last executing test programs: 23m30.511272964s ago: executing program 32 (id=94): ioperm$auto(0x7, 0x6, 0x2) prlimit64$auto(0x1, 0x400000000003, 0x0, 0x0) (async, rerun: 32) socket(0x2c, 0x3, 0x73) (rerun: 32) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) (async, rerun: 32) connect$auto(0x3, 0x0, 0x55) (rerun: 32) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) madvise$auto(0x0, 0xffffffffffff0001, 0x15) (async, rerun: 32) munmap$auto(0xfffffffffffffffd, 0x4) (async, rerun: 32) mmap$auto(0x0, 0x200004, 0x4000000000df, 0x40eb2, 0x402, 0x300000000000) mlockall$auto(0x7) (async) mprotect$auto(0x0, 0x8000000000000001, 0x6) (async) clone3$auto(0x0, 0x40) (async) getrandom$auto(0x0, 0x5fffffc, 0x3) (async) mbind$auto(0x0, 0x100000004, 0x100000000, 0x0, 0x20000000000006, 0x2) bpf$auto(0x5, &(0x7f0000003c80)=@bpf_attr_7={@map_id=0x8, 0x81, 0xf}, 0x5) (async, rerun: 32) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (rerun: 32) getrandom$auto(0x0, 0x6000000, 0x3) (async, rerun: 64) remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0x3, 0x4) (rerun: 64) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) (async) memfd_create$auto(&(0x7f0000000040)='A^^\x02\x00\xef\x97\x8aY\x00\x00\xd2\x8c\xb05\x03\\\xb2\xbf247{\xde\t8\f\x00\x00\v\x00\x82\xcc\"K\xe1IIT\x00'/54, 0x4) fallocate$auto(0x3, 0x0, 0xe, 0x8ec5) mlockall$auto(0x7) mmap$auto(0x0, 0x200006, 0x2, 0x40eb1, 0x602, 0x300000000000) (async) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) stat$auto(&(0x7f0000000000)='..\x00\x00', 0x0) (async, rerun: 32) mount$auto(0x0, 0xfffffffffffffffd, 0xfffffffffffffffe, 0x2, 0x0) (rerun: 32) ioctl$auto(0xc8, 0x5452, 0x0) madvise$auto(0x0, 0x80000001, 0x9) getpriority$auto(0x2, 0x0) 23m8.047649327s ago: executing program 33 (id=174): sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, 0x0, 0x8004) mq_unlink$auto(&(0x7f0000000000)='(/}%!-\x00') connect$auto(0xffffffffffffffff, 0x0, 0x5) (async) connect$auto(0xffffffffffffffff, 0x0, 0x5) r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x9, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket(0xa, 0x2, 0x73) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) socket(0x2, 0x80002, 0x73) (async) socket(0x2, 0x80002, 0x73) mmap$auto(0x0, 0x20009, 0xdf, 0x8010, 0x40000000000a5, 0x8000) (async) mmap$auto(0x0, 0x20009, 0xdf, 0x8010, 0x40000000000a5, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x3, 0x7) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) (async) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0) getsockopt$auto(0x3, 0x200000000001, 0x1c, 0x0, 0x0) r1 = syz_genetlink_get_family_id$auto_MAC80211_HWSIM(&(0x7f0000000640), r0) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x30, r1, 0x1, 0x70b525, 0x25dfdbfc, {}, [@HWSIM_ATTR_IFTYPE_SUPPORT={0x8, 0x17, 0x81}, @HWSIM_ATTR_SIGNAL={0x8, 0x6, 0x3}, @HWSIM_ATTR_NO_VIF={0x4}, @HWSIM_ATTR_REG_CUSTOM_REG={0x8, 0xc, 0x3}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000904}, 0x4008884) (async) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x30, r1, 0x1, 0x70b525, 0x25dfdbfc, {}, [@HWSIM_ATTR_IFTYPE_SUPPORT={0x8, 0x17, 0x81}, @HWSIM_ATTR_SIGNAL={0x8, 0x6, 0x3}, @HWSIM_ATTR_NO_VIF={0x4}, @HWSIM_ATTR_REG_CUSTOM_REG={0x8, 0xc, 0x3}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000904}, 0x4008884) openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x40400, 0x48) (async) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x40400, 0x48) fchmod$auto(r2, 0x7439) (async) fchmod$auto(r2, 0x7439) open(&(0x7f0000000000)='./file0\x00', 0xa61c2, 0x84) close_range$auto(0x2, 0x8, 0x0) 22m9.487142867s ago: executing program 34 (id=375): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x8, 0x8, 0x52, 0x15, 0x10, 0x7) personality$auto(0x8) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) socket(0xa, 0x801, 0x106) setsockopt$auto(0x3, 0x6, 0x6, 0x0, 0x409) r0 = socket(0xa, 0x2, 0x3a) bind$auto(r0, &(0x7f0000000000)={0xa}, 0x6b) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) sendmsg$auto_BATADV_CMD_TP_METER(0xffffffffffffffff, 0x0, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}}, 0x40000) mknod$auto(&(0x7f0000000180)=':,\x00', 0xc9, 0xfffffffa) close_range$auto(0x0, r0, 0x6) mmap$auto(0x4, 0x1ff, 0x0, 0x19, 0x7ff, 0x7) open(&(0x7f0000000000)='./file0\x00', 0x7ffd, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) fanotify_init$auto(0x5, 0x2000000000002) socket(0x2a, 0x6, 0x4) close_range$auto(0x2, 0x8000, 0x0) io_uring_setup$auto(0x8, 0x0) open(0x0, 0x4242, 0xe1d2b27bdc14aabc) open(0x0, 0x10677d, 0x37e5c9853cd1b999) fanotify_mark$auto(0x0, 0x1, 0x9, 0x4, 0x0) fallocate$auto(0x8000000000000003, 0x0, 0xd, 0xcbd5d) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) r1 = open(&(0x7f0000000080)='./file0\x00', 0x22000, 0x50) fsync$auto(r1) sendmsg$auto_NFC_CMD_ENABLE_SE(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000180)=ANY=[@ANYBLOB="f40b0000", @ANYRES16, @ANYBLOB="2d2d28bd7000fcdbdf2511000000060011000000000005000a001000000008000e004207000008000400d10000000a00140023267d495b2e000005000b00040000000800010003000000a10b19006f1e736735779590c0e52c923a103e6f5f2531a6aa94ef27b6767b1c4e2f1a0d4b1bfbb9aee5a8b9d7bee224dff48d4acba6cd4f7540726fa1ba62824038ce29b2ff76522583fc4f5f179ba251b5068bf13e82db2d76a7acefa6bdc447190ed3130e827e16522e997d32639bee86dcdeff4e3cbd6443f5d3cae29886967a2d77a848b88c0c8021d53679c6f5d8d54bb492fb4bff384b7daee5c008e4049f183f4fe35d6b1a1063cb6753256d15b83cb031079b5b4af99b8eceba9c914199e5cdc568e331a5fdb10fa4b5f2c5ac4150d28e453a44216022de868c0daad6f1772395db50edeae052927bb716acc13ae182060c693fe14ad99d385069bc1516e84232cc69b644c078b9dc420d5e3b2d7547ca99f28da9440b30930597f2d4389df07e09fef6069c3fbfd1440d2be3a87d84ae02955b36ba11e277ea1860593127a3ff91b46a5083f4a68f4036634d3384c3a6614f725ff5ec9d43b62551b74bc83b9995d63cb8075320febaa7a73d"], 0xbf4}}, 0x4000000) mount$auto(0x0, &(0x7f00000002c0)='/\x00', &(0x7f0000000300)='cifs\x00', 0x7, &(0x7f0000000340)) 21m42.845761682s ago: executing program 35 (id=537): connect$auto(0xffffffffffffffff, 0x0, 0x9c) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x5, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x2, 0x7) close_range$auto(0x0, 0xffffffffffffffff, 0x3b8) mmap$auto(0x0, 0x400008, 0xdf, 0x38, 0x6, 0x8000) madvise$auto(0x0, 0x2000040080000004, 0xe) clone$auto(0x2020003b46, 0x2, 0x0, 0x0, 0x8000000000000001) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1e, 0x1, 0x0) r0 = socket(0x10, 0x2, 0x0) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r0, &(0x7f0000000780)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000040)={0x6d8, 0x0, 0x400, 0x70bd2b, 0x25dfdbfd, {}, [@HWSIM_ATTR_PMSR_RESULT={0x9, 0x1c, "e6ec3406c9"}, @HWSIM_ATTR_FREQ={0x8, 0x13, 0x3}, @HWSIM_ATTR_FRAME={0x6a9, 0x3, "2f4bd7e24ff24f7b863c4df74907b9eacbec2ad9b9223752a50d422eb057f15c3008e79bd5e1ca177cbf8afe6160b7d8cf50b5ad1d5dfc24dd155653dbc75c5f02467257172c2e0be3b4516185e656a70171bffd6812ff37bd917741e28bb5871f2702267e5e760c2c7f1afcf9ebb17872916d4a3b6d5fa2786dcd1c54613431bc7c490ebdbfb10edcfc4d31b3341f08deeb1996dfcf9ef0b236887ef4ff2dd08e7713a6859bfba4f47e84156d29bb52408b19ed0c8286263e75c3af7b77914987ee5bdeb9aae779c7b7fa29435c96eb9389b035ee87c920ad9feae2b63aa84627abd935c53a998203ae6673541c79cf02234708132024843f67028c0e0d968a57b6ff561232ebe9dea7be9f8dd6b22c4b08c960287e56a8cf29b69992f293a130a734253f250b73e5a0f4959a9e5435a68f9b203d97fd7fb51dfc34655b4a7ea9be845a1c1079097c3d87d16c4255e132e79a2e0b5aa19548f9928a18e83449dbc4589a9372ef12136ebf6a5ac013d60155d329ed96e5f059f8021a978131afe170eba0770aabed4e911a12a5aede28970c63c3b8ec4c5d12ffd68bd9ac7e16e780cd79020c533731d93a9f144a6ae79e7ec7c3a8c1a70507816fec3bd0df152774866de0d2670dc445bbeeccac7c7fe20da6664bf715e3aad8003fe406958ede1a043f9caf532195d01442f5438251a72b98480b67991f43397a92f6bb63e3eb7e6ffe39148a83e9f0feb036dd043a8bc30f33f857d0031f760d7caa1a31092eb0103f2abd9a6cd2df385129d2351199159c76eb22c760532c109d5a3fbbc17abd09352e6285611f191ae220996113496f47568f3e6d5e77b5302b59fcb6852c0acaea205bd528d296f0dc91d2d30036059e12bccac49420569d6fc24c1d44dee8f1a80bb8ae61b0e3f7647a4e5900ff971e08fe732f8802a4e4f5da020ee16e09647aefe7f7301263605c7130537f87a77e358b014311c8a81a1c2acad28a0ea1a546211fcdd385227e68d8ec4952a795bec2db4074df7a92610f5000dd38fc2b1b6325fc05f2dff809b473030e737af7b0e40e3aa006571d4f0842221411c9bad11de4060b8d9dc74ee7bbb20ea46f046c7b80bf3bc9f8aca07a28c7268c28e7a1c8dddfd098bb1aa051d84106c493dee5ffc6f3de480cbcc2ee8cd2195cbd734b61b084a4cb0eb9a064bad30ebee4c1c51c5553e7c4c822a529efb624b8c949c559897a284b053555be020c29018df56af3697703a551883083cf247403a76b2add37c83da93514eb370e1781c3d379082e400837637eac175cbfc5cc03bf83f13b18777dabc68a76513830e340c909386fd5917c4029a5ee7944a57a2f44e04111a87b14577f881375dd3ea0d3e0e1cb92dd071026cc873d15ea099c2ac3923535cd872dc37194a406bd2f2875445fefd450725a17f1b683e360f119f6f44871b2f06171d1df92bc6453ad0ab28f907e7ade8b0c130f0cb489b89bc73518f5724d4ee7ccff0eb49b6c26a4470899ce4decc0f2c27a70bb5984576dd0e4df981d82ae1915731921ffb7320e24c18755bb56c94aa4e804884b96201eb6f93c53bffe30e0d6d0b5c7d2dc07f4f0b07bd97cbdb05a7e48c213b100d8341657b19e3595b004e4d6858ada5a5504360e1944e115fffe2890d646b24577c9d8fb81dcae3791c56a567c998e37f621d8167207da817a85d5f461f6b6cf4deeb5104a93f359caaab94fd619817f4c17a5b034e2f2fedc6c1034ad1df8d5c1fa827fbcd18ad64a8b68c00ac3ebb86444099bc1e19a34a9fc103067558a7e09cc10977fa8dadebb47a26d7b5213f414b471a19d727efdb434733a7afaafe72f2537185434d7a099ac5f91358e758c7601ed6ecbd6b84e8dc3c7479270c3eb6c04dd4334b53173e9c5e5a2737a70cd8766e04bdc907c2cbc4f1f6d90692a41da461fed7c5872a05dd4d841b0527007492ec225fea8cf3fbe6ca9cf7d5541fba32d8019971da15a9d81f2396262648a41dff9a935979dfb898e4cf0924778662c6f60f38164a5929aa4ca374976aa6c198687bdbd46f8048a798a337822c37eee1ad9a260386164fba2d1db2ab7b4b8dc76ef4306b5865cd0cd4f0ad8079c50a4c11b4d1b5ebf29c619164649985507ed43be55f8c500cadf82eee66c2120ab7d3147c91fb31cb3ab26a8d6badda7c2aeec0cdaa0b718af703888cb1269cb589a8ee3b582de842678c88bf2c38e708c25cff917fa1fc7b4a7a9d32b1972a36096122cb000000b85d5bb8638dc3677811b957922a2238982e544ddd659f65ed0bea15cd4934d436c8e2e21ffff4dcd7deee5f9af7efad2512b6ae8e74e64dc29a21064da1b70f61e278a6cb88318c168a0ea361ae7e50a624d5ffb63f5bce7bcf812c3d84253194c15"}, @HWSIM_ATTR_NO_VIF={0x4}]}, 0x6d8}, 0x1, 0x0, 0x0, 0x44044}, 0x80) madvise$auto(0x0, 0xffffffffffff0001, 0x15) readlinkat$auto(0x0, 0x0, 0x0, 0x2) shmat$auto(0x80000001, &(0x7f0000000740)='5{\x00', 0xffffffff) 20m40.666965869s ago: executing program 36 (id=734): socket(0xa, 0x801, 0x84) (async) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000021}, 0x8004) connect$auto(0x3, &(0x7f0000000140)={0xa, @sa_data_min="c4aeed448dc7fe8000"}, 0x55) (async) sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x14, 0x0, 0x1, 0x70bd28, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x4000804) (async) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) socket(0xa, 0x2, 0x88) (async) connect$auto(0x3, &(0x7f00000000c0)={0x2, @sockaddr_1_1}, 0x55) (async) connect$auto(0x3, &(0x7f0000000000)={0x2, @sa_data_min="0800e00000000000c1728d2af766"}, 0x55) (async) syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000180), 0xffffffffffffffff) (async) sendmmsg$auto(0x3, &(0x7f0000000000)={{0x0, 0x2, 0x0, 0x106, 0x0, 0x1, 0x697b}, 0xed7138c}, 0x9a6, 0xe000) shutdown$auto(0x200000003, 0x2) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) unshare$auto(0x40000080) (async) clone$auto(0x8001, 0x5, 0xffffffffffffffff, 0xfffffffffffffffc, 0x6) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000a00), 0xffffffffffffffff) mmap$auto(0x0, 0x8, 0x2, 0x9b72, 0x5, 0x0) (async) clone$auto(0x0, 0x6, &(0x7f0000000000)=0x4, &(0x7f0000000240)=0x2, 0x78f) (async) io_uring_setup$auto(0x6, 0x0) (async) open(&(0x7f0000000280)='./file0\x00', 0x103000, 0x2) (async) read$auto(0x3, 0x0, 0x10) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) close_range$auto(0x2, 0x8, 0x0) (async) socket(0x10, 0x2, 0xc) (async) socket(0x28, 0x1, 0x0) (async) connect$auto(0x3, &(0x7f0000000180)={0x28, @sockaddr_1_1}, 0x54) (async) statmount$auto(0x0, &(0x7f0000000040)={0x0, 0x0, 0x36, 0x828, 0x9, 0x8000000000000000, 0x8, 0x7, 0x9, 0x5, 0x5, 0x9, 0x3, 0x8, 0x5, 0xf, 0xffffffff, 0x9, 0x10001, 0x5, [0x9, 0x87f, 0x77, 0x1, 0x7fffffffffffffff, 0xe06, 0x404, 0x3, 0x80000000, 0x9, 0x4, 0xfffffffffffffff9, 0x10, 0x8, 0x35c4, 0x1, 0x6, 0x8, 0x8, 0x8, 0xd8, 0x8, 0x5, 0x1, 0x40200000000803, 0x9, 0x5, 0x401, 0x800, 0x8000000000000000, 0x2ab, 0x8, 0x7ff, 0x7, 0x1, 0x100, 0xffffffffffff0000, 0x6b, 0xfffffffffffffff9, 0x4, 0x5, 0x4, 0xf, 0xffffffffffffff26, 0xecc, 0x7fffffff, 0x6, 0x7d, 0xdc]}, 0xe3c, 0x0) (async) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) (async) connect$auto(0x3, &(0x7f0000000180)={0x28, @sockaddr_1_1}, 0x54) 19m12.072987891s ago: executing program 37 (id=1090): mmap$auto(0x0, 0x402000b, 0xdf, 0xeb1, 0x401, 0x8000) prctl$auto(0x3f, 0x2, 0x4, 0x5, 0x10004) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0xffffffffffff0001, 0x15) pselect6$auto(0x2, 0x0, &(0x7f00000000c0)={[0x1, 0xb44f, 0x2e9, 0x1, 0xfffffffff0000000, 0x0, 0x1, 0x4, 0x1, 0x7, 0x4, 0x4, 0x10003, 0x2e0, 0xffffffffffffffff, 0x2]}, 0x0, 0x0, &(0x7f0000000280)) epoll_pwait2$auto(0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0, 0x62) 18m59.771570208s ago: executing program 38 (id=1219): mmap$auto(0xfffffffffffffffc, 0x9, 0x2000000000001df, 0x100000000410, 0x40000000000002, 0x8000) socket(0xa, 0x2, 0x88) mmap$auto(0x7fff, 0x4, 0x100000000, 0x14, 0x6, 0x7fffffffffffffff) select$auto(0x3, 0x0, &(0x7f0000000100)={[0x9, 0x200, 0x800000000000000, 0x0, 0x4, 0x7ff, 0x0, 0x5, 0xb, 0x5e5c296f, 0x4000000000000000, 0x3, 0x3, 0x800000200, 0x8]}, 0x0, 0x0) connect$auto(0x3, &(0x7f0000000140)={0xa, @sa_data_min="c4aeed448dc7fe8000"}, 0x55) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) connect$auto(0x3, &(0x7f0000000040)={0x2, @sa_data_min="9057130be82ba522e95cf480395e"}, 0x55) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x9fe) mremap$auto(0x0, 0xffffffffffffffff, 0x3fd6, 0x7, 0x7fffffffb000) 18m56.433551964s ago: executing program 39 (id=1242): madvise$auto(0x0, 0x7fffffffffffffff, 0xa) bpf$auto(0x0, 0x0, 0x6f4) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000080), r0) sendmsg$auto_NFSD_CMD_THREADS_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r1, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@NFSD_A_SERVER_THREADS={0x8, 0x1, 0x6f8d}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000021}, 0x8004) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socket$nl_generic(0x10, 0x3, 0x10) unshare$auto(0x20000) mount$auto(0x0, &(0x7f00000001c0)='.\x00', 0x0, 0x4, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x2, 0x3a) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x5, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid\x00') clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socket(0x11, 0x2, 0x73) socket(0xa, 0x80000, 0x8) connect$auto(0x5, &(0x7f0000000240)={0x402, @sockaddr_1_1}, 0x7) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) mmap$auto(0x0, 0x10000c5, 0x0, 0x40eb2, 0x402, 0x300000000000) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x5, 0x0) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) 18m49.180206468s ago: executing program 40 (id=1260): unshare$auto(0x40000080) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) getrandom$auto(0x0, 0x6000000, 0x3) ioctl$auto(0xc8, 0x400454d9, 0x5c8d) mlockall$auto(0x7) mmap$auto(0xffffffffffffffc0, 0x2020009, 0x0, 0xeb1, 0xfff, 0x8000) socket(0x1, 0x1, 0x1) mmap$auto(0x0, 0x400008, 0xdd, 0x38, 0x1, 0x8000000000000000) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000080), r0) socket(0x23, 0x80000, 0x4) sendmsg$auto_BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="afa729bd7000ffdbdf250e00000008000300d2ce"], 0x1c}, 0x1, 0x0, 0x0, 0x804}, 0x20000000) close_range$auto(0x0, 0x5, 0x0) fanotify_init$auto(0x5, 0x2000000000002) inotify_init1$auto(0x3000000000000) r2 = socket(0x15, 0x5, 0x0) fsopen$auto(&(0x7f0000000100)='MAC80211_HWSIM\x00', 0x5) getsockopt$auto(0x2, 0x114, 0x8, 0xfffffffffffffffc, 0x0) mlockall$auto(0x4) socket(0x2c, 0x80003, 0x0) ioctl$auto(0xc9, 0x100000002, 0x4000000005c8d) r3 = socket$nl_generic(0x10, 0x3, 0x10) memfd_create$auto(&(0x7f0000000000)='\x8a\x00', 0x16) fallocate$auto(0x8000000000000003, 0x0, 0xd, 0x2cbd5d) socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_MAC80211_HWSIM(&(0x7f0000000080), r2) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r3, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000000c0)={0x1c, r4, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@HWSIM_ATTR_REG_CUSTOM_REG={0x8, 0xc, 0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x48000) sendmsg$auto_HWSIM_CMD_NEW_RADIO(0xffffffffffffffff, 0x0, 0x48000) pipe2$auto(0x0, 0x80) syz_genetlink_get_family_id$auto_TASKSTATS(&(0x7f0000000040), 0xffffffffffffffff) 14m54.768537393s ago: executing program 41 (id=2104): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_netdev(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$auto_NETDEV_CMD_PAGE_POOL_GET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x14, r2, 0x301, 0x70bd26, 0x25dfdc02}, 0x14}, 0x1, 0x0, 0x0, 0x8810}, 0x0) sendmsg$auto_NETDEV_CMD_BIND_RX(r0, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x34, r2, 0x200, 0x70bd2d, 0x25dfdbfe, {}, [@NETDEV_A_DMABUF_QUEUES={0x7, 0x2, 'PNr'}, @NETDEV_A_DMABUF_FD={0x8, 0x3, r0}, @NETDEV_A_DMABUF_QUEUES={0x7, 0x2, "d978c2"}, @NETDEV_A_DMABUF_FD={0x8, 0x3, r0}]}, 0x34}, 0x1, 0x0, 0x0, 0x15}, 0x40) r3 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f0000000040), 0xffffffffffffffff) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket$nl_generic(0x10, 0x3, 0x10) pidfd_open$auto(0x1, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/mnt\x00') socket(0x10, 0x2, 0x0) socket(0xa, 0x801, 0x84) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$auto(0x3, 0x10000000084, 0x13, 0x0, 0x4) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES8=r0, @ANYBLOB="00022bbd7000fddbdf25020000000800010003000000080001000100000008000300050000000800010006fffffffb000100ffff00000c0004005e242d7d5c2d270008000200190900000800020040000080080002000900000008000301050000006c8c786ac539ceab60bb0c0c39f634b3ee36a8cf38fcfbdd5ac5017c458e2b538e35485cc12578573013ed63acc4d6f136f89219cbd268f622f937262620f1ea70d904eb18ad9c6620e4ff602440953719a8848592b7e4a8c1c1279bf24abb16a80c6fcda9567f3941866b8868f247f5ddd4"], 0x68}, 0x1, 0x0, 0x0, 0x40000c0}, 0x240008c0) sendmsg$auto_CTRL_CMD_GETFAMILY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002abd77dcb7fcdf250300000001000000"], 0x24}, 0x1, 0x0, 0x0, 0x4008810}, 0x10000000) msync$auto(0x1ffff000, 0x100000000005, 0x400000004) 14m50.088442255s ago: executing program 42 (id=2123): r0 = socket$nl_generic(0x10, 0x3, 0x10) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0xa, 0x2, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) setsockopt$auto(0x400000000000003, 0x29, 0x1b, 0x0, 0x56b) setsockopt$auto(0x400000000000003, 0x29, 0x1c, 0x0, 0x56b) r3 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000080), r1) sendmsg$auto_NFSD_CMD_THREADS_SET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="01002dbd7000ffdbdf2502000000080001"], 0x1c}, 0x1, 0x0, 0x0, 0x40000021}, 0x8004) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) unshare$auto(0x20000) mount$auto(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000100)='nfsd\x00\xee\x1a\x8f\xa2~?\xe2\x82fg\xb3G\xbe\xc8\x12\xae\xc3\xc0@[\x99\xec\xbf(\xec\x83\xb2\xf2\x15Zi\xc4S6\'\x14\x05\t\x8c\xd5?\xa0\x00\xd8\xe4\xafW\xcc\xa3\xce\tI\x95\xe12\xaclJ\xba\xeb\xe4\x83Z\xaev\xd7\xd9\xdd_\x14O\x84\xaa\x13W\xb7\x06\'fvQ\x95\xc5\xd1\x98\xe3T\xcdfk\xc7\xe9\x96\r\x91\xb0\xc46\xf2\xfc\xef\xfe\xa0\xc9d\xb3h$\xeb\xad\xa4P\x8f\xc3bM{4RQ\x00\x9d)\x1f\xbby\xe5\xc4w\xca1\x88|\xe5\x1e\x10\x89X\x01\xe9\xf6g\x95xx\xaf\xa9~m\x05\xe1\xa8\xda\x80\xc5\x8f\xb41\x81\xf0Z>\xe1=\xb9\x92\xda\x13\xfe5\xfb\xc6\xd8>\x01\xd4\x14\x00'/192, 0x4, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/mnt\x00') setns(0xffffffffffffffff, 0x0) mount$auto(0x0, &(0x7f0000000000)='}[,&*}\x00\x0e\x15F\xf7\x1a\xd1K+\xedy\xc6\x9bb\x94\xb4^\xc2\x83%\xfbw}\xfb_P\"\x19\xdfi\xe9hA|Q\x8a_F\x04:Q\x90\'\x06', &(0x7f0000000380)='nfw\xf5P\x8bg\x97\f\xd4hbC0X+\xe4d\x00', 0x10001, 0x0) mount$auto(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000100)='nfsd\x00\xee\x1a\x8f\xa2~?\xe2\x82fg\xb3G\xbe\xc8\x12\xae\xc3\xc0@[\x99\xec\xbf(\xec\x83\xb2\xf2\x15Zi\xc4S6\'\x14\x05\t\x8c\xd5?\xa0\x00\xd8\xe4\xafW\xcc\xa3\xce\tI\x95\xe12\xaclJ\xba\xeb\xe4\x83Z\xaev\xd7\xd9\xdd_\x14O\x84\xaa\x13W\xb7\x06\'fvQ\x95\xc5\xd1\x98\xe3T\xcdfk\xc7\xe9\x96\r\x91\xb0\xc46\xf2\xfc\xef\xfe\xa0\xc9d\xb3h$\xeb\xad\xa4P\x8f\xc3bM{4RQ\x00\x9d)\x1f\xbby\xe5\xc4w\xca1\x88|\xe5\x1e\x10\x89X\x01\xe9\xf6g\x95xx\xaf\xa9~m\x05\xe1\xa8\xda\x80\xc5\x8f\xb41\x81\xf0Z>\xe1=\xb9\x92\xda\x13\xfe5\xfb\xc6\xd8>\x01\xd4\x14\x00'/192, 0x4, 0x0) ioperm$auto(0x3, 0x5, 0x149) iopl$auto(0x2) sendmsg$auto_CTRL_CMD_GETPOLICY(r0, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="4ea165f44843a9013460a14b118d604f0311b89b1470f692415559", @ANYRES16, @ANYBLOB="010325bd7040ffdbdf250a0000000c0002006e6c383032b131017f8a803a0000cbf411097312bbdb1ceaf3114cb159beab73f356e652168a15ac1804bc260270da2cdac236dd5b0478cc8cd3d617115dfe4c1c1cf08cad217cc46902b774e515bd0cd1afe15cea56cdf420dcdb53e871dc279f9376155dad2d64efc14da9c23627bd605246f4cbdc9f5b1b99d2d5ee68a256634762c927c9191a7644511d75db40550c64bce64fa3f29adbe132149e01a3897ef7397e27643e312e6b4fc5d78592f5c1465ab9f30c9b90b6a33764e3"], 0x20}, 0x1, 0x0, 0x0, 0x44000080}, 0xc040810) io_submit$auto(0xfffffffffffffc01, 0xe422, &(0x7f0000000180)=&(0x7f0000000140)={0xa2, 0x4, 0x6, 0x7, 0x6fe7, 0x7, 0x7, 0x10, 0x2, 0x0, 0xf, r0}) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_NEW_MPATH(r4, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x85}, 0x40001) mmap$auto(0x0, 0x8, 0x1000000004, 0x9b72, 0x2, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0x23, 0x80805, 0x0) getsockopt$auto(0x6, 0x113, 0x7, 0xfffffffffffffffe, 0x0) socket(0x28, 0x2, 0x6) syz_genetlink_get_family_id$auto_nl80211(0x0, r0) 14m3.479998111s ago: executing program 3 (id=2280): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) close_range$auto(0x2, 0x8000, 0x0) (async) mmap$auto(0x0, 0x2020009, 0x1000000000003, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0xa, 0x1, 0x84) (async, rerun: 64) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000021}, 0x8004) (rerun: 64) connect$auto(0x3, &(0x7f0000000180)={0xa, @sockaddr_1_1={"098976d76b8292"}}, 0x55) bpf$auto(0x8000000000000022, 0xffffffffffffffff, 0x0) (async, rerun: 32) connect$auto(0x3, &(0x7f0000000140)={0xa, @sa_data_min="c4aeed448dc7fe8000"}, 0x55) (rerun: 32) connect$auto(0x3, &(0x7f00000018c0)={0x2, @sa_data_min="915bac14140ba3df94bb303b2f9d"}, 0x55) (async) shutdown$auto(0x200000003, 0x2) (async) sendmmsg$auto(0x3, &(0x7f0000000000)={{0x0, 0x2, &(0x7f0000000040)={0x0, 0x34000}, 0x4, 0x0, 0x1}, 0xed7138c}, 0x2, 0x9) write$auto(0x3, 0x0, 0x81) (async) socket(0xa, 0x5, 0x0) (async, rerun: 32) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async, rerun: 32) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) (async, rerun: 64) socket(0xa, 0x3, 0x6) (async, rerun: 64) clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) (async) socket(0x2, 0x5, 0x3) (async, rerun: 32) setsockopt$auto(0x3, 0x10000000084, 0x17, 0x0, 0x3ff) (rerun: 32) io_uring_setup$auto(0x3ff, 0x0) (async, rerun: 32) prctl$auto(0x16, 0x2, 0x2, 0x4000000d, 0x100) (async, rerun: 32) mmap$auto(0x0, 0xbb0c, 0x329, 0x10011, 0x2, 0x8000) (async, rerun: 32) clone$auto(0x7, 0x1, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x1000004000008) (rerun: 32) 13m59.847064833s ago: executing program 3 (id=2286): socket(0x27, 0x5, 0x7) mmap$auto(0x0, 0x4, 0xdf, 0x80000000000eb1, 0x3, 0x0) socket(0x11, 0x80003, 0x300) socket(0x15, 0x5, 0x0) fanotify_init$auto(0x65, 0x2) pipe$auto(0x0) r0 = socket(0x2, 0x3, 0xa) socket(0xa, 0x3, 0x6) r1 = socket(0x11, 0x80003, 0x300) socketpair$auto(0x41, 0x5, 0x4245, 0x0) setsockopt$auto(r1, 0x107, 0x18, 0x0, 0x9) sendmsg$auto_HWSIM_CMD_TX_INFO_FRAME(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="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"], 0x70}, 0x1, 0x0, 0x0, 0x8000}, 0x20004010) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_SET_HW_TIMESTAMP(0xffffffffffffffff, 0x0, 0x4080) mmap$auto(0x0, 0xa, 0xdb, 0x9b72, 0x5, 0x8000) mmap$auto(0x4, 0xc4e2, 0x9, 0x90, 0x6, 0x3) close_range$auto(0x2, 0x8000, 0x0) socket(0x2, 0x1, 0x106) r2 = syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000040), r0) sendmsg$auto_BATADV_CMD_TP_METER(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20200040}, 0xc, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="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"], 0x24}, 0x1, 0x0, 0x0, 0x40800}, 0x880) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket(0x2c, 0x80003, 0x0) setsockopt$auto(r3, 0x11b, 0x4, 0xffffffffffffffff, 0x0) pipe2$auto(0x0, 0x80) keyctl$auto(0x200000000000020, 0xffffffffffffffff, 0x5, 0x5, 0x8) keyctl$auto(0x8, 0xfffffffffffffffd, 0xffffffffffffffff, 0x5092, 0x2) 13m57.997791499s ago: executing program 3 (id=2294): mmap$auto(0x0, 0x20007, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socket(0x23, 0x80805, 0x0) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) setrlimit$auto(0x1000000007, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mremap$auto(0x0, 0x4, 0x4, 0x7, 0x100000000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) io_uring_setup$auto(0x6, 0x0) madvise$auto(0x0, 0x200007, 0x19) close_range$auto(0x0, 0xfffffffffffff000, 0x2) sendmsg$auto_NL80211_CMD_DEL_INTERFACE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x4010040) socket(0x10, 0x2, 0x14) socket$nl_generic(0x10, 0x3, 0x10) pidfd_open$auto(0x1, 0x0) socket(0x10, 0x2, 0x0) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="2c0000001200"], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) recvmmsg$auto(0x3, &(0x7f0000000100)={{0x0, 0x2009, 0x0, 0x5, 0x0, 0x1, 0x4}, 0x4}, 0x10000, 0x300, 0x0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x4, 0x300000000000) open(&(0x7f0000000080)='./cgroup/../file0\x00', 0x42b00, 0x0) open(&(0x7f0000000000)='./cgroup\x00', 0x2e0d00, 0x0) mprotect$auto(0x1ffff000, 0x8000000000000001, 0x4) ioperm$auto(0x800, 0x5, 0xd) acct$auto(&(0x7f0000000000)='::J/}:\\-*\xeb') memfd_secret$auto(0x0) socket(0x2b, 0x1, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) 13m56.68670442s ago: executing program 3 (id=2299): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_NET_DM(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$auto_NET_DM_CMD_START(r0, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x34, r1, 0x200, 0x70bd2d, 0x25dfdbfc, {}, [@NET_DM_ATTR_HW_DROPS={0x4}, @NET_DM_ATTR_SW_DROPS={0x4}, @NET_DM_ATTR_SW_DROPS={0x4}, @NET_DM_ATTR_ALERT_MODE={0x5, 0x1, 0x2}, @NET_DM_ATTR_QUEUE_LEN={0x8, 0xb, 0x7f}, @NET_DM_ATTR_SW_DROPS={0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x20004080}, 0x4000084) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_WG_CMD_GET_DEVICE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14000000", @ANYBLOB="012dbd"], 0x14}, 0x1, 0x0, 0x0, 0x8d1}, 0x0) syz_genetlink_get_family_id$auto_SMC_GEN_NETLINK(&(0x7f0000000000), r3) mmap$auto(0x0, 0x200, 0x1000000004, 0x9b72, 0x2, 0x8000) keyctl$auto(0x2000000000000017, 0x9, 0x2a, 0xef0, 0x0) r4 = syz_genetlink_get_family_id$auto_MAC802154_HWSIM(&(0x7f0000000340), r3) keyctl$auto(0x2, 0x7, 0x7, 0x7, 0x5500000) sendmsg$auto_MAC802154_HWSIM_CMD_SET_EDGE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x14, r4, 0x50ed0a908d8e638f, 0x70bd2d, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x40) 13m56.277564906s ago: executing program 3 (id=2300): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) madvise$auto(0x0, 0xffffffffffff0001, 0x15) sendmsg$auto_MACSEC_CMD_ADD_RXSC(0xffffffffffffffff, 0x0, 0x4000) socket(0xa, 0x2, 0x73) (async) mmap$auto(0x0, 0x400008, 0x7f, 0x9b72, 0x2, 0x8000) (async) clock_gettime$auto(0x1, 0x0) (async, rerun: 64) sendmmsg$auto(0x3, 0x0, 0x9a6, 0xa00) (rerun: 64) mmap$auto(0x0, 0x2020009, 0xa, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) prctl$auto(0x1000000003b, 0x1, 0x4, 0x16, 0x6) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_RSS_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r1, 0x301, 0x70bc2b, 0x25dfdbff, {}, [@ETHTOOL_A_RSS_CONTEXT={0x8, 0x2, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8086}, 0x4010) madvise$auto(0x0, 0xffffffffffff0001, 0x15) clone$auto(0x7, 0x7fffffffffffffff, 0xffffffffffffffff, 0x0, 0x1) (async, rerun: 64) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x5) (rerun: 64) socket$nl_generic(0x10, 0x3, 0x10) (async) rt_sigqueueinfo$auto(0x1, 0x7, &(0x7f0000000040)={@siginfo_0_0={0x0, 0x5, 0xfffffffb, @_sigpoll={0x52, 0x7}}}) (async) migrate_pages$auto(0x1, 0x9, 0x0, &(0x7f0000000840)=0x2) (async) ftruncate$auto(0xffffffffffffffff, 0x2) (async) mlockall$auto(0x7) mmap$auto(0x0, 0x4, 0x1, 0x40eb2, 0x402, 0x300000000000) 13m50.003919443s ago: executing program 3 (id=2319): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) io_uring_setup$auto(0x6, 0x0) close_range$auto(0x2, 0x1b, 0x0) r0 = open(0x0, 0x261c2, 0x84) sync_file_range$auto(r0, 0xba6, 0x0, 0x4) recvmmsg$auto(r0, &(0x7f0000000100)={{&(0x7f0000000000)=[0x2, 0x5], 0xffff, &(0x7f0000000080)={&(0x7f0000000040)=[0x4, 0x8000000000000000, 0x401], 0x5}, 0x10001, &(0x7f00000000c0)=[0xc4e0000000000000, 0x0, 0x8000000000000001], 0x693, 0x9458}, 0x72}, 0x9, 0x2c6, &(0x7f0000000140)={0x1, 0x8}) socket(0x15, 0x5, 0x0) fanotify_init$auto(0x65, 0x2) pipe$auto(0x0) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), r0) dup2$auto(0x5, 0x4) ioperm$auto(0xa, 0x7, 0x2) socket(0x23, 0x2, 0x101) open(&(0x7f0000000000)='./file0\x00', 0x261c2, 0x84) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x1, 0x0) timerfd_create$auto(0x1, 0x0) timerfd_gettime$auto(0x6, &(0x7f0000000200)={{0xfffffffffffffff9, 0x8000}, {0x81, 0x5}}) splice$auto(0x4, 0x0, 0x2, 0x0, 0x80, 0x9) write$auto(0x6, 0x0, 0x100000001) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) (async) io_uring_setup$auto(0x6, 0x0) (async) close_range$auto(0x2, 0x1b, 0x0) (async) open(0x0, 0x261c2, 0x84) (async) sync_file_range$auto(r0, 0xba6, 0x0, 0x4) (async) recvmmsg$auto(r0, &(0x7f0000000100)={{&(0x7f0000000000)=[0x2, 0x5], 0xffff, &(0x7f0000000080)={&(0x7f0000000040)=[0x4, 0x8000000000000000, 0x401], 0x5}, 0x10001, &(0x7f00000000c0)=[0xc4e0000000000000, 0x0, 0x8000000000000001], 0x693, 0x9458}, 0x72}, 0x9, 0x2c6, &(0x7f0000000140)={0x1, 0x8}) (async) socket(0x15, 0x5, 0x0) (async) fanotify_init$auto(0x65, 0x2) (async) pipe$auto(0x0) (async) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), r0) (async) dup2$auto(0x5, 0x4) (async) ioperm$auto(0xa, 0x7, 0x2) (async) socket(0x23, 0x2, 0x101) (async) open(&(0x7f0000000000)='./file0\x00', 0x261c2, 0x84) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket(0x2, 0x1, 0x0) (async) timerfd_create$auto(0x1, 0x0) (async) timerfd_gettime$auto(0x6, &(0x7f0000000200)={{0xfffffffffffffff9, 0x8000}, {0x81, 0x5}}) (async) splice$auto(0x4, 0x0, 0x2, 0x0, 0x80, 0x9) (async) write$auto(0x6, 0x0, 0x100000001) (async) 13m49.918602842s ago: executing program 43 (id=2319): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) io_uring_setup$auto(0x6, 0x0) close_range$auto(0x2, 0x1b, 0x0) r0 = open(0x0, 0x261c2, 0x84) sync_file_range$auto(r0, 0xba6, 0x0, 0x4) recvmmsg$auto(r0, &(0x7f0000000100)={{&(0x7f0000000000)=[0x2, 0x5], 0xffff, &(0x7f0000000080)={&(0x7f0000000040)=[0x4, 0x8000000000000000, 0x401], 0x5}, 0x10001, &(0x7f00000000c0)=[0xc4e0000000000000, 0x0, 0x8000000000000001], 0x693, 0x9458}, 0x72}, 0x9, 0x2c6, &(0x7f0000000140)={0x1, 0x8}) socket(0x15, 0x5, 0x0) fanotify_init$auto(0x65, 0x2) pipe$auto(0x0) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), r0) dup2$auto(0x5, 0x4) ioperm$auto(0xa, 0x7, 0x2) socket(0x23, 0x2, 0x101) open(&(0x7f0000000000)='./file0\x00', 0x261c2, 0x84) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x1, 0x0) timerfd_create$auto(0x1, 0x0) timerfd_gettime$auto(0x6, &(0x7f0000000200)={{0xfffffffffffffff9, 0x8000}, {0x81, 0x5}}) splice$auto(0x4, 0x0, 0x2, 0x0, 0x80, 0x9) write$auto(0x6, 0x0, 0x100000001) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) (async) io_uring_setup$auto(0x6, 0x0) (async) close_range$auto(0x2, 0x1b, 0x0) (async) open(0x0, 0x261c2, 0x84) (async) sync_file_range$auto(r0, 0xba6, 0x0, 0x4) (async) recvmmsg$auto(r0, &(0x7f0000000100)={{&(0x7f0000000000)=[0x2, 0x5], 0xffff, &(0x7f0000000080)={&(0x7f0000000040)=[0x4, 0x8000000000000000, 0x401], 0x5}, 0x10001, &(0x7f00000000c0)=[0xc4e0000000000000, 0x0, 0x8000000000000001], 0x693, 0x9458}, 0x72}, 0x9, 0x2c6, &(0x7f0000000140)={0x1, 0x8}) (async) socket(0x15, 0x5, 0x0) (async) fanotify_init$auto(0x65, 0x2) (async) pipe$auto(0x0) (async) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), r0) (async) dup2$auto(0x5, 0x4) (async) ioperm$auto(0xa, 0x7, 0x2) (async) socket(0x23, 0x2, 0x101) (async) open(&(0x7f0000000000)='./file0\x00', 0x261c2, 0x84) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket(0x2, 0x1, 0x0) (async) timerfd_create$auto(0x1, 0x0) (async) timerfd_gettime$auto(0x6, &(0x7f0000000200)={{0xfffffffffffffff9, 0x8000}, {0x81, 0x5}}) (async) splice$auto(0x4, 0x0, 0x2, 0x0, 0x80, 0x9) (async) write$auto(0x6, 0x0, 0x100000001) (async) 11m26.774070926s ago: executing program 0 (id=2844): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffff7, 0x8000) socket(0xa, 0x2, 0x88) newfstatat$auto(0xffffffffffffff9c, 0x0, &(0x7f00000000c0)={0xfffffffffffffe01, 0x2, 0x0, 0x3dc3, 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x5, 0x7, 0xffffffffffffffff, 0x8, 0xcab, 0x6, 0x0, 0x4, 0x7}, 0x1000) select$auto(0x3, 0x0, &(0x7f0000000100)={[0x9, 0x200, 0x0, 0x9, 0x9, 0x3, 0x6, 0x2, 0x9, 0x5e58296f, 0x4000000000000000, 0x9, 0x3, 0x200, 0x8, 0x6]}, 0x0, 0x0) connect$auto(0x3, &(0x7f0000000140)={0xa, @sa_data_min="c4aeed448dc7fe8000"}, 0x55) connect$auto(0x3, &(0x7f0000000000)={0x2, @sa_data_min="0800e00000000000c1728d2af766"}, 0x55) sendmmsg$auto(0x3, &(0x7f0000000040)={{0x0, 0x2, &(0x7f0000000080)={0x0, 0x1}, 0x10a, 0x0, 0x0, 0x3ff}, 0xed7138c}, 0x200, 0x0) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x400c000) sendmmsg$auto(0x3, &(0x7f0000000000)={{0x0, 0x2, 0x0, 0x106, 0x0, 0x1, 0x3}, 0xed7138c}, 0x7, 0x900) mmap$auto(0x0, 0x8, 0x2, 0x9b72, 0x2, 0x0) unshare$auto(0x20000080) stat$auto(&(0x7f0000000000)='..\x00\x00', 0x0) io_uring_setup$auto(0x6, 0x0) 11m26.540247521s ago: executing program 0 (id=2846): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket$nl_generic(0x10, 0x3, 0x10) r0 = gettid() pidfd_open$auto(r0, 0x8) socket(0x23, 0x80805, 0x0) memfd_secret$auto(0x0) socket(0x2b, 0x1, 0x1) socket(0x2, 0x801, 0x100) connect$auto(0x3, &(0x7f00000000c0)={0x2, @sockaddr_1_1}, 0x55) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) ioctl$auto(0x3, 0x894b, 0x38) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x5, 0x0) getsockopt$auto(0x6, 0x4, 0x14, 0x0, &(0x7f0000000040)=0x9ce) r1 = socket(0xa, 0x2, 0x88) setsockopt$auto(r1, 0x5, 0x7, &(0x7f0000000080)='\x00', 0x10a) 11m26.37022139s ago: executing program 0 (id=2848): madvise$auto(0x0, 0x2000040080000004, 0x2) munmap$auto(0x1000000, 0x2000000c) madvise$auto(0x0, 0xffffffffffff0001, 0x9) mlockall$auto(0x3) mlockall$auto(0x7) settimeofday$auto(0x0, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x40002) socket(0x26, 0x80805, 0x0) r0 = socket(0xf, 0x3, 0x2) mprotect$auto(0x1ffff000, 0x8000000000000001, 0x4) adjtimex$auto(&(0x7f0000000040)={0x3, 0x0, 0xb04a, 0xfffffffffffff150, 0x7b, 0x2bc6, 0x8, 0x0, 0x0, 0x7fffffff, 0x3, {0x401, 0x72}, 0x40, 0x8000000000000001, 0x1000000000000000, 0x9, 0x0, 0x10, 0x81, 0x6, 0x2, 0x3ff, 0x1000000}) sendmsg$auto_NFSD_CMD_THREADS_SET(r0, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB="58e5973c", @ANYBLOB="230026bd7000fcdbdf25020000000800010041000000080001007ac000000800020004000000080004002b3d230008000300070000000800010004000000"], 0x58}, 0x1, 0x0, 0x0, 0x4800}, 0x5) socket(0xa, 0x6, 0x0) fstatfs$auto(0x3, 0x0) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f0000000300), r1) r3 = socket(0x1d, 0x2, 0x6) setsockopt$auto(r3, 0x6a, 0x2, 0xffffffffffffffff, 0x40003) sendmsg$auto_CTRL_CMD_GETFAMILY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000600)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="2c0f2abd7000fcdbdf2503000000"], 0x14}, 0x1, 0x0, 0x0, 0x4000090}, 0x4000010) setreuid$auto(0x0, 0x2) setsockopt$auto(0x4, 0x0, 0x11, 0xfffffffffffffffc, 0x70) syz_open_procfs$namespace(0xffffffffffffffff, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x4242, 0x0) open(&(0x7f0000000140)='./file0\x00', 0x10677d, 0x0) fanotify_mark$auto(0x0, 0x1, 0x9, 0x4, 0x0) dup2$auto(0x0, 0x3) 11m25.718148812s ago: executing program 0 (id=2849): mkdir$auto(&(0x7f0000000180)='}[,&*}\x00', 0x8001) mprotect$auto(0x7696, 0x2, 0x7fffffff) mount$auto(0x0, &(0x7f0000000100)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0x10001, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000040), r0) sendmsg$auto_L2TP_CMD_SESSION_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x24, r1, 0x1, 0x74bd2b, 0x25dfdbfc, {}, [@L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x1}, @L2TP_ATTR_CONN_ID={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x20000044) chdir$auto(&(0x7f0000000000)='}[,&*}\x00') setresuid$auto(0x6, 0x9, 0xfc4d) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) unshare$auto(0x20000) mount$auto(0x0, &(0x7f0000000100)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0x10001, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) clone$auto(0x2d, 0x4, &(0x7f00000001c0)=0x10001, &(0x7f00000002c0)=0x8, 0xd13) setresuid$auto(0x7, 0x23, 0x9) init_module$auto(&(0x7f0000000040)=[0xff00000000000000, 0x2], 0x9, &(0x7f00000000c0)='$\x00') rename$auto(&(0x7f0000000080)='}[,&*}\x00', &(0x7f0000000140)='g\xb8\x00\x80\xe0\x1d') stat$auto(&(0x7f0000000000)='..\x00\x00', 0x0) 11m25.412266022s ago: executing program 0 (id=2851): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mlock$auto(0x81, 0xffff) mremap$auto(0x0, 0x200000000000004, 0x4, 0x7, 0x100000000) open(&(0x7f0000000080)='./cgroup\x00', 0x40001, 0x6) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)) exit$auto(0xf25) close_range$auto(0x2, 0x8000, 0x0) madvise$auto(0x0, 0xa59a, 0x15) 11m25.008103239s ago: executing program 0 (id=2853): socket(0xa, 0x2, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) socket(0xa, 0x801, 0x84) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000021}, 0x8004) connect$auto(0x3, &(0x7f0000000140)={0xa, @sa_data_min="c4aeed448dc7fe8000"}, 0x55) mmap$auto(0x0, 0xe983, 0xe1, 0xeb1, 0x401, 0x32) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x400c000) connect$auto(0x3, &(0x7f0000000140)={0xa, @sa_data_min="c4aeed448dc7fe8000"}, 0x55) select$auto(0x6, &(0x7f0000000040)={[0x8, 0x1000, 0x4, 0x83, 0x8, 0x9, 0x7f, 0x7, 0x1, 0x8, 0x822, 0x1, 0x471, 0x6f, 0x7, 0x1]}, 0x0, 0x0, 0x0) semctl$auto(0x1ff, 0x2, 0x13, 0x1) lsm_list_modules$auto(0x0, 0x0, 0x0) sendmmsg$auto(0x3, &(0x7f0000000000)={{0x0, 0x2, 0x0, 0x106, 0x0, 0x6c, 0x697c}, 0xed71390}, 0x9a6, 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x17) mount$auto(0x0, &(0x7f0000000080)='/\x00\xa6\x92\xff%\xd9\xa6\xfc\xc5!L\x94\xb2\x93g\xdcM\"@GJ\x972\xd6\x1cU\x19^,\xbc\xbe\x06\x00\x00\x00\xb3m\x1e\xf2\xbc', &(0x7f0000000180)='\x00\x00x\xbec\x95\x83\xfd&\xee\xb3$K\xa4qHO\xe8D\xaa\x1d\x16:\xd3 \xdeNF\xb9\xb6\x8d7\xee\x8a}\x96F\xea\xb6\xcaq\aj\x8c\x00\x00\xb7\x9aV\x19\xd0y\xc7\x7f{}\x1e`\x05\xea\xc6\txJ6~Y\\k\x8a\xe9`a<+\x1d1(\x852\xe8\r\xc7\xb2\xc6\x97\xe0\x80\x12\xa2X\x84\xf9zq\xaf=;x\x0f\xb6\xc0\xfc\x02\xc1V\xa0o\x9f\xb8\xd5\x06\xc1\x8d\xdd.4&\xf6#\b\xf7\xb1\xbbxnbx\xfe\xfe\xaaf\x15\x8d\xc1\x1fg0\xcd!\xb8\xd2~z`M\xb2\x98\x8e\xa6\xfb\x98\xadb|\xb2\xa2\x9b\xc4sk\xf0\xc1\xd5Iq\b\xa9\xd4\xf5\xc9V\xf1RR\xc3i-T\xb34\xa1\xf8x\x8d=V\xa4\xafn\xbaKb\x06Q\x94x\x024\xd4\x03\xcc\x88\xb8Vo\"\xd6\x01\x17\xd7\xbd\xbfV\xf2\xe9\xd3\x14\x96G<\xb6 \xceo\x94\xabb\x99\xf2+\xa6\x82\a\xca\xf0\xca\n\xffwU\x97N\xd9V\xe5\xe8\xd5\xe4\x9e\x00\x82\x05;]\x04\x90\xce\x12EC\xa0Px\xc2\x1e\xd5bAF\\\xf8k\x18\xda\x87\x8c', 0x7, 0x0) 11m24.674746578s ago: executing program 44 (id=2853): socket(0xa, 0x2, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) socket(0xa, 0x801, 0x84) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000021}, 0x8004) connect$auto(0x3, &(0x7f0000000140)={0xa, @sa_data_min="c4aeed448dc7fe8000"}, 0x55) mmap$auto(0x0, 0xe983, 0xe1, 0xeb1, 0x401, 0x32) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x400c000) connect$auto(0x3, &(0x7f0000000140)={0xa, @sa_data_min="c4aeed448dc7fe8000"}, 0x55) select$auto(0x6, &(0x7f0000000040)={[0x8, 0x1000, 0x4, 0x83, 0x8, 0x9, 0x7f, 0x7, 0x1, 0x8, 0x822, 0x1, 0x471, 0x6f, 0x7, 0x1]}, 0x0, 0x0, 0x0) semctl$auto(0x1ff, 0x2, 0x13, 0x1) lsm_list_modules$auto(0x0, 0x0, 0x0) sendmmsg$auto(0x3, &(0x7f0000000000)={{0x0, 0x2, 0x0, 0x106, 0x0, 0x6c, 0x697c}, 0xed71390}, 0x9a6, 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x17) mount$auto(0x0, &(0x7f0000000080)='/\x00\xa6\x92\xff%\xd9\xa6\xfc\xc5!L\x94\xb2\x93g\xdcM\"@GJ\x972\xd6\x1cU\x19^,\xbc\xbe\x06\x00\x00\x00\xb3m\x1e\xf2\xbc', &(0x7f0000000180)='\x00\x00x\xbec\x95\x83\xfd&\xee\xb3$K\xa4qHO\xe8D\xaa\x1d\x16:\xd3 \xdeNF\xb9\xb6\x8d7\xee\x8a}\x96F\xea\xb6\xcaq\aj\x8c\x00\x00\xb7\x9aV\x19\xd0y\xc7\x7f{}\x1e`\x05\xea\xc6\txJ6~Y\\k\x8a\xe9`a<+\x1d1(\x852\xe8\r\xc7\xb2\xc6\x97\xe0\x80\x12\xa2X\x84\xf9zq\xaf=;x\x0f\xb6\xc0\xfc\x02\xc1V\xa0o\x9f\xb8\xd5\x06\xc1\x8d\xdd.4&\xf6#\b\xf7\xb1\xbbxnbx\xfe\xfe\xaaf\x15\x8d\xc1\x1fg0\xcd!\xb8\xd2~z`M\xb2\x98\x8e\xa6\xfb\x98\xadb|\xb2\xa2\x9b\xc4sk\xf0\xc1\xd5Iq\b\xa9\xd4\xf5\xc9V\xf1RR\xc3i-T\xb34\xa1\xf8x\x8d=V\xa4\xafn\xbaKb\x06Q\x94x\x024\xd4\x03\xcc\x88\xb8Vo\"\xd6\x01\x17\xd7\xbd\xbfV\xf2\xe9\xd3\x14\x96G<\xb6 \xceo\x94\xabb\x99\xf2+\xa6\x82\a\xca\xf0\xca\n\xffwU\x97N\xd9V\xe5\xe8\xd5\xe4\x9e\x00\x82\x05;]\x04\x90\xce\x12EC\xa0Px\xc2\x1e\xd5bAF\\\xf8k\x18\xda\x87\x8c', 0x7, 0x0) 10m34.803782164s ago: executing program 1 (id=2996): socket(0xa, 0x3, 0x33) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) io_uring_setup$auto(0x6, 0x0) setsockopt$auto(0x400000000000003, 0x29, 0x7, 0x0, 0x401) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000021}, 0x8004) connect$auto(0x3, &(0x7f0000000140)={0xa, @sa_data_min="c40900448dc7fe8000"}, 0x55) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) bpf$auto(0x0, &(0x7f0000000000)=@link_update={r0, @new_prog_fd=0x4, 0x4, @old_map_fd=r1}, 0xa3) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) bpf$auto(0x3, &(0x7f00000001c0)=@raw_tracepoint={0x5, 0xffff, 0x0, 0x3}, 0xc) r2 = socket(0x27, 0x1, 0xb) mkdir$auto(&(0x7f0000000000)='%{-\x00', 0x4) connect$auto(r2, &(0x7f0000000180)={0xa, @sockaddr_1_1}, 0x55) lseek$auto(r1, 0x8000000000003, 0x10) sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="16f95ea3", @ANYRES16=0x0, @ANYBLOB="2b0128bd7000fedbdf25000000000800080006000000080001000300000008000500050000000c0003000300000000000000080001008e000000"], 0x40}, 0x1, 0x0, 0x0, 0x8010}, 0x24004141) sendmmsg$auto(0x3, &(0x7f0000000000)={{0x0, 0x8, 0x0, 0x106, 0x0, 0x1, 0x697b}, 0xc57138c}, 0x9a6, 0xe000) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) socket(0xa, 0x3, 0x100) select$auto(0x6d0c, 0x0, &(0x7f0000000100)={[0x0, 0x1ff, 0x800000000000008, 0xc, 0x9, 0xfffffffffffffff9, 0x6, 0x1, 0x400040009, 0x5e582972, 0x4000000000000000, 0x14, 0x93, 0xffffffffffffff17, 0x8, 0x8]}, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x7, 0x0) 10m33.824959787s ago: executing program 1 (id=2997): r0 = socket(0x2, 0x3, 0x2) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) connect$auto(r0, &(0x7f0000000440)={0x42, @sockaddr_1_1={"893ed413061dc3d936c5f1644e11fff9371ee86664607819becadb5764dade8c50d0ba61067a848296a7ce52928eccc33703fad82467564ecf0051ce3e9858d3ae6ef71d5adcd9226e3787437190501a5fc4adbada5d596e1e3760be39a0004e50c9c315181ebd6dad15e7ccbdbf4138081e514f43402052e1e93c1a1859fc110d8ffccb303070bacf724e8182fc1db47d38e762c77e6a2a8a569b60bb5a1c4d9867c9eb6f8f3ca42d9e082d3138bb7f203075b5301d12ff990a5aa33d"}}, 0x5) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_SEG6_CMD_DUMPHMAC(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="391210c000"/20, @ANYRES16=0x0, @ANYBLOB="07032dbd7000fedbdf2502000000"], 0x14}, 0x1, 0x0, 0x0, 0x20000880}, 0x40040) sendmmsg$auto(0x3, 0x0, 0x9a6, 0xa00) socket(0x11, 0x80003, 0x300) socket(0x26, 0x80805, 0x0) syz_genetlink_get_family_id$auto_ovs_datapath(0x0, 0xffffffffffffffff) sendmsg$auto_OVS_DP_CMD_NEW(0xffffffffffffffff, 0x0, 0x80) readv$auto(0x4, &(0x7f0000000100)={0x0, 0x1000}, 0x8) write$auto(0xc8, 0x0, 0x40f6) rseq$auto(&(0x7f0000000300)={0xe, 0x401, 0x0, 0x6, 0xffffffff, 0x2}, 0x8002, 0x0, 0x6) process_vm_writev$auto(0x0, 0x0, 0x3, 0x0, 0x1, 0x0) rseq$auto(&(0x7f0000000340)={0x8001, 0x9, 0x8, 0x8, 0x6, 0x8, "e3fe9c6185130d7b3baaef3260d0e0949a5d6ade10fed19ddc7d56abbef1bb28678f7b04a9d29db17c25bfd99dc04705f981c05eaed5748136ce9018072e5decf7ae88b40c9532c50a9522275018fba4a285b03a1caf83c6e7eee6ae1a1fa2b2e3f3b64854b351480a923f93f7ac12ff0594548216252522d0bce4ccb4b114cbf615b48552421b36cd54fa9a2cc04190689770d4bff0866342e195c8e078aea719d611b2b5e4d7ab99196def392527eaa051fdd8"}, 0x86, 0x7af, 0x8) close_range$auto(0x0, 0xfffffffffffff001, 0x2) socket(0x2, 0x1, 0x0) socket(0x1e, 0x1, 0x0) socket(0x10, 0x2, 0x0) msgctl$auto(0xca80, 0x7fffffffffffffff, 0xfffffffffffffffe) mmap$auto(0x0, 0x8, 0x1000000016, 0x13, 0x3, 0x400180000000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0xffffffffffff0001, 0x15) r2 = socket(0x10, 0x3, 0x6) r3 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_FEC_SET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0xfc, r3, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@ETHTOOL_A_FEC_MODES={0xfc70, 0x2, "2c78bbd486144602543afaeb48d47db230b6fccb9f80b12beea70a54c3483404b46defc5a6c58345e6c94e7db5b8ab5f5221193805b2ef79d3446602cfc96a7d1658196a32c8dd8df733ce0a63af950057b5c92dc5f5b4999bb85648256f90341a3b7337d7f730259c684b365df552f8adf3c94f9bda3ce361db0a26c6f35395b710a25d8eb22e1727e6d0b07c5aeceae60bc34f49c784c0ebeebf540cb0452b506f03373588ee9395ea65b508"}, @ETHTOOL_A_FEC_HEADER={0x0, 0x1, "74881f"}]}, 0x114}, 0x1, 0x0, 0x0, 0x4014}, 0x20004800) madvise$auto(0x0, 0xffffffffffff0005, 0x19) lstat$auto(&(0x7f0000000040)='.\x00', 0x0) 10m30.882860604s ago: executing program 1 (id=3001): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioperm$auto(0xde, 0x9, 0x500402) (async) ioperm$auto(0xde, 0x9, 0x500402) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) (async) close_range$auto(0x0, 0xfffffffffffff000, 0x2) sysfs$auto(0x2, 0x2, 0x0) fsopen$auto(0x0, 0x1) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) mq_timedreceive$auto(0x7, 0xfffffffffffffffe, 0xdc, 0x0, 0x0) r1 = syz_genetlink_get_family_id$auto_MAC80211_HWSIM(&(0x7f0000000640), r0) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000380)={0x1c, r1, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@HWSIM_ATTR_REG_HINT_ALPHA2={0x6, 0xb, '$\\'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004084}, 0x48000) (async) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000380)={0x1c, r1, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@HWSIM_ATTR_REG_HINT_ALPHA2={0x6, 0xb, '$\\'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004084}, 0x48000) io_uring_setup$auto(0xd, &(0x7f00000002c0)={0x3, 0x7fff, 0x7fff, 0xa4, 0x0, 0x729, r0, [0x2, 0x1ff, 0x280000], {0xe, 0x8, 0x2e5, 0x0, 0x2, 0x8, 0x9, 0x4, 0x80000000}, {0x79, 0xfff, 0x7, 0x7, 0xfffffff9, 0x1, 0xfffffff8, 0x10000, 0x3}}) (async) io_uring_setup$auto(0xd, &(0x7f00000002c0)={0x3, 0x7fff, 0x7fff, 0xa4, 0x0, 0x729, r0, [0x2, 0x1ff, 0x280000], {0xe, 0x8, 0x2e5, 0x0, 0x2, 0x8, 0x9, 0x4, 0x80000000}, {0x79, 0xfff, 0x7, 0x7, 0xfffffff9, 0x1, 0xfffffff8, 0x10000, 0x3}}) open(&(0x7f0000000000)='./file0\x00', 0x269c2, 0x86) fallocate$auto(0x8000000000000003, 0x0, 0xd, 0xcbd5d) (async) fallocate$auto(0x8000000000000003, 0x0, 0xd, 0xcbd5d) socket$nl_generic(0x10, 0x3, 0x10) socket(0x15, 0x5, 0x0) socket(0x2b, 0x1, 0x1) sendfile$auto(0x6, 0x3, 0x0, 0xc01) sendmsg$auto_HWSIM_CMD_FRAME(r0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000080)={&(0x7f0000000200)={0x88, r1, 0x800, 0x70bd25, 0x25dfdbfc, {}, [@HWSIM_ATTR_REG_HINT_ALPHA2={0x6, 0xb, '}#'}, @HWSIM_ATTR_PERM_ADDR={0x61, 0x16, "2389fb4705582dd2a4785b7a9b6c87e68046a228af8e7a1903a693d17834e10976158374281ecdae2b104e9703a53423808e4f4dbe0066db82eeb3d22eabfe82a0c601356d24503785f19bd0957135b05cfe5065353d1ca62776faec6e"}, @HWSIM_ATTR_DESTROY_RADIO_ON_CLOSE={0x4}, @HWSIM_ATTR_TX_INFO={0x4}]}, 0x88}, 0x1, 0x0, 0x0, 0x4041}, 0x48808) ppoll$auto(&(0x7f0000000100)={r0, 0x55bc, 0x7}, 0x9eba, &(0x7f0000000140)={0x5852, 0x1000}, &(0x7f00000001c0)={0xfffffffffffffffc}, 0x1) (async) ppoll$auto(&(0x7f0000000100)={r0, 0x55bc, 0x7}, 0x9eba, &(0x7f0000000140)={0x5852, 0x1000}, &(0x7f00000001c0)={0xfffffffffffffffc}, 0x1) 10m30.320054711s ago: executing program 1 (id=3002): close_range$auto(0x2, 0x8, 0x0) socket(0x2b, 0x800, 0x5) r0 = socket(0xa, 0x3, 0x6) r1 = socket(0x10, 0x2, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0xc01) socket(0xa, 0x3, 0x6) connect$auto(0x3, &(0x7f0000000140)={0xa, @sa_data_min="ff00"}, 0x55) sendmmsg$auto(0x15, 0x0, 0x3, 0x0) madvise$auto(0x0, 0x2000040080000004, 0xe) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) futex$auto(0x0, 0x6, 0x47, 0x0, 0x0, 0x0) setsockopt$auto(0x3, 0x1, 0x41, 0x0, 0x88) write$auto(0x3, 0x0, 0xffd8) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_TIPCv2(&(0x7f0000000800), r2) sendmsg$auto_TIPC_NL_MEDIA_SET(r2, &(0x7f0000001b80)={0x0, 0x0, &(0x7f0000001b40)={&(0x7f0000000840)={0x14, r3, 0x1, 0x70bd28, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x48001}, 0x40010) recvfrom$auto(0x3, 0x0, 0x800000000e, 0xfffff4a4, 0x0, 0xfffffffffffffffd) sendfile$auto(0x1, 0x3, 0x0, 0xc01) sendmsg$auto_NL80211_CMD_GET_REG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="1b000000", @ANYBLOB="1a00279e"], 0x1ac}, 0x1, 0x0, 0x0, 0x40}, 0x40000) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00') ioctl$NS_GET_PARENT(r5, 0xb701, 0x0) r6 = socket(0xa, 0x3, 0x3a) ioctl$auto(r6, 0x890c, 0x5) syz_genetlink_get_family_id$auto_IPVS(0x0, r4) socket$nl_generic(0x10, 0x3, 0x10) bind$auto(r0, 0x0, 0xf) unshare$auto(0x40000080) 10m24.992212698s ago: executing program 1 (id=3013): mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) io_uring_setup$auto(0x1, 0x0) futex$auto(0x0, 0x6, 0x8, 0x0, 0x0, 0x80000001) mmap$auto(0x0, 0x61, 0x100001000000004, 0xfa31, 0x400, 0x8000) tkill$auto(0x1, 0x7) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) socket(0x2, 0x1, 0x0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) mmap$auto(0x0, 0x2020009, 0xa, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) geteuid() sendmsg$auto_WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x88d0}, 0x2000c041) bind$auto(0x3, &(0x7f0000000080)={0x2, @sockaddr_1_1}, 0x6b) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000ac0), 0xffffffffffffffff) sendmsg$auto_OVS_FLOW_CMD_SET(r0, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000100)=ANY=[@ANYBLOB="847c24000030320bf5441d341b3d823a832a7d6221ef197782b91570b9da7272e2aedf4ff7", @ANYRES16=r1, @ANYBLOB="010029bd7000ffdbdf2504000000040008000400020005000900b0000000"], 0x24}, 0x1, 0x0, 0x0, 0x14}, 0x4000) connect$auto(0x3, &(0x7f00000000c0)={0x2, @sockaddr_1_1}, 0x55) recvfrom$auto(0x3, 0x0, 0x2395, 0x40000100, 0x0, 0xfffffffffffffffd) write$auto(0x3, 0x0, 0xfffffdef) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) getsockopt$auto(0x3, 0x200000000001, 0x3e, 0x0, 0x0) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x400000008000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) pidfd_open$auto(0x1, 0x0) newfstatat$auto(0x8, &(0x7f0000000580)='/\x00', 0x0, 0x0) socket(0x2, 0x5, 0x0) setsockopt$auto(0x3, 0x10000000084, 0x11, 0x0, 0x8) 10m22.972111971s ago: executing program 1 (id=3020): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000780)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000740)={&(0x7f0000000100)={0x62c, r1, 0x400, 0x70bd2c, 0x25dfdbfc, {}, [@NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0xf0}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_BEACON_HEAD={0x4db, 0xe, "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"}, @NL80211_ATTR_VHT_CAPABILITY_MASK={0x10, 0xb0, "0000000000860000000400"}, @NL80211_ATTR_SCAN_FREQUENCIES={0x100, 0x2c, "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"}, @NL80211_ATTR_FILS_ERP_RRK={0x8, 0xfc, "2951cd03"}, @NL80211_ATTR_TDLS_ACTION={0x5}, @NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x5}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x5d}]}, 0x62c}, 0x1, 0x0, 0x0, 0x44001}, 0x40080) madvise$auto(0x0, 0xffffffffffff0005, 0x19) clone$auto(0xd2d2, 0x7fffffffffffffff, 0xffffffffffffffff, 0x0, 0x1) mbind$auto(0xfffffffffffffff8, 0x100000006, 0x7, 0x0, 0x3, 0x2) socket(0xa, 0x6, 0x0) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000021}, 0x8004) connect$auto(0x3, &(0x7f0000000140)={0xa, @sa_data_min="c4aeed448dc7fe8000"}, 0x55) shutdown$auto(0x200000003, 0x2) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) io_uring_setup$auto(0x6, 0x0) connect$auto(0x3, &(0x7f0000000140)={0xa, @sa_data_min="c4aeed448dc7fe8000"}, 0x55) close_range$auto(0x2, 0x8000, 0x0) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x400c000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/mnt\x00') socket(0x2b, 0x1, 0x1) getsockopt$auto(0x4, 0x6, 0x2a, 0xfffffffffffffffc, 0x0) sysfs$auto(0x2, 0x10000000000000e, 0x0) fsopen$auto(0x0, 0x1) socket$nl_generic(0x10, 0x3, 0x10) r2 = gettid() process_vm_readv$auto(r2, &(0x7f0000000040)={0x0, 0x8}, 0x4, &(0x7f00000000c0)={0x0, 0x100000000000002}, 0x6, 0x0) 10m22.524465779s ago: executing program 45 (id=3020): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000780)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000740)={&(0x7f0000000100)={0x62c, r1, 0x400, 0x70bd2c, 0x25dfdbfc, {}, [@NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0xf0}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_BEACON_HEAD={0x4db, 0xe, "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"}, @NL80211_ATTR_VHT_CAPABILITY_MASK={0x10, 0xb0, "0000000000860000000400"}, @NL80211_ATTR_SCAN_FREQUENCIES={0x100, 0x2c, "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"}, @NL80211_ATTR_FILS_ERP_RRK={0x8, 0xfc, "2951cd03"}, @NL80211_ATTR_TDLS_ACTION={0x5}, @NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x5}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x5d}]}, 0x62c}, 0x1, 0x0, 0x0, 0x44001}, 0x40080) madvise$auto(0x0, 0xffffffffffff0005, 0x19) clone$auto(0xd2d2, 0x7fffffffffffffff, 0xffffffffffffffff, 0x0, 0x1) mbind$auto(0xfffffffffffffff8, 0x100000006, 0x7, 0x0, 0x3, 0x2) socket(0xa, 0x6, 0x0) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000021}, 0x8004) connect$auto(0x3, &(0x7f0000000140)={0xa, @sa_data_min="c4aeed448dc7fe8000"}, 0x55) shutdown$auto(0x200000003, 0x2) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) io_uring_setup$auto(0x6, 0x0) connect$auto(0x3, &(0x7f0000000140)={0xa, @sa_data_min="c4aeed448dc7fe8000"}, 0x55) close_range$auto(0x2, 0x8000, 0x0) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x400c000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/mnt\x00') socket(0x2b, 0x1, 0x1) getsockopt$auto(0x4, 0x6, 0x2a, 0xfffffffffffffffc, 0x0) sysfs$auto(0x2, 0x10000000000000e, 0x0) fsopen$auto(0x0, 0x1) socket$nl_generic(0x10, 0x3, 0x10) r2 = gettid() process_vm_readv$auto(r2, &(0x7f0000000040)={0x0, 0x8}, 0x4, &(0x7f00000000c0)={0x0, 0x100000000000002}, 0x6, 0x0) 9m32.436037911s ago: executing program 5 (id=3208): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket(0x15, 0x5, 0x0) poll$auto(0x0, 0x2, 0xc) set_mempolicy$auto(0xa, 0x0, 0x4) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x3, 0x7) mlockall$auto(0x7) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) readv$auto(0x3, 0x0, 0x400) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mmap$auto(0xfffc, 0x1fffffffffd, 0xdf, 0x200000055, 0x6, 0x1200000) semctl$auto(0x1ff, 0x2, 0x13, 0x20001) 9m30.379764588s ago: executing program 5 (id=3212): r0 = socket(0xa, 0x2, 0x3a) setsockopt$auto(r0, 0x29, 0x32, &(0x7f0000000180)='\x15!\xa8^J/\xddCx4!\x00\xd3\x8f\x1e\x1b\xc3 \xe2\xa8\xd6\xd9\xc0\xa2\x0f\x88\xb1e\x8a\xd8?\xfe\xda\xc4\xef\xff(i\xc6@\x91_\vBj\x0eQ\xce\x16\'C\x8c\x01\x80\x92u\xd5\xb8\\\x82,\xe2=y\x9bR\xbcn\xa0c\x16~\x86\"t\x00\x00\x00\x00\xe4\xa5\xfe\xb5', 0x10000110) connect$auto(0x3, &(0x7f0000000140)={0xa, @sa_data_min="c457ffffffffffffff00"}, 0x55) (fail_nth: 2) 9m29.436252782s ago: executing program 5 (id=3218): r0 = open(&(0x7f0000000140)='./file0\x00', 0x842, 0x8) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x8, 0x1000000004, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x8400008, 0xdf, 0x9b72, 0x1, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x19) unshare$auto(0x40000080) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) getrandom$auto(0x0, 0x6000000, 0x3) ioctl$auto(0xc8, 0x400454d9, 0x5c8d) fsopen$auto(&(0x7f0000000000)='ovs_packet\x00', 0xf) mlockall$auto(0x7) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) io_uring_setup$auto(0x6, 0x0) r1 = socket(0x6, 0xa, 0xb) socket(0x1, 0x1, 0x1) ioctl$auto(0x8, 0x8, 0xfffffffffffffffa) msync$auto(0x1ffff000, 0x80100000000005, 0x400000004) ioctl$auto(0xc8, 0x400454d1, 0x5c8d) socket$nl_generic(0x10, 0x3, 0x10) setresgid$auto(0x8, 0x7, 0x5) bind$auto(0x3, &(0x7f0000000140)={0x1, @sa_data_min="af7af2952a203b6cdd8c8f51372e"}, 0xd) mmap$auto(0x8, 0x0, 0xe2, 0x9b72, 0x2, 0x80000000) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r0, &(0x7f00000001c0)={&(0x7f0000000080), 0xc, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="2000f1ef2cc8484a2606cfa90901000100000000000c000b000104000000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x24008040}, 0x0) fchown$auto(0x5, 0x8, 0x3) r2 = socket(0x11, 0x3, 0x2) connect$auto(r1, &(0x7f0000000140)={0x3, @sa_data_min="b804ff0f00000000000006a7c84d"}, 0x400055) sendto$auto(r2, 0x0, 0xd, 0x101, &(0x7f0000000040)={0x2, @sa_data_min="3600000000000000000100"}, 0x1c) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000000c40), r3) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r3, &(0x7f0000001d40)={0x0, 0x0, &(0x7f0000001d00)={&(0x7f0000000340)={0x38, r4, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@OVS_PACKET_ATTR_MRU={0x6, 0x9, 0x9}, @OVS_PACKET_ATTR_ACTIONS={0x4}, @OVS_PACKET_ATTR_KEY={0x4}, @OVS_PACKET_ATTR_PACKET={0x12, 0x1, "f80378e3f0cd5b806905f038a814"}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x80000) 9m25.460357459s ago: executing program 5 (id=3231): close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x2, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) stat$auto(&(0x7f0000000000)='..\x00\x00', 0x0) fcntl$auto(0x8000000000000001, 0x6, 0x2) fcntl$auto(0x8000000000000001, 0x24, 0x28) fanotify_init$auto(0x5, 0x2000000000002) r0 = gettid() mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) clone$auto(0x5c, 0x8, 0xffffffffffffffff, 0x0, 0xfffffffffffffffe) getgroups$auto(0x1, 0xffffffffffffffff) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x10004) clone$auto(0x1, 0x2, &(0x7f0000000000), &(0x7f0000000080)=0x4, 0x4) madvise$auto(0x0, 0xffffffffffff0005, 0x19) process_vm_writev$auto(r0, &(0x7f0000002980)={0x0, 0x7ff}, 0x3, &(0x7f0000002a40)={0x0, 0x100000004007}, 0x4, 0x0) r1 = gettid() process_vm_readv$auto(r1, &(0x7f0000000040)={0x0, 0x8}, 0x4, &(0x7f00000000c0)={0x0, 0x100000000000002}, 0x6, 0x0) syz_open_procfs$namespace(r1, &(0x7f0000000040)='ns/time_for_children\x00') mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) syz_genetlink_get_family_id$auto_ethtool(&(0x7f00000001c0), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) 9m23.416699868s ago: executing program 5 (id=3239): ioperm$auto(0x7, 0x6, 0x1) timer_create$auto(0xfffffff9, &(0x7f0000000000)={@sival_int=0x3, 0x8, 0x1, @_tid}, &(0x7f0000000040)=0x200) (async) select$auto(0x4, 0x0, &(0x7f0000000080)={[0x100000000, 0x1000, 0x4, 0x5, 0x1000, 0x100000001, 0xc, 0xf, 0x0, 0x41, 0xe, 0xd59, 0x101, 0x101, 0x2, 0x80080002]}, 0x0, 0x0) timer_settime$auto(0x0, 0x101, &(0x7f00000000c0)={{0xf, 0x10007}, {0x9}}, 0x0) (async) tkill$auto(0x80000000000001, 0x7) 9m21.423932729s ago: executing program 5 (id=3247): socket(0xa, 0x2, 0x88) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) fanotify_init$auto(0x200, 0x2010000000000) fanotify_mark$auto(0x0, 0x1, 0x1, 0x4, 0x0) mmap$auto(0x0, 0x4020008, 0x6, 0xeb1, 0x401, 0x101) r0 = socket(0x11, 0x80003, 0x300) io_uring_setup$auto(0x1, 0x0) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000080), r1) sendmsg$auto_NFSD_CMD_THREADS_SET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="01002dbd7000ffdbdf2502000000080001"], 0x1c}, 0x1, 0x0, 0x0, 0x40000021}, 0x8004) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) unshare$auto(0x20000) mount$auto(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000100)='nfsd\x00\xee\x1a\x8f\xa2~?\xe2\x82fg\xb3G\xbe\xc8\x12\xae\xc3\xc0@[\x99\xec\xbf(\xec\x83\xb2\xf2\x15Zi\xc4S6\'\x14\x05\t\x8c\xd5?\xa0\x00\xd8\xe4\xafW\xcc\xa3\xce\tI\x95\xe12\xaclJ\xba\xeb\xe4\x83Z\xaev\xd7\xd9\xdd_\x14O\x84\xaa\x13W\xb7\x06\'fvQ\x95\xc5\xd1\x98\xe3T\xcdfk\xc7\xe9\x96\r\x91\xb0\xc46\xf2\xfc\xef\xfe\xa0\xc9d\xb3h$\xeb\xad\xa4P\x8f\xc3bM{4RQ\x00\x9d)\x1f\xbby\xe5\xc4w\xca1\x88|\xe5\x1e\x10\x89X\x01\xe9\xf6g\x95xx\xaf\xa9~m\x05\xe1\xa8\xda\x80\xc5\x8f\xb41\x81\xf0Z>\xe1=\xb9\x92\xda\x13\xfe5\xfb\xc6\xd8>\x01\xd4\x14\x00'/192, 0x4, 0x0) r3 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/mnt\x00') setns(r3, 0x0) socket(0x5, 0x2, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x2) mount$auto(0x0, &(0x7f0000000000)='}[,&*}\x00\x0e\x15F\xf7\x1a\xd1K+\xedy\xc6\x9bb\x94\xb4^\xc2\x83%\xfbw}\xfb_P\"\x19\xdfi\xe9hA|Q\x8a_F\x04:Q\x90\'\x06', &(0x7f0000000140)='nfsd\x00', 0x10001, 0x0) mount$auto(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000100)='nfsd\x00\xee\x1a\x8f\xa2~?\xe2\x82fg\xb3G\xbe\xc8\x12\xae\xc3\xc0@[\x99\xec\xbf(\xec\x83\xb2\xf2\x15Zi\xc4S6\'\x14\x05\t\x8c\xd5?\xa0\x00\xd8\xe4\xafW\xcc\xa3\xce\tI\x95\xe12\xaclJ\xba\xeb\xe4\x83Z\xaev\xd7\xd9\xdd_\x14O\x84\xaa\x13W\xb7\x06\'fvQ\x95\xc5\xd1\x98\xe3T\xcdfk\xc7\xe9\x96\r\x91\xb0\xc46\xf2\xfc\xef\xfe\xa0\xc9d\xb3h$\xeb\xad\xa4P\x8f\xc3bM{4RQ\x00\x9d)\x1f\xbby\xe5\xc4w\xca1\x88|\xe5\x1e\x10\x89X\x01\xe9\xf6g\x95xx\xaf\xa9~m\x05\xe1\xa8\xda\x80\xc5\x8f\xb41\x81\xf0Z>\xe1=\xb9\x92\xda\x13\xfe5\xfb\xc6\xd8>\x01\xd4\x14\x00'/192, 0x1, 0x0) futex$auto(0x0, 0x6, 0x6, 0x0, 0x0, 0x9) setsockopt$auto(r0, 0x107, 0x12, 0x0, 0x4) socket(0x2, 0x3, 0x1) getsockopt$auto(0x3, 0xff, 0x99, 0xfffffffffffffffe, 0xfffffffffffffffd) select$auto(0xfffffffd, 0x0, &(0x7f0000000100)={[0x20000000000d, 0x203, 0x0, 0x0, 0x9, 0x6, 0x1, 0x3ff, 0x9, 0x5e582971, 0xff, 0x7, 0x4, 0xffff, 0x74, 0xb]}, 0x0, 0x0) socket(0x11, 0x80003, 0x10300) getcwd$auto(&(0x7f0000000040)='\x00', 0xffffffffffffffff) connect$auto(0x3, &(0x7f0000000140)={0xa, @sa_data_min="c4aeed448dc7fe8000"}, 0x55) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_gtp(&(0x7f0000002f80), 0xffffffffffffffff) 9m21.061749061s ago: executing program 46 (id=3247): socket(0xa, 0x2, 0x88) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) fanotify_init$auto(0x200, 0x2010000000000) fanotify_mark$auto(0x0, 0x1, 0x1, 0x4, 0x0) mmap$auto(0x0, 0x4020008, 0x6, 0xeb1, 0x401, 0x101) r0 = socket(0x11, 0x80003, 0x300) io_uring_setup$auto(0x1, 0x0) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000080), r1) sendmsg$auto_NFSD_CMD_THREADS_SET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="01002dbd7000ffdbdf2502000000080001"], 0x1c}, 0x1, 0x0, 0x0, 0x40000021}, 0x8004) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) unshare$auto(0x20000) mount$auto(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000100)='nfsd\x00\xee\x1a\x8f\xa2~?\xe2\x82fg\xb3G\xbe\xc8\x12\xae\xc3\xc0@[\x99\xec\xbf(\xec\x83\xb2\xf2\x15Zi\xc4S6\'\x14\x05\t\x8c\xd5?\xa0\x00\xd8\xe4\xafW\xcc\xa3\xce\tI\x95\xe12\xaclJ\xba\xeb\xe4\x83Z\xaev\xd7\xd9\xdd_\x14O\x84\xaa\x13W\xb7\x06\'fvQ\x95\xc5\xd1\x98\xe3T\xcdfk\xc7\xe9\x96\r\x91\xb0\xc46\xf2\xfc\xef\xfe\xa0\xc9d\xb3h$\xeb\xad\xa4P\x8f\xc3bM{4RQ\x00\x9d)\x1f\xbby\xe5\xc4w\xca1\x88|\xe5\x1e\x10\x89X\x01\xe9\xf6g\x95xx\xaf\xa9~m\x05\xe1\xa8\xda\x80\xc5\x8f\xb41\x81\xf0Z>\xe1=\xb9\x92\xda\x13\xfe5\xfb\xc6\xd8>\x01\xd4\x14\x00'/192, 0x4, 0x0) r3 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/mnt\x00') setns(r3, 0x0) socket(0x5, 0x2, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x2) mount$auto(0x0, &(0x7f0000000000)='}[,&*}\x00\x0e\x15F\xf7\x1a\xd1K+\xedy\xc6\x9bb\x94\xb4^\xc2\x83%\xfbw}\xfb_P\"\x19\xdfi\xe9hA|Q\x8a_F\x04:Q\x90\'\x06', &(0x7f0000000140)='nfsd\x00', 0x10001, 0x0) mount$auto(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000100)='nfsd\x00\xee\x1a\x8f\xa2~?\xe2\x82fg\xb3G\xbe\xc8\x12\xae\xc3\xc0@[\x99\xec\xbf(\xec\x83\xb2\xf2\x15Zi\xc4S6\'\x14\x05\t\x8c\xd5?\xa0\x00\xd8\xe4\xafW\xcc\xa3\xce\tI\x95\xe12\xaclJ\xba\xeb\xe4\x83Z\xaev\xd7\xd9\xdd_\x14O\x84\xaa\x13W\xb7\x06\'fvQ\x95\xc5\xd1\x98\xe3T\xcdfk\xc7\xe9\x96\r\x91\xb0\xc46\xf2\xfc\xef\xfe\xa0\xc9d\xb3h$\xeb\xad\xa4P\x8f\xc3bM{4RQ\x00\x9d)\x1f\xbby\xe5\xc4w\xca1\x88|\xe5\x1e\x10\x89X\x01\xe9\xf6g\x95xx\xaf\xa9~m\x05\xe1\xa8\xda\x80\xc5\x8f\xb41\x81\xf0Z>\xe1=\xb9\x92\xda\x13\xfe5\xfb\xc6\xd8>\x01\xd4\x14\x00'/192, 0x1, 0x0) futex$auto(0x0, 0x6, 0x6, 0x0, 0x0, 0x9) setsockopt$auto(r0, 0x107, 0x12, 0x0, 0x4) socket(0x2, 0x3, 0x1) getsockopt$auto(0x3, 0xff, 0x99, 0xfffffffffffffffe, 0xfffffffffffffffd) select$auto(0xfffffffd, 0x0, &(0x7f0000000100)={[0x20000000000d, 0x203, 0x0, 0x0, 0x9, 0x6, 0x1, 0x3ff, 0x9, 0x5e582971, 0xff, 0x7, 0x4, 0xffff, 0x74, 0xb]}, 0x0, 0x0) socket(0x11, 0x80003, 0x10300) getcwd$auto(&(0x7f0000000040)='\x00', 0xffffffffffffffff) connect$auto(0x3, &(0x7f0000000140)={0xa, @sa_data_min="c4aeed448dc7fe8000"}, 0x55) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_gtp(&(0x7f0000002f80), 0xffffffffffffffff) 7m13.797264189s ago: executing program 9 (id=3662): madvise$auto(0x0, 0x2000040080000004, 0xe) clock_settime$auto(0xfffffffb, &(0x7f0000000680)={0x8000000000000000, 0x14}) r0 = getpid() syz_open_procfs$namespace(r0, &(0x7f00000022c0)='ns/uts\x00') clone$auto(0x7, 0x7fffffffffffffff, 0xfffffffffffffffc, 0x0, 0x7) munmap$auto(0x20001000, 0x7) clone$auto(0x0, 0x5, 0xfffffffffffffffc, 0xfffffffffffffffd, 0x9) 7m13.211890311s ago: executing program 9 (id=3665): r0 = socket(0xa, 0x801, 0x8000106) sendmsg$auto_TIPC_NL_LINK_RESET_STATS(0xffffffffffffffff, 0x0, 0x2000c000) sendmsg$auto_TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000040)={&(0x7f0000002740)=ANY=[@ANYRESHEX=r0, @ANYRES16=0x0, @ANYBLOB="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"], 0x10e0}, 0x1, 0x0, 0x0, 0x24000005}, 0x20000080) mq_open$auto(0x0, 0x3ff, 0x7, &(0x7f0000000140)={0x7, 0x2f05, 0xa509, 0x4}) connect$auto(0x3, &(0x7f0000000140)={0xa, @sa_data_min="c4aeed448dc7fe8000"}, 0x55) mmap$auto(0x6, 0x8, 0x8000000df, 0x9b72, 0x2, 0x9671) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) futex_wake$auto(0x0, 0x400000008, 0x2, 0x82) unshare$auto(0x200) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/mnt\x00') socket(0xa, 0x6, 0x0) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000021}, 0x8004) connect$auto(0x3, &(0x7f0000000140)={0xa, @sa_data_min="c40900448dc7fe8000"}, 0x55) listen$auto(0x3, 0x81) setpgid$auto(0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_handshake(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$auto_HANDSHAKE_CMD_ACCEPT(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000100)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010027bd7000fddbdf25020000000800020002000000080016000000"], 0x24}, 0x1, 0x0, 0x0, 0x2000}, 0x2004881c) statx$auto(0x17, &(0x7f0000001500)='/\x00', 0x800, 0x5, &(0x7f0000001540)={0x6, 0x2, 0x1, 0x7, 0x2, 0x6, 0xfc00, 0x6, 0x7, 0x7, 0x400000000008, 0xe53, {0x7ffffffffffffffe, 0x8, 0x8}, {0x8, 0xfffffffd, 0x400}, {0x1fe, 0x8, 0xb}, {0x4, 0x80000000, 0x4}, 0x6, 0x5, 0x3, 0x8000, 0xba, 0x2, 0xe, 0x9fffffffff, 0x6, 0x3, 0x4000, 0x6, [0x7ff, 0x0, 0x3, 0x7d0e, 0xfa, 0x1, 0x3, 0x6, 0x31]}) setns(r1, 0x0) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x1, 0xffffffff, 0x35b, 0x17, 0x8, 0x4000000000000040) waitid$auto(0x0, 0x2, 0x0, 0x4, 0x0) clone$auto(0xfffffffe00000, 0x5, 0xfffffffffffffffc, 0xfffffffffffffffc, 0x4) clone$auto(0xff, 0x800ffff, 0x0, 0x0, 0x1) msgget$auto(0x6, 0x200) msgctl$auto(0x0, 0x2, 0x0) close_range$auto(0x2, 0x8, 0x0) 7m11.790875795s ago: executing program 9 (id=3669): mmap$auto(0x0, 0x400008, 0xffffffffffffffff, 0x2009b72, 0x80000000c847, 0x8000) mmap$auto(0x3, 0x1, 0xfffffffffffffff7, 0x10, 0x3, 0x0) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) sendmsg$auto_WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x4008810}, 0x2000c041) socket(0x2, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000080)={0x2, @sockaddr_1_1}, 0x6b) setsockopt$auto(0x3, 0x1, 0x20, 0x0, 0x9) connect$auto(0x3, &(0x7f00000000c0)={0x2, @sockaddr_1_1}, 0x55) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) socket(0x2, 0x1, 0x106) sendmsg$auto_WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x4008810}, 0x2000c041) bind$auto(0x3, &(0x7f0000000080)={0x2, @sockaddr_1_1}, 0x6b) connect$auto(0x3, &(0x7f00000000c0)={0x2, @sockaddr_1_1}, 0x55) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) syz_genetlink_get_family_id$auto_IPVS(0x0, 0xffffffffffffffff) ioctl$auto(0x3, 0x800005411, 0x38) write$auto(0x3, 0x0, 0xfffffdef) mmap$auto(0x0, 0x9, 0x3ff57696, 0x9b72, 0x2, 0x8000000000008000) r0 = socket(0xa, 0x5, 0x0) getsockopt$auto(r0, 0x84, 0xb, 0x0, &(0x7f0000000080)=0x9c8) prctl$auto(0x2, 0x7, 0x8, 0x6, 0x9) userfaultfd$auto(0x5) mmap$auto(0x0, 0x400008, 0x5d71, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) close_range$auto(0x2, 0x8000, 0x0) io_uring_setup$auto(0x2, 0x0) io_uring_register$auto(0x2, 0x18, &(0x7f0000000040), 0x9) shutdown$auto(0x200000003, 0x2) 7m9.852157015s ago: executing program 9 (id=3678): r0 = socket(0xa, 0x801, 0x84) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x200000000000401, 0x8000) setsockopt$auto(r0, 0x85, 0x75, 0x0, 0xc) socket(0xa, 0x801, 0x3) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x6, 0x4, 0x8006) writev$auto(0x1, &(0x7f0000000100)={0x0, 0x400000040000fdef}, 0x1) r1 = socket(0x15, 0x5, 0x0) epoll_ctl$auto(0x1, 0x764, r1, 0x0) prctl$auto(0x23, 0x7, 0x2008, 0x0, 0x0) fanotify_init$auto(0x65, 0x2) pipe$auto(&(0x7f0000000080)=0xfe) dup2$auto(0x5, 0x4) splice$auto(0x4, 0x0, 0x2, 0x0, 0x80000001, 0x9) madvise$auto(0x0, 0xfffffffffefefffd, 0x3ff) mmap$auto(0x0, 0x8, 0x1000000004, 0x9b72, 0x2, 0x8000) get_mempolicy$auto(0xfffffffffffffffe, 0x0, 0x3, 0x1ff, 0x3) mmap$auto(0x8, 0xffffffffffffff5e, 0x1, 0xf713, 0xd213, 0x1) mmap$auto(0x0, 0x400005, 0xdf, 0x11, 0x7, 0x8000) mbind$auto(0x0, 0x3, 0x4, 0x0, 0x10000000000006, 0x2) mmap$auto(0x0, 0x400008, 0xdf, 0x94, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) clone$auto(0x40, 0x10000, 0xfffffffffffffffd, 0xffffffffffffffff, 0x4) mincore$auto(0x1000, 0x8001, 0x0) mincore$auto(0x8, 0xf, &(0x7f0000000040)='ns/mnt\x00') mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/mnt\x00') socket(0xa, 0x3, 0x3a) socket(0x28, 0x4, 0x2) 7m7.114184744s ago: executing program 9 (id=3694): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r0 = socket(0xb, 0x6, 0x84) semctl$auto(0x201, 0xfffffffffffffffa, 0x3, 0x0) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000021}, 0x8004) connect$auto(0x3, &(0x7f0000000140)={0x6, @sa_data_min="0000000400"}, 0x55) close_range$auto(0x0, r0, 0x0) fanotify_init$auto(0x5, 0x2) socket$nl_generic(0x10, 0x3, 0x10) pidfd_open$auto(0x1, 0x0) pidfd_send_signal$auto(0x2, 0x7, 0x0, 0x1) select$auto(0xa, 0x0, &(0x7f0000000100)={[0x20000000000d, 0x203, 0x0, 0xc, 0x5, 0x3, 0x5, 0x2000000000000002, 0x9, 0x8, 0xff, 0xa, 0x4, 0xaab, 0x5, 0x4006]}, 0x0, 0x0) connect$auto(0x3, &(0x7f0000000140)={0xa, @sa_data_min="c4aeed448dc7fe8000"}, 0x55) shutdown$auto(0x200000003, 0x2) setsockopt$auto(0x3, 0x10000000084, 0x1, 0x0, 0x14) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_MAC80211_HWSIM(&(0x7f0000000640), r1) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000080)=ANY=[], 0x1c}}, 0x48000) r2 = socket$nl_generic(0x10, 0x3, 0x10) ppoll$auto(&(0x7f0000000100)={r2, 0x7ff, 0x7}, 0x9eba, &(0x7f0000000140)={0x5852, 0x1000}, 0x0, 0x7) syz_genetlink_get_family_id$auto_IPVS(&(0x7f0000000280), r2) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) setrlimit$auto(0x1000000007, 0x0) timerfd_create$auto(0x9, 0x0) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) unshare$auto(0x20000080) unshare$auto(0x200) setsockopt$auto(r0, 0xfffffffc, 0x29, 0xfffffffffffffffc, 0x3ff) r3 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/mnt\x00') setns(r3, 0x0) 7m4.44156164s ago: executing program 9 (id=3706): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x19) clone$auto(0x7, 0x7fffffffffffffff, 0xffffffffffffffff, 0x0, 0x1) mlock$auto(0xfbe8, 0x4) (async) mlock$auto(0xfbe8, 0x4) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) rseq$auto(&(0x7f0000000340)={0xe, 0x401, 0x0, 0x6, 0x81, 0xfffffffa, "6559eca32c9e611a56af2a64b1c2506a03a2d983d20f44f9eb98683ff28d00e9be67cc9e178d6a13714dcb86bb9c2152daf35e71d4f017ef678a077c42de8eb8f23051f86e83f187a2b4f1b3a2cee43676e861d06937925c507a212319439e1e23bef64453d85f38165f0b9eab38492742c26fff22258d05b5b99d30c22f6d129a6e0da2f216a7b455517ab946804249476d"}, 0x8000, 0x0, 0x6) open(0x0, 0x101500, 0x54) (async) open(0x0, 0x101500, 0x54) madvise$auto(0x0, 0xffffffffffff0005, 0x19) (async) madvise$auto(0x0, 0xffffffffffff0005, 0x19) io_uring_setup$auto(0x6, 0x0) r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)) madvise$auto(0x0, 0xffffffffffff0001, 0x15) (async) madvise$auto(0x0, 0xffffffffffff0001, 0x15) mprotect$auto(0x5, 0x80, 0x6) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x8, 0x802, 0x7ff, 0x10011, 0xfffffffffffffff7, 0x1c40) landlock_restrict_self$auto(0x1000, 0x0) timer_create$auto(0x8, 0x0, 0x0) socket(0x2a, 0x2, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) getrandom$auto(0x0, 0xe06, 0x3) madvise$auto(0x0, 0x3, 0x15) (async) madvise$auto(0x0, 0x3, 0x15) listen$auto(r0, 0x6) (async) listen$auto(r0, 0x6) madvise$auto(0x0, 0x10001, 0x9) r1 = open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x100) copy_file_range$auto(r1, 0x0, r1, &(0x7f0000000180)=0x80, 0x21c1, 0x0) (async) copy_file_range$auto(r1, 0x0, r1, &(0x7f0000000180)=0x80, 0x21c1, 0x0) newfstatat$auto(0xffffffffffffff9c, &(0x7f0000000040)='\\[-#*$-}\'[*-.-\x00', &(0x7f0000000080)={0x1, 0xfffffffd, 0x7, 0x7, 0x0, 0xee00, 0x0, 0xffffffffffff9456, 0x64e1, 0x100000001, 0x400, 0x7, 0x7, 0xff, 0x8, 0x8, 0xe4a2}, 0x700) r3 = getegid() statx$auto(r1, &(0x7f0000000000)='\x13+\x14^\x00', 0x2, 0x9, &(0x7f0000000240)={0x80, 0x24, 0x490000000, 0x5, r2, r3, 0xc, 0x3, 0x2, 0x9, 0x6, 0x3ff, {0x8}, {0x3, 0x5c4}, {0x5, 0x8}, {0x8, 0xffffff7f}, 0x2, 0x100, 0x2, 0xe, 0x2, 0xac4a, 0x84b, 0x5, 0x5b8, 0xfff, 0x1ff, 0x240000, [0x7, 0x8, 0x5, 0xb, 0x1, 0x9, 0x9, 0xffffffff, 0x3]}) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) (async) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) ioctl$auto(0x3, 0x800005411, 0x38) (async) ioctl$auto(0x3, 0x800005411, 0x38) mmap$auto(0xa, 0x6, 0x9, 0x18, 0xa, 0x7e3d) 7m4.240909846s ago: executing program 47 (id=3706): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x19) clone$auto(0x7, 0x7fffffffffffffff, 0xffffffffffffffff, 0x0, 0x1) mlock$auto(0xfbe8, 0x4) (async) mlock$auto(0xfbe8, 0x4) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) rseq$auto(&(0x7f0000000340)={0xe, 0x401, 0x0, 0x6, 0x81, 0xfffffffa, "6559eca32c9e611a56af2a64b1c2506a03a2d983d20f44f9eb98683ff28d00e9be67cc9e178d6a13714dcb86bb9c2152daf35e71d4f017ef678a077c42de8eb8f23051f86e83f187a2b4f1b3a2cee43676e861d06937925c507a212319439e1e23bef64453d85f38165f0b9eab38492742c26fff22258d05b5b99d30c22f6d129a6e0da2f216a7b455517ab946804249476d"}, 0x8000, 0x0, 0x6) open(0x0, 0x101500, 0x54) (async) open(0x0, 0x101500, 0x54) madvise$auto(0x0, 0xffffffffffff0005, 0x19) (async) madvise$auto(0x0, 0xffffffffffff0005, 0x19) io_uring_setup$auto(0x6, 0x0) r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)) madvise$auto(0x0, 0xffffffffffff0001, 0x15) (async) madvise$auto(0x0, 0xffffffffffff0001, 0x15) mprotect$auto(0x5, 0x80, 0x6) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x8, 0x802, 0x7ff, 0x10011, 0xfffffffffffffff7, 0x1c40) landlock_restrict_self$auto(0x1000, 0x0) timer_create$auto(0x8, 0x0, 0x0) socket(0x2a, 0x2, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) getrandom$auto(0x0, 0xe06, 0x3) madvise$auto(0x0, 0x3, 0x15) (async) madvise$auto(0x0, 0x3, 0x15) listen$auto(r0, 0x6) (async) listen$auto(r0, 0x6) madvise$auto(0x0, 0x10001, 0x9) r1 = open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x100) copy_file_range$auto(r1, 0x0, r1, &(0x7f0000000180)=0x80, 0x21c1, 0x0) (async) copy_file_range$auto(r1, 0x0, r1, &(0x7f0000000180)=0x80, 0x21c1, 0x0) newfstatat$auto(0xffffffffffffff9c, &(0x7f0000000040)='\\[-#*$-}\'[*-.-\x00', &(0x7f0000000080)={0x1, 0xfffffffd, 0x7, 0x7, 0x0, 0xee00, 0x0, 0xffffffffffff9456, 0x64e1, 0x100000001, 0x400, 0x7, 0x7, 0xff, 0x8, 0x8, 0xe4a2}, 0x700) r3 = getegid() statx$auto(r1, &(0x7f0000000000)='\x13+\x14^\x00', 0x2, 0x9, &(0x7f0000000240)={0x80, 0x24, 0x490000000, 0x5, r2, r3, 0xc, 0x3, 0x2, 0x9, 0x6, 0x3ff, {0x8}, {0x3, 0x5c4}, {0x5, 0x8}, {0x8, 0xffffff7f}, 0x2, 0x100, 0x2, 0xe, 0x2, 0xac4a, 0x84b, 0x5, 0x5b8, 0xfff, 0x1ff, 0x240000, [0x7, 0x8, 0x5, 0xb, 0x1, 0x9, 0x9, 0xffffffff, 0x3]}) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) (async) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) ioctl$auto(0x3, 0x800005411, 0x38) (async) ioctl$auto(0x3, 0x800005411, 0x38) mmap$auto(0xa, 0x6, 0x9, 0x18, 0xa, 0x7e3d) 2m10.520081562s ago: executing program 8 (id=4929): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socket(0x23, 0x80805, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x19) ioperm$auto(0x800, 0x5, 0xd) prctl$auto(0x1, 0x10, 0x10, 0xffffffffffffef97, 0x1000) shmdt$auto(0xffffffffffffffff) acct$auto(0x0) r0 = socket(0x2b, 0x1, 0x1) listen$auto(0x3, 0x81) ioctl$sock_SIOCGIFINDEX(r0, 0x8905, 0x0) memfd_secret$auto(0x0) socket(0x2b, 0x1, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x5, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_tcp_metrics(&(0x7f0000000000), r1) getsockopt$auto(0x6, 0x84, 0x22, 0x0, 0x0) 2m9.85071533s ago: executing program 8 (id=4931): open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x100) mmap$auto(0x0, 0x400006, 0xdf, 0x809b72, 0x2, 0x8000) pipe2$auto(0x0, 0x80) (async) socket$nl_generic(0x10, 0x3, 0x10) dup2$auto(0x5, 0x4) (async, rerun: 64) select$auto(0xb, &(0x7f0000000100)={[0x7f, 0x31, 0xffffffffffffffff, 0x80000000, 0x7, 0x6, 0x81, 0x67e, 0x8, 0x2, 0x5, 0x10001, 0x334, 0x4, 0xfffffffffffffffe, 0x8]}, 0x0, 0x0, 0x0) (async, rerun: 64) close_range$auto(0x0, 0xfffffffffffff000, 0x2) (async) r0 = open(0x0, 0x22240, 0x154) move_mount$auto(r0, 0x0, r0, 0x0, 0x277) (async) io_uring_setup$auto(0x5, 0x0) (async) pidfd_getfd$auto(r0, 0xffffffffffffffff, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) open(&(0x7f0000000000)='./cgroup.cpu/cgroup.procs\x00', 0x8802, 0x32) (async) ioctl$auto(0xffffffffffffffff, 0x20884b, 0x6) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_SEG6(&(0x7f0000000dc0), r1) (async) mmap$auto(0x0, 0x8, 0x1000000004, 0x9b72, 0x20000000003, 0x8000) (async, rerun: 32) prctl$auto(0x1000000003b, 0x1, 0x4, 0x3, 0x7) (async, rerun: 32) open(0x0, 0x8100, 0x23) (async) close_range$auto(0x0, 0xfffffffffffff000, 0x2) (async) mprotect$auto(0x1ffff000, 0x8000000000000001, 0xd) swapon$auto(&(0x7f0000000000)='X))\x00', 0x5259) 2m9.203589324s ago: executing program 8 (id=4935): sendmsg$auto_IEEE802154_DEL_IFACE(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0xa, 0x2, 0x0) mmap$auto(0x0, 0x128009, 0xdf, 0xeb1, 0x401, 0x8000) setsockopt$auto(0x400000000000003, 0x29, 0x6, 0x0, 0x8) select$auto(0x3, 0x0, &(0x7f0000000100)={[0xd, 0x200, 0x0, 0xc, 0xa, 0x3, 0x6, 0x3, 0x9, 0x5e582970, 0x4000000000000000, 0x2, 0x4, 0x5, 0x8, 0x6]}, 0x0, 0x0) connect$auto(0x3, &(0x7f0000000140)={0xa, @sa_data_min="c4aeed448dc7fe8000"}, 0x55) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0) setsockopt$auto(r0, 0x29, 0x37, &(0x7f0000000080)='\x15!\xa8^J/\xddCx4!\x00\xd3\x8f\x1e\x1b\xc3 \xe2\xa8\xd6\xd9\xc0\xa2\x0f\x88\xb1e\x8a\xd8?\xfe\xda\xc4\xef\xff(i\xc6@\x91[\vBj\x0eQ\xce\x16\'C\x8cYA\x92u\xd5\xb8\\\x82,\xe2=y\x9bR\xbcn\xa0c\x16~\x86\"t\xde\x14\xe4\xa5\xfe\xb5', 0x110) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) fanotify_init$auto(0x10001, 0xffffffff) socket(0x26, 0x80805, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000000c0)='ns/pid\x00') mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x7ff) socket(0x2, 0x1, 0x106) io_uring_setup$auto(0x6, 0x0) io_uring_setup$auto(0x6, 0x0) socket(0xa, 0x6, 0x0) sysfs$auto(0x2, 0x0, 0x0) fsopen$auto(0x0, 0x1) epoll_create$auto(0x4) epoll_ctl$auto(0x5, 0x1, 0x8000000000000000, 0x0) epoll_ctl$auto(0x5, 0x1, 0x8000000000000000, 0x0) open(&(0x7f0000000000)='./file1\x00', 0x1652c2, 0xe1d2b27bdc14aa98) open(&(0x7f0000000040)='./file1\x00', 0x10677d, 0x37e5c9853cd1b9d9) fanotify_mark$auto(0x400000000000, 0x101, 0x9, 0x4, 0x0) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) mkdir$auto(&(0x7f0000000000)='g\xb8\x00\x80\xe0\x1d', 0x0) rename$auto(&(0x7f0000000080)='}[,&*}\x00', &(0x7f0000000140)='g\xb8\x00\x80\xe0\x1d') open(0x0, 0x261c2, 0x84) 2m8.141535767s ago: executing program 8 (id=4939): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x2, 0x1, 0x0) setsockopt$auto(0x3, 0x0, 0x14, 0x0, 0x28) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x801, 0x84) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44040061}, 0x20000080) setrlimit$auto(0x7, &(0x7f0000001380)={0x5, 0x6}) socket(0x2, 0x1, 0x0) socketpair$auto(0x3, 0x5, 0x7, 0x0) connect$auto(0x3, &(0x7f0000000140)={0xa, @sa_data_min="c4aeed448dc7fe8000"}, 0x55) select$auto(0xa, 0x0, &(0x7f0000000100)={[0x20000000000d, 0x203, 0x0, 0xc, 0x5, 0x3, 0x5, 0x2000000000000002, 0x9, 0x8, 0xa05, 0xa, 0x4, 0xaab, 0x5, 0x4006]}, 0x0, 0x0) connect$auto(0x3, &(0x7f0000000140)={0xa, @sa_data_min="c4aeed448dc7fe8000"}, 0x55) shutdown$auto(0x200000003, 0x2) setsockopt$auto(0x3, 0x10000000084, 0x82, 0x0, 0x8) 2m7.474765661s ago: executing program 8 (id=4942): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) fanotify_init$auto(0x5, 0x2) open(0x0, 0x7ffd, 0x10c) pwritev$auto(0x1, 0x0, 0x2, 0x5, 0x5) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x800008000) socket(0x2, 0x1, 0x106) socket(0x2b, 0x1, 0x1) mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) rseq$auto(&(0x7f0000000300)={0xe, 0x401, 0x0, 0x6, 0xffffffff, 0x2}, 0x8002, 0x0, 0x6) io_uring_setup$auto(0x1, 0x0) futex$auto(0x0, 0x6, 0x8, 0x0, 0x0, 0x80000001) tkill$auto(0x1, 0x7) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) getsockopt$auto(0x4, 0x6, 0x1c, 0xfffffffffffffffc, 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) munmap$auto(0x80000000, 0x3532) 2m3.483956082s ago: executing program 8 (id=4946): sendmsg$auto_WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x88d0}, 0x2000c041) r0 = socket(0x2, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000080)={0x2, @sockaddr_1_1}, 0x6b) connect$auto(0x3, &(0x7f00000000c0)={0x2, @sockaddr_1_1}, 0x55) write$auto(r0, &(0x7f0000000100)='nl80211\x00', 0x7) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) write$auto(0x3, 0x0, 0x81) socket(0x10, 0x2, 0xc) bind$auto(0x3, &(0x7f0000000000)={0x10, @sa_data_min="d059b8a5b5bce4bdf082c36111fd"}, 0xf) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) write$auto(0x3, 0x0, 0xfffffdef) unshare$auto(0x40000080) sendmsg$auto_NL80211_CMD_VENDOR(r0, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f00000001c0)={&(0x7f0000000240)={0x14, 0x0, 0x100, 0x70bd2c, 0x25dfdc01}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x0) socket(0x2, 0x1, 0x0) sendmsg$auto_NET_DM_CMD_CONFIG(r0, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="30a40000", @ANYRES16=0x0, @ANYBLOB="04002cbd7000fedbdf250200000004001500"], 0x18}, 0x1, 0x0, 0x0, 0x20008050}, 0x40000) shutdown$auto(0x200000003, 0x2) 2m3.48382826s ago: executing program 48 (id=4946): sendmsg$auto_WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x88d0}, 0x2000c041) r0 = socket(0x2, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000080)={0x2, @sockaddr_1_1}, 0x6b) connect$auto(0x3, &(0x7f00000000c0)={0x2, @sockaddr_1_1}, 0x55) write$auto(r0, &(0x7f0000000100)='nl80211\x00', 0x7) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) write$auto(0x3, 0x0, 0x81) socket(0x10, 0x2, 0xc) bind$auto(0x3, &(0x7f0000000000)={0x10, @sa_data_min="d059b8a5b5bce4bdf082c36111fd"}, 0xf) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) write$auto(0x3, 0x0, 0xfffffdef) unshare$auto(0x40000080) sendmsg$auto_NL80211_CMD_VENDOR(r0, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f00000001c0)={&(0x7f0000000240)={0x14, 0x0, 0x100, 0x70bd2c, 0x25dfdc01}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x0) socket(0x2, 0x1, 0x0) sendmsg$auto_NET_DM_CMD_CONFIG(r0, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="30a40000", @ANYRES16=0x0, @ANYBLOB="04002cbd7000fedbdf250200000004001500"], 0x18}, 0x1, 0x0, 0x0, 0x20008050}, 0x40000) shutdown$auto(0x200000003, 0x2) 23.039160071s ago: executing program 6 (id=5369): kill$auto(0x0, 0x21) io_uring_register$auto(0x7ff, 0x80000000, 0x0, 0x2) mmap$auto(0x0, 0x20006, 0x10000000000df, 0x11, 0x6, 0x8000) socket(0x18, 0x80000, 0x0) syz_open_procfs$namespace(0x0, 0x0) socket(0xa, 0x3, 0x3a) ioctl$auto(0x1, 0x890b, 0x8) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_netdev(&(0x7f0000000140), r0) sendmsg$auto_NETDEV_CMD_QUEUE_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="110328bd7000fcdbdf250a000000"], 0x14}, 0x1, 0x0, 0x0, 0x5}, 0x4000) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) open(0x0, 0x261c2, 0x84) r2 = syz_genetlink_get_family_id$auto_nbd(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$auto_NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB='8\x00\x00', @ANYRES16=r2, @ANYRES64], 0x38}, 0x1, 0x0, 0x0, 0x40080}, 0x20040000) mprotect$auto(0x1ffff000, 0x8000000000000001, 0x4) msgget$auto(0x6, 0x200) msgctl$auto(0x0, 0x1, &(0x7f00000000c0)={{0x80000000, 0x7, 0x80000aa0, 0x92f8, 0x2, 0x4000d5, 0x9}, 0x0, 0x0, 0x7, 0x9, 0x3, 0x7, 0x10000, 0x8, 0xa89c, 0x9, 0x0, 0xfff}) setreuid$auto(0x7, 0x806) mprotect$auto(0x1ffff000, 0x8000000000000001, 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_SEG6(&(0x7f0000000dc0), r3) sendmsg$auto_SEG6_CMD_SET_TUNSRC(r3, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000e00)={0x28, r4, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@SEG6_ATTR_DST={0x14, 0x1, {@u6_addr8="ce3a6615dee07eba6236cd2fdefda2c1"}}]}, 0x28}, 0x1, 0x0, 0x0, 0x24008054}, 0x800) mmap$auto(0x8, 0x4, 0xc000000, 0x19, 0xfffffffffffffffc, 0x29400000000000) settimeofday$auto(0x0, 0x0) socket(0xa, 0x801, 0x106) setsockopt$auto(0x3, 0x0, 0x13, 0xffffffffffffffff, 0x0) ioctl$auto(0xc8, 0x54e3, 0x5c8d) listmount$auto(0xfffffffffffffffd, 0xfffffffffffffffc, 0x3, 0x8001) alarm$auto(0x0) 22.83719592s ago: executing program 6 (id=5370): unshare$auto(0x200) (async) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/mnt\x00') setns(r0, 0x0) (async) umount2$auto(&(0x7f0000000200)='.\x00', 0x0) (async) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) (async) futex$auto(0x0, 0x6, 0x8, 0x0, 0x0, 0x80000001) (async) mq_open$auto(0x0, 0xde8, 0xb, 0x0) (async) setresuid$auto(0xe60, 0x2, 0x0) (async) mq_unlink$auto(0x0) mmap$auto(0x0, 0xe000000000000, 0xdf, 0x9b7e, 0x47, 0x8000) (async) mmap$auto(0x0, 0x8, 0x3ff57696, 0x9b72, 0x2, 0x8000000000008000) (async) madvise$auto(0x0, 0x0, 0x4000019) (async) mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) (async) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000100)={{&(0x7f0000000000)=[0xc97, 0xf3c0, 0x10000, 0xfffffffffffffffd, 0x1], 0x5, &(0x7f0000000080)={&(0x7f0000000040)=[0x6, 0x8000000000000001, 0x5, 0x1, 0x5, 0xff], 0x40}, 0xf71d, &(0x7f00000000c0)=[0x1, 0x2, 0xffffffffffffff01, 0xffffffffffff7fff], 0x7f9, 0xa6}, 0x4}, 0x6, 0x3) semctl$auto(0x1ff, 0x2, 0x13, 0x20001) (async) mmap$auto(0x8, 0x9, 0x3ff, 0x18, 0x7, 0xffffffffffffffff) madvise$auto(0x0, 0xffffffffffff0005, 0x19) 22.556052286s ago: executing program 6 (id=5371): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x45, 0xdf, 0xeb1, 0x401, 0x8000) mprotect$auto(0x1ffff000, 0x8000000000000001, 0x4) clock_settime$auto(0xfffffffb, &(0x7f0000000680)={0x8000000000000000, 0x14}) socket(0x11, 0x80003, 0x300) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0x200007, 0x19) socket(0x1, 0x1, 0x1) shmat$auto(0x0, 0xfffffffffffffffd, 0x1ae1a4f4) msync$auto(0x1ffff000, 0x80100000000005, 0x400000004) socket$nl_generic(0x10, 0x3, 0x10) setresgid$auto(0x8, 0x7, 0x5) fcntl$auto(0x3, 0x4, 0xa553) mmap$auto(0x400000000000, 0x400008, 0xdf, 0x9b72, 0x2, 0x800008000) 22.065801665s ago: executing program 2 (id=5375): mmap$auto(0x80000000000000, 0x2000b, 0xdc, 0x1d, 0x9, 0x7) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) rseq$auto(0x0, 0xff, 0xe, 0xfff) recvmmsg$auto(0x3, 0x0, 0x10000, 0x6, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000f40)={'batadv0\x00'}) sendmsg$auto_BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000326bd7000fedbdf250200000008002700ff7f00000a00180017bbe2"], 0x28}, 0x1, 0x0, 0x0, 0x4c894}, 0x4) r1 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB=' \x00\''], 0x1ac}}, 0x40000) shutdown$auto(r0, 0x4) syz_genetlink_get_family_id$auto_NLBL_UNLBL(0x0, 0xffffffffffffffff) unshare$auto(0x40000080) write$auto(0x3, 0x0, 0x296) 21.892704738s ago: executing program 2 (id=5376): getitimer$auto(0x100000000, 0xffffffffffffffff) mmap$auto(0x0, 0x20006, 0x10000000000df, 0xeb2, 0x401, 0x8000) close_range$auto(0x7, 0xdfdf, 0x2) socket(0x2, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) open(0x0, 0x22240, 0x0) socket(0xa, 0x3, 0x6) pidfd_getfd$auto(0x3, 0x9, 0x100000000) socket(0x2b, 0x4, 0x4) mmap$auto(0x25, 0xd2, 0x0, 0x10, 0x1, 0x400) r0 = socket(0x1a, 0x800, 0x5) r1 = socket(0x2, 0x6, 0x0) setsockopt$auto(r1, 0x10d, 0x2, 0x0, 0x17) mmap$auto(0x5, 0x7, 0x5, 0x15, 0x1000000000200, 0x9) ioctl$auto(r0, 0x4, 0x8000000000000) 21.865343578s ago: executing program 6 (id=5377): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) pipe2$auto(0x0, 0x72f2) bpf$auto(0x10, 0x0, 0x9) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x3, 0x3) mmap$auto(0x0, 0x400008, 0xe41, 0x9b72, 0x2, 0x800008000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) openat2$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x140, 0x0, 0x8}, 0x18) 21.78535884s ago: executing program 2 (id=5378): set_mempolicy$auto(0x9, &(0x7f0000000000)=0x1b13924a, 0x7) setitimer$auto(0x4, &(0x7f0000000000)={{0x1ff, 0x10001}, {0x200000000004, 0x6}}, 0x0) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/pid_for_children\x00') bpf$auto(0x12, &(0x7f0000000000)=@info={0x2800, 0x1ff, 0x2}, 0xcf) 21.729949123s ago: executing program 2 (id=5380): socket(0xa, 0x1, 0x84) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) io_uring_setup$auto(0x6, 0x0) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x29, 0x5, 0x0) write$auto(0x3, 0x0, 0xfffffdef) r0 = open(&(0x7f0000000000)='./file0\x00', 0x4242, 0xe1d2b27bdc14aabc) remap_file_pages$auto(0x3, 0x8000000000000001, 0x0, 0x1, 0x4) flock$auto(r0, 0x5) r1 = open(&(0x7f0000000000)='./file0\x00', 0x4242, 0xe1d2b27bdc14aabc) flock$auto(r1, 0x2) close_range$auto(0x2, 0x8000, 0x0) mprotect$auto(0x1ffff000, 0x8000000000000001, 0x4) mmap$auto(0x0, 0xa, 0xdb, 0x9b72, 0x5, 0x8000) io_uring_setup$auto(0x6, 0x0) setsockopt$auto(0x3, 0x5, 0x5ffd, 0x0, 0xc) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) mincore$auto(0x1000, 0x2, 0x0) setsockopt$auto(0x3, 0x10000000084, 0x16, 0x0, 0x8) r2 = syz_genetlink_get_family_id$auto_macsec(&(0x7f0000000080), r1) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$auto_MACSEC_CMD_DEL_RXSA(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r2, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@MACSEC_ATTR_IFINDEX={0x8, 0x1, r3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40884}, 0x0) mmap$auto(0x1, 0x9, 0x8000, 0xbf, 0x7, 0x1d53) 21.646255825s ago: executing program 6 (id=5381): close_range$auto(0x2, 0x8, 0x0) socket(0x2b, 0x800, 0x5) r0 = socket(0xa, 0x3, 0x6) r1 = socket(0x10, 0x2, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0xc01) socket(0xa, 0x3, 0x6) connect$auto(0x3, &(0x7f0000000140)={0xa, @sa_data_min="ff00"}, 0x55) (async) connect$auto(0x3, &(0x7f0000000140)={0xa, @sa_data_min="ff00"}, 0x55) sendmmsg$auto(0x15, 0x0, 0x3, 0x0) madvise$auto(0x0, 0x2000040080000004, 0xe) (async) madvise$auto(0x0, 0x2000040080000004, 0xe) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) futex$auto(0x0, 0x6, 0x47, 0x0, 0x0, 0x0) setsockopt$auto(0x3, 0x1, 0x41, 0x0, 0x88) write$auto(0x3, 0x0, 0xffd8) socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_TIPCv2(&(0x7f0000000800), r2) (async) r3 = syz_genetlink_get_family_id$auto_TIPCv2(&(0x7f0000000800), r2) sendmsg$auto_TIPC_NL_MEDIA_SET(r2, &(0x7f0000001b80)={0x0, 0x0, &(0x7f0000001b40)={&(0x7f0000000840)={0x14, r3, 0x1, 0x70bd28, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x48001}, 0x40010) recvfrom$auto(0x3, 0x0, 0x800000000e, 0xfffff4a4, 0x0, 0xfffffffffffffffd) sendfile$auto(0x1, 0x3, 0x0, 0xc01) sendmsg$auto_NL80211_CMD_GET_REG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="1b000000", @ANYBLOB="1a00279e"], 0x1ac}, 0x1, 0x0, 0x0, 0x40}, 0x40000) (async) sendmsg$auto_NL80211_CMD_GET_REG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="1b000000", @ANYBLOB="1a00279e"], 0x1ac}, 0x1, 0x0, 0x0, 0x40}, 0x40000) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket(0xa, 0x3, 0x3a) ioctl$auto(r5, 0x890c, 0x5) (async) ioctl$auto(r5, 0x890c, 0x5) syz_genetlink_get_family_id$auto_IPVS(0x0, r4) (async) syz_genetlink_get_family_id$auto_IPVS(0x0, r4) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) bind$auto(r0, 0x0, 0xf) unshare$auto(0x40000080) (async) unshare$auto(0x40000080) mmap$auto(0x0, 0x20009, 0xdf, 0xfffffffffffffff8, 0x401, 0x8000) sysfs$auto(0x2, 0x10000000000002d, 0x0) (async) sysfs$auto(0x2, 0x10000000000002d, 0x0) mmap$auto(0x80, 0x10001, 0xffffffff, 0x410, 0x6, 0x6) fsopen$auto(0x0, 0x1) 21.264689523s ago: executing program 2 (id=5383): close_range$auto(0x0, 0xffffeffe, 0x2) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = socket(0x2, 0x1, 0x0) socketpair$auto(0x2, 0xffffffff, 0x201, 0x0) r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x100) (async) fallocate$auto(0x3, 0x0, 0xe, 0x8ec5) (async, rerun: 64) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) (async, rerun: 64) io_uring_setup$auto(0x6, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x25, 0x1, 0x3) (async) sendfile$auto(0x6, 0x3, 0x0, 0x8000) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$auto_NL80211_CMD_SET_WIPHY(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010026bd7000fbdbdf258835a43808000300", @ANYRES32=r4, @ANYBLOB='\b\x00a'], 0x24}, 0x1, 0x0, 0x0, 0x24048080}, 0x80) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) (async) semctl$auto(0x201, 0xfffffffffffffffa, 0x3, 0x0) (async, rerun: 64) close_range$auto(0x2, 0x8, 0x0) (async, rerun: 64) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) ioperm$auto(0x7, 0x6, 0x2) (async, rerun: 64) ptrace$auto(0xffff, 0xfffffffffffffffd, 0x8000000000000001, 0x9) (async, rerun: 64) mseal$auto(0x0, 0x7dda, 0x0) (async) sendmsg$auto_ETHTOOL_MSG_RSS_GET(0xffffffffffffffff, 0x0, 0x4010) socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) (async) r5 = socket(0x11, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r5, 0x8955, 0x0) (async) io_uring_setup$auto(0x4, &(0x7f00000000c0)={0x5, 0x1d2b42cf, 0x1, 0x4, 0x3, 0x6, r0, [0x2, 0x7, 0x8], {0x5, 0x5, 0xfffffffe, 0x80, 0x3, 0xfc7a, 0x3, 0x9, 0x2}, {0x6, 0x0, 0xeb, 0x80000000, 0x6, 0x200, 0x8, 0x9, 0x581a}}) (async) open(&(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x8802, 0x32) write$auto(0x3, 0x0, 0x5dc) 20.783176814s ago: executing program 2 (id=5386): open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) r0 = socket(0x10, 0x2, 0x0) r1 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000001080), 0xffffffffffffffff) sendmsg$auto_L2TP_CMD_TUNNEL_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x14, r1, 0xf25736b7f4caf589, 0x70bd27, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x41}, 0x4048000) fcntl$auto(0x3, 0x400, 0x1) fremovexattr$auto(0x3, &(0x7f0000000080)='\\)\x00') 20.087277813s ago: executing program 6 (id=5390): open(&(0x7f0000000000)='./file0\x00', 0xa61c2, 0x84) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8000, 0x0) r0 = socket(0x1, 0x5, 0x0) io_uring_setup$auto(0x401, 0x0) mmap$auto(0x0, 0xe, 0x43, 0x12, 0x3, 0x8000) setuid$auto(0xe) madvise$auto(0x0, 0x3, 0x15) mmap$auto(0x0, 0x8, 0x1000000004, 0x9b72, 0x20000000003, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x3, 0x7) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000003000), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_CABLE_TEST_TDR_ACT(r1, &(0x7f00000030c0)={0x0, 0x0, &(0x7f0000003080)={&(0x7f0000003040)={0x14, r2, 0x1, 0x70bd27, 0x25dfdbff}, 0x14}}, 0x2040000) sendmsg$auto_ETHTOOL_MSG_FEC_SET(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, r2, 0x10, 0x70bd29, 0x25dfdbff, {}, [@ETHTOOL_A_FEC_AUTO={0x5, 0x3, 0x7}, @ETHTOOL_A_FEC_AUTO={0x5, 0x3, 0x6}, @ETHTOOL_A_FEC_HEADER={0x7, 0x1, "c27503"}]}, 0x2c}, 0x1, 0x0, 0x0, 0x44000}, 0x57384786f232d2c5) pidfd_open$auto(0x1, 0x0) pkey_free$auto(0x2) socket(0x2, 0x3, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2a, 0x2, 0x0) fallocate$auto(0x8000000000000003, 0x0, 0xd, 0x5) sendfile$auto(0x6, 0x3, 0x0, 0xc01) 15.643954408s ago: executing program 7 (id=5410): socket(0xf, 0x4, 0x5) (async) r0 = socket(0xf, 0x4, 0x5) listen$auto(0x3, 0x81) accept$auto(0x3, 0xffffffffffffffff, 0xffffffffffffffff) socket(0x21, 0x2, 0x2) (async) socket(0x21, 0x2, 0x2) mmap$auto(0x0, 0x2020009, 0x3, 0x800000000000eb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) socket(0xa, 0x2, 0x88) io_uring_setup$auto(0x6, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) (async) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) ioctl$auto(r0, 0x38, 0x40) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x801, 0x106) madvise$auto(0x0, 0xffffffffffff0001, 0x15) (async) madvise$auto(0x0, 0xffffffffffff0001, 0x15) listen$auto(r0, 0x5) 15.381265323s ago: executing program 7 (id=5411): socket(0x22, 0x2, 0x2) recvfrom$auto(0x3, 0x0, 0x800000000e, 0xfd, 0x0, 0xfffffffffffffffd) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_netdev(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'ip6gretap0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000040), r3) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendmsg$auto_BATADV_CMD_GET_MCAST_FLAGS(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="afa729bd7000ffdbdf250d00000008000380", @ANYRES32=r5], 0x1c}, 0x1, 0x0, 0x0, 0x804}, 0x20000000) r6 = syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000140), 0xffffffffffffffff) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) socket$nl_generic(0x10, 0x3, 0x10) fchmod$auto(0x0, 0x9b9a) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000f40)={'batadv0\x00', 0x0}) sendmsg$auto_BATADV_CMD_SET_MESH(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010029bd7001fbdbd5250f00000008000300", @ANYRES32=r9, @ANYBLOB="0500380001000000"], 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x140000e4) sendmsg$auto_NETDEV_CMD_BIND_RX(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x44, r1, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@NETDEV_A_DMABUF_QUEUES={0x7, 0x2, "4797cb"}, @NETDEV_A_DMABUF_IFINDEX={0x8, 0x1, r2}, @NETDEV_A_DMABUF_QUEUES={0x7, 0x2, "aabc67"}, @NETDEV_A_DMABUF_QUEUES={0x7, 0x2, "16bb51"}, @NETDEV_A_DMABUF_IFINDEX={0x8, 0x1, r5}, @NETDEV_A_DMABUF_IFINDEX={0x8, 0x1, r9}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040001}, 0x8d0) 15.125160316s ago: executing program 7 (id=5412): mknod$auto(&(0x7f0000000180)=':,\x00', 0xc9, 0xfffffffa) execve$auto(&(0x7f0000000040)=':,\x00', &(0x7f00000000c0)=&(0x7f0000000080)='$+[-+\x98%(,\x00', &(0x7f0000000200)=&(0x7f00000001c0)=':,\x00') madvise$auto(0x0, 0x2000040080000004, 0xe) socket(0xa, 0x3, 0x6) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x1e, 0x80805, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) select$auto(0x7, 0x0, &(0x7f0000000100)={[0x9, 0x5, 0x0, 0xfffffffffffffff6, 0x7, 0xfffffffffffdffff, 0xdffffffffffffff8, 0x2, 0x0, 0x10000005e58296f, 0x1e, 0x7, 0x3, 0x200, 0x1, 0x9]}, 0x0, 0x0) connect$auto(0x3, &(0x7f0000000140)={0xa, @sa_data_min="c4aeed448dc7fe8000"}, 0x55) sendmmsg$auto(0x3, 0x0, 0x9a6, 0xff00) mmap$auto(0x0, 0x8, 0x2, 0x9b72, 0x5, 0x0) socket(0xa, 0x801, 0x106) setsockopt$auto(0x3, 0x1, 0x45, 0x0, 0x9) write$auto(0x3, 0x0, 0xffef) mmap$auto(0x3, 0x5, 0x3, 0x3ff, 0x6, 0x8a) sendmsg$auto_BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20048004}, 0x4010) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0xc) socket(0x28, 0x1, 0x0) connect$auto(0x3, &(0x7f0000000180)={0x28, @sockaddr_1_1}, 0x54) bpf$auto(0x5, &(0x7f0000000000)=@bpf_attr_3={0x8, 0x9067, 0x18c, 0x4, 0x2, 0x8, 0x4, 0x57b8, 0xfffffff8, "63acf0e05b2d33ebc15774e816ef77cf", 0x0, 0x543, 0x4, 0x207, 0x3, 0x4, 0x4, 0x2, 0xe, 0xa, @attach_btf_obj_fd=0x3, 0x166, 0x7fb, 0x80000200006, 0xa, 0x48000000, 0xa7c2}, 0x102) socket(0xa, 0x801, 0x84) bind$auto(0x3, &(0x7f0000000040)={0xa, @sa_data_min="001000000000fe8000"}, 0x69) setsockopt$auto(0x400000000000003, 0x28, 0x2, 0x0, 0x56b) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) quotactl_fd$auto(r0, 0x5, 0xffffb864, &(0x7f0000000000)=[0xbc87]) connect$auto(0x3, &(0x7f0000000140)={0x2, @sa_data_min="6a2f7ff43519eb7100"}, 0x55) write$auto(0x3, 0x0, 0xfdef) recvmmsg$auto(0x3, 0x0, 0x8, 0x0, 0x0) 14.818137212s ago: executing program 7 (id=5413): syz_genetlink_get_family_id$auto_TIPCv2(0x0, 0xffffffffffffffff) (async) sendmsg$auto_TIPC_NL_KEY_SET(0xffffffffffffffff, 0x0, 0x800c) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) (async, rerun: 64) r0 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'team_slave_1\x00', 0x0}) bpf$auto(0x0, &(0x7f0000000100)=@bpf_attr_5={@target_ifindex=r2, 0x81, 0x9c, 0x7b2, 0x1, @relative_fd=0x7, 0x80}, 0x96) (async) bpf$auto(0x2, &(0x7f00000001c0)=@raw_tracepoint={0x5, 0xffff, 0x0, 0x3}, 0xc) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = socket(0x26, 0x3, 0xfffffffe) sendto$auto(r5, 0x0, 0x4, 0xfffffff8, 0x0, 0x7) (async) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) select$auto(0x3, 0x0, &(0x7f0000000100)={[0x80000002, 0x201, 0x0, 0xc, 0xd, 0x1, 0x2, 0x2, 0x81, 0x5e582970, 0x4000000000000000, 0x5, 0x4, 0xfffffffffffffffe, 0x8, 0x6]}, 0x0, 0x0) (async) connect$auto(0x3, 0x0, 0x55) (async) listen$auto(0x3, 0x81) (async) accept$auto(r1, 0x0, 0x0) socket(0x11, 0x3, 0x2) socket(0x10, 0x2, 0x4) (async, rerun: 32) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (rerun: 32) madvise$auto(0x0, 0xffffffffffff0005, 0x1) (async) madvise$auto(0x0, 0xffffffffffff0005, 0x19) (async) close_range$auto(r3, 0xffffffffffffffff, 0x0) (async, rerun: 32) clone$auto(0x21, 0x9, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x6) (async, rerun: 32) sendmsg$auto_BATADV_CMD_GET_BLA_BACKBONE(r4, 0x0, 0x20000000) (async) syz_genetlink_get_family_id$auto_nl802154(0x0, r4) (async, rerun: 32) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (rerun: 32) r6 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1e00df45"], 0x1ac}}, 0x40000) (async) recvmmsg$auto(r6, 0x0, 0xc6b, 0x102, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 13.40392484s ago: executing program 7 (id=5414): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) r0 = socket(0x2, 0x1, 0x106) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x4, 0x8000) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) mprotect$auto(0x1ffff000, 0x7ffffffffffffffe, 0x4) connect$auto(0x3, &(0x7f0000000140)={0xa, @sa_data_min="00000000f5ffffffffffffff00"}, 0x55) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) read$auto(0x3, 0x0, 0x7) syz_genetlink_get_family_id$auto_nlctrl(0x0, 0xffffffffffffffff) recvmmsg$auto(r0, &(0x7f0000000180)={{&(0x7f0000000000)=[0x400], 0x6d2a, &(0x7f00000000c0)={&(0x7f0000000080)=[0xff1b, 0x7], 0x3}, 0x0, &(0x7f0000000100)=[0x7, 0x7028, 0x6, 0x6, 0x1], 0x4, 0x5}, 0x7918820a}, 0xf, 0x4, &(0x7f00000001c0)={0x3fff8000, 0x8a}) pipe2$auto(&(0x7f0000000040)=0x8, 0x4800) madvise$auto(0x0, 0xffffffffffff0001, 0x15) r1 = socket(0x1d, 0x2, 0x2) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000280)={'veth0_macvtap\x00'}) fstatfs$auto(0x3, 0xfffffffffffffffd) close_range$auto(0x0, 0x1c94, 0x2) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) getcwd$auto(0x0, 0xffffffffffffffff) r2 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket(0x10, 0x2, 0x0) sendmsg$auto_CTRL_CMD_GETFAMILY(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002abd77dcb7fcdf2d030000003e00000003c5"], 0x24}, 0x1, 0x0, 0x0, 0x4008810}, 0x10000000) sendmsg$auto_CTRL_CMD_GETPOLICY(r0, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x2c, r2, 0x100, 0x70bd25, 0x25dfdbfb, {}, [@CTRL_ATTR_FAMILY_ID={0x6, 0x1, 0xff80}, @CTRL_ATTR_FAMILY_ID={0x6, 0x1, 0x3}, @CTRL_ATTR_FAMILY_NAME={0x6, 0x2, '.\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20048014}, 0x20040815) inotify_init1$auto(0x3000000000000) unlink$auto(&(0x7f0000000000)='.\x00') inotify_add_watch$auto(0x4, 0x0, 0x9) 10.793750963s ago: executing program 7 (id=5415): mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) semctl$auto(0x107, 0x80000009, 0x200, 0x0) prctl$auto(0xf, 0x2, 0x80000001, 0x403, 0x3ff) rseq$auto(&(0x7f0000000000)={0xe, 0x401, 0x0, 0x6, 0xffffffff, 0x2}, 0x7ffe, 0x0, 0x6) mmap$auto(0x0, 0x402000b, 0xdf, 0x10000000000eb1, 0x401, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x9) madvise$auto(0x0, 0xffffffffffff0005, 0x19) open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x100) open(&(0x7f0000000080)='./file0\x00', 0x22000, 0x50) mmap$auto(0x0, 0x5, 0x4000000000df, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x10004) getrlimit$auto(0x1000, &(0x7f0000000040)={0x9, 0x452}) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mmap$auto(0x0, 0x400005, 0x6, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) socket(0xa, 0x801, 0x84) socket(0x2, 0x1, 0x0) setsockopt$auto(0x1, 0x1, 0xa, &(0x7f0000000000)='\xe1', 0xbb) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) ioctl$auto(0x1, 0x541b, 0x8) mknod$auto(&(0x7f0000000b00)='X))\x00', 0x63c1, 0x7ff) bpf$auto(0x8000000000000020, 0xffffffffffffffff, 0x0) creat$auto(&(0x7f0000000140)='\x00\x00\x00\x00.\n8G\xea6\xc2\x17\xd8\x11\xdeH\xde\xd2\xf5\xb0\x85\'\x1b \x14\x8ev\x84\x19\x17\x9c@Z\xba\xd8\x02\xee\xd5\xcdH\\\xfe\xe4\xe4\xd4\x7f\x95\xfd\xfa\x96K\"w\xf2\xbf\xd5\x8b\'\xa9g\a\t}S\xad\xces\xb4\xba\t\xd6\x0f1\x15\xbb\xe1Y[\xc6\\\xed9\"\xadAT\xc26\xdf\x02J\x8e8Y\xc7\x8e\"yi(~s\xde\x1e\xbe\x1a|F{\x11\xb4\x1aq`\xee\xbc?\xce\x88\xe0\xb6\xeb\xbf\\I\x97\xfe\x16\xb3\xf4\f\x17\xbf\x8d\x12\xcd\xb9R\x88\x1b\xafC\xc5M\xf5\r<\x14\xca\x82\xf3\x8dlw\xa6\x14(}X\xc9#\xc5\x13\xed\x90A\xfb\xf77\xdf\xc4\xa9@\"\xf9\x06\x03\xbe\xdc*\xab\x800XLA\xec\xe6\x85&0\xf1\f\xce\\\xd3\xca\x1f,\xe4\x99\x87\x88\xd5\xdb[Wv\xca#\xfa\xa6\xbb\xc6\x021\xddN\f\xa9\x14\x04\"p&1\xf3\x88\xf5\xad\x95P\x10QT=3\x00\v!\xe6n\x98\xbf,WGr\xd6\xaf,\x1c\xcbZ\xa0\xfb\xae\xf6\xca\xf5\xf86\xd8\xb8\xce\x81\x9b\xd7ZKN\xf7\xb9p\x9d\x8db\x86\x95/Q\x02\x00\x00\x00\x00\x00\x00U \xae\xe7\xce\xc24\xb0M\xc9\xe8@{\xa5\xef\xf0D\x04\x16\xda0\x82\xb7\xb2w\xbb\x9e\x99G\xadX\xfeU\x1e\xbeIF\xefL\x17y\xa1\xce\xc5.\xab\x1a\x92\x80\xafG\xf30\xab\b\xd1\x94U\r\x83', 0x206) ioctl$auto(0x3, 0x4c03, 0x4) madvise$auto(0x0, 0xffffffffffff0001, 0x15) setns(0xffffffffffffffff, 0x0) unshare$auto(0x40000080) clone$auto(0x10001, 0x5, 0xffffffffffffffff, 0xfffffffffffffffc, 0x8) 7.128798461s ago: executing program 4 (id=5420): socket(0x200000000000011, 0x2, 0x0) (async) r0 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syzkaller0\x00'}) statmount$auto(0x0, &(0x7f0000000040)={0x1, 0x0, 0x36, 0x828, 0x9, 0x8000000000000000, 0x9f, 0x7, 0x9, 0x8, 0x2, 0x9, 0x3, 0x8, 0x0, 0x200000000000f, 0x100, 0x1, 0x10001, 0x2cf8, [0x9, 0x7f, 0x40, 0x1, 0x7fffffffffffffff, 0x2, 0x600, 0x3, 0x80000000, 0x8, 0x395e, 0xfffffffffffffff9, 0x10, 0x3, 0x35c4, 0x0, 0x6, 0x0, 0xea8, 0xc, 0xd9, 0x48, 0x5, 0x1, 0x200000000803, 0x7fffffffffffffff, 0x15, 0x11, 0xb, 0x8000000000000000, 0x2ab, 0x8, 0x800, 0x81, 0x1, 0x4003, 0xffffffffffff0000, 0x6b, 0xfffffffffffffff9, 0x4, 0x2b7, 0x4, 0xf, 0xffffffffffffff26, 0x8, 0x7, 0x6, 0x7a, 0xdc]}, 0xe3c, 0x0) r1 = socket(0x10, 0x2, 0x4) sendmsg$auto_NFSD_CMD_THREADS_SET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="2c0000001400"], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x400c000) 5.803823392s ago: executing program 4 (id=5421): setitimer$auto(0xfffffffc, &(0x7f0000000000)={{0xffffffffffffffff, 0x7}, {0x7fffffffffffffff, 0x3}}, 0x0) r0 = socket(0x9, 0x801, 0x84) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) getrandom$auto(0x0, 0x6000000, 0x3) socket$nl_generic(0x10, 0x3, 0x10) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) mbind$auto(0xfffffffffffffffc, 0x8, 0x6, &(0x7f0000000280)=0xff, 0xf8, 0x2) mlockall$auto(0x7) madvise$auto(0x0, 0x7, 0xfffffffa) shmat$auto(0x0, &(0x7f0000000580)='(\x00', 0xfffffffe) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x40, 0x800, 0xfffffffffffffffd, 0xf0b, 0x2) setsockopt$auto(r0, 0x10000000084, 0x8, 0x0, 0x6) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) sysinfo$auto(0x0) preadv$auto(0x9, &(0x7f0000000180)={&(0x7f0000000140), 0x81}, 0x2, 0x1c48, 0xe69f) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_IPVS(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_IPVS_CMD_GET_SERVICE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r2, 0xf6c56d6cdcf2e8fd, 0x70bd2d, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x20040010}, 0x40000) seccomp$auto(0x1, 0x8, 0x0) pwritev2$auto(0x2, 0xfffffffffffffffc, 0x2, 0xffffffffffffffff, 0x80000000, 0x6) getresuid$auto(&(0x7f00000011c0)=0x7, 0x0, 0x0) close_range$auto(0x6, 0xb0, 0x6) mmap$auto(0x0, 0x2020009, 0xa, 0xeb1, 0xfffffffffffffffa, 0x8000) preadv$auto(0x2000000000000c8, 0x0, 0x81, 0x7ebf, 0x0) setrlimit$auto(0x9, &(0x7f0000000000)={0x5, 0x1ff}) 4.734817191s ago: executing program 4 (id=5422): mseal$auto(0x2c1e, 0xfffffffffffffeff, 0x5) mmap$auto(0x0, 0x1000002020009, 0x6, 0x17, 0x37ec, 0x7) mmap$auto(0x0, 0x4020009, 0xdb, 0xeb1, 0x401, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) rseq$auto(&(0x7f0000000000)={0xe, 0x401, 0x0, 0x6, 0xffffffff, 0x2}, 0x7ffe, 0x0, 0x6) open(0x0, 0x22240, 0x0) socket(0xa, 0x3, 0x6) pidfd_getfd$auto(0x3, 0x9, 0x100000000) semctl$auto(0x1ff, 0x2, 0x13, 0x1) futex$auto(0x0, 0x10d, 0x8, 0x0, 0x0, 0x8) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) msgget$auto(0x6, 0x200) msgctl$auto(0x0, 0x0, 0x0) sendmsg$auto_WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x44000) socket(0x28, 0xa, 0xd6c5) bind$auto(0x3, &(0x7f0000000080)={0x2, @sockaddr_1_1}, 0x6b) connect$auto(0xffffffffffffffff, &(0x7f0000000200)={0x4, @sockaddr_1_1={"b8267194a7d2768b25111b5695a982ad815fe82e89851577dd1a935a24e34f4ed17d05c62b10bed178206331ee3cbefcd4729c616cbf5fd0a63e16e31de0e83fadcf52431212929c5c23890f76c42bf5baf9907784d2ace3312f29923afecb733d7ff1b7f9fde9a944b5501b8573e5238fc0a06e8e1de5d75c772c1481fec7c6d488d85627c07b0ad9738c9ee121df5d73512b075ec0d8e2dcc16e48303907ab189dad2484b21abe4b55ae045fad268b17c21ca02a4edb72564294e188a35d2d3e062945dd220666d792aeba4e178ee5b967feca2a2a2207a17f89a3fde708162f962cbb69c41596088243829b601d17a2a25cd5"}}, 0xfffffff9) sendfile$auto(0x1, 0x3, 0x0, 0xc01) prctl$auto(0xfffffff2, 0x7, 0x4, 0x1, 0x7) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) rename$auto(0x0, &(0x7f0000000100)='*\x00') fcntl$auto(0x3, 0x4, 0xa553) open(0x0, 0x8000, 0x110) socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x3, 0x6) sendmsg$auto_IOAM6_CMD_NS_SET_SCHEMA(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x28}, 0x1, 0x0, 0x0, 0x20040810}, 0x4010) 982.70891ms ago: executing program 4 (id=5423): r0 = socket(0x1e, 0x1, 0xbd) mmap$auto(0x4, 0xc, 0xfffe, 0x17, 0x100000000003, 0x5) io_uring_setup$auto(0x44, &(0x7f0000000000)={0x2, 0x10001, 0x8, 0x401, 0xf81b, 0x2, r0, [0x1, 0x9, 0xd388], {0x4, 0xf1c, 0x4df, 0x10001, 0xf0fe, 0x8, 0x3, 0xfffffff7, 0x8}, {0x0, 0x5a3, 0x824, 0xbb, 0x7, 0x9, 0x1c, 0x800, 0x7ff}}) timer_create$auto(0x9, &(0x7f00000001c0)={@sival_int=0x4, 0xd19, 0x1, @_tid}, &(0x7f0000000040)=0x200) epoll_ctl$auto(r1, 0x7, r0, &(0x7f0000000080)={0x9, 0x7fffffff}) timer_settime$auto(0x0, 0x8, 0x0, 0x0) timer_gettime$auto(0x0, 0x0) socket(0x29, 0x5, 0x0) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) lsm_list_modules$auto(0x0, 0x0, 0x0) setsockopt$auto(0x3, 0x10000000084, 0x85, 0x0, 0x90) socket(0xa, 0x801, 0x106) listen$auto(0x3, 0x83) setsockopt$auto(0x3, 0x1, 0xd, 0x0, 0x8) 278.129544ms ago: executing program 4 (id=5424): mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x8, 0x8000) socket(0x2, 0x5, 0x0) socket(0x2b, 0x1, 0x1) connect$auto(0x3, 0xfffffffffffffffe, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$auto(&(0x7f0000000140)=0x2, 0x800) sendto$auto(0x3, 0x0, 0x18, 0x101, &(0x7f0000000140)={0x2, @sockaddr_1_1}, 0x1c) 0s ago: executing program 4 (id=5425): mmap$auto(0x0, 0x3, 0xdf, 0x9b72, 0x2, 0x8000) (async) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) (async) mmap$auto(0x0, 0xa, 0xdb, 0x9b72, 0x5, 0x8000) (async) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_tcp_metrics(&(0x7f0000000300), r0) sendmsg$auto_TCP_METRICS_CMD_GET(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="010025bd7000fedbdf2501000000231e3ff6b521fa0a58d36f80279ef259c7ca1e6e7c27e39e96a662b7f216b111c3598c2974e6a56023269d9708a321dbd5e49e0423dcc4aa9248223c6982eef9bac9c74bf14ee59208655a2b097f27d7ccf85b909ed682aa859c185d01b79e42bfb33fee9374172011872e8e75f5aa5614601e89d6c95e96ec9dad606841d53da400000000000000"], 0x14}, 0x1, 0x0, 0x0, 0x40004000}, 0x40000) semctl$auto(0x1ff, 0x2, 0x13, 0x1) futex$auto(0x0, 0x10d, 0x8, 0x0, 0x0, 0x8) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) madvise$auto(0x0, 0xffffffffffff0005, 0x19) clone$auto(0xd2d2, 0x7fffffffffffffff, 0xffffffffffffffff, 0x0, 0x1) (async) mbind$auto(0x20000000000008, 0x100000006, 0xfffffffdfffffff1, 0x0, 0x3, 0x2) (async) r2 = gettid() process_vm_readv$auto(r2, &(0x7f0000000040)={0x0, 0x8}, 0x4, &(0x7f00000000c0)={0x0, 0x100000000000002}, 0x6, 0x0) memfd_secret$auto(0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) (async) socket(0xa, 0x2, 0x0) (async) getsockopt$auto(0x100000006, 0x0, 0x30, 0xfffffffffffffffe, 0x0) (async) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) rseq$auto(&(0x7f0000000300)={0x0, 0x9, 0x0, 0x4, 0xffffffff, 0xfffffffe}, 0x8000, 0x0, 0x6) (async) madvise$auto(0x0, 0xffffffffffff0005, 0x19) (async) chdir$auto(0x0) (async) lchown$auto(0x0, 0x0, 0x6) (async) madvise$auto(0x0, 0xffffffffffff0001, 0x15) madvise$auto(0x0, 0xffffffffffff0005, 0x19) timerfd_create$auto(0x7, 0x0) kernel console output (not intermixed with test programs): process `syz.8.3927'. [ 1129.802365][T29880] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3929'. [ 1129.836084][T29879] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3929'. [ 1137.373764][T30049] svc: failed to register nfsdv3 RPC service (errno 111). [ 1137.391753][T30049] svc: failed to register nfsaclv3 RPC service (errno 111). [ 1140.025243][T30132] svc: failed to register nfsdv3 RPC service (errno 111). [ 1140.095219][T30132] svc: failed to register nfsaclv3 RPC service (errno 111). [ 1141.630873][T30149] netlink: 334 bytes leftover after parsing attributes in process `syz.4.3972'. [ 1141.846294][T30186] could not allocate digest TFM handle [ 1141.970491][T30200] lo: entered promiscuous mode [ 1141.994257][T30185] could not allocate digest TFM handle [ 1142.074457][T30200] lo: left promiscuous mode [ 1145.273406][T30245] kexec: Could not allocate control_code_buffer [ 1149.670854][T30358] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4016'. [ 1149.706129][T30359] netlink: 342 bytes leftover after parsing attributes in process `syz.8.4017'. [ 1150.247712][T30359] netlink: 16 bytes leftover after parsing attributes in process `syz.8.4017'. [ 1150.771858][T30375] netlink: 334 bytes leftover after parsing attributes in process `syz.8.4021'. [ 1154.005151][ T5847] Bluetooth: hci3: command 0x0406 tx timeout [ 1157.424976][T30518] can: request_module (can-proto-5) failed. [ 1158.405382][T30539] netlink: 342 bytes leftover after parsing attributes in process `syz.2.4064'. [ 1166.464646][T30649] can: request_module (can-proto-0) failed. [ 1167.555749][T30680] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1168.820760][T21260] Bluetooth: hci0: ISO packet for unknown connection handle 0 [ 1169.373481][T21260] Bluetooth: hci0: command 0x0406 tx timeout [ 1172.605301][T30789] netlink: 330 bytes leftover after parsing attributes in process `syz.2.4129'. [ 1173.645982][T30811] cifs: Unknown parameter 'n' [ 1176.614676][T30855] can: request_module (can-proto-5) failed. [ 1177.469313][T30892] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1177.538027][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.544373][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 1180.848906][T30967] netlink: zone id is out of range [ 1180.854082][T30967] netlink: zone id is out of range [ 1180.894894][T30967] netlink: zone id is out of range [ 1180.926333][T30967] netlink: zone id is out of range [ 1180.983908][T30971] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4177'. [ 1181.004468][T30967] netlink: zone id is out of range [ 1181.031022][T30967] netlink: zone id is out of range [ 1188.730568][T31094] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4206'. [ 1188.919605][T31103] nbd: must specify at least one socket [ 1189.051265][T31104] svc: failed to register nfsdv3 RPC service (errno 111). [ 1189.165029][T31104] svc: failed to register nfsaclv3 RPC service (errno 111). [ 1194.667116][T31224] Process accounting resumed [ 1194.768470][T31223] Process accounting resumed [ 1194.924204][T31236] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 1194.965041][T31236] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 1200.096548][T21260] Bluetooth: hci1: command 0x0406 tx timeout [ 1206.478244][T31466] HfR: entered promiscuous mode [ 1206.522745][T31466] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4301'. [ 1206.566761][T31466] HfR: left promiscuous mode [ 1210.281154][T31536] FAULT_INJECTION: forcing a failure. [ 1210.281154][T31536] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1210.300363][T31536] CPU: 0 UID: 0 PID: 31536 Comm: syz.8.4318 Not tainted 6.12.0-rc6-syzkaller-00099-g7758b206117d #0 [ 1210.311375][T31536] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1210.321630][T31536] Call Trace: [ 1210.325390][T31536] [ 1210.328440][T31536] dump_stack_lvl+0x16c/0x1f0 [ 1210.333606][T31536] should_fail_ex+0x497/0x5b0 [ 1210.338486][T31536] _copy_to_user+0x32/0xd0 [ 1210.342959][T31536] simple_read_from_buffer+0xd0/0x160 [ 1210.349093][T31536] proc_fail_nth_read+0x198/0x270 [ 1210.354193][T31536] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1210.361586][T31536] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1210.367538][T31536] vfs_read+0x1df/0xbe0 [ 1210.371775][T31536] ? __fget_files+0x23a/0x3f0 [ 1210.376503][T31536] ? fdget_pos+0x24c/0x360 [ 1210.380975][T31536] ? __pfx_lock_release+0x10/0x10 [ 1210.386119][T31536] ? trace_lock_acquire+0x14a/0x1d0 [ 1210.391378][T31536] ? __pfx_vfs_read+0x10/0x10 [ 1210.396120][T31536] ? __pfx___mutex_lock+0x10/0x10 [ 1210.401195][T31536] ? __fget_files+0x244/0x3f0 [ 1210.409143][T31536] ksys_read+0x12f/0x260 [ 1210.413533][T31536] ? __pfx_ksys_read+0x10/0x10 [ 1210.418363][T31536] do_syscall_64+0xcd/0x250 [ 1210.423175][T31536] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1210.429122][T31536] RIP: 0033:0x7f3e41b7d15c [ 1210.433653][T31536] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 1210.453301][T31536] RSP: 002b:00007f3e3ffd5030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1210.461810][T31536] RAX: ffffffffffffffda RBX: 00007f3e41d36058 RCX: 00007f3e41b7d15c [ 1210.469826][T31536] RDX: 000000000000000f RSI: 00007f3e3ffd50a0 RDI: 0000000000000004 [ 1210.478013][T31536] RBP: 00007f3e3ffd5090 R08: 0000000000000000 R09: 000000000000002e [ 1210.486038][T31536] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000001 [ 1210.494776][T31536] R13: 0000000000000001 R14: 00007f3e41d36058 R15: 00007fffcdf29b18 [ 1210.502811][T31536] [ 1210.986505][T31548] FAULT_INJECTION: forcing a failure. [ 1210.986505][T31548] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1211.094856][T31548] CPU: 0 UID: 0 PID: 31548 Comm: syz.8.4322 Not tainted 6.12.0-rc6-syzkaller-00099-g7758b206117d #0 [ 1211.105688][T31548] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1211.115778][T31548] Call Trace: [ 1211.119084][T31548] [ 1211.122036][T31548] dump_stack_lvl+0x16c/0x1f0 [ 1211.126756][T31548] should_fail_ex+0x497/0x5b0 [ 1211.131478][T31548] ? fs_reclaim_acquire+0xae/0x150 [ 1211.136641][T31548] should_fail_alloc_page+0xe7/0x130 [ 1211.142230][T31548] prepare_alloc_pages.constprop.0+0x16f/0x560 [ 1211.148955][T31548] ? __lock_acquire+0xbdd/0x3ce0 [ 1211.154385][T31548] __alloc_pages_noprof+0x190/0x25a0 [ 1211.168179][T31548] ? hlock_class+0x4e/0x130 [ 1211.172715][T31548] ? __lock_acquire+0xbdd/0x3ce0 [ 1211.177695][T31548] ? hlock_class+0x4e/0x130 [ 1211.182244][T31548] ? mark_lock+0xb5/0xc60 [ 1211.186626][T31548] ? __pfx___alloc_pages_noprof+0x10/0x10 [ 1211.192415][T31548] ? __pfx_mark_lock+0x10/0x10 [ 1211.197302][T31548] ? __pfx___lock_acquire+0x10/0x10 [ 1211.202572][T31548] ? hlock_class+0x4e/0x130 [ 1211.207221][T31548] ? mark_lock+0xb5/0xc60 [ 1211.211676][T31548] ? hlock_class+0x4e/0x130 [ 1211.216214][T31548] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1211.222154][T31548] ? policy_nodemask+0xea/0x4e0 [ 1211.227028][T31548] alloc_pages_mpol_noprof+0x2c9/0x610 [ 1211.232531][T31548] ? __pfx_alloc_pages_mpol_noprof+0x10/0x10 [ 1211.238599][T31548] ? find_held_lock+0x2d/0x110 [ 1211.243472][T31548] folio_alloc_mpol_noprof+0x36/0xd0 [ 1211.248806][T31548] vma_alloc_folio_noprof+0xee/0x1b0 [ 1211.254111][T31548] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 1211.260025][T31548] ? __pfx___lock_acquire+0x10/0x10 [ 1211.265247][T31548] do_wp_page+0x2012/0x4930 [ 1211.269775][T31548] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 1211.275433][T31548] ? __pfx_do_wp_page+0x10/0x10 [ 1211.280298][T31548] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1211.285680][T31548] ? lock_acquire+0x2f/0xb0 [ 1211.290192][T31548] ? __handle_mm_fault+0xdcd/0x2a10 [ 1211.295499][T31548] __handle_mm_fault+0x1a93/0x2a10 [ 1211.300919][T31548] ? __pfx___handle_mm_fault+0x10/0x10 [ 1211.306409][T31548] ? __pfx_lock_release+0x10/0x10 [ 1211.311489][T31548] ? vm_normal_page+0x13c/0x2b0 [ 1211.316419][T31548] ? follow_page_pte+0x50d/0x1eb0 [ 1211.321753][T31548] handle_mm_fault+0x3fa/0xaa0 [ 1211.326543][T31548] __get_user_pages+0x8d9/0x3b50 [ 1211.331606][T31548] ? __pfx___get_user_pages+0x10/0x10 [ 1211.337014][T31548] __gup_longterm_locked+0x22e/0x1b90 [ 1211.342409][T31548] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 1211.348153][T31548] ? __pfx___gup_longterm_locked+0x10/0x10 [ 1211.353982][T31548] ? rwsem_read_trylock+0x12d/0x250 [ 1211.359400][T31548] ? __pfx_rwsem_read_trylock+0x10/0x10 [ 1211.364974][T31548] ? process_vm_rw_core.constprop.0+0x40d/0x9f0 [ 1211.371274][T31548] pin_user_pages_remote+0xee/0x150 [ 1211.376692][T31548] ? __pfx_pin_user_pages_remote+0x10/0x10 [ 1211.382511][T31548] ? down_read+0xc9/0x330 [ 1211.386861][T31548] process_vm_rw_core.constprop.0+0x439/0x9f0 [ 1211.393130][T31548] ? __pfx_process_vm_rw_core.constprop.0+0x10/0x10 [ 1211.399754][T31548] process_vm_rw+0x301/0x360 [ 1211.404365][T31548] ? __pfx_process_vm_rw+0x10/0x10 [ 1211.409555][T31548] ? arch_syscall_is_vdso_sigreturn+0xb6/0x230 [ 1211.415908][T31548] __x64_sys_process_vm_writev+0xe2/0x1c0 [ 1211.421635][T31548] ? syscall_trace_enter+0x5e/0x240 [ 1211.426871][T31548] do_syscall_64+0xcd/0x250 [ 1211.431435][T31548] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1211.437980][T31548] RIP: 0033:0x7f3e41b7e719 [ 1211.442419][T31548] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1211.462493][T31548] RSP: 002b:00007f3e3fff6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000137 [ 1211.470956][T31548] RAX: ffffffffffffffda RBX: 00007f3e41d35f80 RCX: 00007f3e41b7e719 [ 1211.479035][T31548] RDX: 0000000000000003 RSI: 0000000020002980 RDI: 000000000000029c [ 1211.487189][T31548] RBP: 00007f3e3fff6090 R08: 0000000000000004 R09: 0000000000000000 [ 1211.495176][T31548] R10: 0000000020002a40 R11: 0000000000000246 R12: 0000000000000001 [ 1211.503173][T31548] R13: 0000000000000000 R14: 00007f3e41d35f80 R15: 00007fffcdf29b18 [ 1211.511460][T31548] [ 1212.745840][T31578] ptrace attach of "./syz-executor exec"[28506] was attempted by "./syz-executor exec"[31578] [ 1214.504660][T31615] netlink: 334 bytes leftover after parsing attributes in process `syz.2.4334'. [ 1216.163619][T31639] netlink: 172 bytes leftover after parsing attributes in process `syz.2.4342'. [ 1220.666519][T31692] FAULT_INJECTION: forcing a failure. [ 1220.666519][T31692] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1220.873635][T31692] CPU: 1 UID: 0 PID: 31692 Comm: syz.8.4356 Not tainted 6.12.0-rc6-syzkaller-00099-g7758b206117d #0 [ 1220.884651][T31692] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1220.894887][T31692] Call Trace: [ 1220.898845][T31692] [ 1220.902068][T31692] dump_stack_lvl+0x16c/0x1f0 [ 1220.906980][T31692] should_fail_ex+0x497/0x5b0 [ 1220.912496][T31692] _copy_from_user+0x2e/0xd0 [ 1220.917141][T31692] memdup_user+0x71/0xd0 [ 1220.921666][T31692] strndup_user+0x78/0xe0 [ 1220.926417][T31692] __do_sys_keyctl+0x40b/0x590 [ 1220.931538][T31692] do_syscall_64+0xcd/0x250 [ 1220.936544][T31692] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1220.943258][T31692] RIP: 0033:0x7f3e41b7e719 [ 1220.947957][T31692] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1220.976143][T31692] RSP: 002b:00007f3e3fff6038 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 1220.986376][T31692] RAX: ffffffffffffffda RBX: 00007f3e41d35f80 RCX: 00007f3e41b7e719 [ 1220.996648][T31692] RDX: 0000000000000100 RSI: 0000000000000007 RDI: 0000000000000001 [ 1221.006068][T31692] RBP: 00007f3e3fff6090 R08: 0000000000000004 R09: 0000000000000000 [ 1221.015298][T31692] R10: 0000000000000008 R11: 0000000000000246 R12: 0000000000000001 [ 1221.024657][T31692] R13: 0000000000000000 R14: 00007f3e41d35f80 R15: 00007fffcdf29b18 [ 1221.033764][T31692] [ 1221.494571][T31689] kexec: Could not allocate control_code_buffer [ 1223.976019][T31741] FAULT_INJECTION: forcing a failure. [ 1223.976019][T31741] name failslab, interval 1, probability 0, space 0, times 0 [ 1224.087454][T31741] CPU: 1 UID: 0 PID: 31741 Comm: syz.2.4372 Not tainted 6.12.0-rc6-syzkaller-00099-g7758b206117d #0 [ 1224.099162][T31741] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1224.109989][T31741] Call Trace: [ 1224.113580][T31741] [ 1224.116945][T31741] dump_stack_lvl+0x16c/0x1f0 [ 1224.121680][T31741] should_fail_ex+0x497/0x5b0 [ 1224.126498][T31741] ? fs_reclaim_acquire+0xae/0x150 [ 1224.132586][T31741] should_failslab+0xc2/0x120 [ 1224.137325][T31741] kmem_cache_alloc_noprof+0x6e/0x2f0 [ 1224.143370][T31741] ? prepare_creds+0x2e/0x750 [ 1224.148744][T31741] prepare_creds+0x2e/0x750 [ 1224.153763][T31741] join_session_keyring+0x17/0x340 [ 1224.159216][T31741] __do_sys_keyctl+0x482/0x590 [ 1224.164228][T31741] do_syscall_64+0xcd/0x250 [ 1224.168879][T31741] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1224.175018][T31741] RIP: 0033:0x7f27b857e719 [ 1224.179675][T31741] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1224.200463][T31741] RSP: 002b:00007f27b931e038 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 1224.209365][T31741] RAX: ffffffffffffffda RBX: 00007f27b8735f80 RCX: 00007f27b857e719 [ 1224.218177][T31741] RDX: 0000000000000100 RSI: 0000000000000007 RDI: 0000000000000001 [ 1224.226642][T31741] RBP: 00007f27b931e090 R08: 0000000000000004 R09: 0000000000000000 [ 1224.234750][T31741] R10: 0000000000000008 R11: 0000000000000246 R12: 0000000000000001 [ 1224.242760][T31741] R13: 0000000000000000 R14: 00007f27b8735f80 R15: 00007ffc3a87f8d8 [ 1224.250878][T31741] [ 1226.038531][T31786] openvswitch: netlink: Flow key attr not present in new flow. [ 1227.379119][T31811] svc: failed to register nfsdv3 RPC service (errno 111). [ 1227.410931][T31811] svc: failed to register nfsaclv3 RPC service (errno 111). [ 1238.917427][ T5847] Bluetooth: hci3: SCO packet for unknown connection handle 0 [ 1238.917560][ T5847] Bluetooth: hci3: SCO packet for unknown connection handle 0 [ 1238.958251][T31917] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4414'. [ 1238.995382][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 1239.001771][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 1248.427318][T32010] netlink: 'syz.2.4439': attribute type 6 has an invalid length. [ 1248.604857][T32010] netlink: 330 bytes leftover after parsing attributes in process `syz.2.4439'. [ 1282.122170][T21260] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1282.139170][T21260] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1282.163787][T21260] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1282.212340][T21260] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1282.221483][T21260] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1282.231161][T21260] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1282.612111][T19241] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1283.007982][T19241] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1283.507246][T19241] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1284.385029][ T5847] Bluetooth: hci2: command tx timeout [ 1284.658082][T19241] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1285.381581][T32529] chnl_net:caif_netlink_parms(): no params data found [ 1285.581511][T19241] bridge_slave_1: left allmulticast mode [ 1285.591463][T19241] bridge_slave_1: left promiscuous mode [ 1285.603469][T19241] bridge0: port 2(bridge_slave_1) entered disabled state [ 1285.630885][T19241] bridge_slave_0: left allmulticast mode [ 1285.704100][T19241] bridge_slave_0: left promiscuous mode [ 1285.744987][T19241] bridge0: port 1(bridge_slave_0) entered disabled state [ 1285.849226][T32547] netlink: 342 bytes leftover after parsing attributes in process `syz.6.4575'. [ 1286.407380][ T5847] Bluetooth: hci2: command tx timeout [ 1287.018505][T19241] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1287.031938][T19241] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1287.058799][T19241] bond0 (unregistering): Released all slaves [ 1287.465631][T32529] bridge0: port 1(bridge_slave_0) entered blocking state [ 1287.498378][T32529] bridge0: port 1(bridge_slave_0) entered disabled state [ 1287.535039][T32529] bridge_slave_0: entered allmulticast mode [ 1287.561157][T32529] bridge_slave_0: entered promiscuous mode [ 1287.635311][T32529] bridge0: port 2(bridge_slave_1) entered blocking state [ 1287.678533][T32529] bridge0: port 2(bridge_slave_1) entered disabled state [ 1287.696885][T32529] bridge_slave_1: entered allmulticast mode [ 1287.704557][T32529] bridge_slave_1: entered promiscuous mode [ 1287.928317][T32529] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1287.968439][T32529] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1288.149278][T32529] team0: Port device team_slave_0 added [ 1288.239175][T32529] team0: Port device team_slave_1 added [ 1288.448803][T32529] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1288.458966][T32529] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1288.485255][ T5847] Bluetooth: hci2: command tx timeout [ 1288.497486][T32529] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1288.514705][T32529] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1288.570963][T32529] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1288.604171][T32529] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1288.856709][T32529] hsr_slave_0: entered promiscuous mode [ 1288.871650][T32529] hsr_slave_1: entered promiscuous mode [ 1288.884133][T32529] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1288.903115][T32529] Cannot create hsr debugfs directory [ 1288.909458][T32614] netlink: 56 bytes leftover after parsing attributes in process `syz.2.4586'. [ 1289.045286][T19241] hsr_slave_0: left promiscuous mode [ 1289.093540][T19241] hsr_slave_1: left promiscuous mode [ 1289.117082][T19241] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1289.137997][T19241] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1289.151530][T19241] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1289.165015][T19241] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1289.202818][T19241] veth1_macvtap: left promiscuous mode [ 1289.210442][T19241] veth0_macvtap: left promiscuous mode [ 1289.221554][T19241] veth1_vlan: left promiscuous mode [ 1289.229180][T19241] veth0_vlan: left promiscuous mode [ 1290.565080][ T5847] Bluetooth: hci2: command tx timeout [ 1291.292671][T19241] team0 (unregistering): Port device team_slave_1 removed [ 1291.586831][T19241] team0 (unregistering): Port device team_slave_0 removed [ 1294.674153][T32529] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1294.691926][T32529] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1294.827156][T32529] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1294.903465][T32529] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1295.683431][T32529] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1295.830108][T32529] 8021q: adding VLAN 0 to HW filter on device team0 [ 1295.938496][T25463] bridge0: port 1(bridge_slave_0) entered blocking state [ 1295.946355][T25463] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1296.010587][ T8766] bridge0: port 2(bridge_slave_1) entered blocking state [ 1296.018023][ T8766] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1296.368970][T32529] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1296.993863][T32529] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1298.138049][T32529] veth0_vlan: entered promiscuous mode [ 1298.153786][T32529] veth1_vlan: entered promiscuous mode [ 1298.158456][ T313] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4612'. [ 1298.242221][T32529] veth0_macvtap: entered promiscuous mode [ 1298.285938][T32529] veth1_macvtap: entered promiscuous mode [ 1298.303412][T32529] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1298.315319][T32529] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1298.327060][T32529] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1298.338114][T32529] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1298.349762][T32529] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1298.363712][T32529] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1298.378129][T32529] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1298.394306][T32529] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1298.408098][T32529] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1298.418803][T32529] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1298.430349][T32529] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1298.441489][T32529] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1298.453787][T32529] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1298.464887][T32529] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1298.476153][T32529] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1298.486465][T32529] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1298.497208][T32529] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1298.508397][T32529] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1298.519106][T32529] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1298.528073][T32529] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1298.537967][T32529] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1298.547170][T32529] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1298.776047][ T329] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 1298.836401][T19245] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1298.873814][T19245] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1298.924099][ T8766] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1298.961359][ T8766] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1299.193164][ T338] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4618'. [ 1299.239032][ T338] ip6gre0: entered promiscuous mode [ 1299.244410][ T338] ip6gre0: entered allmulticast mode [ 1300.408326][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 1300.415444][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 1302.634911][ T421] netlink: 334 bytes leftover after parsing attributes in process `syz.4.4637'. [ 1316.800721][ T699] netlink: 342 bytes leftover after parsing attributes in process `syz.8.4710'. [ 1318.511859][ T723] unsupported nlmsg_type 40 [ 1319.235135][ T745] netlink: zone id is out of range [ 1319.240316][ T745] netlink: zone id is out of range [ 1319.284978][ T745] netlink: zone id is out of range [ 1319.303397][ T745] netlink: zone id is out of range [ 1319.319280][ T745] netlink: zone id is out of range [ 1319.370989][ T745] netlink: zone id is out of range [ 1319.424258][ T745] netlink: zone id is out of range [ 1319.471979][ T745] netlink: zone id is out of range [ 1319.500772][ T745] netlink: zone id is out of range [ 1322.326710][ T791] FAULT_INJECTION: forcing a failure. [ 1322.326710][ T791] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1322.387246][ T791] CPU: 0 UID: 0 PID: 791 Comm: syz.4.4734 Not tainted 6.12.0-rc6-syzkaller-00099-g7758b206117d #0 [ 1322.398173][ T791] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1322.408613][ T791] Call Trace: [ 1322.411935][ T791] [ 1322.414898][ T791] dump_stack_lvl+0x16c/0x1f0 [ 1322.419803][ T791] should_fail_ex+0x497/0x5b0 [ 1322.424703][ T791] _copy_from_user+0x2e/0xd0 [ 1322.429336][ T791] __sys_bpf+0x215/0x5780 [ 1322.433705][ T791] ? ksys_write+0x21e/0x260 [ 1322.438523][ T791] ? __pfx___sys_bpf+0x10/0x10 [ 1322.443747][ T791] ? vfs_write+0x306/0x1150 [ 1322.449589][ T791] ? __mutex_unlock_slowpath+0x164/0x650 [ 1322.456350][ T791] ? fput+0x30/0x390 [ 1322.460501][ T791] ? ksys_write+0x1ad/0x260 [ 1322.465344][ T791] ? __pfx_ksys_write+0x10/0x10 [ 1322.470598][ T791] __x64_sys_bpf+0x78/0xc0 [ 1322.475709][ T791] ? lockdep_hardirqs_on+0x7c/0x110 [ 1322.481161][ T791] do_syscall_64+0xcd/0x250 [ 1322.485806][ T791] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1322.491978][ T791] RIP: 0033:0x7fe0a337e719 [ 1322.496523][ T791] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1322.516262][ T791] RSP: 002b:00007fe0a4164038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1322.525368][ T791] RAX: ffffffffffffffda RBX: 00007fe0a3535f80 RCX: 00007fe0a337e719 [ 1322.533476][ T791] RDX: 00000000000000a3 RSI: 0000000020000000 RDI: 0000000000000000 [ 1322.541519][ T791] RBP: 00007fe0a4164090 R08: 0000000000000000 R09: 0000000000000000 [ 1322.549549][ T791] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1322.557591][ T791] R13: 0000000000000000 R14: 00007fe0a3535f80 R15: 00007fff03c02758 [ 1322.565626][ T791] [ 1326.327309][ T852] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1326.708684][ T861] netlink: 334 bytes leftover after parsing attributes in process `syz.8.4755'. [ 1327.706297][ T874] FAULT_INJECTION: forcing a failure. [ 1327.706297][ T874] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1327.719596][ T874] CPU: 0 UID: 0 PID: 874 Comm: syz.6.4757 Not tainted 6.12.0-rc6-syzkaller-00099-g7758b206117d #0 [ 1327.730225][ T874] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1327.740400][ T874] Call Trace: [ 1327.743808][ T874] [ 1327.746768][ T874] dump_stack_lvl+0x16c/0x1f0 [ 1327.751464][ T874] should_fail_ex+0x497/0x5b0 [ 1327.756157][ T874] _copy_to_user+0x32/0xd0 [ 1327.760583][ T874] simple_read_from_buffer+0xd0/0x160 [ 1327.765998][ T874] proc_fail_nth_read+0x198/0x270 [ 1327.771037][ T874] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1327.776614][ T874] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1327.782193][ T874] vfs_read+0x1df/0xbe0 [ 1327.786378][ T874] ? __fget_files+0x23a/0x3f0 [ 1327.791179][ T874] ? fdget_pos+0x24c/0x360 [ 1327.795609][ T874] ? __pfx_lock_release+0x10/0x10 [ 1327.800651][ T874] ? trace_lock_acquire+0x14a/0x1d0 [ 1327.806035][ T874] ? __pfx_vfs_read+0x10/0x10 [ 1327.810785][ T874] ? __pfx___mutex_lock+0x10/0x10 [ 1327.815926][ T874] ? __fget_files+0x244/0x3f0 [ 1327.820753][ T874] ksys_read+0x12f/0x260 [ 1327.825024][ T874] ? __pfx_ksys_read+0x10/0x10 [ 1327.829905][ T874] do_syscall_64+0xcd/0x250 [ 1327.834424][ T874] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1327.840340][ T874] RIP: 0033:0x7f6f2277d15c [ 1327.844812][ T874] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 1327.864619][ T874] RSP: 002b:00007f6f235c3030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1327.873061][ T874] RAX: ffffffffffffffda RBX: 00007f6f22935f80 RCX: 00007f6f2277d15c [ 1327.881169][ T874] RDX: 000000000000000f RSI: 00007f6f235c30a0 RDI: 0000000000000005 [ 1327.889241][ T874] RBP: 00007f6f235c3090 R08: 0000000000000000 R09: 0000000000000000 [ 1327.897329][ T874] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1327.905495][ T874] R13: 0000000000000000 R14: 00007f6f22935f80 R15: 00007ffd31f36118 [ 1327.914133][ T874] [ 1332.485528][ T968] tc_dump_action: action bad kind [ 1332.572003][ T974] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4785'. [ 1332.745759][ T974] ip6gre0: entered promiscuous mode [ 1332.751035][ T974] ip6gre0: entered allmulticast mode [ 1332.904596][ T982] netlink: 'syz.6.4787': attribute type 11 has an invalid length. [ 1332.954710][ T982] netlink: 'syz.6.4787': attribute type 11 has an invalid length. [ 1338.756073][T21260] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1338.767352][T21260] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1338.781750][T21260] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1338.801969][T21260] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1338.812176][T21260] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1338.821074][T21260] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1339.132983][ T1113] chnl_net:caif_netlink_parms(): no params data found [ 1339.375242][ T1113] bridge0: port 1(bridge_slave_0) entered blocking state [ 1339.391470][ T1113] bridge0: port 1(bridge_slave_0) entered disabled state [ 1339.452573][ T1113] bridge_slave_0: entered allmulticast mode [ 1339.476177][ T1113] bridge_slave_0: entered promiscuous mode [ 1339.523337][ T1113] bridge0: port 2(bridge_slave_1) entered blocking state [ 1339.562248][ T1113] bridge0: port 2(bridge_slave_1) entered disabled state [ 1339.571999][ T1113] bridge_slave_1: entered allmulticast mode [ 1339.599618][ T1113] bridge_slave_1: entered promiscuous mode [ 1339.778730][ T1113] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1339.837203][ T1113] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1340.110374][ T1113] team0: Port device team_slave_0 added [ 1340.197118][ T1113] team0: Port device team_slave_1 added [ 1340.315822][ T1113] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1340.348393][ T1113] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1340.414859][ T1113] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1340.470929][ T1113] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1340.495416][ T1113] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1340.554898][ T1113] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1340.722726][ T1113] hsr_slave_0: entered promiscuous mode [ 1340.772323][ T1113] hsr_slave_1: entered promiscuous mode [ 1340.838463][ T1113] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1340.875280][ T1113] Cannot create hsr debugfs directory [ 1340.885211][T21260] Bluetooth: hci0: command tx timeout [ 1341.889150][ T1113] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1342.120524][ T1113] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1342.576562][ T1113] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1342.865980][ T1113] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1342.965150][T21260] Bluetooth: hci0: command tx timeout [ 1343.499495][ T1113] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1343.546705][ T1113] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1343.563547][ T1113] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1343.629319][ T1113] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1343.772408][ T1113] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1343.790081][ T1113] 8021q: adding VLAN 0 to HW filter on device team0 [ 1343.830235][ T1113] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1343.842460][ T1113] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1343.871386][ T570] bridge0: port 1(bridge_slave_0) entered blocking state [ 1343.878736][ T570] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1343.914958][ T570] bridge0: port 2(bridge_slave_1) entered blocking state [ 1343.922195][ T570] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1344.273499][ T1113] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1344.861940][ T1212] netlink: 'syz.2.4835': attribute type 10 has an invalid length. [ 1344.869293][ T1233] netlink: 'syz.8.4838': attribute type 11 has an invalid length. [ 1344.894942][ T1233] netlink: 'syz.8.4838': attribute type 11 has an invalid length. [ 1344.894942][ T1212] netlink: 326 bytes leftover after parsing attributes in process `syz.2.4835'. [ 1345.046121][T21260] Bluetooth: hci0: command tx timeout [ 1345.178573][ T1113] veth0_vlan: entered promiscuous mode [ 1345.206260][ T1113] veth1_vlan: entered promiscuous mode [ 1345.267364][ T1113] veth0_macvtap: entered promiscuous mode [ 1345.291829][ T1113] veth1_macvtap: entered promiscuous mode [ 1345.322469][ T1113] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1345.355509][ T1113] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1345.377779][ T1113] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1345.394923][ T1113] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1345.418621][ T1113] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1345.434960][ T1113] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1345.452438][ T1113] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1345.466688][ T1113] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1345.485008][ T1113] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1345.501310][ T1113] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1345.518286][ T1113] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1345.557897][ T1113] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1345.645187][ T1113] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1345.665030][ T1113] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1345.699708][ T1113] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1345.715936][ T1113] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1345.745350][ T1113] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1345.760390][ T1113] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1345.794914][ T1113] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1345.821943][ T1113] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1345.841886][ T1113] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1345.868000][ T1113] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1345.898027][ T1113] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1345.917712][ T1113] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1345.955131][ T1113] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1345.963967][ T1113] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1346.445074][ T8766] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1346.452969][ T8766] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1346.543960][ T568] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1346.555113][ T568] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1347.141083][T21260] Bluetooth: hci0: command tx timeout [ 1349.793157][ T1317] Invalid ELF header magic: != ELF [ 1356.887417][ T1444] Invalid ELF header magic: != ELF [ 1359.445013][ T1499] Invalid ELF header magic: != ELF [ 1361.858856][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 1361.874922][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 1364.380519][ T1550] netlink: 'syz.6.4910': attribute type 11 has an invalid length. [ 1364.471450][ T1550] netlink: 'syz.6.4910': attribute type 11 has an invalid length. [ 1366.522732][ T1610] netlink: zone id is out of range [ 1366.548585][ T1610] netlink: zone id is out of range [ 1366.613766][ T1610] netlink: zone id is out of range [ 1366.620956][ T1610] netlink: zone id is out of range [ 1366.640596][ T1610] netlink: zone id is out of range [ 1366.764867][ T1610] netlink: zone id is out of range [ 1366.794996][ T1610] netlink: zone id is out of range [ 1366.801284][ T1610] netlink: zone id is out of range [ 1366.880914][ T1610] netlink: zone id is out of range [ 1366.934701][ T1616] futex_wake_op: syz.2.4925 tries to shift op by 64; fix this program [ 1366.961964][ T1610] netlink: zone id is out of range [ 1369.259755][ T1647] FAULT_INJECTION: forcing a failure. [ 1369.259755][ T1647] name failslab, interval 1, probability 0, space 0, times 0 [ 1369.349434][ T1647] CPU: 1 UID: 0 PID: 1647 Comm: syz.6.4932 Not tainted 6.12.0-rc6-syzkaller-00099-g7758b206117d #0 [ 1369.360376][ T1647] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1369.371130][ T1647] Call Trace: [ 1369.374544][ T1647] [ 1369.377685][ T1647] dump_stack_lvl+0x16c/0x1f0 [ 1369.382661][ T1647] should_fail_ex+0x497/0x5b0 [ 1369.388004][ T1647] ? fs_reclaim_acquire+0xae/0x150 [ 1369.393426][ T1647] should_failslab+0xc2/0x120 [ 1369.398514][ T1647] __kmalloc_cache_noprof+0x6b/0x310 [ 1369.404203][ T1647] ? prog_array_map_alloc+0x45/0x2a0 [ 1369.409925][ T1647] prog_array_map_alloc+0x45/0x2a0 [ 1369.415364][ T1647] map_create+0x5c5/0x1ed0 [ 1369.420286][ T1647] ? __pfx_lock_release+0x10/0x10 [ 1369.425472][ T1647] ? trace_lock_acquire+0x14a/0x1d0 [ 1369.431340][ T1647] ? __pfx_map_create+0x10/0x10 [ 1369.436243][ T1647] ? lock_acquire+0x2f/0xb0 [ 1369.441314][ T1647] ? __might_fault+0xe3/0x190 [ 1369.446224][ T1647] ? __might_fault+0xe3/0x190 [ 1369.451399][ T1647] __sys_bpf+0x506a/0x5780 [ 1369.455965][ T1647] ? ksys_write+0x21e/0x260 [ 1369.461048][ T1647] ? __pfx___sys_bpf+0x10/0x10 [ 1369.465888][ T1647] ? vfs_write+0x306/0x1150 [ 1369.470890][ T1647] ? __mutex_unlock_slowpath+0x164/0x650 [ 1369.476986][ T1647] ? fput+0x30/0x390 [ 1369.481030][ T1647] ? ksys_write+0x1ad/0x260 [ 1369.485947][ T1647] ? __pfx_ksys_write+0x10/0x10 [ 1369.491836][ T1647] __x64_sys_bpf+0x78/0xc0 [ 1369.496308][ T1647] ? lockdep_hardirqs_on+0x7c/0x110 [ 1369.501611][ T1647] do_syscall_64+0xcd/0x250 [ 1369.506267][ T1647] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1369.512483][ T1647] RIP: 0033:0x7f92fd57e719 [ 1369.516941][ T1647] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1369.536859][ T1647] RSP: 002b:00007f92fb9f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1369.545318][ T1647] RAX: ffffffffffffffda RBX: 00007f92fd735f80 RCX: 00007f92fd57e719 [ 1369.553327][ T1647] RDX: 00000000000000a3 RSI: 0000000020000000 RDI: 0000000000000000 [ 1369.561335][ T1647] RBP: 00007f92fb9f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1369.569353][ T1647] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1369.577365][ T1647] R13: 0000000000000000 R14: 00007f92fd735f80 R15: 00007ffd8d5d10b8 [ 1369.585406][ T1647] [ 1374.227021][T19243] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1374.293621][ T1699] netlink: 'syz.4.4945': attribute type 11 has an invalid length. [ 1374.385693][ T1699] netlink: 'syz.4.4945': attribute type 11 has an invalid length. [ 1375.357611][ T5847] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1375.367529][ T5847] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1375.376283][ T5847] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1375.384712][ T5847] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1375.392656][ T5847] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1375.401545][ T5847] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1375.647067][T19243] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1375.917979][T19243] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1376.148984][T19243] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1376.835422][ T1702] chnl_net:caif_netlink_parms(): no params data found [ 1377.019961][T19243] bridge_slave_1: left allmulticast mode [ 1377.058857][T19243] bridge_slave_1: left promiscuous mode [ 1377.064633][T19243] bridge0: port 2(bridge_slave_1) entered disabled state [ 1377.212732][T19243] bridge_slave_0: left allmulticast mode [ 1377.251965][T19243] bridge_slave_0: left promiscuous mode [ 1377.285160][T19243] bridge0: port 1(bridge_slave_0) entered disabled state [ 1377.465384][ T5847] Bluetooth: hci1: command tx timeout [ 1377.815650][T21260] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1377.845664][T21260] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1377.864027][ T5152] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1377.874470][ T5152] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1377.882704][ T5152] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1377.897072][ T5152] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1379.068297][T19243] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1379.136325][T19243] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1379.165307][T19243] bond0 (unregistering): Released all slaves [ 1379.254934][ T1774] netlink: 346 bytes leftover after parsing attributes in process `syz.6.4960'. [ 1379.421694][ T1702] bridge0: port 1(bridge_slave_0) entered blocking state [ 1379.437596][ T1702] bridge0: port 1(bridge_slave_0) entered disabled state [ 1379.475762][ T1702] bridge_slave_0: entered allmulticast mode [ 1379.482923][ T1702] bridge_slave_0: entered promiscuous mode [ 1379.516152][ T1702] bridge0: port 2(bridge_slave_1) entered blocking state [ 1379.523432][ T1702] bridge0: port 2(bridge_slave_1) entered disabled state [ 1379.531153][ T5847] Bluetooth: hci1: command tx timeout [ 1379.549737][ T1702] bridge_slave_1: entered allmulticast mode [ 1379.557015][ T1702] bridge_slave_1: entered promiscuous mode [ 1379.736768][ T1702] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1379.758378][ T1702] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1380.005100][ T5847] Bluetooth: hci3: command tx timeout [ 1380.095465][ T1702] team0: Port device team_slave_0 added [ 1380.319857][ T1702] team0: Port device team_slave_1 added [ 1380.394134][T19243] hsr_slave_0: left promiscuous mode [ 1380.407809][T19243] hsr_slave_1: left promiscuous mode [ 1380.476394][T19243] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1380.484162][T19243] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1380.535797][T19243] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1380.543360][T19243] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1380.600272][T19243] veth1_macvtap: left promiscuous mode [ 1380.627514][T19243] veth0_macvtap: left promiscuous mode [ 1380.633539][T19243] veth1_vlan: left promiscuous mode [ 1380.644915][T19243] veth0_vlan: left promiscuous mode [ 1381.604959][ T5847] Bluetooth: hci1: command tx timeout [ 1382.037070][T19243] team0 (unregistering): Port device team_slave_1 removed [ 1382.088482][ T5847] Bluetooth: hci3: command tx timeout [ 1382.163173][T19243] team0 (unregistering): Port device team_slave_0 removed [ 1382.838218][T19243] vcan0 (unregistering): left allmulticast mode [ 1382.926071][ T1702] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1382.933056][ T1702] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1382.963229][ T1702] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1383.030835][ T1702] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1383.041393][ T1702] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1383.068158][ T1702] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1383.225619][ T1702] hsr_slave_0: entered promiscuous mode [ 1383.245354][ T1702] hsr_slave_1: entered promiscuous mode [ 1383.251605][ T1702] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1383.260469][ T1702] Cannot create hsr debugfs directory [ 1383.283511][ T1753] chnl_net:caif_netlink_parms(): no params data found [ 1383.572288][ T1753] bridge0: port 1(bridge_slave_0) entered blocking state [ 1383.579738][ T1753] bridge0: port 1(bridge_slave_0) entered disabled state [ 1383.589042][ T1753] bridge_slave_0: entered allmulticast mode [ 1383.616002][ T1753] bridge_slave_0: entered promiscuous mode [ 1383.658300][ T1753] bridge0: port 2(bridge_slave_1) entered blocking state [ 1383.678135][ T1753] bridge0: port 2(bridge_slave_1) entered disabled state [ 1383.695987][ T5847] Bluetooth: hci1: command tx timeout [ 1383.704068][ T1753] bridge_slave_1: entered allmulticast mode [ 1383.761859][ T1753] bridge_slave_1: entered promiscuous mode [ 1383.854049][ T1753] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1383.879512][ T1753] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1384.166488][ T5847] Bluetooth: hci3: command tx timeout [ 1384.357192][T21874] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1384.398579][ T1753] team0: Port device team_slave_0 added [ 1384.540182][ T1753] team0: Port device team_slave_1 added [ 1384.599232][T21874] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1384.806535][T21874] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1384.845632][ T1753] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1384.852614][ T1753] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1384.895154][ T1753] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1384.930245][T21874] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1384.951095][ T1753] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1384.968448][ T1753] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1385.025933][ T1753] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1385.131114][ T1874] FAULT_INJECTION: forcing a failure. [ 1385.131114][ T1874] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1385.160132][ T1753] hsr_slave_0: entered promiscuous mode [ 1385.164906][ T1874] CPU: 0 UID: 0 PID: 1874 Comm: syz.6.4982 Not tainted 6.12.0-rc6-syzkaller-00099-g7758b206117d #0 [ 1385.178703][ T1874] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1385.189147][ T1874] Call Trace: [ 1385.192470][ T1874] [ 1385.195867][ T1874] dump_stack_lvl+0x16c/0x1f0 [ 1385.201048][ T1874] should_fail_ex+0x497/0x5b0 [ 1385.206201][ T1874] _copy_from_user+0x2e/0xd0 [ 1385.210931][ T1874] dev_ifconf+0x15a/0x390 [ 1385.215297][ T1874] ? __pfx_dev_ifconf+0x10/0x10 [ 1385.220597][ T1874] sock_ioctl+0x38d/0x6c0 [ 1385.225210][ T1874] ? __pfx_sock_ioctl+0x10/0x10 [ 1385.230533][ T1874] ? __fget_files+0x244/0x3f0 [ 1385.235248][ T1874] ? __pfx_sock_ioctl+0x10/0x10 [ 1385.240114][ T1874] __x64_sys_ioctl+0x18f/0x220 [ 1385.244901][ T1874] do_syscall_64+0xcd/0x250 [ 1385.249416][ T1874] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1385.255347][ T1874] RIP: 0033:0x7f92fd57e719 [ 1385.259765][ T1874] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1385.279477][ T1874] RSP: 002b:00007f92fb9f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1385.287993][ T1874] RAX: ffffffffffffffda RBX: 00007f92fd735f80 RCX: 00007f92fd57e719 [ 1385.295972][ T1874] RDX: 0000000000000046 RSI: 0000000000008912 RDI: 0000000000000003 [ 1385.303951][ T1874] RBP: 00007f92fb9f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1385.312096][ T1874] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1385.320070][ T1874] R13: 0000000000000000 R14: 00007f92fd735f80 R15: 00007ffd8d5d10b8 [ 1385.328323][ T1874] [ 1385.352687][ T1753] hsr_slave_1: entered promiscuous mode [ 1385.362386][ T1753] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1385.370887][ T1753] Cannot create hsr debugfs directory [ 1385.489582][ T1702] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1385.572827][ T1702] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1385.592473][ T1702] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1385.632699][ T1702] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1385.656284][T21874] bridge_slave_1: left allmulticast mode [ 1385.661990][T21874] bridge_slave_1: left promiscuous mode [ 1385.668701][T21874] bridge0: port 2(bridge_slave_1) entered disabled state [ 1385.679699][T21874] bridge_slave_0: left allmulticast mode [ 1385.686582][T21874] bridge_slave_0: left promiscuous mode [ 1385.692457][T21874] bridge0: port 1(bridge_slave_0) entered disabled state [ 1386.249304][ T5847] Bluetooth: hci3: command tx timeout [ 1386.481588][T21874] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1386.503798][T21874] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1386.522162][T21874] bond0 (unregistering): Released all slaves [ 1387.137038][ T1907] FAULT_INJECTION: forcing a failure. [ 1387.137038][ T1907] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1387.168210][ T1907] CPU: 0 UID: 0 PID: 1907 Comm: syz.6.4991 Not tainted 6.12.0-rc6-syzkaller-00099-g7758b206117d #0 [ 1387.179022][ T1907] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1387.189109][ T1907] Call Trace: [ 1387.192559][ T1907] [ 1387.195522][ T1907] dump_stack_lvl+0x16c/0x1f0 [ 1387.200236][ T1907] should_fail_ex+0x497/0x5b0 [ 1387.204963][ T1907] _copy_to_user+0x32/0xd0 [ 1387.209412][ T1907] inet_gifconf+0x28e/0x520 [ 1387.214017][ T1907] ? dev_ifconf+0x19b/0x390 [ 1387.218536][ T1907] ? __pfx_inet_gifconf+0x10/0x10 [ 1387.223571][ T1907] ? __might_fault+0xe3/0x190 [ 1387.228359][ T1907] dev_ifconf+0x1f8/0x390 [ 1387.232724][ T1907] ? __pfx_dev_ifconf+0x10/0x10 [ 1387.237608][ T1907] sock_ioctl+0x38d/0x6c0 [ 1387.241976][ T1907] ? __pfx_sock_ioctl+0x10/0x10 [ 1387.246850][ T1907] ? __fget_files+0x244/0x3f0 [ 1387.251551][ T1907] ? __pfx_sock_ioctl+0x10/0x10 [ 1387.256413][ T1907] __x64_sys_ioctl+0x18f/0x220 [ 1387.261196][ T1907] do_syscall_64+0xcd/0x250 [ 1387.265711][ T1907] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1387.271622][ T1907] RIP: 0033:0x7f92fd57e719 [ 1387.276056][ T1907] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1387.296007][ T1907] RSP: 002b:00007f92fb9f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1387.304447][ T1907] RAX: ffffffffffffffda RBX: 00007f92fd735f80 RCX: 00007f92fd57e719 [ 1387.312521][ T1907] RDX: 0000000000000046 RSI: 0000000000008912 RDI: 0000000000000003 [ 1387.320500][ T1907] RBP: 00007f92fb9f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1387.328485][ T1907] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1387.336549][ T1907] R13: 0000000000000000 R14: 00007f92fd735f80 R15: 00007ffd8d5d10b8 [ 1387.344547][ T1907] [ 1387.824462][T21874] hsr_slave_0: left promiscuous mode [ 1387.841641][T21874] hsr_slave_1: left promiscuous mode [ 1387.871377][T21874] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1387.893018][T21874] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1387.929215][T21874] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1387.945632][T21874] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1388.006009][T21874] veth1_macvtap: left promiscuous mode [ 1388.011706][T21874] veth0_macvtap: left promiscuous mode [ 1388.036126][T21874] veth1_vlan: left promiscuous mode [ 1388.041903][T21874] veth0_vlan: left promiscuous mode [ 1388.806757][ T1953] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5001'. [ 1389.259213][T21874] team0 (unregistering): Port device team_slave_1 removed [ 1389.350243][T21874] team0 (unregistering): Port device team_slave_0 removed [ 1390.138635][ T1702] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1390.242358][ T1702] 8021q: adding VLAN 0 to HW filter on device team0 [ 1390.314716][T21870] bridge0: port 1(bridge_slave_0) entered blocking state [ 1390.321945][T21870] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1390.357312][T21870] bridge0: port 2(bridge_slave_1) entered blocking state [ 1390.364479][T21870] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1390.521727][ T1702] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1390.572565][ T1753] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1390.627709][ T1753] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1390.700602][ T1753] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1390.734850][ T1753] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1390.854317][ T1753] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1390.873163][ T1753] 8021q: adding VLAN 0 to HW filter on device team0 [ 1390.897379][T19239] bridge0: port 1(bridge_slave_0) entered blocking state [ 1390.904525][T19239] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1390.989909][T19245] bridge0: port 2(bridge_slave_1) entered blocking state [ 1390.997080][T19245] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1391.052506][ T1702] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1391.071276][ T1982] netlink: 16 bytes leftover after parsing attributes in process `syz.6.5008'. [ 1391.571331][ T1753] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1391.683053][ T1753] veth0_vlan: entered promiscuous mode [ 1391.740932][ T1753] veth1_vlan: entered promiscuous mode [ 1391.990676][ T1753] veth0_macvtap: entered promiscuous mode [ 1392.024214][ T1702] veth0_vlan: entered promiscuous mode [ 1392.053885][ T1753] veth1_macvtap: entered promiscuous mode [ 1392.103020][ T1702] veth1_vlan: entered promiscuous mode [ 1392.135862][ T1753] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1392.154906][ T1753] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1392.181620][ T1753] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1392.202542][ T1753] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1392.212523][ T1753] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1392.233316][ T1753] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1392.253886][ T1753] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1392.264512][ T1753] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1392.276355][ T1753] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1392.304311][ T1753] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1392.333422][ T1753] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1392.355018][ T1753] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1392.366132][ T1753] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1392.384835][ T1753] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1392.404955][ T1753] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1392.421902][ T1753] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1392.434955][ T1753] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1392.456310][ T1753] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1392.499096][ T1753] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1392.520196][ T1753] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1392.539566][ T1753] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1392.559279][ T1753] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1392.609000][ T1702] veth0_macvtap: entered promiscuous mode [ 1392.644468][ T1702] veth1_macvtap: entered promiscuous mode [ 1392.779377][ T1702] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1392.827427][ T1702] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1392.850594][ T1702] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1392.861509][ T1702] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1392.871628][ T1702] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1392.882177][ T1702] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1392.892354][ T1702] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1392.902936][ T1702] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1392.913370][ T1702] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1392.923924][ T1702] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1392.935714][ T1702] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1392.945819][ T1702] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1392.956513][ T1702] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1392.966852][ T1702] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1392.977415][ T1702] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1392.987468][ T1702] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1392.997981][ T1702] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1393.007976][ T1702] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1393.018847][ T1702] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1393.029129][ T1702] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1393.039687][ T1702] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1393.051058][ T1702] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1393.113455][ T1702] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1393.123268][ T1702] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1393.155057][ T1702] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1393.164161][ T1702] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1393.280845][T19243] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1393.319885][T19243] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1393.415606][T19243] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1393.454870][T19243] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1393.580897][T21870] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1393.611890][T21870] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1393.674458][ T2046] ptrace attach of "./syz-executor exec"[1753] was attempted by ""[2046] [ 1393.716183][T19243] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1393.734886][T19243] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1394.033646][ T2051] Dead loop on virtual device ip6_vti0, fix it urgently! [ 1394.042856][ T2051] Dead loop on virtual device ip6_vti0, fix it urgently! [ 1394.051887][ T2051] Dead loop on virtual device ip6_vti0, fix it urgently! [ 1394.062388][ T2051] Dead loop on virtual device ip6_vti0, fix it urgently! [ 1394.070542][ T2051] Dead loop on virtual device ip6_vti0, fix it urgently! [ 1394.156287][ T2051] Dead loop on virtual device ip6_vti0, fix it urgently! [ 1395.969421][ T2094] Process accounting resumed [ 1396.630389][ T2132] netlink: 334 bytes leftover after parsing attributes in process `syz.7.5029'. [ 1397.585345][ T2169] netlink: zone id is out of range [ 1397.590524][ T2169] netlink: zone id is out of range [ 1397.676971][ T2169] netlink: zone id is out of range [ 1397.696398][ T2169] netlink: zone id is out of range [ 1398.109187][ T2188] netlink: 334 bytes leftover after parsing attributes in process `syz.4.5040'. [ 1399.572644][ T2247] Invalid ELF header magic: != ELF [ 1400.305932][ T2272] netlink: 'syz.6.5056': attribute type 1 has an invalid length. [ 1404.895154][ T5152] Bluetooth: hci2: command 0x0406 tx timeout [ 1410.251509][ T2576] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5098'. [ 1411.126141][ T2617] ${](*œ{-.,+: entered promiscuous mode [ 1412.068294][ T2652] netlink: 16 bytes leftover after parsing attributes in process `syz.6.5108'. [ 1412.144985][ T2652] netlink: 227 bytes leftover after parsing attributes in process `syz.6.5108'. [ 1412.593271][ T2681] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5112'. [ 1412.821960][ T2689] svc: failed to register nfsdv3 RPC service (errno 111). [ 1412.926350][ T2689] svc: failed to register nfsaclv3 RPC service (errno 111). [ 1415.266996][ T2765] Process accounting resumed [ 1416.844552][ T2877] ${](*œ{-.,+: entered promiscuous mode [ 1422.181568][ T5152] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1422.192554][ T5152] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1422.204993][ T5152] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1422.227462][ T5152] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1422.236815][ T5152] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1422.244680][ T5152] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1422.688688][ T9894] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1423.287997][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 1423.294545][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 1423.374124][ T9894] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1424.325163][ T5152] Bluetooth: hci2: command tx timeout [ 1424.348637][ T9894] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1424.479343][ T3030] ieee80211 phy156: Failed to add default virtual iface [ 1425.255099][ T9894] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1425.946677][ T3022] chnl_net:caif_netlink_parms(): no params data found [ 1426.409226][ T5152] Bluetooth: hci2: command tx timeout [ 1426.829092][ T9894] bridge_slave_1: left allmulticast mode [ 1426.836311][ T9894] bridge_slave_1: left promiscuous mode [ 1426.842070][ T9894] bridge0: port 2(bridge_slave_1) entered disabled state [ 1426.876811][ T9894] bridge_slave_0: left allmulticast mode [ 1426.882514][ T9894] bridge_slave_0: left promiscuous mode [ 1426.905157][ T9894] bridge0: port 1(bridge_slave_0) entered disabled state [ 1428.494902][ T5152] Bluetooth: hci2: command tx timeout [ 1428.765498][ T9894] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1428.787970][ T9894] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1428.815521][ T9894] bond0 (unregistering): Released all slaves [ 1428.845079][ T3022] bridge0: port 1(bridge_slave_0) entered blocking state [ 1428.861763][ T3022] bridge0: port 1(bridge_slave_0) entered disabled state [ 1428.887681][ T3022] bridge_slave_0: entered allmulticast mode [ 1428.924851][ T3022] bridge_slave_0: entered promiscuous mode [ 1429.053425][ T3022] bridge0: port 2(bridge_slave_1) entered blocking state [ 1429.074935][ T3022] bridge0: port 2(bridge_slave_1) entered disabled state [ 1429.118250][ T3022] bridge_slave_1: entered allmulticast mode [ 1429.137975][ T3022] bridge_slave_1: entered promiscuous mode [ 1429.307237][ T3022] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1429.363885][ T3022] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1429.660179][ T3022] team0: Port device team_slave_0 added [ 1429.716316][ T3022] team0: Port device team_slave_1 added [ 1429.926745][ T3022] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1429.933788][ T3022] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1430.014851][ T3022] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1430.507159][ T3022] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1430.534004][ T3022] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1430.572032][ T5152] Bluetooth: hci2: command tx timeout [ 1430.625503][ T3022] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1430.988427][ T3022] hsr_slave_0: entered promiscuous mode [ 1431.027542][ T3022] hsr_slave_1: entered promiscuous mode [ 1431.139561][ T9894] hsr_slave_0: left promiscuous mode [ 1431.178125][ T9894] hsr_slave_1: left promiscuous mode [ 1431.214559][ T9894] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1431.235273][ T9894] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1431.277398][ T9894] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1431.285168][ T9894] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1431.322966][ T9894] veth1_macvtap: left promiscuous mode [ 1431.329331][ T9894] veth0_macvtap: left promiscuous mode [ 1431.343170][ T9894] veth1_vlan: left promiscuous mode [ 1431.349107][ T9894] veth0_vlan: left promiscuous mode [ 1432.380212][ T9894] team0 (unregistering): Port device team_slave_1 removed [ 1432.450937][ T9894] team0 (unregistering): Port device team_slave_0 removed [ 1434.846813][ T3022] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1434.967851][ T3022] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1434.985532][ T3022] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1435.024287][ T3022] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1435.050121][ T5847] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1435.067430][ T5847] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1435.084960][ T5847] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1435.112831][ T5847] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1435.122585][ T5847] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1435.130140][ T5847] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1435.396541][ T9894] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1435.578291][ T9894] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1435.867049][ T9894] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1435.990893][ T3022] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1436.007582][ T3022] 8021q: adding VLAN 0 to HW filter on device team0 [ 1436.041697][ T3022] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1436.052166][ T3022] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1436.075407][T19234] bridge0: port 1(bridge_slave_0) entered blocking state [ 1436.082544][T19234] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1436.102509][T19234] bridge0: port 2(bridge_slave_1) entered blocking state [ 1436.109704][T19234] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1436.463502][ T9894] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1436.526612][ T3265] chnl_net:caif_netlink_parms(): no params data found [ 1436.895921][ T3265] bridge0: port 1(bridge_slave_0) entered blocking state [ 1436.903071][ T3265] bridge0: port 1(bridge_slave_0) entered disabled state [ 1436.911342][ T3265] bridge_slave_0: entered allmulticast mode [ 1436.918528][ T3265] bridge_slave_0: entered promiscuous mode [ 1436.926649][ T3265] bridge0: port 2(bridge_slave_1) entered blocking state [ 1436.933776][ T3265] bridge0: port 2(bridge_slave_1) entered disabled state [ 1436.941124][ T3265] bridge_slave_1: entered allmulticast mode [ 1436.949005][ T3265] bridge_slave_1: entered promiscuous mode [ 1437.090201][ T3022] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1437.199907][ T3265] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1437.209754][ T5152] Bluetooth: hci1: command tx timeout [ 1437.274012][ T3265] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1437.394379][ T9894] bridge_slave_1: left allmulticast mode [ 1437.400757][ T9894] bridge_slave_1: left promiscuous mode [ 1437.409511][ T9894] bridge0: port 2(bridge_slave_1) entered disabled state [ 1437.471580][ T9894] bridge_slave_0: left allmulticast mode [ 1437.481156][ T9894] bridge_slave_0: left promiscuous mode [ 1437.498620][ T9894] bridge0: port 1(bridge_slave_0) entered disabled state [ 1437.645975][ T3321] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5182'. [ 1438.723621][ T9894] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1438.736977][ T9894] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1438.765704][ T9894] bond0 (unregistering): Released all slaves [ 1438.826722][ T3265] team0: Port device team_slave_0 added [ 1438.857607][ T3265] team0: Port device team_slave_1 added [ 1439.285028][ T5152] Bluetooth: hci1: command tx timeout [ 1439.402652][ T3265] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1439.416889][ T3265] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1439.506111][ T3265] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1439.725956][ T3265] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1439.736555][ T3265] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1439.806647][ T3265] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1440.291046][ T3265] hsr_slave_0: entered promiscuous mode [ 1440.316795][ T3265] hsr_slave_1: entered promiscuous mode [ 1440.374937][ T3265] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1440.382708][ T3265] Cannot create hsr debugfs directory [ 1440.554925][ T9894] hsr_slave_0: left promiscuous mode [ 1440.587427][ T9894] hsr_slave_1: left promiscuous mode [ 1440.629138][ T9894] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1440.636902][ T9894] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1440.697423][ T9894] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1440.712172][ T9894] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1440.827507][ T9894] veth1_macvtap: left promiscuous mode [ 1440.833090][ T9894] veth0_macvtap: left promiscuous mode [ 1440.845051][ T9894] veth1_vlan: left promiscuous mode [ 1440.854918][ T9894] veth0_vlan: left promiscuous mode [ 1441.132850][ T3361] CIFS mount error: No usable UNC path provided in device string! [ 1441.132850][ T3361] [ 1441.157800][ T3361] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1441.365474][ T5152] Bluetooth: hci1: command tx timeout [ 1441.668694][ T9894] team0 (unregistering): Port device team_slave_1 removed [ 1441.730768][ T9894] team0 (unregistering): Port device team_slave_0 removed [ 1442.358354][ T3022] veth0_vlan: entered promiscuous mode [ 1442.442116][ T3022] veth1_vlan: entered promiscuous mode [ 1442.625893][ T3022] veth0_macvtap: entered promiscuous mode [ 1442.668276][ T3022] veth1_macvtap: entered promiscuous mode [ 1442.801687][ T3022] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1442.841549][ T3022] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1442.854987][ T3022] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1442.878454][ T3022] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1442.902811][ T3022] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1442.938796][ T3022] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1442.949298][ T3022] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1442.974880][ T3022] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1442.986817][ T3022] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1443.032954][ T3022] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1443.079709][ T3022] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1443.112711][ T3022] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1443.134841][ T3022] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1443.144718][ T3022] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1443.188250][ T3022] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1443.207211][ T3022] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1443.218308][ T3022] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1443.232234][ T3022] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1443.327235][ T3022] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1443.364925][ T3022] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1443.374009][ T3022] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1443.397652][ T3022] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1443.463830][ T5152] Bluetooth: hci1: command tx timeout [ 1443.591732][ T3412] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5199'. [ 1443.799372][T25463] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1443.835448][T25463] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1443.930554][ T9357] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1443.951323][ T9357] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1444.079316][ T3265] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1444.147882][ T3265] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1444.179714][ T3265] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1444.344052][ T3265] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1444.428258][ T3265] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1444.446046][ T3265] 8021q: adding VLAN 0 to HW filter on device team0 [ 1444.498774][ T3424] svc: failed to register nfsdv3 RPC service (errno 111). [ 1444.526544][T25485] bridge0: port 1(bridge_slave_0) entered blocking state [ 1444.533753][T25485] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1444.542249][ T3424] svc: failed to register nfsaclv3 RPC service (errno 111). [ 1444.560736][T25485] bridge0: port 2(bridge_slave_1) entered blocking state [ 1444.567971][T25485] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1444.712909][ T3265] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1445.241195][ T3265] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1445.988959][ T3265] veth0_vlan: entered promiscuous mode [ 1446.022383][ T3265] veth1_vlan: entered promiscuous mode [ 1446.066883][ T3483] net_ratelimit: 4 callbacks suppressed [ 1446.066903][ T3483] openvswitch: netlink: Message has 4 unknown bytes. [ 1446.192846][ T3265] veth0_macvtap: entered promiscuous mode [ 1446.264092][ T3265] veth1_macvtap: entered promiscuous mode [ 1446.457790][ T3265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1446.505189][ T3265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1446.535607][ T3265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1446.584806][ T3265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1446.608776][ T3265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1446.633821][ T3265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1446.657722][ T3265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1446.674960][ T3265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1446.708487][ T3265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1446.732949][ T3265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1446.766327][ T3265] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1446.801179][ T3265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1446.843471][ T3265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1446.862148][ T3265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1446.914657][ T3265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1446.924921][ T3265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1446.935738][ T3265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1446.946637][ T3265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1446.957486][ T3265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1446.967548][ T3265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1446.978678][ T3265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1446.989981][ T3265] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1447.000377][ T3265] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1447.009215][ T3265] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1447.018283][ T3265] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1447.027478][ T3265] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1447.094408][ T3506] FAULT_INJECTION: forcing a failure. [ 1447.094408][ T3506] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1447.127430][ T3506] CPU: 0 UID: 0 PID: 3506 Comm: syz.6.5216 Not tainted 6.12.0-rc6-syzkaller-00099-g7758b206117d #0 [ 1447.138258][ T3506] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1447.148336][ T3506] Call Trace: [ 1447.151637][ T3506] [ 1447.154582][ T3506] dump_stack_lvl+0x16c/0x1f0 [ 1447.159298][ T3506] should_fail_ex+0x497/0x5b0 [ 1447.164025][ T3506] _copy_from_user+0x2e/0xd0 [ 1447.168663][ T3506] dccp_setsockopt+0x353/0xb20 [ 1447.173471][ T3506] ? __pfx_dccp_setsockopt+0x10/0x10 [ 1447.178891][ T3506] ? sock_common_setsockopt+0x2e/0xf0 [ 1447.184317][ T3506] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 1447.190273][ T3506] do_sock_setsockopt+0x222/0x480 [ 1447.195347][ T3506] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 1447.200965][ T3506] ? fdget+0x176/0x210 [ 1447.205068][ T3506] __sys_setsockopt+0x1a4/0x270 [ 1447.209956][ T3506] ? __pfx___sys_setsockopt+0x10/0x10 [ 1447.215470][ T3506] ? fput+0x30/0x390 [ 1447.219563][ T3506] ? ksys_write+0x1ad/0x260 [ 1447.224126][ T3506] ? __pfx_ksys_write+0x10/0x10 [ 1447.229031][ T3506] __x64_sys_setsockopt+0xbd/0x160 [ 1447.234182][ T3506] ? do_syscall_64+0x91/0x250 [ 1447.238904][ T3506] ? lockdep_hardirqs_on+0x7c/0x110 [ 1447.244183][ T3506] do_syscall_64+0xcd/0x250 [ 1447.248728][ T3506] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1447.254677][ T3506] RIP: 0033:0x7f92fd57e719 [ 1447.259139][ T3506] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1447.278795][ T3506] RSP: 002b:00007f92fb9f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1447.287253][ T3506] RAX: ffffffffffffffda RBX: 00007f92fd735f80 RCX: 00007f92fd57e719 [ 1447.295264][ T3506] RDX: 0000000000000002 RSI: 000000000000010d RDI: 0000000000000003 [ 1447.303276][ T3506] RBP: 00007f92fb9f6090 R08: 0000000000000017 R09: 0000000000000000 [ 1447.311373][ T3506] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1447.319386][ T3506] R13: 0000000000000000 R14: 00007f92fd735f80 R15: 00007ffd8d5d10b8 [ 1447.327427][ T3506] [ 1447.406565][ T570] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1447.439985][ T570] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1447.485561][ T9357] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1447.493721][ T9357] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1448.111359][ T3532] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5223'. [ 1448.840069][ T3545] cgroup: fork rejected by pids controller in /syz6 [ 1450.403707][ T3640] FAULT_INJECTION: forcing a failure. [ 1450.403707][ T3640] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1450.523766][ T3640] CPU: 0 UID: 0 PID: 3640 Comm: syz.7.5229 Not tainted 6.12.0-rc6-syzkaller-00099-g7758b206117d #0 [ 1450.534512][ T3640] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1450.544601][ T3640] Call Trace: [ 1450.547913][ T3640] [ 1450.550877][ T3640] dump_stack_lvl+0x16c/0x1f0 [ 1450.555597][ T3640] should_fail_ex+0x497/0x5b0 [ 1450.560312][ T3640] ? fs_reclaim_acquire+0xae/0x150 [ 1450.565487][ T3640] should_fail_alloc_page+0xe7/0x130 [ 1450.570834][ T3640] prepare_alloc_pages.constprop.0+0x16f/0x560 [ 1450.577042][ T3640] ? mark_lock+0xb5/0xc60 [ 1450.581545][ T3640] __alloc_pages_noprof+0x190/0x25a0 [ 1450.586883][ T3640] ? __pfx_mark_lock+0x10/0x10 [ 1450.591694][ T3640] ? find_held_lock+0x2d/0x110 [ 1450.596499][ T3640] ? __pfx_mark_lock+0x10/0x10 [ 1450.601308][ T3640] ? mark_lock+0xb5/0xc60 [ 1450.605686][ T3640] ? process_measurement+0x521/0x2370 [ 1450.611103][ T3640] ? __pfx_lock_release+0x10/0x10 [ 1450.616177][ T3640] ? __pfx___alloc_pages_noprof+0x10/0x10 [ 1450.621948][ T3640] ? hlock_class+0x4e/0x130 [ 1450.626502][ T3640] ? hlock_class+0x4e/0x130 [ 1450.631049][ T3640] ? __lock_acquire+0xbdd/0x3ce0 [ 1450.636048][ T3640] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1450.641999][ T3640] ? policy_nodemask+0xea/0x4e0 [ 1450.647173][ T3640] alloc_pages_mpol_noprof+0x2c9/0x610 [ 1450.652694][ T3640] ? __pfx_alloc_pages_mpol_noprof+0x10/0x10 [ 1450.658740][ T3640] ? mt_find+0x82d/0xa20 [ 1450.663089][ T3640] ? __pfx_lock_release+0x10/0x10 [ 1450.668259][ T3640] __pmd_alloc+0x3f/0x860 [ 1450.672643][ T3640] __handle_mm_fault+0x942/0x2a10 [ 1450.678248][ T3640] ? __pfx_mt_find+0x10/0x10 [ 1450.682878][ T3640] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 1450.688648][ T3640] ? __pfx___handle_mm_fault+0x10/0x10 [ 1450.694177][ T3640] ? find_vma+0xc0/0x140 [ 1450.698471][ T3640] ? __pfx_find_vma+0x10/0x10 [ 1450.703193][ T3640] ? aa_label_sk_perm+0x19d/0x5a0 [ 1450.708272][ T3640] handle_mm_fault+0x3fa/0xaa0 [ 1450.713103][ T3640] do_user_addr_fault+0x7a3/0x13f0 [ 1450.718305][ T3640] exc_page_fault+0x5c/0xc0 [ 1450.722878][ T3640] asm_exc_page_fault+0x26/0x30 [ 1450.727860][ T3640] RIP: 0010:rep_movs_alternative+0x13/0x70 [ 1450.733719][ T3640] Code: cc cc cc 0f 1f 40 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 83 f9 40 73 40 83 f9 08 73 21 85 c9 74 0f <8a> 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 c3 cc cc cc cc 66 0f [ 1450.753369][ T3640] RSP: 0018:ffffc900045efc10 EFLAGS: 00050202 [ 1450.759568][ T3640] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 0000000000000004 [ 1450.767580][ T3640] RDX: fffff520008bdf93 RSI: 0000000000000000 RDI: ffffc900045efc98 [ 1450.775589][ T3640] RBP: 0000000000000004 R08: 0000000000000001 R09: fffff520008bdf93 [ 1450.783596][ T3640] R10: 0000000000000003 R11: 0000000000000000 R12: 0000000000000000 [ 1450.791778][ T3640] R13: ffffc900045efc98 R14: 1ffff920008bdf8d R15: 0000000000000000 [ 1450.799811][ T3640] _copy_from_user+0x9a/0xd0 [ 1450.804463][ T3640] dccp_setsockopt+0x353/0xb20 [ 1450.809288][ T3640] ? __pfx_dccp_setsockopt+0x10/0x10 [ 1450.814628][ T3640] ? sock_common_setsockopt+0x2e/0xf0 [ 1450.820227][ T3640] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 1450.826298][ T3640] do_sock_setsockopt+0x222/0x480 [ 1450.831409][ T3640] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 1450.837117][ T3640] ? fdget+0x176/0x210 [ 1450.841268][ T3640] __sys_setsockopt+0x1a4/0x270 [ 1450.846172][ T3640] ? __pfx___sys_setsockopt+0x10/0x10 [ 1450.851588][ T3640] ? fput+0x30/0x390 [ 1450.855620][ T3640] ? ksys_write+0x1ad/0x260 [ 1450.860165][ T3640] ? __pfx_ksys_write+0x10/0x10 [ 1450.865065][ T3640] __x64_sys_setsockopt+0xbd/0x160 [ 1450.870213][ T3640] ? do_syscall_64+0x91/0x250 [ 1450.874936][ T3640] ? lockdep_hardirqs_on+0x7c/0x110 [ 1450.880207][ T3640] do_syscall_64+0xcd/0x250 [ 1450.884753][ T3640] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1450.890703][ T3640] RIP: 0033:0x7f1e87d7e719 [ 1450.895239][ T3640] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1450.914884][ T3640] RSP: 002b:00007f1e88aec038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1450.923348][ T3640] RAX: ffffffffffffffda RBX: 00007f1e87f35f80 RCX: 00007f1e87d7e719 [ 1450.931451][ T3640] RDX: 0000000000000002 RSI: 000000000000010d RDI: 0000000000000003 [ 1450.939548][ T3640] RBP: 00007f1e88aec090 R08: 0000000000000017 R09: 0000000000000000 [ 1450.947557][ T3640] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1450.955562][ T3640] R13: 0000000000000000 R14: 00007f1e87f35f80 R15: 00007ffcd30c92c8 [ 1450.963589][ T3640] [ 1452.622087][ T3679] FAULT_INJECTION: forcing a failure. [ 1452.622087][ T3679] name failslab, interval 1, probability 0, space 0, times 0 [ 1452.657017][ T3679] CPU: 0 UID: 0 PID: 3679 Comm: syz.6.5242 Not tainted 6.12.0-rc6-syzkaller-00099-g7758b206117d #0 [ 1452.667766][ T3679] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1452.677847][ T3679] Call Trace: [ 1452.681145][ T3679] [ 1452.684095][ T3679] dump_stack_lvl+0x16c/0x1f0 [ 1452.688801][ T3679] should_fail_ex+0x497/0x5b0 [ 1452.693506][ T3679] ? fs_reclaim_acquire+0xae/0x150 [ 1452.698656][ T3679] should_failslab+0xc2/0x120 [ 1452.703376][ T3679] kmem_cache_alloc_noprof+0x6e/0x2f0 [ 1452.708786][ T3679] ? __pmd_alloc+0xc3/0x860 [ 1452.713329][ T3679] __pmd_alloc+0xc3/0x860 [ 1452.717701][ T3679] __handle_mm_fault+0x942/0x2a10 [ 1452.722778][ T3679] ? __pfx_mt_find+0x10/0x10 [ 1452.727401][ T3679] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 1452.733084][ T3679] ? __pfx___handle_mm_fault+0x10/0x10 [ 1452.738614][ T3679] ? find_vma+0xc0/0x140 [ 1452.743150][ T3679] ? __pfx_find_vma+0x10/0x10 [ 1452.747860][ T3679] ? aa_label_sk_perm+0x19d/0x5a0 [ 1452.752931][ T3679] handle_mm_fault+0x3fa/0xaa0 [ 1452.757746][ T3679] do_user_addr_fault+0x7a3/0x13f0 [ 1452.762910][ T3679] exc_page_fault+0x5c/0xc0 [ 1452.767468][ T3679] asm_exc_page_fault+0x26/0x30 [ 1452.772357][ T3679] RIP: 0010:rep_movs_alternative+0x13/0x70 [ 1452.778198][ T3679] Code: cc cc cc 0f 1f 40 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 83 f9 40 73 40 83 f9 08 73 21 85 c9 74 0f <8a> 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 c3 cc cc cc cc 66 0f [ 1452.797845][ T3679] RSP: 0018:ffffc9000439fc10 EFLAGS: 00050202 [ 1452.803950][ T3679] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 0000000000000004 [ 1452.811961][ T3679] RDX: fffff52000873f93 RSI: 0000000000000000 RDI: ffffc9000439fc98 [ 1452.819995][ T3679] RBP: 0000000000000004 R08: 0000000000000001 R09: fffff52000873f93 [ 1452.828020][ T3679] R10: 0000000000000003 R11: 0000000000000000 R12: 0000000000000000 [ 1452.836022][ T3679] R13: ffffc9000439fc98 R14: 1ffff92000873f8d R15: 0000000000000000 [ 1452.844039][ T3679] _copy_from_user+0x9a/0xd0 [ 1452.848679][ T3679] dccp_setsockopt+0x353/0xb20 [ 1452.853486][ T3679] ? __pfx_dccp_setsockopt+0x10/0x10 [ 1452.858815][ T3679] ? sock_common_setsockopt+0x2e/0xf0 [ 1452.864238][ T3679] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 1452.870175][ T3679] do_sock_setsockopt+0x222/0x480 [ 1452.875234][ T3679] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 1452.880831][ T3679] ? fdget+0x176/0x210 [ 1452.884945][ T3679] __sys_setsockopt+0x1a4/0x270 [ 1452.889829][ T3679] ? __pfx___sys_setsockopt+0x10/0x10 [ 1452.895239][ T3679] ? fput+0x30/0x390 [ 1452.899178][ T3679] ? ksys_write+0x1ad/0x260 [ 1452.903714][ T3679] ? __pfx_ksys_write+0x10/0x10 [ 1452.908610][ T3679] __x64_sys_setsockopt+0xbd/0x160 [ 1452.913754][ T3679] ? do_syscall_64+0x91/0x250 [ 1452.918467][ T3679] ? lockdep_hardirqs_on+0x7c/0x110 [ 1452.923708][ T3679] do_syscall_64+0xcd/0x250 [ 1452.928245][ T3679] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1452.934275][ T3679] RIP: 0033:0x7f92fd57e719 [ 1452.938718][ T3679] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1452.958366][ T3679] RSP: 002b:00007f92fb9f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1452.966825][ T3679] RAX: ffffffffffffffda RBX: 00007f92fd735f80 RCX: 00007f92fd57e719 [ 1452.974847][ T3679] RDX: 0000000000000002 RSI: 000000000000010d RDI: 0000000000000003 [ 1452.982845][ T3679] RBP: 00007f92fb9f6090 R08: 0000000000000017 R09: 0000000000000000 [ 1452.990858][ T3679] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1452.998864][ T3679] R13: 0000000000000000 R14: 00007f92fd735f80 R15: 00007ffd8d5d10b8 [ 1453.006888][ T3679] [ 1454.739368][ T3743] FAULT_INJECTION: forcing a failure. [ 1454.739368][ T3743] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1454.783685][ T3743] CPU: 0 UID: 0 PID: 3743 Comm: syz.6.5256 Not tainted 6.12.0-rc6-syzkaller-00099-g7758b206117d #0 [ 1454.794426][ T3743] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1454.804610][ T3743] Call Trace: [ 1454.807918][ T3743] [ 1454.810881][ T3743] dump_stack_lvl+0x16c/0x1f0 [ 1454.815603][ T3743] should_fail_ex+0x497/0x5b0 [ 1454.820349][ T3743] ? fs_reclaim_acquire+0xae/0x150 [ 1454.825510][ T3743] should_fail_alloc_page+0xe7/0x130 [ 1454.830849][ T3743] prepare_alloc_pages.constprop.0+0x16f/0x560 [ 1454.837111][ T3743] __alloc_pages_noprof+0x190/0x25a0 [ 1454.842453][ T3743] ? mark_lock+0xb5/0xc60 [ 1454.846839][ T3743] ? hlock_class+0x4e/0x130 [ 1454.851494][ T3743] ? mark_lock+0xb5/0xc60 [ 1454.855873][ T3743] ? __pfx_mark_lock+0x10/0x10 [ 1454.860688][ T3743] ? __pfx_mark_lock+0x10/0x10 [ 1454.865498][ T3743] ? __pfx___alloc_pages_noprof+0x10/0x10 [ 1454.871271][ T3743] ? __pfx_stack_trace_save+0x10/0x10 [ 1454.876687][ T3743] ? rcu_is_watching+0x12/0xc0 [ 1454.881508][ T3743] ? hlock_class+0x4e/0x130 [ 1454.886054][ T3743] ? __lock_acquire+0x163e/0x3ce0 [ 1454.891122][ T3743] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1454.897071][ T3743] ? policy_nodemask+0xea/0x4e0 [ 1454.901973][ T3743] alloc_pages_mpol_noprof+0x2c9/0x610 [ 1454.907490][ T3743] ? __pfx_alloc_pages_mpol_noprof+0x10/0x10 [ 1454.913522][ T3743] ? __pfx_mark_lock+0x10/0x10 [ 1454.918364][ T3743] pte_alloc_one+0x20/0x390 [ 1454.922917][ T3743] __pte_alloc+0x6e/0x3b0 [ 1454.927292][ T3743] ? __pfx___pte_alloc+0x10/0x10 [ 1454.932269][ T3743] ? __pfx_lock_release+0x10/0x10 [ 1454.937339][ T3743] ? do_raw_spin_lock+0x12d/0x2c0 [ 1454.942501][ T3743] do_pte_missing+0x280b/0x3e70 [ 1454.947405][ T3743] ? _raw_spin_unlock+0x28/0x50 [ 1454.952303][ T3743] ? __pmd_alloc+0x380/0x860 [ 1454.956941][ T3743] __handle_mm_fault+0x100a/0x2a10 [ 1454.962116][ T3743] ? __pfx_mt_find+0x10/0x10 [ 1454.966748][ T3743] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 1454.972430][ T3743] ? __pfx___handle_mm_fault+0x10/0x10 [ 1454.977956][ T3743] ? find_vma+0xc0/0x140 [ 1454.982238][ T3743] ? __pfx_find_vma+0x10/0x10 [ 1454.986960][ T3743] ? aa_label_sk_perm+0x19d/0x5a0 [ 1454.992061][ T3743] handle_mm_fault+0x3fa/0xaa0 [ 1454.996882][ T3743] do_user_addr_fault+0x7a3/0x13f0 [ 1455.002061][ T3743] exc_page_fault+0x5c/0xc0 [ 1455.006611][ T3743] asm_exc_page_fault+0x26/0x30 [ 1455.011508][ T3743] RIP: 0010:rep_movs_alternative+0x13/0x70 [ 1455.017358][ T3743] Code: cc cc cc 0f 1f 40 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 83 f9 40 73 40 83 f9 08 73 21 85 c9 74 0f <8a> 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 c3 cc cc cc cc 66 0f [ 1455.037003][ T3743] RSP: 0018:ffffc9000bfafc10 EFLAGS: 00050202 [ 1455.043114][ T3743] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 0000000000000004 [ 1455.051115][ T3743] RDX: fffff520017f5f93 RSI: 0000000000000000 RDI: ffffc9000bfafc98 [ 1455.059210][ T3743] RBP: 0000000000000004 R08: 0000000000000001 R09: fffff520017f5f93 [ 1455.067225][ T3743] R10: 0000000000000003 R11: 0000000000000000 R12: 0000000000000000 [ 1455.075229][ T3743] R13: ffffc9000bfafc98 R14: 1ffff920017f5f8d R15: 0000000000000000 [ 1455.083256][ T3743] _copy_from_user+0x9a/0xd0 [ 1455.087902][ T3743] dccp_setsockopt+0x353/0xb20 [ 1455.092738][ T3743] ? __pfx_dccp_setsockopt+0x10/0x10 [ 1455.098073][ T3743] ? sock_common_setsockopt+0x2e/0xf0 [ 1455.103495][ T3743] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 1455.109436][ T3743] do_sock_setsockopt+0x222/0x480 [ 1455.114507][ T3743] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 1455.120120][ T3743] ? fdget+0x176/0x210 [ 1455.124233][ T3743] __sys_setsockopt+0x1a4/0x270 [ 1455.129126][ T3743] ? __pfx___sys_setsockopt+0x10/0x10 [ 1455.134541][ T3743] ? fput+0x30/0x390 [ 1455.138500][ T3743] ? ksys_write+0x1ad/0x260 [ 1455.143054][ T3743] ? __pfx_ksys_write+0x10/0x10 [ 1455.147952][ T3743] __x64_sys_setsockopt+0xbd/0x160 [ 1455.153110][ T3743] ? do_syscall_64+0x91/0x250 [ 1455.157828][ T3743] ? lockdep_hardirqs_on+0x7c/0x110 [ 1455.163160][ T3743] do_syscall_64+0xcd/0x250 [ 1455.167714][ T3743] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1455.173656][ T3743] RIP: 0033:0x7f92fd57e719 [ 1455.178109][ T3743] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1455.197758][ T3743] RSP: 002b:00007f92fb9f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1455.206212][ T3743] RAX: ffffffffffffffda RBX: 00007f92fd735f80 RCX: 00007f92fd57e719 [ 1455.214217][ T3743] RDX: 0000000000000002 RSI: 000000000000010d RDI: 0000000000000003 [ 1455.222396][ T3743] RBP: 00007f92fb9f6090 R08: 0000000000000017 R09: 0000000000000000 [ 1455.230402][ T3743] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1455.238506][ T3743] R13: 0000000000000000 R14: 00007f92fd735f80 R15: 00007ffd8d5d10b8 [ 1455.246563][ T3743] [ 1457.228510][ T3812] FAULT_INJECTION: forcing a failure. [ 1457.228510][ T3812] name failslab, interval 1, probability 0, space 0, times 0 [ 1457.242145][ T3812] CPU: 0 UID: 0 PID: 3812 Comm: syz.2.5268 Not tainted 6.12.0-rc6-syzkaller-00099-g7758b206117d #0 [ 1457.252867][ T3812] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1457.262958][ T3812] Call Trace: [ 1457.266266][ T3812] [ 1457.269218][ T3812] dump_stack_lvl+0x16c/0x1f0 [ 1457.273944][ T3812] should_fail_ex+0x497/0x5b0 [ 1457.278661][ T3812] ? fs_reclaim_acquire+0xae/0x150 [ 1457.283919][ T3812] should_failslab+0xc2/0x120 [ 1457.288660][ T3812] kmem_cache_alloc_noprof+0x6e/0x2f0 [ 1457.294093][ T3812] ? ptlock_alloc+0x1f/0x70 [ 1457.298649][ T3812] ptlock_alloc+0x1f/0x70 [ 1457.303027][ T3812] pte_alloc_one+0x74/0x390 [ 1457.307576][ T3812] __pte_alloc+0x6e/0x3b0 [ 1457.311946][ T3812] ? __pfx___pte_alloc+0x10/0x10 [ 1457.316930][ T3812] ? __pfx_lock_release+0x10/0x10 [ 1457.321999][ T3812] ? do_raw_spin_lock+0x12d/0x2c0 [ 1457.327069][ T3812] do_pte_missing+0x280b/0x3e70 [ 1457.331977][ T3812] ? _raw_spin_unlock+0x28/0x50 [ 1457.336874][ T3812] ? __pmd_alloc+0x380/0x860 [ 1457.341511][ T3812] __handle_mm_fault+0x100a/0x2a10 [ 1457.346684][ T3812] ? __pfx_mt_find+0x10/0x10 [ 1457.351317][ T3812] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 1457.357000][ T3812] ? __pfx___handle_mm_fault+0x10/0x10 [ 1457.362559][ T3812] ? find_vma+0xc0/0x140 [ 1457.366936][ T3812] ? __pfx_find_vma+0x10/0x10 [ 1457.371665][ T3812] ? aa_label_sk_perm+0x19d/0x5a0 [ 1457.376748][ T3812] handle_mm_fault+0x3fa/0xaa0 [ 1457.381669][ T3812] do_user_addr_fault+0x7a3/0x13f0 [ 1457.386838][ T3812] exc_page_fault+0x5c/0xc0 [ 1457.391570][ T3812] asm_exc_page_fault+0x26/0x30 [ 1457.396477][ T3812] RIP: 0010:rep_movs_alternative+0x13/0x70 [ 1457.402436][ T3812] Code: cc cc cc 0f 1f 40 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 83 f9 40 73 40 83 f9 08 73 21 85 c9 74 0f <8a> 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 c3 cc cc cc cc 66 0f [ 1457.423041][ T3812] RSP: 0018:ffffc9000ba6fc10 EFLAGS: 00050202 [ 1457.429236][ T3812] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 0000000000000004 [ 1457.437245][ T3812] RDX: fffff5200174df93 RSI: 0000000000000000 RDI: ffffc9000ba6fc98 [ 1457.445255][ T3812] RBP: 0000000000000004 R08: 0000000000000001 R09: fffff5200174df93 [ 1457.453449][ T3812] R10: 0000000000000003 R11: 0000000000000000 R12: 0000000000000000 [ 1457.461888][ T3812] R13: ffffc9000ba6fc98 R14: 1ffff9200174df8d R15: 0000000000000000 [ 1457.469920][ T3812] _copy_from_user+0x9a/0xd0 [ 1457.474562][ T3812] dccp_setsockopt+0x353/0xb20 [ 1457.479376][ T3812] ? __pfx_dccp_setsockopt+0x10/0x10 [ 1457.484714][ T3812] ? sock_common_setsockopt+0x2e/0xf0 [ 1457.490229][ T3812] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 1457.496183][ T3812] do_sock_setsockopt+0x222/0x480 [ 1457.501266][ T3812] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 1457.506880][ T3812] ? fdget+0x176/0x210 [ 1457.510995][ T3812] __sys_setsockopt+0x1a4/0x270 [ 1457.515888][ T3812] ? __pfx___sys_setsockopt+0x10/0x10 [ 1457.521305][ T3812] ? fput+0x30/0x390 [ 1457.525244][ T3812] ? ksys_write+0x1ad/0x260 [ 1457.529801][ T3812] ? __pfx_ksys_write+0x10/0x10 [ 1457.534706][ T3812] __x64_sys_setsockopt+0xbd/0x160 [ 1457.539848][ T3812] ? do_syscall_64+0x91/0x250 [ 1457.544600][ T3812] ? lockdep_hardirqs_on+0x7c/0x110 [ 1457.549848][ T3812] do_syscall_64+0xcd/0x250 [ 1457.554393][ T3812] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1457.560338][ T3812] RIP: 0033:0x7f582ed7e719 [ 1457.564964][ T3812] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1457.584697][ T3812] RSP: 002b:00007f582fb9b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1457.593418][ T3812] RAX: ffffffffffffffda RBX: 00007f582ef35f80 RCX: 00007f582ed7e719 [ 1457.601511][ T3812] RDX: 0000000000000002 RSI: 000000000000010d RDI: 0000000000000003 [ 1457.609537][ T3812] RBP: 00007f582fb9b090 R08: 0000000000000017 R09: 0000000000000000 [ 1457.617552][ T3812] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1457.625559][ T3812] R13: 0000000000000000 R14: 00007f582ef35f80 R15: 00007ffd696ef228 [ 1457.633588][ T3812] [ 1460.662429][ T3896] FAULT_INJECTION: forcing a failure. [ 1460.662429][ T3896] name failslab, interval 1, probability 0, space 0, times 0 [ 1460.716552][ T3896] CPU: 0 UID: 0 PID: 3896 Comm: syz.2.5278 Not tainted 6.12.0-rc6-syzkaller-00099-g7758b206117d #0 [ 1460.727407][ T3896] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1460.737588][ T3896] Call Trace: [ 1460.740889][ T3896] [ 1460.743844][ T3896] dump_stack_lvl+0x16c/0x1f0 [ 1460.748566][ T3896] should_fail_ex+0x497/0x5b0 [ 1460.753285][ T3896] ? fs_reclaim_acquire+0xae/0x150 [ 1460.758437][ T3896] should_failslab+0xc2/0x120 [ 1460.763168][ T3896] __kmalloc_noprof+0xcb/0x410 [ 1460.767973][ T3896] ? rep_movs_alternative+0x13/0x70 [ 1460.773312][ T3896] dccp_setsockopt+0x690/0xb20 [ 1460.778124][ T3896] ? __pfx_dccp_setsockopt+0x10/0x10 [ 1460.783450][ T3896] ? sock_common_setsockopt+0x2e/0xf0 [ 1460.788875][ T3896] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 1460.794910][ T3896] do_sock_setsockopt+0x222/0x480 [ 1460.799977][ T3896] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 1460.805739][ T3896] ? fdget+0x176/0x210 [ 1460.810007][ T3896] __sys_setsockopt+0x1a4/0x270 [ 1460.814876][ T3896] ? __pfx___sys_setsockopt+0x10/0x10 [ 1460.820288][ T3896] ? fput+0x30/0x390 [ 1460.824226][ T3896] ? ksys_write+0x1ad/0x260 [ 1460.828779][ T3896] ? __pfx_ksys_write+0x10/0x10 [ 1460.833644][ T3896] __x64_sys_setsockopt+0xbd/0x160 [ 1460.838763][ T3896] ? do_syscall_64+0x91/0x250 [ 1460.843452][ T3896] ? lockdep_hardirqs_on+0x7c/0x110 [ 1460.848781][ T3896] do_syscall_64+0xcd/0x250 [ 1460.853292][ T3896] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1460.859302][ T3896] RIP: 0033:0x7f582ed7e719 [ 1460.863728][ T3896] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1460.883791][ T3896] RSP: 002b:00007f582fb9b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1460.892215][ T3896] RAX: ffffffffffffffda RBX: 00007f582ef35f80 RCX: 00007f582ed7e719 [ 1460.900199][ T3896] RDX: 0000000000000002 RSI: 000000000000010d RDI: 0000000000000003 [ 1460.908183][ T3896] RBP: 00007f582fb9b090 R08: 0000000000000017 R09: 0000000000000000 [ 1460.916172][ T3896] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1460.924167][ T3896] R13: 0000000000000000 R14: 00007f582ef35f80 R15: 00007ffd696ef228 [ 1460.932252][ T3896] [ 1461.853711][ T5847] Bluetooth: hci0: command 0x0406 tx timeout [ 1464.900862][ T3997] nbd: must specify a device to reconfigure [ 1464.932324][ T3997] nbd: must specify a device to reconfigure [ 1465.252120][ T4005] netlink: 272 bytes leftover after parsing attributes in process `syz.7.5305'. [ 1465.269579][ T4005] openvswitch: netlink: ufid size 88 bytes exceeds the range (1, 16) [ 1465.289160][ T4005] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 1465.507283][ T29] audit: type=1800 audit(4136.278:10): pid=4013 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.5307" name="SYSV00000008" dev="hugetlbfs" ino=0 res=0 errno=0 [ 1465.964869][ T4006] Invalid ELF header magic: != ELF [ 1466.475620][ T4031] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5313'. [ 1467.201817][ T4065] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5324'. [ 1467.783443][ T4074] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5328'. [ 1470.151958][ T5847] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1470.166934][ T5847] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1470.178715][ T5847] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1470.209440][ T5847] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1470.219819][ T5847] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1470.229417][ T5847] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1470.757759][ T4125] chnl_net:caif_netlink_parms(): no params data found [ 1471.231256][ T4125] bridge0: port 1(bridge_slave_0) entered blocking state [ 1471.238401][ T4125] bridge0: port 1(bridge_slave_0) entered disabled state [ 1471.246141][ T4125] bridge_slave_0: entered allmulticast mode [ 1471.253963][ T4125] bridge_slave_0: entered promiscuous mode [ 1471.262681][ T4125] bridge0: port 2(bridge_slave_1) entered blocking state [ 1471.269800][ T4125] bridge0: port 2(bridge_slave_1) entered disabled state [ 1471.277190][ T4125] bridge_slave_1: entered allmulticast mode [ 1471.284528][ T4125] bridge_slave_1: entered promiscuous mode [ 1471.351457][ T4125] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1471.372257][ T4125] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1471.419395][ T4141] Invalid ELF header magic: != ELF [ 1471.507985][ T4125] team0: Port device team_slave_0 added [ 1471.532650][ T4125] team0: Port device team_slave_1 added [ 1471.624678][ T4125] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1471.631695][ T4125] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1471.719437][ T4125] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1471.733075][ T4125] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1471.740060][ T4125] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1471.768604][ T4125] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1472.072058][ T4125] hsr_slave_0: entered promiscuous mode [ 1472.113911][ T4125] hsr_slave_1: entered promiscuous mode [ 1472.134759][ T4125] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1472.150733][ T4125] Cannot create hsr debugfs directory [ 1472.492879][ T4125] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1472.505390][ T5847] Bluetooth: hci2: command tx timeout [ 1472.674416][ T4125] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1472.923225][ T4125] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1473.065451][ T4125] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1473.233725][ T4125] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1473.266470][ T4125] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1473.291411][ T4125] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1473.304788][ T4125] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1473.511424][ T4125] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1473.546300][ T4125] 8021q: adding VLAN 0 to HW filter on device team0 [ 1473.579055][T19234] bridge0: port 1(bridge_slave_0) entered blocking state [ 1473.586375][T19234] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1473.611856][ T9894] bridge0: port 2(bridge_slave_1) entered blocking state [ 1473.619051][ T9894] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1473.722542][ T4178] netlink: 'syz.6.5351': attribute type 11 has an invalid length. [ 1473.744057][ T4178] netlink: 322 bytes leftover after parsing attributes in process `syz.6.5351'. [ 1474.114072][ T4125] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1474.741769][ T4125] veth0_vlan: entered promiscuous mode [ 1474.774436][ T4125] veth1_vlan: entered promiscuous mode [ 1474.775603][ T5847] Bluetooth: hci2: command tx timeout [ 1474.816727][ T4125] veth0_macvtap: entered promiscuous mode [ 1474.828426][ T4125] veth1_macvtap: entered promiscuous mode [ 1474.846928][ T4125] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1474.859158][ T4125] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1474.869369][ T4125] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1474.881239][ T4125] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1474.891226][ T4125] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1474.901905][ T4125] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1474.911985][ T4125] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1474.923967][ T4125] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1474.934223][ T4125] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1474.968473][ T4125] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1474.983987][ T4125] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1475.003821][ T4125] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1475.031263][ T4125] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1475.064193][ T4125] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1475.089252][ T4125] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1475.128330][ T4125] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1475.167982][ T4125] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1475.178407][ T4125] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1475.201039][ T4125] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1475.222595][ T4125] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1475.238313][ T4125] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1475.250426][ T4125] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1475.276834][ T4125] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1475.291708][ T4125] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1475.302932][ T4125] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1475.345234][ T4125] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1475.396544][ T4125] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1475.420500][ T4125] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1475.444130][ T4125] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1475.462614][ T4125] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1475.797644][ T570] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1475.810826][ T570] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1475.944709][ T9357] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1475.952978][ T9357] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1476.313244][ T29] audit: type=1800 audit(4146.184:11): pid=4269 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.5371" name="SYSV00000008" dev="hugetlbfs" ino=0 res=0 errno=0 [ 1476.555619][ T4286] netlink: 330 bytes leftover after parsing attributes in process `syz.2.5375'. [ 1477.045922][ T5847] Bluetooth: hci2: command tx timeout [ 1478.041684][ T570] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1478.507811][ T5152] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1478.525254][ T570] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1478.540450][ T5152] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1478.552547][ T5152] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1478.560647][ T5152] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1478.583463][ T5152] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1478.592535][ T5152] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1478.676945][ T570] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1479.017826][ T5152] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1479.030136][ T570] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1479.030877][ T5152] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1479.050252][ T5152] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1479.075591][ T5152] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1479.092289][ T5152] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1479.100783][ T5152] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1479.220241][ T4337] chnl_net:caif_netlink_parms(): no params data found [ 1479.326681][ T5847] Bluetooth: hci2: command tx timeout [ 1479.528488][ T570] bridge_slave_1: left allmulticast mode [ 1479.536475][ T570] bridge_slave_1: left promiscuous mode [ 1479.555909][ T570] bridge0: port 2(bridge_slave_1) entered disabled state [ 1479.565308][ T570] bridge_slave_0: left allmulticast mode [ 1479.577483][ T570] bridge_slave_0: left promiscuous mode [ 1479.583472][ T570] bridge0: port 1(bridge_slave_0) entered disabled state [ 1480.190966][ T570] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1480.203427][ T570] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1480.214807][ T570] bond0 (unregistering): Released all slaves [ 1480.371812][ T570] ${](*œ{-.,+: left promiscuous mode [ 1480.433089][ T4337] bridge0: port 1(bridge_slave_0) entered blocking state [ 1480.473709][ T4337] bridge0: port 1(bridge_slave_0) entered disabled state [ 1480.481082][ T4337] bridge_slave_0: entered allmulticast mode [ 1480.499783][ T4337] bridge_slave_0: entered promiscuous mode [ 1480.525960][ T4337] bridge0: port 2(bridge_slave_1) entered blocking state [ 1480.533503][ T4337] bridge0: port 2(bridge_slave_1) entered disabled state [ 1480.573605][ T4337] bridge_slave_1: entered allmulticast mode [ 1480.593477][ T4337] bridge_slave_1: entered promiscuous mode [ 1480.812778][ T4337] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1480.825684][ T4337] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1480.887639][ T5847] Bluetooth: hci0: command tx timeout [ 1480.944661][ T4337] team0: Port device team_slave_0 added [ 1480.955976][ T4337] team0: Port device team_slave_1 added [ 1481.125926][ T4337] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1481.144076][ T4337] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1481.234436][ T4337] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1481.327458][ T5847] Bluetooth: hci3: command tx timeout [ 1481.379364][ T4413] netlink: 28 bytes leftover after parsing attributes in process `syz.7.5405'. [ 1481.416119][ T4337] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1481.427710][ T4337] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1481.481628][ T4337] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1481.761107][ T4337] hsr_slave_0: entered promiscuous mode [ 1481.800504][ T4337] hsr_slave_1: entered promiscuous mode [ 1481.844677][ T4337] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1481.859428][ T4337] Cannot create hsr debugfs directory [ 1482.310717][ T4351] chnl_net:caif_netlink_parms(): no params data found [ 1482.550612][ T570] hsr_slave_0: left promiscuous mode [ 1482.698760][ T570] hsr_slave_1: left promiscuous mode [ 1482.742533][ T570] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1482.750159][ T570] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1482.771399][ T570] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1482.785586][ T570] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1482.871170][ T570] veth1_macvtap: left promiscuous mode [ 1482.876922][ T570] veth0_macvtap: left promiscuous mode [ 1482.887994][ T570] veth1_vlan: left promiscuous mode [ 1482.893371][ T570] veth0_vlan: left promiscuous mode [ 1483.156773][ T5847] Bluetooth: hci0: command tx timeout [ 1483.604223][ T5847] Bluetooth: hci3: command tx timeout [ 1484.043253][ T4456] netlink: 342 bytes leftover after parsing attributes in process `syz.7.5413'. [ 1484.101110][ T4457] netlink: 342 bytes leftover after parsing attributes in process `syz.7.5413'. [ 1484.115506][ T4457] netlink: 342 bytes leftover after parsing attributes in process `syz.7.5413'. [ 1484.194645][ T4457] netlink: 342 bytes leftover after parsing attributes in process `syz.7.5413'. [ 1484.433839][ T4457] netlink: 342 bytes leftover after parsing attributes in process `syz.7.5413'. [ 1485.426790][ T5847] Bluetooth: hci0: command tx timeout [ 1485.685663][ T570] team0 (unregistering): Port device team_slave_1 removed [ 1485.867837][ T5847] Bluetooth: hci3: command tx timeout [ 1486.318023][ T570] team0 (unregistering): Port device team_slave_0 removed [ 1487.525603][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 1487.531976][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 1487.698589][ T5847] Bluetooth: hci0: command tx timeout [ 1488.135537][ T5847] Bluetooth: hci3: command tx timeout [ 1488.884265][ T4351] bridge0: port 1(bridge_slave_0) entered blocking state [ 1488.906897][ T4351] bridge0: port 1(bridge_slave_0) entered disabled state [ 1488.935279][ T4351] bridge_slave_0: entered allmulticast mode [ 1488.952938][ T4351] bridge_slave_0: entered promiscuous mode [ 1488.977704][ T4351] bridge0: port 2(bridge_slave_1) entered blocking state [ 1488.995666][ T4351] bridge0: port 2(bridge_slave_1) entered disabled state [ 1489.002953][ T4351] bridge_slave_1: entered allmulticast mode [ 1489.050549][ T4351] bridge_slave_1: entered promiscuous mode [ 1489.229837][ T4351] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1489.414946][ T4351] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1489.690536][ T4351] team0: Port device team_slave_0 added [ 1489.719346][ T4351] team0: Port device team_slave_1 added [ 1489.801180][ T4351] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1489.824622][ T4351] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1489.889980][ T4351] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1489.981856][ T4351] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1489.997738][ T4351] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1490.042081][ T4351] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1490.181742][ T4351] hsr_slave_0: entered promiscuous mode [ 1490.196908][ T4351] hsr_slave_1: entered promiscuous mode [ 1490.203462][ T4351] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1490.218458][ T4351] Cannot create hsr debugfs directory [ 1490.270033][ T570] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1490.458683][ T570] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1490.611521][ T570] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1490.811918][ T570] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1490.917711][ T4524] ptrace attach of "./syz-executor exec"[4125] was attempted by "./syz-executor exec"[4524] [ 1490.934025][ T4337] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1490.967926][ T4337] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1491.028292][ T4337] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1491.066616][ T4337] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1491.368590][ T570] bridge_slave_1: left allmulticast mode [ 1491.374313][ T570] bridge_slave_1: left promiscuous mode [ 1491.408036][ T570] bridge0: port 2(bridge_slave_1) entered disabled state [ 1491.505743][ T570] bridge_slave_0: left allmulticast mode [ 1491.511449][ T570] bridge_slave_0: left promiscuous mode [ 1491.544920][ T570] bridge0: port 1(bridge_slave_0) entered disabled state [ 1492.597269][ T570] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1492.612301][ T570] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1492.633908][ T570] bond0 (unregistering): Released all slaves [ 1492.751221][ T570] ${](*œ{-.,+: left promiscuous mode [ 1493.646580][ T4337] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1494.074972][ T4337] 8021q: adding VLAN 0 to HW filter on device team0 [ 1494.187835][ T9894] bridge0: port 1(bridge_slave_0) entered blocking state [ 1494.195055][ T9894] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1494.465525][ T9894] bridge0: port 2(bridge_slave_1) entered blocking state [ 1494.472782][ T9894] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1494.735308][ T4351] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1494.824852][ T4351] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1495.205581][ T4351] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1495.381884][ T4351] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1495.915950][ T4337] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1496.012493][ T570] hsr_slave_0: left promiscuous mode [ 1496.029994][ T570] hsr_slave_1: left promiscuous mode [ 1496.041247][ T570] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1496.055778][ T570] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1496.146095][ T570] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1496.163293][ T570] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1496.228739][ T570] veth1_macvtap: left promiscuous mode [ 1496.245340][ T570] veth0_macvtap: left promiscuous mode [ 1496.251142][ T570] veth1_vlan: left promiscuous mode [ 1496.273308][ T570] veth0_vlan: left promiscuous mode [ 1499.076765][ T570] team0 (unregistering): Port device team_slave_1 removed [ 1499.234326][ T570] team0 (unregistering): Port device team_slave_0 removed [ 1499.302707][T20050] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000001: 0000 [#1] PREEMPT SMP KASAN PTI [ 1499.315691][T20050] KASAN: null-ptr-deref in range [0x0000000000000008-0x000000000000000f] [ 1499.324123][T20050] CPU: 1 UID: 0 PID: 20050 Comm: kworker/1:3 Not tainted 6.12.0-rc6-syzkaller-00099-g7758b206117d #0 [ 1499.330918][ T4473] syz.7.5413 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 1499.334974][T20050] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1499.334993][T20050] Workqueue: events swap_reclaim_work [ 1499.352065][ T4473] CPU: 0 UID: 0 PID: 4473 Comm: syz.7.5413 Not tainted 6.12.0-rc6-syzkaller-00099-g7758b206117d #0 [ 1499.354894][T20050] [ 1499.354903][T20050] RIP: 0010:__list_del_entry_valid_or_report+0x20/0x1c0 [ 1499.360245][ T4473] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1499.370894][T20050] Code: 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 89 fe 48 83 c7 08 48 83 ec 18 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 19 01 00 00 48 89 f2 48 8b 4e 08 48 b8 00 00 00 [ 1499.373205][ T4473] Call Trace: [ 1499.373215][ T4473] [ 1499.380130][T20050] RSP: 0018:ffffc90004e3fc30 EFLAGS: 00010202 [ 1499.390183][ T4473] dump_stack_lvl+0x16c/0x1f0 [ 1499.409769][T20050] [ 1499.409779][T20050] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: ffff888143b85878 [ 1499.413479][ T4473] dump_header+0x101/0x900 [ 1499.416483][T20050] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000008 [ 1499.422539][ T4473] oom_kill_process+0x270/0xa60 [ 1499.427273][T20050] RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000000 [ 1499.429583][ T4473] out_of_memory+0x351/0x1700 [ 1499.437621][T20050] R10: 0000000000000001 R11: 000000000000004f R12: dffffc0000000000 [ 1499.442016][ T4473] ? __pfx_lock_release+0x10/0x10 [ 1499.449960][T20050] R13: ffffffffffffffb8 R14: ffff888143b85800 R15: ffffc90003196000 [ 1499.454786][ T4473] ? __pfx_out_of_memory+0x10/0x10 [ 1499.462735][T20050] FS: 0000000000000000(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 1499.467409][ T4473] ? rcu_read_unlock+0x17/0x60 [ 1499.475372][T20050] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1499.480368][ T4473] ? __pfx_lock_release+0x10/0x10 [ 1499.488319][T20050] CR2: 00007fad4cffbf98 CR3: 000000006c4d8000 CR4: 00000000003526f0 [ 1499.493416][ T4473] mem_cgroup_out_of_memory+0x207/0x270 [ 1499.502491][T20050] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1499.507231][ T4473] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 1499.513786][T20050] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1499.518787][ T4473] ? do_raw_spin_unlock+0x172/0x230 [ 1499.526732][T20050] Call Trace: [ 1499.526742][T20050] [ 1499.532257][ T4473] try_charge_memcg+0x5b9/0xaf0 [ 1499.540209][T20050] ? die_addr+0x3b/0xa0 [ 1499.546275][ T4473] ? __pfx_try_charge_memcg+0x10/0x10 [ 1499.554229][T20050] ? exc_general_protection+0x155/0x230 [ 1499.559491][ T4473] ? get_mem_cgroup_from_mm+0x7f/0x5f0 [ 1499.562754][T20050] ? asm_exc_general_protection+0x26/0x30 [ 1499.565665][ T4473] ? get_mem_cgroup_from_mm+0x129/0x5f0 [ 1499.570489][T20050] ? __list_del_entry_valid_or_report+0x20/0x1c0 [ 1499.574624][ T4473] __mem_cgroup_charge+0x9b/0x280 [ 1499.580054][T20050] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1499.585572][ T4473] shmem_alloc_and_add_folio+0x507/0xc00 [ 1499.591176][T20050] swap_reclaim_full_clusters+0x109/0x460 [ 1499.596872][ T4473] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 1499.602389][T20050] swap_reclaim_work+0x2e/0x40 [ 1499.608687][ T4473] ? shmem_allowable_huge_orders+0xcd/0x3f0 [ 1499.613683][T20050] process_one_work+0x958/0x1b30 [ 1499.619026][ T4473] shmem_get_folio_gfp+0x689/0x1530 [ 1499.624633][T20050] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 1499.630329][ T4473] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 1499.636882][T20050] ? __pfx_process_one_work+0x10/0x10 [ 1499.641621][ T4473] shmem_write_begin+0x161/0x300 [ 1499.647487][T20050] ? assign_work+0x1a0/0x250 [ 1499.652399][ T4473] ? __pfx_shmem_write_begin+0x10/0x10 [ 1499.657567][T20050] worker_thread+0x6c8/0xf00 [ 1499.663171][ T4473] ? balance_dirty_pages_ratelimited_flags+0x92/0x1270 [ 1499.668783][T20050] ? __kthread_parkme+0x148/0x220 [ 1499.674129][ T4473] generic_perform_write+0x2ba/0x920 [ 1499.679032][T20050] ? __pfx_worker_thread+0x10/0x10 [ 1499.683599][ T4473] ? __pfx_generic_perform_write+0x10/0x10 [ 1499.689112][T20050] kthread+0x2c1/0x3a0 [ 1499.693760][ T4473] ? __pfx_generic_write_checks+0x10/0x10 [ 1499.700580][T20050] ? _raw_spin_unlock_irq+0x23/0x50 [ 1499.705581][ T4473] shmem_file_write_iter+0x10e/0x140 [ 1499.710834][T20050] ? __pfx_kthread+0x10/0x10 [ 1499.716005][ T4473] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 1499.721788][T20050] ret_from_fork+0x45/0x80 [ 1499.725851][ T4473] __kernel_write_iter+0x318/0xa80 [ 1499.731549][T20050] ? __pfx_kthread+0x10/0x10 [ 1499.736721][ T4473] ? __pfx___kernel_write_iter+0x10/0x10 [ 1499.741975][T20050] ret_from_fork_asm+0x1a/0x30 [ 1499.746551][ T4473] ? get_dump_page+0x15c/0x220 [ 1499.752338][T20050] [ 1499.756732][ T4473] ? copy_mc_enhanced_fast_string+0xa/0x13 [ 1499.761809][T20050] Modules linked in: [ 1499.766387][ T4473] dump_user_range+0x389/0x8a0 [ 1499.774215][T20050] ---[ end trace 0000000000000000 ]--- [ 1499.776823][ T4473] ? __pfx_dump_user_range+0x10/0x10 [ 1499.782091][T20050] RIP: 0010:__list_del_entry_valid_or_report+0x20/0x1c0 [ 1499.784574][ T4473] ? elf_coredump_extra_notes_write+0xbe/0x430 [ 1499.790404][T20050] Code: 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 89 fe 48 83 c7 08 48 83 ec 18 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 19 01 00 00 48 89 f2 48 8b 4e 08 48 b8 00 00 00 [ 1499.794238][ T4473] ? __pfx_writenote+0x10/0x10 [ 1499.799257][T20050] RSP: 0018:ffffc90004e3fc30 EFLAGS: 00010202 [ 1499.804509][ T4473] elf_core_dump+0x2766/0x3840 [ 1499.804547][ T4473] ? __pfx_elf_core_dump+0x10/0x10 [ 1499.804577][ T4473] ? kasan_save_stack+0x42/0x60 [ 1499.804604][ T4473] ? kasan_save_stack+0x33/0x60 [ 1499.804631][ T4473] ? __kasan_kmalloc+0xaa/0xb0 [ 1499.804657][ T4473] ? __kmalloc_node_noprof+0x211/0x440 [ 1499.804689][ T4473] ? __kvmalloc_node_noprof+0xad/0x1a0 [ 1499.804722][ T4473] ? irqentry_exit_to_user_mode+0x13f/0x280 [ 1499.804758][ T4473] ? asm_exc_page_fault+0x26/0x30 [ 1499.810064][T20050] [ 1499.816985][ T4473] ? rcu_is_watching+0x12/0xc0 [ 1499.817011][ T4473] ? trace_lock_acquire+0x14a/0x1d0 [ 1499.823171][T20050] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: ffff888143b85878 [ 1499.842728][ T4473] ? get_signal+0x237c/0x26d0 [ 1499.842758][ T4473] ? do_coredump+0x2c42/0x4160 [ 1499.842784][ T4473] do_coredump+0x2c42/0x4160 [ 1499.842815][ T4473] ? __pfx_do_coredump+0x10/0x10 [ 1499.842840][ T4473] ? kmem_cache_free+0x152/0x4b0 [ 1499.842868][ T4473] ? irqentry_exit_to_user_mode+0x13f/0x280 [ 1499.842903][ T4473] ? asm_exc_page_fault+0x26/0x30 [ 1499.842955][ T4473] get_signal+0x237c/0x26d0 [ 1499.847770][T20050] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000008 [ 1499.853741][ T4473] ? force_sig_fault+0xad/0xf0 [ 1499.858554][T20050] RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000000 [ 1499.863594][ T4473] ? __pfx_get_signal+0x10/0x10 [ 1499.868447][T20050] R10: 0000000000000001 R11: 000000000000004f R12: dffffc0000000000 [ 1499.873252][ T4473] arch_do_signal_or_restart+0x90/0x7e0 [ 1499.878187][T20050] R13: ffffffffffffffb8 R14: ffff888143b85800 R15: ffffc90003196000 [ 1499.883438][ T4473] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1499.889368][T20050] FS: 0000000000000000(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 1499.895189][ T4473] ? __bad_area_nosemaphore+0x334/0x6a0 [ 1499.900329][T20050] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1499.902532][ T4473] ? do_user_addr_fault+0x920/0x13f0 [ 1499.907541][T20050] CR2: 00007fad4cffbf98 CR3: 000000006c4d8000 CR4: 00000000003526f0 [ 1499.912443][ T4473] irqentry_exit_to_user_mode+0x13f/0x280 [ 1499.912483][ T4473] asm_exc_page_fault+0x26/0x30 [ 1499.912514][ T4473] RIP: 0033:0x7f1e87d7e719 [ 1499.912539][ T4473] Code: Unable to access opcode bytes at 0x7f1e87d7e6ef. [ 1499.912549][ T4473] RSP: 002b:0000000000000009 EFLAGS: 00010246 [ 1499.912569][ T4473] RAX: 0000000000000000 RBX: 00007f1e87f362e0 RCX: 00007f1e87d7e719 [ 1499.912584][ T4473] RDX: 9999999999999999 RSI: 0000000000000009 RDI: 0000000000000021 [ 1499.912600][ T4473] RBP: 00007f1e87df139e R08: 0000000000000006 R09: 0000000000000000 [ 1499.912616][ T4473] R10: ffffffff81000000 R11: 0000000000000246 R12: 0000000000000000 [ 1499.912633][ T4473] R13: 0000000000000000 R14: 00007f1e87f362e0 R15: 00007ffcd30c92c8 [ 1499.912652][ T4473] ? 0xffffffff81000000 [ 1499.912672][ T4473] [ 1500.127167][T20050] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1500.135352][T20050] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1500.143490][T20050] Kernel panic - not syncing: Fatal exception [ 1500.149833][T20050] Kernel Offset: disabled [ 1500.154148][T20050] Rebooting in 86400 seconds..