last executing test programs:

11m41.335213949s ago: executing program 3 (id=895):
mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000)
move_pages$auto(0x1, 0xf54, 0x0, 0x0, 0x0, 0x8000000000000000)
mmap$auto(0x0, 0x20009, 0xe3, 0x100000eb1, 0x40000000000a1, 0x8000)
socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0)
fsopen$auto(&(0x7f0000000000)='nlctrl\x00', 0x3)
madvise$auto(0x0, 0x7fffffffffffffff, 0xa)
mmap$auto(0x0, 0x9, 0x400000072, 0x8b72, 0x1000000002, 0x8000)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
socketpair$auto(0x1e, 0x5, 0x8, 0x0)
r0 = socket(0xa, 0x801, 0x84)
getsockopt$auto(r0, 0x84, 0x75, 0x0, &(0x7f0000000000)=0x9000c)
r1 = openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, &(0x7f00000002c0), 0x40000, 0x0)
madvise$auto(0x0, 0x54, 0x6)
ioctl$auto_DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, 0x0)
mmap$auto(0x0, 0x9, 0xff7, 0x8000000008012, 0x1000000004, 0x0)
statx$auto(0xffffff9c, 0x0, 0x1000, 0x1, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000010c0), 0xffffffffffffffff)
r2 = socket(0x10, 0x2, 0x0)
statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x1ff, 0x7, 0x45, 0x4909b6f8, 0x1ffdf, 0x7, 0x200003, 0x2, 0xa121, 0x3, 0x6, 0x4, 0xb4, 0xa, 0x6, 0x10001, 0x80, 0x100000000, 0x0, 0x7, 0x2100, 0x200, 0x0, 0x84, [0x0, 0x0, 0x0, 0x50100000000000, 0x0, 0x2000, 0x0, 0xa, 0x70624ce7, 0x0, 0xfffffffffffffffd, 0xfffffffffffffffd, 0x0, 0x0, 0x2, 0x0, 0xffffffffffffbffd, 0xfffffffffffffffd, 0x1, 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x2000000000000000, 0x0, 0x0, 0x400000000005b8, 0xc, 0x0, 0x0, 0x0, 0x6, 0xffffffffffffffff, 0x88e, 0x8000000000008, 0xfffffffffffffffc, 0x9, 0xa38, 0x0, 0x3, 0xfffffffffffffffa, 0x8, 0x4000000000, 0x7]}, 0x1fe, 0xd)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="10002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000)
sendmmsg$auto(r2, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f00000001c0), 0x7, 0xa505}, 0x800}, 0x7, 0x4008)

11m40.425105252s ago: executing program 3 (id=900):
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
semop$auto(0xfffffffffffffffb, 0xfffffffffffffffe, 0x8)
close_range$auto(0x2, 0xa, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket(0x1e, 0x4, 0x0)
r1 = socket(0x1e, 0x4, 0x0)
get_robust_list$auto(0x0, 0x0, 0x0)
setsockopt$auto(r1, 0x10f, 0x87, 0x0, 0x14)
setsockopt$auto(0x3, 0x10f, 0x87, 0x0, 0x14)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket(0x1e, 0x4, 0x0)
mq_notify$auto(0x5cf5, 0x0)
setsockopt$auto(r2, 0x10f, 0x87, 0x0, 0x14)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0)
close_range$auto(0x2, 0x8, 0x0)
io_uring_setup$auto(0x9, &(0x7f00000002c0)={0x3, 0x167, 0x1, 0x401, 0x8001, 0x9, r1, [0x81, 0x4, 0x4], {0x5, 0x0, 0x10, 0x8000, 0x101, 0x400, 0x5, 0x8000000, 0x9}, {0x5, 0x563d, 0xe5ba, 0xdd6, 0x8, 0x76e8, 0x1, 0x2, 0xaf03}})
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'netdevsim0\x00'})
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'bond_slave_0\x00'})
rt_sigprocmask$auto(0x1, 0x0, &(0x7f0000000280), 0x8)
ioctl$auto_UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, &(0x7f0000000000)={0xffffffffffffffff, 0xff, 0x1, 0x8})
r4 = open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154)
write$auto_uinput_fops_uinput(r4, &(0x7f0000000180)="c2eda7c2efb1af3b0a3fb686b78f296e7bca5c8f1949824dbebea2ef367af9bb905ee36d7fa6f32d0c2ecbef074e338e9486ced8c14db02ff8c0fe331a144486f920", 0x42)
syz_genetlink_get_family_id$auto_nlctrl(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$auto_CTRL_CMD_GETFAMILY2(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x20000050}, 0x800)

11m40.029826472s ago: executing program 3 (id=901):
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
close_range$auto(0x2, 0x8, 0x0)
r1 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000080), r0)
sendmsg$auto_L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r1, 0x8, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x8040}, 0x20048804)
socket$nl_generic(0x10, 0x3, 0x10)
sendmmsg$auto(0x3, &(0x7f0000000000)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xac}, 0x5, 0x0, 0x1, 0x697b}, 0xed7138c}, 0x2, 0x9)
recvfrom$auto(0x4, 0x0, 0x101d0, 0x3ffffd, 0x0, 0x0)
connect$auto(0x3, 0x0, 0x55)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
clone$auto(0xd2d2, 0x7fffffffffffffff, 0xffffffffffffffff, 0x0, 0x1)
mbind$auto(0x20000000000008, 0x100000006, 0xfffffffdfffffff1, 0x0, 0x3, 0x2)
epoll_create$auto(0x4)
sendmsg$auto_CTRL_CMD_GETPOLICY(r0, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000001180)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x20000800}, 0x4000841)
recvmmsg$auto(0x4, &(0x7f0000000200)={{0x0, 0x4, &(0x7f0000000140)={0x0, 0x4da}, 0x4, 0x0, 0x8, 0x800}, 0x1000}, 0xffffffff, 0x0, 0x0)
close_range$auto(0x0, 0xfffffffffffff000, 0x0)
mprotect$auto(0x1ffff000, 0x8000000000000001, 0x4)

11m39.25219422s ago: executing program 3 (id=904):
r0 = getpid()
syz_open_procfs$namespace(r0, 0x0)
r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000780)='/proc/self/net/rpc/nfs4.idtoname/flush\x00', 0x461, 0x0)
mprotect$auto(0x1ffff000, 0x8000000000000004, 0xd)
write$auto(r1, &(0x7f0000000080)='/sys kernel/tracing/set_event_notrace_pid\x00', 0x9)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff)
sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x14, r3, 0x1b, 0x70bd26, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4004040}, 0xc800)
mprotect$auto(0x110c230000, 0x3, 0x2)
munmap$auto(0xffffffff, 0x1)
madvise$auto(0x0, 0xffffffffffff0001, 0x9)
r4 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff)
r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000340)='/sys/devices/virtual/bdi/7:13/strict_limit\x00', 0x0, 0x0)
prctl$auto(0x59616d61, 0xffffffffffffffff, 0xa, 0x208, 0xfff)
prctl$auto(0x59616d61, 0xffffffffffffffff, 0x6, 0x8, 0xfff)
read$auto_kernfs_file_fops_kernfs_internal(r5, &(0x7f0000001c00)=""/4111, 0x100f)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x48, r4, 0x1b, 0x70bd26, 0x25dfdbfd, {}, [@OVS_PACKET_ATTR_PROBE={0x4}, @OVS_PACKET_ATTR_ACTIONS={0x18, 0x3, 0x0, 0x1, [@typed={0x14, 0xc, 0x0, 0x0, @ipv6=@loopback}]}, @OVS_PACKET_ATTR_PACKET={0x12, 0x1, "898771f1c19f17790485908286dd"}, @OVS_PACKET_ATTR_KEY={0x4}]}, 0x48}, 0x1, 0x0, 0x0, 0x44000884}, 0xc800)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)

11m38.381211077s ago: executing program 3 (id=909):
r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/timers\x00', 0x0, 0x0)
mlockall$auto(0x7)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x10004)
inotify_rm_watch$auto(0xffffffffffffffff, 0x84e4)
r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS1\x00', 0x20000, 0x0)
read$auto_tty_fops_tty_io(r1, 0x0, 0x0)
madvise$auto(0x0, 0x2000040080000004, 0xe)
modify_ldt$auto(0x1, 0x0, 0x10)
openat$auto_proc_mountinfo_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f0000000080)='/proc/devices\x00', 0xea901, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
madvise$auto(0x0, 0xffffffffffff0005, 0x17)
madvise$auto(0xfffffffffffffffd, 0xffffffffffff0002, 0x19)
fallocate$auto(r0, 0x1, 0x9, 0x80000000)
mmap$auto(0x2, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
madvise$auto(0x0, 0x8000000000000000, 0x15)
madvise$auto(0x0, 0x1010001, 0x100000003)
setgroups$auto(0xe32, &(0x7f0000000040)=0x9)
uname$auto(&(0x7f0000000280)={"017a23d49d4e4f89b7bb66d0528142ad4998ea9c70c06d0408e91b30b0b0d300722823e67e78003cff84dfc2528569e4ca4367c6216df84c3958d96ed2c499caff", "1e2157148e99091f121521269985a6a599863e135818f2ccc77a864d50fd1b2447c13d33dfb37033d53d69c4ff062abf19efab53fd75a00d4af7dbdef66e913103", "1fa81ccc6ffd05b516bdc4046cdfee68955b5ae48f8a322b6a0e4d8233d9491029f04050fca8a76d8b02739e3347e73f0f398e219952ca06e6c78655a70e097917", "0749ebba3d6f1ed9c077eeeb6deae36535af268af804ea0614e6c5ef0445f6fb05bec835636e440d94396dbeef246ceff774a1af2e8884df1be20351da9874f6fa", "4fbb5ffd975d9cf0800c3bf9046b1351f7371fcaea1fac30b4de0ac23b4d950cba906c482378f4337fe941454b8dbd36e51d285c95a92a20bec5a9907616fad85e", "d802740973602ea52b49799bc04ddb3c4e8995a5f9bd70c8c718fc2ebdffc648dd1195b4ac34305e0d8651eee2435736984e421114030659dd79fedec147e0e6ee"})
ppoll$auto(0x0, 0x9, 0x0, 0x0, 0x8)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
landlock_restrict_self$auto(r2, 0x0)
read$auto(r0, &(0x7f0000000180)='l.\x00\x0fx\x1e-[\x85\xe7e\x12\x1f\xcc_G\x11\x95\x9ex\x1bY@\xe1\xf7\a\"o\xec\b>\xee!y\xf1\xd7W\xfa\xd01#D\xe9\xef\xf2\xb8\x1e\x91u[\x17\xae\x8e\xb7R\x19\xe8X\xb2c\xc9/0\xe1\x10\x8d#*\xd7s\xd1:\xe1\x88%\xca\'X\a\a\xb0\xc3\xea\xa9\xce.n\x81\xa44\x04\x95\x06z\xb2DD=\xbf.\xdd\x17\xc9\x982\xb8\xcb\x15Y`\x84\x86i7\x8a\xa3L\xc0\x11\xc8\xea\xe5YR9=wA\xa26\xe2Ka\x17\x94\xf1d\x89\x17\x1e\x9b\x8c-\x1d\xd2\xd3o0\xf6\x8f\xce\xb5Y\xc6\x00R\xb2\x183E\x1c\x06\x00\xadj\x807u#Vwv\xfen\x81T\xf0 \x02\xbb\x9c\xe6\xe8Y0{\x83\xaa\xbd\xff2i\x83\x92\xfc\xfao\xa0\xb9}\xa5\xc7\xf2S\x90\xac\xe8\xcb\x9fn\xfc\x0e@\xf5H\b\x14\xce\xaec8$Z\xf9_ym\xdc', 0x1)
openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0)
madvise$auto(0x0, 0x200007, 0x19)

11m36.313553104s ago: executing program 3 (id=915):
mmap$auto(0x80000001, 0xa, 0x6f, 0xeb1, 0xaffd, 0x7f)
close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_nbd(&(0x7f0000001d00), 0xffffffffffffffff)
sendmsg$auto_NBD_CMD_CONNECT(r0, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001dc0)={&(0x7f00000000c0)={0x30, r1, 0x1, 0x70bd25, 0x25dfdbfd, {}, [@NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [@nested={0xc, 0x1, 0x0, 0x1, [@nested={0x7, 0x1, 0x0, 0x1, [@generic='\x00\x00\x00']}]}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x8880)
capset$auto(&(0x7f0000000080)={0x3}, &(0x7f0000000140)={0x4, 0xffffff5e})
sendmsg$auto_NL80211_CMD_NEW_INTERFACE(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000001}, 0x4000801)
r2 = openat$auto_split_huge_pages_fops_huge_memory(0xffffffffffffff9c, &(0x7f00000000c0), 0x642, 0x0)
write$auto_split_huge_pages_fops_huge_memory(r2, &(0x7f0000000100)="3173a3", 0x3)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
rseq$auto(0x0, 0x8000, 0x0, 0x6)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
r3 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv6/conf/tunl0/disable_policy\x00', 0x601, 0x0)
write$auto(r3, 0x0, 0x8)
close_range$auto(r3, 0xffffeffe, 0x2)
r4 = syz_clone3(&(0x7f0000000240)={0x40038000, &(0x7f0000000040), &(0x7f00000000c0), &(0x7f0000000100), {0x19}, &(0x7f0000000140)=""/95, 0x5f, &(0x7f00000001c0)=""/24, &(0x7f0000000200)=[0xffffffffffffffff, 0xffffffffffffffff], 0x2}, 0x58)
capget$auto(&(0x7f00000002c0)={0x7e, r4}, 0x0)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
write$auto(0x3, 0x0, 0xfffffdef)
r5 = openat$auto_urandom_fops_random(0xffffffffffffff9c, &(0x7f0000004000), 0x40, 0x0)
open(&(0x7f0000000080)='./cgroup\x00', 0x40001, 0x6)
r6 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080))
pread64$auto(r6, 0x0, 0xbfe7, 0x8)
ioctl$auto_RNDADDENTROPY2(r5, 0x40085203, 0x0)

11m21.089345939s ago: executing program 32 (id=915):
mmap$auto(0x80000001, 0xa, 0x6f, 0xeb1, 0xaffd, 0x7f)
close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_nbd(&(0x7f0000001d00), 0xffffffffffffffff)
sendmsg$auto_NBD_CMD_CONNECT(r0, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001dc0)={&(0x7f00000000c0)={0x30, r1, 0x1, 0x70bd25, 0x25dfdbfd, {}, [@NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [@nested={0xc, 0x1, 0x0, 0x1, [@nested={0x7, 0x1, 0x0, 0x1, [@generic='\x00\x00\x00']}]}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x8880)
capset$auto(&(0x7f0000000080)={0x3}, &(0x7f0000000140)={0x4, 0xffffff5e})
sendmsg$auto_NL80211_CMD_NEW_INTERFACE(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000001}, 0x4000801)
r2 = openat$auto_split_huge_pages_fops_huge_memory(0xffffffffffffff9c, &(0x7f00000000c0), 0x642, 0x0)
write$auto_split_huge_pages_fops_huge_memory(r2, &(0x7f0000000100)="3173a3", 0x3)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
rseq$auto(0x0, 0x8000, 0x0, 0x6)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
r3 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv6/conf/tunl0/disable_policy\x00', 0x601, 0x0)
write$auto(r3, 0x0, 0x8)
close_range$auto(r3, 0xffffeffe, 0x2)
r4 = syz_clone3(&(0x7f0000000240)={0x40038000, &(0x7f0000000040), &(0x7f00000000c0), &(0x7f0000000100), {0x19}, &(0x7f0000000140)=""/95, 0x5f, &(0x7f00000001c0)=""/24, &(0x7f0000000200)=[0xffffffffffffffff, 0xffffffffffffffff], 0x2}, 0x58)
capget$auto(&(0x7f00000002c0)={0x7e, r4}, 0x0)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
write$auto(0x3, 0x0, 0xfffffdef)
r5 = openat$auto_urandom_fops_random(0xffffffffffffff9c, &(0x7f0000004000), 0x40, 0x0)
open(&(0x7f0000000080)='./cgroup\x00', 0x40001, 0x6)
r6 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080))
pread64$auto(r6, 0x0, 0xbfe7, 0x8)
ioctl$auto_RNDADDENTROPY2(r5, 0x40085203, 0x0)

10m55.913481853s ago: executing program 4 (id=991):
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffff7ffffffffffa, 0x8000)
r0 = openat$auto_proc_pid_numa_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000003640)='/proc/self/numa_maps\x00', 0x40080, 0x0)
read$auto_proc_pid_numa_maps_operations_internal(r0, &(0x7f0000000000)=""/110, 0x6e)
openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0)
madvise$auto(0x0, 0xffffffffffff0005, 0x17)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
setpriority$auto(0x4000000001, 0x100000001, 0x6)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
setgroups$auto(0xe32, 0x0)
madvise$auto(0x0, 0x53, 0x9)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
pselect6$auto(0x101, &(0x7f0000000080)={[0x6, 0x7, 0xfffffffffffffffc, 0x3, 0x1, 0x7, 0x0, 0x7, 0x1, 0x8, 0x9, 0x4, 0x4, 0x7, 0xcb2a, 0x9]}, &(0x7f0000000100)={[0xffff, 0x3, 0xfffffffffffff31a, 0xf63, 0x590, 0x8, 0x1d4, 0x4, 0x6, 0x7, 0x5, 0x7, 0x80, 0x8, 0x0, 0x1]}, 0x0, &(0x7f0000000000)={0x899, 0x5}, &(0x7f0000000200))
socket(0x15, 0x6, 0x80)
syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff)
setregid$auto(0x5, 0x6)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2)
process_mrelease$auto(0x4, 0x0)
mremap$auto(0x1fc000, 0xfee0, 0x3fd6, 0x7, 0xfffff000)
ppoll$auto(&(0x7f0000000280)={0xffffffffffffffff, 0x6, 0x9}, 0x9, &(0x7f00000002c0)={0x8000000000000001, 0x8001}, &(0x7f0000000300)={0x7ff}, 0x8)
r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
move_pages$auto(r1, 0x1002, 0x0, 0x0, 0x0, 0x2)
memfd_create$auto(&(0x7f0000000040)='A^^\x02\x00\xef\x97\x8aY\x00\x00\xd2\x8c\xb05\x03\\\xb2\xbf247{\xde\t8\f\x00T\x00'/40, 0x9)
finit_module$auto(0x3, 0xfffffffffffffffe, 0x2)

10m53.152472789s ago: executing program 4 (id=1000):
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
getrandom$auto(0x0, 0x6000000, 0x3)
ioctl$auto(0xc8, 0x400454d9, 0x5c8d)
mlockall$auto(0x7)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x7f, 0x8000)
sendmmsg$auto(0x3, 0x0, 0x3, 0x0)
pselect6$auto(0x4, 0x0, &(0x7f0000000180)={[0x2, 0x9, 0x2da0000, 0xff, 0x101, 0x1c00000, 0xa1, 0x4, 0xfffffffffffffffe, 0x8, 0x4, 0x9, 0x1, 0x0, 0xe, 0x80000001]}, 0x0, 0x0, &(0x7f0000000340))
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x48000}, 0x0)
io_uring_setup$auto(0x6, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x3)
close_range$auto(0x2, 0x8, 0x0)
io_uring_setup$auto(0x6, 0x0)
clone$auto(0x7, 0x7fffffffffffffff, 0xffffffffffffffff, 0x0, 0x1)
io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x3)
mprotect$auto(0x1ffff000, 0x8000000000000001, 0x4)
recvmmsg$auto(0xffffffffffffffff, &(0x7f0000000140)={{0x0, 0x4, &(0x7f0000000080)={0x0, 0x800}, 0x5, &(0x7f00000000c0), 0x2, 0x8}, 0x800}, 0x10a, 0x8, 0x0)

10m51.588838035s ago: executing program 4 (id=1009):
statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x9, 0x3, 0xe, 0x940, 0x1ffde, 0x3, 0x2000000000000006, 0x2, 0x9, 0x5, 0x2, 0x7, 0xb0, 0x7, 0x2, 0x3, 0x5, 0x7, 0x0, 0x6, 0x0, 0x0, 0x20000000, 0x0, [0x0, 0x8000000, 0x0, 0x7]}, 0x1fe, 0x81)
socket(0x1, 0x803, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x1d, 0x2, 0x2)
socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x0, 0x2000d, 0x4000000000df, 0xeb1, 0x800000404, 0x8000)
socket(0x2, 0x1, 0x0)
socket(0x2, 0x6, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
userfaultfd$auto(0x1)
socket(0xf, 0x3, 0x2)
socket(0x2, 0xa, 0xe57a)
socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0)
connect$auto(0x5, 0x0, 0x9)
r0 = socket(0x10, 0x2, 0x0)
sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="10002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x1ac}}, 0x40400c4)
sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, &(0x7f00000001c0), 0x7, 0xa505}, 0x800}, 0x7, 0x4008)

10m50.982762979s ago: executing program 4 (id=1012):
mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000)
move_pages$auto(0x1, 0xf54, 0x0, 0x0, 0x0, 0x8000000000000000)
mmap$auto(0x0, 0x20009, 0xe3, 0x100000eb1, 0x40000000000a1, 0x8000)
socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0)
fsopen$auto(&(0x7f0000000000)='nlctrl\x00', 0x3)
madvise$auto(0x0, 0x7fffffffffffffff, 0xa)
mmap$auto(0x0, 0x9, 0x400000072, 0x8b72, 0x1000000002, 0x8000)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
socketpair$auto(0x1e, 0x5, 0x8, 0x0)
r0 = socket(0xa, 0x801, 0x84)
getsockopt$auto(r0, 0x84, 0x75, 0x0, &(0x7f0000000000)=0x9000c)
r1 = openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, &(0x7f00000002c0), 0x40000, 0x0)
madvise$auto(0x0, 0x54, 0x6)
ioctl$auto_DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, 0x0)
mmap$auto(0x0, 0x9, 0xff7, 0x8000000008012, 0x1000000004, 0x0)
statx$auto(0xffffff9c, 0x0, 0x1000, 0x1, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000010c0), 0xffffffffffffffff)
r2 = socket(0x10, 0x2, 0x0)
statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x1ff, 0x7, 0x45, 0x4909b6f8, 0x1ffdf, 0x7, 0x200003, 0x2, 0xa121, 0x3, 0x6, 0x4, 0xb4, 0xa, 0x6, 0x10001, 0x80, 0x100000000, 0x0, 0x7, 0x2100, 0x200, 0x0, 0x84, [0x0, 0x0, 0x0, 0x50100000000000, 0x0, 0x2000, 0x0, 0xa, 0x70624ce7, 0x0, 0xfffffffffffffffd, 0xfffffffffffffffd, 0x0, 0x0, 0x2, 0x0, 0xffffffffffffbffd, 0xfffffffffffffffd, 0x1, 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x2000000000000000, 0x0, 0x0, 0x400000000005b8, 0xc, 0x0, 0x0, 0x0, 0x6, 0xffffffffffffffff, 0x88e, 0x8000000000008, 0xfffffffffffffffc, 0x9, 0xa38, 0x0, 0x3, 0xfffffffffffffffa, 0x8, 0x4000000000, 0x7]}, 0x1fe, 0xd)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000003b00), r3)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000003b40)={'wlan1\x00', <r5=>0x0})
sendmsg$auto_NL80211_CMD_EXTERNAL_AUTH(r3, &(0x7f0000003c00)={0x0, 0x0, &(0x7f0000003bc0)={&(0x7f0000003b80)={0x1c, r4, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x180c0)
sendmmsg$auto(r2, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f00000001c0), 0x7, 0xa505}, 0x800}, 0x7, 0x4008)

10m49.455319903s ago: executing program 4 (id=1017):
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty47\x00', 0x14d200, 0x0)
sysfs$auto(0x2, 0xd, 0x0)
ioctl$auto_TIOCSWINSZ2(r0, 0x5414, 0x0)
r1 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/controlC1\x00', 0xa02, 0x0)
r2 = socket(0x10, 0x2, 0x0)
close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002)
fanotify_init$auto(0x401, 0x1)
socket(0x2, 0x1, 0x0)
socket(0x1e, 0x1, 0x0)
socket(0x25, 0x3, 0xfffffffe)
memfd_create$auto(&(0x7f0000000000)='\xc4--:\xdd:,./-${\x00', 0x4)
fanotify_mark$auto(0x0, 0x1, 0x9, 0x4, 0x0)
mmap$auto(0x0, 0xc, 0x4000000000df, 0x44eb2, 0x10006, 0x300000000000)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
sendmsg$auto_ETHTOOL_MSG_CABLE_TEST_TDR_ACT(r2, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x480c0}, 0x8c4)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x800)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x40000)
acct$auto(&(0x7f00000001c0)='/dev/snd/controlC1\x00')
ioctl$auto_SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r1, 0xc0045516, &(0x7f0000000000)=0x81)
ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(r1, 0xc1105517, &(0x7f0000000080)={{0x0, 0x110d, 0x10000, 0x6, "e927783f468fa2e92fe8ec7a46cbb766439daa1ee1aa00000000e10000000000000000000400", 0x8}, 0x6, 0x5, 0x6, 0x8, @enumerated={0x7, 0xbf1c, "02e77dfb6cc96eda972d2238c0b2f33fb396ee46df2bcee4e4d9caff3824d944224d4f988cc365d866890577dd8481d064265becc2418357f63beeec804a7b9a", 0xb8b5, 0x2}, "a4699d30a05edbe0d28473c399a7dc920b153e9b1675451d7de94b4123f970bedd3460c667373fcc59b584d81592f6ab606c276852295e00af49e6de6e768034"})
socket(0xa, 0x3, 0x3a)
read$auto(0x3, 0x0, 0x80)
r3 = openat$auto_ecryptfs_miscdev_fops_miscdev(0xffffffffffffff9c, &(0x7f0000000040), 0x2981, 0x0)
write$auto_ecryptfs_miscdev_fops_miscdev(r3, &(0x7f0000001640)="00000000ee", 0x5)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
dup2$auto(r4, r4)

10m48.250358751s ago: executing program 4 (id=1021):
mmap$auto(0x0, 0x3, 0x6, 0x2f2, 0x9, 0x8004)
io_uring_setup$auto(0x3ff, 0x0)
mmap$auto(0x80000001, 0xa, 0x6f, 0xeb1, 0xaffd, 0x7f)
close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_nbd(&(0x7f0000001d00), 0xffffffffffffffff)
sendmsg$auto_NBD_CMD_CONNECT(r0, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001dc0)={&(0x7f00000000c0)={0x30, r1, 0x1, 0x70bd25, 0x25dfdbfd, {}, [@NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [@nested={0xc, 0x1, 0x0, 0x1, [@nested={0x7, 0x1, 0x0, 0x1, [@generic='\x00\x00\x00']}]}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x8880)
capset$auto(&(0x7f0000000080)={0x3}, &(0x7f0000000140)={0x4, 0xffffff5e})
sendmsg$auto_NL80211_CMD_NEW_INTERFACE(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000001}, 0x4000801)
r2 = openat$auto_split_huge_pages_fops_huge_memory(0xffffffffffffff9c, &(0x7f00000000c0), 0x642, 0x0)
write$auto_split_huge_pages_fops_huge_memory(r2, &(0x7f0000000100)="3173a3", 0x3)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
rseq$auto(0x0, 0x8000, 0x0, 0x6)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
r3 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv6/conf/tunl0/disable_policy\x00', 0x601, 0x0)
write$auto(r3, 0x0, 0x8)
close_range$auto(r3, 0xffffeffe, 0x2)
r4 = syz_clone3(&(0x7f0000000240)={0x40038000, &(0x7f0000000040), &(0x7f00000000c0), &(0x7f0000000100), {0x19}, &(0x7f0000000140)=""/95, 0x5f, &(0x7f00000001c0)=""/24, &(0x7f0000000200)=[0xffffffffffffffff, 0xffffffffffffffff], 0x2}, 0x58)
capget$auto(&(0x7f00000002c0)={0x7e, r4}, 0x0)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
write$auto(0x3, 0x0, 0xfffffdef)
r5 = openat$auto_urandom_fops_random(0xffffffffffffff9c, &(0x7f0000004000), 0x40, 0x0)
open(&(0x7f0000000080)='./cgroup\x00', 0x40001, 0x6)
r6 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080))
pread64$auto(r6, 0x0, 0xbfe7, 0x8)
ioctl$auto_RNDADDENTROPY2(r5, 0x40085203, 0x0)

10m32.700276536s ago: executing program 33 (id=1021):
mmap$auto(0x0, 0x3, 0x6, 0x2f2, 0x9, 0x8004)
io_uring_setup$auto(0x3ff, 0x0)
mmap$auto(0x80000001, 0xa, 0x6f, 0xeb1, 0xaffd, 0x7f)
close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_nbd(&(0x7f0000001d00), 0xffffffffffffffff)
sendmsg$auto_NBD_CMD_CONNECT(r0, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001dc0)={&(0x7f00000000c0)={0x30, r1, 0x1, 0x70bd25, 0x25dfdbfd, {}, [@NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [@nested={0xc, 0x1, 0x0, 0x1, [@nested={0x7, 0x1, 0x0, 0x1, [@generic='\x00\x00\x00']}]}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x8880)
capset$auto(&(0x7f0000000080)={0x3}, &(0x7f0000000140)={0x4, 0xffffff5e})
sendmsg$auto_NL80211_CMD_NEW_INTERFACE(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000001}, 0x4000801)
r2 = openat$auto_split_huge_pages_fops_huge_memory(0xffffffffffffff9c, &(0x7f00000000c0), 0x642, 0x0)
write$auto_split_huge_pages_fops_huge_memory(r2, &(0x7f0000000100)="3173a3", 0x3)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
rseq$auto(0x0, 0x8000, 0x0, 0x6)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
r3 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv6/conf/tunl0/disable_policy\x00', 0x601, 0x0)
write$auto(r3, 0x0, 0x8)
close_range$auto(r3, 0xffffeffe, 0x2)
r4 = syz_clone3(&(0x7f0000000240)={0x40038000, &(0x7f0000000040), &(0x7f00000000c0), &(0x7f0000000100), {0x19}, &(0x7f0000000140)=""/95, 0x5f, &(0x7f00000001c0)=""/24, &(0x7f0000000200)=[0xffffffffffffffff, 0xffffffffffffffff], 0x2}, 0x58)
capget$auto(&(0x7f00000002c0)={0x7e, r4}, 0x0)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
write$auto(0x3, 0x0, 0xfffffdef)
r5 = openat$auto_urandom_fops_random(0xffffffffffffff9c, &(0x7f0000004000), 0x40, 0x0)
open(&(0x7f0000000080)='./cgroup\x00', 0x40001, 0x6)
r6 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080))
pread64$auto(r6, 0x0, 0xbfe7, 0x8)
ioctl$auto_RNDADDENTROPY2(r5, 0x40085203, 0x0)

8m21.737051785s ago: executing program 0 (id=1353):
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
socket(0x10, 0x2, 0x0)
mmap$auto(0x0, 0x8, 0x2, 0x9b72, 0x5, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000940)={'batadv0\x00', <r1=>0x0})
sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000226bd7000fedbdf25030000000800030000020000060007000080000008000200", @ANYRES32=0x0, @ANYBLOB="0a00050000000000000000000a00010000000000000000000a000500000000000000000008000200", @ANYRES32=r1, @ANYBLOB="08000200", @ANYRES32=0x0, @ANYBLOB="0a0001000001"], 0x6c}, 0x1, 0x0, 0x0, 0x40080}, 0x40090)
r2 = openat$auto_fuse_conn_congestion_threshold_ops_control(0xffffffffffffff9c, 0x0, 0x1, 0x0)
read$auto_fuse_conn_congestion_threshold_ops_control(r2, 0x0, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x4004)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0)

8m20.604101145s ago: executing program 0 (id=1356):
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x0, 0x20009, 0x800000000000df, 0xeb1, 0xa, 0x8000)
getpriority$auto(0x2, 0x7ff)
setsockopt$auto(0x4, 0x1, 0xc, 0x0, 0x6)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
unshare$auto(0x40000080)
clone$auto(0x8001, 0x5, 0xffffffffffffffff, 0xfffffffffffffffc, 0x6)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0xffffffffffffffff, 0x1, 0x4, 0x14, 0x34, 0x8)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
setsockopt$auto(r0, 0x7, 0x2, 0x0, 0x9)
mmap$auto(0x0, 0x2030009, 0x3, 0x100000000eb1, 0xfffffff7fffffff7, 0x8000)
socket(0xa, 0x5, 0x0)
setuid$auto(0x80000000000c)
ioctl$auto(0x3, 0x8982, 0x91)
writev$auto(0x1, &(0x7f0000000100)={0x0, 0x400000000000fdef}, 0x1)
madvise$auto(0x0, 0x20200, 0x15)
mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000)
io_cancel$auto(0x6, 0x0, &(0x7f00000002c0)={0x100000000, 0x42, 0xfffffffffdfffff8, 0xf23d})
mmap$auto(0x20000000, 0xe9, 0xdf, 0x9b72, 0x2, 0x4)
socket(0x25, 0x1, 0x3)
clone$auto(0xd2d4, 0x101, 0xffffffffffffffff, 0x0, 0xfffffffffffffffd)
mbind$auto(0x0, 0x100000004, 0x100000000, 0x0, 0x6, 0x2)
madvise$auto(0xffff, 0x8000000000000003, 0xa)
pselect6$auto(0x8000000000002, 0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffe, 0xfffffffffffffffc, 0x0)
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000180)='ns/time\x00')
socket(0x10, 0x2, 0x14)
socket$nl_generic(0x10, 0x3, 0x10)

8m18.817109002s ago: executing program 0 (id=1362):
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
getrandom$auto(0x0, 0x6000000, 0x3)
ioctl$auto(0xc8, 0x400454d9, 0x5c8d)
mlockall$auto(0x7)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x7f, 0x8000)
sendmmsg$auto(0x3, 0x0, 0x3, 0x0)
pselect6$auto(0x4, 0x0, &(0x7f0000000180)={[0x2, 0x9, 0x2da0000, 0xff, 0x101, 0x1c00000, 0xa1, 0x4, 0xfffffffffffffffe, 0x8, 0x4, 0x9, 0x1, 0x0, 0xe, 0x80000001]}, 0x0, 0x0, &(0x7f0000000340))
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x40000)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x48000}, 0x0)
io_uring_setup$auto(0x6, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x3)
close_range$auto(0x2, 0x8, 0x0)
io_uring_setup$auto(0x6, 0x0)
clone$auto(0x7, 0x7fffffffffffffff, 0xffffffffffffffff, 0x0, 0x1)
io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x3)
mprotect$auto(0x1ffff000, 0x8000000000000001, 0x4)
recvmmsg$auto(0xffffffffffffffff, &(0x7f0000000140)={{0x0, 0x4, &(0x7f0000000080)={0x0, 0x800}, 0x5, &(0x7f00000000c0), 0x2, 0x8}, 0x800}, 0x10a, 0x8, 0x0)

8m15.719528178s ago: executing program 0 (id=1370):
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
prctl$auto(0x1000000003b, 0x1, 0xd014, 0x9, 0x3)
r0 = open(&(0x7f0000000480)='./cgroup.cpu/cgroup.procs\x00', 0x80842, 0x91)
read$auto(r0, 0x0, 0x1)
ioctl$auto_RFKILL_IOC_MAX_SIZE(r0, 0x2, 0x0)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x1, 0x10004)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
madvise$auto(0x0, 0xffffffffffff0004, 0x19)
setresuid$auto(0x2, 0x7, 0x8080)
close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002)
madvise$auto(0x9, 0x2, 0x9)
fanotify_init$auto(0x200, 0x2010000000000)
r1 = syz_genetlink_get_family_id$auto_netdev(&(0x7f0000001500), 0xffffffffffffffff)
r2 = socket(0x10, 0x2, 0x0)
sendmsg$auto_NETDEV_CMD_QUEUE_GET(r2, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x14, r1, 0x1, 0x70bd26, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x810)
r3 = socket(0xa, 0x2, 0x0)
shutdown$auto(0x200000003, 0x2)
sendmmsg$auto(r3, &(0x7f0000000300)={{&(0x7f0000000040), 0xb8, 0x0, 0x0, 0x0, 0x0, 0x2001000}, 0x9}, 0x1, 0x8008)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
prctl$auto(0x13b, 0x2, 0x4, 0x7fffffffffffffff, 0x8)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/fs/jbd2/sda1-8/info\x00', 0x2, 0x0)
close_range$auto(0x2, 0x8, 0x0)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
accept4$auto(0x1, 0xfffffffffffffffc, 0x0, 0x0)
r5 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), r3)
sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r4, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="f4010000", @ANYRES16=r5, @ANYBLOB="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"], 0x1f4}, 0x1, 0x0, 0x0, 0x48080}, 0x20008800)
fanotify_mark$auto(0x0, 0x1, 0x8000, 0x4, 0x0)

8m10.655506255s ago: executing program 0 (id=1378):
statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x401bf, 0x7352, 0x32, 0x65f, 0x1ffde, 0x7, 0x3, 0x20000002, 0x9, 0x3, 0x6, 0x4, 0xb4, 0x9, 0x6, 0x10003, 0x80, 0x4, 0x0, 0x7, 0x2000, 0x203, 0x0, 0x84, [0x0, 0x0, 0x0, 0x8050100000000000, 0x0, 0x100100001, 0x0, 0xa, 0x70624ce7, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0, 0x1, 0x3, 0x0, 0xfffffffffffffffd, 0x2, 0x200000000004, 0x8, 0xffffffffefffffff, 0x200000000000004, 0x0, 0x0, 0x0, 0x0, 0x400000000005b8, 0xc, 0x0, 0x0, 0x4, 0x6, 0xffffffffffffffff, 0x890, 0x8000000000008, 0xfffffffffffffffc, 0x1000, 0xa38, 0x0, 0x0, 0xfffffffffffffffc, 0x2, 0x4000000000, 0x10006]}, 0x1fe, 0xd)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000)
mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000)
close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002)
open(&(0x7f0000000100)='.\x00', 0x0, 0x408)
socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0)
r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/pts/ptmx\x00', 0x0, 0x0)
ioctl$auto_TIOCSETD2(r0, 0x5423, 0x0)
ioctl$auto(0x3, 0x8924, 0x38)
r1 = openat$auto_generic(0xffffffffffffff9c, 0x0, 0x0, 0x0)
read$auto_snd_ctl_f_ops_control(r1, 0x0, 0x0)
capset$auto(0x0, &(0x7f0000000380)={0x8, 0x401, 0xe})
move_pages$auto(0x0, 0x4, &(0x7f0000000480)=&(0x7f00000003c0)="ecb764c3cdc146b32843b3e84a5b484060845b4f3f1e434c23cf133cd797f5fad5f7c6cb27bfaa070315ed0e1973758b659d5e62b5fbe5c57dab63ef57b5655acac75d47ec0866f22f8ff6c8aa20f1c75168926c5ae13964a3bfb842adad22ae98ff0089518979eec0465bd9f3eb1ab6592a4cb30403ecfb33ee724b41b48fdeaedaa2c002", &(0x7f00000004c0)=0x4, &(0x7f0000000500)=0x8, 0x10001)
mknod$auto(0x0, 0x1, 0x4)
mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000)
io_uring_setup$auto(0x1, 0x0)
r2 = socket(0x11, 0x80003, 0x300)
setsockopt$auto(r2, 0x107, 0x1, 0x0, 0x8004)
sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000)
r3 = socket(0x10, 0x2, 0x0)
sendmmsg$auto(r3, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008)

8m8.275150976s ago: executing program 0 (id=1381):
socket$nl_generic(0x10, 0x3, 0x10)
close_range$auto(0x2, 0x8, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
socket(0x2c, 0x3, 0x6)
socket(0x2, 0xa, 0xe57a)
socket(0x2b, 0x1, 0x1)
setsockopt$auto(0x6, 0x8000000000000006, 0x7, 0x0, 0x7ffffc)
madvise$auto(0x0, 0x7fffffffffffffff, 0xa)
io_setup$auto(0x7ffe, &(0x7f0000000000))
io_setup$auto(0x7ffe, &(0x7f0000000000))
modify_ldt$auto(0x1, &(0x7f00000001c0), 0x10)
keyctl$auto(0x17, 0x4, 0x7fffffffefff, 0x400, 0x0)
r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
socket(0xa, 0x3, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
setsockopt$auto(0x3, 0x0, 0x13, 0x0, 0x9)
bind$auto(r0, 0x0, 0x399)
connect$auto(0x3, &(0x7f0000000140), 0x55)
close_range$auto(0x2, 0x8, 0x0)
io_uring_setup$auto(0x6, 0x0)
socket(0x2, 0x1, 0x106)
sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40004}, 0x811)
sched_getscheduler$auto(r1)
prctl$auto(0x59616d61, 0xffffffffffffffff, 0xa, 0x208, 0xfff)
clock_settime$auto(0xfffffffb, &(0x7f0000000680)={0x8000000000000000, 0x14})
io_setup$auto(0x54d5, &(0x7f0000000000))

7m53.105632275s ago: executing program 34 (id=1381):
socket$nl_generic(0x10, 0x3, 0x10)
close_range$auto(0x2, 0x8, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
socket(0x2c, 0x3, 0x6)
socket(0x2, 0xa, 0xe57a)
socket(0x2b, 0x1, 0x1)
setsockopt$auto(0x6, 0x8000000000000006, 0x7, 0x0, 0x7ffffc)
madvise$auto(0x0, 0x7fffffffffffffff, 0xa)
io_setup$auto(0x7ffe, &(0x7f0000000000))
io_setup$auto(0x7ffe, &(0x7f0000000000))
modify_ldt$auto(0x1, &(0x7f00000001c0), 0x10)
keyctl$auto(0x17, 0x4, 0x7fffffffefff, 0x400, 0x0)
r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
socket(0xa, 0x3, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
setsockopt$auto(0x3, 0x0, 0x13, 0x0, 0x9)
bind$auto(r0, 0x0, 0x399)
connect$auto(0x3, &(0x7f0000000140), 0x55)
close_range$auto(0x2, 0x8, 0x0)
io_uring_setup$auto(0x6, 0x0)
socket(0x2, 0x1, 0x106)
sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40004}, 0x811)
sched_getscheduler$auto(r1)
prctl$auto(0x59616d61, 0xffffffffffffffff, 0xa, 0x208, 0xfff)
clock_settime$auto(0xfffffffb, &(0x7f0000000680)={0x8000000000000000, 0x14})
io_setup$auto(0x54d5, &(0x7f0000000000))

5m10.652038746s ago: executing program 2 (id=2366):
mmap$auto(0x0, 0x404009, 0xdf, 0x17, 0x6, 0x80)
ioctl$auto_KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$auto_KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
socketpair$auto(0xa, 0xfffffffa, 0x9, &(0x7f0000000000)=0x8aa9)
socket(0x15, 0x5, 0x0)
syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff)
msync$auto(0x1ffff000, 0x180000000000000, 0x400000004)
mmap$auto(0x6, 0x81, 0x3, 0x15, 0x3ccdb283, 0x401)
unshare$auto(0x20000)
mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000)
r0 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r2=>0x0})
sendmsg$auto_NL80211_CMD_GET_INTERFACE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000700)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r0, @ANYBLOB="010026bd7000fcdbdf250f00000008000300", @ANYRES32=r2], 0x1c}, 0x1, 0x0, 0x0, 0x4000001}, 0x40010)
r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/net/pppol2tp\x00', 0x48000, 0x0)
read$auto_proc_reg_file_ops_compat_inode(r3, &(0x7f0000000000)=""/33, 0x21)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0)
prctl$auto(0x1000000003b, 0x2, 0x4, 0x2000000000005, 0x7)
mmap$auto(0x800000000000, 0x400005, 0xdf, 0x16, 0x8001, 0x4)
mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x402, 0x300000000000)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffff7, 0x8000)
rseq$auto(&(0x7f0000000300)={0xe, 0x401, 0x0, 0x6, 0xffffffff, 0x2}, 0x8000, 0x0, 0x6)
syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10)
close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002)
fanotify_init$auto(0x5, 0x2000000000002)

5m10.193058021s ago: executing program 2 (id=2369):
socket(0x2, 0x1, 0x0)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
connect$auto(0x3, &(0x7f0000000140), 0x55)
pipe2$auto(0x0, 0x80)
setsockopt$auto(0x3, 0x1, 0xf, 0x0, 0x8)
listen$auto(0x3, 0x83)
shutdown$auto(0x200000003, 0x2)

5m10.135339903s ago: executing program 2 (id=2370):
mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x402, 0x300000000000)
openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000080), 0x40000, 0x0)
io_uring_setup$auto(0xa, 0x0)
readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1)
close_range$auto(0x2, 0xa, 0x0)
open(0x0, 0xa22c0, 0x155)
socket(0x11, 0x80003, 0x300)

5m10.034361062s ago: executing program 2 (id=2371):
mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000)
move_pages$auto(0x1, 0xf54, 0x0, 0x0, 0x0, 0x8000000000000000)
mmap$auto(0x0, 0x20009, 0xe3, 0x100000eb1, 0x40000000000a1, 0x8000)
socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0)
fsopen$auto(&(0x7f0000000000)='nlctrl\x00', 0x3)
madvise$auto(0x0, 0x7fffffffffffffff, 0xa)
mmap$auto(0x0, 0x9, 0x400000072, 0x8b72, 0x1000000002, 0x8000)
mmap$auto(0x0, 0x2020009, 0xfffffffffffffffc, 0xeb1, 0x8000000000000001, 0x7bfe)
close_range$auto(0x2, 0x8, 0x0)
socketpair$auto(0x1e, 0x5, 0x8, 0x0)
socket(0xa, 0x801, 0x84)
r0 = openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, &(0x7f00000002c0), 0x40000, 0x0)
ioctl$auto_DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, 0x0)
r1 = getuid()
setreuid$auto(0x0, r1)
mmap$auto(0x0, 0x9, 0xff7, 0x8000000008012, 0x1000000004, 0x0)
statx$auto(0xffffff9c, 0x0, 0x1000, 0x1, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
clone$auto(0x21002, 0x9, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x9)
syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000010c0), 0xffffffffffffffff)
r2 = socket(0x10, 0x2, 0x0)
pwrite64$auto(r0, &(0x7f00000002c0)='\vX\xb5n\x91p\xe6\x1e\n\x00\x00\x00\x86\xdde\x1cJ\x99\x00\x03\x00\x00\x00\x00\xfd\xfd\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\xff\xff\x00\x00\xf9\xa4*\x01\x00\x00\x00^\x0fo\x84\xfc\x89\v\xd2`\x1be2\xd5\x9f[\xea\x1b\x00\x00\x00\x00\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x01\x00\x00\x00E\xd8?\'\x8dg\x01\x00\x01\x00\x00\xaf\x94\x90\xd7\xa6+,j\xf1\x14gJZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00,,\x93\xba\x88\x93\xc6#\xe5\xaae\x9d\xb6\x1a\x7f\xc0%\xb0\rfOJ+\x02\x9b#\x06\x00\x00\x00\xd7\xee\xd1\xbf2[\xd0\xbdn\x1d\xf3\xea]BR\xb4J}\xa8\xa1\xe1\x18F\xebb\xbb\xf3>\xd5Bd\xfa\x19\a\x00\xf1\x12lw\xed&[\xde?\xde8\xf7\xc1\xa6\xf2\xc1\"\xact\xee\xc9\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x7f\xfd\x82\xa1r\xc0\xc1\x9eG=g\xa7\xe3\x06\xcd\xb9]\xdd\xdcK\x97\x8a\x0e\x94\xd4{\b\xe9\x81<\n\xe9pb\xf7\x9b\xe7\x062T\x85\xc3\xf0x\x1c\x11\xae\xcf\xf2\xd7\x17\xb8\x87\xa0<`\n{P\xafz\xc0\xa4Z\xb1\xbd;\x1d\xc7\xd4g\xe981F\x18j\xc0&0\x7fF\x18Pg\x99L\xdb{\x8a\avR\xfb\x02\xe6\xfe\xb9\xbbCp\xf3K\xff\x8a\x9b\xf1\xbc\xb5\xc64l\x8c\r\xdb\xda|&,\a@\xed[\x1a#m\x01%$\x9b)\xcb\xdf\x0eO~\x80B\'. \xae\xe8\xdf\xb9t\x1f\x8a\xb4\xfb\t\x8eV\xdf\xe9\x17\x8d3\x12\xb6%\x9c!x\xc44uL\xc6\xd5\xc5\xd5\xda\x99\vyg%v\xed\x1f_\xdflt%\xed\xccX\xfc\x17:F\xba\x1c\x17\x13_|\xdc\x1e\xd0\xc2\xec\n\x05\xf9:\x95\x9c\x19V\x95&\xcf\x16\x00\x00\x00\x00\x00\x10\x00\x00\x00\x00\x00\x00\x00\x97\xfb \xdda\x8c\x9e\xc4\xe4\xe6\xba\xf5/HI`\xb5\x1f\xdc\xc2\xb8\x14\x93(\xde9.UJ\xd6\xba\xfeZ\x02\xb2\xd5\xef\xd4\"!\x9f\xd3\x89\xe3Q\x17,e\xb8\xaf\x1b\x89\xe9\xb5\'\xfa\xb3?K\xbb/\xb1\x86m\xf6v]\xa3\xfc\x01\xf5c~5\x90\x1e\x94R\x95\xe5+Sg\x8dVv\x85\x03\x00\x00\x00\x00\x00\x00]\x97\x90/o7\x9d\x8b\xaf\xed\a2w?\xf9\xde1\xcaa\x8e\nF^\aj\x93\xcb\xe5o\x8cm\xeb\x89\n\xc3\x87%\xf7\xaa\xa5\x90avI=\x02\xb7\x9a&]:e\x99\xb2\x14E\x8e\"\x00\x00\x00\x00\x00\x00\x12\xb1\xf9\xc4\x87\xda\x84/\xd0\x1cd02\x04v\xb8\xd2\xbd\x1fs\xa1#\xa0\\H\xa0\xe9\xdf+\xbf\x028a\xffr\x8e\x19\xe8\xa6\xf86\xe1\xbe{\xf0O\xcd\xaa^\x1d@\xaa\xca\xbaS\x00\x00\x00\x00\x00\x00\x00', 0x80200000007, 0x3)
statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x1ff, 0x7, 0x45, 0x4909b6f8, 0x1ffdf, 0x7, 0x200003, 0x2, 0xa121, 0x3, 0x6, 0x4, 0xb4, 0xa, 0x6, 0x10001, 0x80, 0x100000000, 0x0, 0x7, 0x2100, 0x200, 0x0, 0x84, [0x0, 0x0, 0x0, 0x50100000000000, 0x0, 0x2000, 0x0, 0xa, 0x70624ce7, 0x0, 0xfffffffffffffffd, 0xfffffffffffffffd, 0x0, 0x0, 0x2, 0x0, 0xffffffffffffbffd, 0xfffffffffffffffd, 0x1, 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x2000000000000000, 0x0, 0x0, 0x400000000005b8, 0xc, 0x0, 0x0, 0x0, 0x6, 0xffffffffffffffff, 0x88e, 0x8000000000008, 0xfffffffffffffffc, 0x9, 0xa38, 0x0, 0x3, 0xfffffffffffffffa, 0x8, 0x4000000000, 0x7]}, 0x1fe, 0xd)
sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="10002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000)
sendmmsg$auto(r2, &(0x7f0000000200)={{0x0, 0x700, &(0x7f0000000000)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f00000001c0), 0x7, 0xa505}, 0x800}, 0x7, 0x4008)

5m9.459838151s ago: executing program 2 (id=2375):
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
madvise$auto(0x0, 0x2000040080000004, 0xe)
mmap$auto(0x0, 0xfff, 0xdf, 0x9b72, 0x400, 0x28000)
rseq$auto(&(0x7f0000000300)={0x0, 0x9, 0x0, 0x4, 0xffffffff, 0xfffffffe}, 0x8000, 0x0, 0x3)
shmdt$auto(0x0)
madvise$auto(0x0, 0x3, 0x15)
rt_sigqueueinfo$auto(0x1, 0x7, &(0x7f0000000040)={@siginfo_0_0={0x0, 0x5, 0xfffffffb, @_sigpoll={0x52, 0x7}}})

5m8.999854242s ago: executing program 2 (id=2379):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000080), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$auto_NL80211_CMD_STOP_SCHED_SCAN(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010023bdb9d671ece4e5390c000008000300", @ANYRES32=r3], 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x20040084)
mprotect$auto(0x1ffff000, 0x8000000000000001, 0xd)
sendmsg$auto_NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000180)={0x0, 0x30000, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x4044000)

5m8.658596985s ago: executing program 35 (id=2379):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000080), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$auto_NL80211_CMD_STOP_SCHED_SCAN(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010023bdb9d671ece4e5390c000008000300", @ANYRES32=r3], 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x20040084)
mprotect$auto(0x1ffff000, 0x8000000000000001, 0xd)
sendmsg$auto_NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000180)={0x0, 0x30000, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x4044000)

2m2.98627139s ago: executing program 1 (id=3242):
socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x2000000, 0x20009, 0x4000000000dd, 0xeb1, 0x401, 0x2)
sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="10002cbd7000fddbdf25"], 0x14}, 0x1, 0x0, 0x0, 0x20008000}, 0x10004010)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
madvise$auto(0x0, 0xffffffffffff0005, 0x17)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
setpriority$auto(0x4000000001, 0x100000001, 0x6)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
setgroups$auto(0xe32, 0x0)
madvise$auto(0x0, 0x53, 0x9)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
mremap$auto(0x4000, 0xb8, 0x13fd4, 0x3, 0xfffff000)
pselect6$auto(0x101, &(0x7f0000000080)={[0x6, 0x7, 0xffffffffffffffff, 0x3, 0x1, 0x6, 0x9, 0x7, 0x1, 0x4, 0x9, 0x4, 0x4, 0x7, 0xcb2a, 0x9]}, &(0x7f0000000100)={[0xffff, 0x3, 0xfffffffffffff31a, 0x7, 0x590, 0x8, 0x1d4, 0x4, 0x6, 0x7, 0x5, 0x7, 0x80, 0x8, 0x0, 0x1]}, &(0x7f0000000180)={[0xa9, 0x4, 0x4, 0x1, 0x3, 0x6, 0xcbd0, 0x200000001, 0x1f, 0xfffffffffffffffd, 0x7ff, 0x8000000000000001, 0x4, 0x7f, 0x91, 0x7]}, &(0x7f0000000000)={0x899, 0x5}, &(0x7f0000000200))
r0 = socket(0x15, 0x6, 0x80)
r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000380), 0xffffffffffffffff)
setregid$auto(0x5, 0x6)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
socket$nl_generic(0x10, 0x3, 0x10)
clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2)
process_mrelease$auto(0x4, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000480)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB="18000000fe6961fb165b97f8a44f4397aa4f91f95745316f0628ea6cff6b0df47a3c0ee221a985409a5d495432d0fdb924dacd62153319e2f7ce20b64455297315952478", @ANYRES16=r1, @ANYBLOB="100029bd7000fedbdf251f00000004000b00"], 0x18}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000)
mremap$auto(0x1fc000, 0xfee0, 0x3fd6, 0x7, 0xfffff000)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
memfd_create$auto(&(0x7f0000000040)='A^^\x02\x00\xef\x97\x8aY\x00\x00\xd2\x8c\xb05\x03\\\xb2\xbf247{\xde\t8\f\x00T\x00'/40, 0x9)

2m1.37268145s ago: executing program 1 (id=3247):
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
timerfd_create$auto(0x0, 0x0)
socket(0x2, 0x6, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0xa, 0x3, 0x100)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
eventfd$auto(0x3)
socket(0xa, 0x3, 0x73)
socket(0x2b, 0x1, 0x1)
openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000100), 0x7c3142, 0x0)
open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x20)
socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0)
r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/pts/ptmx\x00', 0x0, 0x0)
ioctl$auto_TIOCSETD2(r0, 0x5423, 0x0)
ioctl$auto(r0, 0x80044704, 0x553)

2m0.638838501s ago: executing program 1 (id=3250):
mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x4, 0x300000000000)
bpf$auto(0x0, &(0x7f0000000780)=@link_update={0xa, @new_map_fd=0x5, 0x4007, @old_prog_fd=0x13b}, 0xa3)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
ioperm$auto(0x4, 0xbc6, 0x81)
socket(0x25, 0x1, 0x3)
socket(0x2b, 0x1, 0x1)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
getsockopt$auto(0x100000006, 0x1, 0x3c, 0xfffffffffffffffe, 0x0)
socket(0x2, 0x2, 0x88)
ioctl$auto(0xc9, 0x100000002, 0x4000000005c8d)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
write$auto(0x3, 0x0, 0x3f00)
mmap$auto(0x0, 0x20009, 0x20004000000000df, 0xeb1, 0x401, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
io_uring_setup$auto(0x6, 0x0)
socket(0xa, 0x5, 0x84)
socket(0x1, 0x1, 0x1)
io_uring_setup$auto(0x3, 0x0)
io_uring_register$auto(0x2, 0x2, &(0x7f0000000040), 0x86)
io_uring_register$auto(0x2, 0x6, &(0x7f0000000180), 0x1)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
getrandom$auto(0x0, 0x6000000, 0x3)
msgrcv$auto(0x9, &(0x7f0000000000)={0x80000000, 0xff}, 0xd647, 0x4, 0x2)
madvise$auto(0x0, 0xf663, 0x15)
pipe2$auto(0x0, 0x80)
migrate_pages$auto(0x0, 0x101, 0x0, &(0x7f0000000140)=0x9)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
futex$auto(0x0, 0x6, 0x47, 0x0, 0x0, 0x0)
mmap$auto(0x93, 0x9, 0x9, 0x14, 0x100000001, 0x2)

1m57.848546267s ago: executing program 1 (id=3260):
mmap$auto(0x0, 0x400005, 0xfffffffffffffffe, 0x9b72, 0x2, 0x8000)
sendmsg$auto_WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x4008810}, 0x2000c041)
r0 = socket(0x2, 0x1, 0x0)
bind$auto(0x3, &(0x7f0000000080), 0x6b)
connect$auto(0x3, &(0x7f00000000c0), 0x55)
sendto$auto(r0, &(0x7f0000000200), 0xb, 0x5, &(0x7f0000000240), 0xc8e)
recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd)
fcntl$auto(0xffffffffffffffff, 0x401, 0x5)
syz_genetlink_get_family_id$auto_ovs_meter(0x0, 0xffffffffffffffff)
mprotect$auto(0x1ffff000, 0x8000000000000001, 0x4)
r1 = socket(0x15, 0x5, 0x0)
bind$auto(r1, 0x0, 0x68)
sendmsg$auto_OVS_METER_CMD_SET(0xffffffffffffffff, &(0x7f0000003240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc0}, 0x40)
r2 = syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000100), r0)
sendmsg$auto_BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r2, 0x1, 0x70bd25, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x8040)
write$auto(0x3, 0x0, 0xfffffdef)
setsockopt$auto(0xffffffffffffffff, 0x4, 0x8001, 0x0, 0x2)
unshare$auto(0x40000080)
mmap$auto(0x0, 0x3, 0xdf, 0x91, 0xfff, 0x8001)
mbind$auto(0x0, 0x100000004, 0x100000000, 0x0, 0x6, 0x2)
madvise$auto(0x0, 0xffffffffffff0001, 0x17)
socket(0x26, 0xa, 0x0)
process_mrelease$auto(0x24d, 0xd)
mmap$auto(0x0, 0x1, 0x4000000000df, 0x44eb2, 0x3, 0x300000000000)
mmap$auto(0x6, 0x100, 0xdf, 0x9b7e, 0x2, 0x7ffd)
r3 = socket(0x11, 0x80003, 0x300)
mincore$auto(0x1000, 0x8001, 0x0)
setsockopt$auto(r3, 0x107, 0x12, 0x0, 0x4)
socket$nl_generic(0x10, 0x3, 0x10)

1m56.78482497s ago: executing program 1 (id=3271):
fchmod$auto(0xffffffffffffffff, 0x7439)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_wireguard(&(0x7f0000001140), r0)
sendmsg$auto_WG_CMD_SET_DEVICE(r0, &(0x7f00000028c0)={0x0, 0x0, &(0x7f0000002880)={&(0x7f0000002800)={0x30, r1, 0x21, 0x70bd26, 0x25dfdbfe, {}, [@WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x841}, 0x80)
setreuid$auto(0x4, 0x8)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
socket$nl_generic(0x10, 0x3, 0x10)
close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0xa, 0x5, 0x0)
inotify_init1$auto(0x3000000000000)
inotify_add_watch$auto(0x4, 0x0, 0xe6e)

1m55.601998499s ago: executing program 1 (id=3278):
writev$auto(0x1, &(0x7f0000000100)={0x0, 0x400000000000fdef}, 0x1)

1m55.502271578s ago: executing program 36 (id=3278):
writev$auto(0x1, &(0x7f0000000100)={0x0, 0x400000000000fdef}, 0x1)

34.323290651s ago: executing program 6 (id=3700):
pwrite64$auto(0xc8, &(0x7f0000000600)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x00\r\xaa\x1c\x03\x00\x00\x00c\x14\r>\x94\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\xf1`\x9f\x1e\xf9\xa4\xf8\x15\xdd\xac\x00\x00\x00\x00\x00\x00\x14^\x0fo\x84\xfc\x89\v\xea\x1b\x15\xafQ;CL\"\x01\x0e\xa4\xdf\xdav\x1cC\xff\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2', 0x4e, 0x500000000000)

34.177856032s ago: executing program 6 (id=3702):
shmctl$auto(0x0, 0xb, 0x0)

34.073230119s ago: executing program 6 (id=3703):
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
socket(0x2, 0x801, 0x106)
socketpair$auto(0x8, 0x5, 0x3, 0x0)
setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9)
bind$auto(0x3, 0x0, 0x6b)
r0 = syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_NL80211_CMD_SET_WIPHY(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYRES16=r0, @ANYBLOB="0008020300", @ANYRES32, @ANYBLOB="0800400003000800"], 0x24}, 0x1, 0x0, 0x0, 0x404c0c0}, 0x80)
sendmmsg$auto(0xffffffffffffffff, 0x0, 0x1, 0x1fda)
r2 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000300)='/proc/sys/net/ipv6/neigh/xfrm0/locktime\x00', 0x101282, 0x0)
write$auto_proc_sys_file_operations_proc_sysctl(r2, 0x0, 0x0)
close_range$auto(0x2, 0x8, 0x0)
socket(0x1e, 0x4, 0x0)
socket(0x2, 0x80002, 0x73)
openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000340), 0x20100, 0x0)
semtimedop$auto(0x9, 0x0, 0x0, &(0x7f0000000040)={0x4, 0x1})
arch_prctl$auto(0x5005, 0x9)
socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000)
close_range$auto(0x2, 0x8, 0x0)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a)
r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/sctp/remaddr\x00', 0xb00, 0x0)
pread64$auto(r3, 0x0, 0x594c, 0x9fffffffd)

33.90040573s ago: executing program 6 (id=3704):
prctl$auto(0x1000000001c, 0x5, 0x8, 0x9, 0x80001)
close_range$auto(0x2, 0x8, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x800008000)
sysfs$auto(0x2, 0x100000000000027, 0x0)
fsopen$auto(0x0, 0x1)
sendmsg$auto_NETDEV_CMD_QUEUE_GET(0xffffffffffffffff, 0x0, 0x22048814)
r0 = socket(0x10, 0x2, 0x0)
r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00')
r2 = syz_open_procfs$namespace(0x0, 0x0)
close_range$auto(r1, 0xfffffffffffff000, 0x2)
r3 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/keys\x00', 0x8340, 0x0)
read$auto_proc_iter_file_ops_compat_inode(r3, &(0x7f0000000300)=""/223, 0xdf)
socket$nl_generic(0x10, 0x3, 0x10)
setns(r2, 0x20000000)
r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/zram0/queue/zone_write_granularity\x00', 0x800, 0x0)
read$auto_kernfs_file_fops_kernfs_internal(r4, &(0x7f0000000100)=""/16, 0x10)
sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB], 0x1ac}}, 0x40000)
r5 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/net/anycast6\x00', 0x100, 0x0)
read$auto_proc_reg_file_ops_compat_inode(r5, &(0x7f0000000100)=""/99, 0x63)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x10, 0x3, 0x6)
socket$nl_generic(0x10, 0x3, 0x10)
statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x0, 0x3, 0xd, 0x3, 0x81, 0xfffffffc, 0x2000000000000002, 0x0, 0x9, 0x1, 0x2, 0x80000001, 0xb0, 0x9, 0x1, 0xffffffff, 0x5, 0x7, 0x0, 0x7, 0x0, 0xfffffffe, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x71a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000]}, 0x9, 0x81)
sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x8000)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4044810}, 0x800)
r6 = open(&(0x7f0000000100)='.\x00', 0x591002, 0x408)
linkat$auto(r6, 0x0, 0xffffffffffffff9c, &(0x7f0000000080)='&&\x00', 0x1000)
ioctl$auto_RTC_UIE_ON(r6, 0x7003, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc5}, 0x2, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0)

33.387830523s ago: executing program 6 (id=3707):
rt_sigqueueinfo$auto(0x1, 0x7, &(0x7f0000000040)={@siginfo_0_0={0x0, 0x5, 0xfffffffe, @_sigpoll={0x52, 0x7}}})

31.851472315s ago: executing program 6 (id=3715):
mkdir$auto(&(0x7f0000000040)='./cgroup/../file0\x00', 0x1)
rmdir$auto(0x0)

31.388663183s ago: executing program 37 (id=3715):
mkdir$auto(&(0x7f0000000040)='./cgroup/../file0\x00', 0x1)
rmdir$auto(0x0)

5.50794802s ago: executing program 8 (id=3842):
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
pwrite64$auto(0xffffffffffffffff, 0x0, 0x52, 0x3)
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, 0x0, 0x8000, 0x0)
write$auto(0x1, 0x0, 0x80000000)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
io_uring_setup$auto(0x6, 0x0)
madvise$auto(0x0, 0x200007, 0x19)
fsconfig$auto(0x3, 0x3, 0xfffffffffffffffd, 0x0, 0x8000)
mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000)
sysfs$auto(0x2, 0x0, 0x0)
open(0x0, 0x261c2, 0x84)
getrandom$auto(0x0, 0x6000000, 0x3)
madvise$auto(0x0, 0x2017, 0x15)

4.372244379s ago: executing program 8 (id=3847):
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0)
mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000)
r0 = socket(0x15, 0x5, 0x0)
bind$auto(r0, 0x0, 0x64)
close_range$auto(0x2, 0x8, 0x0)
openat$auto_tracing_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/per_cpu/cpu1/trace\x00', 0x80800, 0x0)
mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000)
mmap$auto(0x0, 0x9, 0x3, 0x8011, 0x3, 0x8000)
sendfile$auto(0x6, 0x3, 0x0, 0x8000)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
unshare$auto(0x40000080)
writev$auto(0x1, &(0x7f0000000100)={0x0, 0x400000000000fdef}, 0x1)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
munmap$auto(0x20001000, 0x7)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
setsockopt$auto(0x3, 0x1, 0x20, 0x0, 0x9)
close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002)
mmap$auto(0xfffffffffffffffe, 0x8, 0x8003, 0xeb3, 0xfffffffffffffff9, 0x8000)
socket$nl_generic(0x10, 0x3, 0x10)
timer_create$auto(0x3, 0x0, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
timer_settime$auto(0x0, 0xffff8000, 0x0, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
madvise$auto(0x8c3a, 0x2, 0xf)
socket(0x2, 0xa, 0xa)
lsm_list_modules$auto(0x0, 0x0, 0x0)
ioctl$auto(0x1, 0x89a0, 0x8)
read$auto(0x3, 0x0, 0x400000)
socket(0xa, 0x3, 0x6)

3.784378622s ago: executing program 5 (id=3850):
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda1\x00', 0x0, 0x0)
mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000)
pipe$auto(0x0)
clone$auto(0x21002, 0x9, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x9)
r0 = socket(0xa, 0x5, 0x0)
getsockopt$auto(r0, 0x84, 0xc, 0x0, 0x0)

3.313940126s ago: executing program 5 (id=3852):
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
ioperm$auto(0x7, 0x6, 0x3)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r0 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff)
mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x6, 0x2)
ioperm$auto(0xfb, 0x5, 0xe)
mmap$auto(0x0, 0x20007, 0x80000000000000de, 0x12, 0x0, 0x8000)
map_shadow_stack$auto(0x40, 0x7, 0x1ff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)={0x14, r0, 0x1, 0x70bd2d, 0x25dfdbfc}, 0x14}, 0x1, 0x68, 0x0, 0x4000000}, 0x0)
mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'veth0_to_hsr\x00'})
socket$nl_generic(0x10, 0x3, 0x10)
getrandom$auto(0x0, 0x6000000, 0x3)
r3 = socket(0x840000000002, 0x3, 0xff)
setsockopt$auto(r3, 0x0, 0x4, 0x0, 0xcc)
mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2)
init_module$auto(0x0, 0x10001, 0xfffffffffffffffe)

3.173359309s ago: executing program 9 (id=3853):
mmap$auto(0x0, 0x2020006, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
close_range$auto(0x2, 0xa, 0x0)
socket(0x18, 0xa, 0x1)
socket(0xa, 0x2, 0x0)
connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa}, 0x55)
sendmmsg$auto(0x3, 0x0, 0x3, 0x0)

2.955407711s ago: executing program 8 (id=3854):
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000540), 0xffffffffffffffff)
sendmsg$auto_HWSIM_CMD_GET_RADIO(r0, &(0x7f0000001900)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f0000000580)={0x14, r1, 0xf3e97f51700e57cf, 0x70bd28, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x884}, 0x8000)
read$auto(0x3, 0x0, 0x80)

2.911632776s ago: executing program 9 (id=3855):
syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff)
openat$auto_sg_fops_sg(0xffffffffffffff9c, 0x0, 0x82802, 0x0)
mmap$auto(0x0, 0xfff, 0xdf, 0x9b72, 0x400, 0x28000)
capset$auto(0x0, 0x0)
r0 = openat$auto_nvram_misc_fops_nvram(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0)
ioctl$auto_NVRAM_SETCKS(r0, 0x7041, 0x0)

2.709562912s ago: executing program 9 (id=3856):
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
pwrite64$auto(0xffffffffffffffff, 0x0, 0x52, 0x3)
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, 0x0, 0x8000, 0x0)
write$auto(0x1, 0x0, 0x80000000)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
io_uring_setup$auto(0x6, 0x0)
madvise$auto(0x0, 0x200007, 0x19)
fsconfig$auto(0x3, 0x3, 0xfffffffffffffffd, 0x0, 0x8000)
mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000)
sysfs$auto(0x2, 0x0, 0x0)
open(0x0, 0x261c2, 0x84)
getrandom$auto(0x0, 0x6000000, 0x3)
madvise$auto(0x0, 0x2017, 0x15)

2.673384248s ago: executing program 8 (id=3857):
socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x2000000, 0x20009, 0x4000000000dd, 0xeb1, 0x401, 0x2)
sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="10002cbd7000fddbdf25"], 0x14}, 0x1, 0x0, 0x0, 0x20008000}, 0x10004010)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
madvise$auto(0x0, 0xffffffffffff0005, 0x17)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
setpriority$auto(0x4000000001, 0x100000001, 0x6)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
setgroups$auto(0xe32, 0x0)
madvise$auto(0x0, 0x53, 0x9)
mremap$auto(0x4000, 0xb8, 0x13fd4, 0x3, 0xfffff000)
pselect6$auto(0x101, &(0x7f0000000080)={[0x6, 0x7, 0xffffffffffffffff, 0x3, 0x1, 0x6, 0x9, 0x7, 0x1, 0x4, 0x9, 0x4, 0x4, 0x7, 0xcb2a, 0x9]}, &(0x7f0000000100)={[0xffff, 0x3, 0xfffffffffffff31a, 0x7, 0x590, 0x8, 0x1d4, 0x4, 0x6, 0x7, 0x5, 0x7, 0x80, 0x8, 0x0, 0x1]}, &(0x7f0000000180)={[0xa9, 0x4, 0x4, 0x1, 0x3, 0x6, 0xcbd0, 0x200000001, 0x1f, 0xfffffffffffffffd, 0x7ff, 0x8000000000000001, 0x4, 0x7f, 0x91, 0x7]}, &(0x7f0000000000)={0x899, 0x5}, &(0x7f0000000200))
r0 = socket(0x15, 0x6, 0x80)
r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000380), 0xffffffffffffffff)
setregid$auto(0x5, 0x6)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
socket$nl_generic(0x10, 0x3, 0x10)
clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2)
process_mrelease$auto(0x4, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000480)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB="18000000fe6961fb165b97f8a44f4397aa4f91f95745316f0628ea6cff6b0df47a3c0ee221a985409a5d495432d0fdb924dacd62153319e2f7ce20b64455297315952478", @ANYRES16=r1, @ANYBLOB="100029bd7000fedbdf251f00000004000b00"], 0x18}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000)
mremap$auto(0x1fc000, 0xfee0, 0x3fd6, 0x7, 0xfffff000)
r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
move_pages$auto(r2, 0x1002, 0x0, 0x0, 0x0, 0x2)
memfd_create$auto(&(0x7f0000000040)='A^^\x02\x00\xef\x97\x8aY\x00\x00\xd2\x8c\xb05\x03\\\xb2\xbf247{\xde\t8\f\x00T\x00'/40, 0x9)

2.215836677s ago: executing program 5 (id=3858):
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
r0 = openat$auto_proc_clear_refs_operations_internal(0xffffffffffffff9c, &(0x7f0000000600)='/proc/thread-self/clear_refs\x00', 0x2, 0x0)
r1 = socket(0x10, 0x2, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200", @ANYBLOB=']'], 0x1ac}}, 0x40000)
recvmmsg$auto(r1, &(0x7f0000000140)={{0x0, 0x1, &(0x7f0000000080)={0x0, 0x400}, 0x5, 0x0, 0x200002, 0x8}, 0x803}, 0xfffffff9, 0x10, 0x0)
write$auto_proc_clear_refs_operations_internal(r0, 0x0, 0xffffff4b)

2.160619345s ago: executing program 7 (id=3859):
socket(0x31, 0x2, 0x4)
sched_getaffinity$auto(0x0, 0x4, &(0x7f0000000080))
socket$nl_generic(0x10, 0x3, 0x10)
close_range$auto(0x0, 0x1c94, 0x2)
socket(0x2, 0x5, 0x0)
openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000000), 0x2001, 0x0)
writev$auto(0x1, &(0x7f0000000100)={0x0, 0x400000000000fdef}, 0x1)

2.004581127s ago: executing program 7 (id=3860):
r0 = socket(0x10, 0x2, 0x4)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'xfrm0\x00'})
sendmsg$auto_ETHTOOL_MSG_RINGS_GET(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x2000000, 0x8000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x0)
sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000001400c7"], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x400c000)
write$auto(r0, &(0x7f0000000000)='-\x00', 0x2fb)

1.870882686s ago: executing program 7 (id=3861):
r0 = openat$auto_adf_hb_cfg_fops_adf_heartbeat_dbgfs(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/ieee80211/phy0/netdev:wlan0/state\x00', 0x149440, 0x0)
read$auto_adf_hb_cfg_fops_adf_heartbeat_dbgfs(r0, 0x0, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x91, 0x2, 0x8000)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/net/afs/rootcell\x00', 0x48041, 0x0)
move_pages$auto(0x1, 0x3, 0x0, 0x0, 0x0, 0x8000000000000000)
write$auto(r1, 0x0, 0x6)

1.61440603s ago: executing program 9 (id=3862):
mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000)
move_pages$auto(0x1, 0xf54, 0x0, 0x0, 0x0, 0x8000000000000000)
mmap$auto(0x0, 0x20009, 0xe3, 0x100000eb1, 0x40000000000a1, 0x8000)
socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0)
fsopen$auto(&(0x7f0000000000)='nlctrl\x00', 0x3)
madvise$auto(0x0, 0x7fffffffffffffff, 0xa)
mmap$auto(0x0, 0x9, 0x400000072, 0x8b72, 0x1000000002, 0x8000)
mmap$auto(0x0, 0x2020009, 0xfffffffffffffffc, 0xeb1, 0x8000000000000001, 0x7bfe)
close_range$auto(0x2, 0x8, 0x0)
socketpair$auto(0x1e, 0x5, 0x8, 0x0)
r0 = socket(0xa, 0x801, 0x84)
getsockopt$auto(r0, 0x84, 0x75, 0x0, &(0x7f0000000000)=0x9000c)
r1 = openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, &(0x7f00000002c0), 0x40000, 0x0)
ioctl$auto_DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, 0x0)
r2 = getuid()
sendmsg$auto_NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000003700)=ANY=[@ANYBLOB="e022", @ANYRES16, @ANYBLOB="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", @ANYRESHEX, @ANYRES8, @ANYRES32, @ANYBLOB="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", @ANYRES32=r2, @ANYBLOB="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"], 0x22e0}, 0x1, 0x0, 0x0, 0x4}, 0x80)
setreuid$auto(0x0, r2)
mmap$auto(0x0, 0x9, 0xff7, 0x8000000008012, 0x1000000004, 0x0)
statx$auto(0xffffff9c, 0x0, 0x1000, 0x1, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
clone$auto(0x21002, 0x9, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x9)
syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000010c0), 0xffffffffffffffff)
r3 = socket(0x10, 0x2, 0x0)
pwrite64$auto(r1, &(0x7f00000002c0)='\vX\xb5n\x91p\xe6\x1e\n\x00\x00\x00\x86\xdde\x1cJ\x99\x00\x03\x00\x00\x00\x00\xfd\xfd\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\xff\xff\x00\x00\xf9\xa4*\x01\x00\x00\x00^\x0fo\x84\xfc\x89\v\xd2`\x1be2\xd5\x9f[\xea\x1b\x00\x00\x00\x00\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x01\x00\x00\x00E\xd8?\'\x8dg\x01\x00\x01\x00\x00\xaf\x94\x90\xd7\xa6+,j\xf1\x14gJZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00,,\x93\xba\x88\x93\xc6#\xe5\xaae\x9d\xb6\x1a\x7f\xc0%\xb0\rfOJ+\x02\x9b#\x06\x00\x00\x00\xd7\xee\xd1\xbf2[\xd0\xbdn\x1d\xf3\xea]BR\xb4J}\xa8\xa1\xe1\x18F\xebb\xbb\xf3>\xd5Bd\xfa\x19\a\x00\xf1\x12lw\xed&[\xde?\xde8\xf7\xc1\xa6\xf2\xc1\"\xact\xee\xc9\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x7f\xfd\x82\xa1r\xc0\xc1\x9eG=g\xa7\xe3\x06\xcd\xb9]\xdd\xdcK\x97\x8a\x0e\x94\xd4{\b\xe9\x81<\n\xe9pb\xf7\x9b\xe7\x062T\x85\xc3\xf0x\x1c\x11\xae\xcf\xf2\xd7\x17\xb8\x87\xa0<`\n{P\xafz\xc0\xa4Z\xb1\xbd;\x1d\xc7\xd4g\xe981F\x18j\xc0&0\x7fF\x18Pg\x99L\xdb{\x8a\avR\xfb\x02\xe6\xfe\xb9\xbbCp\xf3K\xff\x8a\x9b\xf1\xbc\xb5\xc64l\x8c\r\xdb\xda|&,\a@\xed[\x1a#m\x01%$\x9b)\xcb\xdf\x0eO~\x80B\'. \xae\xe8\xdf\xb9t\x1f\x8a\xb4\xfb\t\x8eV\xdf\xe9\x17\x8d3\x12\xb6%\x9c!x\xc44uL\xc6\xd5\xc5\xd5\xda\x99\vyg%v\xed\x1f_\xdflt%\xed\xccX\xfc\x17:F\xba\x1c\x17\x13_|\xdc\x1e\xd0\xc2\xec\n\x05\xf9:\x95\x9c\x19V\x95&\xcf\x16\x00\x00\x00\x00\x00\x10\x00\x00\x00\x00\x00\x00\x00\x97\xfb \xdda\x8c\x9e\xc4\xe4\xe6\xba\xf5/HI`\xb5\x1f\xdc\xc2\xb8\x14\x93(\xde9.UJ\xd6\xba\xfeZ\x02\xb2\xd5\xef\xd4\"!\x9f\xd3\x89\xe3Q\x17,e\xb8\xaf\x1b\x89\xe9\xb5\'\xfa\xb3?K\xbb/\xb1\x86m\xf6v]\xa3\xfc\x01\xf5c~5\x90\x1e\x94R\x95\xe5+Sg\x8dVv\x85\x03\x00\x00\x00\x00\x00\x00]\x97\x90/o7\x9d\x8b\xaf\xed\a2w?\xf9\xde1\xcaa\x8e\nF^\aj\x93\xcb\xe5o\x8cm\xeb\x89\n\xc3\x87%\xf7\xaa\xa5\x90avI=\x02\xb7\x9a&]:e\x99\xb2\x14E\x8e\"\x00\x00\x00\x00\x00\x00\x12\xb1\xf9\xc4\x87\xda\x84/\xd0\x1cd02\x04v\xb8\xd2\xbd\x1fs\xa1#\xa0\\H\xa0\xe9\xdf+\xbf\x028a\xffr\x8e\x19\xe8\xa6\xf86\xe1\xbe{\xf0O\xcd\xaa^\x1d@\xaa\xca\xbaS\x00\x00\x00\x00\x00\x00\x00', 0x80200000007, 0x3)
statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x1ff, 0x7, 0x45, 0x4909b6f8, 0x1ffdf, 0x7, 0x200003, 0x2, 0xa121, 0x3, 0x6, 0x4, 0xb4, 0xa, 0x6, 0x10001, 0x80, 0x100000000, 0x0, 0x7, 0x2100, 0x200, 0x0, 0x84, [0x0, 0x0, 0x0, 0x50100000000000, 0x0, 0x2000, 0x0, 0xa, 0x70624ce7, 0x0, 0xfffffffffffffffd, 0xfffffffffffffffd, 0x0, 0x0, 0x2, 0x0, 0xffffffffffffbffd, 0xfffffffffffffffd, 0x1, 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x2000000000000000, 0x0, 0x0, 0x400000000005b8, 0xc, 0x0, 0x0, 0x0, 0x6, 0xffffffffffffffff, 0x88e, 0x8000000000008, 0xfffffffffffffffc, 0x9, 0xa38, 0x0, 0x3, 0xfffffffffffffffa, 0x8, 0x4000000000, 0x7]}, 0x1fe, 0xd)
sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="10002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000)
sendmmsg$auto(r3, &(0x7f0000000200)={{0x0, 0x700, &(0x7f0000000000)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f00000001c0), 0x7, 0xa505}, 0x800}, 0x7, 0x4008)

1.546820706s ago: executing program 7 (id=3863):
openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/adsp1\x00', 0x103281, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000080), 0xffffffffffffffff)
openat$auto_proc_uid_map_operations_base(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/uid_map\x00', 0x80a01, 0x0)
sendmsg$auto_NL80211_CMD_FRAME_WAIT_CANCEL(r0, &(0x7f0000002240)={&(0x7f0000001180)={0x10, 0x0, 0x0, 0x8a000020}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x0)
r1 = openat$auto_generic(0xffffffffffffff9c, &(0x7f0000001100)='/sys/kernel/debug/ieee80211/phy4/netdev:wlan1/stations/08:02:11:00:00:00/rx_duplicates\x00', 0x2, 0x0)
mmap$auto(0x0, 0x9, 0x400000072, 0x8b72, 0x1000000002, 0x8000)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
clone$auto(0x21002, 0x9, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x9)
madvise$auto(0x0, 0x3, 0x66)
syz_genetlink_get_family_id$auto_ovs_ct_limit(&(0x7f00000021c0), r0)
r2 = getuid()
setresuid$auto(0x0, r2, 0xee00)
r3 = getpid()
syz_open_procfs$namespace(r3, 0x0)
getpgrp(0xffffffffffffffff)
sendmsg$auto_OVS_CT_LIMIT_CMD_SET(r1, &(0x7f0000002680)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000002200)={0x0}, 0x1, 0x0, 0x0, 0x24044050}, 0x4)
read$auto_fops_u16_(r1, 0x0, 0x0)
read$auto_snd_ctl_f_ops_control(r1, &(0x7f0000000100)=""/4096, 0x1000)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
readv$auto(0x3, 0x0, 0x8)

1.215897906s ago: executing program 5 (id=3864):
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
socket(0xa, 0x2, 0x73)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000180)='ns/ipc\x00')
socket(0x2, 0x5, 0x0)
socket(0x11, 0x80003, 0x300)
getsockname$auto(0x3, &(0x7f0000000000), &(0x7f0000001040)=0x4)

1.20445899s ago: executing program 8 (id=3865):
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x800008000)
sysfs$auto(0x2, 0x100000000000032, 0x0)
close_range$auto(0x2, 0x8, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x2, 0x5, 0x0)
setsockopt$auto(0x3, 0x10000000084, 0x4, 0x0, 0x4)

1.062175228s ago: executing program 7 (id=3866):
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
socket(0x2, 0x801, 0x106)
socketpair$auto(0x8, 0x5, 0x3, 0x0)
setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9)
bind$auto(0x3, &(0x7f0000000080), 0x6b)
r0 = syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_NL80211_CMD_SET_WIPHY(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYRES16=r0, @ANYBLOB="0008020300", @ANYRES32, @ANYBLOB='\b\x00@\x00'], 0x24}, 0x1, 0x0, 0x0, 0x404c0c0}, 0x80)
sendmmsg$auto(0xffffffffffffffff, 0x0, 0x1, 0x1fda)
r2 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000300)='/proc/sys/net/ipv6/neigh/xfrm0/locktime\x00', 0x101282, 0x0)
write$auto_proc_sys_file_operations_proc_sysctl(r2, 0x0, 0x0)
close_range$auto(0x2, 0x8, 0x0)
socket(0x1e, 0x4, 0x0)
socket(0x2, 0x80002, 0x73)
openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000340), 0x20100, 0x0)
semtimedop$auto(0x9, 0x0, 0x0, &(0x7f0000000040)={0x4, 0x1})
arch_prctl$auto(0x5005, 0x9)
socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000)
close_range$auto(0x2, 0x8, 0x0)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a)
r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/sctp/remaddr\x00', 0xb00, 0x0)
pread64$auto(r3, 0x0, 0x594c, 0x9fffffffd)

1.061710962s ago: executing program 5 (id=3867):
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
ioperm$auto(0x7, 0x6, 0x3)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r0 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff)
mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x6, 0x2)
ioperm$auto(0xfb, 0x5, 0xe)
mmap$auto(0x0, 0x20007, 0x80000000000000de, 0x12, 0x0, 0x8000)
map_shadow_stack$auto(0x40, 0x7, 0x1ff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)={0x14, r0, 0x1, 0x70bd2d, 0x25dfdbfc}, 0x14}, 0x1, 0x68, 0x0, 0x4000000}, 0x0)
mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'veth0_to_hsr\x00'})
socket$nl_generic(0x10, 0x3, 0x10)
getrandom$auto(0x0, 0x6000000, 0x3)
r3 = socket(0x840000000002, 0x3, 0xff)
setsockopt$auto(r3, 0x0, 0x4, 0x0, 0xcc)
mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2)
init_module$auto(0x0, 0x10001, 0xfffffffffffffffe)

848.360332ms ago: executing program 8 (id=3868):
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0)
mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000)
r0 = socket(0x15, 0x5, 0x0)
bind$auto(r0, 0x0, 0x64)
close_range$auto(0x2, 0x8, 0x0)
openat$auto_tracing_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/per_cpu/cpu1/trace\x00', 0x80800, 0x0)
mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000)
mmap$auto(0x0, 0x9, 0x3, 0x8011, 0x3, 0x8000)
sendfile$auto(0x6, 0x3, 0x0, 0x8000)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
unshare$auto(0x40000080)
writev$auto(0x1, &(0x7f0000000100)={0x0, 0x400000000000fdef}, 0x1)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
munmap$auto(0x20001000, 0x7)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
poll$auto(&(0x7f0000000040)={0x3, 0x1, 0xa}, 0x5, 0x108)
close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002)
mmap$auto(0xfffffffffffffffe, 0x8, 0x8003, 0xeb3, 0xfffffffffffffff9, 0x8000)
socket$nl_generic(0x10, 0x3, 0x10)
timer_create$auto(0x3, 0x0, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
timer_settime$auto(0x0, 0xffff8000, 0x0, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
madvise$auto(0x8c3a, 0x2, 0xf)
socket(0x2, 0xa, 0xa)
lsm_list_modules$auto(0x0, 0x0, 0x0)
ioctl$auto(0x1, 0x89a0, 0x8)
read$auto(0x3, 0x0, 0x400000)
socket(0xa, 0x3, 0x6)

691.671457ms ago: executing program 9 (id=3869):
socket(0x2, 0x1, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/net/netfilter/nf_log\x00', 0x101000, 0x0)
pread64$auto(r0, 0x0, 0x8, 0x54)

553.090184ms ago: executing program 9 (id=3870):
select$auto(0x8, 0x0, 0x0, 0x0, 0x0)
mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x5, 0x8000)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
pkey_free$auto(0xfffffffd)

117.940986ms ago: executing program 7 (id=3871):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_netdev(&(0x7f0000002f80), r0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth1_vlan\x00', <r2=>0x0})
sendmsg$auto_NETDEV_CMD_QUEUE_GET(r0, &(0x7f0000003040)={0x0, 0x0, &(0x7f0000003000)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@NETDEV_A_QUEUE_TYPE={0x8}, @NETDEV_A_QUEUE_IFINDEX={0x8, 0x2, r2}, @NETDEV_A_QUEUE_ID={0x8, 0x1, 0x710}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x20008810)

0s ago: executing program 5 (id=3872):
socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x2000000, 0x20009, 0x4000000000dd, 0xeb1, 0x401, 0x2)
sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="10002cbd7000fddbdf25"], 0x14}, 0x1, 0x0, 0x0, 0x20008000}, 0x10004010)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
madvise$auto(0x0, 0xffffffffffff0005, 0x17)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
setpriority$auto(0x4000000001, 0x100000001, 0x6)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
setgroups$auto(0xe32, 0x0)
madvise$auto(0x0, 0x53, 0x9)
mremap$auto(0x4000, 0xb8, 0x13fd4, 0x3, 0xfffff000)
pselect6$auto(0x101, &(0x7f0000000080)={[0x6, 0x7, 0xffffffffffffffff, 0x3, 0x1, 0x6, 0x9, 0x7, 0x1, 0x4, 0x9, 0x4, 0x4, 0x7, 0xcb2a, 0x9]}, &(0x7f0000000100)={[0xffff, 0x3, 0xfffffffffffff31a, 0x7, 0x590, 0x8, 0x1d4, 0x4, 0x6, 0x7, 0x5, 0x7, 0x80, 0x8, 0x0, 0x1]}, &(0x7f0000000180)={[0xa9, 0x4, 0x4, 0x1, 0x3, 0x6, 0xcbd0, 0x200000001, 0x1f, 0xfffffffffffffffd, 0x7ff, 0x8000000000000001, 0x4, 0x7f, 0x91, 0x7]}, &(0x7f0000000000)={0x899, 0x5}, &(0x7f0000000200))
r0 = socket(0x15, 0x6, 0x80)
r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000380), 0xffffffffffffffff)
setregid$auto(0x5, 0x6)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
socket$nl_generic(0x10, 0x3, 0x10)
clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2)
process_mrelease$auto(0x4, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000480)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB="18000000fe6961fb165b97f8a44f4397aa4f91f95745316f0628ea6cff6b0df47a3c0ee221a985409a5d495432d0fdb924dacd62153319e2f7ce20b64455297315952478", @ANYRES16=r1, @ANYBLOB="100029bd7000fedbdf251f00000004000b00"], 0x18}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000)
mremap$auto(0x1fc000, 0xfee0, 0x3fd6, 0x7, 0xfffff000)
r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
move_pages$auto(r2, 0x1002, 0x0, 0x0, 0x0, 0x2)
memfd_create$auto(&(0x7f0000000040)='A^^\x02\x00\xef\x97\x8aY\x00\x00\xd2\x8c\xb05\x03\\\xb2\xbf247{\xde\t8\f\x00T\x00'/40, 0x9)

kernel console output (not intermixed with test programs):

etooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  419.475942][T10097] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  419.897419][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  420.311620][T10095] chnl_net:caif_netlink_parms(): no params data found
[  420.440139][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  420.440338][T10094] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1049'.
[  420.882211][T10095] bridge0: port 1(bridge_slave_0) entered blocking state
[  420.904187][T10095] bridge0: port 1(bridge_slave_0) entered disabled state
[  420.938398][T10095] bridge_slave_0: entered allmulticast mode
[  420.964575][T10095] bridge_slave_0: entered promiscuous mode
[  421.058912][T10095] bridge0: port 2(bridge_slave_1) entered blocking state
[  421.084131][T10095] bridge0: port 2(bridge_slave_1) entered disabled state
[  421.091408][T10095] bridge_slave_1: entered allmulticast mode
[  421.133659][T10095] bridge_slave_1: entered promiscuous mode
[  421.158293][T10127] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1054'.
[  421.200423][   T12] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  421.301652][T10095] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  421.372750][   T12] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  421.420086][T10095] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  421.531216][   T12] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  421.544891][ T5844] Bluetooth: hci0: command tx timeout
[  421.640702][T10095] team0: Port device team_slave_0 added
[  421.737224][   T12] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  421.807039][T10095] team0: Port device team_slave_1 added
[  421.911722][T10095] batman_adv: batadv0: Adding interface: batadv_slave_0
[  421.929995][T10095] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  421.973375][T10095] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  422.020055][T10095] batman_adv: batadv0: Adding interface: batadv_slave_1
[  422.039511][T10095] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  422.080952][T10095] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  422.308905][T10095] hsr_slave_0: entered promiscuous mode
[  422.335368][T10095] hsr_slave_1: entered promiscuous mode
[  422.397617][T10095] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  422.405438][T10095] Cannot create hsr debugfs directory
[  422.500760][   T12] bridge_slave_1: left allmulticast mode
[  422.507103][   T12] bridge_slave_1: left promiscuous mode
[  422.519819][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  422.571118][   T12] bridge_slave_0: left allmulticast mode
[  422.576995][   T12] bridge_slave_0: left promiscuous mode
[  422.592103][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  423.623524][ T5844] Bluetooth: hci0: command tx timeout
[  424.063903][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  424.095485][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  424.141685][   T12] bond0 (unregistering): Released all slaves
[  424.223135][T10168] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1061'.
[  424.839327][T10095] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  425.160120][T10095] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  425.200237][T10095] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  425.300145][T10095] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  425.538222][   T12] hsr_slave_0: left promiscuous mode
[  425.546119][   T12] hsr_slave_1: left promiscuous mode
[  425.582271][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  425.597699][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[  425.616353][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  425.633262][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[  425.685789][   T12] veth1_macvtap: left promiscuous mode
[  425.697546][   T12] veth0_macvtap: left promiscuous mode
[  425.703720][ T5844] Bluetooth: hci0: command tx timeout
[  425.712663][   T12] veth1_vlan: left promiscuous mode
[  425.722940][   T12] veth0_vlan: left promiscuous mode
[  426.669968][   T12] team0 (unregistering): Port device team_slave_1 removed
[  426.735885][   T12] team0 (unregistering): Port device team_slave_0 removed
[  427.785773][ T5844] Bluetooth: hci0: command tx timeout
[  427.992514][T10095] 8021q: adding VLAN 0 to HW filter on device bond0
[  428.035537][T10095] 8021q: adding VLAN 0 to HW filter on device team0
[  428.087177][ T2934] bridge0: port 1(bridge_slave_0) entered blocking state
[  428.094974][ T2934] bridge0: port 1(bridge_slave_0) entered forwarding state
[  428.139847][   T52] bridge0: port 2(bridge_slave_1) entered blocking state
[  428.147067][   T52] bridge0: port 2(bridge_slave_1) entered forwarding state
[  428.702056][T10095] 8021q: adding VLAN 0 to HW filter on device batadv0
[  429.420324][T10261] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1073'.
[  429.561564][T10095] veth0_vlan: entered promiscuous mode
[  429.572064][T10095] veth1_vlan: entered promiscuous mode
[  429.581632][T10266] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1074'.
[  429.593012][T10095] veth0_macvtap: entered promiscuous mode
[  429.603525][T10095] veth1_macvtap: entered promiscuous mode
[  429.618187][T10095] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  429.628786][T10095] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  429.638774][T10095] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  429.650205][T10095] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  429.661198][T10095] batman_adv: batadv0: Interface activated: batadv_slave_0
[  429.670824][T10095] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  429.681347][T10095] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  429.691248][T10095] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  429.701787][T10095] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  429.712880][T10095] batman_adv: batadv0: Interface activated: batadv_slave_1
[  429.753962][T10095] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  429.762737][T10095] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  429.772171][T10095] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  429.781028][T10095] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  430.157475][T10283] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1077'.
[  430.179959][T10279] lo: entered allmulticast mode
[  430.234125][T10279] lo: left allmulticast mode
[  430.292598][ T1092] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  430.314701][ T1092] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  430.330386][T10288] lo: entered allmulticast mode
[  430.366317][T10288] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1078'.
[  430.432991][ T1092] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  430.463671][ T1092] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  430.526148][T10288] lo: left allmulticast mode
[  433.912899][T10388] lo: entered allmulticast mode
[  433.982321][T10388] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1090'.
[  434.187012][T10388] lo: left allmulticast mode
[  436.904279][T10452] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1100'.
[  437.043931][T10449] lo: entered allmulticast mode
[  437.090704][T10449] lo: left allmulticast mode
[  438.783771][   T29] audit: type=1326 audit(2139.100:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10481 comm="syz.2.1105" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb0ab185d19 code=0x0
[  440.265735][T10504] netlink: 338 bytes leftover after parsing attributes in process `syz.2.1107'.
[  440.296243][T10504] netlink: 338 bytes leftover after parsing attributes in process `syz.2.1107'.
[  440.426481][ T1293] ieee802154 phy0 wpan0: encryption failed: -22
[  440.432876][ T1293] ieee802154 phy1 wpan1: encryption failed: -22
[  441.479811][T10517] lo: entered allmulticast mode
[  441.556370][T10517] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1110'.
[  441.834815][T10516] lo: left allmulticast mode
[  442.833475][   T29] audit: type=1326 audit(2143.150:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10523 comm="syz.1.1111" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f12d2585d19 code=0x0
[  446.260300][T10591] lo: entered allmulticast mode
[  446.286536][T10591] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1121'.
[  446.347794][T10590] lo: left allmulticast mode
[  452.713095][T10687] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1137'.
[  452.793113][T10690] netlink: 'syz.2.1137': attribute type 46 has an invalid length.
[  453.429306][   T29] audit: type=1326 audit(2153.750:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10702 comm="syz.5.1138" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb481385d19 code=0x0
[  459.478608][T10872] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1158'.
[  459.515748][T10871] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1156'.
[  459.598866][T10869] lo: entered allmulticast mode
[  460.206378][T10871] mac80211_hwsim hwsim19 wlan0: entered allmulticast mode
[  460.723373][T10869] lo: left allmulticast mode
[  460.873543][T10883] erspan0: entered allmulticast mode
[  461.847363][   T29] audit: type=1326 audit(2162.170:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10901 comm="syz.0.1162" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff384385d19 code=0x0
[  462.195715][   T29] audit: type=1326 audit(2162.520:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10906 comm="syz.5.1163" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb481385d19 code=0x0
[  464.953368][T10927] erspan0: entered allmulticast mode
[  469.327557][T10979] lo: entered allmulticast mode
[  469.582458][T10979] lo: left allmulticast mode
[  485.731023][T11148] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1209'.
[  487.389460][T11161] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1212'.
[  495.891840][T11183] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1213'.
[  495.986516][T11183] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode
[  496.023019][T11183] mac80211_hwsim hwsim6 wlan0: entered allmulticast mode
[  496.234103][   T29] audit: type=1326 audit(2208.561:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11187 comm="syz.2.1216" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb0ab185d19 code=0x0
[  499.731174][T11227] lo: entered allmulticast mode
[  499.843156][T11227] lo: left allmulticast mode
[  501.867916][ T1293] ieee802154 phy0 wpan0: encryption failed: -22
[  501.876756][ T1293] ieee802154 phy1 wpan1: encryption failed: -22
[  502.153536][T11222] kexec: Could not allocate control_code_buffer
[  507.968428][T11300] lo: entered allmulticast mode
[  507.987011][T11300] lo: left allmulticast mode
[  509.833404][   T29] audit: type=1326 audit(2222.151:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11323 comm="syz.1.1245" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f12d2585d19 code=0x0
[  511.567893][T11313] kexec: Could not allocate control_code_buffer
[  511.647159][T11343] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1248'.
[  511.671610][T11341] lo: entered allmulticast mode
[  511.782749][T11341] lo: left allmulticast mode
[  515.496714][T11392] lo: entered allmulticast mode
[  515.527476][T11392] lo: left allmulticast mode
[  516.807973][T11407] Process accounting resumed
[  516.843209][T11407] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1267'.
[  516.869414][T11407] mac80211_hwsim hwsim19 wlan0: entered promiscuous mode
[  517.739642][T11419] lo: entered allmulticast mode
[  517.805914][T11419] lo: left allmulticast mode
[  519.128193][   T29] audit: type=1326 audit(2231.451:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11435 comm="syz.1.1272" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f12d2585d19 code=0x0
[  519.151110][T11445] syz-executor invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0
[  519.223332][T11445] CPU: 0 UID: 0 PID: 11445 Comm: syz-executor Not tainted 6.13.0-rc2-syzkaller-00382-gdccbe2047a5b #0
[  519.234337][T11445] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024
[  519.244398][T11445] Call Trace:
[  519.247681][T11445]  <TASK>
[  519.250620][T11445]  dump_stack_lvl+0x16c/0x1f0
[  519.255317][T11445]  dump_header+0x101/0x900
[  519.259753][T11445]  oom_kill_process+0x270/0xa60
[  519.264619][T11445]  ? mem_cgroup_out_of_memory+0x8d/0x270
[  519.270263][T11445]  out_of_memory+0x351/0x1700
[  519.274957][T11445]  ? __pfx_out_of_memory+0x10/0x10
[  519.280077][T11445]  ? rcu_read_unlock+0x17/0x60
[  519.284860][T11445]  ? find_held_lock+0x2d/0x110
[  519.289648][T11445]  mem_cgroup_out_of_memory+0x207/0x270
[  519.295206][T11445]  ? __pfx_mem_cgroup_out_of_memory+0x10/0x10
[  519.301288][T11445]  ? do_raw_spin_unlock+0x172/0x230
[  519.306506][T11445]  try_charge_memcg+0x54c/0xaf0
[  519.311375][T11445]  ? __pfx_try_charge_memcg+0x10/0x10
[  519.316763][T11445]  ? get_mem_cgroup_from_mm+0x87/0x5f0
[  519.322237][T11445]  ? get_mem_cgroup_from_mm+0x87/0x5f0
[  519.327710][T11445]  ? get_mem_cgroup_from_mm+0x131/0x5f0
[  519.333269][T11445]  __mem_cgroup_charge+0x9b/0x280
[  519.338322][T11445]  do_wp_page+0x1095/0x4670
[  519.342845][T11445]  ? __pfx_lock_acquire.part.0+0x10/0x10
[  519.348490][T11445]  ? __pfx_do_wp_page+0x10/0x10
[  519.353350][T11445]  ? rcu_is_watching+0x12/0xc0
[  519.358135][T11445]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  519.363520][T11445]  ? lock_acquire+0x2f/0xb0
[  519.368030][T11445]  ? __handle_mm_fault+0xdfa/0x2a40
[  519.373250][T11445]  __handle_mm_fault+0x1ade/0x2a40
[  519.378392][T11445]  ? __pfx___handle_mm_fault+0x10/0x10
[  519.383864][T11445]  ? __pfx_lock_acquire.part.0+0x10/0x10
[  519.389535][T11445]  ? find_vma+0xc0/0x140
[  519.393806][T11445]  ? __pfx_find_vma+0x10/0x10
[  519.398516][T11445]  handle_mm_fault+0x3fa/0xaa0
[  519.403313][T11445]  do_user_addr_fault+0x7a3/0x13f0
[  519.408455][T11445]  exc_page_fault+0x5c/0xc0
[  519.412973][T11445]  asm_exc_page_fault+0x26/0x30
[  519.417843][T11445] RIP: 0010:__put_user_4+0x11/0x20
[  519.422968][T11445] Code: 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 89 cb 48 c1 fb 3f 48 09 d9 0f 01 cb <89> 01 31 c9 0f 01 ca c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90
[  519.442584][T11445] RSP: 0000:ffffc9000c0cff10 EFLAGS: 00050202
[  519.448665][T11445] RAX: 00000000000004d8 RBX: 0000000000000000 RCX: 00005555713aa7d0
[  519.456669][T11445] RDX: dffffc0000000000 RSI: ffffffff8b4cd480 RDI: ffff888026f08690
[  519.464658][T11445] RBP: 0000000000000000 R08: 0000000000000000 R09: fffffbfff2039b32
[  519.472643][T11445] R10: ffffffff901cd997 R11: 0000000000000000 R12: ffff8880275b1e00
[  519.480622][T11445] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  519.488620][T11445]  schedule_tail+0xa6/0xd0
[  519.493055][T11445]  ? __switch_to_asm+0x37/0x70
[  519.497837][T11445]  ret_from_fork+0x23/0x80
[  519.502260][T11445]  ret_from_fork_asm+0x1a/0x30
[  519.507046][T11445]  </TASK>
[  519.520150][T11445] memory: usage 307200kB, limit 307200kB, failcnt 42208
[  519.527223][T11445] memory+swap: usage 430132kB, limit 9007199254740988kB, failcnt 0
[  519.535195][T11445] kmem: usage 3652kB, limit 9007199254740988kB, failcnt 0
[  519.542338][T11445] Memory cgroup stats for /syz2:
[  519.542611][T11445] cache 293851136
[  519.551291][T11445] rss 180224
[  519.554555][T11445] rss_huge 0
[  519.557772][T11445] shmem 293847040
[  519.561423][T11445] mapped_file 46252032
[  519.565597][T11445] dirty 0
[  519.568577][T11445] writeback 0
[  519.571881][T11445] workingset_refault_anon 21774
[  519.576794][T11445] workingset_refault_file 6985
[  519.581585][T11445] swap 125882368
[  519.585219][T11445] swapcached 8192
[  519.588900][T11445] pgpgin 1664279
[  519.592475][T11445] pgpgout 1599634
[  519.596167][T11445] pgfault 672960
[  519.599735][T11445] pgmajfault 3300
[  519.603461][T11445] inactive_anon 178012160
[  519.607810][T11445] active_anon 132816896
[  519.612311][T11445] inactive_file 4096
[  519.616315][T11445] active_file 0
[  519.619797][T11445] unevictable 0
[  519.623378][T11445] hierarchical_memory_limit 314572800
[  519.628773][T11445] hierarchical_memsw_limit 9223372036854771712
[  519.635005][T11445] total_cache 293851136
[  519.639182][T11445] total_rss 180224
[  519.642923][T11445] total_rss_huge 0
[  519.646738][T11445] total_shmem 293847040
[  519.650914][T11445] total_mapped_file 46252032
[  519.655570][T11445] total_dirty 0
[  519.659048][T11445] total_writeback 0
[  519.662872][T11445] total_workingset_refault_anon 21774
[  519.668359][T11445] total_workingset_refault_file 6985
[  519.673708][T11445] total_swap 125882368
[  519.677811][T11445] total_swapcached 8192
[  519.681984][T11445] total_pgpgin 1664279
[  519.686145][T11445] total_pgpgout 1599634
[  519.690325][T11445] total_pgfault 672960
[  519.694468][T11445] total_pgmajfault 3300
[  519.698644][T11445] total_inactive_anon 178012160
[  519.703621][T11445] total_active_anon 132816896
[  519.708343][T11445] total_inactive_file 4096
[  519.713078][T11445] total_active_file 0
[  519.717129][T11445] total_unevictable 0
[  519.721131][T11445] anon_cost 0
[  519.724540][T11445] file_cost 0
[  519.727844][T11445] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.37,pid=6040,uid=0
[  519.744219][T11445] Memory cgroup out of memory: Killed process 6040 (syz.2.37) total-vm:136720kB, anon-rss:944kB, file-rss:20796kB, shmem-rss:0kB, UID:0 pgtables:108kB oom_score_adj:1000
[  520.369226][T11193] syz.2.1216 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0
[  520.433366][T11193] CPU: 0 UID: 0 PID: 11193 Comm: syz.2.1216 Not tainted 6.13.0-rc2-syzkaller-00382-gdccbe2047a5b #0
[  520.444733][T11193] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024
[  520.454834][T11193] Call Trace:
[  520.458150][T11193]  <TASK>
[  520.461121][T11193]  dump_stack_lvl+0x16c/0x1f0
[  520.465843][T11193]  dump_header+0x101/0x900
[  520.470310][T11193]  oom_kill_process+0x270/0xa60
[  520.475194][T11193]  ? mem_cgroup_out_of_memory+0x8d/0x270
[  520.480862][T11193]  out_of_memory+0x351/0x1700
[  520.485581][T11193]  ? __pfx_out_of_memory+0x10/0x10
[  520.490713][T11193]  ? rcu_read_unlock+0x17/0x60
[  520.495512][T11193]  ? find_held_lock+0x2d/0x110
[  520.500303][T11193]  mem_cgroup_out_of_memory+0x207/0x270
[  520.505867][T11193]  ? __pfx_mem_cgroup_out_of_memory+0x10/0x10
[  520.511952][T11193]  ? do_raw_spin_unlock+0x172/0x230
[  520.517166][T11193]  try_charge_memcg+0x54c/0xaf0
[  520.522039][T11193]  ? __pfx_try_charge_memcg+0x10/0x10
[  520.527427][T11193]  ? get_mem_cgroup_from_mm+0x87/0x5f0
[  520.532896][T11193]  ? get_mem_cgroup_from_mm+0x87/0x5f0
[  520.538369][T11193]  ? get_mem_cgroup_from_mm+0x131/0x5f0
[  520.543924][T11193]  __mem_cgroup_charge+0x9b/0x280
[  520.548968][T11193]  shmem_alloc_and_add_folio+0x507/0xc00
[  520.554619][T11193]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  520.560528][T11193]  ? __pfx_shmem_alloc_and_add_folio+0x10/0x10
[  520.566702][T11193]  ? shmem_huge_global_enabled+0x176/0x250
[  520.572527][T11193]  ? shmem_allowable_huge_orders+0xcd/0x3e0
[  520.578446][T11193]  shmem_get_folio_gfp+0x689/0x1530
[  520.583664][T11193]  ? __pfx_shmem_get_folio_gfp+0x10/0x10
[  520.589313][T11193]  ? find_held_lock+0x2d/0x110
[  520.594100][T11193]  shmem_write_begin+0x161/0x300
[  520.599057][T11193]  ? __pfx_shmem_write_begin+0x10/0x10
[  520.604549][T11193]  ? timestamp_truncate+0x21f/0x2e0
[  520.609867][T11193]  ? balance_dirty_pages_ratelimited_flags+0x92/0x1270
[  520.616751][T11193]  generic_perform_write+0x2ba/0x920
[  520.622066][T11193]  ? __pfx_generic_perform_write+0x10/0x10
[  520.627888][T11193]  ? inode_needs_update_time.part.0+0x191/0x270
[  520.634156][T11193]  shmem_file_write_iter+0x10e/0x140
[  520.639487][T11193]  ? __pfx_shmem_file_write_iter+0x10/0x10
[  520.645501][T11193]  __kernel_write_iter+0x318/0xa80
[  520.650638][T11193]  ? __pfx___kernel_write_iter+0x10/0x10
[  520.656281][T11193]  ? get_dump_page+0x15b/0x230
[  520.661067][T11193]  ? __pfx___might_resched+0x10/0x10
[  520.666417][T11193]  dump_user_range+0x389/0x8c0
[  520.671206][T11193]  ? __pfx_dump_user_range+0x10/0x10
[  520.676511][T11193]  ? elf_coredump_extra_notes_write+0xbe/0x430
[  520.682679][T11193]  ? __pfx_writenote+0x10/0x10
[  520.687457][T11193]  elf_core_dump+0x2787/0x3880
[  520.692243][T11193]  ? __pfx_elf_core_dump+0x10/0x10
[  520.697362][T11193]  ? kasan_save_stack+0x42/0x60
[  520.702223][T11193]  ? kasan_save_stack+0x33/0x60
[  520.707083][T11193]  ? kasan_save_track+0x14/0x30
[  520.711940][T11193]  ? __kasan_kmalloc+0xaa/0xb0
[  520.716715][T11193]  ? __kvmalloc_node_noprof+0xad/0x1a0
[  520.722187][T11193]  ? do_coredump+0x1665/0x43e0
[  520.726968][T11193]  ? get_signal+0x23f3/0x2610
[  520.731710][T11193]  ? rcu_is_watching+0x12/0xc0
[  520.736501][T11193]  ? trace_lock_acquire+0x14e/0x1f0
[  520.741727][T11193]  ? __pfx_sort+0x10/0x10
[  520.746075][T11193]  ? get_signal+0x23f3/0x2610
[  520.750771][T11193]  ? do_coredump+0x2dd5/0x43e0
[  520.755549][T11193]  do_coredump+0x2dd5/0x43e0
[  520.760183][T11193]  ? __pfx_do_coredump+0x10/0x10
[  520.765144][T11193]  ? irqentry_exit_to_user_mode+0x13f/0x280
[  520.771115][T11193]  get_signal+0x23f3/0x2610
[  520.775642][T11193]  ? __pfx_get_signal+0x10/0x10
[  520.780498][T11193]  ? rcu_is_watching+0x12/0xc0
[  520.785386][T11193]  ? trace_irq_disable.constprop.0+0xea/0x140
[  520.791483][T11193]  arch_do_signal_or_restart+0x90/0x7e0
[  520.797053][T11193]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[  520.803231][T11193]  ? do_user_addr_fault+0xa4b/0x13f0
[  520.808556][T11193]  irqentry_exit_to_user_mode+0x13f/0x280
[  520.814315][T11193]  asm_exc_page_fault+0x26/0x30
[  520.819181][T11193] RIP: 0033:0x0
[  520.822673][T11193] Code: Unable to access opcode bytes at 0xffffffffffffffd6.
[  520.830048][T11193] RSP: 002b:000000000000000e EFLAGS: 00010217
[  520.836132][T11193] RAX: 0000000000000000 RBX: 00007fb0ab376080 RCX: 00007fb0ab185d19
[  520.844112][T11193] RDX: ffffffff81000000 RSI: 0000000000000006 RDI: 000000000000000f
[  520.852103][T11193] RBP: 00007fb0ab201a20 R08: 000000000000c0c9 R09: 0000000000000000
[  520.860099][T11193] R10: ffffffff81000000 R11: 0000000000000246 R12: 0000000000000000
[  520.868182][T11193] R13: 0000000000000000 R14: 00007fb0ab376080 R15: 00007fff2bd61738
[  520.876169][T11193]  ? 0xffffffff81000000
[  520.880331][T11193]  ? 0xffffffff81000000
[  520.884491][T11193]  </TASK>
[  520.972726][T11193] memory: usage 307200kB, limit 307200kB, failcnt 43686
[  520.980060][T11193] memory+swap: usage 430112kB, limit 9007199254740988kB, failcnt 0
[  520.988314][T11193] kmem: usage 3504kB, limit 9007199254740988kB, failcnt 0
[  520.995754][T11193] Memory cgroup stats for /syz2:
[  520.996010][T11193] cache 294002688
[  521.004901][T11193] rss 159744
[  521.008113][T11193] rss_huge 0
[  521.011345][T11193] shmem 293994496
[  521.015272][T11193] mapped_file 44953600
[  521.019361][T11193] dirty 0
[  521.022320][T11193] writeback 0
[  521.025980][T11193] workingset_refault_anon 21774
[  521.030854][T11193] workingset_refault_file 7459
[  521.035992][T11193] swap 125861888
[  521.039562][T11193] swapcached 28672
[  521.044000][T11193] pgpgin 1666436
[  521.047575][T11193] pgpgout 1601754
[  521.051226][T11193] pgfault 673352
[  521.055098][T11193] pgmajfault 3324
[  521.058833][T11193] inactive_anon 96210944
[  521.063088][T11193] active_anon 214765568
[  521.067604][T11193] inactive_file 4096
[  521.071530][T11193] active_file 4096
[  521.075589][T11193] unevictable 0
[  521.079069][T11193] hierarchical_memory_limit 314572800
[  521.084776][T11193] hierarchical_memsw_limit 9223372036854771712
[  521.090962][T11193] total_cache 294002688
[  521.095429][T11193] total_rss 159744
[  521.099174][T11193] total_rss_huge 0
[  521.102915][T11193] total_shmem 293994496
[  521.107563][T11193] total_mapped_file 44953600
[  521.112196][T11193] total_dirty 0
[  521.115982][T11193] total_writeback 0
[  521.119819][T11193] total_workingset_refault_anon 21774
[  521.125285][T11193] total_workingset_refault_file 7459
[  521.130592][T11193] total_swap 125861888
[  521.134726][T11193] total_swapcached 28672
[  521.139422][T11193] total_pgpgin 1666436
[  521.143611][T11193] total_pgpgout 1601754
[  521.148159][T11193] total_pgfault 673352
[  521.152269][T11193] total_pgmajfault 3324
[  521.156524][T11193] total_inactive_anon 96210944
[  521.161320][T11193] total_active_anon 214765568
[  521.166098][T11193] total_inactive_file 4096
[  521.168889][T11469] lo: entered allmulticast mode
[  521.170597][T11193] total_active_file 4096
[  521.179697][T11193] total_unevictable 0
[  521.183764][T11193] anon_cost 0
[  521.187084][T11193] file_cost 0
[  521.190390][T11193] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.1192,pid=11075,uid=0
[  521.195332][T11469] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1278'.
[  521.206845][T11193] Memory cgroup out of memory: Killed process 11075 (syz.2.1192) total-vm:134744kB, anon-rss:824kB, file-rss:23260kB, shmem-rss:20480kB, UID:0 pgtables:172kB oom_score_adj:0
[  522.690158][   T29] audit: type=1326 audit(2234.431:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11470 comm="syz.2.1277" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb0ab185d19 code=0x0
[  528.383921][T11504] Invalid ELF header magic: != ELF
[  528.755666][T11500] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  528.787706][T11500] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  528.871625][T11469] lo: left allmulticast mode
[  529.200974][   T29] audit: type=1326 audit(2241.521:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11506 comm="syz.5.1283" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb481385d19 code=0x0
[  531.549652][T11539] kernel read not supported for file /#)-\&[} (pid: 11539 comm: syz.5.1291)
[  531.558643][   T29] audit: type=1804 audit(2243.871:32): pid=11539 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.1291" name="#)-\&[}" dev="mqueue" ino=25474 res=1 errno=0
[  531.627578][   T29] audit: type=1800 audit(2243.921:33): pid=11539 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1291" name="#)-\&[}" dev="mqueue" ino=25474 res=0 errno=0
[  531.695232][   T29] audit: type=1804 audit(2243.951:34): pid=11539 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.5.1291" name="#)-\&[}" dev="mqueue" ino=25474 res=1 errno=0
[  531.783508][   T29] audit: type=1804 audit(2243.951:35): pid=11539 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.5.1291" name="#)-\&[}" dev="mqueue" ino=25474 res=1 errno=0
[  531.998019][   T29] audit: type=1326 audit(2244.321:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11542 comm="syz.0.1292" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff384385d19 code=0x0
[  533.182369][T11564] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1296'.
[  533.247162][T11564] bridge_slave_1: left allmulticast mode
[  533.252879][T11564] bridge_slave_1: left promiscuous mode
[  533.321432][T11564] bridge0: port 2(bridge_slave_1) entered disabled state
[  533.453439][T11564] bridge_slave_0: left allmulticast mode
[  533.487645][T11564] bridge_slave_0: left promiscuous mode
[  533.500817][T11564] bridge0: port 1(bridge_slave_0) entered disabled state
[  536.134782][T11619] lo: entered allmulticast mode
[  536.156306][T11619] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1308'.
[  536.451246][T11619] lo: left allmulticast mode
[  538.403032][T11646] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1313'.
[  538.461365][T11647] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1313'.
[  539.467130][T11669] lo: entered allmulticast mode
[  539.481491][T11669] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1318'.
[  539.567885][T11669] lo: left allmulticast mode
[  539.640124][T11662] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1317'.
[  540.334225][T11691] nbd: socks must be embedded in a SOCK_ITEM attr
[  540.342404][T11691] block nbd2: shutting down sockets
[  540.919044][T11673] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1319'.
[  540.944674][T11673] netdevsim netdevsim5 netdevsim2: entered allmulticast mode
[  542.247582][T11717] Invalid ELF header magic: != ELF
[  542.491624][T11741] Process accounting resumed
[  542.531726][T11741] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1333'.
[  542.553405][T11741] mac80211_hwsim hwsim8 wlan0: entered promiscuous mode
[  542.560440][T11741] mac80211_hwsim hwsim8 wlan0: entered allmulticast mode
[  542.572882][   T29] audit: type=1326 audit(2254.881:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11737 comm="syz.5.1332" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb481385d19 code=0x0
[  542.832390][   T29] audit: type=1804 audit(2255.151:38): pid=11753 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.1334" name="#)-\&[}" dev="mqueue" ino=27885 res=1 errno=0
[  542.832398][T11753] kernel read not supported for file /#)-\&[} (pid: 11753 comm: syz.2.1334)
[  542.913370][   T29] audit: type=1800 audit(2255.181:39): pid=11753 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1334" name="#)-\&[}" dev="mqueue" ino=27885 res=0 errno=0
[  543.008141][   T29] audit: type=1804 audit(2255.291:40): pid=11753 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.1334" name="#)-\&[}" dev="mqueue" ino=27885 res=1 errno=0
[  543.103435][   T29] audit: type=1804 audit(2255.291:41): pid=11753 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.1334" name="#)-\&[}" dev="mqueue" ino=27885 res=1 errno=0
[  543.753510][   T29] audit: type=1326 audit(2256.071:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11759 comm="syz.0.1343" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff384385d19 code=0x0
[  544.917871][T10097] Bluetooth: hci0: command 0x0406 tx timeout
[  545.094186][T11791] lo: entered allmulticast mode
[  545.143837][T11791] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1345'.
[  545.463313][T11791] lo: left allmulticast mode
[  545.707934][T11798] lo: entered allmulticast mode
[  545.754071][T11798] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1346'.
[  545.903756][T11798] lo: left allmulticast mode
[  551.337088][T11853] lo: entered allmulticast mode
[  551.343122][T11853] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1357'.
[  551.474666][T11853] lo: left allmulticast mode
[  551.863724][   T29] audit: type=1326 audit(2264.191:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11854 comm="syz.5.1358" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb481385d19 code=0x0
[  552.536407][T11871] Process accounting resumed
[  552.563075][T11871] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1361'.
[  556.219937][   T29] audit: type=1326 audit(2268.541:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11916 comm="syz.5.1371" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb481385d19 code=0x0
[  559.071500][T11940] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1375'.
[  562.404215][T11961] tipc: Started in network mode
[  562.413774][T11961] tipc: Node identity ee00, cluster identity 4711
[  562.420245][T11961] tipc: Node number set to 60928
[  562.761776][T11962] lo: entered allmulticast mode
[  562.799258][T11962] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1378'.
[  562.999159][T11962] lo: left allmulticast mode
[  563.316737][ T1293] ieee802154 phy0 wpan0: encryption failed: -22
[  563.323284][ T1293] ieee802154 phy1 wpan1: encryption failed: -22
[  565.717288][T12003] lo: entered allmulticast mode
[  565.821958][T12003] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1391'.
[  566.117854][T12003] lo: left allmulticast mode
[  567.385639][   T29] audit: type=1326 audit(2279.711:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12035 comm="syz.2.1395" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb0ab185d19 code=0x0
[  576.046879][T12114] lo: entered allmulticast mode
[  576.058988][T12114] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1414'.
[  576.118195][T12114] lo: left allmulticast mode
[  578.912501][T10097] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  578.939837][T10097] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  578.949055][T10097] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  578.961254][T10097] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  578.970604][T10097] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  578.978189][T10097] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  579.872073][T12152] chnl_net:caif_netlink_parms(): no params data found
[  581.063435][ T5844] Bluetooth: hci4: command tx timeout
[  581.191876][T12152] bridge0: port 1(bridge_slave_0) entered blocking state
[  581.203451][T12152] bridge0: port 1(bridge_slave_0) entered disabled state
[  581.210728][T12152] bridge_slave_0: entered allmulticast mode
[  581.260272][T12152] bridge_slave_0: entered promiscuous mode
[  581.294490][T12152] bridge0: port 2(bridge_slave_1) entered blocking state
[  581.301642][T12152] bridge0: port 2(bridge_slave_1) entered disabled state
[  581.343598][T12152] bridge_slave_1: entered allmulticast mode
[  581.353934][T12152] bridge_slave_1: entered promiscuous mode
[  581.891455][T12180] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1431'.
[  582.301482][T12178] lo: entered allmulticast mode
[  582.428924][T12152] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  582.495895][T12152] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  582.539170][T12178] lo: left allmulticast mode
[  582.890847][T12152] team0: Port device team_slave_0 added
[  582.926146][T12152] team0: Port device team_slave_1 added
[  583.143404][ T5844] Bluetooth: hci4: command tx timeout
[  583.275127][T12152] batman_adv: batadv0: Adding interface: batadv_slave_0
[  583.282122][T12152] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  583.873301][T12152] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  583.896968][T12152] batman_adv: batadv0: Adding interface: batadv_slave_1
[  583.913355][T12152] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  583.963295][T12152] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  584.170167][   T29] audit: type=1326 audit(2296.481:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12196 comm="syz.2.1437" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb0ab185d19 code=0x0
[  584.471938][T12152] hsr_slave_0: entered promiscuous mode
[  584.483308][   T29] audit: type=1326 audit(2296.801:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12198 comm="syz.1.1436" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f12d2585d19 code=0x0
[  584.514018][T12152] hsr_slave_1: entered promiscuous mode
[  584.540286][T12152] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  584.548982][T12152] Cannot create hsr debugfs directory
[  584.886173][T12152] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  584.931095][T12152] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  584.981450][T12152] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  585.113666][T12152] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  585.223904][ T5844] Bluetooth: hci4: command tx timeout
[  585.346890][T12152] 8021q: adding VLAN 0 to HW filter on device bond0
[  585.416402][T12152] 8021q: adding VLAN 0 to HW filter on device team0
[  585.449916][ T3560] bridge0: port 1(bridge_slave_0) entered blocking state
[  585.457109][ T3560] bridge0: port 1(bridge_slave_0) entered forwarding state
[  585.507916][ T2934] bridge0: port 2(bridge_slave_1) entered blocking state
[  585.515099][ T2934] bridge0: port 2(bridge_slave_1) entered forwarding state
[  585.955604][T12152] 8021q: adding VLAN 0 to HW filter on device batadv0
[  586.403017][T12152] veth0_vlan: entered promiscuous mode
[  586.444384][T12152] veth1_vlan: entered promiscuous mode
[  586.497679][T12152] veth0_macvtap: entered promiscuous mode
[  586.525129][T12152] veth1_macvtap: entered promiscuous mode
[  586.563814][T12152] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  586.593567][T12152] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  586.604713][T12152] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  586.626503][T12152] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  586.653297][T12152] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  586.679117][T12152] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  586.692158][T12235] device-mapper: ioctl: only supply one of name or uuid, cmd(17)
[  586.711132][T12152] batman_adv: batadv0: Interface activated: batadv_slave_0
[  586.747636][T12152] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  586.772416][T12152] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  586.809410][T12152] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  586.833365][T12152] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  586.853850][T12152] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  586.874609][T12152] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  586.894403][T12152] batman_adv: batadv0: Interface activated: batadv_slave_1
[  586.921312][T12152] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  586.943318][T12152] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  586.963702][T12152] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  586.996662][T12152] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  587.244419][ T9589] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  587.276216][ T9589] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  587.303579][ T5844] Bluetooth: hci4: command tx timeout
[  587.331104][ T9589] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  587.357879][ T9589] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  589.599721][T12259] tipc: Started in network mode
[  589.633761][T12259] tipc: Node identity ee00, cluster identity 4711
[  589.693427][T12259] tipc: Node number set to 60928
[  590.786201][T12271] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1452'.
[  590.932184][T12271] bridge_slave_1: left allmulticast mode
[  590.948509][T12271] bridge_slave_1: left promiscuous mode
[  590.973577][T12271] bridge0: port 2(bridge_slave_1) entered disabled state
[  591.084826][T12271] bridge_slave_0: left allmulticast mode
[  591.108377][T12271] bridge_slave_0: left promiscuous mode
[  591.149591][T12271] bridge0: port 1(bridge_slave_0) entered disabled state
[  593.134842][T12293] netlink: 330 bytes leftover after parsing attributes in process `syz.5.1457'.
[  597.601787][T12331] lo: entered allmulticast mode
[  597.653705][T12331] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1470'.
[  597.680764][T12336] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1468'.
[  597.695566][T12329] lo: entered allmulticast mode
[  598.542593][T12329] lo: left allmulticast mode
[  598.734396][T12331] lo: left allmulticast mode
[  599.249947][T12373] lo: entered allmulticast mode
[  599.264539][T12373] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1476'.
[  599.772530][T12373] lo: left allmulticast mode
[  600.613484][T12407] lo: entered allmulticast mode
[  600.680935][T12407] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1481'.
[  600.827099][T12407] lo: left allmulticast mode
[  601.025002][T12427] lo: entered allmulticast mode
[  601.040432][T12427] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1483'.
[  601.177527][T12427] lo: left allmulticast mode
[  602.588902][T12475] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1488'.
[  602.618608][T12474] lo: entered allmulticast mode
[  602.688494][T12474] lo: left allmulticast mode
[  605.352680][T12522] lo: entered allmulticast mode
[  605.364356][T12522] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1498'.
[  605.426031][T12522] lo: left allmulticast mode
[  605.730864][T12531] lo: entered allmulticast mode
[  605.745680][T12531] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1501'.
[  605.807158][T12531] lo: left allmulticast mode
[  607.402525][T12556] lo: entered allmulticast mode
[  607.430255][T12556] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1506'.
[  607.662439][T12556] lo: left allmulticast mode
[  608.226350][T12567] lo: entered allmulticast mode
[  608.254129][T12567] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1510'.
[  608.628577][T12567] lo: left allmulticast mode
[  609.259376][T12574] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1513'.
[  610.842003][T12612] tipc: Started in network mode
[  610.886918][T12612] tipc: Node identity ee00, cluster identity 4711
[  610.961784][T12612] tipc: Node number set to 60928
[  611.695015][T12624] lo: entered allmulticast mode
[  611.703905][T12620] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1525'.
[  611.748969][T12619] lo: left allmulticast mode
[  612.611168][T12644] lo: entered allmulticast mode
[  612.632248][T12644] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1529'.
[  612.733312][T12644] lo: left allmulticast mode
[  615.430773][T12693] lo: entered allmulticast mode
[  615.469239][T12693] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1540'.
[  615.546195][T12693] lo: left allmulticast mode
[  616.284561][T12711] lo: entered allmulticast mode
[  616.306317][T12711] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1544'.
[  616.364585][T12711] lo: left allmulticast mode
[  616.816226][T12725] netlink: Conntrack attr has 16 unknown bytes
[  617.312564][T12736] lo: entered allmulticast mode
[  617.333668][T12736] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1549'.
[  617.525489][T12736] lo: left allmulticast mode
[  618.320979][   T29] audit: type=1326 audit(2330.641:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12757 comm="syz.2.1552" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb0ab185d19 code=0x0
[  620.623385][   T29] audit: type=1326 audit(2332.941:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12808 comm="syz.1.1562" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f12d2585d19 code=0x0
[  623.862587][T12853] lo: entered allmulticast mode
[  623.909153][T12853] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1572'.
[  623.988953][T12852] lo: left allmulticast mode
[  624.747511][ T1293] ieee802154 phy0 wpan0: encryption failed: -22
[  624.763866][ T1293] ieee802154 phy1 wpan1: encryption failed: -22
[  625.488307][T12886] lo: entered allmulticast mode
[  625.504551][T12886] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1577'.
[  625.665948][T12886] lo: left allmulticast mode
[  625.969015][T12900] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1581'.
[  626.097407][T12898] lo: entered allmulticast mode
[  626.265403][T12898] lo: left allmulticast mode
[  628.127201][T12952] lo: entered allmulticast mode
[  628.144424][T12952] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1592'.
[  628.205693][T12952] lo: left allmulticast mode
[  630.778213][T12984] lo: entered allmulticast mode
[  630.784454][T12984] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1602'.
[  630.817098][T12984] lo: left allmulticast mode
[  631.129823][   T29] audit: type=1326 audit(2343.451:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12988 comm="syz.2.1603" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb0ab185d19 code=0x0
[  632.689681][T13004] lo: entered allmulticast mode
[  632.728464][T13004] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1606'.
[  632.938718][T13004] lo: left allmulticast mode
[  632.939151][T13019] netlink: 326 bytes leftover after parsing attributes in process `syz.2.1609'.
[  634.926445][T13028] lo: entered allmulticast mode
[  634.943893][T13028] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1612'.
[  634.978026][T13027] lo: entered allmulticast mode
[  635.021006][T13028] lo: left allmulticast mode
[  635.022045][T13027] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1611'.
[  635.127563][T13027] lo: left allmulticast mode
[  636.248923][T13052] netlink: 326 bytes leftover after parsing attributes in process `syz.5.1620'.
[  637.036634][T13066] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1622'.
[  637.059084][T13064] lo: entered allmulticast mode
[  637.092723][T13064] lo: left allmulticast mode
[  638.723348][   T29] audit: type=1326 audit(2351.041:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13091 comm="syz.5.1629" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb481385d19 code=0x0
[  638.892626][T13101] netlink: 326 bytes leftover after parsing attributes in process `syz.1.1630'.
[  638.913025][T13088] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1628'.
[  639.806013][T13123] lo: entered allmulticast mode
[  639.835927][T13123] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1636'.
[  639.914560][T13123] lo: left allmulticast mode
[  641.552734][T13156] lo: entered allmulticast mode
[  641.584463][T13156] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1644'.
[  641.693789][T13129] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1637'.
[  641.813261][T13156] lo: left allmulticast mode
[  642.044291][T13162] lo: entered allmulticast mode
[  642.054390][T13162] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1647'.
[  642.355238][T13162] lo: left allmulticast mode
[  643.635045][T13190] lo: entered allmulticast mode
[  643.645967][T13190] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1655'.
[  643.944535][T13190] lo: left allmulticast mode
[  644.392718][T13215] lo: entered allmulticast mode
[  644.423626][T13215] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1660'.
[  644.626299][T13215] lo: left allmulticast mode
[  645.324587][T13247] Process accounting resumed
[  645.364377][T13247] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1666'.
[  646.227625][T13260] lo: entered allmulticast mode
[  646.264687][T13260] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1668'.
[  646.329399][T13260] lo: left allmulticast mode
[  647.503127][T13277] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1671'.
[  647.609060][T13280] lo: entered allmulticast mode
[  647.620190][T13280] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1673'.
[  647.830814][T13280] lo: left allmulticast mode
[  648.170964][T13293] Process accounting resumed
[  648.212636][T13293] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1676'.
[  648.234304][T13293] mac80211_hwsim hwsim21 wlan0: entered promiscuous mode
[  648.251827][T13293] mac80211_hwsim hwsim21 wlan0: entered allmulticast mode
[  650.116917][   T29] audit: type=1326 audit(2362.441:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13329 comm="syz.2.1686" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb0ab185d19 code=0x0
[  651.893585][T13344] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1689'.
[  653.215211][T13371] netlink: 326 bytes leftover after parsing attributes in process `syz.1.1694'.
[  655.082391][T13388] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1697'.
[  656.650267][T13416] netlink: 326 bytes leftover after parsing attributes in process `syz.2.1704'.
[  658.525420][T13434] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1709'.
[  659.421477][T13470] lo: entered allmulticast mode
[  659.454947][T13470] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1718'.
[  659.552443][T13470] lo: left allmulticast mode
[  660.420306][T13477] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1720'.
[  663.804196][T13605] lo: entered allmulticast mode
[  663.895600][T13609] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1748'.
[  664.029022][T13612] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1749'.
[  664.102590][T13608] lo: entered allmulticast mode
[  664.323109][T13605] lo: left allmulticast mode
[  664.664937][T13608] lo: left allmulticast mode
[  666.682024][T13693] lo: entered allmulticast mode
[  666.720661][T13692] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1762'.
[  666.754351][T13689] lo: left allmulticast mode
[  668.827692][T13772] lo: entered allmulticast mode
[  668.844518][T13772] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1777'.
[  668.941500][T13772] lo: left allmulticast mode
[  669.561741][T13781] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1779'.
[  670.309825][T13805] lo: entered allmulticast mode
[  670.344353][T13805] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1784'.
[  670.484697][T13805] lo: left allmulticast mode
[  670.571583][T13810] lo: entered allmulticast mode
[  670.598020][T13810] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1785'.
[  670.760422][T13810] lo: left allmulticast mode
[  673.276328][T13888] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1800'.
[  674.344601][T13914] syz.6.1808 (13914): attempted to duplicate a private mapping with mremap.  This is not supported.
[  675.223814][T13919] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1809'.
[  675.724720][T13952] lo: entered allmulticast mode
[  675.739533][T13952] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1822'.
[  675.839914][T13952] lo: left allmulticast mode
[  678.412975][T14019] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1843'.
[  678.644376][T14028] lo: entered allmulticast mode
[  678.802908][T14028] lo: left allmulticast mode
[  679.224658][T14047] lo: entered allmulticast mode
[  679.266376][T14047] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1849'.
[  679.452916][T14047] lo: left allmulticast mode
[  683.313741][T14174] lo: entered allmulticast mode
[  683.377439][T14174] lo: left allmulticast mode
[  684.684540][T14206] Invalid ELF header magic: != ELF
[  685.432588][T14228] netlink: 168 bytes leftover after parsing attributes in process `syz.6.1905'.
[  686.185900][ T1293] ieee802154 phy0 wpan0: encryption failed: -22
[  686.192255][ T1293] ieee802154 phy1 wpan1: encryption failed: -22
[  688.107788][T14274] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1921'.
[  688.345983][T14304] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1929'.
[  688.397663][T14304] netdevsim netdevsim6 netdevsim2: entered allmulticast mode
[  688.743451][   T29] audit: type=1800 audit(2401.061:53): pid=14326 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1937" name="discovery_nqn" dev="configfs" ino=36826 res=0 errno=0
[  690.330561][T14362] Invalid ELF header magic: != ELF
[  691.632340][T14395] Process accounting resumed
[  691.641605][T14395] kstrtoul() returned -22 for lu_gp_id
[  692.208779][T14412] lo: entered allmulticast mode
[  692.237809][T14412] lo: left allmulticast mode
[  692.623564][T14430] lo: entered allmulticast mode
[  692.650162][T14426] lo: left allmulticast mode
[  696.164660][T14558] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2005'.
[  696.183438][T14558] macvlan0: left allmulticast mode
[  696.188638][T14558] veth1_vlan: left allmulticast mode
[  696.204493][T14558] macvlan0: left promiscuous mode
[  696.209892][T14558] bridge0: port 3(macvlan0) entered disabled state
[  696.246230][T14558] bridge_slave_1: left allmulticast mode
[  696.252246][T14558] bridge_slave_1: left promiscuous mode
[  696.273584][T14558] bridge0: port 2(bridge_slave_1) entered disabled state
[  696.282455][T14558] bridge_slave_0: left allmulticast mode
[  696.290830][T14558] bridge_slave_0: left promiscuous mode
[  696.303442][T14558] bridge0: port 1(bridge_slave_0) entered disabled state
[  696.571371][T14566] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2006'.
[  697.235776][T14587] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  697.903529][   T29] audit: type=1806 audit(2410.221:54): xattr="" res=-22
[  698.252090][   T29] audit: type=1800 audit(2410.571:55): pid=14614 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="" name="members" dev="configfs" ino=39268 res=0 errno=0
[  700.026496][T14661] lo: entered allmulticast mode
[  700.051151][T14661] lo: left allmulticast mode
[  701.548371][T14731] lo: entered allmulticast mode
[  701.609725][T14729] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2051'.
[  701.627346][T14731] lo: left allmulticast mode
[  702.789231][T14763] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  702.803567][T14763] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  702.817535][T14763] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  702.824584][T14763] Bluetooth: hci0: Opcode 0x0406 failed: -4
[  702.864431][T14763] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  702.882498][T14763] Bluetooth: hci4: Opcode 0x0406 failed: -4
[  703.874271][T14777] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2065'.
[  704.597479][T14812] lo: entered allmulticast mode
[  704.626981][T14812] lo: left allmulticast mode
[  704.774993][T14804] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2080'.
[  704.824536][T10097] Bluetooth: hci0: command 0x0406 tx timeout
[  704.842213][ T5844] Bluetooth: hci3: command 0x0c1a tx timeout
[  704.855806][T10097] Bluetooth: hci2: command 0x0c1a tx timeout
[  704.904095][T14823] Bluetooth: hci4: command 0x0406 tx timeout
[  706.903537][T14823] Bluetooth: hci0: command 0x0406 tx timeout
[  706.983278][T14823] Bluetooth: hci4: command 0x0406 tx timeout
[  708.015454][T14908] lo: entered allmulticast mode
[  708.175365][T14908] lo: left allmulticast mode
[  709.313515][T14967] raw_sendmsg: syz.5.2115 forgot to set AF_INET. Fix it!
[  709.414633][T14971] size and base must be multiples of 4 kiB
[  709.420607][T14971] CPU: 0 UID: 0 PID: 14971 Comm: syz.6.2117 Not tainted 6.13.0-rc2-syzkaller-00382-gdccbe2047a5b #0
[  709.431417][T14971] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024
[  709.441519][T14971] Call Trace:
[  709.444831][T14971]  <TASK>
[  709.447792][T14971]  dump_stack_lvl+0x16c/0x1f0
[  709.452524][T14971]  mtrr_del+0xd1/0x110
[  709.456647][T14971]  mtrr_ioctl+0x900/0xcd0
[  709.461026][T14971]  ? __pfx_mtrr_ioctl+0x10/0x10
[  709.465937][T14971]  ? __pfx_lock_release+0x10/0x10
[  709.470982][T14971]  ? __fget_files+0x206/0x3a0
[  709.475674][T14971]  ? __pfx_mtrr_ioctl+0x10/0x10
[  709.480544][T14971]  proc_reg_unlocked_ioctl+0x226/0x320
[  709.486012][T14971]  ? __pfx_proc_reg_unlocked_ioctl+0x10/0x10
[  709.492006][T14971]  __x64_sys_ioctl+0x190/0x200
[  709.496791][T14971]  do_syscall_64+0xcd/0x250
[  709.501306][T14971]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  709.507212][T14971] RIP: 0033:0x7f737ad85d19
[  709.511634][T14971] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  709.531264][T14971] RSP: 002b:00007f7378bf6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  709.539692][T14971] RAX: ffffffffffffffda RBX: 00007f737af75fa0 RCX: 00007f737ad85d19
[  709.547680][T14971] RDX: 0000000000000007 RSI: 0000000040104d04 RDI: 0000000000000003
[  709.555673][T14971] RBP: 00007f737ae01a20 R08: 0000000000000000 R09: 0000000000000000
[  709.563671][T14971] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  709.571660][T14971] R13: 0000000000000000 R14: 00007f737af75fa0 R15: 00007ffc9fd35658
[  709.579678][T14971]  </TASK>
[  711.540490][T14984] kexec: Could not allocate control_code_buffer
[  711.728517][T15031] lo: entered allmulticast mode
[  711.745471][T15031] lo: left allmulticast mode
[  712.672031][T15041] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2135'.
[  713.064882][T15069] netlink: 334 bytes leftover after parsing attributes in process `syz.1.2142'.
[  713.462538][T15074] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2144'.
[  714.038462][T15082] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2147'.
[  714.179671][T15097] lo: entered allmulticast mode
[  714.202226][T15097] lo: left allmulticast mode
[  715.146566][T15124] lo: entered allmulticast mode
[  715.175854][T15124] lo: left allmulticast mode
[  715.656581][T15137] lo: entered allmulticast mode
[  715.677077][T15137] lo: left allmulticast mode
[  715.737731][T15138] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2162'.
[  716.966599][T15200] lo: entered allmulticast mode
[  716.984918][T15200] lo: left allmulticast mode
[  717.315966][T15213] lo: entered allmulticast mode
[  717.388965][T15213] lo: left allmulticast mode
[  719.870318][T15275] =======================================================
[  719.870318][T15275] WARNING: The mand mount option has been deprecated and
[  719.870318][T15275]          and is ignored by this kernel. Remove the mand
[  719.870318][T15275]          option from the mount to silence this warning.
[  719.870318][T15275] =======================================================
[  721.974479][T15310] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2208'.
[  722.088583][T15341] lo: entered allmulticast mode
[  722.104792][T15341] lo: left allmulticast mode
[  723.884689][T15382] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2226'.
[  724.581175][T15390] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2227'.
[  725.360388][T15422] delete_channel: no stack
[  725.484548][T15425] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2239'.
[  725.734421][T15430] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2240'.
[  725.809010][T15433] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2239'.
[  726.082633][T15430] geneve1: entered allmulticast mode
[  727.165422][T15467] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2254'.
[  727.682830][T15481] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2258'.
[  729.313117][T15523] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2272'.
[  729.898548][T15540] netlink: 'syz.1.2277': attribute type 1 has an invalid length.
[  730.581666][T15569] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2289'.
[  731.197764][T15583] delete_channel: no stack
[  732.030528][T15611] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2302'.
[  732.865726][T15634] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2310'.
[  733.155456][T15642] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2310'.
[  733.887161][T15654] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2318'.
[  735.916554][T15704] netlink: 342 bytes leftover after parsing attributes in process `syz.1.2334'.
[  735.957212][T15704] netlink: 146 bytes leftover after parsing attributes in process `syz.1.2334'.
[  738.495675][T15763] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2354'.
[  738.852482][T15766] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2355'.
[  739.461757][T15757] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2351'.
[  740.779597][T15776] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2357'.
[  741.733553][T15825] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2371'.
[  742.964325][ T5839] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  742.974263][ T5839] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  742.982442][ T5839] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  743.043539][ T5839] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  743.066633][ T5839] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  743.089621][ T5839] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  743.350980][T15871] netlink: 330 bytes leftover after parsing attributes in process `syz.1.2387'.
[  743.728851][T15856] chnl_net:caif_netlink_parms(): no params data found
[  743.977977][T15856] bridge0: port 1(bridge_slave_0) entered blocking state
[  743.996945][T15856] bridge0: port 1(bridge_slave_0) entered disabled state
[  744.014293][T15856] bridge_slave_0: entered allmulticast mode
[  744.035067][T15856] bridge_slave_0: entered promiscuous mode
[  744.079896][T15877] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2386'.
[  744.099385][T15856] bridge0: port 2(bridge_slave_1) entered blocking state
[  744.113099][T15856] bridge0: port 2(bridge_slave_1) entered disabled state
[  744.121257][T15856] bridge_slave_1: entered allmulticast mode
[  744.129155][T15856] bridge_slave_1: entered promiscuous mode
[  744.230091][T15856] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  744.279422][T15856] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  744.369268][T15856] team0: Port device team_slave_0 added
[  744.428264][T15856] team0: Port device team_slave_1 added
[  744.503447][T15856] batman_adv: batadv0: Adding interface: batadv_slave_0
[  744.510446][T15856] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  744.573413][T15856] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  744.608271][T15856] batman_adv: batadv0: Adding interface: batadv_slave_1
[  744.623240][T15856] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  744.649798][T15856] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  744.787442][T15856] hsr_slave_0: entered promiscuous mode
[  744.802531][T15856] hsr_slave_1: entered promiscuous mode
[  744.810834][T15856] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  744.833277][T15856] Cannot create hsr debugfs directory
[  745.143307][ T5839] Bluetooth: hci1: command tx timeout
[  745.354572][T15856] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  745.376172][T15856] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  745.406859][T15856] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  745.433906][T15856] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  745.657739][T15856] 8021q: adding VLAN 0 to HW filter on device bond0
[  745.694387][T15856] 8021q: adding VLAN 0 to HW filter on device team0
[  745.730091][T10303] bridge0: port 1(bridge_slave_0) entered blocking state
[  745.737304][T10303] bridge0: port 1(bridge_slave_0) entered forwarding state
[  745.784934][T10303] bridge0: port 2(bridge_slave_1) entered blocking state
[  745.792095][T10303] bridge0: port 2(bridge_slave_1) entered forwarding state
[  746.022311][T15921] sctp: [Deprecated]: syz.1.2399 (pid 15921) Use of int in max_burst socket option.
[  746.022311][T15921] Use struct sctp_assoc_value instead
[  746.237774][T15856] 8021q: adding VLAN 0 to HW filter on device batadv0
[  746.378163][T15932] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2401'.
[  746.488056][T15910] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2396'.
[  746.835179][T15856] veth0_vlan: entered promiscuous mode
[  746.873566][T15856] veth1_vlan: entered promiscuous mode
[  746.929816][T15856] veth0_macvtap: entered promiscuous mode
[  746.956680][T15856] veth1_macvtap: entered promiscuous mode
[  746.991962][T15856] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  747.023952][T15856] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  747.063528][T15856] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  747.081541][T15856] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  747.103268][T15856] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  747.124373][T15856] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  747.148246][T15856] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  747.168988][T15856] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  747.205797][T15856] batman_adv: batadv0: Interface activated: batadv_slave_0
[  747.217200][T15856] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  747.230683][ T5839] Bluetooth: hci1: command tx timeout
[  747.265234][T15856] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  747.312775][T15856] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  747.348970][T15856] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  747.383401][T15856] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  747.403353][T15856] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  747.423866][T15856] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  747.440471][T15856] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  747.452521][T15856] batman_adv: batadv0: Interface activated: batadv_slave_1
[  747.504694][T15856] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  747.532022][T15856] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  747.542274][T15856] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  747.551390][T15856] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  747.625710][ T1293] ieee802154 phy0 wpan0: encryption failed: -22
[  747.638537][ T1293] ieee802154 phy1 wpan1: encryption failed: -22
[  747.727838][T10303] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  747.737104][T10303] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  747.791839][ T9589] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  747.822630][ T9589] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  747.983039][T15955] netlink: 330 bytes leftover after parsing attributes in process `syz.1.2407'.
[  748.711971][T15974] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2413'.
[  749.303592][ T5839] Bluetooth: hci1: command tx timeout
[  750.755178][T16025] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2423'.
[  750.777581][T16009] Invalid ELF header magic: != ELF
[  750.941627][T16001] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2417'.
[  751.057928][T16001] netdevsim netdevsim7 netdevsim2: entered allmulticast mode
[  751.383573][ T5839] Bluetooth: hci1: command tx timeout
[  752.224571][T16055] netlink: 'syz.1.2431': attribute type 20 has an invalid length.
[  752.232967][T16055] netlink: 330 bytes leftover after parsing attributes in process `syz.1.2431'.
[  752.270928][T16055] IPv6: NLM_F_CREATE should be specified when creating new route
[  752.624907][T16066] netlink: 334 bytes leftover after parsing attributes in process `syz.7.2436'.
[  753.636851][T16089] netlink: 342 bytes leftover after parsing attributes in process `syz.6.2442'.
[  754.081663][T16087] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2441'.
[  754.327366][T16069] Invalid ELF header magic: != ELF
[  754.396546][T16102] netlink: 330 bytes leftover after parsing attributes in process `syz.6.2446'.
[  755.032633][T16119] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2452'.
[  755.042112][T16119] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  755.321097][T16119] batman_adv: batadv0: Removing interface: batadv_slave_1
[  756.040465][T16140] netlink: 326 bytes leftover after parsing attributes in process `syz.6.2459'.
[  756.167370][T16145] netlink: 326 bytes leftover after parsing attributes in process `syz.1.2460'.
[  756.213435][T16145] veth0_macvtap: left promiscuous mode
[  756.612771][T16156] netlink: 330 bytes leftover after parsing attributes in process `syz.5.2465'.
[  757.404771][T16166] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2468'.
[  758.731710][T16197] netlink: 138 bytes leftover after parsing attributes in process `syz.5.2477'.
[  759.167994][T16201] netlink: 326 bytes leftover after parsing attributes in process `syz.5.2479'.
[  759.236200][T16201] veth0_macvtap: left promiscuous mode
[  760.042758][T16219] netlink: 326 bytes leftover after parsing attributes in process `syz.7.2486'.
[  760.245934][T16222] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2488'.
[  760.833409][T16235] netlink: 330 bytes leftover after parsing attributes in process `syz.6.2494'.
[  760.891395][T16237] mkiss: ax0: crc mode is auto.
[  761.072263][T16243] netlink: 330 bytes leftover after parsing attributes in process `syz.1.2503'.
[  762.674600][T16277] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2502'.
[  762.933805][T16259] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2500'.
[  763.960827][T16326] mkiss: ax0: crc mode is auto.
[  765.785677][T16391] netlink: 330 bytes leftover after parsing attributes in process `syz.7.2527'.
[  766.153423][T16403] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2530'.
[  766.162955][T16403] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  766.220195][T16403] batman_adv: batadv0: Removing interface: batadv_slave_0
[  766.300941][T16403] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  766.321228][T16403] batman_adv: batadv0: Removing interface: batadv_slave_1
[  767.222681][T16407] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2531'.
[  768.357652][T16460] mkiss: ax0: crc mode is auto.
[  769.001812][T16468] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2542'.
[  769.115480][T16475] netlink: 342 bytes leftover after parsing attributes in process `syz.1.2546'.
[  769.134156][T16475] netlink: 202 bytes leftover after parsing attributes in process `syz.1.2546'.
[  769.446874][T16481] mkiss: ax0: crc mode is auto.
[  770.091518][T16483] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2549'.
[  770.810080][T16515] netlink: 330 bytes leftover after parsing attributes in process `syz.6.2557'.
[  771.817541][T16533] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2563'.
[  773.351752][T16561] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2572'.
[  774.548269][T16605] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2588'.
[  775.243417][T16623] netlink: 330 bytes leftover after parsing attributes in process `syz.5.2592'.
[  775.438597][T16623] : renamed from bond_slave_1 (while UP)
[  776.206199][T16641] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2599'.
[  777.000050][T16662] mkiss: ax0: crc mode is auto.
[  777.502364][T16678] netlink: 330 bytes leftover after parsing attributes in process `syz.1.2609'.
[  777.859244][T16684] netlink: 330 bytes leftover after parsing attributes in process `syz.5.2612'.
[  779.796358][T12135] udevd[12135]: inotify_add_watch(7, /dev/sda1, 10) failed: No such file or directory
[  780.143486][T16738] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2626'.
[  780.431740][T16758] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2632'.
[  780.453723][T16758] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2632'.
[  781.663738][T16779] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2638'.
[  782.374196][T16808] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2645'.
[  783.327697][T16823] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2650'.
[  783.758819][T12135] udevd[12135]: inotify_add_watch(7, /dev/sda1, 10) failed: No such file or directory
[  784.848591][T16870] netlink: 342 bytes leftover after parsing attributes in process `syz.6.2663'.
[  784.898108][T16870] netlink: 98 bytes leftover after parsing attributes in process `syz.6.2663'.
[  785.623041][T16875] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2664'.
[  785.683729][T16878] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2665'.
[  785.760243][T16878] bridge_slave_1: left allmulticast mode
[  785.770329][T16878] bridge_slave_1: left promiscuous mode
[  785.833505][T16878] bridge0: port 2(bridge_slave_1) entered disabled state
[  785.880464][T16878] bridge_slave_0: left allmulticast mode
[  785.912343][T16878] bridge_slave_0: left promiscuous mode
[  785.920729][T16892] netlink: 354 bytes leftover after parsing attributes in process `syz.6.2668'.
[  785.952335][T16878] bridge0: port 1(bridge_slave_0) entered disabled state
[  786.465164][T16903] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2673'.
[  786.491357][T16903] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2673'.
[  787.414319][T16907] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2674'.
[  788.051800][T16919] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2677'.
[  788.372804][T16947] __nla_validate_parse: 1 callbacks suppressed
[  788.372825][T16947] netlink: 206 bytes leftover after parsing attributes in process `syz.6.2686'.
[  790.012544][T16976] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2693'.
[  790.819219][T16984] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2696'.
[  791.186306][T16993] netlink: 206 bytes leftover after parsing attributes in process `syz.7.2697'.
[  791.456714][T17000] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2699'.
[  791.494931][T17000] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2699'.
[  794.694002][T17043] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2711'.
[  795.860085][T17082] netlink: 330 bytes leftover after parsing attributes in process `syz.6.2723'.
[  795.904544][T17082] : renamed from wg0 (while UP)
[  796.863534][T17091] delete_channel: no stack
[  796.892898][T17094] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2727'.
[  797.094906][T17072] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2720'.
[  797.117399][T17094] hsr_slave_0 (unregistering): left promiscuous mode
[  797.330686][T17103] netlink: 158 bytes leftover after parsing attributes in process `syz.6.2729'.
[  797.383642][T17103] veth1_macvtap: left promiscuous mode
[  797.686955][T17115] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2733'.
[  798.920507][T17130] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2739'.
[  802.027130][T17188] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2756'.
[  803.763889][T17227] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2765'.
[  804.187331][T17239] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2763'.
[  807.046902][T17276] netlink: 36 bytes leftover after parsing attributes in process `syz.7.2773'.
[  807.267843][T17287] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2777'.
[  808.077852][T17297] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2783'.
[  809.067557][ T1293] ieee802154 phy0 wpan0: encryption failed: -22
[  809.074014][ T1293] ieee802154 phy1 wpan1: encryption failed: -22
[  810.592821][T17342] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2791'.
[  810.825875][T17342] team0: Port device team_slave_1 removed
[  811.013611][T17348] hugetlbfs: syz.5.2793 (17348): Using mlock ulimits for SHM_HUGETLB is obsolete
[  812.431677][T17377] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2803'.
[  813.824324][T17390] Invalid ELF header magic: != ELF
[  813.906036][T17415] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2811'.
[  814.178351][T17408] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2810'.
[  814.933463][T17440] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2817'.
[  816.287492][T17468] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2822'.
[  816.887435][T17472] HfR: entered promiscuous mode
[  817.691448][T17488] Invalid ELF header magic: != ELF
[  818.593943][T17501] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2833'.
[  819.242210][T17516] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2831'.
[  820.002013][T17512] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2834'.
[  820.572966][T17513] Invalid ELF header magic: != ELF
[  822.378120][T17564] netlink: 342 bytes leftover after parsing attributes in process `syz.1.2842'.
[  823.006414][T17580] cifs: Unknown parameter 'T.�����żc[���$⁍��)��U�ÑnE�-ʙ�l���-��	�-�_������5Z�o��m��fwY�h�*/�xD
lݩ���g�kǐA����7���9���X�a/f�_�AR������xM	�v��p��$^;��q�3���n���-
6��+e�k�����<�k�c�)n.�eM��Na��t��SM��1,'
[  823.394109][T17567] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2844'.
[  823.495559][T17584] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2847'.
[  826.703349][T17641] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2862'.
[  828.641139][T17673] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2870'.
[  829.845204][T17691] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2875'.
[  832.880756][T17761] could not allocate digest TFM handle 
[  835.137057][T17789] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2900'.
[  836.463362][T17821] netlink: 342 bytes leftover after parsing attributes in process `syz.6.2911'.
[  838.544424][T17844] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2916'.
[  838.553455][T17850] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2918'.
[  839.516340][T17847] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2917'.
[  840.717037][T17890] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2929'.
[  840.754241][T17872] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2923'.
[  841.085383][T17874] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2925'.
[  844.314359][T17946] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2940'.
[  844.698892][T17948] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2941'.
[  847.672797][T18010] nbd: must specify at least one socket
[  847.771844][T18016] netlink: 326 bytes leftover after parsing attributes in process `syz.1.2958'.
[  847.819060][T18016] netlink: 326 bytes leftover after parsing attributes in process `syz.1.2958'.
[  848.033896][T18020] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2959'.
[  848.419942][T18020] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  848.431840][T18020] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  848.444310][T18020] bond0 (unregistering): Released all slaves
[  851.918060][T18075] could not allocate digest TFM handle 
[  851.987895][T18080] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  852.010955][T18080] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  854.207780][T18118] netlink: 342 bytes leftover after parsing attributes in process `syz.7.2979'.
[  855.819662][T18146] could not allocate digest TFM handle 
[  857.769329][T18173] netlink: 342 bytes leftover after parsing attributes in process `syz.5.2991'.
[  858.472213][T18181] netlink: 326 bytes leftover after parsing attributes in process `syz.7.2992'.
[  858.515617][T18181] netlink: 326 bytes leftover after parsing attributes in process `syz.7.2992'.
[  858.945057][T18187] tipc: Started in network mode
[  858.950114][T18187] tipc: Node identity ee00, cluster identity 4711
[  858.963262][T18187] tipc: Node number set to 60928
[  859.308413][T18198] could not allocate digest TFM handle 
[  861.241829][T18237] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3008'.
[  862.190328][T18258] Scaler: =================  START STATUS  =================
[  862.209257][T18258] Scaler: ==================  END STATUS  ==================
[  862.374630][   T29] audit: type=1800 audit(2586.699:56): pid=18258 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.3013" name="SYSV00000008" dev="hugetlbfs" ino=0 res=0 errno=0
[  862.994519][T18281] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3016'.
[  863.051847][T18281] mac80211_hwsim hwsim6 wlan0: left promiscuous mode
[  863.188938][T18281] netlink: 326 bytes leftover after parsing attributes in process `syz.1.3016'.
[  863.853017][T18307] netlink: 346 bytes leftover after parsing attributes in process `syz.7.3025'.
[  863.861221][T18302] Scaler: =================  START STATUS  =================
[  863.884558][T18302] Scaler: ==================  END STATUS  ==================
[  865.154187][T18320] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3028'.
[  865.737082][T18337] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3032'.
[  866.276531][T18343] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  866.322920][T18343] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  867.473423][T14823] Bluetooth: hci1: command 0x0406 tx timeout
[  867.513666][T18377] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3044'.
[  867.637374][T18373] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3043'.
[  868.150768][T18391] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3048'.
[  868.315142][T18395] ptrace attach of "./syz-executor exec"[15856] was attempted by "./syz-executor exec"[18395]
[  869.798826][T18418] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3054'.
[  870.513603][ T1293] ieee802154 phy0 wpan0: encryption failed: -22
[  870.523707][ T1293] ieee802154 phy1 wpan1: encryption failed: -22
[  871.222450][T18438] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  871.232203][T18438] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  872.317786][T18460] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3062'.
[  873.777563][T18484] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  873.813246][T18484] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  874.131756][   T29] audit: type=1800 audit(2598.449:57): pid=18489 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.3067" name="SYSV00000008" dev="hugetlbfs" ino=0 res=0 errno=0
[  875.636093][T18522] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3076'.
[  876.624238][T18534] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3079'.
[  876.910832][   T29] audit: type=1804 audit(2613.238:58): pid=18557 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.3083" name="#)-\&[}" dev="mqueue" ino=56429 res=1 errno=0
[  876.931262][T18557] kernel read not supported for file /#)-\&[} (pid: 18557 comm: syz.1.3083)
[  876.949150][   T29] audit: type=1800 audit(2613.278:59): pid=18557 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.3083" name="#)-\&[}" dev="mqueue" ino=56429 res=0 errno=0
[  877.021280][   T29] audit: type=1804 audit(2613.318:60): pid=18557 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.3083" name="#)-\&[}" dev="mqueue" ino=56429 res=1 errno=0
[  877.071811][   T29] audit: type=1804 audit(2613.318:61): pid=18557 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.3083" name="#)-\&[}" dev="mqueue" ino=56429 res=1 errno=0
[  878.490934][T18576] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3086'.
[  878.660539][T18569] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3093'.
[  878.924061][T18596] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3090'.
[  879.022101][T18596] mac80211_hwsim hwsim23 wlan0: entered allmulticast mode
[  879.141340][T18596] netlink: 326 bytes leftover after parsing attributes in process `syz.7.3090'.
[  879.943802][T18607] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  879.997885][T18607] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  882.388587][T18630] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  882.525140][T12135] udevd[12135]: inotify_add_watch(7, /dev/sda1, 10) failed: No such file or directory
[  882.534848][T18630] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  883.338422][T18654] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3101'.
[  883.445025][T18665] HfR: entered promiscuous mode
[  883.485810][T18665] netlink: 32 bytes leftover after parsing attributes in process `syz.7.3105'.
[  888.717765][T18723] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3116'.
[  889.278579][T18720] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  889.359601][T18720] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  890.477576][T18746] netlink: 330 bytes leftover after parsing attributes in process `syz.6.3120'.
[  891.205057][T18758] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  891.235882][T18758] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  891.707123][T18766] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3123'.
[  892.550887][T18774] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3125'.
[  892.985171][T18776] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3126'.
[  893.969029][T18793] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3137'.
[  894.873273][T18805] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3130'.
[  900.016808][T18877] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  900.038073][T18877] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  901.471547][T18893] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3148'.
[  901.495560][T18893] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3148'.
[  905.120892][T18931] HSR: entered promiscuous mode
[  906.689934][T18961] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3161'.
[  907.792260][T18964] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3162'.
[  909.399730][T18989] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3168'.
[  910.828784][T19009] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3173'.
[  910.884374][T18995] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3169'.
[  913.887035][T19056] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  913.903219][T19056] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  918.098810][T19131] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3202'.
[  921.134372][T19181] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3213'.
[  922.119159][T19168] kexec: Could not allocate control_code_buffer
[  923.641804][T19211] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3221'.
[  924.923271][T19202] Invalid ELF header magic: != ELF
[  931.848991][T19366] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3257'.
[  931.947009][ T1293] ieee802154 phy0 wpan0: encryption failed: -22
[  931.953624][ T1293] ieee802154 phy1 wpan1: encryption failed: -22
[  936.303216][T14823] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  936.317625][T14823] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  936.339474][T14823] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  936.351088][T14823] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  936.366083][T14823] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  936.383358][T14823] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  936.930812][T19442] chnl_net:caif_netlink_parms(): no params data found
[  937.204915][T19442] bridge0: port 1(bridge_slave_0) entered blocking state
[  937.233583][T19442] bridge0: port 1(bridge_slave_0) entered disabled state
[  937.253460][T19442] bridge_slave_0: entered allmulticast mode
[  937.260948][T19442] bridge_slave_0: entered promiscuous mode
[  937.392801][T19442] bridge0: port 2(bridge_slave_1) entered blocking state
[  937.426673][T19442] bridge0: port 2(bridge_slave_1) entered disabled state
[  937.437051][T19442] bridge_slave_1: entered allmulticast mode
[  937.453438][T19442] bridge_slave_1: entered promiscuous mode
[  937.590737][T19442] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  937.602638][T19442] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  937.689066][T19442] team0: Port device team_slave_0 added
[  937.705170][T19442] team0: Port device team_slave_1 added
[  937.884794][T19442] batman_adv: batadv0: Adding interface: batadv_slave_0
[  937.891802][T19442] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  937.918008][T19442] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  937.930807][T19442] batman_adv: batadv0: Adding interface: batadv_slave_1
[  937.938059][T19442] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  937.964247][T19442] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  938.123631][T19470] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3289'.
[  938.198341][T19442] hsr_slave_0: entered promiscuous mode
[  938.217175][T19442] hsr_slave_1: entered promiscuous mode
[  938.229926][T19442] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  938.245855][T19442] Cannot create hsr debugfs directory
[  938.504812][ T5839] Bluetooth: hci2: command tx timeout
[  939.167822][T19442] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  939.290489][T19442] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  939.320768][T19442] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  939.377912][T19442] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  939.596627][T19442] 8021q: adding VLAN 0 to HW filter on device bond0
[  939.656081][T19442] 8021q: adding VLAN 0 to HW filter on device team0
[  939.684704][T10303] bridge0: port 1(bridge_slave_0) entered blocking state
[  939.691848][T10303] bridge0: port 1(bridge_slave_0) entered forwarding state
[  939.722832][T10303] bridge0: port 2(bridge_slave_1) entered blocking state
[  939.730064][T10303] bridge0: port 2(bridge_slave_1) entered forwarding state
[  939.800332][T19442] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  940.089369][T19442] 8021q: adding VLAN 0 to HW filter on device batadv0
[  940.153383][T19501] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3298'.
[  940.542123][T19442] veth0_vlan: entered promiscuous mode
[  940.581471][T19442] veth1_vlan: entered promiscuous mode
[  940.583318][ T5839] Bluetooth: hci2: command tx timeout
[  940.691814][T19442] veth0_macvtap: entered promiscuous mode
[  940.739529][T19442] veth1_macvtap: entered promiscuous mode
[  940.812996][T19442] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  940.844520][T19442] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  940.863642][T19442] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  940.883631][T19442] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  940.914178][T19442] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  940.942838][T19442] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  940.973855][T19442] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  941.004611][T19442] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  941.031707][T19442] batman_adv: batadv0: Interface activated: batadv_slave_0
[  941.060353][T19442] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  941.084454][T19442] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  941.111460][T19442] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  941.132196][T19442] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  941.153713][T19442] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  941.183319][T19442] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  941.205538][T19442] batman_adv: batadv0: Interface activated: batadv_slave_1
[  941.252011][T19442] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  941.281954][T19442] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  941.304839][T19442] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  941.334087][T19442] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  941.510739][T10303] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  941.549744][T10303] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  941.631482][T10303] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  941.649664][T10303] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  942.664264][ T5839] Bluetooth: hci2: command tx timeout
[  942.898440][T19546] openvswitch: netlink: IPv6 tunnel dst address is zero
[  944.132375][T19561] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3312'.
[  944.409031][T19589] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  944.743421][ T5839] Bluetooth: hci2: command tx timeout
[  948.026159][T19648] netlink: 28 bytes leftover after parsing attributes in process `syz.8.3340'.
[  948.036860][T19648] netdevsim netdevsim8 netdevsim2: entered allmulticast mode
[  950.700258][T19720] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3363'.
[  951.224168][T19739] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  952.480611][T19766] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3378'.
[  952.490628][T19766] ipvlan1: entered allmulticast mode
[  952.500436][T19766] veth0_vlan: entered allmulticast mode
[  955.881727][T19853] netlink: zone id is out of range
[  955.927889][T19853] netlink: set zone limit has 8 unknown bytes
[  957.264498][T19890] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3419'.
[  957.320468][T19890] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3419'.
[  958.260024][T19907] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3424'.
[  959.579917][T19932] netlink: 28 bytes leftover after parsing attributes in process `syz.8.3429'.
[  959.622566][T19932] geneve1: entered allmulticast mode
[  959.634375][T19915] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3426'.
[  960.595905][T19961] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3439'.
[  967.666771][T20088] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3474'.
[  968.915007][T20125] netlink: 330 bytes leftover after parsing attributes in process `syz.8.3486'.
[  968.976859][T20125] : renamed from lo (while UP)
[  969.742204][T20139] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3490'.
[  973.546483][T20202] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3507'.
[  973.928574][T20215] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3510'.
[  974.296129][T20227] delete_channel: no stack
[  974.300870][T20226] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3513'.
[  977.224799][T20294] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3535'.
[  978.051967][T20314] netlink: 338 bytes leftover after parsing attributes in process `syz.6.3539'.
[  978.099624][T20314] netlink: 338 bytes leftover after parsing attributes in process `syz.6.3539'.
[  978.157636][T20314] netlink: 250 bytes leftover after parsing attributes in process `syz.6.3539'.
[  980.230733][T20352] netlink: 28 bytes leftover after parsing attributes in process `syz.8.3550'.


syzkaller
syzkaller login: [  986.963483][T20459] netlink: 28 bytes leftover after parsing attributes in process `syz.8.3577'.
[  989.027693][T20503] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3591'.
[  990.091157][T20519] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3596'.
[  990.434235][T20537] netlink: 354 bytes leftover after parsing attributes in process `syz.8.3598'.
[  993.393437][ T1293] ieee802154 phy0 wpan0: encryption failed: -22
[  993.400186][ T1293] ieee802154 phy1 wpan1: encryption failed: -22
[  994.163277][T20597] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3607'.
[  994.801291][T20630] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3614'.
[  994.860673][T20630] netlink: 16 bytes leftover after parsing attributes in process `syz.8.3614'.
[  996.873568][T20661] netlink: 28 bytes leftover after parsing attributes in process `syz.8.3621'.
[  996.882653][T20661] bridge_slave_1: left allmulticast mode
[  996.913125][T20661] bridge_slave_1: left promiscuous mode
[  996.919029][T20661] bridge0: port 2(bridge_slave_1) entered disabled state
[  996.991364][T20661] bridge_slave_0: left allmulticast mode
[  997.024093][T20661] bridge_slave_0: left promiscuous mode
[  997.030338][T20661] bridge0: port 1(bridge_slave_0) entered disabled state
[  997.163555][T20651] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3628'.
[  997.810073][T20675] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3624'.
[ 1000.334203][T20713] netlink: 158 bytes leftover after parsing attributes in process `syz.5.3634'.
[ 1000.487938][T20713] veth1_macvtap: left promiscuous mode
[ 1003.499391][T20764] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3644'.
[ 1003.572812][T20764] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3644'.
[ 1004.104380][T20773] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3646'.
[ 1004.123248][T20773] veth1_macvtap: entered allmulticast mode
[ 1006.949023][T20812] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[ 1007.532446][T20829] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3660'.
[ 1011.208262][T20874] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3671'.
[ 1011.242124][T20874] netlink: 342 bytes leftover after parsing attributes in process `syz.6.3671'.
[ 1011.265637][T20883] cifs: Unknown parameter 'T.�����żc[���$⁍��)��U�ÑnE�-ʙ�l���-��	�-�_������5Z�o��m��fwY�h�*/�xD
lݩ���g�kǐA����7���9���X�a/f�_�AR������xM	�v��p��$^;��q�3���n���-
6��+e�k�����<�k�c�)n.�eM��Na��t��SM��1,'
[ 1011.585215][T20891] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3675'.
[ 1011.891821][T20889] netlink: 28 bytes leftover after parsing attributes in process `syz.8.3674'.
[ 1012.143541][   T29] audit: type=1107 audit(2772.459:62): pid=20893 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=''
[ 1012.336967][T20899] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[ 1012.367943][T20899] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[ 1013.192152][T20911] Invalid ELF header magic: != ELF
[ 1013.314045][T20922] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3680'.
[ 1015.186674][T20945] netlink: 28 bytes leftover after parsing attributes in process `syz.8.3688'.
[ 1015.990739][T20971] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[ 1016.023206][T20971] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[ 1016.115804][T20973] netlink: 342 bytes leftover after parsing attributes in process `syz.6.3694'.
[ 1016.824388][T20988] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3698'.
[ 1017.402599][T20974] Invalid ELF header magic: != ELF
[ 1017.734475][T21008] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3704'.
[ 1020.194814][T21031] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3711'.
[ 1020.548167][T21051] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[ 1020.564304][T21051] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[ 1020.575056][T21051] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[ 1020.585236][T21051] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[ 1020.593447][T21051] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[ 1020.607276][T21051] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[ 1020.862709][T21050] chnl_net:caif_netlink_parms(): no params data found
[ 1021.403243][T21050] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1021.414195][T21064] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[ 1021.419663][T21050] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1021.432188][T21050] bridge_slave_0: entered allmulticast mode
[ 1021.447949][T21050] bridge_slave_0: entered promiscuous mode
[ 1021.458997][T21064] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[ 1021.459627][T21050] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1021.483454][T21050] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1021.490735][T21050] bridge_slave_1: entered allmulticast mode
[ 1021.531232][T21050] bridge_slave_1: entered promiscuous mode
[ 1021.584540][T21050] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1021.606153][T21050] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1021.924622][T21076] Invalid ELF header magic: != ELF
[ 1021.965648][T21050] team0: Port device team_slave_0 added
[ 1022.037653][T21050] team0: Port device team_slave_1 added
[ 1022.132440][T21050] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1022.150055][T21050] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1022.193271][T21050] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1022.220043][T21050] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1022.233213][T21050] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1022.283502][T21050] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1022.646499][T21050] hsr_slave_0: entered promiscuous mode
[ 1022.663112][T21051] Bluetooth: hci3: command tx timeout
[ 1022.680079][T21050] hsr_slave_1: entered promiscuous mode
[ 1022.704035][T21050] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1022.738816][T21050] Cannot create hsr debugfs directory
[ 1023.669257][T21050] netdevsim netdevsim9 netdevsim0: renamed from eth0
[ 1023.698735][T21050] netdevsim netdevsim9 netdevsim1: renamed from eth1
[ 1023.713117][T21050] netdevsim netdevsim9 netdevsim2: renamed from eth2
[ 1023.755255][T21050] netdevsim netdevsim9 netdevsim3: renamed from eth3
[ 1023.982590][T21050] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1024.030599][T21050] 8021q: adding VLAN 0 to HW filter on device team0
[ 1024.086103][T10303] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1024.093288][T10303] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1024.177488][   T11] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1024.184699][   T11] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1024.268694][T21050] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[ 1024.292959][T21050] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 1024.491548][T21104] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3732'.
[ 1024.654518][T21050] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1024.743247][T21051] Bluetooth: hci3: command tx timeout
[ 1025.047127][T21050] veth0_vlan: entered promiscuous mode
[ 1025.084750][T21050] veth1_vlan: entered promiscuous mode
[ 1025.130687][T21050] veth0_macvtap: entered promiscuous mode
[ 1025.160902][T21050] veth1_macvtap: entered promiscuous mode
[ 1025.200860][T21050] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1025.233071][T21050] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1025.252982][T21050] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1025.263588][T21050] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1025.273530][T21050] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1025.284093][T21050] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1025.293983][T21050] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1025.304538][T21050] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1025.314459][T21050] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1025.325003][T21050] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1025.336265][T21050] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1025.348338][T21050] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1025.358895][T21050] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1025.368797][T21050] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1025.379348][T21050] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1025.389495][T21050] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1025.400202][T21050] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1025.410341][T21050] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1025.421192][T21050] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1025.434947][T21050] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1025.505576][T21050] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1025.553306][T21050] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1025.562063][T21050] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1025.583032][T21050] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1025.806652][   T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1025.839818][   T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1026.019694][   T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1026.064152][   T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1026.823246][ T5839] Bluetooth: hci3: command tx timeout
[ 1027.664002][T21156] netlink: 28 bytes leftover after parsing attributes in process `syz.9.3742'.
[ 1027.733258][T21156] bridge_slave_1: left allmulticast mode
[ 1027.740508][T21156] bridge_slave_1: left promiscuous mode
[ 1027.747273][T21156] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1027.759349][T21156] bridge_slave_0: left allmulticast mode
[ 1027.766336][T21156] bridge_slave_0: left promiscuous mode
[ 1027.772225][T21156] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1028.903071][ T5839] Bluetooth: hci3: command tx timeout
[ 1029.578645][T21206] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[ 1029.595724][T21206] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[ 1031.544975][T21234] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3768'.
[ 1033.484270][T21280] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3781'.
[ 1033.549162][T21285] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[ 1033.611953][T21285] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[ 1037.837863][T18993] udevd[18993]: inotify_add_watch(7, /dev/sda1, 10) failed: No such file or directory
[ 1041.162086][T21391] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3814'.
[ 1041.944263][T21427] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[ 1041.982952][T21427] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[ 1045.960934][T21490] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[ 1045.997679][T21490] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[ 1046.713800][T21504] Invalid ELF header magic: != ELF
[ 1048.044707][T21530] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[ 1048.071798][T21530] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[ 1048.498258][T21539] Invalid ELF header magic: != ELF
[ 1050.272343][T21579] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[ 1050.293893][T21579] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[ 1050.447853][T21568] netlink: 28 bytes leftover after parsing attributes in process `syz.9.3862'.
[ 1050.466934][T21568] netdevsim netdevsim9 netdevsim2: entered allmulticast mode
[ 1050.712600][T21585] Invalid ELF header magic: != ELF
[ 1051.226458][T21605] ------------[ cut here ]------------
[ 1051.232446][T21605] skb_assert_len
[ 1051.248425][T21605] WARNING: CPU: 1 PID: 21605 at ./include/linux/skbuff.h:2680 __dev_queue_xmit+0x234a/0x43e0
[ 1051.258974][T21605] Modules linked in:
[ 1051.263024][T21605] CPU: 1 UID: 0 PID: 21605 Comm: syz.7.3871 Not tainted 6.13.0-rc2-syzkaller-00382-gdccbe2047a5b #0
[ 1051.273881][T21605] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024
[ 1051.284096][T21605] RIP: 0010:__dev_queue_xmit+0x234a/0x43e0
[ 1051.289961][T21605] Code: 8c d7 99 f8 45 84 e4 75 25 e8 a2 d5 99 f8 c6 05 47 14 06 07 01 90 48 c7 c6 20 86 7b 8c 48 c7 c7 40 55 7b 8c e8 c7 9b 5a f8 90 <0f> 0b 90 90 e8 7d d5 99 f8 44 0f b6 25 20 14 06 07 31 ff 44 89 e6
[ 1051.310128][T21605] RSP: 0018:ffffc90004a7f178 EFLAGS: 00010282
[ 1051.316400][T21605] RAX: 0000000000000000 RBX: ffff888032fcc500 RCX: ffffc9000d8da000
[ 1051.324577][T21605] RDX: 0000000000080000 RSI: ffffffff815a16d6 RDI: 0000000000000001
[ 1051.332600][T21605] RBP: ffff888032fcc510 R08: 0000000000000001 R09: 0000000000000000
[ 1051.340825][T21605] R10: 0000000000000001 R11: 0000000000000001 R12: 0000000000000000
[ 1051.348963][T21605] R13: 0000000000000000 R14: 0000000000000000 R15: ffff8880495ea000
[ 1051.357163][T21605] FS:  00007fc5c4f8f6c0(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000
[ 1051.366208][T21605] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1051.372951][T21605] CR2: 0000001b329daff8 CR3: 00000000695d8000 CR4: 00000000003526f0
[ 1051.381017][T21605] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 1051.389182][T21605] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 1051.397263][T21605] Call Trace:
[ 1051.400580][T21605]  <TASK>
[ 1051.403654][T21605]  ? __warn+0xea/0x3c0
[ 1051.407801][T21605]  ? preempt_schedule_notrace+0x62/0xe0
[ 1051.413475][T21605]  ? __dev_queue_xmit+0x234a/0x43e0
[ 1051.418736][T21605]  ? report_bug+0x3c0/0x580
[ 1051.423336][T21605]  ? handle_bug+0x54/0xa0
[ 1051.427730][T21605]  ? exc_invalid_op+0x17/0x50
[ 1051.432467][T21605]  ? asm_exc_invalid_op+0x1a/0x20
[ 1051.437611][T21605]  ? __warn_printk+0x1a6/0x350
[ 1051.442576][T21605]  ? __dev_queue_xmit+0x234a/0x43e0
[ 1051.447926][T21605]  ? __dev_queue_xmit+0x2349/0x43e0
[ 1051.453205][T21605]  ? ___sys_sendmsg+0x135/0x1e0
[ 1051.458122][T21605]  ? __pfx___dev_queue_xmit+0x10/0x10
[ 1051.463982][T21605]  ? rcu_is_watching+0x12/0xc0
[ 1051.468808][T21605]  ? trace_kmem_cache_alloc+0x2d/0xd0
[ 1051.474311][T21605]  ? kmem_cache_alloc_noprof+0x21b/0x3b0
[ 1051.480000][T21605]  ? __copy_skb_header+0x2e8/0x5b0
[ 1051.485218][T21605]  ? __skb_clone+0x570/0x760
[ 1051.489919][T21605]  netlink_deliver_tap+0xa61/0xca0
[ 1051.495213][T21605]  netlink_unicast+0x6b4/0x7f0
[ 1051.500034][T21605]  ? __pfx_netlink_unicast+0x10/0x10
[ 1051.505426][T21605]  ? __nla_parse+0x40/0x60
[ 1051.509920][T21605]  netdev_nl_queue_get_doit+0x37f/0x6a0
[ 1051.515574][T21605]  genl_family_rcv_msg_doit+0x202/0x2f0
[ 1051.521177][T21605]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[ 1051.527340][T21605]  ? __dev_queue_xmit+0x89b/0x43e0
[ 1051.532500][T21605]  ? genl_get_cmd+0x195/0x580
[ 1051.537377][T21605]  ? __radix_tree_lookup+0x21f/0x2c0
[ 1051.543168][T21605]  genl_rcv_msg+0x565/0x800
[ 1051.547746][T21605]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 1051.552821][T21605]  ? __pfx_netdev_nl_queue_get_doit+0x10/0x10
[ 1051.559117][T21605]  netlink_rcv_skb+0x165/0x410
[ 1051.564110][T21605]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 1051.569192][T21605]  ? __pfx_netlink_rcv_skb+0x10/0x10
[ 1051.574632][T21605]  ? down_read+0xc9/0x330
[ 1051.579021][T21605]  ? __pfx_down_read+0x10/0x10
[ 1051.583992][T21605]  ? netlink_deliver_tap+0x1ae/0xca0
[ 1051.589344][T21605]  genl_rcv+0x28/0x40
[ 1051.593449][T21605]  netlink_unicast+0x53c/0x7f0
[ 1051.598257][T21605]  ? __pfx_netlink_unicast+0x10/0x10
[ 1051.603678][T21605]  ? __phys_addr_symbol+0x30/0x80
[ 1051.608749][T21605]  ? __check_object_size+0x488/0x710
[ 1051.614170][T21605]  netlink_sendmsg+0x8b8/0xd70
[ 1051.618997][T21605]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1051.624813][T21605]  ____sys_sendmsg+0x9ae/0xb40
[ 1051.629658][T21605]  ? copy_msghdr_from_user+0x10b/0x160
[ 1051.635250][T21605]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1051.640694][T21605]  ___sys_sendmsg+0x135/0x1e0
[ 1051.645580][T21605]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1051.650848][T21605]  ? __pfx_lock_release+0x10/0x10
[ 1051.655994][T21605]  ? trace_lock_acquire+0x14e/0x1f0
[ 1051.661255][T21605]  ? __fget_files+0x206/0x3a0
[ 1051.666161][T21605]  __sys_sendmsg+0x16e/0x220
[ 1051.670804][T21605]  ? __pfx___sys_sendmsg+0x10/0x10
[ 1051.676096][T21605]  ? __x64_sys_futex+0x1e1/0x4c0
[ 1051.681115][T21605]  do_syscall_64+0xcd/0x250
[ 1051.685770][T21605]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1051.691716][T21605] RIP: 0033:0x7fc5c4185d19
[ 1051.696244][T21605] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1051.716059][T21605] RSP: 002b:00007fc5c4f8f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1051.724608][T21605] RAX: ffffffffffffffda RBX: 00007fc5c4375fa0 RCX: 00007fc5c4185d19
[ 1051.732628][T21605] RDX: 0000000020008810 RSI: 0000000020003040 RDI: 0000000000000003
[ 1051.740783][T21605] RBP: 00007fc5c4201a20 R08: 0000000000000000 R09: 0000000000000000
[ 1051.748934][T21605] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1051.757055][T21605] R13: 0000000000000000 R14: 00007fc5c4375fa0 R15: 00007ffe1e813038
[ 1051.765160][T21605]  </TASK>
[ 1051.768347][T21605] Kernel panic - not syncing: kernel: panic_on_warn set ...
[ 1051.775647][T21605] CPU: 1 UID: 0 PID: 21605 Comm: syz.7.3871 Not tainted 6.13.0-rc2-syzkaller-00382-gdccbe2047a5b #0
[ 1051.786422][T21605] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024
[ 1051.796483][T21605] Call Trace:
[ 1051.799760][T21605]  <TASK>
[ 1051.802697][T21605]  dump_stack_lvl+0x3d/0x1f0
[ 1051.807300][T21605]  panic+0x71d/0x800
[ 1051.811207][T21605]  ? __pfx_panic+0x10/0x10
[ 1051.815638][T21605]  ? show_trace_log_lvl+0x29d/0x3d0
[ 1051.820857][T21605]  ? __dev_queue_xmit+0x234a/0x43e0
[ 1051.826061][T21605]  check_panic_on_warn+0xab/0xb0
[ 1051.831012][T21605]  __warn+0xf6/0x3c0
[ 1051.835003][T21605]  ? preempt_schedule_notrace+0x62/0xe0
[ 1051.840551][T21605]  ? __dev_queue_xmit+0x234a/0x43e0
[ 1051.845757][T21605]  report_bug+0x3c0/0x580
[ 1051.850094][T21605]  handle_bug+0x54/0xa0
[ 1051.854257][T21605]  exc_invalid_op+0x17/0x50
[ 1051.858772][T21605]  asm_exc_invalid_op+0x1a/0x20
[ 1051.863644][T21605] RIP: 0010:__dev_queue_xmit+0x234a/0x43e0
[ 1051.869456][T21605] Code: 8c d7 99 f8 45 84 e4 75 25 e8 a2 d5 99 f8 c6 05 47 14 06 07 01 90 48 c7 c6 20 86 7b 8c 48 c7 c7 40 55 7b 8c e8 c7 9b 5a f8 90 <0f> 0b 90 90 e8 7d d5 99 f8 44 0f b6 25 20 14 06 07 31 ff 44 89 e6
[ 1051.889077][T21605] RSP: 0018:ffffc90004a7f178 EFLAGS: 00010282
[ 1051.895240][T21605] RAX: 0000000000000000 RBX: ffff888032fcc500 RCX: ffffc9000d8da000
[ 1051.903218][T21605] RDX: 0000000000080000 RSI: ffffffff815a16d6 RDI: 0000000000000001
[ 1051.911191][T21605] RBP: ffff888032fcc510 R08: 0000000000000001 R09: 0000000000000000
[ 1051.919168][T21605] R10: 0000000000000001 R11: 0000000000000001 R12: 0000000000000000
[ 1051.927142][T21605] R13: 0000000000000000 R14: 0000000000000000 R15: ffff8880495ea000
[ 1051.935128][T21605]  ? __warn_printk+0x1a6/0x350
[ 1051.939912][T21605]  ? __dev_queue_xmit+0x2349/0x43e0
[ 1051.945116][T21605]  ? ___sys_sendmsg+0x135/0x1e0
[ 1051.949988][T21605]  ? __pfx___dev_queue_xmit+0x10/0x10
[ 1051.955385][T21605]  ? rcu_is_watching+0x12/0xc0
[ 1051.960160][T21605]  ? trace_kmem_cache_alloc+0x2d/0xd0
[ 1051.965536][T21605]  ? kmem_cache_alloc_noprof+0x21b/0x3b0
[ 1051.971178][T21605]  ? __copy_skb_header+0x2e8/0x5b0
[ 1051.976302][T21605]  ? __skb_clone+0x570/0x760
[ 1051.980910][T21605]  netlink_deliver_tap+0xa61/0xca0
[ 1051.986046][T21605]  netlink_unicast+0x6b4/0x7f0
[ 1051.990824][T21605]  ? __pfx_netlink_unicast+0x10/0x10
[ 1051.996123][T21605]  ? __nla_parse+0x40/0x60
[ 1052.000558][T21605]  netdev_nl_queue_get_doit+0x37f/0x6a0
[ 1052.006124][T21605]  genl_family_rcv_msg_doit+0x202/0x2f0
[ 1052.011681][T21605]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[ 1052.017756][T21605]  ? __dev_queue_xmit+0x89b/0x43e0
[ 1052.022886][T21605]  ? genl_get_cmd+0x195/0x580
[ 1052.027593][T21605]  ? __radix_tree_lookup+0x21f/0x2c0
[ 1052.032901][T21605]  genl_rcv_msg+0x565/0x800
[ 1052.037414][T21605]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 1052.042448][T21605]  ? __pfx_netdev_nl_queue_get_doit+0x10/0x10
[ 1052.048530][T21605]  netlink_rcv_skb+0x165/0x410
[ 1052.053299][T21605]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 1052.058343][T21605]  ? __pfx_netlink_rcv_skb+0x10/0x10
[ 1052.063645][T21605]  ? down_read+0xc9/0x330
[ 1052.067984][T21605]  ? __pfx_down_read+0x10/0x10
[ 1052.072759][T21605]  ? netlink_deliver_tap+0x1ae/0xca0
[ 1052.078066][T21605]  genl_rcv+0x28/0x40
[ 1052.082056][T21605]  netlink_unicast+0x53c/0x7f0
[ 1052.086838][T21605]  ? __pfx_netlink_unicast+0x10/0x10
[ 1052.092131][T21605]  ? __phys_addr_symbol+0x30/0x80
[ 1052.097166][T21605]  ? __check_object_size+0x488/0x710
[ 1052.102467][T21605]  netlink_sendmsg+0x8b8/0xd70
[ 1052.107242][T21605]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1052.112541][T21605]  ____sys_sendmsg+0x9ae/0xb40
[ 1052.117312][T21605]  ? copy_msghdr_from_user+0x10b/0x160
[ 1052.122782][T21605]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1052.128087][T21605]  ___sys_sendmsg+0x135/0x1e0
[ 1052.132780][T21605]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1052.138004][T21605]  ? __pfx_lock_release+0x10/0x10
[ 1052.143029][T21605]  ? trace_lock_acquire+0x14e/0x1f0
[ 1052.148248][T21605]  ? __fget_files+0x206/0x3a0
[ 1052.152945][T21605]  __sys_sendmsg+0x16e/0x220
[ 1052.157554][T21605]  ? __pfx___sys_sendmsg+0x10/0x10
[ 1052.162678][T21605]  ? __x64_sys_futex+0x1e1/0x4c0
[ 1052.167652][T21605]  do_syscall_64+0xcd/0x250
[ 1052.172169][T21605]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1052.178073][T21605] RIP: 0033:0x7fc5c4185d19
[ 1052.182490][T21605] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1052.202108][T21605] RSP: 002b:00007fc5c4f8f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1052.210558][T21605] RAX: ffffffffffffffda RBX: 00007fc5c4375fa0 RCX: 00007fc5c4185d19
[ 1052.218537][T21605] RDX: 0000000020008810 RSI: 0000000020003040 RDI: 0000000000000003
[ 1052.226511][T21605] RBP: 00007fc5c4201a20 R08: 0000000000000000 R09: 0000000000000000
[ 1052.234488][T21605] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1052.242459][T21605] R13: 0000000000000000 R14: 00007fc5c4375fa0 R15: 00007ffe1e813038
[ 1052.250533][T21605]  </TASK>
[ 1052.253814][T21605] Kernel Offset: disabled
[ 1052.258183][T21605] Rebooting in 86400 seconds..