last executing test programs: 1m14.304738997s ago: executing program 1 (id=193): mmap$auto(0x5, 0x2020009, 0x3, 0xeb5, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000080), 0x80080, 0x0) fcntl$auto(0x3, 0x400, 0x1) r1 = socket(0xa, 0x801, 0x84) listen$auto(r1, 0x3) sendmsg$auto_NL80211_CMD_JOIN_IBSS(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_DEL_STATION(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000440)={0x53c, r2, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [@NL80211_ATTR_TX_RATES={0x455, 0x5a, 0x0, 0x1, [@nested={0x22e, 0x359, 0x0, 0x1, [@generic="890ee7bbd99e0f99a06a2334d9b4a00d89eca8b9a23bb7ec3ca89b0a35f2c869234c84d0cf1028b578a0618078362fa83a536c278e2aca649d0faa83fb9ec91193b5d8d85565dd7292b944edd7442d970a799ffb3147436dbb247d7d50c66058765a3394b4578bf5d434538b8365eb8d4dd8cbe3dba7a783139bc273e0734acec036f4c03db12f4e069de6f77524059ff89f5ceec1de08b65c8f9a5eeb8b87416fe3cc5505dc56fb913af3bf35f390454fd03fdfc493155c744b3061ffa80115633abd49f75635df1099838dc30c3e72b19c77eb620fa52ea78e7a171ce91e2818", @generic="e160ef7d6a4af0320035ffb808328e9168b6f51673879414e42578f189f10f154ae68286268ddbab34fc8116c3ed66351c140a45d263f3a655ec68bda9103aa4f6891e61650695da780caffed2f02b568b053a09a5b548feef1da9309c59f4b900215737630ff62c3caa2132", @nested={0x4, 0x42}, @typed={0x8, 0x128, 0x0, 0x0, @u32=0x7f}, @generic="c7e45d2254b4018242a7afda80d1c3a5bda5f666cdbda89a3f167ed169946ee31216652f350ea7897e17294f9db7827d8a494024398ea0e97b04a8c2d93ccd1febc2fccbe7b80f2da497", @nested={0x4, 0x139}, @generic="eeb05a35457932ea7672c8695c7b0cff39ca5de0cfd6324fba7fa887cb5a4b1619b0e8d87594fe9a3ccc8434918c007ab01020afc078b25edab90546e913d05e0c3b3ba6734ba3d08d8de259b4813f38fb215c0288f4bfa65a2b8dda4148366a5f425d36fc7f2d047d1eb5a02d244f74ab7290304b4406bd6f106114281d53", @nested={0x4, 0x2}]}, @nested={0x188, 0xbf, 0x0, 0x1, [@generic="41b70e46766461e10a8c9c42901e656fd69a49b67431ec91394e49989a7e33ee974cb52d337c697a22a3282711af7afef829cd8591972146aaea997a7033a50298eaefbb9412813a43c3040093ca4e8cf62945716b7dfc5b0ef982f9883a9443791e56b12373aee462f8222129694934dc28b69cb235b5928972cd16b8c400aaad6789a60eab5a06d6b05555f4dbd24859db9648aa630172a84b46c4011b400a1f98d9396de2fb0cea04df", @nested={0x4, 0x5c}, @nested={0x4, 0x34}, @generic="2c510bb61f4894a5e9c695323157f6a2783c50ee6512edbc7552e59d561ca2a221818e14ccdef563c2308144bfc6a29ef27ddf136ace30bb848613302f7acdc5944cc30fa7b93421327b", @generic="4f98a7ed2a5b81a93444fe33f12ef9dc0f80113e403f93935297cf28c1a5497d06dfc2a340336d850f2f6aa21744bae01657ede3cda6e8ce8456a017d6259165755405c34483d5b2eaa1ad9f83597ab4401d0a63bf71c00eaf9971a038c354855b28d741aa6624f5f08c11d2a3f3ed0f06dad38f83595bd0f4a9084437aa27a712c112", @nested={0x4, 0x10d}]}, @generic="00d0d64a4c7d77500d1f01ce3b2bcc1b64c1f27d0fa0a489c85ea19b0c54806b03733cfc17dd2d8eb116d706c32cfc31a7a75d0befeaa67575c0f9e4edb0ff7e6ed387670815fac632095180d922a1d733ad8208c5ddffa5233ae2e01e78cce887064e3e20a509d62ed02ae3bdbd5c2779158cfb0bc91537a9263af304aedd72e83561c6e0eb917bfab21f3377fbc4213e638fb33e06e2c71b"]}, @NL80211_ATTR_STA_FLAGS={0xd0, 0x11, 0x0, 0x1, [@generic, @generic="16ad7fd1575a563596959459ca70ee3990140b9cf14043b13ca62d624c3aa8e5b6bd763eef2fa2beea8bda67c0d8f15e5148fde2093ab6f7421ca8dd047427d09f1794b439e3536deb072fa858201a7aa17adf4282b46b502a3ffdb0cd2cd236f0789c220094bc5c034f86d70b6b4dd2a55b76fa4996599512b44a22cd8734a0627198c7abf2c8ead0e97d3708", @nested={0xc, 0x5d, 0x0, 0x1, [@typed={0x8, 0x5a, 0x0, 0x0, @u32=0x385d}]}, @typed={0x8, 0xb7, 0x0, 0x0, @u32=0x3}, @generic="afe1df8bd843da8ec871b2f3042f7b117811a77c4a", @generic="8508897884cbac449f6efefe3e596b4afb5156ae3924"]}]}, 0x53c}, 0x1, 0x0, 0x0, 0x20000000}, 0x90) r3 = socket(0x2, 0x1, 0x0) setsockopt$auto(r0, 0x5, 0x3, &(0x7f0000000200)='\x00', 0x9) r4 = getsockopt$auto(r3, 0x6, 0x8, &(0x7f00000003c0)='/dev/ptys4\x00', &(0x7f0000000400)=0x5) cachestat$auto(r4, &(0x7f0000000140)={0x0, 0x8}, &(0x7f0000000180)={0x400, 0xc4a2, 0xee, 0x7fff, 0x2e3a}, 0x400) r5 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) write$auto_console_fops_tty_io(r5, &(0x7f00000001c0)="2a1d264add69b6440800ac8caf4bdecc30b530ac6ebbff950e1a647d6a08a1b55dde5a409b73830b7803aef33addb33f3a800002000000f179fa3d472949a7264a1b2547c4346fa2e5f21fce0030523285c82be9da9b72", 0x57) ioctl$auto_SG_GET_TIMEOUT(r4, 0x2202, 0x0) openat$auto_ftrace_subsystem_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/tracing/events/vmalloc/filter\x00', 0x237, 0x0) 1m7.845315353s ago: executing program 1 (id=221): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async) close_range$auto(0x2, 0x8, 0x0) (async) io_uring_setup$auto(0x6, 0x0) (async) socket(0xa, 0x1, 0x6) (async) socket(0x11, 0x80003, 0x300) (async) socket(0x10, 0x804, 0x0) (async) socket(0x2, 0x3, 0x2) (async) r0 = socket(0x2, 0x3, 0x104) socket$nl_generic(0x10, 0x3, 0x10) (async) openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, 0x0, 0x40, 0x0) (async) socketpair$auto(0x3, 0x8, 0x7, 0x0) setsockopt$auto(0x3, 0x0, 0xf, 0x0, 0xb) bind$auto(0x3, 0x0, 0x6b) socket(0xa, 0x801, 0x3) r1 = socket(0x2, 0x5, 0x0) bind$auto(0x3, 0x0, 0x6a) mmap$auto(0x0, 0x40009, 0xdd, 0x9b72, 0x7, 0x28000) socket(0x15, 0x5, 0x0) (async) r2 = openat$auto_vga_arb_device_fops_vgaarb(0xffffffffffffff9c, &(0x7f0000000040), 0x8000, 0x0) read$auto_vga_arb_device_fops_vgaarb(r2, 0x0, 0x0) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) ioctl$auto(0x3, 0x89e0, 0x91) (async) listen$auto(0x3, 0x7e) (async) sendmmsg$auto(r1, 0x0, 0x5, 0x311) (async) close_range$auto(0x2, 0x8000, 0x0) (async) openat$auto_dai_list_fops_(0xffffffffffffff9c, &(0x7f0000000000), 0x10040, 0x0) (async) read$auto(r0, 0x0, 0xbe62) (async) pipe$auto(&(0x7f0000000080)=r1) sendmmsg$auto(0x3, 0x0, 0x3, 0x0) 1m0.5600651s ago: executing program 1 (id=250): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ovs_meter(&(0x7f0000003040), 0xffffffffffffffff) syz_clone3(&(0x7f0000000300)={0x92090a00, &(0x7f0000000040), &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0, {0xd}, &(0x7f0000000100)=""/141, 0x8d, &(0x7f00000001c0)=""/219, &(0x7f00000002c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0], 0x5}, 0x58) sendmsg$auto_OVS_METER_CMD_SET(r0, &(0x7f0000003240)={0x0, 0x0, &(0x7f0000003200)={&(0x7f0000000380)={0x16bc, r1, 0x159198c6007aa95d, 0x70bd29, 0x25dfdbfc, {}, [@OVS_METER_ATTR_STATS={0x14, 0x3, {0x100, 0x4}}, @OVS_METER_ATTR_BANDS={0x168a, 0x4, 0x0, 0x1, [@typed={0x8, 0xf6, 0x0, 0x0, @pid=r3}, @nested={0x14d9, 0xff, 0x0, 0x1, [@generic="00de2f1e5274d955703e197b75fb1e9190f131213129b3928ca3bfdeddb0d0ac817bae7aefad226b23ee2ee73be584d0a43a2b19500ef1dc7f21cbaa71605c0836d0eb4c9c2945aaedcf858b11963be15fc7f107097f99e3dace7cf859109301e9acfea3b328004885ec79e2c163da977d", @generic="b455d9829858bdcd480ba9e3721695db131742dc015b267207d3886db333686598a20c75d428d92c9680b5a1b6ce6d6c0f5ece95cb67adb27cdcc0a720733320d8268568e30f779a7f746d2e99e46ce118b3d7c7147e462b215e54a44ca8d0db291cbc79c9491e8de99f6096c3a83e5f7aed65015db85a786709ecf1caa582f12b527f02fdaaf7d2cc5a6639c021903bf9b71293488fae3fb718c94a21aa50669af38e19469494aeb26e8ae050ad9e4c6d291966a619423dd80546bdcd2f7084cf69fe2d4b653635591c21427ae72f8b9b22dd8770cfdf60e0706a320d5336fbff73a5", @nested={0x99, 0xe3, 0x0, 0x1, [@nested={0x4, 0xa0}, @nested={0x4, 0x1e}, @nested={0x4, 0x7}, @generic="af5957a7299ea6f5ebcd13d660d16c991771cc2d055e09b4ba5692fdb62352811a8093468aa271af080e3c0009fd732c0fa2182a922164a851a82b4cd33d1319a11afb5817a247c7dcf3f4aecdd8a6df545ea99498bdc6d5fd4c1881a846ae15cb4b142263bb49184c173bc87f9b8ab7bb094fba30131eaf32aaf0263e02855a38", @typed={0x8, 0x68, 0x0, 0x0, @u32=0x8001}]}, @generic="6688e1acf9a8aff4e093088a39fdbbc637d0e14a826655813acc28c8777f1e0cd1c43beec8f341b593a153182a7a47d2e83e58aa1bc00e47991b102ca6b4c0cbe687ef79e16a113d718870d9c815e503477f96651229efe3e4cb01dec1a012b159367f2bb755a40a786c1eb25722a6a88a1f1da30f8486ca9aff674883a8bf71a05c2e70df97a158e6b39a11d8f22e8e40cbedcddf16eb448924002c2a6570eea7611fcf02f2a972d0c3ca1973180ddd8a120c05e450a687fc556fd5daaffa049524ff9e913fee3bbb6775eb709919ed470520a1ee5b79167b64ed219837e42344e397", @generic="6af724ca671e50fb7acb62ae87b1ce5e75b87a110655698040178bf9b00dde20001a302434649201192f0e88e6355146517fcf09b0", @typed={0x8, 0x1, 0x0, 0x0, @ipv4=@local}, @nested={0x11a3, 0x7b, 0x0, 0x1, [@generic="99c4a7bef3d21b28253ea4b499bfe3dbe19e8292d323bfef446e0b9d9fb9c4031562a40b7bfef20fa97ab1faee214663d68e2f52f41a4468b954ee323bc5e88584158f47d61cdfa388dcdee43c3ee5896cb555352144d0f4789fd281cc98a2edead754e5273fb8c2be3829874d85cb91d9841bb453149b1be0c9bd036cf3f85ef026e360afcad1edbbf116aa52ec5183d255", @generic="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", @typed={0x8, 0x71, 0x0, 0x0, @ipv4=@loopback}, @typed={0x8, 0x75, 0x0, 0x0, @pid=r2}, @generic="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"]}, @typed={0x4, 0x5c}, @generic="14e340bf69c35d478c1a4ad0ad93b7db4353b9774cc815d3277a4a28df"]}, @typed={0x8, 0x12e, 0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0x31}}, @nested={0xc8, 0x10b, 0x0, 0x1, [@typed={0x14, 0x12b, 0x0, 0x0, @ipv6=@mcast1}, @nested={0xb0, 0xd5, 0x0, 0x1, [@generic="f205d2fc377d282e1997c1f2dd22ffd142094f1aa4c1849edc01b0b690b62f1cdbfced5eb17bba727121bea01e25e425eb3dbd2bd806c5ccd9ed6104b3f57e1c35e34504bb7d4836", @generic="2016720483c1d79d968df9741db87e1a742df420a3804dddbaa0d1da2c572b4fa60cdb19c82855d291c77bf0d11a0c90d1c86cfd9c5fed296d4909f9dd6689c98937333af889014a98af2e60f7ec4843780411dfae416890aedfed78df885a32d98b50b6"]}]}, @generic="aff39624e5a1a49d8d9b75be9628af8b337c41764d3b", @typed={0x4, 0x80}, @generic="9aed6b5d9372c55790e780d802d802dea0c2f453ba41f98494e7ed277e53afbd40d4e2576cf545f12ff5aa64a8f5b39223804a1a97a24b47b3e5e16034cbb77cb5e5c868970cfde9f6300816d05edeb3db7dac75f521d0bbe2a8daa9c72c3d4ad6bbe0040a1b609cc1486d9a101d45a4464f2a06ef2e3955fa8093a975919831d4db22d8688652473132fc6237dbedfcff4593b83a9b74ad1be7a1197bf6e0bbb757ce5c301e42c956a8510c8324259639332d07214819e5"]}, @OVS_METER_ATTR_ID={0x8, 0x1, 0x5}]}, 0x16bc}, 0x1, 0x0, 0x0, 0xc0}, 0x4) 53.894776068s ago: executing program 1 (id=271): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = getsid$auto(0x0) r1 = socket(0x2, 0x5, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) setsockopt$auto(r1, 0x10000000084, 0x7, 0x0, 0x4) rt_sigqueueinfo$auto(r0, 0x8, &(0x7f0000000340)={@_si_pad}) r2 = prctl$auto(0x1000000003b, 0x1, r0, 0xa, 0x8000000003) mmap$auto(0x0, 0x4020009, 0x7, 0xeb1, 0x400, 0x8000) r3 = socket(0x2b, 0x1, 0x1) setsockopt$auto(r3, 0x29, 0x48, 0x0, 0x20) socket$nl_generic(0x10, 0x3, 0x10) socket(0x23, 0x80805, 0x0) r4 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv6/conf/bond_slave_0/force_mld_version\x00', 0x200000, 0x0) close_range$auto(r2, r4, 0xffffffff) memfd_secret$auto(0x0) rseq$auto(&(0x7f0000000300)={0xe, 0x401, 0x0, 0x6, 0xffffffff, 0x2}, 0x8000, 0x0, 0x6) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) syz_clone3(&(0x7f0000000000)={0x28020000, 0x0, 0x0, 0x0, {0x29}, 0x0, 0x0, 0x0, 0x0}, 0x58) sendmsg$auto_L2TP_CMD_SESSION_MODIFY(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x70, 0x0, 0x800, 0x70bd2d, 0x25dfdbfc, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x3}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, 0x8}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0xfa68}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x2}, @L2TP_ATTR_NONE={0x35, 0x0, "1c6b2fe0c34ca44f043b8bc107623239dfe3262f5d96326f3235afbc2aa4adc6caac52e0c5bb576537f2759ae335cc5fa2"}]}, 0x70}, 0x1, 0x0, 0x0, 0xc000}, 0x24000050) 41.840111685s ago: executing program 1 (id=304): read$auto_msr_fops_msr(0xffffffffffffffff, &(0x7f0000000080)=""/4096, 0x1000) 39.152433372s ago: executing program 1 (id=312): io_setup$auto(0x10000, &(0x7f0000000040)) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) capset$auto(0x0, 0x0) r0 = openat$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/block/loop15/hctx0/tags\x00', 0x80, 0x0) read$auto_blk_mq_debugfs_fops_blk_mq_debugfs(r0, &(0x7f0000000280)=""/81, 0x8f) r1 = openat$auto_safesetid_gid_file_fops_securityfs(0xffffffffffffff9c, &(0x7f0000000000), 0x8202, 0x0) write$auto_safesetid_gid_file_fops_securityfs(r1, 0x0, 0x0) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) r3 = socket(0x10, 0x2, 0x4) r4 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/virtual/block/ram1/queue/read_ahead_kb\x00', 0x181482, 0x0) unshare$auto(0x40000080) write$auto(0x3, 0x0, 0xfdef) sendmsg$auto_ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="f0020000", @ANYRES16=r4, @ANYBLOB="01002d16d307db6de33ed0cba6cef9b25b1abd7000fedbdf2505000000da0203800800457b0e", @ANYRES32, @ANYBLOB="d152e64e22695352dd73864415aa8a78c65e6ab752fb4d469a47a092ae7d5061cdd9690cac4138553ecfbb1b32dd7c33b14cc842bc1e2a5da4203e64ceaa9db5223aa655b6313c011b3e73a75f1aa1f7b2ea43344b15bd494886e355cf6d92c8fe670a42bc677830013e9c4aa4fa30c3e6630bf0ed13206d5a18f6813c6fb03466112aedf5d67bb5b99fe96a6dcd279916b0bce029925b63c48d41ca8a76e46c6014100005800c00c50003000000000000000c02368008027a8087010c800800e800", @ANYRES32=r3, @ANYBLOB="0800fb"], 0x2f0}, 0x1, 0x0, 0x0, 0x40000}, 0x50) close_range$auto(0x2, 0x8, 0x0) r5 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r5) close_range$auto(0x2, 0x8000, 0x0) ioctl$auto(r2, 0x20005, r3) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) io_setup$auto(0x7f, 0x0) 24.144192259s ago: executing program 32 (id=312): io_setup$auto(0x10000, &(0x7f0000000040)) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) capset$auto(0x0, 0x0) r0 = openat$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/block/loop15/hctx0/tags\x00', 0x80, 0x0) read$auto_blk_mq_debugfs_fops_blk_mq_debugfs(r0, &(0x7f0000000280)=""/81, 0x8f) r1 = openat$auto_safesetid_gid_file_fops_securityfs(0xffffffffffffff9c, &(0x7f0000000000), 0x8202, 0x0) write$auto_safesetid_gid_file_fops_securityfs(r1, 0x0, 0x0) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) r3 = socket(0x10, 0x2, 0x4) r4 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/virtual/block/ram1/queue/read_ahead_kb\x00', 0x181482, 0x0) unshare$auto(0x40000080) write$auto(0x3, 0x0, 0xfdef) sendmsg$auto_ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="f0020000", @ANYRES16=r4, @ANYBLOB="01002d16d307db6de33ed0cba6cef9b25b1abd7000fedbdf2505000000da0203800800457b0e", @ANYRES32, @ANYBLOB="d152e64e22695352dd73864415aa8a78c65e6ab752fb4d469a47a092ae7d5061cdd9690cac4138553ecfbb1b32dd7c33b14cc842bc1e2a5da4203e64ceaa9db5223aa655b6313c011b3e73a75f1aa1f7b2ea43344b15bd494886e355cf6d92c8fe670a42bc677830013e9c4aa4fa30c3e6630bf0ed13206d5a18f6813c6fb03466112aedf5d67bb5b99fe96a6dcd279916b0bce029925b63c48d41ca8a76e46c6014100005800c00c50003000000000000000c02368008027a8087010c800800e800", @ANYRES32=r3, @ANYBLOB="0800fb"], 0x2f0}, 0x1, 0x0, 0x0, 0x40000}, 0x50) close_range$auto(0x2, 0x8, 0x0) r5 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r5) close_range$auto(0x2, 0x8000, 0x0) ioctl$auto(r2, 0x20005, r3) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) io_setup$auto(0x7f, 0x0) 6.414326642s ago: executing program 0 (id=425): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) setrlimit$auto(0x1000000007, 0x0) ioperm$auto(0x7, 0x6, 0x80) mmap$auto(0x9, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) mmap$auto(0x0, 0x9, 0xdf, 0xeb1, 0x1, 0x8000) clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) mlock$auto(0xfbe8, 0x4) personality$auto(0xfffffffc) setresuid$auto(0x8, 0x8, 0x0) setfsuid$auto(0x0) mkdir$auto(&(0x7f00000003c0)='}[,&*}\x00', 0x6) chroot$auto(&(0x7f0000000000)='}[,&*}\x00') mmap$auto(0xf000, 0x8, 0x1000000003, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) lsm_list_modules$auto(0x0, 0x0, 0x0) sysfs$auto(0x2, 0x10000000000048, 0x0) fsopen$auto(0x0, 0x1) 5.337861603s ago: executing program 0 (id=428): mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) mmap$auto(0x0, 0x20009, 0xe3, 0x100000eb1, 0x40000000000a1, 0x8000) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0) fsopen$auto(&(0x7f0000000000)='nlctrl\x00', 0x3) madvise$auto(0x2, 0x880000001, 0x2b40) mmap$auto(0x0, 0x9, 0x400000072, 0x8b72, 0x1000000002, 0x8000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) sysfs$auto(0x2, 0x20, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_NLBL_MGMT_C_REMOVE(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="030000", @ANYBLOB="000127bd7000ffdbdf250200000008"], 0x64}, 0x1, 0x0, 0x0, 0x4}, 0x2008040) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="72010000", @ANYBLOB="120027", @ANYBLOB="5de1523353782950330a"], 0x1ac}}, 0x40000) socket(0x10, 0x2, 0x4) socket(0x10, 0x5, 0x6) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_TIPC_NL_LINK_SET(r0, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000002a80)={&(0x7f0000000880)={0x1bc, r1, 0x1, 0x70bd27, 0x25cfdbff, {}, [@TIPC_NLA_LINK={0x1a7, 0x4, 0x0, 0x1, [@typed={0x14, 0x7b, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00'}, @generic="96f6d9b66f0c864c6d0087047db3bcfef99b47cdfdfeacc25e1631b761c7623dca81bf6b2e3e1e6f950c68c620bf", @typed={0x8, 0xbc, 0x0, 0x0, @pid}, @typed={0x4, 0x55}, @generic="c724cbec712ffa3b35406aadec050cae50e7bce8defa24c2e1a65c8e26804f783af651cef44024c3208f8aa37440815a7f2e899e4ed95c455ca12f0b565275ee35e1ac37936f8674b3c2f81ec692d3000e0c53c708563c813680acfeb2963efec05a3be49c8e16b5cba51ecd8fe8b50d900b89096bc487614c6d15cf71b0f32ce6f8f83d39bf03712948b9b19ce06be7686e75ec695bb5952f81347bbb8a3370d896fbee084b829454bb5c9d49a1b929112fe7e68f", @generic="d87cd5e20d27ed734fdf1e8443fe9efea9073c9b7f06581c69d439c0007b14d4374d45da3788df092488dcea9f65cc99c22165e501508d17c8b891ba47990d16b9573fcdc06d87f116ec2be266329622629a5116f2532a2956b0d7ef952923ed18e26f8925a9b9d9e043d731bb02c95b40917484599af79dea120ae680e4b975e686f80d6015da7ebefc9a332f5a29a8bb2ea75159c3ba4b840c185d164860a0"]}]}, 0x1bc}, 0x1, 0x0, 0x0, 0x4000094}, 0x8080) sendmsg$auto_TIPC_NL_BEARER_ADD(r0, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, r1, 0x400, 0x70bd25, 0x25dfdc01}, 0x14}, 0x1, 0x0, 0x0, 0x4000855}, 0x0) socket(0x10, 0x2, 0x4) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) statmount$auto(0x0, &(0x7f0000000480)={0x7, 0x400, 0x6, 0x7, 0xc, 0x6, 0x10000, 0x10, 0x2, 0x8, 0x27, 0x8, 0x2, 0x9af1, 0xff, 0x8, 0x9, 0x4, 0x10, 0x4, 0x5, 0x44ab, 0x10000, 0x9, 0x3ff, 0x2, [0x4aad, 0x6, 0x99, 0x2, 0xa, 0x80, 0x1, 0x0, 0xffffffffffff0000, 0x76d6, 0x3, 0x3f83bc6f, 0x0, 0x7, 0x9, 0x6, 0x1, 0x7, 0xffffffff, 0x3, 0x4, 0xffffffff, 0x8000, 0x0, 0x7, 0x4, 0x3, 0x10000000, 0xffff, 0x7, 0x7fffffff, 0x10001, 0x7, 0x5, 0x7, 0x1, 0x2ba, 0x6, 0x0, 0x81, 0x5, 0x30, 0x8, 0x6, 0xeab1, 0xbe]}, 0x5, 0x9) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) eventfd$auto(0x0) 4.46078886s ago: executing program 2 (id=431): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x1ff, 0x7, 0x1f, 0x7181, 0x1ffde, 0x7, 0x3, 0x9, 0x9, 0x3, 0x4, 0x1, 0xb4, 0x9, 0x8, 0x10003, 0x80, 0x4, 0x0, 0xa, 0x22000, 0x200, 0x0, 0x84, [0x3, 0x2, 0x0, 0x2, 0x0, 0x2000, 0x0, 0xe, 0x70624ce7, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x4000, 0x0, 0x6, 0x0, 0xfffffffffffbfffd, 0x4, 0x1, 0x10000000000, 0xffffffffffffffff, 0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x400000000005b8, 0xffff, 0x0, 0x0, 0x0, 0x6, 0xffffffffffffffff, 0x88e, 0x8000000000008, 0xfffffffffffffffc, 0x9, 0xa38, 0x0, 0x3, 0xfffffffffffffffc, 0x2, 0x1, 0x4]}, 0x1fe, 0xd) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="10002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0xf7374674b920089e) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) r0 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000080), 0x80080, 0x0) ioctl$auto_PPPIOCSMRU(r0, 0xc004743e, 0x0) ppoll$auto(&(0x7f0000000000)={r0, 0xfffe, 0x1}, 0x9, 0x0, 0x0, 0x8) r1 = socket(0x10, 0x2, 0x0) inotify_add_watch$auto(r1, &(0x7f0000000000)='./file0\x00', 0x5) sendmmsg$auto(r1, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f00000001c0), 0x7, 0xa505}, 0x800}, 0x7, 0x4008) 4.437904267s ago: executing program 0 (id=432): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000080), r0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x4, 0x300000000000) r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000140), r0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'xfrm0\x00', 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket(0x2, 0x6, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'bond_slave_1\x00', 0x0}) sendmsg$auto_ETHTOOL_MSG_CABLE_TEST_TDR_ACT(r4, &(0x7f0000021740)={0x0, 0x0, &(0x7f0000021700)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r6], 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x4004804) sendmsg$auto_NL80211_CMD_TDLS_CHANNEL_SWITCH(r0, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x34, r2, 0x8, 0x70bd2c, 0x25dfdbfb, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r3}, @NL80211_ATTR_MBSSID_CONFIG={0x18, 0x132, 0x0, 0x1, [@NL80211_MBSSID_CONFIG_ATTR_TX_IFINDEX={0x8}, @NL80211_MBSSID_CONFIG_ATTR_TX_IFINDEX={0x8, 0x4, r6}, @NL80211_MBSSID_CONFIG_ATTR_EMA={0x4}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x48801}, 0x20004004) bpf$auto(0x0, &(0x7f0000000780)=@link_update={0xa, @new_map_fd=0x5, 0x4007, @old_prog_fd=0x13b}, 0xa3) socket(0x2, 0x1, 0x106) recvmmsg$auto(0x3, 0x0, 0x10000, 0x300, 0x0) mmap$auto(0x2, 0x2020009, 0x3, 0x12, 0xfffffffffffffffa, 0x4000008000) socket(0x11, 0x2, 0x88) sendmsg$auto_WG_CMD_GET_DEVICE(0xffffffffffffffff, 0x0, 0x20008000) r7 = socket(0x2, 0x801, 0x106) mmap$auto(0xfffffffffffffffa, 0x9, 0x9, 0x16, 0x80, 0x7) getsockopt$auto(r7, 0x11c, 0x2, 0x0, 0x0) ioctl$auto(r7, 0x4, 0x8) io_uring_setup$auto(0x7, &(0x7f0000000000)={0x10000, 0x80, 0xe, 0x8, 0x1fd, 0x4, r7, [0x7fffffff, 0x8, 0x6], {0x5, 0x800000a, 0x200, 0xffffffff, 0x81, 0x1ff, 0x7, 0x8, 0x200}, {0x1136400, 0x72, 0x1800000, 0x4, 0x8, 0x4, 0x3b72, 0x80, 0xffffffffffffffff}}) bind$auto(r7, 0x0, 0x800) connect$auto(0x3, 0x0, 0x55) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) write$auto(0x3, 0x0, 0x3f00) madvise$auto(0x0, 0xffffffffffff0001, 0x15) connect$auto(0x3, &(0x7f00000000c0)=@generic={0x9, "8dfbf6a0bf1b5fa9374605052357"}, 0x55) move_pages$auto(0x0, 0xd0, 0x0, 0x0, 0x0, 0x2) sendmsg$auto_OVS_DP_CMD_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x1c, r1, 0x374fe8f90a251713, 0x70bd29, 0x25dfdbfc, {}, [@OVS_DP_ATTR_USER_FEATURES={0x8, 0x5, 0x9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20044010}, 0x0) 3.416495286s ago: executing program 2 (id=436): mmap$auto(0x0, 0x0, 0x2, 0x100000eb1, 0x40000000000a1, 0x8000) mmap$auto(0x4f, 0x4e1, 0x3, 0x100000000000eb1, 0xfffffffffffffffa, 0x8003) capget$auto(0x0, 0xfffffffffffffffe) r0 = openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cec30\x00', 0x40, 0x0) ioctl$auto_CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f0000000100)={'\x00', 0xffff, 0x6, 0x2, 0x9b4, 0x9, "ce25aafc24b9952f997e703f222ce1", '\x00', "0001410c", '\x00', ["f5404de9641f0000000060c1", "70d9a9a3af9f39d000000001", "ef5ac4927ad89c5c00"]}) capset$auto(0x0, &(0x7f0000000180)={0x1, 0x7, 0x6}) mmap$auto(0x0, 0x20009, 0x6, 0xeb1, 0x401, 0x8000) openat$auto_rng_chrdev_ops_core(0xffffffffffffff9c, &(0x7f0000000080), 0x82, 0x0) getcwd$auto(0x0, 0xffffffffffffffff) close_range$auto(0xffffffffffffffff, r0, 0x4000000000002) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) sysfs$auto(0x10000002, 0x10000000000048, 0xffffffffffffffff) r1 = fsopen$auto(0x0, 0x1) close_range$auto(r0, 0xffffffffffffffff, 0x3c) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x8c00, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$auto(0x3, 0x4188aec6, r1) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000001740)='/sys/devices/virtual/vtconsole/vtcon1/name\x00', 0x8000, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r3, &(0x7f0000001780)=""/217, 0xd9) r4 = inotify_init1$auto(0x3000000000000) inotify_add_watch$auto(0x4, 0x0, 0xe6e) inotify_init1$auto(0x3000000000000) write$auto(r4, &(0x7f00000000c0)='/dev/cec4\x00', 0x3c) r5 = openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) inotify_add_watch$auto(r5, 0x0, 0x100002) open(&(0x7f0000000040)='X))\x00', 0x165943, 0x1d0) 3.272738521s ago: executing program 4 (id=437): openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/dev_mcast\x00', 0x8e042, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x2a, 0x2, 0xb41) socket(0xa, 0x801, 0x84) uname$auto(0x0) setsockopt$auto(0x3, 0x10000000084, 0x1f, 0x0, 0x3ff) r0 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x161302, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x19) openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000000), 0x2102, 0x0) r1 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/kcore\x00', 0x101000, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_net_shaper(&(0x7f0000000540), r2) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'netdevsim0\x00'}) sendmsg$auto_NET_SHAPER_CMD_DELETE(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="30050000fe469ebeaec12068347f2ce5defc2950e0f9ab9f0bd4fd5836a7e4a9f6b2accce9b70afd35612b37c57812026b4705d09abf54218aadbb0556f157b99998389e98fa0d31339a0d0a4066493a7da9ae783fa6f5473168925aa86b613aed9e1acfaed446f2a79f6ec1877335421af38eb471364a18bcd577d93da00103353750d1bfc6a3b5fab4055d1d655bcb6e6248e23bfc42d848ad4688203eedea", @ANYRES16=r3, @ANYBLOB="090027bd7000fbdbff250200000008000800", @ANYRES32=0x0, @ANYRESDEC=r1], 0x30}, 0x1, 0x0, 0x0, 0x44000}, 0xc050) madvise$auto(0xfffffffffffffffd, 0x7fdfffffffffffff, 0x16) r5 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xa00c0, 0x0) ioctl$auto_KVM_CREATE_VM(r5, 0xae01, 0x0) clone$auto(0x21, 0x9, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x6) r6 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer2\x00', 0x1c0340, 0x0) madvise$auto(0x8000, 0x1, 0x4) ioctl$auto(r6, 0xc074510c, 0x3) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000100), r0) openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/stat\x00', 0x20000, 0x0) ioctl$auto_evdev_fops_evdev(0xffffffffffffffff, 0x80004519, 0x0) socket$nl_generic(0x10, 0x3, 0x10) clock_getres$auto(0x2, &(0x7f00000000c0)={0xffffffffffffff99, 0xe5}) 3.092729721s ago: executing program 0 (id=438): mmap$auto(0x0, 0x40009, 0x3, 0x9b72, 0x7, 0x28000) pipe2$auto(0x0, 0x80) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) r0 = socket(0x2b, 0x1, 0x1) bind$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x4001, @loopback}, 0x6b) r1 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event0\x00', 0x80, 0x0) ioctl$auto_evdev_fops_evdev(r1, 0xfffeffff80004524, 0x0) mprotect$auto(0x1ffff000, 0x8000000000000001, 0x9) close_range$auto(0x2, 0x8, 0x0) socket(0x15, 0x5, 0x0) socket(0x2, 0x1, 0x106) io_setup$auto(0x7ffe, &(0x7f0000000000)) io_setup$auto(0x7ffe, &(0x7f0000000000)) setsockopt$auto(r0, 0x0, 0x33, 0x0, 0x4) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) 2.792315405s ago: executing program 4 (id=439): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) munmap$auto(0x3, 0x8) r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000340)='/proc/sys/net/ipv6/conf/tunl0/optimistic_dad\x00', 0x101000, 0x0) read$auto(r0, 0x0, 0x8) r1 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x20) ioctl$auto_TIOCSETD2(r1, 0x5423, 0x0) write$auto(0x3, 0x0, 0xfdef) 2.646112864s ago: executing program 2 (id=440): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = open(&(0x7f0000000000)='./file0\x00', 0x261c2, 0x84) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8000, 0x0) r1 = socket(0xa, 0x2, 0x88) r2 = openat$auto_iommufd_fops_main(0xffffffffffffff9c, &(0x7f0000000000), 0x80001, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x3b71, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000280)={'vcan0\x00', 0x0}) bpf$auto(0x0, &(0x7f00000000c0)=@bpf_attr_5={@target_ifindex=r4, r3, 0x4, 0x1ff, r1, @relative_fd, 0xe600}, 0xf) bpf$auto(0x2, &(0x7f00000001c0)=@raw_tracepoint={0x5, r0, 0x0, 0x3}, 0xc) 2.512888614s ago: executing program 0 (id=441): syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/mnt\x00') r0 = openat$auto_buffer_percent_fops_trace(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/tracing/buffer_percent\x00', 0x440040, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, r0, 0xf4) r1 = open(&(0x7f0000000140)='./bus\x00', 0x1b92fe, 0x45) fanotify_mark$auto(0x0, 0x451, 0xa, r1, 0x0) ioctl$auto__ctl_fops_dm_ioctl(r1, 0xfffffffffffffffb, &(0x7f0000000080)="ee84321d21f4afa89eed34536e0c684f27b0bdcbfbd39a9bceb7a4556bc8c8abd4861d8107b68eef6b2947146a5ce547a33939b350795b2e029630c6323685b55cf57f5241a78d7b469d7124b6ad8c13fe1b85cfaa3d38ef0e84c4d64a48d1d7597faf68e94ac5985bf95341747177b12286ba2523a0c0e258db680903bc6339459b87cf35918c045d586c0747a2acd96d81ff") ioctl$NS_GET_PARENT(r1, 0x8008b705, 0x0) 2.487331823s ago: executing program 2 (id=442): openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv6/neigh/wg2/retrans_time_ms\x00', 0x141803, 0x0) madvise$auto(0x0, 0x2000040080000004, 0xe) madvise$auto(0xb, 0x9, 0x101) sendmsg$auto_NL802154_CMD_GET_SEC_LEVEL(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40084}, 0x40) clone$auto(0x1002, 0x9, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x9) madvise$auto(0xc, 0x8, 0x7) clone$auto(0x0, 0x6, 0x0, &(0x7f0000000040)=0x80000000, 0x5) madvise$auto(0x1ffff000, 0x5510, 0x8) 2.288806314s ago: executing program 0 (id=444): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000100)='/dev/radio6\x00', 0x8a240, 0x0) ioctl$auto_SW_SYNC_GET_DEADLINE(0xffffffffffffffff, 0xc0105702, &(0x7f0000000040)={0x15, 0x0, r0}) close_range$auto(0x2, r1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) mincore$auto(0x1000, 0x8001, 0x0) read$auto_v4l2_fops_v4l2_dev(r0, &(0x7f0000000140)=""/216, 0xd8) close_range$auto(0x2, 0x8000, 0x0) io_uring_setup$auto(0x6, 0x0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/nbd7/queue/iosched/prio_aging_expire\x00', 0xa001, 0x0) write$auto(r3, &(0x7f0000000040)='+\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) mmap$auto(0x0, 0x400008, 0x200, 0x9b72, 0x2, 0x8000) io_uring_enter$auto(r2, 0x0, 0x820e, 0x9, 0x0, 0x18) ioctl$auto(r0, 0x5646, r0) read$auto_v4l2_fops_v4l2_dev(r0, &(0x7f0000000080)=""/27, 0x1b) ioctl$auto(r0, 0x10001, r0) write$auto(0x3, 0x0, 0x100082) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sda\x00', 0x8001, 0x0) madvise$auto(0x0, 0x200007, 0x19) r4 = openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) ioctl$auto_RTC_EPOCH_SET(r4, 0x4008700e, 0x0) io_uring_setup$auto(0x6, 0x0) r5 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) ioctl$auto(r5, 0x560f, 0xd2d7) 2.270849625s ago: executing program 3 (id=445): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYRES8, @ANYRES16=0x0, @ANYBLOB="000226bd7000fedbdf25030000000800030009000000060007000080000008000200", @ANYRES32=0x0, @ANYBLOB="0a00050000000000000000000a000100aaaaaaaaaabb00000a0001000000000000000000080004001000000008000200", @ANYRES32=0x0, @ANYBLOB="0a000100a01d8645b3610000"], 0x6c}, 0x1, 0x0, 0x0, 0x40080}, 0x40090) close_range$auto(0x0, 0xfffffffffffff000, 0x2) r0 = socket$nl_generic(0x10, 0x3, 0x10) landlock_restrict_self$auto(r0, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00') close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) socket(0x2, 0x1, 0x0) socket(0x1e, 0x1, 0x0) socket(0xa, 0x5, 0x0) setsockopt$auto(0x2, 0x1, 0x6, &(0x7f0000000000)='\x00', 0x40) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000826bd7000fedbdf25030000000600070008000000060007000080000008000200", @ANYRES32=0x0, @ANYBLOB="0a00050000000000000000000a00010000000000000000000a00010000000000000000000600060040000000060006"], 0x6c}, 0x1, 0x0, 0x0, 0x40080}, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="13"], 0x1ac}}, 0x4004) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f000000fc00), 0x3, 0x0) mmap$auto(0x0, 0xfff, 0x3, 0x9b72, r0, 0x28000) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) get_robust_list$auto(0x0, 0x0, 0x0) setsockopt$auto(0x3, 0x10f, 0x87, 0x0, 0x14) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x3) io_uring_setup$auto(0x4, 0x0) openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f0000002240)='/dev/cec17\x00', 0x181680, 0x0) clock_nanosleep$auto(0xa, 0x9, 0x0, 0x0) socket(0x1e, 0x1, 0x0) 2.217640062s ago: executing program 4 (id=446): mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) (async) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) (async) close_range$auto(0x2, 0xffffffffffffffff, 0x0) (async, rerun: 32) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) socket(0xa, 0x1, 0x84) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv6/conf/syz_tun/disable_ipv6\x00', 0x121c00, 0x0) io_uring_setup$auto(0x6, 0x0) (async) setsockopt$auto(0x3, 0x10000000084, 0x1f, 0x0, 0x3ff) close_range$auto(0x2, 0x8, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) openat$auto_configfs_file_operations_configfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/config/nullb/features\x00', 0x40240, 0x0) read$auto(0x3, 0x0, 0x80) 2.001872162s ago: executing program 3 (id=447): close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x2, 0x0) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "ab06fdffff00fff500"}, 0x55) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x7, 0x800008000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/net/nr14/proto_down\x00', 0x3e1143, 0x0) r0 = open(&(0x7f0000000100)='.\x00', 0x40000, 0x0) getdents64$auto(r0, 0x0, 0x400) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x2000, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x3, 0x9, 0x3, 0xe, 0x940, 0x1ffde, 0x3, 0x2000000000000006, 0x2, 0x9, 0x5, 0x2, 0x7, 0xb0, 0x9, 0x2, 0x3, 0x5, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff2, 0x0, 0x0, 0x8000000000, 0x20000000, 0x0, 0x1, 0x0, 0x2000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x8000000000000000, 0x0, 0x800000000, 0x0, 0x0, 0x0, 0x1, 0x1, 0x7f, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x8000000000000]}, 0x1fe, 0x81) socket(0x10, 0x2, 0x0) r1 = socket(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) close_range$auto(0x0, 0xfffffffffffff000, 0x2) syz_open_procfs$namespace(0x0, &(0x7f0000000480)='ns/pid_for_children\x00') r3 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/net\x00') ioctl$NS_GET_PARENT(r3, 0xb701, 0x0) socket(0x1d, 0x2, 0x7) bind$auto(0x3, &(0x7f0000000040)=@can={0x1d, r2, 0xfd}, 0x6a) r4 = openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000100), 0x40000, 0x0) read$auto_rtc_dev_fops_dev(r4, &(0x7f00000027c0)=""/4096, 0x1000) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="10002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) r5 = syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000140), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000f40)={'batadv0\x00', 0x0}) r8 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000380), r6) sendmsg$auto_ETHTOOL_MSG_PSE_GET(r1, &(0x7f0000000440)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000004c0)={&(0x7f00000003c0)={0x30, r8, 0x400, 0x70bd2d, 0x25dfdbfb, {}, [@ETHTOOL_A_PSE_HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_PHY_INDEX={0x8, 0x4, 0x101}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x80c1}, 0xc5403ae4eff06112) sendmsg$auto_BATADV_CMD_SET_MESH(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)={0x24, r5, 0x1, 0x70bd2c, 0x25dfdbfb, {0xf, 0x0, 0x8000}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r7}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x140080e4) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) 2.001125195s ago: executing program 2 (id=448): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/block/loop1/integrity/read_verify\x00', 0x20b42, 0x0) mprotect$auto(0x1ffff000, 0x8000000000000001, 0xd) write$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000000040)="de", 0x1) r1 = socket(0x10, 0x2, 0x4) mmap$auto(0x0, 0x2000d, 0x4000000200df, 0xeb1, 0x404, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) bpf$auto(0x6, &(0x7f00000001c0)=@test={r1, 0x10004, 0x0, 0x1000, 0x106, 0x0, 0x0, 0xfff, 0x10000, 0x9, 0x0, 0x4, 0x7, 0x2, 0xfffeffff}, 0x1) sendmsg$auto_ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="d4000000", @ANYRES16=0x0, @ANYBLOB="100027bd7000fbdbdf2518000000200001800247eea41fac000014000200766574683100000000000000000000000800070063fbffff0500060001000000840002803d00488013b37090badc49d6dc93876646d25a4d297d01cd3b7da38d12889cc50d505f353dc42d0a3c0a14c7b46428910708003600", @ANYRES32=0x0, @ANYBLOB="0400b3800000003d003b800400a4800c009a00008000000000000004008680c16ab1b1b39dcaa14b6af7dcc011b43cf706e562811c62b28a702b72e0a87126700294f2350000000c000180080003"], 0xd4}, 0x1, 0x0, 0x0, 0x20000010}, 0x20008000) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_OVS_FLOW_CMD_GET(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x28, r2, 0x1, 0x70bd25, 0x25dfdc02, {}, [@OVS_FLOW_ATTR_PROBE={0x4}, @OVS_FLOW_ATTR_KEY={0x10, 0x1, 0x0, 0x1, [@nested={0xc, 0x10, 0x0, 0x1, [@typed={0x8, 0xb, 0x0, 0x0, @fd=r3}]}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x200400f0}, 0x800) syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1200"], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/fib_multipath_hash_policy\x00', 0x2000, 0x0) mprotect$auto(0x1ffff000, 0x8000000001000001, 0xd) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x7f, 0x8000) r4 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_SET_MESH_CONFIG(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x800}, 0xb9) read$auto(0x3, 0x0, 0xf34) sendmsg$auto_NL80211_CMD_GET_REG(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200", @ANYBLOB="5de1"], 0x1ac}}, 0x40000) recvmmsg$auto(r4, &(0x7f0000000140)={{0x0, 0x4, &(0x7f0000000080)={0x0, 0x4c3}, 0x7, 0x0, 0x200002, 0x8}, 0x805}, 0xa, 0x10, 0x0) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/renderD128\x00', 0x201, 0x0) r5 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/card0/pcm0c/sub6/xrun_injection\x00', 0x220d82, 0x0) clock_nanosleep$auto(0x59c2de28, 0x49, 0xfffffffffffffffd, 0xfffffffffffffffc) read$auto(r5, 0x0, 0x805644) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptyt0\x00', 0x41000, 0x0) 1.869073004s ago: executing program 4 (id=449): close_range$auto(0x2, 0x8, 0x0) openat$auto_vga_arb_device_fops_vgaarb(0xffffffffffffff9c, &(0x7f00000001c0), 0x121000, 0x0) socket(0x2, 0x80002, 0x73) socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000001880)='./cgroup/cgroup.controllers\x00', 0x109000, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f00000018c0)=""/86, 0x56) mmap$auto(0x0, 0xb, 0x6, 0xeb1, 0x3ff, 0x8000) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) unshare$auto(0x7) setsockopt$auto(0x3, 0x10000000084, 0x81, 0x0, 0x8) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, 0x0, 0x20342, 0x0) io_uring_setup$auto(0x2, 0x0) r1 = openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f000000c340)='/proc/thread-self/pagemap\x00', 0x8000, 0x0) ioctl$auto_PAGEMAP_SCAN(r1, 0xc0606610, &(0x7f000000c380)={0x60, 0x0, 0x100000, 0x7fffffffefff, 0xfffffffffffffffe, 0x1, 0x2, 0xeb, 0x4, 0x11d, 0x9, 0xffffffffffffffff}) move_pages$auto(0x0, 0x1002, 0x0, 0x0, 0x0, 0x2) r2 = openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$auto_IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, 0x6) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) setsockopt$auto(0x3, 0x10000000084, 0x23, 0x0, 0x8) 1.568608251s ago: executing program 4 (id=450): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x100000, 0xffffffffffff0005, 0x19) setreuid$auto(0x3, 0x7) shmget$auto(0x8, 0x10563, 0x568d1af2) madvise$auto(0x0, 0xffffffffffff0001, 0x15) open(&(0x7f0000000300)='./file0\x00', 0x7ffd, 0x12) write$auto(0x3, 0x0, 0x100082) clone$auto(0x7, 0x2000400000d, 0xfffffffffffffffc, 0x0, 0x3) io_uring_setup$auto(0x6, 0x0) madvise$auto(0x0, 0x200007, 0x19) 1.008773634s ago: executing program 3 (id=451): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mtrr\x00', 0xc0000, 0x0) statx$auto(0x2, 0x0, 0x1000, 0x8, 0x0) fsopen$auto(&(0x7f0000000040)='/proc/mtrr\x00', 0x7f) r0 = open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) execveat$auto(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) socket(0x10, 0x2, 0xc) r1 = open(&(0x7f0000000800)='./file0\x00', 0x800, 0x154) execveat$auto(r1, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sda\x00', 0x8001, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0x0) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS1\x00', 0x20000, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/pid_for_children\x00') fstat$auto(r2, 0x0) readv$auto(0x3, 0x0, 0x1) r4 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) ioctl$auto(r4, 0x4b45, 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_GET_RADIO(r5, &(0x7f0000001900)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="14000000", @ANYRES16=r6, @ANYBLOB="cf5728bd700000e7ff0000002000"], 0x14}, 0x1, 0x0, 0x0, 0x884}, 0x8000) r7 = openat$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/block/nbd15/sched/starved\x00', 0x2880, 0x0) read$auto_blk_mq_debugfs_fops_blk_mq_debugfs(r7, &(0x7f0000000080)=""/115, 0x73) ioctl$auto_TIOCSTI2(r3, 0x5412, 0x0) ioctl$auto_def_blk_fops_fs(r2, 0x1261, 0x0) r8 = memfd_create$auto(&(0x7f00000008c0)='/sys/kernel/debug/x86/boot_params/data\x00', 0x0) pwritev$auto(r8, &(0x7f00000003c0)={0x0, 0x8}, 0x5, 0x7fffffffffffffff, 0x72) openat$auto_evm_xattr_ops_evm_secfs(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) 948.319724ms ago: executing program 2 (id=452): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x60742, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r1 = socket(0x2b, 0x1, 0x1) getsockopt$auto(r1, 0x1, 0x1a, 0x0, 0x0) r2 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mmap$auto(0x0, 0x200006, 0x2, 0x40eb1, 0x602, 0x300000000000) mbind$auto(0x0, 0x2, 0x2, &(0x7f0000002100)=0x4, 0x7, 0x0) get_mempolicy$auto(0x0, 0x0, 0x7f, 0x41ff, 0x3) write$auto(0x3, 0x0, 0x7fffffff) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) signalfd4$auto(0xffffffff, 0x0, 0x8, 0x800) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) close_range$auto(0x2, 0xa, 0x0) socket(0x18, 0xa, 0x1) socket(0xa, 0x2, 0x0) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "ab06fdffff00fff500"}, 0x55) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, 0x0, 0x2000, 0x0) close_range$auto(r2, r0, 0x6) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) sendmmsg$auto(0xffffffffffffffff, &(0x7f00000001c0)={{&(0x7f0000000080), 0x8, 0x0, 0x100, 0x0, 0x0, 0xfffffffc}, 0x5}, 0x9, 0x536f) r3 = socket(0xa, 0x3, 0x5) sendmmsg$auto(r3, &(0x7f0000000180)={{&(0x7f0000000040), 0xc88, 0x0, 0x0, 0x0, 0x8, 0x80000000}, 0x5}, 0x3b8b, 0xa) 725.340372ms ago: executing program 3 (id=453): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/block/zram0/max_comp_streams\x00', 0x121102, 0x0) socket(0x10, 0x2, 0x0) ioctl$auto(0xffffffffffffffff, 0x89de, 0xffffffffffffffff) close_range$auto(0x2, 0x8, 0x0) r0 = openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$auto_RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000280)={0x1, 0x7, 0x0, 0x5, 0x2, 0x20080, 0xce, 0x6c35, 0xb}) socket$nl_generic(0x10, 0x3, 0x10) mprotect$auto(0x1ffff000, 0x8000000000000001, 0xd) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/system/clocksource/clocksource0/current_clocksource\x00', 0x8502, 0x0) read$auto(r1, 0x0, 0x2f6) 527.217412ms ago: executing program 3 (id=454): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) munmap$auto(0x3, 0x8) r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000340)='/proc/sys/net/ipv6/conf/tunl0/optimistic_dad\x00', 0x101000, 0x0) read$auto(r0, 0x0, 0x8) r1 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x20) ioctl$auto_TIOCSETD2(r1, 0x5423, 0x0) write$auto(0x3, 0x0, 0xfdef) 108.834108ms ago: executing program 3 (id=455): r0 = open(0x0, 0x22240, 0x55) statx$auto(r0, 0x0, 0x1003, 0x4001, 0x0) (async) r1 = pipe2$auto(&(0x7f0000000000)=r0, 0x800) mmap$auto(0x10000000000000, 0xffffffffffffffff, 0xdf, 0x800000009b72, r1, 0x8000) (async) pipe2$auto(0x0, 0x800) (async) r2 = open(0x0, 0x261c2, 0x84) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) madvise$auto(0x0, 0xffffffffffff0001, 0x15) (async) futex_waitv$auto(0x0, 0xfffffffd, 0x8, 0x0, 0x623d) (async) close_range$auto(0x2, 0x8, 0x0) (async) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x6, 0x0) (async) r3 = socket(0xa, 0x2, 0x88) socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000280)={'vcan0\x00', 0x0}) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) close_range$auto(0x2, 0xa, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1e, 0x4, 0x0) (async) get_robust_list$auto(0x0, 0x0, 0x0) (async) setsockopt$auto(0x3, 0x10f, 0x87, 0x0, 0x14) (async) bind$auto(0x3, &(0x7f0000000080)=@tipc=@name={0x1e, 0x2, 0x0, {{0x42, 0x3}, 0x3}}, 0x6a) bpf$auto(0x0, &(0x7f00000000c0)=@bpf_attr_5={@target_ifindex=r5, r4, 0x4, 0x1ff, r3, @relative_id=0x13, 0xe600}, 0xf) (async) bpf$auto(0x2, &(0x7f00000001c0)=@raw_tracepoint={0x5, r2, 0x0, 0x3}, 0xc) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) syz_genetlink_get_family_id$auto_gtp(0x0, 0xffffffffffffffff) socket(0xa, 0x2, 0x73) (async) setsockopt$auto(0x4, 0x29, 0x2a, 0x0, 0x200577) bpf$auto(0x1, &(0x7f0000000080)=@bpf_attr_3={0x5, 0x0, 0x702955be, 0x5c, 0x4, 0x9, 0x80, 0xe4, 0xfffff800, "0566c8ee7c78a925488276d7697a12bd", 0x0, 0x2, 0xffffffffffffffff, 0x7, 0x9, 0x4, 0x7, 0x10001, 0x0, 0x8001, @attach_prog_fd, 0x7e, 0x4, 0x1, 0x5, 0x3}, 0x5) 0s ago: executing program 4 (id=456): unshare$auto(0x40000080) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x5, 0x8000) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) stat$auto(0x0, 0x0) close_range$auto(0x2, 0x8000, 0x0) io_uring_setup$auto(0x6, 0x0) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sg0\x00', 0x8000, 0x0) ioctl$auto(0x3, 0xc0481273, 0x38) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) sendmsg$auto_NETDEV_CMD_QUEUE_GET(0xffffffffffffffff, &(0x7f0000003040)={0x0, 0x0, &(0x7f0000003000)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="41004bbd7000fbdbdf250a000000080001"], 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x20008810) r0 = open(&(0x7f0000000000)='./file0\x00', 0xa61c2, 0x84) bind$auto(0x3, 0x0, 0x6b) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) write$auto(0x3, 0x0, 0xfffffdef) fallocate$auto(0x8000000000000003, 0x0, 0xd, 0xcbd5d) socket(0x25, 0x2, 0xfffffffd) newfstatat$auto(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)={0x208, 0x2, 0xb32, 0xe29, 0xee01, 0xffffffffffffffff, 0x0, 0x5, 0x7eacb662, 0x2139, 0x9, 0xf89b, 0xffffffffffffffff, 0x100000001, 0xfffffffffffffff7, 0x8, 0x200}, 0x3252) symlink$auto(0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'macvlan0\x00'}) set_mempolicy$auto(0x2, &(0x7f0000000080)=0x7e, 0x6) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="bd88ecb3593c3108081bbe86f73872e2ff0059d966e61a171c95a1ec8b4344e841f724e9ece8de382dd973312656bda0dc24bc190be3ea04444e500205dea8965f4b56c46ceb2aab50bcddd7ecb57d7b712163b29270d33cc3a99e9f111ff6fcee437416434aaa39115b298770"], 0x1ac}}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1b004d"], 0x1ac}, 0x1, 0x0, 0x0, 0x4048811}, 0x40000) mprotect$auto(0x1ffff000, 0x8000000000000001, 0xd) r1 = socket(0x10, 0x3, 0x6) sendmsg$auto_ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x50) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.93' (ED25519) to the list of known hosts. [ 66.237463][ T5819] cgroup: Unknown subsys name 'net' [ 66.448374][ T5819] cgroup: Unknown subsys name 'cpuset' [ 66.456644][ T5819] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 67.796764][ T5819] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 69.509788][ T5837] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 69.518406][ T5837] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 69.528390][ T5842] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 69.536401][ T5842] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 69.545138][ T5842] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 69.553039][ T5842] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 69.560656][ T5842] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 69.581287][ T5841] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 69.589224][ T5840] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 69.598218][ T5840] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 69.605375][ T5841] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 69.613104][ T5841] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 69.620857][ T5841] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 69.627985][ T5833] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 69.635551][ T5841] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 69.636455][ T5833] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 69.651428][ T5833] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 69.651433][ T5841] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 69.666445][ T5841] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 69.673781][ T5841] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 69.675088][ T5833] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 69.689227][ T5839] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 69.704835][ T5833] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 69.713401][ T5833] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 69.865153][ T5829] chnl_net:caif_netlink_parms(): no params data found [ 69.985973][ T5829] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.993799][ T5829] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.001714][ T5829] bridge_slave_0: entered allmulticast mode [ 70.009104][ T5829] bridge_slave_0: entered promiscuous mode [ 70.018682][ T5829] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.025953][ T5829] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.033122][ T5829] bridge_slave_1: entered allmulticast mode [ 70.040149][ T5829] bridge_slave_1: entered promiscuous mode [ 70.120753][ T5829] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.156233][ T5829] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.165566][ T5835] chnl_net:caif_netlink_parms(): no params data found [ 70.245900][ T5829] team0: Port device team_slave_0 added [ 70.251836][ T5828] chnl_net:caif_netlink_parms(): no params data found [ 70.269773][ T5829] team0: Port device team_slave_1 added [ 70.301899][ T5830] chnl_net:caif_netlink_parms(): no params data found [ 70.311374][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.318450][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.344602][ T5829] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.371497][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.378834][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.405776][ T5829] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.457508][ T5835] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.464886][ T5835] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.472013][ T5835] bridge_slave_0: entered allmulticast mode [ 70.479262][ T5835] bridge_slave_0: entered promiscuous mode [ 70.524639][ T5835] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.531765][ T5835] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.539111][ T5835] bridge_slave_1: entered allmulticast mode [ 70.548541][ T5835] bridge_slave_1: entered promiscuous mode [ 70.563746][ T5829] hsr_slave_0: entered promiscuous mode [ 70.570602][ T5829] hsr_slave_1: entered promiscuous mode [ 70.597533][ T5835] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.612034][ T5828] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.619308][ T5828] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.627021][ T5828] bridge_slave_0: entered allmulticast mode [ 70.633572][ T5828] bridge_slave_0: entered promiscuous mode [ 70.651727][ T5835] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.664279][ T5828] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.674081][ T5828] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.681514][ T5828] bridge_slave_1: entered allmulticast mode [ 70.690475][ T5828] bridge_slave_1: entered promiscuous mode [ 70.752563][ T5830] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.760586][ T5830] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.768642][ T5830] bridge_slave_0: entered allmulticast mode [ 70.775877][ T5830] bridge_slave_0: entered promiscuous mode [ 70.783005][ T5830] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.790318][ T5830] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.797513][ T5830] bridge_slave_1: entered allmulticast mode [ 70.804061][ T5830] bridge_slave_1: entered promiscuous mode [ 70.812317][ T5828] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.824672][ T5828] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.838729][ T5835] team0: Port device team_slave_0 added [ 70.846993][ T5835] team0: Port device team_slave_1 added [ 70.894335][ T5828] team0: Port device team_slave_0 added [ 70.917534][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.924723][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.950876][ T5835] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.971178][ T5830] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.982141][ T5830] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.993198][ T5828] team0: Port device team_slave_1 added [ 71.002962][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.010142][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.037208][ T5835] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.090366][ T5830] team0: Port device team_slave_0 added [ 71.105837][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.112817][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.139294][ T5828] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.152358][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.161456][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.190380][ T5828] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.204163][ T5830] team0: Port device team_slave_1 added [ 71.252011][ T5835] hsr_slave_0: entered promiscuous mode [ 71.258875][ T5835] hsr_slave_1: entered promiscuous mode [ 71.268231][ T5835] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 71.276067][ T5835] Cannot create hsr debugfs directory [ 71.295818][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.302795][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.329180][ T5830] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.356978][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.363954][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.389986][ T5830] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.437539][ T5828] hsr_slave_0: entered promiscuous mode [ 71.443690][ T5828] hsr_slave_1: entered promiscuous mode [ 71.450029][ T5828] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 71.458005][ T5828] Cannot create hsr debugfs directory [ 71.538332][ T5830] hsr_slave_0: entered promiscuous mode [ 71.546120][ T5830] hsr_slave_1: entered promiscuous mode [ 71.552284][ T5830] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 71.560407][ T5830] Cannot create hsr debugfs directory [ 71.597364][ T5829] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 71.609361][ T5833] Bluetooth: hci0: command tx timeout [ 71.613529][ T5829] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 71.639708][ T5829] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 71.676965][ T5829] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 71.691288][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.697897][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.764796][ T5833] Bluetooth: hci2: command tx timeout [ 71.770454][ T5833] Bluetooth: hci1: command tx timeout [ 71.776188][ T5146] Bluetooth: hci3: command tx timeout [ 71.837838][ T5828] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 71.861096][ T5828] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 71.873074][ T5828] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 71.882440][ T5828] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 71.947179][ T5835] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 71.959262][ T5835] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 71.987048][ T5835] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 71.999144][ T5835] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 72.038554][ T5829] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.078978][ T5829] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.093671][ T5830] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 72.103749][ T5830] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 72.127613][ T5830] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 72.139733][ T5830] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 72.165076][ T67] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.172372][ T67] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.200550][ T3459] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.207789][ T3459] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.251653][ T5835] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.283904][ T5835] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.311585][ T5828] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.361802][ T5828] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.371837][ T1152] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.378994][ T1152] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.388765][ T1152] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.395929][ T1152] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.439499][ T67] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.446666][ T67] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.462078][ T67] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.469236][ T67] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.490664][ T5830] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.541002][ T5830] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.563864][ T5835] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 72.617318][ T1152] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.624557][ T1152] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.638255][ T5828] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 72.679155][ T5829] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.692763][ T1152] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.699973][ T1152] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.814024][ T5829] veth0_vlan: entered promiscuous mode [ 72.822145][ T5830] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 72.870257][ T5829] veth1_vlan: entered promiscuous mode [ 72.908802][ T5835] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.958241][ T5829] veth0_macvtap: entered promiscuous mode [ 72.993823][ T5829] veth1_macvtap: entered promiscuous mode [ 73.007348][ T5828] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.041420][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.087859][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.101627][ T5835] veth0_vlan: entered promiscuous mode [ 73.123428][ T5829] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.138801][ T5829] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.148336][ T5829] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.159693][ T5829] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.192938][ T5835] veth1_vlan: entered promiscuous mode [ 73.234405][ T5828] veth0_vlan: entered promiscuous mode [ 73.250156][ T5828] veth1_vlan: entered promiscuous mode [ 73.271605][ T5830] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.322275][ T1083] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.327282][ T5828] veth0_macvtap: entered promiscuous mode [ 73.338779][ T1083] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.351437][ T5835] veth0_macvtap: entered promiscuous mode [ 73.382933][ T5835] veth1_macvtap: entered promiscuous mode [ 73.391122][ T5828] veth1_macvtap: entered promiscuous mode [ 73.410337][ T3459] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.423756][ T3459] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.440532][ T5835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.453041][ T5835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.464746][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.482312][ T5835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.495344][ T5835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.512149][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.527552][ T5828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.538502][ T5828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.548794][ T5828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.559690][ T5828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.571583][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.583085][ T5829] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 73.583628][ T5830] veth0_vlan: entered promiscuous mode [ 73.616241][ T5835] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.625977][ T5835] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.635069][ T5835] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.643946][ T5835] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.670515][ T5828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.685222][ T5833] Bluetooth: hci0: command tx timeout [ 73.694203][ T5828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.709531][ T5828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.721065][ T5828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.738577][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.752896][ T5830] veth1_vlan: entered promiscuous mode [ 73.771687][ T5828] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.781100][ T5828] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.790459][ T5828] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.799497][ T5828] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.845040][ T54] Bluetooth: hci3: command tx timeout [ 73.850601][ T5146] Bluetooth: hci2: command tx timeout [ 73.857803][ T5833] Bluetooth: hci1: command tx timeout [ 73.933167][ T5830] veth0_macvtap: entered promiscuous mode [ 73.990144][ T5830] veth1_macvtap: entered promiscuous mode [ 74.029306][ T1083] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.045747][ T1083] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.067317][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.080743][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.154599][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.162464][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.179840][ T67] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.187386][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.202975][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.205467][ T67] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.219186][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.237052][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.254161][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.269805][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.280872][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.298042][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.308981][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.320792][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.331897][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.342493][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.353356][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.365866][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.381345][ T5830] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.406759][ T5830] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.424765][ T5830] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.433517][ T5830] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.606463][ T67] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.637600][ T67] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.713728][ T5898] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 74.751676][ T67] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.773328][ T67] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.842598][ T5900] Zero length message leads to an empty skb [ 75.012625][ T5896] netlink: 338 bytes leftover after parsing attributes in process `syz.2.3'. [ 75.073523][ T5900] netlink: 338 bytes leftover after parsing attributes in process `syz.2.3'. [ 75.166761][ T5896] netlink: 98 bytes leftover after parsing attributes in process `syz.2.3'. [ 75.205953][ T5896] veth0_macvtap: left promiscuous mode [ 75.764885][ T5833] Bluetooth: hci0: command tx timeout [ 75.925512][ T5833] Bluetooth: hci1: command tx timeout [ 75.930985][ T5833] Bluetooth: hci2: command tx timeout [ 75.936664][ T5146] Bluetooth: hci3: command tx timeout [ 76.064553][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 76.303717][ T5918] bond0: option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 76.592246][ T5921] netlink: 326 bytes leftover after parsing attributes in process `syz.0.8'. [ 76.777903][ T5926] ubi0: attaching mtd0 [ 76.795320][ T5926] ubi0: scanning is finished [ 76.804780][ T5926] ubi0: empty MTD device detected [ 76.829205][ T5928] netlink: 338 bytes leftover after parsing attributes in process `syz.1.10'. [ 77.024652][ T5926] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 77.052554][ T5926] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 77.062749][ T5926] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 77.070398][ T5926] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 77.081618][ T5926] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 77.090052][ T5926] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 77.100762][ T5926] ubi0: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 3769717572 [ 77.111259][ T5926] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 77.126535][ T5929] ubi0: background thread "ubi_bgt0d" started, PID 5929 [ 77.845600][ T5833] Bluetooth: hci0: command tx timeout [ 77.905544][ T5946] netlink: 342 bytes leftover after parsing attributes in process `syz.2.13'. [ 77.905682][ T5946] IPv6: Can't replace route, no match found [ 78.004732][ T5833] Bluetooth: hci2: command tx timeout [ 78.004787][ T5833] Bluetooth: hci3: command tx timeout [ 78.004819][ T5833] Bluetooth: hci1: command tx timeout [ 78.737887][ T5958] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 79.169668][ T5966] netlink: 7 bytes leftover after parsing attributes in process `syz.0.19'. [ 79.191184][ T5966] netlink: 7 bytes leftover after parsing attributes in process `syz.0.19'. [ 80.368349][ T5971] netlink: 8 bytes leftover after parsing attributes in process `syz.2.20'. [ 82.136724][ T5999] random: crng reseeded on system resumption [ 82.778285][ T6000] capability: warning: `syz.0.26' uses 32-bit capabilities (legacy support in use) [ 85.192385][ T6032] Invalid ELF header magic: != ELF [ 87.070789][ T46] cfg80211: failed to load regulatory.db [ 88.425944][ T6074] Invalid ELF header magic: != ELF [ 88.982675][ T6074] netlink: 28 bytes leftover after parsing attributes in process `syz.0.42'. [ 88.991751][ T6074] lo: entered promiscuous mode [ 88.997396][ T6074] lo: entered allmulticast mode [ 91.259130][ T6120] netlink: 28 bytes leftover after parsing attributes in process `syz.1.51'. [ 91.284903][ T6120] ipvlan0: entered allmulticast mode [ 91.297933][ T6120] veth0_vlan: entered allmulticast mode [ 91.365330][ T6117] netlink: 342 bytes leftover after parsing attributes in process `syz.0.50'. [ 92.960259][ T6122] netlink: 338 bytes leftover after parsing attributes in process `syz.2.52'. [ 93.057592][ T6127] netlink: 338 bytes leftover after parsing attributes in process `syz.2.52'. [ 93.119985][ T6122] netlink: 134 bytes leftover after parsing attributes in process `syz.2.52'. [ 93.176864][ T6122] netlink: 134 bytes leftover after parsing attributes in process `syz.2.52'. [ 93.827410][ T6143] netlink: 28 bytes leftover after parsing attributes in process `syz.1.56'. [ 93.838707][ T6143] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 93.854654][ T6143] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 93.913950][ T6143] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 93.924121][ T6143] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 94.319689][ T6151] netlink: 28 bytes leftover after parsing attributes in process `syz.2.59'. [ 94.370298][ T6151] hsr_slave_0: left promiscuous mode [ 94.377059][ T6151] hsr_slave_1: left promiscuous mode [ 95.212175][ T6175] netlink: 342 bytes leftover after parsing attributes in process `syz.3.64'. [ 97.861432][ T6200] Invalid ELF header magic: != ELF [ 97.867181][ T6198] netlink: 28 bytes leftover after parsing attributes in process `syz.0.71'. [ 97.886239][ T6198] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 97.893701][ T6198] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 97.989212][ T6198] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 98.008905][ T6198] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 99.347213][ T29] audit: type=1800 audit(8277292059.570:2): pid=6227 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.75" name="trace_pipe" dev="tracefs" ino=1301 res=0 errno=0 [ 100.096281][ T6229] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 100.662727][ T6244] HSR: entered promiscuous mode [ 101.402225][ T6259] mmap: syz.0.91 (6259) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 101.478972][ T6261] netlink: 28 bytes leftover after parsing attributes in process `syz.2.83'. [ 101.519495][ T6261] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 101.595723][ T6261] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 101.660575][ T6261] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 101.672317][ T6261] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 103.824732][ T6305] ecryptfs_parse_packet_length: Error parsing packet length [ 103.839457][ T6305] ecryptfs_miscdev_write: Error parsing packet length; rc = [-22] [ 107.524236][ T6372] netlink: 'syz.3.108': attribute type 10 has an invalid length. [ 107.542888][ T6372] netlink: 230 bytes leftover after parsing attributes in process `syz.3.108'. [ 107.631234][ T6373] netlink: 'syz.3.108': attribute type 10 has an invalid length. [ 107.678382][ T6373] netlink: 230 bytes leftover after parsing attributes in process `syz.3.108'. [ 107.702867][ T6372] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 107.719904][ T6359] zswap: compressor not available [ 107.765170][ T6373] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 109.392599][ T6302] syz.1.93 (6302) used greatest stack depth: 20144 bytes left [ 109.881707][ T6408] process 'syz.0.114' launched ':,' with NULL argv: empty string added [ 110.363429][ T6419] syz.3.117 (6419): /proc/6418/oom_adj is deprecated, please use /proc/6418/oom_score_adj instead. [ 112.251979][ T6458] binder: 6457:6458 ioctl c00c620f 9 returned -22 [ 112.686082][ T6488] netlink: 504 bytes leftover after parsing attributes in process `syz.2.126'. [ 112.732129][ T6488] netlink: 504 bytes leftover after parsing attributes in process `syz.2.126'. [ 113.922092][ T6263] syz.1.81 (6263) used greatest stack depth: 19376 bytes left [ 114.632042][ T6508] can: request_module (can-proto-0) failed. [ 114.661957][ T29] audit: type=1804 audit(8277292074.890:3): pid=6516 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.131" name="#)-\&[}" dev="mqueue" ino=10624 res=1 errno=0 [ 114.689692][ T6516] kernel read not supported for file /#)-\&[} (pid: 6516 comm: syz.3.131) [ 114.723557][ T29] audit: type=1800 audit(8277292074.950:4): pid=6516 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.131" name="#)-\&[}" dev="mqueue" ino=10624 res=0 errno=0 [ 114.795740][ T29] audit: type=1804 audit(8277292075.000:5): pid=6516 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.131" name="#)-\&[}" dev="mqueue" ino=10624 res=1 errno=0 [ 114.869337][ T29] audit: type=1804 audit(8277292075.000:6): pid=6516 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.131" name="#)-\&[}" dev="mqueue" ino=10624 res=1 errno=0 [ 115.425375][ T6167] syz.1.62 (6167) used greatest stack depth: 18560 bytes left [ 115.463883][ T6534] netlink: 28 bytes leftover after parsing attributes in process `syz.1.136'. [ 115.575463][ T6534] macvlan1: entered promiscuous mode [ 119.319746][ T6691] netlink: 'syz.3.159': attribute type 11 has an invalid length. [ 119.414576][ T6691] netlink: 'syz.3.159': attribute type 11 has an invalid length. [ 120.271945][ T6710] cgroup: fork rejected by pids controller in /syz1 [ 121.404831][ T6840] zswap: compressor not available [ 121.725985][ T6861] netlink: 74 bytes leftover after parsing attributes in process `syz.3.171'. [ 121.855069][ T6876] vivid-013: ================= START STATUS ================= [ 121.909601][ T6876] vivid-013: Generate PTS: true [ 121.945833][ T6876] vivid-013: Generate SCR: true [ 122.010739][ T6876] tpg source WxH: 640x360 (Y'CbCr) [ 122.080774][ T6876] tpg field: 1 [ 122.162555][ T6876] tpg crop: 640x360@0x0 [ 122.194863][ T6876] tpg compose: 640x360@0x0 [ 122.255911][ T6876] tpg colorspace: 8 [ 122.294696][ T6876] tpg transfer function: 0/0 [ 122.369998][ T6876] tpg Y'CbCr encoding: 0/0 [ 122.392540][ T6876] tpg quantization: 0/0 [ 122.435748][ T6876] tpg RGB range: 0/2 [ 122.496042][ T6876] vivid-013: ================== END STATUS ================== [ 124.459086][ T6960] netlink: 4 bytes leftover after parsing attributes in process `syz.0.180'. [ 124.862629][ T6966] netlink: 20 bytes leftover after parsing attributes in process `syz.3.182'. [ 125.496953][ T6981] Setting dangerous option i915.request_timeout_ms - tainting kernel [ 128.310644][ T7013] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.590096][ T7013] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.718692][ T7013] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.833265][ T7013] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.836998][ T7081] [U] [ 131.840040][ T7081] [U] [ 131.842772][ T7081] [U] [ 131.845499][ T7081] [U] [ 131.904425][ T7081] [U] [ 131.907202][ T7081] [U] [ 131.910015][ T7081] [U] [ 131.912745][ T7081] [U] [ 132.066871][ T7081] [U] [ 132.069644][ T7081] [U] [ 132.072380][ T7081] [U] [ 132.075105][ T7081] [U] [ 132.096350][ T7081] [U] [ 132.099118][ T7081] [U] [ 132.101869][ T7081] [U] [ 132.104602][ T7081] [U] [ 132.132521][ T7081] [U] [ 132.135284][ T7081] [U] [ 132.138004][ T7081] [U] [ 132.140720][ T7081] [U] [ 132.176487][ T7081] [U] [ 132.179268][ T7081] [U] -X%4?% (Ղ3>oC/~KAgy_C:.P/0J*ҟBBR\an/d2i?p@zyGL^t3_k `ư?%w#J7@]O_`BF{=&T ҢO㐎1Y(Agls ayhU!Mb=$'ji [ 132.274932][ T7081] [U] MNp~ %|lZ.>.YQ2yZ6 [ 132.300407][ T7081] [U] k@j4omFf7!re[ײ2@w̰j%8Dʫb'u"h#i;T79 lK|6~r:e\ ^Qrxйwq.Xn1C`[RĨ߱4OmI࢚cyC}'X 5>E$EԲ4e"o{צRd 9)K [ 132.414845][ T7081] [U] 6F˺Vf2"Ao$dk#)a5OkҖwOmW` [ 132.421881][ T7081] [U] \xmjBF/GsZ426[*O'eP@\"C0n [ 132.494254][ T7081] [U] W-j^f{רo+C [ 132.499187][ T7081] [U] -\R,21{xPIlp/ncr*3{ƙGێ7peeIGRw]-4ԷI0m CCO7 ,1<>-Lh?^< %?j B>ЁXOcYY% ı5z\oap+yJ|B_ihG(5Aa&hoGf,aj=tXIs16ƀUƺ3; [ 132.543277][ T7081] [U] 6_ooT]* [ 132.564961][ T7081] [U] d@9 |nK`wɸ[`,S9D?!d~3? a( a&ݙΑL϶U%7"Rr l4ӟ [ 132.744655][ T7081] [U] -d]4dB^ʄs1@.6&wOCvLȾ_p ull [ 132.779101][ T7081] [U] .QE] +KmóS=4T#Y9) [ 132.802929][ T7081] [U] ŹhtZ</+D2.NҘ [ 132.823262][ T7081] [U] 1GJ;nP"~ef9nG+u@h"|cd4O$%YCFV& 0 [ 132.835670][ T7098] kafs: addr_prefs: Invalid Command [ 132.875470][ T7081] [U] Q!d3+{&jLEe;  ⣰$]ȭCi9iG5rB]e?{N1ayjp~ů&]"EvQO]fmdbJ6Hn [ 132.912233][ T7081] [U] goPKw^)q蒚m]R#$>B XSȭh [ 132.920677][ T7081] [U] ]wkp7L[Mc:qv018p%i?'ϛ37_w F[puFD [ 133.130798][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.137903][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 135.185138][ T7170] sd 0:0:1:0: PR command failed: 1026 [ 135.202178][ T7170] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 135.224727][ T7170] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 135.276638][ T7172] netlink: 4 bytes leftover after parsing attributes in process `syz.0.229'. [ 137.612933][ T7170] netlink: 338 bytes leftover after parsing attributes in process `syz.2.227'. [ 137.657275][ T7170] bridge0: port 2(bridge_slave_1) entered disabled state [ 137.666420][ T7170] bridge0: port 1(bridge_slave_0) entered disabled state [ 137.937255][ T7208] netlink: 342 bytes leftover after parsing attributes in process `syz.2.236'. [ 138.414996][ T29] audit: type=1804 audit(8277292098.639:7): pid=7214 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.239" name="/newroot/sys/kernel/debug/tracing/per_cpu/cpu0/stats" dev="tracefs" ino=1304 res=1 errno=0 [ 138.976140][ T7226] netlink: 338 bytes leftover after parsing attributes in process `syz.2.241'. [ 139.931285][ T7193] qrtr: Invalid version 0 [ 139.947490][ T7241] netlink: 'syz.2.243': attribute type 19 has an invalid length. [ 139.960385][ T7241] netlink: 310 bytes leftover after parsing attributes in process `syz.2.243'. [ 142.935914][ T7291] netlink: 'syz.3.254': attribute type 19 has an invalid length. [ 142.943744][ T7291] netlink: 310 bytes leftover after parsing attributes in process `syz.3.254'. [ 149.497775][ T29] audit: type=1804 audit(8277292109.729:8): pid=7389 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.276" name="/newroot/sys/kernel/tracing/events/vmalloc/filter" dev="tracefs" ino=19680823 res=1 errno=0 [ 152.348944][ T7411] syz.2.282 uses obsolete (PF_INET,SOCK_PACKET) [ 152.991457][ T7429] netlink: 'syz.3.284': attribute type 11 has an invalid length. [ 158.075134][ T7480] netlink: 4 bytes leftover after parsing attributes in process `syz.3.297'. [ 160.851046][ T7509] zram: Added device: zram1 [ 160.887969][ T7508] nvme_fabrics: missing parameter 'transport=%s' [ 160.916260][ T7508] nvme_fabrics: missing parameter 'nqn=%s' [ 161.174736][ T7463] qrtr: Invalid version 0 [ 169.498557][ T7596] netlink: 342 bytes leftover after parsing attributes in process `syz.2.324'. [ 170.339164][ T7610] FAULT_INJECTION: forcing a failure. [ 170.339164][ T7610] name failslab, interval 1, probability 0, space 0, times 1 [ 170.356166][ T7610] CPU: 0 UID: 0 PID: 7610 Comm: syz.3.328 Tainted: G U 6.13.0-rc6-syzkaller-00231-g77a903cd8e5a #0 [ 170.368265][ T7610] Tainted: [U]=USER [ 170.372067][ T7610] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 170.382151][ T7610] Call Trace: [ 170.385441][ T7610] [ 170.388379][ T7610] dump_stack_lvl+0x16c/0x1f0 [ 170.393084][ T7610] should_fail_ex+0x497/0x5b0 [ 170.397782][ T7610] ? fs_reclaim_acquire+0xae/0x150 [ 170.402911][ T7610] should_failslab+0xc2/0x120 [ 170.407602][ T7610] __kmalloc_noprof+0xce/0x4f0 [ 170.412383][ T7610] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 170.418017][ T7610] ? tomoyo_realpath_from_path+0xbf/0x710 [ 170.423748][ T7610] tomoyo_realpath_from_path+0xbf/0x710 [ 170.429302][ T7610] ? tomoyo_path_number_perm+0x235/0x5b0 [ 170.434956][ T7610] tomoyo_path_number_perm+0x248/0x5b0 [ 170.440441][ T7610] ? tomoyo_path_number_perm+0x235/0x5b0 [ 170.446091][ T7610] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 170.452114][ T7610] ? __pfx_lock_release+0x10/0x10 [ 170.457147][ T7610] ? trace_lock_acquire+0x14e/0x1f0 [ 170.462359][ T7610] ? lock_acquire+0x2f/0xb0 [ 170.466863][ T7610] ? __fget_files+0x40/0x3a0 [ 170.471474][ T7610] ? __fget_files+0x206/0x3a0 [ 170.476175][ T7610] security_file_ioctl+0x9b/0x240 [ 170.481208][ T7610] __x64_sys_ioctl+0xb7/0x200 [ 170.485892][ T7610] do_syscall_64+0xcd/0x250 [ 170.490409][ T7610] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 170.496315][ T7610] RIP: 0033:0x7fc2e0385d29 [ 170.500742][ T7610] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 170.520370][ T7610] RSP: 002b:00007fc2e11d0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 170.528791][ T7610] RAX: ffffffffffffffda RBX: 00007fc2e0576080 RCX: 00007fc2e0385d29 [ 170.536764][ T7610] RDX: 0000000000000000 RSI: 000000008008b705 RDI: 0000000000000003 [ 170.544738][ T7610] RBP: 00007fc2e11d0090 R08: 0000000000000000 R09: 0000000000000000 [ 170.552712][ T7610] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 170.560686][ T7610] R13: 0000000000000001 R14: 00007fc2e0576080 R15: 00007ffc683561f8 [ 170.568676][ T7610] [ 170.580247][ T7610] ERROR: Out of memory at tomoyo_realpath_from_path. [ 170.812451][ T7598] netlink: 8 bytes leftover after parsing attributes in process `syz.2.325'. [ 174.795461][ T7650] netlink: 4 bytes leftover after parsing attributes in process `syz.3.340'. [ 177.949201][ T5833] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 177.997977][ T5833] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 178.027321][ T5833] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 178.066263][ T5833] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 178.074039][ T5833] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 178.081903][ T5833] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 178.388171][ T7669] chnl_net:caif_netlink_parms(): no params data found [ 178.492906][ T7674] Format for deleting device is "id" (uint). [ 178.907307][ T7669] bridge0: port 1(bridge_slave_0) entered blocking state [ 178.907379][ T7669] bridge0: port 1(bridge_slave_0) entered disabled state [ 178.907524][ T7669] bridge_slave_0: entered allmulticast mode [ 178.908567][ T7669] bridge_slave_0: entered promiscuous mode [ 178.910241][ T7669] bridge0: port 2(bridge_slave_1) entered blocking state [ 178.910309][ T7669] bridge0: port 2(bridge_slave_1) entered disabled state [ 178.910429][ T7669] bridge_slave_1: entered allmulticast mode [ 178.911461][ T7669] bridge_slave_1: entered promiscuous mode [ 179.005543][ T7669] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 179.007840][ T7669] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 179.171755][ T7695] FAULT_INJECTION: forcing a failure. [ 179.171755][ T7695] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 179.223920][ T7669] team0: Port device team_slave_0 added [ 179.247899][ T7669] team0: Port device team_slave_1 added [ 179.255301][ T7695] CPU: 0 UID: 0 PID: 7695 Comm: syz.2.350 Tainted: G U 6.13.0-rc6-syzkaller-00231-g77a903cd8e5a #0 [ 179.267430][ T7695] Tainted: [U]=USER [ 179.271253][ T7695] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 179.281689][ T7695] Call Trace: [ 179.285005][ T7695] [ 179.287960][ T7695] dump_stack_lvl+0x16c/0x1f0 [ 179.292689][ T7695] should_fail_ex+0x497/0x5b0 [ 179.297414][ T7695] _copy_to_user+0x32/0xd0 [ 179.301887][ T7695] simple_read_from_buffer+0xd0/0x160 [ 179.307388][ T7695] proc_fail_nth_read+0x198/0x270 [ 179.312464][ T7695] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 179.318066][ T7695] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 179.323654][ T7695] vfs_read+0x1df/0xbe0 [ 179.327848][ T7695] ? __fget_files+0x1fc/0x3a0 [ 179.332571][ T7695] ? __pfx___mutex_lock+0x10/0x10 [ 179.337633][ T7695] ? __pfx_vfs_read+0x10/0x10 [ 179.342361][ T7695] ? __fget_files+0x206/0x3a0 [ 179.347093][ T7695] ksys_read+0x12b/0x250 [ 179.351369][ T7695] ? __pfx_ksys_read+0x10/0x10 [ 179.356174][ T7695] do_syscall_64+0xcd/0x250 [ 179.360713][ T7695] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 179.366646][ T7695] RIP: 0033:0x7fb33718473c [ 179.371084][ T7695] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 179.390730][ T7695] RSP: 002b:00007fb337f9e030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 179.399184][ T7695] RAX: ffffffffffffffda RBX: 00007fb337376080 RCX: 00007fb33718473c [ 179.407190][ T7695] RDX: 000000000000000f RSI: 00007fb337f9e0a0 RDI: 0000000000000004 [ 179.415202][ T7695] RBP: 00007fb337f9e090 R08: 0000000000000000 R09: 0000000000000000 [ 179.423212][ T7695] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 179.431212][ T7695] R13: 0000000000000001 R14: 00007fb337376080 R15: 00007ffd1e7af718 [ 179.439235][ T7695] [ 179.442366][ C0] vkms_vblank_simulate: vblank timer overrun [ 179.607330][ T7669] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 179.626540][ T7669] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 179.681023][ T7669] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 179.699758][ T7669] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 179.734752][ T7669] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 179.788341][ T7669] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 180.082978][ T7669] hsr_slave_0: entered promiscuous mode [ 180.103843][ T7669] hsr_slave_1: entered promiscuous mode [ 180.124364][ T7669] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 180.137188][ T7669] Cannot create hsr debugfs directory [ 180.165788][ T5146] Bluetooth: hci4: command tx timeout [ 180.609071][ T7716] sysfs_service_op_store: Client not running :-5: [ 180.618509][ T7717] sysfs_service_op_store: Client not running :-5: [ 180.937771][ T7669] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 181.184361][ T7669] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 181.233703][ T7722] vivid-013: ================= START STATUS ================= [ 181.253744][ T7669] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 181.262143][ T7720] Format for deleting device is "id" (uint). [ 181.314574][ T7722] vivid-013: Generate PTS: true [ 181.341049][ T7669] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 181.350081][ T7722] vivid-013: Generate SCR: true [ 181.384892][ T7722] tpg source WxH: 640x360 (Y'CbCr) [ 181.390068][ T7722] tpg field: 1 [ 181.393476][ T7722] tpg crop: 640x360@0x0 [ 181.444718][ T7722] tpg compose: 640x360@0x0 [ 181.471564][ T7722] tpg colorspace: 8 [ 181.495819][ T7722] tpg transfer function: 0/0 [ 181.507201][ T7722] tpg Y'CbCr encoding: 0/0 [ 181.515340][ T7722] tpg quantization: 0/0 [ 181.528576][ T7722] tpg RGB range: 0/2 [ 181.538281][ T7722] vivid-013: ================== END STATUS ================== [ 181.637734][ T7669] 8021q: adding VLAN 0 to HW filter on device bond0 [ 181.742839][ T7669] 8021q: adding VLAN 0 to HW filter on device team0 [ 181.787020][ T6217] bridge0: port 1(bridge_slave_0) entered blocking state [ 181.794151][ T6217] bridge0: port 1(bridge_slave_0) entered forwarding state [ 181.856055][ T6214] bridge0: port 2(bridge_slave_1) entered blocking state [ 181.863261][ T6214] bridge0: port 2(bridge_slave_1) entered forwarding state [ 181.995953][ T7669] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 182.254761][ T5146] Bluetooth: hci4: command tx timeout [ 182.581380][ T7669] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 183.362612][ T7669] veth0_vlan: entered promiscuous mode [ 183.376728][ T7669] veth1_vlan: entered promiscuous mode [ 183.399754][ T7669] veth0_macvtap: entered promiscuous mode [ 183.408855][ T7669] veth1_macvtap: entered promiscuous mode [ 183.424457][ T7669] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 183.435159][ T7669] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 183.448974][ T7669] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 183.458462][ T7669] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 183.469014][ T7669] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 183.480484][ T7669] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 183.497310][ T7669] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.506123][ T7669] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.514913][ T7669] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.523663][ T7669] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.103367][ T7767] Format for deleting device is "id" (uint). [ 184.238561][ T7774] netlink: 8 bytes leftover after parsing attributes in process `syz.3.363'. [ 184.325511][ T5146] Bluetooth: hci4: command tx timeout [ 184.391581][ T7776] Invalid ELF header magic: != ELF [ 184.558180][ T6211] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 184.586800][ T6211] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 184.634749][ T6217] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 184.653823][ T6217] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 185.075511][ T7786] netlink: 28 bytes leftover after parsing attributes in process `syz.0.367'. [ 185.662515][ T7786] geneve1: entered allmulticast mode [ 185.691539][ T7799] netlink: 334 bytes leftover after parsing attributes in process `syz.3.369'. [ 186.407298][ T5146] Bluetooth: hci4: command tx timeout [ 186.678070][ T7816] netlink: 20 bytes leftover after parsing attributes in process `syz.0.374'. [ 187.079432][ T7823] Format for deleting device is "id" (uint). [ 187.559438][ T7830] netlink: 8 bytes leftover after parsing attributes in process `syz.0.377'. [ 187.718619][ T7833] netlink: 28 bytes leftover after parsing attributes in process `syz.4.378'. [ 188.466794][ T7841] netlink: 342 bytes leftover after parsing attributes in process `syz.0.380'. [ 188.672316][ T7848] 0}^: entered promiscuous mode [ 189.266095][ T7855] Format for deleting device is "id" (uint). [ 189.690692][ T7869] pty pty223: ldisc open failed (-12), clearing slot 223 [ 190.957859][ T7893] Format for deleting device is "id" (uint). [ 191.257118][ T7901] netlink: 4 bytes leftover after parsing attributes in process `syz.4.398'. [ 192.428237][ T7941] netlink: 338 bytes leftover after parsing attributes in process `syz.3.407'. [ 192.477656][ T7941] netlink: 338 bytes leftover after parsing attributes in process `syz.3.407'. [ 192.521289][ T7941] netlink: 134 bytes leftover after parsing attributes in process `syz.3.407'. [ 192.538401][ T7941] netlink: 134 bytes leftover after parsing attributes in process `syz.3.407'. [ 193.572951][ T7979] tipc: Started in network mode [ 193.579467][ T7979] tipc: Node identity ee00, cluster identity 4711 [ 193.596860][ T7979] tipc: Node number set to 60928 [ 194.288236][ T8011] warning: `syz.3.416' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 194.515618][ T8015] netlink: 28 bytes leftover after parsing attributes in process `syz.0.420'. [ 194.574480][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.580962][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 196.301355][ T8045] netlink: 8 bytes leftover after parsing attributes in process `syz.4.427'. [ 196.347775][ T8045] netlink: 8 bytes leftover after parsing attributes in process `syz.4.427'. [ 196.651369][ T5841] Bluetooth: hci2: command 0x0406 tx timeout [ 196.658819][ T5839] Bluetooth: hci0: command 0x0406 tx timeout [ 196.666223][ T5840] Bluetooth: hci1: command 0x0406 tx timeout [ 197.098518][ T8053] netlink: 399 bytes leftover after parsing attributes in process `syz.0.428'. [ 197.769131][ T8062] netlink: 28 bytes leftover after parsing attributes in process `syz.2.431'. [ 199.631178][ T8111] netlink: 338 bytes leftover after parsing attributes in process `syz.3.445'. [ 199.662462][ T8111] veth1_macvtap: left promiscuous mode [ 199.787638][ T29] audit: type=1800 audit(2094.403:9): pid=8120 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.446" name="features" dev="configfs" ino=17102 res=0 errno=0 [ 202.756878][ T8158] [ 202.759256][ T8158] ====================================================== [ 202.766289][ T8158] WARNING: possible circular locking dependency detected [ 202.773323][ T8158] 6.13.0-rc6-syzkaller-00231-g77a903cd8e5a #0 Tainted: G U [ 202.781922][ T8158] ------------------------------------------------------ [ 202.788952][ T8158] syz.4.456/8158 is trying to acquire lock: [ 202.794854][ T8158] ffff8880796a8148 (&sb->s_type->i_mutex_key#3){++++}-{4:4}, at: start_creating.part.0+0xb0/0x3a0 [ 202.805542][ T8158] [ 202.805542][ T8158] but task is already holding lock: [ 202.812919][ T8158] ffffffff8de395c8 (relay_channels_mutex){+.+.}-{4:4}, at: relay_open+0x324/0xa20 [ 202.822208][ T8158] [ 202.822208][ T8158] which lock already depends on the new lock. [ 202.822208][ T8158] [ 202.832625][ T8158] [ 202.832625][ T8158] the existing dependency chain (in reverse order) is: [ 202.841655][ T8158] [ 202.841655][ T8158] -> #2 (relay_channels_mutex){+.+.}-{4:4}: [ 202.849768][ T8158] __mutex_lock+0x19b/0xa60 [ 202.854826][ T8158] relay_prepare_cpu+0x2c/0x300 [ 202.860244][ T8158] cpuhp_invoke_callback+0x3d0/0xa10 [ 202.866090][ T8158] __cpuhp_invoke_callback_range+0x101/0x200 [ 202.872612][ T8158] _cpu_up+0x3fd/0x910 [ 202.877204][ T8158] cpu_up+0x1dc/0x240 [ 202.881706][ T8158] cpuhp_bringup_mask+0xdc/0x210 [ 202.887169][ T8158] bringup_nonboot_cpus+0x176/0x1c0 [ 202.892893][ T8158] smp_init+0x34/0x160 [ 202.897479][ T8158] kernel_init_freeable+0x3ad/0x8b0 [ 202.903205][ T8158] kernel_init+0x1c/0x2b0 [ 202.908067][ T8158] ret_from_fork+0x45/0x80 [ 202.913009][ T8158] ret_from_fork_asm+0x1a/0x30 [ 202.918304][ T8158] [ 202.918304][ T8158] -> #1 (cpu_hotplug_lock){++++}-{0:0}: [ 202.926042][ T8158] cpus_read_lock+0x42/0x160 [ 202.931154][ T8158] zswap_store+0x8f8/0x25f0 [ 202.936182][ T8158] swap_writepage+0x3b6/0x1120 [ 202.941469][ T8158] shmem_writepage+0xf7b/0x1490 [ 202.946903][ T8158] pageout+0x3b2/0xaa0 [ 202.951491][ T8158] shrink_folio_list+0x3025/0x42d0 [ 202.957120][ T8158] evict_folios+0x6e3/0x19c0 [ 202.962227][ T8158] try_to_shrink_lruvec+0x61e/0xa80 [ 202.967943][ T8158] shrink_lruvec+0x313/0x2ba0 [ 202.973138][ T8158] shrink_node+0x105e/0x3f20 [ 202.978247][ T8158] do_try_to_free_pages+0x35f/0x1a30 [ 202.984052][ T8158] try_to_free_mem_cgroup_pages+0x31a/0x7a0 [ 202.990467][ T8158] try_charge_memcg+0x356/0xaf0 [ 202.995850][ T8158] obj_cgroup_charge+0x179/0x4d0 [ 203.001317][ T8158] __memcg_slab_post_alloc_hook+0x1b6/0x9b0 [ 203.007733][ T8158] kmem_cache_alloc_lru_noprof+0x30d/0x3b0 [ 203.014069][ T8158] __d_alloc+0x35/0x8c0 [ 203.018753][ T8158] d_alloc+0x4a/0x1e0 [ 203.023259][ T8158] d_alloc_parallel+0xe9/0x12b0 [ 203.028625][ T8158] __lookup_slow+0x194/0x460 [ 203.033739][ T8158] lookup_one_len+0x181/0x1b0 [ 203.038950][ T8158] start_creating.part.0+0x12f/0x3a0 [ 203.044767][ T8158] __debugfs_create_file+0xa5/0x660 [ 203.050580][ T8158] debugfs_create_file_full+0x6d/0xa0 [ 203.056476][ T8158] kvm_dev_ioctl+0x14b6/0x1aa0 [ 203.061763][ T8158] __x64_sys_ioctl+0x190/0x200 [ 203.067045][ T8158] do_syscall_64+0xcd/0x250 [ 203.072077][ T8158] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 203.078498][ T8158] [ 203.078498][ T8158] -> #0 (&sb->s_type->i_mutex_key#3){++++}-{4:4}: [ 203.087104][ T8158] __lock_acquire+0x249e/0x3c40 [ 203.092471][ T8158] lock_acquire.part.0+0x11b/0x380 [ 203.098105][ T8158] down_write+0x93/0x200 [ 203.102869][ T8158] start_creating.part.0+0xb0/0x3a0 [ 203.108593][ T8158] __debugfs_create_file+0xa5/0x660 [ 203.114315][ T8158] debugfs_create_file_full+0x6d/0xa0 [ 203.120212][ T8158] relay_create_buf_file+0xf0/0x170 [ 203.125933][ T8158] relay_open_buf.part.0+0x760/0xb90 [ 203.131742][ T8158] relay_open+0x5e2/0xa20 [ 203.136605][ T8158] do_blk_trace_setup+0x4b4/0xac0 [ 203.142161][ T8158] __blk_trace_setup+0xd8/0x180 [ 203.147542][ T8158] blk_trace_setup+0x47/0x70 [ 203.152653][ T8158] sg_ioctl+0x7a3/0x26b0 [ 203.157426][ T8158] __x64_sys_ioctl+0x190/0x200 [ 203.162710][ T8158] do_syscall_64+0xcd/0x250 [ 203.167738][ T8158] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 203.174156][ T8158] [ 203.174156][ T8158] other info that might help us debug this: [ 203.174156][ T8158] [ 203.184370][ T8158] Chain exists of: [ 203.184370][ T8158] &sb->s_type->i_mutex_key#3 --> cpu_hotplug_lock --> relay_channels_mutex [ 203.184370][ T8158] [ 203.198890][ T8158] Possible unsafe locking scenario: [ 203.198890][ T8158] [ 203.206331][ T8158] CPU0 CPU1 [ 203.211685][ T8158] ---- ---- [ 203.217040][ T8158] lock(relay_channels_mutex); [ 203.221888][ T8158] lock(cpu_hotplug_lock); [ 203.228910][ T8158] lock(relay_channels_mutex); [ 203.236275][ T8158] lock(&sb->s_type->i_mutex_key#3); [ 203.241660][ T8158] [ 203.241660][ T8158] *** DEADLOCK *** [ 203.241660][ T8158] [ 203.249797][ T8158] 2 locks held by syz.4.456/8158: [ 203.254825][ T8158] #0: ffff888025b37e78 (&q->debugfs_mutex){+.+.}-{4:4}, at: blk_trace_setup+0x33/0x70 [ 203.264494][ T8158] #1: ffffffff8de395c8 (relay_channels_mutex){+.+.}-{4:4}, at: relay_open+0x324/0xa20 [ 203.274217][ T8158] [ 203.274217][ T8158] stack backtrace: [ 203.280095][ T8158] CPU: 0 UID: 0 PID: 8158 Comm: syz.4.456 Tainted: G U 6.13.0-rc6-syzkaller-00231-g77a903cd8e5a #0 [ 203.292155][ T8158] Tainted: [U]=USER [ 203.295947][ T8158] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 203.306008][ T8158] Call Trace: [ 203.309278][ T8158] [ 203.312204][ T8158] dump_stack_lvl+0x116/0x1f0 [ 203.316887][ T8158] print_circular_bug+0x41c/0x610 [ 203.321918][ T8158] check_noncircular+0x31a/0x400 [ 203.326861][ T8158] ? __pfx_check_noncircular+0x10/0x10 [ 203.332327][ T8158] ? stack_trace_save+0x95/0xd0 [ 203.337182][ T8158] ? lockdep_lock+0xc6/0x200 [ 203.341779][ T8158] ? __pfx_lockdep_lock+0x10/0x10 [ 203.346824][ T8158] __lock_acquire+0x249e/0x3c40 [ 203.351676][ T8158] ? __pfx___lock_acquire+0x10/0x10 [ 203.356872][ T8158] lock_acquire.part.0+0x11b/0x380 [ 203.361978][ T8158] ? start_creating.part.0+0xb0/0x3a0 [ 203.367359][ T8158] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 203.372989][ T8158] ? rcu_is_watching+0x12/0xc0 [ 203.377753][ T8158] ? trace_lock_acquire+0x14e/0x1f0 [ 203.382957][ T8158] ? start_creating.part.0+0xb0/0x3a0 [ 203.388331][ T8158] ? lock_acquire+0x2f/0xb0 [ 203.392830][ T8158] ? start_creating.part.0+0xb0/0x3a0 [ 203.398226][ T8158] down_write+0x93/0x200 [ 203.402482][ T8158] ? start_creating.part.0+0xb0/0x3a0 [ 203.407870][ T8158] ? __pfx_down_write+0x10/0x10 [ 203.412733][ T8158] ? do_raw_spin_unlock+0x172/0x230 [ 203.417943][ T8158] ? mntput+0x10/0x90 [ 203.421925][ T8158] ? simple_pin_fs+0xa3/0x190 [ 203.426601][ T8158] start_creating.part.0+0xb0/0x3a0 [ 203.431809][ T8158] __debugfs_create_file+0xa5/0x660 [ 203.437016][ T8158] debugfs_create_file_full+0x6d/0xa0 [ 203.442398][ T8158] ? __pfx_blk_create_buf_file_callback+0x10/0x10 [ 203.448818][ T8158] relay_create_buf_file+0xf0/0x170 [ 203.454027][ T8158] relay_open_buf.part.0+0x760/0xb90 [ 203.459332][ T8158] relay_open+0x5e2/0xa20 [ 203.463678][ T8158] ? debugfs_create_file_full+0x75/0xa0 [ 203.469235][ T8158] do_blk_trace_setup+0x4b4/0xac0 [ 203.474261][ T8158] __blk_trace_setup+0xd8/0x180 [ 203.479110][ T8158] ? __pfx___blk_trace_setup+0x10/0x10 [ 203.484570][ T8158] ? do_vfs_ioctl+0x513/0x1950 [ 203.489330][ T8158] blk_trace_setup+0x47/0x70 [ 203.493921][ T8158] sg_ioctl+0x7a3/0x26b0 [ 203.498169][ T8158] ? __pfx_sg_ioctl+0x10/0x10 [ 203.502846][ T8158] ? __pfx_lock_release+0x10/0x10 [ 203.507865][ T8158] ? trace_lock_acquire+0x14e/0x1f0 [ 203.513067][ T8158] ? __fget_files+0x206/0x3a0 [ 203.517747][ T8158] ? __pfx_sg_ioctl+0x10/0x10 [ 203.522430][ T8158] __x64_sys_ioctl+0x190/0x200 [ 203.527192][ T8158] do_syscall_64+0xcd/0x250 [ 203.531699][ T8158] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 203.537595][ T8158] RIP: 0033:0x7f7a70185d29 [ 203.542003][ T8158] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 203.561619][ T8158] RSP: 002b:00007f7a70fff038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 203.570039][ T8158] RAX: ffffffffffffffda RBX: 00007f7a70375fa0 RCX: 00007f7a70185d29 [ 203.578007][ T8158] RDX: 0000000000000038 RSI: 00000000c0481273 RDI: 0000000000000003 [ 203.585981][ T8158] RBP: 00007f7a70201b08 R08: 0000000000000000 R09: 0000000000000000 [ 203.593948][ T8158] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 203.601913][ T8158] R13: 0000000000000000 R14: 00007f7a70375fa0 R15: 00007ffdc2c4dd38 [ 203.609883][ T8158] [ 204.055132][ T8158] netlink: 178 bytes leftover after parsing attributes in process `syz.4.456'.