last executing test programs: 12.21441484s ago: executing program 2 (id=188): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x0, 0x100000000008000) write$auto(0x800000000000c8, 0x0, 0x1a) mmap$auto(0x6, 0x9, 0x6, 0x32d4, 0x10000, 0x80000001) ioctl$auto(0xc8, 0xffffffff800454dd, 0x4000000000008) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x60742, 0x0) shutdown$auto(0x200000003, 0x2) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) mremap$auto(0x4000, 0xfee0, 0x3fd6, 0x3, 0xfffff000) set_mempolicy$auto(0x8003, &(0x7f0000000280)=0x7b, 0x4) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) mmap$auto(0x0, 0x7fffffffffffffff, 0xdf, 0x15, 0x7, 0x28000) write$auto(0x3, 0x0, 0x7fffffff) read$auto(0x3, 0x0, 0x80) getsockopt$auto(0xffffffffffffffff, 0x84, 0x1b, 0x0, &(0x7f0000000040)=0x400) ioctl$auto_KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) mmap$auto(0x0, 0x4, 0x4000000020df, 0x40eb2, 0x402, 0x300000000000) capset$auto(0x0, 0x0) r0 = openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000980)='/proc/self/pagemap\x00', 0x80800, 0x0) read$auto(r0, 0x0, 0x39b8) mmap$auto(0x0, 0x20009, 0xdf, 0xeb5, 0x40000000000a5, 0x8000) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) 9.287723207s ago: executing program 0 (id=195): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x2, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @remote}, 0x6a) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x5, 0x20000000) mmap$auto(0x0, 0x402000b, 0xdf, 0xeb2, 0x401, 0x8000) move_pages$auto(0x0, 0x1002, 0x0, 0x0, 0x0, 0x2) mremap$auto(0x4000, 0xfee0, 0x3fd6, 0x3, 0xfffff000) socket(0x2, 0x801, 0x106) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x8e40, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0x800000000000eb1, 0xfffffffffffffff6, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x20009, 0x800000000000df, 0xeb1, 0xa, 0x8000) getpeername$auto(0x3, 0x0, 0x0) socket(0x11, 0x2, 0x300) read$auto(0x3, 0x0, 0x80) mmap$auto(0x0, 0x4, 0x6, 0x40eb2, 0x402, 0x300000000000) r1 = openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, 0x0, 0x800, 0x0) read$auto(r1, 0x0, 0x7fff) close_range$auto(0x2, 0x8, 0x0) write$auto(0x3, 0x0, 0xfdf3) sendmsg$auto_TCP_METRICS_CMD_GET(r0, &(0x7f0000001600)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20008001}, 0x4000080) sendmsg$auto_NL802154_CMD_NEW_SEC_LEVEL(r0, 0x0, 0x1) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/fs/9p/caches\x00', 0x103280, 0x0) read$auto(0x3, 0x0, 0x7) 9.272638923s ago: executing program 1 (id=196): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) r0 = socket(0xa, 0x801, 0x84) io_uring_setup$auto(0x2, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/block/nbd14/queue/atomic_write_unit_max_bytes\x00', 0x103400, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x3, 0x100) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) bpf$auto(0x0, &(0x7f0000000180)=@bpf_attr_5={@target_fd=r0, r2, 0x4, 0x401, 0xffffffffffffffff, @relative_fd=r1, 0xe600}, 0xf) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/virtual/block/loop9/queue/rotational\x00', 0x103400, 0x0) socket(0x10, 0x2, 0x14) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ptmx\x00', 0x189000, 0x0) openat$auto_proc_timens_offsets_operations_base(0xffffffffffffff9c, &(0x7f0000000080), 0x260683, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x3, 0x6) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) ioctl$auto_TIOCSETD2(r3, 0x5423, 0x0) ioctl$auto_TIOCSTI2(r3, 0x5412, 0x0) 8.540956126s ago: executing program 2 (id=197): mmap$auto(0xffffffffffffffff, 0x20009, 0xdf, 0xeb1, 0x3fd, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x2b, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @remote}, 0x6a) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x5, 0x20000000) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x1, 0x0) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x48140, 0x0) readv$auto(r1, &(0x7f00000000c0)={0x0, 0x5}, 0x6) mmap$auto(0x0, 0x8, 0xdc, 0x9b72, 0x2, 0x8000) connect$auto(0x3, 0x0, 0x55) mmap$auto(0x2, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0xfffffffffffffffe) mmap$auto(0xfffffffffffffffb, 0x200004, 0x4000000000df, 0x40eb2, 0x402, 0x300000000000) mlockall$auto(0x7) mprotect$auto(0x0, 0x8000000000000001, 0x6) clone3$auto(0x0, 0x40) getrandom$auto(0x0, 0x6000000, 0x3) setuid$auto(0xe) ioctl$auto_TIOCVHANGUP2(r1, 0x5437, 0x0) sendmsg$auto_NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x404c0c0}, 0x80) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) openat$auto_nsim_dev_take_snapshot_fops_dev(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim4/take_snapshot\x00', 0x4000, 0x0) sendmsg$auto_NCSI_CMD_SET_CHANNEL_MASK(r0, &(0x7f0000000a00)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000180)={0x14, 0x0, 0x4, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x20004880}, 0x24002804) socket(0x11, 0x3, 0x2) 8.245949047s ago: executing program 0 (id=198): r0 = openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/usbmon0\x00', 0x20400, 0x0) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000140)={{0x0, 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x5, 0x20000000) readv$auto(r0, &(0x7f0000000100)={0x0, 0x7}, 0x10) mmap$auto(0x0, 0x40009, 0xe2, 0x9b72, 0x7, 0x28000) openat$auto_buffer_percent_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/tracing/buffer_percent\x00', 0x1, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/kernel/threads-max\x00', 0x101201, 0x0) r1 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/006/001\x00', 0xa901, 0x0) ioctl$auto(r1, 0xc0105500, r1) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r2 = socket(0x15, 0x5, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x10) sendmsg$auto_OVS_METER_CMD_SET(0xffffffffffffffff, 0x0, 0x880) madvise$auto(0x100000, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0xffffffffffff0001, 0x15) open(0x0, 0x7ffd, 0x12) write$auto(0x3, 0x0, 0x100082) openat$auto_short_retry_limit_ops_(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/ieee80211/phy0/short_retry_limit\x00', 0x0, 0x0) madvise$auto(0x0, 0x200007, 0x19) r3 = openat$auto_vhci_fops_hci_vhci(0xffffffffffffff9c, 0x0, 0xa0002, 0x0) getsockopt$auto(r3, 0x9, 0xa2d, &(0x7f00000000c0)='/dev/sda\x00', &(0x7f0000000200)=0xe4a) bpf$auto(0x5, &(0x7f0000001080)=@bpf_attr_7={@prog_id=0xc, 0x92f1, 0x4}, 0xa) bind$auto(r2, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) ustat$auto(0x801, 0x0) sendmsg$auto(r2, &(0x7f0000000180)={&(0x7f0000000040), 0x7fc, 0x0, 0x8, 0x0, 0x1, 0x4}, 0x0) 8.002300574s ago: executing program 3 (id=199): mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) mmap$auto(0x0, 0x20009, 0xe3, 0x100000eb1, 0x40000000000a1, 0x8000) socket(0xa, 0x3, 0xff) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa}, 0x55) mmap$auto(0x210, 0x20009, 0xe3, 0x15, 0x40000000000a1, 0x7ffd) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00'}) setsockopt$auto(r0, 0x400, 0x11, &(0x7f0000000000)='nlctrl\x00', 0x26ae) mmap$auto(0x0, 0x9, 0x400000072, 0x8b72, 0x1000000002, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0xfffffffd) r1 = openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000300)='/proc/self/smaps_rollup\x00', 0x40000, 0x0) read$auto_proc_pid_maps_operations_internal(r1, &(0x7f0000000980)=""/4098, 0x1002) r2 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000010c0), 0xffffffffffffffff) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, 0x0, 0x4000000) r3 = socket(0xa, 0x2, 0x0) sync_file_range$auto(r3, 0xfffd, 0xfffffffffffffff9, 0x2) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) sendmsg$auto_WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400c810}, 0x20000041) close_range$auto(r2, r1, 0x80) r4 = openat$auto_ftrace_subsystem_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f0000007380)='/sys/kernel/tracing/events/vmalloc/filter\x00', 0x109041, 0x0) write$auto(r4, &(0x7f0000008d40)='!$}-)#@\x00', 0x40) openat$auto_ftrace_set_event_notrace_pid_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/set_event_notrace_pid\x00', 0x141f02, 0x0) 7.731404273s ago: executing program 1 (id=200): unshare$auto(0x40000080) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x2, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) sendmmsg$auto(r0, 0x0, 0x5, 0x20000000) socket(0x18, 0x5, 0x2) r1 = syz_clone(0x800000, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$auto(0x4206, r1, 0x0, 0x5) wait4$auto(r1, 0x0, 0x3, 0x0) unshare$auto(0x40000080) openat$auto_proc_coredump_filter_operations_base(0xffffffffffffff9c, 0x0, 0x141002, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r2 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000340)='/proc/sys/net/netfilter/nf_conntrack_buckets\x00', 0x101000, 0x0) read$auto(r2, 0x0, 0x1ff) write$auto(0x3, 0x0, 0xfdef) io_uring_setup$auto(0xfffffffb, 0x0) r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) sendmsg$auto_NETDEV_CMD_QUEUE_GET(0xffffffffffffffff, &(0x7f0000003040)={0x0, 0x0, &(0x7f0000003000)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="41004bbd7000fbdbdf250a0000"], 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x20008810) open(&(0x7f0000000000)='./file0\x00', 0xa61c2, 0x84) bind$auto(0x3, 0x0, 0x6b) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) write$auto(r3, 0x0, 0x62f) fallocate$auto(0x8000000000000003, 0x0, 0xd, 0xcbd5d) socket(0x25, 0x2, 0xfffffffd) close_range$auto(0x2, 0x8, 0x0) 7.626766387s ago: executing program 3 (id=201): mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) move_pages$auto(0x1, 0xf54, 0x0, 0x0, 0x0, 0x8000000000000000) mmap$auto(0x0, 0x20009, 0xe3, 0x100000eb1, 0x40000000000a1, 0x8000) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0) fsopen$auto(&(0x7f0000000000)='nlctrl\x00', 0x3) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) close_range$auto(0x2, 0x8, 0x0) socketpair$auto(0x1e, 0x5, 0x8, 0x0) r0 = socket(0xa, 0x801, 0x84) getsockopt$auto(r0, 0x84, 0x75, 0x0, &(0x7f0000000000)=0x9000c) r1 = openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, &(0x7f00000002c0), 0x40000, 0x0) madvise$auto(0x0, 0x54, 0x6) ioctl$auto_DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, 0x0) mmap$auto(0x0, 0x9, 0xff7, 0x8000000008012, 0x1000000004, 0x0) statx$auto(0xffffff9c, 0x0, 0x1000, 0x1, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000010c0), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB, @ANYBLOB="10002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/dev_mcast\x00', 0x101000, 0x0) pread64$auto(r2, 0x0, 0x8, 0x8000) inotify_init1$auto(0x5) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f00000001c0), 0x7, 0xa505}, 0x800}, 0x7, 0x4008) 6.923942441s ago: executing program 0 (id=202): mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) mremap$auto(0x4000, 0xfee0, 0x3fd6, 0x3, 0x0) mmap$auto(0x0, 0x2, 0xdf, 0xeb1, 0x401, 0x8000) r0 = openat2$auto(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x6, 0x411, 0x9}, 0x8) r1 = socket(0x10, 0x2, 0xc) r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_ADD_LINK_STA(r1, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)={0x14, r2, 0x1, 0x70bd25, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x40) sendmsg$auto_NL80211_CMD_UPDATE_CONNECT_PARAMS(r0, 0x0, 0x8000) socket(0x2, 0x1, 0x0) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) r3 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/controlC2\x00', 0x400, 0x0) inotify_add_watch$auto(r3, &(0x7f0000000040)='./file0\x00', 0x5) write$auto(0x3, 0x0, 0xfdef) close_range$auto(0x2, 0x8000, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, 0x0, 0xa901, 0x0) mprotect$auto(0x1ffff000, 0x8000000000000001, 0xd) close_range$auto(0x0, 0xfffffffffffff000, 0x2) openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x0, 0x0) mmap$auto(0x0, 0x9, 0xdf, 0xeb1, 0xfffffffffffffffd, 0x8000) io_uring_setup$auto(0x6, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x10004) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0xffffffffffff0001, 0x15) getresgid$auto(0x0, &(0x7f0000000100)=0x10001, 0x0) 6.906575111s ago: executing program 3 (id=203): openat$auto_media_devnode_fops_mc_devnode(0xffffffffffffff9c, &(0x7f0000000300)='/dev/media3\x00', 0x220100, 0x0) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/net/snmp\x00', 0x0, 0x0) read$auto_proc_reg_file_ops_compat_inode(r0, &(0x7f0000000040)=""/88, 0x58) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) bpf$auto(0x0, &(0x7f0000000000)=@link_update={0x2, @new_prog_fd=0x4, 0x7, @old_prog_fd=0x8000}, 0xa3) r2 = bpf$auto(0x9, &(0x7f00000001c0)=@raw_tracepoint={0x5, 0xffff, 0x0, 0x8}, 0xc) removexattr$auto(0x0, 0x0) mmap$auto(0x4, 0x2020009, 0x8, 0xeb1, 0xffffffffffeffffa, 0x7ffd) getrandom$auto(0x0, 0x6000000, 0x3) r3 = socketpair$auto(0x1d, 0x2, 0x2, 0x0) open(0x0, 0x252802, 0x190) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xfffffffffffefffd, 0x17) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000100), r3) sendmsg$auto_NL80211_CMD_STOP_SCHED_SCAN(r1, &(0x7f0000000280)={&(0x7f0000000340), 0xc, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x24000058) madvise$auto(0x0, 0x80000001, 0x8) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) mmap$auto(0x0, 0x2020009, 0xffff, 0xeb1, 0xfffffffffffffffa, 0x8000) syz_genetlink_get_family_id$auto_ethtool(&(0x7f00000002c0), r2) remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0x6, 0x4) 6.113670294s ago: executing program 0 (id=204): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x402, 0x300000000000) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) r0 = memfd_create$auto(0x0, 0xe) fcntl$auto(0xff80000000000000, 0x409, 0x13) fallocate$auto(r0, 0x3, 0x2, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x800) r1 = socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) sendmmsg$auto(0xffffffffffffffff, 0x0, 0x5, 0x20000000) setsockopt$auto(0x3, 0x1, 0x21, 0x0, 0x9) mprotect$auto(0x1ffff000, 0x8000000000000002, 0x5) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mmap$auto(0x40, 0x2, 0x9, 0x111, 0x9, 0x7) open(0x0, 0x22240, 0x16c) madvise$auto(0x0, 0xffffffffffff0001, 0x15) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x5, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0xffffffffffff0005, 0x19) msync$auto(0x0, 0x2000000005, 0x6) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r1, 0x0, 0xc800) sendmsg$auto_NETDEV_CMD_QUEUE_GET(0xffffffffffffffff, 0x0, 0x20008810) socket$nl_generic(0x10, 0x3, 0x10) 6.104509772s ago: executing program 2 (id=205): unshare$auto(0x40000080) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) removexattr$auto(0x0, 0x0) mmap$auto(0x4, 0x2020009, 0x8, 0xeb1, 0xffffffffffeffffa, 0x7ffd) getrandom$auto(0x0, 0x6000000, 0x3) read$auto_proc_reg_file_ops_compat_inode(0xffffffffffffffff, &(0x7f0000001080)=""/4092, 0xffc) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) socketpair$auto(0x1d, 0x2, 0x2, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x252802, 0x190) socket(0x1, 0x1, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1e, 0x4, 0x0) socket(0x1e, 0x4, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x40814}, 0x2004c0c4) get_robust_list$auto(0x0, 0x0, 0x0) setsockopt$auto(0x3, 0x10f, 0x87, 0x0, 0x14) connect$auto(0x3, &(0x7f00000001c0), 0x55) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0xfffffffffffefffd, 0x17) 4.126671891s ago: executing program 0 (id=206): mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) mq_open$auto(&(0x7f0000000140)='nl802154\x00', 0x40, 0x8, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x1000000000000055, 0xd}) madvise$auto(0x0, 0xffffffffffff0001, 0x15) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000140)={{0x0, 0x10, &(0x7f00000000c0)={0x0, 0xffe0}, 0x7, 0x0, 0x2, 0xb}, 0xfff}, 0x5, 0x311) r0 = socket(0x10, 0x2, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x9, 0x7, 0x3c, 0x4909b6fb, 0x1ffde, 0x7, 0x6, 0x7fffffffffffffff, 0x0, 0x3, 0x6, 0x4, 0xb4, 0x9, 0x2, 0x10000, 0x82, 0x7, 0x0, 0x7, 0x8, 0x200, 0x0, 0x84, [0x0, 0x7, 0x0, 0x7, 0xffffffffffffffff, 0x0, 0x401, 0x6, 0x70624ce7, 0x0, 0x4, 0xb, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0xfffffffffffffffd, 0x1, 0x0, 0xffffffffffffffff, 0x4, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x400000000005b8, 0x100000000c, 0x0, 0x800, 0x0, 0x7, 0x2, 0x5, 0x8000000000008, 0x4, 0x9, 0xa38, 0x4, 0xffffffffffffffff, 0xfffffffffffffffd, 0x2, 0x3fffffffff, 0x0, 0x4, 0xffff]}, 0x202, 0xd) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="10002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f00000001c0), 0x7, 0xa505}, 0x800}, 0x7, 0x4008) r1 = socket$nl_generic(0x10, 0x3, 0x10) madvise$auto(0x1ffff000, 0x5510, 0x10) r2 = syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000080), r1) r3 = openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f0000000000)='/dev/usbmon1\x00', 0x4ad03, 0x0) r4 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000140), r1) sendmsg$auto_NL80211_CMD_SET_WIPHY_NETNS(r1, &(0x7f0000000980)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000240)={0x704, r4, 0x0, 0x70bd26, 0x25dfdbfb, {}, [@NL80211_ATTR_VHT_CAPABILITY={0xe4, 0x9d, "d558e4edc9b4bf48e87142e7745ce08d0ba8728488faaaa60659cf7f037229244b771468392f71f95092b1e7bd04fefa9f659d3b380fa3fec27404f51ef760e0966464a493e9978fc8981a58ab6cbea4bfb03d21336bfea5992848e02959321c8eed245bcc17bb2a062088a742e837e34ea0f19fdcea39f55ec9259ebfa3743451874c1ab47090a3a15d6d88f42af810db158f0841a1ee1a108d18de8e573c71b43a0728c9582c9d3202a01de7325da931e870c230f0b114fde47b29e2d6941e5595daa1c79d8cd3b1ba700b5674ba83e6b29b7f7421015ccf2b3ea70e5734b0"}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x3}, @NL80211_ATTR_BEACON_HEAD={0x521, 0xe, "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"}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x890}, @NL80211_ATTR_REG_ALPHA2={0xb7, 0x21, "8e0fc18dcea8976f93991f13ca84c29dc488160b25cc4a3bb4982088c2534bddea0c45120ce98dcc15d969c731f50980d5ee0c245ee49fa3b72f771ca70d9224712dd20ff8c0dac9a9976aff3c54f98dcbcfdf3b879797988089bc5875b7dfa32db6ab0e30bacc9b5028e9346e1808706fadcd731655a610c54b7a6b71222379715bac69b470a89b5354721383755c25330221b5076dbeaeb70a59066db97688fff4c94a48c989384facbbcc96f6df59fe96e1"}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x7fff}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x101}, @NL80211_ATTR_WIPHY_ANTENNA_RX={0x8, 0x6a, 0x8}, @NL80211_ATTR_TXQ_LIMIT={0x8, 0x10a, 0xad1}]}, 0x704}, 0x1, 0x0, 0x0, 0x800}, 0x4048045) r5 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f00000040c0)='/dev/bus/usb/001/001\x00', 0x8800, 0x0) ioctl$auto_MON_IOCG_STATS(r3, 0x80089203, &(0x7f0000000080)={0x7fff, 0x22fb}) setsockopt$auto(r5, 0x2, 0x4, &(0x7f0000000040)='/dev/usbmon1\x00', 0x951b) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'team_slave_0\x00'}) sendmsg$auto_OVS_DP_CMD_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2c, r2, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@OVS_DP_ATTR_USER_FEATURES={0x8, 0x5, 0x7}, @OVS_DP_ATTR_IFINDEX={0x8}, @OVS_DP_ATTR_USER_FEATURES={0x8, 0x5, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4880}, 0x4000) 3.699299667s ago: executing program 2 (id=207): mmap$auto(0x0, 0x20009, 0xe3, 0x100000eb1, 0x40000000000a1, 0x8000) io_uring_setup$auto(0x6, 0x0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) close_range$auto(0x2, 0x8, 0x0) socket(0xf, 0x3, 0x2) mremap$auto(0x0, 0x4, 0x4, 0x7, 0x1000) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0xa, 0xdb, 0x9b72, 0x5, 0x8000) socketpair$auto(0x1, 0x5, 0x1, 0x0) fanotify_init$auto(0x65, 0x2) pipe$auto(0x0) dup2$auto(0x5, 0x4) splice$auto(0x4, 0x0, 0x2, 0x0, 0x80000001, 0x9) write$auto(0x6, 0x0, 0x100000001) select$auto(0xa, 0x0, &(0x7f0000000100)={[0x20000000000d, 0x3af, 0x0, 0xc, 0x5, 0x3, 0x5, 0x2000000000000002, 0x9, 0x369057ee, 0xff, 0xa, 0x4, 0xaab, 0x99, 0x800004006]}, 0x0, 0x0) mlock$auto(0xfffffffffffff841, 0xffffffff) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x801, 0x100) r0 = socket(0x2, 0x5, 0x0) shutdown$auto(0x200000003, 0x2) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) mmap$auto(0x0, 0x20009, 0x10000000000df, 0xeb2, 0x401, 0x8000) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x10, &(0x7f00000000c0)={0x0, 0xa0fc}, 0x7, 0x0, 0x2, 0xb}, 0xfff}, 0x5, 0x311) ioctl$auto_evdev_fops_evdev(0xffffffffffffffff, 0x400445a0, 0x0) 3.627937293s ago: executing program 3 (id=208): openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp1\x00', 0x20b42, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_netdev(&(0x7f0000000080), r0) mmap$auto(0x0, 0x2020009, 0x9, 0xeb1, 0xfffefffffffffffa, 0x8000) write$auto(0x3, 0x0, 0x100082) mmap$auto(0x0, 0xa, 0xdb, 0x9b72, 0x5, 0x8000) pidfd_send_signal$auto(0xfffffffffffffff3, 0xe31, 0xfffffffffffffffd, 0x0) r1 = open(&(0x7f0000000100)='.\x00', 0x40000, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x60301, 0x0) madvise$auto(0x0, 0xfffffffffffefffd, 0x17) openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f0000000000), 0x430000, 0x0) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f000000fc00), 0x3, 0x0) ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x1) socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$auto_fault_around_bytes_fops_(0xffffffffffffff9c, &(0x7f0000000140), 0xb0800, 0x0) ioctl$auto_DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000180)={0x2, r2, r4, 0x9}) sendmsg$auto_OVS_METER_CMD_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc0}, 0x40) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/net/gre0/gro_flush_timeout\x00', 0x80302, 0x0) sendfile$auto(r5, r5, 0x0, 0x3) setsockopt$auto(0xffffffffffffffff, 0x4, 0x8001, 0x0, 0x2) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/thread-self/net/afs/rootcell\x00', 0x321000, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mbind$auto(0x0, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) 3.558593355s ago: executing program 1 (id=209): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x100) socket(0x1d, 0x2, 0x6) socket(0x2, 0x2, 0x1) io_uring_setup$auto(0x6, 0x0) io_uring_setup$auto(0x6, 0x0) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/009/001\x00', 0xa101, 0x0) io_uring_setup$auto(0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) ioctl$auto_TIOCSETD2(r0, 0x5423, 0x0) socketpair$auto(0x4, 0x1, 0x20000, 0x0) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) ioctl$auto_TIOCSETD2(r1, 0x5423, 0x0) ioctl$auto_TIOCVHANGUP2(r0, 0x5437, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_PHY_GET(r2, &(0x7f0000003200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2404c012}, 0x80) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) open(&(0x7f0000000100)='.\x00', 0x0, 0x408) getdents64$auto(0x0, 0x0, 0x18) 2.888502984s ago: executing program 0 (id=210): madvise$auto(0x0, 0x7fffffffffffffff, 0xa) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_taskstats(&(0x7f0000000140), r0) r2 = syz_clone(0x0, 0x0, 0xffffffffffffff19, 0x0, 0x0, 0x0) r3 = accept4$auto(0xffffffffffffffff, 0x0, 0x0, 0x6) ioctl$auto_SNDCTL_DSP_GETODELAY(r3, 0x80045017, 0x0) setsockopt$auto(0xffffffffffffffff, 0x1, 0x12, 0x0, 0xa4) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0x8000000000000000, 0x15) madvise$auto(0x0, 0x1010001, 0x100000003) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xfffffffffffefffd, 0x17) madvise$auto(0x0, 0xffffffffffff0001, 0x15) mmap$auto(0x0, 0x2020009, 0x3, 0x19d0, 0xfffffffffffffffa, 0x8000) futex_waitv$auto(&(0x7f0000000000)={0xf, 0x100000000005d94, 0x4, 0x4}, 0x77, 0x0, 0x0, 0x62bd) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) mprotect$auto(0x1ffff000, 0x8000000000000001, 0x4) clone$auto(0x440f, 0x6, 0x0, 0x0, 0x8) io_uring_setup$auto(0x40005, &(0x7f0000000000)={0x6, 0x1, 0x400, 0x7, 0x1005, 0x6, 0x7, [0x4, 0x2e9, 0x5], {0x0, 0x1, 0x8, 0x7, 0x5, 0x100005, 0x1, 0x0, 0x7}, {0x4, 0xfff, 0xffff7fff, 0x2, 0x8, 0x200, 0x3, 0x0, 0x3}}) madvise$auto(0x108000, 0x800034, 0x9) times$auto(&(0x7f00000001c0)={0x7fffffff, 0x4, 0x9, 0x4}) sendmsg$auto_TASKSTATS_CMD_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={0x1c, r1, 0xa01, 0x70bd2b, 0x25dfdbfb, {}, [@TASKSTATS_CMD_ATTR_PID={0x8, 0x1, r2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4001}, 0x20000000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x1, 0x106) 2.770250447s ago: executing program 1 (id=211): socket$nl_generic(0x10, 0x3, 0x10) fanotify_init$auto(0x65, 0x2) socket(0xa, 0x806, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x2, 0x88) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) pipe$auto(0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x3, 0x100) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) eventfd$auto(0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x3, 0x6) socket(0xa, 0x2, 0x88) r0 = socket(0x10, 0x2, 0xc) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="18000000", @ANYRES8=r0, @ANYBLOB='\nG'], 0x18}, 0x1, 0x0, 0x0, 0x64048001}, 0x80) mprotect$auto(0x1ffff000, 0x8000000000000001, 0xd) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x4000000) 2.602282045s ago: executing program 2 (id=212): execve$auto(0x0, 0x0, 0x0) unshare$auto(0x40000080) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_ETHTOOL_MSG_PLCA_GET_STATUS(r0, 0x0, 0x4010) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x2000, 0x0) faccessat2$auto(0xffffffffffffff9c, 0x0, 0x1, 0xbc6c) r1 = socket(0xa, 0x1, 0x84) connect$auto(r0, &(0x7f0000000140)=@tipc=@id={0x1e, 0x3, 0x1, {0x4e1e, 0x3}}, 0x291f) r2 = open(0x0, 0x101800, 0x100) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ethtool(0x0, r1) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) sysfs$auto(0x2, 0x3, 0x0) fsopen$auto(0x0, 0x1) close_range$auto(r2, r2, 0x0) openat$auto_mousedev_fops_mousedev(0xffffffffffffff9c, 0x0, 0x341, 0x0) r3 = socket(0x11, 0x3, 0x9) r4 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) ioctl$auto(r4, 0x4b47, 0x1) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$auto_seg6(&(0x7f0000001a00), 0xffffffffffffffff) sendmsg$auto_SEG6_CMD_GET_TUNSRC(r5, &(0x7f0000001b00)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000001a40)={0x14, r6, 0x1, 0x70bd2d, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4094}, 0x800) sendmsg$auto_SEG6_CMD_SET_TUNSRC(r3, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r6, 0x300, 0x70bd2c, 0x25dfdbfd, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xd}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000001}, 0x80) 2.48807914s ago: executing program 1 (id=213): openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) unshare$auto(0x40000080) r0 = socket(0x2, 0x3, 0xa) getsockopt$auto(r0, 0x0, 0x26, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000280)={'dummy0\x00', 0x0}) bpf$auto(0x0, &(0x7f00000000c0)=@bpf_attr_5={@target_ifindex=r2, 0xffffffffffffffff, 0x0, 0x1ff, 0xffffffffffffffff, @relative_fd, 0xe600}, 0xf) socket(0xa, 0x806, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x6, 0x0) shutdown$auto(0x200000003, 0x2) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/net/sctp/remaddr\x00', 0x181580, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=ANY=[@ANYBLOB, @ANYBLOB="2f212abd7800fddbdf2521"], 0x14}}, 0x4000000) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/fs/pipe-max-size\x00', 0x382, 0x0) write$auto(r4, &(0x7f0000000400)='/dev/audio1\x00', 0xa3d9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x2, 0x15f4da0a, 0x1, 0x3, 0x300000000000000, 0x80000001, 0x7, 0x6d3c, 0x5, 0x2]}, 0x0) 2.052871773s ago: executing program 2 (id=214): unshare$auto(0x40000080) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) ioperm$auto(0xfb, 0x5, 0xe) r0 = socket(0x2, 0x3, 0x6) close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x5, 0x0) r1 = socket(0x2, 0x3, 0x6) mmap$auto(0x0, 0x9, 0x3ff57696, 0x9b72, 0x2, 0x8000000000008000) lsm_list_modules$auto(0x0, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x5, 0x0) open(0x0, 0x22240, 0x154) ioctl$sock_SIOCGIFINDEX(r1, 0x401c5820, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x401c5820, 0x0) mmap$auto(0x0, 0x400005, 0xfffffffffffffffe, 0x9b72, 0x2, 0x8000) openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, 0x0, 0x80080, 0x0) close_range$auto(0x2, 0x8, 0x0) open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x20) openat$auto_generic(0xffffffffffffff9c, &(0x7f0000000080)='/proc/kpageflags\x00', 0x2, 0x0) read$auto(0x3, 0x0, 0x400000) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x60200, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) bpf$auto(0x5, &(0x7f0000000100)=@task_fd_query={0x2, 0x2, 0x4, 0x0, 0x85, 0x7, 0x9, 0x6, 0x8001}, 0x101) sendmsg$auto_ETHTOOL_MSG_TUNNEL_INFO_GET(r2, &(0x7f0000000180)={0x0, 0x56b20476349680a5, &(0x7f0000000140)={&(0x7f00000000c0)={0x2c, 0x0, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@ETHTOOL_A_TUNNEL_INFO_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000000}, 0x4000000) 430.852405ms ago: executing program 3 (id=215): r0 = socket$nl_generic(0x10, 0x3, 0x10) lsm_set_self_attr$auto(0x3, 0xfffffffffffffffc, 0x1f, 0x8000000000000000) syz_genetlink_get_family_id$auto_batadv(&(0x7f00000002c0), 0xffffffffffffffff) r1 = syz_genetlink_get_family_id$auto_handshake(&(0x7f0000000040), r0) sendmsg$auto_HANDSHAKE_CMD_ACCEPT(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010028bd7000ffdb5f25020000000800020001000000080002000700000008000200ff01000008000200000001000800020008000000080002000300000008000200040000000800020001000100"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x4) socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f0000000000)='/dev/usbmon1\x00', 0x4ad03, 0x0) ioctl$auto_MON_IOCG_STATS(r2, 0x80089203, &(0x7f0000000080)={0xafa, 0x7}) r3 = socket(0x11, 0x80003, 0x300) sysfs$auto(0x2, 0x2, 0x0) setsockopt$auto(r3, 0x107, 0x8, 0x0, 0x6) read$auto(0x3, 0x0, 0x7) socket$nl_generic(0x10, 0x3, 0x10) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="1100"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x9, 0x3, 0x22, 0x940, 0x1ffde, 0x3, 0x6, 0x8000003, 0x9, 0x5, 0x0, 0x4, 0xb0, 0x7, 0x2, 0x3, 0x5, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, [0x0, 0x0, 0x0, 0x243efbdf, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x9, 0x20000000, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffffd, 0x0, 0x0, 0xffffffffffffffff, 0x6, 0xfffffffffffffffe, 0xe6e]}, 0x7, 0x81) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) socket(0xa, 0x2, 0x3a) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) r4 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r4, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008) 210.038794ms ago: executing program 1 (id=216): unshare$auto(0x40000080) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x0, 0x0) ppoll$auto(&(0x7f0000000080)={r0, 0x7980, 0x6}, 0x2, 0x0, 0x0, 0x8) acct$auto(&(0x7f0000000080)='/proc/sys/kernel/sched_deadline\xdcBH\xc7H\xe2\x1d\b\x00ax_us\x00\xae\xb5\x86\xe9\xf6\xfe\x9b6\x91\x8f\x158\xe7qwI\t0\xc3\xd1\xcd\xf5\x04\xe0B\xe0U<\xb1\x1d\xda\xd2') removexattr$auto(0x0, 0x0) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS1\x00', 0x20000, 0x0) ioctl$auto_TIOCGDEV2(r1, 0x542f, 0x0) mmap$auto(0x4, 0x2020009, 0x8, 0xeb1, 0xffffffffffeffffa, 0x7ffd) getrandom$auto(0x0, 0x6000000, 0x3) sendmsg$auto_WG_CMD_GET_DEVICE(0xffffffffffffffff, 0x0, 0x4000) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x41ee43, 0x193) madvise$auto(0x0, 0xffffffffffff0005, 0x19) syz_clone(0x40100100, 0x0, 0x0, 0x0, 0x0, 0x0) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) unshare$auto(0x200) clone$auto(0xfffffffe20000, 0x2, 0xfffffffffffffffc, 0xfffffffffffffffc, 0x800ffffffff) connect$auto(0x3, &(0x7f00000001c0), 0x55) connect$auto(0xffffffffffffffff, &(0x7f00000000c0)=@qipcrtr={0x2a, 0xffffffff, 0xfffffffe}, 0x55) write$auto(0x3, 0x0, 0x3f00) prctl$auto(0x39, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xfffffffffffefffd, 0x17) 0s ago: executing program 3 (id=217): open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x100) rseq$auto(&(0x7f0000000300)={0xe, 0x401, 0x0, 0x6, 0xffffffff, 0x2}, 0x8000, 0x0, 0x6) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) r0 = open(0x0, 0xeee00, 0x31) mmap$auto(0x0, 0x5, 0x4000000000df, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) write$auto(0x3, 0x0, 0x100082) lseek$auto(0x3, 0x7fffffffffffffff, 0x1) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) setns(0xffffffffffffffff, 0x0) clone$auto(0x8001, 0x5, 0xffffffffffffffff, 0xfffffffffffffffc, 0x6) writev$auto(0x1, &(0x7f0000000100)={0x0, 0x400000000000fdef}, 0x1) r1 = socket(0xa, 0x2, 0x73) write$auto_msr_fops_msr(r0, 0x0, 0x0) getsockname$auto(r1, &(0x7f0000000240), &(0x7f0000000280)=0xaea) fcntl$auto(0x0, 0x407, 0x100000) mlockall$auto(0x7) mmap$auto(0x0, 0x200004, 0x4000000000df, 0x40eb2, 0x402, 0x300000000000) memfd_create$auto(&(0x7f0000000000)='A\x00\x00\x00\x00\xef\x97\x8aY\x00\x00\xd2\x8c\xb05\x03\\\xb2\xbf247{\xde\f\x00\x00\v\x00E\xdb\x81\xd9\xd8\xe640\xc6\xa4Sr\x82\xcc\"K\xe1IIT\x00\x00\x00', 0xe) rseq$auto(0x0, 0x8000, 0x0, 0x6) fallocate$auto(0x8000000000000003, 0x0, 0xd, 0xcbd5d) finit_module$auto(0x3, 0xfffffffffffffffe, 0x400000000004) openat$auto_proc_clear_refs_operations_internal(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/clear_refs\x00', 0x404241, 0x0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.7' (ED25519) to the list of known hosts. [ 82.277091][ T5822] cgroup: Unknown subsys name 'net' [ 82.388738][ T5822] cgroup: Unknown subsys name 'cpuset' [ 82.397712][ T5822] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 84.050903][ T5822] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 85.987976][ T5834] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 86.002577][ T54] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 86.010582][ T54] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 86.019965][ T5842] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 86.032777][ T5842] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 86.065958][ T5842] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 86.078191][ T5839] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 86.085472][ T5842] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 86.094462][ T5839] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 86.101635][ T5839] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 86.107846][ T5842] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 86.110264][ T5839] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 86.118102][ T5842] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 86.124799][ T5839] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 86.130595][ T5842] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 86.137401][ T5839] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 86.143604][ T5847] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 86.152582][ T5839] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 86.166084][ T5144] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 86.166992][ T5839] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 86.175721][ T5847] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 86.188156][ T5849] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 86.201339][ T5849] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 86.208821][ T5849] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 86.601746][ T5832] chnl_net:caif_netlink_parms(): no params data found [ 86.625324][ T5831] chnl_net:caif_netlink_parms(): no params data found [ 86.679888][ T5840] chnl_net:caif_netlink_parms(): no params data found [ 86.707818][ T5841] chnl_net:caif_netlink_parms(): no params data found [ 86.779457][ T5832] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.788185][ T5832] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.795893][ T5832] bridge_slave_0: entered allmulticast mode [ 86.803826][ T5832] bridge_slave_0: entered promiscuous mode [ 86.844141][ T5832] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.851535][ T5832] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.858760][ T5832] bridge_slave_1: entered allmulticast mode [ 86.865866][ T5832] bridge_slave_1: entered promiscuous mode [ 86.881834][ T5831] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.889511][ T5831] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.896998][ T5831] bridge_slave_0: entered allmulticast mode [ 86.903748][ T5831] bridge_slave_0: entered promiscuous mode [ 86.928111][ T5831] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.935488][ T5831] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.942631][ T5831] bridge_slave_1: entered allmulticast mode [ 86.949670][ T5831] bridge_slave_1: entered promiscuous mode [ 87.003555][ T5832] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.029867][ T5840] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.037157][ T5840] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.045754][ T5840] bridge_slave_0: entered allmulticast mode [ 87.052553][ T5840] bridge_slave_0: entered promiscuous mode [ 87.061820][ T5831] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.075962][ T5832] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.094002][ T5841] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.101390][ T5841] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.108855][ T5841] bridge_slave_0: entered allmulticast mode [ 87.116358][ T5841] bridge_slave_0: entered promiscuous mode [ 87.123890][ T5840] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.132237][ T5840] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.139638][ T5840] bridge_slave_1: entered allmulticast mode [ 87.148302][ T5840] bridge_slave_1: entered promiscuous mode [ 87.166706][ T5831] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.192018][ T5841] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.200885][ T5841] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.208634][ T5841] bridge_slave_1: entered allmulticast mode [ 87.215998][ T5841] bridge_slave_1: entered promiscuous mode [ 87.233666][ T5840] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.254892][ T5831] team0: Port device team_slave_0 added [ 87.264377][ T5832] team0: Port device team_slave_0 added [ 87.281708][ T5840] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.301237][ T5831] team0: Port device team_slave_1 added [ 87.318083][ T5832] team0: Port device team_slave_1 added [ 87.368697][ T5841] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.382174][ T5841] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.397452][ T5840] team0: Port device team_slave_0 added [ 87.404062][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.411430][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.437450][ T5831] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.450415][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.457457][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.483516][ T5832] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.496292][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.503284][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.529552][ T5832] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.549770][ T5840] team0: Port device team_slave_1 added [ 87.565321][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.572557][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.598881][ T5831] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.643555][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.650667][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.677451][ T5840] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.697700][ T5841] team0: Port device team_slave_0 added [ 87.714451][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.721577][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.754848][ T5840] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.773491][ T5841] team0: Port device team_slave_1 added [ 87.791184][ T5831] hsr_slave_0: entered promiscuous mode [ 87.798449][ T5831] hsr_slave_1: entered promiscuous mode [ 87.862772][ T5832] hsr_slave_0: entered promiscuous mode [ 87.869097][ T5832] hsr_slave_1: entered promiscuous mode [ 87.876454][ T5832] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 87.884318][ T5832] Cannot create hsr debugfs directory [ 87.890796][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.898222][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.924580][ T5841] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.937796][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.944881][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.971108][ T5841] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.991284][ T5840] hsr_slave_0: entered promiscuous mode [ 87.997684][ T5840] hsr_slave_1: entered promiscuous mode [ 88.003794][ T5840] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 88.011504][ T5840] Cannot create hsr debugfs directory [ 88.102537][ T5841] hsr_slave_0: entered promiscuous mode [ 88.109212][ T5841] hsr_slave_1: entered promiscuous mode [ 88.115480][ T5841] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 88.123037][ T5841] Cannot create hsr debugfs directory [ 88.195672][ T5849] Bluetooth: hci0: command tx timeout [ 88.275214][ T5849] Bluetooth: hci1: command tx timeout [ 88.281153][ T54] Bluetooth: hci2: command tx timeout [ 88.286752][ T5845] Bluetooth: hci3: command tx timeout [ 88.394769][ T5840] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 88.411325][ T5840] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 88.421139][ T5840] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 88.438635][ T5840] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 88.477376][ T5832] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 88.498305][ T5832] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 88.508514][ T5832] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 88.529731][ T5832] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 88.575933][ T5831] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 88.588379][ T5831] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 88.600047][ T5831] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 88.610337][ T5831] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 88.673277][ T5841] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 88.689765][ T5841] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 88.716606][ T5841] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 88.744927][ T5841] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 88.845331][ T5840] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.890367][ T5831] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.917280][ T5840] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.937472][ T69] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.944866][ T69] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.971103][ T5832] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.981058][ T5831] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.004979][ T69] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.012126][ T69] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.024179][ T69] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.031338][ T69] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.052084][ T5841] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.072325][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.079499][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.117714][ T5832] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.131821][ T5841] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.152439][ T3019] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.159665][ T3019] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.169861][ T3019] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.176996][ T3019] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.219119][ T62] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.226262][ T62] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.246848][ T62] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.253960][ T62] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.319277][ T5831] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 89.633830][ T5840] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.734299][ T5840] veth0_vlan: entered promiscuous mode [ 89.744373][ T5832] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.770782][ T5840] veth1_vlan: entered promiscuous mode [ 89.814188][ T5841] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.836226][ T5831] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.859935][ T5840] veth0_macvtap: entered promiscuous mode [ 89.898585][ T5832] veth0_vlan: entered promiscuous mode [ 89.906360][ T5840] veth1_macvtap: entered promiscuous mode [ 89.943039][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.951702][ T5832] veth1_vlan: entered promiscuous mode [ 89.969881][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.993404][ T5841] veth0_vlan: entered promiscuous mode [ 90.010736][ T5841] veth1_vlan: entered promiscuous mode [ 90.025170][ T5840] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.034100][ T5840] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.044460][ T5840] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.053249][ T5840] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.073543][ T5831] veth0_vlan: entered promiscuous mode [ 90.120205][ T5832] veth0_macvtap: entered promiscuous mode [ 90.149334][ T5831] veth1_vlan: entered promiscuous mode [ 90.161140][ T5832] veth1_macvtap: entered promiscuous mode [ 90.204459][ T1149] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.228424][ T5832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.228488][ T5832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.251676][ T1149] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.256154][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.276350][ T54] Bluetooth: hci0: command tx timeout [ 90.282315][ T5832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.294223][ T5832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.307186][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.323437][ T5832] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.332473][ T5832] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.341657][ T5832] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.350612][ T5832] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.360313][ T54] Bluetooth: hci1: command tx timeout [ 90.365922][ T5845] Bluetooth: hci2: command tx timeout [ 90.367610][ T5849] Bluetooth: hci3: command tx timeout [ 90.376662][ T5841] veth0_macvtap: entered promiscuous mode [ 90.384055][ T5841] veth1_macvtap: entered promiscuous mode [ 90.409892][ T1149] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.426306][ T1149] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.458017][ T5831] veth0_macvtap: entered promiscuous mode [ 90.466774][ T5841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.477830][ T5841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.488916][ T5841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.499418][ T5841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.512292][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.528026][ T5831] veth1_macvtap: entered promiscuous mode [ 90.542807][ T5841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.552222][ T5840] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 90.555130][ T5841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.579423][ T5841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.590612][ T5841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.602511][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.647998][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.684667][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.705062][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.721104][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.731234][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.745131][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.758374][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.767308][ T5841] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.776877][ T5841] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.785931][ T5841] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.794974][ T5841] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.822181][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.833864][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.845951][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.856971][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.867181][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.877798][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.889782][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.918459][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.921137][ T5831] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.937644][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.946523][ T5831] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.963536][ T5831] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.972881][ T5831] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.068261][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.078263][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.179108][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.208879][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.251150][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.261867][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.302751][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.322242][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.398636][ T3019] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.428555][ T3019] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.677937][ T5899] netlink: 287 bytes leftover after parsing attributes in process `syz.0.1'. [ 92.323050][ T9] cfg80211: failed to load regulatory.db [ 92.374534][ T5849] Bluetooth: hci0: command tx timeout [ 92.435117][ T5849] Bluetooth: hci3: command tx timeout [ 92.446376][ T5849] Bluetooth: hci1: command tx timeout [ 92.454346][ T5849] Bluetooth: hci2: command tx timeout [ 92.555851][ T5901] Zero length message leads to an empty skb [ 94.054761][ T5927] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 94.437647][ T54] Bluetooth: hci0: command tx timeout [ 94.515296][ T5849] Bluetooth: hci2: command tx timeout [ 94.520927][ T5849] Bluetooth: hci1: command tx timeout [ 94.531284][ T54] Bluetooth: hci3: command tx timeout [ 94.677660][ T5933] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 94.683923][ T5933] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 94.705079][ T5937] vcan0: tx drop: invalid da for name 0x000000000000003f [ 94.793666][ T5933] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 94.881687][ T5933] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 94.939603][ T5933] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 95.037143][ T5945] tipc: Started in network mode [ 95.042224][ T5945] tipc: Node identity ee00, cluster identity 4711 [ 95.048130][ T5933] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 95.064624][ T5945] tipc: Node number set to 60928 [ 95.216215][ T5933] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 95.232810][ T5940] process 'syz.3.11' launched '' with NULL argv: empty string added [ 95.241742][ T5933] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 95.463949][ T5933] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 95.502435][ T5933] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 95.540592][ T5933] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 95.582660][ T5933] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 96.675116][ T5845] Bluetooth: hci0: command 0x0c1a tx timeout [ 96.915921][ T5845] Bluetooth: hci1: command 0x0c1a tx timeout [ 97.244895][ T5845] Bluetooth: hci2: command 0x0c1a tx timeout [ 97.557830][ T5845] Bluetooth: hci3: command 0x0c1a tx timeout [ 98.754844][ T5845] Bluetooth: hci0: command 0x0c1a tx timeout [ 98.994925][ T5845] Bluetooth: hci1: command 0x0c1a tx timeout [ 99.324674][ T5845] Bluetooth: hci2: command 0x0c1a tx timeout [ 99.635364][ T5845] Bluetooth: hci3: command 0x0c1a tx timeout [ 100.356413][ T6019] [U] ^@ [ 100.834777][ T5845] Bluetooth: hci0: command 0x0c1a tx timeout [ 101.074597][ T5845] Bluetooth: hci1: command 0x0c1a tx timeout [ 101.404721][ T5845] Bluetooth: hci2: command 0x0c1a tx timeout [ 101.529146][ T6037] netlink: 252 bytes leftover after parsing attributes in process `syz.2.33'. [ 101.714944][ T5845] Bluetooth: hci3: command 0x0c1a tx timeout [ 101.955386][ T6027] could not allocate digest TFM handle [ 102.247749][ T6033] lo: entered allmulticast mode [ 102.472262][ T6032] lo: left allmulticast mode [ 103.996888][ T6044] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 105.555318][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 105.564256][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 107.935739][ T6100] netlink: 4 bytes leftover after parsing attributes in process `syz.3.44'. [ 109.024006][ T6126] netlink: 28 bytes leftover after parsing attributes in process `syz.1.49'. [ 109.080950][ T6126] hsr_slave_0: left promiscuous mode [ 109.160682][ T6126] hsr_slave_1: left promiscuous mode [ 109.358576][ T6131] Process accounting resumed [ 109.707893][ T6141] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 110.814140][ T6153] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 110.882732][ T6153] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 110.883513][ T6153] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 110.883738][ T6153] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 111.064889][ T6162] device-mapper: ioctl: Invalid data size in the ioctl structure: 0 [ 112.264795][ T6168] netlink: 85 bytes leftover after parsing attributes in process `syz.3.59'. [ 112.854583][ T5845] Bluetooth: hci0: command 0x0c1a tx timeout [ 112.914606][ T5845] Bluetooth: hci3: command 0x0c1a tx timeout [ 112.915027][ T54] Bluetooth: hci2: command 0x0c1a tx timeout [ 112.920703][ T5849] Bluetooth: hci1: command 0x0c1a tx timeout [ 112.994065][ T6184] netlink: 330 bytes leftover after parsing attributes in process `syz.0.62'. [ 113.064744][ T6184] mac80211_hwsim hwsim2 ›: renamed from wlan0 (while UP) [ 116.011392][ T6221] netlink: 330 bytes leftover after parsing attributes in process `syz.2.72'. [ 116.061886][ T6221] mac80211_hwsim hwsim6 ›: renamed from wlan0 (while UP) [ 116.633529][ T6231] sg_write: data in/out 2059/169 bytes for SCSI command 0x57-- guessing data in; [ 116.633529][ T6231] program syz.2.76 not setting count and/or reply_len properly [ 116.966486][ T6225] capability: warning: `syz.0.74' uses 32-bit capabilities (legacy support in use) [ 120.330103][ T6279] ovs_: entered promiscuous mode [ 121.547525][ T6297] do_dccp_setsockopt: sockopt(PACKET_SIZE) is deprecated: fix your app [ 121.688129][ T6297] kafs: addr_prefs: Invalid Command [ 121.751574][ T6297] HSR: entered promiscuous mode [ 122.313299][ T6308] netlink: 28 bytes leftover after parsing attributes in process `syz.3.94'. [ 122.440117][ T6308] hsr_slave_1 (unregistering): left promiscuous mode [ 126.543800][ T6349] Invalid ELF header magic: != ELF [ 127.293542][ T6357] do_dccp_getsockopt: sockopt(PACKET_SIZE) is deprecated: fix your app [ 127.952769][ T6355] erspan0: entered allmulticast mode [ 128.914067][ T6387] netlink: 342 bytes leftover after parsing attributes in process `syz.3.108'. [ 132.104025][ T35] erspan0 (unregistering): left allmulticast mode [ 134.002627][ T6464] netlink: 28 bytes leftover after parsing attributes in process `syz.2.120'. syzkaller syzkaller login: [ 134.730675][ T6470] netlink: 28 bytes leftover after parsing attributes in process `syz.3.121'. [ 135.055196][ T6470] netdevsim netdevsim3 netdevsim2: entered allmulticast mode [ 135.313310][ T6480] netlink: 4 bytes leftover after parsing attributes in process `syz.3.124'. [ 136.725299][ T6489] netlink: 28 bytes leftover after parsing attributes in process `syz.3.126'. [ 136.734301][ T6489] bridge_slave_1: left allmulticast mode [ 136.744600][ T6489] bridge_slave_1: left promiscuous mode [ 136.751718][ T6489] bridge0: port 2(bridge_slave_1) entered disabled state [ 136.952186][ T6489] bridge_slave_0: left allmulticast mode [ 136.958585][ T6489] bridge_slave_0: left promiscuous mode [ 136.974893][ T6489] bridge0: port 1(bridge_slave_0) entered disabled state [ 138.128744][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.135491][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 138.519800][ T6476] delete_channel: no stack [ 139.095274][ T6509] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 139.176437][ T6509] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 139.182575][ T6509] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 139.284994][ T6509] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 141.156110][ T5845] Bluetooth: hci0: command 0x0c1a tx timeout [ 141.234665][ T5845] Bluetooth: hci2: command 0x0c1a tx timeout [ 141.234745][ T5849] Bluetooth: hci1: command 0x0c1a tx timeout [ 141.314730][ T5849] Bluetooth: hci3: command 0x0c1a tx timeout [ 144.251533][ T6569] do_dccp_getsockopt: sockopt(PACKET_SIZE) is deprecated: fix your app [ 144.589119][ T6559] bond0: option all_slaves_active: invalid value () [ 148.794820][ T5849] Bluetooth: hci1: Received unexpected HCI Event 0x00 [ 149.204636][ T6608] smc: net device syz_tun applied user defined pnetid ETHTOOL [ 149.955521][ T6610] Invalid ELF header magic: != ELF [ 150.527444][ T6634] Invalid ELF header magic: != ELF [ 151.533159][ T6641] can: request_module (can-proto-0) failed. [ 151.561328][ T6645] HfR: entered promiscuous mode [ 151.721409][ T6645] netlink: 12 bytes leftover after parsing attributes in process `syz.3.158'. [ 151.831998][ T6645] HfR: left promiscuous mode [ 152.842037][ T6655] ima: policy update failed [ 152.849698][ T29] audit: type=1802 audit(4294967309.500:2): pid=6655 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.3.161" res=0 errno=0 [ 153.739663][ T6674] netlink: 28 bytes leftover after parsing attributes in process `syz.3.165'. [ 156.126851][ T6691] netlink: 4 bytes leftover after parsing attributes in process `syz.0.169'. [ 156.156331][ T6694] netlink: 28 bytes leftover after parsing attributes in process `syz.1.170'. [ 156.525915][ T6703] ubi0: attaching mtd0 [ 156.532913][ T6703] ubi0: scanning is finished [ 156.559215][ T6703] ubi0: empty MTD device detected [ 156.696897][ T6709] netlink: 4 bytes leftover after parsing attributes in process `syz.1.174'. [ 156.763038][ T6709] hsr_slave_0: entered promiscuous mode [ 156.809326][ T6709] hsr_slave_0: entered allmulticast mode [ 156.996065][ T6703] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 157.004948][ T6703] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 157.012202][ T6703] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 157.029048][ T6703] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 157.081142][ T6703] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 157.163360][ T6703] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 157.248026][ T6703] ubi0: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 1765604738 [ 157.266473][ T6722] netlink: 330 bytes leftover after parsing attributes in process `syz.2.175'. [ 157.302498][ T6703] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 157.376382][ T6714] ubi0: background thread "ubi_bgt0d" started, PID 6714 [ 157.532757][ T6727] can: request_module (can-proto-0) failed. [ 159.488400][ T6742] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 159.537706][ T6742] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 159.571034][ T6742] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 159.588454][ T6742] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 160.169118][ T6762] Invalid ELF header magic: != ELF [ 160.786754][ T6776] Invalid ELF header magic: != ELF [ 161.346468][ T6782] netlink: 28 bytes leftover after parsing attributes in process `syz.0.186'. [ 161.562939][ T5849] Bluetooth: hci1: command 0x0c1a tx timeout [ 161.562962][ T5845] Bluetooth: hci0: command 0x0c1a tx timeout [ 161.634635][ T5845] Bluetooth: hci3: command 0x0c1a tx timeout [ 161.640768][ T5845] Bluetooth: hci2: command 0x0c1a tx timeout [ 162.782371][ T6796] netlink: 244 bytes leftover after parsing attributes in process `syz.1.189'. [ 162.848365][ T6794] syz.0.190 uses obsolete (PF_INET,SOCK_PACKET) [ 163.886972][ T6807] netlink: 4 bytes leftover after parsing attributes in process `syz.1.192'. [ 168.904855][ T6854] mmap: syz.3.203 (6854) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 170.650847][ T6875] netlink: 28 bytes leftover after parsing attributes in process `syz.0.206'. [ 170.708752][ T6875] ipvlan1: entered allmulticast mode [ 170.734706][ T6875] veth0_vlan: entered allmulticast mode [ 171.261973][ T6898] netlink: 4 bytes leftover after parsing attributes in process `syz.1.211'. [ 173.503058][ T6917] netlink: 28 bytes leftover after parsing attributes in process `syz.3.215'. [ 173.624216][ T6917] bond0: (slave bond_slave_1): Releasing backup interface [ 173.808747][ T6909] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888032b2e000 pfn:0x32b28 [ 173.862395][ T6909] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 173.879601][ T6909] page_type: f0(buddy) [ 173.883973][ T6909] raw: 00fff00000000000 ffffea0000c3dc08 ffffea0000c3d808 0000000000000000 [ 173.921073][ T6909] raw: ffff888032b2e000 0000000000000003 00000000f0000000 0000000000000000 [ 173.933749][ T6909] page dumped because: VM_BUG_ON_PAGE(n > 0 && !((__builtin_constant_p(PG_head) && __builtin_constant_p((uintptr_t)(&page->flags) != (uintptr_t)((void *)0)) && (uintptr_t)(&page->flags) != (uintptr_t)((void *)0) && __builtin_constant_p(*(const unsigned long *)(&page->flags))) ? const_test_bit(PG_head, &page->flags) : _test_bit(PG_head, &page->flags))) [ 173.983447][ T6909] page_owner tracks the page as allocated [ 174.031531][ T6909] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2040(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5206, tgid 5206 (udevd), ts 173839645284, free_ts 173816746832 [ 174.093013][ T6909] post_alloc_hook+0x2d1/0x350 [ 174.124617][ T6909] get_page_from_freelist+0xfce/0x2f80 [ 174.130210][ T6909] __alloc_pages_noprof+0x221/0x2470 [ 174.154821][ T6909] alloc_pages_mpol_noprof+0x2c8/0x620 [ 174.174521][ T6909] new_slab+0x2c9/0x410 [ 174.178782][ T6909] ___slab_alloc+0xbcd/0x1590 [ 174.219600][ T6909] __slab_alloc.constprop.0+0x56/0xb0 [ 174.225214][ T6909] __kmalloc_noprof+0x2de/0x4f0 [ 174.230124][ T6909] tomoyo_realpath_from_path+0xbf/0x710 [ 174.277063][ T6909] tomoyo_path_perm+0x276/0x480 [ 174.282019][ T6909] security_inode_getattr+0x116/0x290 [ 174.322809][ T6909] vfs_fstat+0x4b/0xd0 [ 174.342622][ T6909] vfs_fstatat+0xbc/0xf0 [ 174.368093][ T6909] __do_sys_newfstatat+0x98/0x120 [ 174.373202][ T6909] do_syscall_64+0xcd/0x250 [ 174.412215][ T6909] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 174.422155][ T6909] page last free pid 5822 tgid 5822 stack trace: [ 174.443340][ T6909] free_unref_page+0x661/0x1080 [ 174.463464][ T6909] __folio_put+0x32a/0x450 [ 174.468131][ T6909] put_page+0x21e/0x280 [ 174.473582][ T6909] skb_release_data+0x4d7/0x730 [ 174.491994][ T6909] __kfree_skb+0x4f/0x70 [ 174.501718][ T6909] tcp_ack+0x1eb7/0x5ba0 [ 174.506317][ T6909] tcp_rcv_established+0xcf5/0x20d0 [ 174.511675][ T6909] tcp_v4_do_rcv+0x5ca/0xa90 [ 174.516881][ T6909] __release_sock+0x31b/0x400 [ 174.521642][ T6909] release_sock+0x5a/0x220 [ 174.544650][ T6909] tcp_sendmsg+0x38/0x50 [ 174.590360][ T6909] inet_sendmsg+0xb9/0x140 [ 174.595375][ T6909] sock_write_iter+0x4ac/0x5b0 [ 174.610740][ T6909] vfs_write+0x5ae/0x1150 [ 174.619917][ T6909] ksys_write+0x207/0x250 [ 174.624342][ T6909] do_syscall_64+0xcd/0x250 [ 174.641072][ T6909] ------------[ cut here ]------------ [ 174.646782][ T6909] kernel BUG at ./include/linux/page-flags.h:310! [ 174.689816][ T6909] Oops: invalid opcode: 0000 [#1] PREEMPT SMP KASAN PTI [ 174.696844][ T6909] CPU: 0 UID: 0 PID: 6909 Comm: syz.2.214 Not tainted 6.13.0-syzkaller-02526-gc4b9570cfb63 #0 [ 174.707126][ T6909] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 174.717219][ T6909] RIP: 0010:const_folio_flags+0xdd/0x100 [ 174.722899][ T6909] Code: 49 c1 ec 06 41 83 e4 01 44 89 e6 e8 5d 2a 61 ff 45 84 e4 75 8e e8 b3 2f 61 ff 48 c7 c6 80 0a 82 8b 48 89 ef e8 64 0b a8 ff 90 <0f> 0b e8 8c bc c3 ff e9 44 ff ff ff 48 89 ef e8 7f bc c3 ff eb ba [ 174.742572][ T6909] RSP: 0018:ffffc90004acfc40 EFLAGS: 00010246 [ 174.748711][ T6909] RAX: 0000000000080000 RBX: 0000000000000001 RCX: ffffc9000d6b5000 [ 174.756713][ T6909] RDX: 0000000000080000 RSI: ffffffff8237e5dc RDI: ffff88801cb8de44 [ 174.764725][ T6909] RBP: ffffea0000caca00 R08: 0000000000000001 R09: fffffbfff2dbe3af [ 174.772746][ T6909] R10: ffffffff96df1d7f R11: 00000000000002ec R12: 0000000000000000 [ 174.780757][ T6909] R13: 0000000000010000 R14: 0000000000000001 R15: 0000000000000000 [ 174.788857][ T6909] FS: 00007f3be59df6c0(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 174.797841][ T6909] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 174.804472][ T6909] CR2: 000000000004e000 CR3: 0000000033b6e000 CR4: 00000000003526f0 [ 174.812482][ T6909] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 174.820494][ T6909] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 174.828496][ T6909] Call Trace: [ 174.831799][ T6909] [ 174.834767][ T6909] ? die+0x31/0x80 [ 174.838551][ T6909] ? do_trap+0x232/0x430 [ 174.842864][ T6909] ? const_folio_flags+0xdd/0x100 [ 174.847960][ T6909] ? const_folio_flags+0xdd/0x100 [ 174.853046][ T6909] ? do_error_trap+0xf4/0x230 [ 174.857783][ T6909] ? const_folio_flags+0xdd/0x100 [ 174.862856][ T6909] ? handle_invalid_op+0x34/0x40 [ 174.867847][ T6909] ? const_folio_flags+0xdd/0x100 [ 174.872935][ T6909] ? exc_invalid_op+0x2e/0x50 [ 174.877655][ T6909] ? asm_exc_invalid_op+0x1a/0x20 [ 174.882755][ T6909] ? const_folio_flags+0xdc/0x100 [ 174.887828][ T6909] ? const_folio_flags+0xdd/0x100 [ 174.892896][ T6909] stable_page_flags+0x92a/0xbc0 [ 174.897882][ T6909] kpageflags_read+0x145/0x230 [ 174.902701][ T6909] ? __pfx_kpageflags_read+0x10/0x10 [ 174.908020][ T6909] proc_reg_read+0x11d/0x330 [ 174.912658][ T6909] ? rw_verify_area+0xd0/0x700 [ 174.917467][ T6909] ? __pfx_proc_reg_read+0x10/0x10 [ 174.922627][ T6909] vfs_read+0x1df/0xbe0 [ 174.926827][ T6909] ? __fget_files+0x1fc/0x3a0 [ 174.931549][ T6909] ? __pfx___mutex_lock+0x10/0x10 [ 174.936621][ T6909] ? __pfx_vfs_read+0x10/0x10 [ 174.941357][ T6909] ? __fget_files+0x206/0x3a0 [ 174.946089][ T6909] ksys_read+0x12b/0x250 [ 174.950368][ T6909] ? __pfx_ksys_read+0x10/0x10 [ 174.955182][ T6909] do_syscall_64+0xcd/0x250 [ 174.959742][ T6909] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 174.965706][ T6909] RIP: 0033:0x7f3be4b85d29 [ 174.970197][ T6909] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 174.989852][ T6909] RSP: 002b:00007f3be59df038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 174.998303][ T6909] RAX: ffffffffffffffda RBX: 00007f3be4d75fa0 RCX: 00007f3be4b85d29 [ 175.006287][ T6909] RDX: 0000000000400000 RSI: 0000000000000000 RDI: 0000000000000003 [ 175.014269][ T6909] RBP: 00007f3be4c01b08 R08: 0000000000000000 R09: 0000000000000000 [ 175.022340][ T6909] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 175.030325][ T6909] R13: 0000000000000000 R14: 00007f3be4d75fa0 R15: 00007fff695b0078 [ 175.038316][ T6909] [ 175.041338][ T6909] Modules linked in: [ 175.046129][ T6909] ---[ end trace 0000000000000000 ]--- [ 175.106909][ T6909] RIP: 0010:const_folio_flags+0xdd/0x100 [ 175.116026][ T6909] Code: 49 c1 ec 06 41 83 e4 01 44 89 e6 e8 5d 2a 61 ff 45 84 e4 75 8e e8 b3 2f 61 ff 48 c7 c6 80 0a 82 8b 48 89 ef e8 64 0b a8 ff 90 <0f> 0b e8 8c bc c3 ff e9 44 ff ff ff 48 89 ef e8 7f bc c3 ff eb ba [ 175.148357][ T6909] RSP: 0018:ffffc90004acfc40 EFLAGS: 00010246 [ 175.159602][ T6909] RAX: 0000000000080000 RBX: 0000000000000001 RCX: ffffc9000d6b5000 [ 175.177348][ T6909] RDX: 0000000000080000 RSI: ffffffff8237e5dc RDI: ffff88801cb8de44 [ 175.199026][ T6909] RBP: ffffea0000caca00 R08: 0000000000000001 R09: fffffbfff2dbe3af [ 175.229073][ T6909] R10: ffffffff96df1d7f R11: 00000000000002ec R12: 0000000000000000 [ 175.250603][ T6909] R13: 0000000000010000 R14: 0000000000000001 R15: 0000000000000000 [ 175.277639][ T6909] FS: 00007f3be59df6c0(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 175.304519][ T6909] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 175.324523][ T6909] CR2: 0000000000217000 CR3: 0000000033b6e000 CR4: 00000000003526f0 [ 175.334964][ T6909] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 175.343000][ T6909] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 175.376141][ T6909] Kernel panic - not syncing: Fatal exception [ 175.382605][ T6909] Kernel Offset: disabled [ 175.386932][ T6909] Rebooting in 86400 seconds..