last executing test programs:

2m35.874180679s ago: executing program 2 (id=927):
mmap$auto(0x9, 0x3, 0x2, 0x10, 0xfffffffffffffffa, 0xc)
setreuid$auto(0x15, 0x5)
madvise$auto(0x0, 0x20201, 0x15)

2m35.660700862s ago: executing program 2 (id=928):
mmap$auto(0x0, 0x2020009, 0x400000000000003, 0xeb1, 0xfffffffffffffffa, 0x8000)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/pts/ptmx\x00', 0x0, 0x0)
ioctl$auto(0xffffffffffffffff, 0x4, 0xffffffffffffffff)

2m35.478558515s ago: executing program 2 (id=929):
mmap$auto(0x4, 0x400007, 0xdf, 0x9b72, 0x2, 0x7ffc)
io_uring_setup$auto(0x6, 0x0)
clone$auto(0x3, 0x9, 0x0, 0x0, 0x10001)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x3, 0x3)
r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
sendmsg$auto_NL80211_CMD_SET_MULTICAST_TO_UNICAST(0xffffffffffffffff, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000100)=ANY=[@ANYRES32=r0, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x24000804}, 0x0)
sendmsg$auto_THERMAL_GENL_CMD_THRESHOLD_FLUSH(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, 0x0, 0x300, 0x70bd2b, 0x25dfdbfb, {}, [@THERMAL_GENL_ATTR_TZ_NAME={0xc, 0xb, '#+}/{\x9d,+'}, @THERMAL_GENL_ATTR_THRESHOLD_DIRECTION={0x8, 0x1b, 0x7f}, @THERMAL_GENL_ATTR_TZ_TRIP_HYST={0x8, 0x9, 0x40}]}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x0)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
getgid()
r1 = socket(0xa, 0x5, 0x0)
getsockopt$auto(r1, 0x84, 0x4, 0x0, 0x0)

2m34.672997541s ago: executing program 2 (id=931):
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async)
madvise$auto(0x100000, 0xffffffffffff0005, 0x19) (async)
madvise$auto(0x9dd, 0x8, 0x85) (async)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
open(&(0x7f0000000300)='./file0\x00', 0x7ffd, 0x12) (async)
r0 = openat$auto_full_fops_mem(0xffffffffffffff9c, &(0x7f0000000000), 0x101002, 0x0)
read$auto(r0, 0x0, 0x4000000081) (async)
write$auto(0x3, 0x0, 0x100082) (async)
mmap$auto(0x0, 0x4000b, 0x7, 0x9b72, 0x7, 0x4000000028000) (async)
move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000)
ioctl$auto(0xc8, 0x400454de, 0x5c8d) (async)
clone$auto(0x7, 0x2000400000d, 0xfffffffffffffffc, 0x0, 0x3) (async)
io_uring_setup$auto(0x6, 0x0) (async)
madvise$auto(0x0, 0x200007, 0x19) (async)
openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000001a80)='/dev/bus/usb/001/001\x00', 0x29a02, 0x0) (async)
mmap$auto(0x2000, 0x9, 0x4008, 0x16, 0x4, 0xfffffffffffffffb)

2m28.714989015s ago: executing program 2 (id=952):
openat$auto_clk_summary_fops_(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/clk/clk_summary\x00', 0x604202, 0x0) (async)
r0 = openat$auto_clk_summary_fops_(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/clk/clk_summary\x00', 0x604202, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0x15, r0, 0x8001)
landlock_restrict_self$auto(r0, 0x7) (async)
landlock_restrict_self$auto(r0, 0x7)
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) (async)
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
socket(0x2, 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
open(&(0x7f0000000800)='./file0\x00', 0x2240, 0x154)
mmap$auto(0x0, 0x9, 0xdf, 0xeb1, 0x1, 0x8000)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2)
ioctl$sock_SIOCGIFINDEX(r2, 0x89fc, &(0x7f0000000040)={'bridge0\x00'})
ioctl$auto(r3, 0x3, r1) (async)
ioctl$auto(r3, 0x3, r1)
io_uring_setup$auto(0x1, 0x0)
futex$auto(0x0, 0x6, 0x8, 0x0, 0x0, 0xffffffd6)
socket(0xa, 0x5, 0x84) (async)
r4 = socket(0xa, 0x5, 0x84)
mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x402, 0x300000000000) (async)
mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x402, 0x300000000000)
sendmsg$auto_OVS_FLOW_CMD_GET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x200400f0}, 0x800)
sendto$auto(r4, 0x0, 0x401, 0x101, &(0x7f0000000000)=@in={0x2, 0x4e23, @private=0xa010102}, 0x1c)
tkill$auto(0x1, 0x7)
setrlimit$auto(0x9, 0x0) (async)
setrlimit$auto(0x9, 0x0)
io_setup$auto(0x2, 0x0)

2m28.254853548s ago: executing program 1 (id=954):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f00000038c0), 0xffffffffffffffff)
r2 = socket(0xa, 0x5, 0x0)
bind$auto(r2, &(0x7f0000000040)=@in={0x2, 0x0, @local}, 0x69)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
setsockopt$auto(0x3, 0x10000000084, 0x1e, 0x0, 0x8)
sendmsg$auto_L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000003940)={&(0x7f0000003900)={0x14, r1, 0x1, 0x70bd2a, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x8080}, 0x20008800)

2m28.051198041s ago: executing program 1 (id=955):
mmap$auto(0x0, 0x20006, 0xdf, 0xeb1, 0x401, 0x8000)
socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0)
close_range$auto(0x2, 0x8, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0)
r0 = openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, 0x0, 0x1541, 0x0)
close_range$auto(0x2, 0x8, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x301, 0x0)
r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0)
ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$auto__ctl_fops_dm_ioctl(r0, 0x4008ae6a, 0x0)
r2 = open(0x0, 0x22040, 0x75)
socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0)
openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, 0x0, 0x1541, 0x0)
close_range$auto(0x2, 0x8, 0x0)
openat$auto_nsim_dev_health_break_fops_health(0xffffffffffffff9c, 0x0, 0x101, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, 0x0, 0x28082, 0x0)
getrandom$auto(0x0, 0x6000000, 0x3)
openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0)
openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0)
ioctl$auto__ctl_fops_dm_ioctl(r2, 0xc008ae0d, 0x0)

2m26.788352653s ago: executing program 2 (id=960):
openat$auto_fops_bool_file(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/netdevsim/netdevsim2/ports/3/bpf_map_accept\x00', 0x2881, 0x0)
writev$auto(0x3, &(0x7f0000000080)={0x0, 0x1}, 0x3)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/pts/ptmx\x00', 0x20540, 0x0)
r0 = syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000140), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000f40)={'batadv0\x00', <r2=>0x0})
sendmsg$auto_BATADV_CMD_SET_MESH(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="01c0df250f00000007fff10000000000fcff", @ANYRES32=r2, @ANYBLOB='\b\x002\x00x\v\x00\x00'], 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x140000e4)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000004c0)={'batadv_slave_1\x00', <r4=>0x0})
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_MACSEC_CMD_DEL_RXSC(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000074c0)={&(0x7f0000000040)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYRES64=r3], 0x2c}, 0x1, 0x0, 0x0, 0xc0c1}, 0x80)
mmap$auto(0x0, 0x60009, 0x7f, 0xeb1, 0x40000000000a5, 0x8000)
mknod$auto(0x0, 0x1, 0x4)
openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/pcmC1D1c\x00', 0x8000, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/reboot/cpu\x00', 0x1a1842, 0x0)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0x8eb1, 0x401, 0x8000)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyprintk\x00', 0x40001, 0x0)
mmap$auto(0x40000000000000, 0x2020009, 0xa, 0x12, 0xfffffffffffffffa, 0x8003)
mknod$auto(&(0x7f0000000040)=':,\x00', 0xc9, 0xc8)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
readv$auto(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000440)="2aa59db66584f9bedc8f5329507eae1e04a1806364e54351b75b37902425044cdbb735ac87ff9bd88d77b3a397367c777882bd9b3d37e1cf4810b3c5fd184fb6c62cb4c03b53a7f8f31197d1704c17ccc67c0c6a7d3ca022632ce9ed8ac59bd65c9dd9f4ed2a7e92131bfb8425b026c3e1e6135cea2b976fe3af35807a326ad420a9a6f9e897d9583505717854c710d7950a6b5ba312bc10db469ca4bd655fabc717399d97ac7a5397295051d33ab65df8901351f2b2deb35e9aa293320903d2b3d824a951c396f476b3d26e09a47056c351f5fd06bde1ccc93174268953dbcedcd78f087b0a27ed3cabdeefef801bab16a1664875cdd75c9b11a5", 0x8}, 0xff)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r5 = openat$auto_rfkill_fops_core(0xffffffffffffff9c, &(0x7f0000000140), 0x382, 0x0)
r6 = socket(0xa, 0x5, 0x84)
sendto$auto(r6, 0x0, 0x2000000000401, 0xfe, &(0x7f0000000000)=@vsock={0x28, 0x0, 0xffffffff, @local}, 0x1f)
ppoll$auto(&(0x7f0000000040)={<r7=>r5, 0x9, 0x5}, 0x9, 0x0, 0x0, 0x8)
write$auto(r7, &(0x7f00000000c0)='ns/net\x00', 0xe61d)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
ioctl$auto_RTC_IRQP_SET(0xffffffffffffffff, 0x4008700c, &(0x7f0000001a40)=0x5)
syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/net\x00')

2m26.670868061s ago: executing program 32 (id=960):
openat$auto_fops_bool_file(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/netdevsim/netdevsim2/ports/3/bpf_map_accept\x00', 0x2881, 0x0)
writev$auto(0x3, &(0x7f0000000080)={0x0, 0x1}, 0x3)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/pts/ptmx\x00', 0x20540, 0x0)
r0 = syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000140), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000f40)={'batadv0\x00', <r2=>0x0})
sendmsg$auto_BATADV_CMD_SET_MESH(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="01c0df250f00000007fff10000000000fcff", @ANYRES32=r2, @ANYBLOB='\b\x002\x00x\v\x00\x00'], 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x140000e4)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000004c0)={'batadv_slave_1\x00', <r4=>0x0})
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_MACSEC_CMD_DEL_RXSC(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000074c0)={&(0x7f0000000040)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYRES64=r3], 0x2c}, 0x1, 0x0, 0x0, 0xc0c1}, 0x80)
mmap$auto(0x0, 0x60009, 0x7f, 0xeb1, 0x40000000000a5, 0x8000)
mknod$auto(0x0, 0x1, 0x4)
openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/pcmC1D1c\x00', 0x8000, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/reboot/cpu\x00', 0x1a1842, 0x0)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0x8eb1, 0x401, 0x8000)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyprintk\x00', 0x40001, 0x0)
mmap$auto(0x40000000000000, 0x2020009, 0xa, 0x12, 0xfffffffffffffffa, 0x8003)
mknod$auto(&(0x7f0000000040)=':,\x00', 0xc9, 0xc8)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
readv$auto(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000440)="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", 0x8}, 0xff)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r5 = openat$auto_rfkill_fops_core(0xffffffffffffff9c, &(0x7f0000000140), 0x382, 0x0)
r6 = socket(0xa, 0x5, 0x84)
sendto$auto(r6, 0x0, 0x2000000000401, 0xfe, &(0x7f0000000000)=@vsock={0x28, 0x0, 0xffffffff, @local}, 0x1f)
ppoll$auto(&(0x7f0000000040)={<r7=>r5, 0x9, 0x5}, 0x9, 0x0, 0x0, 0x8)
write$auto(r7, &(0x7f00000000c0)='ns/net\x00', 0xe61d)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
ioctl$auto_RTC_IRQP_SET(0xffffffffffffffff, 0x4008700c, &(0x7f0000001a40)=0x5)
syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/net\x00')

2m26.601169381s ago: executing program 1 (id=962):
r0 = openat$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffff9c, &(0x7f00000045c0)='/sys/kernel/debug/block/nbd1/sched/read0_next_rq\x00', 0x0, 0x0)
openat$auto_ima_ascii_measurements_ops_ima_fs(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0)
read$auto_blk_mq_debugfs_fops_blk_mq_debugfs(r0, &(0x7f0000000040)=""/124, 0x7c)
r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/pid_for_children\x00')
ioctl$NS_GET_PARENT(r1, 0xb701, 0x0)

2m26.38868947s ago: executing program 1 (id=963):
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/scsi/scsi\x00', 0x400, 0x0)
lseek$auto(0x3, 0x7fffffffffffffff, 0x1)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_ovs_meter(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$auto_OVS_METER_CMD_DEL(r0, &(0x7f0000001180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)={0x20, r1, 0x1, 0x70bd28, 0x25dfdbff, {}, [@OVS_METER_ATTR_KBPS={0x4}, @OVS_METER_ATTR_ID={0x8, 0x1, 0x80000001}]}, 0x20}, 0x1, 0x0, 0x0, 0x4800}, 0x4000)
sendmsg$auto_OVS_METER_CMD_SET(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x30, r1, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@OVS_METER_ATTR_ID={0x8, 0x1, 0x7}, @OVS_METER_ATTR_MAX_METERS={0x8}, @OVS_METER_ATTR_USED={0xc, 0x5, 0x200}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000080}, 0x48000)
lsm_get_self_attr$auto(0x68, 0x0, &(0x7f0000002440)=0x1ff, 0x0)
openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_congestion_control\x00', 0x171482, 0x0)
r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000080), 0xffffffffffffffff)
openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video61\x00', 0x8a240, 0x0)
openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000100), 0x40100, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
syslog$auto(0x4, &(0x7f0000000040)='..\x00', 0x7)
r3 = syz_open_procfs$namespace(0x0, &(0x7f0000000040))
getdents$auto(r3, 0x0, 0x18)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x2c, 0x3, 0x0)
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x1, 0x0)
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer2\x00', 0x8002, 0x0)
r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/amidi2\x00', 0x101100, 0x0)
read$auto_snd_rawmidi_f_ops_rawmidi(r4, 0x0, 0xffffffd9)
close_range$auto(0x2, 0x8, 0x0)
sendmsg$auto_NL80211_CMD_STOP_P2P_DEVICE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0xff4a3b621e25da6a}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="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", @ANYRES16=r2, @ANYBLOB="00052bbd7000fbdbdf255a0000006800fa004c5de6e95420e2ee94c97a69532ae3348a28273f8c5c4282a9cffcd297fc8aefc66a8dd531793cb8cc326637a94309990a51ad075e80b73f3221d4ea347cef3242ddf0816217be768aee3321e8104bb64425c3460e032031fc4edcae87cc275d3514145a08001001040000000400af00"], 0x88}, 0x1, 0x0, 0x0, 0x1}, 0x10)
mprotect$auto(0x1ffff000, 0x8000000000000001, 0xd)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
io_uring_setup$auto(0x6, 0x0)
close_range$auto(0x2, 0x8, 0x0)
acct$auto(&(0x7f0000000000)='%\\\x00')
acct$auto(0x0)

2m25.975245615s ago: executing program 1 (id=964):
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
fanotify_init$auto(0x5, 0x2000000000002)
socket(0x2, 0x801, 0x106)
r0 = socket(0x10, 0x2, 0x0)
close_range$auto(0x2, 0x8000, 0x0)
io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7fffffff, 0xd, 0x2, 0x10001, 0x4, 0x9d93e506, 0xffffffffffffffff, [0x0, 0x80000001], {0x8, 0x6, 0xf, 0x2a3, 0x100, 0x7f, 0x101, 0xb1, 0x2}, {0x100, 0x4, 0x52, 0x5, 0x0, 0x40, 0x76c5, 0x9, 0x100000000}})
socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_smc_gen_netlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$auto_SMC_NETLINK_DISABLE_SEID(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="013b"], 0x14}, 0x1, 0x0, 0x0, 0x880}, 0x810)
sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f00000001c0), 0x7, 0xa505}, 0x800}, 0x7, 0x4008)

2m25.616433445s ago: executing program 1 (id=965):
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = syz_genetlink_get_family_id$auto_ipvs(&(0x7f0000002680), 0xffffffffffffffff) (async)
syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00') (async)
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
bpf$auto(0x5, &(0x7f0000000000)=@iter_create={0x15, 0x8}, 0x7)
mprotect$auto(0x1ffff000, 0x8000000000002001, 0x4) (async)
bpf$auto(0x0, &(0x7f0000000000)=@bpf_attr_7={@btf_id=0xe9f, 0x4, 0x1c}, 0xa3) (async)
writev$auto(0x0, &(0x7f0000000000)={0x0, 0x202}, 0x9) (async)
sendmsg$auto_IPVS_CMD_SET_CONFIG(r0, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000002980)={0x1c, r1, 0x1, 0x70bd26, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x0)

2m25.3417376s ago: executing program 33 (id=965):
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = syz_genetlink_get_family_id$auto_ipvs(&(0x7f0000002680), 0xffffffffffffffff) (async)
syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00') (async)
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
bpf$auto(0x5, &(0x7f0000000000)=@iter_create={0x15, 0x8}, 0x7)
mprotect$auto(0x1ffff000, 0x8000000000002001, 0x4) (async)
bpf$auto(0x0, &(0x7f0000000000)=@bpf_attr_7={@btf_id=0xe9f, 0x4, 0x1c}, 0xa3) (async)
writev$auto(0x0, &(0x7f0000000000)={0x0, 0x202}, 0x9) (async)
sendmsg$auto_IPVS_CMD_SET_CONFIG(r0, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000002980)={0x1c, r1, 0x1, 0x70bd26, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x0)

1m57.05640962s ago: executing program 4 (id=1064):
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
r0 = socket(0x2, 0x1, 0x0)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a)
sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x5, 0x20000000)
sendto$auto(0x3, 0x0, 0x5, 0x101, 0x0, 0x4)
fanotify_init$auto(0x65, 0x2)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
pipe$auto(0x0)
bpf$auto(0x0, &(0x7f00000001c0)=@task_fd_query={0x9, 0x21eb, 0x7ff, 0x6, 0xa, 0x1000009, 0x5f, 0x0, 0x3}, 0x6f3)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0xa, 0x3, 0x100)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
eventfd$auto(0x0)
socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0)
write$auto(0x3, 0x0, 0xfdef)
recvfrom$auto(0x3, 0x0, 0xfffffffffffffffb, 0x7, 0x0, 0xfffffffffffffffd)
mmap$auto(0xfffffffffffffffc, 0x8, 0x40000000005f, 0xeb1, r0, 0x2)
r1 = openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0)
msgctl$auto(0x4, 0x2, &(0x7f0000000100)={{0x6, 0xee01, 0xffffffffffffffff, 0x2, 0xc85, 0x4, 0x59}, 0x0, 0x0, 0x3, 0x1, 0x0, 0x4, 0x8000000000000001, 0xe, 0xf, 0xe})
futex$auto(0x0, 0x5, 0x0, 0x0, 0x0, 0xc0040000)
ioctl$auto_RTC_PARAM_SET(r1, 0x40187014, 0x0)
ioctl$auto_def_blk_fops_fs(r1, 0x2, &(0x7f0000000040)="f608166c0e381bf81d5c18b0b4e2be99aecc76e8e3e6f5791f9e72912c08e2cd0a7808ae9ab9ed85de35e42e7596bf56a66832be50e6bf92b35438981349c49ffbced99e7697e130b8e75c3991c91a6bcd54dcdb6610d7e2f2e401485db30b09145f2df16fe5ffc3870afafa2464caa7d615847243710c5bb639fa015cea526126189d48594efd864a39c3cf8bb0cb42e610a5d289017bf37f309530afb3d0")

1m55.91520489s ago: executing program 4 (id=1068):
r0 = eventfd2$auto(0x10001, 0x6)
mmap$auto(0x0, 0x0, 0xe2, 0x500000eb1, 0x40000000000a1, 0x1)
syz_genetlink_get_family_id$auto_ovs_vport(0x0, 0xffffffffffffffff)
read$auto_proc_pid_maps_operations_internal(r0, &(0x7f0000000240)=""/60, 0x3c)
socket$nl_generic(0x10, 0x3, 0x10)
sendfile$auto(0x1, 0x3, 0x0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = open(&(0x7f0000000000)='./file0\x00', 0xa61c2, 0x84)
r3 = syz_genetlink_get_family_id$auto_batadv(&(0x7f00000000c0), r0)
sendmsg$auto_BATADV_CMD_GET_MCAST_FLAGS(r2, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x4c, r3, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x2}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x9}, @BATADV_ATTR_VERSION={0xd, 0x1, '$!+\\\\(@!&'}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xb}, @BATADV_ATTR_BANDWIDTH_UP={0x8, 0x1b, 0x52a2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
ioctl$auto_TIOCSETD2(0xffffffffffffffff, 0x5423, 0x0)
socket(0x2a, 0x2, 0x0)
fallocate$auto(0x8000000000000003, 0x0, 0xd, 0x5)
socketpair$auto(0xfffffffe, 0x800, 0xe0000000, &(0x7f0000000080)=0x5)
ioctl$auto_PPPIOCSMRRU(0xffffffffffffffff, 0x4004743b, 0x0)
r4 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r6=>0x0})
syz_genetlink_get_family_id$auto_ovs_vport(&(0x7f0000000300), r1)
fstat$auto(0xffffffffffffffff, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x4, 0xee01, 0x0, 0x0, 0x7fff, 0x100000000, 0x40, 0x2, 0x2, 0x3, 0xda41, 0x0, 0x3, 0xe})
sendmsg$auto_NL80211_CMD_GET_INTERFACE(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000700)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010b27bd70002cfa539f1183d46a08000300", @ANYRES32=r6], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4000080)

1m54.956981397s ago: executing program 4 (id=1072):
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000)
sysfs$auto(0x2, 0x4, 0x4)
r0 = io_uring_setup$auto(0x877, 0x0)
io_uring_enter$auto(r0, 0x1ff, 0x40, 0x7, 0x0, 0xffffffffffffffff)

1m54.057270441s ago: executing program 4 (id=1076):
mmap$auto(0x0, 0x5, 0x2, 0x40eb2, 0x401, 0x300000000000)
capget$auto(0x0, 0xfffffffffffffffe) (async)
capset$auto(0x0, &(0x7f0000000000)={0x3, 0x7, 0x8}) (async)
r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0)
ioctl$auto(r0, 0x560f, 0x1)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
socket(0x2, 0x6, 0x0)
pipe2$auto(0x0, 0x80) (async)
setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) (async)
connect$auto(0x3, &(0x7f00000018c0)=@in={0x2, 0x300, @loopback}, 0x55) (async)
shutdown$auto(0x200000003, 0x2) (async)
close_range$auto(0x2, 0x8, 0x0)

1m53.211163009s ago: executing program 4 (id=1079):
openat$auto_nvram_misc_fops_nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0)
preadv$auto(0x40000000000003, &(0x7f0000000080)={0x0, 0xfffffffd}, 0x6, 0x5ff4, 0x1)
openat$auto_adf_hb_cfg_fops_adf_heartbeat_dbgfs(0xffffffffffffff9c, 0x0, 0x367300, 0x0)
r0 = getsockopt$auto(0xffffffffffffffff, 0xc, 0x7, 0x0, 0x0)
write$auto_trace_options_fops_trace(r0, &(0x7f0000000200)="3e12652cc024d040a83384e4c676b101d3d0437be27d2b5eaa3a808cfcd336a94dcd9ea8066365308f12f7e835498a403b384db6a6c64248d98d2298a2784d0d5b18077969f8d3f50cf319c1a12b5f2b68d97cc59206eb043b5c5cf8abad87e6177e8532c760eb5a44f3ee33317868ad827095b8793cfb", 0x77)
madvise$auto(0x0, 0x7fffffffffffffff, 0xa)
ioperm$auto(0x7, 0x6, 0x80)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x10004)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
rt_sigqueueinfo$auto(0x1, 0x7, &(0x7f0000000040)={@siginfo_0_0={0x0, 0x5, 0xfffffffb, @_sigpoll={0x52, 0x7}}})
finit_module$auto(r0, &(0x7f00000001c0)='nbd\x00', 0x6)
r1 = syz_genetlink_get_family_id$auto_nbd(&(0x7f00000000c0), r0)
sendmsg$auto_NBD_CMD_STATUS(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x30, r1, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x65}, @NBD_ATTR_SOCKETS={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000)
syz_clone3(&(0x7f0000000000)={0x28020000, 0x0, 0x0, 0x0, {0x29}, 0x0, 0x0, 0x0, 0x0}, 0x58)

1m46.79139311s ago: executing program 4 (id=1093):
openat$auto_adf_hb_cfg_fops_adf_heartbeat_dbgfs(0xffffffffffffff9c, 0x0, 0x121c01, 0x0) (async)
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000)
close_range$auto(0x2, 0x8, 0x0) (async)
recvmmsg$auto(0x4, &(0x7f0000000200)={{0x0, 0x4, &(0x7f0000000140)={0x0, 0x4da}, 0x4, 0x0, 0x8, 0x800}, 0x1000}, 0xffffffff, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10) (async)
socket$nl_generic(0x10, 0x3, 0x10)
bpf$auto(0x0, &(0x7f0000000100)=@task_fd_query={0x9, 0x21e9, 0x7ff, 0x6, 0x2, 0xc, 0x2e, 0x80000000000, 0x3}, 0x6f4) (async)
bpf$auto(0x2, &(0x7f00000001c0)=@raw_tracepoint={0x5, 0xffffffffffffffff, 0x0, 0x3}, 0xc)
r1 = socket(0xa, 0x2, 0x88) (async)
r2 = openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/cgroups\x00', 0x8080, 0x0)
lseek$auto(r2, 0x5, 0x0)
syz_genetlink_get_family_id$auto_ovs_ct_limit(&(0x7f0000000040), r1) (async)
sendmsg$auto_NETDEV_CMD_NAPI_GET(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000340)=ANY=[], 0x1c}}, 0x0) (async)
close_range$auto(0x2, 0x8, 0x0) (async)
read$auto_rfcomm_dlc_debugfs_fops_(0xffffffffffffffff, &(0x7f0000000080)=""/96, 0x60) (async)
r3 = socket$nl_generic(0x10, 0x3, 0x10) (async)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/virtual/mac80211_hwsim/hwsim0/ieee80211/phy0/rfkill2/index\x00', 0x41e9c1, 0x0) (async)
r4 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000001340), 0xffffffffffffffff)
openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000340)='/dev/v4l-subdev2\x00', 0x80000, 0x0) (async)
mmap$auto(0xfb39, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
ioctl$auto(0x3, 0xc0205647, 0x38) (async)
sendmsg$auto_HWSIM_CMD_NEW_RADIO(r3, &(0x7f0000001400)={0x0, 0x0, &(0x7f00000013c0)={&(0x7f0000001380)=ANY=[@ANYBLOB="18000000", @ANYRES16=r4, @ANYBLOB="01001fbd7000fcdbdf250400000004001000"], 0x18}, 0x1, 0x0, 0x0, 0x24040000}, 0x18800) (async)
syz_genetlink_get_family_id$auto_nfsd(0x0, 0xffffffffffffffff) (async)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
r5 = getsockopt$auto(0x6, 0x107, 0x14, 0x0, 0x0) (async)
timer_create$auto(0x8, &(0x7f0000000000)={@sival_int=0xccea, @inferred, 0x1}, &(0x7f0000000040)=0x200) (async)
timer_settime$auto(0x0, 0x8, &(0x7f0000000040)={{0x0, 0xd3}, {0x1002}}, &(0x7f0000000100)={{0xa04, 0x4}, {0x9000, 0x7ff}})
syz_genetlink_get_family_id$auto_nl80211(0x0, r5) (async)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x2004c0c0}, 0x24004801)

1m46.225299138s ago: executing program 34 (id=1093):
openat$auto_adf_hb_cfg_fops_adf_heartbeat_dbgfs(0xffffffffffffff9c, 0x0, 0x121c01, 0x0) (async)
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000)
close_range$auto(0x2, 0x8, 0x0) (async)
recvmmsg$auto(0x4, &(0x7f0000000200)={{0x0, 0x4, &(0x7f0000000140)={0x0, 0x4da}, 0x4, 0x0, 0x8, 0x800}, 0x1000}, 0xffffffff, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10) (async)
socket$nl_generic(0x10, 0x3, 0x10)
bpf$auto(0x0, &(0x7f0000000100)=@task_fd_query={0x9, 0x21e9, 0x7ff, 0x6, 0x2, 0xc, 0x2e, 0x80000000000, 0x3}, 0x6f4) (async)
bpf$auto(0x2, &(0x7f00000001c0)=@raw_tracepoint={0x5, 0xffffffffffffffff, 0x0, 0x3}, 0xc)
r1 = socket(0xa, 0x2, 0x88) (async)
r2 = openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/cgroups\x00', 0x8080, 0x0)
lseek$auto(r2, 0x5, 0x0)
syz_genetlink_get_family_id$auto_ovs_ct_limit(&(0x7f0000000040), r1) (async)
sendmsg$auto_NETDEV_CMD_NAPI_GET(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000340)=ANY=[], 0x1c}}, 0x0) (async)
close_range$auto(0x2, 0x8, 0x0) (async)
read$auto_rfcomm_dlc_debugfs_fops_(0xffffffffffffffff, &(0x7f0000000080)=""/96, 0x60) (async)
r3 = socket$nl_generic(0x10, 0x3, 0x10) (async)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/virtual/mac80211_hwsim/hwsim0/ieee80211/phy0/rfkill2/index\x00', 0x41e9c1, 0x0) (async)
r4 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000001340), 0xffffffffffffffff)
openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000340)='/dev/v4l-subdev2\x00', 0x80000, 0x0) (async)
mmap$auto(0xfb39, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
ioctl$auto(0x3, 0xc0205647, 0x38) (async)
sendmsg$auto_HWSIM_CMD_NEW_RADIO(r3, &(0x7f0000001400)={0x0, 0x0, &(0x7f00000013c0)={&(0x7f0000001380)=ANY=[@ANYBLOB="18000000", @ANYRES16=r4, @ANYBLOB="01001fbd7000fcdbdf250400000004001000"], 0x18}, 0x1, 0x0, 0x0, 0x24040000}, 0x18800) (async)
syz_genetlink_get_family_id$auto_nfsd(0x0, 0xffffffffffffffff) (async)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
r5 = getsockopt$auto(0x6, 0x107, 0x14, 0x0, 0x0) (async)
timer_create$auto(0x8, &(0x7f0000000000)={@sival_int=0xccea, @inferred, 0x1}, &(0x7f0000000040)=0x200) (async)
timer_settime$auto(0x0, 0x8, &(0x7f0000000040)={{0x0, 0xd3}, {0x1002}}, &(0x7f0000000100)={{0xa04, 0x4}, {0x9000, 0x7ff}})
syz_genetlink_get_family_id$auto_nl80211(0x0, r5) (async)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x2004c0c0}, 0x24004801)

11.366324131s ago: executing program 0 (id=1417):
mmap$auto(0x0, 0x5, 0x6, 0xeb1, 0xfffffffffffffffa, 0x8000)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000)
clock_getres$auto(0x0, &(0x7f0000000080)={0x6, 0x41})
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/system/clocksource/clocksource0/current_clocksource\x00', 0x8502, 0x0)
read$auto(r0, &(0x7f0000000000)='/sys/devices/system/clocksource/clocksource0/current_clocksource\x00', 0x2f6)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
removexattr$auto(0x0, 0x0)

10.150261538s ago: executing program 0 (id=1423):
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
pidfd_open$auto(0x1, 0x0)
openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/card1\x00', 0x2, 0x0)
socket(0x2, 0x3, 0xc8a84124)
socketpair$auto(0x1e, 0x1, 0x0, 0x0)
r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/pts/ptmx\x00', 0x0, 0x0)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
r1 = userfaultfd$auto(0x1)
statx$auto(r1, 0x0, 0x1000, 0x8, 0x0)
close_range$auto(0x2, 0x8, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket(0xa, 0x2, 0x88)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'team0\x00', <r4=>0x0})
bpf$auto(0x0, &(0x7f00000000c0)=@bpf_attr_5={@target_ifindex=r4, r3, 0x8, 0x1, r2, @relative_id=0x13, 0xe600}, 0xf)
r5 = open(0x0, 0x261c2, 0x84)
bpf$auto(0x2, &(0x7f00000001c0)=@raw_tracepoint={0x5, r5, 0x0, 0x3}, 0xc)
ioctl$auto_TIOCSETD2(r0, 0x5423, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
ioctl$auto_TCFLSH2(r0, 0x8926, 0xfdfd)

9.079388108s ago: executing program 0 (id=1426):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x0, 0x20009, 0xe3, 0x100000eb1, 0x40000000000a1, 0x8000)
io_uring_setup$auto(0x6, 0x0)
r1 = openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, &(0x7f00000002c0), 0x40000, 0x0)
ioctl$auto_DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, 0x0)
close_range$auto(0x2, 0x8, 0x0)
r2 = openat$auto_tracing_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/tracing/per_cpu/cpu1/trace\x00', 0x1c1900, 0x0)
mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000)
mmap$auto(0xfffffffffffffffd, 0x9, 0x3, 0x8012, 0x3, 0x8000)
sendfile$auto(0x6, 0x3, 0x0, 0x8000)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
unshare$auto(0x40000080)
writev$auto(0x1, &(0x7f0000000100)={0x0, 0x400000000000fdef}, 0x1)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, r0, 0x8000)
setsockopt$auto(0x3, 0x1, 0x20, 0x0, 0x9)
close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002)
mmap$auto(0xfffffffffffffffe, 0x8, 0x8003, 0xeb3, 0xfffffffffffffff9, 0x8000)
socket$nl_generic(0x10, 0x3, 0x10)
timer_create$auto(0x3, 0x0, &(0x7f0000000140)=0x6)
timer_settime$auto(0x0, 0xffff8000, 0x0, 0x0)
mmap$auto(0x0, 0x2020008, 0x3, 0xeb1, r2, 0x6)
madvise$auto(0x8c3a, 0x2, 0xf)
socket(0x2, 0xa, 0xa)
lsm_list_modules$auto(0x0, &(0x7f0000000100)=0xbefc, 0x0)
ioctl$auto(0x1, 0x89a0, 0x8)
read$auto(0x3, 0x0, 0x400000)
clone$auto(0x5, 0x2, &(0x7f0000000040)=0xe, &(0x7f0000000080)=0xb, 0x8)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
getcwd$auto(0x0, 0xffffffffffffffff)

7.095519471s ago: executing program 0 (id=1431):
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2)
r0 = openat$auto_proc_tid_children_operations_internal(0xffffffffffffff9c, &(0x7f0000000000), 0x82000, 0x0)
pread64$auto(r0, 0x0, 0x80000000, 0x3)
sysfs$auto(0x3, 0x10000000401048, 0x0)
r1 = fsopen$auto(0x0, 0x1)
close_range$auto(0x2, 0x8, 0x0)
r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000200)='/sys/devices/virtual/net/rose12/queues/rx-0/rps_cpus\x00', 0x20001, 0x0)
write$auto_kernfs_file_fops_kernfs_internal(r2, &(0x7f0000000040)='\t', 0x1)
r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x8c00, 0x0)
ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$auto(0x3, 0x8208ae63, r1)

5.111142938s ago: executing program 5 (id=1440):
syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/net\x00')
r0 = socket(0x18, 0x5, 0x1)
getsockname$auto(r0, 0x0, 0x0)
acct$auto(&(0x7f0000000040)='/sys/kernel/debug/netdevsim/netdevsim0/psample/latency_max\x00')

5.032002414s ago: executing program 0 (id=1441):
syz_genetlink_get_family_id$auto_ovs_vport(0x0, 0xffffffffffffffff)
madvise$auto(0x0, 0x2000040080000004, 0xe)
mlockall$auto(0x8000000000000001)
mmap$auto(0x0, 0x400005, 0xfffffffffffffffe, 0x9b72, 0x2, 0x8000)
unshare$auto(0x40000080)
r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x8c02, 0x0)
syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000080), 0xffffffffffffffff)
r1 = socket(0x11, 0x3, 0x9)
capset$auto(0x0, &(0x7f0000000000)={0x1, 0x7, 0x4a})
sendmmsg$auto(r1, &(0x7f00000001c0)={{&(0x7f0000000000), 0x5aa, &(0x7f0000000100)={&(0x7f0000000080), 0x49}, 0x5, &(0x7f0000000180), 0x5, 0x1000}, 0x5}, 0x2, 0x100)
ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$auto_proc_clear_refs_operations_internal(0xffffffffffffff9c, &(0x7f0000000600)='/proc/thread-self/clear_refs\x00', 0x2, 0x0)
r3 = socket(0x10, 0x2, 0x0)
mmap$auto(0x0, 0x5, 0x2, 0x40eb2, 0x401, 0x300000000000)
r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f000000fc00), 0x3, 0x0)
r5 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_ETHTOOL_MSG_MODULE_EEPROM_GET(r6, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000dc0)={0x3c, r5, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@ETHTOOL_A_MODULE_EEPROM_LENGTH={0x8, 0x3, 0x7}, @ETHTOOL_A_MODULE_EEPROM_OFFSET={0x8, 0x2, 0xf7}, @ETHTOOL_A_MODULE_EEPROM_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4004084}, 0x82)
ioctl$auto_KVM_CREATE_VM(r4, 0x4018aee2, 0x88)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$auto_smc_pnetid(&(0x7f00000021c0), r7)
sendmsg$auto_SMC_PNETID_GET(r7, &(0x7f0000002280)={0x0, 0x0, &(0x7f0000002240)={&(0x7f0000002200)={0x14, r8, 0x301, 0x70bd2a, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0)
shmget$auto(0xa, 0x10563, 0x568d1af2)
r9 = open(&(0x7f0000000480)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x91)
read$auto_proc_iter_file_ops_compat_inode(r9, &(0x7f0000000100)=""/106, 0x6a)
read$auto(r9, 0x0, 0x1)
read$auto_full_fops_mem(r9, &(0x7f0000000080)=""/124, 0x7c)
sendmsg$auto_NL80211_CMD_GET_REG(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200", @ANYBLOB=']'], 0x1ac}}, 0x40000)
recvmmsg$auto(r3, &(0x7f0000000140)={{0x0, 0x1, &(0x7f0000000080)={0x0, 0x400}, 0x5, 0x0, 0x200002, 0x8}, 0x803}, 0xfffffff9, 0x10, 0x0)
write$auto_proc_clear_refs_operations_internal(r2, 0x0, 0xffffff4b)

4.958310387s ago: executing program 6 (id=1442):
mmap$auto(0x0, 0x9, 0xdf, 0xc78, 0x4, 0x10000)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x3, 0x7)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_CTRL_CMD_GETPOLICY(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x4c, 0x0, 0x4, 0x70bd26, 0x25dfdbff, {}, [@CTRL_ATTR_OP={0x8, 0xa, 0xa}, @CTRL_ATTR_FAMILY_NAME={0x8, 0x2, '$].\x00'}, @CTRL_ATTR_FAMILY_NAME={0x6, 0x2, '\xac\x00'}, @CTRL_ATTR_OP={0x8, 0xa, 0x50d67031}, @CTRL_ATTR_FAMILY_ID={0x6, 0x1, 0x401}, @CTRL_ATTR_FAMILY_NAME={0x6, 0x2, '/\x00'}, @CTRL_ATTR_FAMILY_NAME={0x5, 0x2, '\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8040}, 0x50000)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
socket(0x2, 0x6, 0x0)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x31}}, 0x6a)
connect$auto(0x3, 0x0, 0x55)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x800008000)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
landlock_restrict_self$auto(0xffffffffffffffff, 0x3)
connect$auto(0x3, 0x0, 0x54)

4.854309296s ago: executing program 5 (id=1443):
r0 = socket(0xa, 0x3, 0x3a)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
ppoll$auto(&(0x7f00000000c0)={<r4=>r1, 0x7, 0x2f5}, 0xfffffff2, &(0x7f0000000100)={0x8, 0x5}, &(0x7f0000000140)={0x2}, 0x8)
openat$auto_ns_file_operations_nsfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/ns/cgroup\x00', 0x620002, 0x0)
r5 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f00000001c0), r3)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'netpci0\x00', <r6=>0x0})
r7 = socket(0x8, 0x2, 0x88)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'bond0\x00', <r9=>0x0})
bpf$auto(0x0, &(0x7f00000000c0)=@bpf_attr_5={@target_ifindex=r9, r8, 0x8, 0x1ff, r7, @relative_id=0x13, 0xe600}, 0x10)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'veth0\x00'})
r10 = socket$nl_generic(0x10, 0x3, 0x10)
r11 = syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$auto_OVS_DP_CMD_NEW(r10, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x28000040}, 0x10)
sendmsg$auto_OVS_DP_CMD_GET(r2, &(0x7f0000000400)={0xfffffffffffffffe, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)={0x3c, r11, 0xf22, 0x70bd2c, 0x25dfdbfb, {}, [@OVS_DP_ATTR_USER_FEATURES={0x8, 0x5, 0x612e}, @OVS_DP_ATTR_UPCALL_PID={0x8}, @OVS_DP_ATTR_USER_FEATURES={0x8, 0x5, 0x2}, @OVS_DP_ATTR_USER_FEATURES={0x8, 0x5, 0x8}, @OVS_DP_ATTR_UPCALL_PID={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x8850)
sendmsg$auto_ETHTOOL_MSG_RSS_GET(r4, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000280)={&(0x7f00000004c0)={0x84, r5, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@ETHTOOL_A_RSS_CONTEXT={0x8, 0x2, 0x9}, @ETHTOOL_A_RSS_HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0xfffffffffffffec2, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x0, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x0, 0x2, 'vlan0\x00'}]}, @ETHTOOL_A_RSS_START_CONTEXT={0x8, 0x7, 0x40}, @ETHTOOL_A_RSS_HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x4000}, 0x4008001)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
eventfd$auto(0x3)
eventfd$auto(0x0)
r12 = socket(0xa, 0x2, 0x88)
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
bpf$auto(0x0, &(0x7f0000000000)=@link_update={r12, @new_prog_fd=0x4, 0x4}, 0xa3)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
sysfs$auto(0x2, 0x10000000000000e, 0x0)
fsopen$auto(0x0, 0x1)
close_range$auto(0x2, 0x8, 0x0)

4.476312001s ago: executing program 3 (id=1444):
r0 = openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, &(0x7f0000000180), 0x220000, 0x0)
ioctl$auto_USB_RAW_IOCTL_EP0_STALL(r0, 0x550c, 0x0)
mmap$auto(0x4000000000d, 0x400008, 0x10000000df, 0x9b72, r0, 0x8000)
r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000440)='/sys/devices/virtual/net/bond0/bonding/primary_reselect\x00', 0x101000, 0x0)
read$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f0000000100)=""/45, 0x2d)
r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS1\x00', 0x20400, 0x0)
ioctl$auto_TIOCSWINSZ2(r2, 0x5414, 0x0)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_seg6(0x0, 0xffffffffffffffff)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/ptp/ptp0/max_vclocks\x00', 0xa100, 0x0)
mprotect$auto(0x1ffff000, 0x8000000000000001, 0xd)
openat$auto_urandom_fops_random(0xffffffffffffff9c, &(0x7f0000000140), 0x341241, 0x0)
acct$auto(&(0x7f0000000000)='}\x00')
msgget$auto(0x0, 0xfffffffa)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
close_range$auto(r2, 0x8, 0x0)
socket(0xa, 0x801, 0x84)
r4 = io_uring_setup$auto(0x6, 0x0)
mmap$auto(0x0, 0x9, 0xffb, 0x8000000008011, 0x3, 0x0)
move_pages$auto(0x0, 0x1002, 0x0, 0x0, 0x0, 0x2)
socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0)
io_uring_enter$auto(r3, 0xfffffffe, 0x1, 0xa, 0x0, 0x10000)
io_uring_enter$auto(0x3, 0x6b, 0x82400001, 0xe, 0x0, 0x6)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
fdatasync$auto(r4)
syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$auto_TIPC_NL_PEER_REMOVE(0xffffffffffffffff, &(0x7f00000110c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20008105}, 0x40)

4.406614982s ago: executing program 5 (id=1445):
socket$nl_generic(0x10, 0x3, 0x10) (async)
close_range$auto(0x2, 0x8000, 0x0) (async, rerun: 64)
socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64)
socket(0x10, 0x2, 0x15) (async)
r0 = getpgid(0x0)
pidfd_open$auto(r0, 0x0)
r1 = openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/extfrag/unusable_index\x00', 0x103180, 0x0)
ioctl$auto_PROCMAP_QUERY(r1, 0xc0686611, &(0x7f0000000340)={0x68, 0x6, 0x4, 0x2000000000001, 0x20000000008, 0x1, 0x20, 0x6, 0x5, 0x200, 0xfffffffe, 0xc, 0x1000, 0x4, 0x9}) (async, rerun: 32)
socket(0x2, 0x1, 0x10) (async, rerun: 32)
write$auto(0x3, 0x0, 0xfffffdef) (async)
socket(0x2, 0x1, 0x106) (async)
r2 = fcntl$auto(0x3, 0x4, 0xa553) (async, rerun: 64)
sendmsg$auto_WG_CMD_GET_DEVICE(0xffffffffffffffff, 0x0, 0x2000c041) (async, rerun: 64)
r3 = io_uring_setup$auto(0x85, 0x0)
mmap$auto(0x0, 0x5, 0x2, 0x40eb2, 0x401, 0x300000000000) (async)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) (async)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x800008000) (async, rerun: 64)
madvise$auto(0x0, 0xffffffffffff0001, 0x15) (async, rerun: 64)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async)
signalfd$auto(0xffffffffffffffff, 0x0, 0x4) (async)
mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) (async)
close_range$auto(0x2, 0x8, 0x0)
socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) (async)
close_range$auto(0xffffffffffffffff, r2, 0x0) (async)
socket(0xa, 0x5, 0x0) (async, rerun: 32)
r4 = socket(0xa, 0x801, 0x84) (rerun: 32)
setsockopt$auto(0x3, 0x10000000084, 0x7b, 0x0, 0xd) (async)
connect$auto(r4, 0x0, 0x80000000) (async)
close_range$auto(0x2, 0x8000, 0x0) (async)
process_mrelease$auto(r3, 0x1fa)

4.026806014s ago: executing program 5 (id=1446):
r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mtdblock0\x00', 0x14f602, 0x0)
io_uring_setup$auto(0x80000000, &(0x7f0000000080)={0x9, 0x5, 0xff, 0x206, 0x0, 0x667, r0, [0x80, 0xb77d, 0x304000], {0x9, 0x7, 0xb, 0x0, 0x1, 0x0, 0xd02, 0x401, 0x40000000000000}, {0xa, 0x8, 0x4, 0x42, 0x9, 0x10fa, 0xc, 0x9, 0x1e}})
mmap$auto(0x0, 0x810004, 0x8, 0x8000000008011, 0x3, 0x8000)
r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop0\x00', 0xaa461, 0x0)
openat$auto_proc_mountinfo_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/mountinfo\x00', 0xe0000, 0x0)
syz_clone(0x80000000, &(0x7f0000000000)="085a1056b6aa2f10d8ddee0633aea682a5ff", 0x12, 0x0, 0x0, 0x0)
mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000)
clock_nanosleep$auto(0x0, 0x7, &(0x7f0000000180)={0x8000000000000000}, 0x0)
io_uring_setup$auto(0x6, 0x0)
open(&(0x7f0000000240)='./file0\x00', 0x0, 0x93)
r2 = socket(0x10, 0x2, 0xa)
setsockopt$auto(r2, 0x104000000000010e, 0x1, 0x0, 0x16)
r3 = socket(0x10, 0x2, 0x4)
sendmsg$auto_NFSD_CMD_THREADS_SET(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000001400c72da808bf8d5feacf8510"], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x400c001)
write$auto(r3, &(0x7f0000000000)='-\x00', 0x2fb)
ioctl$auto_SG_GET_RESERVED_SIZE(r1, 0x127b, 0x0)
openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000180), 0x8000, 0x0)
clone$auto(0x8, 0xffffffffffffffff, &(0x7f00000001c0)=0x568, &(0x7f0000000200)=0xffffffff, 0x1e)
openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000000280), 0x40, 0x0)

4.024211594s ago: executing program 3 (id=1454):
mount$auto(0x0, &(0x7f0000000280)=':,\x00', 0x0, 0x1000, 0x0)
mknod$auto(0x0, 0xcb, 0xfffffffa)
r0 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, 0x0, 0x40002, 0x0)
write$auto_vhost_net_fops_net(r0, 0x0, 0x0)
execve$auto(0x0, 0x0, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
r1 = socket(0x1d, 0x3, 0x1)
getsockname$auto(r1, 0x0, 0x0)
unshare$auto(0x40000080)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f00000022c0), 0xffffffffffffffff)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
sysfs$auto(0x2, 0x4, 0x0)
utimes$auto(0x0, 0x0)
sendmsg$auto_ETHTOOL_MSG_PLCA_GET_STATUS(r2, &(0x7f00000023c0)={0x0, 0x0, &(0x7f0000002380)={&(0x7f0000002300)={0x2c, r3, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [@ETHTOOL_A_PLCA_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}]}]}, 0x2c}, 0x1, 0x300, 0x0, 0x408d1}, 0x0)
r4 = open_by_handle_at$auto(0xffffffffffffffff, &(0x7f0000000000)={0x9, 0x6, "37d65af62aab3c3b6d"}, 0x8001)
sendmsg$auto_IEEE802154_LLSEC_DEL_DEVKEY(r4, 0x0, 0x20000000)
ioctl$auto(0x3, 0x4b72, 0x34)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000080), 0xffffffffffffffff)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r8=>0x0})
unshare$auto(0x3)
sendmsg$auto_NL80211_CMD_STOP_SCHED_SCAN(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="010023bdb9d671ece4e5390c000008000300", @ANYRES32=r8], 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x20040084)
mprotect$auto(0x1ffff000, 0x8000000000000001, 0xd)
sendmsg$auto_NL80211_CMD_SET_TID_CONFIG(r5, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x4044000)
socketpair$auto(0x9, 0x2, 0x4, &(0x7f0000000040))
sendmsg$auto_ETHTOOL_MSG_PAUSE_GET(r2, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x60, r3, 0x20, 0x70bd2b, 0x25dfdbfb, {}, [@ETHTOOL_A_PAUSE_HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x40080}, 0x8800)
openat$auto_dvb_dvr_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)

3.654172318s ago: executing program 6 (id=1447):
openat$auto_lockdown_ops_lockdown(0xffffffffffffff9c, &(0x7f0000000000), 0x20682, 0x0)
write$auto(0x3, 0x0, 0x7fffffff)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x60742, 0x0)
r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000080))
fstat$auto(r0, 0x0)
ioctl$auto(0x3, 0x40081271, 0x38)
write$auto(0x3, 0x0, 0x5c8)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000740), 0xffffffffffffffff)
ioctl$auto(0xc8, 0x400454d0, 0x6f)
mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000)
io_uring_setup$auto(0x6, 0x0)
close_range$auto(0x2, 0x8, 0x0)
open(0x0, 0x22240, 0x55)
socket(0x2, 0x3, 0xa)
setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x8)
connect$auto(0x3, &(0x7f00000018c0)=@l2tp={0x2, 0x0, @loopback, 0xfffffffd}, 0x55)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x5}, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'netdevsim0\x00', <r3=>0x0})
sendmsg$auto_ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000300)={0x30, r2, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [@ETHTOOL_A_COALESCE_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @ETHTOOL_A_COALESCE_TX_USECS_HIGH={0x8, 0x15, 0x2}, @ETHTOOL_A_COALESCE_RX_USECS_LOW={0x8, 0xe, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x40805}, 0x4000)
write$auto(0x3, 0x0, 0x7fffffff)
write$auto(0x3, 0x0, 0xfdec)

3.22108249s ago: executing program 5 (id=1448):
r0 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/003/001\x00', 0x98b83, 0x0)
finit_module$auto(0x3, 0xfffffffffffffffe, 0x2)
ioctl$auto(0x3, 0x8008551c, r0)

2.779780226s ago: executing program 3 (id=1449):
r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/conf/hsr_slave_0/proxy_arp_pvlan\x00', 0x80202, 0x0)
sendfile$auto(r0, 0x3, 0x0, 0x400000000008)
mmap$auto(0x0, 0x400009, 0xdf, 0x7f9, r0, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
mmap$auto(0x4, 0x2, 0x339a, 0xeb1, 0x401, 0x10000000008000)
openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio1\x00', 0x121000, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
socket(0xa, 0x801, 0x84)
socket(0x2, 0x801, 0x106)
socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0)
socket(0xa, 0x2, 0x0)
socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0)
socket(0xa, 0x801, 0x84)
socket(0xa, 0x2, 0x3a)
io_uring_setup$auto(0x6, 0x0)
r2 = socket(0xa, 0x2, 0x88)
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
bpf$auto(0x0, &(0x7f0000000000)=@link_update={r2, @new_prog_fd=0x4, 0x4, @old_prog_fd=r1}, 0xa3)
bpf$auto(0x1, &(0x7f0000000040)=@query={@target_ifindex, 0x4, 0x7, 0x9, 0x7f, @prog_cnt=0x4, 0x0, 0x80000000, 0xc, 0xb, 0x5}, 0x7)
socket(0x2, 0x80002, 0x73)
socket(0xa, 0x1, 0x84)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54)
setsockopt$auto(0x3, 0x10000000084, 0x79, 0x0, 0x8)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
socket(0x2, 0x1, 0x0)
bind$auto(0x3, 0x0, 0x6a)
socket(0x18, 0x5, 0x2)
unshare$auto(0x40000080)
io_uring_setup$auto(0xfffffffb, 0x0)

2.762073253s ago: executing program 6 (id=1450):
r0 = bpf$auto(0x3, &(0x7f00000001c0)=@raw_tracepoint={0x5, 0xffff, 0x0, 0x3}, 0xc)
modify_ldt$auto(0x1, &(0x7f0000000000)="fc2355752e18bcdeeb5e2eb6a6a5d3ddba8c3d2a24e7782c52acb5074dcbc79e947682352401fb720c7bd97eb282e9a33927e51697410f6557c7791871bc83a159af1d983992e96d013227dbda3268e7f2407c0c96d2135edec5585d0e02e279c547a25b2ebe54cfba02e95840a9a5f30bbddfab2612e85234490135da84607b17405a8965d8f792b046882da6e936f1cb57d4e5ad622c40791b10ee69e89cc287a4a22e872d5c9ba65a271f1bed8e0e1c18481fd10407dceb9e4819aad139786151b0f94222adc3cdd4", 0x10)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
close_range$auto(0x2, 0x8, 0x0) (async, rerun: 32)
mmap$auto(0x9, 0x3, 0x80000003, 0x4eb1, r0, 0x8000) (rerun: 32)
r1 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
syz_genetlink_get_family_id$auto_ovs_meter(&(0x7f0000000140), r1) (async)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
socket(0xa, 0x2, 0x0)
socket(0xa, 0x5, 0xdffc) (async, rerun: 32)
socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32)
socket$nl_generic(0x10, 0x3, 0x10) (async)
socket(0x18, 0x4, 0x1) (async)
setsockopt$auto(0x7, 0x111, 0x100006, 0x0, 0x8) (async)
close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002)
open(&(0x7f0000000100)='.\x00', 0x0, 0x408) (async)
getdents64$auto(0x0, 0x0, 0x41) (async)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0xa, 0x2, 0x0)
connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "ab06fdffff00fff500"}, 0x55) (async, rerun: 64)
getsockopt$auto(0x3, 0x0, 0xe, 0x0, 0x0) (rerun: 64)

2.665427254s ago: executing program 5 (id=1451):
r0 = openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x1000, 0x0)
mmap$auto_tracing_buffers_fops_trace(&(0x7f0000ffc000/0x4000)=nil, 0x401f, 0x1, 0x8e051, r0, 0x0)
bpf$auto(0xd, 0x0, 0x6f5)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
init_module$auto(0x0, 0xffff9, 0x0)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
madvise$auto(0x0, 0x8000000000000000, 0x15)
madvise$auto(0x0, 0x2000000080000001, 0x3)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
capget$auto(0x0, 0xfffffffffffffffe)
capset$auto(0x0, 0x0)
openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x80, 0x0)
move_mount$auto(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x91e4)
madvise$auto(0x0, 0xffffffffffff0005, 0x17)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
r1 = socket(0x11, 0x3, 0x9)
capset$auto(0x0, &(0x7f0000000000)={0x1, 0xd, 0x8})
sendmmsg$auto(r1, &(0x7f00000001c0)={{&(0x7f0000000000), 0x5aa, &(0x7f0000000100)={&(0x7f0000000080), 0x49}, 0x4, &(0x7f0000000180), 0x5, 0x1000}, 0x5}, 0x2, 0x100)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
r2 = socket(0x10, 0x2, 0x0)
statmount$auto(0x0, 0x0, 0x1fe, 0xd)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x40000)
sendmmsg$auto(r2, 0x0, 0x7, 0x4008)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
move_mount$auto(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x91e4)
mmap$auto(0x0, 0x200003, 0x4000000000df, 0x40eb2, 0x402, 0x300000000000)

1.971250447s ago: executing program 6 (id=1452):
mmap$auto(0x0, 0xa, 0xdb, 0x9b72, 0x5, 0x8000) (async)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xfffffffffffffffe, 0x8000) (async)
fcntl$auto(0x8000000000000001, 0x5, 0x8) (async)
clock_nanosleep$auto(0x2, 0x1000, 0x0, 0x0) (async)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x5, 0x8000)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
rename$auto(0x0, 0x0)
socketpair$auto(0x1, 0x5, 0x8000000000000000, 0xffffffffffffffff)

1.844145109s ago: executing program 3 (id=1453):
bpf$auto(0x0, &(0x7f00000001c0)=@task_fd_query={0x9, 0x21eb, 0x7ff, 0x6, 0xa, 0x1000009, 0x5f, 0x0, 0x3}, 0x6f3)
sendmmsg$auto(0x3, &(0x7f0000000000)={{0x0, 0x2, 0x0, 0x106, 0x0, 0x1, 0x3}, 0xed7138c}, 0x7, 0x0)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
pidfd_open$auto(0x1, 0x0)
mmap$auto(0x0, 0x401, 0xdf, 0x9b72, 0x2, 0x8000)
futex$auto(0x0, 0x6, 0x47, 0x0, 0x0, 0x0)
umount2$auto(&(0x7f0000000000)='($\\\x00', 0x80000001)
umount2$auto(0x0, 0x3)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_l2tp(0x0, r0)
syz_genetlink_get_family_id$auto_l2tp(&(0x7f00000000c0), 0xffffffffffffffff)
syz_genetlink_get_family_id$auto_nl80211(0x0, r0)
openat$auto_event_inject_fops_trace(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/tracing/events/vmalloc/free_vmap_area_noflush/inject\x00', 0x81, 0x0)
sendmsg$auto_NL80211_CMD_JOIN_IBSS(r0, 0x0, 0x4000054)
umount2$auto(0x0, 0x2)
openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000b40), 0x101000, 0x0)
r1 = syz_genetlink_get_family_id$auto_tcp_metrics(&(0x7f0000000c00), r0)
sendmsg$auto_TCP_METRICS_CMD_DEL(r0, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000c40)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010929bd7000fbb76ba66bf05ea92cd33ef4199f3423"], 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x40)
unshare$auto(0x200)
r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/mnt\x00')
setns(r2, 0x0)
syz_clone(0x98280000, 0x0, 0x0, 0x0, 0x0, 0x0)
madvise$auto(0x10000, 0x7, 0xc)
futex$auto(0x0, 0x7, 0x9, 0x0, 0x0, 0x80000001)
socket(0x10, 0x2, 0x0)
pipe$auto(0x0)
open(0x0, 0x22240, 0x155)

1.512251898s ago: executing program 6 (id=1455):
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
set_mempolicy$auto(0x3, &(0x7f0000000000)=0x7e, 0x4)
mmap$auto(0x0, 0x8, 0x4000000000df, 0x44eb1, 0x6, 0x300000000000)
mremap$auto(0x0, 0x7, 0x3fd6, 0x3, 0x20000000)
connect$auto(0xffffffffffffffff, &(0x7f0000000080), 0x9)
mbind$auto(0x0, 0x100000004, 0x100000000, 0x0, 0x6, 0x8)

1.426627647s ago: executing program 3 (id=1456):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
socket(0x22, 0x0, 0xfcf)
r2 = socket(0x10, 0x2, 0xc)
sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="18000043", @ANYRESDEC=r0, @ANYBLOB="91", @ANYRES8=r1], 0x18}, 0x1, 0x0, 0x0, 0x60008004}, 0x80)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
socket(0x10, 0x3, 0x1)
r3 = socket(0x27, 0x2, 0x801)
socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0)
clock_gettime$auto(0x1, 0x0)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x9fe)
poll$auto(0x0, 0x9, 0x1)
socket(0x21, 0x800, 0x3a)
mmap$auto(0xa, 0x2000d, 0x4000000000df, 0xeb1, r3, 0x8000)
r4 = userfaultfd$auto(0x1)
statx$auto(r4, 0x0, 0x7, 0xfffffffa, 0x0)
keyctl$auto(0x4, 0xffffffffffffffff, 0x5, 0x800, 0xa)
keyctl$auto(0x6, 0x0, 0x8, 0x0, 0x2)
setsockopt$auto(r3, 0x1, 0x400014, 0x0, 0x56b)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
mmap$auto(0xfffffffffffffffd, 0xfa, 0xdb, 0x80012, r2, 0x8)
setfsgid$auto(0x9)
mknod$auto(&(0x7f0000000040)='\xfd\x90\x8f2\x14\x92\x00\xbf\xdf\xcf\x9a\xae}\xd9\xf95\xc5gV\x82\f\xe5h\xfe\x83\xe4\xbe\x8c\x1f\xa5\xf1_T\xde\xf7\xd4\x83D\x9eXS\xd6\x90T\xc1v\xad#\xc4q\x8b\xed2\xadW:0\xef\x9c.=\xba\x0fy\x8f\xcd\xd6\xde\xa9i\xec\xe8\xca\x9f\xf3\x82b\xa2y\xa87J\xfc \xc5\xd8\x80\xba\xaaV\x8f{\x1f\x1b\xb0\n\x97\\\xa7\xe3\xdf\xc29-*;#r\xc8\xd1\x14RcF\x87\xe4\x1c\x1fGL\xa5\x19\x90\xd6\x8d*\xe6\b(\x1a\xea\x95\xdc\xa6)5\xae&yAl\x1e\xe3j Lp\x91\r\xed%\xafZ\xf8w\xf2}\xcdGS\xce\xb9\xdck\x86\x00.6\xe6{\xc1\x00\x1bW5\x81\xda!\xcb.O\xa9\xf3\xa7\x88+\xb9\xf3\x9a7\xa4\xe6)<\xa79\xa4\x87\\\xb4\xbf\v\x03\x87\xac\x87r\x02\x05\xdb\xe4\xde,V\xb6G\xba.WR\xe2<~\xdd\xb2\xe53hj_;\xa5qm\x92\xc7P\xc9.\x82w8\x1f\xfcX\xe4\x14\xc72cC\xd3\x00'/263, 0x1, 0x4)
lstat$auto(&(0x7f00000001c0)='\xfd\x90\x8f2\x14\x92\x00\xbf\xdf\xcf\x9a\xae}\xd9\xf95\xc5gV\x82\f\xe5h\xfe\x83\xe4\xbe\x8c\x1f\xa5\xf1_T\xde\xf7\xd4\x83D\x9eXS\xd6\x90T\xc1v\xad#\xc4q\x8b\xed2\xadW:0\xef\x9c.=\xba\x0fy\x8f\xcd\xd6\xde\xa9i\xec\xe8\xca\x9f\xf3\x82b\xa2y\xa87J\xfc \xc5\xd8\x80\xba\xaaV\x8f{\x1f\x1b\xb0\n\x97\\\xa7\xe3\xdf\xc29-*;#r\xc8\xd1\x14RcF\x87\xe4\x1c\x1fGL\xa5\x19\x90\xd6\x8d*\xe6\b(\x1a\xea\x95\xdc\xa6)5\xae&yAl\x1e\xe3j Lp\x91\r\xed%\xafZ\xf8w\xf2}\xcdGS\xce\xb9\xdck\x86\x00.6\xe6{\xc1\x00\x1bW5\x81\xda!\xcb.O\xa9\xf3\xa7\x88+\xb9\xf3\x9a7\xa4\xe6)<\xa79\xa4\x87\\\xb4\xbf\v\x03\x87\xac\x87r\x02\x05\xdb\xe4\xde,V\xb6G\xba.WR\xe2<~\xdd\xb2\xe53hj_;\xa5qm\x92\xc7P\xc9.\x82w8\x1f\xfcX\xe4\x14\xc72cC\xd3\x00', 0x0)
close_range$auto(0x2, 0x8, 0x0)
socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0)
r5 = socket(0x23, 0x3, 0x40002)
ioctl$sock_SIOCGIFINDEX(r5, 0x8953, 0x0)

952.830105ms ago: executing program 3 (id=1457):
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$auto(0x0, &(0x7f00000001c0)=@task_fd_query={0x2, 0x4, 0x3, 0x2, 0x5, 0xc, 0xe3, 0x400000000a, 0x3}, 0x6f4)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
init_module$auto(0x0, 0xffff9, &(0x7f0000000280)='/sys/devices/platform/dummy_hcd.6/usb7/power/wakeep_active_count\x00?\x1cAO\xed\xb9\x86\xea\x82\x12s\x9a\x0e\xbb.\xac\\\x9a\xa3\x82\xa8\x00vkGg\x80\x80Q\x05h\xa5`\xc1\xc35\xf3P\x1e\xdbQ\xa4\xa3\xb96\x9d\x1f\x19V\xf1\xad\xd1\x1e.\x87\xad.\x02\f\f\xfb\xf5%\x10\xc0M1\xfd\x80\xdbSe\x05\x18/H\xd50\x1d\x89\xdapm~\xd0\x93\xdf\x9e\xf4\xae\xb0\x17f\x1e\xe8\xa2Y\xaaWR\xca\xf1_\xc4~\xcc\x12Io\xc0\xd0\x87\xf1\xb1\xc1\x04\x8d\xad\xc1g%\xc6\xc4\xd18\xb73\xb5\xe4\xdc\xd6QL\x92\xe1m\x8bFj\x11\x8d\xa8\x9e)oD\x7f\x10&\xcc\xf2\xe5\x83#%\xc2\x0e\x9eG\v\xe5n\x12\xf3\xfa6\xe33\xda\xa6Bz\xa4')
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
madvise$auto(0x0, 0x2000000080000001, 0x3)
ioperm$auto(0x7, 0x6, 0x2)
ioperm$auto(0x162, 0x6, 0xfffffff2)
munmap$auto(0x1000000, 0x2000000c)
madvise$auto(0x0, 0xffffffffffff0001, 0x9)
mlockall$auto(0x3)
socket(0x2000000000000021, 0x2, 0x10000000000002)
mprotect$auto(0x1ffff000, 0x8000000000000001, 0xd)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, 0x0, 0x80000000, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0)
capget$auto(0x0, 0xfffffffffffffffe)
capset$auto(0x0, &(0x7f0000000000)={0x3, 0x7, 0x8})
read$auto_proc_iter_file_ops_compat_inode(0xffffffffffffffff, &(0x7f0000000040)=""/142, 0x8e)
mmap$auto(0xc, 0x200006, 0x1, 0x11, 0x602, 0x4)
madvise$auto(0x0, 0xffffffffffff0005, 0x17)
mmap$auto(0x7, 0x40000a, 0x3, 0x15, r0, 0x8001)

642.481855ms ago: executing program 6 (id=1458):
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket(0xa, 0x2, 0x0)
syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000240), 0xffffffffffffffff)
r1 = openat$auto_udmabuf_fops_udmabuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x202000, 0x0)
r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/dvb_as102/parameters/adapter_nr\x00', 0x60200, 0x0)
read$auto_kernfs_file_fops_kernfs_internal(r2, &(0x7f0000000140)=""/248, 0xf8)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)={0x14, 0x0, 0xd0d58b333228212f, 0x78bd2a, 0x25dfdbfd}, 0x14}}, 0x4000000)
mmap$auto(0x8000000, 0x5, 0x72, 0x8b72, 0x2, 0x8000)
r4 = pipe2$auto(&(0x7f0000000040)=r3, 0xffffffff)
sendmsg$auto_NL80211_CMD_DISASSOCIATE(r4, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000140)={0x0}}, 0x0)
r5 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0)
r6 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D2\x00', 0x2081, 0x0)
write$auto(r6, &(0x7f0000000400)='/dev/audio1\x00', 0xa3d9)
sendmsg$auto_GTP_CMD_GETPDP(0xffffffffffffffff, 0x0, 0x240018d0)
mprotect$auto(0x1ffff000, 0x8000000000000001, 0x0)
r7 = socket(0x10, 0x800, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(r7, 0x0, 0x40000)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
read$auto(0xffffffffffffffff, 0x0, 0x71d)
openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/009/001\x00', 0xa101, 0x0)
setsockopt$auto(r5, 0x0, 0x14, 0x0, 0x0)
r8 = getsid$auto(0x0)
rt_sigqueueinfo$auto(r8, 0x8, &(0x7f0000000340)={@_si_pad})
madvise$auto(0x0, 0xffffffffffff0005, 0x66)
prctl$auto(0x43, 0x17, 0x0, 0x0, 0x0)
prctl$auto(0x43, 0x40000, r8, 0x0, 0x4)
pread64$auto(0xffffffffffffffff, 0x0, 0x1, 0xfffffffffffffe01)
fspick$auto(r4, &(0x7f0000000200)='./file0\x00', 0xd05)
ioctl$auto_UDMABUF_CREATE(r1, 0x40187542, &(0x7f0000000100)={r0, 0x8, 0xc7, 0x7})

0s ago: executing program 0 (id=1459):
mount$auto(0x0, &(0x7f0000000280)=':,\x00', 0x0, 0x1000, 0x0)
mknod$auto(0x0, 0xcb, 0xfffffffa)
r0 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, 0x0, 0x40002, 0x0)
write$auto_vhost_net_fops_net(r0, 0x0, 0x0)
execve$auto(0x0, 0x0, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
r1 = socket(0x1d, 0x3, 0x1)
getsockname$auto(r1, 0x0, 0x0)
unshare$auto(0x40000080)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f00000022c0), 0xffffffffffffffff)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
sysfs$auto(0x2, 0x4, 0x0)
utimes$auto(0x0, 0x0)
sendmsg$auto_ETHTOOL_MSG_PLCA_GET_STATUS(r2, &(0x7f00000023c0)={0x0, 0x0, &(0x7f0000002380)={&(0x7f0000002300)={0x2c, r3, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [@ETHTOOL_A_PLCA_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}]}]}, 0x2c}, 0x1, 0x300, 0x0, 0x408d1}, 0x0)
r4 = open_by_handle_at$auto(0xffffffffffffffff, &(0x7f0000000000)={0x9, 0x6, "37d65af62aab3c3b6d"}, 0x8001)
sendmsg$auto_IEEE802154_LLSEC_DEL_DEVKEY(r4, 0x0, 0x20000000)
ioctl$auto(0x3, 0x4b72, 0x34)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000080), 0xffffffffffffffff)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r8=>0x0})
unshare$auto(0x3)
sendmsg$auto_NL80211_CMD_STOP_SCHED_SCAN(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="010023bdb9d671ece4e5390c000008000300", @ANYRES32=r8], 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x20040084)
mprotect$auto(0x1ffff000, 0x8000000000000001, 0xd)
sendmsg$auto_NL80211_CMD_SET_TID_CONFIG(r5, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x4044000)
socketpair$auto(0x9, 0x2, 0x4, &(0x7f0000000040))
sendmsg$auto_ETHTOOL_MSG_PAUSE_GET(r2, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x60, r3, 0x20, 0x70bd2b, 0x25dfdbfb, {}, [@ETHTOOL_A_PAUSE_HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x40080}, 0x8800)
openat$auto_dvb_dvr_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.0.189' (ED25519) to the list of known hosts.
[   85.393304][ T5827] cgroup: Unknown subsys name 'net'
[   85.556706][ T5827] cgroup: Unknown subsys name 'cpuset'
[   85.565308][ T5827] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   87.255363][ T5827] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   89.253861][ T5848] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   89.255518][ T5847] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   89.264633][ T5848] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   89.269974][ T5847] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   89.276682][ T5848] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   89.284333][ T5847] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   89.292557][ T5852] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   89.298229][ T5847] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   89.305134][ T5852] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   89.312848][ T5847] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   89.318523][ T5852] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   89.333062][ T5852] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   89.340877][ T5852] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   89.348500][ T5852] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   89.355982][ T5852] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[   89.363834][ T5852] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   89.368434][ T5847] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   89.378936][ T5847] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[   89.383427][ T5852] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   89.389790][ T5847] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   89.412579][ T5147] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[   89.425150][ T5147] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   89.428205][ T5851] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[   89.443799][ T5847] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   89.791077][ T5836] chnl_net:caif_netlink_parms(): no params data found
[   89.865063][ T5838] chnl_net:caif_netlink_parms(): no params data found
[   89.950496][ T5837] chnl_net:caif_netlink_parms(): no params data found
[   89.987048][ T5836] bridge0: port 1(bridge_slave_0) entered blocking state
[   89.995375][ T5836] bridge0: port 1(bridge_slave_0) entered disabled state
[   90.003359][ T5836] bridge_slave_0: entered allmulticast mode
[   90.010727][ T5836] bridge_slave_0: entered promiscuous mode
[   90.021055][ T5836] bridge0: port 2(bridge_slave_1) entered blocking state
[   90.028618][ T5836] bridge0: port 2(bridge_slave_1) entered disabled state
[   90.035958][ T5836] bridge_slave_1: entered allmulticast mode
[   90.043378][ T5836] bridge_slave_1: entered promiscuous mode
[   90.114807][ T5839] chnl_net:caif_netlink_parms(): no params data found
[   90.140810][ T5836] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   90.155674][ T5836] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   90.224753][ T5838] bridge0: port 1(bridge_slave_0) entered blocking state
[   90.232865][ T5838] bridge0: port 1(bridge_slave_0) entered disabled state
[   90.240051][ T5838] bridge_slave_0: entered allmulticast mode
[   90.247621][ T5838] bridge_slave_0: entered promiscuous mode
[   90.280136][ T5836] team0: Port device team_slave_0 added
[   90.290427][ T5836] team0: Port device team_slave_1 added
[   90.296704][ T5837] bridge0: port 1(bridge_slave_0) entered blocking state
[   90.304413][ T5837] bridge0: port 1(bridge_slave_0) entered disabled state
[   90.311601][ T5837] bridge_slave_0: entered allmulticast mode
[   90.319346][ T5837] bridge_slave_0: entered promiscuous mode
[   90.327016][ T5838] bridge0: port 2(bridge_slave_1) entered blocking state
[   90.334538][ T5838] bridge0: port 2(bridge_slave_1) entered disabled state
[   90.341743][ T5838] bridge_slave_1: entered allmulticast mode
[   90.348754][ T5838] bridge_slave_1: entered promiscuous mode
[   90.378488][ T5837] bridge0: port 2(bridge_slave_1) entered blocking state
[   90.389276][ T5837] bridge0: port 2(bridge_slave_1) entered disabled state
[   90.396768][ T5837] bridge_slave_1: entered allmulticast mode
[   90.404336][ T5837] bridge_slave_1: entered promiscuous mode
[   90.443887][ T5838] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   90.466249][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_0
[   90.474003][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   90.500112][ T5836] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   90.521135][ T5838] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   90.548515][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_1
[   90.555788][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   90.581982][ T5836] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   90.610902][ T5837] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   90.623622][ T5837] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   90.642554][ T5839] bridge0: port 1(bridge_slave_0) entered blocking state
[   90.649741][ T5839] bridge0: port 1(bridge_slave_0) entered disabled state
[   90.657372][ T5839] bridge_slave_0: entered allmulticast mode
[   90.664634][ T5839] bridge_slave_0: entered promiscuous mode
[   90.673182][ T5839] bridge0: port 2(bridge_slave_1) entered blocking state
[   90.680298][ T5839] bridge0: port 2(bridge_slave_1) entered disabled state
[   90.687612][ T5839] bridge_slave_1: entered allmulticast mode
[   90.695125][ T5839] bridge_slave_1: entered promiscuous mode
[   90.722272][ T5838] team0: Port device team_slave_0 added
[   90.740253][ T5836] hsr_slave_0: entered promiscuous mode
[   90.746838][ T5836] hsr_slave_1: entered promiscuous mode
[   90.766439][ T5838] team0: Port device team_slave_1 added
[   90.797963][ T5837] team0: Port device team_slave_0 added
[   90.808287][ T5837] team0: Port device team_slave_1 added
[   90.835338][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_0
[   90.842382][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   90.868863][ T5838] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   90.884013][ T5839] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   90.896408][ T5839] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   90.915156][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_1
[   90.922322][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   90.951478][ T5838] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   91.008024][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_0
[   91.015469][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   91.041932][ T5837] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   91.055358][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_1
[   91.062478][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   91.088700][ T5837] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   91.116601][ T5839] team0: Port device team_slave_0 added
[   91.125887][ T5839] team0: Port device team_slave_1 added
[   91.189322][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_0
[   91.196542][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   91.223072][ T5839] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   91.247406][ T5837] hsr_slave_0: entered promiscuous mode
[   91.256511][ T5837] hsr_slave_1: entered promiscuous mode
[   91.262932][ T5837] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   91.270803][ T5837] Cannot create hsr debugfs directory
[   91.283739][ T5838] hsr_slave_0: entered promiscuous mode
[   91.290193][ T5838] hsr_slave_1: entered promiscuous mode
[   91.297134][ T5838] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   91.304813][ T5838] Cannot create hsr debugfs directory
[   91.315594][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_1
[   91.322653][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   91.348704][ T5839] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   91.413538][   T54] Bluetooth: hci2: command tx timeout
[   91.443515][ T5839] hsr_slave_0: entered promiscuous mode
[   91.450042][ T5839] hsr_slave_1: entered promiscuous mode
[   91.456933][ T5839] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   91.464658][ T5839] Cannot create hsr debugfs directory
[   91.492839][ T5147] Bluetooth: hci0: command tx timeout
[   91.498822][ T5147] Bluetooth: hci1: command tx timeout
[   91.504645][   T54] Bluetooth: hci3: command tx timeout
[   91.726286][ T5836] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   91.763418][ T5836] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   91.781813][ T5836] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   91.797865][ T5836] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   91.819322][ T5838] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   91.837033][ T5838] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   91.868011][ T5838] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   91.881595][ T5838] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   91.938574][ T5837] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   91.963109][ T5837] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   91.974132][ T5837] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   91.997467][ T5837] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   92.056026][ T5839] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   92.070138][ T5839] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   92.081278][ T5839] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   92.100030][ T5839] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   92.228296][ T5836] 8021q: adding VLAN 0 to HW filter on device bond0
[   92.341805][ T5836] 8021q: adding VLAN 0 to HW filter on device team0
[   92.353787][ T5837] 8021q: adding VLAN 0 to HW filter on device bond0
[   92.371552][ T5838] 8021q: adding VLAN 0 to HW filter on device bond0
[   92.420528][   T82] bridge0: port 1(bridge_slave_0) entered blocking state
[   92.427837][   T82] bridge0: port 1(bridge_slave_0) entered forwarding state
[   92.455606][ T5837] 8021q: adding VLAN 0 to HW filter on device team0
[   92.471664][ T5838] 8021q: adding VLAN 0 to HW filter on device team0
[   92.493079][   T35] bridge0: port 2(bridge_slave_1) entered blocking state
[   92.500211][   T35] bridge0: port 2(bridge_slave_1) entered forwarding state
[   92.531234][ T3412] bridge0: port 1(bridge_slave_0) entered blocking state
[   92.538436][ T3412] bridge0: port 1(bridge_slave_0) entered forwarding state
[   92.576622][ T3412] bridge0: port 2(bridge_slave_1) entered blocking state
[   92.583788][ T3412] bridge0: port 2(bridge_slave_1) entered forwarding state
[   92.603042][ T3412] bridge0: port 1(bridge_slave_0) entered blocking state
[   92.610192][ T3412] bridge0: port 1(bridge_slave_0) entered forwarding state
[   92.639435][ T3412] bridge0: port 2(bridge_slave_1) entered blocking state
[   92.646743][ T3412] bridge0: port 2(bridge_slave_1) entered forwarding state
[   92.664750][ T5839] 8021q: adding VLAN 0 to HW filter on device bond0
[   92.752335][ T5839] 8021q: adding VLAN 0 to HW filter on device team0
[   92.815150][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[   92.822341][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[   92.858215][ T5836] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   92.868945][ T5836] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   92.899062][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[   92.906241][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[   92.940589][ T5837] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   92.963724][ T5837] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   93.408436][ T5836] 8021q: adding VLAN 0 to HW filter on device batadv0
[   93.467112][ T5837] 8021q: adding VLAN 0 to HW filter on device batadv0
[   93.486653][ T5838] 8021q: adding VLAN 0 to HW filter on device batadv0
[   93.495664][ T5147] Bluetooth: hci2: command tx timeout
[   93.513515][ T5839] 8021q: adding VLAN 0 to HW filter on device batadv0
[   93.545537][ T5836] veth0_vlan: entered promiscuous mode
[   93.572806][ T5147] Bluetooth: hci1: command tx timeout
[   93.578265][ T5147] Bluetooth: hci3: command tx timeout
[   93.582547][   T54] Bluetooth: hci0: command tx timeout
[   93.601318][ T5836] veth1_vlan: entered promiscuous mode
[   93.626581][ T5838] veth0_vlan: entered promiscuous mode
[   93.667423][ T5838] veth1_vlan: entered promiscuous mode
[   93.705516][ T5836] veth0_macvtap: entered promiscuous mode
[   93.715120][ T5837] veth0_vlan: entered promiscuous mode
[   93.725659][ T5836] veth1_macvtap: entered promiscuous mode
[   93.735436][ T5839] veth0_vlan: entered promiscuous mode
[   93.762048][ T5839] veth1_vlan: entered promiscuous mode
[   93.771440][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_0
[   93.797714][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_1
[   93.809384][ T5837] veth1_vlan: entered promiscuous mode
[   93.831745][ T5836] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   93.842535][ T5836] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   93.851294][ T5836] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   93.860199][ T5836] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   93.879376][ T5838] veth0_macvtap: entered promiscuous mode
[   93.896739][ T5838] veth1_macvtap: entered promiscuous mode
[   93.931179][ T5839] veth0_macvtap: entered promiscuous mode
[   93.965243][ T5838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   93.979657][ T5838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   93.991429][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_0
[   94.002277][ T5839] veth1_macvtap: entered promiscuous mode
[   94.023953][ T5838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   94.037065][ T5838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   94.049514][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_1
[   94.073243][ T5837] veth0_macvtap: entered promiscuous mode
[   94.091473][ T5838] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   94.103020][ T5838] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   94.111754][ T5838] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   94.121225][ T5838] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   94.156868][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   94.167927][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   94.182279][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   94.193938][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   94.205732][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_0
[   94.216200][ T5837] veth1_macvtap: entered promiscuous mode
[   94.261536][ T3498] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   94.271315][ T3498] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   94.296281][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   94.308048][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   94.318377][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   94.329419][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   94.340670][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_1
[   94.370711][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   94.386800][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   94.397352][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   94.407954][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   94.418015][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   94.428556][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   94.440466][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_0
[   94.454257][ T5839] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   94.463134][ T5839] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   94.472220][ T5839] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   94.481022][ T5839] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   94.512979][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   94.523990][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   94.536147][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   94.546746][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   94.556904][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   94.567491][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   94.578639][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_1
[   94.590364][ T5837] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   94.599756][ T5837] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   94.608666][ T5837] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   94.617870][ T5837] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   94.629720][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   94.638795][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   94.671447][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   94.679985][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   94.738160][ T5836] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   94.780101][ T3498] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   94.789099][ T3498] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   94.920890][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   94.937479][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   94.986311][ T5903] bridge0: port 3(team0) entered blocking state
[   95.011844][ T5903] bridge0: port 3(team0) entered disabled state
[   95.027590][ T5903] team0: entered allmulticast mode
[   95.032916][ T5903] team_slave_0: entered allmulticast mode
[   95.043431][ T5903] team_slave_1: entered allmulticast mode
[   95.051606][ T5903] team0: entered promiscuous mode
[   95.070006][ T5903] team_slave_0: entered promiscuous mode
[   95.081521][ T5903] team_slave_1: entered promiscuous mode
[   95.110617][ T5903] bridge0: port 3(team0) entered blocking state
[   95.117307][ T5903] bridge0: port 3(team0) entered forwarding state
[   95.137551][ T3412] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   95.145661][ T3412] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   95.275483][ T3412] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   95.285127][ T3412] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   95.295814][ T3498] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   95.304400][ T3498] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   95.578116][   T54] Bluetooth: hci2: command tx timeout
[   95.653456][   T54] Bluetooth: hci3: command tx timeout
[   95.657014][ T5147] Bluetooth: hci1: command tx timeout
[   95.658914][   T54] Bluetooth: hci0: command tx timeout
[   97.294460][   T25] cfg80211: failed to load regulatory.db
[   97.654409][   T54] Bluetooth: hci2: command tx timeout
[   97.732864][   T54] Bluetooth: hci0: command tx timeout
[   97.738353][   T54] Bluetooth: hci1: command tx timeout
[   97.744122][   T54] Bluetooth: hci3: command tx timeout
[   98.203615][ T5937] mmap: syz.3.7 (5937) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[  101.464741][ T5969] netlink: 28 bytes leftover after parsing attributes in process `syz.2.11'.
[  101.738864][ T5969] hsr_slave_1 (unregistering): left promiscuous mode
[  101.861020][ T5983] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  101.971456][ T5980] netlink: 12 bytes leftover after parsing attributes in process `syz.3.15'.
[  101.997850][ T5980] process 'syz.3.15' launched ':,' with NULL argv: empty string added
[  102.210845][ T5990] openvswitch: netlink: Tunnel attr 8192 out of range max 16
[  102.256216][ T5992] Zero length message leads to an empty skb
[  102.743434][ T6003] netlink: 8 bytes leftover after parsing attributes in process `syz.1.28'.
[  102.783242][ T6003] netlink: 32 bytes leftover after parsing attributes in process `syz.1.28'.
[  104.202457][ T6033] bridge0: port 3(team0) entered blocking state
[  104.256957][ T6033] bridge0: port 3(team0) entered disabled state
[  104.317908][ T6033] team0: entered allmulticast mode
[  104.362249][ T6033] team_slave_0: entered allmulticast mode
[  104.368185][ T6033] team_slave_1: entered allmulticast mode
[  104.452827][ T6033] team0: entered promiscuous mode
[  104.482128][ T6033] team_slave_0: entered promiscuous mode
[  104.549402][ T6033] team_slave_1: entered promiscuous mode
[  104.683522][ T6033] bridge0: port 3(team0) entered blocking state
[  104.690019][ T6033] bridge0: port 3(team0) entered forwarding state
[  104.874997][ T6048] ecryptfs_miscdev_write: Acceptable packet size range is [6-531], but amount of data written is [4].
[  107.623418][ T6095] blktrace: Concurrent blktraces are not allowed on sg0
[  108.680803][ T6116] netlink: 28 bytes leftover after parsing attributes in process `syz.3.42'.
[  108.763937][ T6116] hsr_slave_1 (unregistering): left promiscuous mode
[  109.502770][ T6130] bridge0: port 3(team0) entered blocking state
[  109.557783][ T6130] bridge0: port 3(team0) entered disabled state
[  109.573877][ T6130] team0: entered allmulticast mode
[  109.602182][ T6130] team_slave_0: entered allmulticast mode
[  109.692251][ T6130] team_slave_1: entered allmulticast mode
[  109.707992][ T6130] team0: entered promiscuous mode
[  109.729467][ T6130] team_slave_0: entered promiscuous mode
[  109.766618][ T6130] team_slave_1: entered promiscuous mode
[  109.773753][ T6130] bridge0: port 3(team0) entered blocking state
[  109.780180][ T6130] bridge0: port 3(team0) entered forwarding state
[  112.086959][ T6152] netlink: 4 bytes leftover after parsing attributes in process `syz.2.48'.
[  113.103553][ T6172] netlink: 28 bytes leftover after parsing attributes in process `syz.1.52'.
[  113.622794][ T6178] netlink: 28 bytes leftover after parsing attributes in process `syz.2.54'.
[  113.653553][ T6172] hsr_slave_1 (unregistering): left promiscuous mode
[  114.080103][ T6178] hsr_slave_0 (unregistering): left promiscuous mode
[  115.458453][ T6216] netlink: 28 bytes leftover after parsing attributes in process `syz.1.66'.
[  115.748578][ T6228] netlink: 3 bytes leftover after parsing attributes in process `syz.2.68'.
[  116.499713][ T6243] netlink: 28 bytes leftover after parsing attributes in process `syz.0.74'.
[  116.710860][ T6243] bond0: (slave bond_slave_1): Releasing backup interface
[  118.163463][ T6257] netlink: 28 bytes leftover after parsing attributes in process `syz.1.77'.
[  118.590163][   T29] audit: type=1800 audit(1736561424.861:2): pid=6265 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.80" name="dbroot" dev="configfs" ino=8946 res=0 errno=0
[  119.099527][ T6260] Invalid ELF header magic: != ELF
[  119.582744][ T6289] Invalid ELF header magic: != ELF
[  120.163595][ T6300] netlink: 28 bytes leftover after parsing attributes in process `syz.0.89'.
[  120.300845][ T6300] hsr_slave_1 (unregistering): left promiscuous mode
[  121.582719][ T6335] syz.0.95 uses obsolete (PF_INET,SOCK_PACKET)
[  122.875984][ T6357] netlink: 28 bytes leftover after parsing attributes in process `syz.0.101'.
[  125.243366][ T6409] netlink: 28 bytes leftover after parsing attributes in process `syz.2.111'.
[  127.200881][ T6431] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[  127.880582][ T6450] netlink: 28 bytes leftover after parsing attributes in process `syz.0.122'.
[  128.021917][ T6455] netlink: 28 bytes leftover after parsing attributes in process `syz.2.123'.
[  128.232339][ T6459] netlink: 334 bytes leftover after parsing attributes in process `syz.0.124'.
[  128.263742][ T6459] netlink: 334 bytes leftover after parsing attributes in process `syz.0.124'.
[  129.381396][ T6465] netlink: 28 bytes leftover after parsing attributes in process `syz.2.126'.
[  129.402992][ T6491] netlink: 28 bytes leftover after parsing attributes in process `syz.1.132'.
[  129.432724][ T6465] mac80211_hwsim hwsim8 wlan1: entered promiscuous mode
[  129.458487][ T6465] mac80211_hwsim hwsim8 wlan1: entered allmulticast mode
[  130.071092][ T6511] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  130.132551][ T6511] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  130.904935][ T6535] netlink: 28 bytes leftover after parsing attributes in process `syz.2.141'.
[  130.991178][ T6538] FAULT_INJECTION: forcing a failure.
[  130.991178][ T6538] name fail_usercopy, interval 1, probability 0, space 0, times 1
[  131.021924][ T6538] CPU: 1 UID: 0 PID: 6538 Comm: syz.3.142 Not tainted 6.13.0-rc6-syzkaller-00130-g2144da25584e #0
[  131.032625][ T6538] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  131.042743][ T6538] Call Trace:
[  131.046074][ T6538]  <TASK>
[  131.049078][ T6538]  dump_stack_lvl+0x16c/0x1f0
[  131.053836][ T6538]  should_fail_ex+0x497/0x5b0
[  131.058580][ T6538]  _copy_to_iter+0x4a5/0x1400
[  131.063336][ T6538]  ? __pfx__copy_to_iter+0x10/0x10
[  131.068510][ T6538]  ? __virt_addr_valid+0x1a4/0x590
[  131.073694][ T6538]  ? __virt_addr_valid+0x5e/0x590
[  131.078790][ T6538]  ? __phys_addr_symbol+0x30/0x80
[  131.083875][ T6538]  ? __check_object_size+0x488/0x710
[  131.089211][ T6538]  seq_read_iter+0xd00/0x12b0
[  131.093929][ T6538]  seq_read+0x39f/0x4e0
[  131.098127][ T6538]  ? __pfx_seq_read+0x10/0x10
[  131.102871][ T6538]  ? __pfx_seq_read+0x10/0x10
[  131.107581][ T6538]  proc_reg_read+0x23d/0x330
[  131.112215][ T6538]  ? __pfx_proc_reg_read+0x10/0x10
[  131.117364][ T6538]  vfs_read+0x1df/0xbe0
[  131.121553][ T6538]  ? __fget_files+0x1fc/0x3a0
[  131.126357][ T6538]  ? __pfx___mutex_lock+0x10/0x10
[  131.131420][ T6538]  ? __pfx_vfs_read+0x10/0x10
[  131.136156][ T6538]  ? __fget_files+0x206/0x3a0
[  131.140879][ T6538]  ksys_read+0x12b/0x250
[  131.145156][ T6538]  ? __pfx_ksys_read+0x10/0x10
[  131.149970][ T6538]  do_syscall_64+0xcd/0x250
[  131.154517][ T6538]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  131.160446][ T6538] RIP: 0033:0x7f6f65185d29
[  131.164897][ T6538] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  131.184539][ T6538] RSP: 002b:00007f6f65f8c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  131.192984][ T6538] RAX: ffffffffffffffda RBX: 00007f6f65375fa0 RCX: 00007f6f65185d29
[  131.200981][ T6538] RDX: 0000000000000047 RSI: 0000000020000000 RDI: 0000000000000003
[  131.209064][ T6538] RBP: 00007f6f65f8c090 R08: 0000000000000000 R09: 0000000000000000
[  131.217065][ T6538] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  131.225062][ T6538] R13: 0000000000000000 R14: 00007f6f65375fa0 R15: 00007fff4c9ce028
[  131.233074][ T6538]  </TASK>
[  131.236232][    C1] vkms_vblank_simulate: vblank timer overrun
[  131.514671][ T6545] futex_wake_op: syz.2.145 tries to shift op by 64; fix this program
[  131.632997][ T6553] ecryptfs_miscdev_write: memdup_user returned error [-14]
[  132.042982][ T6557] nbd0: detected capacity change from 0 to 68719476736
[  132.082899][ T5849] block nbd0: Send control failed (result -22)
[  132.129533][ T5849] block nbd0: Request send failed, requeueing
[  132.150194][ T5147] block nbd0: Receive control failed (result -32)
[  132.155240][   T26] block nbd0: Dead connection, failed to find a fallback
[  132.165331][   T26] block nbd0: shutting down sockets
[  132.171176][   T26] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  132.181352][   T26] Buffer I/O error on dev nbd0, logical block 0, async page read
[  132.207436][ T5849] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  132.284135][ T5849] Buffer I/O error on dev nbd0, logical block 0, async page read
[  132.325155][ T5849] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  132.363127][ T5849] Buffer I/O error on dev nbd0, logical block 0, async page read
[  132.371138][ T5849] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  132.414425][ T5849] Buffer I/O error on dev nbd0, logical block 0, async page read
[  132.435384][ T5849] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  132.462127][ T5849] Buffer I/O error on dev nbd0, logical block 0, async page read
[  132.489455][ T5849] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  132.508111][ T5849] Buffer I/O error on dev nbd0, logical block 0, async page read
[  132.522427][ T5849] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  132.531547][ T5849] Buffer I/O error on dev nbd0, logical block 0, async page read
[  132.540157][ T5849] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  132.554077][ T5849] Buffer I/O error on dev nbd0, logical block 0, async page read
[  132.570758][ T5849] ldm_validate_partition_table(): Disk read failed.
[  132.578029][ T5849] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  132.592126][ T5849] Buffer I/O error on dev nbd0, logical block 0, async page read
[  132.610327][ T5849] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  132.633185][ T5849] Buffer I/O error on dev nbd0, logical block 0, async page read
[  132.672544][ T5849] Dev nbd0: unable to read RDB block 0
[  132.681733][ T5849]  nbd0: unable to read partition table
[  132.684565][ T6577] netlink: 28 bytes leftover after parsing attributes in process `syz.0.153'.
[  132.714836][ T5849] ldm_validate_partition_table(): Disk read failed.
[  132.722033][ T5849] Dev nbd0: unable to read RDB block 0
[  132.729731][ T5849]  nbd0: unable to read partition table
[  133.522598][ T6593] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  133.541088][ T6593] Bluetooth: hci1: Opcode 0x0406 failed: -4
[  134.096770][ T6593] Bluetooth: hci1: Opcode 0x0406 failed: -4
[  134.165853][ T6593] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  134.171969][ T6593] Bluetooth: hci3: Opcode 0x0406 failed: -4
[  134.302778][ T6593] Bluetooth: hci3: Opcode 0x0406 failed: -4
[  134.418133][ T6593] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  134.477312][ T6593] Bluetooth: hci2: Opcode 0x0406 failed: -4
[  134.550993][ T6593] Bluetooth: hci2: Opcode 0x0406 failed: -4
[  134.565090][ T6593] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  134.811490][ T6593] Bluetooth: hci0: Opcode 0x0406 failed: -4
[  134.903265][ T6593] Bluetooth: hci0: Opcode 0x0406 failed: -4
[  135.342848][   T54] Bluetooth: hci1: command 0x0c1a tx timeout
[  135.373004][ T6625] netlink: 28 bytes leftover after parsing attributes in process `syz.3.162'.
[  136.212249][   T54] Bluetooth: hci3: command 0x0c1a tx timeout
[  136.532204][   T54] Bluetooth: hci2: command 0x0c1a tx timeout
[  136.612210][   T54] Bluetooth: hci0: command 0x0c1a tx timeout
[  137.161562][ T6654] netlink: 'syz.3.168': attribute type 4 has an invalid length.
[  137.197158][ T6653] netlink: 'syz.3.168': attribute type 4 has an invalid length.
[  137.218579][ T6655] QAT: Stopping all acceleration devices.
[  137.412577][   T54] Bluetooth: hci1: command 0x0c1a tx timeout
[  137.553586][ T6660] Invalid ELF header magic: != ELF
[  138.047665][ T6671] netlink: 28 bytes leftover after parsing attributes in process `syz.1.171'.
[  138.226668][ T1294] ieee802154 phy0 wpan0: encryption failed: -22
[  138.233581][ T1294] ieee802154 phy1 wpan1: encryption failed: -22
[  138.292653][   T54] Bluetooth: hci3: command 0x0c1a tx timeout
[  138.622341][   T54] Bluetooth: hci2: command 0x0c1a tx timeout
[  138.702191][   T54] Bluetooth: hci0: command 0x0c1a tx timeout
[  139.130092][ T6683] netlink: 28 bytes leftover after parsing attributes in process `syz.3.172'.
[  139.512192][   T54] Bluetooth: hci1: command 0x0c1a tx timeout
[  140.039433][ T6707] netlink: 334 bytes leftover after parsing attributes in process `syz.3.180'.
[  140.372402][ T5147] Bluetooth: hci3: command 0x0c1a tx timeout
[  140.631026][ T6716] netlink: 28 bytes leftover after parsing attributes in process `syz.1.182'.
[  140.705526][ T5147] Bluetooth: hci2: command 0x0c1a tx timeout
[  140.772412][ T5147] Bluetooth: hci0: command 0x0c1a tx timeout
[  141.481182][ T6734] syz.2.186(6734): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored.
[  141.842287][ T6736] openvswitch: netlink: IP tunnel dst address not specified
[  141.874537][ T6736] openvswitch: netlink: IP tunnel dst address not specified
[  142.228386][ T6757] netlink: 28 bytes leftover after parsing attributes in process `syz.3.192'.
[  142.805935][ T6778] netlink: 338 bytes leftover after parsing attributes in process `syz.3.196'.
[  142.823982][ T6772] netlink: 338 bytes leftover after parsing attributes in process `syz.3.196'.
[  143.785742][ T6803] netlink: 28 bytes leftover after parsing attributes in process `syz.3.202'.
[  145.619993][ T6834] netlink: 334 bytes leftover after parsing attributes in process `syz.1.210'.
[  146.315568][ T6848] netlink: 28 bytes leftover after parsing attributes in process `syz.0.214'.
[  148.271970][ T6894] netlink: 28 bytes leftover after parsing attributes in process `syz.0.223'.
[  149.347828][ T6924] netlink: 334 bytes leftover after parsing attributes in process `syz.2.227'.
[  150.122392][ T6937] netlink: 338 bytes leftover after parsing attributes in process `syz.1.232'.
[  150.673091][ T6950] netlink: 28 bytes leftover after parsing attributes in process `syz.0.234'.
[  151.461997][ T6969] sg_write: data in/out 32587/64969 bytes for SCSI command 0x0-- guessing data in;
[  151.461997][ T6969]    program syz.3.239 not setting count and/or reply_len properly
[  152.402948][ T6992] netlink: 28 bytes leftover after parsing attributes in process `syz.0.245'.
[  153.672291][ T7020] netlink: 4 bytes leftover after parsing attributes in process `syz.1.253'.
[  153.698384][ T7021] netlink: 4 bytes leftover after parsing attributes in process `syz.1.253'.
[  157.590101][ T7051] netlink: 28 bytes leftover after parsing attributes in process `syz.0.257'.
[  159.108892][ T7093] netlink: 28 bytes leftover after parsing attributes in process `syz.0.269'.
[  161.222732][ T7132] netlink: 28 bytes leftover after parsing attributes in process `syz.2.279'.
[  161.884339][ T7122] lo: entered promiscuous mode
[  161.972941][ T7119] lo: left promiscuous mode
[  164.357699][ T7171] netlink: 28 bytes leftover after parsing attributes in process `syz.0.289'.
[  166.941405][ T7189] lo: entered promiscuous mode
[  167.387735][ T7185] lo: left promiscuous mode
[  167.925989][ T7197] netlink: 8 bytes leftover after parsing attributes in process `syz.2.296'.
[  168.052839][ T7214] netlink: 28 bytes leftover after parsing attributes in process `syz.3.299'.
[  170.492343][ T7257] ecryptfs_miscdev_write: memdup_user returned error [-14]
[  173.142516][ T7294] netlink: 8 bytes leftover after parsing attributes in process `syz.0.321'.
[  173.194433][ T7294] netlink: 8 bytes leftover after parsing attributes in process `syz.0.321'.
[  174.845330][ T7342] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  175.127848][ T7340] netlink: 93 bytes leftover after parsing attributes in process `syz.0.333'.
[  175.553068][ T7358] netlink: 16 bytes leftover after parsing attributes in process `syz.0.336'.
[  179.708223][ T7435] netlink: 8 bytes leftover after parsing attributes in process `syz.1.352'.
[  179.728448][   T29] audit: type=1326 audit(65555.060:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7437 comm="syz.2.353" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5ac0d85d29 code=0x0
[  184.602656][ T7494] netlink: 342 bytes leftover after parsing attributes in process `syz.0.364'.
[  184.970071][ T7497] netlink: del zone limit has 4 unknown bytes
[  186.307986][ T7524] netlink: 4 bytes leftover after parsing attributes in process `syz.3.372'.
[  186.335408][ T7524] netlink: 4 bytes leftover after parsing attributes in process `syz.3.372'.
[  186.645324][   T29] audit: type=1326 audit(65561.980:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7529 comm="syz.1.374" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2899585d29 code=0x0
[  187.118599][ T7543] netlink: 28 bytes leftover after parsing attributes in process `syz.0.377'.
[  187.993057][ T7558] netlink: 266 bytes leftover after parsing attributes in process `syz.0.379'.
[  188.075213][ T7558] IPv6: NLM_F_CREATE should be specified when creating new route
[  189.513355][ T7582] netlink: 28 bytes leftover after parsing attributes in process `syz.3.387'.
[  191.153338][ T7613] =======================================================
[  191.153338][ T7613] WARNING: The mand mount option has been deprecated and
[  191.153338][ T7613]          and is ignored by this kernel. Remove the mand
[  191.153338][ T7613]          option from the mount to silence this warning.
[  191.153338][ T7613] =======================================================
[  191.686832][ T7615] block nbd1: Unsupported socket: shutdown callout must be supported.
[  192.842448][ T7632] netlink: 28 bytes leftover after parsing attributes in process `syz.0.397'.
[  192.925779][ T7635] device-mapper: ioctl: ioctl interface mismatch: kernel(4.48.0), user(4.1024.4294967293), cmd(2)
[  193.566210][ T5147] Bluetooth: hci1: SCO packet for unknown connection handle 0
[  195.123144][ T7677] netlink: 330 bytes leftover after parsing attributes in process `syz.1.408'.
[  199.007566][ T7726] Invalid ELF header magic: != ELF
[  199.666554][ T1294] ieee802154 phy0 wpan0: encryption failed: -22
[  199.673146][ T1294] ieee802154 phy1 wpan1: encryption failed: -22
[  202.400310][ T7775] netlink: 8 bytes leftover after parsing attributes in process `syz.0.432'.
[  204.913195][ T7802] netlink: 28 bytes leftover after parsing attributes in process `syz.3.438'.
[  207.551682][ T7844] netlink: 330 bytes leftover after parsing attributes in process `syz.3.448'.
[  207.630683][ T7847] netlink: 28 bytes leftover after parsing attributes in process `syz.2.449'.
[  207.926312][ T7844] 
: renamed from gre0 (while UP)
[  208.091144][ T7844] netlink: 330 bytes leftover after parsing attributes in process `syz.3.448'.
[  212.336852][ T7894] cgroup: fork rejected by pids controller in /syz2
[  214.962133][ T7929] lo: entered allmulticast mode
[  215.322144][ T7929] lo: left allmulticast mode
[  219.902733][ T7972] netlink: 342 bytes leftover after parsing attributes in process `syz.0.471'.
[  220.009727][ T7975] netlink: 28 bytes leftover after parsing attributes in process `syz.2.470'.
[  220.325208][ T7982] netlink: 28 bytes leftover after parsing attributes in process `syz.0.473'.
[  221.405190][ T7998] capability: warning: `syz.2.477' uses 32-bit capabilities (legacy support in use)
[  221.940232][ T8018] netlink: 28 bytes leftover after parsing attributes in process `syz.3.483'.
[  222.084226][ T8023] netlink: 4 bytes leftover after parsing attributes in process `syz.2.485'.
[  222.712695][ T8050] FAULT_INJECTION: forcing a failure.
[  222.712695][ T8050] name failslab, interval 1, probability 0, space 0, times 1
[  222.762614][ T8050] CPU: 1 UID: 0 PID: 8050 Comm: syz.3.490 Not tainted 6.13.0-rc6-syzkaller-00130-g2144da25584e #0
[  222.773286][ T8050] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  222.783389][ T8050] Call Trace:
[  222.786714][ T8050]  <TASK>
[  222.789703][ T8050]  dump_stack_lvl+0x16c/0x1f0
[  222.794458][ T8050]  should_fail_ex+0x497/0x5b0
[  222.799205][ T8050]  ? fs_reclaim_acquire+0xae/0x150
[  222.804381][ T8050]  should_failslab+0xc2/0x120
[  222.809129][ T8050]  __kmalloc_node_noprof+0xd1/0x520
[  222.814401][ T8050]  ? __kvmalloc_node_noprof+0xad/0x1a0
[  222.819929][ T8050]  ? __pfx_lock_release+0x10/0x10
[  222.825019][ T8050]  __kvmalloc_node_noprof+0xad/0x1a0
[  222.830363][ T8050]  seq_read_iter+0x82a/0x12b0
[  222.835113][ T8050]  seq_read+0x39f/0x4e0
[  222.839322][ T8050]  ? __pfx_seq_read+0x10/0x10
[  222.844082][ T8050]  ? __pfx_seq_read+0x10/0x10
[  222.848816][ T8050]  proc_reg_read+0x23d/0x330
[  222.853468][ T8050]  ? __pfx_proc_reg_read+0x10/0x10
[  222.858644][ T8050]  vfs_read+0x1df/0xbe0
[  222.862863][ T8050]  ? __fget_files+0x1fc/0x3a0
[  222.867598][ T8050]  ? __pfx___mutex_lock+0x10/0x10
[  222.872661][ T8050]  ? __pfx_vfs_read+0x10/0x10
[  222.877380][ T8050]  ? __fget_files+0x206/0x3a0
[  222.882102][ T8050]  ksys_read+0x12b/0x250
[  222.886375][ T8050]  ? __pfx_ksys_read+0x10/0x10
[  222.891179][ T8050]  do_syscall_64+0xcd/0x250
[  222.895724][ T8050]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  222.901656][ T8050] RIP: 0033:0x7f6f65185d29
[  222.906095][ T8050] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  222.925732][ T8050] RSP: 002b:00007f6f65f8c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  222.934175][ T8050] RAX: ffffffffffffffda RBX: 00007f6f65375fa0 RCX: 00007f6f65185d29
[  222.942179][ T8050] RDX: 0000000000805644 RSI: 0000000000000000 RDI: 0000000000000003
[  222.950168][ T8050] RBP: 00007f6f65f8c090 R08: 0000000000000000 R09: 0000000000000000
[  222.958169][ T8050] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  222.966168][ T8050] R13: 0000000000000000 R14: 00007f6f65375fa0 R15: 00007fff4c9ce028
[  222.974182][ T8050]  </TASK>
[  224.521962][ T8078] netlink: 28 bytes leftover after parsing attributes in process `syz.1.498'.
[  225.294778][ T8096] netlink: 32 bytes leftover after parsing attributes in process `syz.3.504'.
[  225.308035][ T8096] Process accounting resumed
[  225.315603][ T8096] synth uevent: /module/zl10353: unknown uevent action string
[  226.945423][ T8146] device-mapper: ioctl: name not supplied when creating device
[  232.590408][ T8239] netlink: 4 bytes leftover after parsing attributes in process `syz.1.533'.
[  233.093741][ T8247] netlink: 222 bytes leftover after parsing attributes in process `syz.3.535'.
[  233.104580][ T8247] netlink: 222 bytes leftover after parsing attributes in process `syz.3.535'.
[  233.138924][ T8247] netlink: 222 bytes leftover after parsing attributes in process `syz.3.535'.
[  234.253836][ T8264] netlink: 334 bytes leftover after parsing attributes in process `syz.3.538'.
[  234.962662][ T8268] __vm_enough_memory: pid: 8268, comm: syz.1.539, bytes: 4503599627366400 not enough memory for the allocation
[  236.202470][ T8295] netlink: 4 bytes leftover after parsing attributes in process `syz.3.548'.
[  236.242306][ T8295] netlink: 4 bytes leftover after parsing attributes in process `syz.3.548'.
[  241.451753][ T8402] ptrace attach of "./syz-executor exec"[5837] was attempted by "./syz-executor exec"[8402]
[  242.668282][ T8416] netlink: 330 bytes leftover after parsing attributes in process `syz.2.577'.
[  242.808934][ T8421] netlink: 342 bytes leftover after parsing attributes in process `syz.3.576'.
[  242.879242][ T8420] netlink: 28 bytes leftover after parsing attributes in process `syz.0.578'.
[  242.994812][ T8422] netlink: 342 bytes leftover after parsing attributes in process `syz.3.576'.
[  243.026129][ T8421] netlink: 28 bytes leftover after parsing attributes in process `syz.3.576'.
[  243.048274][ T8420] geneve1: entered allmulticast mode
[  243.096732][ T8421] veth1_macvtap: entered allmulticast mode
[  244.280177][ T8469] netlink: 326 bytes leftover after parsing attributes in process `syz.0.587'.
[  244.847951][ T8481] erspan0: entered allmulticast mode
[  247.429757][ T8521] Invalid ELF header magic: != ELF
[  247.487684][ T8526] bridge0: port 3(ipvlan1) entered blocking state
[  247.512419][ T8526] bridge0: port 3(ipvlan1) entered disabled state
[  247.519105][ T8526] ipvlan1: entered allmulticast mode
[  247.563393][ T8526] veth0_vlan: entered allmulticast mode
[  247.571003][ T8526] ipvlan1: left allmulticast mode
[  247.638160][ T8526] veth0_vlan: left allmulticast mode
[  247.672934][ T8526] netlink: 338 bytes leftover after parsing attributes in process `syz.2.600'.
[  247.776981][ T8526] veth1_macvtap: left promiscuous mode
[  248.484128][ T8524] netlink: 28 bytes leftover after parsing attributes in process `syz.0.599'.
[  248.565691][ T8548] sp0: Synchronizing with TNC
[  249.636749][ T8562] team0: left allmulticast mode
[  249.641696][ T8562] team_slave_0: left allmulticast mode
[  249.702271][ T8562] team_slave_1: left allmulticast mode
[  249.732657][ T8562] team0: left promiscuous mode
[  249.742245][ T8562] team_slave_0: left promiscuous mode
[  249.753017][ T8562] team_slave_1: left promiscuous mode
[  249.785404][ T8562] bridge0: port 3(team0) entered disabled state
[  250.134182][ T8582] netlink: 28 bytes leftover after parsing attributes in process `syz.1.610'.
[  250.269272][ T8585] netlink: 28 bytes leftover after parsing attributes in process `syz.0.612'.
[  252.590570][ T8631] Invalid ELF header magic: != ELF
[  252.628713][ T8635] netlink: 28 bytes leftover after parsing attributes in process `syz.3.623'.
[  253.235624][ T8647] netlink: 12 bytes leftover after parsing attributes in process `syz.1.626'.
[  254.302388][ T8682] netlink: 8756 bytes leftover after parsing attributes in process `syz.1.637'.
[  254.333329][ T8683] netlink: 8756 bytes leftover after parsing attributes in process `syz.1.637'.
[  254.376160][ T8688] netlink: 20 bytes leftover after parsing attributes in process `syz.2.638'.
[  254.423777][ T8688] netlink: 32 bytes leftover after parsing attributes in process `syz.2.638'.
[  254.452794][ T8688] netlink: 32 bytes leftover after parsing attributes in process `syz.2.638'.
[  254.893417][ T8700] netlink: 4 bytes leftover after parsing attributes in process `syz.1.642'.
[  254.922290][ T8700] netlink: 4 bytes leftover after parsing attributes in process `syz.1.642'.
[  257.466782][ T8771] lo: entered allmulticast mode
[  257.506216][ T8771] netlink: 28 bytes leftover after parsing attributes in process `syz.2.653'.
[  258.307453][ T8770] lo: left allmulticast mode
[  258.364851][ T8787] netlink: 4 bytes leftover after parsing attributes in process `syz.0.655'.
[  258.517701][ T8786] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  260.680563][ T8819] could not allocate digest TFM handle 
[  260.969027][ T8817] could not allocate digest TFM handle 
[  261.105837][ T1294] ieee802154 phy0 wpan0: encryption failed: -22
[  261.112331][ T1294] ieee802154 phy1 wpan1: encryption failed: -22
[  261.247822][ T8835] netlink: 28 bytes leftover after parsing attributes in process `syz.1.663'.
[  261.283372][ T8835] vxcan1: entered promiscuous mode
[  262.111521][ T8853] HfR: entered promiscuous mode
[  262.161526][ T8857] netlink: 4 bytes leftover after parsing attributes in process `syz.3.670'.
[  262.178917][ T8856] 
: entered promiscuous mode
[  266.240529][ T8946] netlink: 'syz.1.690': attribute type 11 has an invalid length.
[  266.289527][ T8946] netlink: 8 bytes leftover after parsing attributes in process `syz.1.690'.
[  269.226901][ T9038] netlink: 28 bytes leftover after parsing attributes in process `syz.0.702'.
[  271.468565][ T9087] netlink: 8 bytes leftover after parsing attributes in process `syz.3.714'.
[  271.690963][ T9099] netlink: 326 bytes leftover after parsing attributes in process `syz.0.717'.
[  271.754382][ T9099] netlink: 74 bytes leftover after parsing attributes in process `syz.0.717'.
[  271.780640][ T9099] netlink: 342 bytes leftover after parsing attributes in process `syz.0.717'.
[  271.860436][ T9105] netlink: 342 bytes leftover after parsing attributes in process `syz.0.717'.
[  272.946633][   T29] audit: type=1800 audit(8277292045.730:5): pid=9101 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.718" name="lu_gp_id" dev="configfs" ino=21754 res=0 errno=0
[  277.369405][ T9189] netlink: 237 bytes leftover after parsing attributes in process `syz.1.736'.
[  277.391450][ T9190] netlink: 237 bytes leftover after parsing attributes in process `syz.1.736'.
[  278.552324][ T9213] netlink: 28 bytes leftover after parsing attributes in process `syz.2.740'.
[  283.279164][ T9297] netlink: 28 bytes leftover after parsing attributes in process `syz.1.761'.
[  283.754059][ T9308] netlink: 28 bytes leftover after parsing attributes in process `syz.1.765'.
[  284.902939][ T9334] netlink: 103 bytes leftover after parsing attributes in process `syz.1.772'.
[  285.105187][ T9342] netlink: 338 bytes leftover after parsing attributes in process `syz.3.774'.
[  285.152728][ T9342] bridge0: port 3(team0) entered disabled state
[  285.159533][ T9342] bridge0: port 2(bridge_slave_1) entered disabled state
[  285.168969][ T9342] bridge0: port 1(bridge_slave_0) entered disabled state
[  286.487858][ T9374] ptrace attach of "./syz-executor exec"[5837] was attempted by "./syz-executor exec"[9374]
[  287.136673][ T9359] QAT: Device 0 not found
[  287.921287][ T9394] binder: 9393:9394 ioctl 400c620e 9 returned -22
[  288.319168][ T9409] binder: 9393:9409 ioctl 80084d17 38 returned -22
[  290.608263][ T9438] netlink: 28 bytes leftover after parsing attributes in process `syz.0.794'.
[  290.962535][ T9438] netdevsim netdevsim0 netdevsim2: entered allmulticast mode
[  296.009607][ T9556] netlink: 28 bytes leftover after parsing attributes in process `syz.1.825'.
[  299.567114][ T9646] netlink: 4 bytes leftover after parsing attributes in process `syz.0.845'.
[  299.632317][ T9646] netlink: 4 bytes leftover after parsing attributes in process `syz.0.845'.
[  299.812986][   T54] Bluetooth: hci1: SCO packet for unknown connection handle 0
[  300.601539][ T9674] WARNING! power/level is deprecated; use power/control instead
[  302.215175][ T9720] netlink: 266 bytes leftover after parsing attributes in process `syz.2.862'.
[  302.237816][ T9720] IPv6: NLM_F_CREATE should be specified when creating new route
[  302.309105][ T9722] netlink: 28 bytes leftover after parsing attributes in process `syz.1.863'.
[  303.529886][ T9758] openvswitch: netlink: IP tunnel TTL not specified.
[  304.813374][ T9785] netlink: 28 bytes leftover after parsing attributes in process `syz.2.877'.
[  306.037733][ T9801] kernel read not supported for file /#)-\&[} (pid: 9801 comm: syz.2.879)
[  306.062673][ T9799] can: request_module (can-proto-0) failed.
[  306.068982][   T29] audit: type=1800 audit(2076.293:6): pid=9801 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.879" name="#)-\&[}" dev="mqueue" ino=24886 res=0 errno=0
[  306.967115][ T9808] netlink: 28 bytes leftover after parsing attributes in process `syz.2.882'.
[  307.003806][ T9808] ipvlan0: entered promiscuous mode
[  307.059889][ T9808] ipvlan0: entered allmulticast mode
[  307.178135][ T9808] veth0_vlan: entered allmulticast mode
[  307.339981][ T9820] netlink: 222 bytes leftover after parsing attributes in process `syz.3.883'.
[  307.405133][ T9820] netlink: 222 bytes leftover after parsing attributes in process `syz.3.883'.
[  307.495103][ T9826] netlink: 222 bytes leftover after parsing attributes in process `syz.3.883'.
[  307.935350][ T9838] netlink: 4 bytes leftover after parsing attributes in process `syz.1.886'.
[  310.207442][ T9884] netlink: 4 bytes leftover after parsing attributes in process `syz.0.899'.
[  310.396787][ T9893] netlink: 12 bytes leftover after parsing attributes in process `syz.3.898'.
[  311.590403][ T9889] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  311.742336][ T9889] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  311.825178][ T9889] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  311.882154][ T9889] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  312.560267][ T9942] netlink: 8 bytes leftover after parsing attributes in process `syz.2.910'.
[  312.602483][ T9946] netlink: 8 bytes leftover after parsing attributes in process `syz.2.910'.
[  312.704280][   T54] Bluetooth: hci1: command 0x0c1a tx timeout
[  312.946423][ T9959] Invalid ELF header magic: != ELF
[  313.834274][   T54] Bluetooth: hci3: command 0x0c1a tx timeout
[  313.893721][   T54] Bluetooth: hci0: command 0x0c1a tx timeout
[  313.899933][   T54] Bluetooth: hci2: command 0x0c1a tx timeout
[  319.368385][T10072] svc: failed to register nfsdv3 RPC service (errno 111).
[  319.429207][T10072] svc: failed to register nfsaclv3 RPC service (errno 111).
[  319.912451][T10093] openvswitch: netlink: Tunnel attr 8192 out of range max 16
[  322.536666][ T1294] ieee802154 phy0 wpan0: encryption failed: -22
[  322.544158][ T1294] ieee802154 phy1 wpan1: encryption failed: -22
[  325.413550][ T5847] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  325.462084][ T5847] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  325.470573][ T5847] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  325.483521][ T5847] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  325.491360][ T5847] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  325.499056][ T5847] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  325.560930][T10185] Process accounting resumed
[  326.087543][T10183] chnl_net:caif_netlink_parms(): no params data found
[  326.541902][T10200] netlink: 266 bytes leftover after parsing attributes in process `syz.3.966'.
[  326.562232][T10200] IPv6: NLM_F_CREATE should be specified when creating new route
[  326.607784][T10183] bridge0: port 1(bridge_slave_0) entered blocking state
[  326.715654][T10183] bridge0: port 1(bridge_slave_0) entered disabled state
[  326.728878][T10183] bridge_slave_0: entered allmulticast mode
[  326.738935][T10183] bridge_slave_0: entered promiscuous mode
[  326.798989][T10183] bridge0: port 2(bridge_slave_1) entered blocking state
[  326.817348][T10183] bridge0: port 2(bridge_slave_1) entered disabled state
[  326.841803][   T54] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  326.854318][   T54] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  326.862813][   T54] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  326.870883][   T54] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  326.882540][   T54] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  326.890570][   T54] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  327.001094][T10183] bridge_slave_1: entered allmulticast mode
[  327.030729][T10183] bridge_slave_1: entered promiscuous mode
[  327.177017][T10183] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  327.213066][T10183] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  327.306552][T10183] team0: Port device team_slave_0 added
[  327.324476][T10183] team0: Port device team_slave_1 added
[  327.418780][T10183] batman_adv: batadv0: Adding interface: batadv_slave_0
[  327.451047][T10183] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  327.501115][T10183] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  327.562936][T10183] batman_adv: batadv0: Adding interface: batadv_slave_1
[  327.572434][ T5847] Bluetooth: hci1: command tx timeout
[  327.580046][T10183] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  327.641660][T10183] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  327.765650][T10183] hsr_slave_0: entered promiscuous mode
[  327.773093][T10183] hsr_slave_1: entered promiscuous mode
[  327.779498][T10183] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  327.787199][T10183] Cannot create hsr debugfs directory
[  327.869997][T10207] chnl_net:caif_netlink_parms(): no params data found
[  328.074933][T10232] ptrace attach of "./syz-executor exec"[5838] was attempted by ""[10232]
[  328.183316][T10207] bridge0: port 1(bridge_slave_0) entered blocking state
[  328.190573][T10207] bridge0: port 1(bridge_slave_0) entered disabled state
[  328.232443][T10207] bridge_slave_0: entered allmulticast mode
[  328.239788][T10207] bridge_slave_0: entered promiscuous mode
[  328.295263][T10207] bridge0: port 2(bridge_slave_1) entered blocking state
[  328.306772][T10207] bridge0: port 2(bridge_slave_1) entered disabled state
[  328.316437][T10207] bridge_slave_1: entered allmulticast mode
[  328.324518][T10207] bridge_slave_1: entered promiscuous mode
[  328.375711][T10183] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  328.410437][T10207] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  328.442265][T10183] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  328.458258][T10207] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  328.511009][T10183] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  328.525377][T10183] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  328.578494][T10207] team0: Port device team_slave_0 added
[  328.622508][T10207] team0: Port device team_slave_1 added
[  328.719203][T10207] batman_adv: batadv0: Adding interface: batadv_slave_0
[  328.732691][T10207] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  328.792160][T10207] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  328.815699][T10207] batman_adv: batadv0: Adding interface: batadv_slave_1
[  328.822864][T10207] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  328.892138][T10207] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  329.012964][ T5847] Bluetooth: hci4: command tx timeout
[  329.036019][T10207] hsr_slave_0: entered promiscuous mode
[  329.067517][T10207] hsr_slave_1: entered promiscuous mode
[  329.083978][T10207] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  329.091608][T10207] Cannot create hsr debugfs directory
[  329.255381][T10183] 8021q: adding VLAN 0 to HW filter on device bond0
[  329.315636][T10183] 8021q: adding VLAN 0 to HW filter on device team0
[  329.344969][ T3534] bridge0: port 1(bridge_slave_0) entered blocking state
[  329.353286][ T3534] bridge0: port 1(bridge_slave_0) entered forwarding state
[  329.397749][ T9011] bridge0: port 2(bridge_slave_1) entered blocking state
[  329.404948][ T9011] bridge0: port 2(bridge_slave_1) entered forwarding state
[  329.652670][ T5847] Bluetooth: hci1: command tx timeout
[  329.680348][T10207] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  329.737437][T10207] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  329.769346][T10207] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  329.812501][T10207] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  329.975266][T10183] 8021q: adding VLAN 0 to HW filter on device batadv0
[  330.214334][T10207] 8021q: adding VLAN 0 to HW filter on device bond0
[  330.259159][T10207] 8021q: adding VLAN 0 to HW filter on device team0
[  330.308640][ T9012] bridge0: port 1(bridge_slave_0) entered blocking state
[  330.316494][ T9012] bridge0: port 1(bridge_slave_0) entered forwarding state
[  330.385730][ T9012] bridge0: port 2(bridge_slave_1) entered blocking state
[  330.392999][ T9012] bridge0: port 2(bridge_slave_1) entered forwarding state
[  330.566753][T10183] veth0_vlan: entered promiscuous mode
[  330.622496][T10183] veth1_vlan: entered promiscuous mode
[  330.702801][T10183] veth0_macvtap: entered promiscuous mode
[  330.736098][T10183] veth1_macvtap: entered promiscuous mode
[  330.812260][T10183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  330.842251][T10183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  330.872375][T10183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  330.909621][T10183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  330.942109][T10183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  330.975319][T10183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  331.021463][T10183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  331.048029][T10183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  331.094599][ T5847] Bluetooth: hci4: command tx timeout
[  331.103147][T10183] batman_adv: batadv0: Interface activated: batadv_slave_0
[  331.174485][T10183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  331.191227][T10183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  331.216424][T10183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  331.242527][T10183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  331.279798][T10183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  331.322216][T10183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  331.362131][T10183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  331.408088][T10183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  331.453625][T10183] batman_adv: batadv0: Interface activated: batadv_slave_1
[  331.521419][T10183] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  331.569267][T10183] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  331.605599][T10183] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  331.637689][T10183] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  331.733392][ T5847] Bluetooth: hci1: command tx timeout
[  331.838111][T10207] 8021q: adding VLAN 0 to HW filter on device batadv0
[  331.966245][ T9020] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  332.014188][ T9020] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  332.085125][ T7963] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  332.133142][ T7963] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  332.761839][T10207] veth0_vlan: entered promiscuous mode
[  332.836921][T10273] netlink: 28 bytes leftover after parsing attributes in process `syz.4.977'.
[  332.854447][T10207] veth1_vlan: entered promiscuous mode
[  333.038751][T10207] veth0_macvtap: entered promiscuous mode
[  333.060369][T10207] veth1_macvtap: entered promiscuous mode
[  333.107678][T10207] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  333.134204][T10207] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  333.155612][T10207] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  333.172682][T10207] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  333.173430][ T5847] Bluetooth: hci4: command tx timeout
[  333.217446][T10207] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  333.260709][T10207] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  333.300137][T10207] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  333.337945][T10207] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  333.358847][T10207] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  333.379837][T10207] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  333.401174][T10207] batman_adv: batadv0: Interface activated: batadv_slave_0
[  333.454540][T10207] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  333.482203][T10207] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  333.512088][T10207] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  333.532099][T10207] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  333.552033][T10207] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  333.582292][T10207] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  333.602038][T10207] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  333.622031][T10207] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  333.642131][T10207] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  333.662024][T10207] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  333.683405][T10207] batman_adv: batadv0: Interface activated: batadv_slave_1
[  333.719633][T10207] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  333.748890][T10207] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  333.772042][T10207] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  333.812400][ T5847] Bluetooth: hci1: command tx timeout
[  333.832220][T10207] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  334.208589][ T7963] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  334.219054][ T9011] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  334.227067][ T9011] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  334.259860][ T7963] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  334.584757][T10286] vhci_hcd: default hub control req: 0000 v0000 i0000 l0
[  334.714771][T10283] HfR: entered promiscuous mode
[  334.740700][T10283] netlink: 12 bytes leftover after parsing attributes in process `syz.4.981'.
[  334.760167][T10283] HfR: left promiscuous mode
[  335.182182][T10283] netlink: 8 bytes leftover after parsing attributes in process `syz.4.981'.
[  335.253870][ T5847] Bluetooth: hci4: command tx timeout
[  340.207467][T10371] zram: Added device: zram1
[  340.405546][T10372] Process accounting resumed
[  345.209514][T10486] HSR: entered promiscuous mode
[  345.487437][T10486] delete_channel: no stack
[  347.548012][T10527] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  347.560665][T10527] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  347.581047][T10527] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  347.593815][T10527] Bluetooth: hci1: Opcode 0x0406 failed: -4
[  347.701168][T10527] Bluetooth: hci1: Opcode 0x0406 failed: -4
[  347.763094][T10527] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  347.770244][T10527] Bluetooth: hci4: Opcode 0x0406 failed: -4
[  347.834489][T10527] Bluetooth: hci4: Opcode 0x0406 failed: -4
[  348.740422][T10569] Invalid ELF header magic: != ELF
[  348.852268][ T5847] Bluetooth: hci2: command 0x0c1a tx timeout
[  349.582303][ T5847] Bluetooth: hci0: command 0x0c1a tx timeout
[  349.652395][ T5847] Bluetooth: hci1: command 0x0c1a tx timeout
[  349.695452][T10572] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1047'.
[  349.812350][ T5847] Bluetooth: hci4: command 0x0c1a tx timeout
[  350.718914][T10601] zero sized request
[  351.451808][T10611] scsi_dev_info_list_add_str: bad dev info string '��)&c��~j]	�|
[  351.451808][T10611] M�' '' ''
[  351.782169][ T5847] Bluetooth: hci1: command 0x0c1a tx timeout
[  351.892219][ T5847] Bluetooth: hci4: command 0x0c1a tx timeout
[  353.817892][ T5847] Bluetooth: hci1: command 0x0c1a tx timeout
[  353.982093][ T5847] Bluetooth: hci4: command 0x0c1a tx timeout
[  355.228893][T10654] openvswitch: netlink: IP tunnel dst address not specified
[  355.250193][T10654] openvswitch: netlink: IP tunnel dst address not specified
[  355.260863][T10649] futex_wake_op: syz.4.1064 tries to shift op by 64; fix this program
[  361.424999][ T5847] Bluetooth: hci3: Opcode 0x0c03 failed: -110
[  362.075863][   T52] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  362.520325][   T52] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  363.003923][   T52] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  363.944002][   T52] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  364.271779][T10756] kexec: Could not allocate control_code_buffer
[  364.632788][   T52] bridge_slave_1: left allmulticast mode
[  364.638874][   T52] bridge_slave_1: left promiscuous mode
[  364.695705][   T52] bridge0: port 2(bridge_slave_1) entered disabled state
[  364.965072][   T52] bridge_slave_0: left allmulticast mode
[  364.970999][   T52] bridge_slave_0: left promiscuous mode
[  364.991318][   T52] bridge0: port 1(bridge_slave_0) entered disabled state
[  365.884617][   T54] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  365.905002][   T54] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  365.913769][   T54] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  365.921775][   T54] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  365.942525][   T54] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  365.952266][   T54] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  367.669529][   T52] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  367.689689][   T52] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  367.800175][   T52] bond0 (unregistering): Released all slaves
[  367.963350][   T52] HSR: left promiscuous mode
[  368.052128][ T5847] Bluetooth: hci1: command tx timeout
[  369.902017][   T52] hsr_slave_0: left promiscuous mode
[  369.985849][   T52] hsr_slave_1: left promiscuous mode
[  370.052374][   T52] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  370.062283][   T52] batman_adv: batadv0: Removing interface: batadv_slave_0
[  370.086829][   T52] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  370.108831][   T52] batman_adv: batadv0: Removing interface: batadv_slave_1
[  370.132385][ T5847] Bluetooth: hci1: command tx timeout
[  370.214012][   T52] veth1_macvtap: left promiscuous mode
[  370.220183][   T52] veth0_macvtap: left promiscuous mode
[  370.263697][   T52] veth1_vlan: left promiscuous mode
[  370.269350][   T52] veth0_vlan: left promiscuous mode
[  370.795859][T10870] Process accounting paused
[  372.212801][ T5847] Bluetooth: hci1: command tx timeout
[  372.716387][   T52] team0 (unregistering): Port device team_slave_1 removed
[  372.820761][T10892] can: request_module (can-proto-0) failed.
[  372.922826][   T52] team0 (unregistering): Port device team_slave_0 removed
[  374.160534][T10794] chnl_net:caif_netlink_parms(): no params data found
[  374.292788][ T5847] Bluetooth: hci1: command tx timeout
[  375.111463][T10794] bridge0: port 1(bridge_slave_0) entered blocking state
[  375.133496][T10794] bridge0: port 1(bridge_slave_0) entered disabled state
[  375.140793][T10794] bridge_slave_0: entered allmulticast mode
[  375.159715][T10794] bridge_slave_0: entered promiscuous mode
[  375.312838][T10794] bridge0: port 2(bridge_slave_1) entered blocking state
[  375.332782][T10794] bridge0: port 2(bridge_slave_1) entered disabled state
[  375.344928][T10794] bridge_slave_1: entered allmulticast mode
[  375.365726][T10794] bridge_slave_1: entered promiscuous mode
[  375.515411][T10794] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  375.571270][T10794] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  375.763476][T10794] team0: Port device team_slave_0 added
[  375.782967][T10794] team0: Port device team_slave_1 added
[  376.062763][T10794] batman_adv: batadv0: Adding interface: batadv_slave_0
[  376.069802][T10794] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  376.162022][T10794] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  376.234724][T10794] batman_adv: batadv0: Adding interface: batadv_slave_1
[  376.241745][T10794] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  376.316448][T10794] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  376.757034][T10794] hsr_slave_0: entered promiscuous mode
[  376.793059][T10794] hsr_slave_1: entered promiscuous mode
[  376.807076][T10794] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  376.852123][T10794] Cannot create hsr debugfs directory
[  377.075529][T10971] netlink: 330 bytes leftover after parsing attributes in process `syz.3.1118'.
[  377.692905][T10977] aoe: can't write to that file.
[  377.936416][T10794] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  378.025663][T10794] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  378.112009][T10794] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  378.265015][T10794] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  378.586683][T10794] 8021q: adding VLAN 0 to HW filter on device bond0
[  378.672350][T10794] 8021q: adding VLAN 0 to HW filter on device team0
[  378.705364][ T3534] bridge0: port 1(bridge_slave_0) entered blocking state
[  378.712693][ T3534] bridge0: port 1(bridge_slave_0) entered forwarding state
[  378.785392][ T3534] bridge0: port 2(bridge_slave_1) entered blocking state
[  378.792641][ T3534] bridge0: port 2(bridge_slave_1) entered forwarding state
[  378.885833][T10794] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  378.916258][T10794] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  379.447915][T10794] 8021q: adding VLAN 0 to HW filter on device batadv0
[  380.176053][T11026] Process accounting resumed
[  380.418865][T10794] veth0_vlan: entered promiscuous mode
[  380.528977][T10794] veth1_vlan: entered promiscuous mode
[  380.579400][T10794] veth0_macvtap: entered promiscuous mode
[  380.589022][T10794] veth1_macvtap: entered promiscuous mode
[  380.698959][T10794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  380.719399][T10794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  380.739857][T10794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  380.791840][T10794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  380.831198][T10794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  380.861977][T10794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  380.881618][T10794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  380.911966][T10794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  380.937230][T10794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  380.947891][T10794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  380.960026][T10794] batman_adv: batadv0: Interface activated: batadv_slave_0
[  380.987888][T10794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  381.008523][T10794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  381.021506][T10794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  381.045390][T10794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  381.076613][T10794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  381.090259][T10794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  381.113348][T10794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  381.133278][T10794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  381.143727][T10794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  381.154327][T10794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  381.167703][T10794] batman_adv: batadv0: Interface activated: batadv_slave_1
[  381.204681][T10794] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  381.214063][T10794] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  381.235754][T10794] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  381.264290][T10794] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  381.848479][ T3534] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  381.887087][ T3534] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  382.000018][ T3534] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  382.038799][ T3534] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  382.732424][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  382.749468][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  382.761419][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  383.132483][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  383.141115][    T0] NOHZ tick-stop error: local softirq work is pending, handler #240!!!
[  383.149880][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  383.158456][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  383.167117][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  383.392548][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  383.492276][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  383.559400][T11094] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1133'.
[  383.982582][ T1294] ieee802154 phy0 wpan0: encryption failed: -22
[  383.988970][ T1294] ieee802154 phy1 wpan1: encryption failed: -22
[  384.802657][T11094] team_slave_0 (unregistering): left promiscuous mode
[  384.835540][T11094] team_slave_0 (unregistering): left allmulticast mode
[  385.102262][T11094] team0: Port device team_slave_0 removed
[  387.272326][T11159] netlink: 56 bytes leftover after parsing attributes in process `syz.6.1143'.
[  389.001952][T11202] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1150'.
[  390.050842][T11226] netlink: 342 bytes leftover after parsing attributes in process `syz.6.1156'.
[  390.163015][T11225] netlink: 342 bytes leftover after parsing attributes in process `syz.6.1156'.
[  390.192856][T11225] netlink: 342 bytes leftover after parsing attributes in process `syz.6.1156'.
[  390.252758][T11225] netlink: 342 bytes leftover after parsing attributes in process `syz.6.1156'.
[  390.302604][T11225] netlink: 342 bytes leftover after parsing attributes in process `syz.6.1156'.
[  392.232422][T11208] x86/mm: Checked W+X mappings: passed, no W+X pages found.
[  393.825151][T11283] random: crng reseeded on system resumption
[  394.339866][T11305] syz.5.1167 (11305): attempted to duplicate a private mapping with mremap.  This is not supported.
[  395.592001][T11322] can: request_module (can-proto-0) failed.
[  396.185196][T11338] futex_wake_op: syz.5.1174 tries to shift op by 64; fix this program
[  400.701488][T11443] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma?
[  400.879966][T11436] Process accounting resumed
[  400.958379][   T29] audit: type=1804 audit(2172.181:7): pid=11434 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.1190" name="/newroot/sys/kernel/config/target/core/alua/lu_gps/default_lu_gp/lu_gp_id" dev="configfs" ino=33015 res=1 errno=0
[  401.104356][   T29] audit: type=1800 audit(2172.301:8): pid=11434 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1190" name="lu_gp_id" dev="configfs" ino=33015 res=0 errno=0
[  401.419663][T11434] Process accounting resumed
[  401.462805][T11434] kstrtoul() returned -22 for lu_gp_id
[  401.936685][T11483] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1196'.
[  401.954647][T11483] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1196'.
[  403.030007][T11483] kstrtoul() returned -22 for lu_gp_id
[  403.786329][T11519] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1200'.
[  403.891751][T11532] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1202'.
[  403.960990][T11532] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1202'.
[  404.728263][T11527] kstrtoul() returned -22 for lu_gp_id
[  406.271838][T11602] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1208'.
[  407.469744][T11562] syz.6.1206: vmalloc error: size 8388608, failed to allocated page array size 16384, mode:0x400cc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM), nodemask=(null),cpuset=/,mems_allowed=0-1
[  407.586506][T11562] CPU: 0 UID: 0 PID: 11562 Comm: syz.6.1206 Not tainted 6.13.0-rc6-syzkaller-00130-g2144da25584e #0
[  407.597443][T11562] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  407.607561][T11562] Call Trace:
[  407.610890][T11562]  <TASK>
[  407.613893][T11562]  dump_stack_lvl+0x16c/0x1f0
[  407.618640][T11562]  warn_alloc+0x24d/0x3a0
[  407.623046][T11562]  ? __pfx_warn_alloc+0x10/0x10
[  407.628085][T11562]  ? __get_vm_area_node+0x1b0/0x2f0
[  407.633333][T11562]  ? __get_vm_area_node+0x1dc/0x2f0
[  407.638574][T11562]  __vmalloc_node_range_noprof+0x1105/0x1530
[  407.644614][T11562]  ? __do_sys_listmount+0x1be/0xe90
[  407.649946][T11562]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  407.656330][T11562]  ? rcu_is_watching+0x12/0xc0
[  407.661142][T11562]  ? trace_kmalloc+0x2d/0xd0
[  407.665791][T11562]  ? __kmalloc_node_noprof.cold+0x5a/0x5f
[  407.671651][T11562]  ? __do_sys_listmount+0x1be/0xe90
[  407.676897][T11562]  __kvmalloc_node_noprof+0x14f/0x1a0
[  407.682321][T11562]  ? __do_sys_listmount+0x1be/0xe90
[  407.687563][T11562]  __do_sys_listmount+0x1be/0xe90
[  407.692640][T11562]  ? __pfx___do_sys_listmount+0x10/0x10
[  407.698241][T11562]  ? lock_acquire+0x2f/0xb0
[  407.702798][T11562]  ? do_user_addr_fault+0x83d/0x13f0
[  407.708137][T11562]  do_syscall_64+0xcd/0x250
[  407.712710][T11562]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  407.718852][T11562] RIP: 0033:0x7f07acb85d29
[  407.723308][T11562] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  407.742957][T11562] RSP: 002b:00007f07ad9f9038 EFLAGS: 00000246 ORIG_RAX: 00000000000001ca
[  407.751588][T11562] RAX: ffffffffffffffda RBX: 00007f07acd75fa0 RCX: 00007f07acb85d29
[  407.759590][T11562] RDX: 00000000000f4240 RSI: 0000000000000000 RDI: 0000000020000100
[  407.767597][T11562] RBP: 00007f07acc01b08 R08: 0000000000000000 R09: 0000000000000000
[  407.775597][T11562] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000
[  407.783771][T11562] R13: 0000000000000000 R14: 00007f07acd75fa0 R15: 00007ffcb7bab8b8
[  407.791794][T11562]  </TASK>
[  407.946939][T11562] Mem-Info:
[  407.950208][T11562] active_anon:65073 inactive_anon:0 isolated_anon:0
[  407.950208][T11562]  active_file:1551 inactive_file:55751 isolated_file:0
[  407.950208][T11562]  unevictable:786 dirty:529 writeback:0
[  407.950208][T11562]  slab_reclaimable:11559 slab_unreclaimable:107846
[  407.950208][T11562]  mapped:43682 shmem:54595 pagetables:1090
[  407.950208][T11562]  sec_pagetables:0 bounce:0
[  407.950208][T11562]  kernel_misc_reclaimable:0
[  407.950208][T11562]  free:1265431 free_pcp:366 free_cma:0
[  408.058806][T11562] Node 0 active_anon:262392kB inactive_anon:0kB active_file:6204kB inactive_file:223000kB unevictable:1608kB isolated(anon):0kB isolated(file):0kB mapped:175028kB dirty:2116kB writeback:0kB shmem:218744kB shmem_thp:2048kB shmem_pmdmapped:0kB anon_thp:2048kB writeback_tmp:0kB kernel_stack:12516kB pagetables:4460kB sec_pagetables:0kB all_unreclaimable? no
[  408.196016][T11562] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:4kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no
[  408.280284][T11562] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  408.354670][T11562] lowmem_reserve[]: 0 2465 2466 0 0
[  408.380484][T11562] Node 0 DMA32 free:1119300kB boost:0kB min:34200kB low:42748kB high:51296kB reserved_highatomic:0KB active_anon:275660kB inactive_anon:300kB active_file:6204kB inactive_file:222168kB unevictable:1608kB writepending:2152kB present:3129332kB managed:2551340kB mlocked:68kB bounce:0kB free_pcp:7624kB local_pcp:260kB free_cma:0kB
[  408.440420][T11562] lowmem_reserve[]: 0 0 0 0 0
[  408.448809][T11562] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:832kB unevictable:0kB writepending:0kB present:1048580kB managed:876kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:0kB free_cma:0kB
[  408.516754][T11562] lowmem_reserve[]: 0 0 0 0 0
[  408.528951][T11562] Node 1 Normal free:3904868kB boost:0kB min:55688kB low:69608kB high:83528kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:4kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:40kB local_pcp:0kB free_cma:0kB
[  408.642042][T11562] lowmem_reserve[]: 0 0 0 0 0
[  408.646882][T11562] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  408.697320][T11562] Node 0 DMA32: 15*4kB (E) 12*8kB (ME) 8*16kB (ME) 16*32kB (UME) 87*64kB (UME) 294*128kB (UME) 193*256kB (UME) 73*512kB (UM) 49*1024kB (UM) 3*2048kB (UE) 226*4096kB (UM) = 1112796kB
[  408.740881][T11562] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[  408.761961][T11562] Node 1 Normal: 191*4kB (UME) 57*8kB (UME) 34*16kB (UME) 190*32kB (UME) 93*64kB (UME) 29*128kB (UME) 15*256kB (UME) 15*512kB (UM) 3*1024kB (UM) 3*2048kB (UE) 944*4096kB (M) = 3904868kB
[  408.801262][T11562] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  408.805599][T11635] kstrtoul() returned -22 for lu_gp_id
[  408.812667][T11562] Node 0 hugepages_total=2 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB
[  408.860828][T11562] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  408.891986][T11562] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  408.901739][T11562] 120126 total pagecache pages
[  408.931389][T11562] 1311 pages in swap cache
[  408.942089][T11562] Free swap  = 116724kB
[  408.946311][T11562] Total swap = 124996kB
[  408.972414][T11562] 2097051 pages RAM
[  408.976296][T11562] 0 pages HighMem/MovableOnly
[  408.981021][T11562] 427366 pages reserved
[  408.997302][T11562] 0 pages cma reserved
[  409.285946][T11646] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1217'.
[  409.316553][T11591] kstrtoul() returned -22 for lu_gp_id
[  411.461796][T11676] ecryptfs_miscdev_write: Dropping miscdev message of unrecognized type [0]

syzkaller
syzkaller login: [  412.138615][T11462] kstrtoul() returned -22 for lu_gp_id
[  412.467385][T11666] kstrtoul() returned -22 for lu_gp_id
[  413.624980][T11710] kstrtoul() returned -22 for lu_gp_id
[  413.648520][T11720] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1234'.
[  413.996516][T11292] kstrtoul() returned -22 for lu_gp_id
[  415.010836][T11733] kstrtoul() returned -22 for lu_gp_id
[  415.149024][T11746] FAULT_INJECTION: forcing a failure.
[  415.149024][T11746] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  415.209227][T11746] CPU: 1 UID: 0 PID: 11746 Comm: syz.5.1239 Not tainted 6.13.0-rc6-syzkaller-00130-g2144da25584e #0
[  415.220091][T11746] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  415.230212][T11746] Call Trace:
[  415.233548][T11746]  <TASK>
[  415.236531][T11746]  dump_stack_lvl+0x16c/0x1f0
[  415.241277][T11746]  should_fail_ex+0x497/0x5b0
[  415.246030][T11746]  _copy_from_user+0x2e/0xd0
[  415.250689][T11746]  copy_from_sockptr_offset.constprop.0+0x106/0x190
[  415.257343][T11746]  ? __pfx_copy_from_sockptr_offset.constprop.0+0x10/0x10
[  415.264534][T11746]  ? __local_bh_enable_ip+0xa4/0x120
[  415.269883][T11746]  ? lockdep_hardirqs_on+0x7c/0x110
[  415.275163][T11746]  do_ip_setsockopt+0x198a/0x38c0
[  415.280262][T11746]  ? __pfx_do_ip_setsockopt+0x10/0x10
[  415.285789][T11746]  ? ksys_write+0x12b/0x250
[  415.290373][T11746]  ? aa_sk_perm+0x2f5/0xb20
[  415.295010][T11746]  ? __pfx_aa_sk_perm+0x10/0x10
[  415.299947][T11746]  ? vfs_write+0x306/0x1150
[  415.304605][T11746]  ip_setsockopt+0x59/0xf0
[  415.309172][T11746]  ? __pfx_sock_common_setsockopt+0x10/0x10
[  415.315136][T11746]  do_sock_setsockopt+0x222/0x480
[  415.320228][T11746]  ? __pfx_do_sock_setsockopt+0x10/0x10
[  415.325845][T11746]  ? __pfx_do_sys_openat2+0x10/0x10
[  415.331122][T11746]  ? __pfx___might_resched+0x10/0x10
[  415.336571][T11746]  __sys_setsockopt+0x1a0/0x230
[  415.341500][T11746]  __x64_sys_setsockopt+0xbd/0x160
[  415.346856][T11746]  ? do_syscall_64+0x91/0x250
[  415.351605][T11746]  ? lockdep_hardirqs_on+0x7c/0x110
[  415.356907][T11746]  do_syscall_64+0xcd/0x250
[  415.361486][T11746]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  415.367468][T11746] RIP: 0033:0x7f6d7b985d29
[  415.371956][T11746] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  415.391737][T11746] RSP: 002b:00007f6d7c7a8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  415.400246][T11746] RAX: ffffffffffffffda RBX: 00007f6d7bb75fa0 RCX: 00007f6d7b985d29
[  415.408277][T11746] RDX: 0000000000000024 RSI: 0000000000000000 RDI: 0000000000000003
[  415.416396][T11746] RBP: 00007f6d7c7a8090 R08: 0000000000000028 R09: 0000000000000000
[  415.424435][T11746] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  415.432460][T11746] R13: 0000000000000000 R14: 00007f6d7bb75fa0 R15: 00007ffc19073998
[  415.440527][T11746]  </TASK>
[  415.823076][T11754] netlink: 342 bytes leftover after parsing attributes in process `syz.0.1245'.
[  417.272817][T11755] kstrtoul() returned -22 for lu_gp_id
[  418.189800][T11793] netlink: 34 bytes leftover after parsing attributes in process `syz.0.1255'.
[  418.624832][T11785] kstrtoul() returned -22 for lu_gp_id

syzkaller
syzkaller login: [  420.496746][T11813] kstrtoul() returned -22 for lu_gp_id
[  421.050925][T11836] kstrtoul() returned -22 for lu_gp_id
[  421.607102][T11848] kstrtoul() returned -22 for lu_gp_id
[  422.276090][T11866] kstrtoul() returned -22 for lu_gp_id
[  422.606402][T11878] kstrtoul() returned -22 for lu_gp_id
[  422.857389][T11881] kstrtoul() returned -22 for lu_gp_id
[  423.224352][T11889] kstrtoul() returned -22 for lu_gp_id
[  423.733072][T11907] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1280'.
[  423.787694][T11901] kstrtoul() returned -22 for lu_gp_id
[  424.152615][T11911] kstrtoul() returned -22 for lu_gp_id
[  424.379051][T11917] kstrtoul() returned -22 for lu_gp_id
[  424.614495][T11925] block nbd2: Unsupported socket: shutdown callout must be supported.
[  424.804725][T11925] kstrtoul() returned -22 for lu_gp_id
[  425.215762][T11928] kstrtoul() returned -22 for lu_gp_id
[  425.498905][T11931] kstrtoul() returned -22 for lu_gp_id
[  425.763790][T11932] kstrtoul() returned -22 for lu_gp_id
[  425.988331][T11934] kstrtoul() returned -22 for lu_gp_id
[  426.145385][T11942] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1294'.
[  426.176939][T11944] kstrtoul() returned -22 for lu_gp_id
[  426.601995][T11940] Process accounting resumed
[  427.716739][T11974] lo: entered allmulticast mode
[  427.945728][T11974] lo: left allmulticast mode
[  430.436680][ T9012] [drm:drm_crtc_add_crc_entry] *ERROR* Overflow of CRC buffer, userspace reads too slow.
[  430.921599][T12017] Process accounting paused
[  433.022467][T12050] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1318'.
[  434.499327][   T29] audit: type=1806 audit(2205.721:9): xattr="" res=-22
[  436.593518][T12102] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1331'.
[  437.547431][T12107] netlink: Unknown conntrack attr (0)
[  438.311222][T12077] cifs: Unknown parameter 'no+ 1����`��r�sFn)��a�H��ā��h`����9k�A}���1\D@��.��Z�Cg^�'
[  445.462817][ T1294] ieee802154 phy0 wpan0: encryption failed: -22
[  445.470529][ T1294] ieee802154 phy1 wpan1: encryption failed: -22
[  447.183930][   T29] audit: type=1800 audit(2218.401:10): pid=12230 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.1364" name="dbroot" dev="configfs" ino=35946 res=0 errno=0
[  447.298105][T12232] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1366'.
[  447.334942][T12232] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  447.352313][T12232] batman_adv: batadv0: Removing interface: batadv_slave_0
[  447.405239][T12232] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  447.454575][T12232] batman_adv: batadv0: Removing interface: batadv_slave_1
[  448.982928][T12267] device-mapper: ioctl: Invalid ioctl structure: uuid , name , dev 400008000000006
[  451.470849][T12317] Process accounting resumed
[  451.654813][ T5847] Bluetooth: hci3: Opcode 0x0c03 failed: -110
[  453.962791][T12355] Invalid ELF header len 3
[  454.242105][T12363] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1390'.
[  454.279622][T12363] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  454.301291][T12363] batman_adv: batadv0: Removing interface: batadv_slave_0
[  454.348436][T12363] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  454.356158][T12363] batman_adv: batadv0: Removing interface: batadv_slave_1
[  456.312166][T12392] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1398'.
[  456.332054][T12392] tc_dump_action: action bad kind
[  458.103138][T12401] [U] 
[  458.106279][T12401] [U] 
[  458.109051][T12401] [U] 
[  458.111805][T12401] [U] 
[  458.182219][T12402] [U] 
[  459.673001][T12463] nbd: socks must be embedded in a SOCK_ITEM attr
[  459.694861][T12463] block nbd2: shutting down sockets
[  460.502372][T12478] netlink: 68 bytes leftover after parsing attributes in process `syz.5.1415'.
[  462.119616][T12508] Process accounting resumed
[  464.962755][T12554] binder: 12553:12554 ioctl 1 9 returned -22
[  466.745016][T12589] Process accounting resumed
[  466.749705][T12589] kernel write not supported for file netdevsim/netdevsim0/psample/latency_max (pid: 12589 comm: syz.5.1440)
[  467.216784][T12593] kernel write not supported for file netdevsim/netdevsim0/psample/latency_max (pid: 12593 comm: syz.5.1443)
[  467.527567][T12605] kernel write not supported for file netdevsim/netdevsim0/psample/latency_max (pid: 12605 comm: syz.5.1445)
[  467.632594][T12602] Process accounting resumed
[  468.362360][T12612] kernel write not supported for file netdevsim/netdevsim0/psample/latency_max (pid: 12612 comm: syz.5.1446)
[  468.895954][T12625] kernel write not supported for file netdevsim/netdevsim0/psample/latency_max (pid: 12625 comm: syz.5.1448)
[  469.492549][T12638] Invalid ELF header magic: != ELF
[  470.958056][T12661] Invalid ELF header magic: != ELF
[  472.306029][T12617] 
[  472.308419][T12617] ======================================================
[  472.315475][T12617] WARNING: possible circular locking dependency detected
[  472.322574][T12617] 6.13.0-rc6-syzkaller-00130-g2144da25584e #0 Not tainted
[  472.329725][T12617] ------------------------------------------------------
[  472.336782][T12617] syz.5.1446/12617 is trying to acquire lock:
[  472.342889][T12617] ffff888023762bc0 (mapping.invalidate_lock#2){.+.+}-{4:4}, at: page_cache_ra_unbounded+0x173/0x750
[  472.353917][T12617] 
[  472.353917][T12617] but task is already holding lock:
[  472.361341][T12617] ffff8880280e28e0 (&mm->mmap_lock){++++}-{4:4}, at: get_dump_page+0xb6/0x230
[  472.370321][T12617] 
[  472.370321][T12617] which lock already depends on the new lock.
[  472.370321][T12617] 
[  472.380764][T12617] 
[  472.380764][T12617] the existing dependency chain (in reverse order) is:
[  472.389822][T12617] 
[  472.389822][T12617] -> #5 (&mm->mmap_lock){++++}-{4:4}:
[  472.397461][T12617]        __might_fault+0x11b/0x190
[  472.402663][T12617]        _copy_from_user+0x29/0xd0
[  472.407893][T12617]        __blk_trace_setup+0xa8/0x180
[  472.413322][T12617]        blk_trace_setup+0x47/0x70
[  472.418616][T12617]        sg_ioctl+0x7a3/0x26b0
[  472.423449][T12617]        __x64_sys_ioctl+0x190/0x200
[  472.428783][T12617]        do_syscall_64+0xcd/0x250
[  472.433868][T12617]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  472.440347][T12617] 
[  472.440347][T12617] -> #4 (&q->debugfs_mutex){+.+.}-{4:4}:
[  472.448234][T12617]        __mutex_lock+0x19b/0xa60
[  472.453327][T12617]        blk_mq_init_sched+0x42b/0x640
[  472.458864][T12617]        elevator_init_mq+0x2cd/0x420
[  472.464312][T12617]        add_disk_fwnode+0x113/0x1300
[  472.469729][T12617]        sd_probe+0xa66/0xfa0
[  472.474473][T12617]        really_probe+0x23e/0xa90
[  472.479557][T12617]        __driver_probe_device+0x1de/0x440
[  472.485422][T12617]        driver_probe_device+0x4c/0x1b0
[  472.491041][T12617]        __device_attach_driver+0x1df/0x310
[  472.496998][T12617]        bus_for_each_drv+0x157/0x1e0
[  472.502422][T12617]        __device_attach_async_helper+0x1d3/0x290
[  472.508941][T12617]        async_run_entry_fn+0x9c/0x530
[  472.514825][T12617]        process_one_work+0x958/0x1b30
[  472.520342][T12617]        worker_thread+0x6c8/0xf00
[  472.525512][T12617]        kthread+0x2c1/0x3a0
[  472.530155][T12617]        ret_from_fork+0x45/0x80
[  472.535136][T12617]        ret_from_fork_asm+0x1a/0x30
[  472.540483][T12617] 
[  472.540483][T12617] -> #3 (&q->q_usage_counter(queue)#50){++++}-{0:0}:
[  472.549423][T12617]        blk_queue_enter+0x50f/0x640
[  472.554777][T12617]        blk_mq_alloc_request+0x59b/0x950
[  472.560560][T12617]        scsi_execute_cmd+0x1f1/0xff0
[  472.565997][T12617]        read_capacity_16+0x21a/0xe20
[  472.571435][T12617]        sd_revalidate_disk.isra.0+0x1a06/0xa8d0
[  472.577831][T12617]        sd_probe+0x8ee/0xfa0
[  472.582580][T12617]        really_probe+0x23e/0xa90
[  472.587667][T12617]        __driver_probe_device+0x1de/0x440
[  472.593540][T12617]        driver_probe_device+0x4c/0x1b0
[  472.599165][T12617]        __device_attach_driver+0x1df/0x310
[  472.605121][T12617]        bus_for_each_drv+0x157/0x1e0
[  472.610544][T12617]        __device_attach_async_helper+0x1d3/0x290
[  472.617021][T12617]        async_run_entry_fn+0x9c/0x530
[  472.622526][T12617]        process_one_work+0x958/0x1b30
[  472.628004][T12617]        worker_thread+0x6c8/0xf00
[  472.633133][T12617]        kthread+0x2c1/0x3a0
[  472.637752][T12617]        ret_from_fork+0x45/0x80
[  472.642712][T12617]        ret_from_fork_asm+0x1a/0x30
[  472.648031][T12617] 
[  472.648031][T12617] -> #2 (&q->limits_lock){+.+.}-{4:4}:
[  472.655721][T12617]        __mutex_lock+0x19b/0xa60
[  472.660791][T12617]        __nbd_set_size+0x2c0/0x730
[  472.666026][T12617]        nbd_start_device+0x8fd/0xd70
[  472.671428][T12617]        nbd_genl_connect+0x1204/0x1c00
[  472.677000][T12617]        genl_family_rcv_msg_doit+0x202/0x2f0
[  472.683096][T12617]        genl_rcv_msg+0x565/0x800
[  472.688145][T12617]        netlink_rcv_skb+0x165/0x410
[  472.693453][T12617]        genl_rcv+0x28/0x40
[  472.697989][T12617]        netlink_unicast+0x53c/0x7f0
[  472.703296][T12617]        netlink_sendmsg+0x8b8/0xd70
[  472.708606][T12617]        ____sys_sendmsg+0x9ae/0xb40
[  472.714038][T12617]        ___sys_sendmsg+0x135/0x1e0
[  472.719282][T12617]        __sys_sendmsg+0x16e/0x220
[  472.724435][T12617]        do_syscall_64+0xcd/0x250
[  472.729496][T12617]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  472.735947][T12617] 
[  472.735947][T12617] -> #1 (&q->q_usage_counter(io)#49){++++}-{0:0}:
[  472.744593][T12617]        blk_mq_submit_bio+0x1fb6/0x24c0
[  472.750267][T12617]        __submit_bio+0x384/0x540
[  472.755323][T12617]        submit_bio_noacct_nocheck+0x698/0xd70
[  472.761515][T12617]        submit_bio_noacct+0x93a/0x1e20
[  472.767094][T12617]        mpage_readahead+0x41d/0x590
[  472.772413][T12617]        read_pages+0x1a8/0xdc0
[  472.777286][T12617]        page_cache_ra_unbounded+0x3dc/0x750
[  472.783289][T12617]        force_page_cache_ra+0x24b/0x340
[  472.788945][T12617]        page_cache_sync_ra+0x110/0x9c0
[  472.794515][T12617]        filemap_get_pages+0xd7b/0x1be0
[  472.800089][T12617]        filemap_read+0x3ca/0xd70
[  472.805138][T12617]        blkdev_read_iter+0x187/0x480
[  472.810533][T12617]        vfs_read+0x87f/0xbe0
[  472.815321][T12617]        ksys_read+0x12b/0x250
[  472.820110][T12617]        do_syscall_64+0xcd/0x250
[  472.825162][T12617]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  472.831604][T12617] 
[  472.831604][T12617] -> #0 (mapping.invalidate_lock#2){.+.+}-{4:4}:
[  472.840160][T12617]        __lock_acquire+0x249e/0x3c40
[  472.845552][T12617]        lock_acquire.part.0+0x11b/0x380
[  472.851204][T12617]        down_read+0x9a/0x330
[  472.855911][T12617]        page_cache_ra_unbounded+0x173/0x750
[  472.861917][T12617]        page_cache_ra_order+0x8f2/0xc80
[  472.867583][T12617]        filemap_fault+0x14a5/0x2820
[  472.872904][T12617]        __do_fault+0x10a/0x490
[  472.877779][T12617]        do_pte_missing+0xebd/0x3e00
[  472.883097][T12617]        __handle_mm_fault+0x103c/0x2a40
[  472.888762][T12617]        handle_mm_fault+0x3fa/0xaa0
[  472.894080][T12617]        __get_user_pages+0x8d9/0x3b50
[  472.899568][T12617]        get_dump_page+0xff/0x230
[  472.904625][T12617]        dump_user_range+0x135/0x8c0
[  472.909977][T12617]        elf_core_dump+0x2787/0x3880
[  472.915288][T12617]        do_coredump+0x2dd5/0x43e0
[  472.920878][T12617]        get_signal+0x23f3/0x2610
[  472.925929][T12617]        arch_do_signal_or_restart+0x90/0x7e0
[  472.932029][T12617]        irqentry_exit_to_user_mode+0x13f/0x280
[  472.938298][T12617]        asm_exc_general_protection+0x26/0x30
[  472.944401][T12617] 
[  472.944401][T12617] other info that might help us debug this:
[  472.944401][T12617] 
[  472.954641][T12617] Chain exists of:
[  472.954641][T12617]   mapping.invalidate_lock#2 --> &q->debugfs_mutex --> &mm->mmap_lock
[  472.954641][T12617] 
[  472.968688][T12617]  Possible unsafe locking scenario:
[  472.968688][T12617] 
[  472.976155][T12617]        CPU0                    CPU1
[  472.981529][T12617]        ----                    ----
[  472.986903][T12617]   rlock(&mm->mmap_lock);
[  472.991340][T12617]                                lock(&q->debugfs_mutex);
[  472.998469][T12617]                                lock(&mm->mmap_lock);
[  473.005342][T12617]   rlock(mapping.invalidate_lock#2);
[  473.010786][T12617] 
[  473.010786][T12617]  *** DEADLOCK ***
[  473.010786][T12617] 
[  473.018940][T12617] 2 locks held by syz.5.1446/12617:
[  473.024415][T12617]  #0: ffff888063a6a420 (sb_writers#5){.+.+}-{0:0}, at: get_signal+0x23f3/0x2610
[  473.033618][T12617]  #1: ffff8880280e28e0 (&mm->mmap_lock){++++}-{4:4}, at: get_dump_page+0xb6/0x230
[  473.042987][T12617] 
[  473.042987][T12617] stack backtrace:
[  473.048883][T12617] CPU: 1 UID: 0 PID: 12617 Comm: syz.5.1446 Not tainted 6.13.0-rc6-syzkaller-00130-g2144da25584e #0
[  473.059667][T12617] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  473.069743][T12617] Call Trace:
[  473.073040][T12617]  <TASK>
[  473.075985][T12617]  dump_stack_lvl+0x116/0x1f0
[  473.080694][T12617]  print_circular_bug+0x41c/0x610
[  473.085765][T12617]  check_noncircular+0x31a/0x400
[  473.090746][T12617]  ? __pfx_check_noncircular+0x10/0x10
[  473.096246][T12617]  ? hlock_class+0x4e/0x130
[  473.100877][T12617]  ? lockdep_lock+0xc6/0x200
[  473.105498][T12617]  ? __pfx_lockdep_lock+0x10/0x10
[  473.110559][T12617]  __lock_acquire+0x249e/0x3c40
[  473.115441][T12617]  ? __pfx___lock_acquire+0x10/0x10
[  473.120666][T12617]  ? __pfx_mark_lock+0x10/0x10
[  473.125468][T12617]  lock_acquire.part.0+0x11b/0x380
[  473.130604][T12617]  ? page_cache_ra_unbounded+0x173/0x750
[  473.136267][T12617]  ? __pfx_lock_acquire.part.0+0x10/0x10
[  473.142008][T12617]  ? rcu_is_watching+0x12/0xc0
[  473.146803][T12617]  ? trace_lock_acquire+0x14e/0x1f0
[  473.152046][T12617]  ? page_cache_ra_unbounded+0x173/0x750
[  473.157719][T12617]  ? lock_acquire+0x2f/0xb0
[  473.162240][T12617]  ? page_cache_ra_unbounded+0x173/0x750
[  473.167902][T12617]  down_read+0x9a/0x330
[  473.172093][T12617]  ? page_cache_ra_unbounded+0x173/0x750
[  473.177755][T12617]  ? __pfx_down_read+0x10/0x10
[  473.182553][T12617]  ? hlock_class+0x4e/0x130
[  473.187089][T12617]  ? mark_lock+0xb5/0xc60
[  473.191455][T12617]  ? __pfx___lock_acquire+0x10/0x10
[  473.196673][T12617]  ? xas_load+0x49/0x5b0
[  473.200950][T12617]  page_cache_ra_unbounded+0x173/0x750
[  473.206436][T12617]  ? find_held_lock+0x2d/0x110
[  473.211234][T12617]  page_cache_ra_order+0x8f2/0xc80
[  473.216376][T12617]  filemap_fault+0x14a5/0x2820
[  473.221197][T12617]  ? __pfx_filemap_fault+0x10/0x10
[  473.226347][T12617]  ? do_pte_missing+0xdd7/0x3e00
[  473.231322][T12617]  ? __pfx_lock_release+0x10/0x10
[  473.236372][T12617]  __do_fault+0x10a/0x490
[  473.240727][T12617]  do_pte_missing+0xebd/0x3e00
[  473.245524][T12617]  ? __pfx_lock_release+0x10/0x10
[  473.250580][T12617]  __handle_mm_fault+0x103c/0x2a40
[  473.255743][T12617]  ? __pfx___handle_mm_fault+0x10/0x10
[  473.261234][T12617]  ? __lock_acquire+0x15a9/0x3c40
[  473.266295][T12617]  handle_mm_fault+0x3fa/0xaa0
[  473.271128][T12617]  __get_user_pages+0x8d9/0x3b50
[  473.276102][T12617]  ? __pfx___get_user_pages+0x10/0x10
[  473.281501][T12617]  ? down_read_killable+0xcc/0x380
[  473.286645][T12617]  ? __pfx_down_read_killable+0x10/0x10
[  473.292225][T12617]  ? policy_nodemask+0xea/0x4e0
[  473.297112][T12617]  get_dump_page+0xff/0x230
[  473.301654][T12617]  ? __pfx_get_dump_page+0x10/0x10
[  473.306796][T12617]  ? do_raw_spin_unlock+0x172/0x230
[  473.312025][T12617]  ? free_unref_page+0x6f5/0x1080
[  473.317084][T12617]  dump_user_range+0x135/0x8c0
[  473.321891][T12617]  ? __pfx_dump_user_range+0x10/0x10
[  473.327224][T12617]  ? elf_coredump_extra_notes_write+0xbe/0x430
[  473.333410][T12617]  ? __pfx_writenote+0x10/0x10
[  473.338200][T12617]  elf_core_dump+0x2787/0x3880
[  473.342990][T12617]  ? __pfx_elf_core_dump+0x10/0x10
[  473.348209][T12617]  ? kasan_save_stack+0x42/0x60
[  473.353094][T12617]  ? kasan_save_stack+0x33/0x60
[  473.357975][T12617]  ? kasan_save_track+0x14/0x30
[  473.362854][T12617]  ? __kasan_kmalloc+0xaa/0xb0
[  473.367648][T12617]  ? __kvmalloc_node_noprof+0xad/0x1a0
[  473.373135][T12617]  ? do_coredump+0x1665/0x43e0
[  473.377934][T12617]  ? get_signal+0x23f3/0x2610
[  473.382658][T12617]  ? rcu_is_watching+0x12/0xc0
[  473.387450][T12617]  ? trace_lock_acquire+0x14e/0x1f0
[  473.392678][T12617]  ? __pfx_sort+0x10/0x10
[  473.397042][T12617]  ? get_signal+0x23f3/0x2610
[  473.401749][T12617]  ? do_coredump+0x2dd5/0x43e0
[  473.406552][T12617]  do_coredump+0x2dd5/0x43e0
[  473.411183][T12617]  ? __pfx_do_coredump+0x10/0x10
[  473.416156][T12617]  ? irqentry_exit_to_user_mode+0x13f/0x280
[  473.422107][T12617]  get_signal+0x23f3/0x2610
[  473.426645][T12617]  ? _raw_spin_unlock_irqrestore+0x3b/0x80
[  473.432479][T12617]  ? __pfx_get_signal+0x10/0x10
[  473.437358][T12617]  arch_do_signal_or_restart+0x90/0x7e0
[  473.442939][T12617]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[  473.449128][T12617]  ? exc_general_protection+0x1bc/0x230
[  473.454718][T12617]  irqentry_exit_to_user_mode+0x13f/0x280
[  473.460471][T12617]  asm_exc_general_protection+0x26/0x30
[  473.466052][T12617] RIP: 0033:0x7f6d7b985d31
[  473.470487][T12617] Code: 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 <c3> 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f
[  473.490132][T12617] RSP: 002b:0000000020000010 EFLAGS: 00010217
[  473.496229][T12617] RAX: 0000000000000000 RBX: 00007f6d7bb75fa0 RCX: 00007f6d7b985d29
[  473.504238][T12617] RDX: 0000000000000000 RSI: 0000000020000010 RDI: 0000000080000000
[  473.512230][T12617] RBP: 00007f6d7ba01b08 R08: 0000000000000000 R09: 0000000000000000
[  473.520225][T12617] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  473.528214][T12617] R13: 0000000000000000 R14: 00007f6d7bb75fa0 R15: 00007ffc19073998
[  473.536216][T12617]  </TASK>
[  474.554680][T12633] kernel write not supported for file netdevsim/netdevsim0/psample/latency_max (pid: 12633 comm: syz.5.1451)
[  475.872801][T12617] kernel write not supported for file netdevsim/netdevsim0/psample/latency_max (pid: 12617 comm: syz.5.1446)
[  477.401390][T12619] kernel write not supported for file netdevsim/netdevsim0/psample/latency_max (pid: 12619 comm: syz.5.1446)