last executing test programs: 4m1.273554911s ago: executing program 0 (id=1): r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'veth0_virt_wifi\x00', 0x0}) bpf$auto(0x5, &(0x7f0000000300)=@bpf_attr_3={0x3, 0x4, 0xf, 0x63, 0x400, 0x0, 0x1, 0x80f0c8, 0x1, "38c1d5cbcb9f6b5e511f0cd8ed068f65", r1, 0x113e33f2, 0xffffffffffffffff, 0xe4, 0x6, 0x5, 0x3ad, 0x3, 0x0, 0x3, @attach_btf_obj_fd, 0x6, 0xffff, 0x8, 0x81, 0xfffffffe}, 0x47) bpf$auto(0x0, &(0x7f00000001c0)=@task_fd_query={0x9, 0x21eb, 0x801, 0x8, 0xa, 0x1000009, 0x5f, 0x0, 0x3}, 0x6f3) socket(0x25, 0x1, 0x3) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_gtp(&(0x7f0000000080), r3) sendmsg$auto_GTP_CMD_GETPDP(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)={0x1c, r4, 0x401, 0x70bd26, 0x25dfdbfe, {}, [@GTPA_VERSION={0x8, 0x2, 0x38f}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x8014) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket(0x1d, 0x2, 0x7) bpf$auto(0x8, &(0x7f0000000000)=@iter_create={r5, 0xe}, 0x463) bind$auto(0x7, &(0x7f0000000000)={0x1d, @sockaddr_1_1}, 0x3e) sendmsg$auto_MAC802154_HWSIM_CMD_GET_RADIO(r6, &(0x7f0000000140)={&(0x7f00000000c0)={0x1d, 0x0, 0x0, 0x1000}, 0x18, &(0x7f0000000100)={0x0, 0xf0}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000001) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000001300)={'batadv_slave_0\x00', 0x0}) r9 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000001480), r7) sendmsg$auto_ETHTOOL_MSG_CHANNELS_SET(r7, &(0x7f0000001cc0)={0x0, 0x0, &(0x7f0000001c80)={&(0x7f0000000000)={0x28, r9, 0x1, 0x70bd0a, 0x25dfdc03, {}, [@ETHTOOL_A_CHANNELS_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}, @ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0xc}]}, 0x28}, 0x1, 0x0, 0x0, 0x8800}, 0x0) sendmsg$auto_NETDEV_CMD_DEV_GET(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x4c, 0x0, 0x800, 0x70bd2d, 0x25dfdbfd, {}, [@NETDEV_A_DEV_IFINDEX={0x8, 0x1, r2}, @NETDEV_A_DEV_IFINDEX={0x8, 0x1, r2}, @NETDEV_A_DEV_IFINDEX={0x8, 0x1, r1}, @NETDEV_A_DEV_IFINDEX={0x8, 0x1, r2}, @NETDEV_A_DEV_IFINDEX={0x8, 0x1, r1}, @NETDEV_A_DEV_IFINDEX={0x8, 0x1, r8}, @NETDEV_A_DEV_IFINDEX={0x8, 0x1, r2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20008000}, 0x20008000) 4m0.964402367s ago: executing program 0 (id=5): close_range$auto(0x2, 0x8, 0x0) (async) unshare$auto(0x20000080) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) unshare$auto(0x200) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/mnt\x00') setns(r0, 0x0) (async) clone$auto(0xfffffffe00000, 0x1, 0xfffffffffffffffc, 0xfffffffffffffffc, 0x400000000004) (async) socket(0xa, 0x2, 0x88) (async) socket(0xa, 0x1, 0x84) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_macsec(&(0x7f0000000040), r1) sendmsg$auto_MACSEC_CMD_UPD_RXSC(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)={0x1c, r2, 0x8, 0x70bd26, 0x25dfdbfd, {}, [@MACSEC_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x400c0}, 0x2000c080) (async) connect$auto(0x3, &(0x7f0000000140)={0xa, @sa_data_min="c4aeed448dc7fe8000"}, 0x55) (async) mprotect$auto(0x1ffff000, 0x8000000000000001, 0x4) mmap$auto(0x0, 0x400000, 0xdf, 0x9b72, 0x2, 0x800008000) sendto$auto(0x3, 0x0, 0xf, 0x101, &(0x7f0000000140)={0x2, @sockaddr_1_1}, 0x1c) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000001a40), r3) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000001a80)={'wg2\x00', 0x0}) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) mremap$auto(0x0, 0xffffffffffffffff, 0x3fd6, 0x3, 0x7fffffffb000) clone$auto(0x8001, 0x5, 0xffffffffffffffff, 0xfffffffffffffffc, 0x6) (async) sendmsg$auto_ETHTOOL_MSG_CABLE_TEST_TDR_ACT(r3, &(0x7f0000002f40)={0x0, 0x0, &(0x7f0000002f00)={&(0x7f0000001ac0)={0x2c, r4, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@ETHTOOL_A_CABLE_TEST_TDR_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @ETHTOOL_A_CABLE_TEST_TDR_CFG={0xc, 0x2, 0x0, 0x1, [@typed={0x8, 0x10c, 0x0, 0x0, @pid}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24040000}, 0x0) 4m0.135662657s ago: executing program 0 (id=7): r0 = socket(0x2, 0x6, 0x0) close_range$auto(0x2, 0xfffffffffffff000, 0x2) socket(0xa, 0x2, 0x3a) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x80108907, 0x0) sendmsg$auto_IEEE802154_START_REQ(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x58, 0x0, 0x300, 0x70bd26, 0x25dfdbfe, {}, [@IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x6}, @IEEE802154_ATTR_SRC_PAN_ID={0x6, 0xd, 0x7f}, @IEEE802154_ATTR_DEV_NAME={0x14, 0x1, 'wg2\x00'}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x6}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x7fff}, @IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x1}, @IEEE802154_ATTR_LLSEC_DEV_KEY_MODE={0x5, 0x37, 0x4}]}, 0x58}, 0x1, 0x0, 0x0, 0x48040}, 0x4040) 4m0.003889114s ago: executing program 0 (id=8): mlockall$auto(0x7) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) io_uring_setup$auto(0x1, 0x0) futex$auto(0x0, 0x6, 0x8, 0x0, 0x0, 0xffffffd6) mmap$auto(0x0, 0x8, 0x1000000004, 0x9b72, 0x2, 0x8000) tkill$auto(0x1, 0x7) mlockall$auto(0x93) 3m59.283488639s ago: executing program 0 (id=13): mmap$auto(0x4, 0x2000000000000008, 0xdf, 0x1000000000009b72, 0x2, 0x8000) r0 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$auto_NL80211_CMD_SET_WIPHY(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="f6571b63", @ANYRES16=r0, @ANYBLOB="010029bd7000fddbdf250200000008000300", @ANYRES32=r3, @ANYRESOCT=r0], 0x24}, 0x1, 0x0, 0x0, 0x20040010}, 0x20000084) r4 = socket(0x10, 0x2, 0x0) sendmsg$auto_OVS_DP_CMD_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0f0026bd7000fcdbdf9907"], 0x24}, 0x1, 0x0, 0x0, 0x20000800}, 0x4) socket(0xa, 0x5, 0x0) bind$auto(0x3, &(0x7f0000000040)={0xa, @sockaddr_1_1={"44c889ce6bedc9"}}, 0x6a) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1e00df45"], 0x1ac}}, 0x40000) mknod$auto(&(0x7f0000000180)=':,\x00', 0xcb, 0xfffffffa) execve$auto(&(0x7f0000000000)=':,\x00', 0x0, 0x0) symlink$auto(&(0x7f00000001c0)='-\x00', &(0x7f0000000280)=')s:\x00') unlink$auto(&(0x7f0000000300)=')s:\x00') execve$auto(&(0x7f00000002c0)=':,\x00', &(0x7f0000000400)=0x0, 0x0) execve$auto(&(0x7f00000005c0)=':,\x00', &(0x7f0000000640)=0x0, &(0x7f00000006c0)=0x0) keyctl$auto(0x3, 0xfffffffd, 0x6, 0x0, 0x80b8c) pidfd_open$auto(0x1, 0x0) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="1100000012"], 0x2c}, 0x1, 0x0, 0x0, 0x804}, 0x400c000) mprotect$auto(0x1ffff000, 0x8000000000000001, 0x4) sendmsg$auto_NCSI_CMD_SET_PACKAGE_MASK(r4, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4c004}, 0x40080c0) open(&(0x7f0000000000)='./file0\x00', 0x261c2, 0x84) mmap$auto(0x0, 0x61, 0x100001000000004, 0xfa31, 0x400, 0x8000) write$auto(0x3, 0x0, 0x296) syz_genetlink_get_family_id$auto_HSR(&(0x7f00000000c0), r4) mmap$auto(0x0, 0x5, 0xfffffffffffffe01, 0x8011, 0x3, 0x8000) iopl$auto(0x7) prctl$auto(0x1000000001c, 0x5, 0x8, 0x9, 0x80001) setfsuid$auto(0x2) 3m59.095671105s ago: executing program 32 (id=13): mmap$auto(0x4, 0x2000000000000008, 0xdf, 0x1000000000009b72, 0x2, 0x8000) r0 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$auto_NL80211_CMD_SET_WIPHY(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="f6571b63", @ANYRES16=r0, @ANYBLOB="010029bd7000fddbdf250200000008000300", @ANYRES32=r3, @ANYRESOCT=r0], 0x24}, 0x1, 0x0, 0x0, 0x20040010}, 0x20000084) r4 = socket(0x10, 0x2, 0x0) sendmsg$auto_OVS_DP_CMD_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0f0026bd7000fcdbdf9907"], 0x24}, 0x1, 0x0, 0x0, 0x20000800}, 0x4) socket(0xa, 0x5, 0x0) bind$auto(0x3, &(0x7f0000000040)={0xa, @sockaddr_1_1={"44c889ce6bedc9"}}, 0x6a) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1e00df45"], 0x1ac}}, 0x40000) mknod$auto(&(0x7f0000000180)=':,\x00', 0xcb, 0xfffffffa) execve$auto(&(0x7f0000000000)=':,\x00', 0x0, 0x0) symlink$auto(&(0x7f00000001c0)='-\x00', &(0x7f0000000280)=')s:\x00') unlink$auto(&(0x7f0000000300)=')s:\x00') execve$auto(&(0x7f00000002c0)=':,\x00', &(0x7f0000000400)=0x0, 0x0) execve$auto(&(0x7f00000005c0)=':,\x00', &(0x7f0000000640)=0x0, &(0x7f00000006c0)=0x0) keyctl$auto(0x3, 0xfffffffd, 0x6, 0x0, 0x80b8c) pidfd_open$auto(0x1, 0x0) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="1100000012"], 0x2c}, 0x1, 0x0, 0x0, 0x804}, 0x400c000) mprotect$auto(0x1ffff000, 0x8000000000000001, 0x4) sendmsg$auto_NCSI_CMD_SET_PACKAGE_MASK(r4, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4c004}, 0x40080c0) open(&(0x7f0000000000)='./file0\x00', 0x261c2, 0x84) mmap$auto(0x0, 0x61, 0x100001000000004, 0xfa31, 0x400, 0x8000) write$auto(0x3, 0x0, 0x296) syz_genetlink_get_family_id$auto_HSR(&(0x7f00000000c0), r4) mmap$auto(0x0, 0x5, 0xfffffffffffffe01, 0x8011, 0x3, 0x8000) iopl$auto(0x7) prctl$auto(0x1000000001c, 0x5, 0x8, 0x9, 0x80001) setfsuid$auto(0x2) 1m55.510447279s ago: executing program 3 (id=506): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0xa3d, 0x5, 0x8, 0xeb5, 0xfffffffffffffffa, 0x8000) r0 = socket(0xa, 0x2, 0x0) connect$auto(0x3, &(0x7f0000000140)={0xa, @sa_data_min="00000000f5ffffffffffffff00"}, 0x55) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x2) r1 = socket(0x1, 0x4, 0x2) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x800009b72, 0x2, 0x8000) mmap$auto(0x0, 0xa, 0xdb, 0x9b72, 0x5, 0x8000) prctl$auto(0x1000000003b, 0x4, 0x5, 0x5, 0x7) rseq$auto(&(0x7f0000000300)={0x0, 0x9, 0x0, 0x4, 0xffffffff, 0xfffffffe}, 0x8000, 0x0, 0x6) chdir$auto(0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) poll$auto(&(0x7f0000000d40)={r0, 0x2, 0xa}, 0x1df56aa0, 0x400) setsockopt$auto(0x3, 0x1, 0x20, 0x0, 0x9) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) fsopen$auto(0x0, 0x1) madvise$auto(0x0, 0x5, 0x15) madvise$auto(0x0, 0x200007, 0x19) sysfs$auto(0x8002, 0xdf, 0x0) mprotect$auto(0x1ffff000, 0x8000000000000001, 0xd) close_range$auto(r1, 0xfffffffffffff000, 0x4) r3 = getpid() syz_open_procfs$namespace(r3, &(0x7f0000000000)='ns/cgroup\x00') fchdir$auto(0xf4400000000) r4 = syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000080), r1) sendmsg$auto_BATADV_CMD_GET_MESH(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r4, @ANYRESHEX=r2], 0x50}, 0x1, 0x0, 0x0, 0x8000}, 0x4000000) rename$auto(0x0, 0x0) 1m52.240356572s ago: executing program 3 (id=521): rseq$auto(0x0, 0x8002, 0x0, 0x6) madvise$auto(0x0, 0xffffffffffff0005, 0x19) settimeofday$auto(0x0, &(0x7f0000000100)={0x4, 0x8}) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mknod$auto(&(0x7f0000000b00)='X))\x00', 0x63c1, 0x7ff) mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x6, 0x8000) rseq$auto(&(0x7f0000000300)={0xe, 0x401, 0x0, 0x6, 0xffffffff, 0x2}, 0x8002, 0x0, 0x6) fcntl$auto(0x0, 0x407, 0x1) futex_waitv$auto(&(0x7f0000000000)={0xf, 0x5d94, 0x10000, 0x4}, 0x77, 0x0, 0x0, 0x62bd) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) shmctl$auto(0x9, 0xe, 0x0) io_uring_setup$auto(0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x3, 0x100) bpf$auto(0x5, 0x0, 0x102) bind$auto(0x3, 0x0, 0x69) connect$auto(0x3, &(0x7f00000014c0)={0xa, @sa_data_min="c40900448dc7fe8000"}, 0x55) connect$auto(0x3, &(0x7f0000000040)={0x1, @sockaddr_1_1}, 0x54) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x10004) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x5, 0x2, 0x5, 0xffffffffffff8005, 0xbef) madvise$auto(0x0, 0xffffffffffff0005, 0x19) futex$auto(0x0, 0x8d, 0x0, 0x0, 0x0, 0x100) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x402, 0x300000000000) get_robust_list$auto(0x1, 0x0, 0x0) 1m51.258614834s ago: executing program 3 (id=527): r0 = socket(0x10, 0x2, 0x0) sendmsg$auto_OVS_DP_CMD_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0f0026bd7000fcdbdf9907"], 0x24}, 0x1, 0x0, 0x0, 0x20000800}, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1e00df45"], 0x1ac}}, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB='V'], 0x1ac}}, 0x40000) mprotect$auto(0x1ffff000, 0x8000000000000001, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0xa6ff, 0x0}, 0x40000) 1m51.185006513s ago: executing program 3 (id=528): madvise$auto(0x20004, 0x7ffffffffffffff8, 0x9) syz_clone3(&(0x7f0000001200)={0x20000000, 0x0, 0x0, 0x0, {0x14}, 0x0, 0x0, 0x0, &(0x7f00000011c0)=[0xffffffffffffffff], 0x1}, 0x58) mmap$auto(0x40, 0x5, 0x4, 0x13, 0x9, 0x8e7) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r0 = socket(0x11, 0x3, 0xffffffff) getsockopt$auto(r0, 0x107, 0xe, 0x0, 0x0) r1 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x422240, 0x81, 0x13}, 0x18) getsockopt$auto(r1, 0xfffffdf8, 0x8b, &(0x7f0000000080)='}\xe5)\x00', &(0x7f00000000c0)=0x5) 1m50.819477054s ago: executing program 3 (id=530): sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x3e, &(0x7f0000000180)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x4000804) lstat$auto(0x0, &(0x7f0000000180)={0x11, 0x2, 0x8000100000001, 0x3, 0x0, 0x0, 0x0, 0x1000000006, 0x2, 0x7fffffffffffffff, 0x2f9a80e, 0x7fffffff, 0x8, 0x7, 0xa, 0x800000000000061, 0x40000103}) r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8000, 0x0) socket(0xa, 0x2, 0x88) sysfs$auto(0x2, 0x100000000000037, 0x0) fsopen$auto(0x0, 0x1) r1 = socket(0x10, 0x2, 0x0) sendmsg$auto_CTRL_CMD_GETFAMILY(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16, @ANYBLOB="01002abd"], 0x24}, 0x1, 0x0, 0x0, 0x4008810}, 0x30040005) mprotect$auto(0x1ffff000, 0x8000000000000001, 0x4) sendmsg$auto_NFSD_CMD_THREADS_SET(r1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0xfffffffe, 0x0, 0x40000021}, 0x8004) r2 = socket(0x23, 0x80805, 0x0) bpf$auto(0x0, &(0x7f00000001c0)=@bpf_attr_4={0x17, 0x1, 0xa9, r2}, 0x6f4) r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) move_pages$auto(r4, 0xd0, 0x0, 0x0, 0x0, 0x0) r5 = syz_clone3(&(0x7f0000000340)={0x1008000, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0), {0x2}, &(0x7f0000000100)=""/50, 0x32, &(0x7f0000000280)=""/176, &(0x7f0000000140)=[r4, r4], 0x2, {r3}}, 0x58) bpf$auto(0x2, &(0x7f00000001c0)=@task_fd_query={r5, r0, 0x3, 0x7fff, 0xb6, 0xfffffbfe, r2, 0x0, 0x6}, 0x8) ioctl$sock_SIOCGIFINDEX(r0, 0x89fc, &(0x7f0000000040)={'bridge0\x00'}) sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x3e, &(0x7f0000000180)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x4000804) (async) lstat$auto(0x0, &(0x7f0000000180)={0x11, 0x2, 0x8000100000001, 0x3, 0x0, 0x0, 0x0, 0x1000000006, 0x2, 0x7fffffffffffffff, 0x2f9a80e, 0x7fffffff, 0x8, 0x7, 0xa, 0x800000000000061, 0x40000103}) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) close_range$auto(0x2, 0x8000, 0x0) (async) socket(0xa, 0x2, 0x88) (async) sysfs$auto(0x2, 0x100000000000037, 0x0) (async) fsopen$auto(0x0, 0x1) (async) socket(0x10, 0x2, 0x0) (async) sendmsg$auto_CTRL_CMD_GETFAMILY(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16, @ANYBLOB="01002abd"], 0x24}, 0x1, 0x0, 0x0, 0x4008810}, 0x30040005) (async) mprotect$auto(0x1ffff000, 0x8000000000000001, 0x4) (async) sendmsg$auto_NFSD_CMD_THREADS_SET(r1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0xfffffffe, 0x0, 0x40000021}, 0x8004) (async) socket(0x23, 0x80805, 0x0) (async) bpf$auto(0x0, &(0x7f00000001c0)=@bpf_attr_4={0x17, 0x1, 0xa9, r2}, 0x6f4) (async) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async) move_pages$auto(r4, 0xd0, 0x0, 0x0, 0x0, 0x0) (async) syz_clone3(&(0x7f0000000340)={0x1008000, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0), {0x2}, &(0x7f0000000100)=""/50, 0x32, &(0x7f0000000280)=""/176, &(0x7f0000000140)=[r4, r4], 0x2, {r3}}, 0x58) (async) bpf$auto(0x2, &(0x7f00000001c0)=@task_fd_query={r5, r0, 0x3, 0x7fff, 0xb6, 0xfffffbfe, r2, 0x0, 0x6}, 0x8) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x89fc, &(0x7f0000000040)={'bridge0\x00'}) (async) 1m50.527562261s ago: executing program 3 (id=531): socket(0xa, 0x2, 0x0) socket(0x2, 0x3, 0xa) setsockopt$auto(0x3, 0x0, 0x40, 0x0, 0x5) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) mprotect$auto(0x1ffff000, 0x8000000000000001, 0xd) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/uts\x00') ioctl$NS_GET_PARENT(r0, 0xc0189436, 0x20000000) select$auto(0x3, 0x0, &(0x7f0000000100)={[0x3, 0x200, 0x0, 0x7fff, 0x7, 0x3, 0x6, 0x2, 0x0, 0x10000005e58296f, 0x1e, 0x7, 0x3, 0x200, 0x8, 0x6]}, 0x0, 0x0) connect$auto(0x3, &(0x7f0000000140)={0xa, @sa_data_min="c4aeed448dc7fe8000"}, 0x55) sendmmsg$auto(0x3, 0x0, 0x9a6, 0xff00) r1 = socket(0x2, 0x2, 0x1) write$auto(r1, 0x0, 0x8e) ioctl$auto(r1, 0x8907, 0xd) write$auto(r1, 0x0, 0x1) 1m35.293534963s ago: executing program 33 (id=531): socket(0xa, 0x2, 0x0) socket(0x2, 0x3, 0xa) setsockopt$auto(0x3, 0x0, 0x40, 0x0, 0x5) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) mprotect$auto(0x1ffff000, 0x8000000000000001, 0xd) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/uts\x00') ioctl$NS_GET_PARENT(r0, 0xc0189436, 0x20000000) select$auto(0x3, 0x0, &(0x7f0000000100)={[0x3, 0x200, 0x0, 0x7fff, 0x7, 0x3, 0x6, 0x2, 0x0, 0x10000005e58296f, 0x1e, 0x7, 0x3, 0x200, 0x8, 0x6]}, 0x0, 0x0) connect$auto(0x3, &(0x7f0000000140)={0xa, @sa_data_min="c4aeed448dc7fe8000"}, 0x55) sendmmsg$auto(0x3, 0x0, 0x9a6, 0xff00) r1 = socket(0x2, 0x2, 0x1) write$auto(r1, 0x0, 0x8e) ioctl$auto(r1, 0x8907, 0xd) write$auto(r1, 0x0, 0x1) 1m20.133015982s ago: executing program 5 (id=594): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_SEG6_CMD_SETHMAC(r0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x20040014) mmap$auto(0x0, 0x2020005, 0x3, 0x2000000000eb1, 0xffffffffffffffba, 0x10000000008000) close_range$auto(0x0, 0xfffffffffffff001, 0x2) socket(0x11, 0x80003, 0x300) r1 = socket(0x10, 0x2, 0x0) sendmsg$auto_OVS_DP_CMD_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0f0026bd7000fcdbdf9907"], 0x24}, 0x1, 0x0, 0x0, 0x20000800}, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1e00df45"], 0x1ac}}, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000"], 0x1ac}}, 0x40000) mprotect$auto(0x1ffff000, 0x8000000000000001, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(r1, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x40000) 1m19.843359323s ago: executing program 5 (id=627): r0 = socket$nl_generic(0x10, 0x3, 0x10) msgctl$auto(0x7, 0x7fff, &(0x7f00000000c0)={{0xfff, 0xee00, 0xee01, 0x0, 0x3, 0x2, 0x6}, &(0x7f0000000040)=0x1, &(0x7f0000000080)=0xf, 0x27c, 0x5, 0x4, 0x3, 0x400, 0x1, 0x4, 0x3, 0x5, 0x6}) ppoll$auto(&(0x7f0000000140)={0xffffffffffffffff, 0x401, 0x3}, 0xf9c, &(0x7f0000000180)={0x6, 0xf92}, &(0x7f00000001c0)={0x80}, 0x8) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0) newfstatat$auto(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x60dc, 0x7, 0xc5ec045, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x3f, 0x9, 0x8, 0x3, 0x3, 0x60, 0x5, 0x9, 0x4, 0x10001}, 0x5) sendmsg$auto_NL80211_CMD_TDLS_MGMT(r0, &(0x7f0000001c00)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001bc0)={&(0x7f0000000340)={0x1828, 0x0, 0x10, 0x70bd27, 0x25dfdbff, {}, [@NL80211_ATTR_BSS_SELECT={0x542, 0xe3, 0x0, 0x1, [@typed={0x8, 0x141, 0x0, 0x0, @ipv4=@loopback}, @nested={0x1f9, 0x24, 0x0, 0x1, [@typed={0x8, 0x10b, 0x0, 0x0, @uid=r1}, @typed={0x8, 0x9d, 0x0, 0x0, @ipv4=@private=0xa010101}, @generic="671314050e603b79d6544f30", @generic="9fed3e3a7288c39ec2d11fc50166b31ff386720b6db9a253317042d654c030807aa7b92d9765ecfa951932b87aec24ce46474ce1ba2e129b3584337a70181c2f7b4667572c31f2d073f79ca503b91e8966cd2dffc031f04e61f878150f972931da78bd52a7c83a03d16fba05fee0b4a8711858ac76b46cc74d6d4a95af3b0854d495562c297bbdbaab947ed3a34df4d3b40c1539e23a3ff944b8d7ad41b6b27fd85c8a6793ac29168d657ca555505c3ac935fa69f3b9b7c547bf839eebaffefa6b19ddbc161a5a843598426c1ff23696", @typed={0x4, 0xa4}, @nested={0x4, 0x113}, @typed={0x8, 0x135, 0x0, 0x0, @fd=r3}, @generic="ef7137d18a44dec17aa04bfa8863996c551ca1c3c7f8fe24bd339199b84474fc7f7be73e3b7d31db5d89b224e00728fe6b0e234698b7570ea3e1a567c88f97b6b6d7191a8530ec79676ca38cba962a3257b144a03688899d3b927ff2c6a1d4a6c7598f0b9c947ff18a69ad86cb3c6e789100a161576fe9b4c160660e74f1c92db6b5bdbfd62cbbd3c6bc08401e34cee06d91140b2820ba624af85132216b7ded4ad0c899a24e03f1557e39f03331bff55dd6c463cc495c54531887727a2957a12d2a7d08c78eaa6caa0adf83a1901f0545d0081d6717b3f0d85b1e9c071006527788a166b690968e5aad6315ea332cfe292906eb79427840e0"]}, @nested={0x1c, 0x121, 0x0, 0x1, [@nested={0x4, 0x12e}, @typed={0xb, 0x10b, 0x0, 0x0, @str='!)]]](\x00'}, @typed={0x8, 0xc8, 0x0, 0x0, @u32=0x1}]}, @generic="665db9bdc2c3d42bd9d4fd51590908895d5c84adaae7e64a46e72e901f51475ed2ef0276c20ad8c73fa75b02b8628f143e1704980db9e5f4ee23699f6b617498fdfc73a2d34ac7343c74b2fb1e0516b538eb3b53fcf89781fd70dc971a706383c62e1f9b16f369698bcee23159111d36e438fe3ef9aa53ce46605a3bb3188158e19feda94927cc9388b40b91e1266f36df74d0611e2ae33b0e0923cc2f5c5d6d990d6d034c132553977103bf0a3cd060e9547c458d54197df2a74a4658ad5e9f2ee6616b777764617689d46e176d45127018cc72a1a11d3652fdb859807cda4c40fa358cec", @nested={0xe8, 0x11c, 0x0, 0x1, [@typed={0x8, 0xd1, 0x0, 0x0, @fd=r4}, @nested={0x4, 0x73}, @typed={0xc, 0x124, 0x0, 0x0, @u64=0x7}, @typed={0xc, 0x131, 0x0, 0x0, @u64=0xff}, @generic="ddc6fb1721d5ae8ea80d4f550b168479b190c4d32a68d2371f9be62565a3bfa084511728a333485e119a0b50cc5a2d96e52f0b5f74a98be91cbacb632988a8a7301e0bb4d8eb3c5479d9c8ca54ae0ab035418552e2c1479ee646629b47961d276b016fdce9915e4368868d536fb7fb9e4546bf145e4e90d3d673afec45d1c4c6454caeb19ca71c1d112ae98a3bb583feeade8acd2b029995760ca11b84767d8024bfc77102fd29899a4264f4ea0ee70a56cdc28f392075b2fa203fdd8cfe612d"]}, @generic="55320f7280c46200e4c2cba133bd34ce69ad4f5d418028617c82b5828774caac42bca0a8997eacb5c50136ee26277a3aa66562417709f21ccde94d4f5c5637ff96725e35553ff522904a", @generic="75c8e3df7f830e6b0912ced958a58b64c2258472dbc17cf86bd3108aa6eacb3845b8c2848fbde3890dc68f64065d25d667622d0c1afe5bd2cffc37418d9b1f417454434db0ec77d53b6d28f8d1e572b5374d00c65d541f319eee448eb4a868724c730402c2c72eb4adee85ab6508d114a246b85fae09baabae2a3f7b18948bad09ed4fc09e76f2cad63384dc50917293965f0d2908cb5681717ca3a161bb33c9ea3e315987f6334fd1f737210c5eee3ec64f435d4613e474bc2319537aaa8442f38e23f8b4d13d59e130d9774823412b072b4c3baec0c0760df2c9039ab9077f3fce", @generic="09e1a3ce0b986f8ab3c0d5d0138bcf1014a93f1bbdbc9a7e5e681c7d82", @typed={0x8, 0x12d, 0x0, 0x0, @uid=r5}]}, @NL80211_ATTR_BSS_HT_OPMODE={0x6, 0x6d, 0x9}, @NL80211_ATTR_MESH_CONFIG={0x12c8, 0x23, 0x0, 0x1, [@generic="31894cd1a27c69d51ed537d3e7ac379f4086f4", @generic="773ebd1f853d35129117c47558a6ab104f2ef1c9089acb0c632b0fb37c9d75c10d8487bf89f3d566531e029d14e01633b9c3d0ba8de8df98c759", @generic="ab4009dfbac79497b3d76127ae0e570ac4e2b1bb61dbfa84704928598079813df7d4c25f6dd68edcf3a3c658754f0ff1893eca305486cb191eea2c1907b1e6c8d8953301316fb9767ebe2bb952fd81b27565b29bcc8311b4492cc657fe0398def1a4b5f6070d65ca2f223c5a3cc024c870cbe6db151da7ba9b5a3057f3c0117ad8522ce33acfc0e7c268585f370dfe462a8155042945deaf2c4a46", @generic="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", @nested={0x1da, 0xd9, 0x0, 0x1, [@generic="56dd8093e4180971ed516aa8b51474716b5911085a32223e38a63be90eb9c8b4944612412023f7dab9b72006dadc5591ec23f9cb886c540a506d8a6fda13677bd0fc5d95281eb242fb1ea3176994099c44a26d1ad0bddc45fe2281821b97b3525be7248dbc8b949f732ff87cd6968a64265f5243835127ae7fdfa160ab1095180653dc1d49dd753da0acf125b95eb03d14b19b51ebc889bfb6fc9e6cc96893d6af59b96df0461dc6a9a16c521ae9a4ecff2752de5f825097d4accb8cc6ccf0515b3c4d3766459338f1527a08bf75471a51fad8125b6e3d877cdff2719a7676a084aa9252a415f5347fe45666e5341f4607bdc20955", @generic="9168e625f125860089b90ca36918862b6b7e003cb573633f6da47bd2945d9814320f2d23d18847fecfd1a464bdee320f007284f777d36d9a521cc11dbba528966d1b317a3a8538401f0c04fe8e70e83559a273a28ac12020d6a3bac1d4a54f2082a355545df74cef7c601a8b198a517a9bd3991f", @generic="9c82a31f764cb1a57ff2432940b35916b2bd5d2cb69a485bd27b5ec9cf9ed7bba38f01c6b4cda62099db008b1bf92db32738b9546804ee29109febc7f464406686a6e110f0266f58f8f42602e5eb2b31b8426072cea1c8bd1b74bc66608b51cea69775e0c9", @nested={0x4, 0x91}, @nested={0x4, 0x36}]}]}]}, 0x1828}, 0x1, 0x0, 0x0, 0x4000080}, 0x20000000) acct$auto(&(0x7f0000001c40)='./cgroup/syz1\x00') statx$auto(r3, &(0x7f0000001c80)='./file0\x00', 0x1, 0x2d2, &(0x7f0000001cc0)={0x85, 0x0, 0x7, 0x6, r5, r6, 0x6, 0xe3, 0x3ff, 0x5, 0xf9a, 0x4000000000000000, {0x8, 0x7}, {0x3ff, 0xfffffffc}, {0xffffffffffff56f3, 0x8}, {0x1, 0x4}, 0x7, 0x0, 0x3ac000, 0x3, 0xfffffffffffffffa, 0x8001, 0xd, 0x3dd55a87, 0x5, 0x800, 0x6, 0x5, [0x6, 0x80, 0x7fff, 0xfffffffffffffff8, 0x5, 0x8, 0x6, 0x8, 0x1ff]}) r8 = syz_genetlink_get_family_id$auto_MAC80211_HWSIM(&(0x7f0000001e00), r3) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r3, &(0x7f0000002000)={&(0x7f0000001dc0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001fc0)={&(0x7f0000001e40)={0x154, r8, 0x1, 0x0, 0x25dfdbff, {}, [@HWSIM_ATTR_CIPHER_SUPPORT={0x38, 0x18, "c72a2d6aa6cbdca93124fb8b3c734aa0681dd1b29f742af017520785b767dc9f73e0050af974b6b0a95e3ae75bdb8e5887a2c486"}, @HWSIM_ATTR_RADIO_NAME={0x7, 0x11, '*:$'}, @HWSIM_ATTR_ADDR_TRANSMITTER={0xf6, 0x2, "494c9f101d93b1d13889edf22662ef4ccafba5ce347b46f58016a4b2a0e5c2daf97a688c848a56490a0ed9b4b7250b24ab4eb4a75765032629305aaf6b9423a06bbf0ed374edfcf24659e431edaf765bcffbcc3fff5bf0b414658d41bb7e203a0110512d553292284db4434b3e3e7b9bf19ac4e5bae92cc3f9d6c02960cfc78cc3db4c0204beb26fbddfa399b058bf8f72f61b03810486c3b137211c9569fd1d728eb3974dcc2fabf4fe167af9164eeec7f166a8957df73c9827a7d60ca956e280eaa1a5ee9c4665c087e773c2f0fd8994ab86f31d7e472090d2bbfd7de1af2697150cccb6a13eef397ff908f77110fcdbb8"}, @HWSIM_ATTR_RX_RATE={0x8, 0x5, 0x4}]}, 0x154}, 0x1, 0x0, 0x0, 0x88c0}, 0x24010084) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000002040)={'bond_slave_0\x00'}) vmsplice$auto(r4, &(0x7f00000020c0)={&(0x7f0000002080)=[0x4, 0x6, 0x4, 0x8000], 0x6}, 0x3, 0x3b73b8a4) r9 = open(&(0x7f0000002100)='./file0\x00', 0x4202, 0x4) setfsgid$auto(r2) move_mount$auto(r9, &(0x7f0000002140)='./file0\x00', r3, &(0x7f0000002180)='./file0\x00', 0x0) r10 = syz_genetlink_get_family_id$auto_nbd(&(0x7f0000002200), r9) sendmsg$auto_NBD_CMD_CONNECT(r0, &(0x7f00000022c0)={&(0x7f00000021c0)={0x10, 0x0, 0x0, 0x10000004}, 0xc, &(0x7f0000002280)={&(0x7f0000002240)={0x38, r10, 0x10, 0x70bd29, 0x25dfdbfd, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x8001}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x3}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x800}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) io_cancel$auto(0x8000000000000000, &(0x7f0000002300)={0x1, 0x8, 0x3, 0x6, 0x84, r0, 0x0, 0x32, 0x81, 0x0, 0x800, r9}, &(0x7f0000002340)={0x8000000000000001, 0x1, 0x1, 0x7}) bpf$auto(0x8, &(0x7f0000002380)=@link_update={r0, @new_map_fd=r11, 0x6, @old_prog_fd=r0}, 0x5) r15 = syz_genetlink_get_family_id$auto_gtp(&(0x7f0000002480), r12) sendmsg$auto_GTP_CMD_NEWPDP(r9, &(0x7f0000002580)={&(0x7f0000002440)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000002540)={&(0x7f00000024c0)={0x64, r15, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@GTPA_PEER_ADDR6={0x14, 0xb, {@u6_addr16=[0x1, 0x9ee, 0x5, 0x6d, 0x8, 0xab4b, 0x5, 0x7f]}}, @GTPA_I_TEI={0x8, 0x8, 0x10000}, @GTPA_LINK={0x8}, @GTPA_I_TEI={0x8, 0x8, 0x5}, @GTPA_I_TEI={0x8, 0x8, 0xd}, @GTPA_PEER_ADDR6={0x14, 0xb, {@u6_addr16=[0x8000, 0x5, 0x3, 0xf, 0x1, 0x5, 0xf, 0x5]}}, @GTPA_NET_NS_FD={0x8, 0x7, r11}]}, 0x64}, 0x1, 0x0, 0x0, 0xd0}, 0x1581eff1953ad3fb) io_cancel$auto(0x4, &(0x7f00000025c0)={0x9, 0xe, 0x1, 0x5, 0x2, r11, 0x2a, 0x0, 0x8000000000000001, 0x0, 0xfffffff1, r12}, &(0x7f0000002600)={0x2, 0x101, 0x9, 0xffffffff}) lseek$auto(r16, 0x80, 0x6) close_range$auto(r13, r12, 0x7) stat$auto(&(0x7f0000002640)='./file0\x00', &(0x7f0000002680)={0x3, 0x0, 0x57, 0x8, r7, r6, 0x0, 0x6, 0x6, 0x4, 0x8ce, 0x8, 0x2, 0x5, 0x200, 0xa36, 0x880}) fstat$auto(r3, &(0x7f0000002740)={0x6, 0xfffffffffffffffe, 0xbed, 0x5d, r1, r17, 0x0, 0x400, 0x7fffffff, 0x33, 0x7889, 0x0, 0xfffffffffffff050, 0x7ff, 0x4, 0xfffffffffffffff9, 0x8c}) statfs$auto(&(0x7f0000002800)='./file0\x00', &(0x7f0000002840)={0x2, 0x1, 0xd11, 0x5, 0x80, 0xb19, 0x8, {[0xfff, 0x7]}, 0xffff, 0xfffffffffffffffc, 0x401, [0x80000000, 0xc, 0x80000000, 0x3]}) sendmsg$auto_IEEE802154_ADD_IFACE(r14, &(0x7f00000029c0)={&(0x7f00000028c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000002980)={&(0x7f0000002900)={0x5c, 0x0, 0x300, 0x70bd27, 0x25dfdbfd, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, 0xfffffffffffffff7}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, 0x9}, @IEEE802154_ATTR_CAPABILITY={0x5, 0x11, 0x3}, @IEEE802154_ATTR_SRC_PAN_ID={0x6, 0xd, 0x7f}, @IEEE802154_ATTR_CSMA_MAX_BE={0x5, 0x27, 0x50}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xfff}, @IEEE802154_ATTR_CCA_ED_LEVEL={0x8, 0x24, 0xffffffff}, @IEEE802154_ATTR_DEST_PAN_ID={0x6, 0x10, 0xa8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x8804) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000002a00), r3) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000002a40), r3) 1m19.678977838s ago: executing program 5 (id=629): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_netdev(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'erspan0\x00', 0x0}) sendmsg$auto_NETDEV_CMD_NAPI_GET0(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x1c, r1, 0x301, 0x70bd28, 0x25dfdbfe, {}, [@NETDEV_A_NAPI_IFINDEX={0x8, 0x1, r2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40050}, 0x40004000) r3 = socket(0x10, 0x2, 0x0) r4 = syz_genetlink_get_family_id$auto_ila(&(0x7f00000001c0), 0xffffffffffffffff) listmount$auto(&(0x7f0000000040)={0x1c, 0x0, 0x80000024, 0x800000876e}, 0x0, 0xf4240, 0x1) statmount$auto(&(0x7f0000000000)={0x8fb3, 0x0, 0x7ff, 0x6, 0xfe}, &(0x7f0000000380)={0x8, 0x0, 0x7, 0x7fff, 0x45d, 0x9, 0x842, 0x4, 0xe, 0x260d1c37, 0x3d7, 0x4, 0xea, 0x6, 0x5d90, 0xfffffffffffffff9, 0x7, 0x2, 0x0, 0x6, [0x8, 0x3, 0x0, 0x81, 0x4, 0x6, 0x5, 0x400, 0x7, 0x81, 0x4e0, 0x6, 0x8, 0x8, 0x8, 0x1, 0x7, 0x2, 0x4, 0x1, 0x2, 0x7, 0x100, 0x7, 0x5, 0x100000001, 0x8, 0xdb93, 0x0, 0xfff, 0x7fffffffffffffff, 0x1, 0x9, 0x5, 0x8, 0x0, 0xfffffffffffff801, 0x0, 0x2, 0x5, 0x7d5, 0x88, 0x1, 0x49ed, 0xddf, 0x5, 0x8, 0x0, 0xffff], "fc01ddc2ba4d1ad449958214da5d3256c46b48b80c672d9c7722dba6d1ff2c326c359272659e8810e0afda64c9521a9619aef5ab665b058d88b01ed9b9e18f2c7cba4bacdfd6d850a02e29dd7aaceefeb71df84520dcb92e06f36f2c1a26ca348ba9c2e669b24e3a37179760813a637d276b868a"}, 0x5, 0x10001) sendmsg$auto_ILA_CMD_DEL(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x20, r4, 0xf364953f8628edcd, 0x70bd29, 0x25dfdbff, {}, [@ILA_ATTR_LOCATOR={0xc, 0x1, 0x9}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000090}, 0x800c0) 1m19.561372749s ago: executing program 5 (id=630): socket(0xa, 0x3, 0x33) sendmsg$auto_WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x20018010) close_range$auto(0x0, 0xfffffffffffff000, 0x2) eventfd$auto(0x8c) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) writev$auto(0x0, &(0x7f0000000000)={0x0, 0x8}, 0xb) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) io_uring_setup$auto(0x6, 0x0) setsockopt$auto(0x400000000000003, 0x29, 0x7, 0x0, 0x401) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000021}, 0x8004) connect$auto(0x3, &(0x7f0000000140)={0xa, @sa_data_min="c40900448dc7fe8000"}, 0x55) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="40000000873e1ae6dbcb096d89359d6ec67abd78c3309490cdd357652c68a5d4feec1683a343bf2e08e6a4d028ca4489a303", @ANYRES16=0x0, @ANYBLOB="2b0128bd7000fedbdf250000000000000800060000000800080090f4ffff08000500050000000c0003000300000000000000080001008e000000"], 0x3}, 0x1, 0x0, 0x0, 0x8010}, 0x24004141) sendmmsg$auto(0x3, &(0x7f0000000000)={{0x0, 0x8, 0x0, 0x106, 0x0, 0x1, 0x697b}, 0xc57138c}, 0x9a6, 0xe000) clone$auto(0x40083b42, 0x5c84, 0xfffffffffffffffe, 0x0, 0x100000000000f) write$auto(0x3, 0x0, 0xffd8) 1m19.014973629s ago: executing program 5 (id=632): r0 = socket(0x10, 0x2, 0x0) sendmsg$auto_OVS_DP_CMD_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0f0026bd7000fcdbdf9907"], 0x24}, 0x1, 0x0, 0x0, 0x20000800}, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1e00df45"], 0x1ac}}, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB='V'], 0x1ac}}, 0x40000) mprotect$auto(0x1ffff000, 0x8000000000000001, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x400000000000000}, 0x40000) 1m18.81719947s ago: executing program 5 (id=633): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) mlock$auto(0x9, 0x6) r0 = socket(0x1e, 0x1, 0x84) mlock$auto(0x400, 0xffffffffffffffff) socket(0x23, 0x80805, 0x0) ioctl$auto(0x3, 0x89ed, 0xfffffffffffff4e0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) prctl$auto(0x3e, 0x0, 0x1, 0x0, 0x10) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) setsockopt$auto(0x3, 0x10000000084, 0x81, 0x0, 0x8) setsockopt$auto(r0, 0xf, 0x80000283, 0x0, 0x8) select$auto(0x6d0d, 0x0, &(0x7f0000000100)={[0xd, 0x200, 0x800000000000008, 0xc, 0x9, 0x3ff, 0x6, 0x1, 0x40009, 0x5e582972, 0x4000000000000000, 0x11, 0x93, 0x7, 0x8, 0x6]}, 0x0, 0x0) connect$auto(0x3, &(0x7f0000000140)={0xa, @sa_data_min="c4aeed448dc7fe8000"}, 0x55) shutdown$auto(0x200000003, 0x2) madvise$auto(0x0, 0xffffffffffff0001, 0x15) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) writev$auto(0x1, &(0x7f0000000100)={0x0, 0x400000040000fdef}, 0x1) syz_genetlink_get_family_id$auto_MAC80211_HWSIM(0x0, 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_NEW_RADIO(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004084}, 0x48000) syz_genetlink_get_family_id$auto_MAC80211_HWSIM(0x0, 0xffffffffffffffff) ppoll$auto(0x0, 0x9eba, &(0x7f0000000140)={0x5852, 0x1000}, 0x0, 0x1) io_uring_setup$auto(0x6, 0x0) msync$auto(0x1ffff000, 0x80100000000005, 0x400000004) sendmsg$auto_HWSIM_CMD_NEW_RADIO(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20005811}, 0x4048040) socket$nl_generic(0x10, 0x3, 0x10) socket(0x15, 0x5, 0x0) fanotify_init$auto(0x65, 0x2) dup2$auto(0x5, 0x4) splice$auto(0x4, 0x0, 0x2, 0x0, 0x80000001, 0x9) 1m3.710955866s ago: executing program 34 (id=633): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) mlock$auto(0x9, 0x6) r0 = socket(0x1e, 0x1, 0x84) mlock$auto(0x400, 0xffffffffffffffff) socket(0x23, 0x80805, 0x0) ioctl$auto(0x3, 0x89ed, 0xfffffffffffff4e0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) prctl$auto(0x3e, 0x0, 0x1, 0x0, 0x10) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) setsockopt$auto(0x3, 0x10000000084, 0x81, 0x0, 0x8) setsockopt$auto(r0, 0xf, 0x80000283, 0x0, 0x8) select$auto(0x6d0d, 0x0, &(0x7f0000000100)={[0xd, 0x200, 0x800000000000008, 0xc, 0x9, 0x3ff, 0x6, 0x1, 0x40009, 0x5e582972, 0x4000000000000000, 0x11, 0x93, 0x7, 0x8, 0x6]}, 0x0, 0x0) connect$auto(0x3, &(0x7f0000000140)={0xa, @sa_data_min="c4aeed448dc7fe8000"}, 0x55) shutdown$auto(0x200000003, 0x2) madvise$auto(0x0, 0xffffffffffff0001, 0x15) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) writev$auto(0x1, &(0x7f0000000100)={0x0, 0x400000040000fdef}, 0x1) syz_genetlink_get_family_id$auto_MAC80211_HWSIM(0x0, 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_NEW_RADIO(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004084}, 0x48000) syz_genetlink_get_family_id$auto_MAC80211_HWSIM(0x0, 0xffffffffffffffff) ppoll$auto(0x0, 0x9eba, &(0x7f0000000140)={0x5852, 0x1000}, 0x0, 0x1) io_uring_setup$auto(0x6, 0x0) msync$auto(0x1ffff000, 0x80100000000005, 0x400000004) sendmsg$auto_HWSIM_CMD_NEW_RADIO(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20005811}, 0x4048040) socket$nl_generic(0x10, 0x3, 0x10) socket(0x15, 0x5, 0x0) fanotify_init$auto(0x65, 0x2) dup2$auto(0x5, 0x4) splice$auto(0x4, 0x0, 0x2, 0x0, 0x80000001, 0x9) 16.172117807s ago: executing program 2 (id=743): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_MAC80211_HWSIM(&(0x7f0000000080), r0) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000300)={0x94, r1, 0x8a00f4e9954364ed, 0x70bd29, 0x25dfdbfd, {}, [@HWSIM_ATTR_RADIO_NAME={0x7f, 0x11, '\xfd\xff\xff\xff\xff\xff\xff\xff-\x9c\xe4\xbe\x9e6y\x93\xd5\xbc\x9f\x8a\xf7\f\x01k\a\x86\xc1a\x12;\xab\xd7+\x99\xe71\x9b)p\x06\x02;/X\xfc+\x8b@\x90\xfc\x00\xbbNvh\x88\x10\x00\x00\f\x11\xe7\xd3:\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xec|\xfd+Q3y\xef\xf1\xb3\x9eI\xa2\x99_f\x0ej\xa7x\x13\x13%^3\x85O\xe2\xe1\x84\xcb\x86\xe6\x16\x9er\xdb[\x89\xb9\x06s\xa5\x1f\xfe\xdf4\x1c'}]}, 0x94}, 0x1, 0x0, 0x8c150000, 0x84}, 0x24000054) 16.060101199s ago: executing program 2 (id=744): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_SEG6_CMD_SETHMAC(r0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x20040014) mmap$auto(0x0, 0x2020005, 0x3, 0x2000000000eb1, 0xffffffffffffffba, 0x10000000008000) close_range$auto(0x0, 0xfffffffffffff001, 0x2) socket(0x11, 0x80003, 0x300) r1 = socket(0x10, 0x2, 0x0) sendmsg$auto_OVS_DP_CMD_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0f0026bd7000fcdbdf9907"], 0x24}, 0x1, 0x0, 0x0, 0x20000800}, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1e00df45"], 0x1ac}}, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB='V'], 0x1ac}}, 0x40000) mprotect$auto(0x1ffff000, 0x8000000000000001, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(r1, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x40000) 15.843042485s ago: executing program 2 (id=747): socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x4008810}, 0x20018010) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22240, 0x118) socket(0x2, 0x1, 0x0) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) connect$auto(0x3, &(0x7f00000001c0)={0x2, @sockaddr_1_1={"c2a172"}}, 0x55) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xfffffffffffefffd, 0x17) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x8, 0x3ff57696, 0x9b72, 0x5, 0x8000000000008000) madvise$auto(0x0, 0xffffffffffff0004, 0x19) socketpair$auto(0x101, 0x7f, 0x0, &(0x7f0000000040)=0x1e93) inotify_add_watch$auto(0x4, 0x0, 0x80000000) fsopen$auto(&(0x7f0000000100)='\x00', 0xfffffff2) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0x6, 0x4) shutdown$auto(0x200000003, 0x2) bind$auto(0x3, &(0x7f0000000080)={0x2, @sockaddr_1_1}, 0x6b) connect$auto(0x3, &(0x7f00000000c0)={0x2, @sockaddr_1_1}, 0x55) 4.879998595s ago: executing program 4 (id=754): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) fanotify_init$auto(0x5, 0x2000000000002) socket(0x10, 0x2, 0x2) close_range$auto(0x2, 0x8000, 0x0) io_uring_setup$auto(0x8, 0x0) open(0x0, 0x4242, 0xe1d2b27bdc14aabc) open(0x0, 0x10677d, 0x37e5c9853cd1b999) fanotify_mark$auto(0x0, 0x1, 0x9, 0x4, 0x0) fallocate$auto(0x8000000000000003, 0x0, 0xd, 0xcbd5d) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socket(0xa, 0x3, 0x6) socketpair$auto(0xbcb, 0x5, 0x8000000000000000, 0x0) connect$auto(0x3, &(0x7f00000001c0)={0xa, @sockaddr_1_1={"6315ac0837451c9189ca71b9ec8b1754d32c0d4a8b1227e2ecd9d21f4a8f7ddf7bd9a361b861b0c6ff0d66e2504d9abcd9d6aabfbd0a5eb3fdc2a24c139124fda4fd2a8cf0402a21e7e68be7b8f94ead045660e99b44eaf6ec0c3f4351fe8fc7ce6778977e269af4e69c09d13449cb1bd2db481e9ddc59db7f8b4b23c4d8c739e6b43b262485e26c9fb798416c7d5e9f302bac9e6e628c1f6a63ab1450bca9e1b423ee8117bf46a37827d0e5348c17d76e48bd11595f6e94edefe1374e9ec308d2152e229059969b0bb85677086772a0542b7b1cdec60f"}}, 0x55) sendmmsg$auto(0x15, &(0x7f0000000100)={{0x0, 0x6, 0x0, 0x7f, 0x0, 0x8000, 0x2}, 0x7}, 0x3, 0x0) sendmmsg$auto(0x3, &(0x7f0000000000)={{0x0, 0x2, 0x0, 0xff, 0x0, 0x1, 0x3}, 0xed7138c}, 0xb, 0x0) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) timerfd_create$auto(0x9, 0x0) select$auto(0x5, &(0x7f0000000000)={[0xeb, 0x8001, 0x4, 0xd1, 0xb, 0x1ff, 0x500000, 0x10000, 0x7fffffffffffffff, 0x4, 0x105, 0x10001, 0x0, 0x4, 0xffffffffffffffff, 0x1]}, 0x0, 0x0, 0x0) semctl$auto(0x1ff, 0x2, 0x13, 0x4) ioctl$auto(0x3, 0x40085400, 0x5) mmap$auto(0xf000, 0x8, 0x1000000003, 0x9b72, 0x2, 0x8000) semctl$auto(0x6, 0xfffffffffffffffa, 0x100000001, 0x95cc) mmap$auto(0xc, 0x1, 0x2, 0xeb1, 0xfffffffffffffffc, 0x8004) madvise$auto(0x0, 0xffffffffffff0001, 0x15) socket$nl_generic(0x10, 0x3, 0x10) select$auto(0xb, 0x0, 0x0, 0x0, 0x0) read$auto(0xca, 0x0, 0x2) 4.521983732s ago: executing program 2 (id=755): r0 = socket(0xf, 0x5, 0x38) select$auto(0x3, 0x0, &(0x7f0000000100)={[0xd, 0x7, 0x0, 0xc, 0x9, 0x3, 0x6, 0x2, 0x9, 0x5e58296f, 0x4000000000000000, 0xa, 0x4, 0x5, 0x8, 0x6]}, 0x0, 0x0) socket(0x2b, 0x1, 0x1) mmap$auto(0x0, 0x20009, 0xe3, 0x100000eb1, 0x40000000000a1, 0x8000) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) sendto$auto(0x4, 0x0, 0xff, 0x6, 0x0, 0xe) ioperm$auto(0x4, 0x4, 0xfffffffd) setuid$auto(0x80000000000c) listen$auto(0x3, 0x81) close_range$auto(0x2, 0x8000, 0x0) uname$auto(&(0x7f0000000280)={"ad211631a1e1cec9802252d7bb6c8489c51d6a677433d5ead8267ab53fac7c503a15a4b559f5962311400992679310de12ee2df9a6e05ab100a6a09516b789eb40", "1a0586faf94654408195943fb77b3203b87d3e9db094a428f8b9056ab51d9442c3eb7f93e3c09fc8e737a8472b5a7eaec6c9753539b3327017863eaece8dbfd3c3", "c1e8c0d9d5289ad34f500b11c572256a09bd29f60ab31781b0d11ce477f3a6f75b4991e3efd1e922b5437bea37e3281e47f735f3c130f2472bf5270ad46a70c090", "8065c72b2a9a0911b807ad90d2c8087ccff35b0e065ea372e2d8f719656728fcaec18c16fa4d0f86cf802f04c4671c89b3ad9c74a518b3c08502799cce785fd67e", "dadeeea4928f44093f1557afe07ba1e488636e862d89a53b3ba3c12f65d64df67493938a1822480a1f7d1acf2fc8d16fab77230220aff73bef0f09bc4147455b1f", "edd554034ec4b8a110ebf8e22570ff80ed7fb596654f0d399b386cf48f4d1139c98b1c8f42c5a43202b5f4b4b228e8e812f05924a49810e2e8c911a188b1e3c366"}) open(&(0x7f0000000000)='./file0\x00', 0x40440, 0x40) prctl$auto(0x1000000001c, 0x5, 0x8, 0x9, 0x80001) setreuid$auto(0x8c4a, 0x5) utime$auto(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280)={0x7, 0x2}) connect$auto(0x3, &(0x7f0000000140)={0xa, @sa_data_min="c4aeed448dc7fe8000"}, 0x55) mmap$auto(0x0, 0x2020009, 0x3, 0xeb2, 0xfffffffffffffffb, 0x8000) rt_sigaction$auto(0xfffffffe, 0xfffffffffffffffd, 0xfffffffffffffffc, 0xc) socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) write$auto(0x4, 0x0, 0x100082) setsockopt$auto(0x3, 0x1, 0x21, 0x0, 0x9) sendmmsg$auto(0x3, 0x0, 0x7, 0x1f) chmod$auto(&(0x7f0000000000)='./file0\x00', 0x5) sendmsg$auto_NL80211_CMD_DEL_PMK(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0, @ANYRES32=r0], 0x80}, 0x1, 0x0, 0x0, 0x4001}, 0x40000) 4.333547541s ago: executing program 1 (id=756): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_SEG6_CMD_SETHMAC(r0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x20040014) mmap$auto(0x0, 0x2020005, 0x3, 0x2000000000eb1, 0xffffffffffffffba, 0x10000000008000) close_range$auto(0x0, 0xfffffffffffff001, 0x2) socket(0x11, 0x80003, 0x300) r1 = socket(0x10, 0x2, 0x0) sendmsg$auto_OVS_DP_CMD_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0f0026bd7000fcdbdf9907"], 0x24}, 0x1, 0x0, 0x0, 0x20000800}, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1e00df45"], 0x1ac}}, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB='V'], 0x1ac}}, 0x40000) mprotect$auto(0x1ffff000, 0x8000000000000001, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(r1, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x40000) 4.301763233s ago: executing program 2 (id=758): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) rseq$auto(&(0x7f0000000300)={0xe, 0x401, 0x0, 0x6, 0xffffffff, 0x2}, 0x8000, 0x0, 0x6) timer_create$auto(0x2, 0x0, 0x0) timer_create$auto(0x7, 0x0, &(0x7f0000000980)=0x4) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r0 = socket(0x15, 0x5, 0x0) fanotify_init$auto(0x65, 0x2) pipe$auto(0x0) dup2$auto(0x5, 0x4) splice$auto(0x4, 0x0, 0x2, 0x0, 0x80000001, 0x9) write$auto(0x6, 0x0, 0x100000001) sendmsg$auto_IEEE802154_LLSEC_DEL_KEY(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="00e1fa9e79b9491cb9eccdb62e0000a7e623f74001a18630cf8c899740c62905002965c279d5b039c5cc637d2ae9e8c3f845698cbd8feb6afd1d1f3d677c90d0a7551fea8c74be51282a75d96cb02a9216f40f7408d78a4c1eb1cdef6d89dfb58b03e2bf1c903de8d31b725548434bf1d7944f31e8994d17446bc177eb514d8f265d85087cf666637aaf646706c2", @ANYRES16=0x0, @ANYBLOB="000125bd7000fedbdf25280000000c000c00ffffffffffffff7f84001e003d4227162f91432959f53d4e0cb4a47d1539241550460f18d4bc17257ad5c7d63a57c5ad7acbf6b0953ff5a948e6d59466556cb2eb707bcab040f01400f946773e45532d93fa27ab87ac8d6d7f69a14bbdd7a9c94068c0d6a0993f6c648fc48171b4ba9d4170c37de0ccb67c45c811390a5619512513b7a67c9cd8c6d45120fc0500290001000000"], 0xac}, 0x1, 0x0, 0x0, 0x810}, 0x44004) prctl$auto(0x1000000003b, 0x1, 0x9, 0x5, 0x3) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0xffffffffffff0001, 0x15) madvise$auto(0x0, 0xffffffffffff0005, 0x19) memfd_secret$auto(0x72df6d71) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_SEG6_CMD_SETHMAC(r1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x20040014) mmap$auto(0x0, 0x2020005, 0x3, 0x2000000000eb1, 0xffffffffffffffba, 0x10000000008000) close_range$auto(0x0, 0xfffffffffffff001, 0x2) socket(0x11, 0x80003, 0x300) r2 = socket(0x10, 0x2, 0x0) sendmsg$auto_OVS_DP_CMD_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0f0026bd7000fcdbdf9907"], 0x24}, 0x1, 0x0, 0x0, 0x20000800}, 0x4) r3 = socket(0x10, 0x2, 0x6) sendmsg$auto_NL80211_CMD_GET_REG(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1300"], 0x1ac}}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYRES8=r3, @ANYBLOB="69909aad"], 0x1ac}}, 0x40) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB='V'], 0x1ac}}, 0x40000) mprotect$auto(0x1ffff000, 0x8000000000000001, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(r2, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x40000) 4.222554109s ago: executing program 1 (id=759): socket(0xa, 0x801, 0x84) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000021}, 0x8004) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) connect$auto(0x3, &(0x7f0000000140)={0xa, @sa_data_min="c4aeed448dc7fe8000"}, 0x55) select$auto(0xa, 0x0, &(0x7f0000000100)={[0x20000000000d, 0x203, 0x0, 0xc, 0x5, 0x3, 0x5, 0x2000000000000002, 0x9, 0x8, 0xff, 0xa, 0x4, 0xaab, 0x5, 0x4006]}, 0x0, 0x0) connect$auto(0x3, &(0x7f0000000140)={0xa, @sa_data_min="c4aeed448dc7fe8000"}, 0x55) shutdown$auto(0x200000003, 0x2) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)) fcntl$auto(r0, 0x402, 0x80000004) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/mnt\x00') 3.958298058s ago: executing program 1 (id=761): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x800008000) socket(0xa, 0x3, 0x73) connect$auto(0x3, &(0x7f0000000140)={0xa}, 0x55) sendmmsg$auto(0x3, 0x0, 0x200, 0x0) socket(0x2, 0x3, 0xa) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) ioctl$auto(0x3, 0x8904, 0x1) ioctl$auto(0x3, 0x80000541b, 0x38) 3.95682387s ago: executing program 6 (id=762): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x10, 0x2, 0x0) sendmsg$auto_OVS_DP_CMD_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0f0026bd7000fcdbdf9907"], 0x24}, 0x1, 0x0, 0x0, 0x20000800}, 0x4) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x48000}, 0x0) mmap$auto(0x0, 0xc, 0x4000000000df, 0x44eb2, 0x10006, 0x300000000000) close_range$auto(0x2, 0x8000, 0x0) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x3) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1e00df45"], 0x1ac}}, 0x40000) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="1100000012"], 0x2c}, 0x1, 0x0, 0x0, 0x804}, 0x400c000) mprotect$auto(0x1ffff000, 0x8000000000000001, 0x4) sendmsg$auto_NCSI_CMD_SET_PACKAGE_MASK(r1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4c004}, 0x40080c0) r2 = syz_genetlink_get_family_id$auto_wireguard(&(0x7f0000001140), r0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_macsec(&(0x7f0000000380), r4) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000003c0)={'macsec0\x00', 0x0}) sendmsg$auto_MACSEC_CMD_UPD_OFFLOAD(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000400)={0x20, r5, 0x1, 0x70bd2a, 0x25dfdbff, {}, [@MACSEC_ATTR_OFFLOAD={0x4}, @MACSEC_ATTR_IFINDEX={0x8, 0x1, r6}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000001}, 0x40080) sendmsg$auto_WG_CMD_SET_DEVICE(r0, &(0x7f00000028c0)={0x0, 0x0, &(0x7f0000002880)={&(0x7f0000000000)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0026bd7000fedbdf25194e85b70033000000000000000000000000004699a28700"/45], 0x30}, 0x1, 0x0, 0x0, 0x841}, 0x80) 3.909806073s ago: executing program 4 (id=763): mmap$auto(0x0, 0x20009, 0xdf, 0x13, 0x401, 0x8000) r0 = socket(0x2, 0x801, 0x106) bind$auto(0x3, &(0x7f0000000000)={0x2, @sockaddr_1_1={"90"}}, 0x68) connect$auto(0x3, &(0x7f0000000000)={0x2, @sockaddr_1_1}, 0x55) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) write$auto(0x3, 0x0, 0xfdef) landlock_restrict_self$auto(r0, 0xa6) close_range$auto(0x2, 0x8, 0x0) madvise$auto(0xffd, 0x24e, 0xe) sysfs$auto(0x2, 0x10000000000002d, 0x0) 3.755368197s ago: executing program 6 (id=764): ioperm$auto(0x7, 0x6, 0x2) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001300)={'batadv_slave_0\x00', 0x0}) prctl$auto(0x80012, 0x800000004, 0x200000, 0x48, 0x100000001) mmap$auto(0x0, 0x9, 0x3ff57696, 0x9b72, 0x2, 0x8000000000008000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x0, 0xffffffffffff0001, 0x15) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x848000000015, 0x805, 0x0) bind$auto(0x3, &(0x7f0000000000)={0x2, @sockaddr_1_1={"90927f"}}, 0x68) select$auto(0xfffffffd, 0x0, &(0x7f0000000100)={[0x20000000000d, 0x203, 0x0, 0x0, 0x9, 0x6, 0x1, 0x401, 0x2009, 0x5e582971, 0xff, 0xffffffffffffc820, 0x2000000000000004, 0x7, 0x74, 0xb]}, 0x0, 0x0) connect$auto(0x3, &(0x7f0000000140)={0xa, @sa_data_min="c4ae0000c5bc964100"}, 0x55) sendmsg$auto_HSR_C_GET_NODE_STATUS(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x200004d0}, 0x40) madvise$auto(0x0, 0xffffffffffff0005, 0x19) ioctl$auto(0xffffffffffffffff, 0x37, 0xfffffffffffffffe) rseq$auto(&(0x7f0000000300)={0xe, 0x401, 0x0, 0x6, 0xffffffff, 0x2}, 0x8000, 0x0, 0x6) clock_gettime$auto(0x8, 0x0) r3 = open(0x0, 0x1, 0x40) readv$auto(0x0, &(0x7f0000000040)={0x0, 0x800}, 0x8) r4 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000001480), r0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000000c0), r3) sendmsg$auto_NL80211_CMD_GET_INTERFACE(r5, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x20, r6, 0xb01, 0x70bd27, 0x25dfdbfb, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, 0x5}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x4000080) sendmsg$auto_ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f0000001cc0)={0x0, 0x0, &(0x7f0000001c80)={&(0x7f0000000100)={0x28, r4, 0x1, 0x70bd2a, 0x25dfdc00, {}, [@ETHTOOL_A_CHANNELS_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}, @ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x8800}, 0x0) sendmmsg$auto(0xffffffffffffffff, 0x0, 0x5, 0x20000000) mmap$auto(0x0, 0x8, 0x1000000004, 0x9b72, 0x2, 0x8000) mlock2$auto(0x6, 0x401, 0x0) 3.535064678s ago: executing program 4 (id=765): socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x4008810}, 0x20018010) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22240, 0x118) socket(0x2, 0x1, 0x0) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) connect$auto(0x3, &(0x7f00000001c0)={0x2, @sockaddr_1_1={"c2a172"}}, 0x55) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xfffffffffffefffd, 0x17) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x8, 0x3ff57696, 0x9b72, 0x5, 0x8000000000008000) madvise$auto(0x0, 0xffffffffffff0004, 0x19) socketpair$auto(0x101, 0x7f, 0x0, &(0x7f0000000040)=0x1e93) inotify_add_watch$auto(0x4, 0x0, 0x80000000) fsopen$auto(&(0x7f0000000100)='\x00', 0xfffffff2) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0x6, 0x4) shutdown$auto(0x200000003, 0x2) bind$auto(0x3, &(0x7f0000000080)={0x2, @sockaddr_1_1}, 0x6b) connect$auto(0x3, 0x0, 0x55) 3.0510372s ago: executing program 1 (id=766): socket$auto(0x7b, 0xa, 0x8001) sendmsg$auto_BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00032600000008002700008000000a001800cb08bd3315c90000821ad19e15e80fe88eb7b48d99c6102cbb583776190eabf39925fe9e3ca5314b5d7f9b50088d5b02f9daf75400e092e39ac004b6000000"], 0x28}, 0x1, 0x0, 0x0, 0x4c894}, 0x4) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socket(0x23, 0x80805, 0x0) faccessat2$auto(0x1, &(0x7f0000000040)='\x00', 0x3, 0x1000) socket(0x2b, 0x2, 0x8005) socket(0x1, 0x80000, 0x9) socket(0x10, 0x2, 0xc) syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000002c0), 0xffffffffffffffff) setsockopt$auto(0xffffffffffffffff, 0x1, 0x4a, &(0x7f00000001c0)='\x01\xa2l\xaa\v\xbc\xc8\xd0\xd5\xdf0x0}) sendmsg$auto_NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16, @ANYBLOB="010029bd7020fddbdf250700000008000300", @ANYRES32=r1], 0x24}, 0x1, 0x0, 0x0, 0x20040011}, 0x40000c0) connect$auto(0x3, &(0x7f0000000180)={0x76a, @sockaddr_1_1={"44994036df1884506db9331f31208aef18be3b607ab4b98fd57f1b6d16fde417701c1ec3cccb91ee7699f676f93ec3d4114f2a8f2e6034e76cbedc00297009b5b0f9d6dd1a5bcb47fae3bb4907c408f16de4a07e583094f00da54ba86ab75f147a63f9d344f9e8bdb963e3a19bd7d6f7aeeaf7f45d04d5884d0967394ee9e15d6b2f364eb4328366e9ec4d47ee57544c408a87f4e05200fcef109cd9bfe47fef9d1be51d92f0524a3eb5cecb927025530b7572f8d55f6f977ffab15d926c663e313830e113daa2bce4c13e923b35f9e3fc2418"}}, 0x55) connect$auto(0x3, &(0x7f0000000000)={0x2, @sa_data_min="0800e00000010000c1728d2af766"}, 0x55) write$auto(0x3, 0x0, 0xfdef) socket(0xa, 0x3, 0xff) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x800009b72, 0x2, 0x8000) mmap$auto(0x0, 0xa, 0xdb, 0x9b72, 0x5, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) rseq$auto(&(0x7f0000000300)={0x0, 0x9, 0x0, 0x4, 0xffffffff, 0xfffffffe}, 0x8000, 0x0, 0x6) chdir$auto(0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) poll$auto(&(0x7f0000000d40)={0x3, 0x1, 0xa}, 0x5, 0x400) setsockopt$auto(r0, 0x1, 0x20, 0x0, 0x9) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) fsopen$auto(0x0, 0x1) madvise$auto(0x0, 0x5, 0x15) madvise$auto(0x0, 0x200007, 0x19) sysfs$auto(0x2, 0x4, 0x0) 1.331710182s ago: executing program 4 (id=769): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_MAC80211_HWSIM(&(0x7f0000001a80), r1) sendmsg$auto_HWSIM_CMD_FRAME(r1, &(0x7f0000003200)={0x0, 0x0, &(0x7f00000031c0)={&(0x7f0000001ac0)={0x2c, r2, 0x1, 0x70bd25, 0x25dfdbff, {}, [@HWSIM_ATTR_RX_RATE={0x8, 0x5, 0x1}, @HWSIM_ATTR_ADDR_RECEIVER={0xa, 0x1, "22aad49d149c"}, @HWSIM_ATTR_FRAME={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2400004d}, 0x0) sendmsg$auto_HWSIM_CMD_DEL_RADIO(r0, &(0x7f00000006c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0x518, r2, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@HWSIM_ATTR_TX_INFO_FLAGS={0x22, 0x15, "d857255b11e18c4e01b74ab116a3723036c659ef5eedf9a18824d9cea287"}, @HWSIM_ATTR_DESTROY_RADIO_ON_CLOSE={0x4}, @HWSIM_ATTR_REG_HINT_ALPHA2={0x9, 0xb, 'nfsd\x00'}, @HWSIM_ATTR_FRAME={0x273, 0x3, "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"}, @HWSIM_ATTR_FRAME={0x25c, 0x3, "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"}]}, 0x518}, 0x1, 0x0, 0x0, 0x40000}, 0x200488d0) (async) sendmsg$auto_HWSIM_CMD_DEL_RADIO(r0, &(0x7f00000006c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0x518, r2, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@HWSIM_ATTR_TX_INFO_FLAGS={0x22, 0x15, "d857255b11e18c4e01b74ab116a3723036c659ef5eedf9a18824d9cea287"}, @HWSIM_ATTR_DESTROY_RADIO_ON_CLOSE={0x4}, @HWSIM_ATTR_REG_HINT_ALPHA2={0x9, 0xb, 'nfsd\x00'}, @HWSIM_ATTR_FRAME={0x273, 0x3, "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"}, @HWSIM_ATTR_FRAME={0x25c, 0x3, "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"}]}, 0x518}, 0x1, 0x0, 0x0, 0x40000}, 0x200488d0) r3 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000080), 0xffffffffffffffff) statmount$auto(&(0x7f0000000000)={0xc, 0x8, 0x5, 0xffffffff, 0xfffffffffffffff2}, 0x0, 0x800, 0x0) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002dbd7002ffdbdf2502d6322c09"], 0x24}, 0x1, 0x0, 0x0, 0x40000021}, 0x8004) mprotect$auto(0x1ffff000, 0x8000000000000001, 0x4) (async) mprotect$auto(0x1ffff000, 0x8000000000000001, 0x4) getpid() (async) r4 = getpid() r5 = syz_open_procfs$namespace(r4, &(0x7f0000000000)='ns/cgroup\x00') ioctl$NS_GET_PARENT(r5, 0xb702, 0x0) (async) ioctl$NS_GET_PARENT(r5, 0xb702, 0x0) vmsplice$auto(0x1, &(0x7f0000000040)={&(0x7f0000000040), 0x1ffc0}, 0xa, 0x6) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000021}, 0x8004) 1.231363616s ago: executing program 6 (id=770): syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/mnt\x00') 1.167412983s ago: executing program 4 (id=771): close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) keyctl$auto(0x2, 0xd7, 0x5, 0x3, 0xb667) mmap$auto(0xfffffffffffffffc, 0x2000c, 0xdf, 0xeb1, 0x405, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) getrandom$auto(0x0, 0x6000000, 0x3) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) mbind$auto(0x0, 0x100000004, 0x100000000, 0x0, 0x20000000000006, 0x2) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) io_uring_setup$auto(0x2, 0x0) madvise$auto(0x0, 0x80000000, 0xe) mprotect$auto(0x1ffff000, 0x8000000000000001, 0x4) fanotify_init$auto(0x5, 0x2000000000002) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/mnt\x00') fanotify_mark$auto(0xffffffffffffffff, 0x69, 0x9, 0xffffffffffffffff, 0x0) fanotify_mark$auto(0x1000000000000, 0x65, 0x9, 0x1, 0x0) mlockall$auto(0xffffffff) process_vm_writev$auto(0xffffffffffffffff, &(0x7f0000000e00)={0x0, 0xb4}, 0x9, 0x0, 0x19c1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_SMC_PNETID(&(0x7f0000000180), 0xffffffffffffffff) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) io_uring_setup$auto(0x6, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) madvise$auto(0x0, 0x8000, 0xc) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) getdents$auto(0x0, 0x0, 0x18) 1.080143366s ago: executing program 6 (id=772): mmap$auto(0x0, 0x7, 0x3, 0xebe, 0xfffffffffffffffa, 0xc) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) select$auto(0xff, &(0x7f0000000080)={[0x9, 0xfffffffffffffffc, 0x4, 0xe, 0xc, 0x3, 0x3, 0x1ffe000, 0xcad, 0x2, 0x9, 0xf, 0xa654, 0x202, 0x9, 0x1]}, 0x0, 0x0, 0x0) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) mknod$auto(&(0x7f0000000180)=':,\x00', 0xc9, 0xfffffffa) madvise$auto(0x0, 0xffffffffffff0001, 0x15) execve$auto(&(0x7f0000000040)=':,\x00', &(0x7f00000000c0)=&(0x7f0000000080)='$+[-+\x98%(,\x00', 0x0) rseq$auto(&(0x7f0000000300)={0xe, 0x401, 0x0, 0x6, 0xffffffff, 0x2}, 0x8000, 0x0, 0x6) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) lsm_list_modules$auto(0x0, &(0x7f0000000100)=0xbefc, 0x0) semctl$auto(0x3, 0x2, 0x13, 0x9) seccomp$auto(0x1, 0x0, &(0x7f0000000040)) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x1000000000000007) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0xffffffffffff0001, 0x15) madvise$auto(0x0, 0xffffffffffff0005, 0x19) inotify_add_watch$auto(0xffffffffffffffff, 0x0, 0x1) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) fchdir$auto(r0) semget$auto(0x0, 0x6, 0x0) 900.084495ms ago: executing program 2 (id=773): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x10, 0x2, 0x0) sendmsg$auto_OVS_DP_CMD_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0f0026bd7000fcdbdf9907"], 0x24}, 0x1, 0x0, 0x0, 0x20000800}, 0x4) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x48000}, 0x0) mmap$auto(0x0, 0xc, 0x4000000000df, 0x44eb2, 0x10006, 0x300000000000) close_range$auto(0x2, 0x8000, 0x0) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x3) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1e00df45"], 0x1ac}}, 0x40000) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="1100000012"], 0x2c}, 0x1, 0x0, 0x0, 0x804}, 0x400c000) mprotect$auto(0x1ffff000, 0x8000000000000001, 0x4) sendmsg$auto_NCSI_CMD_SET_PACKAGE_MASK(r1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4c004}, 0x40080c0) r2 = syz_genetlink_get_family_id$auto_wireguard(&(0x7f0000001140), r0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_macsec(&(0x7f0000000380), r4) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000003c0)={'macsec0\x00', 0x0}) sendmsg$auto_MACSEC_CMD_UPD_OFFLOAD(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000400)={0x20, r5, 0x1, 0x70bd2a, 0x25dfdbff, {}, [@MACSEC_ATTR_OFFLOAD={0x4}, @MACSEC_ATTR_IFINDEX={0x8, 0x1, r6}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000001}, 0x40080) sendmsg$auto_WG_CMD_SET_DEVICE(r0, &(0x7f00000028c0)={0x0, 0x0, &(0x7f0000002880)={&(0x7f0000000000)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0026bd7000fedbdf25194e85b70033000000000000000000000000004699a28700"/45], 0x30}, 0x1, 0x0, 0x0, 0x841}, 0x80) 574.603112ms ago: executing program 6 (id=774): openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x131000, 0x1c0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x20009, 0x386, 0xeb1, 0x401, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket(0x2, 0x1, 0x0) socket(0x23, 0x2, 0x0) ioctl$auto(0x1, 0x89e0, 0x8) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_macsec(0x0, r0) syz_genetlink_get_family_id$auto_IPVS(0x0, 0xffffffffffffffff) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x9, 0x8000) mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x89fc, 0x0) r1 = gettid() mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x48000}, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x19) io_uring_setup$auto(0x6, 0x0) mmap$auto(0xf000, 0xd, 0x1000000003, 0x38, 0x5, 0x8000) io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x3) setsockopt$auto(0x3, 0x10f, 0x7f, 0x0, 0x14) process_vm_writev$auto(r1, &(0x7f0000002980)={0x0, 0x7ff}, 0x3, &(0x7f0000002a40)={0x0, 0x100000004007}, 0x4, 0x0) mmap$auto(0x0, 0x4, 0x4000000000e2, 0x40eb2, 0x402, 0x300000000000) 109.659268ms ago: executing program 1 (id=775): socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x4008810}, 0x20018010) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22240, 0x118) socket(0x2, 0x1, 0x0) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) connect$auto(0x3, &(0x7f00000001c0)={0x2, @sockaddr_1_1={"c2a172"}}, 0x55) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xfffffffffffefffd, 0x17) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x8, 0x3ff57696, 0x9b72, 0x5, 0x8000000000008000) madvise$auto(0x0, 0xffffffffffff0004, 0x19) socketpair$auto(0x101, 0x7f, 0x0, &(0x7f0000000040)=0x1e93) inotify_add_watch$auto(0x4, 0x0, 0x80000000) fsopen$auto(&(0x7f0000000100)='\x00', 0xfffffff2) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0x6, 0x4) shutdown$auto(0x200000003, 0x2) mmap$auto(0x3, 0x903, 0x59eb, 0x9b4, 0x2, 0x3) bind$auto(0x3, &(0x7f0000000080)={0x2, @sockaddr_1_1}, 0x6b) connect$auto(0x3, &(0x7f00000000c0)={0x2, @sockaddr_1_1}, 0x55) 0s ago: executing program 4 (id=776): ioperm$auto(0x7, 0x6, 0x2) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001300)={'batadv_slave_0\x00', 0x0}) prctl$auto(0x80012, 0x800000004, 0x200000, 0x48, 0x100000001) mmap$auto(0x0, 0x9, 0x3ff57696, 0x9b72, 0x2, 0x8000000000008000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x0, 0xffffffffffff0001, 0x15) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x848000000015, 0x805, 0x0) bind$auto(0x3, &(0x7f0000000000)={0x2, @sockaddr_1_1={"90927f"}}, 0x68) select$auto(0xfffffffd, 0x0, &(0x7f0000000100)={[0x20000000000d, 0x203, 0x0, 0x0, 0x9, 0x6, 0x1, 0x401, 0x2009, 0x5e582971, 0xff, 0xffffffffffffc820, 0x2000000000000004, 0x7, 0x74, 0xb]}, 0x0, 0x0) connect$auto(0x3, &(0x7f0000000140)={0xa, @sa_data_min="c4ae0000c5bc964100"}, 0x55) sendmsg$auto_HSR_C_GET_NODE_STATUS(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x200004d0}, 0x40) madvise$auto(0x0, 0xffffffffffff0005, 0x19) ioctl$auto(0xffffffffffffffff, 0x37, 0xfffffffffffffffe) rseq$auto(&(0x7f0000000300)={0xe, 0x401, 0x0, 0x6, 0xffffffff, 0x2}, 0x8000, 0x0, 0x6) clock_gettime$auto(0x8, 0x0) r3 = open(0x0, 0x1, 0x40) readv$auto(0x0, &(0x7f0000000040)={0x0, 0x800}, 0x8) r4 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000001480), r0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000000c0), r3) sendmsg$auto_NL80211_CMD_GET_INTERFACE(r5, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x20, r6, 0xb01, 0x70bd27, 0x25dfdbfb, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, 0x5}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x4000080) sendmsg$auto_ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f0000001cc0)={0x0, 0x0, &(0x7f0000001c80)={&(0x7f0000000100)={0x28, r4, 0x1, 0x70bd2a, 0x25dfdc00, {}, [@ETHTOOL_A_CHANNELS_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}, @ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x8800}, 0x0) sendmmsg$auto(0xffffffffffffffff, 0x0, 0x5, 0x20000000) mmap$auto(0x0, 0x8, 0x1000000004, 0x9b72, 0x2, 0x8000) mlock2$auto(0x6, 0x401, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.17' (ED25519) to the list of known hosts. [ 65.065163][ T5830] cgroup: Unknown subsys name 'net' [ 65.170904][ T5830] cgroup: Unknown subsys name 'cpuset' [ 65.179904][ T5830] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 66.522733][ T5830] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 68.305425][ T5845] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 68.313453][ T5845] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 68.323551][ T5845] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 68.331433][ T5845] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 68.340038][ T5845] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 68.348660][ T5845] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 68.356552][ T5845] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 68.363802][ T5845] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 68.372775][ T5845] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 68.378247][ T5852] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 68.380728][ T5845] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 68.394870][ T5845] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 68.398001][ T5853] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 68.402010][ T5855] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 68.411208][ T5853] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 68.416911][ T5845] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 68.431025][ T5855] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 68.431670][ T5853] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 68.446087][ T5853] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 68.446166][ T5845] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 68.461740][ T5855] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 68.470091][ T5855] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 68.470584][ T5846] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 68.489767][ T5846] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 68.859266][ T5843] chnl_net:caif_netlink_parms(): no params data found [ 68.922517][ T5841] chnl_net:caif_netlink_parms(): no params data found [ 68.946963][ T5840] chnl_net:caif_netlink_parms(): no params data found [ 68.973122][ T5839] chnl_net:caif_netlink_parms(): no params data found [ 69.036857][ T5843] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.044920][ T5843] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.052447][ T5843] bridge_slave_0: entered allmulticast mode [ 69.059789][ T5843] bridge_slave_0: entered promiscuous mode [ 69.069154][ T5843] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.076294][ T5843] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.083563][ T5843] bridge_slave_1: entered allmulticast mode [ 69.090587][ T5843] bridge_slave_1: entered promiscuous mode [ 69.156915][ T5840] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.166023][ T5840] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.173520][ T5840] bridge_slave_0: entered allmulticast mode [ 69.180497][ T5840] bridge_slave_0: entered promiscuous mode [ 69.190757][ T5843] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.230255][ T5840] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.237501][ T5840] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.244807][ T5840] bridge_slave_1: entered allmulticast mode [ 69.252468][ T5840] bridge_slave_1: entered promiscuous mode [ 69.260709][ T5843] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.279288][ T5841] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.286398][ T5841] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.293636][ T5841] bridge_slave_0: entered allmulticast mode [ 69.300332][ T5841] bridge_slave_0: entered promiscuous mode [ 69.307003][ T5839] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.316943][ T5839] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.324720][ T5839] bridge_slave_0: entered allmulticast mode [ 69.333766][ T5839] bridge_slave_0: entered promiscuous mode [ 69.356256][ T5841] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.363503][ T5841] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.370849][ T5841] bridge_slave_1: entered allmulticast mode [ 69.377660][ T5841] bridge_slave_1: entered promiscuous mode [ 69.384574][ T5839] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.394500][ T5839] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.402906][ T5839] bridge_slave_1: entered allmulticast mode [ 69.410353][ T5839] bridge_slave_1: entered promiscuous mode [ 69.424896][ T5843] team0: Port device team_slave_0 added [ 69.457968][ T5840] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.470162][ T5840] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.480989][ T5843] team0: Port device team_slave_1 added [ 69.499077][ T5839] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.510663][ T5839] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.535168][ T5841] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.547645][ T5841] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.592530][ T5840] team0: Port device team_slave_0 added [ 69.600783][ T5840] team0: Port device team_slave_1 added [ 69.607930][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.615075][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.641231][ T5843] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.666636][ T5839] team0: Port device team_slave_0 added [ 69.682057][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.689153][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.715211][ T5843] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.731328][ T5841] team0: Port device team_slave_0 added [ 69.739102][ T5839] team0: Port device team_slave_1 added [ 69.761081][ T5841] team0: Port device team_slave_1 added [ 69.778576][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.785562][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.812252][ T5840] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.866283][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.875811][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.902196][ T5840] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.916216][ T5843] hsr_slave_0: entered promiscuous mode [ 69.924985][ T5843] hsr_slave_1: entered promiscuous mode [ 69.938611][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.945599][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.971764][ T5839] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.002846][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.010023][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.036218][ T5841] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.049813][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.056791][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.083423][ T5841] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.095023][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.102230][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.128207][ T5839] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.154431][ T5840] hsr_slave_0: entered promiscuous mode [ 70.161068][ T5840] hsr_slave_1: entered promiscuous mode [ 70.167781][ T5840] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 70.175582][ T5840] Cannot create hsr debugfs directory [ 70.270965][ T5839] hsr_slave_0: entered promiscuous mode [ 70.277302][ T5839] hsr_slave_1: entered promiscuous mode [ 70.283292][ T5839] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 70.291275][ T5839] Cannot create hsr debugfs directory [ 70.313938][ T5841] hsr_slave_0: entered promiscuous mode [ 70.320821][ T5841] hsr_slave_1: entered promiscuous mode [ 70.326792][ T5841] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 70.334527][ T5841] Cannot create hsr debugfs directory [ 70.538443][ T54] Bluetooth: hci3: command tx timeout [ 70.538446][ T5846] Bluetooth: hci1: command tx timeout [ 70.538676][ T54] Bluetooth: hci0: command tx timeout [ 70.544101][ T5846] Bluetooth: hci2: command tx timeout [ 70.596312][ T5840] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 70.607889][ T5840] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 70.617560][ T5840] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 70.636467][ T5840] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 70.678211][ T5843] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 70.691346][ T5843] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 70.719025][ T5843] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 70.739967][ T5843] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 70.781194][ T5839] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 70.793576][ T5839] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 70.811847][ T5839] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 70.820914][ T5839] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 70.870026][ T5841] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 70.891482][ T5841] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 70.911512][ T5841] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 70.929317][ T5841] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 71.024333][ T5840] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.083413][ T5840] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.104041][ T5843] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.129654][ T3553] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.136844][ T3553] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.155648][ T5841] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.173842][ T5843] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.183956][ T3553] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.191144][ T3553] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.228213][ T5839] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.244963][ T3553] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.252487][ T3553] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.266499][ T5841] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.281377][ T3553] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.288580][ T3553] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.317961][ T3553] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.325076][ T3553] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.344483][ T3553] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.351707][ T3553] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.395396][ T5839] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.431387][ T3553] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.438551][ T3553] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.475040][ T3553] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.482243][ T3553] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.615415][ T5839] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 71.690640][ T5840] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.742383][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.751773][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.794464][ T5840] veth0_vlan: entered promiscuous mode [ 71.853376][ T5840] veth1_vlan: entered promiscuous mode [ 71.875609][ T5843] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.920268][ T5841] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.952720][ T5840] veth0_macvtap: entered promiscuous mode [ 71.964850][ T5840] veth1_macvtap: entered promiscuous mode [ 72.011932][ T5839] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.025890][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.050924][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.083718][ T5840] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.093659][ T5840] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.103011][ T5840] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.112334][ T5840] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.129753][ T5843] veth0_vlan: entered promiscuous mode [ 72.146981][ T5841] veth0_vlan: entered promiscuous mode [ 72.193037][ T5843] veth1_vlan: entered promiscuous mode [ 72.203245][ T5841] veth1_vlan: entered promiscuous mode [ 72.265068][ T5839] veth0_vlan: entered promiscuous mode [ 72.289617][ T3553] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.300393][ T5839] veth1_vlan: entered promiscuous mode [ 72.310265][ T3553] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.332741][ T5843] veth0_macvtap: entered promiscuous mode [ 72.349936][ T5843] veth1_macvtap: entered promiscuous mode [ 72.385693][ T3553] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.403070][ T3553] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.404185][ T5841] veth0_macvtap: entered promiscuous mode [ 72.425018][ T5841] veth1_macvtap: entered promiscuous mode [ 72.443214][ T5839] veth0_macvtap: entered promiscuous mode [ 72.452895][ T5843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.465301][ T5843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.480675][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.491351][ T5843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.502538][ T5843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.514985][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.524814][ T5839] veth1_macvtap: entered promiscuous mode [ 72.540180][ T5840] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 72.546584][ T5843] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.566751][ T5843] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.577519][ T5843] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.586253][ T5843] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.601496][ T5841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.612350][ T5841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.622356][ T5156] Bluetooth: hci1: command tx timeout [ 72.628315][ T5156] Bluetooth: hci3: command tx timeout [ 72.628658][ T54] Bluetooth: hci2: command tx timeout [ 72.637166][ T5846] Bluetooth: hci0: command tx timeout [ 72.639419][ T5841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.655826][ T5841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.669601][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.689279][ T5841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.701547][ T5841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.712401][ T5841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.723024][ T5841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.734197][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.745697][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.756877][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.772355][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.783119][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.793179][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.803819][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.815967][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.885629][ T5841] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.902141][ T5841] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.915123][ T5841] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.926400][ T5841] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.940720][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.952175][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.962168][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.972636][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.982667][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.993303][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.004416][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.032206][ T5839] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.041071][ T5839] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.052063][ T5839] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.061428][ T5839] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.229224][ T211] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.254332][ T211] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.316186][ T211] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.324737][ T211] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.361875][ T3362] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.374664][ T211] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.390618][ T3362] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.406252][ T211] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.457738][ T3362] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.465613][ T3362] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.621526][ T67] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.632420][ T67] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.001508][ T5921] Zero length message leads to an empty skb [ 74.698282][ T5846] Bluetooth: hci2: command tx timeout [ 74.708698][ T5846] Bluetooth: hci0: command tx timeout [ 74.710053][ T54] Bluetooth: hci3: command tx timeout [ 74.870120][ T11] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.964126][ T11] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.073232][ T11] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.324871][ T11] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.561136][ T11] bridge_slave_1: left allmulticast mode [ 75.568101][ T11] bridge_slave_1: left promiscuous mode [ 75.574366][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.597707][ T5846] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 75.617484][ T5846] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 75.625715][ T5846] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 75.626335][ T11] bridge_slave_0: left allmulticast mode [ 75.646466][ T11] bridge_slave_0: left promiscuous mode [ 75.653032][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.771735][ T5846] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 75.780567][ T5846] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 75.790987][ T5846] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 75.816288][ T5960] process 'syz.2.19' launched ':,' with NULL argv: empty string added [ 76.827419][ T5846] Bluetooth: hci0: command tx timeout [ 76.832942][ T5846] Bluetooth: hci3: command tx timeout [ 76.839445][ T5846] Bluetooth: hci2: command tx timeout [ 77.098766][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 77.139489][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 77.186017][ T11] bond0 (unregistering): Released all slaves [ 77.819751][ T54] Bluetooth: hci1: command tx timeout [ 78.048856][ T5997] mmap: syz.2.22 (5997) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 78.112357][ T5955] chnl_net:caif_netlink_parms(): no params data found [ 78.283834][ T11] hsr_slave_0: left promiscuous mode [ 78.297280][ T11] hsr_slave_1: left promiscuous mode [ 78.322830][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 78.334344][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 78.353281][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 78.379001][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 78.430901][ T11] veth1_macvtap: left promiscuous mode [ 78.436937][ T11] veth0_macvtap: left promiscuous mode [ 78.459073][ T11] veth1_vlan: left promiscuous mode [ 78.464689][ T11] veth0_vlan: left promiscuous mode [ 79.055856][ T11] team0 (unregistering): Port device team_slave_1 removed [ 79.097056][ T11] team0 (unregistering): Port device team_slave_0 removed [ 79.477900][ T6001] netlink: 346 bytes leftover after parsing attributes in process `syz.1.23'. [ 79.617035][ T5955] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.633652][ T5955] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.642381][ T5955] bridge_slave_0: entered allmulticast mode [ 79.661867][ T5955] bridge_slave_0: entered promiscuous mode [ 79.675810][ T5955] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.684187][ T5955] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.699453][ T5955] bridge_slave_1: entered allmulticast mode [ 79.706880][ T5955] bridge_slave_1: entered promiscuous mode [ 79.778395][ T5955] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.806081][ T5955] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.883436][ T5955] team0: Port device team_slave_0 added [ 79.900975][ T5955] team0: Port device team_slave_1 added [ 79.907349][ T54] Bluetooth: hci1: command tx timeout [ 79.957770][ T5955] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.965035][ T5955] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.991605][ T5955] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.005928][ T5955] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.013279][ T5955] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.040098][ T5955] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.127395][ T5955] hsr_slave_0: entered promiscuous mode [ 80.144415][ T5955] hsr_slave_1: entered promiscuous mode [ 80.155937][ T5955] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 80.174119][ T5955] Cannot create hsr debugfs directory [ 80.373411][ T5955] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 80.392510][ T5955] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 80.403202][ T5955] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 80.422797][ T5955] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 80.484808][ T5955] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.492144][ T5955] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.500888][ T5955] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.508079][ T5955] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.561049][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.607819][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.810276][ T5955] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.863324][ T5955] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.900054][ T3553] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.907219][ T3553] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.945164][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.952372][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.051985][ T5955] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 81.372706][ T5955] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.908968][ T5955] veth0_vlan: entered promiscuous mode [ 81.934517][ T5955] veth1_vlan: entered promiscuous mode [ 81.977499][ T54] Bluetooth: hci1: command tx timeout [ 82.028767][ T5955] veth0_macvtap: entered promiscuous mode [ 82.090417][ T5955] veth1_macvtap: entered promiscuous mode [ 82.132761][ T5955] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.163624][ T5955] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.196286][ T5955] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.217315][ T5955] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.247489][ T5955] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.288590][ T5955] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.318854][ T5955] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.383071][ T5955] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.407581][ T5955] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.427197][ T5955] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.447139][ T5955] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.457005][ T5955] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.497260][ T5955] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.518566][ T5955] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.526499][ T6081] netlink: 346 bytes leftover after parsing attributes in process `syz.1.31'. [ 82.568822][ T5955] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.597199][ T5955] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.606913][ T5955] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.637303][ T5955] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.873770][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.907208][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.995878][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.012914][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.100835][ T54] Bluetooth: hci1: command tx timeout [ 84.477279][ T6145] HSR: entered promiscuous mode [ 84.552929][ T6147] netlink: 346 bytes leftover after parsing attributes in process `syz.2.41'. [ 84.727667][ T6149] can: request_module (can-proto-3) failed. [ 85.045172][ T6167] netlink: 28 bytes leftover after parsing attributes in process `syz.4.46'. [ 85.495424][ T6185] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 87.116478][ T46] cfg80211: failed to load regulatory.db [ 87.969329][ T6241] workqueue: name exceeds WQ_NAME_LEN. Truncating to: ýÿÿÿÿÿÿÿ-œä¾ž6y“Õ¼ŸŠ÷ k†Áa;« [ 88.527706][ T6245] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 89.169745][ T6254] netlink: 342 bytes leftover after parsing attributes in process `syz.2.59'. [ 91.481112][ T6293] ======================================================= [ 91.481112][ T6293] WARNING: The mand mount option has been deprecated and [ 91.481112][ T6293] and is ignored by this kernel. Remove the mand [ 91.481112][ T6293] option from the mount to silence this warning. [ 91.481112][ T6293] ======================================================= [ 93.412307][ T6338] netlink: 8 bytes leftover after parsing attributes in process `syz.3.79'. [ 94.214721][ T6358] netlink: 4 bytes leftover after parsing attributes in process `syz.2.82'. [ 96.170619][ T6391] netlink: 28 bytes leftover after parsing attributes in process `syz.1.91'. [ 102.701060][ T6545] netlink: 346 bytes leftover after parsing attributes in process `syz.2.103'. [ 104.117440][ T6584] netlink: 346 bytes leftover after parsing attributes in process `syz.3.114'. [ 105.635652][ T6620] syz.3.124 uses obsolete (PF_INET,SOCK_PACKET) [ 109.182721][ T6703] netlink: 4 bytes leftover after parsing attributes in process `syz.4.148'. [ 109.780464][ T6718] netlink: 338 bytes leftover after parsing attributes in process `syz.3.151'. [ 110.707219][ T6750] bridge0: port 3(syz_tun) entered blocking state [ 110.713898][ T6750] bridge0: port 3(syz_tun) entered disabled state [ 110.720866][ T6750] syz_tun: entered allmulticast mode [ 110.727421][ T6750] syz_tun: entered promiscuous mode [ 110.733344][ T6750] bridge0: port 3(syz_tun) entered blocking state [ 110.739932][ T6750] bridge0: port 3(syz_tun) entered forwarding state [ 111.382711][ T6761] netlink: 346 bytes leftover after parsing attributes in process `syz.4.162'. [ 112.069195][ T6776] netlink: 50 bytes leftover after parsing attributes in process `syz.2.163'. [ 113.228642][ T6794] netlink: 24 bytes leftover after parsing attributes in process `syz.2.172'. [ 113.592709][ T6803] netlink: 346 bytes leftover after parsing attributes in process `syz.3.173'. [ 114.122108][ T6809] netlink: 338 bytes leftover after parsing attributes in process `syz.3.176'. [ 115.938212][ T6834] netlink: 32 bytes leftover after parsing attributes in process `syz.2.184'. [ 116.264277][ T6844] netlink: 342 bytes leftover after parsing attributes in process `syz.2.187'. [ 116.283204][ T6844] netlink: 342 bytes leftover after parsing attributes in process `syz.2.187'. [ 121.612547][ T6950] netlink: 28 bytes leftover after parsing attributes in process `syz.4.213'. [ 122.580346][ T6963] netlink: 8 bytes leftover after parsing attributes in process `syz.3.214'. [ 123.099674][ T6950] team0 (unregistering): Port device team_slave_0 removed [ 123.152758][ T6950] team0 (unregistering): Port device team_slave_1 removed [ 123.264180][ T6955] netlink: 334 bytes leftover after parsing attributes in process `syz.3.214'. [ 124.982745][ T7021] FAULT_INJECTION: forcing a failure. [ 124.982745][ T7021] name failslab, interval 1, probability 0, space 0, times 1 [ 125.057771][ T7021] CPU: 0 UID: 0 PID: 7021 Comm: syz.4.230 Not tainted 6.12.0-syzkaller-01782-gbf9aa14fc523 #0 [ 125.068099][ T7021] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 125.078190][ T7021] Call Trace: [ 125.081492][ T7021] [ 125.084448][ T7021] dump_stack_lvl+0x16c/0x1f0 [ 125.089173][ T7021] should_fail_ex+0x497/0x5b0 [ 125.093890][ T7021] ? fs_reclaim_acquire+0xae/0x150 [ 125.099044][ T7021] should_failslab+0xc2/0x120 [ 125.103756][ T7021] kmem_cache_alloc_node_noprof+0x71/0x310 [ 125.109609][ T7021] ? __alloc_skb+0x2b3/0x380 [ 125.114254][ T7021] __alloc_skb+0x2b3/0x380 [ 125.118712][ T7021] ? __pfx___alloc_skb+0x10/0x10 [ 125.123690][ T7021] ? tcp_set_state+0x14c/0x850 [ 125.128501][ T7021] tcp_send_active_reset+0x8b/0x830 [ 125.133834][ T7021] ? mark_lock+0xb5/0xc60 [ 125.138214][ T7021] tcp_disconnect+0x1523/0x1e90 [ 125.143109][ T7021] __inet_stream_connect+0x245/0x1020 [ 125.148517][ T7021] ? find_held_lock+0x2d/0x110 [ 125.153331][ T7021] ? __pfx___inet_stream_connect+0x10/0x10 [ 125.159177][ T7021] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 125.164600][ T7021] ? __pfx_inet_stream_connect+0x10/0x10 [ 125.170272][ T7021] ? mark_held_locks+0x9f/0xe0 [ 125.175090][ T7021] ? inet_stream_connect+0x43/0xa0 [ 125.180261][ T7021] ? __local_bh_enable_ip+0xa4/0x120 [ 125.185599][ T7021] ? __pfx_inet_stream_connect+0x10/0x10 [ 125.191272][ T7021] inet_stream_connect+0x57/0xa0 [ 125.196252][ T7021] __sys_connect_file+0x13e/0x1a0 [ 125.201323][ T7021] __sys_connect+0x14f/0x170 [ 125.205959][ T7021] ? __pfx___sys_connect+0x10/0x10 [ 125.211132][ T7021] ? __pfx_ksys_write+0x10/0x10 [ 125.216029][ T7021] __x64_sys_connect+0x72/0xb0 [ 125.220833][ T7021] ? lockdep_hardirqs_on+0x7c/0x110 [ 125.226087][ T7021] do_syscall_64+0xcd/0x250 [ 125.230623][ T7021] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.236565][ T7021] RIP: 0033:0x7f3740b7e819 [ 125.241113][ T7021] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 125.260784][ T7021] RSP: 002b:00007f37419ea038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 125.269331][ T7021] RAX: ffffffffffffffda RBX: 00007f3740d36080 RCX: 00007f3740b7e819 [ 125.277342][ T7021] RDX: 0000000000000054 RSI: 0000000000000000 RDI: 0000000000000003 [ 125.285349][ T7021] RBP: 00007f37419ea090 R08: 0000000000000000 R09: 0000000000000000 [ 125.293353][ T7021] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 125.301358][ T7021] R13: 0000000000000000 R14: 00007f3740d36080 R15: 00007ffcef59a048 [ 125.309389][ T7021] [ 125.590281][ T7033] netlink: 24 bytes leftover after parsing attributes in process `syz.1.237'. [ 125.697751][ T7042] nbd: couldn't find a device at index -4 [ 126.133619][ T7042] nfsd: Unknown parameter 'IPVS' [ 126.511403][ T29] audit: type=1326 audit(1732120309.512:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7038 comm="syz.2.236" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff57b77e819 code=0x0 [ 127.503788][ T7072] netlink: 28 bytes leftover after parsing attributes in process `syz.4.248'. [ 127.797717][ T7072] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 127.850648][ T7072] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 127.879315][ T7072] bond0 (unregistering): Released all slaves [ 129.588415][ T7115] netlink: 346 bytes leftover after parsing attributes in process `syz.1.260'. [ 131.780294][ T7168] netlink: 338 bytes leftover after parsing attributes in process `syz.1.273'. [ 132.205741][ T7176] netlink: 330 bytes leftover after parsing attributes in process `syz.3.277'. [ 132.422977][ T7187] bridge0: port 3(syz_tun) entered blocking state [ 132.452675][ T7187] bridge0: port 3(syz_tun) entered disabled state [ 132.472888][ T7187] syz_tun: entered allmulticast mode [ 132.491100][ T7187] syz_tun: entered promiscuous mode [ 132.506409][ T7187] bridge0: port 3(syz_tun) entered blocking state [ 132.513066][ T7187] bridge0: port 3(syz_tun) entered forwarding state [ 132.974683][ T7203] netlink: 338 bytes leftover after parsing attributes in process `syz.3.284'. [ 133.180099][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.186643][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.517218][ T7218] netlink: 346 bytes leftover after parsing attributes in process `syz.1.288'. [ 136.768013][ T7296] netlink: 20 bytes leftover after parsing attributes in process `syz.1.305'. [ 138.847825][ T7347] bridge0: port 3(syz_tun) entered blocking state [ 138.897306][ T7347] bridge0: port 3(syz_tun) entered disabled state [ 138.908876][ T7347] syz_tun: entered allmulticast mode [ 138.948435][ T7347] syz_tun: entered promiscuous mode [ 139.014518][ T7347] bridge0: port 3(syz_tun) entered blocking state [ 139.021165][ T7347] bridge0: port 3(syz_tun) entered forwarding state [ 139.867645][ T7362] netlink: 4 bytes leftover after parsing attributes in process `syz.1.321'. [ 139.985559][ T7370] netlink: 'syz.2.324': attribute type 11 has an invalid length. [ 140.117466][ T7370] netlink: 264 bytes leftover after parsing attributes in process `syz.2.324'. [ 140.193669][ T7373] netlink: 8 bytes leftover after parsing attributes in process `syz.2.324'. [ 142.927653][ T7399] netlink: 8 bytes leftover after parsing attributes in process `syz.3.332'. [ 146.237557][ T7443] delete_channel: no stack [ 146.343041][ T7447] Invalid ELF header magic: != ELF [ 146.941866][ T7462] netlink: 4 bytes leftover after parsing attributes in process `syz.2.349'. [ 146.983726][ T7462] netlink: 32 bytes leftover after parsing attributes in process `syz.2.349'. [ 147.181969][ T7464] netlink: 4 bytes leftover after parsing attributes in process `syz.2.350'. [ 147.548598][ T7467] netlink: 28 bytes leftover after parsing attributes in process `syz.2.350'. [ 151.513934][ T7502] nbd: couldn't find a device at index -4 [ 151.810806][ T7502] nfsd: Unknown parameter 'IPVS' [ 151.929515][ T7504] netlink: 330 bytes leftover after parsing attributes in process `syz.4.357'. [ 151.999165][ T29] audit: type=1326 audit(1732120335.012:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7501 comm="syz.3.358" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f3b3397e819 code=0x0 [ 153.242754][ T7517] netlink: 346 bytes leftover after parsing attributes in process `syz.2.362'. [ 153.784679][ T7525] netlink: Conntrack attr has 177 unknown bytes [ 154.130744][ T7532] netlink: 4 bytes leftover after parsing attributes in process `syz.2.368'. [ 156.662075][ T7554] syz.2.372 (7554) used greatest stack depth: 21120 bytes left [ 156.698963][ T7562] netlink: 16 bytes leftover after parsing attributes in process `syz.3.375'. [ 157.347684][ T7572] netlink: Conntrack attr has 177 unknown bytes [ 158.068848][ T7560] ptrace attach of "./syz-executor exec"[5955] was attempted by "./syz-executor exec"[7560] [ 158.443019][ T7484] syz.1.351 (7484) used greatest stack depth: 18912 bytes left [ 158.993607][ T7588] netlink: 'syz.2.383': attribute type 11 has an invalid length. [ 159.029566][ T7588] netlink: 'syz.2.383': attribute type 11 has an invalid length. [ 159.322217][ T7312] syz.1.305 (7312) used greatest stack depth: 18832 bytes left [ 160.031185][ T7604] netlink: 4 bytes leftover after parsing attributes in process `syz.3.385'. [ 160.177187][ T7608] netlink: 310 bytes leftover after parsing attributes in process `syz.2.387'. [ 160.484906][ T7604] netlink: 28 bytes leftover after parsing attributes in process `syz.3.385'. [ 162.491847][ T7649] netlink: 346 bytes leftover after parsing attributes in process `syz.2.398'. [ 163.662851][ T7669] delete_channel: no stack [ 164.311300][ T7690] netlink: 346 bytes leftover after parsing attributes in process `syz.2.408'. [ 165.541436][ T7706] sctp: [Deprecated]: syz.2.412 (pid 7706) Use of struct sctp_assoc_value in delayed_ack socket option. [ 165.541436][ T7706] Use struct sctp_sack_info instead [ 167.495874][ T7737] nbd: couldn't find a device at index -4 [ 168.736973][ T7737] nfsd: Unknown parameter 'IPVS' [ 168.806341][ T7758] netlink: 334 bytes leftover after parsing attributes in process `syz.2.424'. [ 169.137051][ T29] audit: type=1326 audit(1732120352.132:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7734 comm="syz.4.419" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f3740b7e819 code=0x0 [ 170.313385][ T7768] ptrace attach of "./syz-executor exec"[5841] was attempted by "./syz-executor exec"[7768] [ 170.902785][ T7345] syz.1.315 (7345) used greatest stack depth: 17184 bytes left [ 171.965249][ T7805] nbd: couldn't find a device at index -4 [ 173.193146][ T7815] netlink: 24 bytes leftover after parsing attributes in process `syz.2.441'. [ 173.533090][ T7805] nfsd: Unknown parameter 'IPVS' [ 173.637666][ T29] audit: type=1326 audit(1732120356.652:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7803 comm="syz.1.437" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb6f2f7e819 code=0x0 [ 174.317161][ T29] audit: type=1107 audit(1732120357.322:6): pid=7844 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 179.590265][ T7908] netlink: 8 bytes leftover after parsing attributes in process `syz.1.465'. [ 179.819490][ T29] audit: type=1804 audit(1732120362.832:7): pid=7908 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.465" name="#)-\&[}" dev="mqueue" ino=15665 res=1 errno=0 [ 179.849703][ T7908] kernel read not supported for file /#)-\&[} (pid: 7908 comm: syz.1.465) [ 179.948941][ T29] audit: type=1804 audit(1732120362.962:8): pid=7919 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.465" name="#)-\&[}" dev="mqueue" ino=15665 res=1 errno=0 [ 180.027247][ T29] audit: type=1804 audit(1732120362.982:9): pid=7919 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.465" name="#)-\&[}" dev="mqueue" ino=15665 res=1 errno=0 [ 180.141225][ T29] audit: type=1800 audit(1732120363.012:10): pid=7908 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.465" name="#)-\&[}" dev="mqueue" ino=15665 res=0 errno=0 [ 180.693867][ T7904] GUP no longer grows the stack in syz.1.465 (7904): 14000-41000 (4000) [ 180.795722][ T7904] CPU: 0 UID: 0 PID: 7904 Comm: syz.1.465 Not tainted 6.12.0-syzkaller-01782-gbf9aa14fc523 #0 [ 180.806051][ T7904] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 180.816171][ T7904] Call Trace: [ 180.819481][ T7904] [ 180.822443][ T7904] dump_stack_lvl+0x16c/0x1f0 [ 180.827181][ T7904] gup_vma_lookup+0x1d2/0x220 [ 180.831913][ T7904] __get_user_pages+0x236/0x3b50 [ 180.836918][ T7904] ? hlock_class+0x4e/0x130 [ 180.841468][ T7904] ? __lock_acquire+0x15a9/0x3c40 [ 180.846542][ T7904] ? __pfx___get_user_pages+0x10/0x10 [ 180.851994][ T7904] __gup_longterm_locked+0x211/0x1870 [ 180.857420][ T7904] ? __pfx___lock_acquire+0x10/0x10 [ 180.862679][ T7904] ? __pfx___gup_longterm_locked+0x10/0x10 [ 180.868520][ T7904] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 180.874202][ T7904] ? rwsem_read_trylock+0x12d/0x250 [ 180.879441][ T7904] ? __pfx_rwsem_read_trylock+0x10/0x10 [ 180.885033][ T7904] ? process_vm_rw_core.constprop.0+0x40d/0x9f0 [ 180.891331][ T7904] pin_user_pages_remote+0xee/0x150 [ 180.896574][ T7904] ? __pfx_pin_user_pages_remote+0x10/0x10 [ 180.902423][ T7904] ? down_read+0xc9/0x330 [ 180.906784][ T7904] process_vm_rw_core.constprop.0+0x439/0x9f0 [ 180.912898][ T7904] ? __pfx_process_vm_rw_core.constprop.0+0x10/0x10 [ 180.919535][ T7904] process_vm_rw+0x301/0x360 [ 180.924146][ T7904] ? __pfx_process_vm_rw+0x10/0x10 [ 180.929273][ T7904] ? __pfx_futex_wake+0x10/0x10 [ 180.934188][ T7904] ? __pfx_task_mm_cid_work+0x10/0x10 [ 180.939606][ T7904] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 180.945016][ T7904] ? xfd_validate_state+0x5d/0x180 [ 180.950153][ T7904] ? rcu_is_watching+0x12/0xc0 [ 180.954939][ T7904] __x64_sys_process_vm_readv+0xe2/0x1c0 [ 180.960592][ T7904] ? do_syscall_64+0x91/0x250 [ 180.965298][ T7904] ? lockdep_hardirqs_on+0x7c/0x110 [ 180.970605][ T7904] do_syscall_64+0xcd/0x250 [ 180.975121][ T7904] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 180.981476][ T7904] RIP: 0033:0x7fb6f2f7e819 [ 180.985903][ T7904] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 181.005551][ T7904] RSP: 002b:00007fb6f3d07038 EFLAGS: 00000246 ORIG_RAX: 0000000000000136 [ 181.013990][ T7904] RAX: ffffffffffffffda RBX: 00007fb6f3135fa0 RCX: 00007fb6f2f7e819 [ 181.021982][ T7904] RDX: 0000000000000004 RSI: 0000000020000340 RDI: 000000000000015f [ 181.029964][ T7904] RBP: 00007fb6f2ff175e R08: 0000000000000006 R09: 0000000000000000 [ 181.037965][ T7904] R10: 00000000200000c0 R11: 0000000000000246 R12: 0000000000000000 [ 181.045956][ T7904] R13: 0000000000000000 R14: 00007fb6f3135fa0 R15: 00007fff84275db8 [ 181.054042][ T7904] [ 181.697785][ T7940] netlink: 4 bytes leftover after parsing attributes in process `syz.2.473'. [ 181.934263][ T7945] bridge0: port 4(veth1_macvtap) entered blocking state [ 181.993659][ T7945] bridge0: port 4(veth1_macvtap) entered disabled state [ 182.027413][ T7945] veth1_macvtap: entered allmulticast mode [ 182.070219][ T7945] veth1_macvtap: left allmulticast mode [ 183.010603][ T7961] netlink: 338 bytes leftover after parsing attributes in process `syz.3.478'. [ 183.039135][ T7963] netlink: 'syz.2.479': attribute type 11 has an invalid length. [ 183.058049][ T7963] netlink: 264 bytes leftover after parsing attributes in process `syz.2.479'. [ 183.118229][ T7965] netlink: 28 bytes leftover after parsing attributes in process `syz.2.479'. [ 184.379309][ T7989] ptrace attach of "./syz-executor exec"[5841] was attempted by "./syz-executor exec ASAN_OPTIONS=handle_segv=0 allow_user_segv_handler=1 detect_leaks=0 GLIBC_TUNABLES=glibc.pthread.rseq=0 ./syz-executor"[7989] [ 184.658976][ T8001] FAULT_INJECTION: forcing a failure. [ 184.658976][ T8001] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 184.721320][ T8001] CPU: 0 UID: 0 PID: 8001 Comm: syz.4.489 Not tainted 6.12.0-syzkaller-01782-gbf9aa14fc523 #0 [ 184.731651][ T8001] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 184.741835][ T8001] Call Trace: [ 184.745139][ T8001] [ 184.748098][ T8001] dump_stack_lvl+0x16c/0x1f0 [ 184.752823][ T8001] should_fail_ex+0x497/0x5b0 [ 184.757542][ T8001] _copy_from_user+0x2e/0xd0 [ 184.762830][ T8001] copy_msghdr_from_user+0x99/0x160 [ 184.768083][ T8001] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 184.773950][ T8001] ___sys_sendmsg+0xff/0x1e0 [ 184.778581][ T8001] ? __pfx____sys_sendmsg+0x10/0x10 [ 184.783828][ T8001] ? __pfx_lock_release+0x10/0x10 [ 184.788898][ T8001] ? trace_lock_acquire+0x14a/0x1d0 [ 184.794150][ T8001] ? __fget_files+0x206/0x3a0 [ 184.798900][ T8001] __sys_sendmsg+0x16e/0x220 [ 184.803546][ T8001] ? __pfx___sys_sendmsg+0x10/0x10 [ 184.808719][ T8001] do_syscall_64+0xcd/0x250 [ 184.813265][ T8001] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 184.819213][ T8001] RIP: 0033:0x7f3740b7e819 [ 184.823745][ T8001] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 184.843386][ T8001] RSP: 002b:00007f3741a0b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 184.851838][ T8001] RAX: ffffffffffffffda RBX: 00007f3740d35fa0 RCX: 00007f3740b7e819 [ 184.859843][ T8001] RDX: 0000000000040000 RSI: 0000000020000240 RDI: 0000000000000003 [ 184.867846][ T8001] RBP: 00007f3741a0b090 R08: 0000000000000000 R09: 0000000000000000 [ 184.875847][ T8001] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 184.883954][ T8001] R13: 0000000000000000 R14: 00007f3740d35fa0 R15: 00007ffcef59a048 [ 184.891977][ T8001] [ 185.026553][ T8003] netlink: 338 bytes leftover after parsing attributes in process `syz.3.490'. [ 185.764707][ T8018] netlink: 8 bytes leftover after parsing attributes in process `syz.3.493'. [ 185.829546][ T8019] kernel read not supported for file /#)-\&[} (pid: 8019 comm: syz.3.493) [ 185.829618][ T29] audit: type=1804 audit(1732120368.842:11): pid=8019 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.493" name="#)-\&[}" dev="mqueue" ino=15847 res=1 errno=0 [ 185.911922][ T29] audit: type=1800 audit(1732120368.852:12): pid=8019 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.493" name="#)-\&[}" dev="mqueue" ino=15847 res=0 errno=0 [ 185.957146][ T29] audit: type=1804 audit(1732120368.912:13): pid=8018 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.493" name="#)-\&[}" dev="mqueue" ino=15847 res=1 errno=0 [ 185.997347][ T29] audit: type=1804 audit(1732120368.912:14): pid=8018 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.493" name="#)-\&[}" dev="mqueue" ino=15847 res=1 errno=0 [ 186.947058][ T8024] netlink: 4 bytes leftover after parsing attributes in process `syz.2.496'. [ 187.352380][ T8016] netlink: 8 bytes leftover after parsing attributes in process `syz.1.495'. [ 191.577283][ T5156] Bluetooth: hci0: command 0x0406 tx timeout [ 191.577291][ T5845] Bluetooth: hci3: command 0x0406 tx timeout [ 191.585334][ T5855] Bluetooth: hci2: command 0x0406 tx timeout [ 194.630082][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.637193][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 201.817189][ T54] Bluetooth: hci1: command 0x0406 tx timeout [ 202.936670][ T8135] netlink: 20 bytes leftover after parsing attributes in process `syz.2.526'. [ 202.973032][ T8134] netlink: 20 bytes leftover after parsing attributes in process `syz.2.526'. [ 209.084349][ T8163] nfs: Unknown parameter ' ' [ 209.103377][ T8165] nfs: Unknown parameter ' ' [ 209.896607][ T8179] netlink: 4 bytes leftover after parsing attributes in process `syz.4.537'. [ 210.724268][ T8198] ptrace attach of "./syz-executor exec"[5843] was attempted by "./syz-executor exec"[8198] [ 210.765183][ T8198] netlink: 28 bytes leftover after parsing attributes in process `syz.1.542'. [ 210.796504][ T8198] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 210.812367][ T8195] nbd: socks must be embedded in a SOCK_ITEM attr [ 210.874263][ T8198] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 210.931549][ T8198] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 210.940238][ T8198] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 210.964163][ T8195] netlink: set zone limit has 4 unknown bytes [ 211.005776][ T8195] netlink: 8 bytes leftover after parsing attributes in process `syz.4.540'. [ 211.642396][ T8218] Process accounting resumed [ 212.761155][ T8260] Process accounting resumed [ 212.836017][ T8264] netlink: 28 bytes leftover after parsing attributes in process `syz.4.561'. [ 216.617424][ T8342] netlink: 342 bytes leftover after parsing attributes in process `syz.1.583'. [ 216.931641][ T8350] netlink: 12 bytes leftover after parsing attributes in process `syz.1.585'. [ 219.087327][ T8389] nbd: socks must be embedded in a SOCK_ITEM attr [ 219.192291][ T8389] netlink: set zone limit has 4 unknown bytes [ 219.257294][ T8389] netlink: 8 bytes leftover after parsing attributes in process `syz.1.595'. [ 219.322481][ T8155] bridge0: port 3(syz_tun) entered disabled state [ 219.447727][ T8155] syz_tun (unregistering): left allmulticast mode [ 219.457220][ T8155] syz_tun (unregistering): left promiscuous mode [ 219.463666][ T8155] bridge0: port 3(syz_tun) entered disabled state [ 219.554350][ T8395] ptrace attach of "./syz-executor exec"[5841] was attempted by "./syz-executor exec"[8395] [ 219.554429][ T54] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 219.577950][ T54] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 219.586757][ T54] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 219.595572][ T8395] netlink: 28 bytes leftover after parsing attributes in process `syz.2.596'. [ 219.608719][ T54] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 219.608759][ T8395] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 219.626522][ T54] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 219.636584][ T54] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 219.674261][ T8395] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 219.700985][ T8395] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 219.731058][ T8395] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 220.212983][ T67] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.356910][ T67] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.539857][ T67] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.745873][ T8415] netlink: 350 bytes leftover after parsing attributes in process `syz.4.603'. [ 220.761049][ T67] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.237043][ T8394] chnl_net:caif_netlink_parms(): no params data found [ 221.297675][ T67] bridge_slave_1: left allmulticast mode [ 221.310610][ T67] bridge_slave_1: left promiscuous mode [ 221.322588][ T67] bridge0: port 2(bridge_slave_1) entered disabled state [ 221.362183][ T67] bridge_slave_0: left allmulticast mode [ 221.368244][ T67] bridge_slave_0: left promiscuous mode [ 221.375372][ T67] bridge0: port 1(bridge_slave_0) entered disabled state [ 221.658646][ T5850] Bluetooth: hci0: command tx timeout [ 222.383625][ T67] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 222.408032][ T67] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 222.433456][ T67] bond0 (unregistering): Released all slaves [ 222.530365][ T67] HSR: left promiscuous mode [ 222.817209][ T8394] bridge0: port 1(bridge_slave_0) entered blocking state [ 222.824402][ T8394] bridge0: port 1(bridge_slave_0) entered disabled state [ 222.833817][ T8394] bridge_slave_0: entered allmulticast mode [ 222.841501][ T8394] bridge_slave_0: entered promiscuous mode [ 222.849347][ T8394] bridge0: port 2(bridge_slave_1) entered blocking state [ 222.856485][ T8394] bridge0: port 2(bridge_slave_1) entered disabled state [ 222.863784][ T8394] bridge_slave_1: entered allmulticast mode [ 222.870943][ T8394] bridge_slave_1: entered promiscuous mode [ 222.979285][ T8394] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 223.042143][ T8394] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 223.142152][ T8394] team0: Port device team_slave_0 added [ 223.169361][ T8394] team0: Port device team_slave_1 added [ 223.264181][ T8394] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 223.276113][ T8394] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 223.338640][ T8394] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 223.391935][ T8394] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 223.400718][ T8394] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 223.450772][ T8394] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 223.737828][ T5850] Bluetooth: hci0: command tx timeout [ 223.951305][ T8394] hsr_slave_0: entered promiscuous mode [ 223.967999][ T8394] hsr_slave_1: entered promiscuous mode [ 223.974369][ T8394] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 223.983198][ T8394] Cannot create hsr debugfs directory [ 224.022997][ T67] hsr_slave_0: left promiscuous mode [ 224.029477][ T67] hsr_slave_1: left promiscuous mode [ 224.035365][ T67] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 224.043405][ T67] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 224.052083][ T67] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 224.059918][ T67] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 224.076094][ T67] veth1_macvtap: left promiscuous mode [ 224.081807][ T67] veth0_macvtap: left promiscuous mode [ 224.088107][ T67] veth1_vlan: left promiscuous mode [ 224.093478][ T67] veth0_vlan: left promiscuous mode [ 224.499291][ T67] team0 (unregistering): Port device team_slave_1 removed [ 224.544376][ T67] team0 (unregistering): Port device team_slave_0 removed [ 225.162865][ T8394] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 225.189388][ T8394] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 225.201414][ T8394] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 225.213214][ T8394] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 225.356861][ T8394] 8021q: adding VLAN 0 to HW filter on device bond0 [ 225.381592][ T8394] 8021q: adding VLAN 0 to HW filter on device team0 [ 225.396116][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 225.403365][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 225.421532][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 225.429131][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 225.649362][ T8394] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 225.817316][ T5850] Bluetooth: hci0: command tx timeout [ 225.893916][ T8394] veth0_vlan: entered promiscuous mode [ 225.912221][ T8394] veth1_vlan: entered promiscuous mode [ 225.963765][ T8394] veth0_macvtap: entered promiscuous mode [ 225.976400][ T8394] veth1_macvtap: entered promiscuous mode [ 225.995698][ T8394] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 226.006390][ T8394] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.019646][ T8394] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 226.030674][ T8394] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 226.041644][ T8394] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.052825][ T8394] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 226.066224][ T8394] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.075824][ T8394] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.085079][ T8394] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.093905][ T8394] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.153239][ T3553] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 226.170007][ T3553] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 226.205148][ T211] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 226.214724][ T211] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 227.897534][ T5850] Bluetooth: hci0: command tx timeout [ 234.128677][ T8638] netlink: 338 bytes leftover after parsing attributes in process `syz.5.594'. [ 234.478489][ T8648] netlink: 8 bytes leftover after parsing attributes in process `syz.5.629'. [ 235.327329][ T8662] netlink: 24 bytes leftover after parsing attributes in process `syz.4.631'. [ 236.165934][ T8675] netlink: 338 bytes leftover after parsing attributes in process `syz.1.635'. [ 250.523448][ T54] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 250.532988][ T54] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 250.541896][ T54] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 250.550632][ T54] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 250.560539][ T54] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 250.569987][ T54] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 250.686537][ T8825] chnl_net:caif_netlink_parms(): no params data found [ 250.733959][ T8825] bridge0: port 1(bridge_slave_0) entered blocking state [ 250.741293][ T8825] bridge0: port 1(bridge_slave_0) entered disabled state [ 250.749659][ T8825] bridge_slave_0: entered allmulticast mode [ 250.756557][ T8825] bridge_slave_0: entered promiscuous mode [ 250.764396][ T8825] bridge0: port 2(bridge_slave_1) entered blocking state [ 250.772262][ T8825] bridge0: port 2(bridge_slave_1) entered disabled state [ 250.780167][ T8825] bridge_slave_1: entered allmulticast mode [ 250.786823][ T8825] bridge_slave_1: entered promiscuous mode [ 250.812194][ T8825] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 250.824141][ T8825] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 250.853722][ T8825] team0: Port device team_slave_0 added [ 250.861533][ T8825] team0: Port device team_slave_1 added [ 250.884383][ T8825] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 250.892271][ T8825] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 250.919909][ T8825] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 250.934973][ T8825] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 250.942248][ T8825] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 250.969683][ T8825] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 251.001715][ T8825] hsr_slave_0: entered promiscuous mode [ 251.009792][ T8825] hsr_slave_1: entered promiscuous mode [ 251.015943][ T8825] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 251.024570][ T8825] Cannot create hsr debugfs directory [ 251.129205][ T8825] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 251.139235][ T8825] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 251.150095][ T8825] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 251.161184][ T8825] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 251.183607][ T8825] bridge0: port 2(bridge_slave_1) entered blocking state [ 251.190761][ T8825] bridge0: port 2(bridge_slave_1) entered forwarding state [ 251.198717][ T8825] bridge0: port 1(bridge_slave_0) entered blocking state [ 251.205912][ T8825] bridge0: port 1(bridge_slave_0) entered forwarding state [ 251.252603][ T8825] 8021q: adding VLAN 0 to HW filter on device bond0 [ 251.273054][ T3362] bridge0: port 1(bridge_slave_0) entered disabled state [ 251.282543][ T3362] bridge0: port 2(bridge_slave_1) entered disabled state [ 251.300145][ T8825] 8021q: adding VLAN 0 to HW filter on device team0 [ 251.315223][ T3362] bridge0: port 1(bridge_slave_0) entered blocking state [ 251.322404][ T3362] bridge0: port 1(bridge_slave_0) entered forwarding state [ 251.335374][ T211] bridge0: port 2(bridge_slave_1) entered blocking state [ 251.342559][ T211] bridge0: port 2(bridge_slave_1) entered forwarding state [ 251.484387][ T8825] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 251.640252][ T8825] veth0_vlan: entered promiscuous mode [ 251.653389][ T8825] veth1_vlan: entered promiscuous mode [ 251.679962][ T8825] veth0_macvtap: entered promiscuous mode [ 251.690344][ T8825] veth1_macvtap: entered promiscuous mode [ 251.705142][ T8825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 251.716637][ T8825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 251.727332][ T8825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 251.738018][ T8825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 251.749978][ T8825] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 251.760638][ T8825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 251.772907][ T8825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 251.782846][ T8825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 251.793492][ T8825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 251.804508][ T8825] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 251.819632][ T8825] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.829063][ T8825] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.839570][ T8825] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.848675][ T8825] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.913052][ T3362] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 251.923130][ T3362] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 251.964603][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 251.991804][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 252.617165][ T5850] Bluetooth: hci4: command tx timeout [ 254.707179][ T5850] Bluetooth: hci4: command tx timeout [ 256.060747][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.067578][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.778542][ T5850] Bluetooth: hci4: command tx timeout [ 258.857169][ T5850] Bluetooth: hci4: command tx timeout [ 267.747347][ T8917] netlink: 4 bytes leftover after parsing attributes in process `syz.1.662'. [ 279.592021][ T8968] netlink: 4 bytes leftover after parsing attributes in process `syz.2.678'. [ 279.913475][ T8976] could not allocate digest TFM handle [ 280.702294][ T9022] netlink: 8 bytes leftover after parsing attributes in process `syz.1.692'. [ 280.720456][ T9011] netlink: 8 bytes leftover after parsing attributes in process `syz.2.689'. [ 281.420316][ T9025] netlink: 8 bytes leftover after parsing attributes in process `syz.1.692'. [ 282.245873][ T9016] kexec: Could not allocate control_code_buffer [ 282.498054][ T9066] netlink: 342 bytes leftover after parsing attributes in process `syz.6.699'. [ 282.569899][ T9055] HfR: entered promiscuous mode [ 282.689004][ T9071] tmpfs: Unknown parameter ':' [ 296.147228][ T9180] netlink: 334 bytes leftover after parsing attributes in process `syz.2.732'. [ 297.743663][ T9212] Invalid ELF header magic: != ELF [ 298.223546][ T9233] FAULT_INJECTION: forcing a failure. [ 298.223546][ T9233] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 298.237021][ T9233] CPU: 0 UID: 0 PID: 9233 Comm: syz.6.745 Not tainted 6.12.0-syzkaller-01782-gbf9aa14fc523 #0 [ 298.247570][ T9233] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 298.257660][ T9233] Call Trace: [ 298.260966][ T9233] [ 298.263922][ T9233] dump_stack_lvl+0x16c/0x1f0 [ 298.268647][ T9233] should_fail_ex+0x497/0x5b0 [ 298.273366][ T9233] _copy_from_user+0x2e/0xd0 [ 298.277992][ T9233] copy_msghdr_from_user+0x99/0x160 [ 298.283219][ T9233] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 298.289067][ T9233] ? get_pid_task+0xfc/0x250 [ 298.293713][ T9233] ___sys_sendmsg+0xff/0x1e0 [ 298.298334][ T9233] ? __pfx____sys_sendmsg+0x10/0x10 [ 298.303591][ T9233] ? __pfx_vfs_write+0x10/0x10 [ 298.308568][ T9233] ? do_sys_openat2+0xb1/0x1e0 [ 298.313367][ T9233] __sys_sendmsg+0x16e/0x220 [ 298.317992][ T9233] ? __pfx___sys_sendmsg+0x10/0x10 [ 298.323140][ T9233] do_syscall_64+0xcd/0x250 [ 298.327658][ T9233] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 298.333569][ T9233] RIP: 0033:0x7fcd12b7e819 [ 298.337995][ T9233] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 298.357610][ T9233] RSP: 002b:00007fcd139ed038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 298.366036][ T9233] RAX: ffffffffffffffda RBX: 00007fcd12d35fa0 RCX: 00007fcd12b7e819 [ 298.374015][ T9233] RDX: 0000000000040000 RSI: 0000000020000240 RDI: 0000000000000001 [ 298.381994][ T9233] RBP: 00007fcd139ed090 R08: 0000000000000000 R09: 0000000000000000 [ 298.389990][ T9233] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 298.397995][ T9233] R13: 0000000000000000 R14: 00007fcd12d35fa0 R15: 00007ffce7ce9a68 [ 298.406123][ T9233] [ 310.283316][ T9269] netlink: 186 bytes leftover after parsing attributes in process `syz.2.758'. [ 314.690316][ T12] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 314.762946][ T12] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 314.821404][ T12] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 314.865207][ T12] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 315.006050][ T12] bridge_slave_1: left allmulticast mode [ 315.012301][ T12] bridge_slave_1: left promiscuous mode [ 315.023320][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 315.033922][ T12] bridge_slave_0: left allmulticast mode [ 315.043420][ T12] bridge_slave_0: left promiscuous mode [ 315.050427][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 315.502771][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 315.513618][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 315.526661][ T12] bond0 (unregistering): Released all slaves [ 315.796467][ T12] hsr_slave_0: left promiscuous mode [ 315.809224][ T12] hsr_slave_1: left promiscuous mode [ 315.816698][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 315.824473][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 315.833458][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 315.841065][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 315.864831][ T12] veth1_macvtap: left promiscuous mode [ 315.870612][ T12] veth0_macvtap: left promiscuous mode [ 315.880406][ T12] veth1_vlan: left promiscuous mode [ 315.889121][ T12] veth0_vlan: left promiscuous mode [ 316.363609][ T12] team0 (unregistering): Port device team_slave_1 removed [ 316.409842][ T12] team0 (unregistering): Port device team_slave_0 removed [ 317.500856][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.507558][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 375.897051][ T54] Bluetooth: hci4: command 0x0406 tx timeout [ 378.949499][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.956365][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.390493][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.397682][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 474.297077][ T30] INFO: task kworker/u8:0:11 blocked for more than 143 seconds. [ 474.304775][ T30] Not tainted 6.12.0-syzkaller-01782-gbf9aa14fc523 #0 [ 474.312553][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 474.321357][ T30] task:kworker/u8:0 state:D stack:24080 pid:11 tgid:11 ppid:2 flags:0x00004000 [ 474.331729][ T30] Workqueue: ext4-rsv-conversion ext4_end_io_rsv_work [ 474.338616][ T30] Call Trace: [ 474.341921][ T30] [ 474.344849][ T30] __schedule+0xe5a/0x5ae0 [ 474.349331][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 474.354572][ T30] ? __pfx_mark_lock+0x10/0x10 [ 474.359680][ T30] ? __pfx___schedule+0x10/0x10 [ 474.364570][ T30] ? schedule+0x298/0x350 [ 474.368996][ T30] ? __pfx_lock_release+0x10/0x10 [ 474.374047][ T30] ? trace_lock_acquire+0x14a/0x1d0 [ 474.379818][ T30] ? lock_acquire+0x2f/0xb0 [ 474.384391][ T30] ? schedule+0x1fd/0x350 [ 474.389576][ T30] schedule+0xe7/0x350 [ 474.393711][ T30] io_schedule+0xbf/0x130 [ 474.398398][ T30] bit_wait_io+0x15/0xe0 [ 474.402687][ T30] __wait_on_bit+0x62/0x180 [ 474.407475][ T30] ? __pfx_bit_wait_io+0x10/0x10 [ 474.412459][ T30] out_of_line_wait_on_bit+0xda/0x110 [ 474.418857][ T30] ? __pfx_out_of_line_wait_on_bit+0x10/0x10 [ 474.424923][ T30] ? __pfx_wake_bit_function+0x10/0x10 [ 474.430447][ T30] do_get_write_access+0x933/0x1270 [ 474.435688][ T30] jbd2_journal_get_write_access+0x1d6/0x280 [ 474.441731][ T30] __ext4_journal_get_write_access+0x6a/0x390 [ 474.447874][ T30] ext4_reserve_inode_write+0x13b/0x270 [ 474.453450][ T30] __ext4_mark_inode_dirty+0x1a6/0x890 [ 474.459228][ T30] ? __ext4_ext_dirty+0x1a8/0x220 [ 474.464291][ T30] ? __pfx___ext4_mark_inode_dirty+0x10/0x10 [ 474.470660][ T30] ? ext4_can_extents_be_merged.constprop.0+0xc4/0x380 [ 474.477798][ T30] ? ext4_ext_try_to_merge_right+0x2f7/0x360 [ 474.483852][ T30] __ext4_ext_dirty+0x1a8/0x220 [ 474.488861][ T30] ext4_ext_map_blocks+0x2601/0x5a30 [ 474.494662][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 474.501079][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 474.506369][ T30] ? hlock_class+0x4e/0x130 [ 474.511146][ T30] ? __pfx_ext4_ext_map_blocks+0x10/0x10 [ 474.517023][ T30] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 474.522700][ T30] ? rcu_is_watching+0x12/0xc0 [ 474.527803][ T30] ? trace_lock_acquire+0x14a/0x1d0 [ 474.533047][ T30] ? ext4_map_blocks+0x352/0x1370 [ 474.538376][ T30] ? lock_acquire+0x2f/0xb0 [ 474.542994][ T30] ? ext4_map_blocks+0x352/0x1370 [ 474.548149][ T30] ? __pfx_down_write+0x10/0x10 [ 474.553168][ T30] ext4_map_blocks+0x457/0x1370 [ 474.558119][ T30] ? __pfx_ext4_map_blocks+0x10/0x10 [ 474.563429][ T30] ? start_this_handle+0xd00/0x1430 [ 474.568714][ T30] ? __pfx_start_this_handle+0x10/0x10 [ 474.574204][ T30] ext4_convert_unwritten_extents+0x2b7/0x4c0 [ 474.580328][ T30] ? trace_jbd2_handle_start+0x1b4/0x240 [ 474.585990][ T30] ? __pfx_ext4_convert_unwritten_extents+0x10/0x10 [ 474.593153][ T30] ? __ext4_journal_start_reserved+0x24b/0x530 [ 474.599472][ T30] ? ext4_convert_unwritten_io_end_vec+0x3d/0x280 [ 474.605895][ T30] ext4_convert_unwritten_io_end_vec+0x127/0x280 [ 474.612581][ T30] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 474.618959][ T30] ext4_end_io_rsv_work+0x2ca/0x690 [ 474.624199][ T30] ? rcu_is_watching+0x12/0xc0 [ 474.629057][ T30] ? __pfx_ext4_end_io_rsv_work+0x10/0x10 [ 474.634813][ T30] ? lock_acquire+0x2f/0xb0 [ 474.639392][ T30] ? process_one_work+0x8bb/0x1b30 [ 474.644549][ T30] process_one_work+0x958/0x1b30 [ 474.649552][ T30] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 474.655218][ T30] ? __pfx_process_one_work+0x10/0x10 [ 474.660659][ T30] ? assign_work+0x1a0/0x250 [ 474.665280][ T30] worker_thread+0x6c8/0xf00 [ 474.669976][ T30] ? __pfx_worker_thread+0x10/0x10 [ 474.675121][ T30] kthread+0x2c1/0x3a0 [ 474.679239][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 474.684462][ T30] ? __pfx_kthread+0x10/0x10 [ 474.689117][ T30] ret_from_fork+0x45/0x80 [ 474.693571][ T30] ? __pfx_kthread+0x10/0x10 [ 474.698836][ T30] ret_from_fork_asm+0x1a/0x30 [ 474.703653][ T30] [ 474.706690][ T30] INFO: task kworker/u8:3:52 blocked for more than 143 seconds. [ 474.714391][ T30] Not tainted 6.12.0-syzkaller-01782-gbf9aa14fc523 #0 [ 474.722039][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 474.730996][ T30] task:kworker/u8:3 state:D stack:23648 pid:52 tgid:52 ppid:2 flags:0x00004000 [ 474.741304][ T30] Workqueue: writeback wb_workfn (flush-8:0) [ 474.747385][ T30] Call Trace: [ 474.750687][ T30] [ 474.753639][ T30] __schedule+0xe5a/0x5ae0 [ 474.758169][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 474.763410][ T30] ? hlock_class+0x4e/0x130 [ 474.768228][ T30] ? __pfx___schedule+0x10/0x10 [ 474.773130][ T30] ? schedule+0x298/0x350 [ 474.778242][ T30] ? __pfx_lock_release+0x10/0x10 [ 474.784366][ T30] ? trace_lock_acquire+0x14a/0x1d0 [ 474.789789][ T30] ? lock_acquire+0x2f/0xb0 [ 474.794338][ T30] ? schedule+0x1fd/0x350 [ 474.799244][ T30] schedule+0xe7/0x350 [ 474.803359][ T30] io_schedule+0xbf/0x130 [ 474.807781][ T30] bit_wait_io+0x15/0xe0 [ 474.812093][ T30] __wait_on_bit+0x62/0x180 [ 474.816619][ T30] ? __pfx_bit_wait_io+0x10/0x10 [ 474.821635][ T30] out_of_line_wait_on_bit+0xda/0x110 [ 474.827481][ T30] ? __pfx_out_of_line_wait_on_bit+0x10/0x10 [ 474.833521][ T30] ? __pfx_wake_bit_function+0x10/0x10 [ 474.839040][ T30] do_get_write_access+0x933/0x1270 [ 474.844290][ T30] jbd2_journal_get_write_access+0x1d6/0x280 [ 474.850344][ T30] __ext4_journal_get_write_access+0x6a/0x390 [ 474.856451][ T30] ext4_reserve_inode_write+0x13b/0x270 [ 474.862213][ T30] __ext4_mark_inode_dirty+0x1a6/0x890 [ 474.867755][ T30] ? ext4_dirty_inode+0xd9/0x130 [ 474.872747][ T30] ? __pfx___ext4_mark_inode_dirty+0x10/0x10 [ 474.879249][ T30] ? __pfx___might_resched+0x10/0x10 [ 474.884577][ T30] ? __pfx_lock_release+0x10/0x10 [ 474.890825][ T30] ? jbd2__journal_start+0xf6/0x6a0 [ 474.896067][ T30] ? __ext4_journal_start_sb+0x358/0x660 [ 474.902313][ T30] ? __ext4_journal_start_sb+0x206/0x660 [ 474.908253][ T30] ? ext4_dirty_inode+0xa1/0x130 [ 474.913225][ T30] ? __pfx_ext4_dirty_inode+0x10/0x10 [ 474.918688][ T30] ext4_dirty_inode+0xd9/0x130 [ 474.924470][ T30] ? rcu_is_watching+0x12/0xc0 [ 474.929472][ T30] __mark_inode_dirty+0x1f6/0xe60 [ 474.934562][ T30] ext4_da_update_reserve_space+0x2b7/0x760 [ 474.940611][ T30] ext4_es_insert_extent+0xbfe/0x11d0 [ 474.946201][ T30] ? __pfx_ext4_es_insert_extent+0x10/0x10 [ 474.952794][ T30] ? ext4_es_lookup_extent+0x7f6/0xc80 [ 474.958428][ T30] ? trace_lock_acquire+0x14a/0x1d0 [ 474.963785][ T30] ? ext4_map_blocks+0x352/0x1370 [ 474.969201][ T30] ? ext4_es_lookup_extent+0x171/0xc80 [ 474.974714][ T30] ? rcu_is_watching+0x12/0xc0 [ 474.979647][ T30] ? ext4_es_lookup_extent+0xc7/0xc80 [ 474.985080][ T30] ext4_map_blocks+0x8f3/0x1370 [ 474.990171][ T30] ? __pfx_ext4_map_blocks+0x10/0x10 [ 474.995506][ T30] ? rcu_is_watching+0x12/0xc0 [ 475.000463][ T30] ? trace_kmem_cache_alloc+0x2d/0xe0 [ 475.006504][ T30] ext4_do_writepages+0x198c/0x32f0 [ 475.012042][ T30] ? __pfx_ext4_do_writepages+0x10/0x10 [ 475.017898][ T30] ? do_writepages+0x1b3/0x820 [ 475.022718][ T30] ? ext4_writepages+0x303/0x730 [ 475.027887][ T30] ext4_writepages+0x303/0x730 [ 475.032696][ T30] ? __pfx_ext4_writepages+0x10/0x10 [ 475.038217][ T30] ? __pfx_ext4_writepages+0x10/0x10 [ 475.043915][ T30] do_writepages+0x1b3/0x820 [ 475.048739][ T30] ? __pfx_do_writepages+0x10/0x10 [ 475.053927][ T30] ? writeback_sb_inodes+0x3a6/0xfa0 [ 475.059399][ T30] ? reacquire_held_locks+0x20b/0x4c0 [ 475.064815][ T30] ? writeback_sb_inodes+0x3a6/0xfa0 [ 475.070336][ T30] ? find_held_lock+0x2d/0x110 [ 475.075144][ T30] ? wbc_attach_and_unlock_inode+0xee/0x110 [ 475.081334][ T30] __writeback_single_inode+0x166/0xfa0 [ 475.087115][ T30] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 475.092517][ T30] ? __pfx___writeback_single_inode+0x10/0x10 [ 475.098681][ T30] ? do_raw_spin_unlock+0x172/0x230 [ 475.103904][ T30] writeback_sb_inodes+0x603/0xfa0 [ 475.109872][ T30] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 475.115542][ T30] ? dl_server_update_idle_time+0x223/0x420 [ 475.121820][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 475.127286][ T30] ? _raw_spin_unlock+0x28/0x50 [ 475.132245][ T30] ? move_expired_inodes+0x5a3/0x850 [ 475.137633][ T30] __writeback_inodes_wb+0xff/0x2e0 [ 475.142855][ T30] ? __pfx___writeback_inodes_wb+0x10/0x10 [ 475.148902][ T30] ? queue_io+0x3f8/0x520 [ 475.153269][ T30] wb_writeback+0x72d/0xb60 [ 475.157863][ T30] ? __pfx_wb_writeback+0x10/0x10 [ 475.162912][ T30] ? get_nr_dirty_inodes+0x171/0x1e0 [ 475.168417][ T30] wb_workfn+0x8c3/0xbc0 [ 475.172690][ T30] ? __pfx_wb_workfn+0x10/0x10 [ 475.177671][ T30] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 475.183349][ T30] ? lock_acquire+0x2f/0xb0 [ 475.188270][ T30] ? process_one_work+0x8bb/0x1b30 [ 475.193552][ T30] process_one_work+0x958/0x1b30 [ 475.198616][ T30] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 475.206131][ T30] ? __pfx_process_one_work+0x10/0x10 [ 475.211949][ T30] ? assign_work+0x1a0/0x250 [ 475.216615][ T30] worker_thread+0x6c8/0xf00 [ 475.221462][ T30] ? __pfx_worker_thread+0x10/0x10 [ 475.226627][ T30] kthread+0x2c1/0x3a0 [ 475.230795][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 475.236405][ T30] ? __pfx_kthread+0x10/0x10 [ 475.241588][ T30] ret_from_fork+0x45/0x80 [ 475.246039][ T30] ? __pfx_kthread+0x10/0x10 [ 475.250725][ T30] ret_from_fork_asm+0x1a/0x30 [ 475.255552][ T30] [ 475.259857][ T30] INFO: task jbd2/sda1-8:5180 blocked for more than 144 seconds. [ 475.267804][ T30] Not tainted 6.12.0-syzkaller-01782-gbf9aa14fc523 #0 [ 475.275097][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 475.283877][ T30] task:jbd2/sda1-8 state:D stack:26960 pid:5180 tgid:5180 ppid:2 flags:0x00004000 [ 475.294130][ T30] Call Trace: [ 475.297773][ T30] [ 475.300739][ T30] __schedule+0xe5a/0x5ae0 [ 475.305245][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 475.311008][ T30] ? __pfx___schedule+0x10/0x10 [ 475.315909][ T30] ? schedule+0x298/0x350 [ 475.320325][ T30] ? __pfx_lock_release+0x10/0x10 [ 475.325392][ T30] ? trace_lock_acquire+0x14a/0x1d0 [ 475.330743][ T30] ? lock_acquire+0x2f/0xb0 [ 475.335618][ T30] ? schedule+0x1fd/0x350 [ 475.340070][ T30] schedule+0xe7/0x350 [ 475.344169][ T30] io_schedule+0xbf/0x130 [ 475.348579][ T30] bit_wait_io+0x15/0xe0 [ 475.352850][ T30] __wait_on_bit+0x62/0x180 [ 475.357663][ T30] ? __pfx_bit_wait_io+0x10/0x10 [ 475.362651][ T30] out_of_line_wait_on_bit+0xda/0x110 [ 475.368268][ T30] ? __pfx_out_of_line_wait_on_bit+0x10/0x10 [ 475.374343][ T30] ? __pfx_wake_bit_function+0x10/0x10 [ 475.380298][ T30] ? __pfx___might_resched+0x10/0x10 [ 475.386067][ T30] ? jbd2_journal_commit_transaction+0x313b/0x6ac0 [ 475.392685][ T30] __wait_on_buffer+0x64/0x70 [ 475.397445][ T30] jbd2_journal_commit_transaction+0x3bf0/0x6ac0 [ 475.403836][ T30] ? __pfx_jbd2_journal_commit_transaction+0x10/0x10 [ 475.410636][ T30] ? lock_acquire.part.0+0x11b/0x380 [ 475.416403][ T30] ? __try_to_del_timer_sync+0x116/0x170 [ 475.422422][ T30] ? __pfx_lock_release+0x10/0x10 [ 475.427546][ T30] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 475.433407][ T30] ? lockdep_hardirqs_on+0x7c/0x110 [ 475.439583][ T30] kjournald2+0x1f8/0x760 [ 475.443976][ T30] ? __kthread_parkme+0xb7/0x220 [ 475.448976][ T30] ? __pfx_kjournald2+0x10/0x10 [ 475.453861][ T30] ? __pfx_autoremove_wake_function+0x10/0x10 [ 475.459988][ T30] ? lockdep_hardirqs_on+0x7c/0x110 [ 475.465259][ T30] ? __kthread_parkme+0x148/0x220 [ 475.470361][ T30] ? __pfx_kjournald2+0x10/0x10 [ 475.475235][ T30] kthread+0x2c1/0x3a0 [ 475.479624][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 475.484864][ T30] ? __pfx_kthread+0x10/0x10 [ 475.489669][ T30] ret_from_fork+0x45/0x80 [ 475.494154][ T30] ? __pfx_kthread+0x10/0x10 [ 475.499095][ T30] ret_from_fork_asm+0x1a/0x30 [ 475.503920][ T30] [ 475.507191][ T30] INFO: task syz-executor:5830 blocked for more than 144 seconds. [ 475.515490][ T30] Not tainted 6.12.0-syzkaller-01782-gbf9aa14fc523 #0 [ 475.523207][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 475.532013][ T30] task:syz-executor state:D stack:23688 pid:5830 tgid:5830 ppid:5828 flags:0x00000002 [ 475.542321][ T30] Call Trace: [ 475.545622][ T30] [ 475.548765][ T30] __schedule+0xe5a/0x5ae0 [ 475.553231][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 475.558560][ T30] ? hlock_class+0x4e/0x130 [ 475.563097][ T30] ? mark_lock+0xb5/0xc60 [ 475.567645][ T30] ? __pfx___schedule+0x10/0x10 [ 475.572575][ T30] ? schedule+0x298/0x350 [ 475.577137][ T30] ? __pfx_lock_release+0x10/0x10 [ 475.582546][ T30] ? trace_lock_acquire+0x14a/0x1d0 [ 475.588013][ T30] ? lock_acquire+0x2f/0xb0 [ 475.592556][ T30] ? schedule+0x1fd/0x350 [ 475.596981][ T30] schedule+0xe7/0x350 [ 475.601107][ T30] io_schedule+0xbf/0x130 [ 475.605440][ T30] bit_wait_io+0x15/0xe0 [ 475.609853][ T30] __wait_on_bit+0x62/0x180 [ 475.614393][ T30] ? __pfx_bit_wait_io+0x10/0x10 [ 475.620075][ T30] out_of_line_wait_on_bit+0xda/0x110 [ 475.625512][ T30] ? __pfx_out_of_line_wait_on_bit+0x10/0x10 [ 475.631861][ T30] ? __pfx_wake_bit_function+0x10/0x10 [ 475.637469][ T30] do_get_write_access+0x933/0x1270 [ 475.642724][ T30] jbd2_journal_get_write_access+0x1d6/0x280 [ 475.649362][ T30] __ext4_journal_get_write_access+0x6a/0x390 [ 475.655491][ T30] ext4_reserve_inode_write+0x13b/0x270 [ 475.661340][ T30] __ext4_mark_inode_dirty+0x1a6/0x890 [ 475.667100][ T30] ? ext4_dirty_inode+0xd9/0x130 [ 475.672110][ T30] ? rcu_is_watching+0x12/0xc0 [ 475.677003][ T30] ? __pfx___ext4_mark_inode_dirty+0x10/0x10 [ 475.683007][ T30] ? rcu_is_watching+0x12/0xc0 [ 475.687931][ T30] ? trace_jbd2_handle_start+0x1b4/0x240 [ 475.693601][ T30] ? jbd2__journal_start+0xf6/0x6a0 [ 475.698961][ T30] ? __ext4_journal_start_sb+0x358/0x660 [ 475.704730][ T30] ? __ext4_journal_start_sb+0x206/0x660 [ 475.710547][ T30] ? ext4_dirty_inode+0xa1/0x130 [ 475.715526][ T30] ? __pfx_ext4_dirty_inode+0x10/0x10 [ 475.721540][ T30] ext4_dirty_inode+0xd9/0x130 [ 475.726360][ T30] ? rcu_is_watching+0x12/0xc0 [ 475.731272][ T30] __mark_inode_dirty+0x1f6/0xe60 [ 475.736370][ T30] generic_update_time+0xcf/0xf0 [ 475.741787][ T30] file_update_time+0x17d/0x1c0 [ 475.746714][ T30] ext4_page_mkwrite+0x368/0x1760 [ 475.751959][ T30] ? __pfx_ext4_page_mkwrite+0x10/0x10 [ 475.757531][ T30] ? lock_acquire+0x2f/0xb0 [ 475.762079][ T30] ? __pte_offset_map+0x42/0x540 [ 475.767196][ T30] do_page_mkwrite+0x177/0x380 [ 475.771988][ T30] do_pte_missing+0x29e/0x3e70 [ 475.776776][ T30] ? lock_vma_under_rcu+0x13e/0x980 [ 475.782238][ T30] __handle_mm_fault+0x100a/0x2a10 [ 475.791530][ T30] ? __pfx_lock_release+0x10/0x10 [ 475.796599][ T30] ? lock_vma_under_rcu+0x13e/0x980 [ 475.801938][ T30] ? __pfx___handle_mm_fault+0x10/0x10 [ 475.807648][ T30] handle_mm_fault+0x3fa/0xaa0 [ 475.812461][ T30] do_user_addr_fault+0x60d/0x13f0 [ 475.817730][ T30] exc_page_fault+0x5c/0xc0 [ 475.822703][ T30] asm_exc_page_fault+0x26/0x30 [ 475.827776][ T30] RIP: 0033:0x7f2083c678fc [ 475.832214][ T30] RSP: 002b:00007ffca8bfd8f0 EFLAGS: 00010202 [ 475.838393][ T30] RAX: 00007f2081f0c000 RBX: 000055558cae1410 RCX: 0000000000000002 [ 475.846386][ T30] RDX: 1ffffffff0278a42 RSI: 000055558cae12c8 RDI: 0000000000000004 [ 475.854740][ T30] RBP: 00007ffca8bfddf0 R08: 000055558cae12c8 R09: 0000000000003148 [ 475.863113][ T30] R10: 00007f2083c00000 R11: 0000000000000246 R12: 00007ffca8bfdc40 [ 475.871272][ T30] R13: 0000000000000004 R14: 00007ffca8bfd960 R15: 00007ffca8bfda30 [ 475.879416][ T30] [ 475.882555][ T30] INFO: task syz.6.774:9331 blocked for more than 144 seconds. [ 475.890307][ T30] Not tainted 6.12.0-syzkaller-01782-gbf9aa14fc523 #0 [ 475.897932][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 475.906660][ T30] task:syz.6.774 state:D stack:25808 pid:9331 tgid:9331 ppid:8825 flags:0x00000004 [ 475.917387][ T30] Call Trace: [ 475.920717][ T30] [ 475.924223][ T30] __schedule+0xe5a/0x5ae0 [ 475.928747][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 475.933983][ T30] ? hlock_class+0x4e/0x130 [ 475.938660][ T30] ? mark_lock+0xb5/0xc60 [ 475.943064][ T30] ? __pfx___schedule+0x10/0x10 [ 475.948042][ T30] ? schedule+0x298/0x350 [ 475.952404][ T30] ? __pfx_lock_release+0x10/0x10 [ 475.957788][ T30] ? trace_lock_acquire+0x14a/0x1d0 [ 475.963019][ T30] ? lock_acquire+0x2f/0xb0 [ 475.967646][ T30] ? schedule+0x1fd/0x350 [ 475.972012][ T30] schedule+0xe7/0x350 [ 475.976362][ T30] io_schedule+0xbf/0x130 [ 475.980903][ T30] bit_wait_io+0x15/0xe0 [ 475.985185][ T30] __wait_on_bit+0x62/0x180 [ 475.989808][ T30] ? __pfx_bit_wait_io+0x10/0x10 [ 475.994781][ T30] out_of_line_wait_on_bit+0xda/0x110 [ 476.000333][ T30] ? __pfx_out_of_line_wait_on_bit+0x10/0x10 [ 476.006362][ T30] ? __pfx_wake_bit_function+0x10/0x10 [ 476.011974][ T30] do_get_write_access+0x933/0x1270 [ 476.017380][ T30] jbd2_journal_get_write_access+0x1d6/0x280 [ 476.023441][ T30] __ext4_journal_get_write_access+0x6a/0x390 [ 476.030215][ T30] ext4_reserve_inode_write+0x13b/0x270 [ 476.035825][ T30] __ext4_mark_inode_dirty+0x1a6/0x890 [ 476.041530][ T30] ? ext4_dirty_inode+0xd9/0x130 [ 476.046514][ T30] ? rcu_is_watching+0x12/0xc0 [ 476.051351][ T30] ? __pfx___ext4_mark_inode_dirty+0x10/0x10 [ 476.057568][ T30] ? rcu_is_watching+0x12/0xc0 [ 476.062447][ T30] ? trace_jbd2_handle_start+0x1b4/0x240 [ 476.068377][ T30] ? jbd2__journal_start+0xf6/0x6a0 [ 476.073628][ T30] ? __ext4_journal_start_sb+0x358/0x660 [ 476.079456][ T30] ? __ext4_journal_start_sb+0x206/0x660 [ 476.085125][ T30] ? ext4_dirty_inode+0xa1/0x130 [ 476.090154][ T30] ? __pfx_ext4_dirty_inode+0x10/0x10 [ 476.095572][ T30] ext4_dirty_inode+0xd9/0x130 [ 476.100501][ T30] ? rcu_is_watching+0x12/0xc0 [ 476.105293][ T30] __mark_inode_dirty+0x1f6/0xe60 [ 476.110420][ T30] generic_update_time+0xcf/0xf0 [ 476.115389][ T30] file_update_time+0x17d/0x1c0 [ 476.120419][ T30] ext4_page_mkwrite+0x368/0x1760 [ 476.125482][ T30] ? __pfx_ext4_page_mkwrite+0x10/0x10 [ 476.131532][ T30] ? lock_acquire+0x2f/0xb0 [ 476.136080][ T30] ? __pte_offset_map+0x42/0x540 [ 476.141203][ T30] do_page_mkwrite+0x177/0x380 [ 476.146016][ T30] do_pte_missing+0x29e/0x3e70 [ 476.150877][ T30] ? lock_vma_under_rcu+0x13e/0x980 [ 476.156122][ T30] __handle_mm_fault+0x100a/0x2a10 [ 476.161445][ T30] ? __pfx_lock_release+0x10/0x10 [ 476.166514][ T30] ? lock_vma_under_rcu+0x13e/0x980 [ 476.171844][ T30] ? __pfx___handle_mm_fault+0x10/0x10 [ 476.177772][ T30] ? read_tsc+0x9/0x20 [ 476.181891][ T30] handle_mm_fault+0x3fa/0xaa0 [ 476.186680][ T30] do_user_addr_fault+0x60d/0x13f0 [ 476.191899][ T30] exc_page_fault+0x5c/0xc0 [ 476.196735][ T30] asm_exc_page_fault+0x26/0x30 [ 476.201819][ T30] RIP: 0033:0x7fcd12a5cd8a [ 476.206279][ T30] RSP: 002b:00007ffce7ce9ac0 EFLAGS: 00010202 [ 476.213100][ T30] RAX: 0000001b339f0000 RBX: 00007fcd13865720 RCX: 0000001b339efff8 [ 476.221990][ T30] RDX: 0000001b33420218 RSI: 0000000000000008 RDI: 00007fcd13865720 [ 476.230068][ T30] RBP: ffffffff81d9ad43 R08: 00007fcd12d361f8 R09: 00007fcd12d22000 [ 476.238656][ T30] R10: 00007fcd119fb008 R11: 000000000000000c R12: 000000000000000c [ 476.246772][ T30] R13: 0000000000000064 R14: ffffffff81d9a0e8 R15: 0000000000000064 [ 476.254854][ T30] ? do_mmap+0x3a8/0xfc0 [ 476.259258][ T30] ? __do_sys_remap_file_pages+0x33/0xa80 [ 476.264996][ T30] [ 476.268134][ T30] INFO: task syz.1.775:9338 blocked for more than 145 seconds. [ 476.275717][ T30] Not tainted 6.12.0-syzkaller-01782-gbf9aa14fc523 #0 [ 476.283156][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 476.292044][ T30] task:syz.1.775 state:D stack:25296 pid:9338 tgid:9338 ppid:5843 flags:0x00000004 [ 476.302468][ T30] Call Trace: [ 476.305954][ T30] [ 476.308976][ T30] __schedule+0xe5a/0x5ae0 [ 476.313425][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 476.318903][ T30] ? hlock_class+0x4e/0x130 [ 476.323522][ T30] ? mark_lock+0xb5/0xc60 [ 476.327950][ T30] ? __pfx___schedule+0x10/0x10 [ 476.332826][ T30] ? schedule+0x298/0x350 [ 476.337902][ T30] ? __pfx_lock_release+0x10/0x10 [ 476.342976][ T30] ? trace_lock_acquire+0x14a/0x1d0 [ 476.348232][ T30] ? lock_acquire+0x2f/0xb0 [ 476.352898][ T30] ? schedule+0x1fd/0x350 [ 476.357475][ T30] schedule+0xe7/0x350 [ 476.361591][ T30] io_schedule+0xbf/0x130 [ 476.365951][ T30] bit_wait_io+0x15/0xe0 [ 476.370321][ T30] __wait_on_bit+0x62/0x180 [ 476.374858][ T30] ? __pfx_bit_wait_io+0x10/0x10 [ 476.380208][ T30] out_of_line_wait_on_bit+0xda/0x110 [ 476.385656][ T30] ? __pfx_out_of_line_wait_on_bit+0x10/0x10 [ 476.391764][ T30] ? __pfx_wake_bit_function+0x10/0x10 [ 476.397527][ T30] do_get_write_access+0x933/0x1270 [ 476.402768][ T30] jbd2_journal_get_write_access+0x1d6/0x280 [ 476.408943][ T30] __ext4_journal_get_write_access+0x6a/0x390 [ 476.415188][ T30] ext4_reserve_inode_write+0x13b/0x270 [ 476.420940][ T30] __ext4_mark_inode_dirty+0x1a6/0x890 [ 476.426430][ T30] ? ext4_dirty_inode+0xd9/0x130 [ 476.431560][ T30] ? rcu_is_watching+0x12/0xc0 [ 476.437088][ T30] ? __pfx___ext4_mark_inode_dirty+0x10/0x10 [ 476.443121][ T30] ? rcu_is_watching+0x12/0xc0 [ 476.448013][ T30] ? trace_jbd2_handle_start+0x1b4/0x240 [ 476.453669][ T30] ? jbd2__journal_start+0xf6/0x6a0 [ 476.459187][ T30] ? __ext4_journal_start_sb+0x358/0x660 [ 476.465311][ T30] ? __ext4_journal_start_sb+0x206/0x660 [ 476.471072][ T30] ? ext4_dirty_inode+0xa1/0x130 [ 476.476014][ T30] ? __pfx_ext4_dirty_inode+0x10/0x10 [ 476.481540][ T30] ext4_dirty_inode+0xd9/0x130 [ 476.486346][ T30] ? rcu_is_watching+0x12/0xc0 [ 476.491176][ T30] __mark_inode_dirty+0x1f6/0xe60 [ 476.496235][ T30] generic_update_time+0xcf/0xf0 [ 476.501355][ T30] file_update_time+0x17d/0x1c0 [ 476.506265][ T30] ext4_page_mkwrite+0x368/0x1760 [ 476.511579][ T30] ? __pfx_ext4_page_mkwrite+0x10/0x10 [ 476.517173][ T30] ? lock_acquire+0x2f/0xb0 [ 476.521689][ T30] ? __pte_offset_map+0x42/0x540 [ 476.526653][ T30] do_page_mkwrite+0x177/0x380 [ 476.531500][ T30] do_pte_missing+0x29e/0x3e70 [ 476.536294][ T30] ? lock_vma_under_rcu+0x13e/0x980 [ 476.542212][ T30] __handle_mm_fault+0x100a/0x2a10 [ 476.547426][ T30] ? __pfx_lock_release+0x10/0x10 [ 476.552489][ T30] ? lock_vma_under_rcu+0x13e/0x980 [ 476.557881][ T30] ? __pfx___handle_mm_fault+0x10/0x10 [ 476.563397][ T30] ? read_tsc+0x9/0x20 [ 476.567567][ T30] handle_mm_fault+0x3fa/0xaa0 [ 476.572393][ T30] do_user_addr_fault+0x60d/0x13f0 [ 476.577722][ T30] exc_page_fault+0x5c/0xc0 [ 476.582273][ T30] asm_exc_page_fault+0x26/0x30 [ 476.587207][ T30] RIP: 0033:0x7fb6f2e5cd8a [ 476.591643][ T30] RSP: 002b:00007fff84275e10 EFLAGS: 00010202 [ 476.597870][ T30] RAX: 0000001b30dfd000 RBX: 00007fb6f3c65720 RCX: 0000001b30dfcff8 [ 476.605865][ T30] RDX: 0000001b30820218 RSI: 0000000000000008 RDI: 00007fb6f3c65720 [ 476.613900][ T30] RBP: ffffffff8b0340fb R08: 00007fb6f31362d8 R09: 00007fb6f3122000 [ 476.622344][ T30] R10: 00007fb6f09f6008 R11: 000000000000000d R12: 000000000000000d [ 476.630429][ T30] R13: 00000000000001c1 R14: ffffffff8b034dee R15: 0000000000000253 [ 476.638569][ T30] ? mas_parent_type+0x4e/0x120 [ 476.643878][ T30] ? mas_mab_cp+0x61b/0x700 [ 476.648568][ T30] [ 476.651636][ T30] INFO: task syz.4.776:9340 blocked for more than 145 seconds. [ 476.659395][ T30] Not tainted 6.12.0-syzkaller-01782-gbf9aa14fc523 #0 [ 476.666762][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 476.675515][ T30] task:syz.4.776 state:D stack:27344 pid:9340 tgid:9340 ppid:5955 flags:0x00000004 [ 476.685967][ T30] Call Trace: [ 476.689389][ T30] [ 476.692363][ T30] __schedule+0xe5a/0x5ae0 [ 476.697069][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 476.702336][ T30] ? hlock_class+0x4e/0x130 [ 476.706988][ T30] ? mark_lock+0xb5/0xc60 [ 476.711362][ T30] ? __pfx___schedule+0x10/0x10 [ 476.716225][ T30] ? schedule+0x298/0x350 [ 476.720745][ T30] ? __pfx_lock_release+0x10/0x10 [ 476.726241][ T30] ? trace_lock_acquire+0x14a/0x1d0 [ 476.731713][ T30] ? lock_acquire+0x2f/0xb0 [ 476.736794][ T30] ? schedule+0x1fd/0x350 [ 476.741346][ T30] schedule+0xe7/0x350 [ 476.745954][ T30] io_schedule+0xbf/0x130 [ 476.750552][ T30] bit_wait_io+0x15/0xe0 [ 476.754852][ T30] __wait_on_bit+0x62/0x180 [ 476.759578][ T30] ? __pfx_bit_wait_io+0x10/0x10 [ 476.764590][ T30] out_of_line_wait_on_bit+0xda/0x110 [ 476.770084][ T30] ? __pfx_out_of_line_wait_on_bit+0x10/0x10 [ 476.776129][ T30] ? __pfx_wake_bit_function+0x10/0x10 [ 476.781805][ T30] do_get_write_access+0x933/0x1270 [ 476.787245][ T30] jbd2_journal_get_write_access+0x1d6/0x280 [ 476.793303][ T30] __ext4_journal_get_write_access+0x6a/0x390 [ 476.800007][ T30] ext4_reserve_inode_write+0x13b/0x270 [ 476.806162][ T30] __ext4_mark_inode_dirty+0x1a6/0x890 [ 476.811718][ T30] ? ext4_dirty_inode+0xd9/0x130 [ 476.816698][ T30] ? rcu_is_watching+0x12/0xc0 [ 476.821971][ T30] ? __pfx___ext4_mark_inode_dirty+0x10/0x10 [ 476.828168][ T30] ? rcu_is_watching+0x12/0xc0 [ 476.833212][ T30] ? trace_jbd2_handle_start+0x1b4/0x240 [ 476.839326][ T30] ? jbd2__journal_start+0xf6/0x6a0 [ 476.844769][ T30] ? __ext4_journal_start_sb+0x358/0x660 [ 476.851018][ T30] ? __ext4_journal_start_sb+0x206/0x660 [ 476.856696][ T30] ? ext4_dirty_inode+0xa1/0x130 [ 476.861799][ T30] ? __pfx_ext4_dirty_inode+0x10/0x10 [ 476.867343][ T30] ext4_dirty_inode+0xd9/0x130 [ 476.872167][ T30] ? rcu_is_watching+0x12/0xc0 [ 476.877091][ T30] __mark_inode_dirty+0x1f6/0xe60 [ 476.882151][ T30] generic_update_time+0xcf/0xf0 [ 476.887155][ T30] file_update_time+0x17d/0x1c0 [ 476.892036][ T30] ext4_page_mkwrite+0x368/0x1760 [ 476.897339][ T30] ? __pfx_ext4_page_mkwrite+0x10/0x10 [ 476.903269][ T30] ? lock_acquire+0x2f/0xb0 [ 476.907907][ T30] ? __pte_offset_map+0x42/0x540 [ 476.912978][ T30] do_page_mkwrite+0x177/0x380 [ 476.918025][ T30] do_pte_missing+0x29e/0x3e70 [ 476.922825][ T30] ? lock_vma_under_rcu+0x13e/0x980 [ 476.928122][ T30] __handle_mm_fault+0x100a/0x2a10 [ 476.933273][ T30] ? __pfx_lock_release+0x10/0x10 [ 476.939054][ T30] ? lock_vma_under_rcu+0x13e/0x980 [ 476.944304][ T30] ? __pfx___handle_mm_fault+0x10/0x10 [ 476.950515][ T30] handle_mm_fault+0x3fa/0xaa0 [ 476.955321][ T30] do_user_addr_fault+0x60d/0x13f0 [ 476.960643][ T30] exc_page_fault+0x5c/0xc0 [ 476.965284][ T30] asm_exc_page_fault+0x26/0x30 [ 476.970430][ T30] RIP: 0033:0x7f3740a5cd8a [ 476.974870][ T30] RSP: 002b:00007ffcef59a0a0 EFLAGS: 00010202 [ 476.981091][ T30] RAX: 0000001b2fe1f000 RBX: 00007f3741865720 RCX: 0000001b2fe1eff8 [ 476.989135][ T30] RDX: 0000001b2f820214 RSI: 0000000000000008 RDI: 00007f3741865720 [ 476.997262][ T30] RBP: ffffffff8b060894 R08: 00007f3740d36038 R09: 00007f3740d22000 [ 477.005231][ T30] R10: 00007f37401ff008 R11: 0000000000000001 R12: 0000000000000001 [ 477.013268][ T30] R13: 00000000000000b5 R14: ffffffff8b060fc7 R15: 00000000000000c1 [ 477.021396][ T30] ? mas_prev_slot+0xc7/0x1460 [ 477.026164][ T30] ? mas_insert.isra.0+0x6b4/0xd10 [ 477.031358][ T30] [ 477.034410][ T30] INFO: task syz.2.773:9343 blocked for more than 146 seconds. [ 477.042190][ T30] Not tainted 6.12.0-syzkaller-01782-gbf9aa14fc523 #0 [ 477.049538][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 477.059110][ T30] task:syz.2.773 state:D stack:27032 pid:9343 tgid:9343 ppid:5841 flags:0x00000004 [ 477.069428][ T30] Call Trace: [ 477.072703][ T30] [ 477.075647][ T30] __schedule+0xe5a/0x5ae0 [ 477.080271][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 477.085514][ T30] ? hlock_class+0x4e/0x130 [ 477.090108][ T30] ? mark_lock+0xb5/0xc60 [ 477.094493][ T30] ? __pfx___schedule+0x10/0x10 [ 477.099581][ T30] ? schedule+0x298/0x350 [ 477.103959][ T30] ? __pfx_lock_release+0x10/0x10 [ 477.109076][ T30] ? trace_lock_acquire+0x14a/0x1d0 [ 477.114306][ T30] ? lock_acquire+0x2f/0xb0 [ 477.118973][ T30] ? schedule+0x1fd/0x350 [ 477.123354][ T30] schedule+0xe7/0x350 [ 477.127520][ T30] io_schedule+0xbf/0x130 [ 477.131990][ T30] bit_wait_io+0x15/0xe0 [ 477.136255][ T30] __wait_on_bit+0x62/0x180 [ 477.140973][ T30] ? __pfx_bit_wait_io+0x10/0x10 [ 477.145945][ T30] out_of_line_wait_on_bit+0xda/0x110 [ 477.151379][ T30] ? __pfx_out_of_line_wait_on_bit+0x10/0x10 [ 477.158111][ T30] ? __pfx_wake_bit_function+0x10/0x10 [ 477.163693][ T30] do_get_write_access+0x933/0x1270 [ 477.169177][ T30] jbd2_journal_get_write_access+0x1d6/0x280 [ 477.175239][ T30] __ext4_journal_get_write_access+0x6a/0x390 [ 477.181536][ T30] ext4_reserve_inode_write+0x13b/0x270 [ 477.187194][ T30] __ext4_mark_inode_dirty+0x1a6/0x890 [ 477.192687][ T30] ? ext4_dirty_inode+0xd9/0x130 [ 477.197809][ T30] ? rcu_is_watching+0x12/0xc0 [ 477.202601][ T30] ? __pfx___ext4_mark_inode_dirty+0x10/0x10 [ 477.208676][ T30] ? rcu_is_watching+0x12/0xc0 [ 477.213641][ T30] ? trace_jbd2_handle_start+0x1b4/0x240 [ 477.219480][ T30] ? jbd2__journal_start+0xf6/0x6a0 [ 477.224730][ T30] ? __ext4_journal_start_sb+0x358/0x660 [ 477.230474][ T30] ? __ext4_journal_start_sb+0x206/0x660 [ 477.236139][ T30] ? ext4_dirty_inode+0xa1/0x130 [ 477.241282][ T30] ? __pfx_ext4_dirty_inode+0x10/0x10 [ 477.246684][ T30] ext4_dirty_inode+0xd9/0x130 [ 477.251529][ T30] ? rcu_is_watching+0x12/0xc0 [ 477.256728][ T30] __mark_inode_dirty+0x1f6/0xe60 [ 477.262009][ T30] generic_update_time+0xcf/0xf0 [ 477.267059][ T30] file_update_time+0x17d/0x1c0 [ 477.271948][ T30] ext4_page_mkwrite+0x368/0x1760 [ 477.277322][ T30] ? __pfx_ext4_page_mkwrite+0x10/0x10 [ 477.282826][ T30] ? lock_acquire+0x2f/0xb0 [ 477.287427][ T30] ? __pte_offset_map+0x42/0x540 [ 477.292404][ T30] do_page_mkwrite+0x177/0x380 [ 477.297362][ T30] do_pte_missing+0x29e/0x3e70 [ 477.302160][ T30] ? lock_vma_under_rcu+0x13e/0x980 [ 477.307433][ T30] __handle_mm_fault+0x100a/0x2a10 [ 477.312572][ T30] ? __pfx_lock_release+0x10/0x10 [ 477.317755][ T30] ? lock_vma_under_rcu+0x13e/0x980 [ 477.322990][ T30] ? __pfx___handle_mm_fault+0x10/0x10 [ 477.328641][ T30] handle_mm_fault+0x3fa/0xaa0 [ 477.333434][ T30] do_user_addr_fault+0x60d/0x13f0 [ 477.338874][ T30] exc_page_fault+0x5c/0xc0 [ 477.343441][ T30] asm_exc_page_fault+0x26/0x30 [ 477.348433][ T30] RIP: 0033:0x7ff57b65d536 [ 477.352887][ T30] RSP: 002b:00007ffde22393f0 EFLAGS: 00010202 [ 477.360400][ T30] RAX: 0000000000003008 RBX: 00007ff57c465720 RCX: 0000000000000000 [ 477.368544][ T30] RDX: 0000001b30f1d000 RSI: 0000000000000008 RDI: 00007ff57c465720 [ 477.376557][ T30] RBP: ffffffff81f69fcd R08: 00007ff57adff080 R09: 00007ff57b922000 [ 477.384773][ T30] R10: 00007ff57adff008 R11: 0000000000000001 R12: 00000000000001df [ 477.392904][ T30] R13: 00007ff57b936038 R14: 0000000000000055 R15: ffffffffffffd000 [ 477.401140][ T30] ? __mod_memcg_state+0x12d/0x460 [ 477.406303][ T30] [ 477.409443][ T30] [ 477.409443][ T30] Showing all locks held in the system: [ 477.417500][ T30] 4 locks held by kworker/u8:0/11: [ 477.422629][ T30] #0: ffff88814e4c4948 ((wq_completion)ext4-rsv-conversion){+.+.}-{0:0}, at: process_one_work+0x1212/0x1b30 [ 477.434391][ T30] #1: ffffc90000107d80 ((work_completion)(&ei->i_rsv_conversion_work)){+.+.}-{0:0}, at: process_one_work+0x8bb/0x1b30 [ 477.447042][ T30] #2: ffff8880340a4958 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0xf6c/0x1430 [ 477.456625][ T30] #3: ffff888077c7d1c8 (&ei->i_data_sem){++++}-{4:4}, at: ext4_map_blocks+0x352/0x1370 [ 477.467171][ T30] 2 locks held by kworker/u8:1/12: [ 477.472327][ T30] 1 lock held by khungtaskd/30: [ 477.477257][ T30] #0: ffffffff8ddba640 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x7f/0x390 [ 477.487319][ T30] 6 locks held by kworker/u8:3/52: [ 477.492471][ T30] #0: ffff8880206e4948 ((wq_completion)writeback){+.+.}-{0:0}, at: process_one_work+0x1212/0x1b30 [ 477.503652][ T30] #1: ffffc90000bd7d80 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_one_work+0x8bb/0x1b30 [ 477.515798][ T30] #2: ffff8880340a00e0 (&type->s_umount_key#32){++++}-{4:4}, at: super_trylock_shared+0x1e/0xf0 [ 477.526443][ T30] #3: ffff8880340a2b98 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: do_writepages+0x1b3/0x820 [ 477.536975][ T30] #4: ffff8880340a4958 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0xf6c/0x1430 [ 477.547017][ T30] #5: ffff888077dbb410 (&ei->i_data_sem){++++}-{4:4}, at: ext4_map_blocks+0x352/0x1370 [ 477.557023][ T30] 2 locks held by getty/5597: [ 477.561811][ T30] #0: ffff888034a9a0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 477.572299][ T30] #1: ffffc90002f062f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0xfba/0x1480 [ 477.582911][ T30] 3 locks held by syz-executor/5830: [ 477.588294][ T30] #0: ffff8880334f3070 (&vma->vm_lock->lock){++++}-{4:4}, at: lock_vma_under_rcu+0x13e/0x980 [ 477.598763][ T30] #1: ffff8880340a0518 (sb_pagefaults){.+.+}-{0:0}, at: do_page_mkwrite+0x177/0x380 [ 477.608385][ T30] #2: ffff8880340a4958 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0xf6c/0x1430 [ 477.618356][ T30] 5 locks held by kworker/u8:8/8807: [ 477.623676][ T30] 3 locks held by syz.6.774/9331: [ 477.628793][ T30] #0: ffff888027d9f220 (&vma->vm_lock->lock){++++}-{4:4}, at: lock_vma_under_rcu+0x13e/0x980 [ 477.639260][ T30] #1: ffff8880340a0518 (sb_pagefaults){.+.+}-{0:0}, at: do_page_mkwrite+0x177/0x380 [ 477.648904][ T30] #2: ffff8880340a4958 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0xf6c/0x1430 [ 477.658881][ T30] 3 locks held by syz.1.775/9338: [ 477.663908][ T30] #0: ffff88802ce4ac40 (&vma->vm_lock->lock){++++}-{4:4}, at: lock_vma_under_rcu+0x13e/0x980 [ 477.674841][ T30] #1: ffff8880340a0518 (sb_pagefaults){.+.+}-{0:0}, at: do_page_mkwrite+0x177/0x380 [ 477.684733][ T30] #2: ffff8880340a4958 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0xf6c/0x1430 [ 477.694420][ T30] 3 locks held by syz.4.776/9340: [ 477.699565][ T30] #0: ffff888063092730 (&vma->vm_lock->lock){++++}-{4:4}, at: lock_vma_under_rcu+0x13e/0x980 [ 477.709927][ T30] #1: ffff8880340a0518 (sb_pagefaults){.+.+}-{0:0}, at: do_page_mkwrite+0x177/0x380 [ 477.719600][ T30] #2: ffff8880340a4958 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0xf6c/0x1430 [ 477.729432][ T30] 3 locks held by syz.2.773/9343: [ 477.734474][ T30] #0: ffff8880338bc148 (&vma->vm_lock->lock){++++}-{4:4}, at: lock_vma_under_rcu+0x13e/0x980 [ 477.744955][ T30] #1: ffff8880340a0518 (sb_pagefaults){.+.+}-{0:0}, at: do_page_mkwrite+0x177/0x380 [ 477.755287][ T30] #2: ffff8880340a4958 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0xf6c/0x1430 [ 477.765182][ T30] [ 477.768064][ T30] ============================================= [ 477.768064][ T30] [ 477.776541][ T30] NMI backtrace for cpu 1 [ 477.780892][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.12.0-syzkaller-01782-gbf9aa14fc523 #0 [ 477.791087][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 477.801143][ T30] Call Trace: [ 477.804431][ T30] [ 477.807351][ T30] dump_stack_lvl+0x116/0x1f0 [ 477.812052][ T30] nmi_cpu_backtrace+0x27b/0x390 [ 477.817017][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 477.823010][ T30] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 477.829010][ T30] watchdog+0xf0c/0x1240 [ 477.833284][ T30] ? __pfx_watchdog+0x10/0x10 [ 477.837981][ T30] ? lockdep_hardirqs_on+0x7c/0x110 [ 477.843206][ T30] ? __kthread_parkme+0x148/0x220 [ 477.848227][ T30] ? __pfx_watchdog+0x10/0x10 [ 477.852899][ T30] kthread+0x2c1/0x3a0 [ 477.856960][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 477.862159][ T30] ? __pfx_kthread+0x10/0x10 [ 477.866761][ T30] ret_from_fork+0x45/0x80 [ 477.871195][ T30] ? __pfx_kthread+0x10/0x10 [ 477.875853][ T30] ret_from_fork_asm+0x1a/0x30 [ 477.880647][ T30] [ 477.884277][ T30] Sending NMI from CPU 1 to CPUs 0: [ 477.889949][ C0] NMI backtrace for cpu 0 [ 477.889966][ C0] CPU: 0 UID: 0 PID: 5207 Comm: klogd Not tainted 6.12.0-syzkaller-01782-gbf9aa14fc523 #0 [ 477.889994][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 477.890007][ C0] RIP: 0010:lock_acquire+0x0/0xb0 [ 477.890047][ C0] Code: c7 90 c0 1d 90 e8 20 29 84 00 e9 6e ff ff ff 66 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1e fa 41 57 4d 89 cf 41 56 45 89 c6 41 55 41 89 cd 41 54 41 [ 477.890069][ C0] RSP: 0018:ffffc9000378f4d0 EFLAGS: 00000246 [ 477.890088][ C0] RAX: ffffffff819c5b80 RBX: 00007f0534d1b9b5 RCX: 0000000000000002 [ 477.890104][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffff8ddba640 [ 477.890118][ C0] RBP: 00007f0534d1b9b5 R08: 0000000000000000 R09: 0000000000000000 [ 477.890133][ C0] R10: 00007f0534d1b000 R11: 00000000000a2001 R12: ffffffff8178aa70 [ 477.890148][ C0] R13: ffffc9000378f5f8 R14: 0000000000000000 R15: ffff88807d7dda00 [ 477.890165][ C0] FS: 00007f0534bb9380(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 477.890188][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 477.890204][ C0] CR2: 000055ab3e5c1680 CR3: 000000007cd46000 CR4: 00000000003526f0 [ 477.890220][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 477.890234][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 477.890248][ C0] Call Trace: [ 477.890256][ C0] [ 477.890264][ C0] ? nmi_cpu_backtrace+0x1d8/0x390 [ 477.890295][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 477.890331][ C0] ? nmi_handle+0x1a9/0x5c0 [ 477.890356][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 477.890391][ C0] ? default_do_nmi+0x6a/0x160 [ 477.890419][ C0] ? exc_nmi+0x170/0x1e0 [ 477.890444][ C0] ? end_repeat_nmi+0xf/0x53 [ 477.890466][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 477.890497][ C0] ? is_bpf_text_address+0x30/0x1a0 [ 477.890528][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 477.890571][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 477.890606][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 477.890640][ C0] [ 477.890647][ C0] [ 477.890654][ C0] is_bpf_text_address+0x36/0x1a0 [ 477.890683][ C0] ? is_bpf_text_address+0x30/0x1a0 [ 477.890713][ C0] kernel_text_address+0x8d/0x100 [ 477.890749][ C0] __kernel_text_address+0xd/0x40 [ 477.890784][ C0] unwind_get_return_address+0x59/0xa0 [ 477.890810][ C0] arch_stack_walk+0xa7/0x100 [ 477.890842][ C0] stack_trace_save+0x95/0xd0 [ 477.890868][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 477.890895][ C0] ? stack_trace_save+0x95/0xd0 [ 477.890922][ C0] kasan_save_stack+0x33/0x60 [ 477.890955][ C0] ? kasan_save_stack+0x33/0x60 [ 477.890987][ C0] ? kasan_save_track+0x14/0x30 [ 477.891019][ C0] ? __kasan_kmalloc+0xaa/0xb0 [ 477.891051][ C0] ? __kmalloc_node_track_caller_noprof+0x20f/0x440 [ 477.891076][ C0] ? kmalloc_reserve+0xef/0x2c0 [ 477.891103][ C0] ? __alloc_skb+0x164/0x380 [ 477.891135][ C0] ? alloc_skb_with_frags+0xe4/0x850 [ 477.891160][ C0] ? sock_alloc_send_pskb+0x7f1/0x980 [ 477.891193][ C0] ? unix_dgram_sendmsg+0x46c/0x1940 [ 477.891216][ C0] ? __sys_sendto+0x488/0x4f0 [ 477.891247][ C0] ? __x64_sys_sendto+0xe0/0x1c0 [ 477.891280][ C0] ? do_syscall_64+0xcd/0x250 [ 477.891299][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 477.891352][ C0] kasan_save_track+0x14/0x30 [ 477.891385][ C0] __kasan_kmalloc+0xaa/0xb0 [ 477.891417][ C0] __kmalloc_node_track_caller_noprof+0x20f/0x440 [ 477.891442][ C0] ? __alloc_skb+0x164/0x380 [ 477.891477][ C0] kmalloc_reserve+0xef/0x2c0 [ 477.891506][ C0] __alloc_skb+0x164/0x380 [ 477.891547][ C0] ? __pfx___alloc_skb+0x10/0x10 [ 477.891580][ C0] ? hlock_class+0x4e/0x130 [ 477.891607][ C0] ? __lock_acquire+0x14c0/0x3c40 [ 477.891645][ C0] alloc_skb_with_frags+0xe4/0x850 [ 477.891670][ C0] ? __pfx___lock_acquire+0x10/0x10 [ 477.891715][ C0] sock_alloc_send_pskb+0x7f1/0x980 [ 477.891753][ C0] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 477.891787][ C0] ? __pfx_lock_release+0x10/0x10 [ 477.891825][ C0] ? do_raw_spin_lock+0x12d/0x2c0 [ 477.891851][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 477.891876][ C0] ? lock_acquire+0x2f/0xb0 [ 477.891909][ C0] ? unix_dgram_sendmsg+0x8c8/0x1940 [ 477.891934][ C0] unix_dgram_sendmsg+0x46c/0x1940 [ 477.891959][ C0] ? aa_sk_perm+0x2f5/0xb20 [ 477.891994][ C0] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 477.892016][ C0] ? __pfx_aa_sk_perm+0x10/0x10 [ 477.892051][ C0] ? aa_get_newest_label+0x376/0x680 [ 477.892086][ C0] __sys_sendto+0x488/0x4f0 [ 477.892118][ C0] ? __pfx___sys_sendto+0x10/0x10 [ 477.892156][ C0] ? do_syslog+0x132/0x6c0 [ 477.892186][ C0] ? rcu_is_watching+0x12/0xc0 [ 477.892215][ C0] __x64_sys_sendto+0xe0/0x1c0 [ 477.892248][ C0] ? do_syscall_64+0x91/0x250 [ 477.892268][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 477.892301][ C0] do_syscall_64+0xcd/0x250 [ 477.892323][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 477.892358][ C0] RIP: 0033:0x7f0534d1b9b5 [ 477.892375][ C0] Code: 8b 44 24 08 48 83 c4 28 48 98 c3 48 98 c3 41 89 ca 64 8b 04 25 18 00 00 00 85 c0 75 26 45 31 c9 45 31 c0 b8 2c 00 00 00 0f 05 <48> 3d 00 f0 ff ff 76 7a 48 8b 15 44 c4 0c 00 f7 d8 64 89 02 48 83 [ 477.892398][ C0] RSP: 002b:00007ffd9bebb5e8 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 477.892419][ C0] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007f0534d1b9b5 [ 477.892434][ C0] RDX: 000000000000004e RSI: 00005624a5193fc0 RDI: 0000000000000003 [ 477.892449][ C0] RBP: 00005624a518e910 R08: 0000000000000000 R09: 0000000000000000 [ 477.892463][ C0] R10: 0000000000004000 R11: 0000000000000246 R12: 0000000000000013 [ 477.892486][ C0] R13: 00007f0534ea9212 R14: 00007ffd9bebb6e8 R15: 0000000000000000 [ 477.892508][ C0] [ 477.893219][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 478.457449][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.12.0-syzkaller-01782-gbf9aa14fc523 #0 [ 478.467605][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 478.477662][ T30] Call Trace: [ 478.480940][ T30] [ 478.483885][ T30] dump_stack_lvl+0x3d/0x1f0 [ 478.488502][ T30] panic+0x71d/0x800 [ 478.492414][ T30] ? __pfx_panic+0x10/0x10 [ 478.496839][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 478.502231][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 478.508229][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 478.513613][ T30] ? watchdog+0xd76/0x1240 [ 478.518048][ T30] ? watchdog+0xd69/0x1240 [ 478.522483][ T30] watchdog+0xd87/0x1240 [ 478.526745][ T30] ? __pfx_watchdog+0x10/0x10 [ 478.531435][ T30] ? lockdep_hardirqs_on+0x7c/0x110 [ 478.536648][ T30] ? __kthread_parkme+0x148/0x220 [ 478.541682][ T30] ? __pfx_watchdog+0x10/0x10 [ 478.546373][ T30] kthread+0x2c1/0x3a0 [ 478.550451][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 478.555669][ T30] ? __pfx_kthread+0x10/0x10 [ 478.560268][ T30] ret_from_fork+0x45/0x80 [ 478.564689][ T30] ? __pfx_kthread+0x10/0x10 [ 478.569301][ T30] ret_from_fork_asm+0x1a/0x30 [ 478.574119][ T30] [ 478.577479][ T30] Kernel Offset: disabled [ 478.581812][ T30] Rebooting in 86400 seconds..