last executing test programs: 4m38.965925171s ago: executing program 0 (id=507): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) keyctl$auto(0x5, 0xffffffffffffffff, 0x200008, 0x6, 0x3) r0 = socket(0x1d, 0x2, 0x2) fstat$auto(r0, &(0x7f00000000c0)={0x4, 0x3, 0x4, 0x7fffffff, 0x0, 0xffffffffffffffff, 0x0, 0x6, 0xfffffffffffff3c3, 0x7, 0x2, 0x2, 0x90ed, 0x9, 0x0, 0x81, 0xfffffffffffffff7}) keyctl$auto(0x8, r1, 0xffffffffffffffff, 0x5092, 0x2) r2 = socket(0xa, 0x2, 0x73) r3 = socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) r4 = socket(0x1, 0x1, 0x0) pwrite64$auto(r3, &(0x7f0000000080)='/dev/sg0\x00', 0x5, 0x5) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sg0\x00', 0x10106, 0x0) bind$auto(r4, 0x0, 0x6b) listen$auto(0x3, 0x81) socket(0x10, 0x1, 0x9) ioctl$auto(r2, 0x80000541b, 0x38) unlink$auto(&(0x7f0000000000)='./file0\x00') 4m38.91469346s ago: executing program 0 (id=509): adjtimex$auto(0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) pipe$auto(0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_set_tracer_fops_trace(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing/current_tracer\x00', 0x20000, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) pipe$auto(0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_event_inject_fops_trace(0xffffffffffffff9c, &(0x7f0000000300)='/sys/kernel/tracing/events/vmalloc/alloc_vmap_area/inject\x00', 0x2, 0x0) write$auto_event_inject_fops_trace(r0, &(0x7f0000000340)="0400", 0x2) sendmsg$auto_BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='(\x00\x00', @ANYRES16=0x0, @ANYBLOB="000326"], 0x28}, 0x1, 0x0, 0x0, 0x4c894}, 0x4) socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[@ANYBLOB="1b000000", @ANYBLOB='^\x00'], 0x1ac}, 0x1, 0x0, 0x0, 0x40}, 0x40000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) inotify_add_watch$auto(0xffffffffffffffff, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0xfffffff9, 0x1, 0x9, 0x9, 0xf, 0x7fffffffffffffff, 0x5, 0x3, 0x2000000000000006, 0x2, 0x0, 0x5, 0x2, 0x7, 0xaf, 0x9, 0x3, 0x3, 0x5, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x3, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x9, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001]}, 0x201, 0x81) socket(0x2, 0x3, 0x100) socket(0x10, 0x2, 0x0) sendmsg$auto_NL802154_CMD_SET_CCA_MODE(0xffffffffffffffff, &(0x7f0000001f40)={0x0, 0x0, &(0x7f0000001f00)={&(0x7f0000000180)=ANY=[@ANYBLOB='*', @ANYRES16, @ANYBLOB="010029bd"], 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1300"], 0x1ac}}, 0x4004) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) socket(0xa, 0x5, 0x0) 4m38.012957794s ago: executing program 0 (id=517): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_IOAM6_CMD_DEL_SCHEMA(r0, &(0x7f0000001b00)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000", @ANYBLOB="01002abd7000fedbdf25050000000800040000000000aa8df1811c38284950960596f7"], 0x1c}}, 0x90) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), r1) sendmsg$auto_ETHTOOL_MSG_FEC_GET(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000080)={0x34, r2, 0x311, 0x70bd2c, 0x25dfdc01, {}, [@ETHTOOL_A_FEC_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4010}, 0x800) r3 = getuid() setreuid$auto(0x0, r3) sendmsg$auto_TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000480)={&(0x7f0000002340)=ANY=[@ANYRES16=0x0, @ANYBLOB="000426bd7000fcdbdf2514000000e20101800800ab00", @ANYRES32=0x0, @ANYBLOB="7e00078004006d800400d2800400798014cb93afcf7f1acf587700777b2529ba72548d860732b2f560bb4d6f3b95e00e7fd7530f7d281fd7dc953e641acf26543d813d8afb3b7625a13b1ab0f8c19e24964c3200ed67b40377957e01a3aa67ec86b91593092e9cea5ce4bd7ef4482959773506d93f7c08000700", @ANYRES32=r3, @ANYBLOB="00002000138004000a8014001800fe8000000000000000000000000000bb0400d580da4622c20a816343f82b3d9b82aeeb7819a4720a44887d549c31f17f392f92e1b0b23b598486df6b707a271f958a10dba0521ddf3393d6478b3ee7a78460d0829a6a946ffe27ec502cafef21d3ab08c5d77e42f6865f29699d3f648ff1b200a84040190c05d456c4c33eefd5642b0c007f000e76000000000000c30045800400278009d4b7a982e1c6804ad3842e4c2a1e8e97e6f9a2263040084406ddadff3029530be573d3a49c1897f6743d740c2c1b9c797a02780495f5b087eb6a5bda3923a075bf52d631bf8de7407e819ceec4d0bc669a753c550d6206f279c5c57ac7aa4bc51dc99bfeb50d48e790ddbce2a562f5d49abc4e03d2fd782b32560ec3f86062bd95c816be71e56fdaf2930400dd8009cf801550c4dc0a00e1f3cfe3ce0e9a6725d7daa133d38db3ff37f3998439e8245c76125cc27b1caa5e07ee000000150403800c001e000800000000000000f92b0395800400d680d31137cfed622ad05cc1c6a1d2d57c0089ce185e82a07ff5c4a36a4cc900007d136fc8c075272af9ec05adf8943dc0acd2a599960aea1b93933bbdf34c7ebae0d357bc83ed7420a8c9c2fd22c6fa22daf731af94fbe963e92ab64dd473effe8677238d190a80db5115a3a1ebc3e6fbf83dd6c8365b1f2c404097bac11dde22248b68d95d0afc2aa0f37268a30f18f3d176b6f998c38159fc2376a52ad833b83b3cbedc4ebe34c21ad563c2688c595462f12861ddff901dd20cfdf3187dbc7562b81b0f371c92b2e27685fb94e4d861775364b4c6a67c1da023c204004580082937f47a68b9cc3335e17713911ca02a00a9b1abf5293a0cf7ce2188fc05b69b44a1fc8085f0f083aa55aca1645d6151bcadee7691f3a927084fa696a07927df1e2e41aab1583d5f7ebbaf09d9822cfe50b0c9ece76aa1ec7ba449273760b3314989eca5311e608146ec92f5cfab3e1858d67e039a1e039288d6211fd2b7d784ca9f4257a92a9981673ea4d8ed8faf277b343139d1bc8821297edf0c3d39cd2b7069ebc5a790b2c7c082ffcfd2487137cc0f0fe21e1191f7666b6681832edd343647171aea2b0aeafacaa51ccc40a61f29020296a970542f5456c556989ab649b93647577418c663f6c8fa4e9488d97ad02ea126644950dddff9fc8ae19984255a58078427fa372440178539a63afb53deb2bd5bb7d7b30d80e31231f1eedcb4b28ce8f91edb056889add4e058ce182faf80bde38908e43dd1feda70bd1338ca99d498e21a9501033ce3fab7e6baf424ef315d10ca39605b4b6fd4f0f5ff496999a26d82049d8a846faa3fce0da38b27351155f833927dbc7f58f97b9bd91f7850d9171e8d61a035a4c052ac9b2834ec0ca355a7acf130ff190017899b2d292cc67692695ac7c214eaf758cd600c007c0000000000000000886e00e000e71707eb841c8a0ae9b2820e88e3b09ca791e6548091e20ffdfbd480388a8a738306973054776698596be3ddf1246df3f39a4207f17c89e821729d1a42e9a06152f9ae573eaefd8e1142c0e5d685e374d99f0f09fd63e03806204ce039910d1100e53deee2f5316e014b000060b70610eb9c1c13ebbf7b781c57ddcaac1388e13437eebdaae44d1c7b9380b1fb09073d21340024002a800400078004000e00040040800400a1800d002c002b26675b5d5b402500000000b4003c0072d599820a491178cdcdf4e0d3745f4a35d219416be2a72edbc5b4a36b1ac1b361d03f4ccf0c1b86ba639f971f24525f45c7c340ae77001b191ff74b202c66dcc1f6b6642a665117d39a9b7a19d80881c36dce3e872ff56e59992998fc3d8b8af35123458a7eb5282665e3cfaf90a10f8de8d268997ff3379b2b78c67563789de1057f6af54030589adab5af457d88cb9da3e1d8fd1417a50b54118b641c6bf23a3e79a7593edc728d214b03b568f9b9000000670000008147bcfb567e3b48c05555baaa2bde4f8c69098be088c7101efb4c775e7112616aa2269dd328df441bd0d4cfecc0ee580ffb75abee85c3eca8ac8c221523b690b882b21c1b6f8380948c19b72da21289e4e44fd875352f30cace151ee46889c8a6e41200ca000480dd9316943a7f1b5c4f5c4ac0cc61e7c9e7fd35474c30f508f2e6e7674a3c2090a115a55e535d8068d13ea96cca05e8a79f253083ecb0da870342ee08e32e55e54673b311f86382db1b0bc56f3b90f9b52bdeff470b3663dea330c92c99006bd8ffc9d36b9e3484e4a952559c0bd5f81aacfd31ace283fc274c60c0726bfef6da865553c6a39a65544c4af3f1d5af1819b6633b3f52c6276b5095a18bc64358e4d5efcfc184d183926e3541bcc063200dad9774d7f2d86d9e41799d32ab5d3a76e0f80f6c1c680000be100980cdd4b6ed9b2f7c010d8cbb579ff9b054b9aa7cc1c618145395fd2befdb8204f5f6672d67ccaebfafe6bcf361b455500d83194d66acfe930c292239493c4c6a0cdf5892a6fcf4329f60d182b7fd8398688efda233f44b5c7d4874edf1f7d1b495e6a9a78c6879eda902632045ee1b426388f2f0b09dfd50e091aefb638c24dbfd6fc0c8eea18fd7ad07edf5dcbe26407adcc9c14764b9aaaacd8202f68f0ef35d41194f00e4ed8a957fa4100f2f1693c13a23080002007f000001ac5fcc336291d7d5e642f9f4a3976c8b62a53595d7fbf1a42f7399abf164c9276bedfd98f9f5e7d223c140ce154dddf00fb2a787b31bca443ad68c36388af79d1bc02df30ddfc75e098e4e592712925f2851c704c2f5b510d051b0ecba97491429995c0f9153aa2b23425a4bb01158451c3b29b8719d7b28c4734b5afb77bf790d693533c6f6622980683be1ae44539555042e140bbf087be92c45f4b012c5ea8403de3065905d75786640ae9ed7499ef15dd1f9dad855751ee51178a6d7593966a434f3fee210f87b1b00c34c54de82dc0ef309574a3f9c8b882844c4c6f78fb1e9a0b2c069e95ed94a13eee32ef55e374a0bfe51e3ba7cfa1b7b68d948b18201b622050158ef5cc4b2351f84f1bd8ebc10e2a84e6d574710763cae208197b3979808143807c41d3e30de72abba3735c59f72e1414c4a84ddf8ba5a7a127e8ad293afcfd313db3caf39cd67bd8ddebd41b526813f57d2b834b8a767108a4ed2b2ee783255579640d713a995c2aa670b98fb1dee7ec69466ec876367f848863038f4a9c7faea3badd422aec13af3872b957511f88e32c5b1fe32350f979bdf82115611bad0625f022c3de5f07171d9ddfed799db5c556bdf796d5ca7db05a3f85ea0448eec3c8daac52c692ac60d8358cd73cd572d481f5d6287fa5856f351d3b57b6ec48b0e47c335f31625e6f8ba43eb2e3215a0b261bb126f30bd956f976e4ce14d6f1e96d1d5be5ea46e5889e6afd2e247d00164e41438c221f5e773934d666917cf9d2a2c7d878b52057067e6505e41668b162e97d2119b71f8c2ac9f24bf5b1e17f2517c61179f33dddb782784d25090c5cf28f55f1ce9774b7139518b1d0ee88813172cb9fb2dad4aff7d16b077e883502e47fbc6b471bf9bf98cd1d2f8959416e46699b8282c5579b4d63895e3df7b5ce2c42f76846158e74c3191a3ecc2691fd85591ce404c8c5c2229fb08d3d85bd3b086732f53dc2aa087ba8503775be72a2f06818f22d4b90cb9344bc0338759b62c6765521e118665a2858691c102a7944e8f729fc69e68a89da989a6d7e3907a84938a30ef7be8c738ace23e46ca5f98a5fd27d921521dcf94df0e89cc1eda2848740bf0bbcfd74b45b2c34d5307d546b3125c602f38866e4ac5f56f5b5a736e19ddc7b705afcf16cc67f6973afff426f5008c711d25895427b70ad66fcb596ffaacce767d93070c268cfa283af455921ebf85ba115108fb3d2fc80d9bffb636f66a5e3d2f37dccdcc9630ad4880fcbc58f36539f692e36b5531c197716b76d5622feb76b1e286d08b33610a2892af4f70be00deb051c916742aefd2581344a976ab0ec587e7b49ce670fbaef74c0bb02b47c74b43fd72ed4aeec61eff944966f1c46d6d16853bb2543f6484b4dc4e54a167153a74ccd3c05829b11b06d3fb36c7144170d2fbae00447d2c9afde99e61dde395b66ed56b5a381289e116e0a6bbee11dca1477efaf9d438d76c2911acc664d51ed11c25fa9d58c90a90c0215f038ed370bfe82a91dc629b99abebca1eff7d60a0fcaa1cd5b50e86aae2c66d1494d856bb9fe04de31fc4be2657b8bc3a7806cc828cd4210160960c3bcd0a81c557f603d3bd7c3347ef6ed07c2e77b2cf536122e8e6c8813d4c35b2e68feeaf0c13ebefc677d5678aa517f45681f290826827df900216e40900000000000000587e78651d1dc8279d3a4fc5b60de0419b57c1a36409f33531b31afd2073967a9c39f8260d7bbc03986c791bc1bfb493aa2ecc8a7c95996cfef0888dd5486430393118d0dd999bcdb31ff2eacc9dde70f2d38b58e381bd5e58d0294086ff7358bd4fe75013e9939875f315be15003cfd0ad5c16fa0ff75008bb32e20f90bf383c7d82dca273ce2a38a9c22df5acc9267b5ae920173365e51d32f85eb42718f7c44a39307918f7893e30e62f0c5f1ac2505b9929683e21c6b0030ddf1fe1c78fed247f27592e582ec11bd3e5cab6c4713595a8fd5e0c77969536302f602a191b56440d788eb20e93028d9ee96979809b42c4a218ee3d601137860e39d5fbcb15d21cbc54d4bff7c15f5550d961ef1e6ef44dbf228b14c773efd202f6ed023da6a17d3510c967892c120e09340cf03fd494aaa69f39237f42c5d60030d9f6eee9d3ab2322a2a690d5db8012e78203d8a24e998feda1380aaef19af8eeb64e3284ae2bc25b02219697e991d6a6871fb3f4125ee7d4c7e09e896ae9b56e60685bfe1dbdd14958564fc992fdcb784b0b2e0f393a4ade841d7684043049c09b663e3c6d4fa619f8d9e7dc2d37245320c5118adb1863f5a2edd218629bdff65e3ee1c20ebd1dbd152e1f4ca6ea1775cecf8f1b1d63e7103215949580be3da635649c5101dea1ab035e4564cd9124b2c88de042d4e102ca2a7ea9d4ad125840a6b4da68f5e0e118ea277af58cf174130807e80708378838287c4064997822a2f987e87f32b12e673ed08437a11bb9c62b5bf92abe6454a03dceadab5aa06a8157e1b38b030da9919ffa522e4f2d5356a984585e3f4bca5c3ac9391ecedbb17123882863ddc1df3b83392f8100c3677b5889f33ed00ef9d674c79db0ce2a3119f9a25153c629885f7e8b7010fa32a58597e72ffdba39a91a83fb3318616c4762483a13b6dc8db08de2172ef381edda06abdd555cd9272d8d1926129d5a5542fa48add7b5833b1f997187dc47299125198dad603da35ec0dd9dc28a2636b6d1777e79f2612aae131f4cafa87148048c57dedf36ca46ae97d8266e37657bf0f709cffb764ef6fbf9fa8e64a7ea5db609d18ee79af975550bb37945c09af88ad093f4df97d53b876ed16670ab11706d5dfd69cdf92e14dbae7c73b667296de13b19f044775f7ebbece3524c51b028e989c40ad87cf65fa52687cef01b99a45d57294274aa2a6aeb909f1c229a88742fb5135041f71cb19ce45a504aad0f5303ba547d962094bc052fc34dfdf3bfbed76e3e0a2976f60e7cb8c172fdde35f70a638f7c76c10398ed5c4bc114d11e987443c96610dc52505c6b61b5ecc6209e7acc8044ee520388ab822faebfce0c3f210bda19fca1fa047b0fd77a10113730ef0f9571e9ab8dfb84a81933ed9c2d14022f2c82ac792bab658c973cc323bca181d527ce0d1b9409fcc890b20e3a54ac904417dee186409000000ce8607d1a762dbc681060a999b6830220e18882778510009f5383faa549129790f70b162bcfae039361f62efafcc686b1cab91b24ba82940397d0874c30718607520c210ec2813a3088d54172e730be10bf49e5a89b18606f313a8bb251f323c91b5c87240096c2be9b48c139cdd004132ad4725e1b1cd9d5a076b0df0910b56d81fb994e501968b61fcdb47a03a80e58bbd51c1d634a511d03c4c4f04f63398714fa23affa49f577519e84ba142f97feaae57dc6e3f5f6250a482d32127281f6f74c609c26603af57c6b5078139cca8e62ea310b79d664a77c91d755b7949f2c1476f5fd896b646756966345b95bf36ebe6bc6b59a7b8870f51369e4bb2779d1c6c4ab84b9ef9a9cc5b697097c86e46324b4b7a6bbab374a0570ae5cf87760aff36bbec92e66878f0945f515535c31e440af7c5e205c05e27298c065a9949ebd10022e9715b19c640f1e2f7e483a7c146bf9e68ec4dc62c91813deb6c7f2f437568fe4ee336bac653ec91fb739c0d49a49b66e07816e943c7c8466d6057c4c77d991fdd03f5626ca1a27d62f9ae5f417a9e3abc237d9ed639e9cc4042f2a3fcd48d76ec06aba73a391bdff3febeff245b9af8297cfaf5d55b948ab36570879e83957e4d0daae5a63bb3adcd9473245cff4fafc1f6394ae452ee3516ee4dc5e4d7c41202805ed55d12e4da5704313e05040f5858e71dd34da8832f8b3a224cdb95b748c5530670bdd6f4726e2804d57289184c0eab5b5c9a49977a0ab848c6e6e7345fbe885bb30b923a10e99d19090a48d8f88d2db5d830a2b7271907adff36ea7745c2deff573c3ff8e2cca52623550cb5a56cb2769d96b55856f96c939d75474e9146cac81348329b1bd8549da23d5bfe90769fe33fb0fe9297e58c9d161db955fe23db594f1f6329b8f63ac9c2e1720f4b6b862d359ceaa917406a110fd4623dae26e53720a6648d00fbb44ed3aff173e7ff9e8db19a4ee1d7051331fa90da240c3933e926df89e7a7279065b2ba4ccbba5ffeda4840aea6c09d5e9fc9fd7bb9e394c38cc4ace12e36d5506f3251a12986e837266fa69a5f34de4d38caaf55a64957fd8774486690cfd1ce34a13689ec94b705b268c06159c79396502445e64f210f75af0bb360fe9ffb4384f0ad158b44175ceea62bd4afb06b62e60ccb51b738d123e3fc4e9a08ec82afc7e3ea1da7e39e6a9787668e75972e7f1dc43fc2576ef00bab1f6af21ec9eec2dbd9d0c192c9fc007e3cb39f3d80eb60caa7a27316eb225d085b30445de3ec1b4fbc5a27b11be1299cb77648ef30138f84b594e194f8bdc69ff4768ecda1fbc411d2569401a59b73ac63b128a1786d7be3914917efc1cb3658530586dfdc4aa1217a9e2c4105854f1d2deea7d055087e552d2f536ca8be546046eae22b09ba4cbde1449bb67507116163fd95ad6f79c8f46b06de18158d94df60a9c27a52339c4c5c26494dd0c652f35cd0dcf144344156d225cc0839a262ea59a3730f265b07baad239496111749c0945ea296148d480869c772278ec575324cb80fae06b49ca1eb10dbaa1020eef630a4d2c99427a4fba279a2666c36a4da545e5b01e4bf3254904d580e661a4b674668016c28813688c1c10421515157b389ceeeb0261e046ad4f07a6ca318d83639fee86c76eb991a86a6d26c74f9e180d9f66f2bbbd639b3d9c2498701aa346436a9cee4c60e8e62871aa52547706386f4964d447acc0b1d21ec47a76661ae750951981dc569e8b73e34f42a64e1de9e3c901760c68fd24037a03e9fd82feb8afd3194f96c73cb5b9243824adc5b3e3207c78b96a924c79ba35d7ac618b31a4679af8a997f666497dd374a568704b078d2e6b78418d59af3111ff08668377daa2a074a34ac85fbd1b729dc772ad4a40e6c758cd96c65fc7a590af0f810c5ece4d9e717448d53ec675041b725010ea7623f9734a19a635b46322c65371e72e80c9ab6b722957a105699779d791edbca571aa767a0676b062636d64c4938ae40fdde5e7e9e1b8804113626a8b33dc7fbd484d307d5ee26b37d05a44eb50bde9168e7686c06593af3fef39b19b8780c5654ce29c898d388e9683249ac6e2147ef9f3a94d3cd2fdb97b3bf950332cac36909a64dae7c09e1b9a41265e60f0b8e7d9615857f4873561487d51935365d9ecfdf008bfe35f530849eb1274528e65007a1e330690304240859e5ba4c3b914e0c6e4bff8e67e42187df360a7850dbd621dd6679b70d8c972ac722658b9944bd98c4950d3353eef842dd1653df527e3c36070b0223fc523559688138230586a5a44d8e9b6169782aa0498d9a8e87eb540104321b8879d6dbb92e6bff349fd9805d41b00ec5de7e9c35be792e0dae91679c5eb5bd3d7c2eaf746feea8feda0fade08cb6ee0d8453b82af02111d0b8d32bbe2c78569c9bfc932255f6a80abbecafb8e6c7426950c58b8f844c4baa7fd3c4739cbdd095f0190911ab2a376bfec079fa796e2944f9ec34456ca33a01a64ba2f9a2078eb92568a3fc404be5d25a09ec0e578c84b03b1ead0aed491fa036e192030689cf70c44484930cb8564c8c9949d7fb383174e3d00f4129462c62b29c40c415bfe41d54d0ccd8c5142a0000f4000480f0003b8004004080d521989ebcadbd6e3ecf9698cc201ad0fcc5fbfe3cb9a1eb1efc1835e0d0ddc27e80d8f1168c9ccdd3eaea9fa14e70ceca4d5b859cd7562b8849fa4272637a6eece856a63883367508d44196aae12b2ace7adfa10c00c00004000000000000000400ee808300eb0065fecbd6e229fbe9c4c95b9d1b8e432471fc5c203047827781a3ac0077d9d8ecc76082f0457b924bed3e6e46777e750e63a84b1b2001e4999bdd389b55f5bff88a0a7512abfd8863d7184237e7d12f5167434d2dedc55665c56ed488e8128f0bffa3be67c201be495f2c7606496a626e6027358970eb2bfa3a3f6bae508be4", @ANYRES32=r0, @ANYBLOB="0c00168008003600", @ANYRES32=r1, @ANYBLOB='\x00'], 0x1920}, 0x1, 0x0, 0x0, 0x4000000}, 0x8000) stat$auto(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)={0x9f, 0xff, 0x80000000, 0xd50, r3, 0xee00, 0x0, 0x1, 0x2, 0x0, 0x0, 0x1, 0x2, 0x8, 0xd, 0x1, 0x331}) keyctl$auto(0xf, r3, r3, r4, 0xc) keyctl$auto(0x4, 0xffffffffffffffff, 0x5, 0x800, 0xa) r5 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/keys\x00', 0x8340, 0x0) read$auto_proc_iter_file_ops_compat_inode(r5, &(0x7f0000003c80)=""/4121, 0x1019) 4m37.86349447s ago: executing program 0 (id=519): r0 = openat$auto_ftrace_system_enable_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/tracing/events/vmalloc/enable\x00', 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/net/nr0/gro_flush_timeout\x00', 0x163802, 0x0) mmap$auto(0x0, 0x8, 0x1000000004, 0x9b72, 0x2, 0x8000) setresuid$auto(0x2, 0x7, 0x8080) write$auto(0x3, 0x0, 0xfffffdef) mincore$auto(0x3, 0x8, &(0x7f0000000040)=']@\x00') mmap$auto(0x0, 0x2000a, 0x10000000000df, 0xeb2, 0x401, 0x8000) socket(0xf, 0x3, 0x2) uname$auto(0x0) setsockopt$auto(0x3, 0x1, 0x20, 0x0, 0x9) write$auto(0x3, 0x0, 0xfffffdef) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mlock$auto(0xfbe8, 0xffff) mlockall$auto(0x800000000000005) sendmsg$auto_BATADV_CMD_GET_MESH(r1, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, 0x0, 0x200, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_MCAST_FLAGS_PRIV={0x8, 0x27, 0x9a0}, @BATADV_ATTR_DAT_CACHE_IP4ADDRESS={0x8, 0x23, @empty}]}, 0x24}, 0x1, 0x0, 0x0, 0x420c0}, 0x8040) madvise$auto(0x0, 0xffffffffffff0005, 0x19) r2 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000140), r1) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="180000007c9727bd2e45c130bb239c97dd53383369b054bea42839107161ae03b428737892a8202c2fc1ef330582ba725cb8eea85b602fd379ee468b2e78c6d08ddc15a314c01d0c0db6dd52a903ad5e7a9e88bcc83313f821264f4a7493b133473e66039ab860ddc2ca3f9d0eef2cd273d9607f11a8b20f677582233f9f00e955abfccb69a0279e59b4e7c7e9b0067dd5", @ANYRES16=r2, @ANYBLOB="010025bd7000ffdbdf250400000004001d00"], 0x18}, 0x1, 0x0, 0x0, 0x41}, 0x4004040) writev$auto(r0, &(0x7f0000000140)={0x0, 0x9}, 0x1) syz_clone3(&(0x7f0000000380)={0x20200000, 0x0, 0x0, 0x0, {0x6}, 0x0, 0x0, 0x0, 0x0}, 0x58) 4m37.642994499s ago: executing program 0 (id=520): syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYBLOB="4491f189c93b349bb6751ab3", @ANYBLOB="5cb04505669709e465251500000adb"], 0xfdef}, 0x1, 0x0, 0x0, 0x20000000}, 0x22000005) mprotect$auto(0x401, 0x8000000000000001, 0x3e) r0 = socket(0x10, 0x5, 0x6) write$auto(r0, &(0x7f0000000100)='n>r\x00\x04\x00\x00\x00\x00\x00\xfb\xff\xf7{OZ;\xe5\x8d\x94\xd7\xcd,\x0f\xd3\xa1\x84', 0x9) mmap$auto(0x0, 0x400008, 0xdf, 0x9b70, 0x2, 0x8000) r1 = io_uring_setup$auto(0x6, 0x0) getpid() r2 = fcntl$getown(r1, 0x9) capget$auto(&(0x7f0000000080)={0x10001, r2}, 0x0) r3 = getpid() process_vm_readv$auto(r3, 0x0, 0x1, 0x0, 0x6, 0xffffffffffffffff) r4 = getpid() pidfd_open$auto(r4, 0x0) syz_clone3(0x0, 0x0) open(0x0, 0x22240, 0x155) mmap$auto_fb_fops_fb_chrdev(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x100010, r1, 0x9e) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) io_uring_setup$auto(0x1, 0x0) futex$auto(0x0, 0x7, 0xb, 0x0, 0x0, 0xb) mmap$auto(0x0, 0x40009, 0xe3, 0x1000000000009b72, 0xffffffffffffffff, 0x28000) prctl$auto(0x9, 0x1, 0x4, 0x5, 0x7) ioctl$auto_UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, 0x0) getxattr$auto(0x0, 0x0, 0x0, 0x0) io_uring_enter$auto(0xffffffffffffffff, 0x100, 0xffff230a, 0x9, 0x0, 0x7fff) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) read$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) madvise$auto(0x0, 0x2003f0, 0x4) tkill$auto(0x1, 0x7) 4m36.837211175s ago: executing program 0 (id=525): socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x400008, 0xdf, 0x800009b72, 0x2, 0x8000) poll$auto(&(0x7f0000000d40)={0x3, 0x1, 0xa}, 0x5, 0x400) read$auto_proc_iter_file_ops_compat_inode(r0, &(0x7f0000000000)=""/170, 0xaa) setsockopt$auto(0x3, 0x1, 0x20, 0x0, 0x9) 4m36.490798057s ago: executing program 32 (id=525): socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x400008, 0xdf, 0x800009b72, 0x2, 0x8000) poll$auto(&(0x7f0000000d40)={0x3, 0x1, 0xa}, 0x5, 0x400) read$auto_proc_iter_file_ops_compat_inode(r0, &(0x7f0000000000)=""/170, 0xaa) setsockopt$auto(0x3, 0x1, 0x20, 0x0, 0x9) 3m57.547186537s ago: executing program 3 (id=760): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000010c0), 0xffffffffffffffff) socket(0x2, 0x1, 0x106) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) r0 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)={0x14, r0, 0x1, 0x70bd2d, 0x25dfdbfc}, 0x14}, 0x1, 0x68, 0x0, 0x4000000}, 0x0) mmap$auto(0x0, 0xa, 0xdb, 0x9b72, 0x5, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) r2 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x5, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) rename$auto(0x0, 0x0) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, r0, 0x800, 0x70bd2a, 0x25dfdbff, {}, [@NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0xfffffffb}, @NL80211_ATTR_TDLS_SUPPORT={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000060}, 0x20000010) timerfd_settime$auto(r2, 0xf9a7, 0x0, &(0x7f0000000140)={{0x0, 0x2}, {0x3, 0x6}}) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) sysfs$auto(0x2, 0x10, 0x0) sysfs$auto(0x1, 0x1, 0x15e640000000) madvise$auto(0xfffffffffffffffe, 0xffffffffffff0005, 0x19) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) fstatfs$auto(0x3, 0xfffffffffffffffd) openat$auto_msr_fops_msr(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cpu/0/msr\x00', 0xf82, 0x0) 3m54.221183183s ago: executing program 3 (id=774): mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb6, 0x402, 0x80000001) r0 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snd/controlC2\x00', 0x80, 0x0) ioctl$auto(r0, 0x40045542, 0xffffffffffffffff) ioctl$auto_SNDRV_CTL_IOCTL_TLV_READ(r0, 0xc008551a, &(0x7f0000000000)={0x0, 0x0, [0xe, 0x3ec, 0x1, 0x9, 0x1, 0x8, 0x3405, 0x24]}) r1 = socket(0x22, 0x3, 0x0) r2 = openat$auto_mISDN_fops_timerdev(0xffffffffffffff9c, &(0x7f0000000000), 0x102000, 0x0) ioctl$auto(r2, 0x80044940, 0x20000000000000) ioctl$sock_SIOCGIFINDEX(r1, 0x80044943, 0x0) r3 = openat$auto_cgwb_debug_stats_fops_(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/bdi/1:11/wb_stats\x00', 0x90200, 0x0) open_by_handle_at$auto(r3, &(0x7f0000000080)={0x9b, 0x6, "cbe46c572ba62e260e552fe4e3424b0c4de3668f944988b15e16e8e2bf3d6f223271fcb2966d15612c481edd14a0c0ba37c9b5c4d4eb6e12696fb04bd5d247f6eede47d66649c4b5a7e4478a9e99c91235eb17afe9d606903cfcefc2ca2afce5864d054acd5126ea2bb51a801782bb2b379b073ad1f7edb527a9780fa173895f0b0bfc7099debd917fb1fe1310053f3d53759b830933c9fc57bb6a"}, 0x1b) 3m53.51152363s ago: executing program 3 (id=777): socket(0x2, 0x80002, 0x73) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket(0xa, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x21, 0x2, 0xa) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1, 0x1, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x801, 0x100) socket(0xa, 0x3, 0x6) r0 = socket(0xa, 0x2, 0x88) bpf$auto(0x0, &(0x7f0000000000)=@link_update={r0, @new_prog_fd=0x4, 0x4, @old_map_fd=0x3ff}, 0xa3) socket$nl_generic(0x10, 0x3, 0x10) socket(0x18, 0x5, 0x0) socket(0xa, 0x2, 0x73) socket(0x2, 0x80002, 0x73) mmap$auto(0x0, 0x2020009, 0x3, 0xeb2, 0xfffffffffffffffb, 0x8000) mmap$auto(0xffffffff, 0x9, 0xe, 0x1f, 0x3, 0xe0a) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000240)='/proc/self/net/ip_mr_vif\x00', 0x181580, 0x0) 3m53.335802354s ago: executing program 3 (id=779): r0 = socket(0x11, 0x3, 0x9) capset$auto(0x0, &(0x7f0000000000)={0x1, 0x6, 0x48}) sendmmsg$auto(r0, 0x0, 0x2, 0x100) r1 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(r1, r1, 0x1) r2 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_RSS_GET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="01035a00000000000000"], 0x14}, 0x1, 0x0, 0x0, 0x604c837}, 0x4010) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), r3) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) socket(0x2, 0x801, 0x106) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sendmmsg$auto(0xffffffffffffffff, &(0x7f00000001c0)={{&(0x7f0000000000), 0x5aa, &(0x7f0000000100)={&(0x7f0000000080), 0x5ea}, 0x5, 0x0, 0x7, 0x1000}, 0x5}, 0x2, 0x100) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) io_uring_setup$auto(0x6, 0x0) bind$auto(0x3, &(0x7f0000000080), 0x6b) set_mempolicy$auto(0x1, &(0x7f0000000000)=0x5, 0x40) sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000003f00)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="2f212cb97000c2ebdb3357c089cb08000300", @ANYRES32=r5], 0x34}}, 0x4000000) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'sit0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'vlan0\x00', 0x0}) sendmsg$auto_ETHTOOL_MSG_PLCA_GET_CFG(r0, &(0x7f0000000380)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES16=r2, @ANYBLOB="00042dbd7000ffdbdf252700000018000180140002006970766c616e300000000000000000003800018008000100", @ANYRES32=r5, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="080003000000000008000100", @ANYRES32=r6, @ANYBLOB="140002006c6f00000000000000000000000000002000018008000100", @ANYRES32=r7, @ANYBLOB="14000200677265300000000000000000000000000c000180080003008000000054000180140002006272696467655f736c6176655f310000140002006d6163766c616e310000000000000000140002006d6163766c616e3000000000000000001400020073797a6b616c6c65723000000000000074000180080004009a0000000800040006000000140002007663616e300000000000000000000000140002007369743000000000000000000000000008000400020000000800030000020000140002007767300000000000000000000000000014000200626f6e645f736c6176655f3100000000"], 0x158}, 0x1, 0x0, 0x0, 0x20040011}, 0x8000) 3m52.843803373s ago: executing program 3 (id=781): close_range$auto(0x0, 0xfffffffffffff001, 0x2) fcntl$auto(0xffffffffffffffff, 0x40e, 0x0) open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmmsg$auto(r0, &(0x7f0000001300)={{&(0x7f00000001c0), 0xf2, &(0x7f0000000280)={&(0x7f0000000200)="670c73c2646fc32a5155600e2733ac63f5469be8516e75fd95094b142309cf4ae78b4e2da71cc95699fd1bf22d95a10288e6040ece289e141ae73b2fd5517fd91e8a2ebad746fc029f93c58146b0e43448dd515cb206b42ad8d97cbef98c70261c2111d7f9e7", 0x1}, 0xfffffffe00000000, &(0x7f0000000300)="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", 0x7fffffffffffffff, 0x6}, 0x3}, 0x38, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) (async) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) socket(0x10, 0x2, 0xc) (async) r2 = socket(0x10, 0x2, 0xc) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000013c0)=ANY=[@ANYBLOB="18000000", @ANYRES8=r2, @ANYRES8=r1, @ANYRES32], 0x18}}, 0x200080c0) (async) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000013c0)=ANY=[@ANYBLOB="18000000", @ANYRES8=r2, @ANYRES8=r1, @ANYRES32], 0x18}}, 0x200080c0) r3 = socket(0xa, 0x2, 0x3a) bpf$auto(0x0, &(0x7f0000000100)=@task_fd_query={0x19, 0x4, 0x4, 0x800efc, 0x100000001, 0x80000c, 0x66b, 0x4, 0xfffffffffffffffa}, 0x6f4) setsockopt$auto(r3, 0x29, 0x1b, 0x0, 0x8) (async) setsockopt$auto(r3, 0x29, 0x1b, 0x0, 0x8) mprotect$auto(0x1ffff000, 0x8000000000000001, 0xd) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20801}, 0x10048884) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x181000, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/module/pci_hotplug/uevent\x00', 0x1a1842, 0x0) (async) r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/module/pci_hotplug/uevent\x00', 0x1a1842, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/neigh/lo/retrans_time_ms\x00', 0x80001, 0x0) (async) r7 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/neigh/lo/retrans_time_ms\x00', 0x80001, 0x0) write$auto_proc_sys_file_operations_proc_sysctl(r7, 0x0, 0x0) (async) write$auto_proc_sys_file_operations_proc_sysctl(r7, 0x0, 0x0) getpgid(r4) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) (async) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) syz_genetlink_get_family_id$auto_ipvs(&(0x7f00000001c0), r5) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) tkill$auto(0x80000000000001, 0x7) recvmmsg$auto(0x4, 0x0, 0x10000007, 0xe, 0x0) (async) recvmmsg$auto(0x4, 0x0, 0x10000007, 0xe, 0x0) close_range$auto(0x2, 0x8000, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r6, &(0x7f0000000080)=""/182, 0xb6) (async) read$auto_kernfs_file_fops_kernfs_internal(r6, &(0x7f0000000080)=""/182, 0xb6) write$auto(r6, &(0x7f0000000000)='9\x00d1L\xff\x15\xba\xa17=(\xc1\xf8\xff\xff\v\xb5^\xa1/[', 0x8) 3m52.041680495s ago: executing program 3 (id=788): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_SET_QOS_MAP(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, r1, 0x8, 0x70bd27, 0x25dfdbfc, {}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_WPA_VERSIONS={0x8, 0x4b, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x8080}, 0x24004004) recvmmsg$auto(r0, &(0x7f0000000480)={{&(0x7f0000000140)="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", 0x1a6, &(0x7f0000000340)={&(0x7f0000000240)="23536d86c2fefa2b84e4e995fda36f58cf4d10d19f6125fc3b69b28a076ced24fdbac1817f1a9498d9a0d951a0cff9d6eaf72c0d4422467c1216704bc1cd08321919678a9be06efef1a9a2fe1f175f9af2904614e8eedfa35dbad77b8b278ec6879f6455e802ced1f8a299a2fb07a4eabac1f3689aafd88eeef70033e41896fce9f1011cc2ffb7a5db571568b0d0f1de9701abf9de1ecd236bd2d51c3f9ee8ddb95e564937238d882aee1a0668bbcadddc2ceace394f0d760ff8f74ea5ceda78916191", 0x20a}, 0x2, &(0x7f0000000380)="ea1e2326e756f8aeea1ada79e777ebdd17745ca924e7116c4ad49f4cb9bb58bb168c8035ed09687c0b15de8a902762ecf943380ae49513b393b1bbeb8ac71173b4d167e3289e2400722ba83c3ce94f91c139277dd31b5061eaec5aebafd974dd480aa76da27fae2354962075b157b192f30c833593051e7efd9c9046141c3b0ad4adbc1d3ede64103116ff4d73aed9a3b1483b032a2376bcfe1c9f68300df5978ca9a062858f5b5036166c69633d0cec1632fe9620a611d9f661ab065194a9aac3f9f1bd6a810f016d1b5dce5999fb5b658ff335e0cfda41a0f54127ffc34fa3846dc50598a343de5e662784cc937b90c61a56da91642e", 0x10000, 0x8}, 0x1}, 0x9, 0x2, &(0x7f00000004c0)={0x9, 0x5}) r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000540), r0) sendmsg$auto_NL80211_CMD_GET_COALESCE(r0, &(0x7f0000000680)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000640)={&(0x7f0000000580)={0x8c, r2, 0x400, 0x70bd2a, 0x25dfdbfe, {}, [@NL80211_ATTR_SMPS_MODE={0x5, 0xd5, 0x80}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x40}, @NL80211_ATTR_IE={0x66, 0x2a, "889c24c6f01be27770dda5a1b757c8f51a0f4d983e6c01b4fb2b21aecaf47b66736d2fa9fc4291a4533480eaa007d8408f785b70bb18696248f9c714a2bccc7d27b382e89c28265fe06f88240b56540ab0590d28bbf71e68fc2988b63b633a270318"}]}, 0x8c}, 0x1, 0x0, 0x0, 0xc014}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000840)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000800)={&(0x7f0000000700)={0x100, r1, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@NL80211_ATTR_STA_SUPPORTED_RATES={0x1d, 0x13, "1f53265a180c9c94ce2d5b0422432ab4a6520142a46dc31cf6"}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_DISABLE_HE={0x4}, @NL80211_ATTR_CNTDWN_OFFS_BEACON={0xb7, 0xba, "dd56122854737b06ef907a28823ffc6734c236b8fccf3fddc8e5e814ad94ccf367845d64208580ad1659a7c0f9d9f9ca5958837019434c33e9a64e66a63ffcf9cdebd82d4ec2447df15b72af830ca78f828548d57ebf1109ac3ef1576860b7a6398e9156453804ef6c7567194bf561df3f98593d6ad574a203508b0b5d3f61da00bbb779884accca74d3e5ca3253ba017bca3aa541bd934afd689315cc1a0f9c590a26fb1bb6c4da8937964a8e8371ce6ad3af"}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0xa8}]}, 0x100}, 0x1, 0x0, 0x0, 0x20000890}, 0x2c000869) getrlimit$auto(0xfffffffc, &(0x7f0000000880)={0x8, 0xfffffffffffffc00}) sendmsg$auto_NL80211_CMD_LEAVE_MESH(r0, &(0x7f0000000a80)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000a40)={&(0x7f0000000900)={0x134, r2, 0x100, 0x70bd26, 0x25dfdbff, {}, [@NL80211_ATTR_STA_TX_POWER={0x6}, @NL80211_ATTR_FILS_NONCES={0xbf, 0xf3, "1f69e610e5307e6e155d8e4e491a2d3c0186c11c061ab9c5721f1d0de32818475b2491e882324d897432e456d3a58b1c7756f4f229d20cb703b26ec24432797e19b393f96327cb1c9d2fea66ef6e81cb9bdae541a0533fe7ccefa16cdf4115f1e3fa883a49b9989c9bca4f5037af7b910fd7da06dfe18a833c12da726be345767aa12f4abfbd7aa5c8656bb1b3d6c4dc06815cb6e5c06334f9bf2ce55ab221cdff9338bc88e6a3a37265ec438caa7f2ee2df018a3ee9c70c161e7b"}, @NL80211_ATTR_FILS_ERP_USERNAME={0x12, 0xf9, "a4f3bd8ff63aa3ec9c64d6a27f6f"}, @NL80211_ATTR_HE_6GHZ_CAPABILITY={0x42, 0x125, "638ce1943c80b43bd1b37271323d780e57f3e4798c6cfa045f6e6858ae1cd75921a40f4e08d301b037f3247eb755e276bc534a1e08421ff334396a50e3bc"}]}, 0x134}, 0x1, 0x0, 0x0, 0x4000000}, 0x400c1) r3 = getsockopt$auto(r0, 0x7, 0x101, &(0x7f0000000ac0)='nl80211\x00', &(0x7f0000000b00)) syz_genetlink_get_family_id$auto_ovs_ct_limit(&(0x7f0000000b40), r3) setrlimit$auto(0xd, &(0x7f0000000b80)={0x5, 0x2}) connect$auto(r0, &(0x7f0000000bc0)=@l2tp={0x2, 0x0, @broadcast, 0x1}, 0x2) r4 = syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000c40), r3) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000c80)={'veth0_to_bond\x00', 0x0}) sendmsg$auto_BATADV_CMD_SET_MESH(r3, &(0x7f0000000d40)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000d00)={&(0x7f0000000cc0)={0x34, r4, 0x400, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}, @BATADV_ATTR_BLA_VID={0x6, 0x20, 0xfff}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000000}, 0x1) shmctl$auto(0x2, 0x304c99c8, &(0x7f0000000ec0)={{0xfffffc01, 0xffffffffffffffff, 0xffffffffffffffff, 0xa, 0x40, 0x7, 0x81}, 0xffffffff, 0x6, 0x3ff, 0x9, @raw=0xfff, @inferred=0xffffffffffffffff, 0x7, 0x0, &(0x7f0000000dc0)="6c194b98437f05a23d2e1de7814b924a0aace57b491b716d97421ef6847c524cb98f5c60cdc9eda070c6189b6206dd58bb68c2a5ae7efd4c126811f2cf8bde934b8d0aef9806da4df7a7b119053bd0cb7e692b41782e80e484543f66a006c0b5d221c530a9", &(0x7f0000000e40)="adac2ef42082c0be85a1293bba915c071e7f45180921cc624437001c642475c4b87b5c85f0e7bb7b7b17731c82126c71c242f56d634f0ee18fda06a24b2e43d71a0fe0c56724a3dab2e1e8d14c74f193a4269f31a4d11bf01150e1e00fd6c6ebd7ad"}) sendmsg$auto_NL80211_CMD_DEAUTHENTICATE(r0, &(0x7f0000001140)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001100)={&(0x7f0000000f40)={0x184, 0x0, 0x2, 0x70bd29, 0x25dfdbfd, {}, [@NL80211_ATTR_STA_PLINK_ACTION={0x5, 0x19, 0xd9}, @NL80211_ATTR_NAN_FUNC={0x140, 0xf0, 0x0, 0x1, [@typed={0xc, 0xe8, 0x0, 0x0, @u64=0x5}, @typed={0xeb, 0x42, 0x0, 0x0, @binary="1fc545385473bdce55cb52b3b27ef1fbd8db179f61126268b9e4c3306c96ab722bb8e9f831cbd0d9c071a02701d83b3b49101cca7b3d3ceda78ae84ba7db5792db8ed3db2bda34dc722d0cbc5cd737d5f9cbbf9b389f4df50df2d57d972f692c818eec4e8415d144b8f1dc156208b79fa6fdf346848c7a756af748578e7ba65c004549feaf6b05f701f17e8c94eede525f99a7f1ec53764254e42cf98978022d2e355c80dad79de5364bdffa623096ca24e1375a7676528e0d67011279e881c1ea86edffd021d25f8864e15669a32150bef047456fae6b87edd9c41deae3043a7d8815337caf6a"}, @nested={0x38, 0x62, 0x0, 0x1, [@nested={0x4, 0x4}, @nested={0x4, 0xab}, @typed={0x8, 0x9e, 0x0, 0x0, @uid=r6}, @nested={0x4, 0x7c}, @typed={0x14, 0x23, 0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @typed={0xc, 0x81, 0x0, 0x0, @u64=0x9a45}]}, @nested={0xc, 0x13, 0x0, 0x1, [@nested={0x4, 0x2d}, @nested={0x4, 0x1}]}]}, @NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0xf}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x3}, @NL80211_ATTR_AP_ISOLATE={0x5, 0x60, 0xa}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0x1000}, @NL80211_ATTR_RECEIVE_MULTICAST={0x4}]}, 0x184}}, 0x4000010) sendmsg$auto_NL80211_CMD_AUTHENTICATE(r0, &(0x7f0000001340)={&(0x7f0000001180)={0x10, 0x0, 0x0, 0x580d00ca}, 0xc, &(0x7f0000001300)={&(0x7f00000011c0)={0x104, r1, 0x400, 0x70bd27, 0x25dfdbfc, {}, [@NL80211_ATTR_FREQ_FIXED={0x4}, @NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0xe62}, @NL80211_ATTR_ASSOC_SPP_AMSDU={0x4}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x8}, @NL80211_ATTR_QOS_MAP={0x67, 0xc7, "0d02cc0626fb5e8f73400b08b2f0546cd73b32b3e73335d9044a7bde44ca35bc24e513b67918b5aeba264bb6636d11657508979b9c2472edae394d8468e2cd0276631e88aea763804650e648be183d0ff43ce9415aa58ead48eb81578d85e02c35e953"}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x9e}, @NL80211_ATTR_FILS_CACHE_ID={0x5d, 0xfd, "bf029aee75ec48a9c7343e9f327f01557b7c8459583b813d93d285113b2942f54ef4e8b6f1b43831725bb0e1cd38555fdeaca3897543734b434aa1c975bf305a5b56fee52c0e0697d8d0a1c63d398520108f66a0b5a68a4084"}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x2}]}, 0x104}, 0x1, 0x0, 0x0, 0x20000000}, 0x50) sendmsg$auto_NL80211_CMD_JOIN_OCB(r0, &(0x7f00000014c0)={&(0x7f0000001380)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001480)={&(0x7f00000013c0)={0xc0, r2, 0x23121ea52ec9d150, 0x70bd2c, 0x25dfdbfe, {}, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x8001}, @NL80211_ATTR_FILS_NONCES={0x91, 0xf3, "edd58108482196ee258f9ce0c8bfc69762e90223abb9efdc029eb53790f9a9ec7d0482c475252532e5713d693bb8bda20fb2e9a7d021db523d70449316208ce20d3369c62575fa9a9d9af704cd49039dedc490643dbec82bed1d823af584f69e5301248bdfdfa804c3bf4acfba6e011dd5452fd9c9a81e8da38fbdf686b962cddb07c979bab17a17c8eccb8358"}, @NL80211_ATTR_TXQ_LIMIT={0x8, 0x10a, 0xc}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0xfff7}]}, 0xc0}, 0x1, 0x0, 0x0, 0x4008011}, 0x8800) close_range$auto(0xffffffffffffffff, r0, 0xf6) ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0) r7 = syz_genetlink_get_family_id$auto_thermal(&(0x7f0000001540), r3) sendmsg$auto_THERMAL_GENL_CMD_THRESHOLD_FLUSH(r0, &(0x7f0000001740)={&(0x7f0000001500)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001700)={&(0x7f0000001580)={0x14c, r7, 0x200, 0x70bd28, 0x25dfdbfd, {}, [@THERMAL_GENL_ATTR_TZ_TRIP_TEMP={0x8, 0x8, 0x9}, @THERMAL_GENL_ATTR_THRESHOLD_TEMP={0x8, 0x1a, 0x8000}, @THERMAL_GENL_ATTR_CPU_CAPABILITY={0x4}, @THERMAL_GENL_ATTR_TZ={0x30, 0x1, 0x0, 0x1, [@nested={0x2a, 0x70, 0x0, 0x1, [@nested={0x4, 0x26}, @nested={0x4, 0x14c}, @nested={0x4, 0xa7}, @generic="1040af5ed964478bd2c636aded421da880568c80bf116737cbb2"]}]}, @THERMAL_GENL_ATTR_CPU_CAPABILITY_PERFORMANCE={0x8, 0x17, 0xfffffe99}, @THERMAL_GENL_ATTR_TZ_TRIP={0xec, 0x5, 0x0, 0x1, [@nested={0x8, 0xc3, 0x0, 0x1, [@nested={0x4, 0x30}]}, @generic="7bb52fd678c9121077a899232b29f11c89762625aea026d1397326cfaaebce03f1fd555265c6042400dc69de3b84efef732a046e433effcfe47521e64d3f1c71485f7137401aa88df65c5957f2cbe7dfcfea01cef9e45f22104d094829580e2fd4d4b120d09bb55d7d817f1c044e51c5c9a463ea5314abfc3c1484a7289ddd11478ffc7def7119421c2078b27861a7a3981f9247be7e5f78d0e24105db81237c295e662d9d8657f5959aee81d5d8f2df556c3a879dde1a250554bf2a6f9fd124d4f18a23847b7d9e1f93052584fe962cfd102f7166abe52d5b6afe5c", @typed={0x4, 0x8}]}]}, 0x14c}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) mmap$auto(0x0, 0x9, 0x10, 0x240000010, r3, 0x2) bpf$auto(0xea0, &(0x7f0000001780)=@token_create={0x80, r3}, 0x8) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$auto_nbd(&(0x7f0000001880), r8) sendmsg$auto_NBD_CMD_CONNECT(r9, &(0x7f0000001940)={&(0x7f0000001840)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001900)={&(0x7f00000018c0)={0x2c, r10, 0x400, 0x70bd29, 0x25dfdbfc, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x101}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000001}, 0x10) sendmsg$auto_NL80211_CMD_CRIT_PROTOCOL_STOP(r9, &(0x7f0000001a40)={&(0x7f0000001980)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001a00)={&(0x7f00000019c0)={0x20, r2, 0x200, 0x70bd2d, 0x25dfdbfc, {}, [@NL80211_ATTR_OBSS_COLOR_BITMAP={0xc, 0x12e, 0x9383}]}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x1) 3m51.725743932s ago: executing program 33 (id=788): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_SET_QOS_MAP(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, r1, 0x8, 0x70bd27, 0x25dfdbfc, {}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_WPA_VERSIONS={0x8, 0x4b, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x8080}, 0x24004004) recvmmsg$auto(r0, &(0x7f0000000480)={{&(0x7f0000000140)="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", 0x1a6, &(0x7f0000000340)={&(0x7f0000000240)="23536d86c2fefa2b84e4e995fda36f58cf4d10d19f6125fc3b69b28a076ced24fdbac1817f1a9498d9a0d951a0cff9d6eaf72c0d4422467c1216704bc1cd08321919678a9be06efef1a9a2fe1f175f9af2904614e8eedfa35dbad77b8b278ec6879f6455e802ced1f8a299a2fb07a4eabac1f3689aafd88eeef70033e41896fce9f1011cc2ffb7a5db571568b0d0f1de9701abf9de1ecd236bd2d51c3f9ee8ddb95e564937238d882aee1a0668bbcadddc2ceace394f0d760ff8f74ea5ceda78916191", 0x20a}, 0x2, &(0x7f0000000380)="ea1e2326e756f8aeea1ada79e777ebdd17745ca924e7116c4ad49f4cb9bb58bb168c8035ed09687c0b15de8a902762ecf943380ae49513b393b1bbeb8ac71173b4d167e3289e2400722ba83c3ce94f91c139277dd31b5061eaec5aebafd974dd480aa76da27fae2354962075b157b192f30c833593051e7efd9c9046141c3b0ad4adbc1d3ede64103116ff4d73aed9a3b1483b032a2376bcfe1c9f68300df5978ca9a062858f5b5036166c69633d0cec1632fe9620a611d9f661ab065194a9aac3f9f1bd6a810f016d1b5dce5999fb5b658ff335e0cfda41a0f54127ffc34fa3846dc50598a343de5e662784cc937b90c61a56da91642e", 0x10000, 0x8}, 0x1}, 0x9, 0x2, &(0x7f00000004c0)={0x9, 0x5}) r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000540), r0) sendmsg$auto_NL80211_CMD_GET_COALESCE(r0, &(0x7f0000000680)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000640)={&(0x7f0000000580)={0x8c, r2, 0x400, 0x70bd2a, 0x25dfdbfe, {}, [@NL80211_ATTR_SMPS_MODE={0x5, 0xd5, 0x80}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x40}, @NL80211_ATTR_IE={0x66, 0x2a, "889c24c6f01be27770dda5a1b757c8f51a0f4d983e6c01b4fb2b21aecaf47b66736d2fa9fc4291a4533480eaa007d8408f785b70bb18696248f9c714a2bccc7d27b382e89c28265fe06f88240b56540ab0590d28bbf71e68fc2988b63b633a270318"}]}, 0x8c}, 0x1, 0x0, 0x0, 0xc014}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000840)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000800)={&(0x7f0000000700)={0x100, r1, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@NL80211_ATTR_STA_SUPPORTED_RATES={0x1d, 0x13, "1f53265a180c9c94ce2d5b0422432ab4a6520142a46dc31cf6"}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_DISABLE_HE={0x4}, @NL80211_ATTR_CNTDWN_OFFS_BEACON={0xb7, 0xba, "dd56122854737b06ef907a28823ffc6734c236b8fccf3fddc8e5e814ad94ccf367845d64208580ad1659a7c0f9d9f9ca5958837019434c33e9a64e66a63ffcf9cdebd82d4ec2447df15b72af830ca78f828548d57ebf1109ac3ef1576860b7a6398e9156453804ef6c7567194bf561df3f98593d6ad574a203508b0b5d3f61da00bbb779884accca74d3e5ca3253ba017bca3aa541bd934afd689315cc1a0f9c590a26fb1bb6c4da8937964a8e8371ce6ad3af"}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0xa8}]}, 0x100}, 0x1, 0x0, 0x0, 0x20000890}, 0x2c000869) getrlimit$auto(0xfffffffc, &(0x7f0000000880)={0x8, 0xfffffffffffffc00}) sendmsg$auto_NL80211_CMD_LEAVE_MESH(r0, &(0x7f0000000a80)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000a40)={&(0x7f0000000900)={0x134, r2, 0x100, 0x70bd26, 0x25dfdbff, {}, [@NL80211_ATTR_STA_TX_POWER={0x6}, @NL80211_ATTR_FILS_NONCES={0xbf, 0xf3, "1f69e610e5307e6e155d8e4e491a2d3c0186c11c061ab9c5721f1d0de32818475b2491e882324d897432e456d3a58b1c7756f4f229d20cb703b26ec24432797e19b393f96327cb1c9d2fea66ef6e81cb9bdae541a0533fe7ccefa16cdf4115f1e3fa883a49b9989c9bca4f5037af7b910fd7da06dfe18a833c12da726be345767aa12f4abfbd7aa5c8656bb1b3d6c4dc06815cb6e5c06334f9bf2ce55ab221cdff9338bc88e6a3a37265ec438caa7f2ee2df018a3ee9c70c161e7b"}, @NL80211_ATTR_FILS_ERP_USERNAME={0x12, 0xf9, "a4f3bd8ff63aa3ec9c64d6a27f6f"}, @NL80211_ATTR_HE_6GHZ_CAPABILITY={0x42, 0x125, "638ce1943c80b43bd1b37271323d780e57f3e4798c6cfa045f6e6858ae1cd75921a40f4e08d301b037f3247eb755e276bc534a1e08421ff334396a50e3bc"}]}, 0x134}, 0x1, 0x0, 0x0, 0x4000000}, 0x400c1) r3 = getsockopt$auto(r0, 0x7, 0x101, &(0x7f0000000ac0)='nl80211\x00', &(0x7f0000000b00)) syz_genetlink_get_family_id$auto_ovs_ct_limit(&(0x7f0000000b40), r3) setrlimit$auto(0xd, &(0x7f0000000b80)={0x5, 0x2}) connect$auto(r0, &(0x7f0000000bc0)=@l2tp={0x2, 0x0, @broadcast, 0x1}, 0x2) r4 = syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000c40), r3) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000c80)={'veth0_to_bond\x00', 0x0}) sendmsg$auto_BATADV_CMD_SET_MESH(r3, &(0x7f0000000d40)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000d00)={&(0x7f0000000cc0)={0x34, r4, 0x400, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}, @BATADV_ATTR_BLA_VID={0x6, 0x20, 0xfff}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000000}, 0x1) shmctl$auto(0x2, 0x304c99c8, &(0x7f0000000ec0)={{0xfffffc01, 0xffffffffffffffff, 0xffffffffffffffff, 0xa, 0x40, 0x7, 0x81}, 0xffffffff, 0x6, 0x3ff, 0x9, @raw=0xfff, @inferred=0xffffffffffffffff, 0x7, 0x0, &(0x7f0000000dc0)="6c194b98437f05a23d2e1de7814b924a0aace57b491b716d97421ef6847c524cb98f5c60cdc9eda070c6189b6206dd58bb68c2a5ae7efd4c126811f2cf8bde934b8d0aef9806da4df7a7b119053bd0cb7e692b41782e80e484543f66a006c0b5d221c530a9", &(0x7f0000000e40)="adac2ef42082c0be85a1293bba915c071e7f45180921cc624437001c642475c4b87b5c85f0e7bb7b7b17731c82126c71c242f56d634f0ee18fda06a24b2e43d71a0fe0c56724a3dab2e1e8d14c74f193a4269f31a4d11bf01150e1e00fd6c6ebd7ad"}) sendmsg$auto_NL80211_CMD_DEAUTHENTICATE(r0, &(0x7f0000001140)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001100)={&(0x7f0000000f40)={0x184, 0x0, 0x2, 0x70bd29, 0x25dfdbfd, {}, [@NL80211_ATTR_STA_PLINK_ACTION={0x5, 0x19, 0xd9}, @NL80211_ATTR_NAN_FUNC={0x140, 0xf0, 0x0, 0x1, [@typed={0xc, 0xe8, 0x0, 0x0, @u64=0x5}, @typed={0xeb, 0x42, 0x0, 0x0, @binary="1fc545385473bdce55cb52b3b27ef1fbd8db179f61126268b9e4c3306c96ab722bb8e9f831cbd0d9c071a02701d83b3b49101cca7b3d3ceda78ae84ba7db5792db8ed3db2bda34dc722d0cbc5cd737d5f9cbbf9b389f4df50df2d57d972f692c818eec4e8415d144b8f1dc156208b79fa6fdf346848c7a756af748578e7ba65c004549feaf6b05f701f17e8c94eede525f99a7f1ec53764254e42cf98978022d2e355c80dad79de5364bdffa623096ca24e1375a7676528e0d67011279e881c1ea86edffd021d25f8864e15669a32150bef047456fae6b87edd9c41deae3043a7d8815337caf6a"}, @nested={0x38, 0x62, 0x0, 0x1, [@nested={0x4, 0x4}, @nested={0x4, 0xab}, @typed={0x8, 0x9e, 0x0, 0x0, @uid=r6}, @nested={0x4, 0x7c}, @typed={0x14, 0x23, 0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @typed={0xc, 0x81, 0x0, 0x0, @u64=0x9a45}]}, @nested={0xc, 0x13, 0x0, 0x1, [@nested={0x4, 0x2d}, @nested={0x4, 0x1}]}]}, @NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0xf}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x3}, @NL80211_ATTR_AP_ISOLATE={0x5, 0x60, 0xa}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0x1000}, @NL80211_ATTR_RECEIVE_MULTICAST={0x4}]}, 0x184}}, 0x4000010) sendmsg$auto_NL80211_CMD_AUTHENTICATE(r0, &(0x7f0000001340)={&(0x7f0000001180)={0x10, 0x0, 0x0, 0x580d00ca}, 0xc, &(0x7f0000001300)={&(0x7f00000011c0)={0x104, r1, 0x400, 0x70bd27, 0x25dfdbfc, {}, [@NL80211_ATTR_FREQ_FIXED={0x4}, @NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0xe62}, @NL80211_ATTR_ASSOC_SPP_AMSDU={0x4}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x8}, @NL80211_ATTR_QOS_MAP={0x67, 0xc7, "0d02cc0626fb5e8f73400b08b2f0546cd73b32b3e73335d9044a7bde44ca35bc24e513b67918b5aeba264bb6636d11657508979b9c2472edae394d8468e2cd0276631e88aea763804650e648be183d0ff43ce9415aa58ead48eb81578d85e02c35e953"}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x9e}, @NL80211_ATTR_FILS_CACHE_ID={0x5d, 0xfd, "bf029aee75ec48a9c7343e9f327f01557b7c8459583b813d93d285113b2942f54ef4e8b6f1b43831725bb0e1cd38555fdeaca3897543734b434aa1c975bf305a5b56fee52c0e0697d8d0a1c63d398520108f66a0b5a68a4084"}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x2}]}, 0x104}, 0x1, 0x0, 0x0, 0x20000000}, 0x50) sendmsg$auto_NL80211_CMD_JOIN_OCB(r0, &(0x7f00000014c0)={&(0x7f0000001380)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001480)={&(0x7f00000013c0)={0xc0, r2, 0x23121ea52ec9d150, 0x70bd2c, 0x25dfdbfe, {}, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x8001}, @NL80211_ATTR_FILS_NONCES={0x91, 0xf3, "edd58108482196ee258f9ce0c8bfc69762e90223abb9efdc029eb53790f9a9ec7d0482c475252532e5713d693bb8bda20fb2e9a7d021db523d70449316208ce20d3369c62575fa9a9d9af704cd49039dedc490643dbec82bed1d823af584f69e5301248bdfdfa804c3bf4acfba6e011dd5452fd9c9a81e8da38fbdf686b962cddb07c979bab17a17c8eccb8358"}, @NL80211_ATTR_TXQ_LIMIT={0x8, 0x10a, 0xc}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0xfff7}]}, 0xc0}, 0x1, 0x0, 0x0, 0x4008011}, 0x8800) close_range$auto(0xffffffffffffffff, r0, 0xf6) ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0) r7 = syz_genetlink_get_family_id$auto_thermal(&(0x7f0000001540), r3) sendmsg$auto_THERMAL_GENL_CMD_THRESHOLD_FLUSH(r0, &(0x7f0000001740)={&(0x7f0000001500)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001700)={&(0x7f0000001580)={0x14c, r7, 0x200, 0x70bd28, 0x25dfdbfd, {}, [@THERMAL_GENL_ATTR_TZ_TRIP_TEMP={0x8, 0x8, 0x9}, @THERMAL_GENL_ATTR_THRESHOLD_TEMP={0x8, 0x1a, 0x8000}, @THERMAL_GENL_ATTR_CPU_CAPABILITY={0x4}, @THERMAL_GENL_ATTR_TZ={0x30, 0x1, 0x0, 0x1, [@nested={0x2a, 0x70, 0x0, 0x1, [@nested={0x4, 0x26}, @nested={0x4, 0x14c}, @nested={0x4, 0xa7}, @generic="1040af5ed964478bd2c636aded421da880568c80bf116737cbb2"]}]}, @THERMAL_GENL_ATTR_CPU_CAPABILITY_PERFORMANCE={0x8, 0x17, 0xfffffe99}, @THERMAL_GENL_ATTR_TZ_TRIP={0xec, 0x5, 0x0, 0x1, [@nested={0x8, 0xc3, 0x0, 0x1, [@nested={0x4, 0x30}]}, @generic="7bb52fd678c9121077a899232b29f11c89762625aea026d1397326cfaaebce03f1fd555265c6042400dc69de3b84efef732a046e433effcfe47521e64d3f1c71485f7137401aa88df65c5957f2cbe7dfcfea01cef9e45f22104d094829580e2fd4d4b120d09bb55d7d817f1c044e51c5c9a463ea5314abfc3c1484a7289ddd11478ffc7def7119421c2078b27861a7a3981f9247be7e5f78d0e24105db81237c295e662d9d8657f5959aee81d5d8f2df556c3a879dde1a250554bf2a6f9fd124d4f18a23847b7d9e1f93052584fe962cfd102f7166abe52d5b6afe5c", @typed={0x4, 0x8}]}]}, 0x14c}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) mmap$auto(0x0, 0x9, 0x10, 0x240000010, r3, 0x2) bpf$auto(0xea0, &(0x7f0000001780)=@token_create={0x80, r3}, 0x8) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$auto_nbd(&(0x7f0000001880), r8) sendmsg$auto_NBD_CMD_CONNECT(r9, &(0x7f0000001940)={&(0x7f0000001840)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001900)={&(0x7f00000018c0)={0x2c, r10, 0x400, 0x70bd29, 0x25dfdbfc, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x101}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000001}, 0x10) sendmsg$auto_NL80211_CMD_CRIT_PROTOCOL_STOP(r9, &(0x7f0000001a40)={&(0x7f0000001980)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001a00)={&(0x7f00000019c0)={0x20, r2, 0x200, 0x70bd2d, 0x25dfdbfc, {}, [@NL80211_ATTR_OBSS_COLOR_BITMAP={0xc, 0x12e, 0x9383}]}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x1) 1m45.037983659s ago: executing program 2 (id=1426): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f0000002c00)='/dev/cec18\x00', 0x900, 0x0) ioctl$auto_CEC_S_MODE(r0, 0x40046109, &(0x7f0000002c40)=0x2) r1 = openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f0000002c00)='/dev/cec18\x00', 0x900, 0x0) ioctl$auto_CEC_S_MODE(r1, 0x40046109, &(0x7f0000002c40)=0x2) splice$auto(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10, 0x8) (async) splice$auto(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10, 0x8) socket(0x22, 0x1, 0x0) (async) socket(0x22, 0x1, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x4000008000) (async) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x4000008000) r2 = socket(0x2, 0x1, 0x0) close_range$auto(0x2, 0x8, 0x0) r3 = memfd_create$auto(0x0, 0xe) r4 = socket(0x2, 0x1, 0x106) connect$auto(0x3, &(0x7f00000000c0), 0x55) setsockopt$auto(r4, 0x1, 0x21, 0x0, 0x9) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @loopback}, 0x6a) sendmmsg$auto(r2, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x5, 0x20000000) rt_sigaction$auto(0x6, 0x0, &(0x7f0000000340)={0x0, 0xe2c, 0x0, {0x2}}, 0x8) write$auto(0x3, 0x0, 0xfdf3) (async) write$auto(0x3, 0x0, 0xfdf3) shutdown$auto(0x200000003, 0x2) write$auto_tracing_mark_fops_trace(r3, &(0x7f0000000180)="0fb8d83c8db81dd2fd62058242132b99303690b6a0bd86c82340d2849a7501d8892dc9c78929dfeb20df27288083747aab33a331cc870d15584f909ac587aca4be2fcdbc3fc5735e52089d4f511351e904c56383940deb34abe8df741374facb86e3fcfe994cc5b69515882ca764", 0x6e) (async) write$auto_tracing_mark_fops_trace(r3, &(0x7f0000000180)="0fb8d83c8db81dd2fd62058242132b99303690b6a0bd86c82340d2849a7501d8892dc9c78929dfeb20df27288083747aab33a331cc870d15584f909ac587aca4be2fcdbc3fc5735e52089d4f511351e904c56383940deb34abe8df741374facb86e3fcfe994cc5b69515882ca764", 0x6e) io_uring_setup$auto(0x6, 0x0) bpf$auto(0x0, 0x0, 0x6f4) (async) bpf$auto(0x0, 0x0, 0x6f4) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) umount2$auto(&(0x7f0000000000)='\x00', 0xec61) (async) umount2$auto(&(0x7f0000000000)='\x00', 0xec61) socket(0x1e, 0x1, 0x0) (async) socket(0x1e, 0x1, 0x0) mmap$auto(0x3, 0x4, 0x4000000000dc, 0x40eb2, 0xa1c, 0x8) madvise$auto(0xffffffffffffffff, 0xffffffff7fffffff, 0x40000019) (async) madvise$auto(0xffffffffffffffff, 0xffffffff7fffffff, 0x40000019) madvise$auto(0xf, 0x4, 0x9) (async) madvise$auto(0xf, 0x4, 0x9) syz_genetlink_get_family_id$auto_ovs_meter(0x0, 0xffffffffffffffff) 1m43.729956408s ago: executing program 2 (id=1431): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = socket(0x2, 0x1, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttynull\x00', 0x0, 0x0) move_pages$auto(0x1, 0xf54, 0x0, 0x0, 0x0, 0x8000000000000000) ioctl$auto(0x3, 0x402c542b, 0x38) ioctl$auto_TIOCSTI2(r1, 0x5412, 0x0) close_range$auto(0x2, 0x8, 0x0) memfd_create$auto(0x0, 0xe) r2 = socket(0x2, 0x4, 0x106) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @loopback}, 0x6a) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x5, 0x20000000) write$auto(0x3, 0x0, 0xfdef) write$auto(0x3, 0x0, 0xfdf3) syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000000), r2) read$auto(0x3, 0x0, 0x7ffffffff000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) socket(0x2, 0x1, 0x0) (async) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttynull\x00', 0x0, 0x0) (async) move_pages$auto(0x1, 0xf54, 0x0, 0x0, 0x0, 0x8000000000000000) (async) ioctl$auto(0x3, 0x402c542b, 0x38) (async) ioctl$auto_TIOCSTI2(r1, 0x5412, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) (async) memfd_create$auto(0x0, 0xe) (async) socket(0x2, 0x4, 0x106) (async) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @loopback}, 0x6a) (async) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x5, 0x20000000) (async) write$auto(0x3, 0x0, 0xfdef) (async) write$auto(0x3, 0x0, 0xfdf3) (async) syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000000), r2) (async) read$auto(0x3, 0x0, 0x7ffffffff000) (async) 1m43.29087768s ago: executing program 2 (id=1433): mmap$auto(0x0, 0xd, 0x3, 0xeb1, 0xfffffffffffffffe, 0x8000) (async) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) (async) socket(0x26, 0x80805, 0x0) open(&(0x7f0000000100)='.\x00', 0x40000, 0x0) (async) clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) (async, rerun: 32) close_range$auto(0x0, 0xfffffffffffff000, 0x2) (async, rerun: 32) r0 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x0, 0xfffffffffffff000, 0x2) (async) landlock_create_ruleset$auto(&(0x7f0000000000)={0x1, 0x81, 0x7}, 0x9, 0xfffffffc) (async) landlock_add_rule$auto(r0, 0x1, 0x0, 0x0) r1 = open(&(0x7f0000000000)='./cgroup\x00', 0x0, 0x10a) open_by_handle_at$auto(r1, &(0x7f0000000040)={0x8, 0x20002, "0600000000000000"}, 0x2) 1m42.646054157s ago: executing program 2 (id=1438): mmap$auto(0x0, 0x400005, 0xfffffffffffffffe, 0x9b72, 0x2, 0x8000) (async) r0 = socket(0x2, 0x1, 0x0) (async) bind$auto(0x3, &(0x7f0000000080), 0x6b) (async) connect$auto(0x3, &(0x7f00000000c0), 0x55) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) (async) madvise$auto(0x0, 0xffffffffffff0001, 0x15) (async) sendmmsg$auto(0x3, &(0x7f0000000000)={{0x0, 0x2, 0x0, 0x106, 0x0, 0x1, 0x697b}, 0xed7138c}, 0x9a6, 0xe000) unshare$auto(0x40000080) (async) openat$auto_generic(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/ieee80211/phy11/netdev:wlan1/rc_rateidx_mcs_mask_5ghz\x00', 0x100, 0x0) (async) io_setup$auto(0x8001, &(0x7f0000000040)=0x10) kcmp$auto(0x5, 0x6, 0xc, 0xffffffffffffffff, r0) (async) socket(0x2, 0x3, 0x106) (async) mmap$auto(0x0, 0x400005, 0xfffffffffffffffe, 0x9b72, 0xc76, 0x8000) (async) getsockopt$auto(0x3, 0xff, 0x20, 0x0, 0x0) (async) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mmap$auto(0xfffffffffffffffb, 0x8, 0x0, 0x11, 0x7f, 0x3) kexec_load$auto(0x2, 0x7, 0x0, 0x4) (async) setresuid$auto(0x2, 0x5, 0x200) (async) open_by_handle_at$auto(0x0, 0xfffffffffffffffc, 0x3) (async) sysfs$auto(0x2, 0x100000000000034, 0x0) (async) fsopen$auto(0x0, 0x1) (async) mremap$auto(0x0, 0x7, 0x3fd6, 0x3, 0x420000000) (async) connect$auto(0x3, &(0x7f0000000000), 0x55) (async) connect$auto(0x3, 0x0, 0x55) 1m34.636782483s ago: executing program 2 (id=1475): mmap$auto(0x0, 0x20000a, 0xffffffffffffffff, 0x40eb1, 0x602, 0x300000000000) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x1a9382, 0x0) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x2000000) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x402, 0x300000000000) write$auto(0x3, 0x0, 0xfffffdef) write$auto(r0, 0x0, 0x5) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x89fc, &(0x7f0000000040)={'bridge0\x00'}) r2 = syz_genetlink_get_family_id$auto_thermal(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$auto_THERMAL_GENL_CMD_CDEV_GET(r1, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x30, r2, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@THERMAL_GENL_ATTR_TZ_CDEV_WEIGHT={0x8, 0xc, 0x5}, @THERMAL_GENL_ATTR_CDEV_NAME={0x14, 0x13, 'veth1_to_bridge\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0xd080}, 0x20000000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r3 = open(&(0x7f0000000480)='./cgroup.cpu/cgroup.procs\x00', 0x80842, 0x91) read$auto(r3, 0x0, 0x1) r4 = openat$auto_proc_clear_refs_operations_internal(0xffffffffffffff9c, &(0x7f0000000600)='/proc/thread-self/clear_refs\x00', 0x2, 0x0) openat$auto_fops_atomic_t_(0xffffffffffffff9c, 0x0, 0x240, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) fanotify_init$auto(0x200, 0x2010000000000) openat$auto_event_trigger_fops_trace(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing/events/vmalloc/free_vmap_area_noflush/trigger\x00', 0x189440, 0x0) fanotify_mark$auto(0x0, 0x9, 0x8, 0xfffffff9, &(0x7f0000000180)='ns/pid\x00') write$auto_proc_clear_refs_operations_internal(r4, 0x0, 0xffffff4b) 1m31.824642666s ago: executing program 4 (id=1490): r0 = openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/swaps\x00', 0x40000, 0x0) poll$auto(&(0x7f0000000040)={r0, 0x7ff, 0x200}, 0x100, 0x6) 1m31.648825051s ago: executing program 4 (id=1491): r0 = prctl$auto(0x3323, 0x9, 0xffffffffffffffff, 0x101000000000, 0x9) r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_SET_STATION(r0, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000300)={0x330, r1, 0x400, 0x70bd28, 0x25dfdbfd, {}, [@NL80211_ATTR_FTM_RESPONDER={0x31c, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_LCI={0xff, 0x2, "9de016974f372b81e3ca5f341a391e39f419018c463104b2ce133bc6dd4c38a8ebd5b829349794ab2f1fd50588229d42a84d31bab16a69440fc1c97e62816cfd95f770f9b136d13866ff1d7798dbb642a51722c69876608588d63722d7aca3b3cccf72bee268221ed6c03d822c1b8aa7e86c6581f29dd5714c80696d573df9c0e164460729d1c69fada4bed8c58f269d0baffe3ee3fcfa65677ef63b754fba1dfd6ca023b762fdffac62e9bcc96d1bbebf6293a9959d78e35f89be4a7df0ee2315daf18a905e8237956007540f7b4c4ea6854a2653413afc1324910b3ad25e22938e1a3cdb25dc91ac235099e787c247d8738f83b45fc168f302d8"}, @NL80211_FTM_RESP_ATTR_LCI={0x58, 0x2, "2fbfce6c147e385e3a59d9f230da55816a66717e53c68bfafa92991ca4b407865ce8bd00e62b54fad44751e52b905e31ead5440de851198547dfdcb648a690fcbc0f65702da3a754e994a53f0bb2bf3a75dc9a1c"}, @NL80211_FTM_RESP_ATTR_LCI={0xbd, 0x2, "25b5d52a8f4c187b8664ee7d54c1ef12c5a6943bd598f2ac923d018b22372026b6dbbd3deaf2bb1db1afe73d53cadaab8a4b889a5755dd3fa2e7c2d70c592215b176bf987b8a9e176c0e4c63c5b831c9ea47f234c2e76378cd1d91a4a63eec898a14b81ff0c1db8350e40e075bc045960814e7de1bcc4593366c4a8714c1ea75796a1406ead341673eb63d6c9d7c8200502750c26d5ffe64179a3ba58e9ff91fbecb4ca7502137593a16d587425e6df8fca4f536dce1451057"}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x49, 0x3, "b371a7fd1fb85928457de18b076902618a0126d422fb1d5792205822c3330aafbf7c05ec0ef8c284b2bec7d349fb2e368aa1133bea0d211065377af73e4f6019a03aa892d6"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_LCI={0xad, 0x2, "ef2c1b93497f393302b91b9e3c4a6e9269f3ffcd89413d6c206127c043c3f8830b6ea4a42587f5bfa807d12d5b1888e0800a51061410da4dc1f583f2fecbf41bd7ba41221578f197229ae790de6c9d13c1a680c9cb9bebf451e2286b081332fc258572b37958c2318f71c9178390c9f64c2522f51759d619ee46ec87799b1676c40429b63e61a41ebc62d9f1d1bb6d25bd639016606217469d8f4b68663b7d8aae3af9b7d4d11d765f"}]}]}, 0x330}, 0x1, 0x0, 0x0, 0x4000080}, 0x20000000) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/card0\x00', 0x458081, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) open(0x0, 0x22040, 0x75) socket(0x10, 0x2, 0x4) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) r2 = socket(0x2, 0x5, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) mmap$auto(0x0, 0x20009, 0x10000000000df, 0xeb2, 0x401, 0x8000) sendmmsg$auto(r2, &(0x7f0000000140)={{&(0x7f0000000040), 0x10, &(0x7f00000000c0)={0x0, 0x1fff8}, 0x7, 0x0, 0x2, 0xb}, 0xfff}, 0x5, 0x311) 1m31.313512768s ago: executing program 4 (id=1493): openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS1\x00', 0x20000, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000005c0)='/sys/devices/virtual/net/bond0/queues/tx-10/xps_cpus\x00', 0x8080, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb2, 0xfffffffffffffffb, 0x8000) socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) r1 = socket(0x18, 0xa, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000001100)='/sys/devices/system/cpu/cpu1/cache/index0/coherency_line_size\x00', 0xa100, 0x0) r2 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/028/001\x00', 0xa901, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x48, 0x0, 0x2, 0x70bd2c, 0x25dfdbfe, {}, [@NL80211_ATTR_WIPHY_FRAG_THRESHOLD={0x8, 0x3f, 0x8}, @NL80211_ATTR_SAR_SPEC={0x2c, 0x12c, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS={0x28, 0x2, 0x0, 0x1, [{0x24, 0x0, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0xa32}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x7}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x4}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x7}]}]}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x40) sendmsg$auto_OVS_DP_CMD_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0f0026bd7000fcdbdf9907"], 0x24}, 0x1, 0x0, 0x0, 0x20000800}, 0x4) pipe$auto(&(0x7f0000000300)=r0) r4 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1e00df45"], 0x1ac}}, 0x40000) mprotect$auto(0x1ffff000, 0x8000000000000001, 0x4) sendmsg$auto_NCSI_CMD_SET_PACKAGE_MASK(r4, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4c004}, 0x40080c0) sendmsg$auto_IPVS_CMD_GET_SERVICE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)={0x14, 0x0, 0x4, 0x70bd26, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4004080}, 0x10) recvmmsg$auto(r3, &(0x7f0000000140)={{0x0, 0x4, &(0x7f0000000080)={0x0, 0x803}, 0x5, 0x0, 0x2, 0x8}, 0x800}, 0x10a, 0x8, 0x0) sendmsg$auto_NL80211_CMD_GET_INTERFACE(r1, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000200)={&(0x7f00000009c0)={0x264, 0x0, 0x20, 0x70bd2c, 0x25dfdbfb, {}, [@NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0xfffffff9}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x44}, @NL80211_ATTR_PROBE_RESP={0x224, 0x91, "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"}, @NL80211_ATTR_RECEIVE_MULTICAST={0x4}, @NL80211_ATTR_KEY_SEQ={0xa, 0xa, "1d4dabf9eec2"}, @NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0x6}, @NL80211_ATTR_BSS_DUMP_INCLUDE_USE_DATA={0x4}]}, 0x264}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000040), r6) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendmsg$auto_BATADV_CMD_GET_HARDIF(r5, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000040)={0x1c, r7, 0x13ebbac2338983f3, 0x70b927, 0x25dfdbfe, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r8}]}, 0x1c}}, 0x4008000) unshare$auto(0x40000080) mmap$auto(0x0, 0x20009, 0x40000000000000df, 0xeb1, 0x401, 0x8000) read$auto(0x3, 0x0, 0x1f40) ioctl$auto(r2, 0xc0105500, r2) 1m30.150429919s ago: executing program 4 (id=1499): close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0xd4, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$auto(r1, 0x10f, 0x87, 0x0, 0x14) ioctl$auto(r0, 0x2, 0x4) setsockopt$auto(0x3, 0x10f, 0x87, 0x0, 0x14) close_range$auto(0x2, 0x8, 0x0) r2 = openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/swaps\x00', 0x40000, 0x0) poll$auto(&(0x7f0000000040)={r2, 0x7ff, 0x200}, 0x100, 0x6) ioperm$auto(0xa, 0x7, 0x2) r4 = open(&(0x7f0000000000)='./file0\x00', 0x261c2, 0x84) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x1, 0x0) timerfd_create$auto(0x1, 0x0) timerfd_gettime$auto(r4, &(0x7f0000000200)={{0xfffffffffffffff9}, {0x81, 0xfffffffffffffffe}}) stat$auto(&(0x7f0000000080)='./file0\x00', &(0x7f0000000100)={0xe572, 0xc, 0xede8, 0x800, 0x0, 0xee01, 0x0, 0x6e, 0xffffffffffffffff, 0x401, 0x1000000007da1, 0x1, 0x5a, 0x100000003, 0xfd04, 0x4, 0x2}) setfsuid$auto(0xee01) r5 = gettid() rt_sigqueueinfo$auto(r5, 0x9, &(0x7f0000000140)={@siginfo_0_0={0x2, 0x4, 0x1e, @_sigfault={0x0, @_addr_bnd={"160900d2d1ce4844", 0x0, 0x0}}}}) fcntl$getown(r2, 0x9) waitid$auto(0x3, r3, &(0x7f0000000380)={@siginfo_0_0={0xa37, 0x3ff, 0x6, @_sigsys={&(0x7f00000002c0)="d158e81084aa472151ffc085d6ab1b532ee1a72d37cb563807029fcdb6ed4cb9171307449bb91d2668181360211aeebe7aec9331fd7f599727fe44bc0e9bfefc79cdac37e107be036efa2c53802dbb021fa1283601ed4e120f97a25efaa92a5407cfd0ef84a7d17c784fe2e60dca44be24d0720014f3ac7dc54f73894741070189903b84f2e6d749cfec4143b21ddb8e9c5f9dc8ce9394d86cbba157eb026de58491959310596a5177cbde23117e7473e318a56ea729ff5c65b8", 0x2, 0x3}}}, 0x0, &(0x7f0000000400)={{0x8000000000000001, 0x8}, {0x100000001, 0xfffffffffffffff9}, 0x7f, 0x2, 0x8, 0x7fffffffffffffff, 0x4c, 0x8000000000000000, 0x4, 0xffff, 0x9, 0x6, 0x9, 0xe, 0x2, 0x5}) fcntl$getown(r3, 0x9) futex$auto(0x0, 0x7, 0x0, 0x0, 0x0, 0x80000003) openat$auto_ima_measure_policy_ops_ima_fs(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) mprotect$auto(0x1ffff000, 0x8000000000000001, 0x4) r6 = socket(0x2, 0x6, 0x0) getsockopt$auto(r6, 0x10d, 0x2, 0x0, &(0x7f0000000040)=0x800b) 1m29.881124324s ago: executing program 4 (id=1501): madvise$auto(0x0, 0x7fffffffffffffff, 0xa) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'pimreg\x00'}) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) socket(0xa, 0x801, 0x84) setsockopt$auto(0x400000000000003, 0x29, 0x1b, 0x0, 0x56b) r1 = socket(0xa, 0x2, 0x3a) setsockopt$auto(r1, 0x29, 0x3b, &(0x7f0000000080)='\x15!\xa8^J/\xddCx4!\x00\xd3\x8f\x1e\x1b\xc3 \xe2\xa8\xd6\xd9\xc0\xa2\x0f\x88\xb1e\x8a\xd8?\xfe\xda\xc4\xef\xff(i\xc6@\x91[\vBj\x0eQ\xce\x16\'C\x8cYA\x92u\xd5\xb8\\\x82,\xe2=y\x9bR\xbcn\xa0c\x16~\x86\"t\xde\x14\xe4\xa5\xfe\xb5', 0x110) setsockopt$auto(0x400000000000003, 0x29, 0x39, 0xffffffffffffffff, 0x0) setsockopt$auto(0x400000000000003, 0x29, 0x1b, 0x0, 0x56b) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) setsockopt$auto(0x400000000000003, 0x29, 0x1c, 0x0, 0x56b) madvise$auto(0x0, 0xffffffffffff0001, 0x15) r2 = openat$auto_stat_fops_per_vm_kvm_main(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/kvm/mmu_pde_zapped\x00', 0x40000, 0x0) read$auto_stat_fops_per_vm_kvm_main(r2, 0x0, 0x0) syz_clone3(&(0x7f00000003c0)={0x102200, 0x0, 0x0, 0x0, {0x2d}, 0x0, 0x0, 0x0, 0x0}, 0x58) r3 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) memfd_create$auto(&(0x7f0000000000)='/dev/snd/timer\x00', 0xfff) ioctl$auto_DMA_HEAP_IOCTL_ALLOC(r3, 0x400454a4, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) sched_setattr$auto(0x0, &(0x7f00000010c0)={0x40, 0x9, 0xd, 0x8, 0x0, 0x8d46, 0x3, 0x560, 0x78, 0x31c783f6}, 0x0) 1m28.131857541s ago: executing program 4 (id=1506): write$auto(0xffffffffffffffff, 0x0, 0x4) r0 = clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) r1 = openat$auto_gpiolib_fops_(0xffffffffffffff9c, &(0x7f0000000040), 0x8000, 0x0) mmap$auto(0x0, 0x4020009, 0xe3, 0xeb1, r1, 0x8000) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x801, 0x84) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) sysfs$auto(0x2, 0x100000000000036, 0x0) fsopen$auto(0x0, 0x1) io_uring_setup$auto(0x4, 0x0) mmap$auto(0x0, 0x9, 0xffb, 0x8000000008011, 0x3, 0x0) r2 = open(&(0x7f0000000100)='./bus\x00', 0x14d27e, 0x72) fallocate$auto(0x8000000000000003, 0x0, 0xd, 0xcbd5d) copy_file_range$auto(r2, 0x0, r2, &(0x7f0000000080)=0x8, 0x2, 0x0) move_pages$auto(0x0, 0x8000000000000001, 0x0, 0x0, 0x0, 0x2) socketpair$auto(0x10004, 0x0, 0x8000000000000000, 0x0) io_uring_enter$auto(0x3, 0x0, 0x1, 0x3, 0x0, 0x2) io_uring_enter$auto(0x3, 0x7, 0x2688, 0xe, 0x0, 0x7) openat$auto_tracing_mark_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/tracing/trace_marker\x00', 0x1, 0x0) mount$auto(0x0, 0x0, 0x0, 0x10dfd057, 0x0) madvise$auto(0x0, 0x600007, 0x19) madvise$auto(0x0, 0xffffffffffff0005, 0x19) socket(0x2, 0x801, 0x106) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) io_uring_setup$auto(0x6, 0x0) connect$auto(0x3, 0x0, 0x55) get_robust_list$auto(r0, &(0x7f00000001c0)=&(0x7f0000000180)={{&(0x7f0000000080)={0xfffffffffffffffd}}, 0x9, &(0x7f0000000140)={&(0x7f0000000100)={&(0x7f00000000c0)}}}, &(0x7f0000000200)) bind$auto(0x3, 0x0, 0x6b) socket$nl_generic(0x10, 0x3, 0x10) 1m22.785166367s ago: executing program 2 (id=1520): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0xa, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x1, 0x0) mmap$auto(0x884d, 0xffd, 0x1ff, 0x15, r0, 0x14) socket(0x2, 0x6, 0x0) sysfs$auto(0x2, 0x0, 0x0) epoll_create$auto(0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/damon_reclaim/parameters/min_age\x00', 0x60b82, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket(0x23, 0x80805, 0x0) socket(0x1, 0x1, 0x1) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) getsockopt$auto(0x3, 0x200000000001, 0x1c, 0x0, 0x0) write$auto(r2, 0x0, 0x401) epoll_ctl$auto(0x5, 0x1, r1, 0x0) r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nbd11\x00', 0x4840, 0x0) fadvise64$auto(r3, 0x7ff, 0xc, 0x433) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) epoll_ctl$auto(0x5, 0x3, r1, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) socket(0x2, 0x1, 0x106) madvise$auto(0x0, 0xffffffffffff0005, 0x19) signalfd$auto(0xffffffff, 0x0, 0x8) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) 1m12.750247299s ago: executing program 34 (id=1506): write$auto(0xffffffffffffffff, 0x0, 0x4) r0 = clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) r1 = openat$auto_gpiolib_fops_(0xffffffffffffff9c, &(0x7f0000000040), 0x8000, 0x0) mmap$auto(0x0, 0x4020009, 0xe3, 0xeb1, r1, 0x8000) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x801, 0x84) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) sysfs$auto(0x2, 0x100000000000036, 0x0) fsopen$auto(0x0, 0x1) io_uring_setup$auto(0x4, 0x0) mmap$auto(0x0, 0x9, 0xffb, 0x8000000008011, 0x3, 0x0) r2 = open(&(0x7f0000000100)='./bus\x00', 0x14d27e, 0x72) fallocate$auto(0x8000000000000003, 0x0, 0xd, 0xcbd5d) copy_file_range$auto(r2, 0x0, r2, &(0x7f0000000080)=0x8, 0x2, 0x0) move_pages$auto(0x0, 0x8000000000000001, 0x0, 0x0, 0x0, 0x2) socketpair$auto(0x10004, 0x0, 0x8000000000000000, 0x0) io_uring_enter$auto(0x3, 0x0, 0x1, 0x3, 0x0, 0x2) io_uring_enter$auto(0x3, 0x7, 0x2688, 0xe, 0x0, 0x7) openat$auto_tracing_mark_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/tracing/trace_marker\x00', 0x1, 0x0) mount$auto(0x0, 0x0, 0x0, 0x10dfd057, 0x0) madvise$auto(0x0, 0x600007, 0x19) madvise$auto(0x0, 0xffffffffffff0005, 0x19) socket(0x2, 0x801, 0x106) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) io_uring_setup$auto(0x6, 0x0) connect$auto(0x3, 0x0, 0x55) get_robust_list$auto(r0, &(0x7f00000001c0)=&(0x7f0000000180)={{&(0x7f0000000080)={0xfffffffffffffffd}}, 0x9, &(0x7f0000000140)={&(0x7f0000000100)={&(0x7f00000000c0)}}}, &(0x7f0000000200)) bind$auto(0x3, 0x0, 0x6b) socket$nl_generic(0x10, 0x3, 0x10) 1m7.722177487s ago: executing program 35 (id=1520): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0xa, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x1, 0x0) mmap$auto(0x884d, 0xffd, 0x1ff, 0x15, r0, 0x14) socket(0x2, 0x6, 0x0) sysfs$auto(0x2, 0x0, 0x0) epoll_create$auto(0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/damon_reclaim/parameters/min_age\x00', 0x60b82, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket(0x23, 0x80805, 0x0) socket(0x1, 0x1, 0x1) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) getsockopt$auto(0x3, 0x200000000001, 0x1c, 0x0, 0x0) write$auto(r2, 0x0, 0x401) epoll_ctl$auto(0x5, 0x1, r1, 0x0) r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nbd11\x00', 0x4840, 0x0) fadvise64$auto(r3, 0x7ff, 0xc, 0x433) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) epoll_ctl$auto(0x5, 0x3, r1, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) socket(0x2, 0x1, 0x106) madvise$auto(0x0, 0xffffffffffff0005, 0x19) signalfd$auto(0xffffffff, 0x0, 0x8) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) 36.384834632s ago: executing program 5 (id=1628): mmap$auto(0x0, 0x200006, 0x2, 0x40eb1, 0x602, 0x300000000000) socket(0xa, 0x801, 0x4) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) msync$auto(0x0, 0x5, 0x6) 35.919366196s ago: executing program 5 (id=1629): r0 = socket$nl_generic(0x10, 0x3, 0x10) poll$auto(&(0x7f0000003640)={r0, 0x7, 0x6}, 0x6, 0x100000) r2 = syz_genetlink_get_family_id$auto_netdev(&(0x7f0000003900), r0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) settimeofday$auto(0xfffffffffffffffc, 0x0) socket(0x10, 0x3, 0x4) sendmsg$auto_NETDEV_CMD_QUEUE_GET(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000003980)={&(0x7f00000000c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01032bbd7000fddbdf250a00000008000200", @ANYRES32=0x0, @ANYBLOB="08000100fbffffff08000200", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="08000200", @ANYRES32=0x0, @ANYBLOB="08000200", @ANYRES32=0x0, @ANYBLOB="08000300040000000800030006000000"], 0x54}, 0x1, 0x0, 0x0, 0x2004c005}, 0xc4) 35.665611429s ago: executing program 5 (id=1630): openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x800008000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) mbind$auto(0x0, 0x100000004, 0x4, 0x0, 0x20000000000006, 0x2) 35.126263572s ago: executing program 5 (id=1634): r0 = clone$auto(0x21, 0x7, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x6) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$auto_BATADV_CMD_GET_DAT_CACHE(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r0, @ANYBLOB="57e72dbd70edfedbdf250d00000008000300d0"], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x10) close_range$auto(0x0, 0xfffffffffffff000, 0x2) bpf$auto(0x0, &(0x7f00000001c0)=@task_fd_query={0x9, 0x21eb, 0x7ff, 0x6, 0xa, 0x1000009, 0x5f, 0x0, 0x3}, 0x6f3) socket(0x10, 0x2, 0x0) memfd_create$auto(&(0x7f00000000c0)='\xc4--:\xdd:,./-${\x00', 0x4) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x3, 0x100) socket(0x2a, 0x2, 0x6) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmmsg$auto(0x3, &(0x7f0000000000)={{0x0, 0x2, 0x0, 0x106, 0x0, 0x1, 0x3}, 0xed7138c}, 0x7, 0x0) socket(0xa, 0x3, 0x6) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket(0xa, 0x2, 0x88) bpf$auto(0x0, &(0x7f0000000000)=@link_update={r3, @new_prog_fd=0x4, 0x4, @old_map_fd=r2}, 0xa3) socket(0x1e, 0x5, 0x0) recvfrom$auto(0x3, 0x0, 0x100, 0x101, 0x0, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r4 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200", @ANYBLOB=']'], 0x1ac}, 0x1, 0x0, 0x0, 0x8000}, 0x40) recvmmsg$auto(r4, &(0x7f0000000140)={{0x0, 0x4, &(0x7f0000000080)={0x0, 0x803}, 0x5, 0x0, 0x2, 0x8}, 0x800}, 0x10a, 0x8, 0x0) r5 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) ioctl$auto(r5, 0x560a, 0x7) 34.12707667s ago: executing program 5 (id=1640): mmap$auto(0x0, 0x200006, 0x2, 0x40eb1, 0x602, 0x300000000000) mremap$auto(0x200000, 0x3, 0x3fd6, 0x3, 0x20000000) r0 = fsopen$auto(&(0x7f0000000000)='+.\x00', 0x6) bpf$auto(0x4, &(0x7f00000001c0)=@info={r0, 0x4, 0x9243}, 0x10001) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/card1\x00', 0x40000, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$auto__ctl_fops_dm_ioctl(0xffffffffffffffff, 0x4020aea5, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mprotect$auto(0x1ffff000, 0x401003, 0x8) 32.948597928s ago: executing program 5 (id=1645): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nlctrl(&(0x7f0000000000), r0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x40000000003, 0x7) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) getpriority$auto(0xc, 0x7) listen$auto(r0, 0x3) mmap$auto(0x0, 0x8, 0xdf, 0x10009b72, 0x2, 0x8000) fstat$auto(0x2, 0x0) r1 = openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000001880), 0x10b040, 0x0) r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/time\x00') ioctl$NS_GET_PARENT(r2, 0xb701, 0x0) ioctl$auto_RTC_PARAM_GET(r1, 0x40187013, 0x0) setgroups$auto(0x8, &(0x7f0000000040)) ioperm$auto(0x7, 0x6, 0x2) sched_setattr$auto(0x3000000, &(0x7f00000002c0)={0x1000, 0x4e, 0x1d, 0xc, 0x6, 0x5f05, 0x2, 0x9, 0x877, 0x6}, 0x0) r3 = syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f00000000c0), r0) r4 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop4\x00', 0x402, 0x0) sendmsg$auto_OVS_FLOW_CMD_DEL(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010028bd7000fddbdf25020000002700078008005e00", @ANYRES32=r4, @ANYBLOB="4af264a6f23035cace00003ec52c054a14c95076e1c51f9061ecf2000500090027000000"], 0x44}, 0x1, 0x0, 0x0, 0x20000000}, 0x20044800) r5 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_THREADS_SET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x24, r5, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@NFSD_A_SERVER_GRACETIME={0x8, 0x2, 0x7b8}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4004000}, 0x40) 17.698538456s ago: executing program 36 (id=1645): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nlctrl(&(0x7f0000000000), r0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x40000000003, 0x7) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) getpriority$auto(0xc, 0x7) listen$auto(r0, 0x3) mmap$auto(0x0, 0x8, 0xdf, 0x10009b72, 0x2, 0x8000) fstat$auto(0x2, 0x0) r1 = openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000001880), 0x10b040, 0x0) r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/time\x00') ioctl$NS_GET_PARENT(r2, 0xb701, 0x0) ioctl$auto_RTC_PARAM_GET(r1, 0x40187013, 0x0) setgroups$auto(0x8, &(0x7f0000000040)) ioperm$auto(0x7, 0x6, 0x2) sched_setattr$auto(0x3000000, &(0x7f00000002c0)={0x1000, 0x4e, 0x1d, 0xc, 0x6, 0x5f05, 0x2, 0x9, 0x877, 0x6}, 0x0) r3 = syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f00000000c0), r0) r4 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop4\x00', 0x402, 0x0) sendmsg$auto_OVS_FLOW_CMD_DEL(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010028bd7000fddbdf25020000002700078008005e00", @ANYRES32=r4, @ANYBLOB="4af264a6f23035cace00003ec52c054a14c95076e1c51f9061ecf2000500090027000000"], 0x44}, 0x1, 0x0, 0x0, 0x20000000}, 0x20044800) r5 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_THREADS_SET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x24, r5, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@NFSD_A_SERVER_GRACETIME={0x8, 0x2, 0x7b8}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4004000}, 0x40) 12.269787464s ago: executing program 8 (id=1705): r0 = syz_genetlink_get_family_id$auto_smc_gen_netlink(&(0x7f0000000040), 0xffffffffffffffff) openat2$dir(0xffffffffffffff9c, 0x0, &(0x7f0000000080)={0x408c0, 0x40, 0x10}, 0x18) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_RPC_STATUS_GET(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r3, 0x309, 0x70bd27, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$auto_NFSD_CMD_VERSION_GET(r1, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, r3, 0x200, 0x70bd2c, 0x25dfdbfd, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x40000) sendmsg$auto_SMC_NETLINK_DISABLE_SEID(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYRES16=r0, @ANYBLOB="013b"], 0x14}, 0x1, 0x0, 0x0, 0x880}, 0x810) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x3c, r5, 0x1, 0x70bd2d, 0x25dfdbf9, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x8}, @L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x11e789c}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_FD={0x8, 0x17, r4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x48080) r6 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000009c0)='/proc/self/net/icmp6\x00', 0x8000, 0x0) read$auto_proc_reg_file_ops_compat_inode(r6, &(0x7f0000000e80)=""/215, 0xd7) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmmsg$auto(r7, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080), 0xfbe}, 0x2, &(0x7f00000002c0), 0x7, 0xa505}, 0xa}, 0x4, 0x4008) 6.024572221s ago: executing program 6 (id=1760): r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) mmap$auto(0x20000000000, 0x7ff, 0xffb, 0x8000000008011, 0x3, 0x0) socket(0x25, 0x1, 0x3) close_range$auto(0x2, 0x8, 0x0) ioctl$auto_SNDCTL_DSP_GETOPTR(r0, 0x800c5012, 0x0) syz_genetlink_get_family_id$auto_batadv(0x0, 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket(0x10, 0x2, 0x0) read$auto(r3, 0x0, 0x5) r4 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000001340), 0xffffffffffffffff) openat$auto_ucma_fops_ucma(0xffffffffffffff9c, &(0x7f0000000040), 0x181080, 0x0) r5 = syz_genetlink_get_family_id$auto_wireguard(&(0x7f00000000c0), r2) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$auto_ovs_meter(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$auto_OVS_METER_CMD_GET(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)={0x20, r7, 0x1, 0x70bd25, 0x25dfdbfd, {}, [@OVS_METER_ATTR_CLEAR={0x4}, @OVS_METER_ATTR_ID={0x8, 0x1, 0xc}]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x44800) fstat$auto(0xffffffffffffffff, &(0x7f0000000000)={0x9, 0xffc, 0x7, 0xfffffffd, 0x0, 0xee01, 0x0, 0x6, 0x1, 0x5, 0xc0f, 0x2, 0x7ff, 0x92bc, 0xffffffff, 0x6, 0x3}) r9 = getuid() setreuid$auto(r8, r9) sendmsg$auto_OVS_METER_CMD_SET(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000400)={&(0x7f00000006c0)={0x3f8, r7, 0x400, 0x70bd29, 0x25dfdbfd, {}, [@OVS_METER_ATTR_CLEAR={0x4}, @OVS_METER_ATTR_BANDS={0x3b8, 0x4, 0x0, 0x1, [@nested={0x3b3, 0xac, 0x0, 0x1, [@nested={0x228, 0xf6, 0x0, 0x1, [@nested={0xb8, 0x11f, 0x0, 0x1, [@typed={0x8, 0x36, 0x0, 0x0, @uid=r9}, @typed={0x8, 0x135, 0x0, 0x0, @uid}, @typed={0x9a, 0x123, 0x0, 0x0, @binary="e66f4ae4cc8f9159cb21c9deb8cdc974f0df66d9661e54956f5ff97b98e826d5a04991f75025c08d084cfc616601470dd37310e19470fb0f2f6d7f859dbd87a0e2075924989f877f8ee094fdb2e0e518672bacdba753b33c2879fd7ed5b85664c0b9f7542d42ae8affd1ad1e06fc6c8ba11af14bf01fa0d13253b4675abc45ae85362cc7b90efe071c01b36aca9b70fb065e8762b5ef"}, @typed={0x8, 0xa4, 0x0, 0x0, @u32=0x9}]}, @typed={0x8, 0x21, 0x0, 0x0, @uid}, @typed={0x8, 0xe4, 0x0, 0x0, @u32=0x5}, @nested={0x90, 0x6, 0x0, 0x1, [@nested={0x4, 0x1}, @nested={0x4, 0x93}, @typed={0x8, 0x30, 0x0, 0x0, @fd}, @typed={0x78, 0x12, 0x0, 0x0, @binary="f562cbb7fd0ecd07baf130213966df8e434de7ddd4fe666cee962fbce1da97b5794314fd64570b28e7a65f6269606a69f880d1760bb46adc01916fa56fee03ebc1b4f8a62bce59b3237b950cc461c30f7a06b29f461ad3832a0a33cc93e39771887be2e0761197a8e49b02eece02fb790b5d19fc"}, @nested={0x4, 0x133}]}, @nested={0xcc, 0x68, 0x0, 0x1, [@typed={0x9b, 0x43, 0x0, 0x0, @binary="d9aeaf8208c0ca6d130f4c1de9b6d02547d53964e33d109882897291f8f040e6335b22110a07d649af3eecbf9cc3cb8d91de64cff75b3c588ad5ddae6734436bfe5dc2e6f3f1110b336a82a8e65551a653e9d753046993247ace2fdb2400030dbccf6dbae00afe4bc12373093822d9fae2e27d471231186e2a27454846696f497d00b4fc4d9a12297503dce6a5f60cfe1b26765c5e3f03"}, @typed={0x10, 0x125, 0x0, 0x0, @str='/dev/uinput\x00'}, @typed={0xc, 0x3f, 0x0, 0x0, @u64=0xd}, @nested={0x4}, @typed={0xc, 0x9a, 0x0, 0x0, @str='^*\xef,-\xc9%\x00'}]}]}, @generic="7fcd18ace4e3f62967c5cf7f364200728590b3274d6fc4594cdeef52489e4dea1068ac7df83f1d6d7180efd2f750e5a81263badb996d53de9780d88e7f2e7ac30d46b57e6d563930232da132050fd2c0627db71caa16354359fa28ba9b7b1f37baeb8dc693eabd15ec4ed2b7338c802ec198e570f883d2733b526f142b74704664a0cd7d22d98e5ce2e5a8cc37ca3d2b2dc63c04f5b904c1db2b59aa003269b29ff6bf", @generic="5948bd564f2db5889b2e31fb5ec036c36d74517495db4b0b9ff8dc1456eb1a0383629ed91d382dc63833575f797991b5b2425c3d1c3b44cbddd9a0e6238e90731381abb8f99160ebf23f1a00a6618717f3e34b45b925e5848e3e0fd382bb1d375694d57508260de3095cfd2947e2108cf0fc29b4dd061e533e161e59c8b2f5ad20106735f294bd34e0877f8080f508b384a16598be05617532308d6d926e96e9002477649f07162308cd9d7dbbae35e7f0ac14c8b25deebbe7baf2283f5f728217303981702f7e63c35999bd690e261710af4d9e0d5f62e47ef47f5150ba50ec7fb9dfc0"]}]}, @OVS_METER_ATTR_ID={0x8}, @OVS_METER_ATTR_STATS={0x14, 0x3, {0x3, 0x8000000000000000}}, @OVS_METER_ATTR_ID={0x8, 0x1, 0x101}, @OVS_METER_ATTR_KBPS={0x4}]}, 0x3f8}, 0x1, 0x0, 0x0, 0x44034}, 0x84) msgctl$auto(0x4, 0xfffffffd, &(0x7f00000001c0)={{0x1, 0xee01, 0xee00, 0x4, 0x2, 0x164, 0x200}, &(0x7f0000000140)=0x3, &(0x7f0000000180), 0x9, 0x657a, 0x8310, 0xeae6, 0x42712b3f, 0x8, 0x3, 0x7, @raw=0xf740, @raw=0x5}) sendmsg$auto_WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1010000}, 0xc, &(0x7f0000000580)={&(0x7f0000000240)={0x308, r5, 0x200, 0x70bd25, 0x25dfdbfb, {}, [@WGDEVICE_A_PRIVATE_KEY={0xd1, 0x3, "35ab0069b0753b5e3004141ff7d911a519871ef4ff534c9307b8f1214f9cce49b5ff7f8502aa80bfa6dfd71cc3bb37abab75115374131242872cc568fa361a0d884be1065a9cf3aba7683262584a2def4b79d088a221f45d209291497359a36cb80d70a77b5426e67c5622b84384986f21afdc5886d6a05b606a85c21530fe2392bb81ca30ecdad377b16573149169973aed74a149cff42e1d84795b85aa28682c6d3aef2d8c63e583713d82af8655131487b2f50976eda349bb6a80229dc5be52a63832c137fec575ca73cad2"}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e21}, @WGDEVICE_A_PEERS={0x171, 0x8, 0x0, 0x1, [@typed={0xc, 0x134, 0x0, 0x0, @u64=0x3}, @generic="85a242d106a5f85e602dc136d8542e316cfb15a5f099807cd03a6799d737bf4400efc833f7c059f8bc0b9d03847c0059c874d4e2925c70b26924758f1be70f1c78655d5bb6f20e0a3be7c7b35b82857cef6cc9b1bc4a7c6dab5789595554364151eb649fc395f84c7febc372c4509986d786917e23db097e0c4bd44fa8b2f30d22c6b79b8fa6885da54a897acd901b6470de6d3009c7492275234b9b9d783a5ebcb771cbff5a1bdf766b83464b8a4a0347127dc587b8534339ee580788", @generic="ec7b44697d969826e718df5b939787f02f9faaac4432a5c49960d13620a20af9ce60374f987964ac13b9e42c8520c5f05eedf62d4f47abfa2260c927f07ff1ee864adbe030245a5c8574dd0d76df5391ec716d16467c7a053c4004370a71e2416fa191e11e33b2294c66359b64b0557ab06efc5cdcf3133e521004d018495be5a46a1bc5647e3391adf5da9f", @typed={0x8, 0x4b, 0x0, 0x0, @u32=0x10000}, @typed={0x8, 0xec, 0x0, 0x0, @uid=r9}, @typed={0x8, 0x42, 0x0, 0x0, @uid=r10}]}, @WGDEVICE_A_PRIVATE_KEY={0x26, 0x3, "4fc463cf7e229ad414f76f14a27828df4c4b7acdbef4adfb6b515ee7d95d43ff347f"}, @WGDEVICE_A_PEERS={0x72, 0x8, 0x0, 0x1, [@generic="2fb1d8b4d66bc88c2ea62e042203d386b52cabe11c3381220e8f1b2fd55f1fad58d483607997edd07f47160b9ca43de12652700ca12da3936cd37be418dfd54e85984a016b1d31268eafdbb2c6786c4ef59eff10e0d6dafb2f59d3aee90e8de60eb371ae6645ea052b27f59bb46c"]}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x7}]}, 0x308}, 0x1, 0x0, 0x0, 0xcc80}, 0x400c840) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r1, &(0x7f0000001400)={0x0, 0x0, &(0x7f00000013c0)={&(0x7f0000001380)={0x18, r4, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@HWSIM_ATTR_DESTROY_RADIO_ON_CLOSE={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x24040000}, 0x18800) setsockopt$auto(r1, 0xfffffffc, 0x7, &(0x7f0000000080)='\xc0+,\x00', 0x3) close_range$auto(0x2, 0x8000, 0x0) 4.949766196s ago: executing program 6 (id=1763): mmap$auto(0x0, 0x202000b, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000500), 0x202002, 0x0) ioctl$auto_PPPIOCSMRU(r0, 0xc004743e, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/net/phonet\x00', 0x100, 0x0) mprotect$auto(0x1ffff000, 0x8000000000000004, 0xd) ioctl$auto_PPPIOCSACTIVE(r0, 0x40107446, &(0x7f0000000000)={0xb63e, 0x0}) (async) r1 = socket(0x2a, 0x2, 0x1) connect$auto(r1, &(0x7f0000000140)=@qipcrtr={0x2a, 0x1, 0x3fff}, 0x57) mprotect$auto(0x1ffff000, 0x8000000000000001, 0x4) (async) sendmsg$auto_NL80211_CMD_GET_REG(r1, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc000}, 0x40) (async) r2 = socket(0x10, 0x2, 0x0) lstat$auto(0x0, &(0x7f0000000180)={0xfffffffdfffffff7, 0x3f, 0x100000001, 0x7, 0x0, 0x0, 0x0, 0x1000000001, 0x9, 0x400000000000007, 0x400, 0x7ffffffb, 0x5, 0xffffffff7ffffeff, 0x5, 0xc82, 0xff}) (async) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="1000"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) (async, rerun: 32) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) (async, rerun: 32) socket(0x2, 0x3, 0x1) (async) r3 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f0000000400), r2) madvise$auto(0x0, 0x2000040080000016, 0xe) (async) futex_waitv$auto(&(0x7f0000000000)={0xf, 0x5d94, 0x4, 0x4}, 0x77, 0x0, 0x0, 0x62bd) (async) mprotect$auto(0x1ffff000, 0x8000000000000001, 0x4) (async) io_uring_setup$auto(0x40005, &(0x7f0000000000)={0x6, 0x1, 0x400, 0x7, 0x1005, 0x6, 0x7, [0x4, 0x2e9, 0x8], {0x0, 0x1, 0x8, 0x7, 0x5, 0x100005, 0x1, 0xfffffffc, 0x7}, {0x4, 0xfff, 0xffff7fff, 0x2, 0x8, 0x200, 0x3, 0x0, 0x3}}) (async) mprotect$auto(0x1ffff000, 0x1003, 0x8) (async) clone$auto(0x200, 0xff, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x100000000) (async) sendmsg$auto_CTRL_CMD_GETFAMILY(r2, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x2c, r3, 0x200, 0x70bd26, 0x25dfdbfd, {}, [@CTRL_ATTR_FAMILY_ID={0x6, 0x1, 0x8}, @CTRL_ATTR_FAMILY_ID={0x6, 0x1, 0x3}, @CTRL_ATTR_FAMILY_ID={0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4c040}, 0x20000000) (async) r4 = open(&(0x7f0000004080)='./file0\x00', 0x40, 0x23) (async) socket(0x2, 0x3, 0x6) (async, rerun: 64) socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000140), r4) sendmsg$auto_BATADV_CMD_GET_ROUTING_ALGOS(r5, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x68, r6, 0x100, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_NEIGH_ADDRESS={0xa, 0x18, @local}, @BATADV_ATTR_ALGO_NAME={0x5, 0x2, '\x00'}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xdd5}, @BATADV_ATTR_DAT_CACHE_VID={0x6, 0x25, 0xe}, @BATADV_ATTR_LOG_LEVEL={0x8, 0x36, 0x200}, @BATADV_ATTR_MCAST_FLAGS_PRIV={0x8, 0x27, 0xfffffffb}, @BATADV_ATTR_TPMETER_RESULT={0x5, 0xa, 0xe}, @BATADV_ATTR_VERSION={0x4}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_TT_LAST_TTVN={0x5, 0x12, 0x3d}]}, 0x68}, 0x1, 0x0, 0x0, 0x24000001}, 0x0) (async) close_range$auto(0x7, 0xfffffffffffffff8, 0x2) 4.896594379s ago: executing program 7 (id=1764): openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/adsp1\x00', 0x8841, 0x0) r0 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, r0, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@NL80211_ATTR_AP_SETTINGS_FLAGS={0x8, 0x135, 0x251}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2404c043}, 0x4004000) mmap$auto(0x0, 0x2020006, 0x3, 0x4000000eb1, 0xfffffffffffffffa, 0x0) write$auto(0x3, 0x0, 0xfffffdef) r1 = openat$auto_ocfs2_control_fops_stack_user(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) readv$auto(r1, &(0x7f0000001640)={0x0, 0x4}, 0x2) madvise$auto(0x0, 0x10001, 0x100000003) 4.418069454s ago: executing program 6 (id=1765): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) getrandom$auto(0x0, 0x6000000, 0x3) madvise$auto(0x0, 0x3, 0x15) (fail_nth: 1) 4.278271777s ago: executing program 6 (id=1767): openat$auto_zero_fops_mem(0xffffffffffffff9c, &(0x7f00000003c0), 0x800, 0x0) openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyta\x00', 0x513a00, 0x0) mq_open$auto(&(0x7f0000000080)='&\'!*\x00', 0x9, 0x6, &(0x7f00000000c0)={0x1, 0x8, 0xfffffffffffffffb, 0x4}) r0 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video1\x00', 0xc0400, 0x0) mmap$auto(0x0, 0x2, 0xdb, 0x9b72, 0x6, 0x100000000) ioctl$auto(0x3, 0x4020565a, 0x34) mmap$auto(0x0, 0x9, 0xdf, 0x1000000eb1, 0x401, 0x8000) syz_clone(0x2000011, 0x0, 0x0, 0x0, 0x0, 0x0) sysfs$auto(0x2, 0x4, 0x2) close_range$auto(0x0, 0xfffffffffffff000, 0x2) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) sysfs$auto(0x2, 0x100000000000035, 0x0) fsopen$auto(0x0, 0x1) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) pidfd_open$auto(0x1, 0x0) socket(0x9, 0xa, 0xa) r1 = signalfd4$auto(0xffffffff, 0x0, 0x8, 0x0) read$auto(0x3, 0x0, 0x80) r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000001080), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) r5 = syz_clone3(&(0x7f00000000c0)={0x6080, 0x0, 0x0, 0x0, {0x7}, 0x0, 0x0, 0x0, 0x0}, 0x58) sendmsg$auto_NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000500)=ANY=[@ANYRES32=r0, @ANYRES16=r5, @ANYBLOB="810b25bd7000ffdbdf253200000008000300", @ANYRES32=r4, @ANYRES32, @ANYRESDEC=r1], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_REQ_SET_REG(r6, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="080027bd7000fedbdf251b0000000800090001000000060096000800000006001000061200000600eb00c3000000060098000400000004007300040008010500d30000000000"], 0x4c}, 0x1, 0x0, 0x0, 0x884}, 0x800) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) mount$auto(0x0, &(0x7f0000000100)='}[,&*}\x00', &(0x7f0000000040)='nfs.\x00\xd7zuX]>\x94,G[\x04\xb44HK7', 0x10001, 0x0) openat$auto_tracing_mark_raw_fops_trace(0xffffffffffffff9c, &(0x7f0000000340)='/sys/kernel/debug/tracing/trace_marker_raw\x00', 0x101800, 0x0) 3.889425839s ago: executing program 6 (id=1769): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r0 = socket(0x2, 0x1, 0x0) bind$auto(r0, &(0x7f0000000040)=@in={0x2, 0x4e23}, 0x67) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x2, 0xb}, 0x800009}, 0x5, 0x20000000) gettid() (async) rseq$auto(&(0x7f0000000300)={0xe, 0x401, 0x0, 0x6, 0xffffffff, 0x2}, 0x8000, 0x0, 0x6) geteuid() (async, rerun: 64) open(&(0x7f0000000800)='./file0\x00', 0x62240, 0x154) (async, rerun: 64) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x40000000003, 0x7) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) madvise$auto(0x0, 0xffffffffffff0001, 0x15) (async) getpriority$auto(0xc, 0x7) mmap$auto(0x0, 0x5, 0xfffffffffffffe01, 0x8011, 0x3, 0x8000) (async) mremap$auto(0x0, 0x7, 0x3fd6, 0x0, 0x1ffffffe) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async, rerun: 32) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) (rerun: 32) madvise$auto(0x0, 0xffffffffffff0005, 0x19) (async) madvise$auto(0x0, 0xffffffffffff0001, 0x15) socket(0xa, 0x2, 0x0) select$auto(0x3, 0x0, &(0x7f0000000100)={[0xd, 0x200, 0x0, 0xc, 0x8, 0x3, 0x6, 0x2, 0x9, 0x5e582970, 0x4000000000000000, 0x2, 0x4, 0x5, 0x8, 0x6]}, 0x0, 0x0) (async) write$auto(0x3, 0x0, 0xfdef) (async) recvmmsg$auto(0x3, 0x0, 0x10000, 0x6, 0x0) (async, rerun: 32) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc1b7573919a8c4e4}, 0x810) (async, rerun: 32) bpf$auto(0x0, 0x0, 0xfbf) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x89b0, &(0x7f0000000140)={'vlan0\x00'}) (rerun: 64) shutdown$auto(0x200000003, 0x2) (async, rerun: 64) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) (async, rerun: 64) write$auto(0x3, 0x0, 0x296) 3.061882284s ago: executing program 1 (id=1770): r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mtrr\x00', 0xc0000, 0x0) ioctl$auto(r0, 0x400c4d03, 0x83) setreuid$auto(0xffffffffffffffff, 0x0) openat$auto_ima_measure_policy_ops_ima_fs(0xffffffffffffff9c, &(0x7f0000000040), 0x2dc08f24db163610, 0x0) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x40d81, 0x0) write$auto_proc_reg_file_ops_compat_inode(r1, &(0x7f0000000100), 0x0) socket(0x26, 0x80000, 0x3) r2 = socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x801, 0x84) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x801, 0x84) mmap$auto(0x0, 0x2020009, 0x3, 0xeb2, 0xfffffffffffffffb, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0xb, 0x800, 0x800005) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'syz_tun\x00'}) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) sendmsg$auto_WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4008810}, 0x20008000) connect$auto(0x3, &(0x7f0000000000), 0x55) close_range$auto(0x2, 0x8000, 0x0) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x1e, &(0x7f0000000000), 0x1) recvfrom$auto(0x3, 0x0, 0x800000000e, 0xfffff4a4, 0x0, 0xfffffffffffffffd) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x40000) socket(0x10, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x100000000, 0x5, 0x1d, 0x940, 0x1ffde, 0x3, 0x2000000000000006, 0x2, 0x9, 0x5, 0x2, 0x8, 0xae, 0x9, 0x2, 0x7, 0x5, 0x7, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, [0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x400000, 0x0, 0x80000000000, 0x400000000000000, 0x0, 0x8000000000000000, 0x80000000000000, 0x0, 0xfffffffffffffffd, 0x0, 0xfffffffffffffbfe, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x8, 0xfffffffffffffffe, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001]}, 0x1fe, 0x81) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) 2.827575331s ago: executing program 1 (id=1771): r0 = syz_genetlink_get_family_id$auto_smc_gen_netlink(&(0x7f0000000040), 0xffffffffffffffff) openat2$dir(0xffffffffffffff9c, 0x0, &(0x7f0000000080)={0x408c0, 0x40, 0x10}, 0x18) sendmsg$auto_SMC_NETLINK_DISABLE_SEID(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYRES16=r0, @ANYBLOB="013b"], 0x14}, 0x1, 0x0, 0x0, 0x880}, 0x810) r1 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r2 = pidfd_open$auto(0x0, 0x3) ioctl$auto_SNDCTL_DSP_SYNC(r2, 0x5001, 0x0) r3 = socket(0x2, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) sendmmsg$auto(r3, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x5, 0x20000000) write$auto(0x3, 0x0, 0xfffffdef) fcntl$auto(0x3, 0x4, 0xa553) sendmsg$auto_WG_CMD_GET_DEVICE(0xffffffffffffffff, 0x0, 0x2000c041) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) socket(0xa, 0x1, 0x84) connect$auto(0x3, &(0x7f00000000c0), 0x55) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) fcntl$auto(0xffffffffffffffff, 0x401, 0x5) sendmsg$auto_OVS_METER_CMD_SET(0xffffffffffffffff, 0x0, 0x40) write$auto(0x3, 0x0, 0xfffffdef) unshare$auto(0x40000080) sendmmsg$auto(r1, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080), 0xfbe}, 0x2, &(0x7f00000002c0), 0x7, 0xa505}, 0xa}, 0x4, 0x4008) 2.19660809s ago: executing program 1 (id=1772): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_ETHTOOL_MSG_PLCA_GET_STATUS(r0, &(0x7f0000000480)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000440)={&(0x7f0000000340)={0xa0, 0x0, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@ETHTOOL_A_PLCA_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_PHY_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}, @ETHTOOL_A_HEADER_PHY_INDEX={0x8, 0x4, 0x3a638da5}]}, @ETHTOOL_A_PLCA_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_PLCA_HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_PHY_INDEX={0x8, 0x4, 0xb5a5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7c981acf}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_PHY_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}]}, @ETHTOOL_A_PLCA_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_PHY_INDEX={0x8, 0x4, 0x5}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x4004}, 0x40800) syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000080), r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000400), r1) sendmsg$auto_ETHTOOL_MSG_MODULE_EEPROM_GET(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000001c0)={0x34, r2, 0x305, 0x70bd26, 0x25dfdbfc, {}, [@ETHTOOL_A_MODULE_EEPROM_PAGE={0x5, 0x4, 0x9}, @ETHTOOL_A_MODULE_EEPROM_OFFSET={0x8, 0x2, 0x1}, @ETHTOOL_A_MODULE_EEPROM_LENGTH={0x8, 0x3, 0x4}, @ETHTOOL_A_MODULE_EEPROM_I2C_ADDRESS={0x5, 0x6, 0xe}]}, 0x34}, 0x1, 0x0, 0x0, 0x34044040}, 0x4) sendmsg$auto_ETHTOOL_MSG_PLCA_SET_CFG(r0, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x2c, r2, 0x300, 0x70bd29, 0x25dfdbfb, {}, [@ETHTOOL_A_PLCA_ENABLED={0x5, 0x3, 0x1}, @ETHTOOL_A_PLCA_NODE_ID={0x8, 0x6, 0x7}, @ETHTOOL_A_PLCA_ENABLED={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x81) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x4, 0x300000000000) bpf$auto(0x0, &(0x7f0000000780)=@link_update={0xa, @new_map_fd=0x5, 0x4007, @old_prog_fd=0x13b}, 0xa3) close_range$auto(0xffffffffffffffff, 0xfffffffffffff000, 0x5) socket(0x2, 0x1, 0x106) recvmmsg$auto(0x3, 0x0, 0x10000, 0x300, 0x0) socket(0x11, 0x2, 0x88) sendmsg$auto_WG_CMD_GET_DEVICE(0xffffffffffffffff, 0x0, 0x20008000) r3 = socket(0x2, 0x801, 0x106) mmap$auto(0xfffffffffffffffa, 0x9, 0x9, 0x16, 0x80, 0x7) getsockopt$auto(r3, 0x11c, 0x2, 0x0, 0x0) socket(0x6, 0x4, 0x5) ioctl$auto(r3, 0x4, 0x8) io_uring_setup$auto(0x7, &(0x7f0000000000)={0x10000, 0x80, 0xe, 0x8, 0x1fd, 0x4, r3, [0x7fffffff, 0x8, 0x6], {0x5, 0x800000a, 0x200, 0xffffffff, 0x81, 0x1ff, 0x7, 0x8, 0x200}, {0x1136400, 0x72, 0x1800000, 0x4, 0x8, 0x4, 0x3b72, 0x80, 0xffffffffffffffff}}) bind$auto(r3, 0x0, 0x800) connect$auto(0x3, 0x0, 0x55) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) write$auto(0x3, 0x0, 0x3f00) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r5, 0x1b, 0x70bd26, 0x25dfdbfd, {}, [@OVS_PACKET_ATTR_PROBE={0x4}, @OVS_PACKET_ATTR_PACKET={0x12, 0x1, "898771f1c19f1779048590828847"}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4004040}, 0xc800) madvise$auto(0x0, 0xffffffffffff0001, 0x15) connect$auto(0x3, &(0x7f00000000c0), 0x55) move_pages$auto(0x0, 0xd0, 0x0, 0x0, 0x0, 0x2) 1.778860971s ago: executing program 7 (id=1773): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22240, 0x155) r0 = socket(0x2, 0x80802, 0x0) setsockopt$auto(r0, 0x11, 0x67, 0x0, 0x8) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) listmount$auto(0x0, 0x0, 0x368, 0x0) openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000005280), 0x40400, 0x0) connect$auto(0x3, &(0x7f0000000140), 0x55) socket(0x2, 0x5, 0x0) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 1.47403932s ago: executing program 7 (id=1774): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) getrandom$auto(0x0, 0x6000000, 0x3) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8, 0x0) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) setsockopt$auto(0x3, 0x1, 0x10, 0x0, 0x9) sendmsg$auto_NL80211_CMD_STOP_SCHED_SCAN(r0, 0x0, 0x8d0) ioctl$auto(0x3, 0x89e0, 0x38) madvise$auto(0x0, 0x3, 0x15) 1.17251932s ago: executing program 1 (id=1775): mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/nbd10/queue/iosched/prio_aging_expire\x00', 0x202, 0x0) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) r1 = io_uring_setup$auto(0x1, 0x0) futex$auto(0x0, 0x6, 0x8, 0x0, 0x0, 0x80000001) r2 = gettid() futex$auto(0x0, 0x6, 0x8, 0x0, 0x0, 0x80000001) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x7, 0x800008000) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000080), r1) ioctl$auto_UDMABUF_CREATE(r1, 0x40187542, &(0x7f0000000100)={r1, 0x9, 0x4, 0x9}) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x82802, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) write$auto(0x3, 0x0, 0xfffffdef) ioctl$auto(0x3, 0x2201, 0x38) ioctl$auto_VHOST_GET_BACKEND_FEATURES2(r3, 0x8008af26, &(0x7f0000000140)=0x2) eventfd$auto(0x8c) ioctl$auto_SNDCTL_DSP_GETODELAY(r1, 0x80045017, &(0x7f00000000c0)=0x8001) socket(0x10, 0x2, 0x4) io_uring_setup$auto(0x6, 0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000010c0)='/dev/snd/controlC1\x00', 0x802, 0x0) ioctl$auto(0x3, 0xc0045520, 0x38) close_range$auto(0x2, 0x8000, 0x0) mmap$auto(0x0, 0x402000a, 0xe4, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x400000008, 0xdf, 0x9b72, 0x3, 0xffff) kill$auto(r2, 0x11) write$auto(r0, &(0x7f0000000000)='):\x00', 0x2) mremap$auto(0x4000, 0xfee0, 0x3fd6, 0x3, 0x0) mmap$auto(0x2000, 0x9, 0x3ff57696, 0x9b72, 0x2, 0x8000000000008000) 798.566429ms ago: executing program 7 (id=1776): mmap$auto(0x0, 0x200006, 0x2, 0x40eb1, 0x602, 0x300000000000) mremap$auto(0x200000, 0x3, 0x3fd6, 0x3, 0x20000000) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/card1\x00', 0x40000, 0x0) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$auto__ctl_fops_dm_ioctl(0xffffffffffffffff, 0x4020aea5, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mprotect$auto(0x1ffff000, 0x401003, 0x8) 533.167949ms ago: executing program 7 (id=1777): mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) r0 = prctl$auto(0x3e, 0x0, 0x1, 0x0, 0x10) r1 = syz_genetlink_get_family_id$auto_smc_gen_netlink(&(0x7f0000000040), 0xffffffffffffffff) keyctl$auto(0x1d, 0x7ffffffffffffffd, 0x0, 0x0, 0x882d) mmap$auto(0x0, 0x9, 0xdf, 0xeb1, 0x401, 0x8000) io_uring_setup$auto(0x6, 0x0) mmap$auto(0x0, 0xc, 0x9c0f, 0x44eb2, 0x10006, 0x300000000000) getcwd$auto(0x0, 0xffffffffffffffff) openat2$dir(0xffffffffffffff9c, 0x0, &(0x7f0000000240)={0x8040, 0x28, 0x10}, 0x18) socket(0xa, 0x2, 0x0) get_robust_list$auto(0x0, &(0x7f0000000780)=&(0x7f0000000740)={{&(0x7f0000000640)}, 0x200, &(0x7f0000000700)={&(0x7f00000006c0)={&(0x7f0000000680)}}}, &(0x7f00000007c0)=0x9) mmap$auto(0x0, 0x20006, 0xdf, 0xeb1, 0x0, 0x8000) getsockopt$auto(0x4, 0x1, 0x47, 0x0, 0x0) socket(0x2, 0x6, 0x0) connect$auto(0x3, &(0x7f0000000180), 0x6) r2 = open(&(0x7f0000000100)='.\x00', 0x40000, 0x0) sync_file_range$auto(r2, 0xe, 0xe, 0x3) openat2$dir(0xffffffffffffff9c, 0x0, &(0x7f0000000080)={0x408c0, 0x40, 0x10}, 0x18) sendmsg$auto_SMC_NETLINK_DISABLE_SEID(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="013b"], 0x14}, 0x1, 0x0, 0x0, 0x880}, 0x810) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket(0x5, 0x80003, 0xb) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) mount$auto(0x0, &(0x7f0000000100)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0x10002, 0x0) mount$auto(0x0, &(0x7f0000000100)='}[,&*}\x00', 0x0, 0xfffd, 0x0) ioctl$auto(0x3, 0x541b, 0xfffffffffffff4e0) sendmmsg$auto(r3, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080), 0xfbe}, 0x100000002, &(0x7f00000002c0), 0x7, 0xa505}, 0xa}, 0x4, 0x4) sendfile$auto(r0, r4, &(0x7f00000000c0)=0xffff, 0x0) kexec_load$auto(0x5, 0x4, &(0x7f0000000000)={@buf=&(0x7f0000000240)="31e1a8ee812c63a7f63cc885c09935af2003cf7b05c1f57515e6d99195d42f602ef0f62587837acedf7cf69e194b4681d64855e6e992f7ef3afe2fd738961311f5e0f9563209660685c3db140508788956a4c72018aa3644a748b76c1222379defac00de6cf0bfa431c3236c49cd3174d59703e1718a010ce77a44db3ec898d317ef7a298d760e4017e8918bcbc95dd478c0109fd0a87ce39b1154a123e930e1329c4a05027e31c57e323f1313575509be45d08afbf41a5949a94533a600fdef779e7b0819b5", 0x9, 0xfffffffffffffffd, 0x3}, 0x6) r5 = syz_clone(0x1020200, &(0x7f0000000340)="eec3c50da5565b7095d73f43f2dd1376e92bf1b260effb12cb97241ae3f27e9c654431b32c0207db6e818a2a1b6dc97c04a1ccb1f579ecedb1f95696b6f6c24ce44dfa17562c0ea5fde11ca210dbd094bf5b69af21d2204d223f54044acf09ab5a285aeb854f17eff759db0f97a70dd05f20b1970d4276d9abdc944d93daa9960adf5b32d4ed3462f670fd476bea535c77f480c0ad9373e9936da099478b643118e880fd2eedabd616233d34103332c4f69250b84fba4e23147d9526ac1dc435bc2ec39f33bbf70563a299be7f47f4070b93254b1fd97bf8b60c1d9e81619098a7f468a22727e9499f524aba5c", 0xed, &(0x7f00000001c0), &(0x7f0000000440), &(0x7f0000000480)="6b1e7823f9959d3aae267c119fb1ccbf61f5b496145d1038cc849eb1960a8bac6aa8b789f6ef4e45dc9cf97e3680bb63d3101edb11b62f6a01d3c10c3a00bc83137095a560a423278e5f") fcntl$auto(r0, 0x3, r5) 231.129476ms ago: executing program 7 (id=1778): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000300)='/proc/self/smaps_rollup\x00', 0x40000, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000540)='/sys/kernel/mm/ksm/advisor_mode\x00', 0xa0b42, 0x0) write$auto(r1, &(0x7f00000002c0)='\x00', 0x131) sendmmsg$auto(0xffffffffffffffff, &(0x7f00000001c0)={{&(0x7f0000000000), 0x5aa, 0x0, 0x5, 0x0, 0x5, 0x1001}, 0x5}, 0x4, 0x100) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) getcwd$auto(0x0, 0xffffffffffffffff) remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0xb74, 0x66a) madvise$auto(0x0, 0x5, 0x15) read$auto_proc_pid_maps_operations_internal(r0, &(0x7f00000010c0)=""/4096, 0x1000) 220.798448ms ago: executing program 1 (id=1779): r0 = openat$auto_ima_measure_policy_ops_ima_fs(0xffffffffffffff9c, &(0x7f0000000000), 0x480000, 0x0) mmap$auto(0x100000000, 0x4, 0x2000000df, 0xeb1, r0, 0x8000) ioperm$auto(0x7, 0x6, 0x2) mmap$auto(0x0, 0x20009, 0xe1, 0xeb1, 0x40000000000a5, 0x8000) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) r1 = open$dir(&(0x7f0000000000)='./file0\x00', 0x42, 0x20) timer_create$auto(0xb, 0x0, 0x0) socket(0x6, 0x5, 0x205) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x2, 0x0) open_tree$auto(r1, 0x0, 0x1001) mknod$auto(&(0x7f00000003c0)=':,\x00\xbd\x80\xd6\x002\xb37\xff\x1a\x9e99\xda\xd1v\'\xc6\xd2Fw;\x00v\xdce\xad\xf4\xdb\xc7\x946\xe4\f\x9el]L+\x06\x130V\x1b,d\x8f\xa0\xabDUdk\xac\x82\\tyQ\xd8j\a\x1a[\xdb\x96\x1f{2\x04\xc5Y\xc1@\x0e\xeeWZ\x94N\xd4\xc8q=\x9b\xd1\x7fR3\xb6`\x00\xb3\xe5|1\xba\r\x85\x89\xfe\xed\xe1\xad`\x92\xc7\x9c\xd7\xd8\x15\t&\xb7\xfc\x82\xc4\xd3J\xae\x810\x19\x14\t\xc2\xa5V\xaa\x8d\x04\xf5\xf3\xd6\xd1\xe9k\xaf\x1a\xc6u\x96\xf7\xaa\x84\x92\x995m\xf9O\xc0\x1e\xa05\xdb\xa5\xae\r\x06\xe6\xc3\xd0\xf8:\xf7\xc5u\x91\xf8\x91\xee\xd8y\xb8\xc1)\xad\x05\xeb\xe9\xab\r\x9a@\aa(\x1a\xa4\xc1\xcf\\\xf0\xc3~\xbbd\x94\x9c\x02\xd4\xfc\xd2`\xd9\x83{-\x81zY\\\xac!#\xea\xba\x86)\xe9\xbc\x82\xf6\xd2\x7f\xdb\xa1\xd5\x89|\xa0O\xfcqZ\x85@A\x90\"\x11L\xdd\xa5\x9f\xf5', 0x20e9, 0x103) open(&(0x7f0000000280)=':,\x00\xbd\x80\xd6\x002\xb37\xff\x1a\x9e99\xda\xd1v\'\xc6\xd2Fw;\x00v\xdce\xad\xf4\xdb\xc7\x946\xe4\f\x9el]L+\x06\x130V\x1b,d\x8f\xa0\xabDUdk\xac\x82\\tyQ\xd8j\a\x1a[\xdb\x96\x1f{2\x04\xc5Y\xc1@\x0e\xeeWZ\x94N\xd4\xc8q=\x9b\xd1\x7fR3\xb6`\x00\xb3\xe5|1\xba\r\x85\x89\xfe\xed\xe1\xad`\x92\xc7\x9c\xd7\xd8\x15\t&\xb7\xfc\x82\xc4\xd3J\xae\x810\x19\x14\t\xc2\xa5V\xaa\x8d\x04\xf5\xf3\xd6\xd1\xe9k\xaf\x1a\xc6u\x96\xf7\xaa\x84\x92\x995m\xf9O\xc0\x1e\xa05\xdb\xa5\xae\r\x06\xe6\xc3\xd0\xf8:\xf7\xc5u\x91\xf8\x91\xee\xd8y\xb8\xc1)\xad\x05\xeb\xe9\xab\r\x9a@\aa(\x1a\xa4\xc1\xcf\\\xf0\xc3~\xbbd\x94\x9c\x02\xd4\xfc\xd2`\xd9\x83{-\x81zY\\\xac!#\xea\xba\x86)\xe9\xbc\x82\xf6\xd2\x7f\xdb\xa1\xd5\x89|\xa0O\xfcqZ\x85@A\x90\"\x11L\xdd\xa5\x9f\xf5\x00', 0x20000, 0x100) close_range$auto(0x2, 0x8, 0x0) unlink$auto(&(0x7f0000000640)=':,\x00\xbd\x80\xd6\x002\xb37\xff\x1a\x9e99\xda\xd1v\'\xc6\xd2Fw;\x00v\xdce\xad\xf4\xdb\xc7\x946\xe4\f\x9el]L+\x06\x130V\x1b,d\x8f\xa0\xabDUdk\xac\x82\\tyQ\xd8j\a\x1a[\xdb\x96\x1f{2\x04\xc5Y\xc1@\x0e\xeeWZ\x94N\xd4\xc8q=\x9b\xd1\x7fR3\xb6`\x00\xb3\xe5|1\xba\r\x85\x89\xfe\xed\xe1\xad`\x92\xc7\x9c\xd7\xd8\x15\t&\xb7\xfc\x82\xc4\xd3J\xae\x810\x19\x14\t\xc2\xa5V\xaa\x8d\x04\xf5\xf3\xd6\xd1\xe9k\xaf\x1a\xc6u\x96\xf7\xaa\x84\x92\x995m\xf9O\xc0\x1e\xa05\xdb\xa5\xae\r\x06\xe6\xc3\xd0\xf8:\xf7\xc5u\x91\xf8\x91\xee\xd8y\xb8\xc1)\xad\x05\xeb\xe9\xab\r\x9a@\aa(\x1a\xa4\xc1\xcf\\\xf0\xc3~\xbbd\x94\x9c\x02\xd4\xfc\xd2`\xd9\x83{-\x81zY\\\xac!#\xea\xba\x86)\xe9\xbc\x82\xf6\xd2\x7f\xdb\xa1\xd5\x89|\xa0O\xfcqZ\x85@A\x90\"\x11L\xdd\xa5\x9f\xf5\x00') socket(0x1e, 0x2, 0x0) waitid$auto(0x94, 0x44e, &(0x7f00000001c0)={@siginfo_0_0={0x2, 0x4, 0x7, @_sigfault={&(0x7f0000000040), @_trapno=0x1}}}, 0x6, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x80805, 0x0) eventfd$auto(0x7) writev$auto(0x4, &(0x7f0000000080)={&(0x7f0000000040), 0x8}, 0x1) mprotect$auto(0x1ffff000, 0x8020, 0x0) sendfile$auto(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000)=0xfdb, 0x0) ppoll$auto(0x0, 0x5, 0x0, &(0x7f00000000c0)={0xfffffffffffeffff}, 0x8) listen$auto(0xffffffffffffffff, 0x38f) keyctl$auto(0x10, 0x7, 0xe00000, 0x1ced, 0x0) setxattrat$auto(r1, &(0x7f0000000080)='./file0\x00', 0x9a, &(0x7f0000000100)='\x00', &(0x7f0000000140)={0x1, 0x7, 0xa}, 0x1) ustat$auto(0x801, 0x0) mincore$auto(0x1000, 0x8001, 0x0) io_uring_setup$auto(0x6, 0x0) 154.008039ms ago: executing program 6 (id=1780): r0 = openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000300)='/proc/self/smaps_rollup\x00', 0x40000, 0x0) r1 = io_uring_setup$auto(0x6, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) getcwd$auto(0x0, 0xffffffffffffffff) r2 = socket(0x2, 0x2, 0x88) r3 = openat$auto_tracing_saved_cmdlines_fops_trace(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/tracing/saved_cmdlines\x00', 0x400, 0x0) setsockopt$auto(r3, 0x88, 0xa, &(0x7f0000000000)='\xba\xba\xd3\xc8[&P\x9c\xe7AJz\'\x91\xce=B}v+7n\xa2r0\x92\xc3\x0eE\x96\xf63\xec\xe0\xb2\f\xa86v\xeb\xf1\xcb\xd4\xa9\v\xe1\xcc\x18', 0x90000f) connect$auto(0x3, &(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x55) r4 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000540)='/dev/sequencer2\x00', 0x402, 0x0) ioctl$auto(r4, 0x5101, 0x3) mount$auto(&(0x7f0000000080)='veth0_to_bond\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='\xba\xba\xd3\xc8[&P\x9c\xe7AJz\'\x91\xce=B}v+7n\xa2r0\x92\xc3\x0eE\x96\xf63\xec\xe0\xb2\f\xa86v\xeb\xf1\xcb\xd4\xa9\v\xe1\xcc\x18', 0x100, &(0x7f0000000180)="fb70f46b700d8a995ddbd2dce1c14570f299a1391e2bf89a3d3c60b30e1a4756") write$auto(0x3, 0x0, 0xfdef) r5 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000200), r2) r6 = clone$auto(0xa57, 0x1b, &(0x7f0000000240)=0x7, &(0x7f0000000280)=0x10000, 0x9) sendmsg$auto_TIPC_NL_MEDIA_GET(r1, &(0x7f0000000500)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000340)={0x1c0, r5, 0x10, 0x70bd2d, 0x25dfdbfe, {}, [@TIPC_NLA_NODE={0x41, 0x6, 0x0, 0x1, [@generic="8c77b689c46d030ecf170fd611516e93554932bc96712870d52f387c7a3b763de57cc66a81b4348430da38ad15f22a29221518ebf5a50bbbe7552ff50c"]}, @TIPC_NLA_PUBL={0x4}, @TIPC_NLA_MEDIA={0x164, 0x5, 0x0, 0x1, [@nested={0xd5, 0x50, 0x0, 0x1, [@generic="e6e965576fa01fed7c623fc3f5d70ffaf5df40d21b696cf01739632ff55530ac0d654d7399191d4b05751bde39c80ff04f4f9f09229209b84f1f57083ae393e144af328d4e4e9ab9d63471702661361cc0744d377dd7d19175af9a0343fce13219475c3ca8", @typed={0x8, 0x81, 0x0, 0x0, @pid=r6}, @nested={0x4, 0xc1}, @typed={0x5f, 0x66, 0x0, 0x0, @binary="7a063cf9114f1280f3cc862b0ae1524c42de6b64f1875ee906130eae814d22d7634bc3a58c44aeed955b62444b3ff079a7bbad354a38c00375adcd03a5b54a89e114f406011a57bfccabc399282ebf8e0ad674e99c14ca55eee052"}]}, @typed={0x14, 0xa2, 0x0, 0x0, @ipv6=@local}, @nested={0x53, 0xa7, 0x0, 0x1, [@generic="7e88b36c326031d7323a1b77363b443f4997a9b71d55b885593ae51889f0d6f17d5c6f1c5b2b68a8c6fa3b9ebd196b", @generic="5bb44963bbbc71e6d8bb250c85c03476c7eff677eb34c0fa20814699", @nested={0x4, 0x113}]}, @typed={0x8, 0x13e, 0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}, @typed={0x14, 0xfa, 0x0, 0x0, @ipv6=@local}, @typed={0x4, 0x89}]}]}, 0x1c0}, 0x1, 0x0, 0x0, 0x8000}, 0x20004000) openat2$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) r7 = socket(0x2, 0x3, 0xa) getsockopt$auto(r7, 0x0, 0x29, 0x0, &(0x7f0000000040)=0xdbb) remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0xb74, 0x66a) fanotify_init$auto(0x65, 0x2) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) r8 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/platform/dummy_hcd.3/usb4/bNumConfigurations\x00', 0x8000, 0x0) read$auto(r8, 0x0, 0x8) madvise$auto(0x8, 0x8, 0x15) read$auto_proc_pid_maps_operations_internal(r0, &(0x7f00000010c0)=""/4096, 0x1000) 0s ago: executing program 1 (id=1781): openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x470000, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x800008000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) socket(0x10, 0x80002, 0x0) move_pages$auto(0x1, 0xf54, 0x0, 0x0, 0x0, 0x8000000000000000) mmap$auto(0x0, 0x20009, 0xe3, 0x100000eb1, 0x40000000000a1, 0x8000) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0) fsopen$auto(&(0x7f0000000000)='nlctrl\x00', 0x3) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) mmap$auto(0x0, 0x9, 0x400000072, 0x8b72, 0x1000000002, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) openat$auto_proc_mountstats_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f0000000100), 0x10280, 0x0) clone$auto(0xd65d, 0x9, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x9) readv$auto(0x0, 0x0, 0x7ff) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, 0x0, 0xc040810) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x20006, 0x4000000000df, 0xeb1, 0x4, 0x8000) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7fffffe) read$auto(0x4, 0x0, 0xfdef) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) close_range$auto(0x2, 0x8000, 0x0) io_uring_setup$auto(0x6, 0x0) socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x68, 0x0, 0x800, 0x70bd2d, 0x25dfdbfe, {}, [@HSR_A_IF2_AGE={0x8, 0x4, 0xab7}, @HSR_A_IF2_SEQ={0x6, 0x7, 0x8000}, @HSR_A_IFINDEX={0x8, 0x2, r1}, @HSR_A_NODE_ADDR_B={0xa, 0x5, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, @HSR_A_NODE_ADDR={0xa, 0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, @HSR_A_NODE_ADDR={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x35}}, @HSR_A_IFINDEX={0x8, 0x2, r1}, @HSR_A_IF1_SEQ={0x6, 0x6, 0x5}, @HSR_A_IF2_AGE={0x8, 0x4, 0x4b3d}]}, 0x68}, 0x1, 0x0, 0x0, 0x40080}, 0x40) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.39' (ED25519) to the list of known hosts. [ 65.986586][ T5818] cgroup: Unknown subsys name 'net' [ 66.130804][ T5818] cgroup: Unknown subsys name 'cpuset' [ 66.138600][ T5818] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 67.462341][ T5818] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 69.164549][ T5836] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 69.172713][ T5836] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 69.181251][ T5836] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 69.190919][ T5840] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 69.191278][ T5836] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 69.206806][ T5836] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 69.209490][ T5839] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 69.214163][ T5836] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 69.230163][ T5839] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 69.230457][ T5836] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 69.238905][ T5839] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 69.245640][ T5836] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 69.252933][ T5839] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 69.259214][ T5836] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 69.275413][ T5836] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 69.283222][ T5836] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 69.283399][ T5839] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 69.292988][ T5836] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 69.298454][ T5839] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 69.306369][ T5836] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 69.313216][ T5839] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 69.318660][ T5836] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 69.332813][ T5836] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 69.341616][ T5839] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 69.664540][ T5831] chnl_net:caif_netlink_parms(): no params data found [ 69.742726][ T5827] chnl_net:caif_netlink_parms(): no params data found [ 69.773218][ T5832] chnl_net:caif_netlink_parms(): no params data found [ 69.829201][ T5828] chnl_net:caif_netlink_parms(): no params data found [ 69.855159][ T5831] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.863112][ T5831] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.870851][ T5831] bridge_slave_0: entered allmulticast mode [ 69.877781][ T5831] bridge_slave_0: entered promiscuous mode [ 69.902203][ T5831] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.909412][ T5831] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.916529][ T5831] bridge_slave_1: entered allmulticast mode [ 69.923292][ T5831] bridge_slave_1: entered promiscuous mode [ 69.982103][ T5831] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.994019][ T5831] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.025665][ T5827] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.035391][ T5827] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.042805][ T5827] bridge_slave_0: entered allmulticast mode [ 70.049910][ T5827] bridge_slave_0: entered promiscuous mode [ 70.077005][ T5827] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.084321][ T5827] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.091557][ T5827] bridge_slave_1: entered allmulticast mode [ 70.098661][ T5827] bridge_slave_1: entered promiscuous mode [ 70.130041][ T5831] team0: Port device team_slave_0 added [ 70.143999][ T5832] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.151305][ T5832] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.158975][ T5832] bridge_slave_0: entered allmulticast mode [ 70.165494][ T5832] bridge_slave_0: entered promiscuous mode [ 70.172355][ T5828] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.179886][ T5828] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.187014][ T5828] bridge_slave_0: entered allmulticast mode [ 70.193992][ T5828] bridge_slave_0: entered promiscuous mode [ 70.202644][ T5831] team0: Port device team_slave_1 added [ 70.217464][ T5832] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.224649][ T5832] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.231945][ T5832] bridge_slave_1: entered allmulticast mode [ 70.239059][ T5832] bridge_slave_1: entered promiscuous mode [ 70.245496][ T5828] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.252803][ T5828] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.260163][ T5828] bridge_slave_1: entered allmulticast mode [ 70.266683][ T5828] bridge_slave_1: entered promiscuous mode [ 70.292731][ T5827] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.305217][ T5827] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.336817][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.344035][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.370259][ T5831] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.407397][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.414377][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.440580][ T5831] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.455254][ T5832] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.467770][ T5827] team0: Port device team_slave_0 added [ 70.475604][ T5828] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.491276][ T5828] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.502317][ T5832] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.522627][ T5827] team0: Port device team_slave_1 added [ 70.548381][ T5828] team0: Port device team_slave_0 added [ 70.586619][ T5828] team0: Port device team_slave_1 added [ 70.595220][ T5832] team0: Port device team_slave_0 added [ 70.605515][ T5831] hsr_slave_0: entered promiscuous mode [ 70.612158][ T5831] hsr_slave_1: entered promiscuous mode [ 70.636007][ T5832] team0: Port device team_slave_1 added [ 70.653295][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.660355][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.686603][ T5827] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.705284][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.712684][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.739902][ T5828] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.767600][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.774580][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.806020][ T5827] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.818144][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.825110][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.851383][ T5828] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.875769][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.883018][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.909162][ T5832] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.938527][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.945501][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.973407][ T5832] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.033798][ T5832] hsr_slave_0: entered promiscuous mode [ 71.040022][ T5832] hsr_slave_1: entered promiscuous mode [ 71.046093][ T5832] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 71.054221][ T5832] Cannot create hsr debugfs directory [ 71.094427][ T5827] hsr_slave_0: entered promiscuous mode [ 71.100958][ T5827] hsr_slave_1: entered promiscuous mode [ 71.106860][ T5827] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 71.114516][ T5827] Cannot create hsr debugfs directory [ 71.135133][ T5828] hsr_slave_0: entered promiscuous mode [ 71.142205][ T5828] hsr_slave_1: entered promiscuous mode [ 71.149325][ T5828] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 71.156872][ T5828] Cannot create hsr debugfs directory [ 71.338468][ T5837] Bluetooth: hci0: command tx timeout [ 71.386630][ T5831] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 71.397083][ T5831] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 71.410567][ T5831] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 71.418069][ T5837] Bluetooth: hci3: command tx timeout [ 71.418389][ T5836] Bluetooth: hci1: command tx timeout [ 71.423828][ T5837] Bluetooth: hci2: command tx timeout [ 71.451502][ T5831] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 71.507855][ T5827] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 71.516842][ T5827] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 71.527061][ T5827] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 71.538431][ T5827] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 71.590721][ T5832] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 71.628835][ T5832] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 71.649144][ T5832] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 71.662644][ T5832] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 71.678999][ T5828] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 71.698662][ T5828] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 71.709059][ T5828] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 71.742334][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.749732][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.756060][ T5828] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 71.812009][ T5831] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.855428][ T5831] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.892524][ T3529] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.899848][ T3529] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.910891][ T3529] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.918007][ T3529] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.979396][ T5827] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.006147][ T5831] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 72.025823][ T5832] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.056781][ T5827] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.071178][ T5832] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.092835][ T5828] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.105016][ T3529] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.112166][ T3529] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.123584][ T3529] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.130740][ T3529] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.162171][ T3529] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.169321][ T3529] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.181180][ T3529] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.188303][ T3529] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.254463][ T5828] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.284820][ T1003] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.291966][ T1003] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.330270][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.337405][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.367078][ T5831] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.510318][ T5831] veth0_vlan: entered promiscuous mode [ 72.543251][ T5831] veth1_vlan: entered promiscuous mode [ 72.632757][ T5831] veth0_macvtap: entered promiscuous mode [ 72.683862][ T5832] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.693634][ T5831] veth1_macvtap: entered promiscuous mode [ 72.706559][ T5827] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.736522][ T5828] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.750244][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.762088][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.781140][ T5831] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.790199][ T5831] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.799595][ T5831] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.808526][ T5831] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.879241][ T5827] veth0_vlan: entered promiscuous mode [ 72.902425][ T5832] veth0_vlan: entered promiscuous mode [ 72.926332][ T5828] veth0_vlan: entered promiscuous mode [ 72.949610][ T5832] veth1_vlan: entered promiscuous mode [ 72.966752][ T5827] veth1_vlan: entered promiscuous mode [ 72.998954][ T5828] veth1_vlan: entered promiscuous mode [ 73.006041][ T3529] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.022677][ T3529] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.056271][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.075100][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.079719][ T5832] veth0_macvtap: entered promiscuous mode [ 73.093308][ T5832] veth1_macvtap: entered promiscuous mode [ 73.132733][ T5827] veth0_macvtap: entered promiscuous mode [ 73.144578][ T5831] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 73.152258][ T5832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.180932][ T5832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.192113][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.206303][ T5832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.218777][ T5832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.234404][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.252412][ T5827] veth1_macvtap: entered promiscuous mode [ 73.273290][ T5828] veth0_macvtap: entered promiscuous mode [ 73.284017][ T5828] veth1_macvtap: entered promiscuous mode [ 73.299822][ T5828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.310394][ T5828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.320732][ T5828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.331785][ T5828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.343807][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.359054][ T5828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.375545][ T5828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.386921][ T5828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.405807][ T5828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.418656][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.433752][ T5837] Bluetooth: hci0: command tx timeout [ 73.438917][ T5832] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.448091][ T5832] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.456906][ T5832] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.466320][ T5832] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.488555][ T5827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.507359][ T5837] Bluetooth: hci1: command tx timeout [ 73.507447][ T5833] Bluetooth: hci2: command tx timeout [ 73.519694][ T5836] Bluetooth: hci3: command tx timeout [ 73.524552][ T5827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.537763][ T5827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.556621][ T5827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.566886][ T5827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.583356][ T5827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.595339][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.635288][ T5828] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.666195][ T5828] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.675468][ T5828] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.684432][ T5828] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.699512][ T5827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.710058][ T5827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.720141][ T5827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.730989][ T5827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.741250][ T5827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.753612][ T5827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.764494][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.831237][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.843623][ T5827] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.853934][ T5827] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.858802][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.865039][ T5827] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.883498][ T5827] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.957849][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.973105][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.053520][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.078668][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.118839][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.150697][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.206288][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.224925][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.273470][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.304570][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.228735][ T5904] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4'. [ 75.257593][ T5904] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 75.284772][ T5904] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 75.296143][ T5904] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 75.304241][ T5904] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 75.522107][ T5905] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 75.548030][ T5905] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 75.578072][ T5833] Bluetooth: hci1: command tx timeout [ 75.578255][ T5836] Bluetooth: hci2: command tx timeout [ 75.583841][ T5837] Bluetooth: hci3: command tx timeout [ 75.614763][ T5905] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 75.638615][ T5905] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 75.645772][ T5905] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 75.680484][ T5905] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 75.739682][ T5905] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 75.755908][ T5905] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 75.813230][ T5905] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 75.849563][ T5905] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 75.863807][ T5905] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 75.883770][ T5905] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 77.008041][ T5931] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 77.358432][ T5935] HfR: entered promiscuous mode [ 77.389335][ T5935] netlink: 12 bytes leftover after parsing attributes in process `syz.1.13'. [ 77.429690][ T5935] HfR: left promiscuous mode [ 77.497569][ T5833] Bluetooth: hci0: command 0x0419 tx timeout [ 77.657432][ T5833] Bluetooth: hci1: command 0x0c1a tx timeout [ 77.827850][ T5833] Bluetooth: hci2: command 0x0c1a tx timeout [ 77.898491][ T5833] Bluetooth: hci3: command 0x0c1a tx timeout [ 78.189975][ T5946] netlink: 322 bytes leftover after parsing attributes in process `syz.2.16'. [ 78.220118][ T5946] bond0: entered promiscuous mode [ 78.230542][ T5946] bond_slave_0: entered promiscuous mode [ 78.249529][ T5946] bond_slave_1: entered promiscuous mode [ 78.265623][ T5946] bond0: entered allmulticast mode [ 78.276164][ T5947] Zero length message leads to an empty skb [ 78.295976][ T5946] bond_slave_0: entered allmulticast mode [ 78.313038][ T5946] bond_slave_1: entered allmulticast mode [ 78.650421][ T5958] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 79.577603][ T5833] Bluetooth: hci0: command 0x0419 tx timeout [ 79.767919][ T5833] Bluetooth: hci1: command 0x0c1a tx timeout [ 79.897841][ T5833] Bluetooth: hci2: command 0x0c1a tx timeout [ 79.979305][ T5833] Bluetooth: hci3: command 0x0c1a tx timeout [ 81.657314][ T5833] Bluetooth: hci0: command 0x0419 tx timeout [ 81.817394][ T5833] Bluetooth: hci1: command 0x0c1a tx timeout [ 81.997355][ T5833] Bluetooth: hci2: command 0x0c1a tx timeout [ 82.000901][ T8] cfg80211: failed to load regulatory.db [ 82.057313][ T5833] Bluetooth: hci3: command 0x0c1a tx timeout [ 82.448608][ T6016] process 'syz.0.33' launched ':,' with NULL argv: empty string added [ 82.496291][ T6003] Invalid ELF header magic: != ELF [ 83.066828][ T29] audit: type=1800 audit(4294967299.080:2): pid=6027 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.36" name="SYSV00000008" dev="hugetlbfs" ino=0 res=0 errno=0 [ 83.445820][ T6018] ima: policy update failed [ 83.457269][ T29] audit: type=1802 audit(4294967299.470:3): pid=6018 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.2.34" res=0 errno=0 [ 83.722001][ T6037] Process accounting resumed [ 83.737436][ T5833] Bluetooth: hci0: command 0x0419 tx timeout [ 84.443036][ T6042] raw_sendmsg: syz.0.40 forgot to set AF_INET. Fix it! [ 85.263674][ T6055] netlink: 322 bytes leftover after parsing attributes in process `syz.1.42'. [ 85.299892][ T6055] bond0: entered promiscuous mode [ 85.305282][ T6055] bond_slave_0: entered promiscuous mode [ 85.327437][ T6055] bond_slave_1: entered promiscuous mode [ 85.354650][ T6055] bond0: entered allmulticast mode [ 85.373765][ T6055] bond_slave_0: entered allmulticast mode [ 85.387339][ T6055] bond_slave_1: entered allmulticast mode [ 85.437779][ T6060] netlink: 28 bytes leftover after parsing attributes in process `syz.0.43'. [ 85.511358][ T6060] bridge_slave_1: left allmulticast mode [ 85.517065][ T6060] bridge_slave_1: left promiscuous mode [ 85.558687][ T6060] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.609825][ T6060] bridge_slave_0: left allmulticast mode [ 85.629573][ T6060] bridge_slave_0: left promiscuous mode [ 85.635408][ T6060] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.129367][ T6074] netlink: zone id is out of range [ 86.150418][ T6074] netlink: zone id is out of range [ 86.155584][ T6074] netlink: zone id is out of range [ 86.169699][ T6074] netlink: zone id is out of range [ 86.185141][ T6074] netlink: zone id is out of range [ 86.193052][ T6074] netlink: zone id is out of range [ 86.199412][ T6074] netlink: zone id is out of range [ 86.204687][ T6074] netlink: zone id is out of range [ 86.224280][ T6074] netlink: zone id is out of range [ 86.238723][ T6074] netlink: zone id is out of range [ 86.455609][ T6078] netlink: 334 bytes leftover after parsing attributes in process `syz.1.48'. [ 86.522227][ T6078] netlink: 334 bytes leftover after parsing attributes in process `syz.1.48'. [ 86.956995][ T6097] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 87.695640][ T6111] netlink: 24 bytes leftover after parsing attributes in process `syz.2.57'. [ 89.433567][ T6140] sctp: [Deprecated]: syz.3.63 (pid 6140) Use of struct sctp_assoc_value in delayed_ack socket option. [ 89.433567][ T6140] Use struct sctp_sack_info instead [ 89.558916][ T6137] netlink: 24 bytes leftover after parsing attributes in process `syz.0.65'. [ 90.328994][ T6167] netlink: 24 bytes leftover after parsing attributes in process `syz.3.73'. [ 91.446554][ T6175] netlink: 28 bytes leftover after parsing attributes in process `syz.3.75'. [ 91.469724][ T6175] team_slave_0: entered allmulticast mode [ 92.448372][ T6213] netlink: 24 bytes leftover after parsing attributes in process `syz.0.84'. [ 92.559496][ T29] audit: type=1800 audit(4294967308.580:4): pid=6218 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.86" name="dbroot" dev="configfs" ino=8039 res=0 errno=0 [ 94.099112][ T6254] netlink: 24 bytes leftover after parsing attributes in process `syz.3.94'. [ 95.160065][ T6287] net_ratelimit: 8 callbacks suppressed [ 95.160086][ T6287] netlink: zone id is out of range [ 95.170926][ T6287] netlink: del zone limit has 4 unknown bytes [ 95.355434][ T6291] Process accounting resumed [ 95.521273][ T6289] netlink: 24 bytes leftover after parsing attributes in process `syz.3.107'. [ 95.735955][ T6299] warning: `syz.2.110' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 96.111738][ T6308] openvswitch: netlink: Tunnel attr 8192 out of range max 16 [ 96.693273][ T6326] netlink: 326 bytes leftover after parsing attributes in process `syz.2.120'. [ 96.757505][ T6326] syz.2.120 (6326) used greatest stack depth: 20720 bytes left [ 96.889067][ T6324] netlink: 24 bytes leftover after parsing attributes in process `syz.1.119'. [ 97.881009][ T6361] vivid-013: ================= START STATUS ================= [ 97.910923][ T6361] vivid-013: Generate PTS: true [ 97.926579][ T6361] vivid-013: Generate SCR: true [ 97.950792][ T6361] tpg source WxH: 640x360 (Y'CbCr) [ 97.955958][ T6361] tpg field: 1 [ 97.987125][ T6361] tpg crop: 640x360@0x0 [ 97.995385][ T6361] tpg compose: 640x360@0x0 [ 98.030252][ T6361] tpg colorspace: 8 [ 98.034118][ T6361] tpg transfer function: 0/0 [ 98.054977][ T6361] tpg Y'CbCr encoding: 0/0 [ 98.081731][ T6361] tpg quantization: 0/0 [ 98.085948][ T6361] tpg RGB range: 0/2 [ 98.127585][ T6361] vivid-013: ================== END STATUS ================== [ 99.932556][ T6374] kexec: Could not allocate control_code_buffer [ 101.068414][ T6426] netlink: 'syz.0.150': attribute type 10 has an invalid length. [ 101.610779][ T6439] mmap: syz.3.145 (6439) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 102.570947][ T6487] netlink: 4519 bytes leftover after parsing attributes in process `syz.3.162'. [ 102.602535][ T6485] erspan0: entered allmulticast mode [ 103.460912][ T6522] capability: warning: `syz.0.169' uses 32-bit capabilities (legacy support in use) [ 104.361313][ T6549] netlink: 342 bytes leftover after parsing attributes in process `syz.1.174'. [ 105.409710][ T6578] netlink: 'syz.0.180': attribute type 11 has an invalid length. [ 106.317440][ T6589] Process accounting resumed [ 107.928399][ T6644] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 108.024967][ T6644] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 109.138842][ T6670] netlink: 24 bytes leftover after parsing attributes in process `syz.0.205'. [ 109.546018][ T29] audit: type=1326 audit(4294967325.570:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6668 comm="syz.1.207" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff4a7d85d29 code=0x0 [ 110.817059][ T6700] syz.3.216 uses obsolete (PF_INET,SOCK_PACKET) [ 111.225601][ T6708] netlink: 342 bytes leftover after parsing attributes in process `syz.3.219'. [ 111.309023][ T6705] netlink: 24 bytes leftover after parsing attributes in process `syz.0.217'. [ 111.461154][ T6714] netlink: 28 bytes leftover after parsing attributes in process `syz.1.220'. [ 111.535544][ T6714] bridge_slave_1: left allmulticast mode [ 111.558262][ T6714] bridge_slave_1: left promiscuous mode [ 111.662953][ T6714] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.718172][ T6714] bridge_slave_0: left allmulticast mode [ 111.759673][ T6714] bridge_slave_0: left promiscuous mode [ 111.792117][ T6714] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.035939][ T6726] ubi0: attaching mtd0 [ 112.043431][ T6726] ubi0 error: ubi_attach_mtd_dev: bad VID header (150994944) or data offsets (150995008) [ 112.094437][ T6667] kexec: Could not allocate control_code_buffer [ 112.127023][ T6726] netlink: 4 bytes leftover after parsing attributes in process `syz.0.225'. [ 112.751868][ T6747] netlink: 24 bytes leftover after parsing attributes in process `syz.1.231'. [ 113.772419][ T6791] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 113.820037][ T6791] CIFS mount error: No usable UNC path provided in device string! [ 113.820037][ T6791] [ 113.841892][ T6791] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 113.902172][ T6788] netlink: 24 bytes leftover after parsing attributes in process `syz.2.244'. [ 114.062289][ T6799] netlink: 28 bytes leftover after parsing attributes in process `syz.0.246'. [ 114.087342][ T6799] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 114.117441][ T6799] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 114.162412][ T6799] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 114.205179][ T6799] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 114.764806][ T6817] netlink: 306 bytes leftover after parsing attributes in process `syz.2.254'. [ 114.807813][ T6817] netlink: 4 bytes leftover after parsing attributes in process `syz.2.254'. [ 114.871521][ T6817] netlink: 4 bytes leftover after parsing attributes in process `syz.2.254'. [ 114.904089][ T6821] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 115.046712][ T6820] netlink: 24 bytes leftover after parsing attributes in process `syz.3.256'. [ 115.485082][ T6845] netlink: 334 bytes leftover after parsing attributes in process `syz.1.262'. [ 116.038735][ T6871] netlink: 342 bytes leftover after parsing attributes in process `syz.1.268'. [ 116.152219][ T6869] netlink: 24 bytes leftover after parsing attributes in process `syz.2.267'. [ 116.979579][ T6897] netlink: 16 bytes leftover after parsing attributes in process `syz.1.276'. [ 117.570632][ T6907] sg_write: process 236 (syz.3.279) changed security contexts after opening file descriptor, this is not allowed. [ 117.658989][ T6907] dyndbg: bad flag-op , at start of [ 117.679821][ T6907] dyndbg: flags parse failed [ 118.072973][ T6918] netlink: 24 bytes leftover after parsing attributes in process `syz.0.282'. [ 119.248243][ T6941] netlink: 8 bytes leftover after parsing attributes in process `syz.1.287'. [ 119.920472][ T6972] __nla_validate_parse: 1 callbacks suppressed [ 119.920494][ T6972] netlink: 8 bytes leftover after parsing attributes in process `syz.0.291'. [ 119.989676][ T6972] nbd: must specify a device to reconfigure [ 120.076578][ T6977] netlink: 24 bytes leftover after parsing attributes in process `syz.1.292'. [ 120.259413][ T6982] netlink: 8 bytes leftover after parsing attributes in process `syz.0.295'. [ 122.945385][ T7020] netlink: 4 bytes leftover after parsing attributes in process `syz.1.301'. [ 123.480219][ T7022] netlink: 24 bytes leftover after parsing attributes in process `syz.2.304'. [ 125.694380][ T7073] ptrace attach of "./syz-executor exec"[5827] was attempted by "./syz-executor exec"[7073] [ 128.575267][ T7098] netlink: 24 bytes leftover after parsing attributes in process `syz.3.316'. [ 129.159625][ T7118] netlink: 326 bytes leftover after parsing attributes in process `syz.2.321'. [ 129.267404][ T7114] netlink: 326 bytes leftover after parsing attributes in process `syz.0.320'. [ 130.072978][ T7127] netlink: 342 bytes leftover after parsing attributes in process `syz.1.322'. [ 130.309126][ T7124] netlink: 342 bytes leftover after parsing attributes in process `syz.1.322'. [ 130.355932][ T7124] netlink: 342 bytes leftover after parsing attributes in process `syz.1.322'. [ 130.407629][ T7124] netlink: 342 bytes leftover after parsing attributes in process `syz.1.322'. [ 130.638563][ T7138] smc: net device syz_tun applied user defined pnetid ETHTOOL [ 130.885577][ T7143] 0}^: entered promiscuous mode [ 132.145971][ T7182] netlink: zone id is out of range [ 132.155860][ T7182] netlink: zone id is out of range [ 132.170385][ T7182] netlink: zone id is out of range [ 132.210842][ T7182] netlink: zone id is out of range [ 132.237461][ T7182] netlink: zone id is out of range [ 132.257600][ T7182] netlink: zone id is out of range [ 132.280753][ T7182] netlink: zone id is out of range [ 132.289050][ T7182] netlink: zone id is out of range [ 132.295539][ T7182] netlink: zone id is out of range [ 132.975504][ T7196] netlink: 28 bytes leftover after parsing attributes in process `syz.2.343'. [ 133.160912][ T7200] netlink: 24 bytes leftover after parsing attributes in process `syz.3.344'. [ 133.183351][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.190177][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.208731][ T7196] hsr_slave_1 (unregistering): left promiscuous mode [ 134.155232][ T7217] netlink: 330 bytes leftover after parsing attributes in process `syz.0.350'. [ 134.174648][ T7217] mac80211_hwsim hwsim4 : renamed from wlan0 (while UP) [ 134.991825][ T7244] netlink: 330 bytes leftover after parsing attributes in process `syz.3.357'. [ 135.395102][ T7252] netlink: 'syz.1.359': attribute type 1 has an invalid length. [ 135.687967][ T7256] netlink: 20 bytes leftover after parsing attributes in process `syz.2.360'. [ 136.670499][ T7276] netlink: zone id is out of range [ 137.045738][ T7284] netlink: 8 bytes leftover after parsing attributes in process `syz.1.369'. [ 137.135080][ T7280] block nbd4: not configured, cannot reconfigure [ 137.940901][ T7278] smc: net device syz_tun applied user defined pnetid ETHTOOL [ 138.453106][ T7310] lo: entered allmulticast mode [ 138.519935][ T7309] netlink: 28 bytes leftover after parsing attributes in process `syz.1.376'. [ 138.560909][ T7308] netlink: 28 bytes leftover after parsing attributes in process `syz.1.376'. [ 138.648363][ T7313] net_ratelimit: 8 callbacks suppressed [ 138.648384][ T7313] netlink: zone id is out of range [ 138.715813][ T7313] netlink: zone id is out of range [ 138.744806][ T7313] netlink: zone id is out of range [ 138.776479][ T7313] netlink: zone id is out of range [ 138.810331][ T7313] netlink: zone id is out of range [ 138.840397][ T7313] netlink: zone id is out of range [ 138.874383][ T7313] netlink: zone id is out of range [ 138.909708][ T7313] netlink: zone id is out of range [ 138.952916][ T7313] netlink: zone id is out of range [ 138.967597][ T7313] netlink: zone id is out of range [ 139.157436][ T7307] lo: left allmulticast mode [ 139.424858][ T7320] nbd: must specify a device to reconfigure [ 141.062116][ T7348] smc: net device syz_tun applied user defined pnetid ETHTOOL [ 142.438959][ T7393] netlink: 4 bytes leftover after parsing attributes in process `syz.1.399'. [ 144.922081][ T7443] netlink: 24 bytes leftover after parsing attributes in process `syz.0.413'. [ 146.225588][ T7478] netlink: 330 bytes leftover after parsing attributes in process `syz.1.422'. [ 146.554579][ T7495] net_ratelimit: 16 callbacks suppressed [ 146.554601][ T7495] netlink: zone id is out of range [ 146.565569][ T7495] netlink: zone id is out of range [ 146.570759][ T7495] netlink: zone id is out of range [ 146.575979][ T7495] netlink: zone id is out of range [ 146.581179][ T7495] netlink: zone id is out of range [ 146.586395][ T7495] netlink: zone id is out of range [ 146.591770][ T7495] netlink: zone id is out of range [ 146.597159][ T7495] netlink: zone id is out of range [ 146.602350][ T7495] netlink: zone id is out of range [ 146.607597][ T7495] netlink: zone id is out of range [ 146.955015][ T7507] netlink: 8 bytes leftover after parsing attributes in process `syz.0.429'. [ 150.454229][ T7595] netlink: 93 bytes leftover after parsing attributes in process `syz.0.456'. [ 151.048991][ T7612] netlink: 322 bytes leftover after parsing attributes in process `syz.1.461'. [ 151.711917][ T7627] netlink: 24 bytes leftover after parsing attributes in process `syz.2.466'. [ 152.111066][ T7647] netlink: 322 bytes leftover after parsing attributes in process `syz.1.471'. [ 152.233650][ T7654] net_ratelimit: 45 callbacks suppressed [ 152.233674][ T7654] netlink: Unknown conntrack attr (type=64, max=9) [ 152.702108][ T7668] ======================================================= [ 152.702108][ T7668] WARNING: The mand mount option has been deprecated and [ 152.702108][ T7668] and is ignored by this kernel. Remove the mand [ 152.702108][ T7668] option from the mount to silence this warning. [ 152.702108][ T7668] ======================================================= [ 152.744682][ T7668] nfsd: Unknown parameter 'IPVS' [ 153.015076][ T7693] netlink: 322 bytes leftover after parsing attributes in process `syz.1.483'. [ 154.515293][ T7738] netlink: 28 bytes leftover after parsing attributes in process `syz.1.496'. [ 154.573754][ T7739] netlink: 28 bytes leftover after parsing attributes in process `syz.3.495'. [ 154.810158][ T7738] team0: Port device team_slave_0 removed [ 154.986375][ T7743] netlink: 'syz.0.497': attribute type 4 has an invalid length. [ 155.006593][ T7739] team0: Port device team_slave_0 removed [ 156.487491][ T7798] netlink: 24 bytes leftover after parsing attributes in process `syz.3.513'. [ 156.681934][ T7786] netlink: 322 bytes leftover after parsing attributes in process `syz.0.509'. [ 156.717393][ T7786] bond0: entered promiscuous mode [ 156.722498][ T7786] bond_slave_0: entered promiscuous mode [ 156.731856][ T7786] bond_slave_1: entered promiscuous mode [ 156.738680][ T7786] bond0: entered allmulticast mode [ 156.748947][ T7786] bond_slave_0: entered allmulticast mode [ 156.754725][ T7786] bond_slave_1: entered allmulticast mode [ 157.083025][ T7812] netlink: zone id is out of range [ 157.097804][ T7812] netlink: zone id is out of range [ 157.127495][ T7812] netlink: zone id is out of range [ 157.144053][ T7812] netlink: zone id is out of range [ 157.161975][ T7812] netlink: zone id is out of range [ 157.268384][ T7818] netlink: 4 bytes leftover after parsing attributes in process `syz.3.516'. [ 157.757021][ T7833] Invalid ELF header magic: != ELF [ 157.919018][ T7821] smc: removing net device syz_tun with user defined pnetid ETHTOOL [ 158.719865][ T5836] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 158.730294][ T7857] netlink: zone id is out of range [ 158.730393][ T5836] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 158.744329][ T5836] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 158.753936][ T5836] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 158.757356][ T7857] netlink: zone id is out of range [ 158.762021][ T5836] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 158.766011][ T7857] netlink: zone id is out of range [ 158.773901][ T5836] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 158.811109][ T7857] netlink: zone id is out of range [ 158.816277][ T7857] netlink: zone id is out of range [ 159.090644][ T7854] chnl_net:caif_netlink_parms(): no params data found [ 159.253213][ T7854] bridge0: port 1(bridge_slave_0) entered blocking state [ 159.266123][ T7854] bridge0: port 1(bridge_slave_0) entered disabled state [ 159.297587][ T7854] bridge_slave_0: entered allmulticast mode [ 159.321159][ T7854] bridge_slave_0: entered promiscuous mode [ 159.340297][ T7854] bridge0: port 2(bridge_slave_1) entered blocking state [ 159.367394][ T7854] bridge0: port 2(bridge_slave_1) entered disabled state [ 159.374656][ T7854] bridge_slave_1: entered allmulticast mode [ 159.398672][ T7854] bridge_slave_1: entered promiscuous mode [ 159.523719][ T7854] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 159.544994][ T7854] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 159.667591][ T7854] team0: Port device team_slave_0 added [ 159.685330][ T7854] team0: Port device team_slave_1 added [ 159.793256][ T7854] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 159.807400][ T7854] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 159.864543][ T7854] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 159.892518][ T7854] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 159.904302][ T7854] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 159.967317][ T7854] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 160.295441][ T7854] hsr_slave_0: entered promiscuous mode [ 160.315100][ T7854] hsr_slave_1: entered promiscuous mode [ 160.329154][ T7854] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 160.336747][ T7854] Cannot create hsr debugfs directory [ 160.351230][ T7871] netlink: 322 bytes leftover after parsing attributes in process `syz.2.533'. [ 160.473464][ T7871] 8021q: adding VLAN 0 to HW filter on device bond0 [ 160.679079][ T7878] program syz.3.535 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 160.857716][ T5837] Bluetooth: hci3: command tx timeout [ 160.969679][ T7886] netlink: 28 bytes leftover after parsing attributes in process `syz.2.534'. [ 161.228556][ T7886] team0: Port device team_slave_0 removed [ 161.311314][ T7854] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 161.340401][ T7854] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 161.392591][ T7854] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 161.412407][ T7854] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 161.619403][ T7854] 8021q: adding VLAN 0 to HW filter on device bond0 [ 161.648500][ T7854] 8021q: adding VLAN 0 to HW filter on device team0 [ 161.674524][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 161.681714][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 161.708512][ T3529] bridge0: port 2(bridge_slave_1) entered blocking state [ 161.715686][ T3529] bridge0: port 2(bridge_slave_1) entered forwarding state [ 162.048890][ T7854] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 162.619711][ T7914] netlink: zone id is out of range [ 162.630142][ T7854] veth0_vlan: entered promiscuous mode [ 162.630715][ T7914] netlink: zone id is out of range [ 162.653584][ T7914] netlink: zone id is out of range [ 162.656035][ T7854] veth1_vlan: entered promiscuous mode [ 162.663399][ T7914] netlink: zone id is out of range [ 162.679610][ T7914] netlink: zone id is out of range [ 162.712550][ T7854] veth0_macvtap: entered promiscuous mode [ 162.725876][ T7854] veth1_macvtap: entered promiscuous mode [ 162.752214][ T7854] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 162.765309][ T7854] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 162.781759][ T7854] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 162.817377][ T7854] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 162.838399][ T7854] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 162.859856][ T7854] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 162.879259][ T7854] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 162.899363][ T7854] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 162.916086][ T7854] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 162.928890][ T7854] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 162.938841][ T5837] Bluetooth: hci3: command tx timeout [ 162.947042][ T7854] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.957394][ T7854] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.966134][ T7854] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.975491][ T7854] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.183932][ T3492] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 163.214035][ T3492] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 163.282306][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 163.299645][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 163.321270][ T7916] netlink: 'syz.1.542': attribute type 11 has an invalid length. [ 163.759910][ T7940] netlink: 252 bytes leftover after parsing attributes in process `syz.4.545'. [ 163.783862][ T7940] netlink: 252 bytes leftover after parsing attributes in process `syz.4.545'. [ 164.158423][ T7953] netlink: 12 bytes leftover after parsing attributes in process `syz.3.550'. [ 164.739917][ T7946] netlink: 322 bytes leftover after parsing attributes in process `syz.4.548'. [ 164.767535][ T7946] bond0: entered promiscuous mode [ 164.777907][ T7946] bond_slave_0: entered promiscuous mode [ 164.784011][ T7946] bond_slave_1: entered promiscuous mode [ 164.794142][ T7946] bond0: entered allmulticast mode [ 164.807254][ T7946] bond_slave_0: entered allmulticast mode [ 164.817425][ T7946] bond_slave_1: entered allmulticast mode [ 165.018481][ T5837] Bluetooth: hci3: command tx timeout [ 166.027991][ T8000] netlink: 322 bytes leftover after parsing attributes in process `syz.2.562'. [ 166.468289][ T8031] netlink: 330 bytes leftover after parsing attributes in process `syz.3.569'. [ 166.679586][ T8038] netlink: 24 bytes leftover after parsing attributes in process `syz.2.568'. [ 167.101317][ T5837] Bluetooth: hci3: command tx timeout [ 167.679158][ T8071] netlink: 252 bytes leftover after parsing attributes in process `syz.2.576'. [ 167.722615][ T8071] netlink: 252 bytes leftover after parsing attributes in process `syz.2.576'. [ 169.029939][ T8073] netlink: 322 bytes leftover after parsing attributes in process `syz.2.577'. [ 169.731190][ T8110] netlink: 24 bytes leftover after parsing attributes in process `syz.2.583'. [ 170.586979][ T8128] net_ratelimit: 3 callbacks suppressed [ 170.587000][ T8128] netlink: zone id is out of range [ 170.627636][ T8128] netlink: zone id is out of range [ 170.641891][ T8128] netlink: zone id is out of range [ 170.648068][ T8128] netlink: zone id is out of range [ 170.653979][ T8128] netlink: zone id is out of range [ 170.659495][ T8128] netlink: del zone limit has 8 unknown bytes [ 172.166242][ T8176] netlink: 24 bytes leftover after parsing attributes in process `syz.1.596'. [ 172.175633][ T8179] netlink: 28 bytes leftover after parsing attributes in process `syz.4.598'. [ 172.227840][ T8182] netlink: 28 bytes leftover after parsing attributes in process `syz.4.598'. [ 172.311287][ T8182] macsec0: entered allmulticast mode [ 172.316642][ T8182] veth1_macvtap: entered allmulticast mode [ 172.465249][ T8190] netlink: zone id is out of range [ 172.471926][ T8190] netlink: zone id is out of range [ 172.477086][ T8190] netlink: zone id is out of range [ 172.537485][ T8190] netlink: zone id is out of range [ 174.027044][ T8231] netlink: 342 bytes leftover after parsing attributes in process `syz.1.605'. [ 174.355595][ T8260] netlink: 322 bytes leftover after parsing attributes in process `syz.1.611'. [ 174.608967][ T8262] netlink: 322 bytes leftover after parsing attributes in process `syz.1.612'. [ 176.288160][ T8294] netlink: 28 bytes leftover after parsing attributes in process `syz.3.620'. [ 176.340647][ T8294] hsr_slave_0: left promiscuous mode [ 176.388646][ T8294] hsr_slave_1: left promiscuous mode [ 176.656416][ T8295] netlink: 28 bytes leftover after parsing attributes in process `syz.1.621'. [ 177.041401][ T8318] net_ratelimit: 2 callbacks suppressed [ 177.041422][ T8318] netlink: zone id is out of range [ 177.077341][ T8318] netlink: zone id is out of range [ 177.082923][ T8318] netlink: zone id is out of range [ 177.101168][ T8318] netlink: zone id is out of range [ 177.114472][ T8318] netlink: zone id is out of range [ 177.148274][ T8318] netlink: del zone limit has 4 unknown bytes [ 178.636425][ T8357] netlink: 322 bytes leftover after parsing attributes in process `syz.4.634'. [ 179.618191][ T8378] netlink: 28 bytes leftover after parsing attributes in process `syz.3.641'. [ 179.840780][ T8382] netlink: 68 bytes leftover after parsing attributes in process `syz.1.643'. [ 180.573394][ T8386] netlink: 322 bytes leftover after parsing attributes in process `syz.3.644'. [ 180.583404][ T8394] netlink: 'syz.2.647': attribute type 9 has an invalid length. [ 180.654397][ T8386] bond0: entered promiscuous mode [ 180.667798][ T8386] bond_slave_0: entered promiscuous mode [ 180.687067][ T8386] bond_slave_1: entered promiscuous mode [ 180.707391][ T8386] bond0: entered allmulticast mode [ 180.712598][ T8386] bond_slave_0: entered allmulticast mode [ 180.737354][ T8386] bond_slave_1: entered allmulticast mode [ 182.249021][ T8428] netlink: 322 bytes leftover after parsing attributes in process `syz.1.652'. [ 183.877732][ T8474] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 184.448568][ T8494] zero sized request [ 185.981600][ T8538] netlink: 24 bytes leftover after parsing attributes in process `syz.2.684'. [ 186.010712][ T8540] netlink: 322 bytes leftover after parsing attributes in process `syz.1.685'. [ 187.398809][ T8559] netlink: 322 bytes leftover after parsing attributes in process `syz.2.688'. [ 188.301024][ T8570] netlink: 4 bytes leftover after parsing attributes in process `syz.2.691'. [ 188.783376][ T8590] i2c i2c-0: delete_device: Can't parse I2C address [ 189.365927][ T8600] netlink: 322 bytes leftover after parsing attributes in process `syz.4.700'. [ 189.690875][ T8610] netlink: 24 bytes leftover after parsing attributes in process `syz.3.699'. [ 189.847097][ T8619] netlink: 322 bytes leftover after parsing attributes in process `syz.4.703'. [ 190.031845][ T8626] netlink: 342 bytes leftover after parsing attributes in process `syz.1.706'. [ 191.140690][ T8658] netlink: 28 bytes leftover after parsing attributes in process `syz.3.714'. [ 192.605065][ T8722] netlink: 342 bytes leftover after parsing attributes in process `syz.3.730'. [ 193.009924][ T8730] netlink: 24 bytes leftover after parsing attributes in process `syz.3.732'. [ 193.482079][ T8745] netlink: zone id is out of range [ 193.487862][ T8705] netlink: 342 bytes leftover after parsing attributes in process `syz.1.725'. [ 193.506682][ T8745] netlink: zone id is out of range [ 193.512780][ T8745] netlink: zone id is out of range [ 193.521855][ T8745] netlink: zone id is out of range [ 193.527697][ T8745] netlink: zone id is out of range [ 193.532854][ T8745] netlink: del zone limit has 8 unknown bytes [ 193.596346][ T8750] netlink: 296 bytes leftover after parsing attributes in process `syz.2.737'. [ 194.625691][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.632401][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.780188][ T8773] netlink: 330 bytes leftover after parsing attributes in process `syz.2.744'. [ 194.814590][ T8773] mac80211_hwsim hwsim2 : renamed from wlan0 (while UP) [ 194.881127][ T8775] kAFS: Invalid Command on /proc/fs/afs/cells file [ 197.117293][ T8821] netlink: zone id is out of range [ 197.133405][ T8821] netlink: zone id is out of range [ 197.148037][ T8821] netlink: zone id is out of range [ 197.170076][ T8821] netlink: zone id is out of range [ 197.459609][ T8830] netlink: 4 bytes leftover after parsing attributes in process `syz.1.759'. [ 197.508185][ T8830] netlink: 4 bytes leftover after parsing attributes in process `syz.1.759'. [ 197.545398][ T8832] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 197.590977][ T8832] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 197.603416][ T29] audit: type=1326 audit(4294967303.960:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8827 comm=093D exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff4a7d85d29 code=0x0 [ 198.381718][ T8855] netlink: 296 bytes leftover after parsing attributes in process `syz.4.765'. [ 201.776717][ T8906] netlink: 24 bytes leftover after parsing attributes in process `syz.3.779'. [ 202.108221][ T8910] netlink: 4 bytes leftover after parsing attributes in process `syz.3.781'. [ 202.564609][ T5828] smc: removing net device syz_tun with user defined pnetid ETHTOOL [ 203.517731][ T5836] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 203.531483][ T5836] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 203.562744][ T5836] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 203.582562][ T5836] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 203.594848][ T5836] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 203.603028][ T5836] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 204.052935][ T8943] chnl_net:caif_netlink_parms(): no params data found [ 204.300512][ T8943] bridge0: port 1(bridge_slave_0) entered blocking state [ 204.324408][ T8943] bridge0: port 1(bridge_slave_0) entered disabled state [ 204.332746][ T8943] bridge_slave_0: entered allmulticast mode [ 204.345683][ T8943] bridge_slave_0: entered promiscuous mode [ 204.364734][ T8943] bridge0: port 2(bridge_slave_1) entered blocking state [ 204.383261][ T8943] bridge0: port 2(bridge_slave_1) entered disabled state [ 204.407502][ T8943] bridge_slave_1: entered allmulticast mode [ 204.426600][ T8943] bridge_slave_1: entered promiscuous mode [ 204.534613][ T8943] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 204.558652][ T8943] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 204.660360][ T8943] team0: Port device team_slave_0 added [ 204.687895][ T8943] team0: Port device team_slave_1 added [ 204.779104][ T8943] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 204.792019][ T8943] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 204.853900][ T8943] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 204.912206][ T8943] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 204.937198][ T8943] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 204.997241][ T8943] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 205.268771][ T8943] hsr_slave_0: entered promiscuous mode [ 205.284971][ T8943] hsr_slave_1: entered promiscuous mode [ 205.302127][ T8943] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 205.317432][ T8943] Cannot create hsr debugfs directory [ 205.753467][ T5837] Bluetooth: hci1: command tx timeout [ 205.758359][ T8943] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 205.879834][ T8943] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 205.922110][ T8943] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 205.953955][ T8943] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 206.027362][ T8982] netlink: 4 bytes leftover after parsing attributes in process `syz.1.799'. [ 206.111087][ T8984] netlink: 4 bytes leftover after parsing attributes in process `syz.4.798'. [ 206.154995][ T8943] 8021q: adding VLAN 0 to HW filter on device bond0 [ 206.172515][ T8984] netlink: 4 bytes leftover after parsing attributes in process `syz.4.798'. [ 206.205510][ T8943] 8021q: adding VLAN 0 to HW filter on device team0 [ 206.230943][ T8416] bridge0: port 1(bridge_slave_0) entered blocking state [ 206.238157][ T8416] bridge0: port 1(bridge_slave_0) entered forwarding state [ 206.281783][ T3437] bridge0: port 2(bridge_slave_1) entered blocking state [ 206.289011][ T3437] bridge0: port 2(bridge_slave_1) entered forwarding state [ 206.417310][ T29] audit: type=1326 audit(4294967312.770:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8983 comm=093D exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7febb1985d29 code=0x0 [ 206.653010][ T8943] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 207.086424][ T8943] veth0_vlan: entered promiscuous mode [ 207.129397][ T8943] veth1_vlan: entered promiscuous mode [ 207.201737][ T8943] veth0_macvtap: entered promiscuous mode [ 207.216660][ T8943] veth1_macvtap: entered promiscuous mode [ 207.252348][ T8943] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 207.283126][ T8943] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.308375][ T8943] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 207.339626][ T8943] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.377338][ T8943] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 207.394679][ T8943] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.438395][ T8943] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 207.490405][ T8943] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 207.547260][ T8943] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.557125][ T8943] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 207.592286][ T8943] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.614491][ T8943] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 207.635614][ T8943] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.668564][ T8943] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 207.694414][ T8943] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.725840][ T8943] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.750695][ T8943] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.772490][ T8943] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.817548][ T5837] Bluetooth: hci1: command tx timeout [ 208.284091][ T3529] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 208.312485][ T3529] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 208.386308][ T8419] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 208.412623][ T8419] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 208.688560][ T9042] netlink: 2 bytes leftover after parsing attributes in process `syz.4.812'. [ 209.088896][ T9054] kAFS: Invalid Command on /proc/fs/afs/cells file [ 209.897502][ T5837] Bluetooth: hci1: command tx timeout [ 210.568405][ T9075] netlink: 28 bytes leftover after parsing attributes in process `syz.2.820'. [ 210.602895][ T9075] geneve1: entered allmulticast mode [ 210.807575][ T9079] netlink: 28 bytes leftover after parsing attributes in process `syz.2.820'. [ 211.978662][ T5837] Bluetooth: hci1: command tx timeout [ 212.746242][ T9124] netlink: 28 bytes leftover after parsing attributes in process `syz.2.830'. [ 212.873850][ T9128] netlink: 8 bytes leftover after parsing attributes in process `syz.2.830'. [ 213.210934][ T9124] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 213.252214][ T9124] bond_slave_0: left promiscuous mode [ 213.259806][ T9124] bond_slave_0: left allmulticast mode [ 213.279438][ T9124] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 213.332626][ T9124] bond_slave_1: left promiscuous mode [ 213.354853][ T9124] bond_slave_1: left allmulticast mode [ 213.423137][ T9124] bond0 (unregistering): Released all slaves [ 213.834768][ T9158] netlink: 4 bytes leftover after parsing attributes in process `syz.4.837'. [ 214.209343][ T9175] TCP: TCP_TX_DELAY enabled [ 214.220735][ T9175] binder: 9174:9175 ioctl c0306201 9 returned -14 [ 215.216635][ T9204] net_ratelimit: 2 callbacks suppressed [ 215.216656][ T9204] netlink: zone id is out of range [ 215.257550][ T9204] netlink: zone id is out of range [ 215.267351][ T9204] netlink: zone id is out of range [ 215.272577][ T9204] netlink: zone id is out of range [ 215.296396][ T9204] netlink: zone id is out of range [ 215.301875][ T9204] netlink: del zone limit has 8 unknown bytes [ 215.882192][ T9225] netlink: 12 bytes leftover after parsing attributes in process `syz.5.852'. [ 215.934170][ T9230] netlink: 16 bytes leftover after parsing attributes in process `syz.5.852'. [ 217.279217][ T9244] netlink: 12 bytes leftover after parsing attributes in process `syz.2.858'. [ 217.544910][ T9251] netlink: 24 bytes leftover after parsing attributes in process `syz.1.859'. [ 217.754289][ T9260] netlink: 350 bytes leftover after parsing attributes in process `syz.2.862'. [ 220.382965][ T9304] netlink: 24 bytes leftover after parsing attributes in process `syz.5.873'. [ 223.800217][ T9390] netlink: 12 bytes leftover after parsing attributes in process `syz.1.888'. [ 224.053153][ T9387] netlink: 16 bytes leftover after parsing attributes in process `syz.1.888'. [ 224.494350][ T9400] program syz.2.891 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 227.105579][ T9447] bridge0: port 3(team0) entered blocking state [ 227.152100][ T9447] bridge0: port 3(team0) entered disabled state [ 227.177662][ T9447] team0: entered allmulticast mode [ 227.183426][ T9447] team_slave_1: entered allmulticast mode [ 227.196889][ T9447] team0: entered promiscuous mode [ 227.205030][ T9447] team_slave_1: entered promiscuous mode [ 227.220714][ T9447] bridge0: port 3(team0) entered blocking state [ 227.227165][ T9447] bridge0: port 3(team0) entered forwarding state [ 227.448516][ T9454] netlink: zone id is out of range [ 227.453685][ T9454] netlink: zone id is out of range [ 227.465167][ T9454] netlink: zone id is out of range [ 227.487742][ T9454] netlink: zone id is out of range [ 227.493027][ T9454] netlink: zone id is out of range [ 227.498784][ T9454] netlink: del zone limit has 8 unknown bytes [ 227.876729][ T9466] netlink: 342 bytes leftover after parsing attributes in process `syz.4.904'. [ 228.478362][ T9485] netlink: 8 bytes leftover after parsing attributes in process `syz.4.909'. [ 228.541788][ T9484] HfR: entered promiscuous mode [ 228.806280][ T9498] netlink: 28 bytes leftover after parsing attributes in process `syz.4.913'. [ 228.833877][ T9498] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 228.893572][ T9503] netlink: 28 bytes leftover after parsing attributes in process `syz.5.916'. [ 229.103635][ T9509] mkiss: ax0: crc mode is auto. [ 229.216141][ T9511] netlink: 24 bytes leftover after parsing attributes in process `syz.4.917'. [ 230.847895][ T9544] erspan0: entered allmulticast mode [ 231.063441][ T9554] netlink: 24 bytes leftover after parsing attributes in process `syz.5.929'. [ 236.128792][ T9652] Invalid ELF header magic: != ELF [ 237.038494][ T9655] netlink: 28 bytes leftover after parsing attributes in process `syz.1.950'. [ 237.178127][ T9655] geneve1: entered allmulticast mode [ 239.106422][ T9683] bridge0: port 3(team0) entered blocking state [ 239.126569][ T9683] bridge0: port 3(team0) entered disabled state [ 239.242509][ T9683] team0: entered allmulticast mode [ 239.272524][ T9683] team_slave_0: entered allmulticast mode [ 239.300163][ T9683] team_slave_1: entered allmulticast mode [ 239.336848][ T9683] team0: entered promiscuous mode [ 239.413138][ T9683] team_slave_0: entered promiscuous mode [ 239.482836][ T9683] team_slave_1: entered promiscuous mode [ 239.537844][ T9683] bridge0: port 3(team0) entered blocking state [ 239.544255][ T9683] bridge0: port 3(team0) entered forwarding state [ 242.000494][ T9736] ptrace attach of "./syz-executor exec"[7854] was attempted by "JnP}Nix\x0a_JccH[C&#{Ȟ%+godUG+ ΐr;$46tgЍ0)(8\x22.$\x07nY#Ҥ=QXvĹe]ydd#[㺃B>\x0b7̞w'dk访kF\x1bN(}]+\x0d}GE[|#PF0J\x1b,C||'*qvqOر٭NjyjANG\x1bw?{%x&`^R#$n+JIhvnyU>MTzDDksŒW8\x076 ӗWg~~o,HIu)\x0bev?bՍ9IQӌ_(1FʴSv^txm}mn5,N^Fb])e?﬽*VK1[vp\x09ڒ=սŲ=LTKTxMO'ﶇ`ymiG7F|-h%\x1b(BKkk6|\x07ȶ/#I\x0cai6 iI)U+ xѱd-^E@^;ܹEԪ?k|/(o&LAǺվ'f`_cYMzw`eŷowZdxofQtPŹQ@g\x0dOED$Xbd#.Y\x0dlTP [ 242.472059][ T9743] HfR: entered promiscuous mode [ 242.563165][ C1] vkms_vblank_simulate: vblank timer overrun [ 242.809592][ T9741] bridge0: port 3(team0) entered blocking state [ 242.816266][ T9741] bridge0: port 3(team0) entered disabled state [ 242.825135][ T9741] team0: entered allmulticast mode [ 242.836561][ T9741] team_slave_0: entered allmulticast mode [ 242.850642][ T9741] team_slave_1: entered allmulticast mode [ 242.863727][ T9741] team0: entered promiscuous mode [ 242.874566][ T9741] team_slave_0: entered promiscuous mode [ 242.884932][ T9741] team_slave_1: entered promiscuous mode [ 242.897005][ T9741] bridge0: port 3(team0) entered blocking state [ 242.903561][ T9741] bridge0: port 3(team0) entered forwarding state [ 242.950278][ T9743] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 242.987268][ T9743] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 243.513345][ T9760] netlink: zone id is out of range [ 243.591456][ T9760] netlink: set zone limit has 8 unknown bytes [ 244.556993][ T9794] FAULT_INJECTION: forcing a failure. [ 244.556993][ T9794] name failslab, interval 1, probability 0, space 0, times 1 [ 244.584794][ T9794] CPU: 0 UID: 0 PID: 9794 Comm: syz.5.987 Not tainted 6.13.0-rc3-syzkaller-00073-geabcdba3ad40 #0 [ 244.595448][ T9794] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 244.605534][ T9794] Call Trace: [ 244.608835][ T9794] [ 244.611781][ T9794] dump_stack_lvl+0x16c/0x1f0 [ 244.616492][ T9794] should_fail_ex+0x497/0x5b0 [ 244.621208][ T9794] ? fs_reclaim_acquire+0xae/0x150 [ 244.626361][ T9794] should_failslab+0xc2/0x120 [ 244.631083][ T9794] __kmalloc_noprof+0xce/0x4f0 [ 244.635885][ T9794] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 244.641545][ T9794] ? tomoyo_realpath_from_path+0xbf/0x710 [ 244.647303][ T9794] tomoyo_realpath_from_path+0xbf/0x710 [ 244.652886][ T9794] ? tomoyo_path_number_perm+0x235/0x5b0 [ 244.658563][ T9794] tomoyo_path_number_perm+0x248/0x5b0 [ 244.664062][ T9794] ? tomoyo_path_number_perm+0x235/0x5b0 [ 244.669738][ T9794] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 244.675791][ T9794] ? __pfx_lock_release+0x10/0x10 [ 244.680842][ T9794] ? trace_lock_acquire+0x14e/0x1f0 [ 244.686081][ T9794] ? lock_acquire+0x2f/0xb0 [ 244.690606][ T9794] ? __fget_files+0x40/0x3a0 [ 244.695236][ T9794] ? __fget_files+0x206/0x3a0 [ 244.699948][ T9794] security_file_ioctl+0x9b/0x240 [ 244.705003][ T9794] __x64_sys_ioctl+0xb7/0x200 [ 244.709709][ T9794] do_syscall_64+0xcd/0x250 [ 244.714249][ T9794] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 244.720172][ T9794] RIP: 0033:0x7fcaaf385d29 [ 244.724612][ T9794] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 244.744253][ T9794] RSP: 002b:00007fcab0178038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 244.752705][ T9794] RAX: ffffffffffffffda RBX: 00007fcaaf575fa0 RCX: 00007fcaaf385d29 [ 244.760710][ T9794] RDX: 0000000000005c8d RSI: 00000000400454d9 RDI: 00000000000000c8 [ 244.768712][ T9794] RBP: 00007fcab0178090 R08: 0000000000000000 R09: 0000000000000000 [ 244.776714][ T9794] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 244.784709][ T9794] R13: 0000000000000000 R14: 00007fcaaf575fa0 R15: 00007ffccf10a468 [ 244.792729][ T9794] [ 244.825754][ T9794] ERROR: Out of memory at tomoyo_realpath_from_path. [ 244.959784][ T9797] netlink: 330 bytes leftover after parsing attributes in process `syz.1.988'. [ 244.981974][ T9797] : renamed from team0 (while UP) [ 245.246785][ T9799] netlink: 28 bytes leftover after parsing attributes in process `syz.5.989'. [ 245.348391][ T9799] hsr_slave_1 (unregistering): left promiscuous mode [ 245.860114][ T9830] FAULT_INJECTION: forcing a failure. [ 245.860114][ T9830] name failslab, interval 1, probability 0, space 0, times 0 [ 245.891295][ T9830] CPU: 1 UID: 0 PID: 9830 Comm: syz.2.997 Not tainted 6.13.0-rc3-syzkaller-00073-geabcdba3ad40 #0 [ 245.901941][ T9830] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 245.912024][ T9830] Call Trace: [ 245.915321][ T9830] [ 245.918283][ T9830] dump_stack_lvl+0x16c/0x1f0 [ 245.919326][ T9836] kernel read not supported for file /#)-\&[} (pid: 9836 comm: syz.4.998) [ 245.922978][ T9830] should_fail_ex+0x497/0x5b0 [ 245.923024][ T9830] ? fs_reclaim_acquire+0xae/0x150 [ 245.923052][ T9830] should_failslab+0xc2/0x120 [ 245.946134][ T9830] __kmalloc_noprof+0xce/0x4f0 [ 245.950923][ T9830] ? d_absolute_path+0x137/0x1b0 [ 245.955874][ T9830] ? tomoyo_encode2+0x100/0x3e0 [ 245.960742][ T9830] tomoyo_encode2+0x100/0x3e0 [ 245.965429][ T9830] tomoyo_realpath_from_path+0x1a7/0x710 [ 245.971072][ T9830] ? tomoyo_path_number_perm+0x235/0x5b0 [ 245.976721][ T9830] tomoyo_path_number_perm+0x248/0x5b0 [ 245.982193][ T9830] ? tomoyo_path_number_perm+0x235/0x5b0 [ 245.987846][ T9830] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 245.993861][ T9830] ? __pfx_lock_release+0x10/0x10 [ 245.998887][ T9830] ? trace_lock_acquire+0x14e/0x1f0 [ 246.004093][ T9830] ? lock_acquire+0x2f/0xb0 [ 246.008598][ T9830] ? __fget_files+0x40/0x3a0 [ 246.013195][ T9830] ? __fget_files+0x206/0x3a0 [ 246.017880][ T9830] security_file_ioctl+0x9b/0x240 [ 246.022908][ T9830] __x64_sys_ioctl+0xb7/0x200 [ 246.027586][ T9830] do_syscall_64+0xcd/0x250 [ 246.032098][ T9830] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 246.038001][ T9830] RIP: 0033:0x7f37a9d85d29 [ 246.042418][ T9830] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 246.062026][ T9830] RSP: 002b:00007f37aac0a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 246.070445][ T9830] RAX: ffffffffffffffda RBX: 00007f37a9f75fa0 RCX: 00007f37a9d85d29 [ 246.078425][ T9830] RDX: 0000000000005c8d RSI: 00000000400454d9 RDI: 00000000000000c8 [ 246.086394][ T9830] RBP: 00007f37aac0a090 R08: 0000000000000000 R09: 0000000000000000 [ 246.094366][ T9830] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 246.102336][ T9830] R13: 0000000000000000 R14: 00007f37a9f75fa0 R15: 00007ffd4274f3c8 [ 246.110330][ T9830] [ 246.151972][ T29] audit: type=1800 audit(4294967321.069:8): pid=9836 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.998" name="#)-\&[}" dev="mqueue" ino=23070 res=0 errno=0 [ 246.177306][ T9830] ERROR: Out of memory at tomoyo_realpath_from_path. [ 246.741356][ T9848] Invalid ELF header magic: != ELF [ 247.111058][ T9857] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1005'. [ 247.333964][ T9866] FAULT_INJECTION: forcing a failure. [ 247.333964][ T9866] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 247.357407][ T9866] CPU: 1 UID: 0 PID: 9866 Comm: syz.5.1009 Not tainted 6.13.0-rc3-syzkaller-00073-geabcdba3ad40 #0 [ 247.368140][ T9866] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 247.378223][ T9866] Call Trace: [ 247.381517][ T9866] [ 247.384463][ T9866] dump_stack_lvl+0x16c/0x1f0 [ 247.389175][ T9866] should_fail_ex+0x497/0x5b0 [ 247.393893][ T9866] _copy_from_user+0x2e/0xd0 [ 247.400698][ T9866] __tun_chr_ioctl+0x2d2/0x4960 [ 247.405597][ T9866] ? __pfx___tun_chr_ioctl+0x10/0x10 [ 247.410946][ T9866] ? __fget_files+0x206/0x3a0 [ 247.415671][ T9866] ? __pfx_tun_chr_ioctl+0x10/0x10 [ 247.420821][ T9866] __x64_sys_ioctl+0x190/0x200 [ 247.425615][ T9866] do_syscall_64+0xcd/0x250 [ 247.430156][ T9866] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 247.436089][ T9866] RIP: 0033:0x7fcaaf385d29 [ 247.440529][ T9866] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 247.461380][ T9866] RSP: 002b:00007fcab0178038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 247.469897][ T9866] RAX: ffffffffffffffda RBX: 00007fcaaf575fa0 RCX: 00007fcaaf385d29 [ 247.477873][ T9866] RDX: 0000000000005c8d RSI: 00000000400454d9 RDI: 00000000000000c8 [ 247.485845][ T9866] RBP: 00007fcab0178090 R08: 0000000000000000 R09: 0000000000000000 [ 247.493816][ T9866] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 247.501792][ T9866] R13: 0000000000000000 R14: 00007fcaaf575fa0 R15: 00007ffccf10a468 [ 247.509782][ T9866] [ 248.906473][ T9897] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1016'. [ 249.276031][ T9897] hsr_slave_1 (unregistering): left promiscuous mode s out of range [ 249.930068][ T9925] netlink: set zone limit has 8 unknown bytes [ 250.653487][ T9945] netlink: 326 bytes leftover after parsing attributes in process `syz.5.1031'. [ 251.068865][ T9962] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1035'. [ 256.060263][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.067594][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 259.888790][T10095] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1071'. [ 260.076123][T10097] netlink: 350 bytes leftover after parsing attributes in process `syz.5.1073'. [ 260.197796][T10101] netlink: 350 bytes leftover after parsing attributes in process `syz.5.1073'. [ 262.292876][T10138] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1090'. [ 265.558584][T10182] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1095'. [ 265.916572][T10191] kfence: disabled [ 267.568868][T10226] nfs: Unknown parameter '/proc/thread-self/net/packet' [ 267.902012][T10226] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1107'. [ 268.917414][T10250] netlink: 334 bytes leftover after parsing attributes in process `syz.5.1113'. [ 268.987897][T10251] netlink: 'syz.5.1113': attribute type 2 has an invalid length. [ 281.915675][T10444] nbd: must specify an index to disconnect [ 281.962301][T10444] nbd: must specify an index to disconnect [ 282.276625][T10450] mkiss: ax0: crc mode is auto. [ 282.560766][T10455] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1167'. [ 282.586817][T10455] ip_vti0: entered promiscuous mode [ 283.737257][ T5836] Bluetooth: hci3: command 0x0406 tx timeout [ 287.790978][T10556] netlink: 184 bytes leftover after parsing attributes in process `syz.2.1190'. [ 291.560233][T10631] kernel read not supported for file /#)-\&[} (pid: 10631 comm: syz.1.1206) [ 291.585173][ T29] audit: type=1804 audit(4294967366.479:9): pid=10631 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.1206" name="#)-\&[}" dev="mqueue" ino=25538 res=1 errno=0 [ 291.657442][ T29] audit: type=1800 audit(4294967366.499:10): pid=10631 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1206" name="#)-\&[}" dev="mqueue" ino=25538 res=0 errno=0 [ 291.717385][ T29] audit: type=1804 audit(4294967366.529:11): pid=10631 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.1206" name="#)-\&[}" dev="mqueue" ino=25538 res=1 errno=0 [ 291.790278][ T29] audit: type=1804 audit(4294967366.529:12): pid=10631 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.1206" name="#)-\&[}" dev="mqueue" ino=25538 res=1 errno=0 [ 295.769785][T10705] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1222'. [ 296.468939][T10715] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 296.497413][T10715] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 297.905410][T10750] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1234'. [ 298.373433][T10763] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1237'. [ 299.091465][T10774] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1239'. [ 299.652052][T10782] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1242'. [ 301.555509][T10824] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1251'. [ 303.356620][T10862] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1260'. [ 303.815206][T10872] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 303.840820][T10872] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 306.806830][T10929] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1278'. [ 311.308844][T10990] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1291'. [ 317.504440][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.511026][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.080058][T11149] syz.1.1331 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 318.181539][T11150] netlink: 5 bytes leftover after parsing attributes in process `syz.5.1330'. [ 318.193645][T11150] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1330'. [ 319.272657][T11170] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1335'. [ 320.032464][T11218] nbd: must specify at least one socket [ 321.245054][T11263] binder: 11262:11263 ioctl c0306201 9 returned -14 [ 321.619800][T11276] netlink: 74 bytes leftover after parsing attributes in process `syz.5.1361'. [ 321.686314][T11277] ptrace attach of "./syz-executor exec"[8943] was attempted by ""[11277] [ 322.334289][T11294] netlink: 330 bytes leftover after parsing attributes in process `syz.2.1364'. [ 322.989684][T11323] netlink: 342 bytes leftover after parsing attributes in process `syz.4.1373'. [ 323.022683][T11323] netlink: 342 bytes leftover after parsing attributes in process `syz.4.1373'. [ 323.062702][T11326] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1374'. [ 323.240476][T11331] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1375'. [ 324.850830][T11366] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 324.882528][T11366] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 324.988362][T11373] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1385'. [ 325.010799][T11373] hsr_slave_0: left promiscuous mode [ 325.894588][T11402] netlink: 330 bytes leftover after parsing attributes in process `syz.1.1393'. [ 326.106377][T11411] futex_wake_op: syz.4.1397 tries to shift op by -1; fix this program [ 329.944922][ T5837] Bluetooth: hci1: command 0x0406 tx timeout [ 330.906617][T11537] netlink: zone id is out of range [ 331.767965][T11567] cgroup: fork rejected by pids controller in /syz2 [ 332.050553][ T29] audit: type=1107 audit(4294969464.013:13): pid=11613 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 332.563465][T11618] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 332.607989][T11618] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 335.055297][T11674] openvswitch: netlink: Unknown nsh attribute 0 [ 338.714825][T11731] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 338.725658][T11731] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 341.918133][T11797] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1483'. [ 342.101405][T11795] device-mapper: ioctl: Invalid data size in the ioctl structure: 0 [ 350.111700][T11922] synth uevent: /module/vxlan: unknown uevent action string [ 353.022988][T11950] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1521'. [ 361.458589][T12002] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1531'. [ 362.922513][ T5836] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 362.932171][ T5836] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 362.940673][ T5836] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 362.950634][ T5836] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 362.962860][ T5836] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 362.974290][ T5836] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 364.644950][T12024] chnl_net:caif_netlink_parms(): no params data found [ 365.043095][ T5836] Bluetooth: hci4: command tx timeout [ 365.600599][T12024] bridge0: port 1(bridge_slave_0) entered blocking state [ 365.614702][T12024] bridge0: port 1(bridge_slave_0) entered disabled state [ 365.622413][T12024] bridge_slave_0: entered allmulticast mode [ 365.636127][T12024] bridge_slave_0: entered promiscuous mode [ 365.644412][T12024] bridge0: port 2(bridge_slave_1) entered blocking state [ 365.664379][T12024] bridge0: port 2(bridge_slave_1) entered disabled state [ 365.673917][T12024] bridge_slave_1: entered allmulticast mode [ 365.702194][T12024] bridge_slave_1: entered promiscuous mode [ 365.869872][T12024] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 365.922264][T12024] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 365.977999][T12065] MTRR 1 not used [ 366.165785][T12024] team0: Port device team_slave_0 added [ 366.227357][T12024] team0: Port device team_slave_1 added [ 366.398559][T12024] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 366.453555][T12024] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 366.530241][T12024] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 366.599387][T12024] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 366.629369][T12024] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 366.721744][T12024] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 366.972571][T12024] hsr_slave_0: entered promiscuous mode [ 367.006665][T12024] hsr_slave_1: entered promiscuous mode [ 367.124317][ T5836] Bluetooth: hci4: command tx timeout [ 367.771910][T12024] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 367.808740][T12024] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 367.864982][ T5837] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 367.877643][T12024] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 367.886421][ T5837] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 367.895020][ T5837] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 367.905062][ T5837] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 367.931238][ T5837] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 367.942058][ T5837] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 368.017074][T12024] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 368.169539][T12024] 8021q: adding VLAN 0 to HW filter on device bond0 [ 368.387149][T12024] 8021q: adding VLAN 0 to HW filter on device team0 [ 368.414284][ T8418] bridge0: port 1(bridge_slave_0) entered blocking state [ 368.421431][ T8418] bridge0: port 1(bridge_slave_0) entered forwarding state [ 368.508276][ T9318] bridge0: port 2(bridge_slave_1) entered blocking state [ 368.515463][ T9318] bridge0: port 2(bridge_slave_1) entered forwarding state [ 368.997201][T12082] chnl_net:caif_netlink_parms(): no params data found [ 369.152269][T11570] syz.2.1433 (11570) used greatest stack depth: 19576 bytes left [ 369.187479][ T5837] Bluetooth: hci4: command tx timeout [ 369.806917][T12082] bridge0: port 1(bridge_slave_0) entered blocking state [ 369.814697][T12082] bridge0: port 1(bridge_slave_0) entered disabled state [ 369.821968][T12082] bridge_slave_0: entered allmulticast mode [ 369.865268][T12082] bridge_slave_0: entered promiscuous mode [ 369.886755][T12082] bridge0: port 2(bridge_slave_1) entered blocking state [ 369.927445][T12082] bridge0: port 2(bridge_slave_1) entered disabled state [ 369.942161][T12082] bridge_slave_1: entered allmulticast mode [ 369.949371][T12082] bridge_slave_1: entered promiscuous mode [ 369.983305][ T5837] Bluetooth: hci5: command tx timeout [ 370.589752][T12082] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 370.628839][T12082] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 370.668959][T12024] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 370.786445][T11582] syz.2.1433 (11582) used greatest stack depth: 19248 bytes left [ 371.246607][ T5837] Bluetooth: hci4: command tx timeout [ 371.808857][T12082] team0: Port device team_slave_0 added [ 372.044571][ T5837] Bluetooth: hci5: command tx timeout [ 373.132863][T12082] team0: Port device team_slave_1 added [ 374.112129][ T5837] Bluetooth: hci5: command tx timeout [ 375.358434][T11581] syz.2.1433 (11581) used greatest stack depth: 18608 bytes left [ 375.546449][T12082] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 375.553447][T12082] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 375.633621][T12082] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 375.963795][T12082] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 375.970783][T12082] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 376.061501][T12082] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 376.180927][ T5837] Bluetooth: hci5: command tx timeout [ 377.032825][T12082] hsr_slave_0: entered promiscuous mode [ 377.274003][T12082] hsr_slave_1: entered promiscuous mode [ 377.350073][T12082] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 377.361126][T12082] Cannot create hsr debugfs directory [ 377.400591][T12024] veth0_vlan: entered promiscuous mode [ 378.059192][T12024] veth1_vlan: entered promiscuous mode [ 378.288000][T12024] veth0_macvtap: entered promiscuous mode [ 378.404923][T12024] veth1_macvtap: entered promiscuous mode [ 378.536621][T12024] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 378.578502][T12024] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 378.608456][T12024] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 378.638177][T12024] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 378.659198][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.665524][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.707769][T12024] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 378.745501][T12024] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 378.772656][T12024] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 378.807506][T12024] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 378.837246][T12024] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 378.917881][T12024] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 378.966627][T12024] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 379.000335][T12024] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 379.035938][T12024] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 379.055925][T12136] openvswitch: netlink: IP tunnel dst address not specified [ 379.063578][T12024] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 379.093251][T12024] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 379.124203][T12024] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 379.171560][T12024] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 379.196313][T12024] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 379.250328][T12024] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 379.290164][T12024] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 379.307865][T12024] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 379.321971][T12024] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 379.654681][T12082] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 379.707172][T12082] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 379.751692][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 379.764774][T12082] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 379.795038][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 379.830763][T12082] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 379.949452][ T9318] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 379.996429][ T9318] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 380.343707][T12082] 8021q: adding VLAN 0 to HW filter on device bond0 [ 380.458126][T12082] 8021q: adding VLAN 0 to HW filter on device team0 [ 380.544801][ T8945] bridge0: port 1(bridge_slave_0) entered blocking state [ 380.552006][ T8945] bridge0: port 1(bridge_slave_0) entered forwarding state [ 380.798527][ T8945] bridge0: port 2(bridge_slave_1) entered blocking state [ 380.805725][ T8945] bridge0: port 2(bridge_slave_1) entered forwarding state [ 381.983876][T12082] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 382.774856][T12082] veth0_vlan: entered promiscuous mode [ 382.812375][T12082] veth1_vlan: entered promiscuous mode [ 382.907514][T12082] veth0_macvtap: entered promiscuous mode [ 382.943073][T12170] Process accounting resumed [ 382.943804][T12082] veth1_macvtap: entered promiscuous mode [ 383.000112][T12082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 383.025256][T12082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 383.055136][T12082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 383.080303][T12082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 383.124716][T12082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 383.164581][T12082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 383.193013][T12082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 383.244218][T12082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 383.279324][T12082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 383.300081][T12082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 383.327452][T12082] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 383.360074][T12082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 383.378438][T12082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 383.389244][T12082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 383.400314][T12082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 383.415051][T12082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 383.443672][T12082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 383.472848][T12082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 383.495029][T12082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 383.525316][T12082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 383.556863][T12082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 383.578699][T12082] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 383.614668][T12082] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 383.628215][T12082] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 383.649108][T12082] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 383.671804][T12082] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 383.901780][ T8417] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 383.926869][ T8417] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 384.023804][ T8945] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 384.046074][ T8945] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 386.653197][T12219] FAULT_INJECTION: forcing a failure. [ 386.653197][T12219] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 386.667011][T12219] CPU: 0 UID: 0 PID: 12219 Comm: syz.7.1576 Not tainted 6.13.0-rc3-syzkaller-00073-geabcdba3ad40 #0 [ 386.677815][T12219] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 386.687898][T12219] Call Trace: [ 386.691201][T12219] [ 386.694153][T12219] dump_stack_lvl+0x16c/0x1f0 [ 386.698869][T12219] should_fail_ex+0x497/0x5b0 [ 386.703592][T12219] _copy_to_user+0x32/0xd0 [ 386.708054][T12219] simple_read_from_buffer+0xd0/0x160 [ 386.713470][T12219] proc_fail_nth_read+0x198/0x270 [ 386.718536][T12219] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 386.724131][T12219] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 386.729723][T12219] vfs_read+0x1df/0xbe0 [ 386.733913][T12219] ? __fget_files+0x1fc/0x3a0 [ 386.738625][T12219] ? __pfx___mutex_lock+0x10/0x10 [ 386.743684][T12219] ? __pfx_vfs_read+0x10/0x10 [ 386.748405][T12219] ? __fget_files+0x206/0x3a0 [ 386.753121][T12219] ksys_read+0x12b/0x250 [ 386.757393][T12219] ? __pfx_ksys_read+0x10/0x10 [ 386.762197][T12219] do_syscall_64+0xcd/0x250 [ 386.766732][T12219] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 386.772657][T12219] RIP: 0033:0x7f0ddd18473c [ 386.777100][T12219] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 386.796745][T12219] RSP: 002b:00007f0dddf13030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 386.805201][T12219] RAX: ffffffffffffffda RBX: 00007f0ddd375fa0 RCX: 00007f0ddd18473c [ 386.813207][T12219] RDX: 000000000000000f RSI: 00007f0dddf130a0 RDI: 0000000000000003 [ 386.821207][T12219] RBP: 00007f0dddf13090 R08: 0000000000000000 R09: 0000000000000000 [ 386.829207][T12219] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 386.837207][T12219] R13: 0000000000000000 R14: 00007f0ddd375fa0 R15: 00007ffdc11a6098 [ 386.845244][T12219] [ 386.848312][ C0] vkms_vblank_simulate: vblank timer overrun [ 394.977580][T12339] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1604'. [ 396.028048][T12363] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1612'. [ 398.094891][ T29] audit: type=1804 audit(4294969530.396:14): pid=12402 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.5.1623" name="/newroot/sys/kernel/tracing/free_buffer" dev="tracefs" ino=107 res=1 errno=0 [ 399.857865][T12438] nbd3: detected capacity change from 0 to 68719476736 [ 399.900252][T12320] block nbd3: Send control failed (result -22) [ 399.906862][T12320] block nbd3: Request send failed, requeueing [ 399.951017][ T5837] block nbd3: Receive control failed (result -32) [ 399.953005][ T58] block nbd3: Dead connection, failed to find a fallback [ 399.966932][ T58] block nbd3: shutting down sockets [ 399.973212][ T58] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 399.983180][ T58] Buffer I/O error on dev nbd3, logical block 0, async page read [ 399.997774][T12320] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 400.036997][T12320] Buffer I/O error on dev nbd3, logical block 0, async page read [ 400.075577][T12320] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 400.133405][T12320] Buffer I/O error on dev nbd3, logical block 0, async page read [ 400.166270][T12320] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 400.206883][T12320] Buffer I/O error on dev nbd3, logical block 0, async page read [ 400.214824][T12320] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 400.245442][T12320] Buffer I/O error on dev nbd3, logical block 0, async page read [ 400.253969][T12320] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 400.273879][T12320] Buffer I/O error on dev nbd3, logical block 0, async page read [ 400.292750][T12320] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 400.315985][T12451] netlink: 504 bytes leftover after parsing attributes in process `syz.7.1635'. [ 400.325590][T12320] Buffer I/O error on dev nbd3, logical block 0, async page read [ 400.338114][T12320] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 400.361738][T12320] Buffer I/O error on dev nbd3, logical block 0, async page read [ 400.382077][T12320] ldm_validate_partition_table(): Disk read failed. [ 400.404818][T12320] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 400.434550][T12320] Buffer I/O error on dev nbd3, logical block 0, async page read [ 400.465596][T12320] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 400.488850][T12320] Buffer I/O error on dev nbd3, logical block 0, async page read [ 400.514521][T12320] Dev nbd3: unable to read RDB block 0 [ 400.531885][T12320] nbd3: unable to read partition table [ 400.569764][T12320] ldm_validate_partition_table(): Disk read failed. [ 400.624252][T12320] Dev nbd3: unable to read RDB block 0 [ 400.630264][T12320] nbd3: unable to read partition table [ 405.490712][T12516] Invalid ELF header magic: != ELF [ 408.238661][T12548] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1662'. [ 408.306534][T12554] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1662'. [ 408.334527][T12554] macsec0: entered allmulticast mode [ 408.340691][T12554] veth1_macvtap: entered allmulticast mode [ 409.219304][T12568] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1668'. [ 412.499732][T12624] netlink: 222 bytes leftover after parsing attributes in process `syz.6.1682'. [ 412.547988][T12624] netlink: 222 bytes leftover after parsing attributes in process `syz.6.1682'. [ 416.040500][T12681] netlink: 306 bytes leftover after parsing attributes in process `syz.7.1697'. [ 416.062907][T12683] netlink: 306 bytes leftover after parsing attributes in process `syz.7.1697'. [ 417.717326][ T5836] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 417.733285][ T5836] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 417.743933][ T5836] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 417.772308][ T5836] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 417.781147][ T5836] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 417.788659][ T5836] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 417.976879][T12722] netlink: 334 bytes leftover after parsing attributes in process `syz.6.1709'. [ 418.121381][T12714] chnl_net:caif_netlink_parms(): no params data found [ 418.399154][T12719] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1708'. [ 418.445206][T12714] bridge0: port 1(bridge_slave_0) entered blocking state [ 418.461862][T12714] bridge0: port 1(bridge_slave_0) entered disabled state [ 418.469182][T12714] bridge_slave_0: entered allmulticast mode [ 418.508530][T12714] bridge_slave_0: entered promiscuous mode [ 418.543996][T12714] bridge0: port 2(bridge_slave_1) entered blocking state [ 418.570498][T12714] bridge0: port 2(bridge_slave_1) entered disabled state [ 418.577791][T12714] bridge_slave_1: entered allmulticast mode [ 418.596101][T12714] bridge_slave_1: entered promiscuous mode [ 418.713676][T12714] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 418.749997][T12714] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 418.873795][T12714] team0: Port device team_slave_0 added [ 418.921217][T12714] team0: Port device team_slave_1 added [ 419.125696][T12714] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 419.147362][T12714] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 419.230314][T12714] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 419.315570][T12714] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 419.341471][T12714] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 419.367383][ C0] vkms_vblank_simulate: vblank timer overrun [ 419.394012][T12714] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 419.537808][T12714] hsr_slave_0: entered promiscuous mode [ 419.556308][T12714] hsr_slave_1: entered promiscuous mode [ 419.575288][T12714] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 419.593371][T12714] Cannot create hsr debugfs directory [ 419.877954][ T5836] Bluetooth: hci2: command tx timeout [ 420.010057][T12714] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 420.085232][T12714] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 420.182017][T12714] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 420.210615][T12714] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 420.385563][T12714] 8021q: adding VLAN 0 to HW filter on device bond0 [ 420.427763][T12714] 8021q: adding VLAN 0 to HW filter on device team0 [ 420.436974][T12789] netlink: 'syz.7.1727': attribute type 29 has an invalid length. [ 420.470799][T12789] netlink: 334 bytes leftover after parsing attributes in process `syz.7.1727'. [ 420.471511][ T3529] bridge0: port 1(bridge_slave_0) entered blocking state [ 420.487060][ T3529] bridge0: port 1(bridge_slave_0) entered forwarding state [ 420.569559][ T3529] bridge0: port 2(bridge_slave_1) entered blocking state [ 420.576777][ T3529] bridge0: port 2(bridge_slave_1) entered forwarding state [ 421.107685][T12714] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 421.448580][T12714] veth0_vlan: entered promiscuous mode [ 421.493473][T12714] veth1_vlan: entered promiscuous mode [ 421.546273][T12714] veth0_macvtap: entered promiscuous mode [ 421.566930][T12714] veth1_macvtap: entered promiscuous mode [ 421.610024][T12714] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 421.639858][T12714] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 421.659000][T12714] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 421.673831][T12714] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 421.685464][T12714] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 421.696588][T12714] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 421.710034][T12714] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 421.722471][T12714] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 421.732813][T12714] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 421.754085][T12714] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 421.768519][T12714] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 421.786236][T12714] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 421.803245][T12714] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 421.845412][T12714] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 421.872050][T12714] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 421.893736][T12714] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 421.913233][T12714] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 421.943170][ T5836] Bluetooth: hci2: command tx timeout [ 421.952882][T12714] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 421.972632][T12714] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 421.983759][T12714] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 421.995831][T12714] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 422.006101][T12714] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 422.016949][T12714] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 422.027635][T12714] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 422.038739][T12714] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 422.050259][T12714] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 422.061592][T12714] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 422.070800][T12714] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 422.097269][T12714] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 422.115421][T12714] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 422.306567][ T8945] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 422.315734][ T8945] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 422.400246][ T3529] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 422.420530][ T3529] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 424.012111][ T5836] Bluetooth: hci2: command tx timeout [ 426.081363][ T5836] Bluetooth: hci2: command tx timeout [ 426.948140][T12895] netlink: 504 bytes leftover after parsing attributes in process `syz.1.1752'. [ 435.332439][T13005] [ 435.334827][T13005] ====================================================== [ 435.341858][T13005] WARNING: possible circular locking dependency detected [ 435.348891][T13005] 6.13.0-rc3-syzkaller-00073-geabcdba3ad40 #0 Not tainted [ 435.356017][T13005] ------------------------------------------------------ [ 435.363047][T13005] syz.6.1780/13005 is trying to acquire lock: [ 435.369127][T13005] ffff88804d59da18 (sk_lock-AF_INET){+.+.}-{0:0}, at: sockopt_lock_sock+0x54/0x70 [ 435.378407][T13005] [ 435.378407][T13005] but task is already holding lock: [ 435.385785][T13005] ffffffff8fabfb08 (rtnl_mutex){+.+.}-{4:4}, at: do_ip_getsockopt+0x1e06/0x2bf0 [ 435.394894][T13005] [ 435.394894][T13005] which lock already depends on the new lock. [ 435.394894][T13005] [ 435.405315][T13005] [ 435.405315][T13005] the existing dependency chain (in reverse order) is: [ 435.414352][T13005] [ 435.414352][T13005] -> #2 (rtnl_mutex){+.+.}-{4:4}: [ 435.421604][T13005] __mutex_lock+0x19b/0xa60 [ 435.426669][T13005] do_ip_setsockopt+0xf9/0x38c0 [ 435.432074][T13005] ip_setsockopt+0x59/0xf0 [ 435.437050][T13005] tcp_setsockopt+0xa4/0x100 [ 435.442194][T13005] smc_setsockopt+0x1b4/0xc00 [ 435.447424][T13005] do_sock_setsockopt+0x222/0x480 [ 435.452978][T13005] __sys_setsockopt+0x1a0/0x230 [ 435.458364][T13005] __x64_sys_setsockopt+0xbd/0x160 [ 435.464010][T13005] do_syscall_64+0xcd/0x250 [ 435.469052][T13005] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 435.475476][T13005] [ 435.475476][T13005] -> #1 (&smc->clcsock_release_lock){+.+.}-{4:4}: [ 435.484086][T13005] __mutex_lock+0x19b/0xa60 [ 435.489116][T13005] smc_switch_to_fallback+0x2d/0xa00 [ 435.494936][T13005] smc_sendmsg+0x13d/0x520 [ 435.499886][T13005] ____sys_sendmsg+0x9ae/0xb40 [ 435.505174][T13005] ___sys_sendmsg+0x135/0x1e0 [ 435.510378][T13005] __sys_sendmsg+0x16e/0x220 [ 435.515500][T13005] do_syscall_64+0xcd/0x250 [ 435.520529][T13005] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 435.526955][T13005] [ 435.526955][T13005] -> #0 (sk_lock-AF_INET){+.+.}-{0:0}: [ 435.534609][T13005] __lock_acquire+0x249e/0x3c40 [ 435.539995][T13005] lock_acquire.part.0+0x11b/0x380 [ 435.545628][T13005] lock_sock_nested+0x3a/0xf0 [ 435.550838][T13005] sockopt_lock_sock+0x54/0x70 [ 435.556127][T13005] do_ip_getsockopt+0x115c/0x2bf0 [ 435.561671][T13005] ip_getsockopt+0x9c/0x1e0 [ 435.566689][T13005] raw_getsockopt+0x4d/0x1e0 [ 435.571798][T13005] do_sock_getsockopt+0x3fe/0x870 [ 435.577343][T13005] __sys_getsockopt+0x12f/0x260 [ 435.582720][T13005] __x64_sys_getsockopt+0xbd/0x160 [ 435.588360][T13005] do_syscall_64+0xcd/0x250 [ 435.593387][T13005] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 435.599807][T13005] [ 435.599807][T13005] other info that might help us debug this: [ 435.599807][T13005] [ 435.610040][T13005] Chain exists of: [ 435.610040][T13005] sk_lock-AF_INET --> &smc->clcsock_release_lock --> rtnl_mutex [ 435.610040][T13005] [ 435.623608][T13005] Possible unsafe locking scenario: [ 435.623608][T13005] [ 435.631051][T13005] CPU0 CPU1 [ 435.636410][T13005] ---- ---- [ 435.641768][T13005] lock(rtnl_mutex); [ 435.645749][T13005] lock(&smc->clcsock_release_lock); [ 435.653636][T13005] lock(rtnl_mutex); [ 435.660133][T13005] lock(sk_lock-AF_INET); [ 435.664633][T13005] [ 435.664633][T13005] *** DEADLOCK *** [ 435.664633][T13005] [ 435.672778][T13005] 1 lock held by syz.6.1780/13005: [ 435.677890][T13005] #0: ffffffff8fabfb08 (rtnl_mutex){+.+.}-{4:4}, at: do_ip_getsockopt+0x1e06/0x2bf0 [ 435.687389][T13005] [ 435.687389][T13005] stack backtrace: [ 435.693267][T13005] CPU: 0 UID: 0 PID: 13005 Comm: syz.6.1780 Not tainted 6.13.0-rc3-syzkaller-00073-geabcdba3ad40 #0 [ 435.704025][T13005] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 435.714079][T13005] Call Trace: [ 435.717360][T13005] [ 435.720289][T13005] dump_stack_lvl+0x116/0x1f0 [ 435.724975][T13005] print_circular_bug+0x41c/0x610 [ 435.730015][T13005] check_noncircular+0x31a/0x400 [ 435.734963][T13005] ? __pfx_check_noncircular+0x10/0x10 [ 435.740429][T13005] ? register_lock_class+0xb1/0x1240 [ 435.745718][T13005] ? lockdep_lock+0xc6/0x200 [ 435.750312][T13005] ? __pfx_lockdep_lock+0x10/0x10 [ 435.755345][T13005] __lock_acquire+0x249e/0x3c40 [ 435.760210][T13005] ? __pfx___lock_acquire+0x10/0x10 [ 435.765418][T13005] ? do_ip_getsockopt+0x1e06/0x2bf0 [ 435.770617][T13005] ? rcu_is_watching+0x12/0xc0 [ 435.775389][T13005] lock_acquire.part.0+0x11b/0x380 [ 435.780503][T13005] ? sockopt_lock_sock+0x54/0x70 [ 435.785453][T13005] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 435.791090][T13005] ? rcu_is_watching+0x12/0xc0 [ 435.795863][T13005] ? trace_lock_acquire+0x14e/0x1f0 [ 435.801078][T13005] ? sockopt_lock_sock+0x54/0x70 [ 435.806032][T13005] ? lock_acquire+0x2f/0xb0 [ 435.810532][T13005] ? sockopt_lock_sock+0x54/0x70 [ 435.815479][T13005] lock_sock_nested+0x3a/0xf0 [ 435.820161][T13005] ? sockopt_lock_sock+0x54/0x70 [ 435.825108][T13005] sockopt_lock_sock+0x54/0x70 [ 435.829879][T13005] do_ip_getsockopt+0x115c/0x2bf0 [ 435.834908][T13005] ? __pfx_do_ip_getsockopt+0x10/0x10 [ 435.840279][T13005] ? plist_check_prev_next+0x12a/0x1a0 [ 435.845752][T13005] ? hlock_class+0x4e/0x130 [ 435.850259][T13005] ? mark_lock+0xb5/0xc60 [ 435.854597][T13005] ? aa_label_sk_perm+0x19d/0x5a0 [ 435.859634][T13005] ? __lock_acquire+0x15a9/0x3c40 [ 435.864671][T13005] ? __pfx___lock_acquire+0x10/0x10 [ 435.869880][T13005] ? find_held_lock+0x2d/0x110 [ 435.874649][T13005] ip_getsockopt+0x9c/0x1e0 [ 435.879161][T13005] ? __pfx_ip_getsockopt+0x10/0x10 [ 435.884270][T13005] ? lock_acquire+0x2f/0xb0 [ 435.888771][T13005] ? __might_fault+0xe3/0x190 [ 435.893460][T13005] ? __might_fault+0xe3/0x190 [ 435.898148][T13005] raw_getsockopt+0x4d/0x1e0 [ 435.902736][T13005] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 435.908633][T13005] do_sock_getsockopt+0x3fe/0x870 [ 435.913658][T13005] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 435.919204][T13005] ? lock_acquire+0x2f/0xb0 [ 435.923706][T13005] ? __fget_files+0x40/0x3a0 [ 435.928298][T13005] ? __fget_files+0x206/0x3a0 [ 435.932978][T13005] __sys_getsockopt+0x12f/0x260 [ 435.937839][T13005] __x64_sys_getsockopt+0xbd/0x160 [ 435.942955][T13005] ? do_syscall_64+0x91/0x250 [ 435.947636][T13005] ? lockdep_hardirqs_on+0x7c/0x110 [ 435.952841][T13005] do_syscall_64+0xcd/0x250 [ 435.957351][T13005] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 435.963246][T13005] RIP: 0033:0x7f12e0d85d29 [ 435.967658][T13005] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 435.987271][T13005] RSP: 002b:00007f12e1b8a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 435.995687][T13005] RAX: ffffffffffffffda RBX: 00007f12e0f75fa0 RCX: 00007f12e0d85d29 [ 436.003656][T13005] RDX: 0000000000000029 RSI: 0000000000000000 RDI: 0000000000000004 [ 436.011623][T13005] RBP: 00007f12e0e01aa8 R08: 0000000020000040 R09: 0000000000000000 [ 436.019590][T13005] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 436.027557][T13005] R13: 0000000000000000 R14: 00007f12e0f75fa0 R15: 00007ffc238e2cc8 [ 436.035540][T13005] [ 439.772969][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.779274][ T1291] ieee802154 phy1 wpan1: encryption failed: -22