last executing test programs:

2m20.028760378s ago: executing program 1 (id=485):
mprotect$auto(0x8, 0x5, 0xffffffffffff43eb)
r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/net/fib_trie\x00', 0xc00, 0x0)
pread64$auto(r0, 0x0, 0x808, 0x4003ff)
readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1)

2m19.858683227s ago: executing program 1 (id=486):
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000340)='/dev/video23\x00', 0x80000, 0x0)
r0 = open(&(0x7f0000000100)='.\x00', 0x0, 0x408)
getdents$auto(r0, 0x0, 0x400018)
ioctl$auto(0x3, 0x4020565a, 0x38)
socket(0x2, 0x1, 0x84)
connect$auto(0x3, &(0x7f0000000000)=@in={0x2, 0x0, @rand_addr=0xfffffffe}, 0x55)
listen$auto(0x3, 0x83)
setsockopt$auto(0x3, 0x0, 0x400004, 0x0, 0x0)
accept$auto(0x3, 0xffffffffffffffff, 0xfffffffffffffffd)

2m19.693885226s ago: executing program 1 (id=488):
shmat$auto(0x0, &(0x7f0000000580)='(\x00', 0xfffffffa)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/security/tomoyo/query\x00', 0x20840, 0x0)
close_range$auto(0x2, 0x8, 0x0)
socket(0x10, 0x2, 0x0)
sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x20008010}, 0x400d0)
r1 = syz_genetlink_get_family_id$auto_ioam6(&(0x7f0000000600), 0xffffffffffffffff)
stat$auto(&(0x7f0000000240)='./file0\x00', &(0x7f0000000300)={0xd250, 0x6, 0x3, 0x7, <r2=>0x0, 0xee01, 0x0, 0x8001, 0x0, 0x9, 0x88d5, 0xa, 0x9c7, 0x2, 0xb99d, 0x380000000, 0x95})
setfsuid$auto(r2)
sendmsg$auto_IOAM6_CMD_DEL_NAMESPACE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r1, 0x9, 0x70bd2c, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x808)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0)
shmat$auto(0x401, &(0x7f0000000280)='IOAM6\x00', 0x2)
shmat$auto(0x0, &(0x7f0000000000)='(\x00', 0xfffffffe)
sendmsg$auto_IPVS_CMD_NEW_DEST(r0, &(0x7f0000000200)={&(0x7f0000000140), 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x0, 0x100, 0x70bd2a, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc040}, 0x20000000)

2m19.458851661s ago: executing program 1 (id=490):
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x10, 0x70bd2c, 0x25dfdbfd, {0xa, 0x0, 0xa00}}, 0x14}, 0x1, 0x0, 0x0, 0x20008000}, 0x10004010)
socket(0x10, 0x2, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1a0027"], 0x1ac}}, 0x40000)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x40000000, 0x9}, 0x7}, 0x3, 0x0)

2m19.305817247s ago: executing program 1 (id=492):
r0 = syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff)
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
io_uring_setup$auto(0x1, 0x0)
futex$auto(0x0, 0x6, 0x8, 0x0, 0x0, 0xffffffd6)
mmap$auto(0x0, 0x8, 0x1000000004, 0x9b72, 0x2, 0x8000)
tkill$auto(0x1, 0x7)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_OVS_FLOW_CMD_GET(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x30, r0, 0x1, 0x70bd29, 0x25dfdc02, {}, [@OVS_FLOW_ATTR_PROBE={0x4}, @OVS_FLOW_ATTR_KEY={0x18, 0x1, 0x0, 0x1, [@nested={0x14, 0x10, 0x0, 0x1, [@typed={0x8, 0x8, 0x0, 0x0, @ipv4=@remote}, @typed={0x8, 0x8, 0x0, 0x0, @uid}]}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x200400f0}, 0x800)
r2 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/kernel/yama/ptrace_scope\x00', 0x0, 0x0)
r3 = openat$auto_tracing_err_log_fops_trace(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/tracing/error_log\x00', 0x2000, 0x0)
write$auto_tracing_err_log_fops_trace(r3, &(0x7f0000000080)="074e9eda46f33b91a95f42e0aa2308974c6bdc9f1015d3a110222136ea79218bf444a6b65708a38e4d54147dc91a93e5a8ce2320c771923f78f13bfea6fd2c6222a9b7d32883eadd2064f5fa3e58abd12625832254faec81b4b46bee24a4807ef4219c0be4a86012d572cfa5968705059413061ea28187b8b4384a5f6fe9f8f365dc70109d03070d5be1eadb15ab96886fa70ba3891e32d06e07fcd6ed715487bd97e02cf5d0198195e0b57e5d559de3262aeb78f403a0fcbc74f7987c2d9709879a4694ca63c6a9997dc6f9deda911609d0352806313cc5857cb2027a5c55d484e5ac1777ad2282208ac76d241df7df4db621d31152c09a0c2219495123e3c77206bf2f99c4c1b1c45c14feb6f2f627a8c7c4d0dbabacade4be00a1203ce8b4d00af62640b73cbef69cdad6f21e3f73612b687a3dc88de6af798cb279b942f5208fa3bfb078185d647246bfcd632d5c391c2964f3ff4335ef1092d3b850236db348821c8212e817f499e1a019b9c134705d04c1ee1476104f8e8653bef349e9e2b05aacc77064557eff4def200d71376a24ef19883efcda7c79ed107856f4fa357ed805cbc984801dafc3d92e7916e94c673c3f067f6a58818da6847dd8741ce43670b3b151e83a758898db992672012f2a995c78bdfa7e995b236fdbe493730ef769481ca125127a3e1d2dcb8634a7ed9bdb03b27b51f06cda3dc4aac063cb40649add770b08a469ae146c9d38672b0b565845c8a0a58bd6ee8f4b66240335478cf4d788449ca442c4e5cf2358f894be1eaaaba262ab4f62885eb1ea765f86be48b2b74f816b5e943197e762330d6f757d682b60449e9be3413d1225d4bc34abd8f670572e91ec9532f03cf6c1e870d890e7923156b3f93915cfcb193b44b57916145cca92a3c465630b506e52d9f1b706d1211d5ab0dd47bafef3ec4c7094e121f8189d721c1c3f71732b6923281a1fb9a12d00b74a3934889ee77eaef80a0be97321e866923fcb51323d0c82de082fea55133538099c73bfe807c49119d8de9f3b375f80ca555f8337381a716c021b199af2674f72941976140b9e200df13ecec8d0d3cbfce7d121589a1947a389f52cdd8ee01808c5196047919a3441efc652eb23a98f4a3f089de76e26f83b0c057cb5fa08c5092121f4c65f2b782c7d796a352158c5e5cbda2af682cfe256ad3cdf1cc30a0f1c7780ae7ae80a46fb7f7635ac02ef22f562f8f840f3041bfc65fc6fa8d21b04db75aa95d41179de76b87bceb6284a6d15aa9514ebc2ea58afa6e1e19151245778523ef2158509b147fa805bc5819a36b7144f8d7acc571aa9a9b10b85ec17e0a80b2dd1442c7c8d90db62a1d5243fe8cf3ed21528b8a13fe369670faa62355f77e1cd51a5f030566bc1b98a971d84998d889cc0ae091536c984fdcdb9c3765b5b46cf4c94af8e0e6ba281f41f66bbebcf8f44dd504385b40a5a597b0dce503d247d7478a5d5738d6388c065e08ee0c9537d4eb23be0b70c36711a60ae64e0a30de39b2c0cc352b96c4a036ec4d19c2ed784603f2292e6601f1a19556de89caab651a617eea04232ad9611d6bc94cf13b48526951a1821727106d6ce7a75a295aecc518743a718075043f2f0463116b8a91e3a8f64f769727334d6257a598bf6bc7732f3c6d6384adf6dee9499e0d390b60c83d5d978b81621bd77e98626c638d19a568d9f9fa0134e5582a77bdd1aa8cd3d3e1d0e3aed64fe696c4a34067af3e20954a2e142f3e5f55d807c6b74f4d823dd44d9a11342094722c78aacb5773477d5439bb49b5685cbaba6f5e5573692789ab74278fed2b7298b5b23221f1d06240318e2c4cef27ebf1543cd9cf535e27cefcea7b5b25751969373157815c6e966c63d36b90072d1e4151155970de4abf96d67d2652734bfbb88639e612b200fc2f1fa744ac0b2f4525ee8e12641b499928772feb208e7e6bca2c3ee659dadd7d8cee56d26b44c62623858c1f22405edd4b76939f66aa0541456bfa7eb4ff620d9cb1201ef907096f0ed9e0c46d31f70c197a1287695b98ef71c4d0b58a3f0ef0736bafdbee4beb39597f323eb7649bc9bc9929780a4ba9c794bc52b7a97e2f61e78d3122e8819631d793722737f74909d781d4064cc9aa28cd73e11cd90cc6c2b62cf5a5eaac58a03c87e8d0c46eb2e49c763bd670bb6ff2f7cb62ce1fd38de9ea56cfb6ef48b63928c2c30476108ed45f719419a650ed6e72724ee2fd255adc34a407397e608c3124f1e0a32fcaf54720286ec40ce373c55e1e3cb190e693ff1c8bafc81f336a0623d7c82041d17ef9f07ce4bb8d075bc4facd9f5b0767ed817070018d426954b6e7d07a37d456700552680214edec183d47c980725d2c713d06fe376fc49230c9e18c58478887dcda43a0a3593d6f18fb009420cf5e37dd5c167ae90c8b8c8662509f20a9f28b7a4742eccd516df5730ba6c666e998e0bf788ec51d63f99ab0bdf6b3c0c5c90508b145808380a98fa8c97f49eb27cfe753007cf6be4179d167a107b6bd8f1a1208279ae38a9d217c1e7487bb204b3d27fbdc89f54025c071f0455b1243209fca5051cdcc37b365b598accffd66137c255ebf69a99fb838e4b043367a3906223ab788a0824e287daf050e5dad9cac0a9312629b59e3b88965302e7fcd7c8224fa0e2daa90b32fa54ab5f2bbd619ea222233cf3b7e99319aa4e34d1927976ebe558fbc8e6aeb5ca2c782cdfe19280b9432fcdc6925d3921c1afa598e5d22f140a7dc1803741489d3109df9401b627af999840be9fae55f545cb43ee99ea684daa7c105c34666098b09f8408e8f858a74cff8f725a9cf28a6342b968132d58929e7be0aef2264840dfedc0629f12285b52b12a562759f8c97a2eea793501e5859b6f37c7a9f8e279d02c0e965d86c37ce19028b934acf68d91cb577e3b9e9d7afc8f1a875b37d5a717a499501adc9ec9ecf2c47defeff2034fbe760304224ae1ab52f26313dafec71e30d7db727870212e8fd6db5a63838d4d65f4196467e610abd77aed8c7205463e96837e9e28b9c65a2e3f8847a5792786b73deb58eea900aa0f68330cf984f92881355bf681a84840921c460859469cd2ef8b7bfdecc57d6897a2d04d7f9d0858fd05877cb0eb3d7e496f893a33c33cd3d26b1d1184bb44c78937478dea67256b021aefc78f9adfcb8294175c4c3b872efc0d02108c759e0e4c55b6f27bead04ce61736011a532a5ab14b4f9168229264eb8bd828238bb0d91f5564615cecceba0adff4bc42f6c90371319f763ac19a41365217896725eb33860557850ac2d6e4c286c3e4a9372b86f41707d832766e532384048c26382f1a77071c8627f98afedc566ba2b69e4956dc5ac2cff7f29bde984152464a6a1242b109841303369b4e35ad6fcb681bb89068a01a428fcf0d6643eb34a3d032b56b5f4a1b4bc2dcd58110843dc2ba256b55960502cc087c12442cb49cff87e3ccf3b91d246aebe1208c23d56555c7ac6fae8fc1576e8907345c5be5015e44d23bde602418946d2e17e733fd297eb027de68037cef30200411739fd4ad683e7a8038c74b7ac5121667ff5adcef959045b8cedb13e8132c9dac80f17ffc08302f5da81b318391da06549b44808d8e4fd3254919def512b6523299fdf878df258fa04513ce6506d7d2723ac63f3a0fe10f71ebc3f960f3789425199d2b9af13d3bd6a666a2092e2173555c13862317b5828ae044ce2e767ef074b9e9558c6c873c3ab88ea304bab171c3c8ec2e9ed90ac64ba26b6b3d310a90c766a5b3e80d68e31848aaeffb511736e7b1ff930611419a1ea82fdd3a0b3ec62b94f714885f0c9bd0be48f919ddcad09a431c0826156fa8125bca947788ee782f85803c39cd3bd85847297d4eca74d045cadfda832a180a2c691de96bbe0e95b5cf251e561727b0d2eed03689e8b5192c93a9fbcb2e1186bb13540d54d40bafe9578ad6d9dc5a0dad5070ac6167b134f6aa8679fbadf46eada717a56cb75416d926066191124a939aae80616bdf7adcbd35b3ecc0077a045a23d92a2bb2415e016e48c94fc784801dbe4179ebdbde49e10c30d32cb444689587f2b6347250b3d741e7ebae46a3655caa36a8308b634caa7e98de12ce63503face92d1a3e7b4cb3fa1a04b705fef6f9d2a8c2f047f3e0758aed69989245946a0c5fb2c82ec885890b3504202d4970b496af4c636104c9c408ea63b63ffe56f1ac190ac811cf66ae32846f4e717f82eac4654fa87abe89c66433ef07a2e8f468c1e743bfdd9a813689b5147d545ccd768cb439342d9ae416c55462e1103c930668f3d3039165c75e594746fa5212dd7a753079783fb52c3b0c2cef2ba188cabc3d12c81aea6fe591528f88d740802f4d0ecb303adae66cfe0d242fdf413928fb9e2a70928be38c505c0a6055fe82fa3c226e54ef3dc8a95d5c4a375ee00c3d4ef9d1298d18798ac9d38b2cdc5ce4a110b1b975480f78a54e1cc2757afd1ac8af76892bbbe6dd96e6a87611bd375d0396527a4f33f111ed867a39541499156fe2bdcb08b569dc18f913b5875ad5ce1b3bd0ae69e0e9a11ee19c91591cd5afd450f865dec2e2527982ae5e77cf3e7c380e7f501dc57a82932e9b6122485938cb25562fa280b20b86f06c181cfd7085003c13b0e395d6148233361cbc25beef7a76a66aee4473f4c6790edaddc1eeac0c514f610db0ce61ff0a7a616e5c6afb2539450aa80167b7e5b2bc4866bd667ae111e5ba60938ebab4af702c13b2ef4bad996bf736ef496f9b3c232c7b4706f20b16ccd5b35947a50f1ff958d58f66853e0e9130c328faedb200e7322413b8edba8ebfa532913e4d7034504c87dad0cb92482856252d9c2552cb557d5388c491b4762fd7f50a35c39bcb99953718373bb827707da5017550135cce43891c9919322d2436b7e494b2bd2429e7e13c9f3d64a32d87e3dc319d7960c9883f9fbf3b0c7f87a19569252ffdf71b8c7045328ebbe4f8ad6a5c40c6368d48a018284650329ecd1820e973928010ddd6b0ae4304f00d9cc679115d5c9e8d693a3de96f2fa31025f3ce50493cb8cf6471901cbf449eb96b592a1e803510328eeab0e0dbece6e99e94b222bff07e49e5ac5008a55ae3a2f829793e2e10f13e6585a9670ebdc23a4da42c648a2d866190860d8c8399f9740a9fd945be0e036967405228a14300b33e0aa802dd2728bf2dd75ec69c82aaf7a087c01d0024dec2c4d824c75a0019a0145890001309245ff0855d95c2ec8d53a1a06a80eec113f8d5faea369b3278da96c46ce3ca1ead6fa706a16928d7672cff4dc4cf5d1e7c90b056c33e20414e155ca3cff254d6ec95223f023db988ea8208b25c7c47bc15a66e2c49a7a336250e5f48e05c6e2e4db0c79db4b13db633ef69d6ce89c58c8c93c56531867c5e3fc0bc05a663b37c3e3b1ec256139944809c7503b6b0a3c2be672ddb40ce98f8531e09891ea4a11463ac94b1330a18a7113c194014652e45e1eb6202a9c08ea697f653dbbe5053b043275b21ab6856883368a43be99f5850a6943b6d47fb388feb48d51750a7a7be187ecad59cbc23c77d45bee70c10bac3d9e5079394c5417d938fb1011a4fd8b4d44eeed78a1413079984984a48d96fae45478b6bcc6488cd03592855f9b126fde00d50ab8a51bbd940090a59ec67d07d1f95a2cc1a5a57e26526d232de031ccd53ccdc3731940ab38a766b82d06c18a7a2411376c7c6ce6eff1a5afdbd913fe287af3ba54581e25b5d968b044956ac818a1cf350b94dcb", 0x1000)
open(&(0x7f0000000000)='./file0\x00', 0x261c2, 0x84)
socket(0x2, 0x1, 0x106)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x18, 0x5, 0x1)
fallocate$auto(0x8000000000000003, 0x0, 0xd, 0xcbd5d)
sendfile$auto(0x6, 0x3, 0x0, 0xfffffdef)
mprotect$auto(0x1ffff000, 0x8000000001000001, 0xd)
syslog$auto(0x4, 0xfffffffffffffffd, 0x0)
r4 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg1\x00', 0x20601, 0x0)
r5 = openat$auto_ocfs2_control_fops_stack_user(0xffffffffffffff9c, &(0x7f0000001080), 0x2, 0x0)
r6 = openat$auto_fops_atomic_t_(0xffffffffffffff9c, &(0x7f00000010c0)='/sys/kernel/debug/fail_iommufd/times\x00', 0x119100, 0x0)
close_range$auto(r5, r6, 0x48)
write$auto_sg_fops_sg(r4, 0x0, 0x0)
ioctl$auto_IOCTL_VMCI_QUEUEPAIR_DETACH(r2, 0x7aa, 0x0)

2m17.746398945s ago: executing program 1 (id=500):
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
r0 = openat$auto_ftrace_event_format_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000640)='/sys/kernel/tracing/events/vmalloc/alloc_vmap_area/format\x00', 0x40, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f00000004c0), 0xffffffffffffffff)
sendmsg$auto_ETHTOOL_MSG_FEC_GET(r1, &(0x7f0000001680)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000600)={&(0x7f0000000500)={0xd0, r2, 0x300, 0x70bd2d, 0x25dfdbfb, {}, [@ETHTOOL_A_FEC_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x8}]}, @ETHTOOL_A_FEC_HEADER={0x84, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0xbbf1}]}, @ETHTOOL_A_FEC_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}]}]}, 0xd0}, 0x1, 0x0, 0x0, 0x40}, 0x40000)
pread64$auto(r0, &(0x7f0000000000)='-.+A\'&}#\x00', 0x40e, 0xc8)
newfstatat$auto(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x9, 0xf0b2, 0x2, 0x6, <r3=>0xee00, 0xffffffffffffffff, 0x0, 0x7, 0x7, 0x8001, 0x8000000000000001, 0x2f, 0x4, 0x1, 0x56, 0x3, 0x1}, 0x9)
statx$auto(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x7ff, 0x7fff, &(0x7f0000000180)={0xfff, 0x3, 0x100, 0xe, 0xee00, <r4=>0xffffffffffffffff, 0xfff2, 0x3, 0x10, 0x8, 0x9, 0xffffffffffffffff, {0x3, 0x7}, {0xffffffffffffffff, 0x5}, {0x7, 0xffffffff}, {0x3, 0xb}, 0x160f29b1, 0x4, 0x3, 0x5, 0x7, 0x6, 0x9, 0x401, 0xb2b, 0x5, 0x44, 0x80000000, [0x6, 0xb45f, 0x101, 0xa, 0x8000000000000001, 0xffffffff, 0xfffffffffffffffe, 0x91, 0x9]})
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff)
sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)={0x44, r6, 0x1b, 0x70bd26, 0x25dfdbfd, {}, [@OVS_PACKET_ATTR_PROBE={0x4}, @OVS_PACKET_ATTR_ACTIONS={0x14, 0x3, 0x0, 0x1, [@nested={0x10, 0xe, 0x0, 0x1, [@typed={0xc, 0x94, 0x0, 0x0, @u64=0x6}]}]}, @OVS_PACKET_ATTR_PACKET={0x12, 0x1, "898771f1c19f1779048590828847"}, @OVS_PACKET_ATTR_KEY={0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x4004040}, 0xc800)
r7 = syz_clone(0xc0008000, &(0x7f0000000680)="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", 0x1000, &(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380)="019cf4e74b4766972b9f416e618247d6c127f7d9c63a123362d701dad422a86f547253a90f2a7fda1fdaa405cb493a558cd7c3de99034c6ecbb594591662393b124c159174d43cbb705e2f95b881")
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
socket(0xa, 0x1, 0x0)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
socketpair$auto(0x1e, 0x1, 0x0, 0x0)
r8 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/pts/ptmx\x00', 0x0, 0x0)
ioctl$auto_TIOCSETD2(r8, 0x5423, 0x0)
ioctl$auto_TCFLSH2(r8, 0x89f0, 0x0)
msgctl$auto(0x401, 0xffffffff, &(0x7f0000000400)={{0xba93, r3, r4, 0x401, 0x180, 0x7, 0x1}, &(0x7f0000000280)=0x5, &(0x7f00000002c0), 0x8000000000000000, 0x6, 0xb366, 0x9, 0x7, 0xef4, 0x0, 0xadc, @raw=0x3, @inferred=r7})
close_range$auto(0x2, 0xffffffffffffffff, 0x0)

2m17.361996188s ago: executing program 32 (id=500):
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
r0 = openat$auto_ftrace_event_format_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000640)='/sys/kernel/tracing/events/vmalloc/alloc_vmap_area/format\x00', 0x40, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f00000004c0), 0xffffffffffffffff)
sendmsg$auto_ETHTOOL_MSG_FEC_GET(r1, &(0x7f0000001680)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000600)={&(0x7f0000000500)={0xd0, r2, 0x300, 0x70bd2d, 0x25dfdbfb, {}, [@ETHTOOL_A_FEC_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x8}]}, @ETHTOOL_A_FEC_HEADER={0x84, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0xbbf1}]}, @ETHTOOL_A_FEC_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}]}]}, 0xd0}, 0x1, 0x0, 0x0, 0x40}, 0x40000)
pread64$auto(r0, &(0x7f0000000000)='-.+A\'&}#\x00', 0x40e, 0xc8)
newfstatat$auto(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x9, 0xf0b2, 0x2, 0x6, <r3=>0xee00, 0xffffffffffffffff, 0x0, 0x7, 0x7, 0x8001, 0x8000000000000001, 0x2f, 0x4, 0x1, 0x56, 0x3, 0x1}, 0x9)
statx$auto(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x7ff, 0x7fff, &(0x7f0000000180)={0xfff, 0x3, 0x100, 0xe, 0xee00, <r4=>0xffffffffffffffff, 0xfff2, 0x3, 0x10, 0x8, 0x9, 0xffffffffffffffff, {0x3, 0x7}, {0xffffffffffffffff, 0x5}, {0x7, 0xffffffff}, {0x3, 0xb}, 0x160f29b1, 0x4, 0x3, 0x5, 0x7, 0x6, 0x9, 0x401, 0xb2b, 0x5, 0x44, 0x80000000, [0x6, 0xb45f, 0x101, 0xa, 0x8000000000000001, 0xffffffff, 0xfffffffffffffffe, 0x91, 0x9]})
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff)
sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)={0x44, r6, 0x1b, 0x70bd26, 0x25dfdbfd, {}, [@OVS_PACKET_ATTR_PROBE={0x4}, @OVS_PACKET_ATTR_ACTIONS={0x14, 0x3, 0x0, 0x1, [@nested={0x10, 0xe, 0x0, 0x1, [@typed={0xc, 0x94, 0x0, 0x0, @u64=0x6}]}]}, @OVS_PACKET_ATTR_PACKET={0x12, 0x1, "898771f1c19f1779048590828847"}, @OVS_PACKET_ATTR_KEY={0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x4004040}, 0xc800)
r7 = syz_clone(0xc0008000, &(0x7f0000000680)="d893c5db6f2ea5d105e17568d834c9e8fa0e6adf3c8f342ee8a8244ce831f71de8dab63e1cfa9abd891309b43e5e02e7d76c1afe4babb0500aee64c4b9a0169f803554a75f65a7470ca2d36414a57ffc319f74dc6f1f7a7c49c4f726452b1ec3ec1ee63bd44cccfbfb210ed0ca52460ea19f73e979c79330208bea427616e687010f58d5f1a1b2ff9beb4a663d853eec826b7bff920ec9f306035b22658810bce6c614278a2b5df2d2f15e5ce3d19a15fdc472361ec2b224fb1297bfb111f850054d0532c2b045bfd6ebc6a51255b130cb12583ffdc5a659c78306680b7ef5a1969bd8d6f25adc324335e97669a65c894ce9cff3a1265ee814865f5a01b927e977d0b759417a1addabe29369a94789f568acd0babde07a390dced4a7debbb9b7cd3eb538681d7a7fe9a5ebf4814816777646ded7c4c8af7192df65181e7abcac80211e6745b91857c5876f73ef42acfd04face8c9c284b3c44a10d9fb0a40b713df34716b222f9888b1221f3fbb688654de54329c08bf89884fe03cc06b1eb720e58f9ce579ca37213c825a715bd71322e3e184ef2880b5b654252eff67e4bef37d4b82988f8e83521c33a2b113f9684475b087f67356a85f7ff662613094bfd4ea5963bb1898d54b23799fb7af2b91b4577f48a76760d86dd12a4380c60b900ef239f54ba5d23b38eb802d00982e75f5df20a3f04ac4e00430b488f5e1aac6390cb4b1a561a33cce297ee0a50715a00911c56467015e4792dbc0d56855a115d84e5c72b14350195f5378e2fc275304d52ca3aadece103496cf8fe19b3a84bd12a309a09bbb587143b51614253b7e5c3018fbb5b36e75e3f494e5fdbec940e8491c9d53dba42fa511dba0ae5d47a8c0680a8d383a6e750e230b05e0924f2d3704003235f235a4882ac8eb2412b0998c3df2857447908edae60778cde472b5df26882e678b499cf18fe38a76694757b7c8eacb02748027432fa19e98057300382a22d96dccb333165a605d030785a18ec9cc18f100244baaee09d7910116079ba2a9e4ce52b2976a8712778e2bd4b4c3c6c6b22326384512ab6e9da68591a3fcd257119956a629f21f1a2672b60f82faa27020169dd093e2fde7a569f1b49c1604d974f19f6b6d5ba65f3621fac368bdc70dd24c4f1ba8fc818fb9f99aeb817c6e92aa12c08c813477f556f67bf103197bafa233b2f199d9b9b9bac63fb7ba05c94b8e9fcd551c40922ddb80922758976316283931d347b071ff261e9a18d31594435e03ba120663a881ca4e0523b6a4ab71fdbe827d3cbdb6211a7d0bce7b519e4fe909cfe9160b335d0eb7c21f42961ec370e83a1ffd614ba0bd8570aa0e7b86fd6c26349428b00441b0ce536df965068e5575667c4ccb663aad1d6e164cc2645968fe7aca6b7cd7605448fcd8293a8f943ed3f6d3785dbeac4176e61083a84102494aa2a4cb972eef115eca8ef9e86282df181cbd5e7962157c87b35abf67e50be3db2f26a5df1667875d192d56407d74121c690033cb3cd092b6e8065367a000f31de21156e1d801bcba91c951774b9f369a6d957c95752c7e4cd826c73c16206157a5663e6803389a5fcd4567b3179eafe5912b9caf1c52f333d6434d30e5cf88e97c91fc9703ead22245ed1db84247fe2cc1ca469d233863658889d0c957a5228969dafe7072dc354fb87a1abb6a99f59c6835cd1aa0295abd7102f79bb2bc275c9c59b50f4cec5f0acd197a66760435a684a9a25bbb0a32530d80a50d7548b457bb1b046784515ecfcdf7a27ac4f9cda09f09a55184403e48cbb2b75fc2ae0bca1d93c508314912bace4dc84c930c14bddad9f7eb38cd8716c1dab7140b3bf0abcb4fc3a8e9bf18841d54d98933fe0ce40f7ad183e8ee08886310c8f8fa524264df006acaedb45ebe9b9cda1a2e622429562723f24075b8325c35b623de5d389d4087878baf9baf345c5b2179bc46470f2839592c4fa8a29c04696b6c8c8c903f50fe8742fe4284fdf74ef1044ec80bc7f5258e7e26cde47d0dd7597c5aec5abea9530ece827a2eef668b935c78f9e8e58b03b4a82a2d926507627fe3f6f929c2f174866f487ba9ece4d9aa6ab1dae5692fd40a36fe630ae913a03f0eb9c417ffb88b0d5add85583776c425408f730746d4e7d8ba889ece6a8e495940cabdf38d99b504d8be82f7f0680e58d613339635ea0af500a8eece9364ccb95f49ff3249520389fc3cf98bda84cb4fbd9250a16728080b39e396dc86aa5a274dd29cfc87be7ae7a8f43d36f5609c5b489d39263948575e19672f2b44df1f452b2c77acd6de11ce52e161c472c1462e18b6ad65454a9f00f9912c13528f1bc30685a0217625ce186f83d6f5bbb95ab9d8e0aea9093f84c9b41391096cf45ab6a10541e5fde94c07568fd38886366f4e951b9186c84415e873fb00c6f7062dc7b98cea518e4bb96bb7e0c48d6fba6f159772a6debaee8e2392b24bbf8020321a902a4ab461fb2c7b1e21d08540c631687156a7f0e9ca0f28309330eae0b1578d7cf5a1fc7111c3685b86cdde86e4a8f4b3dab04a6bc366dfa4f2094078f36faa0b824a80229f9f1a41fd07f98bbcdf233f638f95b6f3045f45066f4c996b29d8b50656a86c722c7f8f8b4256aa7e4cc4ec37904d9b8153cc6bf92285f2b817ec1df6990333cd1d6f9f5289d9e992976bd827412587b0c60d07106878965d786a2954a75930851e47fab8a9a020b76894f704828430e10751f15d9c5f58dc8253a42b23138809aa4fa768725f9509de74d503396b3c251d3e57dc4815d4cbfc931cf2442ed75fdba1980f9a35135227a7840fd3e979c794e5bb50836081c915dba22412e62fb965d111e53739b6df114659583612a99789aa91dc064d93282fbdb35db156aa4cc8cdbaaab220517c54a40676de978774d67b82892932e5f9648cebacf4734bd059c61820abe635429dca5be677a3b00699d608b4f7e11d3bebeddcf37b7f5e42005f3cda5ea6c35d807a58281d9d7d445ae7082e59bce4e3c79d8faa3b2dd740862c7aeef112fe0100fe0f518cceed4ec22e187e112d3eb65bf6b5c7699a878b3ab249f0ac42fd619d360c8a060e714890483b8185204a8adea67783f10a42abd8a0463e8481bff527cae0ed515c5bef67b3b6c693c72eb44ef9914ca010394df3602fb990cad71aea1549ca6789797650c532b422fcc43f252e2d34214a1f47d0047982463f29ec72febc40cd1c25b47329e4b2fea43e1185b25b9b3e33fbe59ee02a75548c83f266c4c944e479aac0354cb8cb71b9268f440e30e0c86cd330e08e5c570688fd451efc0f828bbf61c9f3ec8853d03c06675d2df4969ae9aedc71b7f7e93a48b74e945d3474e455395d7a30e27db53f581aeb0d700a248ebf40acb67dd60ce0918dd88b784ff496f13e103b2e743f6a165dab0c8049e1bf5e8c59041b1077acda1dd98b5a356d208d8bea8fb8b94d35ae273a523c53326280adc81fd38de83fae974fcaee17d18c9b9668349968c47739d7d145b179e09529694ef71640a08d69c6201710e27227c0ff5afa80882237184f751369f113980e87ce5b8dec5453a42cd41c32afc8623b16a9d15205d1af1bac402719ef644525c0041a92670283ae0c866ab584f67a691923f6bc728b2958808583b70d73bbc98661cd4c52f0951b5e26c81e04da42247826abeeefb798421320b1201278bb68d7ab15d1cf9d970b27ada6863aa9447128771383fe36dd60d6fc47bae5db8e92022b34eba49e06bbaccef1744ea1ac0385bc3f3f9708e2d9f61ac4387cc330674b04385bca6a64aca41806e2f7fd91b5f85261b912f184e8b5fbb68ec5b4bb728deb175a175000933e91927a59f0bfa6eb94c03e3d3acd137634df651935a8dd21c2e3238a8bb2884ac5d0a74e48cdd3eb875775377def33c5bcd5ee8a7cf9b30bb194fb3ccb2f98a575719d600f94e0aedff9dd130caede82d34ba023ba0b0e03b6e00fd6879194436721047b4bb0248d73cad1263e3147fcf627b765a53fc85c7953a04d3d62443295df5e2e86ed322a4b94817f5fc4c4308c440c3f5ee99a047c902e352ed184c501ed01ed3e9e7febf19fd8c063cba880d9f931c47ea53a1018a188e88acacfd7abc59caf5f864ec74ed3f05d6dc485ffbb0fe24cbb74ecf4140886462ff637e8f21a56c42c250a6b378c8c3bf660cbf9d21cad8de19c7e37a04a4af36bb8d37d13203b732aee18eccedd851f56a82b7e3c01acaed8bff0439202964b1dcc5aebf1ad2f59a036e6fd5ce15752f492003347462a890d974a3cefa277fcd447fd1d51071b4bab0a859d8b7a4e48727946c2f7b1d4cfc29032a8bea377c542bb361e4dc16371b0459176485058d45dc169658928aae500652973848a1b81b397f76804170a299d663f135709dbd28445b1c945ffc061b69574f075d970d5c2f3f1985cbef3c4a189f033d5ce960fd43a7dc4ec2bcc6632545e73f693f6db5411d83eeb9f8e383ed7be6e06c5241411d34b556b62c3006b290cb0948b36f0e27912bcc7c904bc9eeffd039ff2e84dde7209589a123ccf8f950ca581094c19c2f19879a0584756c252c4f55b344871c0dc9fcfb4ce160701cce03411aa7223260254ea7fb0504e4aec45ac82d1a9af2de7c275b03a29e28a1771eb25b8bbb1c79146283a3a4e181ac39f9c9ea8b57971cd0df8c3dfdcc0071d8860b4d5919e4905a7e865721bd57f797bc768fce0a29256216afda2daa92a9d6764597beae486d61c2f463076e3b2e440b0db09b18960f75db43df29187234071f0a85236a6f21cfb373ae36fdff6a73444ea52ec8d849186d4e3fce2adcfaf8db713e5952d91787de4f5f097082666e1d24ed7ca251c9c0ece5693053378073437b1a71251865615e124b98159fd9d43584515fa86b5b6b9aef0c408539628f46993ce28172f63371b45ac0f6b5dff710e3559d9bfe57b827272e21cc5fc0c72dda6e41cd34c90a43b95517d759d50942f1811f7dfe7abf21ffa520d1bc327e059b51917c99555d0c48006fe46179482b967a1e4b222839b2834d7b82fa498fb4fe6e99c2122453a1118ff52f7ae200a473e39f4e8467483d3fa1210f4856fcd1dda0f37fe7efd4223181d0c8ad0018ac445b0dedf869719637560b9748afd113053430695c15e04aebb494e4c81a8edfd6af69aa92048efe2f91fb33260394ff2f862182f38babfc496477e92f36115d6077cb9e2ff0aee071d90d5977d4fda765c5a597dcd13f412e560cc92a9b71a9b419d899697381f6bd0f51b47ff628db921c5fbcd7aa74f065df488a9ed965cda2839de0c41ad282337021241bfbc7377923c352dc1bdaa6e01f11a5b9dba6a7992cb083eb687e61f9e5851d89e9a0138ba4f02ea58fa68b9e8ff0e9bfbb03b705cad56f64baebe6ae6bcc67deb143a13b2b3cbb7b3bb0d3b808c2e8a82798e56742f6b6cfdb214feef3f0654c49e642bf1b05d1afaab6ef3945a506bd0db1c4fff73ae65e63162f25d320f96a251fca07d01729660ccbf439db388d4382a99afd918bc7852cf46c88e9809556a1a0992d2fc84e3bec821456504f532abec00b8ffd914aa755a15ad7770e0a9206ac57f41e25140c90b3a24378484988bcdf0a5801dd3ba652ac8320586e7efe31ba7c2ed88347ba3927f5a4f40c511ef33b7781c0e43705ef17c230330a248597b4d70bfcd577f74cf822e13ce1a38a8a18eb24f5c5151c9d08c010107249252d1f22c20b51c8e84cc691ac92fb24f65e1f2564eb4c5b8910299597de152a", 0x1000, &(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380)="019cf4e74b4766972b9f416e618247d6c127f7d9c63a123362d701dad422a86f547253a90f2a7fda1fdaa405cb493a558cd7c3de99034c6ecbb594591662393b124c159174d43cbb705e2f95b881")
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
socket(0xa, 0x1, 0x0)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
socketpair$auto(0x1e, 0x1, 0x0, 0x0)
r8 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/pts/ptmx\x00', 0x0, 0x0)
ioctl$auto_TIOCSETD2(r8, 0x5423, 0x0)
ioctl$auto_TCFLSH2(r8, 0x89f0, 0x0)
msgctl$auto(0x401, 0xffffffff, &(0x7f0000000400)={{0xba93, r3, r4, 0x401, 0x180, 0x7, 0x1}, &(0x7f0000000280)=0x5, &(0x7f00000002c0), 0x8000000000000000, 0x6, 0xb366, 0x9, 0x7, 0xef4, 0x0, 0xadc, @raw=0x3, @inferred=r7})
close_range$auto(0x2, 0xffffffffffffffff, 0x0)

2m10.820664535s ago: executing program 3 (id=532):
setgroups$auto(0xc00000000, 0xfffffffffffffffc)
setresgid$auto(0x81, 0x800000a0, 0x8)
openat$auto_evm_xattr_ops_evm_secfs(0xffffffffffffff9c, &(0x7f0000000000), 0x101200, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0x8000000000000000, 0x8000)
capget$auto(0x0, 0xfffffffffffffffe)
capset$auto(0x0, &(0x7f0000000180)={0x1, 0x7, 0x6})
mprotect$auto(0x8, 0x2, 0x40000a9ee)
r0 = openat$auto_nvram_misc_fops_nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$auto(r0, 0x0, 0xf)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_NFC_CMD_LLC_SET_PARAMS(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="556c29bd07000000df4610000000"], 0x14}, 0x1, 0x0, 0x0, 0xc000}, 0x0)
sendmsg$auto_IEEE802154_LLSEC_ADD_SECLEVEL(r1, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x800)
syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000180), r1)
mprotect$auto(0x1ffff000, 0x8000000000000001, 0x4)
connect$auto(0x3, &(0x7f0000000000), 0x55)
syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000001d80), r1)
socket(0x2, 0x2, 0x1)
msgctl$auto(0x4, 0x2, &(0x7f0000000100)={{0x6, 0xee01, 0xffffffffffffffff, 0x2, 0xc85, 0x4, 0x59}, 0x0, 0x0, 0x3, 0x1, 0x0, 0x4, 0x8000000000000001, 0xe, 0xf, 0xe})
getsockopt$auto(0xffffffffffffffff, 0x8, 0x0, &(0x7f0000000040)='nfsd\x00', &(0x7f00000001c0)=0x2)

2m10.499023686s ago: executing program 3 (id=535):
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000340)='/dev/video23\x00', 0x80000, 0x0)
open(&(0x7f0000000100)='.\x00', 0x0, 0x408)
ioctl$auto(0x3, 0x4020565a, 0x38)

2m10.08528569s ago: executing program 3 (id=539):
close_range$auto(0x2, 0x8, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket(0xa, 0x806, 0x0)
connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa}, 0x55)
r1 = openat$auto_proc_gid_map_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/gid_map\x00', 0x40, 0x0)
preadv$auto(r1, &(0x7f00000000c0)={&(0x7f0000000080), 0x5}, 0x2, 0x6, 0x10000)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$auto_ovs_vport(&(0x7f00000009c0), 0xffffffffffffffff)
sendmsg$auto_OVS_VPORT_CMD_GET(r2, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000a00)={0x20, r3, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@OVS_VPORT_ATTR_UPCALL_PID={0x4}, @OVS_VPORT_ATTR_IFINDEX={0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x804)
read$auto(0x3, 0x0, 0x7)
read$auto(r0, 0x0, 0xb)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
openat$auto_ucma_fops_ucma(0xffffffffffffff9c, &(0x7f0000000080), 0x2f4981, 0x0)
r5 = syz_genetlink_get_family_id$auto_seg6(&(0x7f0000001a00), 0xffffffffffffffff)
sendmsg$auto_SEG6_CMD_SET_TUNSRC(r4, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000001180)={&(0x7f0000000040)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="110026bd7000ffdbdf250300000014000100e1010000000000000000000000000001"], 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x44892)

2m9.785385281s ago: executing program 3 (id=541):
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0xc00, 0x0)
readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1)

2m9.648289835s ago: executing program 3 (id=542):
r0 = syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff)
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
io_uring_setup$auto(0x1, 0x0)
futex$auto(0x0, 0x6, 0x8, 0x0, 0x0, 0xffffffd6)
mmap$auto(0x0, 0x8, 0x1000000004, 0x9b72, 0x2, 0x8000)
tkill$auto(0x1, 0x7)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_OVS_FLOW_CMD_GET(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x30, r0, 0x1, 0x70bd29, 0x25dfdc02, {}, [@OVS_FLOW_ATTR_PROBE={0x4}, @OVS_FLOW_ATTR_KEY={0x18, 0x1, 0x0, 0x1, [@nested={0x14, 0x10, 0x0, 0x1, [@typed={0x8, 0x8, 0x0, 0x0, @ipv4=@remote}, @typed={0x8, 0x8, 0x0, 0x0, @uid}]}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x200400f0}, 0x800)
r2 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/kernel/yama/ptrace_scope\x00', 0x0, 0x0)
r3 = openat$auto_tracing_err_log_fops_trace(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/tracing/error_log\x00', 0x2000, 0x0)
write$auto_tracing_err_log_fops_trace(r3, &(0x7f0000000080)="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", 0x1000)
open(&(0x7f0000000000)='./file0\x00', 0x261c2, 0x84)
socket(0x2, 0x1, 0x106)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x18, 0x5, 0x1)
fallocate$auto(0x8000000000000003, 0x0, 0xd, 0xcbd5d)
sendfile$auto(0x6, 0x3, 0x0, 0xfffffdef)
mprotect$auto(0x1ffff000, 0x8000000001000001, 0xd)
syslog$auto(0x4, 0xfffffffffffffffd, 0x0)
r4 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg1\x00', 0x20601, 0x0)
r5 = openat$auto_ocfs2_control_fops_stack_user(0xffffffffffffff9c, &(0x7f0000001080), 0x2, 0x0)
r6 = openat$auto_fops_atomic_t_(0xffffffffffffff9c, &(0x7f00000010c0)='/sys/kernel/debug/fail_iommufd/times\x00', 0x119100, 0x0)
close_range$auto(r5, r6, 0x48)
write$auto_sg_fops_sg(r4, 0x0, 0x0)
ioctl$auto_IOCTL_VMCI_QUEUEPAIR_DETACH(r2, 0x7aa, 0x0)

2m9.062433441s ago: executing program 3 (id=547):
r0 = openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/wchan\x00', 0x2000, 0x0)
r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000001040)='/sys/devices/virtual/workqueue/scsi_tmf_0/affinity_scope\x00', 0x80400, 0x0)
open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154)
prctl$auto(0x1000000001c, 0x5, 0x8, 0x9, 0x80001)
setreuid$auto(0x15, 0x5)
fcntl$auto(0x3, 0x400, 0x1)
setuid$auto(0xe)
open(&(0x7f0000000000)='./file0\x00', 0xe600, 0x20)
fcntl$auto(0x3, 0x400, 0x9ec0000000000000)
read$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f0000000040)=""/4096, 0x1000)
read$auto_proc_single_file_operations_base(r0, &(0x7f0000001080)=""/183, 0xb7)
mount$auto(0x0, &(0x7f00000000c0)='.\x00', &(0x7f0000000180)='nfsd\x00', 0x7, 0x0)

2m8.833045535s ago: executing program 33 (id=547):
r0 = openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/wchan\x00', 0x2000, 0x0)
r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000001040)='/sys/devices/virtual/workqueue/scsi_tmf_0/affinity_scope\x00', 0x80400, 0x0)
open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154)
prctl$auto(0x1000000001c, 0x5, 0x8, 0x9, 0x80001)
setreuid$auto(0x15, 0x5)
fcntl$auto(0x3, 0x400, 0x1)
setuid$auto(0xe)
open(&(0x7f0000000000)='./file0\x00', 0xe600, 0x20)
fcntl$auto(0x3, 0x400, 0x9ec0000000000000)
read$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f0000000040)=""/4096, 0x1000)
read$auto_proc_single_file_operations_base(r0, &(0x7f0000001080)=""/183, 0xb7)
mount$auto(0x0, &(0x7f00000000c0)='.\x00', &(0x7f0000000180)='nfsd\x00', 0x7, 0x0)

58.629213941s ago: executing program 5 (id=872):
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/fs/o2cb/logmask/NOTICE\x00', 0x0, 0x0)
socket(0x2b, 0x1, 0x1)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
io_uring_setup$auto(0x6, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
io_uring_setup$auto(0x6, 0x0)
socket(0x2, 0x3, 0x6)
socket(0x29, 0x5, 0x0)
read$auto(0x4, 0x0, 0x80)
close_range$auto(0x2, 0x8, 0x0)
socket(0xa, 0x5, 0x0)
mmap$auto(0x0, 0x4020009, 0xdf, 0x7ff, 0x401, 0x8000)
r0 = socket(0x2, 0x1, 0x0)
getsockopt$auto(r0, 0x0, 0x60, 0x0, &(0x7f00000000c0)=0x44)
sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000002440)={0x0, 0x0, &(0x7f0000002400)={&(0x7f00000023c0)={0x14, 0x0, 0x1, 0x70bd2c, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x894}, 0x4)
ioctl$auto(0xffffffffffffffff, 0x64c6, 0x1e2)
io_uring_setup$auto(0x6, 0x0)
sendmmsg$auto(0x3, &(0x7f0000000000)={{0x0, 0x2, 0x0, 0x4, 0x0, 0x1, 0x697b}, 0xed7138c}, 0x2, 0x9)
r1 = socket(0xa, 0x5, 0x84)
sendto$auto(r1, 0x0, 0x401, 0x101, &(0x7f0000000000)=@generic={0xa, "e2e18340cba8fe8000"}, 0x1c)
openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/013/001\x00', 0x400, 0x0)
r2 = socket(0xa, 0x801, 0x84)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$auto_nbd(&(0x7f0000001d00), 0xffffffffffffffff)
sendmsg$auto_NBD_CMD_CONNECT(r3, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001dc0)={&(0x7f00000001c0)={0x38, r4, 0x1, 0x703d25, 0x25dfdbfd, {}, [@NBD_ATTR_SOCKETS={0x18, 0x7, 0x0, 0x1, [@nested={0xc, 0x1, 0x0, 0x1, [@nested={0x8, 0x1, 0x0, 0x1, [@generic='\x00\x00\x00\x00']}]}, @typed={0x8, 0x23, 0x0, 0x0, @uid}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x6}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x8880)
syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000080), r2)

57.686556001s ago: executing program 5 (id=875):
r0 = socket(0xa, 0x3, 0x100)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x9, 0x3, 0x7, 0x940, 0x1ffe0, 0x3, 0x6, 0x2, 0x9, 0x5, 0xfff, 0x7, 0xb0, 0x9, 0x5, 0x3, 0x5, 0x7, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, [0x0, 0x2, 0x0, 0x400000000, 0x0, 0x0, 0x0, 0x0, 0x1000000000000, 0x0, 0x0, 0x40000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}, 0x1fe, 0x81)
socket(0x2c, 0x3, 0x0)
move_mount$auto(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x1)
socket(0x2c, 0x3, 0x0)
sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000)
r2 = socket(0x10, 0x2, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000)
sendmmsg$auto(r2, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008)
r3 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000640), 0xffffffffffffffff)
sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x5c, r3, 0x300, 0x70bd2d, 0x25dfdbfd, {}, [@L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x58}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x9}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x5}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @remote}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @local}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
mmap$auto(0x0, 0x20049, 0xdf, 0x8000000000000010, 0x401, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0xa, 0x806, 0x0)
io_uring_setup$auto(0x6, 0x0)
setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9)
connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "abe6de3d6468fe8000"}, 0x55)
select$auto(0x7, 0x0, &(0x7f0000000080)={[0x209c, 0xe9e, 0x6, 0x15, 0x1000, 0x100000001, 0xc, 0xf, 0x0, 0x0, 0xe, 0xd59, 0x101, 0xff, 0x2, 0x80000001]}, 0x0, 0x0)
sendmsg$auto_L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x50, r3, 0x4, 0x70bd25, 0x25dfdbfd, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x80000000}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @private2}, @L2TP_ATTR_USING_IPSEC={0x5, 0x15, 0xfe}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e22}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x3}, @L2TP_ATTR_MTU={0x6, 0x1c, 0xfff3}]}, 0x50}, 0x1, 0x0, 0x0, 0x40}, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/thread-self/net/wireless\x00', 0x400, 0x0)
pread64$auto(r1, 0x0, 0x1, 0xf2)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r4 = socket(0x11, 0x80003, 0x300)
setsockopt$auto(r4, 0x107, 0xe, 0x0, 0x4)
setsockopt$auto(r0, 0x2a, 0x40, 0x0, 0x10001)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/net/rpc/nfs4.idtoname/channel\x00', 0x0, 0x0)

57.405747517s ago: executing program 5 (id=876):
close_range$auto(0x0, 0xffffffffffffffff, 0x4000000000002)
socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x0, 0x3, 0xdf, 0xeb1, 0x401, 0x8000)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0xa, 0x3, 0x6)
getsockopt$auto(0x6, 0xff, 0x20, 0x0, 0x0)
statmount$auto(0x0, &(0x7f0000000040)={0x1, 0x20002, 0x5ae, 0x5, 0x7, 0x8000000009, 0x10000, 0x10, 0x5, 0x8, 0x6, 0x5, 0x5, 0x9, 0x1ff, 0x7698, 0x8, 0x10000, 0x7, 0x6}, 0x8, 0x0)
sendmsg$auto_HWSIM_CMD_DEL_RADIO(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="01"], 0x14}, 0x1, 0x0, 0x0, 0x20040801}, 0x24004000)
r0 = socket(0x10, 0x2, 0x6)
mmap$auto(0x0, 0xfff, 0xdf, 0x9b72, 0x400, 0x28000)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
rseq$auto(&(0x7f0000000300)={0x0, 0x9, 0x0, 0x4, 0xffffffff, 0xfffffffe}, 0x8000, 0x0, 0x3)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
madvise$auto(0x9, 0x4b65, 0x27cd)
socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0)
write$auto(0x3, 0x0, 0x100082)
sendmsg$auto_NFSD_CMD_THREADS_SET(r0, &(0x7f0000000340)={&(0x7f0000000000), 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, 0x0, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@NFSD_A_SERVER_GRACETIME={0x8, 0x2, 0x18000000}, @NFSD_A_SERVER_GRACETIME={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x804)
shmdt$auto(0x0)
timer_create$auto(0x9, 0x0, &(0x7f0000000040)=0x200)
getuid()
ioperm$auto(0xfb, 0x5, 0xe)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
sched_setparam$auto(0x0, &(0x7f0000000100))
newfstatat$auto(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)={0xb3d, 0xa, 0x7, 0xe5, 0xee01, 0xee01, 0x0, 0x7f, 0x0, 0x2, 0x6, 0xffffffffffff9ce9, 0x4, 0x43, 0x7ff, 0x5, 0x6}, 0x2)
sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000001180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14000078", @ANYRES16=0x0, @ANYBLOB="010325bd7000ffdbdf250a000000"], 0x14}, 0x1, 0x0, 0x0, 0x20000800}, 0xc040810)
timer_settime$auto(0x0, 0xffff8000, &(0x7f00000000c0)={{0xf, 0x10007}, {0x9}}, 0x0)
openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/controlC0\x00', 0x0, 0x0)

56.147584314s ago: executing program 5 (id=883):
r0 = socket(0x2, 0x2, 0x88)
r1 = getsid$auto(0xffffffffffffffff)
get_robust_list$auto(r1, 0x0, &(0x7f0000000180)=0x3ffff)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
socket(0x2, 0x2, 0x1)
connect$auto(0x3, &(0x7f00000000c0)=@in={0x2, 0x0, @local}, 0x55)
io_uring_setup$auto(0x6, 0x0)
rmdir$auto(&(0x7f0000000200)='./file0\x00')
setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9)
write$auto(0x3, 0x0, 0xfdef)
madvise$auto(0x0, 0xfffffffffffefffd, 0x17)
mmap$auto(0x0, 0x200006, 0x2, 0x40eb1, 0x602, 0x300000000000)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0xa, 0x3, 0x100)
mmap$auto(0x0, 0x2020006, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "ab06fdffff00fff500"}, 0x55)
write$auto(0x3, 0x0, 0x5dc)
syz_genetlink_get_family_id$auto_gtp(&(0x7f0000000040), r0)
r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/fs/jbd2/sda1-8/info\x00', 0x2, 0x0)
read$auto_proc_reg_file_ops_compat_inode(r2, &(0x7f00000000c0)=""/10, 0xa)

54.953095142s ago: executing program 5 (id=890):
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
openat$auto_nvram_misc_fops_nvram(0xffffffffffffff9c, 0x0, 0x80, 0x0)
socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0)
openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, 0x0, 0x1541, 0x0)
openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000140), 0x94000, 0x0)
close_range$auto(0x2, 0x8, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x301, 0x0)
r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0)
ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x0)
r1 = openat$auto_fops_ulong_ro_(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/ieee80211/phy16/netdev:wlan0/stations/08:02:11:00:00:01/tx_filtered\x00', 0x200, 0x0)
mmap$auto(0x6, 0x0, 0x8, 0x32d82cba, r1, 0x3)
r2 = socket(0xa, 0x2, 0x88)
sendmmsg$auto(0x3, &(0x7f0000000000)={{0x0, 0x2, 0x0, 0x106, 0x0, 0x1, 0x697b}, 0xed7138c}, 0x9a6, 0x0)
bpf$auto(0x0, &(0x7f0000000000)=@link_update={r2, @new_prog_fd=0x4, 0x4, @old_prog_fd=r2}, 0xa3)

54.381223684s ago: executing program 5 (id=891):
ioperm$auto(0x8, 0x5, 0x7e01777f)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x28641, 0x0)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000)
ioctl$auto(0x3, 0x227c, 0x3b)
pipe2$auto(0x0, 0x80)
sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000180)={{&(0x7f0000000000), 0x5, 0x0, 0x0, 0x0, 0x8, 0x80000000}, 0x5}, 0x1, 0xa)
close_range$auto(0x2, 0x8, 0x0)
openat$auto_proc_loginuid_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/loginuid\x00', 0x109000, 0x0)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/irq/9/smp_affinity\x00', 0x129542, 0x0)
read$auto(0x3, 0x0, 0x7)
writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0xc)
openat$auto_tracing_saved_tgids_fops_trace(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/tracing/saved_tgids\x00', 0x101080, 0x0)
userfaultfd$auto(0x1)
socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0)
socket(0xa, 0x801, 0x84)
socket(0xa, 0x3, 0x73)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x1, 0x1, 0x1)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0xa, 0x800, 0x88)
socket(0x2, 0x801, 0x106)
io_uring_setup$auto(0x6, 0x0)
r0 = openat$auto_proc_timers_operations_base(0xffffffffffffff9c, &(0x7f0000000140), 0x200, 0x0)
recvmmsg$auto(r0, &(0x7f0000000340)={{&(0x7f0000000180)="a3c5e5e628300759db3cb79a33a36ff7ebf032c69eb3a9f286da1f5531c3d4ca14481cbee075afb9b268a8b5855575ef4c149ea866bf94855b86b77680cb535e58fc42e204f19e53fd22ca43fba72d1e459958698db7556f7c5b3fe45b846473c5e85ed6937e24f3131b8e5ec0dfbb2130bcceb9c024bf29cfbcca26136eb491124ebfefd36890bace648e61a01ba3ced829028ffb4461f34fdefba440a9bf085276bbfc1b6e2d4e991d265c7b", 0xb4dd, &(0x7f00000002c0)={&(0x7f0000000240)="c342df73746a6619551d721508292e49ba75d3188fcdb535d27a7118384ec186c945a35c634f1ed181f96c3e41ae81011244aae258310baa4efeec476f8dbbf96297918971a4f0936c3d35b3296539ca49a3703d66863c4032"}, 0xb, &(0x7f0000000300), 0x4, 0x1}, 0x2d9}, 0x178, 0x2, &(0x7f0000000380)={0x4, 0x7})
socket(0xa, 0x2, 0x3a)
socket(0xa, 0x2, 0x88)
close_range$auto(0x0, 0xfffffffffffff000, 0x2)

39.331304082s ago: executing program 34 (id=891):
ioperm$auto(0x8, 0x5, 0x7e01777f)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x28641, 0x0)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000)
ioctl$auto(0x3, 0x227c, 0x3b)
pipe2$auto(0x0, 0x80)
sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000180)={{&(0x7f0000000000), 0x5, 0x0, 0x0, 0x0, 0x8, 0x80000000}, 0x5}, 0x1, 0xa)
close_range$auto(0x2, 0x8, 0x0)
openat$auto_proc_loginuid_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/loginuid\x00', 0x109000, 0x0)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/irq/9/smp_affinity\x00', 0x129542, 0x0)
read$auto(0x3, 0x0, 0x7)
writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0xc)
openat$auto_tracing_saved_tgids_fops_trace(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/tracing/saved_tgids\x00', 0x101080, 0x0)
userfaultfd$auto(0x1)
socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0)
socket(0xa, 0x801, 0x84)
socket(0xa, 0x3, 0x73)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x1, 0x1, 0x1)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0xa, 0x800, 0x88)
socket(0x2, 0x801, 0x106)
io_uring_setup$auto(0x6, 0x0)
r0 = openat$auto_proc_timers_operations_base(0xffffffffffffff9c, &(0x7f0000000140), 0x200, 0x0)
recvmmsg$auto(r0, &(0x7f0000000340)={{&(0x7f0000000180)="a3c5e5e628300759db3cb79a33a36ff7ebf032c69eb3a9f286da1f5531c3d4ca14481cbee075afb9b268a8b5855575ef4c149ea866bf94855b86b77680cb535e58fc42e204f19e53fd22ca43fba72d1e459958698db7556f7c5b3fe45b846473c5e85ed6937e24f3131b8e5ec0dfbb2130bcceb9c024bf29cfbcca26136eb491124ebfefd36890bace648e61a01ba3ced829028ffb4461f34fdefba440a9bf085276bbfc1b6e2d4e991d265c7b", 0xb4dd, &(0x7f00000002c0)={&(0x7f0000000240)="c342df73746a6619551d721508292e49ba75d3188fcdb535d27a7118384ec186c945a35c634f1ed181f96c3e41ae81011244aae258310baa4efeec476f8dbbf96297918971a4f0936c3d35b3296539ca49a3703d66863c4032"}, 0xb, &(0x7f0000000300), 0x4, 0x1}, 0x2d9}, 0x178, 0x2, &(0x7f0000000380)={0x4, 0x7})
socket(0xa, 0x2, 0x3a)
socket(0xa, 0x2, 0x88)
close_range$auto(0x0, 0xfffffffffffff000, 0x2)

7.417161424s ago: executing program 0 (id=1019):
sendmmsg$auto(0xffffffffffffffff, 0x0, 0x5, 0x311)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x89fc, &(0x7f0000000040)={'bridge_slave_1\x00'})
mprotect$auto(0x1ffff000, 0x8000000000000001, 0xd)
ioperm$auto(0x4, 0xbc6, 0x81)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f000000fc00), 0x3, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000080), 0xffffffffffffffff)
msgctl$auto(0x4, 0x9, 0x0)
waitid$auto(0xfff, 0xffffffffffffffff, &(0x7f0000000340)={@siginfo_0_0={0x3, 0x280, 0x2, @_sigchld={0xffffffffffffffff, 0xffffffffffffffff, 0x7503, 0x3, 0x9}}}, 0xb391, &(0x7f00000003c0)={{0x1ff, 0x987}, {0xe5a, 0x100}, 0x7, 0x7, 0x8, 0x7, 0x15, 0xfffffffffffffff9, 0x101, 0x4a, 0x8d2, 0xbf, 0x2, 0x8, 0x9, 0xe})
sendmsg$auto_TIPC_NL_ADDR_LEGACY_GET(r1, &(0x7f0000002940)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000002900)={&(0x7f0000000480)={0x10e0, r2, 0x8, 0x70bd2a, 0x25dfdbff, {}, [@TIPC_NLA_MEDIA={0x104c, 0x5, 0x0, 0x1, [@nested={0x1048, 0x18, 0x0, 0x1, [@typed={0x4, 0x7d, 0x0, 0x0, @binary}, @typed={0x8, 0x88, 0x0, 0x0, @uid}, @generic="14c9aa81ec93318830fc446ef737dbd9fac428d9d1abb847e64a683cc6bf9cae4a3f484a3ffb052edcd45bc24e39324c2f", @typed={0x8, 0xa0, 0x0, 0x0, @uid}, @generic="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", @nested={0x4, 0xe1}, @nested={0x4, 0xf}]}]}, @TIPC_NLA_SOCK={0x7d, 0x2, 0x0, 0x1, [@generic="2fd77bcd6290c69535987d8b51d977c4281f03df52266e8447129487716d09690822fa6ee62eed4cb81ba972cd730e3625c2a360f4b1c1d8e25016f57f19a801a077bdaa8487b9bdc1ba4bbdd38b6998476c725dd147b941da55778db1f198ee5d870255fda0bb66764b6888b3d42adf94", @nested={0x8, 0x3a, 0x0, 0x1, [@nested={0x4, 0x99}]}]}]}, 0x10e0}, 0x1, 0x0, 0x0, 0x80}, 0x40004)
ioctl$auto_KVM_CHECK_EXTENSION(r0, 0xae03, 0x27)
close_range$auto(0x2, 0x8, 0x0)
unshare$auto(0x8000000)
semtimedop$auto(0x7, &(0x7f0000000200)={0x3, 0x6, 0x1000}, 0x3, 0x0)
socket(0x28, 0x1, 0x0)
socket(0x2b, 0x1, 0x1)
listen$auto(0x3, 0x81)
accept$auto(0x3, 0x0, 0x0)
setsockopt$auto(0x3, 0x1, 0x20, 0x0, 0x9)
keyctl$auto(0x7, 0xfffffffffffffffb, 0x0, 0x8, 0x74)
read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, &(0x7f0000000000)=""/26, 0x1a)
renameat2$auto(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0xffffffffffffffff, 0x0, 0x1)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000940)={'hsr0\x00', <r3=>0x0})
sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x58, 0x0, 0x200, 0x70bd26, 0x25dfdbfe, {}, [@HSR_A_IF1_AGE={0x8, 0x3, 0x200}, @HSR_A_IF2_SEQ={0x6, 0x7, 0x8000}, @HSR_A_IFINDEX={0x8}, @HSR_A_NODE_ADDR_B={0xa}, @HSR_A_NODE_ADDR={0xa}, @HSR_A_NODE_ADDR_B={0xa}, @HSR_A_IFINDEX={0x8, 0x2, r3}]}, 0x58}, 0x1, 0x0, 0x0, 0x40080}, 0x40090)
sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00', @ANYBLOB="11"], 0x3c}, 0x1, 0x0, 0x0, 0x40090}, 0x8000)
socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket(0x10, 0x2, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}, 0x1, 0x40000}, 0x40000)
quotactl$auto(0x2, 0x0, 0x62a0, 0x0)

6.234468819s ago: executing program 0 (id=1024):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
munmap$auto(0x5, 0x1)
connect$auto(0x3, 0x0, 0x54)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
mmap$auto(0x80000005, 0x4, 0x4000000000df, 0x12, r0, 0x300000000000)
mincore$auto(0x4000000001000, 0x9, 0x0)
sigaltstack$auto(&(0x7f0000000080)={0x0, 0x80000002}, 0x0)
mmap$auto(0x0, 0x2020005, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
pidfd_open$auto(0x1, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
bpf$auto(0x0, &(0x7f0000000000)=@link_update={0xa, @new_map_fd=0x29d, 0x7, @old_map_fd=0x6}, 0xa3)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
bpf$auto(0x2, &(0x7f00000001c0)=@raw_tracepoint={0x5, 0xffff, 0x0, 0x3}, 0xc)
bpf$auto(0x4, &(0x7f00000001c0)=@raw_tracepoint={0x5, 0x4, 0x0, 0x3}, 0x4)
openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/card1\x00', 0x2, 0x0)
socketpair$auto(0x1e, 0x1, 0x0, 0x0)
r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/pts/ptmx\x00', 0x0, 0x0)
ioctl$auto_TIOCSETD2(r1, 0x5423, 0x0)
ioctl$auto_TCFLSH2(r1, 0x8925, 0xfdfd)
sendmsg$auto_NL80211_CMD_GET_FTM_RESPONDER_STATS(r0, 0x0, 0x20000000)
socket(0x0, 0x800, 0x92d)
mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x402, 0x300000000000)
getsockopt$auto(0xffffffffffffffff, 0x84, 0x6d, 0x0, &(0x7f0000000280)=0xc0)
mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000)
madvise$auto(0x6, 0x2, 0x8041)
madvise$auto(0x0, 0x80000001, 0xa)
gettid()

6.096826663s ago: executing program 6 (id=1033):
r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x642, 0x0)
read$auto_def_blk_fops_fs(r0, &(0x7f0000000140)=""/194, 0xc2)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
r1 = openat$auto_ubi_ctrl_cdev_operations_ubi(0xffffffffffffff9c, &(0x7f0000000040), 0x109402, 0x0)
ioctl$auto_UBI_IOCDET(r1, 0x40046f41, 0x0)
setitimer$auto(0x1, &(0x7f0000000000)={{0x2, 0x4}, {0x5, 0x6}}, 0x0)
r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/bus/pci/00/01.3\x00', 0x100, 0x0)
pread64$auto(r2, 0x0, 0x3, 0x5)
r3 = socket(0x18, 0x800, 0x1)
r4 = syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000100), r3)
sendmsg$auto_BATADV_CMD_GET_HARDIF(r3, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40045000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x60, r4, 0x800, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x9}, @BATADV_ATTR_DAT_CACHE_IP4ADDRESS={0x8, 0x23, @local}, @BATADV_ATTR_MCAST_FLAGS={0x8, 0x26, 0x6028}, @BATADV_ATTR_ALGO_NAME={0x12, 0x2, '/dev/ubi_ctrl\x00'}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x4}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x80000001}, @BATADV_ATTR_LOG_LEVEL={0x8}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}]}, 0x60}}, 0x10)
connect$auto(r3, &(0x7f0000000280)=@rc={0x1f, @none, 0x1}, 0x20008)
connect$auto(r3, &(0x7f0000000000)=@in={0x2, 0x100}, 0x3a)
r5 = openat$auto_memtype_fops_memtype(0xffffffffffffff9c, &(0x7f0000001600), 0x20000, 0x0)
read$auto_memtype_fops_memtype(r5, &(0x7f0000001640)=""/88, 0x58)
r6 = openat$auto_proc_coredump_filter_operations_base(0xffffffffffffff9c, &(0x7f0000000240), 0x131200, 0x0)
ppoll$auto(&(0x7f00000017c0)={<r7=>r6, 0x7, 0x2a0}, 0x2, 0x0, 0x0, 0x8)
read$auto_snd_rawmidi_f_ops_rawmidi(r7, &(0x7f00000019c0)=""/234, 0xea)

5.051992312s ago: executing program 6 (id=1027):
openat$auto_proc_pid_numa_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/numa_maps\x00', 0x258b40, 0x0)
select$auto(0x6d0c, 0x0, &(0x7f0000000100)={[0xd, 0x42, 0x800000000000005, 0x10, 0xb, 0x3, 0x9a, 0x5, 0x8, 0x5e582972, 0x4000000000000000, 0x14, 0x100000000, 0x1, 0x8, 0x6]}, 0x0, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x7, 0x800008000)
getrandom$auto(&(0x7f0000000000)='/proc/thread-self/numa_maps\x00', 0x0, 0xe9c)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
mprotect$auto(0x1ffff000, 0x7, 0x2)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
socket(0x2, 0x80802, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
close_range$auto(0x2, 0x8, 0x0)
close_range$auto(0x0, 0xffffffffffffffff, 0x4000000000002)
fanotify_init$auto(0x602, 0x1)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/net/nr14/proto_down\x00', 0x3e1143, 0x0)
r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0)
ioctl$auto(r1, 0x4b52, r0)

4.484048137s ago: executing program 4 (id=1028):
socket(0x10, 0x2, 0x4) (async)
r0 = socket(0x10, 0x2, 0x4)
mmap$auto(0x0, 0x2000d, 0x4000000200df, 0xeb1, 0x404, 0x8000) (async)
mmap$auto(0x0, 0x2000d, 0x4000000200df, 0xeb1, 0x404, 0x8000)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
bpf$auto(0x9, &(0x7f00000001c0)=@test={r0, 0x10000, 0x7, 0x1000, 0x101, 0x0, 0x0, 0xfff, 0x10000, 0x8, 0x7fc00000000, 0x4, 0x4, 0x2}, 0x6f3)
sendmsg$auto_ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="d4000000", @ANYRES16=0x0, @ANYBLOB="100027bd7000fbdbdf2518000000200001800247eea41fac000014000200766574683100000000000000000000000800070063fbffff0500060001000000840002803d00488013b37090badc49d6dc93876646d25a4d297d01cd3b7da38d12889cc50d505f353dc42d0a3c0a14c7b46428910708003600", @ANYRES32=0x0, @ANYBLOB="0400b3800000003d003b800400a4800c009a00008000000000000004008680c16ab1b1b39dcaa14b6af7dcc011b43cf706e562811c62b28a702b72e0a87126700294f2350000000c000180080003"], 0xd4}, 0x1, 0x0, 0x0, 0x20000010}, 0x20008000)
syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1200"], 0x1ac}}, 0x40000)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000002c0), r1)
sendmsg$auto_CTRL_CMD_GETFAMILY(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="efff289d7000ffdbdf2503000000050002"], 0x1c}, 0x1, 0x0, 0x0, 0x20040880}, 0x800) (async)
sendmsg$auto_CTRL_CMD_GETFAMILY(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="efff289d7000ffdbdf2503000000050002"], 0x1c}, 0x1, 0x0, 0x0, 0x20040880}, 0x800)
read$auto(r1, 0x0, 0x2005)
syz_genetlink_get_family_id$auto_macsec(&(0x7f00000000c0), r1) (async)
syz_genetlink_get_family_id$auto_macsec(&(0x7f00000000c0), r1)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0)

4.005306497s ago: executing program 4 (id=1029):
timer_create$auto(0x9, 0x0, 0x0)
syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff)
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer2\x00', 0x8002, 0x0)
r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snd/midiC2D0\x00', 0x101080, 0x0)
read$auto_snd_rawmidi_f_ops_rawmidi(r0, &(0x7f0000000080)=""/45, 0x2d)
close_range$auto(0x2, 0x8, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_ovs_packet(0x0, 0xffffffffffffffff)
sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004040}, 0xc800)
r2 = fsopen$auto(&(0x7f0000000000)='\x00', 0x400)
r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000080), r2)
sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r1, &(0x7f0000000280)={0x0, 0x700, &(0x7f0000000240)={&(0x7f0000000180)={0x2c, r3, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@NL80211_ATTR_OPER_CLASS={0x5}, @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, 0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4004801}, 0x4008000)
unshare$auto(0x40000080)

3.767457577s ago: executing program 6 (id=1030):
mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000)
r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00')
syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/uts\x00')
r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/loop3/queue/rq_affinity\x00', 0x100, 0x0)
read$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f00000003c0)=""/129, 0x81)
close_range$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x4)
socket$nl_generic(0x10, 0x3, 0x10)
pidfd_open$auto(0x1, 0x0)
setresuid$auto(0xffffffffffffffff, 0xee00, 0x8000)
setns(0xffffffffffffffff, 0x2000000)
r2 = openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000100), 0x82040, 0x0)
close_range$auto(r2, r0, 0x8)
r3 = clone$auto(0x7, 0x2000400000d, 0xfffffffffffffffc, 0x0, 0x3)
syz_open_procfs$namespace(r3, &(0x7f00000001c0)='ns/time_for_children\x00')
r4 = openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x1000, 0x0)
sendfile$auto(0x1, r4, 0x0, 0x10)
bpf$auto(0x5, &(0x7f0000000100)=@info={r2, 0x0, 0x81}, 0x7)
mprotect$auto(0x1ffff000, 0x8000000000002001, 0x4)
bpf$auto(0x0, &(0x7f0000000000)=@bpf_attr_7={@btf_id=0xe9f, 0x4, 0x1c}, 0xa3)
mmap$auto(0x400000000000, 0xfffffffffffffffd, 0x800023, 0xeb5, 0xfffffffffffffffa, 0x8000)
semctl$auto(0x80001ff, 0x804, 0x13, 0x4)
keyctl$auto(0x0, 0x0, 0x100, 0x8, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
fcntl$auto(r5, 0x8, 0xffffffffffffffff)
close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002)
socket$nl_generic(0x10, 0x3, 0x10)
signalfd4$auto(0xffffffff, &(0x7f0000000080)={0x8000}, 0x8, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
openat$auto_userfaultfd_dev_fops_userfaultfd(0xffffffffffffff9c, &(0x7f00000002c0), 0x8000, 0x0)
ioctl$auto(0x3, 0x541b, 0xfffffffffffff4e0)

3.643771434s ago: executing program 2 (id=1031):
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_ETHTOOL_MSG_FEC_GET(r0, &(0x7f0000001680)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000600)={&(0x7f0000000500)={0xd0, 0x0, 0x300, 0x70bd2d, 0x25dfdbfb, {}, [@ETHTOOL_A_FEC_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x8}]}, @ETHTOOL_A_FEC_HEADER={0x84, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0xbbf1}]}, @ETHTOOL_A_FEC_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}]}]}, 0xd0}, 0x1, 0x0, 0x0, 0x40}, 0x40000)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff)
socket(0xa, 0x1, 0x0)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
socketpair$auto(0x1e, 0x1, 0x0, 0x0)
r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/pts/ptmx\x00', 0x0, 0x0)
ioctl$auto_TIOCSETD2(r1, 0x5423, 0x0)
ioctl$auto_TCFLSH2(r1, 0x89f0, 0x0)
msgctl$auto(0x401, 0xffffffff, &(0x7f0000000400)={{0xba93, 0x0, 0x0, 0x401, 0x180, 0x7, 0x1}, &(0x7f0000000280)=0x5, &(0x7f00000002c0), 0x8000000000000000, 0x6, 0xb366, 0x9, 0x7, 0xef4, 0x0, 0xadc, @raw=0x3})
close_range$auto(0x2, 0xffffffffffffffff, 0x0)

3.557270336s ago: executing program 0 (id=1032):
r0 = socket(0x2, 0x2, 0x88)
r1 = getsid$auto(0xffffffffffffffff)
get_robust_list$auto(r1, 0x0, &(0x7f0000000180)=0x3ffff)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
socket(0x2, 0x2, 0x1)
connect$auto(0x3, &(0x7f00000000c0)=@in={0x2, 0x0, @local}, 0x55)
r2 = io_uring_setup$auto(0x6, 0x0)
rmdir$auto(&(0x7f0000000200)='./file0\x00')
setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9)
write$auto(0x3, 0x0, 0xfdef)
madvise$auto(0x0, 0xfffffffffffefffd, 0x17)
mmap$auto(0x0, 0x200006, 0x2, 0x40eb1, 0x602, 0x300000000000)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0xa, 0x3, 0x100)
connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "ab06fdffff00fff500"}, 0x55)
write$auto(0x3, 0x0, 0x5dc)
r3 = syz_genetlink_get_family_id$auto_gtp(&(0x7f0000000040), r0)
sendmsg$auto_GTP_CMD_NEWPDP(r2, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="00042dbd7000fbdbdf25004e070008000500e000000108000900017f0000000000000000000008000100ff07000008000500ac1404bb"], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x80)
r4 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/fs/jbd2/sda1-8/info\x00', 0x2, 0x0)
read$auto_proc_reg_file_ops_compat_inode(r4, &(0x7f00000000c0)=""/10, 0xa)

3.055960446s ago: executing program 2 (id=1034):
r0 = socket(0x2, 0x2, 0x88)
r1 = getsid$auto(0xffffffffffffffff)
get_robust_list$auto(r1, 0x0, &(0x7f0000000180)=0x3ffff)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
socket(0x2, 0x2, 0x1)
connect$auto(0x3, &(0x7f00000000c0)=@in={0x2, 0x0, @local}, 0x55)
r2 = io_uring_setup$auto(0x6, 0x0)
rmdir$auto(&(0x7f0000000200)='./file0\x00')
setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9)
write$auto(0x3, 0x0, 0xfdef)
madvise$auto(0x0, 0xfffffffffffefffd, 0x17)
mmap$auto(0x0, 0x200006, 0x2, 0x40eb1, 0x602, 0x300000000000)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x0, 0x2020006, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "ab06fdffff00fff500"}, 0x55)
write$auto(0x3, 0x0, 0x5dc)
r3 = syz_genetlink_get_family_id$auto_gtp(&(0x7f0000000040), r0)
sendmsg$auto_GTP_CMD_NEWPDP(r2, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="00042dbd7000fbdbdf25004e070008000500e000000108000900017f0000000000000000000008000100ff07000008000500ac1404bb"], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x80)
r4 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/fs/jbd2/sda1-8/info\x00', 0x2, 0x0)
read$auto_proc_reg_file_ops_compat_inode(r4, &(0x7f00000000c0)=""/10, 0xa)

2.947246547s ago: executing program 6 (id=1035):
sendmsg$auto_NL80211_CMD_SET_WIPHY(0xffffffffffffffff, 0x0, 0x80)
socket(0x10, 0x2, 0x0)
socket(0x2, 0x1, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_ovs_datapath(0x0, 0xffffffffffffffff)
openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video24\x00', 0x1d4882, 0x0)
mprotect$auto(0x1ffff000, 0x10000000800, 0xd)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg1\x00', 0x20601, 0x0)
write$auto_sg_fops_sg(r0, &(0x7f0000000080), 0x0)
r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
write$auto(r1, 0x0, 0xa3d9)
openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x101302, 0x0)
sendfile$auto(0x1, 0x3, 0x0, 0xc01)
socket$nl_generic(0x10, 0x3, 0x10)
stat$auto(0x0, &(0x7f0000000240)={0x2, 0x3e, 0x5, 0x9, 0xffffffffffffffff, 0x0, 0x0, 0x7, 0x6, 0xb, 0x6c, 0x5, 0x0, 0x3, 0x4, 0xffffffffffffffff, 0x80000000})
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan0\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000009c0)={0x24, r3, 0xd0d58b333228212f, 0x70bd2c, 0x25dfdbfc, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r2}, @NL80211_ATTR_SCAN_SSIDS={0x8, 0x2d, 0x0, 0x1, [@nested={0x4, 0x99}]}]}, 0x24}}, 0x4000000)
r4 = openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000040), 0x400, 0x0)
ppoll$auto(&(0x7f0000000100)={r4, 0x71, 0x6}, 0x4, 0x0, 0x0, 0x8)
sendmsg$auto_NETDEV_CMD_BIND_RX(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x8c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@NETDEV_A_DMABUF_QUEUES={0x14, 0x2, 0x0, 0x1, [@NETDEV_A_QUEUE_ID={0x8, 0x1, 0x4}, @NETDEV_A_QUEUE_TYPE={0x8, 0x3, 0x4}]}, @NETDEV_A_DMABUF_QUEUES={0x1c, 0x2, 0x0, 0x1, [@NETDEV_A_QUEUE_ID={0x8, 0x1, 0x10}, @NETDEV_A_QUEUE_TYPE={0x8, 0x3, 0x8}, @NETDEV_A_QUEUE_ID={0x8, 0x1, 0x1}]}, @NETDEV_A_DMABUF_FD={0x8}, @NETDEV_A_DMABUF_IFINDEX={0x8, 0x1, r2}, @NETDEV_A_DMABUF_QUEUES={0x14, 0x2, 0x0, 0x1, [@NETDEV_A_QUEUE_ID={0x8, 0x1, 0xb2}, @NETDEV_A_QUEUE_TYPE={0x8, 0x3, 0x800}]}, @NETDEV_A_DMABUF_QUEUES={0x14, 0x2, 0x0, 0x1, [@NETDEV_A_QUEUE_TYPE={0x8, 0x3, 0x3}, @NETDEV_A_QUEUE_TYPE={0x8, 0x3, 0x5}]}, @NETDEV_A_DMABUF_FD={0x8, 0x3, r4}, @NETDEV_A_DMABUF_IFINDEX={0x8}]}, 0x8c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0)
r5 = syz_genetlink_get_family_id$auto_ovs_vport(&(0x7f0000000040), 0xffffffffffffffff)
r6 = getsid$auto(0x0)
sendmsg$auto_OVS_VPORT_CMD_NEW(0xffffffffffffffff, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000001180)={&(0x7f00000024c0)=ANY=[@ANYBLOB="94120000", @ANYRES16=r5, @ANYBLOB="010026bd7000fedbdf2501000000100004800c00718008000300", @ANYRES32, @ANYBLOB="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", @ANYRES32, @ANYBLOB="461591083104e0daace4b010fa796e4b1cbec15a0d51ef841c873df8cdc37e5a27df64949158f89dcf862e61037d4a7244269128945a62b8702ed9868fdbfd42b0c9521107d225783b887acb123b497fb03b74aaf6ff0be20d75538daca3ad21b2a0c2b30d2d18de64d20eda431eee02212081c6dde01d7473bf13ebb31d276f285396dc42f0165df7558cabe1f96a24bcf38de07ad73f30886bbe78716aa307c9169a4f532e660b12abd5a229e6be780904576ed30af653dbe0becf832885a206d0e0fcf7d84861253bb2091d5346854e4e14217fa615faf2568678f2d883f33a49b6f4c2166600b58008003200", @ANYRES32, @ANYBLOB="0b00d200", @ANYRES32=r6, @ANYBLOB="7fee5f13685af40a92905085d6d030989d3acd7fc19fd97a44940400158004006f800800e700010001000400fe800f0037002b2f5d3a272a7b5e2a5c000014004100fc02000000000000000000000000000000000000040005000800010007000000"], 0x1294}, 0x1, 0x0, 0x0, 0x4040010}, 0x800)
r7 = clone$auto(0x7, 0x2, &(0x7f00000000c0)=0xa, &(0x7f0000000100)=0x1, 0x7)
sendmsg$auto_TASKSTATS_CMD_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x201}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x34, 0x0, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@TASKSTATS_CMD_ATTR_REGISTER_CPUMASK={0x7, 0x3, '.{]'}, @TASKSTATS_CMD_ATTR_TGID={0x8}, @TASKSTATS_CMD_ATTR_TGID={0x8, 0x2, r6}, @TASKSTATS_CMD_ATTR_TGID={0x8, 0x2, r7}]}, 0x34}, 0x1, 0x0, 0x0, 0x801}, 0x4000)
r8 = socket(0x10, 0x3, 0x0)
r9 = syz_genetlink_get_family_id$auto_macsec(&(0x7f0000002b40), 0xffffffffffffffff)
sendmsg$auto_MACSEC_CMD_DEL_TXSA(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010026bd700400000025050000000d"], 0x24}, 0x1, 0x0, 0x0, 0x4045}, 0x0)

2.837289513s ago: executing program 4 (id=1037):
r0 = openat$auto_btrfs_ctl_fops_super(0xffffffffffffff9c, &(0x7f0000000040), 0x200000, 0x0)
mmap$auto(0x0, 0xa40, 0x1fd, 0x9b72, r0, 0x8000)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
mmap$auto(0xfffffffffffffffd, 0x2020009, 0x1, 0x90, 0xffffffffffffffff, 0x20000000008000)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x1d, 0x2, 0x2)
mq_open$auto(&(0x7f0000000280)='\\*)A ', 0x7e, 0x9, 0x0)
mq_timedsend$auto(0x5, 0x0, 0x5, 0x9, 0x0)
socket(0x11, 0x3, 0x2)
r1 = socket(0x2, 0x5, 0x0)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
getcwd$auto(0x0, 0xffffffffffffffff)
setsockopt$auto(0x3, 0x10000000084, 0x2, 0x0, 0x8)
sendmmsg$auto(r1, &(0x7f0000000140)={{&(0x7f0000000040), 0x10, &(0x7f00000000c0)={0x0, 0x4}, 0x7, 0x0, 0x8, 0xb}, 0x400}, 0x5, 0x7fffffff)
bind$auto(0x3, 0x0, 0x6a)
r2 = openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, 0x0, 0x1541, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000)
ioctl$auto__ctl_fops_dm_ioctl(r2, 0x4020ae46, 0x0)
gettid()
r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sda1\x00', 0xa4e00, 0x0)
ioctl$auto_def_blk_fops_fs(r3, 0x1261, 0x0)

2.217637438s ago: executing program 0 (id=1038):
openat$auto_proc_pid_numa_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/numa_maps\x00', 0x258b40, 0x0)
select$auto(0x6d0c, 0x0, &(0x7f0000000100)={[0xd, 0x42, 0x800000000000005, 0x10, 0xb, 0x3, 0x9a, 0x5, 0x8, 0x5e582972, 0x4000000000000000, 0x14, 0x100000000, 0x1, 0x8, 0x6]}, 0x0, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x7, 0x800008000)
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/net/nr14/proto_down\x00', 0x3e1143, 0x0)
r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0)
ioctl$auto(r1, 0x4b52, r0)

1.859079312s ago: executing program 2 (id=1039):
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
r0 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$auto_VHOST_SET_OWNER(r0, 0xaf01, 0x5) (async)
openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x1, 0x0)

1.669246581s ago: executing program 4 (id=1040):
socket(0x10, 0x3, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
statx$auto(0xffffffffffffff9c, 0x0, 0x2, 0x4, &(0x7f0000000300)={0x7, 0x1, 0xfffffffffffffff9, 0x7, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffffd, 0x1, 0x5, 0x200, {0x80000001, 0x8}, {0x5, 0x8}, {0xffffffffffffffff, 0x1ff}, {0xffffffffffffff60, 0x9}, 0x2, 0x6, 0x80000000, 0x17e9, 0x709c, 0x101, 0x5, 0x938, 0x8, 0x8, 0xb6a, 0xde57, [0x6, 0x6, 0x80000001, 0x5, 0xffffffff, 0x1c9fb31b, 0xfffffffffffffffc, 0x800, 0x3]})
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYBLOB='-\x00', @ANYBLOB=']'], 0x1ac}}, 0x40000)
ioperm$auto(0x2, 0x3, 0x1)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x3000000)

1.610713498s ago: executing program 6 (id=1041):
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x2200, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
sysfs$auto(0x2, 0x10000000000048, 0x0)
r0 = fsopen$auto(0x0, 0x1)
close_range$auto(0x2, 0x8, 0x0)
r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x8c00, 0x0)
ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0)
mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8004)
lsm_list_modules$auto(0x0, 0x0, 0x0)
r2 = socket(0x2, 0x801, 0x106)
connect$auto(r2, 0x0, 0x4)
getsockopt$auto(r2, 0x11c, 0x2, 0x0, 0x0)
acct$auto(&(0x7f0000000000)='/proc/12_list\x00'/27)
ioctl$auto(0x3, 0x4188aec6, r0)

1.555617671s ago: executing program 2 (id=1042):
personality$auto(0x40004010410ffc)
io_setup$auto(0x5, &(0x7f0000000000))
mount$auto(0x0, &(0x7f00000000c0)='.\x00', &(0x7f00000001c0)='nfsd\x00\xee\x1a\x8f\xa2~?\xe2\x82fg\xb3G\xbe\xc8\x12\xae\xc3\xc0@[\x99\xec\xbf(\xec\xc3\xb2\xf2\x15Zi\xc4S6\'\x14\x05\t\x8c\xd5?\xa0\x00\xd8\xe4\xafW\xcc\xa3\xce\tI\x95\xe12\xaclJ\xba\xeb\xe4\x83Z\xaev\xd7\xd9\xdd_\x14O\x84\xaa\x13W\xb7\x06\'fvQ\x95\xc5\xd1\x98\xe3T\xcdfk\xc7\xe9\x96\r\x91\xb0\xc46\xf2\xfc\xef\xfe\xa0\xc9d\xb3h$\xeb\xad\xa4P\x8f\xc3bM{4RQ\x00\x9d)_\xd81(\x03\xfd\rw\xca1\x88|\xe5\x1e\x10\x89X\x01\xe9\xf6g\x95xx\xaf\xa9~m\x05\xe1\xa8\xda\x80\xc5\x8f\xb41\x81\xf0\xa3\xa2\xe4\x81\xb9\x92\xda\x13\xfe5\xfb\xc6\xd8>\x01\xd4\x14', 0x5, 0x0)
io_setup$auto(0x4, &(0x7f0000000080)=0x95e6)
personality$auto(0xc1dd)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/net/rpc/use-gss-proxy\x00', 0x400, 0x0)

1.2314994s ago: executing program 0 (id=1043):
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
open(&(0x7f0000000000)='./file0\x00', 0x261c2, 0x84)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_nfsd(0x0, 0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x2, 0x801, 0x100)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
timerfd_create$auto(0x0, 0x0)
socket(0x2, 0x6, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0xa, 0x3, 0x100)
socket(0xa, 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
clone$auto(0x7fff, 0xff, 0x0, 0x0, 0x7)
socketpair$auto(0x8, 0x1, 0x8000000000000000, 0x0)
r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0)
ioctl$auto_TIOCSETD2(r0, 0x5423, 0x0)
ioctl$auto_TIOCSTI2(r0, 0x5412, 0x0)

1.231276778s ago: executing program 4 (id=1044):
openat$auto_ftrace_event_format_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000640)='/sys/kernel/tracing/events/vmalloc/alloc_vmap_area/format\x00', 0x40, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_ETHTOOL_MSG_FEC_GET(r0, &(0x7f0000001680)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000600)={&(0x7f0000000500)={0xd0, 0x0, 0x300, 0x70bd2d, 0x25dfdbfb, {}, [@ETHTOOL_A_FEC_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x8}]}, @ETHTOOL_A_FEC_HEADER={0x84, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0xbbf1}]}, @ETHTOOL_A_FEC_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}]}]}, 0xd0}, 0x1, 0x0, 0x0, 0x40}, 0x40000)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff)
socket(0xa, 0x1, 0x0)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
socketpair$auto(0x1e, 0x1, 0x0, 0x0)
r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/pts/ptmx\x00', 0x0, 0x0)
ioctl$auto_TIOCSETD2(r1, 0x5423, 0x0)
ioctl$auto_TCFLSH2(r1, 0x89f0, 0x0)
msgctl$auto(0x401, 0xffffffff, &(0x7f0000000400)={{0xba93, 0x0, 0x0, 0x401, 0x180, 0x7, 0x1}, &(0x7f0000000280)=0x5, &(0x7f00000002c0), 0x8000000000000000, 0x6, 0xb366, 0x9, 0x7, 0xef4, 0x0, 0xadc, @raw=0x3})
close_range$auto(0x2, 0xffffffffffffffff, 0x0)

1.129301089s ago: executing program 2 (id=1045):
timer_create$auto(0x9, 0x0, 0x0)
syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff)
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer2\x00', 0x8002, 0x0)
r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snd/midiC2D0\x00', 0x101080, 0x0)
read$auto_snd_rawmidi_f_ops_rawmidi(r0, &(0x7f0000000080)=""/45, 0x2d)
close_range$auto(0x2, 0x8, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_ovs_packet(0x0, 0xffffffffffffffff)
sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004040}, 0xc800)
r2 = fsopen$auto(&(0x7f0000000000)='\x00', 0x400)
r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000080), r2)
sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r1, &(0x7f0000000280)={0x0, 0x700, &(0x7f0000000240)={&(0x7f0000000180)={0x2c, r3, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@NL80211_ATTR_OPER_CLASS={0x5}, @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, 0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4004801}, 0x4008000)
unshare$auto(0x40000080)

767.995374ms ago: executing program 4 (id=1046):
r0 = openat$auto_loop_ctl_fops_loop(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0) (async)
statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x401bf, 0x7352, 0x32, 0x65f, 0x1ffde, 0x7, 0x3, 0x20000002, 0x9, 0x3, 0x6, 0x4, 0xb4, 0x9, 0x6, 0x10003, 0x80, 0x4, 0x0, 0x7, 0x2000, 0x203, 0x0, 0x84, [0x0, 0x0, 0x0, 0x8050100000000000, 0x0, 0x100100001, 0x0, 0xa, 0x70624ce7, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0, 0x1, 0x3, 0x0, 0xfffffffffffffffd, 0x2, 0x200000000004, 0x8, 0xffffffffefffffff, 0x200000000000004, 0x0, 0x0, 0x0, 0x0, 0x400000000005b8, 0xc, 0x0, 0x0, 0x4, 0x6, 0xffffffffffffffff, 0x890, 0x8000000000008, 0xfffffffffffffffc, 0x1000, 0xa38, 0x0, 0x0, 0xfffffffffffffffc, 0x2, 0x4000000000, 0x10006]}, 0x1fe, 0xd) (async)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) (async)
r1 = openat$auto_generic(0xffffffffffffff9c, 0x0, 0x0, 0x0)
read$auto_snd_ctl_f_ops_control(r1, 0x0, 0x0)
mknod$auto(0x0, 0x1, 0x4)
mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000)
r2 = io_uring_setup$auto(0x1, 0x0) (async, rerun: 32)
r3 = socket(0x11, 0x80003, 0x300) (rerun: 32)
mlockall$auto(0x7)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
mincore$auto(0x1000, 0x8001, 0x0) (async)
setsockopt$auto(r3, 0x107, 0x1, 0x0, 0x8004) (async)
bpf$auto(0x6, &(0x7f0000000040)=@token_create={0x400, r1}, 0x7)
sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) (async, rerun: 32)
socket(0x10, 0x2, 0x0) (async, rerun: 32)
socket(0x2, 0x3, 0x2) (async)
setsockopt$auto(0x3, 0x0, 0xd0, 0xfffffffffffffffc, 0xfd72)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$auto_ETHTOOL_MSG_WOL_GET(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x2c, r5, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [@ETHTOOL_A_WOL_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x0) (async)
ioctl$auto_LOOP_CTL_ADD(r0, 0x4c80, 0x6c)
r6 = timerfd_create$auto(0x9d9, 0x2)
close_range$auto(r1, r2, 0xe0) (async)
r7 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000380), r1)
shmctl$auto(0xc845, 0x10001, &(0x7f00000004c0)={{0x8, <r8=>0xee01, 0xffffffffffffffff, 0x0, 0x6, 0x7, 0x7}, 0x5, 0x1, 0x80000001, 0x5, @raw=0x85c, @raw=0xffff, 0x10, 0x0, &(0x7f00000003c0)="1981715d109ffa85d6ab5d8b2ae1daa7b013c565fe411b0b3990b414873a7caef0875598dbb88ff757e4ab9615f6f755c4c08c3973297bb507f5fcd201e14eb2cd0a47b82c36f28a26de91631dbc0e4f9d0a919257b014f44157aa1fba663c5fbb38b6f1", &(0x7f0000000440)="26655816fbb7c1aba361900ea09a9449c3616774388c4f5d3957f8815b11c9a4fa94443cfad7b95d2dccebb4b6c6f0413a15dc867f7af0a30498a32153eec2833c"})
sendmsg$auto_NL802154_CMD_GET_SEC_DEVKEY(r6, &(0x7f00000005c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000580)={&(0x7f0000000600)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="10002bbd70e4fadbdf251c00630024006f130a000000000000237c50b29eef30181ba44b2603ea0286f53bf84625c77270e9410dd0d32cc1", @ANYRES32=r8, @ANYBLOB="040093000c000780040099800400748008002f006c050000"], 0x38}, 0x1, 0x0, 0x0, 0x40}, 0x0)

178.38609ms ago: executing program 6 (id=1047):
r0 = socket(0x2, 0x2, 0x88)
r1 = getsid$auto(0xffffffffffffffff)
get_robust_list$auto(r1, 0x0, &(0x7f0000000180)=0x3ffff)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
socket(0x2, 0x2, 0x1)
connect$auto(0x3, &(0x7f00000000c0)=@in={0x2, 0x0, @local}, 0x55)
r2 = io_uring_setup$auto(0x6, 0x0)
rmdir$auto(&(0x7f0000000200)='./file0\x00')
setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9)
write$auto(0x3, 0x0, 0xfdef)
madvise$auto(0x0, 0xfffffffffffefffd, 0x17)
mmap$auto(0x0, 0x200006, 0x2, 0x40eb1, 0x602, 0x300000000000)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x0, 0x2020006, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "ab06fdffff00fff500"}, 0x55)
write$auto(0x3, 0x0, 0x5dc)
r3 = syz_genetlink_get_family_id$auto_gtp(&(0x7f0000000040), r0)
sendmsg$auto_GTP_CMD_NEWPDP(r2, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="00042dbd7000fbdbdf25004e070008000500e000000108000900017f0000000000000000000008000100ff07000008000500ac1404bb"], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x80)
r4 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/fs/jbd2/sda1-8/info\x00', 0x2, 0x0)
read$auto_proc_reg_file_ops_compat_inode(r4, &(0x7f00000000c0)=""/10, 0xa)

147.985683ms ago: executing program 0 (id=1048):
r0 = openat$auto_btrfs_ctl_fops_super(0xffffffffffffff9c, &(0x7f0000000040), 0x200000, 0x0)
mmap$auto(0x0, 0xa40, 0x1fd, 0x9b72, r0, 0x8000)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
mmap$auto(0xfffffffffffffffd, 0x2020009, 0x1, 0x90, 0xffffffffffffffff, 0x20000000008000)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x1d, 0x2, 0x2)
mq_open$auto(&(0x7f0000000280)='\\*)A ', 0x7e, 0x9, 0x0)
mq_timedsend$auto(0x5, 0x0, 0x5, 0x9, 0x0)
socket(0x11, 0x3, 0x2)
r1 = socket(0x2, 0x5, 0x0)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
getcwd$auto(0x0, 0xffffffffffffffff)
setsockopt$auto(0x3, 0x10000000084, 0x2, 0x0, 0x8)
sendmmsg$auto(r1, &(0x7f0000000140)={{&(0x7f0000000040), 0x10, &(0x7f00000000c0)={0x0, 0x4}, 0x7, 0x0, 0x8, 0xb}, 0x400}, 0x5, 0x7fffffff)
bind$auto(0x3, 0x0, 0x6a)
r2 = openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, 0x0, 0x1541, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000)
ioctl$auto__ctl_fops_dm_ioctl(r2, 0x4020ae46, 0x0)
gettid()
r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sda1\x00', 0xa4e00, 0x0)
ioctl$auto_def_blk_fops_fs(r3, 0x1261, 0x0)

0s ago: executing program 2 (id=1049):
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
madvise$auto(0x0, 0xffffffffffff0005, 0x17)
r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0)
mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000)
mremap$auto(0x0, 0x7, 0x3fd6, 0x3, 0x20000000)
mbind$auto(0x0, 0x100000004, 0x100000000, 0x0, 0x6, 0x2)
sendmmsg$auto(r0, 0x0, 0x7, 0x4008)
madvise$auto(0x0, 0x3fa, 0xa)
r1 = syz_open_procfs$namespace(0x0, 0x0)
shmget$auto(0xffffffffffffffff, 0xb0d, 0xa7db6ba)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
unshare$auto(0x8000400)
setns(r1, 0x0)
setns(0xffffffffffffffff, 0x20000000)
semctl$auto(0x1ff, 0x7ff, 0x13, 0x1)

kernel console output (not intermixed with test programs):

atadv_slave_1
[  190.391281][ T7326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  190.401385][ T5847] Bluetooth: hci2: command tx timeout
[  190.406854][ T7326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  190.417604][ T7326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  190.430208][ T7326] batman_adv: batadv0: Interface activated: batadv_slave_1
[  190.499502][ T7326] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  190.517321][ T7326] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  190.526139][ T7326] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  190.536496][ T7326] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  190.700224][ T1105] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  190.722738][ T1105] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  190.807906][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  190.815802][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  191.128254][ T7330] 8021q: adding VLAN 0 to HW filter on device batadv0
[  191.161796][ T7465] netlink: 28 bytes leftover after parsing attributes in process `syz.1.212'.
[  191.187620][ T7465] team_slave_0: entered allmulticast mode
[  191.239038][ T7480] kernel read not supported for file /#)-\&[} (pid: 7480 comm: syz.3.213)
[  191.283641][ T7330] veth0_vlan: entered promiscuous mode
[  191.327358][   T29] audit: type=1800 audit(6030360234.023:6): pid=7480 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.213" name="#)-\&[}" dev="mqueue" ino=18078 res=0 errno=0
[  191.366863][ T7330] veth1_vlan: entered promiscuous mode
[  191.505673][ T7330] veth0_macvtap: entered promiscuous mode
[  191.539605][ T7330] veth1_macvtap: entered promiscuous mode
[  191.632321][ T7330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  191.680422][ T7330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  191.714956][ T7330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  191.742950][ T7330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  191.767920][ T7330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  191.789182][ T7330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  191.803716][ T7330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  191.820709][ T7330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  191.835729][ T7330] batman_adv: batadv0: Interface activated: batadv_slave_0
[  191.893664][ T7330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  191.911972][ T7330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  191.926267][ T7330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  191.964330][ T7330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  191.979663][ T7330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  191.990318][ T7330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  192.000718][ T7330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  192.011316][ T7330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  192.022467][ T7330] batman_adv: batadv0: Interface activated: batadv_slave_1
[  192.111788][ T7330] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  192.127362][ T7330] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  192.136189][ T7330] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  192.145039][ T7330] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  192.345944][ T3553] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  192.376958][ T3553] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  192.510088][ T1151] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  192.521762][ T1151] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  192.930592][ T7498] cifs: Unknown parameter 'no+ 1����`��r�sFn)��a�H��ā��h`����9k�A}���1\D@��.��Z�Cg^�'
[  193.132246][   T79] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  193.262024][   T79] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  193.421490][   T79] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  193.579208][   T79] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  193.954235][ T5843] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  193.969367][ T5843] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  194.007506][ T5849] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  194.015824][ T5843] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  194.024941][ T5843] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  194.046545][ T5849] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  194.047016][ T5843] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  194.061832][ T5849] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  194.069194][ T5849] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  194.076873][ T5843] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  194.078398][ T5849] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  194.092731][ T5849] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  194.165678][ T7506] capability: warning: `syz.0.220' uses deprecated v2 capabilities in a way that may be insecure
[  194.192840][   T79] bridge_slave_1: left allmulticast mode
[  194.207595][   T79] bridge_slave_1: left promiscuous mode
[  194.213378][   T79] bridge0: port 2(bridge_slave_1) entered disabled state
[  194.240180][   T79] bridge_slave_0: left allmulticast mode
[  194.245911][   T79] bridge_slave_0: left promiscuous mode
[  194.259336][   T79] bridge0: port 1(bridge_slave_0) entered disabled state
[  195.096804][   T79] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  195.109493][   T79] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  195.125653][   T79] bond0 (unregistering): Released all slaves
[  195.658159][   T79] hsr_slave_0: left promiscuous mode
[  195.699921][   T79] hsr_slave_1: left promiscuous mode
[  195.742349][   T79] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  195.750076][   T79] batman_adv: batadv0: Removing interface: batadv_slave_0
[  195.761219][   T79] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  195.771462][   T79] batman_adv: batadv0: Removing interface: batadv_slave_1
[  195.796365][   T79] veth1_macvtap: left promiscuous mode
[  195.802203][   T79] veth0_macvtap: left promiscuous mode
[  195.812366][   T79] veth1_vlan: left promiscuous mode
[  195.827835][   T79] veth0_vlan: left promiscuous mode
[  196.162140][ T5849] Bluetooth: hci0: command tx timeout
[  196.167958][   T54] Bluetooth: hci3: command tx timeout
[  196.536560][   T79] team0 (unregistering): Port device team_slave_1 removed
[  196.582234][   T79] team0 (unregistering): Port device team_slave_0 removed
[  197.171449][ T7501] chnl_net:caif_netlink_parms(): no params data found
[  197.294927][ T7503] chnl_net:caif_netlink_parms(): no params data found
[  197.469315][ T7501] bridge0: port 1(bridge_slave_0) entered blocking state
[  197.476462][ T7501] bridge0: port 1(bridge_slave_0) entered disabled state
[  197.484910][ T7501] bridge_slave_0: entered allmulticast mode
[  197.492493][ T7501] bridge_slave_0: entered promiscuous mode
[  197.532204][ T7501] bridge0: port 2(bridge_slave_1) entered blocking state
[  197.539619][ T7501] bridge0: port 2(bridge_slave_1) entered disabled state
[  197.546878][ T7501] bridge_slave_1: entered allmulticast mode
[  197.554717][ T7501] bridge_slave_1: entered promiscuous mode
[  197.603096][   T79] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  197.682858][ T7501] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  197.710419][   T79] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  197.726370][ T7503] bridge0: port 1(bridge_slave_0) entered blocking state
[  197.735311][ T7503] bridge0: port 1(bridge_slave_0) entered disabled state
[  197.743118][ T7503] bridge_slave_0: entered allmulticast mode
[  197.750805][ T7503] bridge_slave_0: entered promiscuous mode
[  197.764538][ T7503] bridge0: port 2(bridge_slave_1) entered blocking state
[  197.771897][ T7503] bridge0: port 2(bridge_slave_1) entered disabled state
[  197.779863][ T7503] bridge_slave_1: entered allmulticast mode
[  197.786859][ T7503] bridge_slave_1: entered promiscuous mode
[  197.803098][ T7501] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  197.829352][   T79] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  197.884049][ T7503] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  197.903569][ T7501] team0: Port device team_slave_0 added
[  197.924267][   T79] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  197.944520][ T7503] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  197.981053][ T7501] team0: Port device team_slave_1 added
[  198.014408][ T7503] team0: Port device team_slave_0 added
[  198.024682][ T7503] team0: Port device team_slave_1 added
[  198.040561][ T7501] batman_adv: batadv0: Adding interface: batadv_slave_0
[  198.048436][ T7501] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  198.074657][ T7501] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  198.088391][ T7501] batman_adv: batadv0: Adding interface: batadv_slave_1
[  198.095499][ T7501] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  198.121769][ T7501] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  198.184113][ T7503] batman_adv: batadv0: Adding interface: batadv_slave_0
[  198.191500][ T7503] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  198.217694][ T7503] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  198.237739][ T5849] Bluetooth: hci0: command tx timeout
[  198.243319][   T54] Bluetooth: hci3: command tx timeout
[  198.270409][ T7503] batman_adv: batadv0: Adding interface: batadv_slave_1
[  198.277534][ T7503] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  198.303992][ T7503] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  198.348579][ T7501] hsr_slave_0: entered promiscuous mode
[  198.355042][ T7501] hsr_slave_1: entered promiscuous mode
[  198.363125][ T7501] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  198.371838][ T7501] Cannot create hsr debugfs directory
[  198.415304][   T79] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  198.486326][   T79] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  198.517941][ T7503] hsr_slave_0: entered promiscuous mode
[  198.524411][ T7503] hsr_slave_1: entered promiscuous mode
[  198.535182][ T7503] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  198.542863][ T7503] Cannot create hsr debugfs directory
[  198.580104][   T79] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  198.664204][   T79] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  198.882744][   T79] bridge_slave_1: left allmulticast mode
[  198.888692][   T79] bridge_slave_1: left promiscuous mode
[  198.894880][   T79] bridge0: port 2(bridge_slave_1) entered disabled state
[  198.915229][   T79] bridge_slave_0: left allmulticast mode
[  198.925143][   T79] bridge_slave_0: left promiscuous mode
[  198.936291][   T79] bridge0: port 1(bridge_slave_0) entered disabled state
[  198.951185][   T79] bridge_slave_1: left allmulticast mode
[  198.956907][   T79] bridge_slave_1: left promiscuous mode
[  198.964469][   T79] bridge0: port 2(bridge_slave_1) entered disabled state
[  198.976104][   T79] bridge_slave_0: left allmulticast mode
[  198.987618][   T79] bridge_slave_0: left promiscuous mode
[  198.993388][   T79] bridge0: port 1(bridge_slave_0) entered disabled state
[  199.723921][   T79] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  199.736122][   T79] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  199.747002][   T79] bond0 (unregistering): Released all slaves
[  199.774021][ T1297] ieee802154 phy0 wpan0: encryption failed: -22
[  199.783966][ T1297] ieee802154 phy1 wpan1: encryption failed: -22
[  199.855781][   T79] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  199.873443][   T79] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  199.883883][   T79] bond0 (unregistering): Released all slaves
[  200.318015][   T54] Bluetooth: hci3: command tx timeout
[  200.323501][   T54] Bluetooth: hci0: command tx timeout
[  200.360219][ T7501] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  200.470633][ T7501] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  200.529266][ T7501] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  200.551076][ T7501] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  200.663926][   T79] hsr_slave_0: left promiscuous mode
[  200.687791][   T79] hsr_slave_1: left promiscuous mode
[  200.698066][   T79] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  200.705554][   T79] batman_adv: batadv0: Removing interface: batadv_slave_0
[  200.714642][   T79] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  200.722723][   T79] batman_adv: batadv0: Removing interface: batadv_slave_1
[  200.736307][   T79] hsr_slave_0: left promiscuous mode
[  200.742393][   T79] hsr_slave_1: left promiscuous mode
[  200.752026][   T79] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  200.760013][   T79] batman_adv: batadv0: Removing interface: batadv_slave_0
[  200.771076][   T79] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  200.778817][   T79] batman_adv: batadv0: Removing interface: batadv_slave_1
[  200.811352][   T79] veth1_macvtap: left promiscuous mode
[  200.816927][   T79] veth0_macvtap: left promiscuous mode
[  200.822779][   T79] veth1_vlan: left promiscuous mode
[  200.828200][   T79] veth0_vlan: left promiscuous mode
[  200.834560][   T79] veth1_macvtap: left promiscuous mode
[  200.840329][   T79] veth0_macvtap: left promiscuous mode
[  200.845923][   T79] veth1_vlan: left promiscuous mode
[  200.851383][   T79] veth0_vlan: left promiscuous mode
[  201.383323][   T79] team0 (unregistering): Port device team_slave_1 removed
[  201.423464][   T79] team0 (unregistering): Port device team_slave_0 removed
[  202.096075][   T79] team0 (unregistering): Port device team_slave_1 removed
[  202.137977][   T79] team0 (unregistering): Port device team_slave_0 removed
[  202.397633][ T5849] Bluetooth: hci3: command tx timeout
[  202.403176][   T54] Bluetooth: hci0: command tx timeout
[  202.730891][ T7501] 8021q: adding VLAN 0 to HW filter on device bond0
[  202.790765][ T7501] 8021q: adding VLAN 0 to HW filter on device team0
[  202.802581][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[  202.809807][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[  202.845479][   T11] bridge0: port 2(bridge_slave_1) entered blocking state
[  202.852721][   T11] bridge0: port 2(bridge_slave_1) entered forwarding state
[  202.885200][ T7501] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  202.896870][ T7501] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  202.980265][ T7503] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  203.019334][ T7503] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  203.042059][ T7503] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  203.055617][ T7503] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  203.257639][ T7503] 8021q: adding VLAN 0 to HW filter on device bond0
[  203.308321][ T7503] 8021q: adding VLAN 0 to HW filter on device team0
[  203.334998][ T7501] 8021q: adding VLAN 0 to HW filter on device batadv0
[  203.352458][ T1151] bridge0: port 1(bridge_slave_0) entered blocking state
[  203.359693][ T1151] bridge0: port 1(bridge_slave_0) entered forwarding state
[  203.394164][ T1151] bridge0: port 2(bridge_slave_1) entered blocking state
[  203.401376][ T1151] bridge0: port 2(bridge_slave_1) entered forwarding state
[  203.515965][ T7501] veth0_vlan: entered promiscuous mode
[  203.543040][ T7501] veth1_vlan: entered promiscuous mode
[  203.591975][ T7501] veth0_macvtap: entered promiscuous mode
[  203.613959][ T7501] veth1_macvtap: entered promiscuous mode
[  203.653418][ T7501] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  203.687499][ T7501] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  203.707987][ T7501] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  203.725415][ T7501] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  203.748674][ T7501] batman_adv: batadv0: Interface activated: batadv_slave_0
[  203.772090][ T7501] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  203.797420][ T7501] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  203.807795][ T7501] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  203.824381][ T7501] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  203.835748][ T7501] batman_adv: batadv0: Interface activated: batadv_slave_1
[  203.872821][ T7501] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  203.882813][ T7501] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  203.895698][ T7501] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  203.904830][ T7501] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  203.921486][ T7503] 8021q: adding VLAN 0 to HW filter on device batadv0
[  204.022258][ T7503] veth0_vlan: entered promiscuous mode
[  204.032703][ T1151] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  204.036505][ T7503] veth1_vlan: entered promiscuous mode
[  204.053164][ T1151] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  204.116440][ T7503] veth0_macvtap: entered promiscuous mode
[  204.123029][   T79] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  204.134729][   T79] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  204.141256][ T7503] veth1_macvtap: entered promiscuous mode
[  204.184340][ T7503] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  204.200915][ T7503] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  204.213631][ T7503] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  204.227228][ T7503] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  204.243137][ T7503] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  204.256435][ T7503] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  204.274907][ T7503] batman_adv: batadv0: Interface activated: batadv_slave_0
[  204.285981][ T7503] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  204.296807][ T7503] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  204.307047][ T7503] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  204.327327][ T7503] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  204.347524][ T7503] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  204.367335][ T7503] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  204.398613][ T7503] batman_adv: batadv0: Interface activated: batadv_slave_1
[  204.446526][ T7503] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  204.467959][ T7503] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  204.504216][ T7503] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  204.526826][ T7503] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  204.783166][ T7386] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  204.809633][ T7386] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  204.917616][ T7386] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  204.925601][ T7386] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  205.365694][ T7652] mkiss: ax0: crc mode is auto.
[  205.650643][ T5849] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  205.675553][ T5849] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  205.767893][ T5849] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  205.788378][ T7649] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  205.810004][ T7649] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  205.828202][ T5849] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  205.841776][ T5849] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  205.850931][ T5849] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  205.852471][ T7669] netlink: 28 bytes leftover after parsing attributes in process `syz.1.227'.
[  206.590017][ T7665] chnl_net:caif_netlink_parms(): no params data found
[  206.852806][ T7665] bridge0: port 1(bridge_slave_0) entered blocking state
[  206.864787][ T7665] bridge0: port 1(bridge_slave_0) entered disabled state
[  206.912063][ T7665] bridge_slave_0: entered allmulticast mode
[  206.926369][ T7665] bridge_slave_0: entered promiscuous mode
[  206.935835][ T7665] bridge0: port 2(bridge_slave_1) entered blocking state
[  206.957872][ T7665] bridge0: port 2(bridge_slave_1) entered disabled state
[  206.966302][ T7665] bridge_slave_1: entered allmulticast mode
[  206.973977][ T7665] bridge_slave_1: entered promiscuous mode
[  207.051865][ T7665] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  207.083308][ T7665] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  207.223224][ T7665] team0: Port device team_slave_0 added
[  207.266823][ T7665] team0: Port device team_slave_1 added
[  207.456976][ T7665] batman_adv: batadv0: Adding interface: batadv_slave_0
[  207.473940][ T7665] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  207.536902][ T7665] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  207.555952][ T7709] cifs: Unknown parameter 'no+ 1����`��r�sFn)��a�H��ā��h`����9k�A}���1\D@��.��Z�Cg^�'
[  207.588940][ T7665] batman_adv: batadv0: Adding interface: batadv_slave_1
[  207.609601][ T7665] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  207.661064][ T7665] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  207.794630][ T7665] hsr_slave_0: entered promiscuous mode
[  207.824948][ T7665] hsr_slave_1: entered promiscuous mode
[  207.865323][ T7665] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  207.886540][ T7665] Cannot create hsr debugfs directory
[  207.918626][ T5849] Bluetooth: hci1: command tx timeout
[  209.070899][ T7386] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  209.293575][ T7386] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  209.539777][ T7386] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  209.700309][ T7386] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  209.842889][ T7665] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  209.941111][ T7665] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  210.007074][ T5849] Bluetooth: hci1: command tx timeout
[  210.027462][ T7665] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  210.089223][ T7665] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  210.424750][ T7386] bridge_slave_1: left allmulticast mode
[  210.430717][ T7386] bridge_slave_1: left promiscuous mode
[  210.436498][ T7386] bridge0: port 2(bridge_slave_1) entered disabled state
[  210.465270][ T7748] process 'syz.0.237' launched ':,' with NULL argv: empty string added
[  210.529928][ T7386] bridge_slave_0: left allmulticast mode
[  210.535677][ T7386] bridge_slave_0: left promiscuous mode
[  210.541747][ T7386] bridge0: port 1(bridge_slave_0) entered disabled state
[  210.580459][   T54] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  210.596477][   T54] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  210.605423][   T54] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  210.638622][   T54] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  210.646353][   T54] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  210.654396][   T54] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  211.587062][ T7386] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  211.627659][ T7386] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  211.665158][ T7386] bond0 (unregistering): Released all slaves
[  211.964840][ T7665] 8021q: adding VLAN 0 to HW filter on device bond0
[  212.084489][   T54] Bluetooth: hci1: command tx timeout
[  212.169442][ T7665] 8021q: adding VLAN 0 to HW filter on device team0
[  212.211808][   T52] bridge0: port 1(bridge_slave_0) entered blocking state
[  212.219005][   T52] bridge0: port 1(bridge_slave_0) entered forwarding state
[  212.291507][ T7386] hsr_slave_0: left promiscuous mode
[  212.305937][ T7386] hsr_slave_1: left promiscuous mode
[  212.327191][ T7386] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  212.335288][ T7386] batman_adv: batadv0: Removing interface: batadv_slave_0
[  212.358127][ T7386] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  212.365610][ T7386] batman_adv: batadv0: Removing interface: batadv_slave_1
[  212.392982][ T7386] veth1_macvtap: left promiscuous mode
[  212.399088][ T7386] veth0_macvtap: left promiscuous mode
[  212.404746][ T7386] veth1_vlan: left promiscuous mode
[  212.410332][ T7386] veth0_vlan: left promiscuous mode
[  212.717707][   T54] Bluetooth: hci3: command tx timeout
[  213.353357][ T7386] team0 (unregistering): Port device team_slave_1 removed
[  213.469968][ T7386] team0 (unregistering): Port device team_slave_0 removed
[  214.160092][   T54] Bluetooth: hci1: command tx timeout
[  214.164280][   T52] bridge0: port 2(bridge_slave_1) entered blocking state
[  214.172700][   T52] bridge0: port 2(bridge_slave_1) entered forwarding state
[  214.200299][ T7793] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  214.222941][ T7793] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  214.559035][ T7755] chnl_net:caif_netlink_parms(): no params data found
[  214.621987][ T7846] netlink: 28 bytes leftover after parsing attributes in process `syz.0.239'.
[  214.798312][   T54] Bluetooth: hci3: command tx timeout
[  214.808592][ T7665] 8021q: adding VLAN 0 to HW filter on device batadv0
[  214.822165][ T7755] bridge0: port 1(bridge_slave_0) entered blocking state
[  214.837904][ T7755] bridge0: port 1(bridge_slave_0) entered disabled state
[  214.845190][ T7755] bridge_slave_0: entered allmulticast mode
[  214.859704][ T7755] bridge_slave_0: entered promiscuous mode
[  214.885593][ T7755] bridge0: port 2(bridge_slave_1) entered blocking state
[  214.893014][ T7755] bridge0: port 2(bridge_slave_1) entered disabled state
[  214.907677][ T7755] bridge_slave_1: entered allmulticast mode
[  214.928671][ T7755] bridge_slave_1: entered promiscuous mode
[  214.953284][ T7859] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  215.007928][ T7755] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  215.029662][ T7755] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  215.182409][ T7755] team0: Port device team_slave_0 added
[  215.204575][ T7755] team0: Port device team_slave_1 added
[  215.288259][ T7755] batman_adv: batadv0: Adding interface: batadv_slave_0
[  215.295276][ T7755] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  215.334827][ T7755] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  215.364644][ T7665] veth0_vlan: entered promiscuous mode
[  215.399298][ T7755] batman_adv: batadv0: Adding interface: batadv_slave_1
[  215.406330][ T7755] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  215.444191][ T7755] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  215.490945][ T7665] veth1_vlan: entered promiscuous mode
[  215.551922][ T7755] hsr_slave_0: entered promiscuous mode
[  215.563137][ T7755] hsr_slave_1: entered promiscuous mode
[  215.571980][ T7755] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  215.579901][ T7755] Cannot create hsr debugfs directory
[  215.705041][ T7665] veth0_macvtap: entered promiscuous mode
[  215.762695][ T7665] veth1_macvtap: entered promiscuous mode
[  215.865773][ T7665] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  215.889703][ T7665] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  215.926289][ T7665] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  215.947337][ T7665] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  215.969990][ T7665] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  215.998977][ T7665] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  216.028616][ T7665] batman_adv: batadv0: Interface activated: batadv_slave_0
[  216.104231][ T7665] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  216.135776][ T7665] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  216.161983][ T7665] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  216.182998][ T7665] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  216.207494][ T7665] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  216.221312][ T7665] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  216.232916][ T7665] batman_adv: batadv0: Interface activated: batadv_slave_1
[  216.297990][ T7665] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  216.306786][ T7665] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  216.326096][ T7665] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  216.335252][ T7665] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  216.573909][   T79] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  216.594535][   T79] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  216.666493][ T7386] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  216.695445][ T7755] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  216.704243][ T7386] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  216.736291][ T7755] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  216.781207][ T7755] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  216.843163][ T7755] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  216.887708][   T54] Bluetooth: hci3: command tx timeout
[  217.140923][ T7755] 8021q: adding VLAN 0 to HW filter on device bond0
[  217.170826][ T7755] 8021q: adding VLAN 0 to HW filter on device team0
[  217.217059][ T7755] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  217.227777][ T7755] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  217.246892][ T7386] bridge0: port 1(bridge_slave_0) entered blocking state
[  217.254128][ T7386] bridge0: port 1(bridge_slave_0) entered forwarding state
[  217.315534][ T7386] bridge0: port 2(bridge_slave_1) entered blocking state
[  217.322784][ T7386] bridge0: port 2(bridge_slave_1) entered forwarding state

syzkaller
syzkaller login: [  217.822851][ T7755] 8021q: adding VLAN 0 to HW filter on device batadv0
[  217.933015][ T7755] veth0_vlan: entered promiscuous mode
[  218.189083][ T7755] veth1_vlan: entered promiscuous mode
[  218.270924][ T7755] veth0_macvtap: entered promiscuous mode
[  218.300697][ T7755] veth1_macvtap: entered promiscuous mode
[  218.390048][ T7755] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  218.417696][ T7755] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  218.457396][ T7755] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  218.479249][ T7755] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  218.507751][ T7755] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  218.539099][ T7755] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  218.555435][ T7755] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  218.595979][ T7755] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  218.619629][ T7755] batman_adv: batadv0: Interface activated: batadv_slave_0
[  218.684926][ T7755] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  218.707409][ T7755] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  218.727330][ T7755] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  218.750559][ T7755] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  218.770865][ T7755] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  218.808524][ T7755] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  218.827771][ T7755] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  218.867511][ T7755] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  218.896588][ T7755] batman_adv: batadv0: Interface activated: batadv_slave_1
[  218.958047][   T54] Bluetooth: hci3: command tx timeout
[  219.050150][ T7755] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  219.067652][ T7755] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  219.076434][ T7755] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  219.113949][ T7755] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  219.752310][ T3553] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  219.765627][ T5849] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  219.781270][ T5849] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  219.790642][ T5849] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  219.818711][ T5849] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  219.827615][ T5849] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  219.836870][ T5849] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  219.970957][ T1151] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  220.016393][ T1151] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  220.077225][ T3553] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  220.306415][ T3553] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  220.399249][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  220.437871][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  220.540300][ T3553] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  220.734605][ T7873] kexec: Could not allocate control_code_buffer
[  220.930507][ T7937] chnl_net:caif_netlink_parms(): no params data found
[  221.166904][ T3553] bridge_slave_1: left allmulticast mode
[  221.187766][ T3553] bridge_slave_1: left promiscuous mode
[  221.193571][ T3553] bridge0: port 2(bridge_slave_1) entered disabled state
[  221.259822][ T3553] bridge_slave_0: left allmulticast mode
[  221.273623][ T3553] bridge_slave_0: left promiscuous mode
[  221.278867][ T7953] netlink: 28 bytes leftover after parsing attributes in process `syz.2.248'.
[  221.300696][ T3553] bridge0: port 1(bridge_slave_0) entered disabled state
[  221.917801][ T5849] Bluetooth: hci1: command tx timeout
[  222.501708][ T3553] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  222.521070][ T3553] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  222.549662][ T3553] bond0 (unregistering): Released all slaves
[  223.071668][ T7985] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  223.127543][ T7985] Bluetooth: hci2: Opcode 0x0406 failed: -4
[  223.187041][ T7985] Bluetooth: hci2: Opcode 0x0406 failed: -4
[  223.263633][ T7985] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  223.272797][ T7985] Bluetooth: hci0: Opcode 0x0406 failed: -4
[  223.352474][ T7985] Bluetooth: hci0: Opcode 0x0406 failed: -4
[  223.361729][ T7937] bridge0: port 1(bridge_slave_0) entered blocking state
[  223.380798][ T7937] bridge0: port 1(bridge_slave_0) entered disabled state
[  223.397542][ T7937] bridge_slave_0: entered allmulticast mode
[  223.404752][ T7937] bridge_slave_0: entered promiscuous mode
[  223.420420][ T7937] bridge0: port 2(bridge_slave_1) entered blocking state
[  223.428811][ T7937] bridge0: port 2(bridge_slave_1) entered disabled state
[  223.436097][ T7937] bridge_slave_1: entered allmulticast mode
[  223.447426][ T7937] bridge_slave_1: entered promiscuous mode
[  223.504842][ T7985] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  223.556820][ T7985] Bluetooth: hci3: Opcode 0x0406 failed: -4
[  223.598556][ T7985] Bluetooth: hci3: Opcode 0x0406 failed: -4
[  223.630802][ T7985] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  223.649796][ T7985] Bluetooth: hci1: Opcode 0x0406 failed: -4
[  223.683944][ T7985] Bluetooth: hci1: Opcode 0x0406 failed: -4
[  224.377461][ T3553] hsr_slave_0: left promiscuous mode
[  224.412063][ T3553] hsr_slave_1: left promiscuous mode
[  224.452670][ T3553] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  224.476921][ T3553] batman_adv: batadv0: Removing interface: batadv_slave_0
[  224.508191][ T3553] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  224.523877][ T3553] batman_adv: batadv0: Removing interface: batadv_slave_1
[  224.563482][ T3553] veth1_macvtap: left promiscuous mode
[  224.573675][ T3553] veth0_macvtap: left promiscuous mode
[  224.591124][ T3553] veth1_vlan: left promiscuous mode
[  224.606778][ T3553] veth0_vlan: left promiscuous mode
[  225.044977][ T5849] Bluetooth: hci2: command 0x0c1a tx timeout
[  225.278034][ T5849] Bluetooth: hci0: command 0x0c1a tx timeout
[  225.382105][ T8030] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  225.517650][ T5849] Bluetooth: hci3: command 0x0c1a tx timeout
[  225.677483][ T5849] Bluetooth: hci1: command 0x040f tx timeout
[  225.970600][ T3553] team0 (unregistering): Port device team_slave_1 removed
[  226.092317][ T3553] team0 (unregistering): Port device team_slave_0 removed
[  226.135193][ T8037] netlink: 4 bytes leftover after parsing attributes in process `syz.1.263'.
[  226.775255][ T7937] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  226.866132][ T7937] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  226.981816][ T7937] team0: Port device team_slave_0 added
[  227.037682][ T7937] team0: Port device team_slave_1 added
[  227.138182][ T5849] Bluetooth: hci2: command 0x0c1a tx timeout
[  227.169350][ T7937] batman_adv: batadv0: Adding interface: batadv_slave_0
[  227.176365][ T7937] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  227.281070][ T7937] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  227.312336][ T7937] batman_adv: batadv0: Adding interface: batadv_slave_1
[  227.334995][ T7937] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  227.362270][ T5849] Bluetooth: hci0: command 0x0c1a tx timeout
[  227.405555][ T7937] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  227.598037][ T5849] Bluetooth: hci3: command 0x0c1a tx timeout
[  227.757457][ T5849] Bluetooth: hci1: command 0x040f tx timeout
[  228.068864][ T7937] hsr_slave_0: entered promiscuous mode
[  228.096325][ T7937] hsr_slave_1: entered promiscuous mode
[  228.147467][ T7937] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  228.166476][ T7937] Cannot create hsr debugfs directory
[  229.197931][ T5849] Bluetooth: hci2: command 0x0c1a tx timeout
[  229.437922][ T5849] Bluetooth: hci0: command 0x0c1a tx timeout
[  229.687636][ T5849] Bluetooth: hci3: command 0x0c1a tx timeout
[  229.837515][ T5849] Bluetooth: hci1: command 0x040f tx timeout
[  231.014250][ T7937] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  231.063030][ T7937] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  231.168056][ T7937] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  231.212675][ T7937] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  231.564235][ T7937] 8021q: adding VLAN 0 to HW filter on device bond0
[  231.581470][ T7937] 8021q: adding VLAN 0 to HW filter on device team0
[  231.592771][   T11] bridge0: port 1(bridge_slave_0) entered blocking state
[  231.599995][   T11] bridge0: port 1(bridge_slave_0) entered forwarding state
[  231.752414][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[  231.759645][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[  231.861250][ T7937] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  231.917393][ T5849] Bluetooth: hci1: command 0x040f tx timeout
[  232.455108][ T7937] 8021q: adding VLAN 0 to HW filter on device batadv0
[  232.589432][ T7937] veth0_vlan: entered promiscuous mode
[  232.630273][ T7937] veth1_vlan: entered promiscuous mode
[  232.733157][ T7937] veth0_macvtap: entered promiscuous mode
[  232.758078][ T7937] veth1_macvtap: entered promiscuous mode
[  232.803136][ T7937] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  232.834108][ T7937] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  232.878504][ T7937] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  232.910380][ T7937] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  232.947424][ T7937] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  232.977501][ T7937] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  233.009904][ T7937] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  233.047819][ T7937] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  233.078661][ T7937] batman_adv: batadv0: Interface activated: batadv_slave_0
[  233.132805][ T7937] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  233.167282][ T7937] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  233.189914][ T7937] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  233.220698][ T8134] netlink: 8 bytes leftover after parsing attributes in process `syz.0.279'.
[  233.232823][ T7937] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  233.256125][ T7937] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  233.291742][ T7937] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  233.293881][ T8140] netlink: 28 bytes leftover after parsing attributes in process `syz.0.279'.
[  233.315820][ T7937] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  233.357138][ T7937] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  233.378591][ T7937] batman_adv: batadv0: Interface activated: batadv_slave_1
[  234.007617][ T5849] Bluetooth: hci1: command 0x040f tx timeout
[  234.091794][ T8146] x86/mm: Checked W+X mappings: passed, no W+X pages found.
[  234.706298][ T7937] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  234.734047][ T7937] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  234.758711][ T7937] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  234.797305][ T7937] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  235.246610][   T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  235.266926][   T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  235.339735][   T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  235.367721][   T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50

syzkaller
syzkaller login: [  238.632895][ T8179] kexec: Could not allocate control_code_buffer
[  239.717714][ T8264] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  239.738878][ T8264] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  239.757676][ T8264] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  239.777857][ T8264] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  241.518073][ T5849] Bluetooth: hci2: command 0x0c1a tx timeout
[  241.767803][ T5849] Bluetooth: hci3: command 0x0c1a tx timeout
[  241.773943][ T5849] Bluetooth: hci0: command 0x0c1a tx timeout
[  241.837373][ T5849] Bluetooth: hci1: command 0x040f tx timeout
[  243.107760][ T8305] netlink: 8 bytes leftover after parsing attributes in process `syz.3.299'.
[  243.296201][ T8300] netlink: 28 bytes leftover after parsing attributes in process `syz.3.299'.
[  244.619002][ T8331] ptrace attach of "./syz-executor exec"[7330] was attempted by "./syz-executor exec"[8331]
[  245.725500][ T8307] GUP no longer grows the stack in syz.2.298 (8307): 5000-401000 (4000)
[  245.827314][ T8307] CPU: 1 UID: 0 PID: 8307 Comm: syz.2.298 Not tainted 6.13.0-rc4-syzkaller-00071-gfd0584d220fe #0
[  245.838005][ T8307] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  245.848213][ T8307] Call Trace:
[  245.851558][ T8307]  <TASK>
[  245.854530][ T8307]  dump_stack_lvl+0x16c/0x1f0
[  245.859280][ T8307]  gup_vma_lookup+0x1d2/0x220
[  245.864031][ T8307]  __get_user_pages+0x236/0x3b50
[  245.869040][ T8307]  ? __pfx_rwsem_read_trylock+0x10/0x10
[  245.874648][ T8307]  ? get_dump_page+0xb6/0x230
[  245.879400][ T8307]  ? get_dump_page+0xb6/0x230
[  245.884163][ T8307]  ? __pfx___get_user_pages+0x10/0x10
[  245.889637][ T8307]  ? down_read_killable+0xcc/0x380
[  245.894815][ T8307]  ? __pfx_down_read_killable+0x10/0x10
[  245.900440][ T8307]  ? shmem_file_write_iter+0xcf/0x140
[  245.905890][ T8307]  ? __pfx_shmem_file_write_iter+0x10/0x10
[  245.911768][ T8307]  ? __kernel_write_iter+0x59f/0xa80
[  245.917121][ T8307]  get_dump_page+0xff/0x230
[  245.921698][ T8307]  ? __pfx_get_dump_page+0x10/0x10
[  245.926882][ T8307]  ? __pfx___might_resched+0x10/0x10
[  245.932228][ T8307]  ? __sanitizer_cov_trace_pc+0x18/0x70
[  245.937841][ T8307]  dump_user_range+0x135/0x8c0
[  245.942688][ T8307]  ? __pfx_dump_user_range+0x10/0x10
[  245.948050][ T8307]  ? elf_coredump_extra_notes_write+0xbe/0x430
[  245.954270][ T8307]  ? __pfx_writenote+0x10/0x10
[  245.959121][ T8307]  elf_core_dump+0x2787/0x3880
[  245.963960][ T8307]  ? __pfx_elf_core_dump+0x10/0x10
[  245.969134][ T8307]  ? __pfx___schedule+0x10/0x10
[  245.974108][ T8307]  ? rcu_is_watching+0x12/0xc0
[  245.978940][ T8307]  ? trace_lock_acquire+0x14e/0x1f0
[  245.984229][ T8307]  ? __pfx_sort+0x10/0x10
[  245.988622][ T8307]  ? get_signal+0x23f3/0x2610
[  245.993371][ T8307]  ? do_coredump+0x2dd5/0x43e0
[  245.998224][ T8307]  do_coredump+0x2dd5/0x43e0
[  246.002909][ T8307]  ? __pfx_do_coredump+0x10/0x10
[  246.007922][ T8307]  ? irqentry_exit_to_user_mode+0x13f/0x280
[  246.013957][ T8307]  get_signal+0x23f3/0x2610
[  246.018532][ T8307]  ? _raw_spin_unlock_irqrestore+0x3b/0x80
[  246.024408][ T8307]  ? __pfx_get_signal+0x10/0x10
[  246.029347][ T8307]  arch_do_signal_or_restart+0x90/0x7e0
[  246.034971][ T8307]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[  246.041199][ T8307]  ? exc_general_protection+0x1bc/0x230
[  246.046873][ T8307]  irqentry_exit_to_user_mode+0x13f/0x280
[  246.052661][ T8307]  asm_exc_general_protection+0x26/0x30
[  246.058277][ T8307] RIP: 0033:0x7f4b02985d31
[  246.062738][ T8307] Code: 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 <c3> 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f
[  246.082407][ T8307] RSP: 002b:0000000000000002 EFLAGS: 00010217
[  246.088539][ T8307] RAX: 0000000000000000 RBX: 00007f4b02b76160 RCX: 00007f4b02985d29
[  246.096557][ T8307] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000020003b46
[  246.104576][ T8307] RBP: 00007f4b02a01b08 R08: 0000000000000002 R09: 0000000000000000
[  246.112600][ T8307] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  246.120624][ T8307] R13: 0000000000000000 R14: 00007f4b02b76160 R15: 00007ffe7eee8118
[  246.128671][ T8307]  </TASK>
[  247.990122][ T8369] netlink: 4 bytes leftover after parsing attributes in process `syz.3.314'.
[  251.142749][ T8408] netlink: 32 bytes leftover after parsing attributes in process `syz.1.324'.
[  251.876540][ T8415] netlink: 40 bytes leftover after parsing attributes in process `syz.0.325'.
[  254.461513][ T8432] netlink: 4 bytes leftover after parsing attributes in process `syz.1.330'.
[  256.992906][   T29] audit: type=1326 audit(6030360299.703:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8453 comm="syz.0.337" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa954d85d29 code=0x0
[  257.179354][   T29] audit: type=1800 audit(6030360299.893:8): pid=8452 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.336" name="dbroot" dev="configfs" ino=25472 res=0 errno=0
[  257.706294][ T8464] netlink: 326 bytes leftover after parsing attributes in process `syz.0.338'.
[  258.468482][ T8473] FAULT_INJECTION: forcing a failure.
[  258.468482][ T8473] name fail_usercopy, interval 1, probability 0, space 0, times 1
[  258.517426][ T8473] CPU: 1 UID: 0 PID: 8473 Comm: syz.1.342 Not tainted 6.13.0-rc4-syzkaller-00071-gfd0584d220fe #0
[  258.528113][ T8473] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  258.538222][ T8473] Call Trace:
[  258.541541][ T8473]  <TASK>
[  258.544512][ T8473]  dump_stack_lvl+0x16c/0x1f0
[  258.549254][ T8473]  should_fail_ex+0x497/0x5b0
[  258.554002][ T8473]  _copy_from_user+0x2e/0xd0
[  258.558674][ T8473]  copy_msghdr_from_user+0x99/0x160
[  258.563944][ T8473]  ? __pfx_copy_msghdr_from_user+0x10/0x10
[  258.569814][ T8473]  ? __lock_acquire+0xcc5/0x3c40
[  258.574822][ T8473]  ___sys_sendmsg+0xff/0x1e0
[  258.579490][ T8473]  ? __pfx____sys_sendmsg+0x10/0x10
[  258.584769][ T8473]  ? trace_lock_acquire+0x14e/0x1f0
[  258.590054][ T8473]  __sys_sendmmsg+0x201/0x420
[  258.594808][ T8473]  ? __pfx___sys_sendmmsg+0x10/0x10
[  258.600088][ T8473]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  258.606147][ T8473]  ? fput+0x67/0x440
[  258.610115][ T8473]  ? ksys_write+0x1ba/0x250
[  258.614679][ T8473]  ? __pfx_ksys_write+0x10/0x10
[  258.619599][ T8473]  __x64_sys_sendmmsg+0x9c/0x100
[  258.624606][ T8473]  ? lockdep_hardirqs_on+0x7c/0x110
[  258.629865][ T8473]  do_syscall_64+0xcd/0x250
[  258.634434][ T8473]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  258.640393][ T8473] RIP: 0033:0x7f47d8585d29
[  258.644856][ T8473] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  258.664527][ T8473] RSP: 002b:00007f47d93de038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  258.673010][ T8473] RAX: ffffffffffffffda RBX: 00007f47d8775fa0 RCX: 00007f47d8585d29
[  258.681036][ T8473] RDX: 0000000000000003 RSI: 0000000020000080 RDI: 0000000000000003
[  258.689052][ T8473] RBP: 00007f47d93de090 R08: 0000000000000000 R09: 0000000000000000
[  258.697069][ T8473] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  258.705189][ T8473] R13: 0000000000000000 R14: 00007f47d8775fa0 R15: 00007ffc297e5c08
[  258.713239][ T8473]  </TASK>
[  259.193944][ T8480] netlink: 326 bytes leftover after parsing attributes in process `syz.1.344'.
[  260.247643][ T8492] netlink: 350 bytes leftover after parsing attributes in process `syz.0.348'.
[  260.487200][   T29] audit: type=1326 audit(6030360303.193:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8485 comm="syz.1.347" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f47d8585d29 code=0x0
[  261.212554][ T8502] mkiss: ax0: crc mode is auto.
[  261.237868][ T1297] ieee802154 phy0 wpan0: encryption failed: -22
[  261.244239][ T1297] ieee802154 phy1 wpan1: encryption failed: -22
[  262.714502][ T8510] syz.0.353 (8510) used obsolete PPPIOCDETACH ioctl
[  263.595755][ T5849] Bluetooth: hci2: ACL packet for unknown connection handle 0
[  263.946916][ T8522] FAULT_INJECTION: forcing a failure.
[  263.946916][ T8522] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  264.087375][ T8522] CPU: 0 UID: 0 PID: 8522 Comm: syz.1.356 Not tainted 6.13.0-rc4-syzkaller-00071-gfd0584d220fe #0
[  264.098054][ T8522] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  264.108150][ T8522] Call Trace:
[  264.111462][ T8522]  <TASK>
[  264.114428][ T8522]  dump_stack_lvl+0x16c/0x1f0
[  264.119167][ T8522]  should_fail_ex+0x497/0x5b0
[  264.123904][ T8522]  _copy_from_user+0x2e/0xd0
[  264.128561][ T8522]  copy_msghdr_from_user+0x99/0x160
[  264.133827][ T8522]  ? __pfx_copy_msghdr_from_user+0x10/0x10
[  264.139711][ T8522]  ___sys_sendmsg+0xff/0x1e0
[  264.144374][ T8522]  ? __pfx____sys_sendmsg+0x10/0x10
[  264.149650][ T8522]  ? __pfx_lock_release+0x10/0x10
[  264.154723][ T8522]  ? trace_lock_acquire+0x14e/0x1f0
[  264.160004][ T8522]  ? __fget_files+0x206/0x3a0
[  264.164752][ T8522]  __sys_sendmsg+0x16e/0x220
[  264.169415][ T8522]  ? __pfx___sys_sendmsg+0x10/0x10
[  264.174619][ T8522]  do_syscall_64+0xcd/0x250
[  264.179186][ T8522]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  264.185146][ T8522] RIP: 0033:0x7f47d8585d29
[  264.189609][ T8522] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  264.209277][ T8522] RSP: 002b:00007f47d93de038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  264.217744][ T8522] RAX: ffffffffffffffda RBX: 00007f47d8775fa0 RCX: 00007f47d8585d29
[  264.225770][ T8522] RDX: 0000000000044892 RSI: 00000000200011c0 RDI: 0000000000000003
[  264.233792][ T8522] RBP: 00007f47d93de090 R08: 0000000000000000 R09: 0000000000000000
[  264.241818][ T8522] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  264.249837][ T8522] R13: 0000000000000000 R14: 00007f47d8775fa0 R15: 00007ffc297e5c08
[  264.257877][ T8522]  </TASK>
[  265.322929][ T5849] Bluetooth: hci3: ACL packet for unknown connection handle 0
[  265.532717][ T8544] netlink: 146 bytes leftover after parsing attributes in process `syz.2.363'.
[  266.033897][   T29] audit: type=1800 audit(6030360308.743:10): pid=8556 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.362" name="dbroot" dev="configfs" ino=25586 res=0 errno=0
[  266.558033][ T8562] nbd: socks must be embedded in a SOCK_ITEM attr
[  266.579227][ T8562] block nbd0: shutting down sockets
[  266.786997][ T8546] rtc_cmos 00:00: Alarms can be up to one day in the future
[  268.270814][ T8586] netlink: 146 bytes leftover after parsing attributes in process `syz.3.375'.
[  268.560612][ T8589] mkiss: ax0: crc mode is auto.
[  269.031694][ T8596] FAULT_INJECTION: forcing a failure.
[  269.031694][ T8596] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  269.044995][ T8596] CPU: 1 UID: 0 PID: 8596 Comm: syz.3.380 Not tainted 6.13.0-rc4-syzkaller-00071-gfd0584d220fe #0
[  269.055651][ T8596] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  269.065763][ T8596] Call Trace:
[  269.069121][ T8596]  <TASK>
[  269.072095][ T8596]  dump_stack_lvl+0x16c/0x1f0
[  269.076877][ T8596]  should_fail_ex+0x497/0x5b0
[  269.081632][ T8596]  _copy_from_user+0x2e/0xd0
[  269.086289][ T8596]  move_addr_to_kernel+0x68/0x160
[  269.091393][ T8596]  __copy_msghdr+0x386/0x470
[  269.096050][ T8596]  copy_msghdr_from_user+0xc2/0x160
[  269.101316][ T8596]  ? __pfx_copy_msghdr_from_user+0x10/0x10
[  269.107196][ T8596]  ? __lock_acquire+0xcc5/0x3c40
[  269.112202][ T8596]  ___sys_sendmsg+0xff/0x1e0
[  269.116869][ T8596]  ? __pfx____sys_sendmsg+0x10/0x10
[  269.122173][ T8596]  ? trace_lock_acquire+0x14e/0x1f0
[  269.127481][ T8596]  __sys_sendmmsg+0x201/0x420
[  269.132229][ T8596]  ? __pfx___sys_sendmmsg+0x10/0x10
[  269.137513][ T8596]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  269.143574][ T8596]  ? fput+0x67/0x440
[  269.147533][ T8596]  ? ksys_write+0x1ba/0x250
[  269.152112][ T8596]  ? __pfx_ksys_write+0x10/0x10
[  269.157022][ T8596]  __x64_sys_sendmmsg+0x9c/0x100
[  269.162032][ T8596]  ? lockdep_hardirqs_on+0x7c/0x110
[  269.167305][ T8596]  do_syscall_64+0xcd/0x250
[  269.171878][ T8596]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  269.177831][ T8596] RIP: 0033:0x7f6b76f85d29
[  269.182299][ T8596] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  269.201975][ T8596] RSP: 002b:00007f6b77dba038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  269.210461][ T8596] RAX: ffffffffffffffda RBX: 00007f6b77175fa0 RCX: 00007f6b76f85d29
[  269.218483][ T8596] RDX: 0000000000000002 RSI: 00000000200001c0 RDI: 0000000000000004
[  269.226500][ T8596] RBP: 00007f6b77dba090 R08: 0000000000000000 R09: 0000000000000000
[  269.234523][ T8596] R10: 0000000000000100 R11: 0000000000000246 R12: 0000000000000001
[  269.242542][ T8596] R13: 0000000000000000 R14: 00007f6b77175fa0 R15: 00007fff58bc62f8
[  269.250582][ T8596]  </TASK>
[  269.274947][ T8595] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  269.406897][ T8601] dyndbg: bad flag-op , at start of 
[  269.427697][ T8599] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  269.447852][ T8601] dyndbg: flags parse failed
[  269.491496][ T8598] dyndbg: expected <4096 bytes into control
[  270.090627][ T8615] vivid-013: =================  START STATUS  =================
[  270.098540][ T8615] vivid-013: Generate PTS: true
[  270.103481][ T8615] vivid-013: Generate SCR: true
[  270.108724][ T8615] tpg source WxH: 640x360 (Y'CbCr)
[  270.114782][ T8615] tpg field: 1
[  270.118346][ T8615] tpg crop: 640x360@0x0
[  270.122649][ T8615] tpg compose: 640x360@0x0
[  270.127160][ T8615] tpg colorspace: 8
[  270.131094][ T8615] tpg transfer function: 0/0
[  270.135811][ T8615] tpg Y'CbCr encoding: 0/0
[  270.140670][ T8615] tpg quantization: 0/0
[  270.144877][ T8615] tpg RGB range: 0/2
[  270.149938][ T8615] vivid-013: ==================  END STATUS  ==================
[  271.559686][ T8637] mkiss: ax0: crc mode is auto.
[  272.973226][ T8681] vivid-013: =================  START STATUS  =================
[  272.989200][ T8681] vivid-013: Generate PTS: true
[  272.994331][ T8681] vivid-013: Generate SCR: true
[  273.007410][ T8681] tpg source WxH: 640x360 (Y'CbCr)
[  273.012689][ T8681] tpg field: 1
[  273.019186][ T8681] tpg crop: 640x360@0x0
[  273.023414][ T8681] tpg compose: 640x360@0x0
[  273.028123][ T8681] tpg colorspace: 8
[  273.031970][ T8681] tpg transfer function: 0/0
[  273.036603][ T8681] tpg Y'CbCr encoding: 0/0
[  273.108293][ T8681] tpg quantization: 0/0
[  273.112535][ T8681] tpg RGB range: 0/2
[  273.207337][ T8681] vivid-013: ==================  END STATUS  ==================
[  273.339483][ T8690] can0: slcan on pty48.
[  273.587704][ T8689] can0 (unregistered): slcan off pty48.
[  273.867528][ T8698] netlink: 28 bytes leftover after parsing attributes in process `syz.3.402'.
[  276.737610][ T8759] vivid-013: =================  START STATUS  =================
[  276.745340][ T8759] vivid-013: Generate PTS: true
[  276.754514][ T8759] vivid-013: Generate SCR: true
[  276.797543][ T8759] tpg source WxH: 640x360 (Y'CbCr)
[  276.802739][ T8759] tpg field: 1
[  276.806147][ T8759] tpg crop: 640x360@0x0
[  276.857418][ T8759] tpg compose: 640x360@0x0
[  276.879992][ T8759] tpg colorspace: 8
[  276.883872][ T8759] tpg transfer function: 0/0
[  276.917421][ T8759] tpg Y'CbCr encoding: 0/0
[  276.921932][ T8759] tpg quantization: 0/0
[  276.926123][ T8759] tpg RGB range: 0/2
[  276.997490][ T8759] vivid-013: ==================  END STATUS  ==================
[  280.048567][ T8811] bridge0: port 3(veth1_to_hsr) entered blocking state
[  280.077449][ T8811] bridge0: port 3(veth1_to_hsr) entered disabled state
[  280.095065][ T8811] veth1_to_hsr: entered allmulticast mode
[  280.106290][ T8811] veth1_to_hsr: entered promiscuous mode
[  280.128220][ T8811] bridge0: port 3(veth1_to_hsr) entered blocking state
[  280.135599][ T8811] bridge0: port 3(veth1_to_hsr) entered forwarding state
[  280.634895][ T8822] netlink: 'syz.3.430': attribute type 4 has an invalid length.
[  280.703932][ T8822] netlink: 314 bytes leftover after parsing attributes in process `syz.3.430'.
[  281.410004][ T8840] mkiss: ax0: crc mode is auto.
[  282.438938][ T8860] bridge0: port 3(veth1_to_hsr) entered blocking state
[  282.488623][ T8860] bridge0: port 3(veth1_to_hsr) entered disabled state
[  282.495781][ T8860] veth1_to_hsr: entered allmulticast mode
[  282.525775][ T8860] veth1_to_hsr: entered promiscuous mode
[  282.554425][ T8860] bridge0: port 3(veth1_to_hsr) entered blocking state
[  282.561503][ T8860] bridge0: port 3(veth1_to_hsr) entered forwarding state
[  282.961589][ T8869] mkiss: ax0: crc mode is auto.
[  284.016386][   T29] audit: type=1800 audit(6030360326.723:11): pid=8875 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.444" name="lu_gp_id" dev="configfs" ino=26397 res=0 errno=0
[  284.631837][ T8901] bridge0: port 3(veth1_to_hsr) entered blocking state
[  284.639210][ T8901] bridge0: port 3(veth1_to_hsr) entered disabled state
[  284.646289][ T8901] veth1_to_hsr: entered allmulticast mode
[  284.659277][ T8901] veth1_to_hsr: entered promiscuous mode
[  284.665461][ T8901] bridge0: port 3(veth1_to_hsr) entered blocking state
[  284.672483][ T8901] bridge0: port 3(veth1_to_hsr) entered forwarding state
[  285.253826][ T8910] netlink: 28 bytes leftover after parsing attributes in process `syz.3.457'.
[  285.292974][ T8917] mkiss: ax0: crc mode is auto.
[  286.082599][   T29] audit: type=1800 audit(6030360328.793:12): pid=8919 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.462" name="lu_gp_id" dev="configfs" ino=26449 res=0 errno=0
[  286.663059][ T8950] netlink: 'syz.1.472': attribute type 4 has an invalid length.
[  286.711818][ T8950] netlink: 314 bytes leftover after parsing attributes in process `syz.1.472'.
[  286.933890][ T8955] mkiss: ax0: crc mode is auto.
[  288.285291][   T29] audit: type=1800 audit(6030360330.993:13): pid=8973 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.477" name="lu_gp_id" dev="configfs" ino=26525 res=0 errno=0
[  290.159955][ T9020] openvswitch: netlink: Multiple metadata blocks provided
[  292.273033][   T54] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  292.285404][   T54] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  292.327996][   T54] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  292.425423][ T9045] Process accounting resumed
[  292.431153][ T9045] kstrtoul() returned -22 for lu_gp_id
[  292.440101][   T54] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  292.455155][   T54] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  292.473946][   T54] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  292.845474][ T9051] chnl_net:caif_netlink_parms(): no params data found
[  293.148219][ T9051] bridge0: port 1(bridge_slave_0) entered blocking state
[  293.176565][ T9051] bridge0: port 1(bridge_slave_0) entered disabled state
[  293.194607][ T9051] bridge_slave_0: entered allmulticast mode
[  293.213396][ T9051] bridge_slave_0: entered promiscuous mode
[  293.230756][ T9051] bridge0: port 2(bridge_slave_1) entered blocking state
[  293.243508][ T9051] bridge0: port 2(bridge_slave_1) entered disabled state
[  293.256393][ T9051] bridge_slave_1: entered allmulticast mode
[  293.272174][ T9051] bridge_slave_1: entered promiscuous mode
[  293.338195][ T9051] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  293.370531][ T9051] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  293.469280][ T9051] team0: Port device team_slave_0 added
[  293.498184][ T9051] team0: Port device team_slave_1 added
[  293.563504][ T9051] batman_adv: batadv0: Adding interface: batadv_slave_0
[  293.578009][ T9051] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  293.614723][ T9064] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  293.627830][ T9064] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  293.637612][ T9051] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  293.648566][ T9064] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  293.654701][ T9064] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  293.669604][ T9051] batman_adv: batadv0: Adding interface: batadv_slave_1
[  293.687471][ T9064] Bluetooth: hci3: Opcode 0x0406 failed: -4
[  293.697771][ T9051] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  293.725121][ T9064] Bluetooth: hci3: Opcode 0x0406 failed: -4
[  293.777444][ T9051] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  294.000835][ T9051] hsr_slave_0: entered promiscuous mode
[  294.047660][ T9051] hsr_slave_1: entered promiscuous mode
[  294.062425][ T9051] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  294.093243][ T9051] Cannot create hsr debugfs directory
[  294.569456][ T9051] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  294.609194][ T9051] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  294.640006][ T9051] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  294.681366][ T9051] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  294.942502][ T9051] 8021q: adding VLAN 0 to HW filter on device bond0
[  294.997736][ T9051] 8021q: adding VLAN 0 to HW filter on device team0
[  295.047595][ T5849] Bluetooth: hci2: command 0x0c1a tx timeout
[  295.088792][ T1151] bridge0: port 1(bridge_slave_0) entered blocking state
[  295.095969][ T1151] bridge0: port 1(bridge_slave_0) entered forwarding state
[  295.115685][ T1151] bridge0: port 2(bridge_slave_1) entered blocking state
[  295.122906][ T1151] bridge0: port 2(bridge_slave_1) entered forwarding state
[  295.419319][ T9051] 8021q: adding VLAN 0 to HW filter on device batadv0
[  295.677935][ T5849] Bluetooth: hci3: command 0x041b tx timeout
[  295.685202][   T54] Bluetooth: hci1: command 0x040f tx timeout
[  295.685219][ T5847] Bluetooth: hci0: command 0x0c1a tx timeout
[  295.960210][ T9051] veth0_vlan: entered promiscuous mode
[  296.005207][ T9051] veth1_vlan: entered promiscuous mode
[  296.106254][ T9051] veth0_macvtap: entered promiscuous mode
[  296.149903][ T9051] veth1_macvtap: entered promiscuous mode
[  296.200838][ T9051] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  296.250028][ T9051] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  296.286617][ T9051] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  296.301206][ T9051] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  296.321386][ T9051] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  296.347342][ T9051] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  296.367660][ T9051] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  296.397255][ T9051] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  296.431043][ T9051] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  296.442347][ T9051] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  296.454018][ T9051] batman_adv: batadv0: Interface activated: batadv_slave_0
[  296.493821][ T9051] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  296.532940][ T9051] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  296.577473][ T9051] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  296.609764][ T9051] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  296.625264][ T9051] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  296.651936][ T9051] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  296.685104][ T9051] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  296.717457][ T9051] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  296.749851][ T9051] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  296.791686][ T9051] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  296.837798][ T9051] batman_adv: batadv0: Interface activated: batadv_slave_1
[  296.900875][ T9051] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  296.918197][ T9051] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  296.937877][ T9051] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  296.957722][ T9051] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  297.074133][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  297.096548][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  297.126636][ T9129] ima: policy update failed
[  297.134685][   T29] audit: type=1802 audit(6030360339.843:14): pid=9129 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.0.522" res=0 errno=0
[  297.158709][   T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  297.174419][   T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  297.772630][ T5847] Bluetooth: hci3: command 0x041b tx timeout
[  298.749999][ T9170] netlink: 'syz.0.531': attribute type 1 has an invalid length.
[  298.828941][ T9179] FAULT_INJECTION: forcing a failure.
[  298.828941][ T9179] name failslab, interval 1, probability 0, space 0, times 0
[  298.857344][ T9179] CPU: 0 UID: 0 PID: 9179 Comm: syz.4.533 Not tainted 6.13.0-rc4-syzkaller-00071-gfd0584d220fe #0
[  298.868032][ T9179] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  298.878145][ T9179] Call Trace:
[  298.881470][ T9179]  <TASK>
[  298.884446][ T9179]  dump_stack_lvl+0x16c/0x1f0
[  298.889290][ T9179]  should_fail_ex+0x497/0x5b0
[  298.894101][ T9179]  ? find_held_lock+0x2d/0x110
[  298.898944][ T9179]  should_failslab+0xc2/0x120
[  298.903701][ T9179]  __kmalloc_cache_noprof+0x68/0x420
[  298.909098][ T9179]  ? __pfx_uhid_char_poll+0x10/0x10
[  298.914388][ T9179]  io_arm_poll_handler+0x3e7/0xc60
[  298.919596][ T9179]  ? __pfx_io_arm_poll_handler+0x10/0x10
[  298.925305][ T9179]  ? io_req_end_write+0x3f/0x310
[  298.930331][ T9179]  io_queue_async+0xaa/0x420
[  298.934993][ T9179]  io_submit_sqes+0x177a/0x25f0
[  298.939944][ T9179]  __do_sys_io_uring_enter+0xd43/0x1620
[  298.945598][ T9179]  ? __fget_files+0x206/0x3a0
[  298.950345][ T9179]  ? __pfx___do_sys_io_uring_enter+0x10/0x10
[  298.956409][ T9179]  ? fput+0x67/0x440
[  298.960386][ T9179]  ? ksys_write+0x1ba/0x250
[  298.964961][ T9179]  ? __pfx_ksys_write+0x10/0x10
[  298.969899][ T9179]  do_syscall_64+0xcd/0x250
[  298.974489][ T9179]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  298.980460][ T9179] RIP: 0033:0x7f16d6985d29
[  298.984929][ T9179] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  299.004601][ T9179] RSP: 002b:00007f16d67f9038 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa
[  299.013105][ T9179] RAX: ffffffffffffffda RBX: 00007f16d6b75fa0 RCX: 00007f16d6985d29
[  299.021137][ T9179] RDX: 000000000000cd00 RSI: 0000000000000001 RDI: 0000000000000005
[  299.029174][ T9179] RBP: 00007f16d67f9090 R08: 0000000000000000 R09: ffffffffffffffff
[  299.037201][ T9179] R10: 0000000000000007 R11: 0000000000000246 R12: 0000000000000001
[  299.045234][ T9179] R13: 0000000000000000 R14: 00007f16d6b75fa0 R15: 00007ffdc4269898
[  299.053300][ T9179]  </TASK>
[  299.758408][ T9203] openvswitch: netlink: Multiple metadata blocks provided
[  299.837475][ T5847] Bluetooth: hci3: command 0x041b tx timeout
[  300.652206][ T1151] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  300.790931][ T1151] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  300.996146][ T1151] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  301.084875][ T5849] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  301.105253][ T5849] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  301.125362][ T1151] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  301.135993][ T5849] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  301.148969][ T5849] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  301.157530][ T5849] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  301.166402][ T5849] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  301.864487][ T1151] veth1_to_hsr: left allmulticast mode
[  301.880872][ T1151] veth1_to_hsr: left promiscuous mode
[  301.905488][ T1151] bridge0: port 3(veth1_to_hsr) entered disabled state
[  301.917848][ T5849] Bluetooth: hci3: command 0x041b tx timeout
[  301.949554][ T1151] bridge_slave_1: left allmulticast mode
[  301.955291][ T1151] bridge_slave_1: left promiscuous mode
[  301.987495][ T1151] bridge0: port 2(bridge_slave_1) entered disabled state
[  302.028983][ T1151] bridge_slave_0: left allmulticast mode
[  302.034718][ T1151] bridge_slave_0: left promiscuous mode
[  302.051529][ T1151] bridge0: port 1(bridge_slave_0) entered disabled state
[  302.086086][ T9244] ima: policy update failed
[  302.094694][   T29] audit: type=1802 audit(6030360344.803:15): pid=9244 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.2.553" res=0 errno=0
[  302.913480][ T1151] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  302.926131][ T1151] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  302.939844][ T1151] bond0 (unregistering): Released all slaves
[  303.197981][ T5849] Bluetooth: hci1: command tx timeout
[  303.352805][ T9232] chnl_net:caif_netlink_parms(): no params data found
[  303.739992][ T9232] bridge0: port 1(bridge_slave_0) entered blocking state
[  303.755883][ T9232] bridge0: port 1(bridge_slave_0) entered disabled state
[  303.764965][ T9232] bridge_slave_0: entered allmulticast mode
[  303.792665][ T9232] bridge_slave_0: entered promiscuous mode
[  303.818755][ T1151] hsr_slave_0: left promiscuous mode
[  303.829922][ T1151] hsr_slave_1: left promiscuous mode
[  303.854525][ T1151] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  303.867984][ T1151] batman_adv: batadv0: Removing interface: batadv_slave_0
[  303.886372][ T1151] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  303.931561][ T1151] batman_adv: batadv0: Removing interface: batadv_slave_1
[  303.992614][ T1151] veth1_vlan: left promiscuous mode
[  303.998061][ T5849] Bluetooth: hci3: command 0x041b tx timeout
[  304.015995][ T1151] veth0_vlan: left promiscuous mode
[  304.098256][ T9292] Process accounting resumed
[  304.102978][ T9292] kstrtoul() returned -22 for lu_gp_id
[  305.134504][ T1151] team0 (unregistering): Port device team_slave_1 removed
[  305.184654][ T1151] team0 (unregistering): Port device team_slave_0 removed
[  305.278283][ T5849] Bluetooth: hci1: command tx timeout
[  305.523848][ T9318] Falling back ldisc for ttyS2.
[  305.805983][ T9232] bridge0: port 2(bridge_slave_1) entered blocking state
[  305.819308][ T9232] bridge0: port 2(bridge_slave_1) entered disabled state
[  305.859900][ T9232] bridge_slave_1: entered allmulticast mode
[  305.867536][ T9232] bridge_slave_1: entered promiscuous mode
[  306.078083][ T5849] Bluetooth: hci3: command 0x041b tx timeout
[  306.281499][ T9232] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  306.344826][ T9232] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  306.495056][ T9232] team0: Port device team_slave_0 added
[  306.609676][ T9232] team0: Port device team_slave_1 added
[  306.770951][ T9232] batman_adv: batadv0: Adding interface: batadv_slave_0
[  306.784866][ T9232] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  306.814822][ T9232] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  306.849751][ T9232] batman_adv: batadv0: Adding interface: batadv_slave_1
[  306.856888][ T9232] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  306.899296][ T9232] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  307.090495][ T9232] hsr_slave_0: entered promiscuous mode
[  307.107809][ T9232] hsr_slave_1: entered promiscuous mode
[  307.117706][ T9232] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  307.125334][ T9232] Cannot create hsr debugfs directory
[  307.357420][ T5849] Bluetooth: hci1: command tx timeout
[  307.791433][ T9232] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  307.817172][ T9232] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  307.843000][ T9232] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  307.852971][ T9369] openvswitch: netlink: IP tunnel dst address not specified
[  307.890747][ T9232] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  308.468159][ T9232] 8021q: adding VLAN 0 to HW filter on device bond0
[  308.556320][ T9232] 8021q: adding VLAN 0 to HW filter on device team0
[  308.636588][   T52] bridge0: port 1(bridge_slave_0) entered blocking state
[  308.643804][   T52] bridge0: port 1(bridge_slave_0) entered forwarding state
[  308.687295][   T52] bridge0: port 2(bridge_slave_1) entered blocking state
[  308.694543][   T52] bridge0: port 2(bridge_slave_1) entered forwarding state
[  308.706992][ T9394] kAFS: Invalid Command on /proc/fs/afs/cells file
[  309.100719][ T9405] FAULT_INJECTION: forcing a failure.
[  309.100719][ T9405] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  309.117775][ T9405] CPU: 1 UID: 0 PID: 9405 Comm: syz.2.583 Not tainted 6.13.0-rc4-syzkaller-00071-gfd0584d220fe #0
[  309.128462][ T9405] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  309.138570][ T9405] Call Trace:
[  309.141916][ T9405]  <TASK>
[  309.144889][ T9405]  dump_stack_lvl+0x16c/0x1f0
[  309.149631][ T9405]  should_fail_ex+0x497/0x5b0
[  309.154380][ T9405]  _copy_from_iter+0x29b/0x1400
[  309.159308][ T9405]  ? trace_lock_acquire+0x14e/0x1f0
[  309.164581][ T9405]  ? __alloc_skb+0x200/0x380
[  309.169242][ T9405]  ? __pfx__copy_from_iter+0x10/0x10
[  309.174596][ T9405]  ? __virt_addr_valid+0x1a4/0x590
[  309.179781][ T9405]  ? __virt_addr_valid+0x5e/0x590
[  309.184870][ T9405]  ? __phys_addr_symbol+0x30/0x80
[  309.189960][ T9405]  ? __check_object_size+0x488/0x710
[  309.195323][ T9405]  netlink_sendmsg+0x813/0xd70
[  309.200161][ T9405]  ? __pfx_netlink_sendmsg+0x10/0x10
[  309.205522][ T9405]  ____sys_sendmsg+0x9ae/0xb40
[  309.210342][ T9405]  ? copy_msghdr_from_user+0x10b/0x160
[  309.215869][ T9405]  ? __pfx_____sys_sendmsg+0x10/0x10
[  309.221232][ T9405]  ? get_pid_task+0xfc/0x250
[  309.225899][ T9405]  ___sys_sendmsg+0x135/0x1e0
[  309.230659][ T9405]  ? __pfx____sys_sendmsg+0x10/0x10
[  309.235966][ T9405]  ? __pfx_vfs_write+0x10/0x10
[  309.240799][ T9405]  ? do_sys_openat2+0xb1/0x1e0
[  309.245645][ T9405]  __sys_sendmsg+0x16e/0x220
[  309.247801][ T9232] 8021q: adding VLAN 0 to HW filter on device batadv0
[  309.250282][ T9405]  ? __pfx___sys_sendmsg+0x10/0x10
[  309.262266][ T9405]  do_syscall_64+0xcd/0x250
[  309.266837][ T9405]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  309.272795][ T9405] RIP: 0033:0x7f4b02985d29
[  309.277266][ T9405] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  309.296932][ T9405] RSP: 002b:00007f4b03801038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  309.305502][ T9405] RAX: ffffffffffffffda RBX: 00007f4b02b75fa0 RCX: 00007f4b02985d29
[  309.313533][ T9405] RDX: 0000000004000000 RSI: 0000000020000180 RDI: 0000000000000001
[  309.321561][ T9405] RBP: 00007f4b03801090 R08: 0000000000000000 R09: 0000000000000000
[  309.329588][ T9405] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  309.337615][ T9405] R13: 0000000000000000 R14: 00007f4b02b75fa0 R15: 00007ffe7eee8118
[  309.345666][ T9405]  </TASK>
[  309.468172][ T5849] Bluetooth: hci1: command tx timeout
[  309.472718][ T9412] netlink: 28 bytes leftover after parsing attributes in process `syz.4.584'.
[  309.814079][ T9425] netlink: 330 bytes leftover after parsing attributes in process `syz.0.592'.
[  309.837063][ T9425] �: renamed from team0 (while UP)
[  310.048796][ T9232] veth0_vlan: entered promiscuous mode
[  310.080518][ T9232] veth1_vlan: entered promiscuous mode
[  310.180486][ T9232] veth0_macvtap: entered promiscuous mode
[  310.200178][ T9232] veth1_macvtap: entered promiscuous mode
[  310.222866][ T9232] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  310.233500][ T9232] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  310.243574][ T9232] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  310.254454][ T9232] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  310.264831][ T9232] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  310.275399][ T9232] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  310.285358][ T9232] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  310.295923][ T9232] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  310.306035][ T9232] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  310.316618][ T9232] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  310.328040][ T9232] batman_adv: batadv0: Interface activated: batadv_slave_0
[  310.338932][ T9232] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  310.355263][ T9232] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  310.365295][ T9232] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  310.375881][ T9232] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  310.385889][ T9232] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  310.396538][ T9232] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  310.406669][ T9232] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  310.419125][ T9232] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  310.429114][ T9232] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  310.439698][ T9232] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  310.450768][ T9232] batman_adv: batadv0: Interface activated: batadv_slave_1
[  310.461782][ T9232] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  310.470708][ T9232] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  310.481362][ T9232] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  310.490773][ T9232] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  310.820807][ T3553] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  310.874927][ T3553] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  311.058419][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  311.066468][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  311.735475][ T9466] crash hp: kexec_trylock() failed, kdump image may be inaccurate

syzkaller
syzkaller login: [  312.013590][ T9469] mkiss: ax0: crc mode is auto.
[  313.905248][ T9439] kexec: Could not allocate control_code_buffer
[  315.014066][ T9540] kAFS: Invalid Command on /proc/fs/afs/cells file
[  317.598643][ T9608] Process accounting resumed
[  317.906915][ T9612] RDS: rds_bind could not find a transport for fe80::726d:6f72:2f70:6172, load rds_tcp or rds_rdma?
[  318.376602][ T9623] RDS: rds_bind could not find a transport for fe80::726d:6f72:2f70:6172, load rds_tcp or rds_rdma?
[  319.022181][ T9640] netlink: 28 bytes leftover after parsing attributes in process `syz.5.618'.
[  319.277481][ T9654] netlink: 28 bytes leftover after parsing attributes in process `syz.0.620'.
[  319.793638][ T9675] FAULT_INJECTION: forcing a failure.
[  319.793638][ T9675] name failslab, interval 1, probability 0, space 0, times 0
[  319.808076][ T9675] CPU: 0 UID: 0 PID: 9675 Comm: syz.5.622 Not tainted 6.13.0-rc4-syzkaller-00071-gfd0584d220fe #0
[  319.818749][ T9675] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  319.828876][ T9675] Call Trace:
[  319.832190][ T9675]  <TASK>
[  319.835418][ T9675]  dump_stack_lvl+0x16c/0x1f0
[  319.840149][ T9675]  should_fail_ex+0x497/0x5b0
[  319.844879][ T9675]  ? fs_reclaim_acquire+0xae/0x150
[  319.850034][ T9675]  should_failslab+0xc2/0x120
[  319.854754][ T9675]  __kmalloc_node_noprof+0xd1/0x520
[  319.859999][ T9675]  ? __kvmalloc_node_noprof+0xad/0x1a0
[  319.865519][ T9675]  __kvmalloc_node_noprof+0xad/0x1a0
[  319.870861][ T9675]  seq_read_iter+0x82a/0x12b0
[  319.875591][ T9675]  ? __mutex_trylock_common+0xea/0x250
[  319.881116][ T9675]  proc_reg_read_iter+0x21d/0x310
[  319.886192][ T9675]  vfs_read+0x87f/0xbe0
[  319.890404][ T9675]  ? __pfx_vfs_read+0x10/0x10
[  319.895148][ T9675]  ksys_read+0x12b/0x250
[  319.899427][ T9675]  ? __pfx_ksys_read+0x10/0x10
[  319.904234][ T9675]  do_syscall_64+0xcd/0x250
[  319.908808][ T9675]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  319.914740][ T9675] RIP: 0033:0x7fb383785d29
[  319.919191][ T9675] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  319.938863][ T9675] RSP: 002b:00007fb384663038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  319.947318][ T9675] RAX: ffffffffffffffda RBX: 00007fb383975fa0 RCX: 00007fb383785d29
[  319.955312][ T9675] RDX: 0000000000000053 RSI: 0000000020001fc0 RDI: 0000000000000003
[  319.963304][ T9675] RBP: 00007fb384663090 R08: 0000000000000000 R09: 0000000000000000
[  319.971299][ T9675] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  319.979301][ T9675] R13: 0000000000000000 R14: 00007fb383975fa0 R15: 00007ffcfaffd378
[  319.987325][ T9675]  </TASK>
[  321.359221][ T9705] netlink: 146 bytes leftover after parsing attributes in process `syz.2.630'.
[  322.512852][ T9741] sctp: [Deprecated]: syz.4.639 (pid 9741) Use of int in maxseg socket option.
[  322.512852][ T9741] Use struct sctp_assoc_value instead
[  322.650552][ T1297] ieee802154 phy0 wpan0: encryption failed: -22
[  322.657128][ T1297] ieee802154 phy1 wpan1: encryption failed: -22

syzkaller
syzkaller login: [  324.579503][ T9785] ecryptfs_miscdev_write: Acceptable packet size range is [6-531], but amount of data written is [4].
[  324.921994][ T9795] could not allocate digest TFM handle 
[  325.636497][ T9748] kexec: Could not allocate control_code_buffer
[  326.120889][ T9850] netlink: 4 bytes leftover after parsing attributes in process `syz.4.658'.
[  326.124963][ T9854] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  326.321296][ T9854] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  326.856384][ T9879] netlink: 8 bytes leftover after parsing attributes in process `syz.5.661'.
[  327.516058][ T9908] netlink: 28 bytes leftover after parsing attributes in process `syz.0.664'.
[  327.532326][ T9903] netlink: 28 bytes leftover after parsing attributes in process `syz.2.665'.
[  327.547360][   T29] audit: type=1800 audit(6030360370.223:16): pid=9915 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.667" name="dbroot" dev="configfs" ino=31888 res=0 errno=0
[  328.238024][   T29] audit: type=1326 audit(6030360370.953:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9943 comm="syz.5.673" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb383785d29 code=0x0
[  328.797615][ T9957] block nbd0: Unsupported socket: shutdown callout must be supported.
[  329.173603][ T9968] kAFS: Invalid Command on /proc/fs/afs/cells file
[  330.598172][T10001] ptrace attach of "./syz-executor exec"[7330] was attempted by "./syz-executor exec"[10001]
[  330.779710][T10005] netlink: 40 bytes leftover after parsing attributes in process `syz.5.689'.
[  330.996673][T10009] netlink: 4 bytes leftover after parsing attributes in process `syz.2.691'.
[  331.006140][T10009] openvswitch: netlink: ufid size 17 bytes exceeds the range (1, 16)
[  331.026673][T10009] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[  331.047501][ T9996] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  331.058206][ T9996] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  331.064522][ T9996] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  331.074683][ T9996] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  331.087735][ T9996] Bluetooth: hci1: Opcode 0x0406 failed: -4
[  331.137841][ T9996] Bluetooth: hci1: Opcode 0x0406 failed: -4
[  331.583671][T10019] netlink: 334 bytes leftover after parsing attributes in process `syz.0.693'.
[  331.636240][T10022] netlink: 326 bytes leftover after parsing attributes in process `syz.2.694'.
[  331.894728][T10031] FAULT_INJECTION: forcing a failure.
[  331.894728][T10031] name failslab, interval 1, probability 0, space 0, times 0
[  331.899155][T10030] kAFS: Invalid Command on /proc/fs/afs/cells file
[  331.947669][T10031] CPU: 1 UID: 0 PID: 10031 Comm: syz.2.696 Not tainted 6.13.0-rc4-syzkaller-00071-gfd0584d220fe #0
[  331.958441][T10031] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  331.968549][T10031] Call Trace:
[  331.971873][T10031]  <TASK>
[  331.974839][T10031]  dump_stack_lvl+0x16c/0x1f0
[  331.979687][T10031]  should_fail_ex+0x497/0x5b0
[  331.984430][T10031]  ? fs_reclaim_acquire+0xae/0x150
[  331.989608][T10031]  should_failslab+0xc2/0x120
[  331.994359][T10031]  kmem_cache_alloc_node_noprof+0x72/0x3b0
[  332.000235][T10031]  ? __alloc_skb+0x2b3/0x380
[  332.004886][T10031]  __alloc_skb+0x2b3/0x380
[  332.009363][T10031]  ? __pfx___alloc_skb+0x10/0x10
[  332.014372][T10031]  ? lock_acquire+0x2f/0xb0
[  332.019051][T10031]  netlink_alloc_large_skb+0x69/0x130
[  332.024484][T10031]  netlink_sendmsg+0x689/0xd70
[  332.029356][T10031]  ? __pfx_netlink_sendmsg+0x10/0x10
[  332.034704][T10031]  ____sys_sendmsg+0x9ae/0xb40
[  332.039525][T10031]  ? copy_msghdr_from_user+0x10b/0x160
[  332.045089][T10031]  ? __pfx_____sys_sendmsg+0x10/0x10
[  332.050436][T10031]  ? __lock_acquire+0xcc5/0x3c40
[  332.055444][T10031]  ___sys_sendmsg+0x135/0x1e0
[  332.060194][T10031]  ? __pfx____sys_sendmsg+0x10/0x10
[  332.065501][T10031]  ? trace_lock_acquire+0x14e/0x1f0
[  332.070807][T10031]  __sys_sendmmsg+0x201/0x420
[  332.075554][T10031]  ? __pfx___sys_sendmmsg+0x10/0x10
[  332.080833][T10031]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  332.086898][T10031]  ? fput+0x67/0x440
[  332.090861][T10031]  ? ksys_write+0x1ba/0x250
[  332.096115][T10031]  ? __pfx_ksys_write+0x10/0x10
[  332.101024][T10031]  __x64_sys_sendmmsg+0x9c/0x100
[  332.106096][T10031]  ? lockdep_hardirqs_on+0x7c/0x110
[  332.111357][T10031]  do_syscall_64+0xcd/0x250
[  332.115926][T10031]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  332.121883][T10031] RIP: 0033:0x7f4b02985d29
[  332.126345][T10031] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  332.146016][T10031] RSP: 002b:00007f4b03801038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  332.154496][T10031] RAX: ffffffffffffffda RBX: 00007f4b02b75fa0 RCX: 00007f4b02985d29
[  332.162531][T10031] RDX: 0000000000000003 RSI: 0000000020000080 RDI: 0000000000000003
[  332.170565][T10031] RBP: 00007f4b03801090 R08: 0000000000000000 R09: 0000000000000000
[  332.178586][T10031] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  332.186601][T10031] R13: 0000000000000000 R14: 00007f4b02b75fa0 R15: 00007ffe7eee8118
[  332.194641][T10031]  </TASK>
[  332.477487][ T5849] Bluetooth: hci2: command 0x0c1a tx timeout
[  332.509031][T10039] mkiss: ax0: crc mode is auto.
[  333.122462][ T5849] Bluetooth: hci1: command 0x0c1a tx timeout
[  333.128622][ T5847] Bluetooth: hci3: command 0x041b tx timeout
[  333.134687][ T5847] Bluetooth: hci0: command 0x0c1a tx timeout
[  333.159237][T10062] netlink: 40 bytes leftover after parsing attributes in process `syz.5.705'.
[  335.207266][ T5847] Bluetooth: hci1: command 0x0c1a tx timeout

syzkaller
syzkaller login: [  337.277358][ T5847] Bluetooth: hci1: command 0x0c1a tx timeout
[  338.180504][T10202] netlink: 'syz.2.728': attribute type 1 has an invalid length.
[  338.232414][T10202] nbd: error processing sock list
[  338.379267][ T5847] Bluetooth: hci3: ISO packet for unknown connection handle 0
[  338.418180][T10208] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  338.495123][T10208] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  338.729230][T10097] kexec: Could not allocate control_code_buffer
[  338.895507][T10212] kAFS: Invalid Command on /proc/fs/afs/cells file
[  339.222921][T10220] netlink: 74 bytes leftover after parsing attributes in process `syz.4.731'.
[  340.409036][T10262] netlink: 28 bytes leftover after parsing attributes in process `syz.2.738'.
[  341.126607][T10262] team0 (unregistering): Port device team_slave_0 removed
[  341.162931][T10262] team0 (unregistering): Port device team_slave_1 removed
[  341.367476][T10275] nbd: must specify an index to disconnect
[  341.566459][T10280] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  341.636846][T10280] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  342.024339][T10288] �: entered promiscuous mode
[  342.065991][T10289] netlink: 346 bytes leftover after parsing attributes in process `syz.4.746'.
[  342.771951][T10301] mkiss: ax0: crc mode is auto.
[  343.211455][T10312] netlink: 28 bytes leftover after parsing attributes in process `syz.2.753'.
[  343.259302][T10312] veth0_macvtap: left promiscuous mode
[  343.287528][T10312] macvtap0: entered allmulticast mode
[  344.576238][T10326] netlink: 40 bytes leftover after parsing attributes in process `syz.4.759'.
[  347.509850][T10371] mkiss: ax0: crc mode is auto.
[  350.591473][T10414] nvme_fabrics: missing parameter 'transport=%s'
[  350.607241][T10414] nvme_fabrics: missing parameter 'nqn=%s'
[  352.220546][T10440] mkiss: ax0: crc mode is auto.
[  353.599634][T10451] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  353.645176][T10451] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  355.035084][T10482] mkiss: ax0: crc mode is auto.
[  358.402719][T10522] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  358.496698][T10522] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  361.491668][T10576] mkiss: ax0: crc mode is auto.
[  362.515809][T10588] sp0: Synchronizing with TNC
[  365.351855][T10631] sp0: Synchronizing with TNC
[  365.552012][T10643] netlink: 4 bytes leftover after parsing attributes in process `syz.0.852'.
[  367.056913][T10657] capability: warning: `syz.4.856' uses 32-bit capabilities (legacy support in use)
[  368.743554][T10685] sp0: Synchronizing with TNC
[  368.810520][T10689] FAULT_INJECTION: forcing a failure.
[  368.810520][T10689] name failslab, interval 1, probability 0, space 0, times 0
[  368.848358][T10689] CPU: 0 UID: 0 PID: 10689 Comm: syz.5.864 Not tainted 6.13.0-rc4-syzkaller-00071-gfd0584d220fe #0
[  368.859177][T10689] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  368.869260][T10689] Call Trace:
[  368.872558][T10689]  <TASK>
[  368.875510][T10689]  dump_stack_lvl+0x16c/0x1f0
[  368.880231][T10689]  should_fail_ex+0x497/0x5b0
[  368.884952][T10689]  should_failslab+0xc2/0x120
[  368.889677][T10689]  kmem_cache_alloc_noprof+0x6e/0x3b0
[  368.895093][T10689]  ? skb_clone+0x190/0x3f0
[  368.899570][T10689]  skb_clone+0x190/0x3f0
[  368.903873][T10689]  netlink_deliver_tap+0xafd/0xca0
[  368.909037][T10689]  netlink_unicast+0x5e1/0x7f0
[  368.913851][T10689]  ? __pfx_netlink_unicast+0x10/0x10
[  368.919177][T10689]  ? __phys_addr_symbol+0x30/0x80
[  368.924247][T10689]  ? __check_object_size+0x488/0x710
[  368.929586][T10689]  netlink_sendmsg+0x8b8/0xd70
[  368.934392][T10689]  ? __pfx_netlink_sendmsg+0x10/0x10
[  368.939727][T10689]  ____sys_sendmsg+0x9ae/0xb40
[  368.944527][T10689]  ? copy_msghdr_from_user+0x10b/0x160
[  368.950044][T10689]  ? __pfx_____sys_sendmsg+0x10/0x10
[  368.955384][T10689]  ? get_pid_task+0xfc/0x250
[  368.960034][T10689]  ___sys_sendmsg+0x135/0x1e0
[  368.964852][T10689]  ? __pfx____sys_sendmsg+0x10/0x10
[  368.970128][T10689]  ? __pfx_vfs_write+0x10/0x10
[  368.974933][T10689]  ? do_sys_openat2+0xb1/0x1e0
[  368.979750][T10689]  __sys_sendmsg+0x16e/0x220
[  368.984382][T10689]  ? __pfx___sys_sendmsg+0x10/0x10
[  368.989557][T10689]  do_syscall_64+0xcd/0x250
[  368.994101][T10689]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  369.000039][T10689] RIP: 0033:0x7fb383785d29
[  369.004481][T10689] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  369.024123][T10689] RSP: 002b:00007fb384663038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  369.032588][T10689] RAX: ffffffffffffffda RBX: 00007fb383975fa0 RCX: 00007fb383785d29
[  369.040595][T10689] RDX: 0000000004000000 RSI: 0000000020000180 RDI: 0000000000000001
[  369.048603][T10689] RBP: 00007fb384663090 R08: 0000000000000000 R09: 0000000000000000
[  369.056618][T10689] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  369.064623][T10689] R13: 0000000000000000 R14: 00007fb383975fa0 R15: 00007ffcfaffd378
[  369.072648][T10689]  </TASK>
[  369.104143][T10689] netlink: 4 bytes leftover after parsing attributes in process `syz.5.864'.
[  370.039512][T10698] nbd0: detected capacity change from 0 to 68719476736
[  370.169347][ T5846] block nbd0: Send control failed (result -22)
[  370.176016][ T5846] block nbd0: Request send failed, requeueing
[  370.302984][ T5847] block nbd0: Receive control failed (result -32)
[  370.307929][   T40] block nbd0: Dead connection, failed to find a fallback
[  370.307994][   T40] block nbd0: shutting down sockets
[  370.308148][   T40] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  370.308303][   T40] Buffer I/O error on dev nbd0, logical block 0, async page read
[  370.308554][ T5846] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  370.308621][ T5846] Buffer I/O error on dev nbd0, logical block 0, async page read
[  370.308929][ T5846] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  370.308972][ T5846] Buffer I/O error on dev nbd0, logical block 0, async page read
[  370.309107][ T5846] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  370.309148][ T5846] Buffer I/O error on dev nbd0, logical block 0, async page read
[  370.309281][ T5846] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  370.309324][ T5846] Buffer I/O error on dev nbd0, logical block 0, async page read
[  370.309477][ T5846] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  370.309519][ T5846] Buffer I/O error on dev nbd0, logical block 0, async page read
[  370.309673][ T5846] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  370.309713][ T5846] Buffer I/O error on dev nbd0, logical block 0, async page read
[  370.309878][ T5846] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  370.309920][ T5846] Buffer I/O error on dev nbd0, logical block 0, async page read
[  370.310006][ T5846] ldm_validate_partition_table(): Disk read failed.
[  370.310107][ T5846] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  370.310150][ T5846] Buffer I/O error on dev nbd0, logical block 0, async page read
[  370.310283][ T5846] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  370.310325][ T5846] Buffer I/O error on dev nbd0, logical block 0, async page read
[  370.310629][ T5846] Dev nbd0: unable to read RDB block 0
[  370.312146][ T5846]  nbd0: unable to read partition table
[  370.326869][ T5846] ldm_validate_partition_table(): Disk read failed.
[  370.335911][ T5846] Dev nbd0: unable to read RDB block 0
[  370.336470][ T5846]  nbd0: unable to read partition table
[  371.698770][T10726] netlink: 28 bytes leftover after parsing attributes in process `syz.5.875'.
[  372.217991][T10732] netlink: 32 bytes leftover after parsing attributes in process `syz.2.877'.
[  372.844864][T10738] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  372.912670][T10738] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  375.040507][T10777] netlink: 28 bytes leftover after parsing attributes in process `syz.0.892'.
[  380.764368][T10844] netlink: 40 bytes leftover after parsing attributes in process `syz.0.909'.
[  382.854896][T10863] netlink: 342 bytes leftover after parsing attributes in process `syz.0.914'.
[  383.411820][T10867] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  383.618811][T10867] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  384.098897][ T1297] ieee802154 phy0 wpan0: encryption failed: -22
[  384.105359][ T1297] ieee802154 phy1 wpan1: encryption failed: -22
[  385.678302][T10893] sp0: Synchronizing with TNC
[  386.611064][T10901] netlink: 8 bytes leftover after parsing attributes in process `syz.0.923'.
[  386.655898][T10901] netlink: 28 bytes leftover after parsing attributes in process `syz.0.923'.
[  389.087518][T10922] can: request_module (can-proto-0) failed.
[  389.341364][T10922] kernel read not supported for file /#)-\&[} (pid: 10922 comm: syz.0.928)
[  389.357223][   T29] audit: type=1804 audit(8277292074.250:18): pid=10922 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.928" name="#)-\&[}" dev="mqueue" ino=34767 res=1 errno=0
[  389.638221][   T29] audit: type=1800 audit(8277292074.320:19): pid=10922 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.928" name="#)-\&[}" dev="mqueue" ino=34767 res=0 errno=0
[  389.658616][   T29] audit: type=1804 audit(8277292074.370:20): pid=10922 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.928" name="#)-\&[}" dev="mqueue" ino=34767 res=1 errno=0
[  389.679034][   T29] audit: type=1804 audit(8277292074.370:21): pid=10922 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.928" name="#)-\&[}" dev="mqueue" ino=34767 res=1 errno=0
[  390.095733][T10930] EXT4-fs error (device sda1): ext4_validate_inode_bitmap:104: comm syz-executor: Corrupt inode bitmap - block_group = 0, inode_bitmap = 137
[  390.167358][T10930] EXT4-fs error (device sda1): ext4_validate_inode_bitmap:104: comm syz-executor: Corrupt inode bitmap - block_group = 1, inode_bitmap = 138
[  390.222502][T10930] EXT4-fs error (device sda1): ext4_validate_block_bitmap:423: comm syz-executor: bg 0: bad block bitmap checksum
[  390.423766][T10938] EXT4-fs error (device sda1): ext4_validate_block_bitmap:423: comm syz-executor: bg 1: bad block bitmap checksum
[  390.578092][T10943] EXT4-fs error (device sda1): ext4_validate_block_bitmap:423: comm syz-executor: bg 2: bad block bitmap checksum
[  390.868036][T10948] EXT4-fs error (device sda1): ext4_validate_block_bitmap:423: comm syz-executor: bg 3: bad block bitmap checksum
[  392.065610][T10970] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  392.137372][T10970] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  392.282407][ T5849] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  392.293626][ T5849] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  392.302220][ T5849] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  392.311812][ T5849] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  392.321460][ T5849] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  392.329157][ T5849] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  393.412089][ T7386] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  393.845173][ T7386] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  394.355375][ T7386] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  394.407744][ T5847] Bluetooth: hci1: command tx timeout
[  394.451314][T10999] sp0: Synchronizing with TNC
[  394.468100][T10983] chnl_net:caif_netlink_parms(): no params data found
[  394.573327][T11003] program syz.2.940 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  395.360102][ T7386] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  395.857516][T10983] bridge0: port 1(bridge_slave_0) entered blocking state
[  395.897459][T10983] bridge0: port 1(bridge_slave_0) entered disabled state
[  395.918466][T10983] bridge_slave_0: entered allmulticast mode
[  395.927613][T11017] syz.0.943 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[  395.943654][T10983] bridge_slave_0: entered promiscuous mode
[  396.102053][T10983] bridge0: port 2(bridge_slave_1) entered blocking state
[  396.119894][T10983] bridge0: port 2(bridge_slave_1) entered disabled state
[  396.149563][T10983] bridge_slave_1: entered allmulticast mode
[  396.169689][T10983] bridge_slave_1: entered promiscuous mode
[  396.463736][T10983] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  396.477593][ T5847] Bluetooth: hci1: command tx timeout
[  396.602446][T10983] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  397.098134][ T7386] bridge_slave_1: left allmulticast mode
[  397.103856][ T7386] bridge_slave_1: left promiscuous mode
[  397.117907][ T7386] bridge0: port 2(bridge_slave_1) entered disabled state
[  397.298327][ T7386] bridge_slave_0: left allmulticast mode
[  397.304058][ T7386] bridge_slave_0: left promiscuous mode
[  397.327468][ T7386] bridge0: port 1(bridge_slave_0) entered disabled state
[  398.558055][ T5847] Bluetooth: hci1: command tx timeout
[  399.477998][ T7386] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  399.587986][ T7386] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  399.628375][ T7386] bond0 (unregistering): Released all slaves
[  399.894650][T10983] team0: Port device team_slave_0 added
[  400.479926][T10983] team0: Port device team_slave_1 added
[  400.647358][ T5847] Bluetooth: hci1: command tx timeout
[  401.435142][T10983] batman_adv: batadv0: Adding interface: batadv_slave_0
[  401.443222][T10983] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  401.514901][T10983] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  401.549533][T10983] batman_adv: batadv0: Adding interface: batadv_slave_1
[  401.556535][T10983] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  401.627336][T10983] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  402.167404][ T7386] hsr_slave_0: left promiscuous mode
[  402.285764][ T7386] hsr_slave_1: left promiscuous mode
[  402.339622][ T7386] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  402.351371][ T7386] batman_adv: batadv0: Removing interface: batadv_slave_0
[  402.425870][ T7386] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  402.433422][ T7386] batman_adv: batadv0: Removing interface: batadv_slave_1
[  402.478739][ T7386] veth1_macvtap: left promiscuous mode
[  402.484342][ T7386] veth0_macvtap: left promiscuous mode
[  402.502211][ T7386] veth1_vlan: left promiscuous mode
[  402.515778][ T7386] veth0_vlan: left promiscuous mode
[  403.613366][T11088] netlink: 28 bytes leftover after parsing attributes in process `syz.2.955'.
[  404.312238][ T7386] team0 (unregistering): Port device team_slave_1 removed
[  404.404612][ T7386] team0 (unregistering): Port device team_slave_0 removed
[  405.610278][T10983] hsr_slave_0: entered promiscuous mode
[  405.644585][T10983] hsr_slave_1: entered promiscuous mode
[  405.659364][T10983] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  405.667001][T10983] Cannot create hsr debugfs directory
[  406.709752][T10983] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  406.788641][T10983] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  406.822517][T10983] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  406.849383][T10983] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  407.401989][T10983] 8021q: adding VLAN 0 to HW filter on device bond0
[  407.420296][T10983] 8021q: adding VLAN 0 to HW filter on device team0
[  407.461861][T10983] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  407.472454][T10983] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  407.501780][ T9811] bridge0: port 1(bridge_slave_0) entered blocking state
[  407.509016][ T9811] bridge0: port 1(bridge_slave_0) entered forwarding state
[  407.519434][ T9811] bridge0: port 2(bridge_slave_1) entered blocking state
[  407.526593][ T9811] bridge0: port 2(bridge_slave_1) entered forwarding state
[  408.064466][T10983] 8021q: adding VLAN 0 to HW filter on device batadv0
[  408.552776][T11167] FAULT_INJECTION: forcing a failure.
[  408.552776][T11167] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  408.607872][T11167] CPU: 0 UID: 0 PID: 11167 Comm: syz.2.968 Not tainted 6.13.0-rc4-syzkaller-00071-gfd0584d220fe #0
[  408.618650][T11167] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  408.628756][T11167] Call Trace:
[  408.632078][T11167]  <TASK>
[  408.635051][T11167]  dump_stack_lvl+0x16c/0x1f0
[  408.639796][T11167]  should_fail_ex+0x497/0x5b0
[  408.644542][T11167]  _copy_from_user+0x2e/0xd0
[  408.649202][T11167]  generic_map_delete_batch+0x43e/0x6f0
[  408.654807][T11167]  ? lock_acquire+0x2f/0xb0
[  408.659369][T11167]  ? __pfx_generic_map_delete_batch+0x10/0x10
[  408.665486][T11167]  ? __fget_files+0x206/0x3a0
[  408.670229][T11167]  ? __pfx_generic_map_delete_batch+0x10/0x10
[  408.676354][T11167]  bpf_map_do_batch+0x294/0x640
[  408.681280][T11167]  __sys_bpf+0x5fe/0x57a0
[  408.685663][T11167]  ? __pfx_lock_release+0x10/0x10
[  408.690743][T11167]  ? __pfx___sys_bpf+0x10/0x10
[  408.697477][T11167]  ? vfs_write+0x306/0x1150
[  408.697530][T11167]  ? __mutex_unlock_slowpath+0x164/0x690
[  408.697599][T11167]  ? fput+0x67/0x440
[  408.697647][T11167]  ? ksys_write+0x1ba/0x250
[  408.697686][T11167]  ? __pfx_ksys_write+0x10/0x10
[  408.697729][T11167]  __x64_sys_bpf+0x78/0xc0
[  408.697765][T11167]  ? lockdep_hardirqs_on+0x7c/0x110
[  408.697805][T11167]  do_syscall_64+0xcd/0x250
[  408.697852][T11167]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  408.697897][T11167] RIP: 0033:0x7f4b02985d29
[  408.697926][T11167] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  408.697962][T11167] RSP: 002b:00007f4b03801038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  408.697997][T11167] RAX: ffffffffffffffda RBX: 00007f4b02b75fa0 RCX: 00007f4b02985d29
[  408.698032][T11167] RDX: 0000000000000092 RSI: 0000000020000380 RDI: 000000000000001b
[  408.698055][T11167] RBP: 00007f4b03801090 R08: 0000000000000000 R09: 0000000000000000
[  408.698077][T11167] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  408.698100][T11167] R13: 0000000000000000 R14: 00007f4b02b75fa0 R15: 00007ffe7eee8118
[  408.698143][T11167]  </TASK>
[  409.068334][T10983] veth0_vlan: entered promiscuous mode
[  409.080211][T11150] tty tty12: ldisc open failed (-12), clearing slot 11
[  409.086288][T10983] veth1_vlan: entered promiscuous mode
[  409.164071][T10983] veth0_macvtap: entered promiscuous mode
[  409.195359][T10983] veth1_macvtap: entered promiscuous mode
[  409.263569][T10983] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  409.292021][T10983] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  409.302241][T10983] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  409.312804][T10983] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  409.322884][T10983] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  409.333420][T10983] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  409.343293][T10983] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  409.353808][T10983] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  409.364148][T10983] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  409.375033][T10983] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  409.386676][T10983] batman_adv: batadv0: Interface activated: batadv_slave_0
[  409.438218][T10983] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  409.458131][T10983] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  409.486048][T10983] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  409.511638][T10983] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  409.523608][T10983] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  409.534274][T10983] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  409.544402][T10983] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  409.555043][T10983] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  409.576612][T10983] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  409.590621][T10983] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  409.608420][T10983] batman_adv: batadv0: Interface activated: batadv_slave_1
[  409.648936][T11194] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  409.653172][T10983] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  409.667649][T11194] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  409.683673][T10983] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  409.704006][T10983] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  409.721617][T10983] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  410.011544][ T9820] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  410.032452][ T9820] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  410.205361][ T9811] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  410.258160][ T9811] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  411.095185][T11227] netlink: 4 bytes leftover after parsing attributes in process `syz.6.932'.
[  412.257135][T11254] netlink: 28 bytes leftover after parsing attributes in process `syz.6.979'.
[  412.267129][T11256] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  412.330749][T11254] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  412.356994][T11254] batman_adv: batadv0: Removing interface: batadv_slave_0
[  412.394234][T11254] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  412.431651][T11254] batman_adv: batadv0: Removing interface: batadv_slave_1
[  412.466004][T11222] netlink: 28 bytes leftover after parsing attributes in process `syz.2.975'.
[  412.735708][T11222] macsec0: entered allmulticast mode
[  412.828287][T11222] veth1_macvtap: entered allmulticast mode
[  413.048829][T11279] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  413.272462][T11284] netlink: 28 bytes leftover after parsing attributes in process `syz.4.984'.
[  413.695351][T11290] Process accounting resumed
[  414.097004][T11284] team0 (unregistering): Port device team_slave_0 removed
[  414.162456][T11284] team0 (unregistering): Port device team_slave_1 removed
[  414.550519][T11297] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  414.597623][T11297] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  415.560349][T11317] netlink: 36 bytes leftover after parsing attributes in process `syz.2.989'.
[  415.569710][T11317] nbd: must specify at least one socket
[  416.283174][T11338] netlink: 4 bytes leftover after parsing attributes in process `syz.2.994'.
[  417.211825][T11357] netlink: 36 bytes leftover after parsing attributes in process `syz.2.998'.
[  417.613001][T11373] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1000'.
[  417.794291][T11377] netlink: 'syz.0.1001': attribute type 1 has an invalid length.
[  418.606733][T11388] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  418.706452][T11388] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  420.541747][T11423] netlink: 'syz.6.1012': attribute type 33 has an invalid length.
[  420.551355][T11423] netlink: 322 bytes leftover after parsing attributes in process `syz.6.1012'.
[  420.563890][T11423] netlink: 'syz.6.1012': attribute type 33 has an invalid length.
[  420.572530][T11423] netlink: 322 bytes leftover after parsing attributes in process `syz.6.1012'.
[  420.940555][T11434] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u8:3: corrupted in-inode xattr: bad magic number in in-inode xattr
[  421.042589][T11432] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  421.077418][T11432] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  422.013289][T11454] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u8:8: corrupted in-inode xattr: bad magic number in in-inode xattr
[  422.746504][T11461] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1022'.
[  424.975151][T11505] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u8:3: corrupted in-inode xattr: bad magic number in in-inode xattr
[  425.027646][T11507] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u8:9: corrupted in-inode xattr: bad magic number in in-inode xattr
[  425.062936][T11508] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u8:3: corrupted in-inode xattr: bad magic number in in-inode xattr
[  425.402696][T11511] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  425.432894][T11511] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  426.057202][T11525] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u8:16: corrupted in-inode xattr: bad magic number in in-inode xattr
[  426.636332][T11539] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u8:9: corrupted in-inode xattr: bad magic number in in-inode xattr
[  426.766980][T11541] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u8:8: corrupted in-inode xattr: bad magic number in in-inode xattr
[  427.005793][T11545] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u8:9: corrupted in-inode xattr: bad magic number in in-inode xattr
[  428.437222][T11575] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  428.471103][T11575] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  429.646138][T11598] 
[  429.648541][T11598] ======================================================
[  429.655589][T11598] WARNING: possible circular locking dependency detected
[  429.662632][T11598] 6.13.0-rc4-syzkaller-00071-gfd0584d220fe #0 Not tainted
[  429.669769][T11598] ------------------------------------------------------
[  429.676811][T11598] syz.2.1049/11598 is trying to acquire lock:
[  429.682899][T11598] ffff888148cc59c0 (mapping.invalidate_lock#2){.+.+}-{4:4}, at: page_cache_ra_unbounded+0x173/0x750
[  429.693786][T11598] 
[  429.693786][T11598] but task is already holding lock:
[  429.701168][T11598] ffff888029f5a8e0 (&mm->mmap_lock){++++}-{4:4}, at: faultin_page_range+0x348/0x980
[  429.710641][T11598] 
[  429.710641][T11598] which lock already depends on the new lock.
[  429.710641][T11598] 
[  429.721073][T11598] 
[  429.721073][T11598] the existing dependency chain (in reverse order) is:
[  429.730114][T11598] 
[  429.730114][T11598] -> #5 (&mm->mmap_lock){++++}-{4:4}:
[  429.737740][T11598]        __might_fault+0x11b/0x190
[  429.742907][T11598]        _copy_from_user+0x29/0xd0
[  429.748067][T11598]        __blk_trace_setup+0xa8/0x180
[  429.753491][T11598]        blk_trace_setup+0x47/0x70
[  429.758662][T11598]        sg_ioctl+0x7a3/0x26b0
[  429.763480][T11598]        __x64_sys_ioctl+0x190/0x200
[  429.768812][T11598]        do_syscall_64+0xcd/0x250
[  429.773905][T11598]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  429.780378][T11598] 
[  429.780378][T11598] -> #4 (&q->debugfs_mutex){+.+.}-{4:4}:
[  429.788265][T11598]        __mutex_lock+0x19b/0xa60
[  429.793341][T11598]        blk_mq_init_sched+0x42b/0x640
[  429.798863][T11598]        elevator_init_mq+0x2cd/0x420
[  429.804303][T11598]        add_disk_fwnode+0x113/0x1300
[  429.809750][T11598]        sd_probe+0xa66/0xfa0
[  429.814489][T11598]        really_probe+0x23e/0xa90
[  429.819569][T11598]        __driver_probe_device+0x1de/0x440
[  429.825441][T11598]        driver_probe_device+0x4c/0x1b0
[  429.831046][T11598]        __device_attach_driver+0x1df/0x310
[  429.836995][T11598]        bus_for_each_drv+0x157/0x1e0
[  429.842417][T11598]        __device_attach_async_helper+0x1d3/0x290
[  429.848896][T11598]        async_run_entry_fn+0x9c/0x530
[  429.854406][T11598]        process_one_work+0x958/0x1b30
[  429.859904][T11598]        worker_thread+0x6c8/0xf00
[  429.865058][T11598]        kthread+0x2c1/0x3a0
[  429.869722][T11598]        ret_from_fork+0x45/0x80
[  429.874709][T11598]        ret_from_fork_asm+0x1a/0x30
[  429.880063][T11598] 
[  429.880063][T11598] -> #3 (&q->q_usage_counter(queue)#50){++++}-{0:0}:
[  429.889092][T11598]        blk_queue_enter+0x50f/0x640
[  429.894447][T11598]        blk_mq_alloc_request+0x59b/0x950
[  429.900228][T11598]        scsi_execute_cmd+0x1f1/0xff0
[  429.905646][T11598]        read_capacity_16+0x21a/0xe20
[  429.911104][T11598]        sd_revalidate_disk.isra.0+0x1a06/0xa8d0
[  429.917503][T11598]        sd_probe+0x8ee/0xfa0
[  429.922234][T11598]        really_probe+0x23e/0xa90
[  429.927303][T11598]        __driver_probe_device+0x1de/0x440
[  429.933152][T11598]        driver_probe_device+0x4c/0x1b0
[  429.938762][T11598]        __device_attach_driver+0x1df/0x310
[  429.944690][T11598]        bus_for_each_drv+0x157/0x1e0
[  429.950095][T11598]        __device_attach_async_helper+0x1d3/0x290
[  429.956548][T11598]        async_run_entry_fn+0x9c/0x530
[  429.962040][T11598]        process_one_work+0x958/0x1b30
[  429.967523][T11598]        worker_thread+0x6c8/0xf00
[  429.972654][T11598]        kthread+0x2c1/0x3a0
[  429.977272][T11598]        ret_from_fork+0x45/0x80
[  429.982230][T11598]        ret_from_fork_asm+0x1a/0x30
[  429.987547][T11598] 
[  429.987547][T11598] -> #2 (&q->limits_lock){+.+.}-{4:4}:
[  429.995228][T11598]        __mutex_lock+0x19b/0xa60
[  430.000284][T11598]        __nbd_set_size+0x2c0/0x730
[  430.005502][T11598]        nbd_start_device+0x8fd/0xd70
[  430.010908][T11598]        nbd_genl_connect+0x1204/0x1c00
[  430.016498][T11598]        genl_family_rcv_msg_doit+0x202/0x2f0
[  430.022609][T11598]        genl_rcv_msg+0x565/0x800
[  430.027665][T11598]        netlink_rcv_skb+0x165/0x410
[  430.032990][T11598]        genl_rcv+0x28/0x40
[  430.037530][T11598]        netlink_unicast+0x53c/0x7f0
[  430.042857][T11598]        netlink_sendmsg+0x8b8/0xd70
[  430.048180][T11598]        ____sys_sendmsg+0x9ae/0xb40
[  430.053499][T11598]        ___sys_sendmsg+0x135/0x1e0
[  430.058737][T11598]        __sys_sendmsg+0x16e/0x220
[  430.063918][T11598]        do_syscall_64+0xcd/0x250
[  430.068978][T11598]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  430.075425][T11598] 
[  430.075425][T11598] -> #1 (&q->q_usage_counter(io)#49){++++}-{0:0}:
[  430.084066][T11598]        blk_mq_submit_bio+0x1fb6/0x24c0
[  430.089739][T11598]        __submit_bio+0x384/0x540
[  430.094801][T11598]        submit_bio_noacct_nocheck+0x698/0xd70
[  430.101043][T11598]        submit_bio_noacct+0x93a/0x1e20
[  430.106624][T11598]        mpage_readahead+0x41d/0x590
[  430.111941][T11598]        read_pages+0x1a8/0xdc0
[  430.116814][T11598]        page_cache_ra_unbounded+0x3dc/0x750
[  430.122822][T11598]        force_page_cache_ra+0x24b/0x340
[  430.128488][T11598]        page_cache_sync_ra+0x110/0x9c0
[  430.134059][T11598]        filemap_get_pages+0xd7b/0x1be0
[  430.139635][T11598]        filemap_read+0x3ca/0xd70
[  430.144684][T11598]        blkdev_read_iter+0x187/0x480
[  430.150075][T11598]        vfs_read+0x87f/0xbe0
[  430.154777][T11598]        ksys_read+0x12b/0x250
[  430.159568][T11598]        do_syscall_64+0xcd/0x250
[  430.164623][T11598]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  430.171075][T11598] 
[  430.171075][T11598] -> #0 (mapping.invalidate_lock#2){.+.+}-{4:4}:
[  430.179633][T11598]        __lock_acquire+0x249e/0x3c40
[  430.185024][T11598]        lock_acquire.part.0+0x11b/0x380
[  430.190679][T11598]        down_read+0x9a/0x330
[  430.195387][T11598]        page_cache_ra_unbounded+0x173/0x750
[  430.201400][T11598]        page_cache_ra_order+0x8f2/0xc80
[  430.207064][T11598]        filemap_fault+0x14a5/0x2820
[  430.212389][T11598]        __do_fault+0x10a/0x490
[  430.217260][T11598]        do_pte_missing+0x1a8/0x3e00
[  430.222580][T11598]        __handle_mm_fault+0x103c/0x2a40
[  430.228245][T11598]        handle_mm_fault+0x3fa/0xaa0
[  430.233558][T11598]        __get_user_pages+0x8d9/0x3b50
[  430.239047][T11598]        faultin_page_range+0x3a8/0x980
[  430.244627][T11598]        do_madvise+0x504/0x770
[  430.249528][T11598]        __x64_sys_madvise+0xa9/0x110
[  430.254916][T11598]        do_syscall_64+0xcd/0x250
[  430.259967][T11598]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  430.266411][T11598] 
[  430.266411][T11598] other info that might help us debug this:
[  430.266411][T11598] 
[  430.276834][T11598] Chain exists of:
[  430.276834][T11598]   mapping.invalidate_lock#2 --> &q->debugfs_mutex --> &mm->mmap_lock
[  430.276834][T11598] 
[  430.290876][T11598]  Possible unsafe locking scenario:
[  430.290876][T11598] 
[  430.298335][T11598]        CPU0                    CPU1
[  430.303707][T11598]        ----                    ----
[  430.309078][T11598]   rlock(&mm->mmap_lock);
[  430.313513][T11598]                                lock(&q->debugfs_mutex);
[  430.320640][T11598]                                lock(&mm->mmap_lock);
[  430.327508][T11598]   rlock(mapping.invalidate_lock#2);
[  430.332913][T11598] 
[  430.332913][T11598]  *** DEADLOCK ***
[  430.332913][T11598] 
[  430.341149][T11598] 1 lock held by syz.2.1049/11598:
[  430.346271][T11598]  #0: ffff888029f5a8e0 (&mm->mmap_lock){++++}-{4:4}, at: faultin_page_range+0x348/0x980
[  430.356165][T11598] 
[  430.356165][T11598] stack backtrace:
[  430.362062][T11598] CPU: 0 UID: 0 PID: 11598 Comm: syz.2.1049 Not tainted 6.13.0-rc4-syzkaller-00071-gfd0584d220fe #0
[  430.372848][T11598] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  430.382920][T11598] Call Trace:
[  430.386239][T11598]  <TASK>
[  430.389184][T11598]  dump_stack_lvl+0x116/0x1f0
[  430.393895][T11598]  print_circular_bug+0x41c/0x610
[  430.398975][T11598]  check_noncircular+0x31a/0x400
[  430.403950][T11598]  ? __pfx_check_noncircular+0x10/0x10
[  430.409531][T11598]  ? mark_lock+0xb5/0xc60
[  430.413907][T11598]  ? lockdep_lock+0xc6/0x200
[  430.418527][T11598]  ? __pfx_lockdep_lock+0x10/0x10
[  430.423583][T11598]  __lock_acquire+0x249e/0x3c40
[  430.428458][T11598]  ? __pfx___lock_acquire+0x10/0x10
[  430.433681][T11598]  ? __pfx_mark_lock+0x10/0x10
[  430.438484][T11598]  lock_acquire.part.0+0x11b/0x380
[  430.443624][T11598]  ? page_cache_ra_unbounded+0x173/0x750
[  430.449284][T11598]  ? __pfx_lock_acquire.part.0+0x10/0x10
[  430.454940][T11598]  ? rcu_is_watching+0x12/0xc0
[  430.459736][T11598]  ? trace_lock_acquire+0x14e/0x1f0
[  430.464970][T11598]  ? page_cache_ra_unbounded+0x173/0x750
[  430.470631][T11598]  ? lock_acquire+0x2f/0xb0
[  430.475155][T11598]  ? page_cache_ra_unbounded+0x173/0x750
[  430.480824][T11598]  down_read+0x9a/0x330
[  430.485012][T11598]  ? page_cache_ra_unbounded+0x173/0x750
[  430.490675][T11598]  ? __pfx_down_read+0x10/0x10
[  430.495471][T11598]  ? hlock_class+0x4e/0x130
[  430.500004][T11598]  ? mark_lock+0xb5/0xc60
[  430.504372][T11598]  ? __pfx___lock_acquire+0x10/0x10
[  430.509590][T11598]  ? xas_load+0x49/0x5b0
[  430.513880][T11598]  page_cache_ra_unbounded+0x173/0x750
[  430.519368][T11598]  ? find_held_lock+0x2d/0x110
[  430.524167][T11598]  page_cache_ra_order+0x8f2/0xc80
[  430.529309][T11598]  filemap_fault+0x14a5/0x2820
[  430.534111][T11598]  ? __pfx_filemap_fault+0x10/0x10
[  430.539259][T11598]  ? __pfx_lock_acquire.part.0+0x10/0x10
[  430.544912][T11598]  ? rcu_is_watching+0x12/0xc0
[  430.549710][T11598]  ? __pfx_filemap_map_pages+0x10/0x10
[  430.555197][T11598]  __do_fault+0x10a/0x490
[  430.559550][T11598]  ? __pfx_filemap_map_pages+0x10/0x10
[  430.565037][T11598]  do_pte_missing+0x1a8/0x3e00
[  430.569865][T11598]  __handle_mm_fault+0x103c/0x2a40
[  430.575017][T11598]  ? find_held_lock+0x2d/0x110
[  430.579818][T11598]  ? __pfx___handle_mm_fault+0x10/0x10
[  430.585310][T11598]  ? follow_page_pte+0x3c3/0x1b20
[  430.590366][T11598]  ? __pfx_lock_release+0x10/0x10
[  430.595415][T11598]  ? follow_page_pte+0x3f7/0x1b20
[  430.600474][T11598]  handle_mm_fault+0x3fa/0xaa0
[  430.605273][T11598]  __get_user_pages+0x8d9/0x3b50
[  430.610248][T11598]  ? __pfx___get_user_pages+0x10/0x10
[  430.615648][T11598]  ? down_read_killable+0xcc/0x380
[  430.620799][T11598]  ? __pfx_down_read_killable+0x10/0x10
[  430.626375][T11598]  ? lock_acquire+0x2f/0xb0
[  430.630908][T11598]  faultin_page_range+0x3a8/0x980
[  430.635969][T11598]  do_madvise+0x504/0x770
[  430.640342][T11598]  ? __pfx_do_madvise+0x10/0x10
[  430.645234][T11598]  ? __x64_sys_futex+0x1e1/0x4c0
[  430.650213][T11598]  ? rcu_is_watching+0x12/0xc0
[  430.655009][T11598]  __x64_sys_madvise+0xa9/0x110
[  430.659879][T11598]  ? lockdep_hardirqs_on+0x7c/0x110
[  430.665106][T11598]  do_syscall_64+0xcd/0x250
[  430.669658][T11598]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  430.675585][T11598] RIP: 0033:0x7f4b02985d29
[  430.680020][T11598] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  430.699654][T11598] RSP: 002b:00007f4b03801038 EFLAGS: 00000246 ORIG_RAX: 000000000000001c
[  430.708093][T11598] RAX: ffffffffffffffda RBX: 00007f4b02b75fa0 RCX: 00007f4b02985d29
[  430.716081][T11598] RDX: 0000000000000017 RSI: ffffffffffff0005 RDI: 0000000000000000
[  430.724088][T11598] RBP: 00007f4b02a01b08 R08: 0000000000000000 R09: 0000000000000000
[  430.732087][T11598] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  430.740087][T11598] R13: 0000000000000000 R14: 00007f4b02b75fa0 R15: 00007ffe7eee8118
[  430.748095][T11598]  </TASK>
[  430.751250][    C0] vkms_vblank_simulate: vblank timer overrun
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  432.430066][T11544] EXT4-fs error (device sda1) in ext4_free_inode:361: Corrupt filesystem
[  432.543459][T11544] EXT4-fs error (device sda1) in ext4_free_inode:361: Corrupt filesystem
[  432.643247][T11578] EXT4-fs error (device sda1) in ext4_free_inode:361: Corrupt filesystem
[  432.864127][T11578] EXT4-fs error (device sda1) in ext4_free_inode:361: Corrupt filesystem
[  433.142853][ T9815] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  433.170343][T11585] EXT4-fs error (device sda1) in ext4_free_inode:361: Corrupt filesystem
[  433.288123][T11585] EXT4-fs error (device sda1) in ext4_free_inode:361: Corrupt filesystem
[  433.360372][ T9815] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  433.423731][T11603] EXT4-fs error (device sda1) in ext4_free_inode:361: Corrupt filesystem
[  433.435075][ T9815] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  433.513518][T11603] EXT4-fs error (device sda1) in ext4_free_inode:361: Corrupt filesystem
[  433.523692][ T9815] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  433.648919][ T9815] bridge_slave_1: left allmulticast mode
[  433.654630][ T9815] bridge_slave_1: left promiscuous mode
[  433.700876][ T9815] bridge0: port 2(bridge_slave_1) entered disabled state
[  433.712024][ T9815] bridge_slave_0: left allmulticast mode
[  433.718672][ T9815] bridge_slave_0: left promiscuous mode
[  433.722924][T11585] EXT4-fs error (device sda1) in ext4_free_inode:361: Corrupt filesystem
[  433.724383][ T9815] bridge0: port 1(bridge_slave_0) entered disabled state
[  433.823187][ T9815] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  433.834870][ T9815] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  433.845059][ T9815] bond0 (unregistering): Released all slaves
[  433.890690][ T9815] �: left promiscuous mode
[  434.100607][ T9815] hsr_slave_0: left promiscuous mode
[  434.106489][ T9815] hsr_slave_1: left promiscuous mode
[  434.113631][ T9815] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  434.123745][ T9815] batman_adv: batadv0: Removing interface: batadv_slave_0
[  434.132256][ T9815] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  434.145085][ T9815] batman_adv: batadv0: Removing interface: batadv_slave_1
[  434.164393][ T9815] veth1_macvtap: left promiscuous mode
[  434.173631][ T9815] veth0_macvtap: left promiscuous mode
[  434.180131][ T9815] veth1_vlan: left promiscuous mode
[  434.185416][ T9815] veth0_vlan: left promiscuous mode