ANYRES16=r2, @ANYBLOB="010027bd7000ffdbdf2504000000"], 0x14}}, 0x8800) 4.860149032s ago: executing program 1 (id=35): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r0 = socket(0x10, 0x2, 0x6) set_mempolicy$auto(0x4e2c, &(0x7f0000000000)=0x5, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="18003b"], 0x1ac}, 0x1, 0x0, 0x0, 0x240400c4}, 0x40000) r1 = socket(0x10, 0x2, 0x6) sendmsg$auto_NL80211_CMD_GET_REG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="72010000", @ANYBLOB, @ANYBLOB="7f"], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 4.612531502s ago: executing program 1 (id=36): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x2020009, 0x4, 0xeb5, 0xfffffffffffffffa, 0x8000) socket(0xa, 0x2, 0x0) connect$auto(0x3, &(0x7f0000000140)={0xa, @sa_data_min="00000000f5ffffffffffffff00"}, 0x55) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) socket(0xa, 0x3, 0xff) pivot_root$auto(&(0x7f0000000e00)='.\x00', &(0x7f0000000e40)='.\x00') mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x800009b72, 0x2, 0x8000) mmap$auto(0x0, 0xa, 0xdb, 0x9b72, 0x5, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) rseq$auto(&(0x7f0000000180)={0x0, 0x9, 0x0, 0x4, 0xffffffff, 0xfffffffe, "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"}, 0x8000, 0x0, 0x7) chdir$auto(0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) poll$auto(&(0x7f0000000d40)={0x3, 0x1, 0xa}, 0x5, 0x400) setsockopt$auto(0x3, 0x1, 0x20, 0x0, 0x9) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) fsopen$auto(0x0, 0x1) madvise$auto(0x0, 0x5, 0x15) madvise$auto(0x0, 0x200007, 0x19) sysfs$auto(0x2, 0x4, 0x0) mprotect$auto(0x1ffff000, 0x8000000000000001, 0xd) close_range$auto(0x0, 0xfffffffffffff000, 0x2) r0 = getpid() syz_open_procfs$namespace(r0, &(0x7f0000000000)='ns/cgroup\x00') fchdir$auto(0xf4400000000) rename$auto(0x0, 0x0) 3.696160814s ago: executing program 2 (id=38): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r0 = socket(0x10, 0x2, 0x6) sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x240400c4}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1700", @ANYBLOB="7f"], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) (fail_nth: 1) 3.146808033s ago: executing program 32 (id=38): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r0 = socket(0x10, 0x2, 0x6) sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x240400c4}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1700", @ANYBLOB="7f"], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) (fail_nth: 1) 2.946085252s ago: executing program 0 (id=40): mmap$auto(0x0, 0x2020005, 0x3, 0xeb0, 0xfffffffffffffffa, 0x8000) (async) mmap$auto(0x0, 0x2020005, 0x3, 0xeb0, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0xffffffffffffffff, 0x389d) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0xd4, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) fchmod$auto(0xc8, 0x4) r0 = socket(0x3f, 0x2, 0x1000) r1 = socket(0x1e, 0x4, 0x0) get_robust_list$auto(0x0, 0x0, 0x0) mmap$auto(0x5, 0xe982, 0xe52, 0x1000000000000eb1, 0x3fe, 0x8000) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000021}, 0x8004) select$auto(0x3, 0x0, &(0x7f0000000100)={[0x9, 0x200, 0x0, 0x9, 0x9, 0x3, 0x6, 0x2, 0x7, 0x5e582970, 0x4000000000000000, 0x6, 0x2000000003, 0x200, 0x8, 0x6]}, 0x0, 0x0) (async) select$auto(0x3, 0x0, &(0x7f0000000100)={[0x9, 0x200, 0x0, 0x9, 0x9, 0x3, 0x6, 0x2, 0x7, 0x5e582970, 0x4000000000000000, 0x6, 0x2000000003, 0x200, 0x8, 0x6]}, 0x0, 0x0) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000080), r0) (async) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000080), r0) sendmsg$auto_NL80211_CMD_DEAUTHENTICATE(0xffffffffffffffff, 0x0, 0x2004c180) mmap$auto(0x0, 0x20009, 0x3, 0xeb1, 0x40000000000a5, 0x8000) (async) mmap$auto(0x0, 0x20009, 0x3, 0xeb1, 0x40000000000a5, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) capset$auto(0x0, 0xfffffffffffffffe) (async) capset$auto(0x0, 0xfffffffffffffffe) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) (async) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) socket(0xa, 0x2, 0x0) connect$auto(0x3, &(0x7f0000000140)={0xa, @sa_data_min="c4aeed448dc7fe8000"}, 0x55) (async) connect$auto(0x3, &(0x7f0000000140)={0xa, @sa_data_min="c4aeed448dc7fe8000"}, 0x55) setsockopt$auto(0x3, 0x1, 0x19, 0xffffffffffffffff, 0x0) (async) setsockopt$auto(0x3, 0x1, 0x19, 0xffffffffffffffff, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x9fe) (async) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x9fe) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) r2 = socket(0x15, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0) socketpair$auto(0xb, 0x5, 0xffff, &(0x7f0000000000)=0x88ae) setsockopt$auto(r1, 0x10f, 0x87, 0x0, 0x14) (async) setsockopt$auto(r1, 0x10f, 0x87, 0x0, 0x14) setsockopt$auto(0x3, 0x10f, 0x87, 0x0, 0x14) 2.586917442s ago: executing program 3 (id=41): mmap$auto(0x0, 0x2020009, 0x3, 0x4000000000000eb1, 0xfffffffffffffffa, 0x8000) open(0x0, 0x1ffd, 0x12) socket(0x28, 0x5, 0x0) close_range$auto(0x2, 0x8, 0x0) ioctl$auto(0xffffffffffffffff, 0x1, 0xff80000000000000) mq_unlink$auto(0x0) madvise$auto(0x0, 0x80000001, 0x8) mbind$auto(0x0, 0xd, 0x4, 0x0, 0x3, 0xfffffffe) 1.956163141s ago: executing program 3 (id=42): r0 = gettid() kill$auto(r0, 0x11) 1.90002607s ago: executing program 0 (id=43): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) socket(0x2, 0x1, 0x106) listen$auto(0x3, 0x81) shutdown$auto(0x200000003, 0x2) mkdir$auto(&(0x7f0000000040)='./file0\x00', 0x2) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x8000, 0x70) mknodat$auto(r0, &(0x7f00000003c0)='./file0\x00', 0xfff, 0xfffffff8) renameat2$auto(r0, &(0x7f0000000200)='./file0\x00', r0, &(0x7f0000000240)='./file1\x00', 0x1) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x8000, 0x70) mknodat$auto(r1, &(0x7f00000003c0)='./file0\x00', 0xfff, 0xfffffff8) renameat2$auto(r1, &(0x7f0000000200)='./file0\x00', r1, &(0x7f0000000240)='./file1\x00', 0x2) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) sendmsg$auto_WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x4008810}, 0x2000c041) bind$auto(0x3, &(0x7f0000000100)={0x2, @sa_data_min="7a7bd9482c0f91dd65a6c180c78e"}, 0x6b) mount$auto(0x0, 0x0, 0x0, 0xdad, 0x0) connect$auto(0x3, &(0x7f00000000c0)={0x2, @sockaddr_1_1}, 0x55) poll$auto(&(0x7f0000000d40)={0x3, 0x1, 0xa}, 0x5, 0x400) setsockopt$auto(0x3, 0x1, 0x20, 0x0, 0x9) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) write$auto(0x3, 0x0, 0xfffffdef) unshare$auto(0x40000080) socket(0xa, 0x3, 0x3a) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ovs_ct_limit(0x0, r2) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, 0x0, 0x400c000) socket(0xa, 0x5, 0x0) shutdown$auto(0x200000003, 0x2) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) setsockopt$auto(0x3, 0x0, 0x2, 0x0, 0x28) 1.746966112s ago: executing program 3 (id=44): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r0 = socket(0x10, 0x2, 0x6) set_mempolicy$auto(0x4e2c, &(0x7f0000000000)=0x5, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="18003b"], 0x1ac}, 0x1, 0x0, 0x0, 0x240400c4}, 0x40000) r1 = socket(0x10, 0x2, 0x6) sendmsg$auto_NL80211_CMD_GET_REG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="72010000", @ANYBLOB, @ANYBLOB="7f"], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 1.530421056s ago: executing program 3 (id=45): r0 = socket(0xa, 0x3, 0x3a) setsockopt$auto(r0, 0x29, 0xca, 0x0, 0x4) syz_genetlink_get_family_id$auto_netdev(&(0x7f0000001500), 0xffffffffffffffff) r1 = open(&(0x7f00000000c0)='./cgroup\x00', 0x0, 0xb5d1af1605322df2) open_by_handle_at$auto(r1, &(0x7f0000000040)={0x8, 0x2, "0200000000000000"}, 0x402) newfstatat$auto(0xffffffffffffff9c, &(0x7f0000003100)='./file0\x00', &(0x7f0000004100)={0x1, 0x2, 0xfffffffffffffffe, 0x7, 0xee00, 0xee01, 0x0, 0xfffffffeffffffff, 0x1, 0x8, 0x1, 0x6, 0x4e69, 0x1c00000000, 0x4, 0x3, 0x6}, 0x7) lstat$auto(&(0x7f0000000000)='./file1\x00', &(0x7f00000041c0)={0x8, 0x0, 0xc837, 0x0, 0xffffffffffffffff, 0xee00, 0x0, 0x7fff, 0xea3, 0xffff, 0x8, 0x926a0000, 0xa, 0x20002, 0x8, 0x4, 0x6}) r4 = getgid() r5 = geteuid() msgctl$auto(0x0, 0x1, &(0x7f00000001c0)={{0x80100000, r5, r4, 0x92f8, 0x8, 0x4000d5, 0x1009}, 0x0, 0x0, 0x800, 0x7, 0x8, 0xc, 0x10001, 0x8, 0x5, 0x5, 0x0, 0xfff}) lstat$auto(&(0x7f0000000080)='-!-\x00', &(0x7f0000000180)={0xe74, 0x9, 0xf, 0x5, 0x0, 0xee01, 0x0, 0x7fff, 0x7, 0x7, 0x23, 0x5318, 0x8, 0x6, 0xfffffffffffffff8, 0x40, 0x9}) stat$auto(&(0x7f0000000000)=']{\x00', &(0x7f0000000240)={0x6, 0xe5a5, 0x6, 0x8, r5, r6, 0x0, 0xffffffffffffff80, 0x21a, 0xffffffff, 0x1, 0x7fffffff, 0x9, 0x16b, 0xa, 0x200, 0x1}) setresuid$auto(r2, r3, r5) syz_genetlink_get_family_id$auto_handshake(&(0x7f0000000340), r1) statx$auto(r1, &(0x7f0000000040)='./file0\x00', 0x6, 0x5, &(0x7f0000000080)={0x7, 0x2, 0x6, 0x0, r5, 0xee00, 0x1, 0x1ff, 0x40004000000000, 0x6, 0x7f, 0x91, {0x1, 0x3}, {0x6b3e, 0x2}, {0x80000000, 0xffff}, {0x100000001, 0x5}, 0x73a3, 0x8, 0x565f, 0x6, 0x8000000000000001, 0x400, 0xdd, 0xc, 0x7fffffff, 0x7fffffff, 0x10, 0x6, [0x5, 0x3, 0x2, 0x2, 0x7, 0x4, 0x0, 0xa, 0xff]}) personality$auto(0x4) open(&(0x7f0000000000)='./file0\x00', 0x1853c2, 0xe7) finit_module$auto(0x3, 0x0, 0x400000000004) writev$auto(0xca, &(0x7f0000000080)={&(0x7f0000000300)=[0x404], 0x7}, 0x7) mmap$auto(0x0, 0xa, 0xdb, 0x9b72, 0x5, 0x8000) socket(0x15, 0x5, 0x0) ioctl$auto(0x3, 0x89e0, 0x91) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) rseq$auto(&(0x7f0000000300)={0xe, 0x401, 0x0, 0x6, 0xffffffff, 0x2}, 0x8000, 0x0, 0x6) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0xffffffffffff0000, 0x15) madvise$auto(0x0, 0xffffffffffff0005, 0x19) capget$auto(0x0, 0x0) socket(0x10, 0x2, 0x0) 1.09221858s ago: executing program 1 (id=46): close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)) prctl$auto(0x21, 0x1, 0x3, 0x0, 0x0) socket(0x2, 0x6, 0x0) mmap$auto(0x0, 0x8, 0xdc, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x2, 0x3, 0xa) pipe2$auto(0x0, 0x80) keyctl$auto(0x200000000000020, 0xffffffffffffffff, 0x5, 0x5, 0x8) keyctl$auto(0x3, 0xffffffffffffffff, 0x9b, 0x400000000004, 0x8) socket(0x15, 0x5, 0x0) mprotect$auto(0x0, 0x8000000000000001, 0x6) clone3$auto(0x0, 0x40) getrandom$auto(0x0, 0x6000000, 0x3) setuid$auto(0xe) syz_genetlink_get_family_id$auto_nbd(0x0, 0xffffffffffffffff) fallocate$auto(0x3, 0x0, 0xe, 0x8ec5) setsockopt$auto(0x3, 0x114, 0xa, 0x0, 0x4) setsockopt$auto(0x1, 0x1, 0x2d, &(0x7f0000000000)='\x00', 0x4) 766.232778ms ago: executing program 3 (id=47): mmap$auto(0x0, 0x100020009, 0x4000000000df, 0xeb1, 0x10001, 0x8000) mmap$auto(0x6, 0xe221, 0x1, 0x35610, 0x5, 0xffffffffffffffff) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0xffffffffffff0001, 0x15) madvise$auto(0x0, 0xffffffffffff0005, 0x19) execveat$auto(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)=0x0, 0x76000000) mmap$auto(0x5, 0x0, 0x3, 0x11, 0xafa, 0x5) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) 622.494383ms ago: executing program 1 (id=48): setresuid$auto(0x8, 0x0, 0x4) setpriority$auto(0x2, 0x8, 0x8) (async) mmap$auto(0x0, 0x8, 0x72, 0x8b72, 0x8f1, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) (async) madvise$auto(0x0, 0xffffffffffff0001, 0x15) futex_requeue$auto(0x0, 0x101, 0x9, 0x5) (async) r0 = socket(0xa, 0x3, 0xff) setsockopt$auto(r0, 0x9, 0x4, &(0x7f0000000100)=',&-([@\\-$\xd7\x00', 0x34) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) r1 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="000000f77666ad1900", @ANYBLOB="1e00df45"], 0x1ac}}, 0x0) (async) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) (async) fanotify_init$auto(0x1f53, 0x2000000000002) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket(0x26, 0x80805, 0x0) (async) inotify_init1$auto(0x3000000000000) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) prctl$auto(0x50, 0x10, 0x9, 0x0, 0x0) (async) select$auto(0x7, 0x0, &(0x7f0000000080)={[0x8209c, 0xe9e, 0x7, 0x15, 0x9, 0x100000001, 0x7, 0xf, 0x0, 0x0, 0xe, 0x8000000000d59, 0x101, 0xff, 0x2, 0x80000001]}, 0x0, 0x0) (async) sendmsg$auto_NL80211_CMD_GET_REG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB='R'], 0x1ac}}, 0x40000) read$auto(0x4, 0x0, 0x20fd) 0s ago: executing program 3 (id=49): r0 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000", @ANYBLOB='^\x00\''], 0x1ac}, 0x1, 0x0, 0x0, 0x40}, 0x40000) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000740), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'netdevsim0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'netdevsim0\x00', 0x0}) sendmsg$auto_ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000080)={0x28, r2, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [@ETHTOOL_A_COALESCE_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @ETHTOOL_A_COALESCE_TX_AGGR_TIME_USECS={0x8, 0x1c, 0xc}]}, 0x28}, 0x1, 0x0, 0x0, 0x48c1}, 0x0) (async) sendmsg$auto_ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000080)={0x28, r2, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [@ETHTOOL_A_COALESCE_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @ETHTOOL_A_COALESCE_TX_AGGR_TIME_USECS={0x8, 0x1c, 0xc}]}, 0x28}, 0x1, 0x0, 0x0, 0x48c1}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'hsr0\x00'}) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000004440), 0xffffffffffffffff) (async) r5 = syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000004440), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'veth0_to_team\x00', 0x0}) sendmsg$auto_OVS_DP_CMD_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000004540)={&(0x7f0000000240)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01002bbd7000ffdbdf2501000000080007000400000008000200", @ANYRES32=0x0, @ANYBLOB="1100010068009442dc643000cd687ca3ff000000080009000b", @ANYRES32=r6], 0x40}}, 0x2000000) (async) sendmsg$auto_OVS_DP_CMD_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000004540)={&(0x7f0000000240)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01002bbd7000ffdbdf2501000000080007000400000008000200", @ANYRES32=0x0, @ANYBLOB="1100010068009442dc643000cd687ca3ff000000080009000b", @ANYRES32=r6], 0x40}}, 0x2000000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'veth1_to_batadv\x00'}) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'veth1_to_batadv\x00'}) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), r7) (async) r8 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), r7) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000640)={'wlan1\x00', 0x0}) sendmsg$auto_NL80211_CMD_DEL_PMK(r7, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000001440)={&(0x7f0000000c40)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r8, @ANYBLOB="010026bd73004edbdf259900000008000300", @ANYRES32=r9], 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x8000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'veth1_to_bridge\x00'}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'veth0_to_bridge\x00'}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'bridge0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'bridge0\x00'}) socket$nl_generic(0x10, 0x3, 0x10) (async) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000700), r10) writev$auto(0x1, &(0x7f0000000100)={&(0x7f0000000140), 0x400000040000fdef}, 0x1) mbind$auto(0x0, 0x100000004, 0x100000000, 0x0, 0x20000000000006, 0x2) (async) mbind$auto(0x0, 0x100000004, 0x100000000, 0x0, 0x20000000000006, 0x2) socket(0xa, 0x3, 0xff) poll$auto(&(0x7f0000000d40)={0x3, 0x1, 0xa}, 0x5, 0x400) munmap$auto(0x1ffff000, 0x2000000c) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000740)={'wlan1\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000740)={'wlan1\x00', 0x0}) sendmsg$auto_NL80211_CMD_SET_CHANNEL(r10, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000780)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r11, @ANYBLOB="010027bd70010ee2dffd67da490008000300", @ANYRES32=r12], 0x1c}, 0x1, 0x0, 0x0, 0x4080}, 0x20000000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wg1\x00'}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.22' (ED25519) to the list of known hosts. [ 82.313699][ T5842] cgroup: Unknown subsys name 'net' [ 82.465482][ T5842] cgroup: Unknown subsys name 'cpuset' [ 82.474714][ T5842] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 84.213049][ T5842] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 86.791189][ T5864] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 86.800341][ T5864] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 86.804692][ T5863] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 86.811840][ T5864] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 86.822721][ T5864] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 86.825139][ T5866] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 86.831325][ T5864] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 86.844312][ T5866] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 86.856038][ T5864] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 86.856988][ T5866] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 86.864478][ T5864] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 86.871879][ T5866] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 86.878373][ T5864] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 86.890389][ T5866] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 86.892178][ T5864] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 86.899181][ T5866] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 86.913679][ T5863] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 86.921961][ T5863] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 86.932369][ T5863] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 86.932609][ T5864] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 86.948333][ T5863] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 86.955635][ T5866] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 86.964091][ T5866] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 86.972362][ T5866] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 87.388415][ T5852] chnl_net:caif_netlink_parms(): no params data found [ 87.421473][ T5851] chnl_net:caif_netlink_parms(): no params data found [ 87.487435][ T5854] chnl_net:caif_netlink_parms(): no params data found [ 87.593390][ T5853] chnl_net:caif_netlink_parms(): no params data found [ 87.625319][ T5852] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.633686][ T5852] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.643367][ T5852] bridge_slave_0: entered allmulticast mode [ 87.650474][ T5852] bridge_slave_0: entered promiscuous mode [ 87.677105][ T5851] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.684540][ T5851] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.692144][ T5851] bridge_slave_0: entered allmulticast mode [ 87.699363][ T5851] bridge_slave_0: entered promiscuous mode [ 87.706921][ T5852] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.714392][ T5852] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.721724][ T5852] bridge_slave_1: entered allmulticast mode [ 87.728612][ T5852] bridge_slave_1: entered promiscuous mode [ 87.774082][ T5851] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.781263][ T5851] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.789229][ T5851] bridge_slave_1: entered allmulticast mode [ 87.796585][ T5851] bridge_slave_1: entered promiscuous mode [ 87.825152][ T5852] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.839580][ T5854] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.847561][ T5854] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.854935][ T5854] bridge_slave_0: entered allmulticast mode [ 87.861925][ T5854] bridge_slave_0: entered promiscuous mode [ 87.880357][ T5852] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.911356][ T5854] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.919441][ T5854] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.927080][ T5854] bridge_slave_1: entered allmulticast mode [ 87.934783][ T5854] bridge_slave_1: entered promiscuous mode [ 87.956767][ T5851] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.970691][ T5851] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.000450][ T5852] team0: Port device team_slave_0 added [ 88.026105][ T5853] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.033738][ T5853] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.041066][ T5853] bridge_slave_0: entered allmulticast mode [ 88.050534][ T5853] bridge_slave_0: entered promiscuous mode [ 88.059176][ T5852] team0: Port device team_slave_1 added [ 88.077091][ T5854] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.101148][ T5851] team0: Port device team_slave_0 added [ 88.107643][ T5853] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.115289][ T5853] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.122676][ T5853] bridge_slave_1: entered allmulticast mode [ 88.129508][ T5853] bridge_slave_1: entered promiscuous mode [ 88.147149][ T5854] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.171672][ T5851] team0: Port device team_slave_1 added [ 88.186040][ T5852] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.193523][ T5852] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.220091][ T5852] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.262259][ T5852] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.269365][ T5852] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.296326][ T5852] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.310790][ T5854] team0: Port device team_slave_0 added [ 88.328296][ T5851] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.335847][ T5851] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.364497][ T5851] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.379628][ T5853] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.398397][ T5853] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.409433][ T5854] team0: Port device team_slave_1 added [ 88.427343][ T5851] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.434586][ T5851] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.462166][ T5851] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.523287][ T5854] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.530308][ T5854] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.560170][ T5854] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.576510][ T5853] team0: Port device team_slave_0 added [ 88.603515][ T5854] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.610588][ T5854] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.637471][ T5854] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.654742][ T5853] team0: Port device team_slave_1 added [ 88.674886][ T5852] hsr_slave_0: entered promiscuous mode [ 88.682026][ T5852] hsr_slave_1: entered promiscuous mode [ 88.713701][ T5851] hsr_slave_0: entered promiscuous mode [ 88.720509][ T5851] hsr_slave_1: entered promiscuous mode [ 88.727248][ T5851] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 88.735898][ T5851] Cannot create hsr debugfs directory [ 88.791513][ T5853] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.798866][ T5853] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.825457][ T5853] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.841163][ T5853] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.848281][ T5853] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.874854][ T5853] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.936863][ T5854] hsr_slave_0: entered promiscuous mode [ 88.952857][ T5854] hsr_slave_1: entered promiscuous mode [ 88.959053][ T5854] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 88.967046][ T5854] Cannot create hsr debugfs directory [ 88.982646][ T5861] Bluetooth: hci1: command tx timeout [ 89.061851][ T5163] Bluetooth: hci0: command tx timeout [ 89.065836][ T5866] Bluetooth: hci2: command tx timeout [ 89.067700][ T5861] Bluetooth: hci3: command tx timeout [ 89.089637][ T5853] hsr_slave_0: entered promiscuous mode [ 89.097425][ T5853] hsr_slave_1: entered promiscuous mode [ 89.107142][ T5853] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 89.115065][ T5853] Cannot create hsr debugfs directory [ 89.320404][ T5852] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 89.332721][ T5852] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 89.347977][ T5852] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 89.378111][ T5852] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 89.443358][ T5851] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 89.473721][ T5851] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 89.500438][ T5851] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 89.525616][ T5851] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 89.552728][ T5854] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 89.569364][ T5854] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 89.608059][ T5854] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 89.638999][ T5854] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 89.659502][ T5853] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 89.671236][ T5853] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 89.697611][ T5853] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 89.715060][ T5853] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 89.880720][ T5852] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.920279][ T5852] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.945946][ T5851] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.960944][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.968509][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.988561][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.995762][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.031124][ T5854] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.076673][ T5851] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.109736][ T5854] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.134775][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.144095][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.160487][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.167696][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.186013][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.193202][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.208131][ T5853] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.225592][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.232826][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.291279][ T5853] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.358623][ T1101] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.366546][ T1101] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.399754][ T1101] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.407011][ T1101] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.560995][ T5852] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.720418][ T5852] veth0_vlan: entered promiscuous mode [ 90.754472][ T5852] veth1_vlan: entered promiscuous mode [ 90.833935][ T5852] veth0_macvtap: entered promiscuous mode [ 90.870907][ T5854] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.894628][ T5852] veth1_macvtap: entered promiscuous mode [ 90.946297][ T5852] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.971322][ T5852] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.994588][ T5852] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.004573][ T5852] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.014422][ T5852] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.024660][ T5852] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.069047][ T5854] veth0_vlan: entered promiscuous mode [ 91.075304][ T5861] Bluetooth: hci1: command tx timeout [ 91.079802][ T5851] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.090114][ T5853] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.142401][ T5861] Bluetooth: hci2: command tx timeout [ 91.142422][ T5866] Bluetooth: hci3: command tx timeout [ 91.142441][ T5163] Bluetooth: hci0: command tx timeout [ 91.150174][ T5854] veth1_vlan: entered promiscuous mode [ 91.279888][ T5851] veth0_vlan: entered promiscuous mode [ 91.280094][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.297838][ T5854] veth0_macvtap: entered promiscuous mode [ 91.305252][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.319622][ T5854] veth1_macvtap: entered promiscuous mode [ 91.367867][ T5851] veth1_vlan: entered promiscuous mode [ 91.390810][ T5854] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.403694][ T5854] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.416014][ T5854] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.429268][ T5854] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.429272][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.454700][ T5854] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.468400][ T5854] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.477097][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.486515][ T5853] veth0_vlan: entered promiscuous mode [ 91.509552][ T5854] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.525078][ T5854] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.537073][ T5854] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.549834][ T5854] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.566874][ T5853] veth1_vlan: entered promiscuous mode [ 91.622818][ T5852] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 91.724109][ T5851] veth0_macvtap: entered promiscuous mode [ 91.731398][ T5853] veth0_macvtap: entered promiscuous mode [ 91.753355][ T5851] veth1_macvtap: entered promiscuous mode [ 91.767060][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.794631][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.825764][ T5853] veth1_macvtap: entered promiscuous mode [ 91.881127][ T5851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.893725][ T5851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.904785][ T5851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.915494][ T5851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.927328][ T5851] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.947296][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.948789][ T5853] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.967636][ T5853] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.978747][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.980913][ T5853] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.001690][ T5853] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.017095][ T5853] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.030907][ T5853] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.044462][ T5853] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.059519][ T5851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.070974][ T5851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.082405][ T5851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.093077][ T5851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.108505][ T5851] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.154843][ T5853] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.168409][ T5853] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.180052][ T5853] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.190938][ T5853] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.204621][ T5853] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.215511][ T5853] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.227977][ T5853] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.257483][ T5851] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.277465][ T5851] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.301689][ T5851] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.310663][ T5851] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.364207][ T5853] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.375245][ T5853] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.384120][ T5853] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.392933][ T5853] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.943778][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.978672][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.058732][ T82] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.073596][ T82] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.138925][ T82] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.147521][ T82] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.153190][ T5861] Bluetooth: hci1: command tx timeout [ 93.198974][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.222219][ T5861] Bluetooth: hci0: command tx timeout [ 93.222582][ T5866] Bluetooth: hci2: command tx timeout [ 93.233737][ T5163] Bluetooth: hci3: command tx timeout [ 93.246688][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.507914][ T5949] ptrace attach of "./syz-executor exec"[5851] was attempted by "./syz-executor exec"[5949] [ 94.559514][ T5941] Zero length message leads to an empty skb [ 94.574015][ T5941] netlink: 50 bytes leftover after parsing attributes in process `syz.3.6'. [ 95.095624][ T5969] netlink: 122 bytes leftover after parsing attributes in process `syz.0.12'. [ 95.229083][ T5866] Bluetooth: hci1: command tx timeout [ 95.335647][ T5866] Bluetooth: hci2: command tx timeout [ 95.342284][ T5866] Bluetooth: hci3: command tx timeout [ 95.349166][ T5866] Bluetooth: hci0: command tx timeout [ 96.410796][ T6015] netlink: 122 bytes leftover after parsing attributes in process `syz.1.25'. [ 96.697461][ T6020] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 97.400814][ T8] cfg80211: failed to load regulatory.db [ 97.937060][ T6037] openvswitch: netlink: Missing valid actions attribute. [ 98.862736][ T6053] netlink: 122 bytes leftover after parsing attributes in process `syz.1.35'. [ 99.630477][ T62] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.051426][ T62] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.484153][ T62] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.988438][ T5866] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 100.998044][ T5866] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 101.007577][ T5866] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 101.016631][ T5866] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 101.046656][ T62] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.091854][ T5866] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 101.165772][ T5866] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 101.499182][ T62] bridge_slave_1: left allmulticast mode [ 101.517917][ T62] bridge_slave_1: left promiscuous mode [ 101.532703][ T62] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.651230][ T62] bridge_slave_0: left allmulticast mode [ 101.662772][ T62] bridge_slave_0: left promiscuous mode [ 101.669540][ T62] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.966531][ T6082] netlink: 122 bytes leftover after parsing attributes in process `syz.3.44'. [ 102.515475][ T62] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 102.537371][ T62] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 102.562602][ T62] bond0 (unregistering): Released all slaves [ 102.893618][ T6065] chnl_net:caif_netlink_parms(): no params data found [ 103.400596][ T5866] Bluetooth: hci3: command tx timeout [ 103.634303][ T6065] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.645468][ T6065] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.653648][ T6065] bridge_slave_0: entered allmulticast mode [ 103.667060][ T6065] bridge_slave_0: entered promiscuous mode [ 103.725530][ T6120] h: entered promiscuous mode [ 103.731732][ T6121] openvswitch: h: Dropping previously announced user features [ 103.743302][ T6065] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.750634][ T6065] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.760910][ T6065] bridge_slave_1: entered allmulticast mode [ 103.769575][ T6065] bridge_slave_1: entered promiscuous mode [ 103.783302][ C1] ================================================================== [ 103.784755][ C0] ------------[ cut here ]------------ [ 103.791427][ C1] BUG: KASAN: slab-use-after-free in __rhashtable_lookup.constprop.0+0x426/0x550 [ 103.797235][ C0] UBSAN: shift-out-of-bounds in lib/rhashtable.c:1188:34 [ 103.806423][ C1] Read of size 4 at addr ffff8880647f8008 by task ksoftirqd/1/24 [ 103.806456][ C1] [ 103.806480][ C1] CPU: 1 UID: 0 PID: 24 Comm: ksoftirqd/1 Not tainted 6.12.0-syzkaller-08446-g228a1157fb9f #0 [ 103.813675][ C0] shift exponent 4294936704 is too large for 32-bit type 'int' [ 103.821311][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 103.854927][ C1] Call Trace: [ 103.858237][ C1] [ 103.861195][ C1] dump_stack_lvl+0x116/0x1f0 [ 103.865933][ C1] print_report+0xc3/0x620 [ 103.870481][ C1] ? __virt_addr_valid+0x5e/0x590 [ 103.875546][ C1] ? __phys_addr+0xc6/0x150 [ 103.880095][ C1] kasan_report+0xd9/0x110 [ 103.884644][ C1] ? __rhashtable_lookup.constprop.0+0x426/0x550 [ 103.891018][ C1] ? __rhashtable_lookup.constprop.0+0x426/0x550 [ 103.897395][ C1] __rhashtable_lookup.constprop.0+0x426/0x550 [ 103.903591][ C1] ? lock_acquire+0x2f/0xb0 [ 103.908122][ C1] ? ila_nf_input+0x1bd/0x620 [ 103.912836][ C1] ila_nf_input+0x1ee/0x620 [ 103.917372][ C1] ? __pfx_ila_nf_input+0x10/0x10 [ 103.922436][ C1] nf_hook_slow+0xbb/0x200 [ 103.926903][ C1] nf_hook.constprop.0+0x42e/0x750 [ 103.932067][ C1] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 103.939245][ C1] ? __pfx_nf_hook.constprop.0+0x10/0x10 [ 103.946170][ C1] ? sock_wfree+0x46a/0x880 [ 103.950863][ C1] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 103.956112][ C1] ? __pfx_ipv6_rcv+0x10/0x10 [ 103.960847][ C1] ipv6_rcv+0xa4/0x680 [ 103.964964][ C1] ? __pfx_ipv6_rcv+0x10/0x10 [ 103.969686][ C1] __netif_receive_skb_one_core+0x12e/0x1e0 [ 103.975618][ C1] ? __pfx___netif_receive_skb_one_core+0x10/0x10 [ 103.982257][ C1] ? rcu_is_watching+0x12/0xc0 [ 103.987066][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 103.992482][ C1] ? process_backlog+0x3f1/0x15f0 [ 103.997546][ C1] ? process_backlog+0x3f1/0x15f0 [ 104.002708][ C1] __netif_receive_skb+0x1d/0x160 [ 104.007772][ C1] process_backlog+0x443/0x15f0 [ 104.012662][ C1] __napi_poll.constprop.0+0xb7/0x550 [ 104.018184][ C1] net_rx_action+0xa94/0x1010 [ 104.022926][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 104.028089][ C1] ? __switch_to+0x749/0x1190 [ 104.032901][ C1] ? kvm_sched_clock_read+0x11/0x20 [ 104.039382][ C1] ? sched_clock+0x38/0x60 [ 104.043860][ C1] ? sched_clock_cpu+0x6d/0x4d0 [ 104.048867][ C1] handle_softirqs+0x213/0x8f0 [ 104.053707][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 104.059075][ C1] ? rcu_is_watching+0x12/0xc0 [ 104.063911][ C1] ? __pfx_run_ksoftirqd+0x10/0x10 [ 104.069075][ C1] ? smpboot_thread_fn+0x59d/0xa30 [ 104.074264][ C1] run_ksoftirqd+0x3a/0x60 [ 104.078739][ C1] smpboot_thread_fn+0x661/0xa30 [ 104.083712][ C1] ? __kthread_parkme+0x148/0x220 [ 104.088864][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 104.094388][ C1] kthread+0x2c1/0x3a0 [ 104.098581][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 104.103814][ C1] ? __pfx_kthread+0x10/0x10 [ 104.108442][ C1] ret_from_fork+0x45/0x80 [ 104.112888][ C1] ? __pfx_kthread+0x10/0x10 [ 104.117542][ C1] ret_from_fork_asm+0x1a/0x30 [ 104.122362][ C1] [ 104.125486][ C1] [ 104.125490][ C0] CPU: 0 UID: 0 PID: 16 Comm: ksoftirqd/0 Not tainted 6.12.0-syzkaller-08446-g228a1157fb9f #0 [ 104.127852][ C1] Allocated by task 6097: [ 104.127870][ C1] kasan_save_stack+0x33/0x60 [ 104.140028][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 104.145110][ C1] kasan_save_track+0x14/0x30 [ 104.149782][ C0] Call Trace: [ 104.159827][ C1] __kasan_kmalloc+0xaa/0xb0 [ 104.164509][ C0] [ 104.167776][ C1] __kmalloc_noprof+0x1e8/0x410 [ 104.172361][ C0] dump_stack_lvl+0x16c/0x1f0 [ 104.175285][ C1] tomoyo_realpath_from_path+0xbf/0x710 [ 104.180139][ C0] __ubsan_handle_shift_out_of_bounds+0x2a5/0x480 [ 104.184820][ C1] tomoyo_path_perm+0x276/0x480 [ 104.190383][ C0] __rht_bucket_nested.cold+0x18/0x14a [ 104.196761][ C1] security_inode_getattr+0x116/0x290 [ 104.201615][ C0] rht_bucket_nested+0x1a/0x40 [ 104.207054][ C1] vfs_fstat+0x4b/0xd0 [ 104.212424][ C0] __rhashtable_lookup.constprop.0+0x419/0x550 [ 104.217263][ C1] vfs_fstatat+0xbc/0xf0 [ 104.221336][ C0] ? lock_acquire+0x2f/0xb0 [ 104.227473][ C1] __do_sys_newfstatat+0xa2/0x130 [ 104.231720][ C0] ? ila_nf_input+0x1bd/0x620 [ 104.236474][ C1] do_syscall_64+0xcd/0x250 [ 104.244573][ C0] ila_nf_input+0x1ee/0x620 [ 104.249241][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.253782][ C0] ? __pfx_ila_nf_input+0x10/0x10 [ 104.258355][ C1] [ 104.258364][ C1] Freed by task 6097: [ 104.264244][ C0] nf_hook_slow+0xbb/0x200 [ 104.269345][ C1] kasan_save_stack+0x33/0x60 [ 104.271706][ C0] nf_hook.constprop.0+0x42e/0x750 [ 104.275681][ C1] kasan_save_track+0x14/0x30 [ 104.280117][ C0] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 104.284777][ C1] kasan_save_free_info+0x3b/0x60 [ 104.289885][ C0] ? __pfx_nf_hook.constprop.0+0x10/0x10 [ 104.294559][ C1] __kasan_slab_free+0x51/0x70 [ 104.299750][ C0] ? sock_wfree+0x46a/0x880 [ 104.304773][ C1] kfree+0x14f/0x4b0 [ 104.310440][ C0] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 104.315185][ C1] tomoyo_realpath_from_path+0x1b7/0x710 [ 104.319695][ C0] ? __pfx_ipv6_rcv+0x10/0x10 [ 104.323571][ C1] tomoyo_path_perm+0x276/0x480 [ 104.328763][ C0] ipv6_rcv+0xa4/0x680 [ 104.334474][ C1] security_inode_getattr+0x116/0x290 [ 104.341705][ C0] ? __pfx_ipv6_rcv+0x10/0x10 [ 104.347083][ C1] vfs_fstat+0x4b/0xd0 [ 104.351153][ C0] __netif_receive_skb_one_core+0x12e/0x1e0 [ 104.356620][ C1] vfs_fstatat+0xbc/0xf0 [ 104.361301][ C0] ? __pfx___netif_receive_skb_one_core+0x10/0x10 [ 104.365378][ C1] __do_sys_newfstatat+0xa2/0x130 [ 104.371272][ C0] ? rcu_is_watching+0x12/0xc0 [ 104.375505][ C1] do_syscall_64+0xcd/0x250 [ 104.381920][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 104.386928][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.391683][ C0] ? process_backlog+0x3f1/0x15f0 [ 104.396176][ C1] [ 104.396186][ C1] The buggy address belongs to the object at ffff8880647f8000 [ 104.396186][ C1] which belongs to the cache kmalloc-4k of size 4096 [ 104.401551][ C0] ? process_backlog+0x3f1/0x15f0 [ 104.407602][ C1] The buggy address is located 8 bytes inside of [ 104.407602][ C1] freed 4096-byte region [ffff8880647f8000, ffff8880647f9000) [ 104.412639][ C0] __netif_receive_skb+0x1d/0x160 [ 104.414997][ C1] [ 104.415006][ C1] The buggy address belongs to the physical page: [ 104.429046][ C0] process_backlog+0x443/0x15f0 [ 104.434127][ C1] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x647f8 [ 104.448974][ C0] __napi_poll.constprop.0+0xb7/0x550 [ 104.454005][ C1] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 104.456366][ C0] net_rx_action+0xa94/0x1010 [ 104.462760][ C1] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 104.467621][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 104.476365][ C1] page_type: f5(slab) [ 104.476402][ C1] raw: 00fff00000000040 ffff88801ac42140 dead000000000122 0000000000000000 [ 104.481751][ C0] ? __switch_to+0x749/0x1190 [ 104.490250][ C1] raw: 0000000000000000 0000000000040004 00000001f5000000 0000000000000000 [ 104.494918][ C0] ? kvm_sched_clock_read+0x11/0x20 [ 104.502458][ C1] head: 00fff00000000040 ffff88801ac42140 dead000000000122 0000000000000000 [ 104.507560][ C0] ? sched_clock+0x38/0x60 [ 104.511558][ C1] head: 0000000000000000 0000000000040004 00000001f5000000 0000000000000000 [ 104.520125][ C0] ? sched_clock_cpu+0x6d/0x4d0 [ 104.524812][ C1] head: 00fff00000000003 ffffea000191fe01 ffffffffffffffff 0000000000000000 [ 104.533424][ C0] handle_softirqs+0x213/0x8f0 [ 104.540020][ C1] head: 0000000000000008 0000000000000000 00000000ffffffff 0000000000000000 [ 104.548865][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 104.553256][ C1] page dumped because: kasan: bad access detected [ 104.553285][ C1] page_owner tracks the page as allocated [ 104.561970][ C0] ? rcu_is_watching+0x12/0xc0 [ 104.566821][ C1] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2040(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 6097, tgid 6097 (dhcpcd-run-hook), ts 102957236397, free_ts 102944849579 [ 104.575492][ C0] ? __pfx_run_ksoftirqd+0x10/0x10 [ 104.580238][ C1] post_alloc_hook+0x2d1/0x350 [ 104.588903][ C0] ? smpboot_thread_fn+0x59d/0xa30 [ 104.594267][ C1] get_page_from_freelist+0xfce/0x2f80 [ 104.600682][ C0] run_ksoftirqd+0x3a/0x60 [ 104.606403][ C1] __alloc_pages_noprof+0x223/0x25a0 [ 104.611173][ C0] smpboot_thread_fn+0x661/0xa30 [ 104.632418][ C1] alloc_pages_mpol_noprof+0x2c9/0x610 [ 104.638426][ C0] ? __kthread_parkme+0x148/0x220 [ 104.644547][ C1] new_slab+0x2c9/0x410 [ 104.649842][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 104.655495][ C1] ___slab_alloc+0xd3b/0x1760 [ 104.659907][ C0] kthread+0x2c1/0x3a0 [ 104.665182][ C1] __slab_alloc.constprop.0+0x56/0xb0 [ 104.670127][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 104.675577][ C1] __kmalloc_noprof+0x379/0x410 [ 104.680602][ C0] ? __pfx_kthread+0x10/0x10 [ 104.684745][ C1] tomoyo_realpath_from_path+0xbf/0x710 [ 104.690307][ C0] ret_from_fork+0x45/0x80 [ 104.694977][ C1] tomoyo_path_perm+0x276/0x480 [ 104.699040][ C0] ? __pfx_kthread+0x10/0x10 [ 104.704396][ C1] security_inode_getattr+0x116/0x290 [ 104.709596][ C0] ret_from_fork_asm+0x1a/0x30 [ 104.714516][ C1] vfs_fstat+0x4b/0xd0 [ 104.719153][ C0] [ 104.725185][ C1] vfs_fstatat+0xbc/0xf0 [ 104.729821][ C0] ---[ end trace ]--- [ 104.734459][ C1] __do_sys_newfstatat+0xa2/0x130 [ 104.734507][ C1] do_syscall_64+0xcd/0x250 [ 104.739446][ C0] Kernel panic - not syncing: UBSAN: panic_on_warn set ... [ 104.739469][ C0] CPU: 0 UID: 0 PID: 16 Comm: ksoftirqd/0 Not tainted 6.12.0-syzkaller-08446-g228a1157fb9f #0 [ 104.739519][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 104.739542][ C0] Call Trace: [ 104.739558][ C0] [ 104.739574][ C0] dump_stack_lvl+0x3d/0x1f0 [ 104.739629][ C0] panic+0x71d/0x800 [ 104.739681][ C0] ? __pfx_panic+0x10/0x10 [ 104.739739][ C0] ? __pfx__printk+0x10/0x10 [ 104.739780][ C0] ? check_panic_on_warn+0x1f/0xb0 [ 104.739840][ C0] check_panic_on_warn+0xab/0xb0 [ 104.739894][ C0] __ubsan_handle_shift_out_of_bounds+0x2cc/0x480 [ 104.739977][ C0] __rht_bucket_nested.cold+0x18/0x14a [ 104.740027][ C0] rht_bucket_nested+0x1a/0x40 [ 104.740079][ C0] __rhashtable_lookup.constprop.0+0x419/0x550 [ 104.740127][ C0] ? lock_acquire+0x2f/0xb0 [ 104.740159][ C0] ? ila_nf_input+0x1bd/0x620 [ 104.740207][ C0] ila_nf_input+0x1ee/0x620 [ 104.740251][ C0] ? __pfx_ila_nf_input+0x10/0x10 [ 104.740291][ C0] nf_hook_slow+0xbb/0x200 [ 104.740349][ C0] nf_hook.constprop.0+0x42e/0x750 [ 104.740405][ C0] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 104.740463][ C0] ? __pfx_nf_hook.constprop.0+0x10/0x10 [ 104.740525][ C0] ? sock_wfree+0x46a/0x880 [ 104.740584][ C0] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 104.740652][ C0] ? __pfx_ipv6_rcv+0x10/0x10 [ 104.740705][ C0] ipv6_rcv+0xa4/0x680 [ 104.740760][ C0] ? __pfx_ipv6_rcv+0x10/0x10 [ 104.740813][ C0] __netif_receive_skb_one_core+0x12e/0x1e0 [ 104.740865][ C0] ? __pfx___netif_receive_skb_one_core+0x10/0x10 [ 104.740916][ C0] ? rcu_is_watching+0x12/0xc0 [ 104.740965][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 104.741006][ C0] ? process_backlog+0x3f1/0x15f0 [ 104.741058][ C0] ? process_backlog+0x3f1/0x15f0 [ 104.741104][ C0] __netif_receive_skb+0x1d/0x160 [ 104.741153][ C0] process_backlog+0x443/0x15f0 [ 104.741211][ C0] __napi_poll.constprop.0+0xb7/0x550 [ 104.741267][ C0] net_rx_action+0xa94/0x1010 [ 104.741332][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 104.741378][ C0] ? __switch_to+0x749/0x1190 [ 104.741431][ C0] ? kvm_sched_clock_read+0x11/0x20 [ 104.741472][ C0] ? sched_clock+0x38/0x60 [ 104.741535][ C0] ? sched_clock_cpu+0x6d/0x4d0 [ 104.741624][ C0] handle_softirqs+0x213/0x8f0 [ 104.741675][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 104.741718][ C0] ? rcu_is_watching+0x12/0xc0 [ 104.741765][ C0] ? __pfx_run_ksoftirqd+0x10/0x10 [ 104.741803][ C0] ? smpboot_thread_fn+0x59d/0xa30 [ 104.741846][ C0] run_ksoftirqd+0x3a/0x60 [ 104.741884][ C0] smpboot_thread_fn+0x661/0xa30 [ 104.741927][ C0] ? __kthread_parkme+0x148/0x220 [ 104.741975][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 104.742020][ C0] kthread+0x2c1/0x3a0 [ 104.742061][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 104.742099][ C0] ? __pfx_kthread+0x10/0x10 [ 104.742145][ C0] ret_from_fork+0x45/0x80 [ 104.742178][ C0] ? __pfx_kthread+0x10/0x10 [ 104.742222][ C0] ret_from_fork_asm+0x1a/0x30 [ 104.742297][ C0] [ 105.079966][ C0] Kernel Offset: disabled [ 105.084330][ C0] Rebooting in 86400 seconds..