last executing test programs: 2m53.486372589s ago: executing program 3 (id=209): close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socket(0x2, 0x1, 0x84) socket(0x2, 0x3, 0xa) setsockopt$auto(0x3, 0x0, 0x37, 0x0, 0x26) r0 = socket(0x10, 0x2, 0x0) io_uring_setup$auto(0x0, &(0x7f0000000140)={0x4, 0x2, 0x6, 0x6, 0x5, 0xef, 0xffffffffffffffff, [0x3, 0x10000, 0x101], {0x7ff, 0x3, 0xc, 0x6, 0x0, 0x0, 0xfc2, 0x6}, {0x7, 0x5, 0x6, 0x8b83, 0xc, 0x8000, 0x9, 0xc4d, 0x7}}) sendmsg$auto_HWSIM_CMD_DEL_RADIO(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="f96df0f8", @ANYBLOB="01eb"], 0x14}, 0x1, 0x0, 0x0, 0x20040800}, 0x24004000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1200"], 0x1ac}}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="1f00"], 0x1ac}}, 0x40000) mprotect$auto(0x1ffff000, 0x8000000000000001, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x40000) 2m53.292947856s ago: executing program 3 (id=211): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/block/nbd11/queue/iostats_passthrough\x00', 0x2a001, 0x0) write$auto(r0, &(0x7f0000000040)='1\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) (fail_nth: 1) 2m53.097979533s ago: executing program 3 (id=213): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/block/nbd11/queue/iostats_passthrough\x00', 0x2a001, 0x0) write$auto(r0, &(0x7f0000000040)='1\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) r1 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) eventfd$auto(0x8c) socket(0x10, 0x2, 0x4) mmap$auto(0x0, 0x2020009, 0xe2, 0xeb1, 0x8, 0x8000) io_uring_setup$auto(0x6, 0x0) eventfd$auto(0x9) io_uring_register$auto(0x2, 0x4, &(0x7f0000000000), 0x1) r2 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x2, 0x0) connect$auto(0x3, &(0x7f00000018c0)=@tipc=@name={0x1e, 0x2, 0x2, {{0x42, 0x2}, 0x3}}, 0x8) mprotect$auto(0x1ffff000, 0x8000000000000001, 0xd) openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x20200, 0x0) r4 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000240), r3) sendmsg$auto_NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000380)={0x48, r4, 0x2, 0x70bd2a, 0x25dfdbfe, {}, [@NL80211_ATTR_BSSID={0x11, 0xf5, "551edc8bed391cf625a8965f90"}, @NL80211_ATTR_TIMEOUT_REASON={0x8, 0xf8, 0x1}, @NL80211_ATTR_WIPHY_RTS_THRESHOLD={0x8, 0x40, 0xfffffff5}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x8}, @NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x0) select$auto(0x804, 0x0, &(0x7f0000000100)={[0x9, 0x0, 0x0, 0x80000300, 0x1, 0x0, 0x2, 0x3, 0x81, 0x10000005e58296b, 0x1e, 0x9, 0x7ff, 0x200, 0x20000000008, 0x4000000000006]}, 0x0, 0x0) fallocate$auto(r0, 0x3, 0x5, 0x1fffffffe000000) r5 = openat$auto_ftrace_event_format_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000640)='/sys/kernel/tracing/events/vmalloc/alloc_vmap_area/format\x00', 0x40, 0x0) pread64$auto(r5, &(0x7f0000000000)='/sys/kernel/tracing/events/vmalloc/alloc_vmap_area/format\x00', 0x6, 0x3) sendmsg$auto_ETHTOOL_MSG_FEC_GET(r2, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4044815}, 0x4004890) close_range$auto(0x0, 0xfffffffffffff000, 0x0) r6 = socket(0x2c, 0x3, 0x0) bind$auto(r6, &(0x7f0000000080)=@generic={0x2c, "d673107fab139218c3a6e4e19205"}, 0x6b) r7 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="00012cbd7000fcdbdf25140000000800060006000000080005000100000005001800ff00000008000f010800000008000d005a98b06208001600080000000800020007000000c0d63c21dd9a935f8dda9166d3aa69b704039323f50fa854150daa1d5a14dd8104c279648bb118ff101312821efa2e027ec2e0be49e387cd5eaedfca6ac0dc9e3ca223c7cdb884514cf693"], 0x4c}, 0x1, 0x0, 0x0, 0x44880}, 0x24040000) 2m52.634135937s ago: executing program 3 (id=217): socket(0x2, 0x2, 0x0) openat$auto_bch_chardev_fops_chardev(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) mmap$auto(0x0, 0x8, 0x2, 0x9b72, 0x5, 0x0) io_uring_setup$auto(0x6, 0x0) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffff7, 0x8000) connect$auto(0x3, &(0x7f0000000000), 0x55) sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x24004141) sendmmsg$auto(0x3, &(0x7f0000000040)={{0x0, 0x2, &(0x7f0000000080)={0x0, 0x1}, 0x10a, 0x0, 0x0, 0x3ff}, 0xed7138c}, 0x200, 0x0) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x4090}, 0x400c000) sendmmsg$auto(0x3, &(0x7f0000000000)={{0x0, 0x2, 0x0, 0x106, 0x0, 0x1, 0x3}, 0xed7138c}, 0x7, 0x0) 2m52.284402403s ago: executing program 3 (id=220): socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x3fd, 0x8000) (async) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x3fd, 0x8000) close_range$auto(0x2, 0xa, 0x0) (async) close_range$auto(0x2, 0xa, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1e, 0x4, 0x0) socket(0x1e, 0x4, 0x0) (async) r1 = socket(0x1e, 0x4, 0x0) get_robust_list$auto(0x0, 0x0, 0x0) setsockopt$auto(r1, 0x10f, 0x87, 0x0, 0x14) setsockopt$auto(0x3, 0x10f, 0x87, 0x0, 0x14) write$auto(0x3, 0x0, 0xfdef) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r0, 0x0, 0x4000884) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) r2 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/user/max_fanotify_groups\x00', 0x20202, 0x0) r3 = openat$auto_proc_pid_attr_operations_base(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/self/attr/current\x00', 0x1, 0x0) mmap$auto(0x0, 0x40009, 0x3, 0x9b72, 0x7, 0x28000) (async) mmap$auto(0x0, 0x40009, 0x3, 0x9b72, 0x7, 0x28000) capset$auto(&(0x7f0000000180)={0x19980330}, 0x0) (async) capset$auto(&(0x7f0000000180)={0x19980330}, 0x0) sendfile$auto(r3, r2, 0x0, 0x200) open(0x0, 0x22240, 0x155) (async) open(0x0, 0x22240, 0x155) socket(0x2, 0x6, 0x0) bind$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @loopback}, 0x6b) connect$auto(0x3, &(0x7f00000000c0), 0x55) pipe2$auto(0x0, 0x80) setsockopt$auto(0x3, 0x1, 0xf, 0x0, 0x8) listen$auto(0x3, 0x83) 2m51.783096362s ago: executing program 3 (id=223): r0 = openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000005280), 0x40400, 0x0) ioctl$auto_posix_clock_file_operations_posix_clock(r0, 0x3d13, 0x0) r1 = socket(0xa, 0x801, 0x84) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffb, 0x8000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_THREADS_SET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r3, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@NFSD_A_SERVER_LEASETIME={0x8, 0x3, 0x96b}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0x15c0}]}, 0x24}, 0x1, 0x0, 0x0, 0x8800}, 0x4) r4 = open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) fcntl$auto(r4, 0x400, 0x1) r5 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000000200), r4) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv6/conf/ipvlan0/mldv2_unsolicited_report_interval\x00', 0x208401, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r6, &(0x7f0000000000)={0x0, 0xf1e0eebac33ea714, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="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"], 0xfffffffffffffd62}, 0x1, 0x0, 0x0, 0x44000884}, 0xc880) setsockopt$auto(r1, 0x10000000084, 0x22, 0x0, 0x10) 2m36.28417496s ago: executing program 32 (id=223): r0 = openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000005280), 0x40400, 0x0) ioctl$auto_posix_clock_file_operations_posix_clock(r0, 0x3d13, 0x0) r1 = socket(0xa, 0x801, 0x84) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffb, 0x8000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_THREADS_SET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r3, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@NFSD_A_SERVER_LEASETIME={0x8, 0x3, 0x96b}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0x15c0}]}, 0x24}, 0x1, 0x0, 0x0, 0x8800}, 0x4) r4 = open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) fcntl$auto(r4, 0x400, 0x1) r5 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000000200), r4) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv6/conf/ipvlan0/mldv2_unsolicited_report_interval\x00', 0x208401, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r6, &(0x7f0000000000)={0x0, 0xf1e0eebac33ea714, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="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"], 0xfffffffffffffd62}, 0x1, 0x0, 0x0, 0x44000884}, 0xc880) setsockopt$auto(r1, 0x10000000084, 0x22, 0x0, 0x10) 2m29.938165079s ago: executing program 0 (id=327): r0 = openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, &(0x7f0000000140), 0x100, 0x0) ioctl$auto_USB_RAW_IOCTL_EP_DISABLE(r0, 0x40045506, 0x0) syz_genetlink_get_family_id$auto_netdev(&(0x7f0000000040), 0xffffffffffffffff) mmap$auto(0x0, 0xa, 0xdb, 0x9b72, 0x5, 0x8000) r1 = socket(0xa, 0x1, 0x84) mprotect$auto(0x1ffff000, 0x8000000000000001, 0xd) getsockopt$auto(r1, 0x84, 0x14, 0x0, &(0x7f0000000040)=0x3) mmap$auto(0x0, 0x9, 0x72, 0x8b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/stat_refresh\x00', 0x101202, 0x0) prctl$auto(0x59616d61, 0x1, 0x1, 0xfffffffffffffffb, 0xffffffffffffffe5) prctl$auto(0x59616d61, 0x0, 0x1, 0x5, 0xfffffffffffffffb) prctl$auto(0x59616d61, 0x1, 0x2, 0xffffffffffffffff, 0x8) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) munmap$auto(0x1000000, 0x2000000c) socket(0xa, 0x2, 0x73) madvise$auto(0x0, 0xffffffffffff0001, 0x9) mlockall$auto(0x3) pipe$auto(0x0) socket(0x1, 0x1, 0x100) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv6/neigh/ip_vti0/base_reachable_time_ms\x00', 0x202, 0x0) ioctl$auto(0x1, 0x5421, 0xa) madvise$auto(0x8, 0x8001, 0x0) 2m28.454365907s ago: executing program 0 (id=337): socket(0x2, 0x2, 0x0) openat$auto_bch_chardev_fops_chardev(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) mmap$auto(0x0, 0x8, 0x2, 0x9b72, 0x5, 0x0) io_uring_setup$auto(0x6, 0x0) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffff7, 0x8000) connect$auto(0x3, &(0x7f0000000000), 0x55) sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x24004141) sendmmsg$auto(0x3, &(0x7f0000000040)={{0x0, 0x2, &(0x7f0000000080)={0x0, 0x1}, 0x10a, 0x0, 0xffff0000, 0x3ff}, 0xed7138c}, 0x200, 0x0) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x4090}, 0x400c000) sendmmsg$auto(0x3, &(0x7f0000000000)={{0x0, 0x2, 0x0, 0x106, 0x0, 0x1, 0x3}, 0xed7138c}, 0x7, 0x0) 2m28.364982625s ago: executing program 0 (id=339): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), r0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="90000000", @ANYRES16=r1, @ANYBLOB="2f212cbd7000fcdbdf252100000008000300", @ANYRES32=r2, @ANYBLOB="73002d8014001000fe8000000000000000000000000000aae9"], 0x90}, 0x1, 0x6000000}, 0x4000000) 2m28.244623308s ago: executing program 0 (id=340): chown$auto(0x0, 0x0, 0x0) process_vm_readv$auto(0x0, 0x0, 0x4, 0x0, 0x6, 0x0) bpf$auto(0xfffffffe, &(0x7f00000001c0)=@test={0xffffffffffffffff, 0xffff, 0xfffff0b6, 0xffff, 0x88, 0xac1, 0x2, 0x36242398, 0x7ff, 0x3bb, 0x8, 0xfffe, 0x1, 0x81, 0x68198}, 0x6f2) sendmsg$auto_ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="d4000000", @ANYRES16=0x0, @ANYBLOB="100027bd7000fbdbdf2518000000200001800247eea41fac000014000200766574683100000000000000000000000800070063fbffff0500060001000000840002803d00488013b37090badc49d6dc93876646d25a4d297d01cd3b7da38d12889cc50d505f353dc42d0a3c0a14c7b46428910708003600", @ANYRES32=0x0, @ANYBLOB="0400b3800000003d003b800400a4800c009a00008000000000000004008680c16ab1b1b39dcaa14b6af7dcc011b43cf706e562811c62b28a702b72e0a87126700294f2350000000c000180080003"], 0xd4}, 0x1, 0x0, 0x0, 0x20000010}, 0x20008000) r0 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_WOL_SET(0xffffffffffffffff, &(0x7f0000002cc0)={0x0, 0x0, &(0x7f0000002c80)={&(0x7f0000000180)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010027bd7000fcdbdf250a"], 0x2c}, 0x1, 0x0, 0x0, 0x4801}, 0x0) r1 = socket(0x10, 0x2, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="12"], 0x1ac}}, 0x40000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) mmap$auto(0x0, 0x61, 0x100001000000004, 0xfa31, 0x400, 0x8000) setreuid$auto(0x3, 0x7) mremap$auto(0x0, 0xffffffffffffffff, 0x3fd6, 0x3, 0x7fffffffb000) 2m28.119553677s ago: executing program 0 (id=343): mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) mount$auto(0x0, &(0x7f0000000100)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0x10001, 0x0) fsconfig$auto(0xffffffffffffffff, 0xd, &(0x7f0000000000)='}[,&*}\x00', 0x0, 0x10000) mount$auto(0x0, &(0x7f0000000000), 0x0, 0x100004, 0x0) r0 = openat$auto_proc_tid_children_operations_internal(0xffffffffffffff9c, &(0x7f0000000040), 0x6a8241, 0x0) read$auto(r0, &(0x7f0000000080)='}\x00', 0x7) 2m27.890286598s ago: executing program 0 (id=345): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_PAUSE_SET(r0, 0x0, 0x4040000) mmap$auto(0x0, 0x400005, 0xfffffffffffffffe, 0x9b72, 0x2, 0x8000) r1 = socket(0x2a, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000080), 0x6b) connect$auto(0x3, &(0x7f00000000c0), 0x2) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) r2 = gettid() rt_sigqueueinfo$auto(r2, 0x3, &(0x7f0000000900)={@siginfo_0_0={0xfffffeff, 0x6, 0x1, @_sigchld={0xffffffffffffffff, 0x0, 0x3, 0x7fff, 0xef}}}) syz_open_procfs$namespace(r3, 0x0) fcntl$auto(0xffffffffffffffff, 0x401, 0x5) sendmsg$auto_OVS_METER_CMD_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc0}, 0x40) setsockopt$auto(0xffffffffffffffff, 0x4, 0x8001, 0x0, 0x2) unshare$auto(0x40000080) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) sysfs$auto(0x2, 0x10000000000002d, 0x0) mbind$auto(0x0, 0x100000004, 0x100000001, 0x0, 0x6, 0x2) gettid() connect$auto(0xffffffffffffffff, 0x0, 0x55) mmap$auto(0x0, 0x5, 0x3, 0x16, 0x3, 0x8400) unshare$auto(0x40000080) writev$auto(0x1, &(0x7f0000000100)={0x0, 0x400000000000fdef}, 0x1) madvise$auto(0x0, 0x20200, 0x15) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r4 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000040), r1) sendmsg$auto_NL802154_CMD_GET_SEC_LEVEL(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB="ec6f201ebf8d05006408", @ANYRES16=r4, @ANYBLOB="00022dbd7000fcdbdf251f00000008002a00080000000500120007000000050025000200000008001600060000000c001700010000000100000008000c0001000000a1002880957c36778395127ac054a8dc729b07297c16ade5f70f14b866b1aa7b10997a60ec10512e9ab010b17a2aec2248f46d2dd22ab7b5e04fc26666b57c7f35f47a3d29092cc3b146b83265ea68046ffae85d12a040f94b4afd706196941ed37d3df4776553a03d2f06e22cf569da207dae7935a8d5cadb803495131e1dcb6d2c40f3e34b4ef2ba524e03bba6e7ea0bf15931c2090007006e66736400000000000000"], 0xec}, 0x1, 0x0, 0x0, 0x4048040}, 0x4808) open(&(0x7f0000000200)='./cgroup\x00', 0x400, 0x23) mkdir$auto(&(0x7f0000000140)='MAC80211_HWSIM\x00', 0x1) 2m12.642818917s ago: executing program 33 (id=345): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_PAUSE_SET(r0, 0x0, 0x4040000) mmap$auto(0x0, 0x400005, 0xfffffffffffffffe, 0x9b72, 0x2, 0x8000) r1 = socket(0x2a, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000080), 0x6b) connect$auto(0x3, &(0x7f00000000c0), 0x2) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) r2 = gettid() rt_sigqueueinfo$auto(r2, 0x3, &(0x7f0000000900)={@siginfo_0_0={0xfffffeff, 0x6, 0x1, @_sigchld={0xffffffffffffffff, 0x0, 0x3, 0x7fff, 0xef}}}) syz_open_procfs$namespace(r3, 0x0) fcntl$auto(0xffffffffffffffff, 0x401, 0x5) sendmsg$auto_OVS_METER_CMD_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc0}, 0x40) setsockopt$auto(0xffffffffffffffff, 0x4, 0x8001, 0x0, 0x2) unshare$auto(0x40000080) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) sysfs$auto(0x2, 0x10000000000002d, 0x0) mbind$auto(0x0, 0x100000004, 0x100000001, 0x0, 0x6, 0x2) gettid() connect$auto(0xffffffffffffffff, 0x0, 0x55) mmap$auto(0x0, 0x5, 0x3, 0x16, 0x3, 0x8400) unshare$auto(0x40000080) writev$auto(0x1, &(0x7f0000000100)={0x0, 0x400000000000fdef}, 0x1) madvise$auto(0x0, 0x20200, 0x15) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r4 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000040), r1) sendmsg$auto_NL802154_CMD_GET_SEC_LEVEL(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB="ec6f201ebf8d05006408", @ANYRES16=r4, @ANYBLOB="00022dbd7000fcdbdf251f00000008002a00080000000500120007000000050025000200000008001600060000000c001700010000000100000008000c0001000000a1002880957c36778395127ac054a8dc729b07297c16ade5f70f14b866b1aa7b10997a60ec10512e9ab010b17a2aec2248f46d2dd22ab7b5e04fc26666b57c7f35f47a3d29092cc3b146b83265ea68046ffae85d12a040f94b4afd706196941ed37d3df4776553a03d2f06e22cf569da207dae7935a8d5cadb803495131e1dcb6d2c40f3e34b4ef2ba524e03bba6e7ea0bf15931c2090007006e66736400000000000000"], 0xec}, 0x1, 0x0, 0x0, 0x4048040}, 0x4808) open(&(0x7f0000000200)='./cgroup\x00', 0x400, 0x23) mkdir$auto(&(0x7f0000000140)='MAC80211_HWSIM\x00', 0x1) 1m30.781004063s ago: executing program 5 (id=604): sendmsg$auto_NL802154_CMD_SET_PAN_ID(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000000)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x20000088}, 0x20000010) r0 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x80}, 0x40000) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x9, 0x3, 0x12, 0x940, 0x1ffe0, 0x3, 0x6, 0x200000000002, 0x9, 0x5, 0x2, 0x7, 0xb0, 0x9, 0x5, 0x3, 0x5, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x8000000000000000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x15]}, 0x5, 0x81) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) statmount$auto(&(0x7f0000000000)={0x7e, 0x0, 0xfffffffffffffffb, 0x6, 0x2}, 0x0, 0x4, 0x0) r1 = syz_open_procfs$namespace(0x0, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) getsockopt$auto(0x3, 0x200000000001, 0x23, 0xfffffffffffffffe, 0x0) move_pages$auto(0xffffffffffffffff, 0xf58, 0x0, 0x0, 0x0, 0x8000000000000000) setsockopt$auto(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x8004) mmap$auto(0x0, 0x20004, 0x5, 0x11, 0x8000000000000024, 0x8000) io_uring_setup$auto(0x6, 0x0) close_range$auto(0xffffffffffffffff, r1, 0x2) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0xa, 0x2, 0x88) r3 = socket$nl_generic(0x10, 0x3, 0x10) getxattrat$auto(0xffffffffffffffff, 0x0, 0x1c, 0x0, 0x0, 0x80000000) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) bpf$auto(0x0, &(0x7f00000000c0)=@bpf_attr_5={@target_ifindex=r4, r3, 0x4, 0x1, r2, @relative_id=0x13, 0xe600}, 0xf) bpf$auto(0x2, &(0x7f00000001c0)=@raw_tracepoint={0x5, r2, 0x0, 0x3}, 0xc) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40001) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8000, 0x0) socket(0xa, 0x2, 0x88) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) 1m30.363307506s ago: executing program 5 (id=606): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), r0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="90000000", @ANYRES16=r1, @ANYBLOB="2f212cbd7000fcdbdf252100000008000300", @ANYRES32=r2, @ANYBLOB="73002d8014001000fe8000000000000000000000000000aae9"], 0x90}, 0x1, 0x0, 0x4000000}, 0x4000000) 1m29.841655855s ago: executing program 5 (id=609): r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x0, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) io_uring_setup$auto(0x6, 0x0) mmap$auto(0xfffffffffffffff9, 0x4, 0x1, 0x19, 0x1, 0x3) read$auto(r0, 0x0, 0x1ff) close_range$auto(0x2, 0x8000, 0x0) r1 = openat$auto_severities_coverage_fops_severity(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) write$auto_severities_coverage_fops_severity(r1, 0x0, 0x0) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) futex$auto(0x0, 0x6, 0x8, 0x0, 0x0, 0x80000001) open(&(0x7f00000000c0)='./file0\x00', 0x8000, 0x62) mq_open$auto(0x0, 0xde8, 0xb, 0x0) setresuid$auto(0x1, 0x8, 0x8000) mq_unlink$auto(0x0) mq_unlink$auto(&(0x7f0000000080)='&&(\x00') syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/mnt\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x2, 0x0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/freezer.parent_freezing\x00', 0x6a040, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) read$auto(r3, 0x0, 0x3) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) setsockopt$auto(0x400000000000003, 0x29, 0x6, 0x0, 0x8) setsockopt$auto(0x400000000000003, 0x29, 0x6, 0x0, 0x8) r4 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_VENDOR(r2, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB="21032b01000000dbdf2567000000a8aa1a94"], 0x14}, 0x1, 0x0, 0x0, 0x20008000}, 0x20040000) 1m29.102332683s ago: executing program 5 (id=611): mmap$auto(0x0, 0x2020009, 0x3, 0x800000000000eb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) r0 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) r1 = openat$auto_proc_clear_refs_operations_internal(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/clear_refs\x00', 0x240, 0x0) write$auto_proc_clear_refs_operations_internal(r1, &(0x7f0000000280)="061276719da8bff8e184bede4e58aae16d308cffd431e2c14c13bfb442b011b1d74ecc06627de4bf6e9e86e956e87c0ac5c0743691a877e99eee9859e61eef77a858877515e284368d178912d439197b7290f6fd733a64551b7975888c10db35485d9c93175761eb49d9", 0x6a) (async) ioctl$auto(r0, 0x4004556b, 0xea3) (async) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0xa, 0x2, 0x88) openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000400)='/dev/mtd0\x00', 0x28082, 0x0) ioctl$auto(0x3, 0x81484d11, 0x38) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) bpf$auto(0x0, &(0x7f00000000c0)=@bpf_attr_5={@target_ifindex=r4, r3, 0x4, 0x1, r2, @relative_id=0x13, 0xe600}, 0xf) mmap$auto_proc_reg_file_ops_compat_inode(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0x20010, r5, 0x401) (async) bpf$auto(0x4, &(0x7f00000001c0)=@raw_tracepoint={0x5, r2, 0x0, 0x3}, 0xc) 1m28.62235284s ago: executing program 5 (id=614): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xfffffffffffefffd, 0x17) madvise$auto(0x0, 0xffffffffffff0001, 0x15) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x3, 0x19d0, 0xfffffffffffffffa, 0x8000) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = open(&(0x7f0000000000)='./file0\x00', 0x22240, 0x0) fcntl$auto(r1, 0xa, 0x80000000001) r2 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000180), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_TIPC_NL_LINK_GET(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000051c0)={&(0x7f0000000440)={0x1c, r2, 0x301, 0x70bd26, 0x25dfdbfe, {}, [@TIPC_NLA_LINK={0x8, 0x4, 0x0, 0x1, [@nested={0x4, 0x1}]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24000055}, 0x4) r4 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000040), r3) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="01002bbd7000fddbdf25040000000b002e0000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x801}, 0x4044820) mount$auto(0x0, &(0x7f0000000100)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0x10001, 0x0) mount$auto(0x0, &(0x7f0000000100), 0x0, 0x100000, 0x0) unshare$auto(0x20000) r5 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/mnt\x00') setns(r5, 0x0) 1m26.782043592s ago: executing program 5 (id=626): r0 = socket(0x10, 0x3, 0x0) (async) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16, @ANYBLOB="1b0026bd7400fddbdf250300000004000800100003800c0009"], 0x40}, 0x1, 0x0, 0x0, 0x4004040}, 0xc800) (async) recvmmsg$auto(0xffffffffffffffff, &(0x7f0000000240)={{0x0, 0xffffff00, 0x0, 0xf, 0xfffffffffffffffd, 0x200, 0x800}, 0x4}, 0x7f80, 0xfffffffd, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f0000001100), r1) sendmsg$auto_CTRL_CMD_GETFAMILY(r1, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000001180)={&(0x7f0000001140)={0x1c, r2, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@CTRL_ATTR_FAMILY_ID={0x6, 0x1, 0x34}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x20000044) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$auto_thermal(&(0x7f0000000200), r1) sendmsg$auto_THERMAL_GENL_CMD_TZ_GET_ID(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="21022cbd0000fbdbdf2501"], 0x1c}, 0x1, 0x0, 0x0, 0x20004800}, 0x4000000) (async) fsetxattr$auto(r0, &(0x7f0000000140)='\x00', &(0x7f0000000180)="d59d5fd2d9186ba57beac3f6c99e7a96cfc095c66b1f2f2aff488845e33ed1b78f0063a1a39f2a6716bc7b0b57d63c8bd239e59020a9e4a2d612f62bd6405fe00b1dfcccec5965a4e0e900847838471024580a25824da375112e141257681ab7e68353482e85852a83fc2b8807c800762040e1a2a47fdd24e0", 0x401, 0xa) (async) fsetxattr$auto(r0, &(0x7f0000000100)='\x00', &(0x7f0000000300)="fb530d0c82d32d6f0a43f15f5e53db17c6600395dc3df6486c666f738b14bb460e13010dc7b53695f72248f7f37b50a866784499dbd85489ef455c6299bc72bf4753b082f1695d56bac34f22781aa584b382a212e4712d9b029824e4aa3e4bf31b873f45f18f4524185f09c4043f6cc33eb779ce2d86c0255f6ad5c895f3db3adedccdf60c64f8beefc93f8b9bb1ed7ab0008f8b6a84ae2179e858efcd3006662107d89e8182b4f8f203173c19f6a896913ed606384d638524ea07b996e2a32cebca13948f9b6b4eb8d28213cece770c5fb96559", 0x1, 0x7) (async) memfd_create$auto(&(0x7f0000000400)='\x00', 0x4) (async) sendmsg$auto_BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000336bd7000fedbdf2502"], 0x24}, 0x1, 0x0, 0x0, 0xc045}, 0x4) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="180027"], 0x1ac}}, 0x40000) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) (async) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 1m11.329803351s ago: executing program 34 (id=626): r0 = socket(0x10, 0x3, 0x0) (async) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16, @ANYBLOB="1b0026bd7400fddbdf250300000004000800100003800c0009"], 0x40}, 0x1, 0x0, 0x0, 0x4004040}, 0xc800) (async) recvmmsg$auto(0xffffffffffffffff, &(0x7f0000000240)={{0x0, 0xffffff00, 0x0, 0xf, 0xfffffffffffffffd, 0x200, 0x800}, 0x4}, 0x7f80, 0xfffffffd, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f0000001100), r1) sendmsg$auto_CTRL_CMD_GETFAMILY(r1, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000001180)={&(0x7f0000001140)={0x1c, r2, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@CTRL_ATTR_FAMILY_ID={0x6, 0x1, 0x34}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x20000044) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$auto_thermal(&(0x7f0000000200), r1) sendmsg$auto_THERMAL_GENL_CMD_TZ_GET_ID(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="21022cbd0000fbdbdf2501"], 0x1c}, 0x1, 0x0, 0x0, 0x20004800}, 0x4000000) (async) fsetxattr$auto(r0, &(0x7f0000000140)='\x00', &(0x7f0000000180)="d59d5fd2d9186ba57beac3f6c99e7a96cfc095c66b1f2f2aff488845e33ed1b78f0063a1a39f2a6716bc7b0b57d63c8bd239e59020a9e4a2d612f62bd6405fe00b1dfcccec5965a4e0e900847838471024580a25824da375112e141257681ab7e68353482e85852a83fc2b8807c800762040e1a2a47fdd24e0", 0x401, 0xa) (async) fsetxattr$auto(r0, &(0x7f0000000100)='\x00', &(0x7f0000000300)="fb530d0c82d32d6f0a43f15f5e53db17c6600395dc3df6486c666f738b14bb460e13010dc7b53695f72248f7f37b50a866784499dbd85489ef455c6299bc72bf4753b082f1695d56bac34f22781aa584b382a212e4712d9b029824e4aa3e4bf31b873f45f18f4524185f09c4043f6cc33eb779ce2d86c0255f6ad5c895f3db3adedccdf60c64f8beefc93f8b9bb1ed7ab0008f8b6a84ae2179e858efcd3006662107d89e8182b4f8f203173c19f6a896913ed606384d638524ea07b996e2a32cebca13948f9b6b4eb8d28213cece770c5fb96559", 0x1, 0x7) (async) memfd_create$auto(&(0x7f0000000400)='\x00', 0x4) (async) sendmsg$auto_BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000336bd7000fedbdf2502"], 0x24}, 0x1, 0x0, 0x0, 0xc045}, 0x4) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="180027"], 0x1ac}}, 0x40000) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) (async) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 47.918313482s ago: executing program 1 (id=767): syz_genetlink_get_family_id$auto_l2tp(0x0, 0xffffffffffffffff) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) (async) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x10004) madvise$auto(0x0, 0xffffffffffff0005, 0x19) sendmsg$auto_NL80211_CMD_SET_WIPHY(0xffffffffffffffff, 0x0, 0x40040c0) fstat$auto(0x2, 0x0) open(0x0, 0x40a2c0, 0x114) (async) r0 = open(0x0, 0x40a2c0, 0x114) madvise$auto(0x0, 0xffffffffffff0001, 0x15) madvise$auto(0x0, 0xffffffffffff0005, 0x19) shutdown$auto(r0, 0x8000) (async) shutdown$auto(r0, 0x8000) unlink$auto(0x0) 47.538376346s ago: executing program 1 (id=770): r0 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x183800, 0x0) (async) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) (async) r1 = openat$auto_tracing_mark_raw_fops_trace(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/tracing/trace_marker_raw\x00', 0x4000, 0x0) ioctl$auto(r1, 0x0, 0x5) (async) prctl$auto(0x1000000001c, 0x5, 0x8, 0x9, 0x80001) faccessat2$auto(0x1, &(0x7f0000000040)='\x00', 0x4, 0x1000) (async) ioctl$auto(r0, 0x4008556c, 0x81) 47.256314436s ago: executing program 1 (id=771): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) socket(0x2, 0x1, 0x0) (async) socket(0x2, 0x1, 0x0) r0 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vbi15\x00', 0x802, 0x0) ppoll$auto(&(0x7f0000000040)={r0, 0x5, 0xf}, 0x4, 0x0, 0x0, 0x8) (async) ppoll$auto(&(0x7f0000000040)={r0, 0x5, 0xf}, 0x4, 0x0, 0x0, 0x8) mmap$auto(0x0, 0x2, 0xdb, 0x9b72, 0x6, 0x100000000) ioctl$auto(0x3, 0x40045613, 0x38) pipe$auto(0x0) mmap$auto(0x0, 0x400005, 0xfffffffffffffffe, 0x9b72, 0xc76, 0x8000) (async) mmap$auto(0x0, 0x400005, 0xfffffffffffffffe, 0x9b72, 0xc76, 0x8000) shutdown$auto(0x200000003, 0x2) recvmmsg$auto(0x3, 0x0, 0x10000, 0x300, 0x0) (async) recvmmsg$auto(0x3, 0x0, 0x10000, 0x300, 0x0) connect$auto(0x3, 0x0, 0x55) sync_file_range$auto(0xffffffffffffffff, 0x5, 0x6, 0x2) 46.683424695s ago: executing program 1 (id=774): close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socket(0x2, 0x1, 0x84) socket(0x2, 0x3, 0xa) setsockopt$auto(0x3, 0x0, 0x37, 0x0, 0x26) r0 = socket(0x10, 0x2, 0x0) io_uring_setup$auto(0x0, &(0x7f0000000140)={0x4, 0x2, 0x6, 0x6, 0x5, 0xef, 0xffffffffffffffff, [0x3, 0x10000, 0x101], {0x7ff, 0x3, 0xc, 0x6, 0x0, 0x0, 0xfc2, 0x6}, {0x7, 0x5, 0x6, 0x8b83, 0xc, 0x8000, 0x9, 0xc4d, 0x7}}) sendmsg$auto_HWSIM_CMD_DEL_RADIO(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="f96df0f8", @ANYRES16, @ANYBLOB="01eb"], 0x14}, 0x1, 0x0, 0x0, 0x20040800}, 0x24004000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1200"], 0x1ac}}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB], 0x1ac}}, 0x40000) mprotect$auto(0x1ffff000, 0x8000000000000001, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x40000) 46.571768689s ago: executing program 1 (id=775): r0 = open(&(0x7f0000000000)=':,\x00\xbd\x80\xd6\x002\xb37\xff\x1a\x9e99\xda\xd1v\'\xc6\xd2Fw;\x00v\xdce\xad\xf4\xdb\xc7\x946\xe4\f\x9el]L+\x06\x130V\x1b,d\x8f\xa0\xabDUdk\xac\x82\\tyQ\xd8j\a\x1a[\xdb\x96\x1f{2\x04\xc5Y\xc1@\x0e\xeeWZ\x94N\xd4\xc8q=\x9b\xd1\x7fR3\xb6`\x00\xb3\xe5|1\xba\r\x85\x89\xfe\xed\xe1\xad`\x92\xc7\x9c\xd7\xd8\x15\t&\xb7\xfc\x82\xc4\xd3J\xae\x810\x19\x14\t\xc2\xa5V\xaa\x8d\x04\xf5\xf3\xd6\xd1\xe9k\xaf\x1a\xc6u\x96\xf7\xaa\x84\x92\x995m\xf9O\xc0\x1e\xa05\xdb\xa5\xae\r\x06\xe6\xc3\xd0\xf8:\xf7\xc5u\x91\xf8\x91\xee\xd8y\xb8\xc1)\xad\x05\xeb\xe9\xab\r\x9a@\aa(\x1a\xa4\xc1\xcf\\\xf0\xc3~\xbbd\x94\x9c\x02\xd4\xfc\xd2`\xd9\x83{-\x81zY\\\xac!#\xea\xba\x86)\xe9\xbc\x82\xf6\xd2\x7f\xdb\xa1\xd5\x89|\xa0O\xfcqZ\x85@A\x90\"\x11L\xdd\xa5\x9f\xf5\x00', 0x8000, 0x50) pipe$auto(0x0) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'macvlan0\x00'}) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) r1 = socket(0x2, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) mount$auto(0x0, &(0x7f00000000c0)='.\x00', &(0x7f0000000100)='nfsd\x00\xee\x1a\x8f\xa2~?\xe2\x82fg\xb3G\xbe\xc8\x12\xae\xc3\xc0@[\x99\xec\xbf(\xec\xc3\xb2\xf2\x15Zi\xc4S6\'\x14\x05\t\x8c\xd5?\xa0\x00\xd8\xe4\xafW\xcc\xa3\xce\t\xf8p\xc6nA6\x1a\xb9\xac\xde\x0e\x90\x18\xf1\x13I\x95\xe12\xaclJ\xba\xeb\xe4\x83Z\xaev\xd7\xd9\xdd\x14\x81\xbe\xab\xed\xd5MI\x830_\xc2\x14O\x84\xaa\x13W\xb7\x06\'fvQ\x95\xc5\xd1\x98\xe3T\xcdfk\xc7\xe9\x96\r\x91\xb0\xc46\xf2\xfc\xef\xfe\xa0\xc9d\xb3h$\xeb\xad\xa4P\x8f\xc3bM{4RQ\x00\x9d)_\xd81(\x03\xfd\rw\xca1\x88|\xe5\x1e\x10\x89X\x01\xe9\xf6g\x95xx\xaf\xa9~m\x05\xa2\xe4\x81\xb9\x92\xda\x13\xfe5\xfb\xc6\xd8>\x01\xd4\x14\x94o\x1b[\xa8]\x9b\x03\x95\xc3\xad\xad\x1d#oi|\x04\x93N\xfa\x17\xf3b\xf6\xcf\x00'/236, 0x4, 0x0) mmap$auto(0x0, 0x1000, 0xe2, 0x9b72, 0x7, 0x28000) (async) getcwd$auto(0x0, 0xffffffffffffffff) (async) mount_setattr$auto(0x5, 0x0, 0x8000, &(0x7f0000000640)={0x0, 0x4, 0x100000, 0x4}, 0x283) sendmmsg$auto(r1, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x5, 0x20000000) write$auto(0x3, 0x0, 0xfffffdef) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x800008000) (async) modify_ldt$auto(0x1, 0x0, 0x10) modify_ldt$auto(0x1, 0x0, 0x10) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_OVS_DP_CMD_NEW(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="b40100000020f8dbdfaa5b285f41cfd03700", @ANYRES32=0x4, @ANYBLOB="080001004866520008000200", @ANYRES32=0x9, @ANYBLOB], 0x2c}, 0x1, 0x0, 0x0, 0x801}, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) (async) fcntl$auto(0xffffffffffffffff, 0x401, 0x5) (async) sendmsg$auto_OVS_METER_CMD_SET(0xffffffffffffffff, 0x0, 0x40) (async) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f000000fc00), 0x3, 0x0) ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x1) r5 = openat$auto_proc_clear_refs_operations_internal(0xffffffffffffff9c, &(0x7f0000000600)='/proc/thread-self/clear_refs\x00', 0x2, 0x0) (async) r6 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200", @ANYBLOB=']'], 0x1ac}}, 0x40000) (async) recvmmsg$auto(r6, &(0x7f0000000140)={{0x0, 0x1, &(0x7f0000000080)={0x0, 0x400}, 0x5, 0x0, 0x200002, 0x8}, 0x803}, 0xfffffff9, 0x10, 0x0) (async) write$auto_proc_clear_refs_operations_internal(r5, 0x0, 0xffffff4b) 45.492130439s ago: executing program 1 (id=781): statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x401bf, 0x7352, 0x32, 0x65f, 0x1ffde, 0x7, 0x3, 0x20000002, 0x9, 0x3, 0x6, 0x4, 0xb4, 0x9, 0x6, 0x10003, 0x80, 0x4, 0x0, 0x7, 0x2000, 0x203, 0x0, 0x84, [0x0, 0x0, 0x0, 0x8050100000000000, 0x0, 0x100100001, 0x0, 0xa, 0x70624ce7, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0, 0x1, 0x3, 0x0, 0xfffffffffffffffd, 0x2, 0x200000000004, 0x8, 0xffffffffefffffff, 0x200000000000004, 0x0, 0x0, 0x0, 0x0, 0x400000000005b8, 0xc, 0x0, 0x0, 0x4, 0x6, 0xffffffffffffffff, 0x890, 0x8000000000008, 0xfffffffffffffffc, 0x1000, 0xa38, 0x0, 0x0, 0xfffffffffffffffc, 0x2, 0x4000000000, 0x10006]}, 0x1fe, 0xd) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) (async) r0 = openat$auto_generic(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$auto_snd_ctl_f_ops_control(r0, 0x0, 0x0) mknod$auto(0x0, 0x1, 0x4) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) openat$auto_event_trigger_fops_trace(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/tracing/events/vmalloc/alloc_vmap_area/trigger\x00', 0x1, 0x0) (async, rerun: 64) mmap$auto(0x0, 0x40009, 0xe2, 0x9b72, 0x7, 0x28000) (async) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) (async) r1 = socket(0x10, 0x2, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x9, 0x7, 0x3d, 0x4909b6fb, 0x1ffde, 0x7, 0x6, 0x2, 0x9, 0x3, 0x6, 0x4, 0xb4, 0x9, 0x2, 0x10000, 0x80, 0x7, 0x0, 0x7, 0x2000, 0x200, 0x0, 0x84, [0x0, 0x0, 0x0, 0x50100000000000, 0x0, 0x0, 0x0, 0xa, 0x70624ce7, 0x0, 0x6, 0xb, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0xfffffffffffffffd, 0x1, 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x400000000005b8, 0xc, 0x4, 0x800, 0x0, 0x7, 0xffffffffffffffff, 0x5, 0x8000000000008, 0xfffffffffffffffc, 0x3, 0xa38, 0x4, 0x0, 0xfffffffffffffffc, 0x2, 0x3fffffffff, 0x0, 0x4, 0xffff]}, 0x400000000202, 0xd) (async) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="10002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) (async) sendmmsg$auto(r1, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, &(0x7f00000001c0), 0x7, 0xa505}, 0x800}, 0x7, 0x4008) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) (async, rerun: 32) io_uring_setup$auto(0x1, 0x0) (async, rerun: 32) r2 = socket(0x1d, 0x80003, 0x7fff) setsockopt$auto(r2, 0x107, 0x1, 0x0, 0x8004) (async, rerun: 32) getrandom$auto(&(0x7f0000000380)='/sys/kernel/debug/tracing/events/vmalloc/alloc_vmap_area/trigger\x00', 0xce83, 0x6) (rerun: 32) bpf$auto(0x6, &(0x7f0000000040)=@token_create={0x400, r0}, 0x7) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) r3 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r3, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008) 29.596417522s ago: executing program 35 (id=781): statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x401bf, 0x7352, 0x32, 0x65f, 0x1ffde, 0x7, 0x3, 0x20000002, 0x9, 0x3, 0x6, 0x4, 0xb4, 0x9, 0x6, 0x10003, 0x80, 0x4, 0x0, 0x7, 0x2000, 0x203, 0x0, 0x84, [0x0, 0x0, 0x0, 0x8050100000000000, 0x0, 0x100100001, 0x0, 0xa, 0x70624ce7, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0, 0x1, 0x3, 0x0, 0xfffffffffffffffd, 0x2, 0x200000000004, 0x8, 0xffffffffefffffff, 0x200000000000004, 0x0, 0x0, 0x0, 0x0, 0x400000000005b8, 0xc, 0x0, 0x0, 0x4, 0x6, 0xffffffffffffffff, 0x890, 0x8000000000008, 0xfffffffffffffffc, 0x1000, 0xa38, 0x0, 0x0, 0xfffffffffffffffc, 0x2, 0x4000000000, 0x10006]}, 0x1fe, 0xd) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) (async) r0 = openat$auto_generic(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$auto_snd_ctl_f_ops_control(r0, 0x0, 0x0) mknod$auto(0x0, 0x1, 0x4) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) openat$auto_event_trigger_fops_trace(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/tracing/events/vmalloc/alloc_vmap_area/trigger\x00', 0x1, 0x0) (async, rerun: 64) mmap$auto(0x0, 0x40009, 0xe2, 0x9b72, 0x7, 0x28000) (async) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) (async) r1 = socket(0x10, 0x2, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x9, 0x7, 0x3d, 0x4909b6fb, 0x1ffde, 0x7, 0x6, 0x2, 0x9, 0x3, 0x6, 0x4, 0xb4, 0x9, 0x2, 0x10000, 0x80, 0x7, 0x0, 0x7, 0x2000, 0x200, 0x0, 0x84, [0x0, 0x0, 0x0, 0x50100000000000, 0x0, 0x0, 0x0, 0xa, 0x70624ce7, 0x0, 0x6, 0xb, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0xfffffffffffffffd, 0x1, 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x400000000005b8, 0xc, 0x4, 0x800, 0x0, 0x7, 0xffffffffffffffff, 0x5, 0x8000000000008, 0xfffffffffffffffc, 0x3, 0xa38, 0x4, 0x0, 0xfffffffffffffffc, 0x2, 0x3fffffffff, 0x0, 0x4, 0xffff]}, 0x400000000202, 0xd) (async) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="10002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) (async) sendmmsg$auto(r1, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, &(0x7f00000001c0), 0x7, 0xa505}, 0x800}, 0x7, 0x4008) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) (async, rerun: 32) io_uring_setup$auto(0x1, 0x0) (async, rerun: 32) r2 = socket(0x1d, 0x80003, 0x7fff) setsockopt$auto(r2, 0x107, 0x1, 0x0, 0x8004) (async, rerun: 32) getrandom$auto(&(0x7f0000000380)='/sys/kernel/debug/tracing/events/vmalloc/alloc_vmap_area/trigger\x00', 0xce83, 0x6) (rerun: 32) bpf$auto(0x6, &(0x7f0000000040)=@token_create={0x400, r0}, 0x7) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) r3 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r3, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008) 18.800343552s ago: executing program 6 (id=860): close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socket(0x6, 0x800, 0x40000084) r0 = socket(0x2, 0x3, 0xa) setsockopt$auto(0x3, 0x0, 0x37, 0x0, 0x26) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x3, 0x3) madvise$auto(0x0, 0xffffffffffff0001, 0x15) madvise$auto(0x0, 0xffffffffffff0001, 0x15) getgid() r1 = socket(0x10, 0x2, 0x0) io_uring_setup$auto(0x0, &(0x7f0000000140)={0x4, 0x2, 0x6, 0x6, 0x5, 0xef, 0xffffffffffffffff, [0x3, 0x10000, 0x101], {0x7ff, 0x3, 0xc, 0x6, 0x0, 0x0, 0xfc2, 0x6}, {0x7, 0x5, 0x6, 0x8b83, 0xc, 0x8000, 0x9, 0xc4d, 0x7}}) sendmsg$auto_HWSIM_CMD_DEL_RADIO(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="f96df0f8", @ANYRES16=r1, @ANYBLOB="01eb"], 0x14}, 0x1, 0x0, 0x0, 0x20040800}, 0x24004000) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) sysfs$auto(0x2, 0xf, 0x0) fsopen$auto(0x0, 0x1) close_range$auto(0x2, 0x8000, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1200"], 0x1ac}}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="1f00"], 0x1ac}}, 0x40000) mprotect$auto(0x1ffff000, 0x8000000000000001, 0x4) open_by_handle_at$auto(0xffffff9c, &(0x7f0000000040)={0xc, 0x2, "4c6c8e85b194f29b6efd901e"}, 0x2) sendmsg$auto_NL80211_CMD_GET_REG(r1, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x40000) 14.858663867s ago: executing program 6 (id=876): socket(0x18, 0x3, 0x9) (async) write$auto(0x4, 0x0, 0x100082) (async) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) (async) close_range$auto(0x0, 0xfffffffffffff000, 0x2) (async) io_uring_setup$auto(0x6, 0x0) (async) socketpair$auto(0x3, 0x5, 0x7, 0x0) (async) r0 = socket(0x10, 0xa, 0x7) getsockopt$auto(r0, 0x4, 0x8, 0x0, 0x0) (async) capget$auto(&(0x7f0000000000), 0x0) (async) r1 = openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f0000000240)='/dev/cec15\x00', 0x100, 0x0) ioctl$auto_CEC_TRANSMIT(r1, 0xc0386105, &(0x7f0000000000)={0x4, 0x3, 0x3, 0x0, 0x2, 0x1, "ff413176b89b2b08b5226c32aca45e99", 0x0, 0xfa, 0xab, 0x3, 0x2, 0x1, 0x4}) (async) mprotect$auto(0xf, 0x8000000000000001, 0x4) (async) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) (async) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) socketpair$auto(0x2, 0x1, 0x8000000000000000, 0x0) (async) socket(0xa, 0x3, 0x3a) (async) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x3, 0x8) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) eventfd$auto(0x3) (async) eventfd$auto(0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x2, 0x88) 14.041300722s ago: executing program 6 (id=880): r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio1\x00', 0x801, 0x0) ioctl$auto_SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000100)=0x3) mmap$auto(0x0, 0x400008, 0xdb, 0x9b72, 0x2, 0x8000) (async) r1 = socket(0x26, 0x5, 0x84) (async) sendmsg$auto_OVS_FLOW_CMD_GET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x200400f0}, 0x800) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0xffff, @remote}, 0x6a) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) (async) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f0, 0x15) (async) madvise$auto(0x0, 0x200007, 0x19) (async) mlock$auto(0x5, 0xffff) sendto$auto(r1, 0x0, 0x401, 0x101, &(0x7f0000000000)=@generic={0xa, "e2e18340cba8fe8000"}, 0x1c) (async) write$auto(0x3, 0x0, 0xffd8) 13.68635929s ago: executing program 6 (id=881): close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socket(0x2, 0x1, 0x84) socket(0x2, 0x3, 0xa) setsockopt$auto(0x3, 0x0, 0x37, 0x0, 0x26) r0 = socket(0x10, 0x2, 0x0) io_uring_setup$auto(0x0, &(0x7f0000000140)={0x4, 0x2, 0x6, 0x6, 0x5, 0xef, 0xffffffffffffffff, [0x3, 0x10000, 0x101], {0x7ff, 0x3, 0xc, 0x6, 0x0, 0x0, 0xfc2, 0x6}, {0x7, 0x5, 0x6, 0x8b83, 0xc, 0x8000, 0x9, 0xc4d, 0x7}}) sendmsg$auto_HWSIM_CMD_DEL_RADIO(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="f96df0f8", @ANYRES16, @ANYBLOB="01eb"], 0x14}, 0x1, 0x0, 0x0, 0x20040800}, 0x24004000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1200"], 0x1ac}}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="1f00"], 0x1ac}}, 0x40000) mprotect$auto(0x1ffff000, 0x8000000000000001, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x40000) (fail_nth: 5) 13.244512802s ago: executing program 6 (id=883): mmap$auto(0x0, 0x400008, 0x9, 0x9b72, 0x2, 0x8000) (async) io_uring_setup$auto(0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) (async) openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/shm\x00', 0x141200, 0x0) (async) r0 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000040), 0xffffffffffffffff) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r1, &(0x7f0000004240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x1c, r0, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@HWSIM_ATTR_RADIO_NAME={0x7, 0x11, '..\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40c8}, 0x4048000) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) ioperm$auto(0x7, 0x6, 0x2) unshare$auto(0x20000) r3 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/mnt\x00') setns(r3, 0x0) mount$auto(0x0, &(0x7f00000000c0)='.\x00', &(0x7f0000000180)='nfsd\x00', 0x8, 0x0) rt_sigaction$auto(0x3, 0x0, 0x0, 0x8) pivot_root$auto(&(0x7f0000000040)='..\x00', &(0x7f0000000080)='.\x00') r4 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002f00), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_LISTENER_SET(r2, &(0x7f0000005380)={0x0, 0x0, &(0x7f0000005340)={&(0x7f0000002f40)=ANY=[@ANYBLOB="060000e3", @ANYRES16=r4, @ANYBLOB="01002bbd7000fcdbdf2506000000"], 0x14}, 0x1, 0x0, 0x0, 0xc000}, 0x20000000) (async) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000080), 0x40000, 0x0) r5 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f000000fc00), 0x801, 0x0) ioctl$auto_KVM_CREATE_VM(r5, 0xae01, 0x1) (async) mmap$auto(0x9, 0x2, 0x1, 0x9b77, 0x40000002275db5d, 0x10000000003) mmap$auto(0x2, 0x800, 0x0, 0x40000eb1, 0x5, 0x7) (async) io_uring_setup$auto(0x6, 0x0) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) (async) openat$auto_rfkill_fops_core(0xffffffffffffff9c, &(0x7f0000000140), 0x382, 0x0) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xfffffffffffffffe, 0x8000) (async) mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$auto_NL80211_CMD_STOP_SCHED_SCAN(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x24040084) 12.621228907s ago: executing program 6 (id=886): mmap$auto(0x0, 0x200006, 0x2, 0x40eb1, 0x602, 0x300000000000) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x181080, 0x0) select$auto(0x5, 0x0, &(0x7f0000000100)={[0x9, 0x200, 0x0, 0x8000000000000201, 0x9, 0x3, 0x6, 0x7, 0xd886, 0x5e58296b, 0x341, 0x41, 0x7, 0x200, 0x8, 0xc]}, 0x0, 0x0) socket(0x1f, 0x1, 0x7) madvise$auto(0x2000, 0x20499d, 0x9) 7.30984619s ago: executing program 2 (id=915): close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socket(0x2, 0x1, 0x84) socket(0x2, 0x3, 0xa) setsockopt$auto(0x3, 0x0, 0x37, 0x0, 0x26) r0 = socket(0x10, 0x2, 0x0) io_uring_setup$auto(0x0, &(0x7f0000000140)={0x4, 0x2, 0x6, 0x6, 0x5, 0xef, 0xffffffffffffffff, [0x3, 0x10000, 0x101], {0x7ff, 0x3, 0xc, 0x6, 0x0, 0x0, 0xfc2, 0x6}, {0x7, 0x5, 0x6, 0x8b83, 0xc, 0x8000, 0x9, 0xc4d, 0x7}}) sendmsg$auto_HWSIM_CMD_DEL_RADIO(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="f96df0f8", @ANYRES16, @ANYBLOB="01eb"], 0x14}, 0x1, 0x0, 0x0, 0x20040800}, 0x24004000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1200"], 0x1ac}}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="1f00"], 0x1ac}}, 0x40000) mprotect$auto(0x1ffff000, 0x8000000000000001, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x1000000}, 0x40000) 6.981104817s ago: executing program 2 (id=917): close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) r0 = openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, 0x0, 0x1541, 0x0) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x7, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$auto__ctl_fops_dm_ioctl(r0, 0xc048ae65, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:01/wakeup/wakeup1/last_change_ms\x00', 0x242, 0x0) read$auto(r2, 0x0, 0x8000) 6.70626941s ago: executing program 2 (id=919): r0 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event0\x00', 0x80, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) statx$auto(0xffffff9c, 0x0, 0x1000, 0x700a, 0x0) ioctl$auto_evdev_fops_evdev(r0, 0x40084504, 0x0) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/lockdep_chains\x00', 0x40201, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0) mmap$auto(0x0, 0x810004, 0x9b6, 0x8000000008011, 0x20000000000003, 0x8000) write$auto(0x3, 0x0, 0xfffffdef) syz_genetlink_get_family_id$auto_netdev(0x0, 0xffffffffffffffff) openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002dbd7000f9dbdf250100000006000200010000000500070058000000080009003f00000008000a000800000014001f0000000000000000000000000000000000140020"], 0x5c}, 0x1, 0x0, 0x0, 0x40060}, 0x0) 6.240745407s ago: executing program 2 (id=923): close_range$auto(0x2, 0x8, 0x0) r0 = socket(0xa, 0x3, 0x6) socket(0x1e, 0x3, 0x3a) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x3, 0x8) socket$nl_generic(0x10, 0x3, 0x10) eventfd$auto(0x3) eventfd$auto(0x0) sendmsg$auto_NL802154_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16, @ANYBLOB="010026bd7000fddbdf2507"], 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x4000800) r2 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1c00"], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) pipe$auto(&(0x7f0000001000)=0x1) socket(0xa, 0x2, 0x88) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000140)='/proc/irq/8/smp_affinity_list\x00', 0x0, 0x0) r3 = gettid() process_vm_readv$auto(r3, &(0x7f0000000040)={0x0, 0x8}, 0x4, &(0x7f00000000c0)={0x0, 0x100000000000002}, 0x6, 0x0) bpf$auto(0x0, &(0x7f0000000180)=@task_fd_query={r3, r1, 0x400, 0x80000001, 0x0, 0x7, r0, 0x7, 0xc}, 0xa3) 6.012309781s ago: executing program 2 (id=926): mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) sysfs$auto(0x2, 0x4, 0x0) mkdir$auto(&(0x7f00000001c0)='}[,&*}\x00', 0x2) mount$auto(0x0, &(0x7f0000000100)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0x10001, 0x0) (async) chdir$auto(&(0x7f0000000040)='}[,&*}\x00') sethostname$auto(0xfffffffffffffffe, 0x8) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x2400, 0x8) fremovexattr$auto(r0, &(0x7f0000000080)='#\x88') (async) clone$auto(0x21002, 0x9, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x9) mmap$auto(0x0, 0xa, 0xdb, 0x9b72, 0x5, 0x8000) (async) rseq$auto(&(0x7f0000000300)={0xe, 0x401, 0x0, 0xcf2a, 0xffffffff, 0x2}, 0x8000, 0x0, 0x6) close_range$auto(0x2, 0xa, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) r1 = socket(0x2, 0x1, 0x0) (async) fcntl$auto(0x3, 0x4, 0xa553) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0xffff, @dev={0xac, 0x14, 0x14, 0xd}}, 0x6a) (async) sendmmsg$auto(r1, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x5, 0xb}, 0x800009}, 0x5, 0x20000000) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_TIPC_NL_PEER_REMOVE(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14008000ae763b9c0600000000b033b2", @ANYRES16=0x0, @ANYBLOB="040027bd7000fbdbdf2514000000"], 0x14}, 0x1, 0x0, 0x0, 0x48891}, 0x20) setsockopt$auto(0x3, 0x1, 0x21, 0x0, 0x9) (async) syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000040), r2) mq_notify$auto(0x5cf5, &(0x7f00000006c0)={@sival_ptr=0x0, 0x3, 0x2, @_sigev_thread={0x0, 0x0}}) close_range$auto(0x2, 0x8, 0x0) r3 = socket(0xa, 0x5, 0x0) getsockopt$auto(r3, 0x84, 0x2, 0x0, 0x0) (async) keyctl$auto(0x4, 0xfffffffffffffffc, 0xfffffffffffffffd, 0xfffffffffffffffd, 0x1) 5.006726143s ago: executing program 2 (id=930): ioperm$auto(0x7, 0x6, 0x2) r0 = socket(0xa, 0x2, 0x0) setsockopt$auto(0x6, 0x0, 0xfffffffe, 0x0, 0x80000001) sendmsg$auto_OVS_CT_LIMIT_CMD_DEL(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={0x0}}, 0x20040000) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x9, 0x80000, 0x20f) mlockall$auto(0x2) shmget$auto(0x8, 0x10563, 0x568d1af2) shmat$auto(0x0, 0x0, 0x825) socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) 4.439449411s ago: executing program 7 (id=933): socket(0x2, 0x6, 0x0) (async) socket(0x2, 0x6, 0x0) mmap$auto(0x0, 0x400005, 0xfffffffffffffffe, 0x9b72, 0xc76, 0x8000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) alarm$auto(0xffffffff) socket(0x80000000000000a, 0x2, 0x0) (async) r0 = socket(0x80000000000000a, 0x2, 0x0) getsockopt$auto(r0, 0x88, 0x64, 0x0, 0x0) shutdown$auto(0x200000003, 0x2) recvmmsg$auto(0x3, 0x0, 0x10000, 0x300, 0x0) connect$auto(0x3, 0x0, 0x55) 4.183757694s ago: executing program 7 (id=934): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001300)={'batadv_slave_0\x00', 0x0}) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/midiC2D2\x00', 0x2841, 0x0) (async) r2 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x82001, 0x0) write$auto_snd_pcm_oss_f_reg_pcm_oss(r2, &(0x7f00000000c0)="a4", 0x1) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) io_uring_setup$auto(0x40000002c55, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) (async) mmap$auto(0x80000000000002b, 0x20009, 0x7, 0xeb1, 0x401, 0x8de) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/mm/ksm/sleep_millisecs\x00', 0x22180, 0x0) (async) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/nbd7/queue/max_discard_segments\x00', 0x80000, 0x0) read$auto(r3, 0x0, 0x9) (async, rerun: 32) mprotect$auto(0x1ffff000, 0x8000000000000001, 0xd) (async, rerun: 32) r4 = openat$auto_ima_measure_policy_ops_ima_fs(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) pwrite64$auto(r4, 0x0, 0x19b5, 0x3) (async, rerun: 32) r5 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000001480), r0) (rerun: 32) sendmsg$auto_ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f0000001cc0)={0x0, 0x0, &(0x7f0000001c80)={&(0x7f0000001c40)={0x28, r5, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [@ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0x2}, @ETHTOOL_A_CHANNELS_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x8800}, 0x0) 3.492814711s ago: executing program 7 (id=940): close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r0 = socket(0x2, 0x1, 0x84) socket(0x2, 0x3, 0xa) setsockopt$auto(0x3, 0x0, 0x37, 0x0, 0x26) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x7f, 0x8000) mmap$auto(0x0, 0x8, 0x1000000004, 0x9b72, 0x2, 0x8000) fcntl$auto(0x2, 0x40c, 0x7f) pipe$auto(0x0) writev$auto(0x1, 0x0, 0x1) pipe$auto(0x0) tee$auto(0x2000000000000, 0x3, 0x402, 0xa) r1 = socket(0x10, 0x2, 0x0) io_uring_setup$auto(0x0, &(0x7f0000000140)={0x4, 0x2, 0x6, 0x6, 0x5, 0xef, 0xffffffffffffffff, [0x3, 0x10000, 0x101], {0x7ff, 0x3, 0xc, 0x6, 0x0, 0x0, 0xfc2, 0x6}, {0x7, 0x5, 0x6, 0x8b83, 0xc, 0x8000, 0x9, 0xc4d, 0x7}}) sendmsg$auto_HWSIM_CMD_DEL_RADIO(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="f96df0f8", @ANYRES16, @ANYBLOB="01eb"], 0x14}, 0x1, 0x0, 0x0, 0x20040800}, 0x24004000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1200"], 0x1ac}}, 0x40000) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp1\x00', 0x82a00, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="1f00"], 0x1ac}}, 0x40000) mprotect$auto(0x1ffff000, 0x8000000000000001, 0x4) io_cancel$auto(0x9, &(0x7f0000000040)={0x9, 0x5, 0x2, 0x101, 0x8, r0, 0xfffffffffffffffd, 0x9e, 0x8, 0x0, 0x5, r1}, &(0x7f0000000080)={0x3, 0x7a64, 0x5, 0x72}) sendmsg$auto_NL80211_CMD_GET_REG(r1, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x40000) 3.290211088s ago: executing program 7 (id=942): mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) (async) close_range$auto(0x2, 0x8, 0x0) (async) r0 = socket(0xa, 0x2, 0x88) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bond0\x00', 0x0}) bpf$auto(0x0, &(0x7f00000000c0)=@bpf_attr_5={@target_ifindex=r2, r1, 0x4, 0x1ff, r0, @relative_id=0x13, 0xe600}, 0xf) socketpair$auto(0x1, 0x803, 0x8000000000000000, 0x0) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) bpf$auto(0x2, &(0x7f00000001c0)=@raw_tracepoint={0x5, r3, 0x0, 0x3}, 0xc) (async) readv$auto(0x6, &(0x7f00000000c0)={0x0, 0x1}, 0x1) (async) r4 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/sctp/cookie_hmac_alg\x00', 0x200, 0x0) (async) r5 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="48ca0000", @ANYRES16=r5, @ANYBLOB="1b0026bd7000fddbdf2503000000040008001800038014000c000000000000000000000000000000000112000100898771f1c19f17790485908286dd000004000280"], 0x48}, 0x1, 0x0, 0x0, 0x44000884}, 0xc800) (async) read$auto_proc_sys_file_operations_proc_sysctl(r4, 0x0, 0x0) (async) r7 = syz_genetlink_get_family_id$auto_ipvs(&(0x7f00000002c0), r1) (async) r8 = geteuid() setreuid$auto(r8, 0x0) (async) setuid$auto(r8) sendmsg$auto_IPVS_CMD_GET_CONFIG(r6, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000300)={&(0x7f0000004040)=ANY=[@ANYBLOB="ac2a5a8e1cc428654c12d887cc808fa5282becb2a35f17d36e998c81aaa08a2e01f4e7163df1fe02aefa16515d4095697ecbbbc165a61cf0001cd21bd087f3a8e91bf7f75d99117f2c49b34ede80a981c1f0", @ANYRES16=r7, @ANYBLOB="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", @ANYRES32=r8, @ANYBLOB="0000000c00028005000b000000000008000600020000000800060003000000"], 0x2690}, 0x1, 0x0, 0x0, 0x40000}, 0x4010) 3.168967319s ago: executing program 4 (id=943): r0 = socket(0x10, 0x3, 0x0) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) (async) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16, @ANYBLOB="1b0026bd7400fddbdf250300000004000800100003800c0009"], 0x40}, 0x1, 0x0, 0x0, 0x4004040}, 0xc800) (async) sendmsg$auto_NETDEV_CMD_QUEUE_GET(0xffffffffffffffff, &(0x7f0000003040)={0x0, 0x0, &(0x7f0000003000)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="010600bd7000fbdbdf250a"], 0x1c}, 0x1, 0x0, 0x0, 0x20040004}, 0x20008810) (async) r1 = openat$auto_generic(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x28240, 0x0) r2 = syz_genetlink_get_family_id$auto_nlbl_unlbl(&(0x7f0000000080), r1) sendmsg$auto_NLBL_UNLABEL_C_ACCEPT(r1, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000100)={0x14c, r2, 0x2, 0x70bd2c, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private0}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @NLBL_UNLABEL_A_SECCTX={0xbf, 0x7, "28825bcf319cee2ef4e18e5cf63c69c134cccab297cf2ccb6f7768d0157cdf5a92d8b821e1eee7ce3c3f024eb8f843aa65c9f1d3ba6e708941270215dd5d4d519ef4876d82f779eded0cb82afb1e0f4c6d5229ce08ad1296c01ac1ec69484defffdae0c181c0dfc89589a7db841e8b99c11aee78bd503e576f171b9e95561352f8d167a723b7d202801d2173648e577f6fe36077f71d26a13412f149998200dca3a565cfc7cb811cb4b1b3b82559b8bc65904ece8e7a7ca8200519"}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @ipv4={'\x00', '\xff\xff', @multicast2}}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @local}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @remote}]}, 0x14c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000) (async) sendmsg$auto_NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r2, 0x2, 0x70bd29, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x5}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, 0x24}, 0x1, 0x0, 0x0, 0x840}, 0x20000080) r3 = open(0x0, 0x10677d, 0x37e5c9853cd1b999) finit_module$auto(r3, 0x0, 0x2) (async) close_range$auto(r0, r3, 0x80000001) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="18"], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) (async) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/platform/vkms/graphics/fb0/rotate\x00', 0x22e00, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r4, &(0x7f0000002980)=""/4075, 0xfeb) (async) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) (async) r5 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS1\x00', 0x400, 0x0) ioctl$auto_TIOCGETD2(r5, 0x5424, 0x0) 3.065453301s ago: executing program 4 (id=944): socket(0x2, 0x5, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) connect$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x0, @rand_addr=0xe0}, 0x55) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000240)='/proc/thread-self/net/rxrpc/peers\x00', 0x480, 0x0) mmap$auto(0x0, 0x2020009, 0xa, 0xeb1, 0xfffffffffffffffa, 0x8000) open(0x0, 0x261c2, 0x84) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x265, 0x8000) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000"], 0x1ac}}, 0x4004) sendmmsg$auto(r1, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) sendmsg$auto_NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20040010}, 0x20000084) mmap$auto(0x0, 0x2020009, 0x10000000000000a, 0x210, 0xfffffffffffffffa, 0x8002) read$auto_proc_reg_file_ops_compat_inode(0xffffffffffffffff, &(0x7f0000000000)=""/48, 0x30) r2 = openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000980)='/proc/self/pagemap\x00', 0x80800, 0x0) read$auto(r2, 0x0, 0x2000000) 2.314138472s ago: executing program 7 (id=945): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x16) madvise$auto(0x0, 0xffffffffffff0001, 0x15) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x53, 0x9) mremap$auto(0xffffffffffffffff, 0xba, 0x13fd4, 0x40000000000008, 0xffffeffc) mremap$auto(0x1fc000, 0xfee0, 0x3fd6, 0x3, 0xfffff000) socket(0x5, 0x0, 0x3) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000140)='/proc/mtrr\x00', 0xc0000, 0x0) mmap$auto(0x0, 0xa, 0xdb, 0x9b72, 0x5, 0x8000) statx$auto(0x2, 0x0, 0x1000, 0x8, 0x0) ioctl$auto(r0, 0x40104d05, 0x8) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x3, 0x5) r1 = socket(0x2b, 0x1, 0x1) r2 = socket(0x10, 0x2, 0x6) r3 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="90000000", @ANYRES16=r3, @ANYBLOB="010028bd7000fcdbdf2511000000f28f9ccddc5ae5784cb5b24ffa7c001e807700228008008c00", @ANYRES32=0x0, @ANYBLOB="0a0010800000002a4f7b00009658dda9bac4231b610fac3fd53b7ed2d9994ff55f4f0a42ea0dc29499ac7a1f520cf27048a5916e419d44cae38124c609e9d9fc479b73613601cb8321b0d7983ccfe0df440dcd5db7dc3d99cc0e8cc1cc65bee351d839aa641eee46cc8adc00"], 0x90}, 0x1, 0x0, 0x0, 0x20008000}, 0x8044) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) r5 = geteuid() setreuid$auto(r5, 0x0) r6 = open(&(0x7f0000000000)='./file0\x00', 0x22040, 0xe5) fcntl$auto(r6, 0xa, 0x36) sendmsg$auto_NL802154_CMD_DEL_SEC_DEV(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000040)={&(0x7f0000001900)=ANY=[@ANYBLOB="0c170000", @ANYRES8=r4, @ANYBLOB="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", @ANYRES32, @ANYBLOB="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", @ANYRES32=r4, @ANYBLOB="0800fd00", @ANYRES32=r5, @ANYBLOB="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", @ANYRESHEX=r1, @ANYBLOB="08000b0005000000"], 0x170c}, 0x1, 0x0, 0x0, 0x4000000}, 0x44000) sendmsg$auto_NL802154_CMD_DISASSOCIATE(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000010}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="000329bd7000fedbdf25290000000500250009000000050008000600000008002100760000000500110068000000050029000000000008000d002d09000006000a00c000000005001000000000000c00188008000000ac1e01010500130004000000"], 0x68}, 0x1, 0x0, 0x0, 0x240088c7}, 0x800) socket(0x2c, 0x80003, 0x0) socketpair$auto(0x3, 0x5, 0x7, 0x0) 1.562370198s ago: executing program 4 (id=946): mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0xb32, 0x8000) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x40009, 0x3, 0x9b72, 0x7, 0x28000) io_uring_setup$auto(0x6, 0x0) open(0x0, 0xa22c0, 0x155) prctl$auto(0x1000000001c, 0x5, 0x8, 0x9, 0x80001) keyctl$auto(0x4, 0xfffffffe, 0xffffffffffffffff, 0x8000, 0xe) setreuid$auto(0x15, 0x5) access$auto(0x0, 0x5) ioctl$auto(0xffffffffffffffff, 0x80000000, 0x0) r0 = socket(0x10, 0x2, 0x0) ioperm$auto(0x800, 0x5, 0xd) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'pimreg\x00'}) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x3, 0x7) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) syz_genetlink_get_family_id$auto_handshake(0x0, 0xffffffffffffffff) madvise$auto(0x0, 0xffffffffffff0001, 0x15) writev$auto(0xc8, 0x0, 0x9) semctl$auto(0x0, 0xe3, 0x0, 0x5) socket$nl_generic(0x10, 0x3, 0x10) lsm_set_self_attr$auto(0x1, 0x0, 0x7, 0x6) sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYBLOB='&\x00', @ANYBLOB="5de1"], 0x1ac}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) madvise$auto(0x0, 0xffffffffffff0005, 0x19) clone$auto(0x1, 0x1, 0x0, 0x0, 0x7) mmap$auto(0x0, 0x9, 0xdf, 0xeb1, 0xfffffffffffffffd, 0x8000) madvise$auto(0x0, 0x2003f0, 0x15) clone$auto(0x2, 0x2, &(0x7f0000000000)=0x3, &(0x7f0000000040), 0x7f) 715.670913ms ago: executing program 4 (id=947): close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socket(0x2, 0x1, 0x84) socket(0x2, 0x3, 0xa) setsockopt$auto(0x3, 0x0, 0x37, 0x0, 0x26) r0 = socket(0x10, 0x2, 0x0) io_uring_setup$auto(0x0, &(0x7f0000000140)={0x4, 0x2, 0x6, 0x6, 0x5, 0xef, 0xffffffffffffffff, [0x3, 0x10000, 0x101], {0x7ff, 0x3, 0xc, 0x6, 0x0, 0x0, 0xfc2, 0x6}, {0x7, 0x5, 0x6, 0x8b83, 0xc, 0x8000, 0x9, 0xc4d, 0x7}}) sendmsg$auto_HWSIM_CMD_DEL_RADIO(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="f96df0f8", @ANYRES16, @ANYBLOB="01eb"], 0x14}, 0x1, 0x0, 0x0, 0x20040800}, 0x24004000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1200"], 0x1ac}}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="1f00"], 0x1ac}}, 0x40000) mprotect$auto(0x1ffff000, 0x8000000000000001, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x1d000000}, 0x40000) 322.314283ms ago: executing program 4 (id=948): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), r0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="90000000", @ANYRES16=r1, @ANYBLOB="2f212cbd7000fcdbdf252100000008000300", @ANYRES32=r2, @ANYBLOB="73002d8014001000fe8000000000000000000000000000aae9"], 0x90}, 0x1, 0x0, 0x0, 0xe7030000}, 0x4000000) 168.480104ms ago: executing program 4 (id=949): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) (async) capset$auto(0x0, 0xfffffffffffffffe) capset$auto(0x0, 0x0) (async) statmount$auto(&(0x7f0000000000)={0x1f, 0x8, 0x2, 0xffffffff, 0xfffffffffffffff2}, 0x0, 0x800, 0x0) r0 = openat$auto_trace_options_fops_trace(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/tracing/options/blk_cgname\x00', 0x20c000, 0x0) (async) r1 = openat$auto_tracing_saved_tgids_fops_trace(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/tracing/saved_tgids\x00', 0x8000, 0x0) (async) r2 = socket(0x10, 0x3, 0x6) mmap$auto(0x0, 0x7f, 0x1, 0xeb1, 0x401, 0x8000) (async) mmap$auto(0x0, 0x3, 0xdf, 0xeb1, 0x401, 0x8000) (async) sysfs$auto(0x2, 0x1a, 0x0) fsopen$auto(0x0, 0x1) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1a0027"], 0x1ac}}, 0x40000) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) (async) io_uring_setup$auto(0xe, &(0x7f0000000100)={0xffffffff, 0x1, 0x0, 0xa4c, 0x7, 0x10, r2, [0x0, 0x1, 0xa], {0xfffffff1, 0x6f4, 0x0, 0xff, 0xcfa1, 0x5, 0x130, 0x1ff, 0x3}, {0xd5, 0x0, 0xff, 0x3, 0x4f54, 0x6, 0x4, 0x6, 0x99a}}) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/misc/hw_random/rng_selected\x00', 0x0, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r3, &(0x7f0000000140)=""/151, 0x97) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) (async) bpf$auto(0x9, &(0x7f0000000000)=@prog_bind_map={r0, r1, 0x8}, 0xa3) (async) epoll_create1$auto(0x3) 0s ago: executing program 7 (id=950): close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) pwritev2$auto(0x4, &(0x7f0000001fc0)={&(0x7f0000001f00), 0x7}, 0x1, 0xffffffffffffffff, 0x81, 0x8) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socket(0x2, 0x1, 0x84) socket(0x2, 0x3, 0xa) setsockopt$auto(0x3, 0x0, 0x37, 0x0, 0x26) r0 = socket(0x10, 0x2, 0x0) io_uring_setup$auto(0x0, &(0x7f0000000140)={0x4, 0x2, 0x6, 0x6, 0x5, 0xef, 0xffffffffffffffff, [0x3, 0x10000, 0x101], {0x7ff, 0x3, 0xc, 0x6, 0x0, 0x0, 0xfc2, 0x6}, {0x7, 0x5, 0x6, 0x8b83, 0xc, 0x8000, 0x9, 0xc4d, 0x7}}) sendmsg$auto_HWSIM_CMD_DEL_RADIO(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="f96df0f8", @ANYRES16, @ANYBLOB="01eb"], 0x14}, 0x1, 0x0, 0x0, 0x20040800}, 0x24004000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1200"], 0x1ac}}, 0x40000) r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100cda4420008bd7100f9db5f250200000000000010"], 0x24}, 0x1, 0x0, 0x0, 0x404c0c0}, 0x80) r2 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r2, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f00000001c0), 0x7, 0xa505}, 0x800}, 0x7, 0x4008) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="1f00"], 0x1ac}}, 0x40000) mprotect$auto(0x1ffff000, 0x8000000000000001, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x40000) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.86' (ED25519) to the list of known hosts. [ 82.794902][ T5825] cgroup: Unknown subsys name 'net' [ 82.929298][ T5825] cgroup: Unknown subsys name 'cpuset' [ 82.938225][ T5825] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 84.676268][ T5825] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 86.628326][ T5847] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 86.636871][ T5847] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 86.645875][ T5847] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 86.653954][ T5847] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 86.663299][ T5847] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 86.667461][ T5848] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 86.671334][ T5847] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 86.684604][ T5849] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 86.684916][ T5847] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 86.695247][ T5849] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 86.700960][ T5847] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 86.705792][ T5848] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 86.726026][ T5849] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 86.736388][ T5848] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 86.744584][ T5848] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 86.752117][ T5849] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 86.759449][ T5849] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 86.760269][ T5848] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 86.769035][ T5849] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 86.775024][ T5848] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 86.781774][ T5849] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 86.796110][ T5849] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 86.805424][ T5849] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 86.813712][ T5849] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 87.179434][ T5836] chnl_net:caif_netlink_parms(): no params data found [ 87.229765][ T5835] chnl_net:caif_netlink_parms(): no params data found [ 87.281093][ T5834] chnl_net:caif_netlink_parms(): no params data found [ 87.369767][ T5838] chnl_net:caif_netlink_parms(): no params data found [ 87.383360][ T5836] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.391897][ T5836] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.399649][ T5836] bridge_slave_0: entered allmulticast mode [ 87.406655][ T5836] bridge_slave_0: entered promiscuous mode [ 87.441440][ T5836] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.448734][ T5836] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.456194][ T5836] bridge_slave_1: entered allmulticast mode [ 87.462952][ T5836] bridge_slave_1: entered promiscuous mode [ 87.487226][ T5835] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.494397][ T5835] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.501819][ T5835] bridge_slave_0: entered allmulticast mode [ 87.509095][ T5835] bridge_slave_0: entered promiscuous mode [ 87.517913][ T5835] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.525568][ T5835] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.532757][ T5835] bridge_slave_1: entered allmulticast mode [ 87.539786][ T5835] bridge_slave_1: entered promiscuous mode [ 87.558879][ T5836] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.601648][ T5836] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.622874][ T5834] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.630433][ T5834] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.638428][ T5834] bridge_slave_0: entered allmulticast mode [ 87.645175][ T5834] bridge_slave_0: entered promiscuous mode [ 87.682386][ T5834] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.689690][ T5834] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.697148][ T5834] bridge_slave_1: entered allmulticast mode [ 87.703867][ T5834] bridge_slave_1: entered promiscuous mode [ 87.723418][ T5835] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.751885][ T5838] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.759333][ T5838] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.766926][ T5838] bridge_slave_0: entered allmulticast mode [ 87.773642][ T5838] bridge_slave_0: entered promiscuous mode [ 87.783277][ T5835] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.796565][ T5836] team0: Port device team_slave_0 added [ 87.810189][ T5838] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.817626][ T5838] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.824821][ T5838] bridge_slave_1: entered allmulticast mode [ 87.832510][ T5838] bridge_slave_1: entered promiscuous mode [ 87.851048][ T5836] team0: Port device team_slave_1 added [ 87.870789][ T5834] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.882580][ T5834] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.937248][ T5835] team0: Port device team_slave_0 added [ 87.945862][ T5838] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.957110][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.964063][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.990700][ T5836] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.004437][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.011616][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.037742][ T5836] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.059669][ T5835] team0: Port device team_slave_1 added [ 88.078108][ T5838] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.110383][ T5834] team0: Port device team_slave_0 added [ 88.138023][ T5838] team0: Port device team_slave_0 added [ 88.149785][ T5834] team0: Port device team_slave_1 added [ 88.164432][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.172018][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.198483][ T5835] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.229868][ T5838] team0: Port device team_slave_1 added [ 88.252722][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.263274][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.289692][ T5835] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.321455][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.328491][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.354579][ T5838] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.368051][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.375039][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.402061][ T5834] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.422080][ T5836] hsr_slave_0: entered promiscuous mode [ 88.428758][ T5836] hsr_slave_1: entered promiscuous mode [ 88.436276][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.443261][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.469335][ T5838] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.480936][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.488170][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.514316][ T5834] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.589231][ T5835] hsr_slave_0: entered promiscuous mode [ 88.599333][ T5835] hsr_slave_1: entered promiscuous mode [ 88.605621][ T5835] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 88.613393][ T5835] Cannot create hsr debugfs directory [ 88.632102][ T5834] hsr_slave_0: entered promiscuous mode [ 88.639742][ T5834] hsr_slave_1: entered promiscuous mode [ 88.645997][ T5834] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 88.653565][ T5834] Cannot create hsr debugfs directory [ 88.709883][ T5838] hsr_slave_0: entered promiscuous mode [ 88.717605][ T5838] hsr_slave_1: entered promiscuous mode [ 88.723733][ T5838] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 88.731612][ T5838] Cannot create hsr debugfs directory [ 88.866869][ T5849] Bluetooth: hci2: command tx timeout [ 88.866907][ T5845] Bluetooth: hci0: command tx timeout [ 88.875947][ T5849] Bluetooth: hci1: command tx timeout [ 88.878271][ T5839] Bluetooth: hci3: command tx timeout [ 89.028037][ T5835] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 89.045445][ T5835] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 89.069893][ T5835] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 89.090829][ T5835] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 89.108654][ T5836] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 89.119545][ T5836] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 89.142946][ T5836] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 89.161719][ T5836] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 89.209328][ T5834] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 89.223709][ T5834] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 89.234727][ T5834] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 89.246527][ T5834] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 89.317098][ T5838] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 89.330580][ T5838] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 89.361544][ T5838] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 89.372548][ T5838] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 89.497759][ T5835] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.542813][ T5835] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.581551][ T5836] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.594519][ T5834] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.611760][ T3465] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.619119][ T3465] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.630462][ T3465] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.637691][ T3465] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.674926][ T5834] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.690791][ T3536] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.697954][ T3536] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.714851][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.722027][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.746334][ T5836] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.772036][ T5838] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.791129][ T3465] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.798290][ T3465] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.828059][ T5838] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.846895][ T3536] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.854018][ T3536] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.891954][ T3465] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.899160][ T3465] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.943886][ T3465] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.951087][ T3465] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.139871][ T5835] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.241969][ T5835] veth0_vlan: entered promiscuous mode [ 90.264537][ T5835] veth1_vlan: entered promiscuous mode [ 90.338984][ T5835] veth0_macvtap: entered promiscuous mode [ 90.366587][ T5835] veth1_macvtap: entered promiscuous mode [ 90.428950][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.450850][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.483612][ T5835] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.493674][ T5835] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.502925][ T5835] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.512261][ T5835] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.528121][ T5834] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.552252][ T5838] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.599307][ T5836] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.673505][ T5834] veth0_vlan: entered promiscuous mode [ 90.716588][ T5838] veth0_vlan: entered promiscuous mode [ 90.724837][ T5834] veth1_vlan: entered promiscuous mode [ 90.737925][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.751514][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.794491][ T5838] veth1_vlan: entered promiscuous mode [ 90.811694][ T3465] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.825172][ T3465] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.855134][ T5834] veth0_macvtap: entered promiscuous mode [ 90.877961][ T5836] veth0_vlan: entered promiscuous mode [ 90.907138][ T5836] veth1_vlan: entered promiscuous mode [ 90.908863][ T5835] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 90.928490][ T5834] veth1_macvtap: entered promiscuous mode [ 90.946095][ T5839] Bluetooth: hci3: command tx timeout [ 90.951722][ T5845] Bluetooth: hci0: command tx timeout [ 90.956192][ T5849] Bluetooth: hci1: command tx timeout [ 90.957299][ T54] Bluetooth: hci2: command tx timeout [ 90.986286][ T5834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.997143][ T5834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.008269][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.017985][ T5838] veth0_macvtap: entered promiscuous mode [ 91.029136][ T5838] veth1_macvtap: entered promiscuous mode [ 91.048227][ T5838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.075351][ T5838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.089093][ T5838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.100067][ T5838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.120330][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.136758][ T5834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.149006][ T5834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.160651][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.174328][ T5838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.184945][ T5838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.200329][ T5838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.211224][ T5838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.222825][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.242659][ T5834] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.252650][ T5834] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.262191][ T5834] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.272381][ T5834] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.289287][ T5838] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.299016][ T5838] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.318270][ T5838] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.327592][ T5838] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.359337][ T5836] veth0_macvtap: entered promiscuous mode [ 91.390796][ T5836] veth1_macvtap: entered promiscuous mode [ 91.439232][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.456849][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.471972][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.482604][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.492883][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.503767][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.516612][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.562096][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.581416][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.593903][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.604875][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.615478][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.626236][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.639107][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.683258][ T5836] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.704047][ T5836] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.715927][ T5836] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.724698][ T5836] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.744655][ T2862] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.761416][ T2862] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.873518][ T3432] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.892702][ T3432] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.904073][ T3536] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.937537][ T3536] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.960694][ T3536] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.973950][ T3536] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.081396][ T1205] cfg80211: failed to load regulatory.db [ 92.105773][ T3465] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.113749][ T3465] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.121265][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.165795][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.462099][ T5910] lo: entered allmulticast mode [ 92.485988][ T5908] can: request_module (can-proto-5) failed. [ 92.602140][ T5914] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 92.652491][ T5908] lo: left allmulticast mode [ 93.055419][ T54] Bluetooth: hci3: command tx timeout [ 93.061514][ T54] Bluetooth: hci1: command tx timeout [ 93.067220][ T54] Bluetooth: hci2: command tx timeout [ 93.073740][ T54] Bluetooth: hci0: command tx timeout [ 93.088892][ T5915] process 'syz.3.4' launched './file0' with NULL argv: empty string added [ 94.128825][ T5941] netlink: 28 bytes leftover after parsing attributes in process `syz.0.10'. [ 94.155738][ T5941] veth1_macvtap: entered allmulticast mode [ 94.446599][ T5953] kernel read not supported for file /#)-\&[} (pid: 5953 comm: syz.1.12) [ 94.455607][ T5941] netlink: 'syz.0.10': attribute type 29 has an invalid length. [ 94.463306][ T5941] netlink: 334 bytes leftover after parsing attributes in process `syz.0.10'. [ 94.503521][ T30] audit: type=1800 audit(1734369881.997:2): pid=5953 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.12" name="#)-\&[}" dev="mqueue" ino=7386 res=0 errno=0 [ 95.078290][ T5967] [U]  [ 95.081395][ T5967] [U] [ 95.084156][ T5967] [U] [ 95.086914][ T5967] [U] [ 95.100871][ T5967] [U] [ 95.103753][ T5967] [U] [ 95.106519][ T5967] [U] [ 95.109285][ T5967] [U] [ 95.118203][ T5845] Bluetooth: hci0: command tx timeout [ 95.118225][ T54] Bluetooth: hci2: command tx timeout [ 95.124388][ T5845] Bluetooth: hci1: command tx timeout [ 95.130441][ T5839] Bluetooth: hci3: command tx timeout [ 95.144977][ T5967] [U] [ 95.147845][ T5967] [U] [ 95.150605][ T5967] [U] [ 95.153372][ T5967] [U] [ 95.209269][ T5967] [U] [ 95.212069][ T5967] [U] [ 95.214833][ T5967] [U] [ 95.217597][ T5967] [U] [ 95.360028][ T5967] [U] [ 95.362823][ T5967] [U] [ 95.365579][ T5967] [U] [ 95.368337][ T5967] [U] [ 95.477986][ T5967] [U] [ 95.480776][ T5967] [U] [ 95.483546][ T5967] [U] [ 95.486299][ T5967] [U] [ 95.541845][ T5979] netlink: 8 bytes leftover after parsing attributes in process `syz.2.19'. [ 95.553015][ T5967] [U] [ 95.555798][ T5967] [U] [ 95.558560][ T5967] [U] [ 95.561329][ T5967] [U] [ 95.573250][ T5967] [U] [ 95.576032][ T5967] [U] [ 95.578878][ T5967] [U] [ 95.581696][ T5967] [U] [ 95.613259][ T5980] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 95.630620][ T5967] [U] [ 95.633401][ T5967] [U] [ 95.636166][ T5967] [U] [ 95.638931][ T5967] [U] [ 95.650206][ T5967] [U] [ 95.653001][ T5967] [U] [ 95.655762][ T5967] [U] [ 95.658522][ T5967] [U] [ 95.659059][ T5980] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 95.676985][ T5967] [U] [ 95.679772][ T5967] [U] [ 95.682542][ T5967] [U] [ 95.685308][ T5967] [U] [ 95.721706][ T5967] [U] [ 95.724521][ T5967] [U] [ 95.727286][ T5967] [U] [ 95.730050][ T5967] [U] [ 95.800672][ T5967] [U] [ 95.803562][ T5967] [U] [ 95.806345][ T5967] [U] [ 95.809111][ T5967] [U] [ 95.866667][ T5967] [U] [ 95.869460][ T5967] [U] [ 95.872229][ T5967] [U] [ 95.874974][ T5967] [U] [ 95.879495][ T5967] [U] [ 95.882267][ T5967] [U] [ 95.885021][ T5967] [U] [ 95.887793][ T5967] [U] [ 95.891735][ T5967] [U] [ 95.894503][ T5967] [U] [ 95.897266][ T5967] [U] [ 95.900040][ T5967] [U] [ 95.903869][ T5967] [U] [ 95.906641][ T5967] [U] [ 95.909416][ T5967] [U] [ 95.912163][ T5967] [U] [ 95.917996][ T5967] [U] [ 95.920778][ T5967] [U] [ 95.923554][ T5967] [U] [ 95.926302][ T5967] [U] [ 95.930130][ T5967] [U] [ 95.932888][ T5967] [U] [ 95.935645][ T5967] [U] [ 95.938415][ T5967] [U] [ 95.942655][ T5967] [U] [ 95.945429][ T5967] [U] [ 95.948205][ T5967] [U] [ 95.950965][ T5967] [U] [ 95.954736][ T5967] [U] [ 95.957507][ T5967] [U] [ 95.960282][ T5967] [U] [ 95.963052][ T5967] [U] [ 95.977994][ T5967] [U] [ 96.461167][ T5980] syz.1.18 (5980) used greatest stack depth: 21552 bytes left [ 96.730403][ T5989] Zero length message leads to an empty skb [ 99.150502][ T6031] netlink: 28 bytes leftover after parsing attributes in process `syz.1.30'. [ 99.549339][ T6024] kAFS: No cell specified [ 99.711753][ T6041] netlink: 28 bytes leftover after parsing attributes in process `syz.3.32'. [ 99.757680][ T6032] syz.1.30 (6032) used greatest stack depth: 21432 bytes left [ 100.214384][ T6041] mac80211_hwsim hwsim5 wlan0: entered allmulticast mode [ 100.265627][ T6045] sctp: failed to load transform for md5: -4 [ 100.830206][ T6060] syz.2.35 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 105.564992][ T6114] netlink: 28 bytes leftover after parsing attributes in process `syz.0.50'. [ 106.697504][ T6114] mac80211_hwsim hwsim7 wlan0: entered allmulticast mode [ 107.074332][ T6124] netlink: 28 bytes leftover after parsing attributes in process `syz.0.52'. [ 107.823559][ T6129] kAFS: No cell specified [ 110.853929][ T6177] netlink: 28 bytes leftover after parsing attributes in process `syz.1.62'. [ 111.137156][ T6177] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode [ 111.302543][ T6183] netlink: 28 bytes leftover after parsing attributes in process `syz.3.63'. [ 112.376852][ T6190] kAFS: No cell specified [ 118.222393][ T6240] kAFS: No cell specified [ 122.015663][ T6296] netlink: 8 bytes leftover after parsing attributes in process `syz.1.95'. [ 123.993925][ T6317] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 124.038142][ T6317] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 125.035735][ T6333] netlink: 8 bytes leftover after parsing attributes in process `syz.3.104'. [ 125.477697][ T6344] [U]  [ 125.480690][ T6344] [U] [ 125.483475][ T6344] [U] [ 125.486239][ T6344] [U] [ 125.515630][ T6344] [U] [ 125.518456][ T6344] [U] [ 125.521226][ T6344] [U] [ 125.523984][ T6344] [U] [ 125.556091][ T6344] [U] [ 125.558893][ T6344] [U] [ 125.561647][ T6344] [U] [ 125.564406][ T6344] [U] [ 125.596966][ T6344] [U] [ 125.599760][ T6344] [U] [ 125.602522][ T6344] [U] [ 125.605278][ T6344] [U] [ 125.609291][ T6344] [U] [ 125.612073][ T6344] [U] [ 125.614828][ T6344] [U] [ 125.617585][ T6344] [U] [ 125.636339][ T6344] [U] [ 125.639162][ T6344] [U] [ 125.641925][ T6344] [U] [ 125.644685][ T6344] [U] [ 125.664006][ T6344] [U] [ 125.666802][ T6344] [U] [ 125.669562][ T6344] [U] [ 125.672317][ T6344] [U] [ 125.698254][ T6344] [U] [ 125.701069][ T6344] [U] [ 125.703825][ T6344] [U] [ 125.706580][ T6344] [U] [ 125.735133][ T6344] [U] [ 125.737931][ T6344] [U] [ 125.740688][ T6344] [U] [ 125.743446][ T6344] [U] [ 125.756434][ T6344] [U] [ 125.759219][ T6344] [U] [ 125.761992][ T6344] [U] [ 125.764740][ T6344] [U] [ 125.781937][ T6344] [U] [ 125.784730][ T6344] [U] [ 125.787493][ T6344] [U] [ 125.790238][ T6344] [U] [ 125.804515][ T6344] [U] [ 125.807379][ T6344] [U] [ 125.810140][ T6344] [U] [ 125.812918][ T6344] [U] [ 125.822320][ T6344] [U] [ 125.825100][ T6344] [U] [ 125.827851][ T6344] [U] [ 125.830615][ T6344] [U] [ 125.844291][ T6344] [U] [ 125.847086][ T6344] [U] [ 125.849837][ T6344] [U] [ 125.852587][ T6344] [U] [ 125.866527][ T6344] [U] [ 125.869328][ T6344] [U] [ 125.872089][ T6344] [U] [ 125.874850][ T6344] [U] [ 125.900607][ T6344] [U] [ 125.903408][ T6344] [U] [ 125.906170][ T6344] [U] [ 125.908945][ T6344] [U] [ 125.931650][ T6344] [U] [ 125.934444][ T6344] [U] [ 125.937209][ T6344] [U] [ 125.939990][ T6344] [U] [ 125.958079][ T6344] [U] [ 125.960873][ T6344] [U] [ 125.963807][ T6344] [U] [ 125.966575][ T6344] [U] [ 125.983950][ T6344] [U] [ 125.986750][ T6344] [U] [ 125.989515][ T6344] [U] [ 125.992271][ T6344] [U] [ 126.024469][ T6344] [U] [ 126.027269][ T6344] [U] [ 126.030029][ T6344] [U] [ 126.032798][ T6344] [U] [ 126.066023][ T6344] [U] [ 126.068906][ T6344] [U] [ 126.071662][ T6344] [U] [ 126.074426][ T6344] [U] [ 126.110880][ T6344] [U] [ 126.113679][ T6344] [U] [ 126.116439][ T6344] [U] [ 126.119193][ T6344] [U] [ 126.186167][ T6344] [U] [ 126.188967][ T6344] [U] [ 126.191726][ T6344] [U] [ 126.194487][ T6344] [U] [ 126.319285][ T6344] [U] [ 126.322100][ T6344] [U] [ 126.324857][ T6344] [U] [ 126.327612][ T6344] [U] [ 126.393736][ T6344] [U] [ 126.396535][ T6344] [U] [ 126.399301][ T6344] [U] [ 126.402054][ T6344] [U] [ 126.491249][ T6344] [U] [ 126.494051][ T6344] [U] [ 126.496807][ T6344] [U] [ 126.499570][ T6344] [U] [ 126.531887][ T6344] [U] [ 127.391120][ T6369] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 127.425438][ T6369] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 128.607915][ T6378] kernel read not supported for file /#)-\&[} (pid: 6378 comm: syz.2.115) [ 128.679377][ T30] audit: type=1800 audit(1734369916.177:3): pid=6378 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.115" name="#)-\&[}" dev="mqueue" ino=9511 res=0 errno=0 [ 131.891327][ T6409] netlink: 28 bytes leftover after parsing attributes in process `syz.2.124'. [ 131.900439][ T6409] veth1_macvtap: entered allmulticast mode [ 131.974036][ T6409] netlink: 'syz.2.124': attribute type 29 has an invalid length. [ 131.981886][ T6409] netlink: 334 bytes leftover after parsing attributes in process `syz.2.124'. [ 132.076458][ T6414] [U]  [ 132.079436][ T6414] [U] [ 132.082192][ T6414] [U] [ 132.084950][ T6414] [U] [ 132.114555][ T6414] [U] [ 132.117436][ T6414] [U] [ 132.120187][ T6414] [U] [ 132.122944][ T6414] [U] [ 132.178077][ T6414] [U] [ 132.180989][ T6414] [U] [ 132.183757][ T6414] [U] [ 132.186533][ T6414] [U] [ 132.255711][ T6414] [U] [ 132.258511][ T6414] [U] [ 132.261277][ T6414] [U] [ 132.264028][ T6414] [U] [ 132.326344][ T6414] [U] [ 132.329133][ T6414] [U] [ 132.331894][ T6414] [U] [ 132.334654][ T6414] [U] [ 132.435693][ T6414] [U] [ 132.438498][ T6414] [U] [ 132.441262][ T6414] [U] [ 132.444021][ T6414] [U] [ 132.515825][ T6414] [U] [ 132.518626][ T6414] [U] [ 132.521395][ T6414] [U] [ 132.524144][ T6414] [U] [ 132.581741][ T6414] [U] [ 132.584530][ T6414] [U] [ 132.587285][ T6414] [U] [ 132.590039][ T6414] [U] [ 132.655674][ T6414] [U] [ 132.658562][ T6414] [U] [ 132.661322][ T6414] [U] [ 132.664074][ T6414] [U] [ 132.685714][ T6414] [U] [ 132.688510][ T6414] [U] [ 132.691265][ T6414] [U] [ 132.694018][ T6414] [U] [ 132.726222][ T6414] [U] [ 132.729023][ T6414] [U] [ 132.731781][ T6414] [U] [ 132.734535][ T6414] [U] [ 132.775710][ T6414] [U] [ 132.778501][ T6414] [U] [ 132.781257][ T6414] [U] [ 132.784009][ T6414] [U] [ 132.815818][ T6414] [U] [ 132.818630][ T6414] [U] [ 132.821389][ T6414] [U] [ 132.824147][ T6414] [U] [ 132.875640][ T6414] [U] [ 132.878437][ T6414] [U] [ 132.881200][ T6414] [U] [ 132.883955][ T6414] [U] [ 132.906063][ T6414] [U] [ 132.908849][ T6414] [U] [ 132.911606][ T6414] [U] [ 132.914357][ T6414] [U] [ 132.955613][ T6414] [U] [ 132.958413][ T6414] [U] [ 132.961161][ T6414] [U] [ 132.963915][ T6414] [U] [ 133.005392][ T6414] [U] [ 133.436990][ T6422] kernel read not supported for file /#)-\&[} (pid: 6422 comm: syz.3.126) [ 133.455682][ T30] audit: type=1800 audit(1734369920.957:4): pid=6422 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.126" name="#)-\&[}" dev="mqueue" ino=10749 res=0 errno=0 [ 136.953573][ T6465] [U]  [ 136.956558][ T6465] [U] [ 136.959332][ T6465] [U] [ 136.962104][ T6465] [U] [ 137.024383][ T6465] [U] [ 137.027196][ T6465] [U] [ 137.029969][ T6465] [U] [ 137.032742][ T6465] [U] [ 137.118049][ T6465] [U] [ 137.120861][ T6465] [U] [ 137.123628][ T6465] [U] [ 137.126391][ T6465] [U] [ 137.175837][ T6465] [U] [ 137.178732][ T6465] [U] [ 137.181496][ T6465] [U] [ 137.184253][ T6465] [U] [ 137.245793][ T6465] [U] [ 137.248606][ T6465] [U] [ 137.251367][ T6465] [U] [ 137.254134][ T6465] [U] [ 137.285721][ T6465] [U] [ 137.288517][ T6465] [U] [ 137.291274][ T6465] [U] [ 137.294043][ T6465] [U] [ 137.306398][ T6465] [U] [ 137.309276][ T6465] [U] [ 137.312034][ T6465] [U] [ 137.314789][ T6465] [U] [ 137.326237][ T6465] [U] [ 137.329027][ T6465] [U] [ 137.331799][ T6465] [U] [ 137.334553][ T6465] [U] [ 137.345882][ T6465] [U] [ 137.348679][ T6465] [U] [ 137.351440][ T6465] [U] [ 137.354201][ T6465] [U] [ 137.366273][ T6465] [U] [ 137.369057][ T6465] [U] [ 137.371815][ T6465] [U] [ 137.374576][ T6465] [U] [ 137.412346][ T6465] [U] [ 137.415147][ T6465] [U] [ 137.417923][ T6465] [U] [ 137.420686][ T6465] [U] [ 137.485726][ T6465] [U] [ 137.488557][ T6465] [U] [ 137.491330][ T6465] [U] [ 137.494102][ T6465] [U] [ 137.571068][ T6465] [U] [ 137.573876][ T6465] [U] [ 137.576659][ T6465] [U] [ 137.579443][ T6465] [U] [ 137.640371][ T6465] [U] [ 137.643186][ T6465] [U] [ 137.645963][ T6465] [U] [ 137.648727][ T6465] [U] [ 137.687468][ T6468] netlink: 28 bytes leftover after parsing attributes in process `syz.3.139'. [ 137.701912][ T6465] [U] [ 137.704705][ T6465] [U] [ 137.707460][ T6465] [U] [ 137.710213][ T6465] [U] [ 137.732577][ T6468] veth1_macvtap: entered allmulticast mode [ 137.744918][ T6465] [U] [ 137.747709][ T6465] [U] [ 137.750469][ T6465] [U] [ 137.753233][ T6465] [U] [ 137.823558][ T6465] [U] [ 137.826364][ T6465] [U] [ 137.829125][ T6465] [U] [ 137.831880][ T6465] [U] [ 137.875492][ T6465] [U] [ 138.027260][ T6468] netlink: 'syz.3.139': attribute type 29 has an invalid length. [ 138.035069][ T6468] netlink: 334 bytes leftover after parsing attributes in process `syz.3.139'. [ 138.211899][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.219782][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 138.498027][ T6482] kernel read not supported for file /#)-\&[} (pid: 6482 comm: syz.0.140) [ 138.524022][ T30] audit: type=1800 audit(1734369926.017:5): pid=6482 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.140" name="#)-\&[}" dev="mqueue" ino=9755 res=0 errno=0 [ 140.342243][ T6505] can: request_module (can-proto-5) failed. [ 140.391767][ T6508] lo: entered allmulticast mode [ 140.495453][ T6505] lo: left allmulticast mode [ 142.106033][ T6521] netlink: 28 bytes leftover after parsing attributes in process `syz.1.154'. [ 142.201590][ T6521] veth1_macvtap: entered allmulticast mode [ 143.306760][ T6521] netlink: 'syz.1.154': attribute type 29 has an invalid length. [ 143.354572][ T6521] netlink: 334 bytes leftover after parsing attributes in process `syz.1.154'. [ 143.851569][ T6569] can: request_module (can-proto-5) failed. [ 143.852597][ T6571] lo: entered allmulticast mode [ 143.952196][ T6571] lo: left allmulticast mode [ 146.774921][ T6613] scsi_dev_info_list_add_str: bad dev info string 'æÃA…w‰w’ñÓö»ýŒ¬uX%Q›‡þcûQœ-‹Ô1j©àbþìÙq+Ïù´ÒÖ2/´¢W¥' '' '' [ 153.291085][ T6703] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 153.426225][ T6703] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 154.775980][ T6727] Invalid ELF header magic: != ELF [ 156.033786][ T6755] FAULT_INJECTION: forcing a failure. [ 156.033786][ T6755] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 156.049268][ T6755] CPU: 1 UID: 0 PID: 6755 Comm: syz.1.218 Not tainted 6.13.0-rc3-syzkaller #0 [ 156.058201][ T6755] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 156.068307][ T6755] Call Trace: [ 156.071616][ T6755] [ 156.074583][ T6755] dump_stack_lvl+0x16c/0x1f0 [ 156.079335][ T6755] should_fail_ex+0x497/0x5b0 [ 156.084083][ T6755] _copy_from_user+0x2e/0xd0 [ 156.088733][ T6755] copy_msghdr_from_user+0x99/0x160 [ 156.093995][ T6755] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 156.099859][ T6755] ? __lock_acquire+0xcc5/0x3c40 [ 156.104882][ T6755] ___sys_sendmsg+0xff/0x1e0 [ 156.109540][ T6755] ? __pfx____sys_sendmsg+0x10/0x10 [ 156.114824][ T6755] ? trace_lock_acquire+0x14e/0x1f0 [ 156.120115][ T6755] __sys_sendmmsg+0x201/0x420 [ 156.124880][ T6755] ? __pfx___sys_sendmmsg+0x10/0x10 [ 156.130151][ T6755] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 156.136226][ T6755] ? fput+0x67/0x440 [ 156.140219][ T6755] ? ksys_write+0x1ba/0x250 [ 156.144780][ T6755] ? __pfx_ksys_write+0x10/0x10 [ 156.149686][ T6755] __x64_sys_sendmmsg+0x9c/0x100 [ 156.154664][ T6755] ? lockdep_hardirqs_on+0x7c/0x110 [ 156.159891][ T6755] do_syscall_64+0xcd/0x250 [ 156.164421][ T6755] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 156.170343][ T6755] RIP: 0033:0x7f34b2985d19 [ 156.174788][ T6755] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 156.194432][ T6755] RSP: 002b:00007f34b3756038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 156.202871][ T6755] RAX: ffffffffffffffda RBX: 00007f34b2b75fa0 RCX: 00007f34b2985d19 [ 156.210861][ T6755] RDX: 0000000000000200 RSI: 0000000020000040 RDI: 0000000000000003 [ 156.218855][ T6755] RBP: 00007f34b3756090 R08: 0000000000000000 R09: 0000000000000000 [ 156.226850][ T6755] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 156.234839][ T6755] R13: 0000000000000000 R14: 00007f34b2b75fa0 R15: 00007ffcf6efdd58 [ 156.242931][ T6755] [ 156.339756][ T6763] capability: warning: `syz.3.220' uses 32-bit capabilities (legacy support in use) [ 158.206214][ T6799] FAULT_INJECTION: forcing a failure. [ 158.206214][ T6799] name failslab, interval 1, probability 0, space 0, times 1 [ 158.265399][ T6799] CPU: 0 UID: 0 PID: 6799 Comm: syz.1.232 Not tainted 6.13.0-rc3-syzkaller #0 [ 158.274333][ T6799] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 158.284433][ T6799] Call Trace: [ 158.287743][ T6799] [ 158.290705][ T6799] dump_stack_lvl+0x16c/0x1f0 [ 158.295443][ T6799] should_fail_ex+0x497/0x5b0 [ 158.300194][ T6799] ? fs_reclaim_acquire+0xae/0x150 [ 158.305362][ T6799] should_failslab+0xc2/0x120 [ 158.310119][ T6799] __kmalloc_noprof+0xce/0x4f0 [ 158.314958][ T6799] ? find_held_lock+0x2d/0x110 [ 158.319779][ T6799] ? iovec_from_user.part.0+0xf3/0x130 [ 158.325302][ T6799] iovec_from_user.part.0+0xf3/0x130 [ 158.330656][ T6799] __import_iovec+0xd6/0x6d0 [ 158.335324][ T6799] import_iovec+0x108/0x140 [ 158.339897][ T6799] copy_msghdr_from_user+0xfa/0x160 [ 158.345159][ T6799] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 158.351032][ T6799] ? __lock_acquire+0xcc5/0x3c40 [ 158.356055][ T6799] ___sys_sendmsg+0xff/0x1e0 [ 158.360715][ T6799] ? __pfx____sys_sendmsg+0x10/0x10 [ 158.365982][ T6799] ? trace_lock_acquire+0x14e/0x1f0 [ 158.371258][ T6799] __sys_sendmmsg+0x201/0x420 [ 158.375997][ T6799] ? __pfx___sys_sendmmsg+0x10/0x10 [ 158.381270][ T6799] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 158.387319][ T6799] ? fput+0x67/0x440 [ 158.391277][ T6799] ? ksys_write+0x1ba/0x250 [ 158.395835][ T6799] ? __pfx_ksys_write+0x10/0x10 [ 158.400746][ T6799] __x64_sys_sendmmsg+0x9c/0x100 [ 158.405746][ T6799] ? lockdep_hardirqs_on+0x7c/0x110 [ 158.411012][ T6799] do_syscall_64+0xcd/0x250 [ 158.415577][ T6799] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 158.421526][ T6799] RIP: 0033:0x7f34b2985d19 [ 158.425975][ T6799] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 158.445628][ T6799] RSP: 002b:00007f34b3756038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 158.454118][ T6799] RAX: ffffffffffffffda RBX: 00007f34b2b75fa0 RCX: 00007f34b2985d19 [ 158.462140][ T6799] RDX: 0000000000000200 RSI: 0000000020000040 RDI: 0000000000000003 [ 158.470153][ T6799] RBP: 00007f34b3756090 R08: 0000000000000000 R09: 0000000000000000 [ 158.478167][ T6799] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 158.486217][ T6799] R13: 0000000000000000 R14: 00007f34b2b75fa0 R15: 00007ffcf6efdd58 [ 158.494247][ T6799] [ 161.518980][ T6837] FAULT_INJECTION: forcing a failure. [ 161.518980][ T6837] name failslab, interval 1, probability 0, space 0, times 0 [ 161.605368][ T6837] CPU: 0 UID: 0 PID: 6837 Comm: syz.2.244 Not tainted 6.13.0-rc3-syzkaller #0 [ 161.614307][ T6837] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 161.624413][ T6837] Call Trace: [ 161.627731][ T6837] [ 161.630700][ T6837] dump_stack_lvl+0x16c/0x1f0 [ 161.635435][ T6837] should_fail_ex+0x497/0x5b0 [ 161.640170][ T6837] ? fs_reclaim_acquire+0xae/0x150 [ 161.645343][ T6837] should_failslab+0xc2/0x120 [ 161.650082][ T6837] kmem_cache_alloc_node_noprof+0x72/0x3b0 [ 161.655950][ T6837] ? hlock_class+0x4e/0x130 [ 161.660518][ T6837] ? __alloc_skb+0x2b3/0x380 [ 161.665179][ T6837] __alloc_skb+0x2b3/0x380 [ 161.669660][ T6837] ? __pfx___alloc_skb+0x10/0x10 [ 161.674681][ T6837] alloc_skb_with_frags+0xe4/0x850 [ 161.679867][ T6837] ? __pfx___lock_acquire+0x10/0x10 [ 161.685154][ T6837] sock_alloc_send_pskb+0x7f1/0x980 [ 161.690401][ T6837] ? find_held_lock+0x2d/0x110 [ 161.695207][ T6837] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 161.700974][ T6837] ? hlock_class+0x4e/0x130 [ 161.705509][ T6837] ? mark_lock+0xb5/0xc60 [ 161.709877][ T6837] ? hlock_class+0x4e/0x130 [ 161.714417][ T6837] ? hlock_class+0x4e/0x130 [ 161.718956][ T6837] ? __pfx_mark_lock+0x10/0x10 [ 161.723774][ T6837] __ip_append_data+0x19c7/0x4160 [ 161.728883][ T6837] ? find_held_lock+0x2d/0x110 [ 161.733699][ T6837] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 161.739315][ T6837] ? ip_dst_mtu_maybe_forward.constprop.0+0x274/0x4c0 [ 161.746127][ T6837] ? __pfx___ip_append_data+0x10/0x10 [ 161.751544][ T6837] ip_make_skb+0x27d/0x300 [ 161.756007][ T6837] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 161.761591][ T6837] ? __pfx_ip_make_skb+0x10/0x10 [ 161.766580][ T6837] ? udp_sendmsg+0x185d/0x29b0 [ 161.771382][ T6837] udp_sendmsg+0x185d/0x29b0 [ 161.776016][ T6837] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 161.781612][ T6837] ? __pfx_udp_sendmsg+0x10/0x10 [ 161.786610][ T6837] ? irqentry_exit+0x3b/0x90 [ 161.791248][ T6837] ? copy_iovec_from_user+0x82/0x170 [ 161.796574][ T6837] ? __pfx___might_resched+0x10/0x10 [ 161.801897][ T6837] ? aa_sk_perm+0x2f5/0xb20 [ 161.806460][ T6837] ? __pfx_udp_sendmsg+0x10/0x10 [ 161.811439][ T6837] inet_sendmsg+0x105/0x140 [ 161.815978][ T6837] ____sys_sendmsg+0x907/0xb40 [ 161.820779][ T6837] ? copy_msghdr_from_user+0x10b/0x160 [ 161.826280][ T6837] ? __pfx_____sys_sendmsg+0x10/0x10 [ 161.831597][ T6837] ? __lock_acquire+0xcc5/0x3c40 [ 161.836599][ T6837] ___sys_sendmsg+0x135/0x1e0 [ 161.841322][ T6837] ? __pfx____sys_sendmsg+0x10/0x10 [ 161.846575][ T6837] ? trace_lock_acquire+0x14e/0x1f0 [ 161.851829][ T6837] __sys_sendmmsg+0x201/0x420 [ 161.856552][ T6837] ? __pfx___sys_sendmmsg+0x10/0x10 [ 161.861804][ T6837] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 161.867838][ T6837] ? fput+0x67/0x440 [ 161.871787][ T6837] ? ksys_write+0x1ba/0x250 [ 161.876327][ T6837] ? __pfx_ksys_write+0x10/0x10 [ 161.881218][ T6837] __x64_sys_sendmmsg+0x9c/0x100 [ 161.886198][ T6837] ? lockdep_hardirqs_on+0x7c/0x110 [ 161.891430][ T6837] do_syscall_64+0xcd/0x250 [ 161.895971][ T6837] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 161.901898][ T6837] RIP: 0033:0x7f67acf85d19 [ 161.906349][ T6837] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 161.926016][ T6837] RSP: 002b:00007f67ade93038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 161.934456][ T6837] RAX: ffffffffffffffda RBX: 00007f67ad175fa0 RCX: 00007f67acf85d19 [ 161.942447][ T6837] RDX: 0000000000000200 RSI: 0000000020000040 RDI: 0000000000000003 [ 161.950438][ T6837] RBP: 00007f67ade93090 R08: 0000000000000000 R09: 0000000000000000 [ 161.958429][ T6837] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 161.966421][ T6837] R13: 0000000000000000 R14: 00007f67ad175fa0 R15: 00007ffd35e924b8 [ 161.974427][ T6837] [ 163.323787][ T6874] netlink: 'syz.2.254': attribute type 11 has an invalid length. [ 163.630861][ T6881] openvswitch: netlink: push_nsh: missing base or metadata attributes [ 166.093322][ T6932] netlink: 7 bytes leftover after parsing attributes in process `syz.1.271'. [ 166.103153][ T6932] netlink: 10 bytes leftover after parsing attributes in process `syz.1.271'. [ 166.113450][ T6932] netlink: 7 bytes leftover after parsing attributes in process `syz.1.271'. [ 166.955154][ T6947] FAULT_INJECTION: forcing a failure. [ 166.955154][ T6947] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 166.977895][ T6947] CPU: 0 UID: 0 PID: 6947 Comm: syz.0.277 Not tainted 6.13.0-rc3-syzkaller #0 [ 166.986821][ T6947] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 166.996907][ T6947] Call Trace: [ 167.000199][ T6947] [ 167.003142][ T6947] dump_stack_lvl+0x16c/0x1f0 [ 167.007855][ T6947] should_fail_ex+0x497/0x5b0 [ 167.012564][ T6947] ? fs_reclaim_acquire+0xae/0x150 [ 167.017703][ T6947] should_fail_alloc_page+0xe7/0x130 [ 167.023022][ T6947] prepare_alloc_pages.constprop.0+0x16f/0x560 [ 167.029219][ T6947] __alloc_pages_noprof+0x190/0x25b0 [ 167.034541][ T6947] ? __pfx___lock_acquire+0x10/0x10 [ 167.039783][ T6947] ? hlock_class+0x4e/0x130 [ 167.044317][ T6947] ? mark_lock+0xb5/0xc60 [ 167.048682][ T6947] ? __pfx___lock_acquire+0x10/0x10 [ 167.053926][ T6947] ? __pfx_mark_lock+0x10/0x10 [ 167.058730][ T6947] ? __pfx___alloc_pages_noprof+0x10/0x10 [ 167.064489][ T6947] ? is_bpf_text_address+0x8a/0x1a0 [ 167.069724][ T6947] ? hlock_class+0x4e/0x130 [ 167.074257][ T6947] ? is_bpf_text_address+0x30/0x1a0 [ 167.079496][ T6947] ? hlock_class+0x4e/0x130 [ 167.084039][ T6947] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 167.089974][ T6947] ? policy_nodemask+0xea/0x4e0 [ 167.094864][ T6947] alloc_pages_mpol_noprof+0x2c9/0x610 [ 167.100361][ T6947] ? __pfx_alloc_pages_mpol_noprof+0x10/0x10 [ 167.106383][ T6947] ? __pfx___lock_acquire+0x10/0x10 [ 167.111649][ T6947] pte_alloc_one+0x20/0x390 [ 167.116182][ T6947] do_pte_missing+0x1ae7/0x3e00 [ 167.121072][ T6947] __handle_mm_fault+0x103c/0x2a40 [ 167.126244][ T6947] ? __pfx___handle_mm_fault+0x10/0x10 [ 167.131734][ T6947] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 167.137427][ T6947] ? find_vma+0xc0/0x140 [ 167.141704][ T6947] ? __pfx_find_vma+0x10/0x10 [ 167.146405][ T6947] handle_mm_fault+0x3fa/0xaa0 [ 167.151208][ T6947] do_user_addr_fault+0x7a3/0x13f0 [ 167.156352][ T6947] exc_page_fault+0x5c/0xc0 [ 167.160915][ T6947] asm_exc_page_fault+0x26/0x30 [ 167.165803][ T6947] RIP: 0010:rep_movs_alternative+0x13/0x70 [ 167.171647][ T6947] Code: cc cc cc 0f 1f 40 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 83 f9 40 73 40 83 f9 08 73 21 85 c9 74 0f <8a> 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 c3 cc cc cc cc 66 0f [ 167.191317][ T6947] RSP: 0018:ffffc900199df248 EFLAGS: 00050202 [ 167.197411][ T6947] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 0000000000000001 [ 167.205396][ T6947] RDX: ffffed100fafe006 RSI: 0000000000000000 RDI: ffff88807d7f002c [ 167.213390][ T6947] RBP: ffff888061b0c000 R08: 0000000000000001 R09: ffffed100fafe005 [ 167.221386][ T6947] R10: ffff88807d7f002c R11: 0000000000000000 R12: 0000000000000001 [ 167.229413][ T6947] R13: ffff88807d7f002c R14: 0000000000000000 R15: 0000000000000015 [ 167.237426][ T6947] _copy_from_iter+0x52f/0x1400 [ 167.242319][ T6947] ? __pfx__copy_from_iter+0x10/0x10 [ 167.247638][ T6947] ? __virt_addr_valid+0x1a4/0x590 [ 167.252794][ T6947] ? __virt_addr_valid+0x5e/0x590 [ 167.257854][ T6947] ? __phys_addr_symbol+0x30/0x80 [ 167.262910][ T6947] ? __check_object_size+0x488/0x710 [ 167.268282][ T6947] ip_generic_getfrag+0xfb/0x260 [ 167.273261][ T6947] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 167.278845][ T6947] ? hlock_class+0x4e/0x130 [ 167.283388][ T6947] ? __pfx_mark_lock+0x10/0x10 [ 167.288224][ T6947] __ip_append_data+0x1c51/0x4160 [ 167.293301][ T6947] ? find_held_lock+0x2d/0x110 [ 167.298105][ T6947] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 167.303696][ T6947] ? ip_dst_mtu_maybe_forward.constprop.0+0x274/0x4c0 [ 167.310501][ T6947] ? __pfx___ip_append_data+0x10/0x10 [ 167.315912][ T6947] ip_make_skb+0x27d/0x300 [ 167.320368][ T6947] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 167.325959][ T6947] ? __pfx_ip_make_skb+0x10/0x10 [ 167.330946][ T6947] ? udp_sendmsg+0x185d/0x29b0 [ 167.335756][ T6947] udp_sendmsg+0x185d/0x29b0 [ 167.340411][ T6947] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 167.346022][ T6947] ? __pfx_udp_sendmsg+0x10/0x10 [ 167.351089][ T6947] ? irqentry_exit+0x3b/0x90 [ 167.355721][ T6947] ? copy_iovec_from_user+0x82/0x170 [ 167.361035][ T6947] ? __pfx___might_resched+0x10/0x10 [ 167.366367][ T6947] ? aa_sk_perm+0x2f5/0xb20 [ 167.371009][ T6947] ? __pfx_udp_sendmsg+0x10/0x10 [ 167.375986][ T6947] inet_sendmsg+0x105/0x140 [ 167.380510][ T6947] ____sys_sendmsg+0x907/0xb40 [ 167.385300][ T6947] ? copy_msghdr_from_user+0x10b/0x160 [ 167.390805][ T6947] ? __pfx_____sys_sendmsg+0x10/0x10 [ 167.396116][ T6947] ? __lock_acquire+0xcc5/0x3c40 [ 167.401134][ T6947] ___sys_sendmsg+0x135/0x1e0 [ 167.405848][ T6947] ? __pfx____sys_sendmsg+0x10/0x10 [ 167.411089][ T6947] ? trace_lock_acquire+0x14e/0x1f0 [ 167.416341][ T6947] __sys_sendmmsg+0x201/0x420 [ 167.421053][ T6947] ? __pfx___sys_sendmmsg+0x10/0x10 [ 167.426292][ T6947] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 167.432307][ T6947] ? fput+0x67/0x440 [ 167.436235][ T6947] ? ksys_write+0x1ba/0x250 [ 167.440762][ T6947] ? __pfx_ksys_write+0x10/0x10 [ 167.445639][ T6947] __x64_sys_sendmmsg+0x9c/0x100 [ 167.450610][ T6947] ? lockdep_hardirqs_on+0x7c/0x110 [ 167.455835][ T6947] do_syscall_64+0xcd/0x250 [ 167.460399][ T6947] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 167.466340][ T6947] RIP: 0033:0x7f7840f85d19 [ 167.470782][ T6947] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 167.490429][ T6947] RSP: 002b:00007f7841cea038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 167.498878][ T6947] RAX: ffffffffffffffda RBX: 00007f7841175fa0 RCX: 00007f7840f85d19 [ 167.506873][ T6947] RDX: 0000000000000200 RSI: 0000000020000040 RDI: 0000000000000003 [ 167.514951][ T6947] RBP: 00007f7841cea090 R08: 0000000000000000 R09: 0000000000000000 [ 167.522945][ T6947] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 167.530937][ T6947] R13: 0000000000000000 R14: 00007f7841175fa0 R15: 00007fff10b88bc8 [ 167.538948][ T6947] [ 168.615174][ T6977] FAULT_INJECTION: forcing a failure. [ 168.615174][ T6977] name failslab, interval 1, probability 0, space 0, times 0 [ 168.629039][ T6977] CPU: 1 UID: 0 PID: 6977 Comm: syz.2.287 Not tainted 6.13.0-rc3-syzkaller #0 [ 168.637952][ T6977] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 168.648045][ T6977] Call Trace: [ 168.651347][ T6977] [ 168.654305][ T6977] dump_stack_lvl+0x16c/0x1f0 [ 168.659037][ T6977] should_fail_ex+0x497/0x5b0 [ 168.663773][ T6977] ? fs_reclaim_acquire+0xae/0x150 [ 168.668946][ T6977] should_failslab+0xc2/0x120 [ 168.673690][ T6977] kmem_cache_alloc_noprof+0x6e/0x3b0 [ 168.679130][ T6977] ? ptlock_alloc+0x1f/0x70 [ 168.683700][ T6977] ptlock_alloc+0x1f/0x70 [ 168.688088][ T6977] pte_alloc_one+0x74/0x390 [ 168.692640][ T6977] do_pte_missing+0x1ae7/0x3e00 [ 168.697561][ T6977] __handle_mm_fault+0x103c/0x2a40 [ 168.702714][ T6977] ? __pfx___handle_mm_fault+0x10/0x10 [ 168.708223][ T6977] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 168.713922][ T6977] ? find_vma+0xc0/0x140 [ 168.718207][ T6977] ? __pfx_find_vma+0x10/0x10 [ 168.722921][ T6977] handle_mm_fault+0x3fa/0xaa0 [ 168.727718][ T6977] do_user_addr_fault+0x7a3/0x13f0 [ 168.732855][ T6977] exc_page_fault+0x5c/0xc0 [ 168.737383][ T6977] asm_exc_page_fault+0x26/0x30 [ 168.742269][ T6977] RIP: 0010:rep_movs_alternative+0x13/0x70 [ 168.748113][ T6977] Code: cc cc cc 0f 1f 40 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 83 f9 40 73 40 83 f9 08 73 21 85 c9 74 0f <8a> 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 c3 cc cc cc cc 66 0f [ 168.767748][ T6977] RSP: 0018:ffffc90019927248 EFLAGS: 00050202 [ 168.773839][ T6977] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 0000000000000001 [ 168.781833][ T6977] RDX: ffffed1008083c26 RSI: 0000000000000000 RDI: ffff88804041e12c [ 168.789828][ T6977] RBP: ffff8880125bc000 R08: 0000000000000001 R09: ffffed1008083c25 [ 168.797813][ T6977] R10: ffff88804041e12c R11: 0000000000000000 R12: 0000000000000001 [ 168.805809][ T6977] R13: ffff88804041e12c R14: 0000000000000000 R15: 0000000000000015 [ 168.813814][ T6977] _copy_from_iter+0x52f/0x1400 [ 168.818724][ T6977] ? __pfx__copy_from_iter+0x10/0x10 [ 168.824047][ T6977] ? __virt_addr_valid+0x1a4/0x590 [ 168.829197][ T6977] ? __virt_addr_valid+0x5e/0x590 [ 168.834262][ T6977] ? __phys_addr_symbol+0x30/0x80 [ 168.839319][ T6977] ? __check_object_size+0x488/0x710 [ 168.844648][ T6977] ip_generic_getfrag+0xfb/0x260 [ 168.849632][ T6977] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 168.855214][ T6977] ? hlock_class+0x4e/0x130 [ 168.859765][ T6977] ? __pfx_mark_lock+0x10/0x10 [ 168.864573][ T6977] __ip_append_data+0x1c51/0x4160 [ 168.869643][ T6977] ? find_held_lock+0x2d/0x110 [ 168.874437][ T6977] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 168.880031][ T6977] ? ip_dst_mtu_maybe_forward.constprop.0+0x274/0x4c0 [ 168.886849][ T6977] ? __pfx___ip_append_data+0x10/0x10 [ 168.892272][ T6977] ip_make_skb+0x27d/0x300 [ 168.896730][ T6977] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 168.902315][ T6977] ? __pfx_ip_make_skb+0x10/0x10 [ 168.907310][ T6977] ? udp_sendmsg+0x185d/0x29b0 [ 168.912118][ T6977] udp_sendmsg+0x185d/0x29b0 [ 168.916741][ T6977] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 168.922314][ T6977] ? __pfx_udp_sendmsg+0x10/0x10 [ 168.927300][ T6977] ? irqentry_exit+0x3b/0x90 [ 168.931924][ T6977] ? copy_iovec_from_user+0x82/0x170 [ 168.937247][ T6977] ? __pfx___might_resched+0x10/0x10 [ 168.942561][ T6977] ? aa_sk_perm+0x2f5/0xb20 [ 168.947118][ T6977] ? __pfx_udp_sendmsg+0x10/0x10 [ 168.952091][ T6977] inet_sendmsg+0x105/0x140 [ 168.956614][ T6977] ____sys_sendmsg+0x907/0xb40 [ 168.961404][ T6977] ? copy_msghdr_from_user+0x10b/0x160 [ 168.966910][ T6977] ? __pfx_____sys_sendmsg+0x10/0x10 [ 168.972215][ T6977] ? __lock_acquire+0xcc5/0x3c40 [ 168.977203][ T6977] ___sys_sendmsg+0x135/0x1e0 [ 168.981915][ T6977] ? __pfx____sys_sendmsg+0x10/0x10 [ 168.987166][ T6977] ? trace_lock_acquire+0x14e/0x1f0 [ 168.992418][ T6977] __sys_sendmmsg+0x201/0x420 [ 168.997130][ T6977] ? __pfx___sys_sendmmsg+0x10/0x10 [ 169.002366][ T6977] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 169.008382][ T6977] ? fput+0x67/0x440 [ 169.012311][ T6977] ? ksys_write+0x1ba/0x250 [ 169.016833][ T6977] ? __pfx_ksys_write+0x10/0x10 [ 169.021709][ T6977] __x64_sys_sendmmsg+0x9c/0x100 [ 169.026676][ T6977] ? lockdep_hardirqs_on+0x7c/0x110 [ 169.031906][ T6977] do_syscall_64+0xcd/0x250 [ 169.036441][ T6977] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 169.042360][ T6977] RIP: 0033:0x7f67acf85d19 [ 169.046792][ T6977] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 169.066421][ T6977] RSP: 002b:00007f67ade93038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 169.074864][ T6977] RAX: ffffffffffffffda RBX: 00007f67ad175fa0 RCX: 00007f67acf85d19 [ 169.082869][ T6977] RDX: 0000000000000200 RSI: 0000000020000040 RDI: 0000000000000003 [ 169.090876][ T6977] RBP: 00007f67ade93090 R08: 0000000000000000 R09: 0000000000000000 [ 169.098869][ T6977] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 169.106862][ T6977] R13: 0000000000000000 R14: 00007f67ad175fa0 R15: 00007ffd35e924b8 [ 169.114874][ T6977] [ 169.517414][ T6982] openvswitch: netlink: ct_state flags 03001eac unsupported [ 169.632779][ T6987] Process accounting resumed [ 170.634862][ T7016] FAULT_INJECTION: forcing a failure. [ 170.634862][ T7016] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 170.650888][ T7016] CPU: 1 UID: 0 PID: 7016 Comm: syz.0.299 Not tainted 6.13.0-rc3-syzkaller #0 [ 170.659811][ T7016] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 170.669919][ T7016] Call Trace: [ 170.673236][ T7016] [ 170.676203][ T7016] dump_stack_lvl+0x16c/0x1f0 [ 170.680937][ T7016] should_fail_ex+0x497/0x5b0 [ 170.685712][ T7016] ? fs_reclaim_acquire+0xae/0x150 [ 170.690877][ T7016] should_fail_alloc_page+0xe7/0x130 [ 170.696228][ T7016] prepare_alloc_pages.constprop.0+0x16f/0x560 [ 170.702443][ T7016] __alloc_pages_noprof+0x190/0x25b0 [ 170.707797][ T7016] ? __pfx_mark_lock+0x10/0x10 [ 170.712636][ T7016] ? __pfx___lock_acquire+0x10/0x10 [ 170.717899][ T7016] ? mark_lock+0xb5/0xc60 [ 170.722297][ T7016] ? __pfx___alloc_pages_noprof+0x10/0x10 [ 170.728087][ T7016] ? hlock_class+0x4e/0x130 [ 170.732643][ T7016] ? __lock_acquire+0xcc5/0x3c40 [ 170.737657][ T7016] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 170.743612][ T7016] ? policy_nodemask+0xea/0x4e0 [ 170.748538][ T7016] alloc_pages_mpol_noprof+0x2c9/0x610 [ 170.754076][ T7016] ? __pfx_alloc_pages_mpol_noprof+0x10/0x10 [ 170.760132][ T7016] ? find_held_lock+0x2d/0x110 [ 170.765015][ T7016] folio_alloc_mpol_noprof+0x36/0xd0 [ 170.770377][ T7016] shmem_alloc_folio+0x135/0x160 [ 170.775385][ T7016] shmem_alloc_and_add_folio+0x48b/0xc00 [ 170.781083][ T7016] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 170.787038][ T7016] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 170.793246][ T7016] ? shmem_huge_global_enabled+0x176/0x250 [ 170.799132][ T7016] ? shmem_allowable_huge_orders+0xcd/0x3e0 [ 170.805095][ T7016] shmem_get_folio_gfp+0x689/0x1530 [ 170.810365][ T7016] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 170.816059][ T7016] ? filemap_map_pages+0xf92/0x16b0 [ 170.821377][ T7016] shmem_fault+0x200/0xae0 [ 170.825870][ T7016] ? __pfx_shmem_fault+0x10/0x10 [ 170.830869][ T7016] ? do_pte_missing+0xdd7/0x3e00 [ 170.835871][ T7016] ? __pfx_lock_release+0x10/0x10 [ 170.840949][ T7016] __do_fault+0x10a/0x490 [ 170.845325][ T7016] do_pte_missing+0xebd/0x3e00 [ 170.850173][ T7016] __handle_mm_fault+0x103c/0x2a40 [ 170.855348][ T7016] ? __pfx___handle_mm_fault+0x10/0x10 [ 170.860873][ T7016] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 170.866584][ T7016] ? find_vma+0xc0/0x140 [ 170.870883][ T7016] ? __pfx_find_vma+0x10/0x10 [ 170.875620][ T7016] handle_mm_fault+0x3fa/0xaa0 [ 170.880450][ T7016] do_user_addr_fault+0x7a3/0x13f0 [ 170.885616][ T7016] exc_page_fault+0x5c/0xc0 [ 170.890171][ T7016] asm_exc_page_fault+0x26/0x30 [ 170.895087][ T7016] RIP: 0010:rep_movs_alternative+0x13/0x70 [ 170.900964][ T7016] Code: cc cc cc 0f 1f 40 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 83 f9 40 73 40 83 f9 08 73 21 85 c9 74 0f <8a> 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 c3 cc cc cc cc 66 0f [ 170.920626][ T7016] RSP: 0018:ffffc90019927248 EFLAGS: 00050202 [ 170.926778][ T7016] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 0000000000000001 [ 170.934811][ T7016] RDX: ffffed10041d7126 RSI: 0000000000000000 RDI: ffff888020eb892c [ 170.942829][ T7016] RBP: ffff888027d70000 R08: 0000000000000001 R09: ffffed10041d7125 [ 170.950864][ T7016] R10: ffff888020eb892c R11: 0000000000000000 R12: 0000000000000001 [ 170.958900][ T7016] R13: ffff888020eb892c R14: 0000000000000000 R15: 0000000000000015 [ 170.966955][ T7016] _copy_from_iter+0x52f/0x1400 [ 170.971885][ T7016] ? __pfx__copy_from_iter+0x10/0x10 [ 170.977225][ T7016] ? __virt_addr_valid+0x1a4/0x590 [ 170.982389][ T7016] ? __virt_addr_valid+0x5e/0x590 [ 170.987469][ T7016] ? __phys_addr_symbol+0x30/0x80 [ 170.992543][ T7016] ? __check_object_size+0x488/0x710 [ 170.997892][ T7016] ip_generic_getfrag+0xfb/0x260 [ 171.002885][ T7016] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 171.008493][ T7016] ? hlock_class+0x4e/0x130 [ 171.013064][ T7016] ? __pfx_mark_lock+0x10/0x10 [ 171.017910][ T7016] __ip_append_data+0x1c51/0x4160 [ 171.023012][ T7016] ? find_held_lock+0x2d/0x110 [ 171.027830][ T7016] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 171.033455][ T7016] ? ip_dst_mtu_maybe_forward.constprop.0+0x274/0x4c0 [ 171.040304][ T7016] ? __pfx___ip_append_data+0x10/0x10 [ 171.045763][ T7016] ip_make_skb+0x27d/0x300 [ 171.050267][ T7016] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 171.055890][ T7016] ? __pfx_ip_make_skb+0x10/0x10 [ 171.060931][ T7016] ? udp_sendmsg+0x185d/0x29b0 [ 171.065759][ T7016] udp_sendmsg+0x185d/0x29b0 [ 171.070431][ T7016] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 171.076050][ T7016] ? __pfx_udp_sendmsg+0x10/0x10 [ 171.081074][ T7016] ? irqentry_exit+0x3b/0x90 [ 171.085750][ T7016] ? copy_iovec_from_user+0x82/0x170 [ 171.091116][ T7016] ? __pfx___might_resched+0x10/0x10 [ 171.096455][ T7016] ? aa_sk_perm+0x2f5/0xb20 [ 171.101033][ T7016] ? __pfx_udp_sendmsg+0x10/0x10 [ 171.106053][ T7016] inet_sendmsg+0x105/0x140 [ 171.110609][ T7016] ____sys_sendmsg+0x907/0xb40 [ 171.115425][ T7016] ? copy_msghdr_from_user+0x10b/0x160 [ 171.120949][ T7016] ? __pfx_____sys_sendmsg+0x10/0x10 [ 171.126285][ T7016] ? __lock_acquire+0xcc5/0x3c40 [ 171.131327][ T7016] ___sys_sendmsg+0x135/0x1e0 [ 171.136073][ T7016] ? __pfx____sys_sendmsg+0x10/0x10 [ 171.141351][ T7016] ? trace_lock_acquire+0x14e/0x1f0 [ 171.146640][ T7016] __sys_sendmmsg+0x201/0x420 [ 171.151391][ T7016] ? __pfx___sys_sendmmsg+0x10/0x10 [ 171.156677][ T7016] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 171.162746][ T7016] ? fput+0x67/0x440 [ 171.166717][ T7016] ? ksys_write+0x1ba/0x250 [ 171.171272][ T7016] ? __pfx_ksys_write+0x10/0x10 [ 171.176186][ T7016] __x64_sys_sendmmsg+0x9c/0x100 [ 171.181211][ T7016] ? lockdep_hardirqs_on+0x7c/0x110 [ 171.186469][ T7016] do_syscall_64+0xcd/0x250 [ 171.191042][ T7016] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 171.196997][ T7016] RIP: 0033:0x7f7840f85d19 [ 171.201455][ T7016] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 171.221114][ T7016] RSP: 002b:00007f7841cea038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 171.229584][ T7016] RAX: ffffffffffffffda RBX: 00007f7841175fa0 RCX: 00007f7840f85d19 [ 171.237594][ T7016] RDX: 0000000000000200 RSI: 0000000020000040 RDI: 0000000000000003 [ 171.245602][ T7016] RBP: 00007f7841cea090 R08: 0000000000000000 R09: 0000000000000000 [ 171.253610][ T7016] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 171.261621][ T7016] R13: 0000000000000000 R14: 00007f7841175fa0 R15: 00007fff10b88bc8 [ 171.269667][ T7016] [ 171.517826][ T7019] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 171.536317][ T7019] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 171.555139][ T7019] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 171.586985][ T7019] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 171.593026][ T7019] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 171.658060][ T7019] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 171.668605][ T7019] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 171.674943][ T7019] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 171.694434][ T7019] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 171.728626][ T7019] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 171.775496][ T7019] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 171.820058][ T7019] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 172.430817][ T5839] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 172.445710][ T5839] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 172.466695][ T5839] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 172.512784][ T5839] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 172.521691][ T5839] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 172.529191][ T5839] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 172.987112][ T7040] netlink: 334 bytes leftover after parsing attributes in process `syz.1.307'. [ 173.189055][ T7041] netlink: 334 bytes leftover after parsing attributes in process `syz.1.307'. [ 173.334231][ T7045] netlink: 334 bytes leftover after parsing attributes in process `syz.1.307'. [ 173.348691][ T7026] chnl_net:caif_netlink_parms(): no params data found [ 173.578040][ T7026] bridge0: port 1(bridge_slave_0) entered blocking state [ 173.585713][ T5839] Bluetooth: hci0: command 0x0c1a tx timeout [ 173.610121][ T7026] bridge0: port 1(bridge_slave_0) entered disabled state [ 173.624894][ T7026] bridge_slave_0: entered allmulticast mode [ 173.636646][ T7026] bridge_slave_0: entered promiscuous mode [ 173.656670][ T7026] bridge0: port 2(bridge_slave_1) entered blocking state [ 173.664207][ T7026] bridge0: port 2(bridge_slave_1) entered disabled state [ 173.665415][ T5839] Bluetooth: hci2: command 0x0c1a tx timeout [ 173.685561][ T7026] bridge_slave_1: entered allmulticast mode [ 173.692833][ T7026] bridge_slave_1: entered promiscuous mode [ 173.745576][ T5839] Bluetooth: hci3: command 0x0c1a tx timeout [ 173.752480][ T5839] Bluetooth: hci1: command 0x0c1a tx timeout [ 174.121499][ T7026] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 174.166734][ T7026] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 174.283650][ T7026] team0: Port device team_slave_0 added [ 174.406793][ T7026] team0: Port device team_slave_1 added [ 174.491844][ T7026] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 174.508991][ T7026] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 174.568306][ T7026] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 174.592787][ T7026] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 174.619919][ T7026] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 174.673999][ T5839] Bluetooth: hci4: command tx timeout [ 174.686674][ T7026] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 174.778021][ T7026] hsr_slave_0: entered promiscuous mode [ 174.788636][ T7026] hsr_slave_1: entered promiscuous mode [ 174.804523][ T7026] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 174.825339][ T7026] Cannot create hsr debugfs directory [ 175.271602][ T7026] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 175.328525][ T7026] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 175.371505][ T7026] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 175.416543][ T7026] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 175.637949][ T7026] 8021q: adding VLAN 0 to HW filter on device bond0 [ 175.666068][ T5839] Bluetooth: hci0: command 0x0c1a tx timeout [ 175.697595][ T7026] 8021q: adding VLAN 0 to HW filter on device team0 [ 175.745456][ T5839] Bluetooth: hci2: command 0x0c1a tx timeout [ 175.825387][ T5839] Bluetooth: hci1: command 0x0c1a tx timeout [ 175.832403][ T5839] Bluetooth: hci3: command 0x0c1a tx timeout [ 175.858965][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 175.866204][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 175.896107][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 175.903332][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 175.944220][ T7026] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 175.954978][ T7026] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 176.530543][ T7026] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 176.706091][ T5849] Bluetooth: hci4: command tx timeout [ 177.132906][ T7026] veth0_vlan: entered promiscuous mode [ 177.157224][ T7026] veth1_vlan: entered promiscuous mode [ 177.207637][ T7026] veth0_macvtap: entered promiscuous mode [ 177.219553][ T7026] veth1_macvtap: entered promiscuous mode [ 177.260658][ T7026] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 177.285566][ T7026] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 177.295821][ T7026] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 177.306575][ T7026] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 177.316575][ T7026] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 177.327124][ T7026] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 177.337085][ T7026] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 177.347748][ T7026] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 177.358807][ T7026] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 177.371874][ T7026] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 177.382484][ T7026] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 177.392399][ T7026] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 177.402971][ T7026] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 177.412988][ T7026] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 177.423541][ T7026] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 177.433557][ T7026] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 177.444137][ T7026] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 177.455204][ T7026] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 177.475850][ T7026] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.484732][ T7026] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.493811][ T7026] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.502701][ T7026] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.729513][ T3465] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 177.749063][ T5849] Bluetooth: hci0: command 0x0c1a tx timeout [ 177.785368][ T3465] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 177.826418][ T5849] Bluetooth: hci2: command 0x0c1a tx timeout [ 177.898416][ T3465] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 177.906660][ T3465] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 177.915842][ T5849] Bluetooth: hci3: command 0x0c1a tx timeout [ 177.922073][ T5849] Bluetooth: hci1: command 0x0c1a tx timeout [ 177.935080][ T7102] netlink: 2 bytes leftover after parsing attributes in process `syz.2.323'. [ 178.677118][ T7123] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 178.785788][ T5849] Bluetooth: hci4: command tx timeout [ 179.290253][ T7133] mmap: syz.2.333 (7133) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 180.866582][ T5849] Bluetooth: hci4: command tx timeout [ 184.858557][ T30] audit: type=1326 audit(1734369972.357:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7228 comm="syz.4.367" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8d19985d19 code=0x0 [ 185.938100][ T7254] sctp: [Deprecated]: syz.2.374 (pid 7254) Use of struct sctp_assoc_value in delayed_ack socket option. [ 185.938100][ T7254] Use struct sctp_sack_info instead [ 186.635567][ T7271] Process accounting resumed [ 191.092761][ T7324] netlink: 4 bytes leftover after parsing attributes in process `syz.4.395'. [ 192.758201][ T7352] syz.4.406 (7352): attempted to duplicate a private mapping with mremap. This is not supported. [ 192.875098][ T7353] netlink: 28 bytes leftover after parsing attributes in process `syz.4.406'. [ 192.905123][ T7353] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 192.965003][ T7353] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 193.007045][ T7353] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 193.014898][ T7353] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 195.009250][ T7397] netlink: 338 bytes leftover after parsing attributes in process `syz.2.415'. [ 195.910918][ T7413] MTRR 1 not used [ 195.939879][ T7412] mmap: syz.2.421 (7412): VmData 37728256 exceed data ulimit 2. Update limits or use boot option ignore_rlimit_data. [ 196.456955][ T7422] kmem.tcp.limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 196.486512][ T5839] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 196.497626][ T5839] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 196.506461][ T5839] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 196.519920][ T5839] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 196.527969][ T5839] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 196.536531][ T5839] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 196.835602][ T7434] syz.2.427 uses obsolete (PF_INET,SOCK_PACKET) [ 197.234214][ T7426] chnl_net:caif_netlink_parms(): no params data found [ 198.511507][ T7426] bridge0: port 1(bridge_slave_0) entered blocking state [ 198.543791][ T7426] bridge0: port 1(bridge_slave_0) entered disabled state [ 198.571072][ T7426] bridge_slave_0: entered allmulticast mode [ 198.605160][ T7426] bridge_slave_0: entered promiscuous mode [ 198.622816][ T7426] bridge0: port 2(bridge_slave_1) entered blocking state [ 198.631382][ T5849] Bluetooth: hci5: command tx timeout [ 198.723112][ T7426] bridge0: port 2(bridge_slave_1) entered disabled state [ 198.731670][ T7426] bridge_slave_1: entered allmulticast mode [ 198.751386][ T7426] bridge_slave_1: entered promiscuous mode [ 198.994095][ T7426] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 199.038400][ T7426] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 199.181658][ T7426] team0: Port device team_slave_0 added [ 199.226919][ T7426] team0: Port device team_slave_1 added [ 199.367070][ T7426] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 199.391788][ T7426] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 199.473947][ T7426] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 199.523055][ T7426] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 199.558645][ T7426] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 199.667479][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.674512][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 199.707638][ T7426] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 199.920381][ T7426] hsr_slave_0: entered promiscuous mode [ 199.935782][ T7426] hsr_slave_1: entered promiscuous mode [ 199.942761][ T7426] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 199.952778][ T7426] Cannot create hsr debugfs directory [ 200.549382][ T7426] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 200.593997][ T7426] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 200.636646][ T7426] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 200.711275][ T5849] Bluetooth: hci5: command tx timeout [ 200.720631][ T7426] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 201.027806][ T7426] 8021q: adding VLAN 0 to HW filter on device bond0 [ 201.084229][ T7426] 8021q: adding VLAN 0 to HW filter on device team0 [ 201.115709][ T3465] bridge0: port 1(bridge_slave_0) entered blocking state [ 201.123954][ T3465] bridge0: port 1(bridge_slave_0) entered forwarding state [ 201.161463][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 201.168710][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 201.747517][ T7426] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 202.540500][ T7426] veth0_vlan: entered promiscuous mode [ 202.594727][ T7426] veth1_vlan: entered promiscuous mode [ 202.679050][ T7426] veth0_macvtap: entered promiscuous mode [ 202.708849][ T7426] veth1_macvtap: entered promiscuous mode [ 202.768957][ T7426] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 202.787941][ T5849] Bluetooth: hci5: command tx timeout [ 202.793561][ T7426] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.826798][ T7426] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 202.855451][ T7426] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.891288][ T7426] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 202.924679][ T7426] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.955403][ T7426] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 202.975623][ T7426] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 203.007096][ T7426] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 203.113257][ T7426] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 203.133087][ T7426] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 203.163763][ T7426] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 203.197067][ T7426] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 203.225733][ T7426] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 203.245051][ T7426] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 203.256298][ T7426] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 203.270049][ T7426] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 203.281813][ T7426] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 203.310527][ T7426] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.321458][ T7426] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.333744][ T7426] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.343020][ T7426] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.731683][ T3432] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 203.755451][ T3432] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 203.803587][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 203.835083][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 204.868050][ T5849] Bluetooth: hci5: command tx timeout [ 205.046289][ T7573] netlink: 8 bytes leftover after parsing attributes in process `syz.4.456'. [ 208.780438][ T7649] mkiss: ax0: crc mode is auto. [ 210.546481][ T7679] netlink: 4 bytes leftover after parsing attributes in process `syz.1.488'. [ 216.567807][ T7779] netlink: 4 bytes leftover after parsing attributes in process `syz.1.513'. [ 221.631358][ T7855] netlink: 28 bytes leftover after parsing attributes in process `syz.5.533'. [ 221.994543][ T7855] bond0: (slave bond_slave_0): Releasing backup interface [ 225.303673][ T7909] openvswitch: netlink: nsh attribute has 14 unknown bytes. [ 225.341319][ T7910] netlink: 'syz.4.552': attribute type 1 has an invalid length. [ 225.375864][ T7909] netlink: 'syz.4.552': attribute type 1 has an invalid length. [ 225.388864][ T7909] netlink: 'syz.4.552': attribute type 2 has an invalid length. [ 225.405407][ T7910] netlink: 'syz.4.552': attribute type 2 has an invalid length. [ 225.439980][ T7909] netlink: 'syz.4.552': attribute type 1 has an invalid length. [ 225.455427][ T7909] netlink: 'syz.4.552': attribute type 2 has an invalid length. [ 231.030519][ T7991] netlink: 2 bytes leftover after parsing attributes in process `syz.5.574'. [ 231.252451][ T8002] vivid-013: ================= START STATUS ================= [ 231.271273][ T8002] vivid-013: Generate PTS: true [ 231.285406][ T8002] vivid-013: Generate SCR: true [ 231.290544][ T8002] tpg source WxH: 640x360 (Y'CbCr) [ 231.306318][ T8002] tpg field: 1 [ 231.312285][ T8002] tpg crop: 640x360@0x0 [ 231.325983][ T8002] tpg compose: 640x360@0x0 [ 231.334977][ T8002] tpg colorspace: 8 [ 231.341085][ T8002] tpg transfer function: 0/0 [ 231.351265][ T8002] tpg Y'CbCr encoding: 0/0 [ 231.365909][ T8002] tpg quantization: 0/0 [ 231.401986][ T8002] tpg RGB range: 0/2 [ 231.424573][ T8002] vivid-013: ================== END STATUS ================== [ 232.245376][ T8016] Format for deleting device is "id" (uint). [ 232.387394][ T8015] ima: policy update failed [ 232.402291][ T30] audit: type=1802 audit(1734370019.887:7): pid=8015 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.4.579" res=0 errno=0 [ 233.746093][ T8040] netlink: 'syz.5.586': attribute type 1 has an invalid length. [ 233.806499][ T8040] netlink: 'syz.5.586': attribute type 1 has an invalid length. [ 236.152733][ T8090] netlink: 342 bytes leftover after parsing attributes in process `syz.4.596'. [ 241.604343][ T30] audit: type=1326 audit(1734370029.097:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8191 comm="syz.1.625" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f34b2985d19 code=0x0 [ 242.272948][ T8205] netlink: 326 bytes leftover after parsing attributes in process `syz.4.631'. [ 243.809187][ T8213] kexec: Could not allocate control_code_buffer [ 244.540713][ T8237] netlink: 326 bytes leftover after parsing attributes in process `syz.4.640'. [ 244.591872][ T8241] netlink: 28 bytes leftover after parsing attributes in process `syz.1.639'. [ 244.609864][ T8240] netlink: 28 bytes leftover after parsing attributes in process `syz.1.639'. [ 244.941553][ T8241] bond0: (slave bond_slave_1): Releasing backup interface [ 247.034746][ T8287] netlink: 326 bytes leftover after parsing attributes in process `syz.4.649'. [ 247.415093][ T8284] Process accounting resumed [ 249.704719][ T8343] ======================================================= [ 249.704719][ T8343] WARNING: The mand mount option has been deprecated and [ 249.704719][ T8343] and is ignored by this kernel. Remove the mand [ 249.704719][ T8343] option from the mount to silence this warning. [ 249.704719][ T8343] ======================================================= [ 252.816333][ T8415] netlink: zone id is out of range [ 252.843842][ T8415] netlink: zone id is out of range [ 252.873231][ T8415] netlink: zone id is out of range [ 252.885400][ T8415] netlink: zone id is out of range [ 252.895154][ T8415] netlink: zone id is out of range [ 252.909443][ T8415] netlink: zone id is out of range [ 252.914702][ T8415] netlink: zone id is out of range [ 252.927906][ T8415] netlink: zone id is out of range [ 252.933217][ T8415] netlink: zone id is out of range [ 252.942716][ T8415] netlink: zone id is out of range [ 256.334114][ T8494] can: request_module (can-proto-0) failed. [ 257.257196][ T5839] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 257.267329][ T5839] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 257.276767][ T5839] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 257.285267][ T5839] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 257.293558][ T5839] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 257.301099][ T5839] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 257.798956][ T8511] chnl_net:caif_netlink_parms(): no params data found [ 258.066575][ T8528] Process accounting resumed [ 258.164498][ T8511] bridge0: port 1(bridge_slave_0) entered blocking state [ 258.181752][ T8511] bridge0: port 1(bridge_slave_0) entered disabled state [ 258.190844][ T8511] bridge_slave_0: entered allmulticast mode [ 258.207094][ T8511] bridge_slave_0: entered promiscuous mode [ 258.242100][ T8511] bridge0: port 2(bridge_slave_1) entered blocking state [ 258.259506][ T8511] bridge0: port 2(bridge_slave_1) entered disabled state [ 258.271579][ T8511] bridge_slave_1: entered allmulticast mode [ 258.279819][ T8511] bridge_slave_1: entered promiscuous mode [ 258.445767][ T8511] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 258.470751][ T8511] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 258.484493][ T8542] netlink: 64 bytes leftover after parsing attributes in process `syz.2.709'. [ 258.660334][ T8511] team0: Port device team_slave_0 added [ 258.713687][ T8511] team0: Port device team_slave_1 added [ 258.939050][ T8511] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 258.954287][ T8511] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 259.029347][ T8511] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 259.058367][ T8511] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 259.073309][ T8511] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 259.125113][ T30] audit: type=1326 audit(1734370070.619:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8548 comm="syz.2.711" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f67acf85d19 code=0x0 [ 259.155423][ T8511] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 259.346123][ T5839] Bluetooth: hci6: command tx timeout [ 259.388709][ T8511] hsr_slave_0: entered promiscuous mode [ 259.466933][ T8511] hsr_slave_1: entered promiscuous mode [ 259.515373][ T8511] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 259.523021][ T8511] Cannot create hsr debugfs directory [ 260.282594][ T8511] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 260.349043][ T8511] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 260.409401][ T8511] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 260.507161][ T8511] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 260.779392][ T8511] 8021q: adding VLAN 0 to HW filter on device bond0 [ 260.831049][ T8511] 8021q: adding VLAN 0 to HW filter on device team0 [ 260.873056][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 260.880356][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 260.895642][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 260.902811][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 261.028346][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 261.034835][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 261.425411][ T5839] Bluetooth: hci6: command tx timeout [ 261.600351][ T8511] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 262.326711][ T8511] veth0_vlan: entered promiscuous mode [ 262.359644][ T8511] veth1_vlan: entered promiscuous mode [ 262.404378][ T8511] veth0_macvtap: entered promiscuous mode [ 262.414843][ T8511] veth1_macvtap: entered promiscuous mode [ 262.432654][ T8511] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 262.444225][ T8511] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 262.485571][ T8511] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 262.506787][ T8511] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 262.545531][ T8511] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 262.565618][ T8511] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 262.595330][ T8511] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 262.655251][ T8511] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 262.665159][ T8511] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 262.738833][ T8511] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 262.776898][ T8511] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 262.862401][ T8511] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 262.905333][ T8511] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 262.945249][ T8511] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 262.985284][ T8511] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 263.025546][ T8511] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 263.045360][ T8511] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 263.075288][ T8511] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 263.102537][ T8511] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 263.130667][ T8511] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 263.165245][ T8511] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 263.194267][ T8511] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 263.267991][ T8511] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 263.296249][ T8511] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 263.332379][ T8511] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 263.385433][ T8511] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 263.508396][ T5839] Bluetooth: hci6: command tx timeout [ 266.005749][ T5839] Bluetooth: hci6: command tx timeout [ 266.899072][ T2862] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 266.914300][ T8603] netlink: 326 bytes leftover after parsing attributes in process `syz.1.723'. [ 266.925085][ T3478] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 266.937810][ T2862] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 266.987128][ T3478] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 272.267525][ T8646] netlink: 326 bytes leftover after parsing attributes in process `syz.2.733'. [ 273.439400][ T8663] netlink: 16 bytes leftover after parsing attributes in process `syz.2.737'. [ 273.635800][ T8669] netlink: 20 bytes leftover after parsing attributes in process `syz.4.739'. [ 274.957498][ T8688] netlink: 326 bytes leftover after parsing attributes in process `syz.1.743'. [ 277.548227][ T8730] netlink: 326 bytes leftover after parsing attributes in process `syz.6.753'. [ 279.036570][ T8757] netlink: 28 bytes leftover after parsing attributes in process `syz.6.759'. [ 279.326109][ T8757] team0: Port device team_slave_0 removed [ 279.776020][ T8765] netlink: 326 bytes leftover after parsing attributes in process `syz.2.762'. [ 281.658597][ T8809] netlink: 326 bytes leftover after parsing attributes in process `syz.1.774'. [ 281.896361][ T8817] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 283.045331][ T5839] Bluetooth: hci4: ACL packet too small [ 283.537938][ T8845] netlink: 243 bytes leftover after parsing attributes in process `syz.4.783'. [ 283.576717][ T8847] netlink: 334 bytes leftover after parsing attributes in process `syz.6.784'. [ 286.191132][ T8874] netlink: 243 bytes leftover after parsing attributes in process `syz.2.793'. [ 288.983585][ T8906] netlink: 342 bytes leftover after parsing attributes in process `syz.2.801'. [ 289.179218][ T8909] netlink: 243 bytes leftover after parsing attributes in process `syz.2.802'. [ 290.046168][ T8920] delete_channel: no stack [ 290.463477][ T8927] program syz.4.807 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 293.366932][ T8964] netlink: 28 bytes leftover after parsing attributes in process `syz.4.814'. [ 294.187461][ T8954] netlink: 36 bytes leftover after parsing attributes in process `syz.6.813'. [ 298.955690][ T5849] Bluetooth: hci4: command 0x0406 tx timeout [ 300.620994][ T5849] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 300.630826][ T5849] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 300.639595][ T5849] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 300.648761][ T5849] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 300.657633][ T5849] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 300.665080][ T5849] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 300.751419][ T30] audit: type=1107 audit(1734370112.239:10): pid=8994 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 301.182758][ T8992] chnl_net:caif_netlink_parms(): no params data found [ 301.757062][ T8992] bridge0: port 1(bridge_slave_0) entered blocking state [ 301.777737][ T8992] bridge0: port 1(bridge_slave_0) entered disabled state [ 301.797985][ T8992] bridge_slave_0: entered allmulticast mode [ 301.826197][ T8992] bridge_slave_0: entered promiscuous mode [ 301.834697][ T8992] bridge0: port 2(bridge_slave_1) entered blocking state [ 301.860279][ T8992] bridge0: port 2(bridge_slave_1) entered disabled state [ 301.878554][ T8992] bridge_slave_1: entered allmulticast mode [ 301.899492][ T8992] bridge_slave_1: entered promiscuous mode [ 301.965573][ T9015] netlink: 28 bytes leftover after parsing attributes in process `syz.6.827'. [ 302.014529][ T8992] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 302.038671][ T8992] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 302.226247][ T9015] bond0: (slave bond_slave_0): Releasing backup interface [ 302.428381][ T8992] team0: Port device team_slave_0 added [ 302.448431][ T8992] team0: Port device team_slave_1 added [ 302.614460][ T8992] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 302.628224][ T8992] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 302.677484][ T8992] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 302.705579][ T5839] Bluetooth: hci7: command tx timeout [ 302.715077][ T8992] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 302.725360][ T8992] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 302.753032][ T8992] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 302.920109][ T8992] hsr_slave_0: entered promiscuous mode [ 302.964691][ T8992] hsr_slave_1: entered promiscuous mode [ 302.998742][ T8992] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 303.015321][ T8992] Cannot create hsr debugfs directory [ 303.617486][ T8992] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 303.674167][ T8992] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 303.766334][ T8992] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 303.803833][ T8992] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 303.933867][ T9040] netlink: 28 bytes leftover after parsing attributes in process `syz.4.836'. [ 304.138882][ T8992] 8021q: adding VLAN 0 to HW filter on device bond0 [ 304.180393][ T8992] 8021q: adding VLAN 0 to HW filter on device team0 [ 304.207804][ T2862] bridge0: port 1(bridge_slave_0) entered blocking state [ 304.215004][ T2862] bridge0: port 1(bridge_slave_0) entered forwarding state [ 304.274299][ T2862] bridge0: port 2(bridge_slave_1) entered blocking state [ 304.281582][ T2862] bridge0: port 2(bridge_slave_1) entered forwarding state [ 304.757739][ T8992] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 304.785475][ T5839] Bluetooth: hci7: command tx timeout [ 304.866894][ T9054] FAULT_INJECTION: forcing a failure. [ 304.866894][ T9054] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 304.924400][ T9054] CPU: 0 UID: 0 PID: 9054 Comm: syz.6.838 Not tainted 6.13.0-rc3-syzkaller #0 [ 304.933344][ T9054] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 304.943460][ T9054] Call Trace: [ 304.946796][ T9054] [ 304.949780][ T9054] dump_stack_lvl+0x16c/0x1f0 [ 304.954531][ T9054] should_fail_ex+0x497/0x5b0 [ 304.959306][ T9054] _copy_from_user+0x2e/0xd0 [ 304.963974][ T9054] copy_msghdr_from_user+0x99/0x160 [ 304.969253][ T9054] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 304.975153][ T9054] ___sys_sendmsg+0xff/0x1e0 [ 304.979819][ T9054] ? __pfx____sys_sendmsg+0x10/0x10 [ 304.985109][ T9054] ? __pfx_lock_release+0x10/0x10 [ 304.990189][ T9054] ? trace_lock_acquire+0x14e/0x1f0 [ 304.995469][ T9054] ? __fget_files+0x206/0x3a0 [ 305.000215][ T9054] __sys_sendmsg+0x16e/0x220 [ 305.004877][ T9054] ? __pfx___sys_sendmsg+0x10/0x10 [ 305.010083][ T9054] do_syscall_64+0xcd/0x250 [ 305.014658][ T9054] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 305.020631][ T9054] RIP: 0033:0x7f198d985d19 [ 305.025107][ T9054] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 305.044785][ T9054] RSP: 002b:00007f198e6fc038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 305.053261][ T9054] RAX: ffffffffffffffda RBX: 00007f198db75fa0 RCX: 00007f198d985d19 [ 305.061292][ T9054] RDX: 0000000000040000 RSI: 0000000020000240 RDI: 0000000000000004 [ 305.069340][ T9054] RBP: 00007f198e6fc090 R08: 0000000000000000 R09: 0000000000000000 [ 305.077366][ T9054] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 305.085384][ T9054] R13: 0000000000000000 R14: 00007f198db75fa0 R15: 00007ffc15682168 [ 305.093428][ T9054] [ 305.518756][ T8992] veth0_vlan: entered promiscuous mode [ 305.565510][ T8992] veth1_vlan: entered promiscuous mode [ 305.611328][ T9059] sd 0:0:1:0: PR command failed: 1026 [ 305.637718][ T9059] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 305.643882][ T8992] veth0_macvtap: entered promiscuous mode [ 305.644486][ T9059] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 305.674700][ T8992] veth1_macvtap: entered promiscuous mode [ 305.726590][ T8992] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 305.758772][ T8992] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 305.812300][ T8992] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 305.846027][ T8992] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 305.865283][ T8992] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 305.885262][ T8992] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 305.895146][ T8992] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 305.921744][ T8992] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 305.975256][ T8992] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 306.005311][ T8992] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 306.047260][ T8992] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 306.075672][ T8992] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 306.117195][ T8992] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 306.181373][ T8992] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 306.217206][ T8992] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 306.235813][ T8992] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 306.256983][ T8992] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 306.281765][ T8992] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 306.349216][ T8992] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 306.371026][ T8992] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 306.385234][ T8992] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 306.395582][ T8992] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 306.415352][ T8992] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 306.429069][ T8992] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 306.441736][ T8992] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 306.453286][ T8992] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 306.465702][ T8992] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.475045][ T8992] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.484597][ T8992] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.493519][ T8992] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.769683][ T2862] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 306.798508][ T2862] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 306.859473][ T2862] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 306.875632][ T5839] Bluetooth: hci7: command tx timeout [ 306.876415][ T2862] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 307.544088][ T9091] FAULT_INJECTION: forcing a failure. [ 307.544088][ T9091] name failslab, interval 1, probability 0, space 0, times 0 [ 307.615404][ T9091] CPU: 1 UID: 0 PID: 9091 Comm: syz.2.847 Not tainted 6.13.0-rc3-syzkaller #0 [ 307.624363][ T9091] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 307.634474][ T9091] Call Trace: [ 307.637804][ T9091] [ 307.640776][ T9091] dump_stack_lvl+0x16c/0x1f0 [ 307.645522][ T9091] should_fail_ex+0x497/0x5b0 [ 307.650272][ T9091] ? fs_reclaim_acquire+0xae/0x150 [ 307.655462][ T9091] should_failslab+0xc2/0x120 [ 307.660217][ T9091] kmem_cache_alloc_node_noprof+0x72/0x3b0 [ 307.666109][ T9091] ? __alloc_skb+0x2b3/0x380 [ 307.670776][ T9091] __alloc_skb+0x2b3/0x380 [ 307.675267][ T9091] ? __pfx___alloc_skb+0x10/0x10 [ 307.680284][ T9091] ? lock_acquire+0x2f/0xb0 [ 307.684873][ T9091] netlink_alloc_large_skb+0x69/0x130 [ 307.690321][ T9091] netlink_sendmsg+0x689/0xd70 [ 307.695132][ T9091] ? __pfx_netlink_sendmsg+0x10/0x10 [ 307.700470][ T9091] ____sys_sendmsg+0x9ae/0xb40 [ 307.705279][ T9091] ? copy_msghdr_from_user+0x10b/0x160 [ 307.710807][ T9091] ? __pfx_____sys_sendmsg+0x10/0x10 [ 307.716144][ T9091] ___sys_sendmsg+0x135/0x1e0 [ 307.720876][ T9091] ? __pfx____sys_sendmsg+0x10/0x10 [ 307.726138][ T9091] ? __pfx_lock_release+0x10/0x10 [ 307.731195][ T9091] ? trace_lock_acquire+0x14e/0x1f0 [ 307.736447][ T9091] ? __fget_files+0x206/0x3a0 [ 307.741174][ T9091] __sys_sendmsg+0x16e/0x220 [ 307.745811][ T9091] ? __pfx___sys_sendmsg+0x10/0x10 [ 307.750987][ T9091] do_syscall_64+0xcd/0x250 [ 307.755535][ T9091] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 307.761474][ T9091] RIP: 0033:0x7f67acf85d19 [ 307.765918][ T9091] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 307.785596][ T9091] RSP: 002b:00007f67ade93038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 307.794048][ T9091] RAX: ffffffffffffffda RBX: 00007f67ad175fa0 RCX: 00007f67acf85d19 [ 307.802052][ T9091] RDX: 0000000000040000 RSI: 0000000020000240 RDI: 0000000000000004 [ 307.810055][ T9091] RBP: 00007f67ade93090 R08: 0000000000000000 R09: 0000000000000000 [ 307.818058][ T9091] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 307.826060][ T9091] R13: 0000000000000000 R14: 00007f67ad175fa0 R15: 00007ffd35e924b8 [ 307.835719][ T9091] [ 308.947841][ T5839] Bluetooth: hci7: command tx timeout [ 311.797065][ T9183] FAULT_INJECTION: forcing a failure. [ 311.797065][ T9183] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 311.879214][ T9183] CPU: 1 UID: 0 PID: 9183 Comm: syz.7.869 Not tainted 6.13.0-rc3-syzkaller #0 [ 311.888164][ T9183] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 311.898281][ T9183] Call Trace: [ 311.901607][ T9183] [ 311.904591][ T9183] dump_stack_lvl+0x16c/0x1f0 [ 311.909353][ T9183] should_fail_ex+0x497/0x5b0 [ 311.914099][ T9183] _copy_from_iter+0x29b/0x1400 [ 311.919109][ T9183] ? trace_lock_acquire+0x14e/0x1f0 [ 311.924371][ T9183] ? __alloc_skb+0x200/0x380 [ 311.929028][ T9183] ? __pfx__copy_from_iter+0x10/0x10 [ 311.934375][ T9183] ? __virt_addr_valid+0x1a4/0x590 [ 311.939559][ T9183] ? __virt_addr_valid+0x5e/0x590 [ 311.944653][ T9183] ? __phys_addr_symbol+0x30/0x80 [ 311.949746][ T9183] ? __check_object_size+0x488/0x710 [ 311.955107][ T9183] netlink_sendmsg+0x813/0xd70 [ 311.959938][ T9183] ? __pfx_netlink_sendmsg+0x10/0x10 [ 311.965295][ T9183] ____sys_sendmsg+0x9ae/0xb40 [ 311.970133][ T9183] ? copy_msghdr_from_user+0x10b/0x160 [ 311.975668][ T9183] ? __pfx_____sys_sendmsg+0x10/0x10 [ 311.981040][ T9183] ___sys_sendmsg+0x135/0x1e0 [ 311.985798][ T9183] ? __pfx____sys_sendmsg+0x10/0x10 [ 311.991084][ T9183] ? __pfx_lock_release+0x10/0x10 [ 311.996162][ T9183] ? trace_lock_acquire+0x14e/0x1f0 [ 312.001447][ T9183] ? __fget_files+0x206/0x3a0 [ 312.006198][ T9183] __sys_sendmsg+0x16e/0x220 [ 312.010864][ T9183] ? __pfx___sys_sendmsg+0x10/0x10 [ 312.016076][ T9183] do_syscall_64+0xcd/0x250 [ 312.020672][ T9183] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 312.026632][ T9183] RIP: 0033:0x7f51eab85d19 [ 312.031102][ T9183] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 312.050778][ T9183] RSP: 002b:00007f51eb8fe038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 312.059255][ T9183] RAX: ffffffffffffffda RBX: 00007f51ead75fa0 RCX: 00007f51eab85d19 [ 312.067282][ T9183] RDX: 0000000000040000 RSI: 0000000020000240 RDI: 0000000000000004 [ 312.075314][ T9183] RBP: 00007f51eb8fe090 R08: 0000000000000000 R09: 0000000000000000 [ 312.083343][ T9183] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 312.091367][ T9183] R13: 0000000000000000 R14: 00007f51ead75fa0 R15: 00007ffca9579d48 [ 312.099412][ T9183] [ 312.102577][ C1] vkms_vblank_simulate: vblank timer overrun [ 313.045767][ T9197] netlink: 338 bytes leftover after parsing attributes in process `syz.4.873'. [ 313.126169][ T9197] netlink: 338 bytes leftover after parsing attributes in process `syz.4.873'. [ 313.233214][ T9198] netlink: 134 bytes leftover after parsing attributes in process `syz.4.873'. [ 313.437906][ T5839] Bluetooth: hci0: unexpected event 0x01 length: 13 > 1 [ 314.643000][ T9232] FAULT_INJECTION: forcing a failure. [ 314.643000][ T9232] name failslab, interval 1, probability 0, space 0, times 0 [ 314.695487][ T9232] CPU: 0 UID: 0 PID: 9232 Comm: syz.6.881 Not tainted 6.13.0-rc3-syzkaller #0 [ 314.704451][ T9232] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 314.714570][ T9232] Call Trace: [ 314.717902][ T9232] [ 314.720881][ T9232] dump_stack_lvl+0x16c/0x1f0 [ 314.725635][ T9232] should_fail_ex+0x497/0x5b0 [ 314.730393][ T9232] should_failslab+0xc2/0x120 [ 314.735145][ T9232] kmem_cache_alloc_noprof+0x6e/0x3b0 [ 314.740589][ T9232] ? skb_clone+0x190/0x3f0 [ 314.745086][ T9232] skb_clone+0x190/0x3f0 [ 314.749411][ T9232] netlink_deliver_tap+0xafd/0xca0 [ 314.754616][ T9232] netlink_unicast+0x5e1/0x7f0 [ 314.759454][ T9232] ? __pfx_netlink_unicast+0x10/0x10 [ 314.764814][ T9232] ? __phys_addr_symbol+0x30/0x80 [ 314.769915][ T9232] ? __check_object_size+0x488/0x710 [ 314.775282][ T9232] netlink_sendmsg+0x8b8/0xd70 [ 314.780126][ T9232] ? __pfx_netlink_sendmsg+0x10/0x10 [ 314.785496][ T9232] ____sys_sendmsg+0x9ae/0xb40 [ 314.790334][ T9232] ? copy_msghdr_from_user+0x10b/0x160 [ 314.795877][ T9232] ? __pfx_____sys_sendmsg+0x10/0x10 [ 314.801252][ T9232] ___sys_sendmsg+0x135/0x1e0 [ 314.806023][ T9232] ? __pfx____sys_sendmsg+0x10/0x10 [ 314.811324][ T9232] ? __pfx_lock_release+0x10/0x10 [ 314.816405][ T9232] ? trace_lock_acquire+0x14e/0x1f0 [ 314.821688][ T9232] ? __fget_files+0x206/0x3a0 [ 314.826446][ T9232] __sys_sendmsg+0x16e/0x220 [ 314.831116][ T9232] ? __pfx___sys_sendmsg+0x10/0x10 [ 314.836336][ T9232] do_syscall_64+0xcd/0x250 [ 314.840996][ T9232] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 314.846957][ T9232] RIP: 0033:0x7f198d985d19 [ 314.851429][ T9232] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 314.871100][ T9232] RSP: 002b:00007f198e6fc038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 314.879587][ T9232] RAX: ffffffffffffffda RBX: 00007f198db75fa0 RCX: 00007f198d985d19 [ 314.887616][ T9232] RDX: 0000000000040000 RSI: 0000000020000240 RDI: 0000000000000004 [ 314.895645][ T9232] RBP: 00007f198e6fc090 R08: 0000000000000000 R09: 0000000000000000 [ 314.903764][ T9232] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 314.911797][ T9232] R13: 0000000000000000 R14: 00007f198db75fa0 R15: 00007ffc15682168 [ 314.919850][ T9232] [ 315.984541][ T9252] netlink: 4 bytes leftover after parsing attributes in process `syz.2.888'. [ 316.019211][ T9252] netlink: 4 bytes leftover after parsing attributes in process `syz.2.888'. [ 316.464002][ T9259] FAULT_INJECTION: forcing a failure. [ 316.464002][ T9259] name failslab, interval 1, probability 0, space 0, times 0 [ 316.495444][ T9259] CPU: 1 UID: 0 PID: 9259 Comm: syz.2.891 Not tainted 6.13.0-rc3-syzkaller #0 [ 316.504393][ T9259] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 316.514507][ T9259] Call Trace: [ 316.517831][ T9259] [ 316.520821][ T9259] dump_stack_lvl+0x16c/0x1f0 [ 316.525564][ T9259] should_fail_ex+0x497/0x5b0 [ 316.530315][ T9259] ? fs_reclaim_acquire+0xae/0x150 [ 316.535495][ T9259] should_failslab+0xc2/0x120 [ 316.540244][ T9259] kmem_cache_alloc_node_noprof+0x72/0x3b0 [ 316.546099][ T9259] ? __alloc_skb+0x2b3/0x380 [ 316.550736][ T9259] __alloc_skb+0x2b3/0x380 [ 316.555197][ T9259] ? __pfx___alloc_skb+0x10/0x10 [ 316.560203][ T9259] ? __mutex_trylock_common+0xea/0x250 [ 316.565704][ T9259] ? __pfx___mutex_trylock_common+0x10/0x10 [ 316.571638][ T9259] netlink_dump+0x699/0xd00 [ 316.576180][ T9259] ? __mutex_lock+0x1cc/0xa60 [ 316.580907][ T9259] ? __pfx_netlink_dump+0x10/0x10 [ 316.585977][ T9259] ? lock_acquire+0x2f/0xb0 [ 316.590510][ T9259] ? netlink_lookup+0x3d/0x270 [ 316.595311][ T9259] __netlink_dump_start+0x6d9/0x980 [ 316.600544][ T9259] ? __pfx_rtnl_bridge_getlink+0x10/0x10 [ 316.606222][ T9259] rtnetlink_rcv_msg+0xb44/0xea0 [ 316.611208][ T9259] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 316.616718][ T9259] ? __pfx_rtnl_dumpit+0x10/0x10 [ 316.621709][ T9259] ? __pfx_rtnl_bridge_getlink+0x10/0x10 [ 316.627405][ T9259] netlink_rcv_skb+0x165/0x410 [ 316.632208][ T9259] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 316.637718][ T9259] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 316.643058][ T9259] ? netlink_deliver_tap+0x1ae/0xca0 [ 316.648403][ T9259] netlink_unicast+0x53c/0x7f0 [ 316.653219][ T9259] ? __pfx_netlink_unicast+0x10/0x10 [ 316.658556][ T9259] ? __phys_addr_symbol+0x30/0x80 [ 316.663619][ T9259] ? __check_object_size+0x488/0x710 [ 316.668954][ T9259] netlink_sendmsg+0x8b8/0xd70 [ 316.673773][ T9259] ? __pfx_netlink_sendmsg+0x10/0x10 [ 316.679111][ T9259] ____sys_sendmsg+0x9ae/0xb40 [ 316.683918][ T9259] ? copy_msghdr_from_user+0x10b/0x160 [ 316.689428][ T9259] ? __pfx_____sys_sendmsg+0x10/0x10 [ 316.694768][ T9259] ___sys_sendmsg+0x135/0x1e0 [ 316.699495][ T9259] ? __pfx____sys_sendmsg+0x10/0x10 [ 316.704753][ T9259] ? __pfx_lock_release+0x10/0x10 [ 316.709816][ T9259] ? trace_lock_acquire+0x14e/0x1f0 [ 316.715076][ T9259] ? __fget_files+0x206/0x3a0 [ 316.719804][ T9259] __sys_sendmsg+0x16e/0x220 [ 316.724442][ T9259] ? __pfx___sys_sendmsg+0x10/0x10 [ 316.729621][ T9259] do_syscall_64+0xcd/0x250 [ 316.734169][ T9259] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 316.740107][ T9259] RIP: 0033:0x7f67acf85d19 [ 316.744551][ T9259] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 316.764192][ T9259] RSP: 002b:00007f67ade93038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 316.772648][ T9259] RAX: ffffffffffffffda RBX: 00007f67ad175fa0 RCX: 00007f67acf85d19 [ 316.780652][ T9259] RDX: 0000000000040000 RSI: 0000000020000240 RDI: 0000000000000004 [ 316.788655][ T9259] RBP: 00007f67ade93090 R08: 0000000000000000 R09: 0000000000000000 [ 316.796656][ T9259] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 316.804658][ T9259] R13: 0000000000000000 R14: 00007f67ad175fa0 R15: 00007ffd35e924b8 [ 316.812674][ T9259] [ 319.440413][ T54] Bluetooth: hci5: command 0x0406 tx timeout [ 320.192425][ T9330] FAULT_INJECTION: forcing a failure. [ 320.192425][ T9330] name failslab, interval 1, probability 0, space 0, times 0 [ 320.235297][ T9330] CPU: 1 UID: 0 PID: 9330 Comm: syz.2.912 Not tainted 6.13.0-rc3-syzkaller #0 [ 320.244254][ T9330] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 320.254374][ T9330] Call Trace: [ 320.257704][ T9330] [ 320.260712][ T9330] dump_stack_lvl+0x16c/0x1f0 [ 320.265476][ T9330] should_fail_ex+0x497/0x5b0 [ 320.270253][ T9330] should_failslab+0xc2/0x120 [ 320.275017][ T9330] kmem_cache_alloc_noprof+0x6e/0x3b0 [ 320.280476][ T9330] ? skb_clone+0x190/0x3f0 [ 320.284986][ T9330] skb_clone+0x190/0x3f0 [ 320.289318][ T9330] netlink_deliver_tap+0xafd/0xca0 [ 320.294521][ T9330] ? __pfx_rtnl_bridge_getlink+0x10/0x10 [ 320.300239][ T9330] netlink_dump+0x639/0xd00 [ 320.304813][ T9330] ? __pfx_netlink_dump+0x10/0x10 [ 320.309927][ T9330] ? lock_acquire+0x2f/0xb0 [ 320.314483][ T9330] ? netlink_lookup+0x3d/0x270 [ 320.319323][ T9330] __netlink_dump_start+0x6d9/0x980 [ 320.324591][ T9330] ? __pfx_rtnl_bridge_getlink+0x10/0x10 [ 320.330299][ T9330] rtnetlink_rcv_msg+0xb44/0xea0 [ 320.335316][ T9330] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 320.340855][ T9330] ? __pfx_rtnl_dumpit+0x10/0x10 [ 320.345889][ T9330] ? __pfx_rtnl_bridge_getlink+0x10/0x10 [ 320.351613][ T9330] netlink_rcv_skb+0x165/0x410 [ 320.356448][ T9330] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 320.361989][ T9330] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 320.367367][ T9330] ? netlink_deliver_tap+0x1ae/0xca0 [ 320.372752][ T9330] netlink_unicast+0x53c/0x7f0 [ 320.377595][ T9330] ? __pfx_netlink_unicast+0x10/0x10 [ 320.382951][ T9330] ? __phys_addr_symbol+0x30/0x80 [ 320.388049][ T9330] ? __check_object_size+0x488/0x710 [ 320.393423][ T9330] netlink_sendmsg+0x8b8/0xd70 [ 320.398265][ T9330] ? __pfx_netlink_sendmsg+0x10/0x10 [ 320.403637][ T9330] ____sys_sendmsg+0x9ae/0xb40 [ 320.408486][ T9330] ? copy_msghdr_from_user+0x10b/0x160 [ 320.414034][ T9330] ? __pfx_____sys_sendmsg+0x10/0x10 [ 320.419415][ T9330] ___sys_sendmsg+0x135/0x1e0 [ 320.424192][ T9330] ? __pfx____sys_sendmsg+0x10/0x10 [ 320.429510][ T9330] ? __pfx_lock_release+0x10/0x10 [ 320.434601][ T9330] ? trace_lock_acquire+0x14e/0x1f0 [ 320.439893][ T9330] ? __fget_files+0x206/0x3a0 [ 320.444665][ T9330] __sys_sendmsg+0x16e/0x220 [ 320.449349][ T9330] ? __pfx___sys_sendmsg+0x10/0x10 [ 320.454577][ T9330] do_syscall_64+0xcd/0x250 [ 320.459156][ T9330] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 320.465125][ T9330] RIP: 0033:0x7f67acf85d19 [ 320.469601][ T9330] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 320.489285][ T9330] RSP: 002b:00007f67ade93038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 320.497784][ T9330] RAX: ffffffffffffffda RBX: 00007f67ad175fa0 RCX: 00007f67acf85d19 [ 320.505824][ T9330] RDX: 0000000000040000 RSI: 0000000020000240 RDI: 0000000000000004 [ 320.513870][ T9330] RBP: 00007f67ade93090 R08: 0000000000000000 R09: 0000000000000000 [ 320.521904][ T9330] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 320.529934][ T9330] R13: 0000000000000000 R14: 00007f67ad175fa0 R15: 00007ffd35e924b8 [ 320.538007][ T9330] [ 321.809377][ T9357] FAULT_INJECTION: forcing a failure. [ 321.809377][ T9357] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 321.833864][ T9357] CPU: 1 UID: 0 PID: 9357 Comm: syz.4.921 Not tainted 6.13.0-rc3-syzkaller #0 [ 321.842812][ T9357] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 321.852923][ T9357] Call Trace: [ 321.856247][ T9357] [ 321.859218][ T9357] dump_stack_lvl+0x16c/0x1f0 [ 321.863965][ T9357] should_fail_ex+0x497/0x5b0 [ 321.868721][ T9357] _copy_to_user+0x32/0xd0 [ 321.873213][ T9357] simple_read_from_buffer+0xd0/0x160 [ 321.878682][ T9357] proc_fail_nth_read+0x198/0x270 [ 321.883794][ T9357] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 321.889427][ T9357] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 321.895056][ T9357] vfs_read+0x1df/0xbe0 [ 321.899286][ T9357] ? __fget_files+0x1fc/0x3a0 [ 321.904039][ T9357] ? __pfx___mutex_lock+0x10/0x10 [ 321.909137][ T9357] ? __pfx_vfs_read+0x10/0x10 [ 321.913891][ T9357] ? __fget_files+0x206/0x3a0 [ 321.918648][ T9357] ksys_read+0x12b/0x250 [ 321.922965][ T9357] ? __pfx_ksys_read+0x10/0x10 [ 321.927811][ T9357] do_syscall_64+0xcd/0x250 [ 321.932404][ T9357] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 321.938371][ T9357] RIP: 0033:0x7f8d1998472c [ 321.942844][ T9357] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 321.962522][ T9357] RSP: 002b:00007f8d1a808030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 321.971016][ T9357] RAX: ffffffffffffffda RBX: 00007f8d19b75fa0 RCX: 00007f8d1998472c [ 321.979062][ T9357] RDX: 000000000000000f RSI: 00007f8d1a8080a0 RDI: 0000000000000005 [ 321.987088][ T9357] RBP: 00007f8d1a808090 R08: 0000000000000000 R09: 0000000000000000 [ 321.995108][ T9357] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 322.003132][ T9357] R13: 0000000000000000 R14: 00007f8d19b75fa0 R15: 00007fff28b2e608 [ 322.011184][ T9357] [ 322.120396][ T9364] netlink: 342 bytes leftover after parsing attributes in process `syz.2.923'. [ 322.475807][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 322.482201][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 324.708316][ T9399] ima: policy update failed [ 324.723392][ T30] audit: type=1802 audit(1734370136.219:11): pid=9399 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.7.934" res=0 errno=0 [ 328.164863][ T9433] netlink: 108 bytes leftover after parsing attributes in process `syz.7.945'. [ 328.225809][ T31] INFO: task syz-executor:5836 blocked for more than 143 seconds. [ 328.234991][ T31] Not tainted 6.13.0-rc3-syzkaller #0 [ 328.246473][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 328.275493][ T31] task:syz-executor state:D stack:23024 pid:5836 tgid:5836 ppid:1 flags:0x00004004 [ 328.345387][ T31] Call Trace: [ 328.356036][ T31] [ 328.359068][ T31] __schedule+0xe58/0x5ad0 [ 328.363546][ T31] ? __pfx___lock_acquire+0x10/0x10 [ 328.395261][ T31] ? __pfx___lock_acquire+0x10/0x10 [ 328.400601][ T31] ? __pfx___schedule+0x10/0x10 [ 328.418822][ T31] ? schedule+0x298/0x350 [ 328.428964][ T31] ? __pfx_lock_release+0x10/0x10 [ 328.434106][ T31] ? __mutex_trylock_common+0x78/0x250 [ 328.465672][ T31] ? lock_acquire+0x2f/0xb0 [ 328.470381][ T31] ? schedule+0x1fd/0x350 [ 328.474795][ T31] schedule+0xe7/0x350 [ 328.493124][ T31] schedule_preempt_disabled+0x13/0x30 [ 328.515314][ T31] __mutex_lock+0x62b/0xa60 [ 328.522902][ T31] ? nfsd_shutdown_threads+0x5b/0xf0 [ 328.532495][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 328.552509][ T31] ? __pfx_lock_release+0x10/0x10 [ 328.613911][ T31] ? nfsd_shutdown_threads+0x5b/0xf0 [ 328.638811][ T31] nfsd_shutdown_threads+0x5b/0xf0 [ 328.644037][ T31] nfsd_umount+0x48/0xe0 [ 328.665292][ T31] deactivate_locked_super+0xbe/0x1a0 [ 328.670767][ T31] deactivate_super+0xde/0x100 [ 328.685576][ T31] cleanup_mnt+0x222/0x450 [ 328.690094][ T31] task_work_run+0x14e/0x250 [ 328.705424][ T31] ? __pfx_task_work_run+0x10/0x10 [ 328.710677][ T31] syscall_exit_to_user_mode+0x27b/0x2a0 [ 328.725237][ T31] do_syscall_64+0xda/0x250 [ 328.729867][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 328.748472][ T31] RIP: 0033:0x7f7840f87047 [ 328.752976][ T31] RSP: 002b:00007fff10b87e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 328.778844][ T31] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f7840f87047 [ 328.794697][ T31] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff10b87f20 [ 328.805309][ T31] RBP: 00007fff10b87f20 R08: 0000000000000000 R09: 0000000000000000 [ 328.813361][ T31] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007fff10b88fa0 [ 328.834492][ T31] R13: 00007f784100180c R14: 00007fff10b88fe0 R15: 0000000000000067 [ 328.855367][ T31] [ 328.858539][ T31] [ 328.858539][ T31] Showing all locks held in the system: [ 328.875334][ T31] 1 lock held by khungtaskd/31: [ 328.880271][ T31] #0: ffffffff8ddba940 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x7f/0x390 [ 328.903579][ T31] 2 locks held by getty/5597: [ 328.915106][ T31] #0: ffff888034f2a0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 328.935086][ T31] #1: ffffc90002fde2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0xfba/0x1480 [ 328.955302][ T31] 2 locks held by syz-executor/5834: [ 328.960665][ T31] #0: ffff888033d6a0e0 (&type->s_umount_key#52){+.+.}-{4:4}, at: deactivate_super+0xd6/0x100 [ 328.990974][ T31] #1: ffffffff8e1baa88 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 329.014313][ T31] 2 locks held by syz-executor/5835: [ 329.022010][ T31] #0: ffff888012ff40e0 (&type->s_umount_key#52){+.+.}-{4:4}, at: deactivate_super+0xd6/0x100 [ 329.035197][ T31] #1: ffffffff8e1baa88 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 329.044924][ T31] 2 locks held by syz-executor/5836: [ 329.064170][ T31] #0: ffff88807a45a0e0 (&type->s_umount_key#52){+.+.}-{4:4}, at: deactivate_super+0xd6/0x100 [ 329.082081][ T31] #1: ffffffff8e1baa88 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 329.100867][ T31] 2 locks held by syz.3.223/6769: [ 329.122707][ T31] #0: ffffffff8fb5db10 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 329.141771][ T31] #1: ffffffff8e1baa88 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_set_doit+0x694/0xbe0 [ 329.160281][ T31] 2 locks held by syz-executor/7426: [ 329.165773][ T31] #0: ffff88802fc620e0 (&type->s_umount_key#52){+.+.}-{4:4}, at: deactivate_super+0xd6/0x100 [ 329.177009][ T31] #1: ffffffff8e1baa88 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 329.188150][ T31] 2 locks held by syz-executor/8511: [ 329.193497][ T31] #0: ffff8880504fe0e0 (&type->s_umount_key#52){+.+.}-{4:4}, at: deactivate_super+0xd6/0x100 [ 329.204062][ T31] #1: ffffffff8e1baa88 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 329.214519][ T31] 3 locks held by syz.7.871/9209: [ 329.219651][ T31] #0: ffff88803d300d80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_dev_do_close+0x26/0x90 [ 329.229494][ T31] #1: ffff88803d300078 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x34c/0x1250 [ 329.239471][ T31] #2: ffffffff8ddc6278 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x1a4/0x3b0 [ 329.249820][ T31] 1 lock held by syz.4.946/9443: [ 329.254809][ T31] #0: ffffffff8ddc6278 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x282/0x3b0 [ 329.286482][ T31] [ 329.288908][ T31] ============================================= [ 329.288908][ T31] [ 329.299742][ T31] NMI backtrace for cpu 1 [ 329.304127][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.13.0-rc3-syzkaller #0 [ 329.312952][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 329.323070][ T31] Call Trace: [ 329.326395][ T31] [ 329.329366][ T31] dump_stack_lvl+0x116/0x1f0 [ 329.334104][ T31] nmi_cpu_backtrace+0x27b/0x390 [ 329.339120][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 329.345177][ T31] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 329.351246][ T31] watchdog+0xf14/0x1240 [ 329.355553][ T31] ? __pfx_watchdog+0x10/0x10 [ 329.360282][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 329.365537][ T31] ? __kthread_parkme+0x148/0x220 [ 329.370626][ T31] ? __pfx_watchdog+0x10/0x10 [ 329.375357][ T31] kthread+0x2c1/0x3a0 [ 329.379482][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 329.384730][ T31] ? __pfx_kthread+0x10/0x10 [ 329.389383][ T31] ret_from_fork+0x45/0x80 [ 329.393850][ T31] ? __pfx_kthread+0x10/0x10 [ 329.398505][ T31] ret_from_fork_asm+0x1a/0x30 [ 329.403359][ T31] [ 329.407339][ T31] Sending NMI from CPU 1 to CPUs 0: [ 329.413148][ C0] NMI backtrace for cpu 0 [ 329.413173][ C0] CPU: 0 UID: 0 PID: 63 Comm: kworker/u8:4 Not tainted 6.13.0-rc3-syzkaller #0 [ 329.413204][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 329.413221][ C0] Workqueue: bat_events batadv_nc_worker [ 329.413262][ C0] RIP: 0010:find_held_lock+0xcf/0x110 [ 329.413298][ C0] Code: 04 20 38 d0 7f 04 84 c0 75 50 40 32 6b 21 83 e5 60 74 96 31 db 48 b8 00 00 00 00 00 fc ff df 4c 89 f2 48 c1 ea 03 0f b6 14 02 <4c> 89 f0 83 e0 07 83 c0 03 38 d0 7c 04 84 d2 75 15 45 89 3e 48 89 [ 329.413323][ C0] RSP: 0018:ffffc9000213fa98 EFLAGS: 00000802 [ 329.413343][ C0] RAX: dffffc0000000000 RBX: ffff88801cb4a930 RCX: ffffc9000213fb20 [ 329.413361][ C0] RDX: 0000000000000004 RSI: ffffffff8ddba940 RDI: ffff88801cb4a930 [ 329.413380][ C0] RBP: 0000000000000003 R08: 0000000000000000 R09: fffffbfff2039b32 [ 329.413397][ C0] R10: ffffffff901cd997 R11: 0000000000000002 R12: ffffffff8ddba940 [ 329.413415][ C0] R13: ffffffff8ddba940 R14: ffffc9000213fb20 R15: 0000000000000002 [ 329.413433][ C0] FS: 0000000000000000(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 329.413460][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 329.413479][ C0] CR2: 00000000010f7000 CR3: 000000000db7e000 CR4: 00000000003526f0 [ 329.413496][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 329.413512][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 329.413529][ C0] Call Trace: [ 329.413537][ C0] [ 329.413546][ C0] ? nmi_cpu_backtrace+0x1d8/0x390 [ 329.413590][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 329.413631][ C0] ? nmi_handle+0x1ac/0x5d0 [ 329.413661][ C0] ? find_held_lock+0xcf/0x110 [ 329.413693][ C0] ? default_do_nmi+0x6a/0x160 [ 329.413733][ C0] ? exc_nmi+0x170/0x1e0 [ 329.413772][ C0] ? end_repeat_nmi+0xf/0x53 [ 329.413812][ C0] ? find_held_lock+0xcf/0x110 [ 329.413845][ C0] ? find_held_lock+0xcf/0x110 [ 329.413878][ C0] ? find_held_lock+0xcf/0x110 [ 329.413911][ C0] [ 329.413919][ C0] [ 329.413928][ C0] lock_release+0x227/0x6f0 [ 329.413961][ C0] ? batadv_nc_worker+0x887/0x1060 [ 329.413997][ C0] ? __pfx_lock_release+0x10/0x10 [ 329.414020][ C0] ? trace_lock_acquire+0x14e/0x1f0 [ 329.414057][ C0] ? lock_acquire+0x2f/0xb0 [ 329.414079][ C0] ? batadv_nc_worker+0x164/0x1060 [ 329.414117][ C0] batadv_nc_worker+0x88c/0x1060 [ 329.414157][ C0] ? __pfx_batadv_nc_worker+0x10/0x10 [ 329.414194][ C0] ? rcu_is_watching+0x12/0xc0 [ 329.414227][ C0] ? trace_lock_acquire+0x14e/0x1f0 [ 329.414263][ C0] ? process_one_work+0x8bb/0x1b30 [ 329.414307][ C0] ? lock_acquire+0x2f/0xb0 [ 329.414329][ C0] ? process_one_work+0x8bb/0x1b30 [ 329.414373][ C0] process_one_work+0x958/0x1b30 [ 329.414418][ C0] ? __pfx_toggle_allocation_gate+0x10/0x10 [ 329.414454][ C0] ? __pfx_process_one_work+0x10/0x10 [ 329.414497][ C0] ? rcu_is_watching+0x12/0xc0 [ 329.414532][ C0] ? assign_work+0x1a0/0x250 [ 329.414573][ C0] worker_thread+0x6c8/0xf00 [ 329.414600][ C0] ? __kthread_parkme+0x148/0x220 [ 329.414634][ C0] ? __pfx_worker_thread+0x10/0x10 [ 329.414658][ C0] kthread+0x2c1/0x3a0 [ 329.414688][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 329.414715][ C0] ? __pfx_kthread+0x10/0x10 [ 329.414746][ C0] ret_from_fork+0x45/0x80 [ 329.414771][ C0] ? __pfx_kthread+0x10/0x10 [ 329.414802][ C0] ret_from_fork_asm+0x1a/0x30 [ 329.414847][ C0] [ 329.785633][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 329.792555][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.13.0-rc3-syzkaller #0 [ 329.801366][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 329.811462][ T31] Call Trace: [ 329.814759][ T31] [ 329.817714][ T31] dump_stack_lvl+0x3d/0x1f0 [ 329.822344][ T31] panic+0x71d/0x800 [ 329.826289][ T31] ? __pfx_panic+0x10/0x10 [ 329.830746][ T31] ? preempt_schedule_thunk+0x1a/0x30 [ 329.836156][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 329.842181][ T31] ? preempt_schedule_thunk+0x1a/0x30 [ 329.847588][ T31] ? watchdog+0xd7e/0x1240 [ 329.852032][ T31] ? watchdog+0xd71/0x1240 [ 329.856487][ T31] watchdog+0xd8f/0x1240 [ 329.860770][ T31] ? __pfx_watchdog+0x10/0x10 [ 329.865476][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 329.870720][ T31] ? __kthread_parkme+0x148/0x220 [ 329.875786][ T31] ? __pfx_watchdog+0x10/0x10 [ 329.880499][ T31] kthread+0x2c1/0x3a0 [ 329.884604][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 329.889892][ T31] ? __pfx_kthread+0x10/0x10 [ 329.894523][ T31] ret_from_fork+0x45/0x80 [ 329.898975][ T31] ? __pfx_kthread+0x10/0x10 [ 329.903609][ T31] ret_from_fork_asm+0x1a/0x30 [ 329.908433][ T31] [ 329.911838][ T31] Kernel Offset: disabled [ 329.916189][ T31] Rebooting in 86400 seconds..