last executing test programs: 1m47.252896141s ago: executing program 2 (id=545): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'veth0_to_hsr\x00', 0x0}) connect$auto(0x3, 0x0, 0x55) mmap$auto(0x0, 0x2020008, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sysfs$auto(0x2, 0x100000000000029, 0x0) fsopen$auto(0x0, 0x1) sendmsg$auto_OVS_METER_CMD_SET(0xffffffffffffffff, 0x0, 0x40) setsockopt$auto(0xffffffffffffffff, 0x4, 0x8001, 0x0, 0x2) unshare$auto(0x40000080) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) sysfs$auto(0x2, 0x10000000000002d, 0x0) mbind$auto(0xfffffffffffffffe, 0x100000004, 0x100000000, 0x0, 0x6, 0x4) mmap$auto(0x0, 0x5, 0x3, 0x16, 0x3, 0x8000) unshare$auto(0x40000080) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r2 = open(&(0x7f0000000200)='./cgroup\x00', 0x400, 0x23) fchdir$auto(r2) mkdir$auto(&(0x7f0000000140)='MAC80211_HWSIM\x00', 0x1) rmdir$auto(&(0x7f0000000340)='MAC80211_HWSIM\x00') r3 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000001480), r0) sendmsg$auto_ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001c80)={&(0x7f0000000100)={0x28, r3, 0x1, 0x70bd2a, 0x25dfdc00, {}, [@ETHTOOL_A_CHANNELS_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}, @ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x8800}, 0x4) 1m46.536528892s ago: executing program 2 (id=550): open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) fcntl$auto(0x3, 0x400, 0x2) r0 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/037/001\x00', 0xa801, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/system/cpu/vulnerabilities/mds\x00', 0x406803, 0x0) ioctl$auto(0x3, 0x9, r0) ioctl$auto_VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000000000)={0x10, r0}) open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) (async) fcntl$auto(0x3, 0x400, 0x2) (async) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/037/001\x00', 0xa801, 0x0) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/system/cpu/vulnerabilities/mds\x00', 0x406803, 0x0) (async) ioctl$auto(0x3, 0x9, r0) (async) ioctl$auto_VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000000000)={0x10, r0}) (async) 1m46.303932018s ago: executing program 2 (id=551): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_netdev(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$auto_NETDEV_CMD_NAPI_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010029bd7000fedbcf250b000000080002001c02"], 0x1c}, 0x1, 0x3000000000000, 0x0, 0xc0}, 0x800) 1m46.119461827s ago: executing program 2 (id=554): prctl$auto(0x43, 0x17, 0x0, 0x0, 0x3) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) 1m45.856564224s ago: executing program 2 (id=559): close_range$auto(0x2, 0x8, 0x0) r0 = socket(0x10, 0x2, 0x7) read$auto(r0, 0x0, 0xfdef) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_check_wx_fops_(0xffffffffffffff9c, &(0x7f0000000140), 0x20080, 0x0) readv$auto(r1, &(0x7f0000000080)={0x0, 0x14000000000}, 0x3) openat$auto_proc_pid_attr_operations_base(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/attr/exec\x00', 0x478d03, 0x0) mmap$auto(0x0, 0x40009, 0x3, 0x9b72, 0x7, 0x28000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socket(0x10, 0x2, 0xfffffffe) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0xffffff7fffff0005, 0x8) mmap$auto(0x800000007, 0x4008, 0xd, 0x18, r1, 0x4) openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x8cc002, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) r2 = openat$auto_binder_features_fops_(0xffffffffffffff9c, &(0x7f0000000000)='/dev/binderfs/features/freeze_notification\x00', 0x101c00, 0x0) mmap$auto(0x800000001000, 0x400005, 0x6608, 0x9b7d, r2, 0x8000) madvise$auto(0x0, 0x2003ec, 0x14) openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) msync$auto(0x0, 0x2000000005, 0x6) socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8000, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8, 0x0) sendmsg$auto_OVS_CT_LIMIT_CMD_DEL(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x14, 0x0, 0x200, 0x70bd2c, 0x25dfdbfe}, 0x14}}, 0x4004811) socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) recvmmsg$auto(r3, &(0x7f0000000300)={{0x0, 0x6, &(0x7f0000000280)={0x0, 0x40009}, 0xc, &(0x7f00000002c0), 0x4, 0x8}, 0x5a55}, 0xd, 0x3, 0x0) close_range$auto(0x2, 0x8, 0x0) 1m44.253054839s ago: executing program 2 (id=568): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) r0 = socket(0x2, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @remote}, 0x6a) (async) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x5, 0x20000000) (async) write$auto(0x3, 0x0, 0xfffffdef) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) mbind$auto(0x9, 0x84, 0x4, 0x0, 0x80000000, 0x7f) (async) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x402, 0x300000000000) mmap$auto(0xc, 0x0, 0x0, 0x1a, 0x9, 0x3) (async) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) (async) recvmmsg$auto(0x3, 0x0, 0x687bcbd, 0x8, 0x0) (async) shutdown$auto(0x200000003, 0x2) sysfs$auto(0x2, 0x1b, 0x0) mmap$auto(0x401, 0x6, 0x8, 0x15, 0xd, 0x6) (async) socket(0x18, 0x5, 0x1) (async) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) socket(0xa, 0x1, 0x100) (async) setsockopt$auto(0x400000000000003, 0x29, 0x1b, 0x0, 0x56b) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) io_uring_setup$auto(0x6, 0x0) (async) r1 = openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$auto_IOCTL_VMCI_VERSION2(r1, 0x7a7, 0x0) ioctl$auto_IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, 0x6) (async) ioctl$auto_IOCTL_VMCI_CTX_GET_CPT_STATE(r1, 0x7b1, 0x0) (async) setsockopt$auto(0x400000000000003, 0x29, 0x1c, 0x0, 0x56b) close_range$auto(0x2, 0x8, 0x0) (async) msgsnd$auto(0x3, 0x0, 0x9, 0xb966) (async) openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000080), 0xa0000, 0x0) (async) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) ioperm$auto(0x7, 0x6, 0x2) 1m29.092105702s ago: executing program 32 (id=568): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) r0 = socket(0x2, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @remote}, 0x6a) (async) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x5, 0x20000000) (async) write$auto(0x3, 0x0, 0xfffffdef) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) mbind$auto(0x9, 0x84, 0x4, 0x0, 0x80000000, 0x7f) (async) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x402, 0x300000000000) mmap$auto(0xc, 0x0, 0x0, 0x1a, 0x9, 0x3) (async) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) (async) recvmmsg$auto(0x3, 0x0, 0x687bcbd, 0x8, 0x0) (async) shutdown$auto(0x200000003, 0x2) sysfs$auto(0x2, 0x1b, 0x0) mmap$auto(0x401, 0x6, 0x8, 0x15, 0xd, 0x6) (async) socket(0x18, 0x5, 0x1) (async) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) socket(0xa, 0x1, 0x100) (async) setsockopt$auto(0x400000000000003, 0x29, 0x1b, 0x0, 0x56b) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) io_uring_setup$auto(0x6, 0x0) (async) r1 = openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$auto_IOCTL_VMCI_VERSION2(r1, 0x7a7, 0x0) ioctl$auto_IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, 0x6) (async) ioctl$auto_IOCTL_VMCI_CTX_GET_CPT_STATE(r1, 0x7b1, 0x0) (async) setsockopt$auto(0x400000000000003, 0x29, 0x1c, 0x0, 0x56b) close_range$auto(0x2, 0x8, 0x0) (async) msgsnd$auto(0x3, 0x0, 0x9, 0xb966) (async) openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000080), 0xa0000, 0x0) (async) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) ioperm$auto(0x7, 0x6, 0x2) 44.009938039s ago: executing program 4 (id=779): r0 = socket(0x2, 0x1, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r1 = socket(0x2, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0xffff, @remote}, 0x6a) listen$auto(r0, 0x7) close_range$auto(0x0, 0xfffffffffffff000, 0x2) r2 = socket(0x10, 0x2, 0xc) r3 = socket(0x10, 0x2, 0xc) r4 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x6, 0x0) socket(0x10, 0x2, 0x15) socket(0xa, 0x801, 0x106) sendmsg$auto_ETHTOOL_MSG_WOL_SET(0xffffffffffffffff, &(0x7f0000002cc0)={0x0, 0x0, &(0x7f0000002c80)={&(0x7f0000000340)=ANY=[@ANYBLOB="14000000", @ANYBLOB="0100df"], 0x14}, 0x1, 0x0, 0x0, 0x801}, 0x40) r5 = socket(0x2, 0x6, 0x0) mmap$auto(0x2, 0x3, 0x4, 0x11, r4, 0x7f03) setsockopt$auto(r5, 0x10d, 0xf, 0x0, 0x17) socket(0x2, 0x6, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x1, 0x4000000000df, 0x44eb2, 0x3, 0x300000000000) fcntl$auto(0x8000000000000001, 0x26, 0x8) migrate_pages$auto(0x0, 0x4, &(0x7f00000001c0)=0x7f, &(0x7f0000000100)=0x3) r7 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/tty/ldiscs\x00', 0x0, 0x0) pread64$auto(r7, 0x0, 0x100000001, 0x100) getsockopt$auto(r7, 0x0, 0x6, &(0x7f0000000000)='@\b&\x00', &(0x7f0000000080)=0x71e0) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="18000000", @ANYRES8=r3, @ANYRES8=r6], 0x18}, 0x1, 0x0, 0x0, 0x60008004}, 0x84) mprotect$auto(0x1ffff000, 0x8000000000000001, 0xd) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x4000000) sendmmsg$auto(r1, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1, 0xb}, 0x800009}, 0x5, 0x2000fdff) r8 = openat$auto_dai_list_fops_(0xffffffffffffff9c, &(0x7f00000000c0), 0x325a00, 0x0) fchmod$auto(r8, 0x0) 43.426655898s ago: executing program 4 (id=783): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_seg6(&(0x7f0000000040), 0xffffffffffffffff) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) socket(0xf, 0x3, 0x2) recvfrom$auto(0x4, 0x0, 0x1, 0x6, 0x0, 0x0) r2 = socket(0xa, 0x2, 0x73) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004040}, 0xc800) sendto$auto(r2, 0x0, 0x402, 0x0, &(0x7f0000000000)=@generic={0xa, "e2e18340cba8fe8000"}, 0x1c) sendmsg$auto_SEG6_CMD_SETHMAC(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0002080000000200000001000000050006000400000014000100fc000000000000000000000000000001ebfc02007d2a0000050005000200000014000100fe8000000000000000000000000000aa0800030005000000"], 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x48080) acct$auto(&(0x7f00000020c0)='/proc/thread-self/numa_maps\x00') acct$auto(&(0x7f0000000180)='\\)-$&/@\x00') 41.77678358s ago: executing program 4 (id=787): r0 = socket(0xa, 0x1, 0x84) (async) mmap$auto(0x0, 0x40009, 0xe2, 0x9b72, 0x7, 0x28000) r1 = syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_OVS_FLOW_CMD_GET(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x34, r1, 0x1, 0x70bd25, 0x25dfdc02, {}, [@OVS_FLOW_ATTR_PROBE={0x4}, @OVS_FLOW_ATTR_KEY={0x1c, 0x1, 0x0, 0x1, [@nested={0x18, 0x10, 0x0, 0x1, [@typed={0x14, 0xc, 0x0, 0x0, @ipv6=@private2={0xfc, 0x2, '\x00', 0xff}}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x200400f0}, 0x800) setsockopt$auto(r0, 0x3, 0x8022, 0x0, 0x10) 41.520245602s ago: executing program 4 (id=791): mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) sysfs$auto(0x2, 0x100000000000033, 0x0) r0 = signalfd4$auto(0xffffffff, 0x0, 0x8, 0x0) read$auto_l2cap_debugfs_fops_(r0, &(0x7f0000000240)=""/177, 0xb1) r1 = openat$auto_fops_x16_ro_(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/ieee80211/phy1/netdev:wlan1/dormant_links\x00', 0x800, 0x0) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/mtdblock0\x00', 0x10d441, 0x0) write$auto(r2, 0x0, 0xfffffffc) ioctl$auto_SW_SYNC_GET_DEADLINE(r0, 0xc0105702, &(0x7f0000000040)={0xb0, 0x0, r1}) socket(0x22, 0x800, 0x2) fsopen$auto(0x0, 0x1) 40.518531782s ago: executing program 4 (id=798): openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000ac0)='/proc/irq/default_smp_affinity\x00', 0x2, 0x0) mmap$auto(0x0, 0xc, 0x9c0f, 0x44eb2, 0x10006, 0x300000000000) readv$auto(0x3, &(0x7f0000003100)={0x0, 0x36}, 0x1) write$auto(0x3, 0x0, 0xfdef) socket(0x29, 0x2, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x4, 0x28000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x806, 0x0) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/fs/netfs/caches\x00', 0x105000, 0x0) io_uring_setup$auto(0x3, 0x0) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "abe6de3d6468fe8000"}, 0x55) r0 = socket(0x2b, 0x1, 0x0) ppoll$auto(&(0x7f0000000000)={r0, 0x8, 0x6}, 0x7, 0x0, 0x0, 0x8) sendmmsg$auto(r0, &(0x7f0000000140)={{0x0, 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x5, 0x20000000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) syz_genetlink_get_family_id$auto_hsr(0x0, 0xffffffffffffffff) openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) setresuid$auto(0x0, 0x8, 0x8000) ioctl$auto(0x20000000000003, 0x8946, 0x2) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x10004) madvise$auto(0x0, 0xffffffffffff0001, 0x15) rt_sigqueueinfo$auto(0x1, 0x7, &(0x7f0000000040)={@siginfo_0_0={0x0, 0x5, 0xfffffffb, @_sigpoll={0x52, 0x7}}}) r1 = socket(0x3, 0x5, 0x0) connect$auto(0x3, &(0x7f0000000000), 0x55) setsockopt$auto(r1, 0x1, 0x4, &(0x7f0000000240)='))#:g-\x00', 0x9) 39.385915581s ago: executing program 4 (id=802): openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event1\x00', 0x20082, 0x0) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r1) ioctl$auto_KVM_CREATE_VM(r0, 0xaea3, 0x0) socket(0xf, 0x4, 0x100) r2 = openat$auto_ftrace_formats_fops_trace_printk(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing/printk_formats\x00', 0x0, 0x0) read$auto_ftrace_formats_fops_trace_printk(r2, &(0x7f0000000540)=""/4096, 0x1000) 39.006676713s ago: executing program 33 (id=802): openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event1\x00', 0x20082, 0x0) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r1) ioctl$auto_KVM_CREATE_VM(r0, 0xaea3, 0x0) socket(0xf, 0x4, 0x100) r2 = openat$auto_ftrace_formats_fops_trace_printk(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing/printk_formats\x00', 0x0, 0x0) read$auto_ftrace_formats_fops_trace_printk(r2, &(0x7f0000000540)=""/4096, 0x1000) 11.391044765s ago: executing program 5 (id=945): mmap$auto(0x0, 0x7, 0x4000000000df, 0xeb1, 0x401, 0x8000) r0 = io_uring_setup$auto(0x6, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'geneve1\x00'}) sendmsg$auto_BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000100)=ANY=[@ANYRES16=r1], 0x1c}, 0x1, 0x0, 0x0, 0x48}, 0x4000044) r2 = gettid() rt_sigqueueinfo$auto(r2, 0x0, &(0x7f0000000640)={@siginfo_0_0={0x8001, 0x100, 0x80, @_sigpoll={0x892}}}) r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sda\x00', 0x8001, 0x0) ioctl$auto_def_blk_fops_fs(r3, 0x1268, &(0x7f0000000000)) r4 = socket(0xa, 0x5, 0x84) sendfile$auto(r1, r0, &(0x7f0000000040)=0x10000, 0x8) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x200004, 0x4000000000df, 0x40eb2, 0x402, 0x300000000000) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x402, 0x300000000000) r5 = openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x1000, 0x0) mmap$auto_tracing_buffers_fops_trace(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x9, 0x11, r5, 0x0) r6 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fb0\x00', 0x0, 0x0) mmap$auto_fb_fops_fb_chrdev(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x7, 0x12, r6, 0x80000000000000) fcntl$auto(r1, 0xfffffff7, r2) r7 = openat$auto_proc_gid_map_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/gid_map\x00', 0x20002, 0x0) write$auto_proc_gid_map_operations_base(r7, 0x0, 0x0) sendto$auto(r4, 0x0, 0x401, 0x101, &(0x7f0000000000)=@generic={0xa, "e2e18340cba8fe8000"}, 0x1c) close_range$auto(0x0, 0xfffffffffffff000, 0x0) 11.010810451s ago: executing program 1 (id=947): close_range$auto(0x0, 0xfffffffffffff000, 0x2) r0 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x0, 0xfffffffffffff000, 0x2) mmap$auto(0x0, 0x4020009, 0xdb, 0xeb1, 0x401, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) r1 = socket(0xa, 0x801, 0x84) close_range$auto(0x0, 0xffffeffe, 0x2) pipe$auto(0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) sysfs$auto(0x2, 0x0, 0x0) fsopen$auto(0x0, 0x1) epoll_create$auto(0x4) close_range$auto(r1, r2, 0x0) epoll_create$auto(0x4) epoll_ctl$auto(0x5, 0x1, 0x8000000000000000, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x2) r3 = openat$auto_binder_ctl_fops_binderfs(0xffffffffffffff9c, &(0x7f0000000000), 0x82c00, 0x0) ioctl$auto_BINDER_CTL_ADD(r3, 0xc1086201, 0x0) landlock_create_ruleset$auto(&(0x7f0000000000)={0x1000, 0x400, 0x7ff}, 0x9, 0x0) landlock_restrict_self$auto(r0, 0x0) symlink$auto(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000000180)='./file0\x00') r4 = openat$auto_proc_pid_attr_operations_base(0xffffffffffffff9c, &(0x7f00000037c0)='/proc/self/attr/current\x00', 0x1, 0x0) write$auto_proc_pid_attr_operations_base(r4, 0x0, 0x0) mmap$auto(0x0, 0x9, 0xdf, 0x9b72, 0x2, 0x8000) io_uring_setup$auto(0x6, 0x0) r5 = socket(0x29, 0x2, 0x0) setsockopt$auto(r5, 0x119, 0x1, 0x0, 0x8) close_range$auto(0x2, 0x8, 0x0) unshare$auto(0x40000080) 10.541942243s ago: executing program 5 (id=948): r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x0) (async) mmap$auto(0xfffffffffffffffe, 0x40000b, 0x4, 0x9b75, r0, 0x1) (async, rerun: 32) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x60742, 0x0) (rerun: 32) madvise$auto(0x0, 0xffffffffffff0005, 0x19) (async, rerun: 32) modify_ldt$auto(0x9, &(0x7f0000000000)="0199bdedccde51d30183b06a04d80c6529654f04271498f1af7d6ab7345eedc7ecc655820bccdca5f30247832999db9187bd1bb95fd43b7a36b9eb16d914731a97e30df9c90698b31d0ff17df85b589ad05d91bd490213fcd7e8e1bad42b4693c31a3fc3c109fb9492961cdf47b431ce6f62bf1c37409eeb0e7b8a13e4c3fb2740e05db68727f207e9f65f445eec58070f15c7beb647a8f6d294d775899e11f1750f1c8c251a50ab7b6193ce4e3b5f37c3198b62aa10f0f618", 0x2) (rerun: 32) mmap$auto(0x4000000000004, 0x9, 0x4000000000df, 0x13, 0x401, 0x9) (async, rerun: 32) mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) (async, rerun: 32) r1 = openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000980)='/proc/self/pagemap\x00', 0x188880, 0x0) read$auto(r1, 0x0, 0x39b8) 10.437617288s ago: executing program 1 (id=951): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) getrandom$auto(0x0, 0x6000000, 0x3) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/bonding/bond0\x00', 0xc0000, 0x0) sendfile$auto(0x2, 0x3, &(0x7f0000000040)=0x80000080, 0xc3e0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/module/memory_hotplug/parameters/memmap_on_memory\x00', 0x181400, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f00000010c0)=""/4096, 0x1000) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0) r1 = openat$auto_adf_hb_cfg_fops_adf_heartbeat_dbgfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/ieee80211/phy1/statistics/dot11FCSErrorCount\x00', 0x0, 0x0) read$auto_adf_hb_cfg_fops_adf_heartbeat_dbgfs(r1, 0x0, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) madvise$auto(0x0, 0x20499d, 0x9) 9.678107733s ago: executing program 5 (id=954): socket(0x11, 0x80003, 0x300) (async) r0 = socket(0x11, 0x80003, 0x300) setsockopt$auto(r0, 0x107, 0x9, 0x0, 0x2) socket(0x2, 0x3, 0x1) mmap$auto(0x0, 0x3, 0xdf, 0x9b72, 0x2, 0x8000) setreuid$auto(0x0, 0x20000000004) ioctl$auto(0x3, 0x8916, 0x91) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/mac802154_hwsim/ieee802154/phy0/index\x00', 0x0, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f0000000040)=""/4110, 0x100e) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/v4l-subdev5\x00', 0x280, 0x0) (async) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/v4l-subdev5\x00', 0x280, 0x0) mmap$auto(0x0, 0x2000c, 0x4000000000df, 0xeb1, 0x401, 0x8000) r2 = socket(0x2, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0xffff, @remote}, 0x6a) sendmmsg$auto(r2, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1, 0xb}, 0x800009}, 0x5, 0x2000fdff) close_range$auto(0x2, 0x8, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_debug_help_fops_orangefs_debugfs(0xffffffffffffff9c, &(0x7f0000000040), 0x632082, 0x0) ioctl$auto(0x3, 0xc040563d, 0x38) (async) ioctl$auto(0x3, 0xc040563d, 0x38) 9.369635618s ago: executing program 1 (id=955): capget$auto(&(0x7f0000000100)={0x8001, 0xffffffffffffffff}, &(0x7f0000000140)={0xb, 0x1}) sched_setparam$auto(r0, &(0x7f0000000180)={0xffffffff}) open(&(0x7f0000000000)='./file0\x00', 0x261c2, 0x84) r1 = socket(0x2, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) r2 = pipe$auto(&(0x7f0000000040)=r1) capset$auto(&(0x7f00000001c0)={0x400}, &(0x7f0000000200)={0x6, 0x0, 0x10001}) r3 = socket(0x29, 0x2, 0x0) mmap$auto(0x1, 0xb583, 0x2, 0x14, r2, 0x10000) openat$auto_generic(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/ieee80211/phy11/netdev:wlan1/ap_power_level\x00', 0x80800, 0x0) openat$auto_proc_mountinfo_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/mountinfo\x00', 0x40840, 0x0) r4 = openat$auto_tracing_saved_cmdlines_fops_trace(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/debug/tracing/saved_cmdlines\x00', 0x40, 0x0) close_range$auto(r4, 0x8, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) setuid$auto(0xe) setrlimit$auto(0x8, 0x0) mlockall$auto(0x3) syz_genetlink_get_family_id$auto_netdev(&(0x7f0000000080), r3) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r5 = socket(0x2, 0x2, 0x0) r6 = socket(0x2, 0x2, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0xffff, @remote}, 0x6a) sendmmsg$auto(r6, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1, 0xb}, 0x800009}, 0x5, 0x20000000) sendmmsg$auto(r5, &(0x7f0000000000)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1, 0xb}, 0x800009}, 0x5, 0x20000000) ioctl$auto(0x3, 0x80000541b, 0x38) read$auto(0x3, 0x0, 0x80) fallocate$auto(0x8000000000000003, 0x0, 0xd, 0xcbd5d) clone3$auto(&(0x7f0000000000)={0x3ffffffff, 0x4, 0x63, 0x3, 0x6, 0x0, 0x7, 0x8, 0x8fa1, 0x200000000001, 0x8000000003}, 0x294) socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB='l\x00\''], 0x1ac}, 0x1, 0x0, 0x0, 0x40814}, 0x2004c0c4) 9.344023844s ago: executing program 5 (id=956): close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket(0xa, 0x2, 0x88) socket(0x2, 0x6, 0x0) r0 = socket(0x15, 0x5, 0x0) openat$auto_media_devnode_fops_mc_devnode(0xffffffffffffff9c, 0x0, 0x12200, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) openat$auto_rfkill_fops_core(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) listen$auto(r0, 0x9) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000005280), 0x40400, 0x0) openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000300), 0x101040, 0x0) socket$nl_generic(0x10, 0x3, 0x10) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0x9, 0x1, 0x948b, 0x4, 0x15f4da0a, 0x1, 0x3, 0x300000000000000, 0x80000001, 0x9, 0x6d3c, 0x5, 0x2]}, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/v4l-subdev5\x00', 0x280, 0x0) move_pages$auto(0x1, 0xf54, 0x0, 0x0, 0x0, 0x8000000000000000) ioctl$auto(0x3, 0xc0305602, 0x38) close_range$auto(0x2, 0x8, 0x0) 8.330177827s ago: executing program 0 (id=959): mmap$auto(0x0, 0x20005, 0x80, 0xeb1, 0xffffffffffffffff, 0x1) set_mempolicy$auto(0x40003, 0x0, 0x4) mmap$auto(0x0, 0x8, 0x4000000000df, 0x44eb1, 0x6, 0x300000000000) r0 = openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/per_cpu/cpu1/trace_pipe_raw\x00', 0x1000, 0x0) mmap$auto_tracing_buffers_fops_trace(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2000001, 0x11, r0, 0x0) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) move_pages$auto(r1, 0x2, 0x0, 0x0, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000200), r2) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'veth1_to_team\x00', 0x0}) sendmsg$auto_BATADV_CMD_GET_BLA_BACKBONE(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[@ANYRESHEX=r2, @ANYRES32=0x0, @ANYBLOB="7ad0ad7057f610c5bbc8fe7d61bf3fc5198607f04d7ed2c59b41b35e95bcc9959e77a1d7c41bc18d4183537060559ef50db3bc01c7b1cb6fdf787e2c1bfbb0428df0f9e4887e05c74a5841f9fbbb7ec95355bad83929237053874f753b0e112e275a4fb8d98733aaccd6c3b2d37170edc8a16baf381bce6ac6d2726fbfd328145ac6189b6630b4f35aef7b8107152321a215c7e06533d6126ff01826fb16f0999e0eb52cfd0c4d856974aaec55b2e44ab22ca01b79c9c79d4c5b22c68a24ff19505f49830aa7af721a8922f668744b8740a45d69996acf0c8931d197a9912cd43d186e5800ef916d18dcf5d9", @ANYRESOCT=r3, @ANYRESDEC=r3, @ANYRES64=r5], 0x1c}, 0x1, 0x0, 0x0, 0x4004804}, 0x64040866) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/platform/vivid.0/video4linux/video14/power/runtime_suspended_time\x00', 0x0, 0x0) socket(0x1e, 0x800, 0x8a) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8000, 0x0) io_uring_setup$auto(0x3ff, 0x0) mmap$auto(0x0, 0xbb0c, 0x329, 0x10011, 0x2, 0x8000) clone$auto(0x9001, 0x5, 0xffffffffffffffff, 0xfffffffffffffffc, 0x6) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event1\x00', 0x80, 0x0) syz_genetlink_get_family_id$auto_mac80211_hwsim(0x0, 0xffffffffffffffff) unshare$auto(0x40000080) socket(0xa, 0x3, 0x3a) unshare$auto(0x8) ioperm$auto(0x40000000000007, 0x6, 0x10) rename$auto(0x0, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) 8.237110478s ago: executing program 1 (id=960): r0 = socket(0xa, 0x801, 0x84) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, r0, 0x400000001) msync$auto(0x1ffff004, 0xb, 0x1000004) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) migrate_pages$auto(0x0, 0x74, &(0x7f0000000780)=0x8000000000000001, &(0x7f00000007c0)=0x1) socket(0xa, 0x1, 0x84) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D3\x00', 0x2841, 0x0) close_range$auto(0x0, 0xfffffffffffff001, 0x2) socket(0x2, 0x1, 0x0) socket(0x1e, 0x5, 0x0) socket(0x10, 0x2, 0x0) memfd_create$auto(&(0x7f0000000000)='\xc4--:\xdd:,./-${\x00', 0x4) r1 = openat$auto_nst_seq_fops_netdebug(0xffffffffffffff9c, &(0x7f0000000080), 0x101600, 0x0) setsockopt$auto(r1, 0x8, 0x4, &(0x7f00000000c0)='(!*)\x00', 0x10001) mmap$auto(0x0, 0x8, 0x1000000016, 0x13, 0x3, 0x400180000000) mmap$auto(0x8000000, 0x8, 0x1000000016, 0x13, 0x3, 0x180000000) clone$auto(0x6, 0x401, 0xffffffffffffffff, 0xfffffffffffffffc, 0xa31b) munmap$auto(0x0, 0xffffffff) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) r2 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1e00df"], 0x1ac}}, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) recvmmsg$auto(r2, 0x0, 0x7, 0x6, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'wlan1\x00'}) mmap$auto(0x0, 0xc, 0x9c0f, 0x44eb2, 0x10006, 0x300000000000) readv$auto(0x3, &(0x7f0000003100)={0x0, 0x36}, 0x1) 8.206083428s ago: executing program 5 (id=961): mkdir$auto(0x0, 0x552) mmap$auto(0x0, 0x4020009, 0xdb, 0xeb1, 0x401, 0x8000) getcwd$auto(0x0, 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) r0 = socket(0x10, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$auto_NETDEV_CMD_QUEUE_GET(0xffffffffffffffff, &(0x7f0000003040)={0x0, 0x0, &(0x7f0000003000)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="01002cbd7000fbdbdf250a000000084d0f5eb2995ac1bf000100", @ANYRES32=r1, @ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x20004080) bind$auto(0x3, &(0x7f0000000000)=@generic={0x10, "a500acb75c9cedd1b5e9a0d76293"}, 0x68) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) move_pages$auto(0x1, 0xf54, 0x0, 0x0, 0x0, 0x8000000000000000) mmap$auto(0x0, 0x20009, 0xe3, 0x100000eb1, 0x40000000000a1, 0x8000) r2 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0) r3 = fsopen$auto(&(0x7f0000000000)='nlctrl\x00', 0x3) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) mmap$auto(0x0, 0x9, 0x400000072, 0x8b72, 0x1000000002, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) r4 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000300), r2) sendmsg$auto_TIPC_NL_NET_GET(r3, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x100000a0}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x20, r4, 0x2, 0x70bd29, 0x25dfdbfe, {}, [@TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@typed={0x6, 0x109, 0x0, 0x0, @str=',\x00'}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x401}, 0x4004090) r5 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000010c0), 0xffffffffffffffff) madvise$auto(0x6, 0x1, 0xb) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000001180)={&(0x7f0000001100)={0x14, r5, 0x301, 0x70bd25, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20000800}, 0xc040810) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) sendmsg$auto_WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000080)={0x0, 0x4b}, 0x1, 0x0, 0x0, 0x400c810}, 0x20000041) r6 = bpf$auto(0xfffff001, &(0x7f0000000000)=@bpf_attr_3={0xa332, 0x2, 0x7, 0x3, 0xfffffbff, 0x2, 0x1, 0x4, 0x7, "0108a5172d53c2dc73bf58e1423b2178", 0x0, 0x9, 0xffffffffffffffff, 0x81, 0x8, 0x81, 0xb03, 0x0, 0x3ff, 0x7, @attach_prog_fd, 0x2, 0x630, 0x57d, 0x9, 0x8}, 0xa3) r7 = syz_genetlink_get_family_id$auto_mac802154_hwsim(&(0x7f0000000140), r6) sendmsg$auto_MAC802154_HWSIM_CMD_NEW_RADIO(r2, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0xb0, r7, 0x0, 0x70bd26, 0x25dfdbfb, {}, [@MAC802154_HWSIM_ATTR_RADIO_EDGE={0x9a, 0x2, 0x0, 0x1, [@generic="055ccda3c9796f5f8add8296fb24012bd6cf3edf6c874203d630d30a2b62858942bdd7fd2ac81f8b04e10dd08e119c26084ed037621f788d90d6a4f5b155c006cb8889d01d001c1b8d94bff262cbebaca0bcca78498a8dc6a1c8dcb2ae3391bbde1ccddc2e1037ab9cac4e7ccf0679c1e8d3fbab389e775c1ea5c09260c668e35068c5ee", @generic="c912928dd37cbcbe00e2", @nested={0x8, 0xf8, 0x0, 0x1, [@nested={0x4, 0x107}]}]}]}, 0xb0}, 0x1, 0x0, 0x0, 0x80}, 0x60000000) writev$auto(0xca, &(0x7f0000000080)={&(0x7f0000000040), 0x1}, 0x7e) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7fffffe) read$auto_uinput_fops_uinput(0xffffffffffffffff, &(0x7f0000001400)=""/4112, 0x1010) 7.243728468s ago: executing program 1 (id=962): read$auto_proc_reg_file_ops_compat_inode(0xffffffffffffffff, 0x0, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000e3, 0xeb1, 0x401, 0x8000) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_PRIVFLAGS_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="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"], 0x14}}, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) readv$auto(0x3, &(0x7f00000002c0)={0x0, 0x8}, 0x8) bpf$auto(0x0, &(0x7f0000000000)=@link_update={0x1a, @new_map_fd=r0, 0x100004, @old_map_fd=0x3ff}, 0xa3) r2 = socket(0x11, 0x3, 0x9) capset$auto(0x0, &(0x7f0000000000)={0x1, 0x6, 0x48}) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r3 = socket(0x15, 0x5, 0x0) bind$auto(r3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) ustat$auto(0x801, 0x0) sendmsg$auto(r3, &(0x7f0000000180)={&(0x7f0000000040), 0x7fc, 0x0, 0x8, 0x0, 0x1, 0x4}, 0x0) sendmmsg$auto(r2, &(0x7f00000001c0)={{&(0x7f0000000000), 0x1aa, &(0x7f0000000100)={&(0x7f00000003c0)="4a67d23edb3100000000000000000075210d2de44406c2", 0x49}, 0x5, &(0x7f0000000180), 0x5}, 0x1}, 0x2, 0x101) r4 = socket$nl_generic(0x10, 0x3, 0x10) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) sendmsg$auto_ILA_CMD_GET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x8d1}, 0x4000050) mknod$auto(&(0x7f0000000180)=':,\x00', 0xc9, 0xfffffffa) openat$auto_proc_mem_operations_base(0xffffffffffffff9c, 0x0, 0x100, 0x0) bpf$auto(0x8000000000000020, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$auto_ila(&(0x7f00000000c0), r3) close_range$auto(0x2, 0x8, 0x0) syz_genetlink_get_family_id$auto_ila(0x0, r4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bind$auto(0x3, &(0x7f0000000040)=@can={0x1d, 0x0, 0xfd}, 0x6a) execve$auto(&(0x7f0000000040)=':,\x00', 0x0, &(0x7f0000000200)=&(0x7f00000001c0)=':,\x00') 6.897338649s ago: executing program 5 (id=963): ppoll$auto(&(0x7f0000000040)={0xffffffffffffffff, 0xfb22}, 0x2, &(0x7f0000000100)={0x2358aaae}, &(0x7f0000000180)={0xffffffffffffffa6}, 0x8) (async) r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000200), 0xffffffffffffffff) (async) fstat$auto(0xffffffffffffffff, &(0x7f0000000240)={0x4a, 0x7, 0x5, 0xf, 0x0, 0x0, 0x0, 0x1, 0x1, 0x9, 0x3, 0x5, 0x7, 0x2, 0x1, 0x5c, 0x401}) statx$auto(0xffffffffffffffff, &(0x7f0000000300)='./file0\x00', 0xfffffd40, 0x6, &(0x7f0000000400)={0x8, 0x9, 0x8, 0x7, 0x0, 0xffffffffffffffff, 0xfff8, 0x44, 0x81, 0x3ae, 0x101, 0x6, {0x3, 0x4}, {0x2, 0x10}, {0x41, 0x3}, {0x4, 0x8}, 0x9, 0x2, 0x2, 0x0, 0x3, 0x7, 0x6, 0xf724, 0x3, 0x6, 0xc3f0, 0x0, [0xda0, 0x0, 0x8, 0xc, 0x8000, 0xcc, 0x4, 0x3, 0xff]}) sendmsg$auto_NL80211_CMD_START_AP(r0, &(0x7f0000000700)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000340)={&(0x7f0000000500)={0x1d8, r1, 0x8, 0x70bd26, 0x25dfdbfc, {}, [@NL80211_ATTR_TDLS_EXTERNAL_SETUP={0x4}, @NL80211_ATTR_MBSSID_ELEMS={0x1b8, 0x133, 0x0, 0x1, [@nested={0x1b2, 0x144, 0x0, 0x1, [@nested={0x4, 0x42}, @nested={0x4, 0x16}, @typed={0x57, 0x39, 0x0, 0x0, @binary="aa795742a73f40b8288d0baf7ac0250e68db587b2a7ffebaf1b497dec801ac124e80b088fdffb16716987f44f384c4d812660078731b69eb696425a5a96d5e401fdce8784f5834c6106366cebc828396901088"}, @typed={0x8, 0x4, 0x0, 0x0, @uid=r2}, @nested={0x4, 0x10b}, @typed={0x8, 0x3b, 0x0, 0x0, @uid=r3}, @nested={0x4, 0xa2}, @generic="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", @generic="f7740074f68eab2021b08e839918fd9f064456b346574658a3e49b482e9e6eb1b518c6f66b52c31b6b18b04801e3f3e8d461f284b08c12d285"]}]}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x7}]}, 0x1d8}, 0x1, 0x0, 0x0, 0x4000}, 0x20000050) (async) mmap$auto(0x0, 0x5, 0x2, 0x40eb2, 0x401, 0x300000000000) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$auto_macsec(&(0x7f0000000000), 0xffffffffffffffff) close_range$auto(0x2, 0x8, 0x0) (async) r4 = socket(0x10, 0x2, 0x0) r5 = syz_genetlink_get_family_id$auto_macsec(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$auto_MACSEC_CMD_ADD_RXSA(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)={0x14, r5, 0x228b1f65e365497b, 0x70bd29, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x24000084) (async) r6 = socket(0x2, 0x80802, 0x0) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000140)={{&(0x7f0000000040), 0x10, &(0x7f00000000c0)={0x0, 0x1a001}, 0x7, 0x0, 0x2, 0xb}, 0xfff}, 0x5, 0x311) (async) r9 = syz_genetlink_get_family_id$auto_802_15_4_mac(&(0x7f0000000880), r6) sendmsg$auto_IEEE802154_LLSEC_DEL_DEVKEY(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000980)={&(0x7f00000008c0)={0xb0, r9, 0x400, 0x70bd27, 0x25dfdbfd, {}, [@IEEE802154_ATTR_CCA_MODE={0x5, 0x23, 0x4}, @IEEE802154_ATTR_LLSEC_ENABLED={0x5}, @IEEE802154_ATTR_LLSEC_KEY_USAGE_FRAME_TYPES={0x5, 0x31, 0xa}, @IEEE802154_ATTR_CHANNEL_PAGE_LIST={0x84, 0x1e, "2b7701d8222eddb79a7f12ecb672454c58e2c631561eb1ffbfecfc42aeabab5a411883af41d8265e247bf99f9a3a6fa2e37a6b30c65afaca209f5e921d48649de8bbd1b99abdffbf556ec4a06d3ab06c359dd516ca21a448d43f94ebef8bb543c75880855566515653372437fe7c25f76c85877c352da18ee3f7a1b3752767ec"}]}, 0xb0}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004080) (async) r10 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)={0x1c, r10, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@HWSIM_ATTR_REG_HINT_ALPHA2={0x5, 0xb, '.'}]}, 0x1c}}, 0x4044820) (async) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r7, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x20, r10, 0x2, 0x70bd2c, 0x25dfdbfe, {}, [@HWSIM_ATTR_DESTROY_RADIO_ON_CLOSE={0x4}, @HWSIM_ATTR_FREQ={0x8, 0x13, 0x6}]}, 0x20}, 0x1, 0x0, 0x0, 0xc004}, 0x4004050) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0xa, 0x0) (async) socket(0xf, 0x3, 0x2) (async) r11 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f00000003c0)='/sys/kernel/security/tomoyo/profile\x00', 0x40802, 0x0) read$auto(r11, 0x0, 0xb4d3) read$auto(0x3, 0x0, 0x1f40) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/mm/ksm/advisor_max_cpu\x00', 0x129982, 0x0) read$auto(0x3, 0x0, 0x80) (async) write$auto(0x3, 0x0, 0xfffffdef) 6.224863042s ago: executing program 0 (id=964): gettid() (async, rerun: 64) r0 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000010c0)='/dev/snd/controlC1\x00', 0x840, 0x0) (async, rerun: 64) mlockall$auto(0x7) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) (async) socket(0xa, 0x2, 0x0) (async, rerun: 32) r1 = socket(0x1e, 0x1, 0x0) (async, rerun: 32) getsockopt$auto(0x4, 0x6, 0x6, 0xfffffffffffffffc, 0x0) (async) ioctl$auto(r0, 0xc10c5541, 0xffffffffffffffff) (async, rerun: 64) openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, 0x0, 0x40, 0x0) (rerun: 64) unshare$auto(0x40000080) (async, rerun: 32) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer2\x00', 0x28202, 0x0) (async, rerun: 32) mmap$auto(0x0, 0x20009, 0x20000000000, 0xeb1, r1, 0x8000) r2 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000001100)='/proc/sys/net/ipv4/conf/batadv_slave_0/drop_unicast_in_l2_multicast\x00', 0x2002, 0x0) r3 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv6/conf/ip_vti0/ioam6_id_wide\x00', 0x20200, 0x0) sendfile$auto(r2, r3, 0x0, 0x1) 5.686754946s ago: executing program 3 (id=965): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xfffffffffffefffd, 0x17) sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x8000}, 0x4000804) (async) sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x8000}, 0x4000804) lstat$auto(0x0, &(0x7f0000000180)={0x4, 0x10, 0x9, 0x63, 0x0, 0x0, 0x0, 0x0, 0x40000000000f, 0x400, 0x40000402, 0x7ffffffb, 0x9, 0xffffffff80000000, 0x9, 0x7, 0x200000100103}) (async) lstat$auto(0x0, &(0x7f0000000180)={0x4, 0x10, 0x9, 0x63, 0x0, 0x0, 0x0, 0x0, 0x40000000000f, 0x400, 0x40000402, 0x7ffffffb, 0x9, 0xffffffff80000000, 0x9, 0x7, 0x200000100103}) socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x89fc, &(0x7f0000000040)={'bridge0\x00'}) mmap$auto(0x0, 0x200006, 0x2, 0x40eb1, 0x602, 0x300000000000) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) futex_waitv$auto(&(0x7f0000000000)={0x8, 0x5d94, 0x4, 0x4}, 0x77, 0x0, 0x0, 0x62bd) socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) move_pages$auto(0x1, 0xf54, 0x0, 0x0, 0x0, 0x8000000000000000) mmap$auto(0x1, 0x4, 0xe3, 0xdd9b, r2, 0x8000000000000000) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) (async) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) (async) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) mmap$auto(0x0, 0x7, 0x400000072, 0x8b72, 0x1000000002, 0x8000) (async) mmap$auto(0x0, 0x7, 0x400000072, 0x8b72, 0x1000000002, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) (async) madvise$auto(0x0, 0xffffffffffff0001, 0x15) clone$auto(0x21002, 0x9, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x9) r3 = syz_genetlink_get_family_id$auto_nlctrl(0x0, 0xffffffffffffffff) sendmsg$auto_TIPC_NL_SOCK_GET(r1, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000240)={&(0x7f0000001200)=ANY=[@ANYBLOB="30135ef2", @ANYRES16=0x0, @ANYBLOB="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"], 0x1330}}, 0x7c77f974e644bf04) madvise$auto(0x6, 0x1, 0xb) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000001180)={&(0x7f0000001100)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="010325bd523453a8ab812ac90000"], 0x14}, 0x1, 0x0, 0x0, 0x20000800}, 0xc040810) mmap$auto(0x0, 0x2, 0xe3, 0x9b72, 0x2, 0x8000) (async) mmap$auto(0x0, 0x2, 0xe3, 0x9b72, 0x2, 0x8000) sendmsg$auto_WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x400c810}, 0x20000041) r4 = bpf$auto(0xfffff001, &(0x7f0000000000)=@bpf_attr_3={0xa332, 0x2, 0x7, 0x3, 0xfffffbff, 0x2, 0x1, 0x4, 0x7, "0108a5172d53c2dc73bf58e1423b2178", 0x0, 0x9, 0xffffffffffffffff, 0x81, 0x8, 0x81, 0xb03, 0x0, 0x3ff, 0x7, @attach_prog_fd, 0x2, 0x630, 0x57d, 0x9, 0x8}, 0xa3) syz_genetlink_get_family_id$auto_mac802154_hwsim(&(0x7f0000000140), r4) 4.438236333s ago: executing program 3 (id=966): r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/uts\x00') mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) recvfrom$auto(r0, 0x0, 0x2, 0x4, 0x0, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/ptp/ptp0/n_vclocks\x00', 0x22100, 0x0) mprotect$auto(0x1ffff000, 0x8000000000000001, 0x4) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/net/rpc/nfsd.export/channel\x00', 0x8f3b7a51b8162d21, 0x0) write$auto_proc_reg_file_ops_compat_inode(r1, &(0x7f0000000040)='\\x ', 0x3) mmap$auto(0x0, 0x2000d, 0x4000000000df, 0xeb1, 0x800000404, 0x8000) capset$auto(0x0, 0x0) sendmmsg$auto(0xffffffffffffffff, &(0x7f00000001c0)={{&(0x7f0000000340)="cddce5c02f641058a73d37b606e18e84686c8fb949c3f64d301aa2a6b28f13c5af407ab02405e1e766be3849ef5c0fb3cb40bb965c749f80b7c06f48a034c296610ad67c38", 0x5aa, &(0x7f0000000100)={0x0, 0x80000001}, 0x1, &(0x7f0000000080)="f0511331854fdae63fb419538de65d7c295a0ffed9d3016ed91639", 0x5, 0x1000}, 0x7}, 0x40, 0xff) mmap$auto(0xd, 0xe983, 0xdf, 0x111, 0x401, 0x8000) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) socket(0xa, 0x6, 0x0) getsockopt$auto(0x100000006, 0x0, 0x33, 0xfffffffffffffffe, 0x0) unshare$auto(0x40000080) lstat$auto(0x0, &(0x7f0000000180)={0x4, 0x9, 0x100000001, 0x63, 0x0, 0x0, 0x0, 0x1000000006, 0x6, 0x7, 0x400, 0x7ffffff9, 0x5, 0xffffffff80000000, 0x9, 0x61, 0x105}) r2 = socket(0x10, 0x2, 0x0) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="10002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40400c4) sendmmsg$auto(r2, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) read$auto(0x4, 0x0, 0xfdef) 3.836180867s ago: executing program 0 (id=967): r0 = bpf$auto(0x5, &(0x7f0000000000)=@test={0x12, 0x1, 0x0, 0x9, 0x1, 0x3, 0x3da1, 0x0, 0xb4, 0x7, 0x140000000000, 0xdb, 0x7fffffff, 0x10, 0x1}, 0x171) ptrace$auto(0xffffffffffffffff, 0x26f8, 0x9, 0x9) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket(0x1d, 0x2, 0x6) accept$auto(0x3, 0xffffffffffffffff, 0xffffffffffffffff) r2 = syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000140), r1) sendmsg$auto_BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="100028bd7000fb1900870000ebffffffffffffff0000a449b04fdcb88514cdc7c5242058c864e19068ec2ad537982959767b49403588161b2e6e25d9a77dd14d4c82566d8df550c8e91eb64a29f2ceaa90dc08365543e085decfacd431850296626fd6bbae24825238832dd53b40e15f0cb9f07052eccb54def80d892febbac38a2a62a1cfaa1a0cc871e988f30be1268025f678e54563aa0c88ccd005ffb9b848a736a500825babb7f8ed2e2d6a858ec8e749522c45a7e6432d506876400ba90b49c80428666404f179bd"], 0x1c}, 0x1, 0x0, 0x0, 0x840}, 0x24044004) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/cgroup.threads\x00', 0x20000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x7fffffffffffffff, 0x14000, 0x6, 0xeb1, r3, 0x7ffc) lsm_list_modules$auto(0x0, &(0x7f0000000100)=0xbefc, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) setsockopt$auto(0x3, 0x1, 0x23, 0x0, 0x9) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/dummy_hcd.1/usb2/product\x00', 0x181040, 0x0) r4 = socket(0xa, 0xa, 0x8) mmap$auto(0x0, 0x20009, 0xe3, 0x100000eb1, 0x40000000000a1, 0x8000) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) r5 = socket(0xa, 0x801, 0x84) getsockopt$auto(r5, 0x84, 0x75, 0x0, &(0x7f0000000000)=0x9000c) r6 = openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, &(0x7f00000002c0), 0x40000, 0x0) ioctl$auto_DMA_HEAP_IOCTL_ALLOC(r6, 0xc0184800, 0x0) mmap$auto(0x0, 0x9, 0xff7, 0x8000000008012, 0x1000000004, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) poll$auto(&(0x7f0000000040)={r4, 0x200, 0x7}, 0x1, 0x1) openat$auto_proc_timens_offsets_operations_base(0xffffffffffffff9c, &(0x7f0000000280), 0x111200, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000002c0)={'erspan0\x00'}) 3.53713088s ago: executing program 3 (id=968): openat$auto__dev_ioctl_fops_dev_ioctl(0xffffffffffffff9c, &(0x7f0000000080), 0xd00, 0x0) openat$auto_cachefiles_daemon_fops_internal(0xffffffffffffff9c, &(0x7f00000000c0), 0x400000, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) memfd_create$auto(&(0x7f0000000000)='^[#@-\x00', 0x3) mmap$auto(0x7ffffdfde000, 0x2020006, 0x9, 0x11, 0x8000000000000000, 0x8000) prctl$auto(0x23, 0x7, 0x7fffffffefff, 0x0, 0x0) mmap$auto(0x0, 0x402000b, 0xdf, 0x10000000000eb1, 0x401, 0x8000) r0 = socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) r1 = openat$auto_udmabuf_fops_udmabuf(0xffffffffffffff9c, &(0x7f0000000000), 0x20100, 0x0) ioctl$auto_UDMABUF_CREATE(r1, 0x40187542, &(0x7f00000000c0)={r0, 0x7, 0x0, 0x8000}) 3.337948284s ago: executing program 3 (id=969): openat$auto__dev_ioctl_fops_dev_ioctl(0xffffffffffffff9c, &(0x7f0000000080), 0xd00, 0x0) openat$auto_cachefiles_daemon_fops_internal(0xffffffffffffff9c, &(0x7f00000000c0), 0x400000, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) memfd_create$auto(&(0x7f0000000000)='^[#@-\x00', 0x3) mmap$auto(0x7ffffdfde000, 0x2020006, 0x9, 0x11, 0x8000000000000000, 0x8000) prctl$auto(0x23, 0x7, 0x7fffffffefff, 0x0, 0x0) brk$auto(0x7fffffffafff) mmap$auto(0x0, 0x402000b, 0xdf, 0x10000000000eb1, 0x401, 0x8000) r0 = socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) r1 = openat$auto_udmabuf_fops_udmabuf(0xffffffffffffff9c, &(0x7f0000000000), 0x20100, 0x0) ioctl$auto_UDMABUF_CREATE(r1, 0x40187542, &(0x7f00000000c0)={r0, 0x7, 0x0, 0x8000}) 3.236578688s ago: executing program 0 (id=970): r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/uts\x00') mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) recvfrom$auto(r0, 0x0, 0x2, 0x4, 0x0, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/ptp/ptp0/n_vclocks\x00', 0x22100, 0x0) mprotect$auto(0x1ffff000, 0x8000000000000001, 0x4) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/net/rpc/nfsd.export/channel\x00', 0x8f3b7a51b8162d21, 0x0) write$auto_proc_reg_file_ops_compat_inode(r1, &(0x7f0000000040)='\\x ', 0x3) mmap$auto(0x0, 0x2000d, 0x4000000000df, 0xeb1, 0x800000404, 0x8000) capset$auto(0x0, 0x0) sendmmsg$auto(0xffffffffffffffff, &(0x7f00000001c0)={{&(0x7f0000000340)="cddce5c02f641058a73d37b606e18e84686c8fb949c3f64d301aa2a6b28f13c5af407ab02405e1e766be3849ef5c0fb3cb40bb965c749f80b7c06f48a034c296610ad67c38", 0x5aa, &(0x7f0000000100)={0x0, 0x80000001}, 0x1, &(0x7f0000000080)="f0511331854fdae63fb419538de65d7c295a0ffed9d3016ed91639", 0x5, 0x1000}, 0x7}, 0x40, 0xff) mmap$auto(0xd, 0xe983, 0xdf, 0x111, 0x401, 0x8000) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) socket(0xa, 0x6, 0x0) getsockopt$auto(0x100000006, 0x0, 0x33, 0xfffffffffffffffe, 0x0) unshare$auto(0x40000080) lstat$auto(0x0, &(0x7f0000000180)={0x4, 0x9, 0x100000001, 0x63, 0x0, 0x0, 0x0, 0x1000000006, 0x6, 0x7, 0x400, 0x7ffffff9, 0x5, 0xffffffff80000000, 0x9, 0x61, 0x105}) r2 = socket(0x10, 0x2, 0x0) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="10002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40400c4) sendmmsg$auto(r2, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/system/memory/memory0/online\x00', 0x123902, 0x0) unshare$auto(0x40000080) read$auto(0x4, 0x0, 0xfdef) ioctl$auto(0x3, 0x4020940c, 0x5) 3.042179075s ago: executing program 3 (id=971): openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x460700, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) (async) r0 = socket(0x2, 0x6, 0x0) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x82802, 0x0) (async) close_range$auto(0x2, 0x8000, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) memfd_create$auto(0x0, 0xe) (async) r1 = socket(0x2, 0x1, 0x106) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x31}}, 0x6a) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x5, 0x20000000) (async) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) (async) mmap$auto(0x800000000000, 0x12f, 0xdf, 0x9b72, 0x7, 0x1) (async) socket(0x2, 0x1, 0x0) (async) sendmsg$auto_BATADV_CMD_GET_GATEWAYS(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB='d', @ANYRES16=0x0], 0x64}, 0x1, 0x0, 0x0, 0x84041}, 0x80448e1) shutdown$auto(0x200000003, 0x2) (async) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) (async) write$auto(0x3, 0x0, 0xfffffdef) bind$auto(0x3, 0x0, 0x6b) connect$auto(0x3, 0x0, 0x55) (async) listen$auto(0x3, 0xfffffffa) tkill$auto(0x1, 0x9) (async) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) (async) socket(0x2b, 0x1, 0x1) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptys1\x00', 0x400, 0x0) mmap$auto(0x0, 0x20009, 0x6, 0xeb1, 0x7f, 0x8000) sysfs$auto(0x2, 0x100000000000030, 0x0) fsopen$auto(0x0, 0x1) (async) madvise$auto(0x60b9ff94, 0x3, 0x4) (async) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) write$auto(0x3, 0x0, 0x7fffffff) 1.116679731s ago: executing program 0 (id=972): mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x403, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) socket(0x2b, 0x1, 0x0) (async) r0 = socket(0x2b, 0x1, 0x0) sendmsg$auto_NLBL_CIPSOV4_C_REMOVE(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x2404c040) socket(0x2b, 0x1, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, 0x0, 0x1000, 0x0) (async) r1 = openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, 0x0, 0x1000, 0x0) mmap$auto_tracing_buffers_fops_trace(&(0x7f0000ffc000/0x4000)=nil, 0x401f, 0x1, 0x8e051, r1, 0x0) (async) mmap$auto_tracing_buffers_fops_trace(&(0x7f0000ffc000/0x4000)=nil, 0x401f, 0x1, 0x8e051, r1, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) init_module$auto(0x0, 0xffff9, 0x0) (async) init_module$auto(0x0, 0xffff9, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r2 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_ETHTOOL_MSG_MODULE_EEPROM_GET(r3, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000dc0)={0x2c, r2, 0xb77b02080cac5bcb, 0x70bd2c, 0x25dfdbff, {}, [@ETHTOOL_A_MODULE_EEPROM_PAGE={0x5}, @ETHTOOL_A_MODULE_EEPROM_LENGTH={0x8, 0x3, 0x9}, @ETHTOOL_A_MODULE_EEPROM_OFFSET={0x8, 0x2, 0xf7}]}, 0x2c}}, 0x82) capget$auto(0x0, 0xfffffffffffffffe) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x80, 0x0) mq_open$auto(0x0, 0x7f, 0x65f2, 0x0) (async) mq_open$auto(0x0, 0x7f, 0x65f2, 0x0) mq_timedsend$auto(0x5, 0x0, 0x5, 0x9, 0x0) (async) mq_timedsend$auto(0x5, 0x0, 0x5, 0x9, 0x0) 578.026645ms ago: executing program 3 (id=973): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x11, 0x3, 0x9) sendmmsg$auto(r0, &(0x7f00000006c0)={{&(0x7f0000000000), 0x5ac, &(0x7f0000000100)={&(0x7f0000000200)="4c0300000000000000a3677337f9eca907", 0x49}, 0x5, &(0x7f0000000700), 0x5, 0x1}, 0x5}, 0x2, 0x100) r1 = socket(0x10, 0x2, 0x0) close_range$auto(0x2, 0xa, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1e, 0x4, 0x0) socket(0x1e, 0x4, 0x0) connect$auto(0x4, 0x0, 0x10) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) close_range$auto(0x2, 0x8, 0x0) mount_setattr$auto(0x3, 0x0, 0x1000, &(0x7f0000000100)={0x3, 0xa195, 0x5, @inferred=0xffffffffffffffff}, 0x687) r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/fs/cifs/Stats\x00', 0x20000, 0x0) read$auto_proc_reg_file_ops_compat_inode(r3, &(0x7f0000000080)=""/168, 0xa8) socket(0x2, 0x80002, 0x73) r4 = socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) sendmsg$auto_NBD_CMD_DISCONNECT(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x64, 0x0, 0x20, 0x70bd29, 0x25dfdbfd, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x2000003}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xd}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x9}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x7}, @NBD_ATTR_INDEX={0x8, 0x1, 0x7f}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x5}]}, 0x64}, 0x1, 0x0, 0x0, 0x80}, 0x200040c1) connect$auto(r4, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) ioctl$auto_PPPIOCSMRU(r2, 0x40047452, &(0x7f0000000480)=0xb) unshare$auto(0x40000080) r5 = openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/pcmC0D0p\x00', 0x0, 0x0) setsockopt$auto(r0, 0x2, 0xa, &(0x7f0000000180)=']+#\x00', 0x8000) ppoll$auto(&(0x7f0000000140)={r5, 0x8, 0x1}, 0x7f, 0x0, &(0x7f00000001c0)={0x3}, 0x8) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_RSS_GET(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x14, r7, 0x301, 0x70bc2b, 0x25dfdc02}, 0x14}, 0x1, 0x0, 0x0, 0x8086}, 0x4010) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 237.167861ms ago: executing program 0 (id=974): socket(0xa, 0x1, 0x84) (async) r0 = socket(0x2, 0x2, 0x88) (async) mmap$auto(0x0, 0xa, 0xdb, 0x16, 0x5, 0x7ffe) (async, rerun: 32) clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) (async, rerun: 32) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) connect$auto(r0, &(0x7f00000000c0)=@qipcrtr={0x2a, 0x3, 0x4000}, 0x10000055) (async) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x6e}, 0x1, 0x0, 0x0, 0x44800}, 0x40080c8) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) (async) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) (async) io_uring_setup$auto(0x6, 0x0) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) (async, rerun: 32) timerfd_create$auto(0x9, 0x0) (async, rerun: 32) semctl$auto(0x1ff, 0x2, 0x13, 0x4) read$auto(0x3, 0x0, 0x80) (async) ioctl$auto(0x3, 0x40085400, 0x5) socket(0x1f, 0x0, 0x0) (async, rerun: 32) sendmmsg$auto(0x3, &(0x7f0000000000)={{0x0, 0x1, &(0x7f0000000040)={0x0, 0x1}, 0x400, 0x0, 0xdd0, 0xb}, 0xed71388}, 0x9a6, 0x9) (async, rerun: 32) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x3, 0x100) (async, rerun: 32) socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) eventfd$auto(0x3) (async) memfd_secret$auto(0x72df6d71) (async) eventfd$auto(0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket(0x11, 0x2, 0x85) 0s ago: executing program 1 (id=975): mmap$auto(0x0, 0x3, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0xa, 0x801, 0x84) mknod$auto(&(0x7f0000000180)=':,\x00', 0xcb, 0xfffffffa) execve$auto(&(0x7f0000000000)=':,\x00', 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r1 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x9) symlinkat$auto(&(0x7f0000000000)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00') socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) bind$auto(r0, &(0x7f0000000100), 0xe) socket(0x29, 0x5, 0x21) mmap$auto(0x0, 0x2020009, 0x6, 0xeb1, 0x7, 0x0) futex_wait$auto(0x0, 0x0, 0x2, 0x2, 0x0, 0xffffffff) futex_wake$auto(0x0, 0x8, 0x7, 0x2) r2 = socketpair$auto(0x7, 0x7, 0x5, &(0x7f0000000040)=0x8) mmap$auto(0x80000001, 0x4, 0x100000000, 0x15, 0x5, 0x1) listen$auto(0x3, 0x81) r3 = socket(0x2, 0x1, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x15, 0x5, 0x0) socket(0x2, 0x1, 0x106) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0xffff, @remote}, 0x6a) sendmsg$auto_MACSEC_CMD_GET_TXSC(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000004b40)=ANY=[], 0x12f8}, 0x1, 0x0, 0x0, 0x4004040}, 0x200018c0) r4 = syz_genetlink_get_family_id$auto_nlbl_mgmt(&(0x7f0000000200), r1) sendmsg$auto_NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x44, r4, 0x4, 0x70bd2b, 0x25dfdbff, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x9}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x5}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x80}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x1000}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x4}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x3}]}, 0x44}, 0x1, 0x0, 0x0, 0x86}, 0x840) sendmmsg$auto(r3, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x5, 0x20000000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) recvfrom$auto(r3, 0x0, 0xc4, 0x467, 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.10.59' (ED25519) to the list of known hosts. [ 83.237195][ T5823] cgroup: Unknown subsys name 'net' [ 83.369555][ T5823] cgroup: Unknown subsys name 'cpuset' [ 83.378543][ T5823] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 85.101633][ T5823] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 87.093493][ T54] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 87.110194][ T5838] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 87.118848][ T5838] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 87.127049][ T5838] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 87.134791][ T5838] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 87.158848][ T5842] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 87.169666][ T5842] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 87.181414][ T5836] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 87.190887][ T5836] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 87.199889][ T5836] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 87.199999][ T5842] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 87.207919][ T5836] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 87.221801][ T5836] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 87.227313][ T5842] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 87.229271][ T5836] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 87.246937][ T5836] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 87.262414][ T5845] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 87.269943][ T5845] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 87.284882][ T5845] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 87.301740][ T5845] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 87.310743][ T5845] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 87.326391][ T5845] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 87.338278][ T5845] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 87.346325][ T5845] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 87.665603][ T5840] chnl_net:caif_netlink_parms(): no params data found [ 87.804699][ T5837] chnl_net:caif_netlink_parms(): no params data found [ 87.815834][ T5832] chnl_net:caif_netlink_parms(): no params data found [ 87.868290][ T5846] chnl_net:caif_netlink_parms(): no params data found [ 87.942595][ T5840] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.950673][ T5840] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.958600][ T5840] bridge_slave_0: entered allmulticast mode [ 87.965433][ T5840] bridge_slave_0: entered promiscuous mode [ 87.992650][ T5840] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.999916][ T5840] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.007254][ T5840] bridge_slave_1: entered allmulticast mode [ 88.014025][ T5840] bridge_slave_1: entered promiscuous mode [ 88.097368][ T5840] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.109470][ T5840] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.119874][ T5837] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.127643][ T5837] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.134849][ T5837] bridge_slave_0: entered allmulticast mode [ 88.141953][ T5837] bridge_slave_0: entered promiscuous mode [ 88.152696][ T5832] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.160642][ T5832] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.167970][ T5832] bridge_slave_0: entered allmulticast mode [ 88.174761][ T5832] bridge_slave_0: entered promiscuous mode [ 88.201599][ T5837] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.208948][ T5837] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.216599][ T5837] bridge_slave_1: entered allmulticast mode [ 88.223381][ T5837] bridge_slave_1: entered promiscuous mode [ 88.247982][ T5832] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.255114][ T5832] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.263317][ T5832] bridge_slave_1: entered allmulticast mode [ 88.270507][ T5832] bridge_slave_1: entered promiscuous mode [ 88.280917][ T5840] team0: Port device team_slave_0 added [ 88.297271][ T5846] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.304526][ T5846] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.312333][ T5846] bridge_slave_0: entered allmulticast mode [ 88.319584][ T5846] bridge_slave_0: entered promiscuous mode [ 88.329706][ T5846] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.337247][ T5846] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.344444][ T5846] bridge_slave_1: entered allmulticast mode [ 88.352153][ T5846] bridge_slave_1: entered promiscuous mode [ 88.376960][ T5840] team0: Port device team_slave_1 added [ 88.384741][ T5832] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.422192][ T5832] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.444003][ T5837] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.458626][ T5837] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.478915][ T5846] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.517483][ T5846] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.538834][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.546775][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.573729][ T5840] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.588389][ T5832] team0: Port device team_slave_0 added [ 88.606936][ T5837] team0: Port device team_slave_0 added [ 88.625638][ T5846] team0: Port device team_slave_0 added [ 88.633672][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.641621][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.668610][ T5840] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.681525][ T5832] team0: Port device team_slave_1 added [ 88.700529][ T5837] team0: Port device team_slave_1 added [ 88.718900][ T5846] team0: Port device team_slave_1 added [ 88.740637][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.747958][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.774269][ T5832] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.820523][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.828439][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.854783][ T5832] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.881868][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.889058][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.915255][ T5846] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.928642][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.935639][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.961695][ T5846] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.980818][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.988078][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.014106][ T5837] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.049101][ T5840] hsr_slave_0: entered promiscuous mode [ 89.055821][ T5840] hsr_slave_1: entered promiscuous mode [ 89.075054][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.082368][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.108396][ T5837] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.156643][ T5846] hsr_slave_0: entered promiscuous mode [ 89.163198][ T5846] hsr_slave_1: entered promiscuous mode [ 89.169972][ T5846] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 89.177982][ T5846] Cannot create hsr debugfs directory [ 89.214869][ T5832] hsr_slave_0: entered promiscuous mode [ 89.221400][ T5832] hsr_slave_1: entered promiscuous mode [ 89.228053][ T5832] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 89.235633][ T5832] Cannot create hsr debugfs directory [ 89.271032][ T5837] hsr_slave_0: entered promiscuous mode [ 89.277808][ T5845] Bluetooth: hci2: command tx timeout [ 89.283899][ T5837] hsr_slave_1: entered promiscuous mode [ 89.289615][ T5845] Bluetooth: hci0: command tx timeout [ 89.296499][ T5837] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 89.304075][ T5837] Cannot create hsr debugfs directory [ 89.355887][ T5845] Bluetooth: hci1: command tx timeout [ 89.435900][ T5845] Bluetooth: hci3: command tx timeout [ 89.629734][ T5840] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 89.642587][ T5840] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 89.655030][ T5840] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 89.672345][ T5840] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 89.729850][ T5832] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 89.753924][ T5832] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 89.767055][ T5832] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 89.791303][ T5832] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 89.853464][ T5846] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 89.868390][ T5846] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 89.881888][ T5846] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 89.916479][ T5846] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 89.952967][ T5837] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 89.964960][ T5837] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 89.984654][ T5837] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 89.994967][ T5837] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 90.055357][ T5840] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.105173][ T5840] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.142421][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.149786][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.173847][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.181031][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.202704][ T5832] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.250843][ T5832] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.292613][ T2906] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.299798][ T2906] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.330979][ T3538] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.338188][ T3538] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.383736][ T5837] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.404686][ T5846] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.465575][ T5837] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.492000][ T5846] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.517784][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.524982][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.549680][ T3538] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.556858][ T3538] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.587882][ T3538] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.595048][ T3538] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.617347][ T3538] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.624476][ T3538] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.707703][ T5840] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.892551][ T5840] veth0_vlan: entered promiscuous mode [ 90.922429][ T5840] veth1_vlan: entered promiscuous mode [ 90.952350][ T5832] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.031180][ T5840] veth0_macvtap: entered promiscuous mode [ 91.060940][ T5832] veth0_vlan: entered promiscuous mode [ 91.071264][ T5840] veth1_macvtap: entered promiscuous mode [ 91.106717][ T5832] veth1_vlan: entered promiscuous mode [ 91.136894][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.169112][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.207300][ T5840] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.219029][ T5840] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.228311][ T5840] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.237272][ T5840] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.280373][ T5846] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.292155][ T5832] veth0_macvtap: entered promiscuous mode [ 91.318702][ T5837] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.329779][ T5832] veth1_macvtap: entered promiscuous mode [ 91.356121][ T5845] Bluetooth: hci0: command tx timeout [ 91.361710][ T54] Bluetooth: hci2: command tx timeout [ 91.402812][ T5832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.423950][ T5832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.435215][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.442969][ T54] Bluetooth: hci1: command tx timeout [ 91.481383][ T5832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.492919][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.495900][ T5832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.511739][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.518145][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.523008][ T54] Bluetooth: hci3: command tx timeout [ 91.557475][ T5832] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.569057][ T5832] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.578201][ T5832] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.587595][ T5832] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.611959][ T5837] veth0_vlan: entered promiscuous mode [ 91.652960][ T3538] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.661815][ T3538] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.670217][ T5837] veth1_vlan: entered promiscuous mode [ 91.680780][ T5846] veth0_vlan: entered promiscuous mode [ 91.739703][ T5846] veth1_vlan: entered promiscuous mode [ 91.770039][ T5840] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 91.783736][ T2906] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.807943][ T2906] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.854300][ T3538] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.862331][ T3538] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.873366][ T5837] veth0_macvtap: entered promiscuous mode [ 91.934555][ T5837] veth1_macvtap: entered promiscuous mode [ 91.947583][ T5846] veth0_macvtap: entered promiscuous mode [ 91.959586][ T5846] veth1_macvtap: entered promiscuous mode [ 91.977561][ T5846] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.988148][ T5846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.998818][ T5846] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.009367][ T5846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.020470][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.030424][ T5846] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.040970][ T5846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.050893][ T5846] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.061389][ T5846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.072929][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.089017][ T5846] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.098108][ T5846] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.107337][ T5846] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.116768][ T5846] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.183968][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.206183][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.220467][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.231450][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.251006][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.263305][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.280725][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.325125][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.335890][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.346187][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.356862][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.366899][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.377421][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.388475][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.409986][ T5837] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.424141][ T5837] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.435628][ T5837] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.479761][ T5837] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.747598][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.805105][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.833010][ T81] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.872424][ T81] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.999877][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.999907][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.015126][ T2906] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.015157][ T2906] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.443714][ T54] Bluetooth: hci2: command tx timeout [ 93.448378][ T5845] Bluetooth: hci0: command tx timeout [ 93.516428][ T5845] Bluetooth: hci1: command tx timeout [ 93.595968][ T5845] Bluetooth: hci3: command tx timeout [ 94.970714][ T5940] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 95.517937][ T5845] Bluetooth: hci0: command tx timeout [ 95.523467][ T54] Bluetooth: hci2: command tx timeout [ 95.595823][ T5845] Bluetooth: hci1: command tx timeout [ 95.675880][ T5845] Bluetooth: hci3: command tx timeout [ 97.111715][ T5959] netlink: 252 bytes leftover after parsing attributes in process `syz.2.12'. [ 97.207701][ T5957] netlink: 252 bytes leftover after parsing attributes in process `syz.2.12'. [ 97.256304][ T5957] Zero length message leads to an empty skb [ 97.279565][ T25] cfg80211: failed to load regulatory.db [ 99.486177][ T5968] lo: entered allmulticast mode [ 99.807745][ T6003] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 99.872396][ T5967] lo: left allmulticast mode [ 100.209879][ T6009] Invalid ELF header magic: != ELF [ 100.520267][ T6011] netlink: 4 bytes leftover after parsing attributes in process `syz.3.25'. [ 101.046465][ T6005] netlink: 4 bytes leftover after parsing attributes in process `syz.1.23'. [ 101.252246][ T6028] HSR: entered promiscuous mode [ 102.839998][ T6057] process 'syz.1.36' launched ':,' with NULL argv: empty string added [ 103.347504][ T6072] syz.1.39 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 104.275644][ T6081] netlink: 28 bytes leftover after parsing attributes in process `syz.1.42'. [ 104.302221][ T6081] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 104.310424][ T6081] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 104.333398][ T6081] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 104.341497][ T6081] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 104.398708][ T6085] netlink: 52 bytes leftover after parsing attributes in process `syz.3.43'. [ 104.422400][ T6083] syz.3.43 uses obsolete (PF_INET,SOCK_PACKET) [ 104.994894][ T6095] netlink: 342 bytes leftover after parsing attributes in process `syz.0.47'. [ 105.085904][ T6095] netlink: 24 bytes leftover after parsing attributes in process `syz.0.47'. [ 105.186684][ T6100] netlink: 342 bytes leftover after parsing attributes in process `syz.0.47'. [ 106.219976][ T6110] netlink: 334 bytes leftover after parsing attributes in process `syz.3.49'. [ 106.850187][ T6121] netlink: 4 bytes leftover after parsing attributes in process `syz.3.52'. [ 106.862941][ T6121] netlink: 4 bytes leftover after parsing attributes in process `syz.3.52'. [ 107.081351][ T6123] netlink: 146 bytes leftover after parsing attributes in process `syz.3.53'. [ 107.916676][ T5845] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 110.147400][ T6159] could not allocate digest TFM handle [ 110.635912][ T5845] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 110.922809][ T6184] netlink: 28 bytes leftover after parsing attributes in process `syz.0.66'. [ 110.931812][ T6184] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 110.940728][ T6184] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 110.949814][ T6184] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 110.959269][ T6184] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 111.343338][ T6190] ubi0: attaching mtd0 [ 111.359643][ T6190] ubi0: scanning is finished [ 111.364295][ T6190] ubi0: empty MTD device detected [ 111.536510][ T6190] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 111.558490][ T6190] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 111.589205][ T6190] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 111.616772][ T6190] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 111.655907][ T6190] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 111.662873][ T6190] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 111.729992][ T6190] ubi0: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 1715984526 [ 111.821541][ T6190] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 111.933483][ T6196] ubi0: background thread "ubi_bgt0d" started, PID 6196 [ 111.946080][ T6193] ubi0: detaching mtd0 [ 111.996885][ T6203] Process accounting resumed [ 112.080291][ T6193] ubi0: mtd0 is detached [ 115.719007][ T6247] binder: 6243:6247 ioctl 2284 ffffffffffffffff returned -22 [ 117.466350][ T6256] netlink: 342 bytes leftover after parsing attributes in process `syz.2.77'. [ 120.977114][ T6329] netlink: 338 bytes leftover after parsing attributes in process `syz.0.93'. [ 125.071105][ T6404] MTRR 1 not used [ 130.532156][ T6474] netlink: 'syz.3.124': attribute type 4 has an invalid length. [ 130.549352][ T6474] netlink: 330 bytes leftover after parsing attributes in process `syz.3.124'. [ 132.216363][ T6515] ovs_: entered promiscuous mode [ 134.928585][ T6595] netlink: 'syz.1.150': attribute type 1 has an invalid length. [ 134.948342][ T6595] nbd: error processing sock list [ 135.210219][ T6606] Process accounting resumed [ 135.248937][ T6606] netlink: 4 bytes leftover after parsing attributes in process `syz.1.153'. [ 135.281607][ T6606] netlink: 342 bytes leftover after parsing attributes in process `syz.1.153'. [ 135.577333][ T6601] svc: failed to register nfsdv3 RPC service (errno 111). [ 135.605570][ T6601] svc: failed to register nfsaclv3 RPC service (errno 111). [ 136.034864][ T6617] netlink: 138 bytes leftover after parsing attributes in process `syz.2.156'. [ 136.663772][ T6628] Invalid ELF header magic: != ELF [ 138.240081][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.258148][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 144.437388][ T6799] ptrace attach of "./syz-executor exec"[5840] was attempted by "./syz-executor exec"[6799] [ 144.861012][ T6808] MTRR 1 not used [ 144.869466][ T6809] MTRR 1 not used [ 145.157319][ T6817] mmap: syz.1.199 (6817) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 145.779413][ T6827] netlink: 4 bytes leftover after parsing attributes in process `syz.1.200'. [ 146.628499][ T6840] ======================================================= [ 146.628499][ T6840] WARNING: The mand mount option has been deprecated and [ 146.628499][ T6840] and is ignored by this kernel. Remove the mand [ 146.628499][ T6840] option from the mount to silence this warning. [ 146.628499][ T6840] ======================================================= [ 149.356195][ T6905] netlink: 4 bytes leftover after parsing attributes in process `syz.1.216'. [ 150.838503][ T6925] futex_wake_op: syz.1.221 tries to shift op by 64; fix this program [ 153.160136][ T6960] synth uevent: /devices/platform/dummy_hcd.3/usb4/ep_00: unknown uevent action string [ 153.193088][ T6960] ep_00: uevent: failed to send synthetic uevent: -22 [ 153.764302][ T6966] futex_wake_op: syz.3.231 tries to shift op by 64; fix this program [ 155.161339][ T6972] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 155.180608][ T6972] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 155.239746][ T6972] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 155.331539][ T6972] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 155.350385][ T6972] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 155.405138][ T6972] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 155.413861][ T6972] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 155.446224][ T6972] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 155.475827][ T6972] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 155.502438][ T6972] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 155.513699][ T6972] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 155.553838][ T6972] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 157.195984][ T5845] Bluetooth: hci0: command 0x0c1a tx timeout [ 157.355974][ T5845] Bluetooth: hci1: command 0x0c1a tx timeout [ 157.446741][ T5845] Bluetooth: hci2: command 0x0c1a tx timeout [ 157.520429][ T5845] Bluetooth: hci3: command 0x0c1a tx timeout [ 159.277011][ T5845] Bluetooth: hci0: command 0x0c1a tx timeout [ 159.436038][ T5845] Bluetooth: hci1: command 0x0c1a tx timeout [ 159.515969][ T5845] Bluetooth: hci2: command 0x0c1a tx timeout [ 159.599888][ T5845] Bluetooth: hci3: command 0x0c1a tx timeout [ 161.355826][ T5845] Bluetooth: hci0: command 0x0c1a tx timeout [ 161.515938][ T5845] Bluetooth: hci1: command 0x0c1a tx timeout [ 161.595853][ T5845] Bluetooth: hci2: command 0x0c1a tx timeout [ 161.608978][ T7107] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 161.635147][ T7108] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 161.675853][ T5845] Bluetooth: hci3: command 0x0c1a tx timeout [ 162.840468][ T7131] : entered promiscuous mode [ 167.547855][ T7226] netlink: 330 bytes leftover after parsing attributes in process `syz.2.291'. [ 167.607474][ T7226] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 167.625858][ T7226] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 167.831896][ T29] audit: type=1800 audit(8277292068.220:2): pid=7233 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.293" name="version" dev="configfs" ino=14017 res=0 errno=0 [ 171.245494][ T7287] netlink: 330 bytes leftover after parsing attributes in process `syz.0.306'. [ 171.267699][ T7287] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 171.295541][ T7287] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 171.591730][ T7309] netlink: zone id is out of range [ 171.602255][ T7309] netlink: zone id is out of range [ 171.641225][ T7309] netlink: zone id is out of range [ 171.653755][ T7309] netlink: zone id is out of range [ 171.696428][ T7309] netlink: zone id is out of range [ 171.774921][ T7309] netlink: zone id is out of range [ 171.811684][ T7309] netlink: zone id is out of range [ 171.817528][ T7309] netlink: zone id is out of range [ 171.822728][ T7309] netlink: zone id is out of range [ 171.829809][ T7309] netlink: zone id is out of range [ 172.741923][ T7335] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 172.772197][ T7335] size and base must be multiples of 4 kiB [ 172.778214][ T7335] CPU: 0 UID: 0 PID: 7335 Comm: syz.2.317 Not tainted 6.13.0-rc7-syzkaller-00102-gce69b4019001 #0 [ 172.788868][ T7335] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 172.798995][ T7335] Call Trace: [ 172.802349][ T7335] [ 172.805324][ T7335] dump_stack_lvl+0x16c/0x1f0 [ 172.810100][ T7335] mtrr_del+0xd1/0x110 [ 172.814254][ T7335] mtrr_ioctl+0x900/0xcd0 [ 172.818675][ T7335] ? __pfx_mtrr_ioctl+0x10/0x10 [ 172.823609][ T7335] ? fdget+0x176/0x210 [ 172.827744][ T7335] ? __sys_sendmsg+0x19a/0x220 [ 172.832598][ T7335] ? __pfx_mtrr_ioctl+0x10/0x10 [ 172.837537][ T7335] proc_reg_unlocked_ioctl+0x226/0x320 [ 172.843076][ T7335] ? __pfx_proc_reg_unlocked_ioctl+0x10/0x10 [ 172.849141][ T7335] __x64_sys_ioctl+0x190/0x200 [ 172.853977][ T7335] do_syscall_64+0xcd/0x250 [ 172.858587][ T7335] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 172.864586][ T7335] RIP: 0033:0x7f5e2b585d29 [ 172.869080][ T7335] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 172.888750][ T7335] RSP: 002b:00007f5e2c433038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 172.897228][ T7335] RAX: ffffffffffffffda RBX: 00007f5e2b775fa0 RCX: 00007f5e2b585d29 [ 172.905264][ T7335] RDX: 0000000000000003 RSI: 00000000400c4d04 RDI: 0000000000000003 [ 172.913381][ T7335] RBP: 00007f5e2b601b08 R08: 0000000000000000 R09: 0000000000000000 [ 172.921410][ T7335] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 172.929435][ T7335] R13: 0000000000000000 R14: 00007f5e2b775fa0 R15: 00007ffc2f421408 [ 172.937483][ T7335] [ 173.396795][ T7358] netlink: 12 bytes leftover after parsing attributes in process `syz.2.322'. [ 173.528981][ T7359] HfR: entered promiscuous mode [ 173.536355][ T7358] HfR: left promiscuous mode [ 174.480694][ T29] audit: type=1800 audit(8277292074.870:3): pid=7391 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.332" name="version" dev="configfs" ino=14871 res=0 errno=0 [ 178.102526][ T7479] xs_local_setup_socket: unhandled error (13) connecting to /var/run/rpcbind.sock [ 178.184807][ T7479] svc: failed to register nfsdv3 RPC service (errno 111). [ 178.230023][ T7479] svc: failed to register nfsaclv3 RPC service (errno 111). [ 179.887071][ T7515] netlink: 342 bytes leftover after parsing attributes in process `syz.1.363'. [ 179.996136][ T7518] svc: failed to register nfsdv3 RPC service (errno 111). [ 180.028961][ T7518] svc: failed to register nfsaclv3 RPC service (errno 111). [ 182.196080][ T7553] netlink: 28 bytes leftover after parsing attributes in process `syz.1.373'. [ 182.447280][ T7557] net_ratelimit: 2 callbacks suppressed [ 182.447306][ T7557] openvswitch: netlink: IP tunnel dst address not specified [ 182.697855][ T7553] hsr_slave_0 (unregistering): left promiscuous mode [ 185.086000][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 185.842763][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807cd86c00: rx timeout, send abort [ 186.352223][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807cd86c00: abort rx timeout. Force session deactivation [ 191.486978][ T7704] netlink: 16 bytes leftover after parsing attributes in process `syz.3.414'. [ 194.425226][ T7760] delete_channel: no stack [ 199.518183][ T7874] netlink: 252 bytes leftover after parsing attributes in process `syz.3.451'. [ 199.565955][ T7874] netlink: 252 bytes leftover after parsing attributes in process `syz.3.451'. [ 199.678838][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.685222][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 199.835342][ T7891] ubi16: attaching mtd0 [ 199.843946][ T7891] ubi16 error: ubi_attach_mtd_dev: bad VID header (4) or data offsets (68) [ 200.490305][ T7910] program syz.1.462 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 201.490946][ T7942] netlink: 342 bytes leftover after parsing attributes in process `syz.2.472'. [ 202.554169][ T7972] kafs: addr_prefs: Invalid Command [ 203.555016][ T7990] netlink: 330 bytes leftover after parsing attributes in process `syz.1.487'. [ 204.553847][ T8025] capability: warning: `syz.2.497' uses 32-bit capabilities (legacy support in use) [ 207.656340][ T8117] netlink: 222 bytes leftover after parsing attributes in process `syz.3.521'. [ 207.715963][ T8119] netlink: 222 bytes leftover after parsing attributes in process `syz.3.521'. [ 207.788723][ T8119] netlink: 222 bytes leftover after parsing attributes in process `syz.3.521'. [ 207.800762][ T8121] Process accounting resumed [ 208.046570][ T8130] netlink: 4 bytes leftover after parsing attributes in process `syz.0.523'. [ 209.720576][ T8162] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 209.742591][ T8162] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 209.782683][ T8162] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 209.800632][ T8162] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 211.121970][ T5845] Bluetooth: hci0: command 0x0c1a tx timeout [ 211.765899][ T5845] Bluetooth: hci1: command 0x0c1a tx timeout [ 211.835997][ T5845] Bluetooth: hci3: command 0x0c1a tx timeout [ 211.842174][ T54] Bluetooth: hci2: command 0x0c1a tx timeout [ 214.780730][ T8262] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 215.343993][ T8287] FAULT_INJECTION: forcing a failure. [ 215.343993][ T8287] name failslab, interval 1, probability 0, space 0, times 1 [ 215.384758][ T8287] CPU: 0 UID: 0 PID: 8287 Comm: syz.0.566 Not tainted 6.13.0-rc7-syzkaller-00102-gce69b4019001 #0 [ 215.395436][ T8287] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 215.405561][ T8287] Call Trace: [ 215.408885][ T8287] [ 215.411860][ T8287] dump_stack_lvl+0x16c/0x1f0 [ 215.416613][ T8287] should_fail_ex+0x497/0x5b0 [ 215.421365][ T8287] ? fs_reclaim_acquire+0xae/0x150 [ 215.426552][ T8287] should_failslab+0xc2/0x120 [ 215.431292][ T8287] kmem_cache_alloc_noprof+0x6e/0x3b0 [ 215.436726][ T8287] ? lockdep_init_map_type+0x16d/0x7d0 [ 215.442264][ T8287] ? security_inode_alloc+0x3b/0x2b0 [ 215.447648][ T8287] security_inode_alloc+0x3b/0x2b0 [ 215.452835][ T8287] inode_init_always_gfp+0xce4/0x1030 [ 215.458278][ T8287] alloc_inode+0x82/0x230 [ 215.462696][ T8287] sock_alloc+0x40/0x280 [ 215.467010][ T8287] __sock_create+0xc1/0x8d0 [ 215.471584][ T8287] __sys_socket+0x14f/0x260 [ 215.476158][ T8287] ? __pfx___sys_socket+0x10/0x10 [ 215.481248][ T8287] ? syscall_user_dispatch+0x77/0x140 [ 215.486688][ T8287] __x64_sys_socket+0x72/0xb0 [ 215.491454][ T8287] do_syscall_64+0xcd/0x250 [ 215.496033][ T8287] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 215.501992][ T8287] RIP: 0033:0x7efe17185d29 [ 215.506458][ T8287] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 215.526124][ T8287] RSP: 002b:00007efe17f01038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 215.534619][ T8287] RAX: ffffffffffffffda RBX: 00007efe17375fa0 RCX: 00007efe17185d29 [ 215.542644][ T8287] RDX: 000000000000000a RSI: 0000000000000003 RDI: 0000000000000002 [ 215.550715][ T8287] RBP: 00007efe17201b08 R08: 0000000000000000 R09: 0000000000000000 [ 215.558750][ T8287] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 215.566778][ T8287] R13: 0000000000000000 R14: 00007efe17375fa0 R15: 00007ffe49f4d108 [ 215.574813][ T8287] [ 215.591975][ T8287] socket: no more sockets [ 217.313640][ T8310] binder: 8309:8310 ioctl c0306201 9 returned -14 [ 218.909894][ T8335] netlink: 342 bytes leftover after parsing attributes in process `syz.1.578'. [ 220.385873][ T8358] netlink: 342 bytes leftover after parsing attributes in process `syz.3.586'. [ 220.425827][ T8358] IPv6: NLM_F_CREATE should be specified when creating new route [ 224.481924][ T8380] netlink: 504 bytes leftover after parsing attributes in process `syz.3.590'. [ 224.641097][ T8380] netlink: 504 bytes leftover after parsing attributes in process `syz.3.590'. [ 228.910519][ T8426] random: crng reseeded on system resumption [ 229.960680][ T8435] openvswitch: HSR: Dropping previously announced user features [ 231.031744][ T5836] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 231.046086][ T5836] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 231.055553][ T5836] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 231.064459][ T5836] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 231.072888][ T5836] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 231.081821][ T5836] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 231.280051][ T5845] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 231.689243][ T8458] chnl_net:caif_netlink_parms(): no params data found [ 232.335085][ T8458] bridge0: port 1(bridge_slave_0) entered blocking state [ 232.362744][ T8458] bridge0: port 1(bridge_slave_0) entered disabled state [ 232.390234][ T8458] bridge_slave_0: entered allmulticast mode [ 232.423181][ T8458] bridge_slave_0: entered promiscuous mode [ 232.539469][ T6584] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.654609][ T8458] bridge0: port 2(bridge_slave_1) entered blocking state [ 232.690758][ T8458] bridge0: port 2(bridge_slave_1) entered disabled state [ 232.707017][ T8458] bridge_slave_1: entered allmulticast mode [ 232.745894][ T8458] bridge_slave_1: entered promiscuous mode [ 232.961261][ T6584] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.023829][ T8458] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 233.062837][ T8458] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 233.117444][ T5845] Bluetooth: hci5: command tx timeout [ 233.262415][ T6584] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.562888][ T6584] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.599229][ T8458] team0: Port device team_slave_0 added [ 233.650492][ T8458] team0: Port device team_slave_1 added [ 233.864453][ T8458] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 233.881786][ T8458] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 233.907772][ C1] vkms_vblank_simulate: vblank timer overrun [ 233.957071][ T8458] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 234.111452][ T8458] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 234.135766][ T8458] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 234.161797][ C1] vkms_vblank_simulate: vblank timer overrun [ 234.217621][ T8458] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 234.441416][ T8458] hsr_slave_0: entered promiscuous mode [ 234.448338][ T8458] hsr_slave_1: entered promiscuous mode [ 234.475061][ T8458] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 234.482978][ T8458] Cannot create hsr debugfs directory [ 234.943140][ T6584] bridge_slave_1: left allmulticast mode [ 234.965616][ T6584] bridge_slave_1: left promiscuous mode [ 234.987623][ T6584] bridge0: port 2(bridge_slave_1) entered disabled state [ 235.054281][ T6584] bridge_slave_0: left allmulticast mode [ 235.063906][ T6584] bridge_slave_0: left promiscuous mode [ 235.089249][ T6584] bridge0: port 1(bridge_slave_0) entered disabled state [ 235.126230][ T8521] netlink: 4 bytes leftover after parsing attributes in process `syz.3.618'. [ 235.196219][ T5845] Bluetooth: hci5: command tx timeout [ 235.707395][ T8528] Invalid ELF header magic: != ELF [ 236.254036][ T6584] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 236.273359][ T6584] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 236.314742][ T6584] bond0 (unregistering): Released all slaves [ 236.335016][ T8502] netlink: 338 bytes leftover after parsing attributes in process `syz.3.618'. [ 236.374804][ T6584] ovs_: left promiscuous mode [ 236.550243][ T6584] : left promiscuous mode [ 236.882084][ T8458] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 236.968940][ T8458] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 237.285947][ T5845] Bluetooth: hci5: command tx timeout [ 237.350182][ T8458] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 237.369850][ T8458] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 237.996526][ T8458] 8021q: adding VLAN 0 to HW filter on device bond0 [ 238.013644][ T8458] 8021q: adding VLAN 0 to HW filter on device team0 [ 238.050069][ T8458] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 238.060597][ T8458] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 238.262421][ T6583] bridge0: port 1(bridge_slave_0) entered blocking state [ 238.269662][ T6583] bridge0: port 1(bridge_slave_0) entered forwarding state [ 238.279909][ T6583] bridge0: port 2(bridge_slave_1) entered blocking state [ 238.287113][ T6583] bridge0: port 2(bridge_slave_1) entered forwarding state [ 238.757351][ T6584] hsr_slave_0: left promiscuous mode [ 239.005822][ T6584] hsr_slave_1: left promiscuous mode [ 239.359942][ T5845] Bluetooth: hci5: command tx timeout [ 239.394303][ T6584] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 239.419277][ T6584] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 239.483450][ T6584] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 239.503902][ T6584] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 239.653231][ T6584] veth1_macvtap: left promiscuous mode [ 239.686753][ T6584] veth0_macvtap: left promiscuous mode [ 239.722696][ T6584] veth1_vlan: left promiscuous mode [ 239.760403][ T6584] veth0_vlan: left promiscuous mode [ 241.754846][ T6584] team0 (unregistering): Port device team_slave_1 removed [ 242.090313][ T6584] team0 (unregistering): Port device team_slave_0 removed [ 243.497075][ T8633] netlink: 28 bytes leftover after parsing attributes in process `syz.3.636'. [ 243.553156][ T8630] Invalid ELF header magic: != ELF [ 243.871172][ T8633] macsec0: entered allmulticast mode [ 243.880835][ T8633] veth1_macvtap: entered allmulticast mode [ 243.922371][ T8458] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 244.836964][ T8458] veth0_vlan: entered promiscuous mode [ 244.862295][ T8458] veth1_vlan: entered promiscuous mode [ 245.211651][ T8458] veth0_macvtap: entered promiscuous mode [ 245.249511][ T8458] veth1_macvtap: entered promiscuous mode [ 245.388432][ T8458] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 245.430543][ T8458] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.470735][ T8458] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 245.552194][ T8458] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 245.595839][ T8458] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.636790][ T8458] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 245.869174][ T8458] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.916095][ T8458] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.955890][ T8458] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.964689][ T8458] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.473360][ T6583] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 246.505797][ T6583] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 246.572674][ T2906] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 246.596170][ T2906] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 248.074325][ T8730] netlink: 'syz.4.648': attribute type 21 has an invalid length. [ 248.092068][ T8730] netlink: 334 bytes leftover after parsing attributes in process `syz.4.648'. [ 249.252365][ T8755] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 249.287108][ T8755] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 249.358360][ T8755] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 249.460843][ T8755] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 249.546885][ T8755] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 249.628784][ T8755] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 251.275902][ T5845] Bluetooth: hci0: command 0x0c1a tx timeout [ 251.355920][ T5845] Bluetooth: hci3: command 0x0c1a tx timeout [ 251.361814][ T54] Bluetooth: hci1: command 0x0c1a tx timeout [ 251.516150][ T54] Bluetooth: hci5: command 0x0c1a tx timeout [ 252.574384][ T8862] ima: policy update failed [ 252.585774][ T29] audit: type=1802 audit(8277292152.980:4): pid=8862 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.1.668" res=0 errno=0 [ 253.596602][ T54] Bluetooth: hci5: command 0x0c1a tx timeout [ 254.124611][ T8906] smc: net device syz_tun applied user defined pnetid ETHTOOL [ 254.874165][ T8926] : entered promiscuous mode [ 255.093763][ T8931] Invalid ELF header magic: != ELF [ 255.689540][ T54] Bluetooth: hci5: command 0x0c1a tx timeout [ 256.374353][ T8961] Invalid ELF header magic: != ELF [ 256.764900][ T8966] netlink: 28 bytes leftover after parsing attributes in process `syz.3.686'. [ 256.820103][ T8966] bond0: entered allmulticast mode [ 256.825299][ T8966] bond_slave_0: entered allmulticast mode [ 256.831365][ T8966] bond_slave_1: entered allmulticast mode [ 259.023209][ T9035] ICMPv6: process `syz.1.696' is using deprecated sysctl (syscall) net.ipv6.neigh.batadv_slave_0.retrans_time - use net.ipv6.neigh.batadv_slave_0.retrans_time_ms instead [ 259.742080][ T9052] netlink: 'syz.3.700': attribute type 3 has an invalid length. [ 261.118829][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 261.125683][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 261.752980][ T9111] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied. [ 262.835732][ T9144] Process accounting resumed [ 262.840638][ T9144] kernel write not supported for file /64/timerslack_ns (pid: 9144 comm: syz.4.716) [ 263.397226][ T9159] qrtr: Invalid version 0 [ 265.666734][ T9247] openvswitch: netlink: Message has 4 unknown bytes. [ 266.664071][ T9273] openvswitch: netlink: IP tunnel TTL not specified. [ 268.384544][ T9342] sctp: [Deprecated]: syz.1.749 (pid 9342) Use of int in max_burst socket option deprecated. [ 268.384544][ T9342] Use struct sctp_assoc_value instead [ 268.451505][ T9342] sctp: [Deprecated]: syz.1.749 (pid 9342) Use of int in max_burst socket option deprecated. [ 268.451505][ T9342] Use struct sctp_assoc_value instead [ 268.797401][ T9359] netlink: 342 bytes leftover after parsing attributes in process `syz.1.750'. [ 268.837095][ T9359] netlink: 342 bytes leftover after parsing attributes in process `syz.1.750'. [ 269.641695][ T9376] mkiss: ax0: crc mode is auto. [ 269.664333][ T9383] netlink: 'syz.4.754': attribute type 64 has an invalid length. [ 269.696447][ T9383] netlink: 74 bytes leftover after parsing attributes in process `syz.4.754'. [ 270.298841][ T9403] netlink: 28 bytes leftover after parsing attributes in process `syz.3.760'. [ 271.490945][ T9423] ptrace attach of "./syz-executor exec"[5832] was attempted by ""[9423] [ 272.797615][ T9436] netlink: 'syz.4.766': attribute type 17 has an invalid length. [ 272.806641][ T9436] netlink: 326 bytes leftover after parsing attributes in process `syz.4.766'. [ 275.184336][ T9477] netlink: 20 bytes leftover after parsing attributes in process `syz.4.775'. [ 275.788166][ T9496] netlink: 4 bytes leftover after parsing attributes in process `syz.4.779'. [ 275.837945][ T9496] netlink: 4 bytes leftover after parsing attributes in process `syz.4.779'. [ 277.650472][ T9525] netlink: 342 bytes leftover after parsing attributes in process `syz.1.786'. [ 277.664774][ T9525] netlink: 306 bytes leftover after parsing attributes in process `syz.1.786'. [ 277.882549][ T9529] openvswitch: netlink: IPv6 tunnel dst address is zero [ 281.284087][ T5845] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 281.302499][ T5845] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 281.319129][ T5845] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 281.335895][ T5845] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 281.343842][ T5845] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 281.351441][ T5845] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 281.988747][ T9605] chnl_net:caif_netlink_parms(): no params data found [ 282.477850][ T9605] bridge0: port 1(bridge_slave_0) entered blocking state [ 282.485153][ T9605] bridge0: port 1(bridge_slave_0) entered disabled state [ 282.503094][ T9605] bridge_slave_0: entered allmulticast mode [ 282.520582][ T9605] bridge_slave_0: entered promiscuous mode [ 282.578611][ T9605] bridge0: port 2(bridge_slave_1) entered blocking state [ 282.605743][ T9605] bridge0: port 2(bridge_slave_1) entered disabled state [ 282.617044][ T9605] bridge_slave_1: entered allmulticast mode [ 282.634562][ T9605] bridge_slave_1: entered promiscuous mode [ 282.754389][ T9605] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 282.788613][ T9605] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 282.969526][ T9605] team0: Port device team_slave_0 added [ 283.000712][ T9605] team0: Port device team_slave_1 added [ 283.086868][ T9633] [U]  [ 283.089981][ T9633] [U] [ 283.092759][ T9633] [U] [ 283.095515][ T9633] [U] [ 283.135542][ T9605] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 283.160502][ T9605] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 283.170113][ T9633] [U] [ 283.189214][ T9633] [U] [ 283.191977][ T9633] [U] [ 283.194731][ T9633] [U] [ 283.215669][ T9605] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 283.238127][ T9605] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 283.245138][ T9605] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 283.274616][ T9605] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 283.435857][ T5845] Bluetooth: hci2: command tx timeout [ 283.461398][ T9605] hsr_slave_0: entered promiscuous mode [ 283.483553][ T9605] hsr_slave_1: entered promiscuous mode [ 283.658837][ T9633] [U] [ 283.661640][ T9633] [U] [ 283.664418][ T9633] [U] [ 283.667185][ T9633] [U] [ 283.711194][ T9633] [U] [ 283.713991][ T9633] [U] [ 283.716764][ T9633] [U] [ 283.719533][ T9633] [U] [ 283.766483][ T9633] [U] [ 283.769289][ T9633] [U] [ 283.772057][ T9633] [U] [ 284.560760][ T9605] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 284.610272][ T9605] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 284.648096][ T9633] [U] [ 284.658851][ T9605] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 284.814660][ T9605] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 285.074500][ T9605] 8021q: adding VLAN 0 to HW filter on device bond0 [ 285.124164][ T9605] 8021q: adding VLAN 0 to HW filter on device team0 [ 285.186689][ T6589] bridge0: port 1(bridge_slave_0) entered blocking state [ 285.193948][ T6589] bridge0: port 1(bridge_slave_0) entered forwarding state [ 285.240198][ T2906] bridge0: port 2(bridge_slave_1) entered blocking state [ 285.247366][ T2906] bridge0: port 2(bridge_slave_1) entered forwarding state [ 285.515878][ T5845] Bluetooth: hci2: command tx timeout [ 285.677631][ T9605] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 286.110617][ T9605] veth0_vlan: entered promiscuous mode [ 286.133459][ T9605] veth1_vlan: entered promiscuous mode [ 286.180740][ T9605] veth0_macvtap: entered promiscuous mode [ 286.205508][ T9605] veth1_macvtap: entered promiscuous mode [ 286.238142][ T9605] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 286.251295][ T9605] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 286.261892][ T9605] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 286.273634][ T9605] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 286.285358][ T9605] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 286.309436][ T9605] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 286.329957][ T9605] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 286.356205][ T9605] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 286.382100][ T9605] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 286.403431][ T9605] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 286.435297][ T9605] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.444267][ T9605] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.458650][ T9605] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.468600][ T9605] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.626233][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 286.634112][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 286.678403][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 286.688321][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 287.596816][ T5845] Bluetooth: hci2: command tx timeout [ 288.230978][ T9765] lo: entered allmulticast mode [ 288.257802][ T9765] lo: left allmulticast mode [ 289.676352][ T5845] Bluetooth: hci2: command tx timeout [ 291.336507][ T9829] program syz.5.862 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 291.980707][ T9845] netlink: 8 bytes leftover after parsing attributes in process `syz.3.866'. [ 293.189931][ T9882] netlink: 334 bytes leftover after parsing attributes in process `syz.0.874'. [ 293.264713][ T9882] netlink: 334 bytes leftover after parsing attributes in process `syz.0.874'. [ 294.103194][ T9900] netlink: 342 bytes leftover after parsing attributes in process `syz.0.876'. [ 296.465125][ T9966] cgroup: fork rejected by pids controller in /syz1 [ 296.892497][T10019] netlink: 28 bytes leftover after parsing attributes in process `syz.5.900'. [ 296.997539][T10022] netlink: 146 bytes leftover after parsing attributes in process `syz.3.902'. [ 301.113060][T10149] netlink: 294 bytes leftover after parsing attributes in process `syz.0.915'. [ 301.206433][T10153] netlink: 294 bytes leftover after parsing attributes in process `syz.0.915'. [ 302.197724][T10176] netlink: 28 bytes leftover after parsing attributes in process `syz.5.919'. [ 304.289284][T10203] sctp: [Deprecated]: syz.3.927 (pid 10203) Use of struct sctp_assoc_value in delayed_ack socket option. [ 304.289284][T10203] Use struct sctp_sack_info instead [ 304.604456][T10212] random: crng reseeded on system resumption [ 304.775943][T10208] bridge0: port 3(team0) entered blocking state [ 304.839607][T10208] bridge0: port 3(team0) entered disabled state [ 304.855215][T10208] team0: entered allmulticast mode [ 304.880024][T10203] netlink: 4 bytes leftover after parsing attributes in process `syz.3.927'. [ 304.886350][T10208] team_slave_0: entered allmulticast mode [ 304.914214][T10203] openvswitch: netlink: ufid size 17 bytes exceeds the range (1, 16) [ 304.927208][T10208] team_slave_1: entered allmulticast mode [ 304.952158][T10208] team0: entered promiscuous mode [ 304.954741][T10203] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 304.977880][T10208] team_slave_0: entered promiscuous mode [ 304.991429][T10208] team_slave_1: entered promiscuous mode [ 305.043683][T10208] bridge0: port 3(team0) entered blocking state [ 305.050546][T10208] bridge0: port 3(team0) entered forwarding state [ 314.071571][T10402] bridge0: port 3(team0) entered blocking state [ 314.111162][T10402] bridge0: port 3(team0) entered disabled state [ 314.214279][T10402] team0: entered allmulticast mode [ 314.241550][T10402] team_slave_0: entered allmulticast mode [ 314.365988][T10402] team_slave_1: entered allmulticast mode [ 314.398189][T10402] team0: entered promiscuous mode [ 314.464795][T10402] team_slave_0: entered promiscuous mode [ 314.487972][T10402] team_slave_1: entered promiscuous mode [ 314.566378][T10402] bridge0: port 3(team0) entered blocking state [ 314.572910][T10402] bridge0: port 3(team0) entered forwarding state [ 318.725247][T10443] Invalid ELF header magic: != ELF [ 318.772095][T10444] Invalid ELF header magic: != ELF [ 319.681785][T10391] ------------[ cut here ]------------ [ 319.687727][T10391] WARNING: CPU: 0 PID: 10391 at mm/page_alloc.c:4729 __alloc_pages_noprof+0xeff/0x25b0 [ 319.697592][T10391] Modules linked in: [ 319.701545][T10391] CPU: 0 UID: 0 PID: 10391 Comm: syz.5.963 Not tainted 6.13.0-rc7-syzkaller-00102-gce69b4019001 #0 [ 319.712599][T10391] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 319.723145][T10391] RIP: 0010:__alloc_pages_noprof+0xeff/0x25b0 [ 319.729528][T10391] Code: 24 2c 00 00 00 00 89 cd 0f 84 8b f9 ff ff 8b 34 24 48 89 da 8b 7c 24 08 e8 de b2 fe ff e9 69 f9 ff ff c6 05 34 7b 16 0e 01 90 <0f> 0b 90 31 db e9 9f f3 ff ff 89 14 24 e8 2f a0 0c 00 8b 14 24 e9 [ 319.749819][T10391] RSP: 0018:ffffc90019227918 EFLAGS: 00010246 [ 319.756527][T10391] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 319.764566][T10391] RDX: 0000000000000000 RSI: 000000000000000b RDI: 0000000000040d40 [ 319.772720][T10391] RBP: 0000000000000000 R08: 0000000000000006 R09: 00000000003fffff [ 319.780846][T10391] R10: 00000000003fffff R11: 0000000000000004 R12: 000000000000000b [ 319.789080][T10391] R13: 0000000000040d40 R14: 1ffff92003244f37 R15: 00000000003fffff [ 319.797185][T10391] FS: 00007fa875dd56c0(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 319.806288][T10391] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 319.813253][T10391] CR2: 0000555570672808 CR3: 000000003450a000 CR4: 00000000003526f0 [ 319.821786][T10391] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 319.829920][T10391] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 319.838583][T10391] Call Trace: [ 319.841914][T10391] [ 319.844892][T10391] ? __warn+0xea/0x3c0 [ 319.849690][T10391] ? __alloc_pages_noprof+0xeff/0x25b0 [ 319.855236][T10391] ? report_bug+0x3c0/0x580 [ 319.859903][T10391] ? handle_bug+0x54/0xa0 [ 319.864309][T10391] ? exc_invalid_op+0x17/0x50 [ 319.869164][T10391] ? asm_exc_invalid_op+0x1a/0x20 [ 319.874282][T10391] ? __alloc_pages_noprof+0xeff/0x25b0 [ 319.879908][T10391] ? __pfx_mark_lock+0x10/0x10 [ 319.884803][T10391] ? __schedule+0x3d6c/0x5ad0 [ 319.889632][T10391] ? lockdep_hardirqs_on+0x7c/0x110 [ 319.894915][T10391] ? hlock_class+0x4e/0x130 [ 319.899560][T10391] ? __lock_acquire+0x15a9/0x3c40 [ 319.904659][T10391] ? __pfx___alloc_pages_noprof+0x10/0x10 [ 319.910579][T10391] ? lockdep_hardirqs_on+0x7c/0x110 [ 319.916241][T10391] ? find_held_lock+0x2d/0x110 [ 319.921415][T10391] ___kmalloc_large_node+0x84/0x1b0 [ 319.926791][T10391] __kmalloc_large_node_noprof+0x1c/0x70 [ 319.932490][T10391] __kmalloc_noprof.cold+0xc/0x63 [ 319.938138][T10391] ? __might_fault+0xe3/0x190 [ 319.942915][T10391] ? tomoyo_write_control+0x267/0x13d0 [ 319.949054][T10391] tomoyo_write_control+0x267/0x13d0 [ 319.954435][T10391] ? rcu_is_watching+0x12/0xc0 [ 319.959347][T10391] ? __pfx_tomoyo_write_control+0x10/0x10 [ 319.965123][T10391] ? ksys_write+0x12b/0x250 [ 319.969783][T10391] ? __pfx_tomoyo_write+0x10/0x10 [ 319.974883][T10391] vfs_write+0x24c/0x1150 [ 319.979338][T10391] ? __fget_files+0x1fc/0x3a0 [ 319.984075][T10391] ? __pfx___mutex_lock+0x10/0x10 [ 319.989250][T10391] ? __pfx_vfs_write+0x10/0x10 [ 319.994084][T10391] ? __fget_files+0x206/0x3a0 [ 319.998891][T10391] ksys_write+0x12b/0x250 [ 320.003283][T10391] ? __pfx_ksys_write+0x10/0x10 [ 320.008282][T10391] do_syscall_64+0xcd/0x250 [ 320.012852][T10391] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 320.019183][T10391] RIP: 0033:0x7fa877f85d29 [ 320.023659][T10391] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 320.044247][T10391] RSP: 002b:00007fa875dd5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 320.053313][T10391] RAX: ffffffffffffffda RBX: 00007fa878176240 RCX: 00007fa877f85d29 [ 320.061437][T10391] RDX: 00000000fffffdef RSI: 0000000000000000 RDI: 0000000000000003 [ 320.069529][T10391] RBP: 00007fa878001b08 R08: 0000000000000000 R09: 0000000000000000 [ 320.077650][T10391] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 320.085725][T10391] R13: 0000000000000000 R14: 00007fa878176240 R15: 00007ffce5267d98 [ 320.093796][T10391] [ 320.097049][T10391] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 320.104447][T10391] CPU: 0 UID: 0 PID: 10391 Comm: syz.5.963 Not tainted 6.13.0-rc7-syzkaller-00102-gce69b4019001 #0 [ 320.115231][T10391] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 320.125364][T10391] Call Trace: [ 320.128661][T10391] [ 320.131607][T10391] dump_stack_lvl+0x3d/0x1f0 [ 320.136234][T10391] panic+0x71d/0x800 [ 320.140183][T10391] ? __pfx_panic+0x10/0x10 [ 320.144637][T10391] ? show_trace_log_lvl+0x29d/0x3d0 [ 320.149874][T10391] ? check_panic_on_warn+0x1f/0xb0 [ 320.155027][T10391] ? __alloc_pages_noprof+0xeff/0x25b0 [ 320.160532][T10391] check_panic_on_warn+0xab/0xb0 [ 320.165528][T10391] __warn+0xf6/0x3c0 [ 320.169472][T10391] ? __alloc_pages_noprof+0xeff/0x25b0 [ 320.174963][T10391] report_bug+0x3c0/0x580 [ 320.179325][T10391] handle_bug+0x54/0xa0 [ 320.183513][T10391] exc_invalid_op+0x17/0x50 [ 320.188053][T10391] asm_exc_invalid_op+0x1a/0x20 [ 320.192947][T10391] RIP: 0010:__alloc_pages_noprof+0xeff/0x25b0 [ 320.199047][T10391] Code: 24 2c 00 00 00 00 89 cd 0f 84 8b f9 ff ff 8b 34 24 48 89 da 8b 7c 24 08 e8 de b2 fe ff e9 69 f9 ff ff c6 05 34 7b 16 0e 01 90 <0f> 0b 90 31 db e9 9f f3 ff ff 89 14 24 e8 2f a0 0c 00 8b 14 24 e9 [ 320.218691][T10391] RSP: 0018:ffffc90019227918 EFLAGS: 00010246 [ 320.224797][T10391] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 320.232887][T10391] RDX: 0000000000000000 RSI: 000000000000000b RDI: 0000000000040d40 [ 320.240886][T10391] RBP: 0000000000000000 R08: 0000000000000006 R09: 00000000003fffff [ 320.248900][T10391] R10: 00000000003fffff R11: 0000000000000004 R12: 000000000000000b [ 320.256901][T10391] R13: 0000000000040d40 R14: 1ffff92003244f37 R15: 00000000003fffff [ 320.264924][T10391] ? __pfx_mark_lock+0x10/0x10 [ 320.269743][T10391] ? __schedule+0x3d6c/0x5ad0 [ 320.274451][T10391] ? lockdep_hardirqs_on+0x7c/0x110 [ 320.279720][T10391] ? hlock_class+0x4e/0x130 [ 320.284257][T10391] ? __lock_acquire+0x15a9/0x3c40 [ 320.289317][T10391] ? __pfx___alloc_pages_noprof+0x10/0x10 [ 320.295085][T10391] ? lockdep_hardirqs_on+0x7c/0x110 [ 320.300332][T10391] ? find_held_lock+0x2d/0x110 [ 320.305137][T10391] ___kmalloc_large_node+0x84/0x1b0 [ 320.310384][T10391] __kmalloc_large_node_noprof+0x1c/0x70 [ 320.316056][T10391] __kmalloc_noprof.cold+0xc/0x63 [ 320.321122][T10391] ? __might_fault+0xe3/0x190 [ 320.325853][T10391] ? tomoyo_write_control+0x267/0x13d0 [ 320.331362][T10391] tomoyo_write_control+0x267/0x13d0 [ 320.336696][T10391] ? rcu_is_watching+0x12/0xc0 [ 320.341498][T10391] ? __pfx_tomoyo_write_control+0x10/0x10 [ 320.347270][T10391] ? ksys_write+0x12b/0x250 [ 320.351824][T10391] ? __pfx_tomoyo_write+0x10/0x10 [ 320.356908][T10391] vfs_write+0x24c/0x1150 [ 320.361320][T10391] ? __fget_files+0x1fc/0x3a0 [ 320.366046][T10391] ? __pfx___mutex_lock+0x10/0x10 [ 320.371120][T10391] ? __pfx_vfs_write+0x10/0x10 [ 320.375937][T10391] ? __fget_files+0x206/0x3a0 [ 320.380751][T10391] ksys_write+0x12b/0x250 [ 320.385118][T10391] ? __pfx_ksys_write+0x10/0x10 [ 320.390016][T10391] do_syscall_64+0xcd/0x250 [ 320.394563][T10391] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 320.400584][T10391] RIP: 0033:0x7fa877f85d29 [ 320.405022][T10391] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 320.424669][T10391] RSP: 002b:00007fa875dd5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 320.433118][T10391] RAX: ffffffffffffffda RBX: 00007fa878176240 RCX: 00007fa877f85d29 [ 320.441117][T10391] RDX: 00000000fffffdef RSI: 0000000000000000 RDI: 0000000000000003 [ 320.449109][T10391] RBP: 00007fa878001b08 R08: 0000000000000000 R09: 0000000000000000 [ 320.457102][T10391] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 320.465094][T10391] R13: 0000000000000000 R14: 00007fa878176240 R15: 00007ffce5267d98 [ 320.473107][T10391] [ 320.476476][T10391] Kernel Offset: disabled [ 320.480859][T10391] Rebooting in 86400 seconds..