last executing test programs:

12m15.612816517s ago: executing program 0 (id=628):
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'dummy0\x00', <r1=>0x0})
faccessat2$auto(0xf, 0xfffffffffffffffe, 0x3, 0x1fc)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0)
mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000)
r2 = socket(0x10, 0x2, 0x0)
statmount$auto(0x0, 0x0, 0x1fe, 0xd)
sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB, @ANYBLOB="10002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000)
mmap$auto(0xffffffffffffffff, 0x2020009, 0x3, 0xffffffffffffffff, 0xfffffffffffffffa, 0x8000)
set_mempolicy$auto(0x3, &(0x7f0000000000)=0x7e, 0x4)
mmap$auto(0x0, 0x8, 0x4000000000df, 0x44eb1, 0x6, 0x300000000000)
mremap$auto(0x0, 0x7, 0x3fd6, 0x3, 0x20000000)
openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x800, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
mmap$auto(0x0, 0x2020009, 0xffff, 0xeb1, 0xfffffffffffffffa, 0x8000)
setsockopt$auto(0xffffffffffffffff, 0x1, 0x49, &(0x7f00000000c0)='\x01\xa2l\xaa\x0f\xbc\xc8\xd0\xd5\xdf<c\xb8_\x93\xf7\x1c\xf1\xd6\xdb\xfe\xa5\xa8&a\x93\x98\xb3\x8a\xe9\xcc|\xb4U\xc5\x916\x84E\xc6\v\xed\x18\xe1y\xcdvF\xd1\xb9\x04\xdb\xb5\xd0\x82\x01\xee\xaf\xdd\x1e\xe7|K\xff)\x1d\x86\x87\x87\xe5\xe2U\xa8F\xbfp\xbeE\x912^\xaec%\xb5*\x16\xc7D\xe0&\xe5\xb17\xafXC\xe7xg\xaeC\x1b\x8a\xa6rWu]2\xf5\x1c~N\x80\x19\xee\xcb\xe0t\xbf\r.\x8c\xec&\xf2\x91[\xb5\x8c\xb4\xad2PF\x82s\xc2,U\xec6iy* \x81\xd0\xaa', 0x5)
pwrite64$auto(0xc8, &(0x7f0000000000)='\xfc\xff\xff\xff\xff\xff\xff\xffRN8\x99\x88\xf5s\x1cJ\x99\x00:c\x14\r>\x94\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\xf1`\x9f\x1e\xf9\xa4\xf8\x15\x02l@\xae\x18\xc0\xc1\xf2\x14^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2\xdac$w\x883\xac\xcd\x96\xc2\x93\x0e\x12/v0\x90\x915?', 0x48, 0x9)
ioctl$auto_SG_EMULATED_HOST(0xffffffffffffffff, 0x2203, 0x0)
connect$auto(0xffffffffffffffff, &(0x7f0000000080), 0x9)
mbind$auto(0x0, 0x100000004, 0x100000000, 0x0, 0x6, 0x2)
sendmmsg$auto(r2, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f00000001c0), 0x7, 0xa505}, 0x800}, 0x7, 0x4008)
write$auto(0x3, 0x0, 0xfffffdef)
openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, 0x0, 0x2f2d00, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
socket(0x21, 0x2, 0xa)
bpf$auto(0x5, &(0x7f0000000300)=@bpf_attr_3={0x3, 0x4, 0xf, 0x63, 0x400, 0x0, 0x1, 0x80f0c8, 0x0, "38c1d5cbcb9f6b5e511f0cd8ed068f65", r1, 0x113e33f2, 0xffffffffffffffff, 0xe4, 0x6, 0x5, 0x6, 0x8, 0x0, 0x3, @attach_btf_obj_fd, 0x6, 0xffff, 0x8, 0x0, 0xfffffffe}, 0x47)

12m13.350249114s ago: executing program 0 (id=631):
madvise$auto(0x0, 0x2000040080000016, 0xe) (async)
futex_waitv$auto(&(0x7f0000000000)={0xf, 0x5d94, 0x4, 0x4}, 0x77, 0x0, 0x0, 0x62bd)
mprotect$auto(0x1ffff000, 0x8000000000000001, 0x7) (async)
io_uring_setup$auto(0x40005, &(0x7f0000000000)={0x6, 0x1, 0x400, 0x7, 0x1005, 0x6, 0x7, [0x4, 0x2e9, 0x8], {0x0, 0x1, 0x8, 0x7, 0x5, 0x100005, 0x1, 0xfffffffc, 0x7}, {0x4, 0xfff, 0xffff7fff, 0x2, 0x8, 0x200, 0x3, 0x0, 0x3}}) (async)
mprotect$auto(0x1ffff000, 0x1003, 0x8)
clone$auto(0x200, 0xff, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x100000000) (async, rerun: 32)
socket(0x2, 0x801, 0x100) (async, rerun: 32)
connect$auto(0x3, &(0x7f00000000c0), 0x55) (async, rerun: 32)
mmap$auto(0x0, 0x2000a, 0x10000000000df, 0xeb2, 0x401, 0x8000) (async, rerun: 32)
close_range$auto(0x2, 0x8, 0x0) (async)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async, rerun: 64)
r0 = socket(0x2, 0x1, 0x0) (rerun: 64)
clock_gettime$auto(0x1, 0x0)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x40}, 0x6a) (async)
sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x2, 0xb}, 0x800009}, 0x5, 0x20000000)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_ETHTOOL_MSG_PLCA_GET_STATUS(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x1f8}}, 0x4000) (async, rerun: 32)
socket(0xa, 0x2, 0x88) (async, rerun: 32)
r1 = socket(0x23, 0x80805, 0x0)
syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000080), r1) (async)
close_range$auto(0x2, 0x8000, 0x0) (async)
r2 = socket(0x2, 0x5, 0x0) (async, rerun: 64)
close_range$auto(0x2, 0xa, 0x0) (rerun: 64)
io_uring_setup$auto(0x6, 0x0)
socket(0x2, 0x1, 0x84) (async, rerun: 32)
sendmmsg$auto(r2, &(0x7f0000000000)={{&(0x7f0000000040)=[0x8000000000000002], 0x10, &(0x7f00000000c0)={0x0, 0x1}, 0x7, 0x0, 0x2, 0xb}, 0x1003}, 0x5, 0x7fffffff) (async, rerun: 32)
shutdown$auto(0x200000003, 0x2) (async)
shutdown$auto(0x200000003, 0x2) (async)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) (async)
ioctl$auto(0x3, 0x800005411, 0x38)

12m10.412644977s ago: executing program 0 (id=646):
r0 = openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/usbmon11\x00', 0x60c0c1, 0x0)
r1 = socket(0xa, 0x2, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
select$auto(0x9, 0x0, &(0x7f0000000100)={[0xd, 0x200, 0x80000000000000b, 0xc, 0x9, 0xf4, 0x6, 0x1, 0x40009, 0x3, 0x4000000000000000, 0x6, 0x93, 0x8, 0x8, 0x6]}, 0x0, 0x0)
pipe2$auto(&(0x7f0000000000)=r1, 0x4)
madvise$auto(0x0, 0x7ffffffffffffffe, 0x1)
exit$auto(0x7)
unshare$auto(0x40000080)
mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000)
io_uring_setup$auto(0x1, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$auto_CTRL_CMD_GETPOLICY(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)=ANY=[@ANYBLOB="1cb65a00", @ANYRES16=r3, @ANYBLOB="01032cbd7000fbdbdf250a0000000600010015000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4019}, 0x0)
settimeofday$auto(&(0x7f0000000180)={0x800, 0x9}, &(0x7f00000000c0)={0x3, 0x2})
close_range$auto(r2, 0x8, 0x0)
socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0)
mmap$auto(0x0, 0x400008, 0xdc, 0x9b72, 0x1000002, 0x8000)
io_uring_setup$auto(0x6, 0x0)
mq_open$auto(0x0, 0xde8, 0xb, 0x0)
close_range$auto(0x2, r0, 0x20000486)
connect$auto(0x3, &(0x7f0000000140), 0x55)
symlink$auto(&(0x7f0000000300)='\\\':.\x00', &(0x7f0000000340)='\xfb\x00')
readlink$auto(&(0x7f0000000b00)='\xfb\x00', 0x0, 0x800)
unshare$auto(0x200)
r4 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/mnt\x00')
setns(r4, 0x0)
umount2$auto(&(0x7f0000000080)='.\x00', 0x3)
umount2$auto(&(0x7f0000000080)='.\x00', 0xb9)
setsockopt$auto(0x3, 0x0, 0x4, 0x0, 0x28)

12m7.440070573s ago: executing program 0 (id=644):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_tcp_metrics(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$auto_TCP_METRICS_CMD_DEL(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="00f6000000000000"], 0x14}, 0x1, 0x0, 0x0, 0xc004}, 0x8004)

12m6.194512169s ago: executing program 0 (id=645):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000001900), 0xffffffffffffffff)
sendmsg$auto_ETHTOOL_MSG_MODULE_SET(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x2c, r1, 0x1, 0x70bd25, 0x25dfdbfb, {}, [@ETHTOOL_A_MODULE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80c1}, 0x20040000)
r2 = socket(0x10, 0x2, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000)
io_pgetevents$auto(0xc6f7, 0x7f, 0x4, 0x0, &(0x7f0000000040)={0x1ae, 0x1af6}, &(0x7f00000000c0)={&(0x7f0000000080)={0x6}, 0x2dc})
r3 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$auto_ETHTOOL_MSG_WOL_SET(0xffffffffffffffff, &(0x7f0000002cc0)={0x0, 0x0, &(0x7f0000002c80)={&(0x7f0000000180)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="015f9134f68d49f3d5a023"], 0x2c}, 0x1, 0x0, 0x0, 0x4801}, 0x20008000)
sendmmsg$auto(r2, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f00000001c0), 0x7, 0xa505}, 0x800}, 0x7, 0x4008)
sendmsg$auto_ETHTOOL_MSG_MM_SET(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r1, 0x200, 0x70bd26, 0x25dfdbff, {}, [@ETHTOOL_A_MM_PMAC_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x800)
truncate$auto(&(0x7f0000000000)='./cgroup/../file0\x00', 0x3)

12m5.765763549s ago: executing program 0 (id=647):
madvise$auto(0x0, 0x2000040080000004, 0xe)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'ipvlan1\x00'})
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x7ffb)
prctl$auto(0x5, 0x1, 0x9, 0x1, 0x3)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
clone3$auto(0x0, 0x1000)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
socket(0x2, 0x801, 0x106)
openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000380), 0x82002, 0x0)
ioctl$auto(0x3, 0xc0045520, 0x38)
mmap$auto(0x0, 0x3ff, 0xdf, 0x9b72, 0x2, 0x9e3a)
mmap$auto(0x200, 0x400008, 0xdf, 0x16, 0xfff, 0x8000)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff)
sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001980)={0x3c, r1, 0x1b, 0x70bd26, 0x25dfdbfd, {}, [@OVS_PACKET_ATTR_PROBE={0x4}, @OVS_PACKET_ATTR_ACTIONS={0xc, 0x3, 0x0, 0x1, [@typed={0x8, 0xd, 0x0, 0x0, @uid}]}, @OVS_PACKET_ATTR_PACKET={0x12, 0x1, "898771f1c19f1779048590828847"}, @OVS_PACKET_ATTR_KEY={0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4004040}, 0xc800)
mbind$auto(0x0, 0x8, 0x0, &(0x7f0000000000)=0x6466, 0x7, 0x6)
mprotect$auto(0x1ffff000, 0x8000000001000001, 0xd)
r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00')
fstat$auto(r2, 0x0)
open(&(0x7f0000000040)='./file0\x00', 0x0, 0x408)
socketpair$auto(0x1001e, 0x1, 0x1, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
msgsnd$auto(0x0, &(0x7f0000000000)={0x1, 0x5}, 0x8, 0x9)
msgrcv$auto(0x0, 0x0, 0x1000, 0x0, 0xb1)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/pts/ptmx\x00', 0x0, 0x0)
ioctl$auto_UBI_IOCATT(0xffffffffffffffff, 0x40186f40, &(0x7f0000000080)={0x5, 0x0, 0xb0000000, 0x7, 0xc, 0x3})
socket$nl_generic(0x10, 0x3, 0x10)
close_range$auto(0x0, 0xfffffffffffff000, 0x2)

11m50.563771327s ago: executing program 32 (id=647):
madvise$auto(0x0, 0x2000040080000004, 0xe)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'ipvlan1\x00'})
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x7ffb)
prctl$auto(0x5, 0x1, 0x9, 0x1, 0x3)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
clone3$auto(0x0, 0x1000)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
socket(0x2, 0x801, 0x106)
openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000380), 0x82002, 0x0)
ioctl$auto(0x3, 0xc0045520, 0x38)
mmap$auto(0x0, 0x3ff, 0xdf, 0x9b72, 0x2, 0x9e3a)
mmap$auto(0x200, 0x400008, 0xdf, 0x16, 0xfff, 0x8000)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff)
sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001980)={0x3c, r1, 0x1b, 0x70bd26, 0x25dfdbfd, {}, [@OVS_PACKET_ATTR_PROBE={0x4}, @OVS_PACKET_ATTR_ACTIONS={0xc, 0x3, 0x0, 0x1, [@typed={0x8, 0xd, 0x0, 0x0, @uid}]}, @OVS_PACKET_ATTR_PACKET={0x12, 0x1, "898771f1c19f1779048590828847"}, @OVS_PACKET_ATTR_KEY={0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4004040}, 0xc800)
mbind$auto(0x0, 0x8, 0x0, &(0x7f0000000000)=0x6466, 0x7, 0x6)
mprotect$auto(0x1ffff000, 0x8000000001000001, 0xd)
r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00')
fstat$auto(r2, 0x0)
open(&(0x7f0000000040)='./file0\x00', 0x0, 0x408)
socketpair$auto(0x1001e, 0x1, 0x1, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
msgsnd$auto(0x0, &(0x7f0000000000)={0x1, 0x5}, 0x8, 0x9)
msgrcv$auto(0x0, 0x0, 0x1000, 0x0, 0xb1)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/pts/ptmx\x00', 0x0, 0x0)
ioctl$auto_UBI_IOCATT(0xffffffffffffffff, 0x40186f40, &(0x7f0000000080)={0x5, 0x0, 0xb0000000, 0x7, 0xc, 0x3})
socket$nl_generic(0x10, 0x3, 0x10)
close_range$auto(0x0, 0xfffffffffffff000, 0x2)

3m35.868324814s ago: executing program 2 (id=3543):
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
mlockall$auto(0x7)
mremap$auto(0x0, 0x4, 0x4, 0x7, 0x100000000)
epoll_ctl$auto(0x5, 0x3, 0xffffffffffffffff, 0x0)
syslog$auto(0x4, &(0x7f0000000040)='..\x00', 0x7)
mprotect$auto(0x1ffff000, 0x8000000000000001, 0xd)
mmap$auto(0x0, 0x402000b, 0xdf, 0xeb1, 0x401, 0x8000)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x10004)
madvise$auto(0x8, 0xffffffffffdf0005, 0xfffffff8)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
pselect6$auto(0x2, 0x0, &(0x7f00000000c0)={[0x1, 0xb44f, 0x2e9, 0x1, 0xfffffffff0000000, 0x0, 0x1, 0x4, 0x1, 0x7, 0x4, 0x4, 0x10003, 0x2e0, 0xffffffffffffffff, 0x2]}, 0x0, 0x0, &(0x7f0000000280))
epoll_pwait2$auto(0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0, 0x62)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket(0x2, 0x2, 0x1)
setsockopt$auto(r0, 0x0, 0x6, 0x0, 0x8)
r1 = syz_genetlink_get_family_id$auto_net_shaper(&(0x7f0000000000), r0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'netdevsim0\x00', <r3=>0x0})
sendmsg$auto_NET_SHAPER_CMD_CAP_GET2(r2, &(0x7f0000003a00)={0x0, 0x0, &(0x7f00000039c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="000428bd7000ffdbdf250500000008000100", @ANYRES32=r3, @ANYBLOB="76d6c7ed0673c8829dbcef9c3b1743663e3f353d1d33129187116d94f2038413cb762305315b8b2a0a4ad9ae6efe50075cc4c9ab961b16f3e135feac303d"], 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x86)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
r4 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/net\x00')
fchdir$auto(r4)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
socket(0x2, 0x80805, 0x0)
io_uring_setup$auto(0x2, 0x0)
setsockopt$auto(0x3, 0x10000000084, 0x64, 0x0, 0x8)
socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0)
symlink$auto(0x0, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)

3m34.726864999s ago: executing program 2 (id=3549):
socket$nl_generic(0x10, 0x3, 0x10)
pipe$auto(&(0x7f0000001480))
r0 = open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002)
open(&(0x7f0000000040)='./file0\x00', 0x149443, 0x0)
socket(0x1e, 0x5, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket(0x10, 0x2, 0xc)
sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000013c0)=ANY=[@ANYBLOB="18000000", @ANYRES8=r2, @ANYRES8=r1, @ANYRES32], 0x18}}, 0x80)
mprotect$auto(0x1ffff000, 0x8000000000000001, 0xd)
sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0xfffffffffffff000, 0x1}, 0x10048884)

3m34.290212172s ago: executing program 2 (id=3551):
r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram14\x00', 0x20201, 0x0)
pwrite64$auto(r0, &(0x7f0000000140)='\vX\xb5n\x91p\xe6\x1eRNM\x99\x86\xdde\x1cJ\x99\x00\x00\x00\x00\x00\t\xfd\xfd\xd3\xd3\x1d\xf8\xbe\x01\x00\x00\x00\'\x03\x00\x00\x9f\x1e\xf9\xa4*\x01\x00\x00\x00^B\xb8\xe4j\t,\xe4\x90\xcc\x9d\xc5\x0fo\x84\xf4\x89\v\xea\x1b\x95\xafQ;CL\"\x01@\x00\x00\x00\x00\f\x00\xc0\x13\xc8\xe2\xae\xf5\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2E\xd8?\'\x8d\x81\x81O*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00,8\x93\xba\x88\x93\x9d\xb6\x1a\x7f\xc0%\xb0\x83ROJ+\x02\x9b#)\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd6eWj\xdc\xac\x88\xf0\xa0\x99\xb0R\xb4J}\xa8\xa1\x84]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\xde8\xf7\xc1\xa6\xf2\xc1\"\xact\xee\xc9\x00\x00\xff\xff\x00'/242, 0xfdf0, 0x39)

3m33.927002048s ago: executing program 2 (id=3554):
pwrite64$auto(0xc8, &(0x7f0000000000)='\vX\xb5n\x91p\xe6\x1eRNM\x99\x86\xdde\x1cJ\x99\x00\x00\x00\x00,\x00\xfd\xfd\xd3\xd3\x1d\xf8\xbe\x01\x00\x00\x00\'\x03\x00\x00\x9f\x1e\xf9\xa4*\x01\x00\x00\x00^B\xb8\xe4j\t3\xe4\x90\xcc\x9d\xc5\x0fo\x84\xf4\x89\v\xea\x1b\x95\xafQ;CL\"\x01@\x00\x00\x00\x00\f\x00\xc0\x13\xc8\xe2\xae\xf5\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2E\xd8?\'\x8d\x81\x81O*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00,8\x93\xba\x88\x93\x9d\xb6\x1a\x7f\xc0%\xb0\x83ROJ+\x02\x9b#)\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd6eWj\xdc\xac\x88\xf0\xa0\x99\xb0R\xb4J}\xa8\xa1\x84]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\xfb\xba\xb2.$\'\x1e\x82\x00\xf1\x12lwU&[\xde?\xde8\xf7\xc1\xa6\xf2\xc1\"\xact\xee\xc9\x00\x00\xff\xff\x00'/250, 0xfdf3, 0x39)

3m33.539954464s ago: executing program 2 (id=3559):
r0 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f00000002c0), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
pwrite64$auto(0xc8, &(0x7f0000000340)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x86\xdds\x1cJ\x99\x00:/\x14\r>\x94\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\xf1`\x9f\x1e\xf9\xa4\xf8\x15\xadCl\x9e\xeb\xcd\vp\x99\x00\xc8eX\xdc3\x02l@\x18*\xc0\xc1\xf2\x14^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0A\x94\xa3\xaef\x87\xd8\x95I\xfd\xa8\t\xac\x87\xb7\x1d\xd5\x83\xdcyu]\xde\xbe\xbf$<.}\x8b`\x04\xfc\xa2\xab\xb5]\x80\x00\xb9D\xc5\xbc\xf2a\xd66\xa5\xd3\xc1r\x96\x1e\x8db\x05=`\x01\x11\x04Tz\x87A$\x115\x95PUf\xa7\xfe\x19\x00\x82go}@W\xd5\xaej\x01\xbf>5n\x17S\xc0\x8a\xaf%O\xd1W\xa3ua+sUJ\xea\xf9\xb7p-\x128\x9d\xbaM_\xff\x1c\xc3sG\x04\xf2\xd3\xf3{;\xd4\xd7\x1c\x1dZ\xe9\xe9\xc9\x9cu5\xe9\xa2\xb3N\xd2\xc1\xc8\xa5\xadt\xd5BKD\x86\xeb%\a*<P\xb0\x8a\"\x176\xe1p*0\xac\xb9\xd5\xab\xcc$\x9ai\xca\v(\xcd?\x8d\xd2\x1d\xe1\x99N\x028\xe2\x12\t6x\xca{\n\xe86;\x81\xc4\x00\x8b\xed\xfa\xc0\x18\xe7\xd0\x97\xd8\x00\xd5\x85\x03\xf1\f\xcc\xf7\xb16L\xd4\xb0AV.\xe3\x9e\x8csh\x8a\x84\xe30\xde\x8d\xe3\xa4\xf1e\xcf\xb2Rx\x8f\x98G\xc3\xc8UP\xb4-\aW\xb5h\x8b\x98T\xe0n\x8d~\xf2\x8b\x1c>\x06\xbb\x1e\xfb\x11U\f&\xcbP\xf1\xcf\xccb\xe8Wb\xc5ae\xe3\xf9l\xa9vK\xed\x8cL\xfb%g\x83;\xe1\xe2w\xd6\xaa6\x16\x8fx\x1a\xd7\xc8\xf4[\xbc\b\xe1Z\x92\x14Q\xde<o\xb6[o\b\x00', 0x46, 0x3)
r2 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/card0\x00', 0x20100, 0x0)
ioctl$auto(r2, 0x64c7, 0x1e2)
socket(0x2, 0x1, 0x0)
sendmsg$auto_NL802154_CMD_SET_CCA_MODE(r1, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000d80)={&(0x7f0000000000)={0x20, r0, 0x101, 0x70bd2b, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x60040440}, 0x800)
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
io_uring_setup$auto(0x1, 0x0)
futex$auto(0x0, 0x6, 0x8, 0x0, 0x0, 0xffffffd6)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
tkill$auto(0x1, 0x7)

3m31.828437234s ago: executing program 2 (id=3573):
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r0 = socket(0xa, 0x1, 0x0)
getsockopt$auto(r0, 0x6, 0xa, &(0x7f0000000080)='$\xfe\x88\xc8\x91\x8bo\xc6#\x93\x91^\x01<\xc81\xc0\x80\xd6\xdb>f\x8c\xf7\xb6\xca\xcdi\xa6\x91R\x7f\x00B\x93H9\x19\xb4x\xb1\xb7\xd3\xe4\x00'/60, &(0x7f0000000040)=0xaa)
getpriority$auto(0x1, 0x5)
prctl$auto(0x1000000003b, 0x5, 0x1, 0x5, 0x7)
ioperm$auto(0x7, 0x6, 0x2)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff)
pipe2$auto(0x0, 0x80)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x800008000)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
mbind$auto(0x0, 0x100000004, 0x4, 0x0, 0x20000000000006, 0x2)
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
close_range$auto(0x2, 0x8, 0x0)
socket(0x10, 0x2, 0x4)
socket(0x10, 0x3, 0x6)
mlock$auto(0xfbe8, 0x5f626901)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket(0x10, 0x2, 0x4)
socket(0x28, 0x5, 0x3)
socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket(0x10, 0x3, 0x6)
r3 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$auto_ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="f0020000", @ANYRES16=r3, @ANYBLOB="01002dbd7000fedbdf2505000000da0203800800c000e000000204002a000400110008002e00", @ANYRES32, @ANYBLOB="d152e64e22695352dd73864415aa8a78c65e6ab752fb4d469a47a092ae7d5061cdd9690cac4138553ecfbb1b32dd7c33b14cc842bc1e2a5da4203e64ceaa9db5223aa655b6313c011b3e73a75f1aa1f7b2ea43344b15bd494886e355cf6d92c8fe670a42bc677830013e9c4aa4fa30c3e6630bf0ed13206d5a18f6813c6fb03466112aedf5d67bb5b99fe96a6dcd279916b0bce029925b63c48d41ca8a76e46c6014100005800c00c50003000000000000000c02368008027a8087010c800800e800", @ANYRES32=r1, @ANYBLOB="0800fb00", @ANYRES32=r2], 0x2f0}, 0x1, 0x0, 0x0, 0x40000}, 0x50)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0)
mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x4, 0x300000000000)
madvise$auto(0x5, 0xfffffffffffffff8, 0x4)

3m31.56181685s ago: executing program 33 (id=3573):
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r0 = socket(0xa, 0x1, 0x0)
getsockopt$auto(r0, 0x6, 0xa, &(0x7f0000000080)='$\xfe\x88\xc8\x91\x8bo\xc6#\x93\x91^\x01<\xc81\xc0\x80\xd6\xdb>f\x8c\xf7\xb6\xca\xcdi\xa6\x91R\x7f\x00B\x93H9\x19\xb4x\xb1\xb7\xd3\xe4\x00'/60, &(0x7f0000000040)=0xaa)
getpriority$auto(0x1, 0x5)
prctl$auto(0x1000000003b, 0x5, 0x1, 0x5, 0x7)
ioperm$auto(0x7, 0x6, 0x2)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff)
pipe2$auto(0x0, 0x80)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x800008000)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
mbind$auto(0x0, 0x100000004, 0x4, 0x0, 0x20000000000006, 0x2)
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
close_range$auto(0x2, 0x8, 0x0)
socket(0x10, 0x2, 0x4)
socket(0x10, 0x3, 0x6)
mlock$auto(0xfbe8, 0x5f626901)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket(0x10, 0x2, 0x4)
socket(0x28, 0x5, 0x3)
socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket(0x10, 0x3, 0x6)
r3 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$auto_ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="f0020000", @ANYRES16=r3, @ANYBLOB="01002dbd7000fedbdf2505000000da0203800800c000e000000204002a000400110008002e00", @ANYRES32, @ANYBLOB="d152e64e22695352dd73864415aa8a78c65e6ab752fb4d469a47a092ae7d5061cdd9690cac4138553ecfbb1b32dd7c33b14cc842bc1e2a5da4203e64ceaa9db5223aa655b6313c011b3e73a75f1aa1f7b2ea43344b15bd494886e355cf6d92c8fe670a42bc677830013e9c4aa4fa30c3e6630bf0ed13206d5a18f6813c6fb03466112aedf5d67bb5b99fe96a6dcd279916b0bce029925b63c48d41ca8a76e46c6014100005800c00c50003000000000000000c02368008027a8087010c800800e800", @ANYRES32=r1, @ANYBLOB="0800fb00", @ANYRES32=r2], 0x2f0}, 0x1, 0x0, 0x0, 0x40000}, 0x50)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0)
mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x4, 0x300000000000)
madvise$auto(0x5, 0xfffffffffffffff8, 0x4)

3m10.626142814s ago: executing program 1 (id=3746):
r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram14\x00', 0x20201, 0x0)
pwrite64$auto(r0, &(0x7f0000000140)='\vX\xb5n\x91p\xe6\x1eRNM\x99\x86\xdde\x1cJ\x99\x00\x00\x00 \x00\x00\xfd\xfd\xd3\xd3\x1d\xf8\xbe\x01\x00\x00\x00\'\x03\x00\x00\x9f\x1e\xf9\xa4*\x01\x00\x00\x00^B\xb8\xe4j\t,\xe4\x90\xcc\x9d\xc5\x0fo\x84\xf4\x89\v\xea\x1b\x95\xafQ;CL\"\x01@\x00\x00\x00\x00\f\x00\xc0\x13\xc8\xe2\xae\xf5\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2E\xd8?\'\x8d\x81\x81O*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00,8\x93\xba\x88\x93\x9d\xb6\x1a\x7f\xc0%\xb0\x83ROJ+\x02\x9b#)\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd6eWj\xdc\xac\x88\xf0\xa0\x99\xb0R\xb4J}\xa8\xa1\x84]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\xde8\xf7\xc1\xa6\xf2\xc1\"\xact\xee\xc9\x00\x00\xff\xff\x00'/242, 0xfdf0, 0x39)

3m10.516866027s ago: executing program 1 (id=3750):
sendmsg$auto_NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x14, 0x0, 0x413, 0x70bd2b, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4804}, 0x80)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_nlbl_cipsov4(&(0x7f0000000080), r0)
r2 = getuid()
fstat$auto(r0, &(0x7f00000000c0)={0xa3, 0x1, 0x1, 0x5, <r3=>0xee01, 0xee01, 0x0, 0x9, 0x8, 0x6, 0xb, 0x1, 0x4, 0xfffffffffffffff9, 0x0, 0x8, 0x2})
sendmsg$auto_NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000001c0)={&(0x7f0000001640)={0x1514, r1, 0x800, 0x70bd29, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_MLSCAT={0x10, 0xb, 0x0, 0x1, [@typed={0xc, 0x55, 0x0, 0x0, @u64=0xfffffffffffffffc}]}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3d8a1cf7}, @NLBL_CIPSOV4_A_MLSLVLLST={0x1100, 0x8, 0x0, 0x1, [@nested={0x10fa, 0x19, 0x0, 0x1, [@typed={0x7, 0xa7, 0x0, 0x0, @str='^\xfc\x00'}, @typed={0x8, 0xa5, 0x0, 0x0, @uid=r2}, @typed={0x8, 0x4f, 0x0, 0x0, @uid=r3}, @typed={0x4, 0x14b}, @generic="5535243448edae43128f44d25a5340c9aebaaa103f3df7d0f4396b6b62c96431ad684a00dc24035be2d6abde8d10adfce61d757b77c7ed9ca8d8f48aaf292d00c759eb294bf3036648daf681d7772f4b18ad8ffd324d39e992fd53b945558dfda5e8b8dcbc12b18695a5dae38fa35273b23662b3e5b5102793b5deb2f65aee880861594e40a0adf05ec4583d004995c5b044486822436b0b18390e177aadd98a32d182f21a9feda8b428f5a00861edbaee7e980b7efb345959e39b36a8226ba7f5a82e7f525e62174c1c5e9ea1fd7338040f24e0ec34897f5474", @generic="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"]}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x3e5, 0x8, 0x0, 0x1, [@typed={0x8, 0x3ff7, 0x0, 0x0, @u32=0x3e8}, @generic="b78b7582f72bcb7f0221f04219ebe4ee3372b80ada213907b96e602ed8e1a9f290e5363e1d579d0395d3a192f2a9e5f8db4ec5c25b8f42c8f9f21b46c0dca01b9f882dfd0c053d1c7638dff3f138289ff2ccff4226a6b16dd6584cdfdf73ba41029331b9b72e865c818a7e9e236dd8b0726e4d96531eee25908352ea4d8afde2730f1c069fdd33bc0e5012ed9ced0cfdd4", @nested={0x6e, 0x109, 0x0, 0x1, [@generic="0eec6727ff03dd8099efbf34b0dbdbb3a935d2e228d320fadd7d597a9c08d3484ac9de564c6ee82e90c0ea5c1f533b338ef8da811f5b92a48372956dd149b9fb7fa3b6325048e7422ef0a29401b37ccdd1c18618f70f6fb6affb035bd5faaa2998f278e3c6fd4d9795d9"]}, @generic="1eef07a121876c6bbeec5b0942b8afdc0e56ddbd18e99a19a1dbbd2809a4f970f9d8ddb5f95be00b49da425b074710423688e83c543551723edf31473bc691fc2cb039375683000facd7e6e7909f49d6cd649165b828cedc3a82c87726d3dd74b2323baeb60007626f860bd9f082e078a2523901", @typed={0x14, 0x28, 0x0, 0x0, @ipv6=@mcast2}, @nested={0xff, 0x89, 0x0, 0x1, [@generic="2f346e643c652260320c64985fa989d148af0a68e09971d22998d47a4bb893035bfa700587be628c7be18eee214b4da727ac714e668b2b8e80d263243a0fa92993367f3c910c4556cd9855636b037eaca8a36bbb22b3427ad0b2063e3b8f94d15f7761a31008476171e059d7b91b908b066b3e0315c69d4a197da22d172cae97f1c494b3fa22210562767e73d6e7ef07a3bb1602636f1e23e3d80f", @generic="30daf9097e49d7b665e9af6a7023c2713c7e1c0c8e3b3ba9701c6edf6b3a5e7d200974b9da42f0c2cb06f83b7756e80980e263c1b153c4d77032a8fe748982e58701b6565b25cb93ed3f24b90d89a0ac9214d321874b144f02bffe40", @typed={0x4, 0x127}]}, @typed={0x69, 0x98, 0x0, 0x0, @binary="6486d8bdd26fb8f668b0bb694b6a74ca2b8a581f31fcd6363127c8d32077f60cf9e099cfb37ea49d37f4b1aa54c275a8322e5d0520328b2296c681427c10b4945edd3781f351a91de8ba950a93bb2591c214c0713aef166a477a944943cbe328413eee39d3"}, @nested={0x10, 0x4d, 0x0, 0x1, [@typed={0xa, 0xd5, 0x0, 0x0, @str='^\\@}:\x00'}]}, @generic="7aa427dfd9feacbb909740e7251c99aa6dccf8bd1c65170f84710139f608b148ca5e4be962952864c07c64782f36c4e4968199a1b85df1b99f6f6bae7289d483bc9c9226dff7fb8f33111e2774f889fefb6991e7bcd44a5b0ac4a04aa174fede71c4ab880dee02f787c9c84d8bd57f5d29c262ca193046f2f8c2c67fd6419f08a135f843966a1ae3f617026b7b2c9a1064f9217eb6aed37901d45e7499bd33886258890e2b0f294bdcacec98efe5d0e3119d9ab82751cb34e57ee13215c76a42d0e19ddb7a6697c4fdeb2c2cf8bb5be83bbdf283"]}]}, 0x1514}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000000)
r4 = socket(0x2, 0x6, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'bond_slave_1\x00', <r5=>0x0})
sendmsg$auto_ETHTOOL_MSG_CABLE_TEST_TDR_ACT(r0, &(0x7f0000021740)={0x0, 0x0, &(0x7f0000021700)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r5], 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x4004804)

3m10.238906132s ago: executing program 1 (id=3753):
socket$nl_generic(0x10, 0x3, 0x10)
openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mtd0\x00', 0x8080, 0x0)
ioctl$auto(0x3, 0x400c4d0f, 0x38)
socket(0x2, 0x6, 0x0)
socket(0x2b, 0x1, 0x1)
openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000080), 0x10080, 0x0)
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
landlock_create_ruleset$auto(&(0x7f0000000000)={0x7, 0x400, 0x7}, 0x9, 0x8f)
mmap$auto(0x0, 0x400008, 0xdf, 0x38, 0x6, 0x8000)
syz_clone(0x1040000, 0x0, 0x0, 0x0, 0x0, 0x0)
landlock_restrict_self$auto(r0, 0x0)
mknod$auto(&(0x7f00000048c0)='./file0\x00', 0xc46e, 0x9)
ioctl$auto_SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000040)={0x9, "6919a16ff7bfe91772bb01df3669db0399207eb221b796443c6c74b1fe57daec", 0x90})
mbind$auto(0x6, 0x7, 0x9, &(0x7f0000000100)=0x80000001, 0x40, 0x6)
close_range$auto(0x2, 0x8, 0x0)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x8e40, 0x0)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x4008810}, 0x20008000)
socket(0x2, 0x2, 0x88)
bind$auto(0x3, &(0x7f0000000080), 0x68)
connect$auto(0x3, &(0x7f00000000c0), 0x55)
readv$auto(0x3, &(0x7f00000002c0)={0x0, 0xffff}, 0x12)
sendfile$auto(0x1, 0x3, 0x0, 0xc01)
write$auto(0x3, 0x0, 0xffd8)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0)

3m9.746075321s ago: executing program 1 (id=3757):
sendmsg$auto_OVS_PACKET_CMD_EXECUTE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x4004040}, 0xc800)
writev$auto(0xca, &(0x7f0000000080)={&(0x7f00000000c0)=[0x404], 0x1}, 0x7e)

3m9.482072044s ago: executing program 1 (id=3759):
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
io_uring_setup$auto(0x1, 0x0)
futex$auto(0x0, 0x6, 0x8, 0x0, 0x0, 0xffffffd6)
socket(0x2, 0x1, 0x84)
bind$auto(0x3, &(0x7f0000000000)=@generic={0x2, "f7fde23096b8e8f2294f9c78baaf"}, 0x68)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
tkill$auto(0x1, 0x7)
ptrace$auto(0x10001, 0x2, 0x8, 0x3ff)

3m8.98000973s ago: executing program 1 (id=3764):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000002500), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$auto_OVS_FLOW_CMD_DEL(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="a0f25b5afcd83fad2553622ac178969ac2a3bfa342350ba0038539578b1f360e2987e2f2708530ed9b868e7d969577dcdb1225f3e60c08249a08457952c9d9d3a5a4b9c4da1a5f78c435b2e9f7d5b39ba82abd404068a6beb4956850f258a6cb9628ae9da83105ecfa50f77a256062cacea0750277e487eea0cada502d5d14610735d254a362e3b6c8639537dd1ae9b692a46aa12944be72a31d159c6a045d99669f000000000000", @ANYRES16=r3, @ANYBLOB="01002dbd7000fddbdf2502000000040001800c00018008000500", @ANYRES64=r1, @ANYRESDEC=r3], 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x800)
r4 = syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$auto_OVS_DP_CMD_NEW(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYRES8=r3, @ANYRES16=r4, @ANYBLOB="010026bd7020f8dbdf250100000008000200", @ANYRES32=r0, @ANYRESDEC=r0, @ANYRES16, @ANYBLOB="52a5b81cc9c5de969d4be019d20817e2dce2b8b234fdb630aea25db7e3d8b2ec296c37375e4226fc8e95b19bef83f06cf9dba6782e8a0b74af3ceabf7957e7d6404ad946755c865a3d4322510db287f9da14bb5dc9194bfd9cd8be82c6b4cc553736e61ad84096f737a00744f52964056927c262974517a058b6f402b1ae5a2bb52dea1d748f95c9c9c5dd59a14bf4fe0888adb47b952e115c58b70cde4f0cf66744f57d30d2651bf4e786c434ff7f0000ad6c3c6aa12dcf49ec746a162e7bf30d426419b164dab90faaf50233817d331292be7dab999e4344f8", @ANYRES64=r4, @ANYRES8=r1, @ANYRES64=r0], 0x2c}, 0x1, 0x0, 0x0, 0x801}, 0x80)
syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000080), 0xffffffffffffffff)
r5 = openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, &(0x7f0000000140), 0x100, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
ioctl$auto_USB_RAW_IOCTL_INIT(r5, 0x41015500, 0x0)
sendmsg$auto_WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x20048890}, 0x2000c041)
writev$auto(0xca, &(0x7f0000000080)={&(0x7f0000000040)=[0x404], 0x1}, 0x7e)
fanotify_init$auto(0x200, 0x2010000000000)
open(&(0x7f0000000000)='./file1\x00', 0x10677d, 0x37e5c9853cd1b999)
close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002)
socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$auto_nbd(&(0x7f0000000340), 0xffffffffffffffff)
sendmsg$auto_NBD_CMD_CONNECT(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000380)={0x24, r7, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffffffffffffffff}]}, 0x24}, 0x1, 0x0, 0x0, 0x40080}, 0x20040000)
open(&(0x7f0000000000)='./file0\x00', 0x261c2, 0xb2)
mmap$auto(0x0, 0x9, 0x3, 0x8012, 0x3, 0x8000)
fallocate$auto(0x8000000000000003, 0x0, 0xd, 0xcbd5d)
mlock$auto(0x81, 0xffff)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = socket(0x18, 0x1, 0x84)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f00000015c0)={'wg1\x00', <r11=>0x0})
bpf$auto(0x80, &(0x7f0000001500)=@bpf_attr_5={@target_ifindex=r11, r9, 0x9, 0x1, r9, @relative_fd=r8, 0x1}, 0x10)

3m8.66677381s ago: executing program 34 (id=3764):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000002500), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$auto_OVS_FLOW_CMD_DEL(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="a0f25b5afcd83fad2553622ac178969ac2a3bfa342350ba0038539578b1f360e2987e2f2708530ed9b868e7d969577dcdb1225f3e60c08249a08457952c9d9d3a5a4b9c4da1a5f78c435b2e9f7d5b39ba82abd404068a6beb4956850f258a6cb9628ae9da83105ecfa50f77a256062cacea0750277e487eea0cada502d5d14610735d254a362e3b6c8639537dd1ae9b692a46aa12944be72a31d159c6a045d99669f000000000000", @ANYRES16=r3, @ANYBLOB="01002dbd7000fddbdf2502000000040001800c00018008000500", @ANYRES64=r1, @ANYRESDEC=r3], 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x800)
r4 = syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$auto_OVS_DP_CMD_NEW(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYRES8=r3, @ANYRES16=r4, @ANYBLOB="010026bd7020f8dbdf250100000008000200", @ANYRES32=r0, @ANYRESDEC=r0, @ANYRES16, @ANYBLOB="52a5b81cc9c5de969d4be019d20817e2dce2b8b234fdb630aea25db7e3d8b2ec296c37375e4226fc8e95b19bef83f06cf9dba6782e8a0b74af3ceabf7957e7d6404ad946755c865a3d4322510db287f9da14bb5dc9194bfd9cd8be82c6b4cc553736e61ad84096f737a00744f52964056927c262974517a058b6f402b1ae5a2bb52dea1d748f95c9c9c5dd59a14bf4fe0888adb47b952e115c58b70cde4f0cf66744f57d30d2651bf4e786c434ff7f0000ad6c3c6aa12dcf49ec746a162e7bf30d426419b164dab90faaf50233817d331292be7dab999e4344f8", @ANYRES64=r4, @ANYRES8=r1, @ANYRES64=r0], 0x2c}, 0x1, 0x0, 0x0, 0x801}, 0x80)
syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000080), 0xffffffffffffffff)
r5 = openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, &(0x7f0000000140), 0x100, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
ioctl$auto_USB_RAW_IOCTL_INIT(r5, 0x41015500, 0x0)
sendmsg$auto_WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x20048890}, 0x2000c041)
writev$auto(0xca, &(0x7f0000000080)={&(0x7f0000000040)=[0x404], 0x1}, 0x7e)
fanotify_init$auto(0x200, 0x2010000000000)
open(&(0x7f0000000000)='./file1\x00', 0x10677d, 0x37e5c9853cd1b999)
close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002)
socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$auto_nbd(&(0x7f0000000340), 0xffffffffffffffff)
sendmsg$auto_NBD_CMD_CONNECT(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000380)={0x24, r7, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffffffffffffffff}]}, 0x24}, 0x1, 0x0, 0x0, 0x40080}, 0x20040000)
open(&(0x7f0000000000)='./file0\x00', 0x261c2, 0xb2)
mmap$auto(0x0, 0x9, 0x3, 0x8012, 0x3, 0x8000)
fallocate$auto(0x8000000000000003, 0x0, 0xd, 0xcbd5d)
mlock$auto(0x81, 0xffff)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = socket(0x18, 0x1, 0x84)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f00000015c0)={'wg1\x00', <r11=>0x0})
bpf$auto(0x80, &(0x7f0000001500)=@bpf_attr_5={@target_ifindex=r11, r9, 0x9, 0x1, r9, @relative_fd=r8, 0x1}, 0x10)

51.138901816s ago: executing program 6 (id=4565):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff)
sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="1b0026bd7000fddbdf250300000004000800080003800400118012000100898771f1c19f1779048590828847000004000280"], 0x38}, 0x1, 0x0, 0x0, 0x4004040}, 0xc800)
sendmsg$auto_OVS_PACKET_CMD_EXECUTE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x4004040}, 0xc800)
socket(0x2, 0x801, 0x100)
connect$auto(0x3, &(0x7f00000000c0), 0x55)
writev$auto(0xca, &(0x7f0000000080)={&(0x7f00000000c0)=[0x404], 0x1}, 0x7e)

49.0770208s ago: executing program 6 (id=4570):
mmap$auto(0x0, 0x2030009, 0x3, 0x100000000eb1, 0xfffffff7fffffff7, 0x8000)
r0 = socket(0x10, 0x2, 0x0)
sendmsg$auto_IPVS_CMD_GET_INFO(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x4004010)
close_range$auto(r0, 0x8000, 0x0)
io_uring_setup$auto(0x6, 0x0)
io_uring_register$auto(0x2, 0x6, 0x0, 0x0)
bpf$auto(0x0, &(0x7f00000001c0)=@task_fd_query={<r1=>0x9, 0x21eb, 0x7ff, 0x6, 0xa, 0x1000009, 0x5f, 0x0, 0x3}, 0x6f3)
mmap$auto(0x0, 0x4024009, 0x6, 0xeb1, 0x401, 0x8000)
sysfs$auto(0x2, 0x19, 0x0)
setsockopt$auto(0xffffffffffffffff, 0x113, 0x3, 0x0, 0x79ad226f)
syz_open_procfs$namespace(r1, 0x0)
mknod$auto(&(0x7f0000000040)='\xfd\x90\x8f2\x14\x92\x00\xbf\xdf\xcf\x9a\xae}\xd9\xf95\xc5gV\x82\f\xe5h\xfe\x83\xe4\xbe\x8c\x1f\xa5\xf1_T\xde\xf7\xd4\x83D\x9eXS\xd6\x90T\xc1v\xad#\xc4q\x8b\xed2\xadW:0\xef\x9c.=\xba\x0fy\x8f\xcd\xd6\xde\xa9i\xec\xe8\xca\x9f\xf3\x82b\xa2y\xa87J\xfc \xc5\xd8\x80\xba\xaaV\x8f{\x1f\x1b\xb0\n\x97\\\xa7\xe3\xdf\xc29-*;#r\xc8\xd1\x14RcF\x87\xe4\x1c\x1fGL\xa5\x19\x90\xd6\x8d*\xe6\b(\x1a\xea\x95\xdc\xa6)5\xae&yAl\x1e\xe3j Lp\x91\r\xed%\xafZ\xf8w\xf2}\xcdGS\xce\xb9\xdck\x86\x00.6\xe6{\xc1\x00\x1bW5\x81\xda!\xcb.O\xa9\xf3\xa7\x88+\xb9\xf3\x9a7\xa4\xe6)<\xa79\xa4\x87\\\xb4\xbf\v\x03\x87\xac\x87r\x02\x05\xdb\xe4\xde,V\xb6G\xba.WR\xe2<~\xdd\xb2\xe53hj_;\xa5qm\x92\xc7P\xc9.\x82w8\x1f\xfcX\xe4\x14\xc72cC\xd3\x00'/263, 0x1, 0x4)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000180), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'veth1_to_bridge\x00', <r4=>0x0})
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'geneve0\x00', <r5=>0x0})
r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/irq/24/type\x00', 0x2000, 0x0)
read$auto_kernfs_file_fops_kernfs_internal(r6, &(0x7f0000000080)=""/177, 0xb1)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'syzkaller1\x00', <r7=>0x0})
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'veth0_to_hsr\x00', <r8=>0x0})
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'ip_vti0\x00', <r9=>0x0})
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'veth0_to_bond\x00', <r10=>0x0})
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'tunl0\x00', <r11=>0x0})
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'pimreg0\x00', <r12=>0x0})
r13 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000002480)='/dev/midi2\x00', 0x2841, 0x0)
ioctl$auto_SNDRV_RAWMIDI_IOCTL_STATUS32(r13, 0xc0245720, &(0x7f0000000040)={0x1, 0x1000, 0x6, 0x8, 0x1ff, "d331ee844fc79d4259c4df3752081276"})
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'wg0\x00', <r14=>0x0})
sendmsg$auto_ETHTOOL_MSG_RINGS_GET(r2, &(0x7f0000000600)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="5c010000", @ANYRES16=r3, @ANYBLOB="00082dbd7000ffdbdf250f0000000c0001800800030003000000580001801400020076657468315f746f5f7465616d000000140002007866726d300000000000000000000000080003000000000014000200766c616e300000000000000000000000080003000080000008000300b4075f293800018008000100", @ANYRES32=r4, @ANYBLOB="08000300040000000800030004000000080003003600000014000200697036677265300000000000000000000c00018008000100", @ANYRES32=r5, @ANYBLOB="040001803000018008000100", @ANYRES32=r7, @ANYBLOB="080003000908000008000100", @ANYRES32=r8, @ANYBLOB="140002006970766c616e31000000000000000000340001800800030001000000080003000800000008000100", @ANYRES32=r9, @ANYBLOB="080003000100000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r10, @ANYBLOB="38000180080003000100000008000100", @ANYRES32=r11, @ANYBLOB='\b\x00\x00', @ANYRES32=r12, @ANYBLOB="08000100", @ANYRES32=r14, @ANYBLOB="1400020077673200"/20], 0x15c}, 0x1, 0x0, 0x0, 0x8c4}, 0x0)

47.804478049s ago: executing program 6 (id=4573):
r0 = syz_genetlink_get_family_id$auto_ovs_packet(0x0, 0xffffffffffffffff)
sendmsg$auto_OVS_PACKET_CMD_EXECUTE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRES16=r0, @ANYBLOB="1b0026bd7000fddbdf250300000004000800080003800400118012000100898771f1c19f1779048590828847000004000280"], 0x38}, 0x1, 0x0, 0x0, 0x4004040}, 0xc800)
writev$auto(0xca, &(0x7f0000000080)={&(0x7f00000000c0)=[0x404], 0x1}, 0x7e)

47.594705637s ago: executing program 6 (id=4576):
mmap$auto(0x0, 0x0, 0x8, 0x2000000009b7e, 0x2, 0x3)
sendmsg$auto_WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYRES64], 0x14}, 0x1, 0x0, 0x0, 0x4008885}, 0x2000c041)
r0 = socket(0x2a, 0x1, 0x0)
bind$auto(0x3, &(0x7f0000000080), 0x68)
connect$auto(0x3, &(0x7f00000000c0)=@phonet={0x23, 0x4, 0xc, 0xff}, 0x55)
recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd)
fcntl$auto(r0, 0x402, 0x400000000000005)
sendmsg$auto_OVS_METER_CMD_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc0}, 0x40)
write$auto(0x3, 0x0, 0xfffffdef)
setsockopt$auto(r0, 0x5, 0x8001, 0x0, 0x0)
unshare$auto(0x40000080)
mmap$auto(0x0, 0x400008, 0xdf, 0x17, 0x2, 0x8000)
sysfs$auto(0x2, 0x10000000000002d, 0x0)
syz_genetlink_get_family_id$auto_ovs_datapath(0x0, r0)
mbind$auto(0x0, 0x100000004, 0x100000000, 0x0, 0x6, 0x2)
gettid()
mmap$auto(0x0, 0x5, 0x3, 0x1a, 0x3, 0x8000)
mmap$auto(0x3ffffffe, 0x20009, 0x0, 0xeb1, 0x4, 0x8000)
alarm$auto(0xffffffff)
r1 = socket(0x80000000000000a, 0x2, 0x3)
getsockopt$auto(r1, 0x88, 0x64, 0x0, 0x0)
sendfile$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7fff)
unshare$auto(0x40000080)
writev$auto(0x1, &(0x7f0000000100)={0x0, 0x400000000000fdef}, 0x1)
madvise$auto(0x0, 0x20200, 0x15)
unshare$auto(0x40000080)
mmap$auto(0x0, 0xfffffffffffffff1, 0xdf, 0x9b70, 0x2, 0xfe)
setrlimit$auto(0x1000000007, 0x0)
getrandom$auto(0x0, 0x6000000, 0x3)
mmap$auto(0xfffffffffffffffe, 0x100000001, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)

40.751853913s ago: executing program 6 (id=4599):
mmap$auto(0x8, 0x999d, 0x5, 0x5b, 0xaf8, 0x1c)
msgsnd$auto(0x80000001, &(0x7f0000000040)={0x7, 0x1f}, 0x6, 0x9)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
fcntl$auto(0x2, 0x11, 0x0)

39.905794086s ago: executing program 6 (id=4602):
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
epoll_create$auto(0x4)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
ioctl$auto(0x3, 0xffffffff80088a02, 0x1)
r0 = socket(0x10, 0x2, 0x0)
socket(0x1c, 0x3, 0x1)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
madvise$auto(0x0, 0x8000000000000000, 0x15)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
madvise$auto(0x0, 0xffffffffffff0005, 0x17)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080))
fchdir$auto(r1)
mmap$auto(0x925d, 0x8, 0x101, 0x10010, 0x3, 0x91)
syz_genetlink_get_family_id$auto_ovs_ct_limit(&(0x7f0000000080), r0)
mbind$auto(0x0, 0x1, 0x0, &(0x7f0000000000)=0x6466, 0x7, 0x6)
mprotect$auto(0x1ffff000, 0x8000000001000001, 0xd)
r2 = open(&(0x7f0000000000)='./cgroup\x00', 0x0, 0x64)
fchdir$auto(r2)
r3 = openat$auto_dynamic_events_ops_trace_dynevent(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/dynamic_events\x00', 0x542, 0x0)
write$auto_dynamic_events_ops_trace_dynevent(r3, &(0x7f0000000140)="65507307ff6587a725ca87720ef9769f20592e77", 0x14)
openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sg0\x00', 0x20000, 0x0)
mremap$auto(0x4000, 0xb8, 0x0, 0x3, 0xfffff000)
move_pages$auto(0x0, 0x1002, 0x0, 0x0, 0x0, 0x2)

29.770549596s ago: executing program 4 (id=4638):
socket$nl_generic(0x10, 0x3, 0x10)
mprotect$auto(0x1ffff000, 0x8000000000000001, 0xd)
close_range$auto(0x0, 0xffffffffffffffff, 0x4000000000002)
fanotify_init$auto(0x5, 0x800)
pipe2$auto(0x0, 0x80)
socket(0xa, 0x1, 0x0)
socket(0x25, 0x1, 0x0)
syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000040), 0xffffffffffffffff)
r0 = socket(0x10, 0x2, 0x0)
read$auto(0x3, 0x0, 0xf34)
recvmmsg$auto(r0, &(0x7f0000000140)={{0x0, 0x4, &(0x7f0000000080)={0x0, 0x4c3}, 0x7, 0x0, 0x200002, 0x8}, 0x805}, 0xa, 0x10, 0x0)

28.791612922s ago: executing program 4 (id=4640):
r0 = openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000980)='/proc/self/pagemap\x00', 0x80800, 0x0)
mmap$auto(0x0, 0x4, 0x6, 0x40eb2, 0x402, 0x300000000000)
io_uring_setup$auto(0x6, 0x0)
close_range$auto(0x2, 0x8000, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000000380)='/dev/cuse\x00', 0x0, 0x0)
mmap$auto(0x0, 0x40009, 0x3, 0x9b72, 0x7, 0x28000)
io_uring_setup$auto(0xd, 0x0)
ppoll$auto(&(0x7f0000000000)={0xffffffffffffffff, 0x9b2, 0x1}, 0x2, &(0x7f0000000040)={0x4, 0x4}, &(0x7f0000000080)={0xffffffff}, 0x8)
close_range$auto(0x2, 0x8000, 0x0)
open(&(0x7f0000000000)='./file0\x00', 0x261c2, 0x84)
read$auto(r1, 0x0, 0x7fff)
read$auto(r0, 0x0, 0x39b8)

28.602535748s ago: executing program 4 (id=4641):
r0 = openat$auto_bridges_fops_(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/dri/vkms/encoder-0/bridges\x00', 0x8200, 0x0)
read$auto_bridges_fops_(r0, &(0x7f0000000040)=""/5, 0x5)
r1 = openat$auto_proc_oom_score_adj_operations_base(0xffffffffffffff9c, &(0x7f0000002600)='/proc/self/oom_score_adj\x00', 0x101202, 0x0)
io_cancel$auto(0x8, 0x0, &(0x7f0000000140)={0x0, 0x100000001, 0x2, 0x6})
unshare$auto(0x40000080)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
socket(0x10, 0x2, 0x0)
statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x9, 0x3, 0x7, 0x6, 0x5, 0x3, 0x2000000000010006, 0x0, 0x7, 0x5, 0x0, 0x7, 0xaf, 0x9, 0x2, 0x3, 0x105, 0x7, 0x0, 0x0, 0x2, 0x0, 0x0, 0x2, [0x1b16, 0xfffffffffffffffd, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x77, 0x0, 0x0, 0x0, 0x4, 0x0, 0xc06f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x107, 0x6, 0x0, 0xfffffffffffffffe, 0x4, 0x0, 0x80000000000]}, 0x1fe, 0x81)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="f2000000", @ANYBLOB='O\x00', @ANYRES16], 0x1ac}, 0x1, 0x0, 0x0, 0x24040840}, 0x94)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0xb, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB='*'], 0x1ac}}, 0x40000)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x8002, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x9}, 0x3, 0x0)
read$auto_proc_oom_score_adj_operations_base(r1, &(0x7f0000000180)=""/189, 0xbd)
mmap$auto(0x0, 0x400008, 0xdf, 0x14, 0x2, 0x8000)
read$auto(0x3, 0x0, 0x80)
r2 = openat$auto_bridges_fops_(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/dri/vkms/encoder-1/bridges\x00', 0x1, 0x0)
read$auto_bridges_fops_(r2, &(0x7f00000000c0)=""/149, 0x95)
mmap$auto(0x4, 0x0, 0x1, 0x77, 0xe000000000000000, 0x240000000000)

28.06293385s ago: executing program 4 (id=4644):
statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x1ff, 0x7, 0x5, 0x4909b6f8, 0x1ffdd, 0x7, 0x3, 0x2, 0x9, 0x3, 0x6, 0x4, 0xb4, 0x9, 0x6, 0x10003, 0x4080, 0x4, 0x0, 0x7, 0x2000, 0x200, 0x8001, 0x84, [0x0, 0x0, 0x0, 0x50100000000000, 0x0, 0x1000002000, 0x0, 0xa, 0x70624ce7, 0xefde, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x7, 0x0, 0xfffffffffffffffd, 0xfffffffffffffffd, 0x1, 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x400000000005b4, 0xc, 0x0, 0x0, 0x0, 0x6, 0xffffffffffffffff, 0x88e, 0x8000000000008, 0xfffffffffffffffc, 0x9, 0xa38, 0x0, 0x6, 0xfffffffffffffffc, 0x2, 0x3, 0x4]}, 0x1fe, 0xd)
r0 = socket(0x10, 0x2, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1e00df45"], 0x1ac}}, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000)
recvmmsg$auto(r0, &(0x7f0000000100)={{0x0, 0x4, &(0x7f0000000080)={&(0x7f0000000000), 0xcb}, 0x3, 0x0, 0x80000000, 0x6}, 0x9}, 0x7, 0x6, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket(0x2, 0x6, 0x0)
sendmsg$auto_TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000003740)={&(0x7f0000000000)=ANY=[@ANYBLOB="b1000000", @ANYRES16, @ANYBLOB="01002dbd7000fddbdf25030000000c000180080001"], 0x20}, 0x1, 0x0, 0x0, 0x41}, 0x40080)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'bond_slave_1\x00', <r3=>0x0})
sendmsg$auto_ETHTOOL_MSG_CABLE_TEST_TDR_ACT(r1, &(0x7f0000021740)={0x0, 0x0, &(0x7f0000021700)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3], 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x4004804)

27.763627088s ago: executing program 4 (id=4646):
syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff)
sendmsg$auto_OVS_PACKET_CMD_EXECUTE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004040}, 0xc800)
writev$auto(0xca, &(0x7f0000000080)={&(0x7f00000000c0)=[0x404], 0x1}, 0x7e)

27.633589469s ago: executing program 4 (id=4647):
mmap$auto(0x0, 0x0, 0x8, 0x2000000009b7e, 0x2, 0x3)
sendmsg$auto_WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYRES64], 0x14}, 0x1, 0x0, 0x0, 0x4008885}, 0x2000c041)
r0 = socket(0x2a, 0x1, 0x0)
bind$auto(0x3, &(0x7f0000000080), 0x68)
connect$auto(0x3, &(0x7f00000000c0)=@phonet={0x23, 0x4, 0xc, 0xff}, 0x55)
recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd)
fcntl$auto(r0, 0x402, 0x400000000000005)
sendmsg$auto_OVS_METER_CMD_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc0}, 0x40)
write$auto(0x3, 0x0, 0xfffffdef)
setsockopt$auto(r0, 0x5, 0x8001, 0x0, 0x0)
unshare$auto(0x40000080)
mmap$auto(0x0, 0x400008, 0xdf, 0x17, 0x2, 0x8000)
sysfs$auto(0x2, 0x10000000000002d, 0x0)
syz_genetlink_get_family_id$auto_ovs_datapath(0x0, r0)
mbind$auto(0x0, 0x100000004, 0x100000000, 0x0, 0x6, 0x2)
gettid()
mmap$auto(0x0, 0x5, 0x3, 0x1a, 0x3, 0x8000)
mmap$auto(0x3ffffffe, 0x20009, 0x0, 0xeb1, 0x4, 0x8000)
alarm$auto(0xffffffff)
r1 = socket(0x80000000000000a, 0x2, 0x3)
getsockopt$auto(r1, 0x88, 0x64, 0x0, 0x0)
sendfile$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7fff)
unshare$auto(0x40000080)
writev$auto(0x1, &(0x7f0000000100)={0x0, 0x400000000000fdef}, 0x1)
madvise$auto(0x0, 0x20200, 0x15)
unshare$auto(0x40000080)
mmap$auto(0x0, 0xfffffffffffffff1, 0xdf, 0x9b70, 0x2, 0xfe)
setrlimit$auto(0x1000000007, 0x0)
getrandom$auto(0x0, 0x6000000, 0x3)
mmap$auto(0xfffffffffffffffe, 0x100000001, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)

27.24205327s ago: executing program 35 (id=4647):
mmap$auto(0x0, 0x0, 0x8, 0x2000000009b7e, 0x2, 0x3)
sendmsg$auto_WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYRES64], 0x14}, 0x1, 0x0, 0x0, 0x4008885}, 0x2000c041)
r0 = socket(0x2a, 0x1, 0x0)
bind$auto(0x3, &(0x7f0000000080), 0x68)
connect$auto(0x3, &(0x7f00000000c0)=@phonet={0x23, 0x4, 0xc, 0xff}, 0x55)
recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd)
fcntl$auto(r0, 0x402, 0x400000000000005)
sendmsg$auto_OVS_METER_CMD_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc0}, 0x40)
write$auto(0x3, 0x0, 0xfffffdef)
setsockopt$auto(r0, 0x5, 0x8001, 0x0, 0x0)
unshare$auto(0x40000080)
mmap$auto(0x0, 0x400008, 0xdf, 0x17, 0x2, 0x8000)
sysfs$auto(0x2, 0x10000000000002d, 0x0)
syz_genetlink_get_family_id$auto_ovs_datapath(0x0, r0)
mbind$auto(0x0, 0x100000004, 0x100000000, 0x0, 0x6, 0x2)
gettid()
mmap$auto(0x0, 0x5, 0x3, 0x1a, 0x3, 0x8000)
mmap$auto(0x3ffffffe, 0x20009, 0x0, 0xeb1, 0x4, 0x8000)
alarm$auto(0xffffffff)
r1 = socket(0x80000000000000a, 0x2, 0x3)
getsockopt$auto(r1, 0x88, 0x64, 0x0, 0x0)
sendfile$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7fff)
unshare$auto(0x40000080)
writev$auto(0x1, &(0x7f0000000100)={0x0, 0x400000000000fdef}, 0x1)
madvise$auto(0x0, 0x20200, 0x15)
unshare$auto(0x40000080)
mmap$auto(0x0, 0xfffffffffffffff1, 0xdf, 0x9b70, 0x2, 0xfe)
setrlimit$auto(0x1000000007, 0x0)
getrandom$auto(0x0, 0x6000000, 0x3)
mmap$auto(0xfffffffffffffffe, 0x100000001, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)

24.108402119s ago: executing program 36 (id=4602):
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
epoll_create$auto(0x4)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
ioctl$auto(0x3, 0xffffffff80088a02, 0x1)
r0 = socket(0x10, 0x2, 0x0)
socket(0x1c, 0x3, 0x1)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
madvise$auto(0x0, 0x8000000000000000, 0x15)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
madvise$auto(0x0, 0xffffffffffff0005, 0x17)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080))
fchdir$auto(r1)
mmap$auto(0x925d, 0x8, 0x101, 0x10010, 0x3, 0x91)
syz_genetlink_get_family_id$auto_ovs_ct_limit(&(0x7f0000000080), r0)
mbind$auto(0x0, 0x1, 0x0, &(0x7f0000000000)=0x6466, 0x7, 0x6)
mprotect$auto(0x1ffff000, 0x8000000001000001, 0xd)
r2 = open(&(0x7f0000000000)='./cgroup\x00', 0x0, 0x64)
fchdir$auto(r2)
r3 = openat$auto_dynamic_events_ops_trace_dynevent(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/dynamic_events\x00', 0x542, 0x0)
write$auto_dynamic_events_ops_trace_dynevent(r3, &(0x7f0000000140)="65507307ff6587a725ca87720ef9769f20592e77", 0x14)
openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sg0\x00', 0x20000, 0x0)
mremap$auto(0x4000, 0xb8, 0x0, 0x3, 0xfffff000)
move_pages$auto(0x0, 0x1002, 0x0, 0x0, 0x0, 0x2)

15.44682305s ago: executing program 7 (id=4654):
r0 = socket(0xa, 0x2, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
r1 = socket(0x2, 0x1, 0x0)
bind$auto(0x3, &(0x7f0000000040), 0x6a)
sendmmsg$auto(r1, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x2, 0xb}, 0x800009}, 0x5, 0x20000000)
recvmmsg$auto(0x3, 0x0, 0x10000, 0x6, 0x0)
sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, 0x0, 0x8004)
connect$auto(0x3, &(0x7f0000000140), 0x55)
sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x400c000)
bpf$auto(0x0, 0x0, 0xfbf)
r2 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000380)='/proc/tty/drivers\x00', 0x2000, 0x0)
read$auto(r2, &(0x7f0000000000)='/proc/scsi/sg/devices\x00', 0xc9e3)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x89b0, &(0x7f0000000140)={'vlan0\x00'})
shutdown$auto(0x200000003, 0x2)
mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000)
write$auto(0x3, 0x0, 0x296)
sendmsg$auto_NLBL_MGMT_C_LISTDEF(r1, 0x0, 0x20048800)
select$auto(0x1000009, 0x0, &(0x7f0000000100)={[0xa, 0x200, 0x80000000000000b, 0xc, 0x9, 0xf4, 0x6, 0x1, 0x40009, 0x2000000000003, 0x4, 0x6, 0x95, 0x10008, 0x8, 0x6]}, 0x0, 0x0)
pipe2$auto(&(0x7f0000000000)=r0, 0x4)
unshare$auto(0x40000080)
socket(0x1e, 0x1, 0x0)
setsockopt$auto(0x3, 0x6, 0x100000000, 0xfffffffffffffffc, 0xa)
mmap$auto(0x2, 0x400005, 0xdf, 0x9b70, 0x4, 0x8000)
io_uring_setup$auto(0x1, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_nlctrl(0x0, 0xffffffffffffffff)
sendmsg$auto_CTRL_CMD_GETPOLICY(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x4040015}, 0x48000)
close_range$auto(r3, 0x8, 0x0)
socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0)

13.451340802s ago: executing program 7 (id=4665):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
openat$auto_bm_entry_operations_binfmt_misc(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/fs/binfmt_misc/syz1\x00', 0x90400, 0x0)
r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000480), 0xffffffffffffffff)
sendmsg$auto_NL80211_CMD_VENDOR(r0, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="2398baea823a6f07db2567008efd14a6c99700000800010000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x20008000}, 0x40480d4)
r2 = openat$auto_btrfs_ctl_fops_super(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0)
socket(0x10, 0x2, 0x0)
sendmsg$auto_NETDEV_CMD_QUEUE_GET(0xffffffffffffffff, &(0x7f0000003040)={0x0, 0x0, &(0x7f0000003000)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYRES8, @ANYRES32], 0x1c}, 0x1, 0x0, 0x0, 0x20040004}, 0x20008810)
acct$auto(&(0x7f00000001c0)='/sys/bus/hid/drivers/zydacron/bind\x00')
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="18"], 0x1ac}}, 0x40000)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0)
ioctl$auto_BTRFS_IOC_DEVICES_READY(r2, 0x90009427, &(0x7f0000000c00)={0x8, "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"})

13.134182215s ago: executing program 7 (id=4666):
socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000)
mprotect$auto(0x1ffff000, 0x8000000000000001, 0xd)
close_range$auto(0x0, 0xffffffffffffffff, 0x4000000000002)
fanotify_init$auto(0x5, 0x800)
pipe2$auto(0x0, 0x80)
socket(0xa, 0x1, 0x0)
socket(0x25, 0x1, 0x0)
syz_genetlink_get_family_id$auto_ovs_datapath(0x0, 0xffffffffffffffff)
r0 = socket(0x10, 0x2, 0x0)
read$auto(0x3, 0x0, 0xf34)
recvmmsg$auto(r0, 0x0, 0xa, 0x10, 0x0)

12.084477013s ago: executing program 7 (id=4674):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
kexec_load$auto(0x100, 0x1, &(0x7f0000000080)={@buf=0x0, 0x2, 0x3e0000000000, 0x3000}, 0x4)
r1 = syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000ac0), 0xffffffffffffffff)
sendmsg$auto_OVS_FLOW_CMD_SET(r0, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5fe53eeaa57d46702bc8a974b60000", @ANYRES16=r1, @ANYBLOB="010029bd7000ffdbdf2504000000040001800400028005000900b000000004000800"], 0x28}, 0x1, 0x0, 0x0, 0x14}, 0x4000)

11.900022768s ago: executing program 7 (id=4676):
mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x402, 0x300000000000) (async)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) (async)
close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) (async)
memfd_create$auto(0x0, 0xa) (async, rerun: 64)
fcntl$auto(0xff80000000000000, 0x409, 0x3f) (async, rerun: 64)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), r0) (async)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'wlan0\x00', <r2=>0x0})
sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="2f212dbd7000fcdbdf252100000008000300", @ANYRES32=r2, @ANYBLOB="08009e00", @ANYRESDEC=r2], 0x24}}, 0x4000000) (async)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32)
ppoll$auto(&(0x7f0000000200)={r0, 0xf, 0x6}, 0x2b2, &(0x7f0000000240)={0x216f7ed4, 0x4}, &(0x7f0000000300)={0x7f}, 0x8) (async, rerun: 32)
r4 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), r0) (async)
r5 = socket(0x29, 0x5, 0x6)
r6 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32)
r7 = socket(0x10, 0x2, 0xf) (rerun: 32)
bpf$auto(0x0, &(0x7f0000000080)=@bpf_attr_4={0x1e, r7, 0xffffffff}, 0xd)
mmap$auto(0x0, 0xa, 0xdb, 0x9b72, 0x5, 0x8000)
bpf$auto(0x1, &(0x7f0000000080)=@bpf_attr_3={0x5, 0x0, 0x702955be, 0x5c, 0x4, 0x9, 0x80, 0xe4, 0xfffff800, "0566c8ee7c78a925488276d7697a12bd", 0x0, 0x2, r6, 0x7, 0x9, 0x4, 0x7, 0x10001, 0x0, 0x8001, @attach_prog_fd=r7, 0x7e, 0x4, 0x1, 0x5, 0x3}, 0x5) (async)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000280)={'wlan1\x00'}) (async)
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) (async)
io_uring_setup$auto(0x1, 0x0) (async, rerun: 32)
futex$auto(0x0, 0x6, 0x8, 0x0, 0x0, 0xffffffd6) (async, rerun: 32)
mmap$auto(0x0, 0x8, 0x1000000004, 0x9b72, 0x2, 0x8000)
mprotect$auto(0x6b, 0xbc, 0x8001) (async)
tkill$auto(0x1, 0x7) (async)
sendmsg$auto_NL80211_CMD_SET_HW_TIMESTAMP(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYBLOB="ec000000", @ANYRES16=r4, @ANYBLOB="010027bd7000fddbdf2599000000cf001f0085878cd6edcd0d058362f199ce9ba008a4069a388f4952e985d30c06d86b70159f31059a7aa6d39a4fefc8e7d72b82d644b3dc84b6ae58c1e79e1508bf3ec34a2431d46149db5e5660ed37ac3d90b63d9dd8989add27dc94399358d29be9d1375b35d5bd1f9e8999d99326093dc8af8c93a5a39584cc10fe77f2b15c4c01b4a29bbb859a9bfa69237b62bb30de3c765964596bcf5b97000df9fb484e8f460eac48a4a942efd3290109d47e9688d808adda470000000000000000000000000000dd307c1b45e3c799ddf9b500"], 0xe4}, 0x1, 0x0, 0x0, 0x804}, 0x4008000) (async, rerun: 64)
r8 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000140)='/dev/swradio11\x00', 0x180, 0x0) (rerun: 64)
mmap$auto(0xffffffff, 0x401, 0x3ff, 0x11, 0x0, 0x9)
read$auto_v4l2_fops_v4l2_dev(r8, &(0x7f0000000000)=""/194, 0xc2)

10.661330019s ago: executing program 7 (id=4683):
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
landlock_create_ruleset$auto(&(0x7f0000000000)={0xdaa0, 0x1, 0x9}, 0x9, 0x0)
getcwd$auto(0x0, 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x0, 0x4, 0xb16e, 0x40eb2, 0x402, 0x300000000000)
set_mempolicy$auto(0x80000002, &(0x7f00000000c0)=0x6, 0x4000007)
move_pages$auto(0x0, 0xf54, 0x0, 0x0, 0x0, 0x8000000000000000)
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
socket(0x21, 0x2, 0x2)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0xa, 0x801, 0x84)
setsockopt$auto(0x3, 0x10000000084, 0x85, 0x0, 0x90)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nbd4\x00', 0x1a9382, 0x0)
ioctl$auto(0x3, 0x40081271, 0x7fffffffffffffff)
r2 = syz_genetlink_get_family_id$auto_ovs_vport(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$auto_OVS_VPORT_CMD_NEW(r1, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000001180)={&(0x7f0000000140)={0x38, r2, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@OVS_VPORT_ATTR_NETNSID={0x8, 0x9, 0x4}, @OVS_VPORT_ATTR_TYPE={0x8, 0x2, 0x4}, @OVS_VPORT_ATTR_NAME={0x6, 0x3, '*\x00'}, @OVS_VPORT_ATTR_UPCALL_PID={0x4}, @OVS_VPORT_ATTR_PORT_NO={0x8, 0x1, 0x7}]}, 0x38}, 0x1, 0x0, 0x0, 0x4040010}, 0x800)
landlock_restrict_self$auto(r0, 0x0)
link$auto(0x0, &(0x7f0000000200)='./file1\x00')
socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
r3 = socket(0xa, 0x5, 0x0)
getsockopt$auto(r3, 0x84, 0x9, 0x0, &(0x7f0000000080)=0x9c8)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
socket$nl_generic(0x10, 0x3, 0x10)
read$auto(0x3, 0x0, 0x7)
setsockopt$auto(0x3, 0x1, 0x20, 0x0, 0x9)

10.529553951s ago: executing program 37 (id=4683):
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
landlock_create_ruleset$auto(&(0x7f0000000000)={0xdaa0, 0x1, 0x9}, 0x9, 0x0)
getcwd$auto(0x0, 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x0, 0x4, 0xb16e, 0x40eb2, 0x402, 0x300000000000)
set_mempolicy$auto(0x80000002, &(0x7f00000000c0)=0x6, 0x4000007)
move_pages$auto(0x0, 0xf54, 0x0, 0x0, 0x0, 0x8000000000000000)
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
socket(0x21, 0x2, 0x2)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0xa, 0x801, 0x84)
setsockopt$auto(0x3, 0x10000000084, 0x85, 0x0, 0x90)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nbd4\x00', 0x1a9382, 0x0)
ioctl$auto(0x3, 0x40081271, 0x7fffffffffffffff)
r2 = syz_genetlink_get_family_id$auto_ovs_vport(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$auto_OVS_VPORT_CMD_NEW(r1, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000001180)={&(0x7f0000000140)={0x38, r2, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@OVS_VPORT_ATTR_NETNSID={0x8, 0x9, 0x4}, @OVS_VPORT_ATTR_TYPE={0x8, 0x2, 0x4}, @OVS_VPORT_ATTR_NAME={0x6, 0x3, '*\x00'}, @OVS_VPORT_ATTR_UPCALL_PID={0x4}, @OVS_VPORT_ATTR_PORT_NO={0x8, 0x1, 0x7}]}, 0x38}, 0x1, 0x0, 0x0, 0x4040010}, 0x800)
landlock_restrict_self$auto(r0, 0x0)
link$auto(0x0, &(0x7f0000000200)='./file1\x00')
socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
r3 = socket(0xa, 0x5, 0x0)
getsockopt$auto(r3, 0x84, 0x9, 0x0, &(0x7f0000000080)=0x9c8)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
socket$nl_generic(0x10, 0x3, 0x10)
read$auto(0x3, 0x0, 0x7)
setsockopt$auto(0x3, 0x1, 0x20, 0x0, 0x9)

4.484885852s ago: executing program 3 (id=4703):
close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002)
fanotify_init$auto(0xc00, 0x2000000000002)
open(&(0x7f0000000000)='./file1\x00', 0x1652c2, 0xe1d2b27bdc14aa98)
openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x40342, 0x22)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r0 = socket(0x2, 0x3, 0xa)
socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0)
sysfs$auto(0x9, 0x7, 0x0)
socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0)
setsockopt$auto(r0, 0x1, 0x3e, 0x0, 0x9)
mknod$auto(&(0x7f0000000040)='\xfd\x90\x8f2\x14\x92\x00\xbf\xdf\xcf\x9a\xae}\xd9\xf95\xc5gV\x82\f\xe5h\xfe\x83\xe4\xbe\x8c\x1f\xa5\xf1_T\xde\xf7\xd4\x83D\x9eXS\xd6\x90T\xc1v\xad#\xc4q\x8b\xed2\xadW:0\xef\x9c.=\xba\x0fy\x8f\xcd\xd6\xde\xa9i\xec\xe8\xca\x9f\xf3\x82b\xa2y\xa87J\xfc \xc5\xd8\x80\xba\xaaV\x8f{\x1f\x1b\xb0\n\x97\\\xa7\xe3\xdf\xc29-*;#r\xc8\xd1\x14RcF\x87\xe4\x1c\x1fGL\xa5\x19\x90\xd6\x8d*\xe6\b(\x1a\xea\x95\xdc\xa6)5\xae&yAl\x1e\xe3j Lp\x91\r\xed%\xafZ\xf8w\xf2}\xcdGS\xce\xb9\xdck\x86\x00.6\xe6{\xc1\x00\x1bW5\x81\xda!\xcb.O\xa9\xf3\xa7\x88+\xb9\xf3\x9a7\xa4\xe6)<\xa79\xa4\x87\\\xb4\xbf\v\x03\x87\xac\x87r\x02\x05\xdb\xe4\xde,V\xb6G\xba.WR\xe2<~\xdd\xb2\xe53hj_;\xa5qm\x92\xc7P\xc9.\x82w8\x1f\xfcX\xe4\x14\xc72cC\xd3\x00'/263, 0x1, 0x4)
lstat$auto(&(0x7f0000000500)='\xfd\x90\x8f2\x14\x92\x00\xbf\xdf\xcf\x9a\xae}\xd9\xf95\xc5gV\x82\f\xe5h\xfe\x83\xe4\xbe\x8c\x1f\xa5\xf1_T\xde\xf7\xd4\x83D\x9eXS\xd6\x90T\xc1v\xad#\xc4q\x8b\xed2\xadW:0\xef\x9c.=\xba\x0fy\x8f\xcd\xd6\xde\xa9i\xec\xe8\xca\x9f\xf3\x82b\xa2y\xa87J\xfc \xc5\xd8\x80\xba\xaaV\x8f{\x1f\x1b\xb0\n\x97\\\xa7\xe3\xdf\xc29-*;#r\xc8\xd1\x14RcF\x87\xe4\x1c\x1fGL\xa5\x19\x90\xd6\x8d*\xe6\b(\x1a\xea\x95\xdc\xa6)5\xae&yAl\x1e\xe3j Lp\x91\r\xed%\xafZ\xf8w\xf2}\xcdGS\xce\xb9\xdck\x86\x00.6\xe6{\xc1\x00\x1bW5\x81\xda!\xcb.O\xa9\xf3\xa7\x88+\xb9\xf3\x9a7\xa4\xe6)<\xa79\xa4\x87\\\xb4\xbf\v\x03\x87\xac\x87r\x02\x05\xdb\xe4\xde,V\xb6G\xba.WR\xe2<~\xdd\xb2\xe53hj_;\xa5qm\x92\xc7P\xc9.\x82w8\x1f\xfcX\xe4\x14\xc72cC\xd3\x00', 0x0)
sendmmsg$auto(r0, &(0x7f00000006c0)={{&(0x7f0000000000)=[0x20000000002], 0x40000401, 0x0, 0x4, 0x0, 0x6, 0x2c147584}, 0x5}, 0x4000003, 0x20c2)

4.209123234s ago: executing program 3 (id=4704):
io_destroy$auto(0x5)
socket$nl_generic(0x10, 0x3, 0x10)
io_uring_register$auto(0x7ff, 0x80000000, 0x0, 0x2)
socket(0xa, 0x2, 0x0)
getsockopt$auto(0x6, 0x84, 0xa, 0x0, &(0x7f0000000000)=0x10004)
close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002)
fanotify_init$auto(0x1f53, 0x2000000000002)
socket$nl_generic(0x10, 0x3, 0x10)
close_range$auto(0x2, 0x8, 0x0)
socket(0x10, 0x2, 0x15)
mmap$auto(0x1, 0xd82, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
prctl$auto(0x23, 0xb, 0x7ffffffeefff, 0x0, 0x0)

4.052452216s ago: executing program 3 (id=4705):
r0 = openat$auto_proc_timens_offsets_operations_base(0xffffffffffffff9c, &(0x7f0000000140), 0x40, 0x0)
ioctl$auto_UDMABUF_CREATE_LIST(0xffffffffffffffff, 0x40087543, &(0x7f0000000180)={0x7fff, 0xfffffffb, [{0xffffffffffffffff, 0x0, 0x9, 0x9}, {0xffffffffffffffff, 0x0, 0x1, 0x6}, {r0, 0x0, 0x6, 0x1}]})
mmap$auto(0x4000000, 0x8, 0x1000000004, 0x9b72, 0x2, 0x8000)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$auto_tcp_metrics(&(0x7f0000000ac0), 0xffffffffffffffff)
getpeername$auto(r1, &(0x7f00000000c0)=@phonet={0x23, 0x2, 0x9}, &(0x7f0000000100)=0xb)
sendmsg$auto_TCP_METRICS_CMD_GET(r1, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000b00)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="0200000000faff00df2501000000"], 0x14}, 0x1, 0x0, 0x0, 0x2400c884}, 0x0)
close_range$auto(0x2, 0x8, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmmsg$auto(r3, &(0x7f0000000000)={{0x0, 0x8, 0x0, 0xe, &(0x7f0000000040)=[0x8e, 0x100000001, 0x2], 0x8e, 0x40}, 0x8}, 0x1, 0x8)
io_uring_setup$auto(0x8, &(0x7f0000000040)={0xfffffffa, 0x1d73, 0x6, 0x0, 0x8, 0xa, r3, [0x1, 0x5], {0x8, 0x7ff, 0x1, 0x6, 0x7, 0x0, 0x7, 0x4, 0x7}, {0xffffcd36, 0x1ff, 0x1, 0x2, 0xfffffffb, 0x2592, 0x6, 0x4, 0x7}})
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x28, 0x3, 0xd299)
socket(0x10, 0x3, 0x6)
r4 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ptyt9\x00', 0x189000, 0x0)
openat$auto_proc_timens_offsets_operations_base(0xffffffffffffff9c, &(0x7f0000002440), 0x80c02, 0x0)
openat$auto_tracing_iter_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/trace_options\x00', 0x2, 0x0)
socket(0x2, 0x1, 0x0)
socket(0x1d, 0x2, 0x2)
mmap$auto(0x0, 0x9, 0xdf, 0x1000000eb1, 0x401, 0x8000)
r5 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS0\x00', 0x48140, 0x0)
ioctl$auto(r5, 0x542e, 0x6)
socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0)
ioctl$auto_TIOCSETD2(r4, 0x5423, 0x0)
close_range$auto(0x2, 0x8, 0x0)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000)
getrandom$auto(0x0, 0x6000000, 0x3)

2.910284303s ago: executing program 3 (id=4706):
r0 = socket(0xa, 0x4, 0x0)
mmap$auto(0xb, 0x20009, 0x4000000000df, 0xeb0, 0x401, 0x7ffe)
mmap$auto(0x0, 0x400008, 0xdf, 0x19, 0x2, 0x8000)
sendmsg$auto_NFC_CMD_VENDOR(r0, 0x0, 0x0)
sendmsg$auto_ILA_CMD_ADD(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20044111}, 0x4000)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
munmap$auto(0x20041000, 0xd)
connect$auto(0x3, 0x0, 0x54)
mincore$auto(0x1000, 0x8, 0x0)
mmap$auto(0x0, 0x20009, 0x5, 0xeb2, 0x8, 0x1008000)
r1 = socket(0xa, 0x3, 0x3a)
setsockopt$auto(0x400000000000003, 0x29, 0xc8, 0x0, 0x567)
setsockopt$auto(0x400000000000003, 0x29, 0xcc, 0x0, 0x567)
close_range$auto(0x2, 0x8000, 0x0)
sigaltstack$auto(0x0, 0x0)
sendmsg$auto_NL80211_CMD_GET_FTM_RESPONDER_STATS(r1, 0x0, 0x121fb38ccc9bc40f)
socket(0xa, 0x801, 0x84)
mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000)
madvise$auto(0x0, 0x80000001, 0x8)
gettid()
clone$auto(0x200000000000005, 0xf6, &(0x7f0000000000)=0x92, &(0x7f0000000040)=0x4, 0xd)
mprotect$auto(0x1ffff000, 0x8000000000000001, 0xd)
sendmsg$auto_NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x14, 0x0, 0x413, 0x70bd2b, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4804}, 0x80)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket(0x2, 0x6, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'pim6reg1\x00', <r4=>0x0})
sendmsg$auto_ETHTOOL_MSG_CABLE_TEST_TDR_ACT(r2, &(0x7f0000021740)={0x0, 0x0, &(0x7f0000021700)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r4], 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x4004804)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0xa, 0x801, 0x84)
socket$nl_generic(0x10, 0x3, 0x10)

1.767248662s ago: executing program 8 (id=4711):
r0 = socket(0xb, 0x1, 0x7)
sendmsg$auto_IEEE802154_LIST_PHY(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000380)={0xffffffffffffffba, 0x0, 0x4, 0x70bd28, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x800)

1.752147457s ago: executing program 3 (id=4712):
r0 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff)
sendmsg$auto_OVS_PACKET_CMD_EXECUTE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRES16=r0], 0x38}, 0x1, 0x0, 0x0, 0x4004040}, 0xc800)
writev$auto(0xca, &(0x7f0000000080)={&(0x7f00000000c0)=[0x404], 0x1}, 0x7e)

1.569490046s ago: executing program 8 (id=4714):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000a80), 0xffffffffffffffff)
sendmsg$auto_HWSIM_CMD_NEW_RADIO(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000180)={0x14, r1, 0x201, 0x70bd25, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x11000000, 0x8000}, 0x4c014)

1.399657929s ago: executing program 3 (id=4715):
socket(0xa, 0x3, 0x3a)
setsockopt$auto(0x400000000000003, 0x29, 0xc8, 0x0, 0x567)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
setsockopt$auto(0x400000000000003, 0x29, 0xd1, 0x0, 0x4)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
futex_wait$auto(0x0, 0x0, 0x7f, 0x2, 0x0, 0x1)
futex$auto(0x0, 0x3, 0x8243, 0x0, 0x0, 0x4)
socket(0xa, 0x3, 0x5)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
mmap$auto(0x0, 0x200004, 0x4000000000df, 0x40eb2, 0x402, 0x300000000000)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000440)='/dev/v4l-subdev0\x00', 0x290140, 0x0)
close_range$auto(0x2, 0x8, 0x0)
setregid$auto(0x81, 0x5)
close_range$auto(0x0, 0xffffffffffffffff, 0x4000000000002)
fanotify_init$auto(0x5, 0x800)
pipe2$auto(0x0, 0x80)
syz_clone3(&(0x7f0000000280)={0x55001000, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0), {0x16}, &(0x7f00000001c0)=""/166, 0xa6, &(0x7f0000000100)=""/13, &(0x7f0000000140)=[0x0, 0xffffffffffffffff], 0x2}, 0x58)

1.339805211s ago: executing program 8 (id=4716):
close_range$auto(0x2, 0x8, 0x0)
socket(0x10, 0x2, 0x4)
socket(0x10, 0x3, 0x6)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket(0x10, 0x2, 0x4)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
statmount$auto(&(0x7f0000000000)={0x8, 0x2, 0x501, 0x5, 0x8}, &(0x7f0000000480)={0x7, 0x400, 0x6, 0x7, 0xc, 0x6, 0x10000, 0x10, 0x2, 0x8, 0x27, 0x8, 0x2, 0x9af1, 0xff, 0x8, 0x9, 0x4, 0x10, 0x4, 0x5, 0x44ab, 0x10000, 0x9, 0x3ff, 0x2, [0x4aad, 0x6, 0x99, 0x2, 0xa, 0x80, 0x1, 0x0, 0xffffffffffff0000, 0x76d6, 0x3, 0x3f83bc6f, 0x0, 0x7, 0x9, 0x6, 0x1, 0x7, 0xffffffff, 0x3, 0x4, 0xffffffff, 0x8000, 0x0, 0x7, 0x4, 0x3, 0x10000000, 0xffff, 0x7, 0x7fffffff, 0x10001, 0x7, 0x5, 0x7, 0x1, 0x2ba, 0x6, 0x0, 0x81, 0x5, 0x30, 0x8, 0x6, 0xeab1, 0xbe], "5378678f8884e03ba062d8985e9631ab7e960218c045f52d389b12696ef92583657585ec3996661af03b92f8972b6e5b4be0b6b031cf59144cd942ece79560f93c544b6d3b0d3ab903adbbfb2a1b2c8df90e7b78ffefec0cee4eabd285c8eaa9c3ba8873fa8cb1c97be81b2e8c82026e559032184ad20f82609a8fee512e0df72193a54b2b27599249443cd2901fa9d86c1f7ad27b88f68ed632fdadf47981a71db2591b7155304b361e4c35e656b5c6d46a09e7e52d7cc7d5f006b0fe5704acae33"}, 0x7fffffffffffffff, 0x9)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
eventfd$auto(0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0xa, 0x3, 0x6)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x2, 0x801, 0x106)
eventfd$auto(0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket(0x10, 0x3, 0x6)
sendmsg$auto_ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="f0020000", @ANYRES16, @ANYBLOB="01002dbd7000fedbdf2505000000f10203800800c000002e00"/38, @ANYRES32, @ANYBLOB="d152e64e22695352dd73864415aa8a78c65e6ab752fb4d469a47a092ae7d5061cdd9690cac4138553ecfbb1b32dd7c33b14cc842bc1e2a5da4203e64ceaa9db5223aa655b6313c011b3e73a75f1aa1f7b2ea43344b15bd494886e355cf6d92c8fe670a42bc677830013e9c4aa4fa30c3e6630bf0ed13206d5a18f6813c6fb03466112aedf5d67bb5b99fe96a6dcd279916b0bce029925b63c48d41ca8a76e46c6014100005800c00c50003000000000000000c02368008027a8087010c800800e800", @ANYRES32=r0, @ANYBLOB="0800fb00", @ANYRES32=r1], 0x2f0}, 0x1, 0x0, 0x0, 0x40000}, 0x50)

1.090480368s ago: executing program 8 (id=4717):
statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x1ff, 0x7, 0x5, 0x4909b6f8, 0x1ffdd, 0x7, 0x3, 0x2, 0x9, 0x3, 0x6, 0x4, 0xb4, 0x9, 0x6, 0x10003, 0x4080, 0x4, 0x0, 0x7, 0x2000, 0x200, 0x8001, 0x84, [0x0, 0x0, 0x0, 0x50100000000000, 0x0, 0x1000002000, 0x0, 0xa, 0x70624ce7, 0xefde, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x7, 0x0, 0xfffffffffffffffd, 0xfffffffffffffffd, 0x1, 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x400000000005b4, 0xc, 0x0, 0x0, 0x0, 0x6, 0xffffffffffffffff, 0x88e, 0x8000000000008, 0xfffffffffffffffc, 0x9, 0xa38, 0x0, 0x6, 0xfffffffffffffffc, 0x2, 0x3, 0x4]}, 0x1fe, 0xd)
r0 = socket(0x10, 0x2, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1e00df45"], 0x1ac}}, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000)
recvmmsg$auto(r0, &(0x7f0000000100)={{0x0, 0x4, &(0x7f0000000080)={&(0x7f0000000000), 0xcb}, 0x3, 0x0, 0x80000000, 0x6}, 0x9}, 0x7, 0x6, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket(0x2, 0x6, 0x0)
sendmsg$auto_TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000003740)={&(0x7f0000000000)=ANY=[@ANYBLOB="b1000000", @ANYRES16, @ANYBLOB="01002dbd7000fddbdf25030000000c000180080001"], 0x20}, 0x1, 0x0, 0x0, 0x41}, 0x40080)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'bond_slave_1\x00', <r3=>0x0})
sendmsg$auto_ETHTOOL_MSG_CABLE_TEST_TDR_ACT(r1, &(0x7f0000021740)={0x0, 0x0, &(0x7f0000021700)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3], 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x4004804)

721.6817ms ago: executing program 5 (id=4718):
pwrite64$auto(0xc8, &(0x7f0000000000)='\vX\xb5n\x91p\xe6\x1eRNM\x99\x86\xdde\x1cJ\x99\x00\x00\x00\x00\x00\x00\xfd\xfd\xd3\xd3\x1d\xf8\xbe\x01\x00\x00\x00\'\x03\x00\x03\x9f\x1e\xf9\xa4*\x01\x00\x00\x00^B\xb8\xe4j\t3\xe4\x90\xcc\x9d\xc5\x0fo\x84\xf4\x89\v\xea\x1b\x95\xafQ;CL\"\x01@\x00\x00\x00\x00\f\x00\xc0\x13\xc8\xe2\xae\xf5\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2E\xd8?\'\x8d\x81\x81O*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00,8\x93\xba\x88\x93\x9d\xb6\x1a\x7f\xc0%\xb0\x83ROJ+\x02\x9b#)\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd6eWj\xdc\xac\x88\xf0\xa0\x99\xb0R\xb4J}\xa8\xa1\x84]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\xfb\xba\xb2.$\'\x1e\x82\x00\xf1\x12lwU&[\xde?\xde8\xf7\xc1\xa6\xf2\xc1\"\xact\xee\xc9\x00\x00\xff\xff\x00'/250, 0xfdf3, 0x39)

620.232835ms ago: executing program 5 (id=4719):
r0 = syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff)
r1 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/security/tomoyo/exception_policy\x00', 0x2, 0x0)
read$auto_tomoyo_operations_securityfs_if(r1, 0x0, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_OVS_FLOW_CMD_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)={0x30, r0, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@OVS_FLOW_ATTR_PROBE={0x4}, @OVS_FLOW_ATTR_KEY={0x18, 0x1, 0x0, 0x1, [@typed={0x14, 0x19, 0x0, 0x0, @ipv6=@dev={0xfe, 0x80, '\x00', 0xf}}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x40010}, 0x800)

579.276984ms ago: executing program 8 (id=4720):
r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nbd12\x00', 0x8001, 0x0)
mmap$auto(0x0, 0x8, 0xdf, 0x209b72, 0x4e477f5a, 0x8000)
ioctl$auto_def_blk_fops_fs(r0, 0x100000127e, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$auto_ovs_vport(&(0x7f0000004680), 0xffffffffffffffff)
sendmsg$auto_OVS_VPORT_CMD_DEL(r1, &(0x7f00000049c0)={0x0, 0x0, &(0x7f0000004980)={&(0x7f00000046c0)=ANY=[@ANYBLOB="2000ceec", @ANYRES16=r2, @ANYBLOB="010026bd7000fedbdf25020000000c00048008000a804ffb5eeb"], 0x20}, 0x1, 0x0, 0x0, 0x40040801}, 0x4000)

525.765097ms ago: executing program 5 (id=4721):
io_destroy$auto(0x5)
socket$nl_generic(0x10, 0x3, 0x10)
io_uring_register$auto(0x7ff, 0x80000000, 0x0, 0x2)
socket(0xa, 0x2, 0x0)
getsockopt$auto(0x6, 0x84, 0xa, 0x0, &(0x7f0000000000)=0x10004)
close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002)
fanotify_init$auto(0x1f53, 0x2000000000002)
socket$nl_generic(0x10, 0x3, 0x10)
close_range$auto(0x2, 0x8, 0x0)
socket(0x10, 0x2, 0x15)
mmap$auto(0x1, 0xd82, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
mremap$auto(0x0, 0xffffffffffffffff, 0x401, 0x3, 0x7fffffffb000)
prctl$auto(0x23, 0xb, 0x7ffffffeefff, 0x0, 0x0)

465.75278ms ago: executing program 5 (id=4722):
r0 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff)
sendmsg$auto_OVS_PACKET_CMD_EXECUTE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRES16=r0], 0x38}, 0x1, 0x0, 0x0, 0x4004040}, 0xc800)
writev$auto(0xca, &(0x7f0000000080)={&(0x7f00000000c0)=[0x404], 0x1}, 0x7e)

283.709369ms ago: executing program 5 (id=4723):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000a80), 0xffffffffffffffff)
sendmsg$auto_HWSIM_CMD_NEW_RADIO(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000180)={0x14, r1, 0x201, 0x70bd25, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x20000000, 0x8000}, 0x4c014)

277.340551ms ago: executing program 8 (id=4724):
fanotify_init$auto(0x65, 0x2)
socket(0x27, 0xa, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x80000000000000a, 0x2, 0x0)
r0 = socket(0xa, 0x2, 0x88)
bpf$auto(0x0, &(0x7f0000000000)=@link_update={r0, @new_prog_fd=0x4, 0x4, @old_map_fd=0x3ff}, 0xa3)
bpf$auto(0x0, &(0x7f00000001c0)=@task_fd_query={0x9, 0x21eb, 0x7ff, 0x6, 0xa, 0x1000009, 0x5f, 0x0, 0x3}, 0x6f3)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0xa, 0x3, 0x100)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
eventfd$auto(0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0xa, 0x3, 0x6)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0)
sendmmsg$auto(0x3, &(0x7f0000000000)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0x1}, 0x5, 0x0, 0x1, 0x697b}, 0xed7138c}, 0x2, 0x9)
recvmmsg$auto(0x4, 0x0, 0x7, 0xe, 0x0)
close_range$auto(0x2, 0x8000, 0x0)
socket(0xa, 0x2, 0x88)
r1 = socket(0x10, 0x2, 0xc)
sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="18000000", @ANYRES8=r1, @ANYBLOB='\nG'], 0x18}, 0x1, 0x0, 0x0, 0x64048001}, 0x80)
mprotect$auto(0x5, 0x8000000000000003, 0xa)

0s ago: executing program 5 (id=4725):
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
r0 = socket(0x10, 0x2, 0x0)
sendmsg$auto_NETDEV_CMD_QUEUE_GET(0xffffffffffffffff, &(0x7f0000003040)={0x0, 0x0, &(0x7f0000003000)={&(0x7f0000000100)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="01002cbd7000fbdbdf250a000000080003000000000008000200", @ANYRES32=0x0, @ANYBLOB="66ac55d9aa85051f99d54c2bb7a14f59863ff19eb80f8f64f9551d66cf793873c56b2464421cac5c0912605742c5a05682eee7b046854d4a078f65a341195745b7b6687e19172dab365c24dc9cd8f0880b26d50c100464959356eb63d4fe3d25a4000153378ffb4203db1b56d1b8f738"], 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x20008810)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x20048890}, 0x2000c041)
bpf$auto(0x0, &(0x7f0000000000)=@bpf_attr_11={0x100000001, 0x4, 0x0, 0x4, 0x12faa280, 0xff, 0x1000}, 0x281)
writev$auto(0xca, &(0x7f0000000080)={&(0x7f0000000040)=[0x404], 0x1}, 0x7e)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="18"], 0x1ac}}, 0x40000)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
statx$auto(0x2, 0x0, 0x1000, 0xbdfa, 0x0)
r1 = socket(0x2b, 0x1, 0x1)
setsockopt$auto(r1, 0x29, 0x1b, 0x0, 0x201)
io_uring_setup$auto(0x85, 0x0)
mbind$auto(0x0, 0x100000004, 0x100000000, 0x0, 0x20000000000006, 0x2)
r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000280), r0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'sit0\x00', <r3=>0x0})
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'dvmrp0\x00', <r4=>0x0})
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'wg1\x00', <r5=>0x0})
sendmsg$auto_NL80211_CMD_DEL_PMK(r0, &(0x7f0000000880)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20020000}, 0xc, &(0x7f0000000840)={&(0x7f00000003c0)={0x450, r2, 0x300, 0x70bd2c, 0x25dfdbfc, {}, [@NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x2}, @NL80211_ATTR_COLOR_CHANGE_ELEMS={0x68, 0x131, 0x0, 0x1, [@NL80211_ATTR_VIF_RADIO_MASK={0x8, 0x14d, 0x2}, @NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x2}, @NL80211_ATTR_MBSSID_CONFIG={0x4c, 0x132, 0x0, 0x1, [@NL80211_MBSSID_CONFIG_ATTR_MAX_EMA_PROFILE_PERIODICITY={0x5, 0x2, 0x1}, @NL80211_MBSSID_CONFIG_ATTR_EMA={0x4}, @NL80211_MBSSID_CONFIG_ATTR_MAX_EMA_PROFILE_PERIODICITY={0x5, 0x2, 0x6}, @NL80211_MBSSID_CONFIG_ATTR_TX_IFINDEX={0x8, 0x4, r3}, @NL80211_MBSSID_CONFIG_ATTR_TX_IFINDEX={0x8, 0x4, r4}, @NL80211_MBSSID_CONFIG_ATTR_MAX_EMA_PROFILE_PERIODICITY={0x5, 0x2, 0x1}, @NL80211_MBSSID_CONFIG_ATTR_MAX_EMA_PROFILE_PERIODICITY={0x5, 0x2, 0x3}, @NL80211_MBSSID_CONFIG_ATTR_MAX_INTERFACES={0x5, 0x1, 0xd}, @NL80211_MBSSID_CONFIG_ATTR_TX_IFINDEX={0x8, 0x4, r5}, @NL80211_MBSSID_CONFIG_ATTR_EMA={0x4}]}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0xee9b}]}, @NL80211_ATTR_IE_ASSOC_RESP={0x3c3, 0x80, "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"}, @NL80211_ATTR_MDID={0x6, 0xb1, 0x8ae1}]}, 0x450}, 0x1, 0x0, 0x0, 0x1}, 0x80)
r6 = openat$auto_proc_auxv_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/auxv\x00', 0x800, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$auto_ETHTOOL_MSG_DEBUG_SET(r7, &(0x7f0000002e40)={0x0, 0x0, &(0x7f0000002e00)={&(0x7f0000000240)={0x2c, r8, 0x1, 0x70bd2a, 0x25dfdbff, {}, [@ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8050}, 0x4000080)
io_uring_setup$auto(0xf, &(0x7f0000000040)={0xb6, 0xfffffffa, 0x40, 0x0, 0xab0, 0x9, r6, [0x9, 0xa9, 0x4], {0xfffffff7, 0x8, 0x5f6, 0x1, 0x7, 0x3, 0x0, 0x101, 0x4}, {0xfff, 0xf5, 0x8, 0x0, 0xa2f, 0x1, 0xffff, 0x7, 0x3}})
mincore$auto(0x0, 0x10000, 0x0)

kernel console output (not intermixed with test programs):

1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  535.508590][T13362] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  537.089206][T14757] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2487'.
[  537.116854][T14765] .': entered promiscuous mode
[  537.326536][T14770] netlink: 338 bytes leftover after parsing attributes in process `syz.1.2493'.
[  537.357220][T14770] netlink: 338 bytes leftover after parsing attributes in process `syz.1.2493'.
[  537.838834][T14779] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2496'.
[  538.161567][ T5840] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  538.171982][ T5840] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  538.180788][ T5840] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  538.188882][ T5840] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  538.197216][ T5840] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  538.204830][ T5840] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  538.759166][T14781] chnl_net:caif_netlink_parms(): no params data found
[  538.962608][T14781] bridge0: port 1(bridge_slave_0) entered blocking state
[  538.989722][T14781] bridge0: port 1(bridge_slave_0) entered disabled state
[  539.001397][T14781] bridge_slave_0: entered allmulticast mode
[  539.024179][T14781] bridge_slave_0: entered promiscuous mode
[  539.059344][T14781] bridge0: port 2(bridge_slave_1) entered blocking state
[  539.083408][T14781] bridge0: port 2(bridge_slave_1) entered disabled state
[  539.108113][T14781] bridge_slave_1: entered allmulticast mode
[  539.149137][T14781] bridge_slave_1: entered promiscuous mode
[  539.283128][T14781] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  539.300862][T14781] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  539.540238][T14781] team0: Port device team_slave_0 added
[  539.589018][T14781] team0: Port device team_slave_1 added
[  539.663127][T14781] batman_adv: batadv0: Adding interface: batadv_slave_0
[  539.675026][T14781] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  539.724176][T14781] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  539.757555][T14781] batman_adv: batadv0: Adding interface: batadv_slave_1
[  539.767328][T14781] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  539.811964][T14781] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  539.939315][T14781] hsr_slave_0: entered promiscuous mode
[  540.022562][T14781] hsr_slave_1: entered promiscuous mode
[  540.057993][T14781] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  540.065681][T14781] Cannot create hsr debugfs directory
[  540.293824][ T5840] Bluetooth: hci3: command tx timeout
[  540.711257][T14781] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  540.906767][T14781] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  541.244082][T14781] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  541.632372][T14781] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  542.188402][T14781] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  542.249361][T14781] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  542.313832][T14781] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  542.327810][T14781] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  542.374147][ T5840] Bluetooth: hci3: command tx timeout
[  542.719724][T14781] 8021q: adding VLAN 0 to HW filter on device bond0
[  542.748897][T14781] 8021q: adding VLAN 0 to HW filter on device team0
[  542.776213][T13365] bridge0: port 1(bridge_slave_0) entered blocking state
[  542.783494][T13365] bridge0: port 1(bridge_slave_0) entered forwarding state
[  542.851226][T13350] bridge0: port 2(bridge_slave_1) entered blocking state
[  542.858453][T13350] bridge0: port 2(bridge_slave_1) entered forwarding state
[  543.149944][T14781] 8021q: adding VLAN 0 to HW filter on device batadv0
[  543.189198][T14781] veth0_vlan: entered promiscuous mode
[  543.200266][T14781] veth1_vlan: entered promiscuous mode
[  543.231717][T14781] veth0_macvtap: entered promiscuous mode
[  543.241663][T14781] veth1_macvtap: entered promiscuous mode
[  543.257650][T14781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  543.268228][T14781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  543.278599][T14781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  543.289388][T14781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  543.301150][T14781] batman_adv: batadv0: Interface activated: batadv_slave_0
[  543.312696][T14781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  543.323347][T14781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  543.333486][T14781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  543.344114][T14781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  543.355171][T14781] batman_adv: batadv0: Interface activated: batadv_slave_1
[  543.391163][T14781] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  543.410760][T14781] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  543.422019][T14781] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  543.431418][T14781] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  543.536466][T13350] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  543.566123][T13350] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  543.617722][T13363] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  543.637947][T13363] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  544.448101][ T5840] Bluetooth: hci3: command tx timeout
[  544.666031][T14869] netlink: 342 bytes leftover after parsing attributes in process `syz.3.2516'.
[  545.105347][T14877] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2518'.
[  545.793986][T14902] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2524'.
[  546.074474][T14909] openvswitch: .': Dropping previously announced user features
[  546.266310][T14914] netlink: 338 bytes leftover after parsing attributes in process `syz.4.2528'.
[  546.294167][T14913] netlink: 338 bytes leftover after parsing attributes in process `syz.4.2528'.
[  546.523429][ T5840] Bluetooth: hci3: command tx timeout
[  546.642969][T14924] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2531'.
[  548.420742][T14935] can: request_module (can-proto-4) failed.
[  549.570607][T14953] nbd: must specify a device to reconfigure
[  550.269740][T14967] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2546'.
[  552.508781][T14995] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2554'.
[  552.529278][T14995] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2554'.
[  554.384185][T15020] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2559'.
[  555.083369][ T5144] Bluetooth: hci0: command 0x0406 tx timeout
[  557.337114][T15055] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2565'.
[  557.369368][T15055] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2565'.
[  557.886671][T15067] netlink: 342 bytes leftover after parsing attributes in process `syz.4.2570'.
[  558.059967][T15069] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2571'.
[  560.273055][T15082] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2582'.
[  562.418245][T15111] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2581'.
[  563.797210][T15130] openvswitch: .': Dropping previously announced user features
[  563.995500][T15133] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2587'.
[  564.398993][T15139] netlink: 338 bytes leftover after parsing attributes in process `syz.4.2589'.
[  564.464847][T15139] netlink: 338 bytes leftover after parsing attributes in process `syz.4.2589'.
[  565.623992][T15152] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2594'.
[  567.110387][T15173] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2601'.
[  572.238525][T15203] netlink: 2 bytes leftover after parsing attributes in process `syz.2.2608'.
[  572.285812][T15203] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2608'.
[  572.521611][T15212] block nbd0: not configured, cannot reconfigure
[  572.965858][T15219] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2612'.
[  574.215210][T15238] Process accounting resumed
[  575.801835][T15265] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2626'.
[  577.107496][T15281] netlink: 342 bytes leftover after parsing attributes in process `syz.1.2632'.
[  578.673128][T15305] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2639'.
[  578.863878][T15307] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2640'.
[  579.694788][T15316] .': entered promiscuous mode
[  580.195364][T15326] netlink: 338 bytes leftover after parsing attributes in process `syz.1.2645'.
[  580.205850][T15326] netlink: 338 bytes leftover after parsing attributes in process `syz.1.2645'.
[  581.056832][T15336] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2648'.
[  582.209637][T15351] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2653'.
[  582.771033][T15356] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2654'.
[  585.265606][T15384] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2665'.
[  587.332311][T14237] syz.3.2383 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0
[  587.647806][T15398] .': entered promiscuous mode
[  587.707537][T14237] CPU: 1 UID: 0 PID: 14237 Comm: syz.3.2383 Not tainted 6.13.0-rc2-syzkaller-00159-gf932fb9b4074 #0
[  587.718379][T14237] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024
[  587.728574][T14237] Call Trace:
[  587.731877][T14237]  <TASK>
[  587.734844][T14237]  dump_stack_lvl+0x16c/0x1f0
[  587.739564][T14237]  dump_header+0x101/0x900
[  587.744026][T14237]  oom_kill_process+0x270/0xa60
[  587.748922][T14237]  ? mem_cgroup_out_of_memory+0x8d/0x270
[  587.754599][T14237]  out_of_memory+0x351/0x1700
[  587.759325][T14237]  ? __pfx_out_of_memory+0x10/0x10
[  587.764484][T14237]  ? rcu_read_unlock+0x17/0x60
[  587.769296][T14237]  ? find_held_lock+0x2d/0x110
[  587.774109][T14237]  mem_cgroup_out_of_memory+0x207/0x270
[  587.779695][T14237]  ? __pfx_mem_cgroup_out_of_memory+0x10/0x10
[  587.785815][T14237]  ? do_raw_spin_unlock+0x172/0x230
[  587.791061][T14237]  try_charge_memcg+0x54c/0xaf0
[  587.795961][T14237]  ? __pfx_try_charge_memcg+0x10/0x10
[  587.801372][T14237]  ? get_mem_cgroup_from_mm+0x87/0x5f0
[  587.806877][T14237]  ? get_mem_cgroup_from_mm+0x87/0x5f0
[  587.812559][T14237]  ? get_mem_cgroup_from_mm+0x131/0x5f0
[  587.818158][T14237]  __mem_cgroup_charge+0x9b/0x280
[  587.823229][T14237]  shmem_alloc_and_add_folio+0x507/0xc00
[  587.828899][T14237]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  587.834832][T14237]  ? __pfx_shmem_alloc_and_add_folio+0x10/0x10
[  587.841015][T14237]  ? shmem_huge_global_enabled+0x176/0x250
[  587.846872][T14237]  ? shmem_allowable_huge_orders+0xcd/0x3e0
[  587.852816][T14237]  shmem_get_folio_gfp+0x689/0x1530
[  587.858069][T14237]  ? __pfx_shmem_get_folio_gfp+0x10/0x10
[  587.863744][T14237]  ? find_held_lock+0x2d/0x110
[  587.868556][T14237]  shmem_write_begin+0x161/0x300
[  587.873543][T14237]  ? __pfx_shmem_write_begin+0x10/0x10
[  587.879040][T14237]  ? timestamp_truncate+0x21f/0x2e0
[  587.884278][T14237]  ? balance_dirty_pages_ratelimited_flags+0x92/0x1270
[  587.891180][T14237]  generic_perform_write+0x2ba/0x920
[  587.896524][T14237]  ? __pfx_generic_perform_write+0x10/0x10
[  587.902381][T14237]  ? inode_needs_update_time.part.0+0x191/0x270
[  587.908691][T14237]  shmem_file_write_iter+0x10e/0x140
[  587.914021][T14237]  ? __pfx_shmem_file_write_iter+0x10/0x10
[  587.919869][T14237]  __kernel_write_iter+0x318/0xa80
[  587.925027][T14237]  ? __pfx___kernel_write_iter+0x10/0x10
[  587.930783][T14237]  ? get_dump_page+0x15b/0x230
[  587.935598][T14237]  ? __pfx___might_resched+0x10/0x10
[  587.940918][T14237]  ? copy_mc_enhanced_fast_string+0xa/0x13
[  587.946771][T14237]  dump_user_range+0x389/0x8c0
[  587.951583][T14237]  ? __pfx_dump_user_range+0x10/0x10
[  587.956905][T14237]  ? elf_coredump_extra_notes_write+0xbe/0x430
[  587.963096][T14237]  ? __pfx_writenote+0x10/0x10
[  587.967898][T14237]  elf_core_dump+0x2787/0x3880
[  587.972721][T14237]  ? __pfx_elf_core_dump+0x10/0x10
[  587.977866][T14237]  ? try_to_wake_up+0x949/0x1490
[  587.983521][T14237]  ? __pfx_lock_release+0x10/0x10
[  587.988605][T14237]  ? rwsem_wake.isra.0+0xbe/0x120
[  587.993697][T14237]  ? rcu_is_watching+0x12/0xc0
[  587.998593][T14237]  ? trace_lock_acquire+0x14e/0x1f0
[  588.003832][T14237]  ? __pfx_sort+0x10/0x10
[  588.008194][T14237]  ? get_signal+0x23f3/0x2610
[  588.012910][T14237]  ? do_coredump+0x2dd5/0x43e0
[  588.017710][T14237]  do_coredump+0x2dd5/0x43e0
[  588.022354][T14237]  ? __pfx_do_coredump+0x10/0x10
[  588.027331][T14237]  ? irqentry_exit_to_user_mode+0x13f/0x280
[  588.033316][T14237]  get_signal+0x23f3/0x2610
[  588.037863][T14237]  ? _raw_spin_unlock_irqrestore+0x3b/0x80
[  588.043702][T14237]  ? __pfx_get_signal+0x10/0x10
[  588.048593][T14237]  arch_do_signal_or_restart+0x90/0x7e0
[  588.054174][T14237]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[  588.060377][T14237]  ? exc_general_protection+0x1bc/0x230
[  588.065977][T14237]  irqentry_exit_to_user_mode+0x13f/0x280
[  588.071745][T14237]  asm_exc_general_protection+0x26/0x30
[  588.077335][T14237] RIP: 0033:0x0
[  588.080830][T14237] Code: Unable to access opcode bytes at 0xffffffffffffffd6.
[  588.088222][T14237] RSP: 002b:000000000000000a EFLAGS: 00010217
[  588.094325][T14237] RAX: 0000000000000000 RBX: 00007fa237f76160 RCX: 00007fa237d85d19
[  588.102338][T14237] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000002020003b46
[  588.110348][T14237] RBP: 00007fa237e01a20 R08: 8000000000000001 R09: 0000000000000000
[  588.118364][T14237] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  588.126378][T14237] R13: 0000000000000000 R14: 00007fa237f76160 R15: 00007ffc095aef18
[  588.134407][T14237]  </TASK>
[  588.418549][T14237] memory: usage 306380kB, limit 307200kB, failcnt 17773
[  588.493659][T14237] memory+swap: usage 427608kB, limit 9007199254740988kB, failcnt 0
[  588.597737][T14237] kmem: usage 3420kB, limit 9007199254740988kB, failcnt 0
[  588.632458][T14237] Memory cgroup stats for /syz3:
[  588.632805][T14237] cache 307580928
[  588.642340][T14237] rss 1921024
[  588.646198][T14237] rss_huge 0
[  588.649531][T14237] shmem 307580928
[  588.654217][T14237] mapped_file 0
[  588.657723][T14237] dirty 0
[  588.660685][T14237] writeback 0
[  588.664671][T14237] workingset_refault_anon 8770
[  588.669516][T14237] workingset_refault_file 807
[  588.674796][T14237] swap 124260352
[  589.034574][T14237] swapcached 606208
[  589.070265][T14237] pgpgin 1852967
[  589.105674][T14237] pgpgout 1781345
[  589.109464][T14237] pgfault 691804
[  589.155851][T14237] pgmajfault 1594
[  589.159550][T14237] inactive_anon 217681920
[  589.232829][T14237] active_anon 90316800
[  589.297154][T14237] inactive_file 0
[  589.300861][T14237] active_file 0
[  589.347779][T14237] unevictable 0
[  589.351863][T14237] hierarchical_memory_limit 314572800
[  589.395802][T14237] hierarchical_memsw_limit 9223372036854771712
[  589.441978][T14237] total_cache 307580928
[  589.503507][T14237] total_rss 1921024
[  589.507465][T14237] total_rss_huge 0
[  589.511335][T14237] total_shmem 307580928
[  589.580530][T14237] total_mapped_file 0
[  589.610423][T14237] total_dirty 0
[  589.625825][T14237] total_writeback 0
[  589.629689][T14237] total_workingset_refault_anon 8770
[  589.743321][T14237] total_workingset_refault_file 807
[  589.761263][T14237] total_swap 124260352
[  589.813296][T14237] total_swapcached 606208
[  589.828263][T14237] total_pgpgin 1852967
[  589.832383][T14237] total_pgpgout 1781345
[  589.907165][T14237] total_pgfault 691804
[  589.911305][T14237] total_pgmajfault 1594
[  589.993324][T14237] total_inactive_anon 217681920
[  589.998240][T14237] total_active_anon 90316800
[  590.002843][T14237] total_inactive_file 0
[  590.325397][T14237] total_active_file 0
[  590.330698][T14237] total_unevictable 0
[  590.399038][T14237] anon_cost 0
[  590.423332][T14237] file_cost 0
[  590.427171][T14237] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.2383,pid=14259,uid=0
[  590.629153][T15425] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2675'.
[  590.674963][T14237] Memory cgroup out of memory: Killed process 14259 (syz.3.2383) total-vm:102764kB, anon-rss:2484kB, file-rss:23296kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:0
[  593.043273][   T31] oom_reaper: reaped process 14259 (syz.3.2383), now anon-rss:0kB, file-rss:20668kB, shmem-rss:0kB
[  593.716364][T15455] svc: failed to register nfsdv3 RPC service (errno 111).
[  593.746435][T15455] svc: failed to register nfsaclv3 RPC service (errno 111).
[  595.919644][T14237] syz.3.2383 (14237) used greatest stack depth: 17952 bytes left
[  596.904074][T15491] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2694'.
[  599.408431][T15511] svc: failed to register nfsdv3 RPC service (errno 512).
[  599.443500][T15511] svc: failed to register nfsaclv3 RPC service (errno 512).
[  600.780083][T15534] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2706'.
[  601.523440][T15545] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2710'.
[  601.835128][T15545] hsr_slave_0 (unregistering): left promiscuous mode
[  602.941305][T15570] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2722'.
[  603.254613][T15570] hsr_slave_0 (unregistering): left promiscuous mode
[  603.502811][T15573] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2716'.
[  607.455800][T15623] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2727'.
[  608.589779][T15644] netlink: 342 bytes leftover after parsing attributes in process `syz.1.2740'.
[  609.274665][T15661] openvswitch: .': Dropping previously announced user features
[  609.984231][T15666] netlink: 338 bytes leftover after parsing attributes in process `syz.4.2746'.
[  610.066013][T15668] netlink: 338 bytes leftover after parsing attributes in process `syz.4.2746'.
[  610.489228][T15674] netlink: 'syz.2.2747': attribute type 9 has an invalid length.
[  610.565013][T15681] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2750'.
[  616.482709][T15781] netlink: 342 bytes leftover after parsing attributes in process `syz.1.2774'.
[  617.593130][T15799] netlink: 338 bytes leftover after parsing attributes in process `syz.4.2780'.
[  617.659068][T15802] netlink: 338 bytes leftover after parsing attributes in process `syz.4.2780'.
[  618.313568][T15809] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2782'.
[  620.995601][T15861] netlink: zone id is out of range
[  622.739364][T15888] Invalid ELF header magic: != ELF
[  622.807715][T15893] openvswitch: .': Dropping previously announced user features
[  622.956229][T15895] netlink: 338 bytes leftover after parsing attributes in process `syz.4.2810'.
[  623.004834][T15895] netlink: 338 bytes leftover after parsing attributes in process `syz.4.2810'.
[  623.393705][T15909] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2816'.
[  623.667387][T15915] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2819'.
[  624.311965][T15947] netlink: 342 bytes leftover after parsing attributes in process `syz.1.2828'.
[  625.517544][T15971] openvswitch: .': Dropping previously announced user features
[  625.641376][T15979] netlink: 338 bytes leftover after parsing attributes in process `syz.4.2840'.
[  625.684179][T15979] netlink: 338 bytes leftover after parsing attributes in process `syz.4.2840'.
[  626.054118][T15993] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2844'.
[  626.213097][T16001] netlink: 342 bytes leftover after parsing attributes in process `syz.1.2849'.
[  628.515201][T16061] netlink: 338 bytes leftover after parsing attributes in process `syz.1.2869'.
[  628.539804][T16061] netlink: 338 bytes leftover after parsing attributes in process `syz.1.2869'.
[  628.542196][T16065] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2870'.
[  628.816109][T16072] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2874'.
[  628.982584][T16079] netlink: 342 bytes leftover after parsing attributes in process `syz.1.2878'.
[  629.671072][T16102] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2884'.
[  631.041048][T16140] netlink: 338 bytes leftover after parsing attributes in process `syz.4.2900'.
[  631.064360][T16140] netlink: 338 bytes leftover after parsing attributes in process `syz.4.2900'.
[  631.161192][T16140] netlink: 'syz.4.2900': attribute type 1 has an invalid length.
[  631.195380][T16140] netlink: 'syz.4.2900': attribute type 1 has an invalid length.
[  632.098242][T16172] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2907'.
[  632.805895][T16187] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2912'.
[  633.839095][T16225] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2927'.
[  634.445512][T16241] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2932'.
[  634.678047][T16249] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2934'.
[  635.075544][T16258] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2938'.
[  635.235937][T16258] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  635.257030][T16258] batman_adv: batadv0: Removing interface: batadv_slave_0
[  635.257493][T16260] ptrace attach of "./syz-executor exec"[14595] was attempted by "./syz-executor exec"[16260]
[  635.328802][T16258] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  635.403315][T16258] batman_adv: batadv0: Removing interface: batadv_slave_1
[  635.469379][T16265] netlink: 'syz.1.2941': attribute type 2 has an invalid length.
[  636.027912][T16288] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2944'.
[  636.221176][T16292] block nbd0: not configured, cannot reconfigure
[  636.799427][T16305] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2952'.
[  637.221296][T16310] tipc: Started in network mode
[  637.246006][T16310] tipc: Node identity ee00, cluster identity 4711
[  637.252593][T16310] tipc: Node number set to 60928
[  637.591668][T16315] netlink: 'syz.1.2956': attribute type 4 has an invalid length.
[  637.623259][T16315] netlink: 314 bytes leftover after parsing attributes in process `syz.1.2956'.
[  637.642208][T16315] IPv6: NLM_F_CREATE should be specified when creating new route
[  637.670855][T16315] IPv6: NLM_F_REPLACE set, but no existing node found!
[  637.690670][T16318] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2955'.
[  637.690878][T16320] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2957'.
[  637.993114][T16324] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2959'.
[  638.790480][T16352] netlink: 'syz.1.2967': attribute type 27 has an invalid length.
[  638.801489][T16353] netlink: 'syz.1.2967': attribute type 27 has an invalid length.
[  638.972685][T16357] __nla_validate_parse: 3 callbacks suppressed
[  638.972710][T16357] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2969'.
[  639.734470][T16381] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2976'.
[  642.052559][T16431] netlink: 178 bytes leftover after parsing attributes in process `syz.1.2992'.
[  642.319187][T16440] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2997'.
[  642.337234][T16438] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2995'.
[  642.356824][T16440] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  642.492543][T16440] batman_adv: batadv0: Removing interface: batadv_slave_1
[  643.050522][T16470] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3005'.
[  643.192103][T16475] HfR: entered promiscuous mode
[  644.092633][T16508] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3019'.
[  644.533935][T16531] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3027'.
[  644.830834][T16539] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3029'.
[  645.647684][T16568] netlink: 338 bytes leftover after parsing attributes in process `syz.4.3039'.
[  645.662655][T16568] netlink: 338 bytes leftover after parsing attributes in process `syz.4.3039'.
[  645.691750][T16568] netlink: 'syz.4.3039': attribute type 1 has an invalid length.
[  645.711295][T16568] netlink: 'syz.4.3039': attribute type 1 has an invalid length.
[  646.774462][T16604] HfR: entered promiscuous mode
[  648.220108][T16631] can: request_module (can-proto-3) failed.
[  648.417074][T16642] netlink: 338 bytes leftover after parsing attributes in process `syz.4.3061'.
[  648.454115][T16642] netlink: 338 bytes leftover after parsing attributes in process `syz.4.3061'.
[  648.505036][T16642] netlink: 'syz.4.3061': attribute type 1 has an invalid length.
[  648.512829][T16642] netlink: 'syz.4.3061': attribute type 1 has an invalid length.
[  648.827762][T16649] HfR: entered promiscuous mode
[  649.198808][T16656] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3066'.
[  649.210472][T16656] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3066'.
[  649.496570][T16672] netlink: 338 bytes leftover after parsing attributes in process `syz.3.3070'.
[  649.522545][T16668] netlink: 338 bytes leftover after parsing attributes in process `syz.3.3070'.
[  650.525932][T16687] HfR: entered promiscuous mode
[  651.216634][T16709] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3083'.
[  651.411859][T16716] netlink: 338 bytes leftover after parsing attributes in process `syz.3.3084'.
[  651.444279][T16716] netlink: 338 bytes leftover after parsing attributes in process `syz.3.3084'.
[  651.460260][T16716] netlink: 'syz.3.3084': attribute type 1 has an invalid length.
[  651.470388][T16716] netlink: 'syz.3.3084': attribute type 1 has an invalid length.
[  651.910171][T16732] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3092'.
[  652.048799][T16739] kernel read not supported for file /#)-\&[} (pid: 16739 comm: syz.2.3094)
[  652.057694][   T29] audit: type=1804 audit(2084.600:19): pid=16739 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.3094" name="#)-\&[}" dev="mqueue" ino=48085 res=1 errno=0
[  652.103456][   T29] audit: type=1800 audit(2084.650:20): pid=16739 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.3094" name="#)-\&[}" dev="mqueue" ino=48085 res=0 errno=0
[  652.144602][   T29] audit: type=1804 audit(2084.650:21): pid=16739 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.3094" name="#)-\&[}" dev="mqueue" ino=48085 res=1 errno=0
[  652.176847][   T29] audit: type=1804 audit(2084.650:22): pid=16739 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.3094" name="#)-\&[}" dev="mqueue" ino=48085 res=1 errno=0
[  652.300348][T16747] netlink: 'syz.3.3097': attribute type 11 has an invalid length.
[  652.373305][ T5144] Bluetooth: hci2: command 0x0406 tx timeout
[  652.376967][T16747] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3097'.
[  652.405071][T16747] netlink: 13 bytes leftover after parsing attributes in process `syz.3.3097'.
[  653.080087][ T5144] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  653.095646][ T5144] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  653.109267][ T5144] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  653.121087][ T5144] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  653.130449][ T5144] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  653.139561][ T5144] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  653.636101][T16764] chnl_net:caif_netlink_parms(): no params data found
[  653.814710][T16764] bridge0: port 1(bridge_slave_0) entered blocking state
[  653.848725][T16764] bridge0: port 1(bridge_slave_0) entered disabled state
[  653.873558][T16764] bridge_slave_0: entered allmulticast mode
[  653.880734][T16764] bridge_slave_0: entered promiscuous mode
[  653.909935][T16764] bridge0: port 2(bridge_slave_1) entered blocking state
[  653.934073][T16764] bridge0: port 2(bridge_slave_1) entered disabled state
[  653.951546][T16764] bridge_slave_1: entered allmulticast mode
[  653.967152][T16764] bridge_slave_1: entered promiscuous mode
[  653.999008][T16791] netlink: 'syz.2.3109': attribute type 1 has an invalid length.
[  654.020402][T16764] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  654.022753][T16791] netlink: 'syz.2.3109': attribute type 1 has an invalid length.
[  654.063355][T16764] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  654.155716][T16764] team0: Port device team_slave_0 added
[  654.177996][T16764] team0: Port device team_slave_1 added
[  654.252131][T16764] batman_adv: batadv0: Adding interface: batadv_slave_0
[  654.273296][T16764] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  654.303495][T16764] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  654.316531][T16764] batman_adv: batadv0: Adding interface: batadv_slave_1
[  654.323644][T16764] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  654.349880][T16764] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  654.407062][T16764] hsr_slave_0: entered promiscuous mode
[  654.417145][T16764] hsr_slave_1: entered promiscuous mode
[  654.476964][T16764] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  654.484961][T16764] Cannot create hsr debugfs directory
[  654.799326][T16764] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  654.937436][T16764] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  655.088858][T16764] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  655.166764][ T5144] Bluetooth: hci1: command tx timeout
[  655.207519][T16817] __nla_validate_parse: 5 callbacks suppressed
[  655.207544][T16817] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3118'.
[  655.294116][T16819] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3118'.
[  655.326469][T16764] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  655.662697][T16764] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  655.701453][T16764] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  655.722263][T16764] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  655.799157][T16764] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  656.009845][T16764] 8021q: adding VLAN 0 to HW filter on device bond0
[  656.040236][T16764] 8021q: adding VLAN 0 to HW filter on device team0
[  656.063537][T13362] bridge0: port 1(bridge_slave_0) entered blocking state
[  656.070734][T13362] bridge0: port 1(bridge_slave_0) entered forwarding state
[  656.097133][T13367] bridge0: port 2(bridge_slave_1) entered blocking state
[  656.104365][T13367] bridge0: port 2(bridge_slave_1) entered forwarding state
[  656.370282][T16764] 8021q: adding VLAN 0 to HW filter on device batadv0
[  656.575222][T16856] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3127'.
[  656.621057][T16852] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3126'.
[  656.737828][T16861] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3128'.
[  656.750071][T16764] veth0_vlan: entered promiscuous mode
[  656.761328][T16764] veth1_vlan: entered promiscuous mode
[  656.798847][T16862] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3128'.
[  656.813125][T16764] veth0_macvtap: entered promiscuous mode
[  656.822926][T16764] veth1_macvtap: entered promiscuous mode
[  656.840253][T16764] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  656.873358][T16764] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  656.893349][T16764] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  656.945830][T16764] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  656.968084][T16764] batman_adv: batadv0: Interface activated: batadv_slave_0
[  657.004799][T16764] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  657.026407][T16764] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  657.064670][T16764] batman_adv: batadv0: Interface activated: batadv_slave_1
[  657.079656][T16764] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  657.100117][T16764] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  657.128928][T16764] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  657.138873][T16764] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  657.253471][ T5144] Bluetooth: hci1: command tx timeout
[  657.502781][T13366] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  657.523125][T13366] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  657.612412][T16887] netlink: 338 bytes leftover after parsing attributes in process `syz.2.3135'.
[  657.624696][T13368] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  657.632576][T13368] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  657.643660][T16887] netlink: 338 bytes leftover after parsing attributes in process `syz.2.3135'.
[  657.682816][T16887] netlink: 'syz.2.3135': attribute type 1 has an invalid length.
[  657.693494][T16887] netlink: 'syz.2.3135': attribute type 1 has an invalid length.
[  658.082461][   T29] audit: type=1804 audit(2048.630:23): pid=16898 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.3137" name="#)-\&[}" dev="mqueue" ino=50288 res=1 errno=0
[  658.082479][T16898] kernel read not supported for file /#)-\&[} (pid: 16898 comm: syz.4.3137)
[  658.163783][   T29] audit: type=1804 audit(2048.720:24): pid=16900 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.3137" name="#)-\&[}" dev="mqueue" ino=50288 res=1 errno=0
[  658.235748][   T29] audit: type=1804 audit(2048.720:25): pid=16900 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.3137" name="#)-\&[}" dev="mqueue" ino=50288 res=1 errno=0
[  658.338821][   T29] audit: type=1800 audit(2048.750:26): pid=16898 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.3137" name="#)-\&[}" dev="mqueue" ino=50288 res=0 errno=0
[  659.334539][ T5144] Bluetooth: hci1: command tx timeout
[  659.425161][T16931] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3145'.
[  660.221154][T16952] kernel read not supported for file /#)-\&[} (pid: 16952 comm: syz.3.3154)
[  660.266466][   T29] audit: type=1800 audit(2050.810:27): pid=16952 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.3154" name="#)-\&[}" dev="mqueue" ino=33734 res=0 errno=0
[  661.052119][T16973] Process accounting resumed
[  661.280868][T16984] netlink: 338 bytes leftover after parsing attributes in process `syz.2.3161'.
[  661.355780][T16986] netlink: 'syz.2.3161': attribute type 1 has an invalid length.
[  661.373717][T16984] netlink: 338 bytes leftover after parsing attributes in process `syz.2.3161'.
[  661.408390][T16986] netlink: 'syz.2.3161': attribute type 1 has an invalid length.
[  661.413288][ T5840] Bluetooth: hci1: command tx timeout
[  662.613992][ T5840] Bluetooth: hci3: command 0x0406 tx timeout
[  664.374532][T17061] netlink: 338 bytes leftover after parsing attributes in process `syz.4.3188'.
[  664.388311][T17061] netlink: 338 bytes leftover after parsing attributes in process `syz.4.3188'.
[  664.399991][T17061] netlink: 'syz.4.3188': attribute type 1 has an invalid length.
[  664.408693][T17061] netlink: 'syz.4.3188': attribute type 1 has an invalid length.
[  665.331233][T17079] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3197'.
[  665.969216][T17099] netlink: 338 bytes leftover after parsing attributes in process `syz.1.3203'.
[  666.011661][T17099] netlink: 338 bytes leftover after parsing attributes in process `syz.1.3203'.
[  666.042425][T17099] netlink: 'syz.1.3203': attribute type 1 has an invalid length.
[  666.072673][T17099] netlink: 'syz.1.3203': attribute type 1 has an invalid length.
[  666.815007][T17137] netlink: 338 bytes leftover after parsing attributes in process `syz.3.3218'.
[  666.838786][T17137] netlink: 338 bytes leftover after parsing attributes in process `syz.3.3218'.
[  666.871102][T17137] netlink: 'syz.3.3218': attribute type 1 has an invalid length.
[  666.883319][T17137] netlink: 'syz.3.3218': attribute type 1 has an invalid length.
[  667.040948][T17144] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3220'.
[  667.299110][T17153] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3223'.
[  668.552565][T17193] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3239'.
[  668.574900][T17193] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3239'.
[  669.377413][T17218] netlink: 715 bytes leftover after parsing attributes in process `syz.2.3245'.
[  669.635265][T17225] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3248'.
[  669.909017][T17231] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3250'.
[  670.255666][T17241] netlink: 338 bytes leftover after parsing attributes in process `syz.4.3255'.
[  670.275597][T17241] netlink: 'syz.4.3255': attribute type 1 has an invalid length.
[  670.293383][T17241] netlink: 'syz.4.3255': attribute type 1 has an invalid length.
[  672.056805][T17295] __nla_validate_parse: 1 callbacks suppressed
[  672.056829][T17295] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3276'.
[  672.390178][T17302] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3279'.
[  672.410010][T17302] nbd: must specify at least one socket
[  672.528946][T17305] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3280'.
[  672.809884][T17313] netlink: 338 bytes leftover after parsing attributes in process `syz.1.3282'.
[  672.843541][T17314] netlink: 338 bytes leftover after parsing attributes in process `syz.1.3282'.
[  672.855740][T17313] netlink: 'syz.1.3282': attribute type 1 has an invalid length.
[  672.896975][T17313] netlink: 'syz.1.3282': attribute type 1 has an invalid length.
[  674.053627][T17341] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3289'.
[  675.127048][T17356] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3294'.
[  675.471647][T17365] netlink: 4763 bytes leftover after parsing attributes in process `syz.1.3298'.
[  675.808735][T17375] netlink: 338 bytes leftover after parsing attributes in process `syz.4.3302'.
[  675.828214][T17375] netlink: 338 bytes leftover after parsing attributes in process `syz.4.3302'.
[  675.861365][T17375] netlink: 'syz.4.3302': attribute type 1 has an invalid length.
[  675.894438][T17375] netlink: 'syz.4.3302': attribute type 1 has an invalid length.
[  677.240152][T17417] RDS: rds_bind could not find a transport for ::ffff:172.30.0.5, load rds_tcp or rds_rdma?
[  677.567654][T17426] __nla_validate_parse: 1 callbacks suppressed
[  677.567677][T17426] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3318'.
[  677.901451][T17436] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3323'.
[  677.977250][T17436] geneve1: entered allmulticast mode
[  678.196630][T17448] netlink: 338 bytes leftover after parsing attributes in process `syz.1.3325'.
[  678.274059][T17451] netlink: 338 bytes leftover after parsing attributes in process `syz.1.3325'.
[  678.315454][T17454] netlink: 'syz.1.3325': attribute type 1 has an invalid length.
[  678.375470][T17454] netlink: 'syz.1.3325': attribute type 1 has an invalid length.
[  678.939348][T17472] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3334'.
[  680.254168][T17505] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3344'.
[  681.157353][T17523] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3351'.
[  682.993113][T17559] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3362'.
[  683.116869][T17564] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3364'.
[  683.930481][T17582] netlink: 338 bytes leftover after parsing attributes in process `syz.2.3367'.
[  684.198445][T17582] netlink: 'syz.2.3367': attribute type 1 has an invalid length.
[  684.319526][T17582] netlink: 'syz.2.3367': attribute type 1 has an invalid length.
[  684.394375][T17588] netlink: 338 bytes leftover after parsing attributes in process `syz.2.3367'.
[  684.622514][T17598] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3373'.
[  684.645416][T17598] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3373'.
[  685.908505][T17638] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3386'.
[  685.967555][T17638] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3386'.
[  686.176283][T17647] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3388'.
[  686.404087][T17651] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3390'.
[  686.708919][T17658] netlink: 'syz.1.3392': attribute type 1 has an invalid length.
[  686.739830][T17658] netlink: 'syz.1.3392': attribute type 1 has an invalid length.
[  688.388132][T17692] __nla_validate_parse: 4 callbacks suppressed
[  688.388157][T17692] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3404'.
[  688.933487][T17704] netlink: 338 bytes leftover after parsing attributes in process `syz.1.3407'.
[  688.953538][T17705] netlink: 338 bytes leftover after parsing attributes in process `syz.1.3407'.
[  688.977437][T17704] netlink: 'syz.1.3407': attribute type 1 has an invalid length.
[  688.991925][T17704] netlink: 'syz.1.3407': attribute type 1 has an invalid length.
[  690.388751][T17740] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3419'.
[  690.558715][T17743] netlink: 338 bytes leftover after parsing attributes in process `syz.1.3420'.
[  690.581253][T17743] netlink: 338 bytes leftover after parsing attributes in process `syz.1.3420'.
[  690.615989][T17743] netlink: 'syz.1.3420': attribute type 1 has an invalid length.
[  690.623877][T17743] netlink: 'syz.1.3420': attribute type 1 has an invalid length.
[  691.128159][T17752] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3422'.
[  691.165240][T17752] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3422'.
[  692.799026][T17789] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3429'.
[  693.147942][T17793] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3431'.
[  693.624141][T17802] netlink: 338 bytes leftover after parsing attributes in process `syz.4.3433'.
[  693.674520][T17802] netlink: 338 bytes leftover after parsing attributes in process `syz.4.3433'.
[  695.624680][T17836] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  695.637394][T17836] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  697.298452][T17859] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3450'.
[  697.467153][T17884] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3456'.
[  697.956562][T17886] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3458'.
[  698.376962][T17895] netlink: 338 bytes leftover after parsing attributes in process `syz.1.3460'.
[  698.422112][T17897] netlink: 338 bytes leftover after parsing attributes in process `syz.1.3460'.
[  698.496247][T17895] netlink: 'syz.1.3460': attribute type 1 has an invalid length.
[  698.543396][T17895] netlink: 'syz.1.3460': attribute type 1 has an invalid length.
[  698.736111][T17904] netlink: 330 bytes leftover after parsing attributes in process `syz.2.3465'.
[  699.667490][T17923] netlink: 22 bytes leftover after parsing attributes in process `syz.4.3470'.
[  700.013676][T17935] sctp: [Deprecated]: syz.2.3473 (pid 17935) Use of int in maxseg socket option.
[  700.013676][T17935] Use struct sctp_assoc_value instead
[  701.513552][T17970] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3485'.
[  701.593413][T17970] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  701.703327][T17970] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  701.739984][T17966] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3483'.
[  702.884006][T17988] netlink: 222 bytes leftover after parsing attributes in process `syz.1.3488'.
[  702.944952][T17996] netlink: 222 bytes leftover after parsing attributes in process `syz.1.3488'.
[  703.100474][T18000] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3495'.
[  703.379117][T18003] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3498'.
[  705.019083][T18039] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3508'.
[  706.509553][T18067] netlink: 330 bytes leftover after parsing attributes in process `syz.4.3516'.
[  706.814813][T18071] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3518'.
[  707.012666][T18076] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3520'.
[  707.572560][T18092] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3526'.
[  707.716765][T18092] ipvlan0: entered allmulticast mode
[  707.732692][T18092] veth0_vlan: entered allmulticast mode
[  707.740483][T18096] netlink: 'syz.1.3527': attribute type 28 has an invalid length.
[  707.803012][T18096] netlink: 334 bytes leftover after parsing attributes in process `syz.1.3527'.
[  709.508376][T18131] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3539'.
[  711.180270][T18162] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3546'.
[  711.592473][T18169] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3549'.
[  712.883940][T18188] capability: warning: `syz.1.3558' uses deprecated v2 capabilities in a way that may be insecure
[  713.449153][T18200] netlink: 338 bytes leftover after parsing attributes in process `syz.1.3563'.
[  713.561546][T18209] netlink: 'syz.1.3563': attribute type 1 has an invalid length.
[  713.580072][T18209] netlink: 'syz.1.3563': attribute type 1 has an invalid length.
[  713.601824][T18200] netlink: 338 bytes leftover after parsing attributes in process `syz.1.3563'.
[  713.880774][T18214] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3568'.
[  714.038112][T18222] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3569'.
[  714.227977][T18227] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3571'.
[  714.274059][T18227] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  714.293902][T18227] batman_adv: batadv0: Removing interface: batadv_slave_0
[  714.324068][T18227] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  714.331554][T18227] batman_adv: batadv0: Removing interface: batadv_slave_1
[  714.973747][ T5840] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  714.984703][ T5840] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  715.003352][ T5840] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  715.012320][ T5840] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  715.020926][ T5840] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  715.029615][ T5840] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  715.587510][T18244] chnl_net:caif_netlink_parms(): no params data found
[  715.870935][T18244] bridge0: port 1(bridge_slave_0) entered blocking state
[  715.890265][T18244] bridge0: port 1(bridge_slave_0) entered disabled state
[  715.907722][T18244] bridge_slave_0: entered allmulticast mode
[  715.924903][T18244] bridge_slave_0: entered promiscuous mode
[  715.937491][T18244] bridge0: port 2(bridge_slave_1) entered blocking state
[  715.945934][T18244] bridge0: port 2(bridge_slave_1) entered disabled state
[  715.955701][T18244] bridge_slave_1: entered allmulticast mode
[  715.967363][T18244] bridge_slave_1: entered promiscuous mode
[  716.116464][T18244] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  716.147380][T18244] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  716.261835][T18244] team0: Port device team_slave_0 added
[  716.311179][T18244] team0: Port device team_slave_1 added
[  716.427234][T18244] batman_adv: batadv0: Adding interface: batadv_slave_0
[  716.460085][T18244] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  716.500914][T18244] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  716.521677][T18244] batman_adv: batadv0: Adding interface: batadv_slave_1
[  716.529359][T18244] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  716.561264][T18244] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  716.989714][T18244] hsr_slave_0: entered promiscuous mode
[  717.043057][T18244] hsr_slave_1: entered promiscuous mode
[  717.068055][T18244] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  717.087584][T18244] Cannot create hsr debugfs directory
[  717.088402][ T5144] Bluetooth: hci2: command tx timeout
[  717.888978][T18244] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  717.948635][T18310] netlink: 338 bytes leftover after parsing attributes in process `syz.3.3595'.
[  717.956800][T18312] netlink: 322 bytes leftover after parsing attributes in process `syz.1.3594'.
[  717.972848][T18313] netlink: 338 bytes leftover after parsing attributes in process `syz.3.3595'.
[  718.004623][T18244] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  718.018287][T18244] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  718.020928][T18310] netlink: 'syz.3.3595': attribute type 1 has an invalid length.
[  718.042640][T18312] bond0: entered promiscuous mode
[  718.053652][T18312] bond_slave_0: entered promiscuous mode
[  718.055300][T18310] netlink: 'syz.3.3595': attribute type 1 has an invalid length.
[  718.071740][T18312] bond_slave_1: entered promiscuous mode
[  718.106702][T18244] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  718.235428][T18244] 8021q: adding VLAN 0 to HW filter on device bond0
[  718.251724][T18244] 8021q: adding VLAN 0 to HW filter on device team0
[  718.302519][ T6398] bridge0: port 1(bridge_slave_0) entered blocking state
[  718.309725][ T6398] bridge0: port 1(bridge_slave_0) entered forwarding state
[  718.329862][ T5144] Bluetooth: hci0: Received unexpected HCI Event 0x00
[  718.354318][ T6398] bridge0: port 2(bridge_slave_1) entered blocking state
[  718.361557][ T6398] bridge0: port 2(bridge_slave_1) entered forwarding state
[  718.416928][T18244] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  718.734657][T18244] 8021q: adding VLAN 0 to HW filter on device batadv0
[  719.170611][ T5144] Bluetooth: hci2: command tx timeout
[  719.184833][T18244] veth0_vlan: entered promiscuous mode
[  719.227197][T18244] veth1_vlan: entered promiscuous mode
[  719.426457][T18244] veth0_macvtap: entered promiscuous mode
[  719.445826][T18244] veth1_macvtap: entered promiscuous mode
[  719.492888][T18244] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  719.519090][T18244] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  719.560066][T18244] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  719.625527][T18244] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  719.641821][T18244] batman_adv: batadv0: Interface activated: batadv_slave_0
[  719.699102][T18356] netlink: 338 bytes leftover after parsing attributes in process `syz.4.3605'.
[  719.718445][T18358] netlink: 338 bytes leftover after parsing attributes in process `syz.4.3605'.
[  719.758890][T18356] netlink: 'syz.4.3605': attribute type 1 has an invalid length.
[  719.777595][T18244] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  719.778276][T18356] netlink: 'syz.4.3605': attribute type 1 has an invalid length.
[  719.796655][T18244] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  719.814752][T18244] batman_adv: batadv0: Interface activated: batadv_slave_1
[  719.874409][T18244] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  719.883584][T18244] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  719.892884][T18244] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  719.902142][T18244] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  719.946698][T18349] netlink: 330 bytes leftover after parsing attributes in process `syz.1.3601'.
[  720.309634][T13346] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  720.330413][T13346] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  720.528727][T18371] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3608'.
[  720.544483][T13346] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  720.598910][T13346] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  721.299988][ T5144] Bluetooth: hci2: command tx timeout
[  721.821811][T18409] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3623'.
[  722.806367][T18439] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3630'.
[  723.040843][T18445] netlink: 322 bytes leftover after parsing attributes in process `syz.4.3632'.
[  723.067374][T18445] bond0: entered promiscuous mode
[  723.083133][T18445] bond_slave_0: entered promiscuous mode
[  723.098839][T18445] bond_slave_1: entered promiscuous mode
[  723.101416][T18447] svc: failed to register nfsdv3 RPC service (errno 111).
[  723.121860][T18447] svc: failed to register nfsaclv3 RPC service (errno 111).
[  723.318876][ T5144] Bluetooth: hci2: command tx timeout
[  723.864586][T18480] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3645'.
[  725.845458][T18528] openvswitch: netlink: IP tunnel dst address not specified
[  725.868355][T18528] openvswitch: netlink: IP tunnel dst address not specified
[  726.297175][T18542] svc: failed to register nfsdv3 RPC service (errno 111).
[  726.319779][T18542] svc: failed to register nfsaclv3 RPC service (errno 111).
[  726.330978][T18545] ecryptfs_parse_packet_length: Error parsing packet length
[  726.351039][T18545] ecryptfs_miscdev_write: Error parsing packet length; rc = [-22]
[  726.728269][T18562] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  727.783522][T18568] netlink: 252 bytes leftover after parsing attributes in process `syz.1.3672'.
[  727.977556][T18581] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3674'.
[  728.443485][T18593] netlink: 338 bytes leftover after parsing attributes in process `syz.5.3677'.
[  728.520495][T18593] netlink: 338 bytes leftover after parsing attributes in process `syz.5.3677'.
[  728.572209][T18593] netlink: 'syz.5.3677': attribute type 1 has an invalid length.
[  728.629707][T18593] netlink: 'syz.5.3677': attribute type 1 has an invalid length.
[  729.340624][T18608] ima: policy update failed
[  729.375892][   T29] audit: type=1802 audit(2053.282:28): pid=18608 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.5.3685" res=0 errno=0
[  730.749920][T18638] netlink: 342 bytes leftover after parsing attributes in process `syz.1.3693'.
[  732.202651][T18683] netlink: 108 bytes leftover after parsing attributes in process `syz.5.3709'.
[  732.721605][ T5144] Bluetooth: hci1: Received unexpected HCI Event 0x00
[  733.414418][ T5144] Bluetooth: hci3: Received unexpected HCI Event 0x00
[  734.350890][T18750] netlink: 338 bytes leftover after parsing attributes in process `syz.4.3733'.
[  734.371427][T18750] netlink: 338 bytes leftover after parsing attributes in process `syz.4.3733'.
[  734.407641][T18750] netlink: 'syz.4.3733': attribute type 1 has an invalid length.
[  734.423009][T18750] netlink: 'syz.4.3733': attribute type 1 has an invalid length.
[  734.502087][ T5144] Bluetooth: hci0: Received unexpected HCI Event 0x00
[  735.434896][ T5144] Bluetooth: hci1: Received unexpected HCI Event 0x00
[  735.684493][T18808] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3750'.
[  735.829336][T18811] .': entered promiscuous mode
[  736.481561][ T5144] Bluetooth: hci3: Received unexpected HCI Event 0x00
[  737.172768][T18855] nbd: must specify a device to reconfigure
[  737.698173][ T5840] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  737.709639][ T5840] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  737.719670][ T5840] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  737.728029][ T5840] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  737.736505][ T5840] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  737.743964][ T5840] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  738.254306][T18862] chnl_net:caif_netlink_parms(): no params data found
[  738.419153][T18862] bridge0: port 1(bridge_slave_0) entered blocking state
[  738.429707][T18862] bridge0: port 1(bridge_slave_0) entered disabled state
[  738.437626][T18862] bridge_slave_0: entered allmulticast mode
[  738.445363][T18862] bridge_slave_0: entered promiscuous mode
[  738.459295][T18862] bridge0: port 2(bridge_slave_1) entered blocking state
[  738.466707][T18862] bridge0: port 2(bridge_slave_1) entered disabled state
[  738.475198][T18862] bridge_slave_1: entered allmulticast mode
[  738.482823][T18862] bridge_slave_1: entered promiscuous mode
[  738.569988][T18881] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3771'.
[  738.594369][T18862] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  738.651290][T18881] netdevsim netdevsim5 netdevsim2: entered allmulticast mode
[  738.701525][T18862] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  738.899417][T18862] team0: Port device team_slave_0 added
[  738.927050][T18862] team0: Port device team_slave_1 added
[  738.991204][T18862] batman_adv: batadv0: Adding interface: batadv_slave_0
[  739.018705][T18862] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  739.072941][T18862] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  739.105405][T18862] batman_adv: batadv0: Adding interface: batadv_slave_1
[  739.124459][T18862] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  739.190943][T18862] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  739.402585][T18862] hsr_slave_0: entered promiscuous mode
[  739.413579][T18862] hsr_slave_1: entered promiscuous mode
[  739.445301][T18862] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  739.453543][T18862] Cannot create hsr debugfs directory
[  739.779630][T18862] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  739.800707][ T5144] Bluetooth: hci3: command tx timeout
[  739.810664][T18862] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  739.831699][T18862] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  739.843151][T18862] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  739.915913][T18862] 8021q: adding VLAN 0 to HW filter on device bond0
[  739.941290][T18862] 8021q: adding VLAN 0 to HW filter on device team0
[  739.971676][T13363] bridge0: port 1(bridge_slave_0) entered blocking state
[  739.978890][T13363] bridge0: port 1(bridge_slave_0) entered forwarding state
[  740.020267][ T6403] bridge0: port 2(bridge_slave_1) entered blocking state
[  740.027500][ T6403] bridge0: port 2(bridge_slave_1) entered forwarding state
[  740.659026][T18862] 8021q: adding VLAN 0 to HW filter on device batadv0
[  740.968472][T18923] openvswitch: .': Dropping previously announced user features
[  741.170290][T18862] veth0_vlan: entered promiscuous mode
[  741.204838][T18862] veth1_vlan: entered promiscuous mode
[  741.374631][T18862] veth0_macvtap: entered promiscuous mode
[  741.438591][T18862] veth1_macvtap: entered promiscuous mode
[  741.490806][T18862] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  741.521133][T18862] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  741.554223][T18862] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  741.591001][T18862] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  741.620068][T18862] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  741.649875][T18862] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  741.670717][T18862] batman_adv: batadv0: Interface activated: batadv_slave_0
[  741.721709][T18862] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  741.750318][T18862] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  741.770042][T18862] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  741.805429][T18862] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  741.847599][T18862] batman_adv: batadv0: Interface activated: batadv_slave_1
[  741.869608][ T5144] Bluetooth: hci3: command tx timeout
[  741.877629][T18862] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  741.897119][T18862] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  741.907263][T18862] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  741.916605][T18862] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  742.172171][ T6405] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  742.213738][ T6405] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  742.293469][ T6405] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  742.312129][ T6405] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  743.423517][T18967] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3793'.
[  743.471404][T18967] bridge0: port 1(bridge_slave_0) entered disabled state
[  743.555243][T18967] bridge_slave_0 (unregistering): left allmulticast mode
[  743.718375][T18967] bridge_slave_0 (unregistering): left promiscuous mode
[  743.726867][T18967] bridge0: port 1(bridge_slave_0) entered disabled state
[  743.960847][ T5144] Bluetooth: hci3: command tx timeout
[  744.995631][   T29] audit: type=1800 audit(2049.800:29): pid=19007 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.3803" name="members" dev="configfs" ino=58969 res=0 errno=0
[  746.028279][ T5144] Bluetooth: hci3: command tx timeout
[  746.344552][T19031] openvswitch: .': Dropping previously announced user features
[  746.422751][T19035] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3811'.
[  746.726304][T19045] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3816'.
[  746.942325][T19043] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3815'.
[  748.926232][T19101] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3829'.
[  749.341525][T19063] kexec: Could not allocate control_code_buffer
[  749.874869][T19116] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3836'.
[  749.911958][T19119] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3836'.
[  751.367891][T19131] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3839'.
[  751.465717][T19133] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3838'.
[  751.493237][T19133] bridge0: port 1(bridge_slave_0) entered disabled state
[  751.572821][T19133] bridge_slave_0 (unregistering): left allmulticast mode
[  751.585246][T19133] bridge_slave_0 (unregistering): left promiscuous mode
[  751.614617][T19133] bridge0: port 1(bridge_slave_0) entered disabled state
[  751.872061][T19138] .': entered promiscuous mode
[  752.017523][T19140] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3842'.
[  752.052687][T19141] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3842'.
[  752.394701][T19156] netlink: 338 bytes leftover after parsing attributes in process `syz.5.3847'.
[  752.432317][T19156] netlink: 338 bytes leftover after parsing attributes in process `syz.5.3847'.
[  752.447094][   T29] audit: type=1326 audit(2053.392:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19157 comm="syz.3.3848" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa237d85d19 code=0x0
[  752.470590][T19156] netlink: 'syz.5.3847': attribute type 1 has an invalid length.
[  752.480152][T19156] netlink: 'syz.5.3847': attribute type 1 has an invalid length.
[  752.630351][T19166] openvswitch: .': Dropping previously announced user features
[  752.966092][T19177] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3852'.
[  753.406791][T19195] openvswitch: .': Dropping previously announced user features
[  753.909190][T19215] openvswitch: .': Dropping previously announced user features
[  755.190961][T19213] kexec: Could not allocate control_code_buffer
[  756.918156][T19293] netlink: 338 bytes leftover after parsing attributes in process `syz.3.3894'.
[  756.950067][T19290] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3892'.
[  759.284840][T19349] FAULT_INJECTION: forcing a failure.
[  759.284840][T19349] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  759.310362][T19349] CPU: 0 UID: 0 PID: 19349 Comm: syz.6.3911 Not tainted 6.13.0-rc2-syzkaller-00159-gf932fb9b4074 #0
[  759.321227][T19349] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024
[  759.331310][T19349] Call Trace:
[  759.334597][T19349]  <TASK>
[  759.337530][T19349]  dump_stack_lvl+0x16c/0x1f0
[  759.342227][T19349]  should_fail_ex+0x497/0x5b0
[  759.346930][T19349]  _copy_from_user+0x2e/0xd0
[  759.351535][T19349]  do_sock_getsockopt+0x319/0x870
[  759.356575][T19349]  ? trace_lock_acquire+0x140/0x1f0
[  759.361845][T19349]  ? __pfx_do_sock_getsockopt+0x10/0x10
[  759.367407][T19349]  ? lock_acquire+0x2f/0xb0
[  759.371914][T19349]  ? __fget_files+0x40/0x3a0
[  759.376519][T19349]  ? __fget_files+0x206/0x3a0
[  759.381210][T19349]  __sys_getsockopt+0x12f/0x260
[  759.386080][T19349]  __x64_sys_getsockopt+0xbd/0x160
[  759.391245][T19349]  ? do_syscall_64+0x91/0x250
[  759.395944][T19349]  ? lockdep_hardirqs_on+0x7c/0x110
[  759.401167][T19349]  do_syscall_64+0xcd/0x250
[  759.405708][T19349]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  759.411637][T19349] RIP: 0033:0x7f1131b85d19
[  759.416070][T19349] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  759.435717][T19349] RSP: 002b:00007f1132a00038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037
[  759.444159][T19349] RAX: ffffffffffffffda RBX: 00007f1131d75fa0 RCX: 00007f1131b85d19
[  759.452156][T19349] RDX: 000000000000007b RSI: 0000000000000084 RDI: 0000000000000006
[  759.460163][T19349] RBP: 00007f1132a00090 R08: 00000000200000c0 R09: 0000000000000000
[  759.468164][T19349] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  759.476154][T19349] R13: 0000000000000000 R14: 00007f1131d75fa0 R15: 00007fff423bdc68
[  759.484153][T19349]  </TASK>

syzkaller
syzkaller login: [  764.879516][T19482] Invalid ELF header magic: != ELF
[  765.867973][T19496] openvswitch: .': Dropping previously announced user features
[  765.978313][T19500] netlink: 338 bytes leftover after parsing attributes in process `syz.3.3957'.
[  766.030882][T19500] netlink: 338 bytes leftover after parsing attributes in process `syz.3.3957'.
[  766.758625][T19514] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3963'.
[  766.793860][T19528] openvswitch: .': Dropping previously announced user features
[  767.746133][T19538] netlink: 338 bytes leftover after parsing attributes in process `syz.6.3971'.
[  767.771237][T19538] netlink: 338 bytes leftover after parsing attributes in process `syz.6.3971'.
[  768.723711][   T29] audit: type=1326 audit(3607.744:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19557 comm="syz.4.3978" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc409185d19 code=0x0
[  769.140057][   T29] audit: type=1807 audit(3608.164:32): UNKNOWN=$ res=0
[  769.158564][   T29] audit: type=1802 audit(3608.184:33): pid=19581 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.5.3987" res=0 errno=0
[  769.177484][T19580] ima: policy update failed
[  769.181282][T19585] .': entered promiscuous mode
[  769.205705][   T29] audit: type=1802 audit(3608.204:34): pid=19580 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.5.3987" res=0 errno=0
[  769.219952][T19579] netlink: 334 bytes leftover after parsing attributes in process `syz.3.3986'.
[  769.379272][T19589] netlink: 338 bytes leftover after parsing attributes in process `syz.5.3990'.
[  769.414626][T19589] netlink: 338 bytes leftover after parsing attributes in process `syz.5.3990'.
[  769.459472][T19596] erspan0: entered allmulticast mode
[  769.926555][T19620] openvswitch: .': Dropping previously announced user features
[  770.061261][T19627] netlink: 338 bytes leftover after parsing attributes in process `syz.4.4003'.
[  770.084490][T19627] netlink: 338 bytes leftover after parsing attributes in process `syz.4.4003'.
[  771.270664][T19664] netlink: 338 bytes leftover after parsing attributes in process `syz.3.4013'.
[  771.292528][T19664] netlink: 338 bytes leftover after parsing attributes in process `syz.3.4013'.
[  772.772282][T19708] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4029'.
[  773.039302][T19719] openvswitch: .': Dropping previously announced user features
[  774.363431][T19756] netlink: 'syz.5.4044': attribute type 19 has an invalid length.
[  774.371335][T19756] netlink: 50 bytes leftover after parsing attributes in process `syz.5.4044'.
[  775.210157][T19780] netlink: 338 bytes leftover after parsing attributes in process `syz.5.4051'.
[  775.219465][ T5840] Bluetooth: hci1: command 0x0406 tx timeout
[  775.246995][T19780] netlink: 338 bytes leftover after parsing attributes in process `syz.5.4051'.
[  775.258630][T19780] netlink: 'syz.5.4051': attribute type 1 has an invalid length.
[  775.267966][T19780] netlink: 'syz.5.4051': attribute type 1 has an invalid length.
[  775.433217][T19786] netlink: 334 bytes leftover after parsing attributes in process `syz.6.4052'.
[  775.967860][T19803] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4057'.
[  778.650907][T19857] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4075'.
[  778.885196][T19867] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4076'.
[  779.027196][T19870] Invalid ELF header magic: != ELF
[  779.152782][T19867] bond0: (slave bond_slave_0): Releasing backup interface
[  779.275306][T19866] HfR: entered promiscuous mode
[  779.314619][T19874] netlink: 'syz.6.4079': attribute type 1 has an invalid length.
[  779.336638][T19872] netlink: 338 bytes leftover after parsing attributes in process `syz.6.4079'.
[  779.343184][T19874] netlink: 'syz.6.4079': attribute type 1 has an invalid length.
[  779.375395][T19873] netlink: 338 bytes leftover after parsing attributes in process `syz.6.4079'.
[  780.825238][T19900] delete_channel: no stack
[  783.338855][T19945] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4099'.
[  783.793880][T19945] bond0: (slave bond_slave_0): Releasing backup interface
[  785.061065][T19979] netlink: 342 bytes leftover after parsing attributes in process `syz.5.4112'.
[  785.290330][T19987] netlink: 338 bytes leftover after parsing attributes in process `syz.5.4114'.
[  785.355389][T19987] netlink: 338 bytes leftover after parsing attributes in process `syz.5.4114'.
[  785.417534][T19987] netlink: 'syz.5.4114': attribute type 1 has an invalid length.
[  785.463355][T19987] netlink: 'syz.5.4114': attribute type 1 has an invalid length.
[  785.606136][T19992] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4116'.
[  785.762460][T19997] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4115'.
[  785.766620][T19998] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4116'.
[  786.123988][T19997] bond0: (slave bond_slave_0): Releasing backup interface
[  787.072458][T20021] netlink: 338 bytes leftover after parsing attributes in process `syz.6.4124'.
[  787.114349][T20021] netlink: 338 bytes leftover after parsing attributes in process `syz.6.4124'.
[  787.159166][T20021] netlink: 'syz.6.4124': attribute type 1 has an invalid length.
[  787.187580][T20021] netlink: 'syz.6.4124': attribute type 1 has an invalid length.
[  788.172576][T20040] vivid-009: =================  START STATUS  =================
[  788.217969][T20040] vivid-009: Test Pattern: 75% Colorbar
[  788.319040][T20040] vivid-009: Fill Percentage of Frame: 100
[  788.371264][T20040] vivid-009: Horizontal Movement: No Movement
[  788.424224][T20040] vivid-009: Vertical Movement: No Movement
[  788.487995][T20040] vivid-009: OSD Text Mode: All
[  788.540854][T20040] vivid-009: Show Border: false
[  788.592064][T20040] vivid-009: Show Square: false
[  788.624314][T20040] vivid-009: Sensor Flipped Horizontally: false
[  788.630662][T20040] vivid-009: Sensor Flipped Vertically: false
[  788.711942][T20040] vivid-009: Insert SAV Code in Image: false
[  788.741893][T20040] vivid-009: Insert EAV Code in Image: false
[  788.763464][T20040] vivid-009: Insert Video Guard Band: false
[  788.781363][T20040] vivid-009: Reduced Framerate: false
[  788.805257][T20040] vivid-009: HDMI 009-0 Is Connected To: Test Pattern Generator
[  788.851975][T20040] vivid-009: S-Video 009-0 Is Connected To: Test Pattern Generator
[  788.889469][T20040] vivid-009: Enable Capture Cropping: true
[  788.916160][T20040] vivid-009: Enable Capture Composing: true
[  788.952198][T20040] vivid-009: Enable Capture Scaler: true
[  788.992463][T20040] vivid-009: Timestamp Source: End of Frame
[  789.003092][T20040] vivid-009: Colorspace: sRGB
[  789.007855][T20040] vivid-009: Transfer Function: Default
[  789.049872][T20040] vivid-009: Y'CbCr Encoding: Default
[  789.109054][T20040] vivid-009: HSV Encoding: Hue 0-179
[  789.145387][T20040] vivid-009: Quantization: Default
[  789.173439][T20040] vivid-009: Apply Alpha To Red Only: false
[  789.215316][T20040] vivid-009: Standard Aspect Ratio: 4x3
[  789.220969][T20040] vivid-009: DV Timings Signal Mode: Current DV Timings inactive
[  789.273250][T20040] vivid-009: DV Timings: 640x480p59 inactive
[  789.289708][T20040] vivid-009: DV Timings Aspect Ratio: Source Width x Height
[  789.313533][T20040] vivid-009: Maximum EDID Blocks: 2
[  789.320095][T20040] vivid-009: Limited RGB Range (16-235): false
[  789.353416][T20040] vivid-009: Rx RGB Quantization Range: Automatic
[  789.383481][T20040] vivid-009: Power Present: 0x00000001
[  789.403394][T20040] tpg source WxH: 640x360 (Y'CbCr)
[  789.408579][T20040] tpg field: 1
[  789.411980][T20040] tpg crop: 640x360@0x0
[  789.448668][T20055] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4135'.
[  789.463956][T20040] tpg compose: 640x360@0x0
[  789.468942][T20040] tpg colorspace: 8
[  789.472783][T20040] tpg transfer function: 0/0
[  789.538128][T20040] tpg Y'CbCr encoding: 0/0
[  789.571258][T20040] tpg quantization: 0/0
[  789.607781][T20040] tpg RGB range: 0/2
[  789.611751][T20040] vivid-009: ==================  END STATUS  ==================
[  789.765054][T20061] netlink: 338 bytes leftover after parsing attributes in process `syz.3.4138'.
[  789.790341][T20061] netlink: 'syz.3.4138': attribute type 1 has an invalid length.
[  789.821797][T20061] netlink: 'syz.3.4138': attribute type 1 has an invalid length.
[  791.092017][T20086] bridge0: port 1(team0) entered blocking state
[  791.099363][T20086] bridge0: port 1(team0) entered disabled state
[  791.113484][T20086] team0: entered allmulticast mode
[  791.123085][T20086] team_slave_0: entered allmulticast mode
[  791.137689][T20086] team_slave_1: entered allmulticast mode
[  791.153836][T20086] team0: entered promiscuous mode
[  791.167865][T20086] team_slave_0: entered promiscuous mode
[  791.200398][T20086] team_slave_1: entered promiscuous mode
[  791.214783][T20086] bridge0: port 1(team0) entered blocking state
[  791.221181][T20086] bridge0: port 1(team0) entered forwarding state
[  793.055915][T20157] sctp: [Deprecated]: syz.6.4167 (pid 20157) Use of struct sctp_assoc_value in delayed_ack socket option.
[  793.055915][T20157] Use struct sctp_sack_info instead
[  794.217336][   T29] audit: type=1800 audit(4294967316.060:35): pid=20198 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.4177" name="SYSV00000008" dev="hugetlbfs" ino=0 res=0 errno=0
[  795.212157][T20242] __nla_validate_parse: 1 callbacks suppressed
[  795.212179][T20242] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4189'.
[  795.245731][T20242] nbd: must specify at least one socket
[  795.254027][T20241] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4189'.
[  795.273412][T20241] nbd: must specify at least one socket
[  795.530801][T20242] ptrace attach of "./syz-executor exec"[12625] was attempted by "./syz-executor exec ASAN_OPTIONS=handle_segv=0 allow_user_segv_handler=1 detect_leaks=0 GLIBC_TUNABLES=glibc.pthread.rseq=0 ./syz-executor"[20242]
[  796.153555][T20269] netlink: 326 bytes leftover after parsing attributes in process `syz.3.4199'.
[  799.702167][T20339] nbd: couldn't find device at index 33904
[  800.283949][T20359] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4225'.
[  803.017765][T20430] sctp: [Deprecated]: syz.6.4241 (pid 20430) Use of int in max_burst socket option deprecated.
[  803.017765][T20430] Use struct sctp_assoc_value instead
[  803.401320][T20434] ptrace attach of "./syz-executor exec"[18862] was attempted by "./syz-executor exec"[20434]
[  807.740148][ T5144] Bluetooth: hci2: Received unexpected HCI Event 0x00
[  807.916020][T20505] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  807.936845][T20505] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  809.370502][T20527] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4268'.
[  810.348587][T20550] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4272'.
[  811.674870][T20574] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4277'.
[  815.670438][T20609] netlink: 'syz.3.4288': attribute type 1 has an invalid length.
[  819.173249][T20714] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4314'.
[  819.230375][T20714] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4314'.
[  819.291604][T20714] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4314'.
[  819.348124][T20714] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4314'.
[  820.977841][ T5144] Bluetooth: hci1: Opcode 0x206a failed: -110
[  820.984462][ T5144] Bluetooth: hci1: command 0x0406 tx timeout
[  822.103701][T20755] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4328'.
[  822.122064][T20755] hsr_slave_0: left promiscuous mode
[  822.130814][T20755] hsr_slave_1: left promiscuous mode
[  822.355758][T20767] netlink: 338 bytes leftover after parsing attributes in process `syz.5.4332'.
[  822.380751][T20767] netlink: 338 bytes leftover after parsing attributes in process `syz.5.4332'.
[  823.303660][T20789] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4340'.
[  823.381316][T20789] hsr_slave_0: left promiscuous mode
[  823.558705][T20789] hsr_slave_1: left promiscuous mode
[  823.936441][T20796] netlink: 'syz.6.4343': attribute type 1 has an invalid length.
[  824.148533][T20800] netlink: 338 bytes leftover after parsing attributes in process `syz.5.4344'.
[  824.200565][T20800] netlink: 338 bytes leftover after parsing attributes in process `syz.5.4344'.
[  824.255636][T20802] netlink: 'syz.5.4344': attribute type 1 has an invalid length.
[  824.273187][T20802] netlink: 'syz.5.4344': attribute type 1 has an invalid length.
[  826.668326][T20844] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4353'.
[  826.825937][T20854] netlink: 'syz.3.4354': attribute type 1 has an invalid length.
[  826.855477][T20844] hsr_slave_0: left promiscuous mode
[  826.862818][T20844] hsr_slave_1: left promiscuous mode
[  826.884361][T20854] netlink: 'syz.3.4354': attribute type 1 has an invalid length.
[  826.958246][T20847] netlink: 338 bytes leftover after parsing attributes in process `syz.3.4354'.
[  826.993940][T20851] netlink: 338 bytes leftover after parsing attributes in process `syz.3.4354'.
[  827.395349][T20860] netlink: 130 bytes leftover after parsing attributes in process `syz.6.4358'.
[  827.744844][T20865] Invalid ELF header magic: != ELF
[  828.039426][T20868] nbd: must specify at least one socket
[  830.224183][T20886] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4372'.
[  830.332753][T20886] hsr_slave_0: left promiscuous mode
[  830.388495][T20886] hsr_slave_1: left promiscuous mode
[  831.878347][T20909] lo: entered allmulticast mode
[  831.980306][T20909] can: request_module (can-proto-0) failed.
[  832.097697][T20908] lo: left allmulticast mode
[  832.911558][T20935] netlink: 338 bytes leftover after parsing attributes in process `syz.6.4380'.
[  832.938103][T20935] netlink: 338 bytes leftover after parsing attributes in process `syz.6.4380'.
[  832.969332][T20935] netlink: 'syz.6.4380': attribute type 1 has an invalid length.
[  832.993518][T20935] netlink: 'syz.6.4380': attribute type 1 has an invalid length.
[  834.574351][ T5144] Bluetooth: hci2: command 0x206a tx timeout
[  834.580517][ T5840] Bluetooth: hci2: Opcode 0x206a failed: -110
[  834.911909][T20979] netlink: 338 bytes leftover after parsing attributes in process `syz.5.4391'.
[  834.923950][T20979] netlink: 338 bytes leftover after parsing attributes in process `syz.5.4391'.
[  834.935750][T20979] netlink: 'syz.5.4391': attribute type 1 has an invalid length.
[  834.943866][T20979] netlink: 'syz.5.4391': attribute type 1 has an invalid length.
[  835.236681][T20984] warning: `syz.6.4393' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[  836.431956][T21014] netlink: 40 bytes leftover after parsing attributes in process `syz.6.4401'.
[  838.712119][T21018] netlink: Unknown conntrack attr (type=64, max=9)
[  839.959082][T21065] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4414'.
[  840.586097][T21078] netlink: 338 bytes leftover after parsing attributes in process `syz.3.4418'.
[  840.628112][T21078] netlink: 338 bytes leftover after parsing attributes in process `syz.3.4418'.
[  840.671113][T21078] netlink: 'syz.3.4418': attribute type 1 has an invalid length.
[  840.710086][T21078] netlink: 'syz.3.4418': attribute type 1 has an invalid length.
[  841.779385][ T5144] Bluetooth: hci2: command 0x206a tx timeout
[  844.200387][T21123] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4429'.
[  844.233808][T21123] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4429'.
[  846.973211][ T5840] Bluetooth: hci0: command 0x0406 tx timeout
[  846.979387][ T5144] Bluetooth: hci0: Opcode 0x206a failed: -110
[  847.007419][T21165] sp0: Synchronizing with TNC
[  847.814351][T21175] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  848.082522][T21172] could not allocate digest TFM handle binfmt_misc
[  848.916109][T21197] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4449'.
[  848.938110][T21197] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4449'.
[  849.191517][T21205] netlink: 338 bytes leftover after parsing attributes in process `syz.3.4450'.
[  849.232415][T21205] netlink: 338 bytes leftover after parsing attributes in process `syz.3.4450'.
[  849.283694][T21205] netlink: 'syz.3.4450': attribute type 1 has an invalid length.
[  849.323146][T21205] netlink: 'syz.3.4450': attribute type 1 has an invalid length.
[  850.663203][ T5840] Bluetooth: hci2: command 0x206a tx timeout
[  850.669947][ T5144] Bluetooth: hci2: Opcode 0x206a failed: -110
[  850.687149][T21218] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4455'.
[  852.893133][ T5840] Bluetooth: hci1: Opcode 0x206a failed: -110
[  852.903330][T16766] Bluetooth: hci1: command 0x0406 tx timeout
[  852.909429][ T5840] Bluetooth: hci1: Opcode 0x206a failed: -110
[  854.493210][ T5144] Bluetooth: hci3: Opcode 0x206a failed: -110
[  854.526698][T21302] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4479'.
[  854.573166][ T5144] Bluetooth: hci3: command 0x206a tx timeout
[  854.968708][T21311] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4480'.
[  854.993364][ T5144] Bluetooth: hci1: command 0x0406 tx timeout
[  856.002667][T21317] ptrace attach of "./syz-executor exec"[16764] was attempted by "�jfS���K*�K#d�iE}AY���{����X���8;��~/D�<��e8�e�%���:|��V�U^���x)��XJ�C���;u����܎60f��M��c��C�7�)E6��c��=��:�9��u_4�����a\x0b\x0d���2�q�P�O�#�Jja>v$����\x0cBVW�����3\x1b���������
�����G��pC�P�f��K j_H�X�侹�o �������3Q������\x0a\x5c����3}�����潜���sH�l�vE�\x1bC�f�����AF�J�1�\x0d2�+����B�y�������1WK��|h�݁'���c`^�G�'G��ɬ��\x0a�e*�8%��UV�3_vįRn��س�8��A0��_cG�V�<Ƣ���r���3�^����7_ӷxFt����6ԳmK�j����g�?�N�m8���y\x07��O����d�o�6��NGN<t%d��TZyU<��VN8��<�����l��p*F~5�t�S��L��Yj�o+��:tM�%c ^ϟ}&M�5���:���:�44��H�1�O ��\x07�>�-�������\x22��D+Jb�x�}�dBoӢ{R�����s\x09?�!O7Rz�*RN���0|?��� ��lC��\x5c�8�\x1bj�v-'q \x0a\x0d��#��Ӏ3���\x0dA()�tЀR\x07j�o�-��=��L�?
���\x0c���5���q(�\x07��L���k�x��:����\x07b�z�W���7ܡ�G��u��<���
�������Ye��Dꖲ Y=,W��X�P�o�\x07��\x0d0
~�C�j\x09�&n=���@�q�\x0c�υ�xWfW~�1���-w��,�I}���渪�o‚.4�+ \x0b��*O�M�9ov�y��%Wa����F
[  856.391585][T21332] netlink: 338 bytes leftover after parsing attributes in process `syz.3.4488'.
[  856.495679][T21336] netlink: 'syz.3.4488': attribute type 1 has an invalid length.
[  856.523077][T21336] netlink: 'syz.3.4488': attribute type 1 has an invalid length.
[  856.543129][T21335] netlink: 338 bytes leftover after parsing attributes in process `syz.3.4488'.
[  856.772888][T21339] netlink: 338 bytes leftover after parsing attributes in process `syz.5.4489'.
[  856.797932][T21340] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4490'.
[  856.854695][T21339] netlink: 338 bytes leftover after parsing attributes in process `syz.5.4489'.
[  856.874268][T21339] netlink: 'syz.5.4489': attribute type 1 has an invalid length.
[  856.893163][T21339] netlink: 'syz.5.4489': attribute type 1 has an invalid length.
[  858.733140][ T5144] Bluetooth: hci3: Opcode 0x206a failed: -110
[  858.733297][T16766] Bluetooth: hci3: command 0x206a tx timeout
[  859.069063][T21399] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4506'.
[  859.635722][T21414] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4509'.
[  860.253236][ T5144] Bluetooth: hci0: command 0x0406 tx timeout
[  860.259511][ T5840] Bluetooth: hci0: Opcode 0x206a failed: -110
[  862.253153][ T5144] Bluetooth: hci3: command 0x206a tx timeout
[  862.333406][ T5144] Bluetooth: hci0: command 0x0406 tx timeout
[  862.340009][ T5840] Bluetooth: hci0: Opcode 0x206a failed: -110
[  863.534735][T21486] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4528'.
[  867.213414][ T5840] Bluetooth: hci2: command 0x206a tx timeout
[  867.213899][T16766] Bluetooth: hci2: Opcode 0x206a failed: -110
[  868.664845][T21570] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4546'.
[  869.290390][T21583] random: crng reseeded on system resumption
[  872.303124][T21611] netlink: 342 bytes leftover after parsing attributes in process `syz.4.4554'.
[  872.437582][T16766] Bluetooth: hci0: unexpected event 0x04 length: 9 < 10
[  872.444858][T16766] Bluetooth: hci0: unexpected event 0x04 length: 9 < 10
[  872.452196][T16766] Bluetooth: hci0: unexpected event 0x04 length: 9 < 10
[  872.459354][T16766] Bluetooth: hci0: unexpected event 0x04 length: 9 < 10
[  872.466480][T16766] Bluetooth: hci0: unexpected event 0x04 length: 9 < 10
[  872.473737][T16766] Bluetooth: hci0: unexpected event 0x04 length: 9 < 10
[  872.480893][T16766] Bluetooth: hci0: unexpected event 0x04 length: 9 < 10
[  872.488153][T16766] Bluetooth: hci0: unexpected event 0x04 length: 9 < 10
[  872.495319][T16766] Bluetooth: hci0: unexpected event 0x04 length: 9 < 10
[  872.502374][T16766] Bluetooth: hci0: unexpected event 0x04 length: 9 < 10
[  872.509492][T16766] Bluetooth: hci0: unexpected event 0x04 length: 9 < 10
[  872.517075][T16766] Bluetooth: hci0: unexpected event 0x04 length: 9 < 10
[  872.524223][T16766] Bluetooth: hci0: unexpected event 0x04 length: 9 < 10
[  872.531287][T16766] Bluetooth: hci0: unexpected event 0x04 length: 9 < 10
[  872.538416][T16766] Bluetooth: hci0: unexpected event 0x04 length: 9 < 10
[  872.546394][T16766] Bluetooth: hci0: unexpected event 0x04 length: 9 < 10
[  872.553817][T16766] Bluetooth: hci0: unexpected event 0x04 length: 9 < 10
[  872.560876][T16766] Bluetooth: hci0: unexpected event 0x04 length: 9 < 10
[  872.568018][T16766] Bluetooth: hci0: unexpected event 0x04 length: 9 < 10
[  872.575145][T16766] Bluetooth: hci0: unexpected event 0x04 length: 9 < 10
[  872.582195][T16766] Bluetooth: hci0: unexpected event 0x04 length: 9 < 10
[  872.589549][T16766] Bluetooth: hci0: unexpected event 0x04 length: 9 < 10
[  872.596642][T16766] Bluetooth: hci0: unexpected event 0x04 length: 9 < 10
[  872.604662][T16766] Bluetooth: hci0: unexpected event 0x04 length: 9 < 10
[  872.611746][T16766] Bluetooth: hci0: unexpected event 0x04 length: 9 < 10
[  872.619340][T16766] Bluetooth: hci0: unexpected event 0x04 length: 9 < 10
[  872.626483][T16766] Bluetooth: hci0: unexpected event 0x04 length: 9 < 10
[  872.633586][T16766] Bluetooth: hci0: unexpected event 0x04 length: 9 < 10
[  872.640621][T16766] Bluetooth: hci0: unexpected event 0x04 length: 9 < 10
[  872.647760][T16766] Bluetooth: hci0: unexpected event 0x04 length: 9 < 10
[  872.655535][T16766] Bluetooth: hci0: unexpected event 0x04 length: 9 < 10
[  872.662583][T16766] Bluetooth: hci0: unexpected event 0x04 length: 9 < 10
[  872.669763][T16766] Bluetooth: hci0: unexpected event 0x04 length: 9 < 10
[  874.369516][T21644] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4561'.
[  874.720126][T21646] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4562'.
[  874.898550][T21646] lo: entered promiscuous mode
[  874.907682][T21646] lo: entered allmulticast mode
[  875.204219][T21661] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4566'.
[  876.679641][ T5840] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  876.799382][ T5840] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  876.808332][ T5840] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  876.819217][ T5840] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  876.827211][ T5840] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  876.834935][ T5840] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  877.779320][T21679] chnl_net:caif_netlink_parms(): no params data found
[  878.093861][T21679] bridge0: port 1(bridge_slave_0) entered blocking state
[  878.101101][T21679] bridge0: port 1(bridge_slave_0) entered disabled state
[  878.114337][T21679] bridge_slave_0: entered allmulticast mode
[  878.128888][T21679] bridge_slave_0: entered promiscuous mode
[  878.146838][T21679] bridge0: port 2(bridge_slave_1) entered blocking state
[  878.163185][T21679] bridge0: port 2(bridge_slave_1) entered disabled state
[  878.193658][T21679] bridge_slave_1: entered allmulticast mode
[  878.200832][T21679] bridge_slave_1: entered promiscuous mode
[  878.437283][T21679] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  878.477633][T21679] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  878.829828][T21679] team0: Port device team_slave_0 added
[  878.841706][T21679] team0: Port device team_slave_1 added
[  878.894857][ T5144] Bluetooth: hci4: command tx timeout
[  878.973326][ T5144] Bluetooth: hci3: command 0x206a tx timeout
[  879.013294][T16766] Bluetooth: hci3: Opcode 0x206a failed: -110
[  879.105145][T21679] batman_adv: batadv0: Adding interface: batadv_slave_0
[  879.112173][T21679] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  879.160188][T21679] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  879.186980][T21679] batman_adv: batadv0: Adding interface: batadv_slave_1
[  879.209864][T21679] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  879.242196][T21679] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  879.563334][T21679] hsr_slave_0: entered promiscuous mode
[  879.603896][T21679] hsr_slave_1: entered promiscuous mode
[  879.641512][T21679] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  879.649501][T21679] Cannot create hsr debugfs directory
[  880.329001][T21679] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  880.556488][T21679] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  880.690652][T21736] netlink: 326 bytes leftover after parsing attributes in process `syz.5.4582'.
[  880.973131][ T5840] Bluetooth: hci4: command tx timeout
[  881.053220][ T5144] Bluetooth: hci1: Opcode 0x206a failed: -110
[  881.059608][ T5144] Bluetooth: hci1: command 0x0406 tx timeout
[  881.214462][T21679] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  882.586512][T21679] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  883.053143][ T5840] Bluetooth: hci4: command tx timeout
[  883.623639][ T5840] Bluetooth: hci1: command 0x0406 tx timeout
[  883.630078][ T5144] Bluetooth: hci1: Opcode 0x206a failed: -110
[  884.294416][T21679] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  884.356401][T21679] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  884.422980][T21679] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  884.463860][T21679] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  884.823198][T21679] 8021q: adding VLAN 0 to HW filter on device bond0
[  884.878305][T21679] 8021q: adding VLAN 0 to HW filter on device team0
[  884.929030][T13363] bridge0: port 1(bridge_slave_0) entered blocking state
[  884.936224][T13363] bridge0: port 1(bridge_slave_0) entered forwarding state
[  884.977999][T13363] bridge0: port 2(bridge_slave_1) entered blocking state
[  884.985284][T13363] bridge0: port 2(bridge_slave_1) entered forwarding state
[  885.135041][ T5144] Bluetooth: hci4: command tx timeout
[  885.164404][T21679] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  885.235336][T21786] netlink: 342 bytes leftover after parsing attributes in process `syz.5.4596'.
[  885.912057][T21679] 8021q: adding VLAN 0 to HW filter on device batadv0
[  886.069292][T21679] veth0_vlan: entered promiscuous mode
[  886.146836][T21679] veth1_vlan: entered promiscuous mode
[  886.291391][T21679] veth0_macvtap: entered promiscuous mode
[  886.332712][T21679] veth1_macvtap: entered promiscuous mode
[  886.435485][T21679] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  886.491135][T21679] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  886.528428][T21679] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  886.586969][T21679] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  886.627600][T21679] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  886.674521][T21679] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  886.716055][T21679] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  886.763187][T21679] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  886.814731][T21679] batman_adv: batadv0: Interface activated: batadv_slave_0
[  886.872369][T21679] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  886.912713][T21679] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  886.960985][T21679] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  887.005320][T21679] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  887.052182][T21679] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  887.101268][T21679] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  887.142848][T21679] batman_adv: batadv0: Interface activated: batadv_slave_1
[  887.202524][T21679] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  887.245260][T21679] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  887.303676][T21679] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  887.328570][T21679] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  887.359720][T21827] netlink: 338 bytes leftover after parsing attributes in process `syz.5.4605'.
[  887.420250][T21828] netlink: 338 bytes leftover after parsing attributes in process `syz.5.4605'.
[  887.473396][T21827] netlink: 'syz.5.4605': attribute type 1 has an invalid length.
[  887.481191][T21827] netlink: 'syz.5.4605': attribute type 1 has an invalid length.
[  887.752095][T13363] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  887.790698][T13363] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  887.928859][ T6405] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  887.959793][ T6405] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  889.558224][T21870] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4611'.
[  890.723658][T21883] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4616'.
[  890.867332][T21882] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4616'.
[  890.925061][T21889] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4617'.
[  891.094467][T21889] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4617'.
[  891.277076][T21889] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4617'.
[  891.505508][T21889] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4617'.
[  891.971120][T21903] random: crng reseeded on system resumption
[  895.107508][T21929] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4624'.
[  895.133710][T21929] hsr_slave_0: left promiscuous mode
[  895.140129][T21929] hsr_slave_1: left promiscuous mode
[  895.730006][T21949] netlink: 338 bytes leftover after parsing attributes in process `syz.3.4629'.
[  895.784048][T21949] netlink: 338 bytes leftover after parsing attributes in process `syz.3.4629'.
[  895.835730][T21949] netlink: 'syz.3.4629': attribute type 1 has an invalid length.
[  895.872319][T21949] netlink: 'syz.3.4629': attribute type 1 has an invalid length.
[  896.322817][T21964] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4635'.
[  898.144096][T21996] netlink: 338 bytes leftover after parsing attributes in process `syz.4.4644'.
[  898.157844][T21996] netlink: 338 bytes leftover after parsing attributes in process `syz.4.4644'.
[  898.176517][T21996] netlink: 'syz.4.4644': attribute type 1 has an invalid length.
[  898.212680][T21996] netlink: 'syz.4.4644': attribute type 1 has an invalid length.
[  898.647320][T21999] cgroup: fork rejected by pids controller in /syz5
[  899.297811][ T5144] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  899.314747][ T5144] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  899.326178][ T5144] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  899.342366][ T5144] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  899.350849][ T5144] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  899.359024][ T5144] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  899.620806][T22048] chnl_net:caif_netlink_parms(): no params data found
[  900.464730][T22048] bridge0: port 1(bridge_slave_0) entered blocking state
[  900.490491][T22048] bridge0: port 1(bridge_slave_0) entered disabled state
[  900.515831][T22048] bridge_slave_0: entered allmulticast mode
[  900.523663][T22048] bridge_slave_0: entered promiscuous mode
[  900.891641][T22048] bridge0: port 2(bridge_slave_1) entered blocking state
[  900.900166][T22048] bridge0: port 2(bridge_slave_1) entered disabled state
[  900.917349][T22048] bridge_slave_1: entered allmulticast mode
[  900.934537][T22048] bridge_slave_1: entered promiscuous mode
[  901.397312][T22048] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  901.424887][T22048] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  901.456059][ T5144] Bluetooth: hci0: command tx timeout
[  902.289151][T22048] team0: Port device team_slave_0 added
[  902.445518][ T5840] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  902.490391][ T5840] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  902.513366][ T5840] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  902.531676][ T5840] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  902.544718][ T5840] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  902.554794][ T5840] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  902.717573][T22048] team0: Port device team_slave_1 added
[  903.438196][T22048] batman_adv: batadv0: Adding interface: batadv_slave_0
[  903.453547][T22048] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  903.523122][T22048] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  903.534024][ T5144] Bluetooth: hci0: command tx timeout
[  903.622125][T22048] batman_adv: batadv0: Adding interface: batadv_slave_1
[  903.629760][T22048] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  903.666829][T22048] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  903.779825][T22061] openvswitch: .': Dropping previously announced user features
[  903.919091][T22048] hsr_slave_0: entered promiscuous mode
[  903.949745][T22048] hsr_slave_1: entered promiscuous mode
[  903.974289][T22048] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  903.983833][T22048] Cannot create hsr debugfs directory
[  904.663893][ T5144] Bluetooth: hci1: command tx timeout
[  904.706642][T22057] chnl_net:caif_netlink_parms(): no params data found
[  904.858146][ T6403] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  905.040699][ T6403] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  905.098566][T22048] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  905.196326][ T6403] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  905.219195][T22048] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  905.251233][T22048] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  905.275680][T22057] bridge0: port 1(bridge_slave_0) entered blocking state
[  905.284014][T22057] bridge0: port 1(bridge_slave_0) entered disabled state
[  905.291303][T22057] bridge_slave_0: entered allmulticast mode
[  905.343905][T22057] bridge_slave_0: entered promiscuous mode
[  905.362730][T22057] bridge0: port 2(bridge_slave_1) entered blocking state
[  905.370085][T22057] bridge0: port 2(bridge_slave_1) entered disabled state
[  905.378191][T22057] bridge_slave_1: entered allmulticast mode
[  905.385723][T22057] bridge_slave_1: entered promiscuous mode
[  905.436688][ T6403] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  905.454638][T22048] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  905.499642][T22057] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  905.560867][T22057] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  905.602609][T22048] 8021q: adding VLAN 0 to HW filter on device bond0
[  905.613435][ T5144] Bluetooth: hci0: command tx timeout
[  905.673443][T22057] team0: Port device team_slave_0 added
[  905.730468][T22057] team0: Port device team_slave_1 added
[  905.763510][T22048] 8021q: adding VLAN 0 to HW filter on device team0
[  905.822754][T22057] batman_adv: batadv0: Adding interface: batadv_slave_0
[  905.836496][T22057] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  905.873076][T22057] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  905.920403][ T6403] bridge_slave_1: left allmulticast mode
[  905.926245][ T6403] bridge_slave_1: left promiscuous mode
[  905.931944][ T6403] bridge0: port 2(bridge_slave_1) entered disabled state
[  906.164539][ T6403] erspan0 (unregistering): left allmulticast mode
[  906.430628][ T6403] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  906.441960][ T6403] bond0 (unregistering): Released all slaves
[  906.454797][ T6405] bridge0: port 1(bridge_slave_0) entered blocking state
[  906.461949][ T6405] bridge0: port 1(bridge_slave_0) entered forwarding state
[  906.472094][T22057] batman_adv: batadv0: Adding interface: batadv_slave_1
[  906.480923][T22057] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  906.509293][T22057] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  906.550018][T13363] bridge0: port 2(bridge_slave_1) entered blocking state
[  906.557181][T13363] bridge0: port 2(bridge_slave_1) entered forwarding state
[  906.569733][ T6403] .': left promiscuous mode
[  906.601642][T22057] hsr_slave_0: entered promiscuous mode
[  906.608536][T22057] hsr_slave_1: entered promiscuous mode
[  906.633917][T22057] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  906.641513][T22057] Cannot create hsr debugfs directory
[  906.743260][ T5144] Bluetooth: hci1: command tx timeout
[  907.246478][T22057] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  907.286869][T22057] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  907.310070][T22048] 8021q: adding VLAN 0 to HW filter on device batadv0
[  907.324232][T22057] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  907.341607][T22057] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  907.635881][T22057] 8021q: adding VLAN 0 to HW filter on device bond0
[  907.693393][ T5144] Bluetooth: hci0: command tx timeout
[  907.708709][T22057] 8021q: adding VLAN 0 to HW filter on device team0
[  907.756297][ T6405] bridge0: port 1(bridge_slave_0) entered blocking state
[  907.763509][ T6405] bridge0: port 1(bridge_slave_0) entered forwarding state
[  907.811082][T22048] veth0_vlan: entered promiscuous mode
[  907.839371][ T6405] bridge0: port 2(bridge_slave_1) entered blocking state
[  907.846558][ T6405] bridge0: port 2(bridge_slave_1) entered forwarding state
[  907.907562][T22048] veth1_vlan: entered promiscuous mode
[  907.992398][T22057] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  908.003670][T22057] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  908.211435][T22048] veth0_macvtap: entered promiscuous mode
[  908.229604][T22048] veth1_macvtap: entered promiscuous mode
[  908.244331][ T6403] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  908.251923][ T6403] batman_adv: batadv0: Removing interface: batadv_slave_0
[  908.264072][ T6403] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  908.271539][ T6403] batman_adv: batadv0: Removing interface: batadv_slave_1
[  908.309181][ T6403] veth1_macvtap: left promiscuous mode
[  908.315215][ T6403] veth0_macvtap: left promiscuous mode
[  908.320771][ T6403] veth1_vlan: left promiscuous mode
[  908.326859][ T6403] veth0_vlan: left promiscuous mode
[  908.753171][ T6403] team0 (unregistering): Port device team_slave_1 removed
[  908.797186][ T6403] team0 (unregistering): Port device team_slave_0 removed
[  908.823722][ T5144] Bluetooth: hci1: command tx timeout
[  909.219037][T22057] 8021q: adding VLAN 0 to HW filter on device batadv0
[  909.228647][T22048] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  909.252037][T22048] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  909.273275][T22048] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  909.300122][T22048] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  909.310710][T22048] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  909.333050][T22048] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  909.344420][T22048] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  909.355814][T22048] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  909.367322][T22048] batman_adv: batadv0: Interface activated: batadv_slave_0
[  909.416622][T22048] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  909.453516][T22048] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  909.477443][T22048] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  909.490561][T22048] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  909.500854][T22048] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  909.511701][T22048] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  909.532543][T22048] batman_adv: batadv0: Interface activated: batadv_slave_1
[  909.574830][T22048] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  909.603302][T22048] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  909.612089][T22048] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  909.634779][T22048] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  909.870291][T22057] veth0_vlan: entered promiscuous mode
[  909.898728][T22057] veth1_vlan: entered promiscuous mode
[  909.909052][T13364] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  909.943435][T13364] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  910.019857][T22057] veth0_macvtap: entered promiscuous mode
[  910.028496][T13361] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  910.030558][T22057] veth1_macvtap: entered promiscuous mode
[  910.050359][T13361] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  910.081631][T22057] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  910.112376][T22057] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  910.125358][T22057] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  910.136982][T22057] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  910.147319][T22057] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  910.159091][T22057] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  910.169707][T22057] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  910.181985][T22057] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  910.197800][T22057] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  910.210224][T22057] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  910.233907][T22057] batman_adv: batadv0: Interface activated: batadv_slave_0
[  910.270682][T22057] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  910.312259][T22057] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  910.332297][T22057] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  910.348335][T22057] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  910.358700][T22057] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  910.369223][T22057] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  910.379503][T22057] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  910.390291][T22057] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  910.402792][T22057] batman_adv: batadv0: Interface activated: batadv_slave_1
[  910.433887][T22151] netlink: 338 bytes leftover after parsing attributes in process `syz.5.4660'.
[  910.472851][T22057] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  910.482574][T22057] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  910.523140][T22057] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  910.527051][T22155] netlink: 'syz.5.4660': attribute type 1 has an invalid length.
[  910.531885][T22057] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  910.539899][T22155] netlink: 'syz.5.4660': attribute type 1 has an invalid length.
[  910.603425][T22151] netlink: 338 bytes leftover after parsing attributes in process `syz.5.4660'.
[  910.901530][ T5144] Bluetooth: hci1: command tx timeout
[  911.002625][T22168] Malformed UNC in devname
[  911.002625][T22168] 
[  911.024916][ T6403] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  911.040220][ T6403] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  911.048090][T22168] CIFS: VFS: Malformed UNC in devname
[  911.125180][T13361] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  911.153905][T13361] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  911.795677][T22189] netlink: 168 bytes leftover after parsing attributes in process `syz.8.4658'.
[  912.133337][T22199] netlink: 252 bytes leftover after parsing attributes in process `syz.5.4662'.
[  912.681782][T22213] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4665'.
[  912.852975][T22213] Process accounting resumed
[  914.204936][T22265] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4675'.
[  914.247011][T22265] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4675'.
[  914.953349][ T5144] Bluetooth: hci2: Received unexpected HCI Event 0x00
[  915.361243][T22293] Malformed UNC in devname
[  915.361243][T22293] 
[  915.373086][T22293] CIFS: VFS: Malformed UNC in devname
[  915.541446][   T29] audit: type=1804 audit(4294967319.450:36): pid=22299 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.4684" name="#)-\&[}" dev="mqueue" ino=74443 res=1 errno=0
[  915.565685][T13355] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  915.586894][T22301] kernel read not supported for file /#)-\&[} (pid: 22301 comm: syz.5.4684)
[  915.695484][T22305] HSR: entered promiscuous mode
[  915.733307][   T29] audit: type=1800 audit(4294967319.640:37): pid=22301 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.4684" name="#)-\&[}" dev="mqueue" ino=74443 res=0 errno=0
[  916.178415][T13355] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  916.324138][ T5840] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  916.351425][ T5840] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  916.361520][ T5840] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  916.372454][ T5840] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  916.380499][ T5840] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  916.388202][ T5840] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  916.522457][T13355] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  916.756539][T13355] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  917.159674][T13355] bridge_slave_1: left allmulticast mode
[  917.189756][T13355] bridge_slave_1: left promiscuous mode
[  917.217723][T13355] bridge0: port 2(bridge_slave_1) entered disabled state
[  917.255937][T13355] bridge_slave_0: left allmulticast mode
[  917.274947][T13355] bridge_slave_0: left promiscuous mode
[  917.280720][T13355] bridge0: port 1(bridge_slave_0) entered disabled state
[  918.513140][ T5840] Bluetooth: hci0: command tx timeout
[  918.572404][T13355] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  918.680435][T13355] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  918.735591][T13355] bond0 (unregistering): Released all slaves
[  918.978322][T22329] chnl_net:caif_netlink_parms(): no params data found
[  919.343670][T22355] netlink: 'syz.3.4692': attribute type 1 has an invalid length.
[  919.351758][T22355] netlink: 'syz.3.4692': attribute type 1 has an invalid length.
[  919.516554][T22351] netlink: 338 bytes leftover after parsing attributes in process `syz.3.4692'.
[  919.543384][T22353] netlink: 338 bytes leftover after parsing attributes in process `syz.3.4692'.
[  920.222012][T22329] bridge0: port 1(bridge_slave_0) entered blocking state
[  920.229968][T22329] bridge0: port 1(bridge_slave_0) entered disabled state
[  920.237323][T22329] bridge_slave_0: entered allmulticast mode
[  920.251016][T22329] bridge_slave_0: entered promiscuous mode
[  920.259260][T22329] bridge0: port 2(bridge_slave_1) entered blocking state
[  920.268575][T22329] bridge0: port 2(bridge_slave_1) entered disabled state
[  920.303282][T22329] bridge_slave_1: entered allmulticast mode
[  920.311072][T22329] bridge_slave_1: entered promiscuous mode
[  920.464879][T22381] netlink: 168 bytes leftover after parsing attributes in process `syz.5.4696'.
[  920.525683][T22329] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  920.573225][ T5840] Bluetooth: hci0: command tx timeout
[  920.581568][T13355] hsr_slave_0: left promiscuous mode
[  920.640722][T22389] netlink: 252 bytes leftover after parsing attributes in process `syz.8.4698'.
[  920.749234][T13355] hsr_slave_1: left promiscuous mode
[  920.790576][T13355] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  920.801622][T13355] batman_adv: batadv0: Removing interface: batadv_slave_0
[  920.814890][T13355] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  920.822367][T13355] batman_adv: batadv0: Removing interface: batadv_slave_1
[  920.894928][T13355] veth1_macvtap: left promiscuous mode
[  920.900519][T13355] veth0_macvtap: left promiscuous mode
[  920.912480][T13355] veth1_vlan: left promiscuous mode
[  920.933147][T13355] veth0_vlan: left promiscuous mode
[  921.569525][T22403] netlink: 'syz.5.4702': attribute type 1 has an invalid length.
[  921.628497][T22403] netlink: 'syz.5.4702': attribute type 1 has an invalid length.
[  922.289412][T13355] team0 (unregistering): Port device team_slave_1 removed
[  922.382816][T13355] team0 (unregistering): Port device team_slave_0 removed
[  922.653230][ T5840] Bluetooth: hci0: command tx timeout
[  923.271043][T22329] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  923.305454][T22400] netlink: 338 bytes leftover after parsing attributes in process `syz.5.4702'.
[  923.410664][T22329] team0: Port device team_slave_0 added
[  923.430830][T22329] team0: Port device team_slave_1 added
[  923.615569][T22329] batman_adv: batadv0: Adding interface: batadv_slave_0
[  923.632606][T22329] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  923.721309][T22329] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  923.760538][T22329] batman_adv: batadv0: Adding interface: batadv_slave_1
[  923.788657][T22329] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  923.902484][T22329] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  924.107292][T22329] hsr_slave_0: entered promiscuous mode
[  924.141687][T22435] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4710'.
[  924.192151][T22329] hsr_slave_1: entered promiscuous mode
[  924.240483][T22329] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  924.248496][T22329] Cannot create hsr debugfs directory
[  924.561725][T22448] can: request_module (can-proto-0) failed.
[  924.733356][ T5840] Bluetooth: hci0: command tx timeout
[  925.059757][T22466] netlink: 338 bytes leftover after parsing attributes in process `syz.8.4717'.
[  925.134707][T22329] netdevsim netdevsim9 netdevsim0: renamed from eth0
[  925.242249][T22470] netlink: 'syz.8.4717': attribute type 1 has an invalid length.
[  925.250429][T22470] netlink: 'syz.8.4717': attribute type 1 has an invalid length.
[  925.272855][T22466] netlink: 338 bytes leftover after parsing attributes in process `syz.8.4717'.
[  925.293916][T22329] netdevsim netdevsim9 netdevsim1: renamed from eth1
[  925.315829][T22329] netdevsim netdevsim9 netdevsim2: renamed from eth2
[  925.474932][T22482] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  925.671953][T22329] netdevsim netdevsim9 netdevsim3: renamed from eth3
[  926.016818][T22329] 8021q: adding VLAN 0 to HW filter on device bond0
[  926.082072][T22329] 8021q: adding VLAN 0 to HW filter on device team0
[  926.117950][T13348] bridge0: port 1(bridge_slave_0) entered blocking state
[  926.125155][T13348] bridge0: port 1(bridge_slave_0) entered forwarding state
[  926.172825][T13348] bridge0: port 2(bridge_slave_1) entered blocking state
[  926.180134][T13348] bridge0: port 2(bridge_slave_1) entered forwarding state
[  926.424652][T22501] 
[  926.427036][T22501] ======================================================
[  926.434067][T22501] WARNING: possible circular locking dependency detected
[  926.441093][T22501] 6.13.0-rc2-syzkaller-00159-gf932fb9b4074 #0 Not tainted
[  926.448202][T22501] ------------------------------------------------------
[  926.455213][T22501] syz.5.4725/22501 is trying to acquire lock:
[  926.461271][T22501] ffffffff8fabdc08 (rtnl_mutex){+.+.}-{4:4}, at: do_ipv6_setsockopt+0x1f4d/0x4660
[  926.470550][T22501] 
[  926.470550][T22501] but task is already holding lock:
[  926.477922][T22501] ffff8880644a4fa8 (&smc->clcsock_release_lock){+.+.}-{4:4}, at: smc_setsockopt+0x101/0xc00
[  926.488058][T22501] 
[  926.488058][T22501] which lock already depends on the new lock.
[  926.488058][T22501] 
[  926.498463][T22501] 
[  926.498463][T22501] the existing dependency chain (in reverse order) is:
[  926.507495][T22501] 
[  926.507495][T22501] -> #2 (&smc->clcsock_release_lock){+.+.}-{4:4}:
[  926.516109][T22501]        __mutex_lock+0x19b/0xa60
[  926.521145][T22501]        smc_switch_to_fallback+0x2d/0xa00
[  926.526967][T22501]        smc_sendmsg+0x13d/0x520
[  926.531937][T22501]        ____sys_sendmsg+0x9ae/0xb40
[  926.537223][T22501]        ___sys_sendmsg+0x135/0x1e0
[  926.542427][T22501]        __sys_sendmsg+0x16e/0x220
[  926.547542][T22501]        do_syscall_64+0xcd/0x250
[  926.552570][T22501]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  926.558996][T22501] 
[  926.558996][T22501] -> #1 (sk_lock-AF_INET){+.+.}-{0:0}:
[  926.566650][T22501]        lock_sock_nested+0x3a/0xf0
[  926.571862][T22501]        sockopt_lock_sock+0x54/0x70
[  926.577154][T22501]        do_ip_getsockopt+0x115c/0x2bf0
[  926.582707][T22501]        ip_getsockopt+0x9c/0x1e0
[  926.587820][T22501]        raw_getsockopt+0x4d/0x1e0
[  926.592943][T22501]        do_sock_getsockopt+0x3fe/0x870
[  926.598508][T22501]        __sys_getsockopt+0x12f/0x260
[  926.603887][T22501]        __x64_sys_getsockopt+0xbd/0x160
[  926.609522][T22501]        do_syscall_64+0xcd/0x250
[  926.614550][T22501]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  926.621067][T22501] 
[  926.621067][T22501] -> #0 (rtnl_mutex){+.+.}-{4:4}:
[  926.628284][T22501]        __lock_acquire+0x249e/0x3c40
[  926.633673][T22501]        lock_acquire.part.0+0x11b/0x380
[  926.639317][T22501]        __mutex_lock+0x19b/0xa60
[  926.644347][T22501]        do_ipv6_setsockopt+0x1f4d/0x4660
[  926.650068][T22501]        ipv6_setsockopt+0xcb/0x170
[  926.655268][T22501]        tcp_setsockopt+0xa4/0x100
[  926.660382][T22501]        smc_setsockopt+0x1b4/0xc00
[  926.665587][T22501]        do_sock_setsockopt+0x222/0x480
[  926.671152][T22501]        __sys_setsockopt+0x1a0/0x230
[  926.676526][T22501]        __x64_sys_setsockopt+0xbd/0x160
[  926.682213][T22501]        do_syscall_64+0xcd/0x250
[  926.687240][T22501]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  926.693657][T22501] 
[  926.693657][T22501] other info that might help us debug this:
[  926.693657][T22501] 
[  926.703980][T22501] Chain exists of:
[  926.703980][T22501]   rtnl_mutex --> sk_lock-AF_INET --> &smc->clcsock_release_lock
[  926.703980][T22501] 
[  926.717547][T22501]  Possible unsafe locking scenario:
[  926.717547][T22501] 
[  926.724990][T22501]        CPU0                    CPU1
[  926.730348][T22501]        ----                    ----
[  926.735710][T22501]   lock(&smc->clcsock_release_lock);
[  926.741081][T22501]                                lock(sk_lock-AF_INET);
[  926.748014][T22501]                                lock(&smc->clcsock_release_lock);
[  926.755906][T22501]   lock(rtnl_mutex);
[  926.759887][T22501] 
[  926.759887][T22501]  *** DEADLOCK ***
[  926.759887][T22501] 
[  926.768020][T22501] 1 lock held by syz.5.4725/22501:
[  926.773122][T22501]  #0: ffff8880644a4fa8 (&smc->clcsock_release_lock){+.+.}-{4:4}, at: smc_setsockopt+0x101/0xc00
[  926.783679][T22501] 
[  926.783679][T22501] stack backtrace:
[  926.789558][T22501] CPU: 0 UID: 0 PID: 22501 Comm: syz.5.4725 Not tainted 6.13.0-rc2-syzkaller-00159-gf932fb9b4074 #0
[  926.800317][T22501] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024
[  926.810370][T22501] Call Trace:
[  926.813643][T22501]  <TASK>
[  926.816572][T22501]  dump_stack_lvl+0x116/0x1f0
[  926.821272][T22501]  print_circular_bug+0x41c/0x610
[  926.826320][T22501]  check_noncircular+0x31a/0x400
[  926.831281][T22501]  ? __pfx_check_noncircular+0x10/0x10
[  926.837019][T22501]  ? hlock_class+0x4e/0x130
[  926.841530][T22501]  ? hlock_class+0x4e/0x130
[  926.846042][T22501]  ? lockdep_lock+0xc6/0x200
[  926.850640][T22501]  ? __pfx_lockdep_lock+0x10/0x10
[  926.855689][T22501]  __lock_acquire+0x249e/0x3c40
[  926.860566][T22501]  ? __pfx___lock_acquire+0x10/0x10
[  926.865789][T22501]  lock_acquire.part.0+0x11b/0x380
[  926.870910][T22501]  ? do_ipv6_setsockopt+0x1f4d/0x4660
[  926.876293][T22501]  ? __pfx_lock_acquire.part.0+0x10/0x10
[  926.881930][T22501]  ? rcu_is_watching+0x12/0xc0
[  926.886701][T22501]  ? trace_lock_acquire+0x14e/0x1f0
[  926.891904][T22501]  ? __pfx___lock_acquire+0x10/0x10
[  926.897116][T22501]  ? do_ipv6_setsockopt+0x1f4d/0x4660
[  926.902493][T22501]  ? lock_acquire+0x2f/0xb0
[  926.906999][T22501]  ? do_ipv6_setsockopt+0x1f4d/0x4660
[  926.912390][T22501]  __mutex_lock+0x19b/0xa60
[  926.916897][T22501]  ? do_ipv6_setsockopt+0x1f4d/0x4660
[  926.922274][T22501]  ? __pfx_mark_lock+0x10/0x10
[  926.927045][T22501]  ? do_ipv6_setsockopt+0x1f4d/0x4660
[  926.932418][T22501]  ? __pfx___mutex_lock+0x10/0x10
[  926.937449][T22501]  ? __pfx_register_lock_class+0x10/0x10
[  926.943083][T22501]  ? finish_task_switch.isra.0+0x217/0xcc0
[  926.949237][T22501]  ? hlock_class+0x4e/0x130
[  926.953748][T22501]  ? do_ipv6_setsockopt+0x1f4d/0x4660
[  926.959124][T22501]  ? rtnl_lock+0x9/0x20
[  926.963285][T22501]  do_ipv6_setsockopt+0x1f4d/0x4660
[  926.968510][T22501]  ? __pfx_do_ipv6_setsockopt+0x10/0x10
[  926.974062][T22501]  ? lock_acquire.part.0+0x11b/0x380
[  926.979350][T22501]  ? __mutex_trylock_common+0xea/0x250
[  926.984817][T22501]  ? __pfx___mutex_trylock_common+0x10/0x10
[  926.990717][T22501]  ? smc_setsockopt+0x101/0xc00
[  926.995579][T22501]  ? rcu_is_watching+0x12/0xc0
[  927.000346][T22501]  ? trace_contention_end+0xee/0x140
[  927.005642][T22501]  ? __mutex_lock+0x1cc/0xa60
[  927.010325][T22501]  ? smc_setsockopt+0x101/0xc00
[  927.015187][T22501]  ? __pfx___mutex_lock+0x10/0x10
[  927.020217][T22501]  ? ipv6_setsockopt+0xcb/0x170
[  927.025069][T22501]  ipv6_setsockopt+0xcb/0x170
[  927.029762][T22501]  tcp_setsockopt+0xa4/0x100
[  927.034359][T22501]  smc_setsockopt+0x1b4/0xc00
[  927.039047][T22501]  ? __pfx_sock_common_setsockopt+0x10/0x10
[  927.044952][T22501]  ? __pfx_smc_setsockopt+0x10/0x10
[  927.050163][T22501]  ? __pfx_smc_setsockopt+0x10/0x10
[  927.055370][T22501]  do_sock_setsockopt+0x222/0x480
[  927.060410][T22501]  ? __pfx_do_sock_setsockopt+0x10/0x10
[  927.065971][T22501]  ? lock_acquire+0x2f/0xb0
[  927.070484][T22501]  __sys_setsockopt+0x1a0/0x230
[  927.075342][T22501]  __x64_sys_setsockopt+0xbd/0x160
[  927.080455][T22501]  ? do_syscall_64+0x91/0x250
[  927.085136][T22501]  ? lockdep_hardirqs_on+0x7c/0x110
[  927.090336][T22501]  do_syscall_64+0xcd/0x250
[  927.094855][T22501]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  927.100769][T22501] RIP: 0033:0x7fb48dd85d19
[  927.105194][T22501] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  927.125080][T22501] RSP: 002b:00007fb48eb28038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  927.133508][T22501] RAX: ffffffffffffffda RBX: 00007fb48df75fa0 RCX: 00007fb48dd85d19
[  927.141482][T22501] RDX: 000000000000001b RSI: 0000000000000029 RDI: 0000000000000005
[  927.149462][T22501] RBP: 00007fb48de01a20 R08: 0000000000000201 R09: 0000000000000000
[  927.157440][T22501] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  927.165419][T22501] R13: 0000000000000000 R14: 00007fb48df75fa0 R15: 00007ffcd8ae1ca8
[  927.173401][T22501]  </TASK>
[  927.391093][T22329] 8021q: adding VLAN 0 to HW filter on device batadv0
[  928.022406][ T6403] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  928.118046][ T6403] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  928.198429][ T6403] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  928.269595][ T6403] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  928.416254][ T6403] bridge_slave_1: left allmulticast mode
[  928.428418][ T6403] bridge_slave_1: left promiscuous mode
[  928.436454][ T6403] bridge0: port 2(bridge_slave_1) entered disabled state
[  928.445516][ T6403] bridge_slave_0: left allmulticast mode
[  928.451189][ T6403] bridge_slave_0: left promiscuous mode
[  928.457425][ T6403] bridge0: port 1(bridge_slave_0) entered disabled state
[  928.571370][ T6403] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  928.581850][ T6403] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  928.594382][ T6403] bond0 (unregistering): Released all slaves
[  928.700159][ T6403] HSR: left promiscuous mode
[  928.863660][ T6403] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  928.872167][ T6403] batman_adv: batadv0: Removing interface: batadv_slave_0
[  928.880512][ T6403] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  928.888037][ T6403] batman_adv: batadv0: Removing interface: batadv_slave_1
[  928.898043][ T6403] veth1_macvtap: left promiscuous mode
[  928.903902][ T6403] veth0_macvtap: left promiscuous mode
[  928.909489][ T6403] veth1_vlan: left promiscuous mode
[  928.914875][ T6403] veth0_vlan: left promiscuous mode
[  929.036145][ T6403] team0 (unregistering): Port device team_slave_1 removed
[  929.048306][ T6403] team0 (unregistering): Port device team_slave_0 removed
[  929.636882][ T6403] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  929.691127][ T6403] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  929.738278][ T6403] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  929.790481][ T6403] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  929.881445][ T6403] bridge_slave_1: left allmulticast mode
[  929.887497][ T6403] bridge_slave_1: left promiscuous mode
[  929.893531][ T6403] bridge0: port 2(bridge_slave_1) entered disabled state
[  929.901816][ T6403] bridge_slave_0: left allmulticast mode
[  929.908255][ T6403] bridge_slave_0: left promiscuous mode
[  929.914021][ T6403] bridge0: port 1(bridge_slave_0) entered disabled state
[  929.922596][ T6403] bridge_slave_1: left allmulticast mode
[  929.928589][ T6403] bridge_slave_1: left promiscuous mode
[  929.934791][ T6403] bridge0: port 2(bridge_slave_1) entered disabled state
[  929.942864][ T6403] bridge_slave_0: left allmulticast mode
[  929.948735][ T6403] bridge_slave_0: left promiscuous mode
[  929.954872][ T6403] bridge0: port 1(bridge_slave_0) entered disabled state
[  930.128850][ T6403] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  930.138781][ T6403] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  930.148827][ T6403] bond0 (unregistering): Released all slaves
[  930.161356][ T6403] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  930.171445][ T6403] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  930.182633][ T6403] bond0 (unregistering): Released all slaves
[  930.435803][ T6403] hsr_slave_0: left promiscuous mode
[  930.441609][ T6403] hsr_slave_1: left promiscuous mode
[  930.449911][ T6403] batman_adv: batadv0: Removing interface: batadv_slave_0
[  930.460118][ T6403] batman_adv: batadv0: Removing interface: batadv_slave_1
[  930.470587][ T6403] hsr_slave_0: left promiscuous mode
[  930.477679][ T6403] hsr_slave_1: left promiscuous mode
[  930.485024][ T6403] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  930.492441][ T6403] batman_adv: batadv0: Removing interface: batadv_slave_0
[  930.500289][ T6403] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  930.507798][ T6403] batman_adv: batadv0: Removing interface: batadv_slave_1
[  930.518584][ T6403] veth1_macvtap: left promiscuous mode
[  930.524241][ T6403] veth0_macvtap: left promiscuous mode
[  930.529761][ T6403] veth1_vlan: left promiscuous mode
[  930.535120][ T6403] veth0_vlan: left promiscuous mode
[  930.684115][ T6403] team0 (unregistering): Port device team_slave_1 removed
[  930.712199][ T6403] team0 (unregistering): Port device team_slave_0 removed
[  930.880552][ T6403] team0 (unregistering): Port device team_slave_1 removed
[  930.911271][ T6403] team0 (unregistering): Port device team_slave_0 removed