last executing test programs: 7.426095637s ago: executing program 0 (id=187): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ethtool(&(0x7f00000007c0), r0) sendmsg$auto_ETHTOOL_MSG_TUNNEL_INFO_GET(r0, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYBLOB="050725532d71e110597804"], 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x880) 7.057397999s ago: executing program 0 (id=188): mmap$auto(0x0, 0x8, 0x2, 0x9b72, 0x5, 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7fffffff, 0xd, 0x2, 0x6, 0x7, 0x8, 0xffffffffffffffff, [], {0x6, 0x6, 0xf, 0x29f, 0x100, 0x83, 0x101, 0x6, 0x2}, {0x100, 0x1, 0x52, 0x5, 0x1, 0x40, 0x76c5, 0x8, 0x100000000}}) io_uring_register$auto(0x2, 0x1a, 0x0, 0x83) ioperm$auto(0x7, 0x6, 0x2) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/mnt\x00') socket(0x15, 0x5, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = getpid() unshare$auto(0x40000080) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(r0, r0, 0xffa) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x1, 0x84) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x54) listen$auto(0x3, 0x81) accept$auto(0x3, 0x0, 0x0) process_vm_readv$auto(r1, &(0x7f0000000000)={0x0, 0xffe}, 0x1, &(0x7f0000000280)={&(0x7f0000000040), 0x1ffffffff}, 0x6, 0x0) mremap$auto(0x4000, 0xb8, 0x13fd4, 0x3, 0xfffff000) ioctl$auto(0x3, 0x9, 0xfffffffffffff4e0) r2 = socket(0xa, 0x2, 0x0) read$auto_ctl_device_fops_user(r0, 0x0, 0x0) setsockopt$auto(r2, 0x29, 0x1b, 0x0, 0x56b) io_uring_setup$auto(0x8, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x3, 0x100) socket(0x2, 0x2, 0x1) connect$auto(0x3, &(0x7f00000000c0)=@in={0x2, 0x0, @local}, 0x55) 6.3106262s ago: executing program 3 (id=193): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x2b, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @loopback}, 0x6a) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0xffffffff, 0x20000000) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) write$auto(r0, 0x0, 0xfffffde9) shutdown$auto(0x200000003, 0x2) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) socket$nl_generic(0x10, 0x3, 0x10) write$auto(0xca, 0x0, 0x1ff) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000340), 0x108800, 0x0) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, 0x0, 0x100, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x2, 0x2) getsockopt$auto_SO_BUF_LOCK(r2, 0x10, 0x48, &(0x7f00000000c0)=',](:|\x00', &(0x7f00000001c0)=0x400) madvise$auto(0x0, 0xffffffff97fb20a5, 0x10002) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0xb0141, 0x0) sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x14}}, 0x4000000) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x6482, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x400, 0xdf, 0x8000000000000eb1, 0xffffffffffffffff, 0x0) r3 = socket(0xa, 0x801, 0x84) r4 = socket(0x15, 0x1, 0x0) pipe$auto(&(0x7f0000000000)=r3) sendmsg$auto_OVS_METER_CMD_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[], 0x44}, 0x1, 0x0, 0x0, 0x4004004}, 0x8000) sendmsg$auto_OVS_DP_CMD_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x20000800}, 0x4) sendmmsg$auto(r4, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f00000001c0), 0x7, 0xa505}, 0x800}, 0x7, 0x4008) r5 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000180)='/dev/bus/usb/006/001\x00', 0x40940, 0x0) mmap$auto(0x7, 0x4, 0x8, 0x15, r5, 0x101) 5.338411103s ago: executing program 0 (id=196): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x2b, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @loopback}, 0x6a) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0xffffffff, 0x20000000) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) write$auto(r0, 0x0, 0xfffffde9) shutdown$auto(0x200000003, 0x2) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) socket$nl_generic(0x10, 0x3, 0x10) write$auto(0xca, 0x0, 0x1ff) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000340), 0x108800, 0x0) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, 0x0, 0x100, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x2, 0x2) getsockopt$auto_SO_BUF_LOCK(r2, 0x10, 0x48, &(0x7f00000000c0)=',](:|\x00', &(0x7f00000001c0)=0x400) madvise$auto(0x0, 0xffffffff97fb20a5, 0x10002) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0xb0141, 0x0) sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x14}}, 0x4000000) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x6482, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x400, 0xdf, 0x8000000000000eb1, 0xffffffffffffffff, 0x0) r3 = socket(0xa, 0x801, 0x84) r4 = socket(0x15, 0x1, 0x0) pipe$auto(&(0x7f0000000000)=r3) sendmsg$auto_OVS_METER_CMD_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[], 0x44}, 0x1, 0x0, 0x0, 0x4004004}, 0x8000) sendmsg$auto_OVS_DP_CMD_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0f0026bd7000fcdbdf"], 0x24}, 0x1, 0x0, 0x0, 0x20000800}, 0x4) sendmmsg$auto(r4, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f00000001c0), 0x7, 0xa505}, 0x800}, 0x7, 0x4008) r5 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000180)='/dev/bus/usb/006/001\x00', 0x40940, 0x0) mmap$auto(0x7, 0x4, 0x8, 0x15, r5, 0x101) 4.264033076s ago: executing program 1 (id=198): openat$auto_ftrace_set_event_pid_fops_trace_events(0xffffffffffffff9c, &(0x7f0000002640)='/sys/kernel/debug/tracing/set_event_pid\x00', 0x2002, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/adsp1\x00', 0x123002, 0x0) r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp1\x00', 0x20b42, 0x0) ioctl$auto_SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000440)="1800") r1 = openat$auto_proc_pid_attr_operations_base(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/attr/current\x00', 0x1, 0x0) openat$auto_iommufd_fops_main(0xffffffffffffff9c, &(0x7f0000000400), 0x80001, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x27, 0xd, 0x1, 0x948b, 0x4, 0x15f4da0a, 0x1, 0x3, 0x11000000, 0x0, 0x7, 0x200000006d3c, 0x5, 0x10, 0xfffffffffffffffd]}, 0x0) r3 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000040), r2) sendmsg$auto_L2TP_CMD_SESSION_DELETE(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r3, 0x400, 0x70bd28, 0x25dfdbfd, {}, [@L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x8}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, 0x5}]}, 0x24}}, 0x40811) close_range$auto(0x2, 0x8, 0x0) openat$auto_ftrace_set_event_pid_fops_trace_events(0xffffffffffffff9c, &(0x7f0000002640)='/sys/kernel/debug/tracing/set_event_pid\x00', 0x2002, 0x0) (async) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/adsp1\x00', 0x123002, 0x0) (async) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp1\x00', 0x20b42, 0x0) (async) ioctl$auto_SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000440)="1800") (async) openat$auto_proc_pid_attr_operations_base(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/attr/current\x00', 0x1, 0x0) (async) openat$auto_iommufd_fops_main(0xffffffffffffff9c, &(0x7f0000000400), 0x80001, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x27, 0xd, 0x1, 0x948b, 0x4, 0x15f4da0a, 0x1, 0x3, 0x11000000, 0x0, 0x7, 0x200000006d3c, 0x5, 0x10, 0xfffffffffffffffd]}, 0x0) (async) syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000040), r2) (async) sendmsg$auto_L2TP_CMD_SESSION_DELETE(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r3, 0x400, 0x70bd28, 0x25dfdbfd, {}, [@L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x8}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, 0x5}]}, 0x24}}, 0x40811) (async) close_range$auto(0x2, 0x8, 0x0) (async) 3.771479558s ago: executing program 1 (id=200): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_ETHTOOL_MSG_TUNNEL_INFO_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x2c, 0x0, 0x1, 0x70bd28, 0x25dfdbfe, {0x1c, 0x0, 0x300}, [@ETHTOOL_A_TUNNEL_INFO_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000000}, 0x4000000) 3.729841144s ago: executing program 3 (id=201): mmap$auto(0x0, 0x8, 0x4000000000df, 0xeb0, 0x401, 0x8000) r0 = openat$auto_bch_chardev_fops_chardev(0xffffffffffffff9c, &(0x7f0000000580), 0x400, 0x0) ioctl$auto_BCH_IOCTL_FSCK_OFFLINE(r0, 0x4018bc13, &(0x7f00000005c0)={0x0, 0x9d, 0x720, [0x0]}) mmap$auto(0x0, 0x4020005, 0xdf, 0x10, r0, 0x8000) r1 = getpid() process_vm_readv$auto(r1, &(0x7f0000000000)={0x0, 0xfff}, 0x1, &(0x7f0000000280)={&(0x7f0000000040)="6b448f", 0x40000100000001}, 0x6, 0x0) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/pts/ptmx\x00', 0x40001, 0x0) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/pts/ptmx\x00', 0x0, 0x0) ioctl$auto_TCFLSH2(r3, 0x80045439, 0x0) ioctl$auto_TIOCSETD2(r2, 0x5423, 0x0) ioctl$auto(r2, 0x89f0, r2) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) socket(0x2, 0x5, 0x0) madvise$auto(0x7ff, 0xfffffffffffefffd, 0x15) socket(0x11, 0x80000, 0x8) socket(0x1f, 0x80002, 0x73) socket(0xa, 0x1, 0x84) madvise$auto(0x110c230000, 0x8031ca, 0x9) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) madvise$auto(0x0, 0xfffffffffffefffd, 0x17) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000022fc0), r4) sendmsg$auto_NL80211_CMD_CRIT_PROTOCOL_START(r4, &(0x7f0000023280)={0x0, 0x0, &(0x7f0000023240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c000000184539c15db0806ac55e4c4fa3fbd24969a575656a1b1d771362802ef4d04e5da515806f3fe6203ccfbafa7b549032181ba7b4afb628f2ac3834ec59776f6f80da4ee91f37971ce635fa910fa5d919164be8cce06825747aba7f181ad521d85180189d1f9c73dc751b2aaf9329380ed4c89955a97f4961e4270da15f7d6ac7c38938be6d20ae5b874b8e5556e35e49c6357b56e7c00bfb588b09463ac7bb4b996acad7242f86409d82db0c8f", @ANYRES16=r5, @ANYBLOB="01002dbd7000fddbdf256200000006000e001c110000"], 0x1c}, 0x1, 0x0, 0x0, 0x44}, 0x20000000) r6 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/kcore\x00', 0x101000, 0x0) read$auto_proc_iter_file_ops_compat_inode(r6, &(0x7f0000000680)=""/227, 0xe3) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x4000880}, 0x20080000) 3.583104024s ago: executing program 1 (id=202): mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) socket(0x10, 0x2, 0x14) socket(0x11, 0x80003, 0x300) socket(0x10, 0x2, 0x0) r0 = socket(0xa, 0x6, 0x101) socket(0x2, 0x80002, 0x73) r1 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'veth1_to_batadv\x00', 0x0}) sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x3c, r1, 0x300, 0x70bd2d, 0x25dfdbff, {}, [@ETHTOOL_A_FEATURES_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg0\x00'}]}]}, 0x3c}}, 0x20000004) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0xffff, @remote}, 0x6a) socket(0xa, 0x2, 0x0) r3 = socket(0x10, 0x2, 0x14) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r3, &(0x7f0000003000)={0x0, 0x0, &(0x7f0000002fc0)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000000a14af"], 0x14}, 0x1, 0x0, 0x0, 0x80c3}, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYRES8=r3], 0x1ac}}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4c084}, 0x51) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x2}, 0x3, 0x0) 3.334495374s ago: executing program 2 (id=203): r0 = socket(0x2, 0x1, 0x106) setsockopt$auto(r0, 0x1, 0x40, &(0x7f0000000200)='\x00\x89e\xad\x97\xc5E\xea=\x0f\xf4\xba4\x05>y/21\xfd\'\xc7\x1c\xaeV`\xc7^\x05\"H\xb8\x12\x99\x1fF\xdc\xc4\x02FV\x04D&9?\xa8d\xc97B\x9f)\xc6\xbb\x15_\xfd\xa5\xaf\xf8\xb8\x8a\x186\xa9\x0eY;\x9a\xe32T\xddn\xa6zK\xef\xf7\x04\x81\xb4\xb7;\x12\x1ch$\xbd\xd1x\x15\xa8\x9c\xba\x83\xa7\xbdwf8\xc03z|\xcd\xbc\xa1+8\xcet\x960\a\x80\x88!\x9e\x96\xcd\xb5dB\xc1L\xb2\xb1\xe6\xf9\x92\xd4\xcd\v0|G\xb7\xc3+\xb5\xa9\xb4E>ry\x8d(\xcb\xadaH<-h\xef8\x0678]`\x1f\xe5\\\x9c\xb4\xbd 6\x9fP\x16\xb5\xa1.;d\xf5F7TgT\x908=l\x89\x05\x03\xcb\x04\x9c\x0e\x04\xb5a\xe6\xa6\x13\xf8\xb2\xe1\xab\vI;\x10\xa7\xcc\x84\x1d\xff(\x1c\x99\x90M\xba\xfe\xaa\x8e\x83\x98\xbb8\xc3\x02\x8d(\xb0\x9c@n\xb7\xd3TF\xc7\x7f\x11\x9e\x00\x00\x00\x00\x00', 0xbb) epoll_pwait2$auto(0xffffffffffffffff, 0x0, 0xeda, 0x0, &(0x7f0000000200), 0x8) close_range$auto(0x2, 0xa, 0x0) clock_nanosleep$auto(0xffffffff, 0x7, &(0x7f0000002480)={0x2}, 0x0) 3.107380515s ago: executing program 0 (id=204): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) epoll_create$auto(0x2) (async, rerun: 32) msgctl$auto_IPC_INFO(0x3, 0x3, &(0x7f0000000200)={{0x2, 0xee00, 0xee00, 0x8000006, 0x50, 0x8, 0x1}, 0x0, 0x0, 0x9, 0xaa5, 0x200, 0x39e5dc2a, 0xc68, 0x2, 0x5, 0x9, @raw=0x2, @raw=0xfffffbff}) (rerun: 32) r1 = openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000000), 0x180b01, 0x0) ioctl$auto_SNAPSHOT_ALLOC_SWAP_PAGE(r1, 0x80083314, 0x0) (async, rerun: 32) ptrace$auto(0xe, 0x0, 0x2, 0x53) (rerun: 32) fcntl$auto_F_SETSIG(r1, 0xa, 0x0) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) mmap$auto(0x400, 0x202000b, 0x5, 0xeb0, r1, 0x6) (async) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) (async, rerun: 32) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0) (async, rerun: 32) write$auto(0x3, 0x0, 0xfffffdef) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) madvise$auto(0x108000, 0x800034, 0x200000b) (async) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, 0x0, 0x204180, 0x0) mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) (async, rerun: 64) mmap$auto(0x0, 0x400005, 0xfffffffffffffffe, 0x9b72, 0x2, 0x8000) (rerun: 64) syz_genetlink_get_family_id$auto_mac80211_hwsim(0x0, 0xffffffffffffffff) socket(0x11, 0x80003, 0x300) (async) unshare$auto(0x40000080) (async) close_range$auto(0x2, 0x8, 0x0) (async) prctl$auto_PR_SET_VMA(0x53564d41, 0x7fffffff, r2, 0x0, 0x5ee) (async) setresuid$auto(r0, 0x0, 0x0) (async) keyctl$auto_KEYCTL_SESSION_TO_PARENT(0x12, 0x0, r0, 0x0, 0x0) openat$auto_adf_ctl_ops_adf_ctl_drv(0xffffffffffffff9c, &(0x7f0000000040), 0x280, 0x0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/wakeup_count\x00', 0xc0082, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r3, &(0x7f0000000080)='7', 0x1) (async, rerun: 64) close_range$auto(0x2, 0x8, 0x0) (rerun: 64) io_uring_setup$auto(0x6, 0x0) 2.860018663s ago: executing program 2 (id=205): mmap$auto(0x0, 0x8, 0x2, 0x9b72, 0x5, 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7fffffff, 0xd, 0x2, 0x6, 0x7, 0x8, 0xffffffffffffffff, [], {0x6, 0x6, 0xf, 0x29f, 0x100, 0x83, 0x101, 0x6, 0x2}, {0x100, 0x1, 0x52, 0x5, 0x1, 0x40, 0x76c5, 0x8, 0x100000000}}) io_uring_register$auto(0x2, 0x1a, 0x0, 0x83) ioperm$auto(0x7, 0x6, 0x2) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/mnt\x00') socket(0x15, 0x5, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = getpid() unshare$auto(0x40000080) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(r0, r0, 0xffa) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x1, 0x84) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x54) listen$auto(0x3, 0x81) accept$auto(0x3, 0x0, 0x0) process_vm_readv$auto(r1, &(0x7f0000000000)={0x0, 0xffe}, 0x1, &(0x7f0000000280)={&(0x7f0000000040), 0x1ffffffff}, 0x6, 0x0) mremap$auto(0x4000, 0xb8, 0x13fd4, 0x3, 0xfffff000) ioctl$auto(0x3, 0x9, 0xfffffffffffff4e0) r2 = socket(0xa, 0x2, 0x0) read$auto_ctl_device_fops_user(r0, &(0x7f0000000100)=""/114, 0x72) setsockopt$auto(r2, 0x29, 0x1b, 0x0, 0x56b) io_uring_setup$auto(0x8, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x3, 0x100) socket(0x2, 0x2, 0x1) connect$auto(0x3, 0x0, 0x55) 2.746131515s ago: executing program 1 (id=206): mmap$auto(0x0, 0x8, 0x2, 0x9b72, 0x5, 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7fffffff, 0xd, 0x2, 0x6, 0x7, 0x8, 0xffffffffffffffff, [], {0x6, 0x6, 0xf, 0x29f, 0x100, 0x83, 0x101, 0x6, 0x2}, {0x100, 0x1, 0x52, 0x5, 0x1, 0x40, 0x76c5, 0x8, 0x100000000}}) io_uring_register$auto(0x2, 0x1a, 0x0, 0x83) ioperm$auto(0x7, 0x6, 0x2) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/mnt\x00') socket(0x15, 0x5, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = getpid() unshare$auto(0x40000080) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(r0, r0, 0xffa) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x1, 0x84) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x54) listen$auto(0x3, 0x81) accept$auto(0x3, 0x0, 0x0) process_vm_readv$auto(r1, &(0x7f0000000000)={0x0, 0xffe}, 0x1, &(0x7f0000000280)={&(0x7f0000000040), 0x1ffffffff}, 0x6, 0x0) mremap$auto(0x4000, 0xb8, 0x13fd4, 0x3, 0xfffff000) ioctl$auto(0x3, 0x9, 0xfffffffffffff4e0) r2 = socket(0xa, 0x2, 0x0) read$auto_ctl_device_fops_user(r0, &(0x7f0000000100)=""/114, 0x72) setsockopt$auto(r2, 0x29, 0x1b, 0x0, 0x56b) io_uring_setup$auto(0x8, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x3, 0x100) socket(0x2, 0x2, 0x1) connect$auto(0x3, 0x0, 0x55) 2.313057752s ago: executing program 3 (id=207): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_taskstats(&(0x7f0000000140), 0xffffffffffffffff) close_range$auto(0x2, r0, 0x0) openat$auto_proc_loginuid_operations_base(0xffffffffffffff9c, 0x0, 0x3c8082, 0x0) getuid() pread64$auto(0xffffffffffffffff, 0x0, 0xd570, 0xc24) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/tty59\x00', 0x8900, 0x0) ioctl$auto_TIOCSETD2(r1, 0x5423, &(0x7f0000000200)="d24bf5a556dcb1399c52749bbf9860dc989898c1d8a9ddb68b95e144707337d85b979bda0a798864a2fdeff77d5ccb3e8c013ec4cf159f7f28f14b5c121720a8cda732d6d4c4afd662d21d0bfd5ee6fffb9d7767c0e95be3407f8d592d53a0199dca1da96f8beb63b5fecb96fcbce44c5f74e016f6463ea9cc953efb4437321a466ad9a51eafeb2480bbbd0e13da0ef6992992") openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x8ad00, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) getuid() socket(0xa, 0x1, 0x84) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000640)='/dev/loop4\x00', 0x101000, 0x0) ioctl$auto_IOC_PR_RESERVE(r2, 0x401070c9, 0x0) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) write$auto_proc_reg_file_ops_compat_inode(0xffffffffffffffff, 0x0, 0x0) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) write$auto(0x3, 0x0, 0xffd8) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/pid_for_children\x00') openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x1, 0x0) adjtimex$auto(&(0x7f00000004c0)={0xf332b6e, 0x0, 0x8101, 0x0, 0xd0, 0x3, 0x6, 0x0, 0x1, 0x3691, 0x0, {0x100000000, 0x10000}, 0x8000000000000001, 0x6, 0xfffffffffffffffd, 0x1008000, 0x0, 0x80000004, 0x4bbf, 0xffffffffffff628e, 0xa747, 0xdeae, 0x804}) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) 2.061597881s ago: executing program 2 (id=208): set_mempolicy$auto(0x6, &(0x7f0000000000)=0x3, 0x21) mmap$auto(0x7, 0x4, 0xff, 0x6b4, 0x2, 0x8000) madvise$auto_MADV_PAGEOUT(0x0, 0x4655, 0x15) open(&(0x7f0000000000)='./cgroup\x00', 0x0, 0x6931f8839417532c) close_range$auto(0x0, 0xfffffffffffff000, 0x2) openat$auto_sco_debugfs_fops_(0xffffffffffffff9c, &(0x7f0000000000), 0x10000, 0x0) eventfd$auto(0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0x18, 0x5, 0x2) bind$auto(0x3, &(0x7f0000000000), 0x6b) syslog$auto(0x3, &(0x7f0000000080)='..\x00k\xac\x8c\x1d\x0e\x98\x80\xd2\xaf\xa1\xf2\x1e\xe1R1\xa2\x8e\xce\xa0\x17\bI3\'\xc5tw\xd7\x1d\xa6\xf4#+\xfa\xd7\x01\xb9j<\v\xf47\n\xa7\xd2\x8b\x11e1\xb3\xfdd\x04\xa9 1q\x97\xc4,\xa9^\xc1\xb6\xa1q\x0f\xd1\x013\x87l\xb9\x1e\x05\x90\xa2', 0xda) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/nbd13/queue/rotational\x00', 0x10b142, 0x0) sendfile$auto(r1, r1, 0x0, 0x2f2) mmap$auto(0x3, 0x200040009, 0x5, 0x9b73, 0x7, 0x163) io_uring_setup$auto(0x6, 0x0) keyctl$auto(0x1ff, 0x3ff, 0xee00, 0x0, 0x2) fstat$auto(0xffffffffffffffff, &(0x7f00000001c0)={0x4, 0xc5bd, 0x6, 0x6, 0x0, 0x0, 0x0, 0xa, 0x10000, 0x6, 0x5, 0x6, 0x8, 0x7, 0x4, 0x6, 0x10000}) openat$auto_state_fops_(0xffffffffffffff9c, &(0x7f0000000000), 0x2003, 0x0) mmap$auto(0x0, 0x4020009, 0x2000000000006, 0xeb1, 0x401, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x0) bpf$auto(0x1a, &(0x7f0000000380)=@link_create={@map_fd, @target_fd, 0x3, 0x81, @uprobe_multi={0x81, 0x1ff, 0x8, 0x0, 0x1, 0x4}}, 0x81) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, r0, 0x28000) sysfs$auto(0x2, 0x47, 0x0) fsopen$auto(0x0, 0x1) epoll_create$auto(0x4) writev$auto(0xe, 0x0, 0x3) 1.798135615s ago: executing program 3 (id=209): mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) r0 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/security/tomoyo/profile\x00', 0x40, 0x0) read$auto_tomoyo_operations_securityfs_if(r0, 0x0, 0x0) pread64$auto(r0, &(0x7f0000000140)='/sys/kernel/security/tomoyo/audit\x00', 0x9, 0x106) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = socket(0x15, 0x5, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @loopback}, 0x6a) ustat$auto(0x801, 0x0) syz_genetlink_get_family_id$auto_tipcv2(0x0, 0xffffffffffffffff) sendmsg$auto(r0, &(0x7f0000000180)={&(0x7f00000002c0)="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", 0x8, 0x0, 0x8, 0x0, 0x6, 0x4}, 0x0) close_range$auto(0x2, 0x8000, 0x0) setsockopt$auto_SO_RCVMARK(r0, 0x1, 0x4b, &(0x7f00000000c0)='/sys/kernel/security/tomoyo/audit\x00', 0xffffffff) mkdir$auto(&(0x7f0000000040)='./cgroup\x00', 0xd9f1) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sendfile$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0xffffffffffff0001, 0x15) keyctl$auto(0x4, 0xfffffffe, 0x6, 0xffffffffffffffff, 0xe) memfd_create$auto(0x0, 0x9) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_taskstats(0x0, r1) mmap$auto(0xfffffffffffffffc, 0x4020005, 0x1, 0xeb1, 0x401, 0x8000) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, 0x0, 0x17d001, 0x0) stat$auto(&(0x7f0000000080)='./file0\x00', 0x0) r2 = openat$auto_ubi_ctrl_cdev_operations_ubi(0xffffffffffffff9c, &(0x7f0000000000), 0x88600, 0x0) ioctl$auto_UBI_IOCATT(r2, 0x40186f40, 0x0) openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/usb/usbmon/33t\x00', 0x187000, 0x0) rename$auto(&(0x7f0000000000)='}[,&*}\x00', &(0x7f0000000080)='}[,&*}\x00') ustat$auto(0xc, &(0x7f00000001c0)={0x8, 0x6, "803746a4a63c", "34ac4e0608c2"}) 1.415184024s ago: executing program 2 (id=210): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_ETHTOOL_MSG_TUNNEL_INFO_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x2c, 0x0, 0x1, 0x70bd28, 0x25dfdbfe, {0x1c, 0x0, 0x300}, [@ETHTOOL_A_TUNNEL_INFO_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000000}, 0x4000000) 1.22297853s ago: executing program 2 (id=211): mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_netdev(&(0x7f0000000040), r0) syz_genetlink_get_family_id$auto_batadv(0x0, 0xffffffffffffffff) socket(0x2, 0x1, 0x0) epoll_create$auto(0x4) epoll_ctl$auto(0x5, 0x1, 0xffffffffffffffff, 0x0) sched_get_priority_min$auto(0x40) openat$auto_proc_projid_map_operations_base(0xffffffffffffff9c, 0x0, 0x101002, 0x0) connect$auto(0x4, 0x0, 0x10) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) io_uring_setup$auto(0x1, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x5, 0x0) open(0x0, 0x22240, 0x155) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x101e81, 0x0) socket(0x27, 0x80008, 0x2006) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/card1\x00', 0x0, 0x0) open(0x0, 0x80842, 0x91) ioctl$auto(r1, 0x64c6, 0x1e2) close_range$auto(0x2, 0x8000, 0x0) 1.118460521s ago: executing program 3 (id=212): mmap$auto(0x0, 0x8, 0x2, 0x9b72, 0x5, 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7fffffff, 0xd, 0x2, 0x6, 0x7, 0x8, 0xffffffffffffffff, [], {0x6, 0x6, 0xf, 0x29f, 0x100, 0x83, 0x101, 0x6, 0x2}, {0x100, 0x1, 0x52, 0x5, 0x1, 0x40, 0x76c5, 0x8, 0x100000000}}) io_uring_register$auto(0x2, 0x1a, 0x0, 0x83) ioperm$auto(0x7, 0x6, 0x2) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/mnt\x00') socket(0x15, 0x5, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = getpid() unshare$auto(0x40000080) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(r0, r0, 0xffa) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x1, 0x84) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x54) listen$auto(0x3, 0x81) accept$auto(0x3, 0x0, 0x0) process_vm_readv$auto(r1, &(0x7f0000000000)={0x0, 0xffe}, 0x1, &(0x7f0000000280)={&(0x7f0000000040), 0x1ffffffff}, 0x6, 0x0) mremap$auto(0x4000, 0xb8, 0x13fd4, 0x3, 0xfffff000) ioctl$auto(0x3, 0x9, 0xfffffffffffff4e0) r2 = socket(0xa, 0x2, 0x0) read$auto_ctl_device_fops_user(r0, &(0x7f0000000100)=""/114, 0x72) setsockopt$auto(r2, 0x29, 0x1b, 0x0, 0x56b) io_uring_setup$auto(0x8, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x3, 0x100) socket(0x2, 0x2, 0x1) connect$auto(0x3, 0x0, 0x55) 1.033752589s ago: executing program 0 (id=213): statmount$auto(0x0, &(0x7f0000000180)={0xa, 0x1, 0x44f, 0x807, 0x5, 0x7181, 0x1ffde, 0x7, 0x3, 0x8, 0x9, 0x80003, 0x4, 0x200000000001, 0x384, 0x9, 0x8, 0x10006, 0x400007f, 0x0, 0x0, 0xe, 0x22000, 0x200, 0x0, 0x84, [0x3, 0x2, 0xffffffffffffffff, 0x2, 0x0, 0x402000, 0x0, 0xe, 0x1, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x8, 0x0, 0x6, 0x0, 0x8, 0x20000, 0x8, 0x10000000000, 0xfbffffffffffffff, 0x400000000004, 0x2f, 0xfffffffffffffffd, 0x0, 0x1006, 0x400000000005b5, 0xffff, 0x0, 0x100, 0x0, 0x6, 0x2, 0x88e, 0x9, 0xfffffffffffffffc, 0x8, 0xa38, 0x4, 0x4000003, 0xfffffffffffffffc, 0x2, 0x8, 0x10000000007, 0x2000000000c567]}, 0x1fa, 0xd) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = socket$nl_generic(0x11, 0x3, 0x10) bind$auto(r0, &(0x7f0000000200)=@generic={0x11, "bc340f00"}, 0x80) bind$auto(0x3, &(0x7f0000000040)=@in={0x11, 0xbc34, @empty}, 0x6a) fstat$auto(0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$auto(r1, 0x10e, 0x1, 0x0, 0xe) r2 = socket(0x2, 0x801, 0x106) listen$auto(r2, 0x5) mount$auto(&(0x7f0000000000)='nicvf0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='/dev/mapper/control\x00', 0x9, &(0x7f0000000580)="0bb1ead0bc0c90dbf2e68d8b48537eae123af9a3bec8b813df8a7d1a43874931984a34b4a2f5da0d813637fb05cf9483057fcb108b99745fca930fe9c18e64b2cd88927860d5f54d38285e907588badc07690ceeef970410d0f1e6a2473edd7377d0d2da7c00b3ab0a13d4ce4fdd9edd4c43d610b6da60064cd1b976fdfa6d2397f6e3ab50b0d4a219b4f83703741b5a24fd5b94fc4ca3256a54a7ba829b053dc39ff837dd85bee9b4bc2c95ce3d3c33eac845bfca690fec3f768e14dcc24c0408f8bbcb1af3f564cd86c94f61e2d9406682d8a15c19da8a27") r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_SET_BSS(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x18, r4, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@NL80211_ATTR_HE_CAPABILITY={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4800}, 0xd0) r5 = openat$auto_lowpan_enable_fops_(0xffffffffffffff9c, &(0x7f0000000140), 0x400, 0x0) read$auto_lowpan_enable_fops_(r5, &(0x7f0000000680)=""/31, 0x1f) openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f00000000c0), 0x2802, 0x0) r6 = openat$auto_buffer_percent_fops_trace(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/tracing/buffer_percent\x00', 0x8080, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000680)='/dev/v4l-subdev5\x00', 0x20281, 0x0) ioctl$auto(r8, 0xc040563e, r7) read$auto_buffer_percent_fops_trace(r6, 0x0, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xc, 0x800008000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x2, 0x88) r9 = fanotify_init$auto(0x5, 0x0) fanotify_mark$auto(r9, 0x205, 0xa, 0x4, 0x0) 863.783747ms ago: executing program 1 (id=214): r0 = socket(0x2, 0x1, 0x106) setsockopt$auto(r0, 0x1, 0x40, &(0x7f0000000200)='\x00\x89e\xad\x97\xc5E\xea=\x0f\xf4\xba4\x05>y/21\xfd\'\xc7\x1c\xaeV`\xc7^\x05\"H\xb8\x12\x99\x1fF\xdc\xc4\x02FV\x04D&9?\xa8d\xc97B\x9f)\xc6\xbb\x15_\xfd\xa5\xaf\xf8\xb8\x8a\x186\xa9\x0eY;\x9a\xe32T\xddn\xa6zK\xef\xf7\x04\x81\xb4\xb7;\x12\x1ch$\xbd\xd1x\x15\xa8\x9c\xba\x83\xa7\xbdwf8\xc03z|\xcd\xbc\xa1+8\xcet\x960\a\x80\x88!\x9e\x96\xcd\xb5dB\xc1L\xb2\xb1\xe6\xf9\x92\xd4\xcd\v0|G\xb7\xc3+\xb5\xa9\xb4E>ry\x8d(\xcb\xadaH<-h\xef8\x0678]`\x1f\xe5\\\x9c\xb4\xbd 6\x9fP\x16\xb5\xa1.;d\xf5F7TgT\x908=l\x89\x05\x03\xcb\x04\x9c\x0e\x04\xb5a\xe6\xa6\x13\xf8\xb2\xe1\xab\vI;\x10\xa7\xcc\x84\x1d\xff(\x1c\x99\x90M\xba\xfe\xaa\x8e\x83\x98\xbb8\xc3\x02\x8d(\xb0\x9c@n\xb7\xd3TF\xc7\x7f\x11\x9e\x00\x00\x00\x00\x00', 0xbb) epoll_pwait2$auto(0xffffffffffffffff, 0x0, 0xeda, 0x0, &(0x7f0000000200), 0x8) close_range$auto(0x2, 0xa, 0x0) clock_nanosleep$auto(0xffffffff, 0x7, &(0x7f0000002480)={0x2}, 0x0) 426.924451ms ago: executing program 1 (id=215): r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/vm/compaction_proactiveness\x00', 0x40001, 0x0) write$auto_proc_sys_file_operations_proc_sysctl(r0, 0x0, 0x0) write$auto(0xffffffffffffffff, &(0x7f00000000c0)='-\x00', 0xe819) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000200), 0xffffffffffffffff) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) sysfs$auto(0x2, 0x10000000000002d, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x0) r3 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/v4l-touch0\x00', 0xe0800, 0x0) ioctl$auto(r3, 0x7, r3) sendmsg$auto_TIPC_NL_BEARER_SET(r1, &(0x7f0000002040)={0x0, 0x0, &(0x7f0000002000)={&(0x7f0000000240)={0x18, r2, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@TIPC_NLA_BEARER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x44}, 0x80000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) inotify_init1$auto(0x3000000000000) socket$nl_generic(0x11, 0x3, 0x10) socket(0xa, 0x2, 0x88) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket(0x2, 0x2, 0x1) bpf$auto(0x0, &(0x7f0000000000)=@bpf_attr_4={0x17, r4, 0x4, r4}, 0x10) bpf$auto(0x4, &(0x7f00000001c0)=@raw_tracepoint={0x5, 0xffff, 0x0, 0x3}, 0xf) r5 = setfsuid$auto(0xee00) setreuid$auto(r5, 0x0) gettid() semctl$auto(0x1, 0x6, 0xfe, 0xfff) r6 = setfsuid$auto(0xee00) setreuid$auto(r6, 0x0) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x800, 0x0) mmap$auto(0x0, 0xa00006, 0x2, 0x40eb1, 0x602, 0x300000000000) 351.443359ms ago: executing program 2 (id=216): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0xffffff7fffff0005, 0x8) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) socket(0xa, 0x5, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r0 = io_uring_setup$auto(0x6, 0x0) setsockopt$auto(0x3, 0x10000000084, 0x5, 0x0, 0x5) socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x0, 0xffffffffffff0001, 0x15) ioctl$auto_BLKTRACESETUP2(r0, 0xc0481273, &(0x7f0000000000)={"b8331626fb39e67fd7b81300920e5dae50431bbc6bdb3ce60df4477e5bd277bd", 0x6, 0x3, 0x8, 0x400, 0x6, 0x0}) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sendmsg$auto_IEEE802154_LLSEC_SETPARAMS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00032abe7000fedbdf2525000000000007"], 0x23}}, 0x240400c1) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x2, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) bpf$auto(0x0, &(0x7f00000001c0)=@link_update={0xffffffffffffffff, @new_prog_fd, 0x10}, 0x10) sendmsg$auto_HWSIM_CMD_DEL_RADIO(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="01"], 0x14}, 0x1, 0x0, 0x0, 0x20040800}, 0x24004000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1200"], 0x1ac}}, 0x40040) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x66) prctl$auto(0x43, 0x17, 0x0, 0x0, 0x0) prctl$auto(0x43, 0x0, 0x0, 0x0, 0x0) prctl$auto(0x4, 0x6, r1, 0x7, 0x4) socketpair$auto(0x400001d, 0x2, 0x6, 0x0) 232.178193ms ago: executing program 0 (id=217): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, r0, 0x0) openat$auto_proc_loginuid_operations_base(0xffffffffffffff9c, 0x0, 0x3c8082, 0x0) getuid() pread64$auto(0xffffffffffffffff, 0x0, 0xd570, 0xc24) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/tty59\x00', 0x8900, 0x0) ioctl$auto_TIOCSETD2(r1, 0x5423, &(0x7f0000000200)="d24bf5a556dcb1399c52749bbf9860dc989898c1d8a9ddb68b95e144707337d85b979bda0a798864a2fdeff77d5ccb3e8c013ec4cf159f7f28f14b5c121720a8cda732d6d4c4afd662d21d0bfd5ee6fffb9d7767c0e95be3407f8d592d53a0199dca1da96f8beb63b5fecb96fcbce44c5f74e016f6463ea9cc953efb4437321a466ad9a51eafeb2480bbbd0e13da0ef6992992") openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x8ad00, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) getuid() socket(0xa, 0x1, 0x84) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000640)='/dev/loop4\x00', 0x101000, 0x0) ioctl$auto_IOC_PR_RESERVE(r2, 0x401070c9, 0x0) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) write$auto_proc_reg_file_ops_compat_inode(0xffffffffffffffff, 0x0, 0x0) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) write$auto(0x3, 0x0, 0xffd8) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/pid_for_children\x00') openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x1, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r3, &(0x7f0000000400)='/dev/audio1\x00', 0xa3d9) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) 0s ago: executing program 3 (id=218): r0 = socket(0x2, 0x801, 0x100) connect$auto(0x3, &(0x7f00000000c0), 0x55) connect$auto(0x3, &(0x7f00000000c0), 0x55) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r2 = prctl$auto_PR_GET_TSC(0x19, 0xfff, 0x0, 0x0, 0x10000) read$auto_proc_mountinfo_operations_mnt_namespace(r2, &(0x7f0000000280)=""/28, 0x1c) r3 = socket(0x11, 0x3, 0x9) r4 = prctl$auto_PR_SET_MM_START_BRK(0x90e6, 0x6, 0x0, 0x8, 0x9) syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000040), r4) r5 = syz_genetlink_get_family_id$auto_hsr(&(0x7f0000000140), r0) mmap$auto(0x0, 0x20009, 0x20000000000000e2, 0xeb1, 0x405, 0x8000) r6 = openat$auto_snd_mixer_oss_f_ops_mixer_oss(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/mixer\x00', 0x40000, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000001340), 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r7, &(0x7f0000001400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x20, r8, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@HWSIM_ATTR_DESTROY_RADIO_ON_CLOSE={0x4}, @HWSIM_ATTR_REG_CUSTOM_REG={0x8, 0xc, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x24040000}, 0x18800) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r4, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x30, r8, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@HWSIM_ATTR_RX_RATE={0x8, 0x5, 0x8}, @HWSIM_ATTR_RADIO_NAME={0xb, 0x11, '&#/+\\!-'}, @HWSIM_ATTR_RADIO_ID={0x8, 0xa, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000001}, 0x10) ioctl$auto_SOUND_MIXER_WRITE_RECSRC(r6, 0xc0044dff, 0x0) sendmsg$auto_HSR_C_GET_NODE_STATUS(r0, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x6c, r5, 0x100, 0x70bd26, 0x25dfdbfb, {}, [@HSR_A_IF2_AGE={0x8}, @HSR_A_NODE_ADDR={0xa, 0x1, @local}, @HSR_A_NODE_ADDR_B={0xa, 0x5, @link_local}, @HSR_A_IF2_SEQ={0x6}, @HSR_A_NODE_ADDR={0xa, 0x1, @multicast}, @HSR_A_IF1_SEQ={0x6, 0x6, 0x4}, @HSR_A_IFINDEX={0x8, 0x2, r1}, @HSR_A_IF2_AGE={0x8, 0x4, 0x5}, @HSR_A_NODE_ADDR_B={0xa, 0x5, @multicast}]}, 0x6c}, 0x1, 0x0, 0x0, 0x800}, 0x40) sendmmsg$auto(r3, &(0x7f0000000400)={{&(0x7f0000000000), 0x5aa, &(0x7f0000000100)={&(0x7f0000000440), 0x49}, 0x1, &(0x7f0000000200), 0x5, 0x3}, 0x5}, 0x2, 0x100) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.12' (ED25519) to the list of known hosts. [ 79.796138][ T5828] cgroup: Unknown subsys name 'net' [ 79.909902][ T5828] cgroup: Unknown subsys name 'cpuset' [ 79.918156][ T5828] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 81.450466][ T5828] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 83.257335][ T5839] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 83.266524][ T5839] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 83.274509][ T5839] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 83.285662][ T5845] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 83.293461][ T5845] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 83.306926][ T5845] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 83.314613][ T5845] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 83.323079][ T5845] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 83.330762][ T5845] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 83.341108][ T5844] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 83.350808][ T5844] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 83.366805][ T5844] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 83.374814][ T5848] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 83.387716][ T5153] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 83.395381][ T5153] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 83.421831][ T5153] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 83.430262][ T5153] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 83.438711][ T5153] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 83.456986][ T5153] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 83.465148][ T5153] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 83.658609][ T5846] chnl_net:caif_netlink_parms(): no params data found [ 83.788818][ T5846] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.797596][ T5846] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.804961][ T5846] bridge_slave_0: entered allmulticast mode [ 83.811991][ T5846] bridge_slave_0: entered promiscuous mode [ 83.834808][ T5846] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.843185][ T5846] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.850844][ T5846] bridge_slave_1: entered allmulticast mode [ 83.859687][ T5846] bridge_slave_1: entered promiscuous mode [ 83.902770][ T5846] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.918719][ T5841] chnl_net:caif_netlink_parms(): no params data found [ 83.930304][ T5846] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.951825][ T5837] chnl_net:caif_netlink_parms(): no params data found [ 83.976576][ T5846] team0: Port device team_slave_0 added [ 83.992241][ T5846] team0: Port device team_slave_1 added [ 84.074527][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.082008][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.108521][ T5846] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.139646][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.147009][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.173210][ T5846] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.219560][ T5837] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.227012][ T5837] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.234301][ T5837] bridge_slave_0: entered allmulticast mode [ 84.242547][ T5837] bridge_slave_0: entered promiscuous mode [ 84.259146][ T5841] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.266401][ T5841] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.273636][ T5841] bridge_slave_0: entered allmulticast mode [ 84.280666][ T5841] bridge_slave_0: entered promiscuous mode [ 84.288205][ T5850] chnl_net:caif_netlink_parms(): no params data found [ 84.298550][ T5837] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.305885][ T5837] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.313073][ T5837] bridge_slave_1: entered allmulticast mode [ 84.320250][ T5837] bridge_slave_1: entered promiscuous mode [ 84.336596][ T5841] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.343752][ T5841] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.351110][ T5841] bridge_slave_1: entered allmulticast mode [ 84.358580][ T5841] bridge_slave_1: entered promiscuous mode [ 84.409798][ T5846] hsr_slave_0: entered promiscuous mode [ 84.417870][ T5846] hsr_slave_1: entered promiscuous mode [ 84.426835][ T5837] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.438532][ T5837] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.480452][ T5841] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.508330][ T5837] team0: Port device team_slave_0 added [ 84.516175][ T5841] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.543086][ T5837] team0: Port device team_slave_1 added [ 84.591134][ T5841] team0: Port device team_slave_0 added [ 84.609933][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.617162][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.643453][ T5837] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.667362][ T5841] team0: Port device team_slave_1 added [ 84.684747][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.692334][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.718678][ T5837] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.742835][ T5850] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.750203][ T5850] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.757517][ T5850] bridge_slave_0: entered allmulticast mode [ 84.764285][ T5850] bridge_slave_0: entered promiscuous mode [ 84.783804][ T5850] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.791194][ T5850] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.798768][ T5850] bridge_slave_1: entered allmulticast mode [ 84.805904][ T5850] bridge_slave_1: entered promiscuous mode [ 84.841595][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.848762][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.874794][ T5841] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.887291][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.894277][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.920399][ T5841] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.959184][ T5850] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.973557][ T5850] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.033650][ T5837] hsr_slave_0: entered promiscuous mode [ 85.040100][ T5837] hsr_slave_1: entered promiscuous mode [ 85.047063][ T5837] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 85.054834][ T5837] Cannot create hsr debugfs directory [ 85.081190][ T5850] team0: Port device team_slave_0 added [ 85.089253][ T5850] team0: Port device team_slave_1 added [ 85.112013][ T5841] hsr_slave_0: entered promiscuous mode [ 85.119062][ T5841] hsr_slave_1: entered promiscuous mode [ 85.125155][ T5841] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 85.134103][ T5841] Cannot create hsr debugfs directory [ 85.164406][ T5850] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.171594][ T5850] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.198751][ T5850] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.221455][ T5850] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.228639][ T5850] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.255280][ T5850] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.319890][ T5846] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 85.345768][ T5846] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 85.357213][ T5846] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 85.366590][ T55] Bluetooth: hci2: command tx timeout [ 85.379752][ T5850] hsr_slave_0: entered promiscuous mode [ 85.386347][ T5850] hsr_slave_1: entered promiscuous mode [ 85.392386][ T5850] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 85.400158][ T5850] Cannot create hsr debugfs directory [ 85.411304][ T5846] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 85.446986][ T55] Bluetooth: hci0: command tx timeout [ 85.449528][ T5153] Bluetooth: hci1: command tx timeout [ 85.525693][ T5153] Bluetooth: hci3: command tx timeout [ 85.617915][ T5837] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 85.644207][ T5837] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 85.660596][ T5837] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 85.673171][ T5837] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 85.719012][ T5841] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 85.738688][ T5841] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 85.753440][ T5841] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 85.763019][ T5841] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 85.803092][ T5846] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.837428][ T5846] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.859414][ T5850] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 85.870043][ T5850] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 85.881495][ T5850] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 85.894523][ T5850] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 85.924437][ T3492] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.931756][ T3492] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.942183][ T3492] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.949388][ T3492] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.037820][ T5837] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.088918][ T5837] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.110423][ T3015] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.118066][ T3015] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.164242][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.171468][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.221087][ T5850] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.254484][ T5841] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.283291][ T5850] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.304079][ T5841] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.321265][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.328445][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.369432][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.376633][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.392451][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.399731][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.411040][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.418195][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.452348][ T5846] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.571093][ T5846] veth0_vlan: entered promiscuous mode [ 86.590581][ T5837] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.626796][ T5846] veth1_vlan: entered promiscuous mode [ 86.683056][ T5846] veth0_macvtap: entered promiscuous mode [ 86.723019][ T5846] veth1_macvtap: entered promiscuous mode [ 86.749891][ T5837] veth0_vlan: entered promiscuous mode [ 86.781501][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.808653][ T5837] veth1_vlan: entered promiscuous mode [ 86.817919][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.848549][ T5846] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.864277][ T5846] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.874156][ T5846] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.883112][ T5846] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.912404][ T5850] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.949194][ T5837] veth0_macvtap: entered promiscuous mode [ 86.971901][ T5837] veth1_macvtap: entered promiscuous mode [ 86.983842][ T5841] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.031273][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.042745][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.057257][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.080775][ T5850] veth0_vlan: entered promiscuous mode [ 87.094701][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.106610][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.117949][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.130599][ T3015] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.139697][ T3015] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.156042][ T5837] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.164824][ T5837] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.173952][ T5837] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.182869][ T5837] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.210596][ T5850] veth1_vlan: entered promiscuous mode [ 87.245204][ T5841] veth0_vlan: entered promiscuous mode [ 87.256894][ T3492] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.268788][ T3492] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.283773][ T5841] veth1_vlan: entered promiscuous mode [ 87.358709][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.374689][ T5850] veth0_macvtap: entered promiscuous mode [ 87.390433][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.393713][ T5850] veth1_macvtap: entered promiscuous mode [ 87.411630][ T5841] veth0_macvtap: entered promiscuous mode [ 87.441410][ T5841] veth1_macvtap: entered promiscuous mode [ 87.442936][ T5846] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 87.466612][ T5153] Bluetooth: hci2: command tx timeout [ 87.508915][ T5841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.526024][ T5153] Bluetooth: hci1: command tx timeout [ 87.526715][ T55] Bluetooth: hci0: command tx timeout [ 87.543733][ T5841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.554240][ T5841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.564993][ T5841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.577282][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.591660][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.592584][ T5850] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.610425][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.618082][ T5850] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.618636][ T55] Bluetooth: hci3: command tx timeout [ 87.631342][ T5850] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.644489][ T5850] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.654704][ T5850] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.669310][ T5850] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.681032][ T5850] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.694316][ T5850] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.708614][ T5850] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.719812][ T5850] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.731223][ T5850] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.742583][ T5850] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.751662][ T5841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.763457][ T5841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.773931][ T5841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.784931][ T5841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.795198][ T5841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.806312][ T5841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.821075][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.836604][ T5841] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.846756][ T5841] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.855630][ T5841] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.864362][ T5841] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.878664][ T5850] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.888320][ T5850] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.897688][ T5850] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.907874][ T5850] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.174610][ T5910] zswap: compressor not available [ 88.191771][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.200314][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.233297][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.243002][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.268017][ T1165] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.276441][ T1165] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.342740][ T3492] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.360529][ T3492] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.617941][ T5921] Zero length message leads to an empty skb [ 89.110246][ T5923] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 89.526563][ T55] Bluetooth: hci2: command tx timeout [ 89.605621][ T55] Bluetooth: hci0: command tx timeout [ 89.605628][ T5153] Bluetooth: hci1: command tx timeout [ 89.687369][ T55] Bluetooth: hci3: command tx timeout [ 89.978927][ T5945] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 91.610765][ T55] Bluetooth: hci2: command tx timeout [ 91.702426][ T55] Bluetooth: hci0: command tx timeout [ 91.708114][ T5153] Bluetooth: hci1: command tx timeout [ 91.765595][ T55] Bluetooth: hci3: command tx timeout [ 91.936644][ T978] cfg80211: failed to load regulatory.db [ 93.736959][ T6009] netlink: 186 bytes leftover after parsing attributes in process `syz.2.24'. [ 95.660959][ T6036] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 96.336449][ T6049] netlink: 28 bytes leftover after parsing attributes in process `syz.1.34'. [ 96.791825][ T6049] bond0: (slave bond_slave_1): Releasing backup interface [ 99.964148][ T6096] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 99.992690][ T6102] netlink: 186 bytes leftover after parsing attributes in process `syz.3.45'. [ 107.217037][ T6198] zswap: compressor not available [ 112.700670][ T6260] usb usb15: usbfs: process 6260 (syz.1.80) did not claim interface 0 before use [ 116.216763][ T6317] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input5 [ 116.370431][ T6322] capability: warning: `syz.3.94' uses 32-bit capabilities (legacy support in use) [ 116.648925][ T6327] aoe: invalid device specification v m w [ 116.679910][ T6327] netlink: 16 bytes leftover after parsing attributes in process `syz.3.95'. [ 117.871271][ T6352] FAULT_INJECTION: forcing a failure. [ 117.871271][ T6352] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 117.973844][ T6352] CPU: 0 UID: 0 PID: 6352 Comm: syz.1.101 Not tainted 6.14.0-syzkaller-09584-g7d06015d936c #0 PREEMPT(full) [ 117.973884][ T6352] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 117.973905][ T6352] Call Trace: [ 117.973915][ T6352] [ 117.973930][ T6352] dump_stack_lvl+0x16c/0x1f0 [ 117.973979][ T6352] should_fail_ex+0x512/0x640 [ 117.974011][ T6352] _copy_to_user+0x32/0xd0 [ 117.974044][ T6352] simple_read_from_buffer+0xcb/0x170 [ 117.974085][ T6352] proc_fail_nth_read+0x197/0x270 [ 117.974125][ T6352] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 117.974167][ T6352] ? rw_verify_area+0xcf/0x680 [ 117.974201][ T6352] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 117.974241][ T6352] vfs_read+0x1de/0xc70 [ 117.974280][ T6352] ? poll_select_finish+0x377/0x6b0 [ 117.974332][ T6352] ? __pfx_poll_select_finish+0x10/0x10 [ 117.974372][ T6352] ? __pfx_vfs_read+0x10/0x10 [ 117.974430][ T6352] ? do_sys_openat2+0x157/0x1d0 [ 117.974461][ T6352] ? __pfx_do_sys_openat2+0x10/0x10 [ 117.974498][ T6352] ? kern_select+0x175/0x1e0 [ 117.974554][ T6352] ksys_read+0x12a/0x240 [ 117.974592][ T6352] ? __pfx_ksys_read+0x10/0x10 [ 117.974631][ T6352] ? rcu_is_watching+0x12/0xc0 [ 117.974673][ T6352] do_syscall_64+0xcd/0x260 [ 117.974713][ T6352] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 117.974742][ T6352] RIP: 0033:0x7f3aaa58bb7c [ 117.974764][ T6352] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 117.974800][ T6352] RSP: 002b:00007f3aab302030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 117.974829][ T6352] RAX: ffffffffffffffda RBX: 00007f3aaa7a6080 RCX: 00007f3aaa58bb7c [ 117.974848][ T6352] RDX: 000000000000000f RSI: 00007f3aab3020a0 RDI: 0000000000000009 [ 117.974865][ T6352] RBP: 00007f3aab302090 R08: 0000000000000000 R09: 0000000000000000 [ 117.974882][ T6352] R10: 00002000000002c0 R11: 0000000000000246 R12: 0000000000000001 [ 117.974898][ T6352] R13: 0000000000000000 R14: 00007f3aaa7a6080 R15: 00007ffe4df514c8 [ 117.974929][ T6352] [ 118.177590][ C0] vkms_vblank_simulate: vblank timer overrun [ 118.566818][ T6363] netlink: 4 bytes leftover after parsing attributes in process `syz.2.105'. [ 118.988972][ T6370] openvswitch: netlink: Tunnel attr 0 has unexpected len 0 expected 8 [ 119.052008][ T6371] mmap: syz.3.104 (6371) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 120.246095][ T6379] process 'syz.2.107' launched './file0' with NULL argv: empty string added [ 120.756601][ T6407] FAULT_INJECTION: forcing a failure. [ 120.756601][ T6407] name failslab, interval 1, probability 0, space 0, times 1 [ 120.819612][ T6407] CPU: 0 UID: 0 PID: 6407 Comm: syz.2.114 Not tainted 6.14.0-syzkaller-09584-g7d06015d936c #0 PREEMPT(full) [ 120.819659][ T6407] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 120.819687][ T6407] Call Trace: [ 120.819697][ T6407] [ 120.819708][ T6407] dump_stack_lvl+0x16c/0x1f0 [ 120.819754][ T6407] should_fail_ex+0x512/0x640 [ 120.819787][ T6407] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 120.819822][ T6407] should_failslab+0xc2/0x120 [ 120.819856][ T6407] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 120.819888][ T6407] ? radix_tree_node_alloc.constprop.0+0x7c/0x350 [ 120.819927][ T6407] radix_tree_node_alloc.constprop.0+0x7c/0x350 [ 120.819967][ T6407] idr_get_free+0x528/0xa30 [ 120.820014][ T6407] idr_alloc_u32+0x190/0x2f0 [ 120.820052][ T6407] ? __pfx_idr_alloc_u32+0x10/0x10 [ 120.820091][ T6407] ? __pfx___mutex_lock+0x10/0x10 [ 120.820136][ T6407] idr_alloc+0xc0/0x130 [ 120.820168][ T6407] ? __pfx_idr_alloc+0x10/0x10 [ 120.820204][ T6407] ? __radix_tree_lookup+0x21f/0x2c0 [ 120.820244][ T6407] ppp_dev_configure+0x905/0xc80 [ 120.820302][ T6407] ppp_ioctl+0x17e0/0x2660 [ 120.820354][ T6407] ? find_held_lock+0x2b/0x80 [ 120.820392][ T6407] ? __pfx_ppp_ioctl+0x10/0x10 [ 120.820447][ T6407] ? __fget_files+0x20e/0x3c0 [ 120.820501][ T6407] ? __pfx_ppp_ioctl+0x10/0x10 [ 120.820552][ T6407] __x64_sys_ioctl+0x190/0x200 [ 120.820596][ T6407] do_syscall_64+0xcd/0x260 [ 120.820638][ T6407] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.820681][ T6407] RIP: 0033:0x7fcf3fd8d169 [ 120.820706][ T6407] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 120.820738][ T6407] RSP: 002b:00007fcf40b2c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 120.820768][ T6407] RAX: ffffffffffffffda RBX: 00007fcf3ffa5fa0 RCX: 00007fcf3fd8d169 [ 120.820788][ T6407] RDX: 0000000000000000 RSI: 00000000c004743e RDI: 0000000000000003 [ 120.820805][ T6407] RBP: 00007fcf3fe0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 120.820822][ T6407] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 120.820839][ T6407] R13: 0000000000000000 R14: 00007fcf3ffa5fa0 R15: 00007ffd6fb672c8 [ 120.820878][ T6407] [ 121.043356][ C0] vkms_vblank_simulate: vblank timer overrun [ 121.936539][ T6437] FAULT_INJECTION: forcing a failure. [ 121.936539][ T6437] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 121.979998][ T6437] CPU: 0 UID: 0 PID: 6437 Comm: syz.1.124 Not tainted 6.14.0-syzkaller-09584-g7d06015d936c #0 PREEMPT(full) [ 121.980042][ T6437] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 121.980059][ T6437] Call Trace: [ 121.980068][ T6437] [ 121.980080][ T6437] dump_stack_lvl+0x16c/0x1f0 [ 121.980124][ T6437] should_fail_ex+0x512/0x640 [ 121.980160][ T6437] _copy_from_user+0x2e/0xd0 [ 121.980197][ T6437] do_sys_poll+0x1d5/0xe00 [ 121.980243][ T6437] ? kernel_text_address+0x8d/0x100 [ 121.980282][ T6437] ? arch_stack_walk+0xa6/0x100 [ 121.980336][ T6437] ? __pfx_do_sys_poll+0x10/0x10 [ 121.980381][ T6437] ? __lock_acquire+0x5ca/0x1ba0 [ 121.980453][ T6437] ? __lock_acquire+0x5ca/0x1ba0 [ 121.980550][ T6437] ? __pfx_timespec64_add_safe+0x10/0x10 [ 121.980601][ T6437] ? ktime_get_ts64+0x2d2/0x400 [ 121.980647][ T6437] ? read_tsc+0x9/0x20 [ 121.980690][ T6437] ? ktime_get_ts64+0x256/0x400 [ 121.980740][ T6437] __x64_sys_poll+0x1a6/0x450 [ 121.980787][ T6437] ? __pfx___x64_sys_poll+0x10/0x10 [ 121.980832][ T6437] ? rcu_is_watching+0x12/0xc0 [ 121.980876][ T6437] do_syscall_64+0xcd/0x260 [ 121.980916][ T6437] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 121.980947][ T6437] RIP: 0033:0x7f3aaa58d169 [ 121.980970][ T6437] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 121.981000][ T6437] RSP: 002b:00007f3aab323038 EFLAGS: 00000246 ORIG_RAX: 0000000000000007 [ 121.981028][ T6437] RAX: ffffffffffffffda RBX: 00007f3aaa7a5fa0 RCX: 00007f3aaa58d169 [ 121.981048][ T6437] RDX: 0000000000000001 RSI: 0000000000000080 RDI: 0000200000001040 [ 121.981065][ T6437] RBP: 00007f3aab323090 R08: 0000000000000000 R09: 0000000000000000 [ 121.981083][ T6437] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 121.981100][ T6437] R13: 0000000000000000 R14: 00007f3aaa7a5fa0 R15: 00007ffe4df514c8 [ 121.981131][ T6437] [ 124.396065][ T978] smpboot: CPU 0 is now offline [ 125.042984][ T6474] ======================================================= [ 125.042984][ T6474] WARNING: The mand mount option has been deprecated and [ 125.042984][ T6474] and is ignored by this kernel. Remove the mand [ 125.042984][ T6474] option from the mount to silence this warning. [ 125.042984][ T6474] ======================================================= [ 130.956383][ T6553] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input8 [ 138.014026][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.024893][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 140.349268][ T6661] zswap: compressor not available [ 144.975828][ T6722] FAULT_INJECTION: forcing a failure. [ 144.975828][ T6722] name failslab, interval 1, probability 0, space 0, times 0 [ 145.105618][ T6722] CPU: 1 UID: 0 PID: 6722 Comm: syz.2.194 Not tainted 6.14.0-syzkaller-09584-g7d06015d936c #0 PREEMPT(full) [ 145.105651][ T6722] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 145.105665][ T6722] Call Trace: [ 145.105672][ T6722] [ 145.105680][ T6722] dump_stack_lvl+0x16c/0x1f0 [ 145.105717][ T6722] should_fail_ex+0x512/0x640 [ 145.105742][ T6722] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 145.105779][ T6722] should_failslab+0xc2/0x120 [ 145.105804][ T6722] __kmalloc_cache_noprof+0x6a/0x3e0 [ 145.105840][ T6722] ? tunnel_key_init_net+0x56/0x270 [ 145.105871][ T6722] ? __pfx_tunnel_key_init_net+0x10/0x10 [ 145.105901][ T6722] tunnel_key_init_net+0x56/0x270 [ 145.105931][ T6722] ops_init+0x1df/0x5f0 [ 145.105961][ T6722] setup_net+0x21e/0x850 [ 145.105991][ T6722] ? __pfx_setup_net+0x10/0x10 [ 145.106019][ T6722] ? lockdep_init_map_type+0x5c/0x280 [ 145.106057][ T6722] ? __pfx_down_read_killable+0x10/0x10 [ 145.106093][ T6722] ? debug_mutex_init+0x37/0x70 [ 145.106122][ T6722] copy_net_ns+0x2a6/0x5f0 [ 145.106156][ T6722] create_new_namespaces+0x3ea/0xad0 [ 145.106192][ T6722] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 145.106227][ T6722] ksys_unshare+0x45b/0xa40 [ 145.106262][ T6722] ? __pfx_ksys_unshare+0x10/0x10 [ 145.106296][ T6722] ? xfd_validate_state+0x5d/0x180 [ 145.106328][ T6722] ? syscall_user_dispatch+0x78/0x140 [ 145.106357][ T6722] __x64_sys_unshare+0x31/0x40 [ 145.106390][ T6722] do_syscall_64+0xcd/0x260 [ 145.106419][ T6722] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 145.106442][ T6722] RIP: 0033:0x7fcf3fd8d169 [ 145.106459][ T6722] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 145.106481][ T6722] RSP: 002b:00007fcf40b2c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 145.106502][ T6722] RAX: ffffffffffffffda RBX: 00007fcf3ffa5fa0 RCX: 00007fcf3fd8d169 [ 145.106517][ T6722] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 145.106530][ T6722] RBP: 00007fcf3fe0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 145.106543][ T6722] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 145.106558][ T6722] R13: 0000000000000000 R14: 00007fcf3ffa5fa0 R15: 00007ffd6fb672c8 [ 145.106582][ T6722] [ 146.467342][ T6753] bcachefs: bch2_ioctl_fsck_offline() ret EFAULT [ 147.169470][ T6755] netlink: 4 bytes leftover after parsing attributes in process `syz.1.202'. [ 147.221876][ T6768] random: crng reseeded on system resumption [ 150.332029][ T978] [ 150.334392][ T978] ====================================================== [ 150.341406][ T978] WARNING: possible circular locking dependency detected [ 150.348442][ T978] 6.14.0-syzkaller-09584-g7d06015d936c #0 Not tainted [ 150.355203][ T978] ------------------------------------------------------ [ 150.362215][ T978] kworker/1:2/978 is trying to acquire lock: [ 150.368276][ T978] ffffffff9011f6a8 (rtnl_mutex){+.+.}-{4:4}, at: smc_vlan_by_tcpsk+0x251/0x620 [ 150.377255][ T978] [ 150.377255][ T978] but task is already holding lock: [ 150.384613][ T978] ffff8880639a8dd8 (sk_lock-AF_INET){+.+.}-{0:0}, at: smc_connect_work+0x53a/0xae0 [ 150.393957][ T978] [ 150.393957][ T978] which lock already depends on the new lock. [ 150.393957][ T978] [ 150.404357][ T978] [ 150.404357][ T978] the existing dependency chain (in reverse order) is: [ 150.413365][ T978] [ 150.413365][ T978] -> #1 (sk_lock-AF_INET){+.+.}-{0:0}: [ 150.421109][ T978] lock_sock_nested+0x41/0xf0 [ 150.426316][ T978] sockopt_lock_sock+0x54/0x70 [ 150.431606][ T978] do_ip_getsockopt+0x13e4/0x2220 [ 150.437168][ T978] ip_getsockopt+0x9b/0x1e0 [ 150.442224][ T978] raw_getsockopt+0x4d/0x1f0 [ 150.447352][ T978] do_sock_getsockopt+0x3fc/0x800 [ 150.452912][ T978] __sys_getsockopt+0x12f/0x260 [ 150.458303][ T978] __x64_sys_getsockopt+0xbd/0x160 [ 150.463952][ T978] do_syscall_64+0xcd/0x260 [ 150.468994][ T978] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 150.475435][ T978] [ 150.475435][ T978] -> #0 (rtnl_mutex){+.+.}-{4:4}: [ 150.482670][ T978] __lock_acquire+0x1173/0x1ba0 [ 150.488069][ T978] lock_acquire+0x179/0x350 [ 150.493118][ T978] __mutex_lock+0x199/0xb90 [ 150.498153][ T978] smc_vlan_by_tcpsk+0x251/0x620 [ 150.503619][ T978] __smc_connect+0x44b/0x4880 [ 150.508822][ T978] smc_connect_work+0x54c/0xae0 [ 150.514220][ T978] process_one_work+0x9cc/0x1b70 [ 150.519686][ T978] worker_thread+0x6c8/0xf10 [ 150.524824][ T978] kthread+0x3c2/0x780 [ 150.529423][ T978] ret_from_fork+0x45/0x80 [ 150.534382][ T978] ret_from_fork_asm+0x1a/0x30 [ 150.539683][ T978] [ 150.539683][ T978] other info that might help us debug this: [ 150.539683][ T978] [ 150.549923][ T978] Possible unsafe locking scenario: [ 150.549923][ T978] [ 150.557368][ T978] CPU0 CPU1 [ 150.562729][ T978] ---- ---- [ 150.568089][ T978] lock(sk_lock-AF_INET); [ 150.572514][ T978] lock(rtnl_mutex); [ 150.579038][ T978] lock(sk_lock-AF_INET); [ 150.585978][ T978] lock(rtnl_mutex); [ 150.589966][ T978] [ 150.589966][ T978] *** DEADLOCK *** [ 150.589966][ T978] [ 150.598107][ T978] 3 locks held by kworker/1:2/978: [ 150.603221][ T978] #0: ffff88814d457948 ((wq_completion)smc_hs_wq){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 150.613947][ T978] #1: ffffc90003a47d18 ((work_completion)(&smc->connect_work)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 150.625731][ T978] #2: ffff8880639a8dd8 (sk_lock-AF_INET){+.+.}-{0:0}, at: smc_connect_work+0x53a/0xae0 [ 150.635506][ T978] [ 150.635506][ T978] stack backtrace: [ 150.641403][ T978] CPU: 1 UID: 0 PID: 978 Comm: kworker/1:2 Not tainted 6.14.0-syzkaller-09584-g7d06015d936c #0 PREEMPT(full) [ 150.641431][ T978] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 150.641447][ T978] Workqueue: smc_hs_wq smc_connect_work [ 150.641468][ T978] Call Trace: [ 150.641477][ T978] [ 150.641486][ T978] dump_stack_lvl+0x116/0x1f0 [ 150.641514][ T978] print_circular_bug+0x275/0x350 [ 150.641548][ T978] check_noncircular+0x14c/0x170 [ 150.641583][ T978] __lock_acquire+0x1173/0x1ba0 [ 150.641618][ T978] ? lockdep_hardirqs_on+0x7c/0x110 [ 150.641645][ T978] lock_acquire+0x179/0x350 [ 150.641678][ T978] ? smc_vlan_by_tcpsk+0x251/0x620 [ 150.641701][ T978] ? __pfx___might_resched+0x10/0x10 [ 150.641731][ T978] ? kasan_save_stack+0x42/0x60 [ 150.641750][ T978] ? kasan_save_stack+0x33/0x60 [ 150.641767][ T978] ? kasan_save_track+0x14/0x30 [ 150.641787][ T978] __mutex_lock+0x199/0xb90 [ 150.641814][ T978] ? smc_vlan_by_tcpsk+0x251/0x620 [ 150.641841][ T978] ? smc_vlan_by_tcpsk+0x251/0x620 [ 150.641864][ T978] ? __pfx___mutex_lock+0x10/0x10 [ 150.641894][ T978] ? find_held_lock+0x2b/0x80 [ 150.641921][ T978] ? smc_vlan_by_tcpsk+0x251/0x620 [ 150.641943][ T978] ? rtnl_lock+0x9/0x20 [ 150.641974][ T978] smc_vlan_by_tcpsk+0x251/0x620 [ 150.641997][ T978] ? __pfx_smc_vlan_by_tcpsk+0x10/0x10 [ 150.642023][ T978] __smc_connect+0x44b/0x4880 [ 150.642046][ T978] ? __pfx___smc_connect+0x10/0x10 [ 150.642066][ T978] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 150.642091][ T978] ? __local_bh_enable_ip+0xa4/0x120 [ 150.642121][ T978] smc_connect_work+0x54c/0xae0 [ 150.642141][ T978] ? __pfx_smc_connect_work+0x10/0x10 [ 150.642163][ T978] ? rcu_is_watching+0x12/0xc0 [ 150.642189][ T978] process_one_work+0x9cc/0x1b70 [ 150.642217][ T978] ? __pfx_process_one_work+0x10/0x10 [ 150.642243][ T978] ? assign_work+0x1a0/0x250 [ 150.642264][ T978] worker_thread+0x6c8/0xf10 [ 150.642290][ T978] ? __kthread_parkme+0x19e/0x250 [ 150.642322][ T978] ? __pfx_worker_thread+0x10/0x10 [ 150.642346][ T978] kthread+0x3c2/0x780 [ 150.642365][ T978] ? __pfx_kthread+0x10/0x10 [ 150.642384][ T978] ? __pfx_kthread+0x10/0x10 [ 150.642404][ T978] ? __pfx_kthread+0x10/0x10 [ 150.642423][ T978] ? __pfx_kthread+0x10/0x10 [ 150.642442][ T978] ? rcu_is_watching+0x12/0xc0 [ 150.642467][ T978] ? __pfx_kthread+0x10/0x10 [ 150.642487][ T978] ret_from_fork+0x45/0x80 [ 150.642509][ T978] ? __pfx_kthread+0x10/0x10 [ 150.642529][ T978] ret_from_fork_asm+0x1a/0x30 [ 150.642567][ T978] [ 150.887371][ C1] vkms_vblank_simulate: vblank timer overrun [ 151.377249][ T6832] ieee80211 phy14: Selected rate control algorithm 'minstrel_ht'