last executing test programs: 6m24.575812959s ago: executing program 2 (id=288): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_ETHTOOL_MSG_FEC_GET(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x5c, 0x0, 0x4, 0x70bd29, 0x25dfdbff, {}, [@ETHTOOL_A_FEC_HEADER={0x7, 0x1, "16f78d"}, @ETHTOOL_A_FEC_HEADER={0x7, 0x1, "86b346"}, @ETHTOOL_A_FEC_HEADER={0x7, 0x1, "a13f04"}, @ETHTOOL_A_FEC_HEADER={0x7, 0x1, "cbf43d"}, @ETHTOOL_A_FEC_HEADER={0x7, 0x1, 'b9z'}, @ETHTOOL_A_FEC_HEADER={0x7, 0x1, "1bc468"}, @ETHTOOL_A_FEC_HEADER={0x7, 0x1, "b8aad6"}, @ETHTOOL_A_FEC_HEADER={0x7, 0x1, "adbc94"}, @ETHTOOL_A_FEC_HEADER={0x7, 0x1, "f56707"}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4004001}, 0x4008080) setsockopt$auto(0x3, 0x29, 0x20, 0xfffffffffffffffd, 0x40000000003) prctl$auto(0x2, 0x200, 0x7, 0x2, 0x1) r2 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) setns(r2, 0x20000000) prctl$auto(0x1d, 0xfffffffffffffffb, 0x8, 0x10000005, 0xfffffffffffffff9) clock_nanosleep$auto(0x7, 0x7fff, &(0x7f0000000040)={0x7, 0x2}, 0x0) r3 = socket(0xa, 0x801, 0x4) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) mmap$auto(0x0, 0x80, 0xfffffffffffffffe, 0x100000001ff, 0xfffffffffefffffa, 0x8000) msync$auto(0x0, 0x5, 0x6) mmap$auto(0x4de4, 0x3, 0xdf, 0x8000009b72, 0x2, 0x8000) r4 = syz_genetlink_get_family_id$auto_gtp(&(0x7f0000000e00), 0xffffffffffffffff) sendmsg$auto_GTP_CMD_ECHOREQ(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="012dfcf83a3d8303cc002abd7000fb000008000200060001414a2d9dce3b"], 0x1c}, 0x1, 0x0, 0x0, 0x2}, 0x40800) sendmmsg$auto(r3, &(0x7f0000000180)={{&(0x7f0000000080)=[0xcb4, 0x7, 0x7, 0x4, 0x2, 0x8], 0xd, &(0x7f0000000100)={&(0x7f00000000c0)=[0x7], 0x8}, 0x6, &(0x7f0000000140)=[0xffffffff, 0x7, 0xb], 0x1, 0x190}, 0x8d}, 0x8, 0x0) 6m23.680602698s ago: executing program 2 (id=290): r0 = socket(0xa, 0x2, 0x0) sendmsg$auto_NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x20040010}, 0x40040c0) mmap$auto(0x0, 0x200006, 0x2, 0x40eb1, 0x602, 0x300000000000) syz_genetlink_get_family_id$auto_cifs(&(0x7f00000000c0), r0) sendmmsg$auto(0x3, &(0x7f0000000000)={{0x0, 0x2, 0x0, 0x106, 0x0, 0x1, 0x3}, 0xed7138c}, 0x7, 0x0) 6m23.582909982s ago: executing program 2 (id=291): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0) r0 = socket(0x2, 0x3, 0xa) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) move_pages$auto(0x1, 0xf54, 0x0, 0x0, 0x0, 0x8000000000000000) (async) setsockopt$auto(0x3, 0x0, 0x60, 0x0, 0x10001) (async) shmget$auto(0xffffffffffffffff, 0xb0d, 0xa7db6ba) socket(0x2, 0x801, 0x100) (async, rerun: 64) connect$auto(0x3, &(0x7f00000000c0)={0x2, @sockaddr_1_1}, 0x55) (rerun: 64) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) (async, rerun: 32) ioctl$auto(0x3, 0x541b, 0x38) (async, rerun: 32) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r2 = syz_genetlink_get_family_id$auto_nbd(&(0x7f0000000200), 0xffffffffffffffff) (rerun: 32) syz_genetlink_get_family_id$auto_nlctrl(&(0x7f0000000040), r0) (async) sendmsg$auto_NBD_CMD_STATUS(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="040000008a2db243eecc6e1f68b032ba48c55f513b5caaf03ff27ebc23ab5ed431ceee9634066e1f551afb261856b4e8d59e370efafde8ab07129358e62beb335299f63acb284eda44959688ff05beedd786837b4ae3fe1a8dc4b1f9aeb0acdb90323b3cc8532bd91df98e60d6af3c8e7f4e4f70b867ccf8e88d063d00551a3e44842de14b0c5f6c3865b268ff1ffb06e48c64104f73f7586b21ba3ac5c362bf7b7d1396f0aa4d05b9730724de4abb2c094feb8b3f45326a72096122a3e8f96ca3d3c81464c8490aade3", @ANYRES16=r2, @ANYBLOB="060220bd0bbd7000f8dbdf250500"], 0x14}, 0x1, 0x0, 0x0, 0x8040}, 0x40) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) bpf$auto(0x9, &(0x7f0000000100)=@prog_bind_map={0x7, 0x0, 0x8}, 0x9) (async, rerun: 64) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) open(0x0, 0x109001, 0x121) (async, rerun: 64) sendmmsg$auto(0x3, &(0x7f0000000000)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xac}, 0x5, 0x0, 0x1, 0x697b}, 0xed7138c}, 0x2, 0x9) (async, rerun: 64) recvmmsg$auto(0x4, 0x0, 0x7, 0xe, 0x0) mknod$auto(&(0x7f0000000180)=':,\x00', 0xc9, 0xfffffffa) execve$auto(&(0x7f0000000000)=':,\x00', 0x0, 0x0) (async) connect$auto(0x3, 0x0, 0x55) (async) listen$auto(0x5, 0x1) (async) fchown$auto(0x0, 0x8000000000000000, 0x0) (async, rerun: 32) semctl$auto(0x0, 0x2, 0x8, 0x5) (async, rerun: 32) socket$nl_generic(0x10, 0x3, 0x10) 6m22.524767651s ago: executing program 2 (id=295): unshare$auto(0x40000080) (async) mprotect$auto(0x1ffff000, 0x8000000000000001, 0x4) (async) syz_genetlink_get_family_id$auto_gtp(0x0, 0xffffffffffffffff) (async) socket(0xa, 0x2, 0x73) setsockopt$auto(0x4, 0x29, 0x3, 0x0, 0x200577) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) r0 = socket(0xa, 0x801, 0x84) shutdown$auto(r0, 0xb8) (async, rerun: 64) inotify_rm_watch$auto(r0, 0x3) (rerun: 64) clone$auto(0x8001, 0x5, 0xffffffffffffffff, 0xfffffffffffffffc, 0x6) (async, rerun: 32) mlockall$auto(0x401) (rerun: 32) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/net\x00') setns(r1, 0x40000000) 6m21.024961274s ago: executing program 2 (id=300): mmap$auto(0x4000000, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x5, 0x0) ioperm$auto(0x5, 0x6, 0xffffffffffffffff) close_range$auto(0x0, 0xfffffffffffff000, 0x2) fanotify_init$auto(0x5, 0x2) socket$nl_generic(0x10, 0x3, 0x10) pidfd_open$auto(0x1, 0x0) pidfd_send_signal$auto(0x2, 0x7, 0x0, 0x1) getsockopt$auto(0x6, 0x40000000084, 0x14, 0xfffffffffffffffe, 0x0) 6m13.401631816s ago: executing program 2 (id=308): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) creat$auto(&(0x7f0000000040)='X))\x00', 0x5) (async) mprotect$auto(0x1ffff000, 0x8000000000000001, 0x4) (async) io_uring_setup$auto(0x6, 0x0) (async) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) (async) mprotect$auto(0x0, 0x0, 0x0) inotify_init1$auto(0x3000000000000) (async) fanotify_init$auto(0x2, 0x40007) r0 = open(0x0, 0x4242, 0x0) fanotify_mark$auto(0x400000000000, 0x4, 0x1, r0, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioperm$auto(0x7, 0x6, 0x2) mmap$auto(0x0, 0x1, 0x7, 0x9b72, 0x80000001, 0x8000000000008000) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) write$auto(0xca, 0x0, 0x10) socket$nl_generic(0x10, 0x3, 0x10) (async) fcntl$auto(0xff80000000000000, 0x406, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2a, 0x5, 0xf) (async) mq_open$auto(&(0x7f0000000200)='#)-\\&[}\x00', 0xde8, 0xb, 0x0) mmap$auto(0x0, 0x40009, 0xe3, 0x9b72, 0x7, 0xc) (async) close_range$auto(0x0, 0xfffffffffffff000, 0x2) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000800)={0x0}, 0x1, 0x0, 0x28, 0x20004084}, 0x48000) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket(0x23, 0x80805, 0x0) (async) memfd_secret$auto(0x0) (async) socket(0xa, 0x801, 0x100) (async) select$auto(0xffffffff, 0x0, &(0x7f0000000100)={[0x20000000000d, 0x203, 0x0, 0xc, 0x9, 0x3, 0x1, 0x2000000000000002, 0x2, 0x5e58296f, 0xff, 0x10, 0x8, 0xaab, 0x5, 0x800000000004006]}, 0x0, 0x0) 6m13.132692485s ago: executing program 32 (id=308): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) creat$auto(&(0x7f0000000040)='X))\x00', 0x5) (async) mprotect$auto(0x1ffff000, 0x8000000000000001, 0x4) (async) io_uring_setup$auto(0x6, 0x0) (async) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) (async) mprotect$auto(0x0, 0x0, 0x0) inotify_init1$auto(0x3000000000000) (async) fanotify_init$auto(0x2, 0x40007) r0 = open(0x0, 0x4242, 0x0) fanotify_mark$auto(0x400000000000, 0x4, 0x1, r0, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioperm$auto(0x7, 0x6, 0x2) mmap$auto(0x0, 0x1, 0x7, 0x9b72, 0x80000001, 0x8000000000008000) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) write$auto(0xca, 0x0, 0x10) socket$nl_generic(0x10, 0x3, 0x10) (async) fcntl$auto(0xff80000000000000, 0x406, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2a, 0x5, 0xf) (async) mq_open$auto(&(0x7f0000000200)='#)-\\&[}\x00', 0xde8, 0xb, 0x0) mmap$auto(0x0, 0x40009, 0xe3, 0x9b72, 0x7, 0xc) (async) close_range$auto(0x0, 0xfffffffffffff000, 0x2) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000800)={0x0}, 0x1, 0x0, 0x28, 0x20004084}, 0x48000) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket(0x23, 0x80805, 0x0) (async) memfd_secret$auto(0x0) (async) socket(0xa, 0x801, 0x100) (async) select$auto(0xffffffff, 0x0, &(0x7f0000000100)={[0x20000000000d, 0x203, 0x0, 0xc, 0x9, 0x3, 0x1, 0x2000000000000002, 0x2, 0x5e58296f, 0xff, 0x10, 0x8, 0xaab, 0x5, 0x800000000004006]}, 0x0, 0x0) 5m41.198322614s ago: executing program 0 (id=338): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) socketpair$auto(0x800, 0x32e, 0xd, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22242, 0x155) socket(0x2, 0x5, 0xef) sethostname$auto(0x0, 0x1) semctl$auto(0x3, 0xfffffffc, 0xfffff001, 0x7) semctl$auto(0x8, 0x8, 0xd, 0x9) clock_adjtime$auto(0x3, 0x0) mkdir$auto(&(0x7f00000001c0)='}[,&*}\x00', 0xc001) mount$auto(0x0, &(0x7f0000000100)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0x10001, 0x0) mprotect$auto(0x1ffff000, 0x8000000000000001, 0x4) open(&(0x7f0000000100)='.\x00', 0x591002, 0x408) bind$auto(0x3, 0x0, 0x6b) capset$auto(&(0x7f0000000040)={0x7, 0xffffffffffffffff}, &(0x7f0000000080)={0x80, 0x8, 0x789aac10}) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000180)='ns/time_for_children\x00') socket(0x11, 0x80003, 0x300) syz_genetlink_get_family_id$auto_nbd(&(0x7f0000000140), 0xffffffffffffffff) ioctl$auto(0x1, 0x541b, 0x8) pwrite64$auto(r1, &(0x7f00000000c0)='2[-+\x00', 0x0, 0x5) clock_nanosleep$auto(0x2, 0x543bae6e, 0x0, 0xfffffffffffffffd) clock_nanosleep$auto(0x2, 0x543bae6e, 0x0, 0xfffffffffffffffd) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_MAC80211_HWSIM(&(0x7f0000000340), r2) sendmsg$auto_HWSIM_CMD_TX_INFO_FRAME(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000380)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002bbd7000fedbdf25030000000a000200f88a8d56b2dd000008000400ff000000"], 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x20000000) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x402, 0x300000000000) syz_open_procfs$namespace(r0, &(0x7f00000022c0)='ns/time_for_children\x00') syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/time\x00') 5m40.626054056s ago: executing program 0 (id=341): r0 = socket$nl_generic(0x10, 0x3, 0x10) msgctl$auto(0x2, 0xc, 0x0) r1 = socket(0x2, 0xa, 0x0) syz_genetlink_get_family_id$auto_nl802154(&(0x7f00000001c0), r1) r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x5, 0x0) setsockopt$auto(0x4, 0x84, 0x2, 0xfffffffffffffffe, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) socket(0xa, 0x2, 0x88) bpf$auto(0x4, &(0x7f0000000000)=@bpf_attr_4={0xffffffffffffff81, 0xffffffffffffffff, 0x3d6, r3}, 0xa0) sendmsg$auto_NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYRES16=r2, @ANYRES32, @ANYRES16=r2, @ANYRES8], 0x24}, 0x1, 0x0, 0x0, 0x20040018}, 0x20000084) mprotect$auto(0x1ffff004, 0x8000000000000001, 0x4) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_SET_WIPHY(r4, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x40080) sendmsg$auto_NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20040010}, 0x20000084) socket$nl_generic(0x10, 0x3, 0x10) (async) msgctl$auto(0x2, 0xc, 0x0) (async) socket(0x2, 0xa, 0x0) (async) syz_genetlink_get_family_id$auto_nl802154(&(0x7f00000001c0), r1) (async) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket(0x2, 0x5, 0x0) (async) setsockopt$auto(0x4, 0x84, 0x2, 0xfffffffffffffffe, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) (async) socket(0xa, 0x2, 0x88) (async) bpf$auto(0x4, &(0x7f0000000000)=@bpf_attr_4={0xffffffffffffff81, 0xffffffffffffffff, 0x3d6, r3}, 0xa0) (async) sendmsg$auto_NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYRES16=r2, @ANYRES32, @ANYRES16=r2, @ANYRES8], 0x24}, 0x1, 0x0, 0x0, 0x20040018}, 0x20000084) (async) mprotect$auto(0x1ffff004, 0x8000000000000001, 0x4) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$auto_NL80211_CMD_SET_WIPHY(r4, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x40080) (async) sendmsg$auto_NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20040010}, 0x20000084) (async) 5m40.463646601s ago: executing program 0 (id=342): ioperm$auto(0x0, 0x4005, 0x5) epoll_pwait2$auto(0x8, 0x0, 0x80, 0x0, 0x0, 0x2) sendmmsg$auto(0x8, &(0x7f0000000080)={{0x0, 0xffff, &(0x7f0000000040)={0x0, 0x5}, 0x5, 0x0, 0x25, 0xfffffffb}, 0x4}, 0x6, 0x1) mmap$auto(0x0, 0x400008, 0xdf, 0xb96, 0x2, 0x8000) mmap$auto(0x0, 0x9, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x240241, 0x1) socket(0x2, 0x1, 0x106) ioctl$auto(0x3, 0x8907, 0xfffffffffffff4e0) dup2$auto(0x0, 0x3) r1 = open$dir(&(0x7f0000000240)='./file0\x00', 0x10000, 0x10) renameat$auto(r0, &(0x7f0000000200)='\x00', r1, &(0x7f0000000280)='\x00') socket(0x1e, 0x1, 0x0) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) mmap$auto(0xf000, 0x8, 0x1000000003, 0x9b72, 0x2, 0x8000) semctl$auto(0x0, 0xfffffffffffffffa, 0x100000001, 0x95cc) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sysfs$auto(0x2, 0x48, 0x0) fsopen$auto(0x0, 0x1) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) socket(0x2, 0x1, 0x106) io_uring_setup$auto(0x6, 0x0) epoll_create$auto(0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) epoll_ctl$auto(0x5, 0x1, r3, 0x0) epoll_ctl$auto(0x5, 0x0, 0x8000000000000000, 0x0) bpf$auto(0x0, &(0x7f0000000000)=@link_update={0xa, @new_map_fd=0x29d, 0x7, @old_map_fd=0x3ff}, 0xa3) 5m40.365654503s ago: executing program 0 (id=343): r0 = socket(0x26, 0x80000, 0xfefffffc) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) connect$auto(r0, 0x0, 0x6) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) rseq$auto(&(0x7f0000000300)={0xe, 0x401, 0x0, 0x6, 0xffffffff, 0x2}, 0x8002, 0x0, 0x6) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mmap$auto(0x0, 0x2020009, 0xa, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x80000005) madvise$auto(0x0, 0xffffffffffff0001, 0x15) madvise$auto(0x0, 0xffffffffffff0005, 0x19) settimeofday$auto(0x0, &(0x7f0000000100)={0x4, 0x8}) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x5, 0x7cc39465, 0xdf, 0x9b72, 0x89d31a6, 0x8004) ioctl$auto(r1, 0x5411, 0x28) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x9, 0xffffffffffffffff, 0x8, 0x15, 0x8001, 0x1) socket$nl_generic(0x10, 0x3, 0x10) syz_open_procfs$namespace(0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) rseq$auto(0x0, 0x8000, 0x0, 0x6) setregid$auto(0x81, 0x5) clone$auto(0x7fff, 0xfe, 0x0, 0x0, 0x7) r2 = socket$nl_generic(0x10, 0x3, 0x10) mbind$auto(0x0, 0x100000004, 0x100000000, 0x0, 0x20000000000006, 0x2) madvise$auto(0x0, 0xff7fffffffff0005, 0x9) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r3 = syz_genetlink_get_family_id$auto_netdev(&(0x7f0000000840), r2) sendmsg$auto_NETDEV_CMD_NAPI_GET0(r1, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYRES8=r2, @ANYRES16=r3, @ANYBLOB="01002bbd7000ffdbdf250b000000"], 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040080) socket$nl_generic(0x10, 0x3, 0x10) 5m40.052020348s ago: executing program 0 (id=345): r0 = open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x100) fallocate$auto(0x8000000000000003, 0x0, 0xd, 0xcbd5d) copy_file_range$auto(r0, &(0x7f0000000140)=0xffff, r0, &(0x7f0000000180)=0x80, 0x21c1, 0x0) r1 = socket(0xa, 0x2, 0x3a) setsockopt$auto(r1, 0x6, 0xffffff81, &(0x7f0000000040)='$\\{{?\xf3\x00', 0x3) 5m39.921512234s ago: executing program 0 (id=346): mmap$auto(0x0, 0x8, 0x2, 0x9b72, 0x5, 0x0) socket(0xa, 0x801, 0x106) io_uring_setup$auto(0x6, 0x0) listen$auto(0x3, 0x83) socket(0x2c, 0x3, 0x0) statmount$auto(0x0, &(0x7f0000000040)={0x1, 0xfffffffe, 0x36, 0x828, 0x9, 0x8000000000000000, 0x8, 0x7, 0x9, 0x5, 0x2, 0x9, 0x5, 0x8, 0x5, 0xf, 0x100, 0x80000000, 0x10001, 0x3, [0x9, 0x7f, 0x77, 0x4, 0x7fffffffffffffff, 0xe06, 0x400, 0x3, 0x80000000, 0x8, 0x4, 0x7ffffffffffffff9, 0x10, 0x3, 0x35c4, 0x1, 0x5, 0x8, 0xea8, 0xb2fa, 0xd9, 0x8, 0x5, 0xffffffffffffffff, 0x202, 0x7fffffffffffffff, 0x8000000000000004, 0x5a2c, 0x3, 0x8000000000000000, 0x2aa, 0x8, 0x7ff, 0x1, 0x5, 0x2, 0xffffffffffff0000, 0x6b, 0xf, 0x5, 0x2b7, 0x4, 0xf, 0xffffffffffffff26, 0x8, 0x4, 0x6, 0x7a, 0x20000000000000dc]}, 0xe3c, 0x0) r0 = socket(0x10, 0x2, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_ila(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_ILA_CMD_FLUSH(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r2, 0x1, 0x70bd2b, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x20000900) sendmsg$auto_NFSD_CMD_THREADS_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="2c0000001400"], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x400c000) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_OVS_METER_CMD_SET(r3, &(0x7f0000002b40)={0x0, 0x0, &(0x7f0000002b00)={0x0}, 0x1, 0x0, 0x0, 0x8080}, 0x4004004) syz_genetlink_get_family_id$auto_IPVS(&(0x7f0000002c80), r3) mmap$auto(0x0, 0x7c172540, 0x4000000000df, 0x40eb2, 0x402, 0x300000000000) mlockall$auto(0x7) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) socket$nl_generic(0x10, 0x3, 0x10) mq_open$auto(0x0, 0x3, 0xc0, &(0x7f0000000040)={0xe10, 0x15af, 0x9, 0x1b}) close_range$auto(0x0, 0xfffffffffffff001, 0x2) socket(0x9, 0x1, 0xb) socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_REMOVE_LINK(0xffffffffffffffff, &(0x7f0000001540)={&(0x7f00000013c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001500)={&(0x7f0000000240)=ANY=[@ANYRESHEX=r2, @ANYRES8=r1, @ANYRES16=r0], 0x5c}}, 0x800) connect$auto(0x3, &(0x7f0000000040)={0xa, @sa_data_min="c4aeed448dc7fe8000"}, 0x55) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$auto(0x5, &(0x7f0000000000)=@iter_create={0xf14, 0xf4240}, 0x7) ioperm$auto(0x7, 0x5, 0x15) socket(0x23, 0x2, 0x0) pipe$auto(0x0) 5m24.850036672s ago: executing program 33 (id=346): mmap$auto(0x0, 0x8, 0x2, 0x9b72, 0x5, 0x0) socket(0xa, 0x801, 0x106) io_uring_setup$auto(0x6, 0x0) listen$auto(0x3, 0x83) socket(0x2c, 0x3, 0x0) statmount$auto(0x0, &(0x7f0000000040)={0x1, 0xfffffffe, 0x36, 0x828, 0x9, 0x8000000000000000, 0x8, 0x7, 0x9, 0x5, 0x2, 0x9, 0x5, 0x8, 0x5, 0xf, 0x100, 0x80000000, 0x10001, 0x3, [0x9, 0x7f, 0x77, 0x4, 0x7fffffffffffffff, 0xe06, 0x400, 0x3, 0x80000000, 0x8, 0x4, 0x7ffffffffffffff9, 0x10, 0x3, 0x35c4, 0x1, 0x5, 0x8, 0xea8, 0xb2fa, 0xd9, 0x8, 0x5, 0xffffffffffffffff, 0x202, 0x7fffffffffffffff, 0x8000000000000004, 0x5a2c, 0x3, 0x8000000000000000, 0x2aa, 0x8, 0x7ff, 0x1, 0x5, 0x2, 0xffffffffffff0000, 0x6b, 0xf, 0x5, 0x2b7, 0x4, 0xf, 0xffffffffffffff26, 0x8, 0x4, 0x6, 0x7a, 0x20000000000000dc]}, 0xe3c, 0x0) r0 = socket(0x10, 0x2, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_ila(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_ILA_CMD_FLUSH(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r2, 0x1, 0x70bd2b, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x20000900) sendmsg$auto_NFSD_CMD_THREADS_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="2c0000001400"], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x400c000) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_OVS_METER_CMD_SET(r3, &(0x7f0000002b40)={0x0, 0x0, &(0x7f0000002b00)={0x0}, 0x1, 0x0, 0x0, 0x8080}, 0x4004004) syz_genetlink_get_family_id$auto_IPVS(&(0x7f0000002c80), r3) mmap$auto(0x0, 0x7c172540, 0x4000000000df, 0x40eb2, 0x402, 0x300000000000) mlockall$auto(0x7) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) socket$nl_generic(0x10, 0x3, 0x10) mq_open$auto(0x0, 0x3, 0xc0, &(0x7f0000000040)={0xe10, 0x15af, 0x9, 0x1b}) close_range$auto(0x0, 0xfffffffffffff001, 0x2) socket(0x9, 0x1, 0xb) socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_REMOVE_LINK(0xffffffffffffffff, &(0x7f0000001540)={&(0x7f00000013c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001500)={&(0x7f0000000240)=ANY=[@ANYRESHEX=r2, @ANYRES8=r1, @ANYRES16=r0], 0x5c}}, 0x800) connect$auto(0x3, &(0x7f0000000040)={0xa, @sa_data_min="c4aeed448dc7fe8000"}, 0x55) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$auto(0x5, &(0x7f0000000000)=@iter_create={0xf14, 0xf4240}, 0x7) ioperm$auto(0x7, 0x5, 0x15) socket(0x23, 0x2, 0x0) pipe$auto(0x0) 4m55.207997372s ago: executing program 4 (id=489): r0 = socket$nl_generic(0x10, 0x3, 0x10) set_mempolicy$auto(0x6, &(0x7f0000000000)=0x7e, 0x4) r1 = syz_genetlink_get_family_id$auto_MAC80211_HWSIM(&(0x7f0000000640), r0) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000380)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010025bd7000fcdbdf250400000006000b00245c0000"], 0x1c}, 0x1, 0x0, 0x0, 0x20004084}, 0x48000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_MAC80211_HWSIM(&(0x7f0000000640), 0xffffffffffffffff) ppoll$auto(&(0x7f0000000100)={r0, 0x55bc, 0x7}, 0x9eba, &(0x7f0000000140)={0x5852, 0x1000}, &(0x7f00000001c0)={0xfffffffffffffffc}, 0x1) r5 = syz_genetlink_get_family_id$auto_IPVS(&(0x7f0000000280), r2) sendmsg$auto_IPVS_CMD_NEW_DAEMON(r4, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000002c0)={&(0x7f00000003c0)={0x15c, r5, 0x100, 0x70bd29, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7fff}, @IPVS_CMD_ATTR_DEST={0xbc, 0x2, "a182572a47a26ec74e1ec9d4b67f46216ffbe58c4cf648b9461dc952988d325c1fca8119d621e9cfffd62f4b379066c399b37e9137cf5ba72eea8da08bf2d800e2e30c6723979c81414a508705e07594721a854c88f8bd10e4763dc15edb39544c5d9bc33f9f577d75c9b36a08766b15f850f0e67a8467fdbb2a6b7eb15f90f0dc3d10619f182399750dbfc931413754a55b03b6a3b91d0a44398ca94a390f2485b57b4df2f3b278150e0cc8aceedc01f41308e8c8a1f60c"}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}, @IPVS_CMD_ATTR_SERVICE={0x7a, 0x1, "8f988b0add7eaeefbb2ad9a66f7427a42615e39d97057d0ce535163719bc2a40321972f6dbcf664360ab5ecb9e7345e67131d887df8cdf69f8b1a960372b3eab1015b7c472838474859f1be18c63859403cfa8cf840eff781595f3a0d45cf6961a9e7736adefa2a767b9bbb73cb36390ee027216b3e7"}]}, 0x15c}, 0x1, 0x0, 0x0, 0x8080}, 0x1) r6 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) timerfd_create$auto(0x9, 0x0) io_uring_setup$auto(0x6, 0x0) msync$auto(0x1ffff000, 0x80100000000005, 0x400000004) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r6, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x60, r3, 0x1, 0x70bd25, 0x25dfdbfb, {}, [@HWSIM_ATTR_REG_STRICT_REG={0x4}, @HWSIM_ATTR_ADDR_RECEIVER={0x19, 0x1, "59ca93e9ec0a0a335797010099a4fee023a134f7be"}, @HWSIM_ATTR_USE_CHANCTX={0x4}, @HWSIM_ATTR_RADIO_NAME={0x5, 0x11, '.'}, @HWSIM_ATTR_ADDR_TRANSMITTER={0x1f, 0x2, "a310e2f4d070ee770d2d53225b7f8f2050f235c2e28617594a305e"}]}, 0x60}, 0x1, 0x0, 0x0, 0x20005811}, 0x4048040) r7 = syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000900), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$auto_BATADV_CMD_GET_HARDIF(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="1c000000062e372d0cb4489fa4ad4fbd28ea19a45ca17d6f32e91e3506ec020000000000000039c45f22915e9bb6db9c7373910ec53af2db", @ANYRES16=r7, @ANYBLOB="010027bd7000fbdbdf250500000008000300", @ANYRES32=r9, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x4800}, 0x4000800) 4m54.287495944s ago: executing program 4 (id=492): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) set_mempolicy$auto(0x8003, &(0x7f0000000280)=0x7b, 0x4) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) socket(0x1, 0x2, 0x0) r0 = socket(0x2b, 0x1, 0x1) sendmsg$auto_MACSEC_CMD_ADD_RXSA(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000280)={&(0x7f0000000040)={0x210, 0x0, 0x300, 0x70bd2d, 0x25dfdbff, {}, [@MACSEC_ATTR_IFINDEX={0x8}, @MACSEC_ATTR_OFFLOAD={0xf9, 0x9, "a7acdf90fe46137a133de1951d2065331639fe56974a4cad1d9d8549d1bbb6b136ce6e52d92726b4c50d655d608820407960446e333c51cac168a71381d40550917f1bbcc5cc261e70572cb262800adf25d8c2b29ecfbbedbb0fbc12e7e653dad061c0ad0cd288c1649d2fcabc365e00bd27f7514369c2f00cf03f0e21341bb01ac663d15f0eb640f3611f304a9ff30d21abbb6ffd3d7ca356aa8cbb59e2133c29b2dd9478987d62f536550c60ac63e4bff8493af7dda35275a64c0a91b526380b8b946af78f7f420bad9c5440e2f151d1b813e5f5c8abb059e5d11a277c649ee51cdc69df48fc7d65cd6b921a51bfdf92cf281a7c"}, @MACSEC_ATTR_RXSC_CONFIG={0xf8, 0x2, "cb9c29c86097ceaee9e4e5f2ead8f5e12d811b2cc5d1356750accb377e55b113a8a374cd8dae0a215670302ddfa2a3d52d10cbb30db70738cc3dccf5fdc58af7fbad14b4cc049067521a024771a7f70e29451d98dcf4530900d4920fc734de583e17019f6519e671809cbe23c48e4a2d7c037b86f1039f98f08e4f753c0f1ac71bc261dc7dfa99f72a97209f3055ebc2b6feec6a28ad18e2a8719752204e6b6f8cc008355f3a7c8310b306a22d5493608a1a5b682ff2ba4debf987a896bfee2ac0dcf83f04c8029959e8b716526ecab3e7b859c3b3e40200d8b81ba2e0ec83501a3bcf4b9a9831defa3843c60438b3b8272f020e"}]}, 0x210}, 0x1, 0x0, 0x0, 0x4}, 0xc040) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) lsm_list_modules$auto(0x0, 0x0, 0x0) getsockopt$auto(0x6, 0x40000000029, 0x50, 0xfffffffffffffffe, 0x0) 4m53.179681389s ago: executing program 4 (id=498): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_MAC80211_HWSIM(&(0x7f0000000640), r0) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000380)={0x1c, r1, 0x0, 0x70bd25, 0x25dfdbfc, {}, [@HWSIM_ATTR_REG_HINT_ALPHA2={0x6, 0xb, '$\\'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004084}, 0x48000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_MAC80211_HWSIM(&(0x7f0000000640), 0xffffffffffffffff) ppoll$auto(&(0x7f0000000100)={r0, 0x55bc, 0x7}, 0x9eba, &(0x7f0000000140)={0x5852, 0x1000}, &(0x7f00000001c0)={0xfffffffffffffffc}, 0x1) r5 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000540), r4) sendmsg$auto_ETHTOOL_MSG_DEBUG_GET(r2, &(0x7f0000000600)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x34, r5, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@ETHTOOL_A_DEBUG_HEADER={0x7, 0x1, "b095d6"}, @ETHTOOL_A_DEBUG_HEADER={0x7, 0x1, "76d916"}, @ETHTOOL_A_DEBUG_HEADER={0x7, 0x1, "a17b7c"}, @ETHTOOL_A_DEBUG_HEADER={0x7, 0x1, "44937e"}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000080}, 0x1) r6 = syz_genetlink_get_family_id$auto_IPVS(&(0x7f0000000280), r2) sendmsg$auto_IPVS_CMD_NEW_DAEMON(r4, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000002c0)={&(0x7f00000003c0)={0x15c, r6, 0x100, 0x70bd29, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7fff}, @IPVS_CMD_ATTR_DEST={0xbc, 0x2, "a182572a47a26ec74e1ec9d4b67f46216ffbe58c4cf648b9461dc952988d325c1fca8119d621e9cfffd62f4b379066c399b37e9137cf5ba72eea8da08bf2d800e2e30c6723979c81414a508705e07594721a854c88f8bd10e4763dc15edb39544c5d9bc33f9f577d75c9b36a08766b15f850f0e67a8467fdbb2a6b7eb15f90f0dc3d10619f182399750dbfc931413754a55b03b6a3b91d0a44398ca94a390f2485b57b4df2f3b278150e0cc8aceedc01f41308e8c8a1f60c"}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}, @IPVS_CMD_ATTR_SERVICE={0x7a, 0x1, "8f988b0add7eaeefbb2ad9a66f7427a42615e39d97057d0ce535163719bc2a40321972f6dbcf664360ab5ecb9e7345e67131d887df8cdf69f8b1a960372b3eab1015b7c472838474859f1be18c63859403cfa8cf840eff781595f3a0d45cf6961a9e7736adefa2a767b9bbb73cb36390ee027216b3e7"}]}, 0x15c}, 0x1, 0x0, 0x0, 0x8080}, 0x1) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$auto_wireguard(&(0x7f0000000040), 0xffffffffffffffff) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_ETHTOOL_MSG_PRIVFLAGS_SET(r7, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x80, r5, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@ETHTOOL_A_PRIVFLAGS_HEADER={0x7, 0x1, "755f9a"}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x7, 0x1, "bcee3c"}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x7, 0x1, "f78328"}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0x3a, 0x2, "c34804b9dc6319bff8edd764718000c4e82004a014601470d5b550170f9eb47ce8ac670b717b1d917f38307221e7daed402eee4677ef"}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x7, 0x1, "80c22b"}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x7, 0x1, "da03f4"}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x7, 0x1, "838a03"}]}, 0x80}}, 0x8800) socket(0x10, 0x3, 0x6) sendmsg$auto_WG_CMD_GET_DEVICE(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=r9, @ANYBLOB="01002dbd70003ec89f8d5c2501"], 0x14}, 0x1, 0x0, 0x0, 0x8d1}, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x400000000000, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) setrlimit$auto(0x1000000007, 0x0) timerfd_create$auto(0x9, 0x0) io_uring_setup$auto(0x6, 0x0) msync$auto(0x1ffff000, 0x80100000000005, 0x400000004) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r10, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x60, r3, 0x1, 0x70bd25, 0x25dfdbfb, {}, [@HWSIM_ATTR_REG_STRICT_REG={0x4}, @HWSIM_ATTR_ADDR_RECEIVER={0x19, 0x1, "59ca93e9ec0a0a335797010099a4fee023a134f7be"}, @HWSIM_ATTR_USE_CHANCTX={0x4}, @HWSIM_ATTR_RADIO_NAME={0x5, 0x11, '.'}, @HWSIM_ATTR_ADDR_TRANSMITTER={0x1f, 0x2, "a310e2f4d070ee770d2d53225b7f8f2050f235c2e28617594a305e"}]}, 0x60}, 0x1, 0x0, 0x0, 0x20005811}, 0x4048040) r11 = syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000900), 0xffffffffffffffff) r12 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f00000000c0)={'virt_wifi0\x00', 0x0}) sendmsg$auto_BATADV_CMD_GET_HARDIF(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x1c, r11, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r13}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4800}, 0x4000800) 4m52.304242958s ago: executing program 4 (id=501): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0xc0189436, 0x0) r1 = socket(0xa, 0x3, 0x2f) mmap$auto(0x0, 0xa, 0xa, 0x9b72, 0x8000005, 0x8000) select$auto(0xfffffffd, 0x0, &(0x7f0000000100)={[0x0, 0xf, 0xfffffffffffffffa, 0x6, 0x9, 0x0, 0x8000000000000001, 0x2802000000000002, 0x9, 0xde582971, 0xfd, 0x9, 0x4, 0xffff, 0x1, 0xb]}, 0x0, 0x0) connect$auto(0x3, &(0x7f0000000140)={0xa, @sa_data_min="c4aeed448dc7fe8000"}, 0x55) getpeername$auto(r1, &(0x7f0000000000)={0x7fff, @sockaddr_1_1={"fed70e445ca635faa385fc817910bfbcc3c5577b81e822b27a95abef78a4837648ddabf01780717b4cdd62dce53157faf86dee1daa8f7cf9818d0541ccb6a913039fa61f78ed7d2eaef111e080d653c8637ca11d1d8475"}}, &(0x7f0000000080)=0x4) futex$auto(0x0, 0x6, 0x47, 0x0, 0x0, 0x0) setsockopt$auto(0x3, 0x1, 0x41, 0x0, 0x8) sendmsg$auto_IPVS_CMD_SET_CONFIG(r1, 0x0, 0x4045880) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX(r0, 0xc0189436, 0x0) (async) socket(0xa, 0x3, 0x2f) (async) mmap$auto(0x0, 0xa, 0xa, 0x9b72, 0x8000005, 0x8000) (async) select$auto(0xfffffffd, 0x0, &(0x7f0000000100)={[0x0, 0xf, 0xfffffffffffffffa, 0x6, 0x9, 0x0, 0x8000000000000001, 0x2802000000000002, 0x9, 0xde582971, 0xfd, 0x9, 0x4, 0xffff, 0x1, 0xb]}, 0x0, 0x0) (async) connect$auto(0x3, &(0x7f0000000140)={0xa, @sa_data_min="c4aeed448dc7fe8000"}, 0x55) (async) getpeername$auto(r1, &(0x7f0000000000)={0x7fff, @sockaddr_1_1={"fed70e445ca635faa385fc817910bfbcc3c5577b81e822b27a95abef78a4837648ddabf01780717b4cdd62dce53157faf86dee1daa8f7cf9818d0541ccb6a913039fa61f78ed7d2eaef111e080d653c8637ca11d1d8475"}}, &(0x7f0000000080)=0x4) (async) futex$auto(0x0, 0x6, 0x47, 0x0, 0x0, 0x0) (async) setsockopt$auto(0x3, 0x1, 0x41, 0x0, 0x8) (async) sendmsg$auto_IPVS_CMD_SET_CONFIG(r1, 0x0, 0x4045880) (async) 4m51.919793782s ago: executing program 4 (id=503): syz_open_procfs$namespace(0x0, &(0x7f00000022c0)='ns/time_for_children\x00') socket(0xa, 0x3, 0x73) alarm$auto(0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) shutdown$auto(0x200000003, 0x2) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0) memfd_create$auto(&(0x7f0000000000)='A^^\x02\x00\xef\x97\x8aY\x00\x00\x100\xc1\xd2\x01\\\xb2\xbf247{\xde\t8\f\x00\x00\x17\x85J\x14\"K\xe1IIT\x00'/54, 0x2) fallocate$auto(0x3, 0x0, 0xe, 0x8ec5) finit_module$auto(0x3, 0xfffffffffffffffe, 0x400000000004) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) sendmsg$auto_NL802154_CMD_SET_CCA_ED_LEVEL(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x40005) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socket(0x18, 0xa, 0xc) tkill$auto(0x80000000000001, 0x7) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_TASKSTATS(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_TASKSTATS_CMD_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="01e78c5c002abd7000fcdbdf250100000008", @ANYRES32=0x1, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x8001}, 0x20011030) bind$auto(0x3, &(0x7f0000000000)={0x10, @sa_data_min="d059b8a5b5bce4bdf082c36111fd"}, 0xf) close_range$auto(0x2, 0x8000, 0x0) setreuid$auto(0xffffffffffffffff, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x280, 0x100) r3 = open(&(0x7f0000000040)='./file0\x00', 0x84c1, 0x0) poll$auto(&(0x7f00000000c0)={r2, 0xd, 0x9}, 0x10, 0x2) read$auto(r4, &(0x7f0000000100)='+*\x00', 0x5) lseek$auto(r3, 0x1000, 0x72) setresuid$auto(0xd, 0x0, 0x221) setrlimit$auto(0x6, &(0x7f0000000140)={0x0, 0x6}) 4m50.979138289s ago: executing program 4 (id=506): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x3fd, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) socket(0xf, 0x3, 0x2) io_uring_setup$auto(0x6, 0x0) read$auto(0x3, 0x0, 0x80) (async) unshare$auto(0x40000080) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) madvise$auto(0x0, 0xffffffffffff0005, 0x19) (async) close_range$auto(0x0, 0xfffffffffffff000, 0x2) fanotify_init$auto(0x5, 0x2000000000002) socket(0x26, 0x80805, 0x0) (async) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000000c0)='ns/ipc\x00') (async) open(&(0x7f0000000040)='./cgroup\x00', 0x745240, 0x40) fanotify_init$auto(0x4, 0x2000000002) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket(0x10, 0x2, 0xc) socket(0x11, 0x3, 0x4) bind$auto(0x7, &(0x7f0000000080)={0x11, @sockaddr_1_1={"648301"}}, 0x3e) (async) close_range$auto(0x2, 0x8000, 0x0) (async) open(0x0, 0x22240, 0x155) (async) open(0x0, 0xa240, 0x1de) 4m50.789710547s ago: executing program 34 (id=506): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x3fd, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) socket(0xf, 0x3, 0x2) io_uring_setup$auto(0x6, 0x0) read$auto(0x3, 0x0, 0x80) (async) unshare$auto(0x40000080) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) madvise$auto(0x0, 0xffffffffffff0005, 0x19) (async) close_range$auto(0x0, 0xfffffffffffff000, 0x2) fanotify_init$auto(0x5, 0x2000000000002) socket(0x26, 0x80805, 0x0) (async) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000000c0)='ns/ipc\x00') (async) open(&(0x7f0000000040)='./cgroup\x00', 0x745240, 0x40) fanotify_init$auto(0x4, 0x2000000002) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket(0x10, 0x2, 0xc) socket(0x11, 0x3, 0x4) bind$auto(0x7, &(0x7f0000000080)={0x11, @sockaddr_1_1={"648301"}}, 0x3e) (async) close_range$auto(0x2, 0x8000, 0x0) (async) open(0x0, 0x22240, 0x155) (async) open(0x0, 0xa240, 0x1de) 34.525146179s ago: executing program 5 (id=1547): mmap$auto(0x0, 0x8, 0x1000000004, 0x9b72, 0x20000000003, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x3, 0x7) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0xa, 0x5, 0x0) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x40008000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) bpf$auto(0x5, &(0x7f0000000000)=@iter_create={0x1c, 0x5}, 0x7) shutdown$auto(0x200000003, 0x2) socket(0xa, 0x2, 0x0) select$auto(0x6d0c, 0x0, &(0x7f0000000180)={[0xd, 0x200, 0x800000000000008, 0xc, 0x9, 0x3, 0x6, 0x1, 0x40009, 0xcd16, 0x4000000000000000, 0x14, 0x93, 0x8, 0x8, 0x6]}, 0x0, 0x0) connect$auto(0x3, &(0x7f0000000140)={0xa, @sa_data_min="c4aeed448dc7fe8000"}, 0x55) connect$auto(0x3, &(0x7f00000018c0)={0x2, @sa_data_min="915bac14140ba3df94bb303b2f9d"}, 0x55) mmap$auto(0x4, 0x7, 0x1, 0xf0f7, 0x2, 0xee0d) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x11, 0x80003, 0x300) write$auto(0x3, 0x0, 0xfdef) io_uring_setup$auto(0x6, 0x0) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) connect$auto(0x3, &(0x7f0000000000)={0x2, @sockaddr_1_1}, 0x55) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nbd(&(0x7f0000000ec0), 0xffffffffffffffff) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) dup2$auto(0x0, 0x4) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x300, 0x0) sendmsg$auto_NBD_CMD_DISCONNECT(r1, 0x0, 0x4000040) dup2$auto(r2, r0) ioperm$auto(0x7, 0x6, 0x2) kcmp$auto(0x1, 0x1, 0x0, 0x100000004, 0x100000001) 32.339766825s ago: executing program 1 (id=1558): r0 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket(0x10, 0x2, 0x0) statx$auto(0xffffffffffffffff, 0x0, 0x6, 0x847, &(0x7f00000002c0)={0x7, 0x7fffffff, 0xfffffffffffffbce, 0x200, 0x0, 0x0, 0x4, 0x783, 0xa, 0x100000001, 0xfff, 0x2, {0x9, 0xd4}, {0x8, 0x7fff}, {0xcd, 0x2}, {0x5, 0x5}, 0xfffffffc, 0xed0, 0xbe4b, 0x7fffffff, 0x9, 0xfff, 0x1, 0x3bf, 0xb9, 0x8, 0x80, 0x2, [0xa7, 0x3, 0x2, 0x6, 0x1, 0x0, 0x2, 0x3, 0x1]}) sendmsg$auto_CTRL_CMD_GETFAMILY(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="01002abd77dcb7fcdf25030000000a"], 0x24}, 0x1, 0x0, 0x0, 0x4008810}, 0x30040005) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000040), 0xffffffffffffffff) prctl$auto(0x4, 0x5, 0x1d15, 0x3ff, 0x1) sendmsg$auto_BATADV_CMD_GET_ROUTING_ALGOS(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r3, 0x303, 0x70bd27, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x8050}, 0x4000004) mprotect$auto(0x1ffff000, 0x8000000000000001, 0x4) sendmsg$auto_NFSD_CMD_THREADS_SET(r1, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x8044) 32.168811145s ago: executing program 6 (id=1560): socket(0xa, 0x2, 0x88) connect$auto(0x3, &(0x7f00000000c0)={0x2, @sockaddr_1_1}, 0x55) connect$auto(0x3, &(0x7f0000000000)={0x2, @sa_data_min="0800e00000000000c1728d2af766"}, 0x55) ioperm$auto(0x7, 0x6, 0x2) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) getpeername$auto(0x3, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mknod$auto(&(0x7f0000000000)='}[,&*}\x00', 0x1, 0x4) prctl$auto(0x59616d61, 0xffffffffffffffff, 0x6, 0x8, 0xfff) prctl$auto(0x59616d61, 0x0, 0x2, 0xffffffffffffffff, 0x8) mknod$auto(&(0x7f0000000040)='Vq\xf4\xc4z6\xb9\x00', 0x2, 0x401) mount$auto(&(0x7f0000000280), &(0x7f00000000c0)='}[,&*}\x00', 0x0, 0xb71e, 0x0) mount$auto(0x0, &(0x7f00000002c0)='}[,&*}\x00\xdfz\xa0\xac\xb3\xd0\xb7|\x00'/31, &(0x7f0000000100)='nf\xbe\x9b\x8e\x12\xbe`\xcdG2\xd9sl\x00', 0xffff, 0x0) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0xa, 0x5, 0x0) bpf$auto(0x16, &(0x7f0000000000)=@info={0x2800, 0x1ff, 0x2}, 0xcf) select$auto(0x3, 0x0, &(0x7f0000000100)={[0xd, 0x200, 0x0, 0xc, 0x8, 0x3, 0x6, 0x2, 0x9, 0x5e582970, 0x4000000000000000, 0x2, 0x4, 0x5, 0x8, 0x6]}, 0x0, 0x0) connect$auto(r0, &(0x7f0000000180)={0xa, @sockaddr_1_1={"0046c3e0b8b57e80e14e4f1b0cd5a0542405c7539746230bbecb17e4bed3046ab48b0e840dea80adb29f051d51ce91c5f6de4de4b5fd734c00fda354cdd19d861722e083e603110ac51af45b9919fd39997dd3f6e2b9cc2181a3bd8275ecc7a1d42797a0ebdb960cacac30653c9349ab4e61b764e973af5d7ad8d0fdf02809f1b8ab434c44b5765657bde39c5345145ad6c2e0828d86bbbd"}}, 0x55) connect$auto(0x3, &(0x7f0000000000)={0x2, @sockaddr_1_1={"d9ef7f"}}, 0x55) arch_prctl$auto(0x1022, 0x0) setsockopt$auto(0x3, 0x0, 0x1, 0x0, 0x9) write$auto(0x3, 0x0, 0xfdef) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) madvise$auto(0x0, 0xffffffffffff0001, 0x17) mremap$auto(0x4000, 0xfee0, 0x3fd6, 0x3, 0x18000) ioctl$auto(0xc8, 0x400454d1, 0x5c8d) 32.021572356s ago: executing program 1 (id=1562): mmap$auto(0x100001000000, 0x2, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) mmap$auto(0x100000000000, 0xffa, 0xdf, 0x9b72, 0x402, 0x28000) mmap$auto(0x100000000000, 0x4000d, 0xdf, 0x9b72, 0x9, 0x28000) connect$auto(0xffffffffffffffff, &(0x7f0000000080)={0x870e, @sockaddr_1_1}, 0x7) mmap$auto(0x0, 0x8, 0x1000000004, 0x9b72, 0x2, 0x8000) rt_sigsuspend$auto(0x0, 0x8) mprotect$auto(0x1ffff000, 0x8000000000000001, 0x4) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) socket(0xa, 0x1, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) socket(0x22, 0x5, 0x0) memfd_secret$auto(0x0) socket(0x2b, 0x1, 0x1) fcntl$auto(0x1, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x6, 0x3, 0x0, 0x7fffffff, 0x2, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x5, 0x0) getsockopt$auto(0x6, 0x84, 0x25, 0x0, &(0x7f0000000080)=0x9c8) r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$auto(0x1, &(0x7f0000000000)=@bpf_attr_11={0x40, 0x1ff, 0x7, 0x8, 0x1ff, 0xea6, 0xaef4, r0}, 0x2) 31.902193345s ago: executing program 5 (id=1563): socket(0x2, 0x6, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r0 = open(&(0x7f0000000000)='./cgroup\x00', 0x0, 0x23) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x0) r1 = socket(0xa, 0x3, 0xff) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x2, 0x0) bind$auto(r1, &(0x7f00000001c0)={0xcdd, @sockaddr_1_1={"0f39c7eff21f69fa"}}, 0x861) connect$auto(0x3, 0x0, 0x55) socket(0xa, 0x2, 0x88) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0xa, 0x2, 0x73) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) pipe2$auto(0x0, 0x80) bind$auto(r2, 0x0, 0x6b) mmap$auto(0x0, 0x40009, 0x12be, 0x9b72, 0xa, 0x28000) fcntl$auto(0x8000000000000001, 0x26, 0x8) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_DEL_STATION(r3, &(0x7f0000001a40)={0x0, 0x0, &(0x7f0000001a00)={&(0x7f0000000140)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002abd7000fddbdf251400000020000d01606651d1059b4155229d89cfa2594d3a7be63f9fdfc7b600a546d9687df244dce7ed885532bf69d7b5d78fd6f138f4b2e0b5f3b3f509b658f1f16f1dd45aff5be189bf1612836ba3f36285b5dfbf8cade685748f8fe406e18bbd3b039c9dd34028c941d462"], 0x34}, 0x1, 0x0, 0x0, 0x4800}, 0x10) sendmsg$auto_NL80211_CMD_DISCONNECT(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="20002dbd7000ffdbdf25300000000400dd0005008a000300003f0800a000630c000006002c010600000004004600"], 0x34}, 0x1, 0x0, 0x0, 0x8110}, 0x400) mmap$auto(0xf99, 0x2, 0x80000000, 0x11, 0x2, 0x800) stat$auto(&(0x7f0000000000)='..\x00\x00', 0x0) fcntl$auto(0x8000000000000001, 0x26, 0x8) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) 31.413263506s ago: executing program 5 (id=1565): mmap$auto(0x0, 0x20009, 0x4000000000df, 0x8000000000000eb1, 0x401, 0x8000) (async, rerun: 64) close_range$auto(0x0, 0xfffffffffffff000, 0x2) (rerun: 64) timerfd_create$auto(0x9, 0x7fffffff) (async) capset$auto(&(0x7f0000000000)={0xcd, 0x0}, &(0x7f0000000040)={0x4, 0x1, 0x7ff}) syz_open_procfs$namespace(r0, &(0x7f0000000080)='ns/time\x00') (async) setreuid$auto(0xffffffffffffffff, 0x0) (async, rerun: 32) poll$auto(0x0, 0x2, 0xc) (rerun: 32) 31.089882636s ago: executing program 6 (id=1567): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) madvise$auto(0x0, 0xffffffffffff0005, 0x19) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) madvise$auto(0x0, 0xffffffffffff0001, 0x15) mseal$auto(0x8, 0x7dda, 0x0) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000100)={{&(0x7f0000000000)=[0x5, 0x1, 0xc, 0xa, 0xb142, 0x7ff, 0x4], 0x1, &(0x7f0000000080)={&(0x7f0000000040)=[0x3cf2], 0x2375}, 0x1800000000000, &(0x7f00000000c0)=[0x5, 0x1, 0xe], 0x80000001, 0x100}, 0xe67a}, 0xffffff4a, 0x6) munmap$auto(0x20001000, 0x2000000c) (async) madvise$auto(0x8f3, 0x9, 0x6) (async) madvise$auto(0x7, 0x2, 0x95) (async) clone$auto(0x4, 0x400, 0xfffffffffffffffe, 0xfffffffffffffffc, 0xd1) (async, rerun: 32) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) (async, rerun: 32) madvise$auto(0x0, 0xffffffff, 0x7) (async, rerun: 32) madvise$auto(0x0, 0xffffffffffff0005, 0x19) (rerun: 32) 30.911211324s ago: executing program 1 (id=1568): r0 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x240000, 0x5, 0x8}, 0x18) (async) r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x38) pidfd_getfd$auto(r0, r1, 0x8) (async) epoll_ctl$auto(r1, 0x0, r1, &(0x7f00000000c0)={0x5, 0xbf}) (async) io_uring_register$auto(r1, 0x8, &(0x7f0000000100), 0xe) fchown$auto(r1, 0x1000, 0x0) (async) io_uring_enter$auto(r1, 0x100, 0xa50, 0x3, &(0x7f0000000140)=[0x100000001, 0x8d9, 0xef75, 0x6], 0x8) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ovs_meter(&(0x7f0000000180), r2) (async) capget$auto(&(0x7f00000001c0)={0x8, 0x0}, &(0x7f0000000200)={0x1, 0xa, 0x80}) syz_open_procfs$namespace(r3, &(0x7f0000000240)='ns/pid\x00') socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NFC_CMD_GET_TARGET(r4, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, 0x0, 0x200, 0x176e, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x4000) (async) getpeername$auto(r4, &(0x7f0000000380)={0x5, @sockaddr_1_1={"e4086f0f1ad45ef3e6499de3c1c785bbf71a013e39d54adcbf3dc7a15e8b04263a7943ef9db33792c82c86d228ef20e88377e45ca8af1952080e40e2dd0d18a53bba21f62c879ca1033b233a099728e77877fb3e2943e6e2d4b74d76c5999cc474c3ca4fbd4effac111d8478f13f0d1f6bb250d84dce33373e3a7fe861f660518d6955ec8471d4e7590126bdcb2711c459baaf0c589152d43d1874b384eb359817c78c287ab364873c18ff120fd543c29d5ae25de83469417b2e94e740e169d2ac0f5a77c4150b5bef174998858f93c5373860e103d787662a764ed5aa222b1c2260273819"}}, &(0x7f0000000480)=0x7) (async) mlock$auto(0x8, 0x80000001) (async) r5 = open$dir(&(0x7f0000000500)='./file0\x00', 0x0, 0x110) renameat$auto(r1, &(0x7f00000004c0)='ovs_meter\x00', r5, &(0x7f0000000540)='ns/pid\x00') getrandom$auto(&(0x7f0000000580)='ovs_meter\x00', 0x0, 0x5) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) (async) madvise$auto(0x2, 0x7, 0x9) ioctl$auto(r6, 0x7d7, 0x9) capset$auto(&(0x7f00000005c0)={0xfffffff8, r3}, &(0x7f0000000600)={0xff, 0x1, 0xffff}) (async) r7 = syz_genetlink_get_family_id$auto_MAC802154_HWSIM(&(0x7f0000000680), r1) sendmsg$auto_MAC802154_HWSIM_CMD_DEL_RADIO(r1, &(0x7f00000007c0)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000780)={&(0x7f00000006c0)={0xb4, r7, 0x8, 0x70bd2c, 0x25dfdbfd, {}, [@MAC802154_HWSIM_ATTR_RADIO_ID={0x8, 0x1, 0xa}, @MAC802154_HWSIM_ATTR_RADIO_EDGES={0x97, 0x3, "e0b0dd4ec5152fdc3c185502ec9643befea4e136c1f0555423a7d21dfdbd225e2d44fc0a8925d9b3aee0bd052bf72ad6f01158e98293affadfa399d4ee51b1d334c8323eb37cd5b4345792fb4d8952594785aab5e1fe711827cd74388de566abac76ae61585093f3acd75ef9fdf7519fb4a8fabc4423f2a8e69c8135019a67599defafa20576f7792fffc3b10606d0b79f7768"}]}, 0xb4}, 0x1, 0x0, 0x0, 0x4040000}, 0x48) (async) madvise$auto(0x0, 0x5, 0x80000001) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) mkdir$auto(&(0x7f0000000800)='ovs_meter\x00', 0x1ff) (async) socket(0x11, 0xa, 0x7) (async) mkdir$auto(&(0x7f0000000840)='{^\x00', 0x2) 30.675788555s ago: executing program 5 (id=1569): mmap$auto(0x3, 0xd7, 0x400df, 0x9b72, 0x800000000000202, 0x8100) (async) madvise$auto(0x0, 0xffffffffffff0001, 0x15) (async) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) (async) mmap$auto(0x0, 0x400008, 0x7, 0x9b72, 0x802, 0x8000) (async, rerun: 32) io_uring_setup$auto(0x6, 0x0) (rerun: 32) close_range$auto(0x2, 0x8000, 0x0) (async) open(0x0, 0x22240, 0x155) (async) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) clock_settime$auto(0x0, &(0x7f0000000000)={0x100000000, 0x6}) (async, rerun: 32) inotify_init1$auto(0x3000000000000) (async, rerun: 32) socket(0x15, 0x5, 0x0) socket(0x2, 0x6, 0x0) mprotect$auto(0x1ffff000, 0x8000000000000001, 0x4) bind$auto(0x7, &(0x7f0000000000)={0x11, @sockaddr_1_1}, 0x3e) sysfs$auto(0x2, 0x19, 0x0) (async) fsopen$auto(0x0, 0x1) (async) munmap$auto(0x0, 0x2000000c) 30.648901193s ago: executing program 1 (id=1570): open(&(0x7f0000000000)='./cgroup\x00', 0x80040, 0x181) mprotect$auto(0x1ffff000, 0x8000000000000001, 0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00') (async) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00') socket(0xa, 0x801, 0x84) (async) socket(0xa, 0x801, 0x84) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x3, 0x6) (async) socket(0x10, 0x3, 0x6) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x2, 0xc) socket(0x2, 0x1, 0x0) setsockopt$auto(0x6, 0x8000000000000006, 0x12, 0x0, 0x7ffffc) (async) setsockopt$auto(0x6, 0x8000000000000006, 0x12, 0x0, 0x7ffffc) close_range$auto(0x0, 0xfffffffffffff000, 0x84) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/cgroup\x00') syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/net\x00') (async) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/net\x00') ioctl$NS_GET_PARENT(r0, 0xb701, 0x0) ioprio_get$auto(0x8001, 0x2) (async) ioprio_get$auto(0x8001, 0x2) listen$auto(0x3, 0x83) (async) listen$auto(0x3, 0x83) connect$auto(0x3, &(0x7f00000000c0)={0x23, @sa_data_min="4505adee3001f40da841f7452747"}, 0x54) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NFSD_CMD_THREADS_SET(r1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000021}, 0x8004) connect$auto(0x3, &(0x7f0000000140)={0xa, @sa_data_min="c4aeed448dc7fe8000"}, 0x55) select$auto(0xa, 0x0, &(0x7f0000000100)={[0x20000000000d, 0x1ff, 0x0, 0x55fa, 0x5, 0x3, 0x5, 0x2000000000000002, 0x9, 0x8, 0xff, 0x8001, 0x4, 0xaab, 0x9, 0x4006]}, 0x0, 0x0) connect$auto(0x3, &(0x7f0000000140)={0xa, @sa_data_min="c4aeed448dc7fe8000"}, 0x55) shutdown$auto(0x200000003, 0x2) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) setsockopt$auto(0x3, 0x10000000084, 0x72, 0x0, 0xc) (async) setsockopt$auto(0x3, 0x10000000084, 0x72, 0x0, 0xc) 30.208481643s ago: executing program 3 (id=1571): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) timerfd_create$auto(0x5, 0xfffffffe) (async, rerun: 32) r0 = socket(0x2, 0x3, 0x6) (rerun: 32) mmap$auto(0x0, 0x9, 0x3ff57696, 0x9b72, 0x2, 0x8000000000008000) (async) close_range$auto(0x2, 0x8, 0x0) (async) sysfs$auto(0x2, 0x3, 0xffffffffffffffff) socket(0xa, 0x5, 0x0) open(0x0, 0x22240, 0x154) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX(r0, 0x401c5820, 0x0) (rerun: 32) semctl$auto(0x1ff, 0x2, 0x13, 0x4) (async) ioctl$auto(0x3, 0x40085400, 0x5) readv$auto(0x3, &(0x7f0000000380)={0x0, 0x100}, 0x3) syz_genetlink_get_family_id$auto_802_15_4_MAC(0x0, 0xffffffffffffffff) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) (async) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) accept4$auto(0x3438, &(0x7f0000000100)={0x1000, @sockaddr_1_1={"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"}}, 0x0, 0x81) (async) r1 = socket(0x10, 0x2, 0xc) (async) r2 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$auto_CTRL_CMD_GETPOLICY(r1, &(0x7f00000002c0)={0x0, 0xf5, &(0x7f0000000180)={&(0x7f0000000240)={0x14, r2, 0x1f5, 0x70bd28, 0x25dfdbfb, {0xa, 0x0, 0xa00}}, 0xfdef}, 0x1, 0x0, 0x0, 0x20000000}, 0x2000000) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x4, 0x300000000000) (async) fsync$auto(0x9ee) 29.655733338s ago: executing program 6 (id=1572): r0 = socket(0xf, 0x5, 0x0) sendmsg$auto_NFSD_CMD_THREADS_SET(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400000a1}, 0x800) connect$auto(r0, &(0x7f0000000000)={0xa, @sockaddr_1_1={"c47f3ef20401283fa851bc350fef5cf42fc1414c826c39ce498e20771ed5ee15bdab5668543bd84c8e8c4db99d82c8fb3fd3a5e5660acff3a98453090c1795667e91a4fb54ee9645a3e9b2ce2d4ed9ec230148fd772ff0b09f7cbcea376db1399c8fa2c2531ca853ead4a859b4907072248b3887fdb81dca3c60dcbbe60790683fe02763bb7a1b4ee8856b"}}, 0x55) time$auto(0xfffffffffffffffe) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) pipe2$auto(0x0, 0x80) close_range$auto(0x0, 0xfffffffffffff000, 0x2) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00') r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/net\x00') ioctl$NS_GET_PARENT(r1, 0xb701, 0x0) socket(0x1d, 0x2, 0x7) setsockopt$auto(0x3, 0x6b, 0x4, 0xffffffffffffffff, 0x3) setsockopt$auto(0x3, 0x1, 0x9, 0x0, 0x8) shmat$auto(0x77, &(0x7f00000000c0)='ns/cgroup\x00', 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) connect$auto(0x3, 0x0, 0x55) socket(0xf, 0x5, 0x0) (async) sendmsg$auto_NFSD_CMD_THREADS_SET(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400000a1}, 0x800) (async) connect$auto(r0, &(0x7f0000000000)={0xa, @sockaddr_1_1={"c47f3ef20401283fa851bc350fef5cf42fc1414c826c39ce498e20771ed5ee15bdab5668543bd84c8e8c4db99d82c8fb3fd3a5e5660acff3a98453090c1795667e91a4fb54ee9645a3e9b2ce2d4ed9ec230148fd772ff0b09f7cbcea376db1399c8fa2c2531ca853ead4a859b4907072248b3887fdb81dca3c60dcbbe60790683fe02763bb7a1b4ee8856b"}}, 0x55) (async) time$auto(0xfffffffffffffffe) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) pipe2$auto(0x0, 0x80) (async) close_range$auto(0x0, 0xfffffffffffff000, 0x2) (async) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00') (async) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/net\x00') (async) ioctl$NS_GET_PARENT(r1, 0xb701, 0x0) (async) socket(0x1d, 0x2, 0x7) (async) setsockopt$auto(0x3, 0x6b, 0x4, 0xffffffffffffffff, 0x3) (async) setsockopt$auto(0x3, 0x1, 0x9, 0x0, 0x8) (async) shmat$auto(0x77, &(0x7f00000000c0)='ns/cgroup\x00', 0x0) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) connect$auto(0x3, 0x0, 0x55) (async) 29.463807424s ago: executing program 1 (id=1573): r0 = socket$nl_generic(0x10, 0x3, 0x10) futex_wait$auto(0xfffffffffffffffd, 0x1fc00000, 0x2, 0x6, 0xfffffffffffffffc, 0x3) dup$auto(0x0) r1 = syz_genetlink_get_family_id$auto_ila(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_ILA_CMD_ADD(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, r1, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@ILA_ATTR_LOCATOR={0xc, 0x1, 0x6}, @ILA_ATTR_IDENT_TYPE={0x5, 0x8, 0x70}, @ILA_ATTR_IFINDEX={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000001}, 0x20000040) timer_create$auto(0x4, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_netdev(&(0x7f0000001500), 0xffffffffffffffff) sendmsg$auto_NETDEV_CMD_QUEUE_GET(r2, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f00000015c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010026bd7000fedbdf250d00000008000300000000000800010002"], 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x810) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) move_pages$auto(0x1, 0x3, 0x0, 0x0, 0x0, 0x8000000000000000) fcntl$auto(0x2, 0x5, 0x1) syz_genetlink_get_family_id$auto_NLBL_MGMT(&(0x7f0000000000), r0) 29.324983842s ago: executing program 3 (id=1574): mlockall$auto(0x4) mmap$auto(0x0, 0x40009, 0xdc, 0x9b72, 0x7, 0x28000) socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) fanotify_init$auto(0x200, 0x2010000000000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) bpf$auto(0x800000000000001b, 0x0, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000340)='ns/time_for_children\x00') socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x2, 0x3a) bind$auto(0x8, 0xfffffffffffffffd, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x23, 0x80805, 0x0) memfd_secret$auto(0x0) socket(0x2b, 0x1, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x801, 0x84) stat$auto(&(0x7f0000000000)='..\x00\x00', 0x0) getsockopt$auto(0x6, 0x84, 0x9, 0x0, &(0x7f0000000080)=0x9b) io_uring_register$auto(0xffffffffffffffff, 0xa0, 0x0, 0x8) r0 = open(&(0x7f0000000000)='./file1\x00', 0x1767d, 0x37e5c9853cd1b999) fanotify_mark$auto(0x400000000000, 0x101, 0x8040, r0, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) socket(0xa, 0x2, 0x0) 29.092840002s ago: executing program 3 (id=1575): unshare$auto(0x40000080) (async, rerun: 32) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (rerun: 32) socket(0xa, 0x3, 0x6) (async) sendmsg$auto_BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x300, 0x70bd26, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4c894}, 0x4) socket(0xa, 0x801, 0x84) (async) mmap$auto(0x0, 0x40009, 0x40000000000df, 0x9b72, 0x7, 0x28000) lsm_list_modules$auto(0x0, 0x0, 0x0) setsockopt$auto(0x3, 0x10000000084, 0x14, 0x0, 0x8) (async) select$auto(0xa, 0x0, &(0x7f0000000100)={[0x20000000000d, 0x203, 0x0, 0xc, 0x5, 0x3, 0x5, 0x2000000000000002, 0x9, 0x8, 0xff, 0xa, 0x4, 0xaab, 0x5, 0x4006]}, 0x0, 0x0) (async, rerun: 32) connect$auto(0x3, &(0x7f0000000140)={0xa, @sa_data_min="c4aeed448dc7fe8000"}, 0x55) (async, rerun: 32) setsockopt$auto(0x3, 0x1, 0xd, 0x0, 0x8) (async, rerun: 32) close_range$auto(0x2, 0x8000, 0x0) (async, rerun: 32) unshare$auto(0x7) (async) r0 = socket(0x10, 0x2, 0x0) (async) ioperm$auto(0xf, 0x9, 0x760b) sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB=' \x00\''], 0x1ac}}, 0x40000) 29.02803284s ago: executing program 1 (id=1576): mmap$auto(0x0, 0x100000200004, 0x4000000000df, 0x40eb2, 0x402, 0x300000000000) setrlimit$auto(0x2, &(0x7f0000000000)={0x0, 0x80000000}) dup2$auto(0x0, 0x4) close_range$auto(0x0, 0xe903, 0x2) socket(0x1e, 0x4, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x1, 0x0) setsockopt$auto(0x2, 0x1, 0x50, &(0x7f0000000000)='\x00', 0x40) mmap$auto(0x0, 0x8, 0x2, 0x9b72, 0x5, 0x0) socket(0xa, 0x801, 0x106) setsockopt$auto(0x3, 0x6, 0x12, 0x0, 0xfb3) r0 = socket(0xa, 0x2, 0x3a) setsockopt$auto(r0, 0x29, 0x3b, &(0x7f0000000080)='\x15!\xa8^J/\xddCx4!\x00\xd3\x8f\x1e\x1b\xc3 \xe2\xa8\xd6\xd9\xc0\xa2\x0f\x88\xb1e\x8a\xd8?\xfe\xda\xc4\xef\xff(i\xc6@\x91[\vBj\x0eQ\xce\x16\'C\x8cYA\x92u\xd5\xb8\\\x82,\xe2=y\x9bR\xbcn\xa0c\x16~\x86\"t\xde\x14\xe4\xa5\xfe\xb5', 0x110) setsockopt$auto(0x400000000000003, 0x29, 0x37, 0xffffffffffffffff, 0x0) mknod$auto(&(0x7f0000000000)='}[,&*}\x00', 0x1, 0x4) mknod$auto(&(0x7f0000000340)='F\x81R\xb4q\xf4\xc4z4\xb9\x00d\x8bv\xeb\x02\x101\f\x0f\x1f\x9a\xc1\xcf\r\xb7\x9f\x99w\x14gd\x1b3\xf8h\xad\x97\'-\xb1{\x04\x00\x00\x003*\t7}H<\vZy\xe31c|(i\x8ap\xe3~\x92\\l1\xcb\x94\xd7\xe5\xa1\xba\xb1OR\xe0\xe1\xedu/\xa9\xb5j\xace\xc1\xf5\x8e\xab\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00X\xff\x93\xddP\x80\xd2\xb4\xeeV\xb9\xeb\x00\xff\x84t\xc7\xa7\x81\xafc\xe5\xf0U\xddHIl\xaa\x12\xd112h\x8e\xa8{\xc4\xc8\xd8\xa7\xd4\xefE\xf5!\xaa\xd3m\xadne\xd1\xb1\x12\x15\xaf?ugg\xec\xb5D\xb4\xf5p\x01\xf9(\xe9\xcej.\x06G)\x12\x94\xf6\nQ\'\xfal\xf7\x048\xf3\x7f\x9a\x80oD\xc2\x8d\x9e\xd2\x8dUo\x0e\xe4&\xfe\x89\x9a\x18\xa4X\x93\xd5m\x15\x06\x81\xba\x14\x92\xdf\xd8\xa9\x8d\x9d\xa7I\xce\x1a?\x12\xf4\x16\xcb\xc4\xe3\x0e\x04!1|\xc3\xba\x8c\x92\xa7\xf6\x15\xd0\x12\xbd\xfc\x10U\r)\xc8\xf1/,\xfd\t\xe2\x80\x96\xfb\f\xe7G\f\xe4VG\xb2XaA*\a1\xc9AN\xead\xcb\xa67\xef\x1cOc@\xeeu1\xa0y\x98*\x1a\xf7p\x8e6B4\x9frL\x1f\xaf\xc7\xf6!\fL\xbc\xcc\vri\x85;Z\x04\xd0\xb6\xbehg\x1e\xe9\x93\xb8^\xb1\xff\xde\xadme\xe5\xa3\x94-4\xa9 \x05\x83\r[r\xacP\x89\xc4\xb9\x01\x10\x84\r\xef\x04b\xd0\xf2&\xbc\xc9\xf2\xe8\x04\xd3z\a\xf3\xef\xf4-o1Q8d\x93\xaa\xdc\x961\x8c\xc7#rgP\xce\x81U4ZK\xcc\x87\xd8\xd6U\\\xd3]^>\f9\xc7\xff4\x9b\xc7\xa6\x01LS\x14P\x814\x95(\xd1s}\xbf\xc6)\xb2fgM|o\x85N3\x8db6RLK\xa8\xb5\xbd\x9e\x11\x9a6t\x17~$\xfa|\xd3K\x87V\x8eK\xb0\xf3\x95\xc4\xc9\'\x92 \x9c\xefH\x8c7\x00\x1f\x90,\xf2qu\x0f\xbc%2\"\x8f\xc9\x1b\xd7\xfeQ\xcf\xc1v\x94\xe2\xf7\x84\xc8\xa36%\x87\xa4', 0x0, 0x0) mount$auto(&(0x7f0000000280), &(0x7f00000000c0)='}[,&*}\x00', 0x0, 0xb71e, 0x0) mount$auto(0x0, &(0x7f0000000180)='}[,&*}\x00', 0x0, 0x6f, 0x0) rename$auto(&(0x7f0000000040)='/\\\x00', &(0x7f0000000100)='@$#-[)\x00') sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, 0x0, 0x8004) io_submit$auto(0x7, 0x7f, &(0x7f00000000c0)=&(0x7f0000000000)={0x6fffffffffffff, 0x7, 0x10005, 0x3, 0x2, 0x3b, 0xfffffffffffffc00, 0x9, 0xfff, 0x0, 0x6}) writev$auto(0x4, &(0x7f0000000080)={&(0x7f0000000000), 0xfdef}, 0x5) ioperm$auto(0x8001, 0x6, 0x8) prctl$auto(0x9, 0x5, 0x6, 0x8, 0x5) 28.895776264s ago: executing program 6 (id=1577): mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) mkdir$auto(&(0x7f00000000c0)='-\x00', 0x470b) getrandom$auto(0x0, 0x6000000, 0x3) prctl$auto(0x23, 0xe, 0x2009, 0x68, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) close_range$auto(0x0, 0xffffeffe, 0x2) pipe$auto(0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x0, 0xfffffffffffff000, 0x5) socket$nl_generic(0x10, 0x3, 0x10) pidfd_open$auto(0x1, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/mnt\x00') socket(0x10, 0x2, 0x0) r1 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_CTRL_CMD_GETFAMILY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="41002abd450003000000060002002700000007"], 0x24}, 0x1, 0x0, 0x0, 0x4008810}, 0x10000000) open(&(0x7f0000000000)='./file0\x00', 0xe600, 0x20) socket$nl_generic(0x10, 0x3, 0x10) tee$auto(0x2000000000000, 0x3, 0x3ff, 0x8) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x5, 0x0) getsockopt$auto(0x6, 0x40000000084, 0x7f, 0xfffffffffffffffe, 0x0) gettimeofday$auto(&(0x7f0000000000)={0x0, 0xd5}, &(0x7f0000000040)={0xde, 0x36}) 28.121883963s ago: executing program 5 (id=1578): socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffff7, 0x8000) (async) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) mkdir$auto(&(0x7f00000001c0)='}[,&*}\x00', 0xc001) (async) mount$auto(0x0, &(0x7f0000000100)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0x10001, 0x0) link$auto(&(0x7f0000000340)='}[,&*}\x00', &(0x7f0000000380)='#\x00') open(0x0, 0x22240, 0x155) socket(0x2b, 0x1, 0x0) (async) r0 = socket(0x2, 0x3, 0xa) read$auto(0x3, 0x0, 0xf34) (async, rerun: 64) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) (rerun: 64) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) (async) setsockopt$auto(0x3, 0x1, 0x1d, 0x0, 0x9) setsockopt$auto(0x3, 0x1, 0x41, 0x0, 0x88) (async) connect$auto(0x3, &(0x7f00000000c0)={0x2, @sockaddr_1_1}, 0x55) (async) socket(0x11, 0xa, 0x0) socket$nl_generic(0x10, 0x3, 0x10) eventfd2$auto(0xc5, 0x1) (async) write$auto(0x5, &(0x7f00000017c0)=',\x00', 0x8) (async) write$auto(0x3, 0x0, 0xffd8) write$auto(r0, 0x0, 0x100000001) (async) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x10, 0x2, 0x4) sendmsg$auto_NFSD_CMD_THREADS_SET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c0000001400c7d2a2e1917949643de42be7"], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x400c000) (async, rerun: 32) prctl$auto(0x59616d61, 0xffffffffffffffff, 0x6, 0x8, 0xfff) (async, rerun: 32) r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), r1) sendmsg$auto_NL80211_CMD_GET_MPP(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x81102}, 0xc, &(0x7f0000000200)={&(0x7f00000003c0)={0x148, r2, 0x200, 0x70bd25, 0x25dfdbff, {}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0x5}, @NL80211_ATTR_EMA_RNR_ELEMS={0x102, 0x145, "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"}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x7fff}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, "24d9faf2600eb28190b2c71d84650af730a08afe18f138128ea5"}]}, 0x148}}, 0x10) (async, rerun: 64) socket(0x2, 0x801, 0x100) (async, rerun: 64) recvmmsg$auto(0x5, 0x0, 0x3, 0x6, 0x0) (async, rerun: 64) syz_genetlink_get_family_id$auto_gtp(&(0x7f0000000100), 0xffffffffffffffff) (rerun: 64) 28.041744861s ago: executing program 3 (id=1579): mmap$auto(0x0, 0x40040b, 0xdf, 0x9b71, 0x2, 0x5) socket(0x2, 0x3, 0x2) mmap$auto(0x0, 0x2020009, 0x1, 0xeb1, 0xfffffffffffffff7, 0x7ffb) sendmsg$auto_WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000"], 0x14}, 0x1, 0x0, 0x0, 0x4008810}, 0x20008000) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) select$auto(0x9, 0x0, &(0x7f0000000180)={[0x9, 0x2, 0x10, 0x7, 0x7, 0x4, 0x6, 0x2, 0x2, 0x10000005e582971, 0x800, 0x5, 0x3, 0x1000200, 0xff, 0x4]}, 0x0, 0x0) connect$auto(0x3, &(0x7f0000000140)={0xa, @sa_data_min="c4aeed448dc7fe8000"}, 0x55) mprotect$auto(0x1ffff000, 0x8000000000000001, 0x4) close_range$auto(0x0, 0x2000000003, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x1, 0x0) socket(0xa, 0x5, 0x0) socket(0xa, 0x2, 0x3a) socketpair$auto(0x3, 0x414, 0x80, 0x0) setsockopt$auto(0x3, 0x0, 0xf, 0x0, 0xb) bind$auto(0x3, &(0x7f0000000140)={0xa, @sa_data_min="bfb75aafbff83e2900"}, 0x69) open(0x0, 0x22240, 0x155) socket(0x2b, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000100)={0x2, @sa_data_min="45087d2e7c4dd82ca37bf5cb0647"}, 0x6b) connect$auto(0x3, &(0x7f00000000c0)={0x2, @sockaddr_1_1}, 0x55) close_range$auto(0x2, 0x8000, 0x0) io_uring_setup$auto(0x6, 0x0) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) bpf$auto(0x5, &(0x7f0000000000)=@bpf_attr_11={0x3, 0x6, 0x7fff, 0x6, 0x6, 0x1, 0x6}, 0x7) connect$auto(0x3, &(0x7f0000000000)={0x2, @sockaddr_1_1={"d9ef7f"}}, 0x55) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0) setsockopt$auto(0x3, 0x1, 0x19, 0xffffffffffffffff, 0x0) 27.736958319s ago: executing program 3 (id=1580): open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x100) r0 = open(&(0x7f0000000080)='./file0\x00', 0x22000, 0x50) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r1 = socket(0x15, 0x5, 0x0) getsockopt$auto(r1, 0x114, 0x2718, 0xfffffffffffffffc, 0x0) mmap$auto(0x0, 0x5, 0x4000000000df, 0xeb1, 0x401, 0x8000) sendfile$auto(0x6, 0x3, 0x0, 0x8000) exit$auto(0x6) timerfd_settime$auto(r0, 0x400, &(0x7f0000000240)={{0xef2e, 0x2}, {0x3, 0x3}}, &(0x7f0000000280)={{0x80000000, 0x3}, {0x314, 0x6a}}) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0xffffffffffff0001, 0x15) madvise$auto(0x0, 0xffffffffffff0005, 0x19) setns(0xffffffffffffffff, 0x0) open(0x0, 0x4242, 0xe1d2b27bdc14aabc) socket(0xa, 0x3, 0xff) select$auto(0x3, 0x0, &(0x7f0000000100)={[0xd, 0x200, 0x0, 0xc, 0x8, 0x3, 0x6, 0x2, 0x9, 0x5e582970, 0x4000000000000000, 0x2, 0x4, 0x5, 0x8, 0x6]}, 0x0, 0x0) connect$auto(0x3, &(0x7f0000000140)={0xa, @sa_data_min="c4aeed448dc7fe8000"}, 0x55) write$auto(0x3, 0x0, 0x5c8) unshare$auto(0x40000080) clone$auto(0x8001, 0x5, 0xffffffffffffffff, 0xfffffffffffffffc, 0x6) writev$auto(0x1, &(0x7f0000000100)={&(0x7f0000000140), 0x400000000000fdef}, 0x1) execve$auto(&(0x7f0000000040)=',\x00', &(0x7f0000000180)=&(0x7f00000000c0)=':\x03!-}[[!]@!.\xf0@]\x00', &(0x7f0000000200)=&(0x7f00000001c0)='\x00') vmsplice$auto(0x3, &(0x7f0000000080)={0x0, 0x6}, 0x9, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) ustat$auto(0x6, 0xfffffffffffffffd) madvise$auto(0x0, 0x20200, 0x15) syz_genetlink_get_family_id$auto_802_15_4_MAC(0x0, 0xffffffffffffffff) socket(0x2, 0x5, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) 27.730713252s ago: executing program 6 (id=1581): mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_GET_INTERFACE(r0, 0x0, 0x480d0) getdents64$auto(r0, &(0x7f0000000040)={0xfffffffffffffffc, 0x6, 0x4, 0x31, "afe69b6017ee1723bf287fe618ca15ee4ea64f2ccae5f124ba2e6e0660577e70d9f93174381a2efa13851b2814a841ae1a6a7528a71778730c1bc296a6b8d811ff26fc27abd489388ed09abb57b1fd2e1b0ed0c08300a87006360d81e592391a0a3bd08ee9b5f0e4b6c8e6605cf834bcd4f31f90525cc13dd7d6a88e0b18084296009e16db20d60e26fd3916474b322e"}, 0x7) r1 = socket(0x2, 0x2, 0x1) r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), r1) sendmsg$auto_NL80211_CMD_SET_MAC_ACL(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, r2, 0x200, 0x70bd29, 0x25dfdbff, {}, [@NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x4}, @NL80211_ATTR_HE_OBSS_PD={0xa, 0x117, "2029f669bfae"}]}, 0x28}, 0x1, 0x0, 0x0, 0x8001}, 0x8080) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) io_uring_setup$auto(0x6, 0x0) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) sendto$auto(0x3, 0x0, 0xf, 0xe, &(0x7f0000000100)={0x2, @sa_data_min="00000000000000b64200"}, 0x19) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) sysfs$auto(0x2, 0x45, 0x0) fsopen$auto(0x0, 0x1) io_uring_setup$auto(0x1, 0x0) futex$auto(0x0, 0x6, 0x8, 0x0, 0x0, 0x80000001) open(&(0x7f0000000000)='./file0\x00', 0x84100, 0x104) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mmap$auto(0x0, 0x1004, 0x4000000000df, 0x40eb2, 0x402, 0x300000000000) tkill$auto(0x1, 0x7) 25.565611358s ago: executing program 3 (id=1582): socket(0xa, 0x801, 0x84) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000021}, 0x8004) connect$auto(0x3, &(0x7f0000000140)={0xa, @sa_data_min="c4aeed448dc7fe8000"}, 0x55) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) unshare$auto(0x40000080) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) truncate$auto(0x0, 0xa) mmap$auto(0x0, 0x40000004, 0x4000000000df, 0x40eb5, 0x401, 0x300000000000) r0 = socket(0x15, 0x5, 0x0) socket(0x10, 0x4, 0x0) socket(0x29, 0x2, 0x0) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) ioctl$auto(0x3, 0x89e2, 0x91) ioctl$auto(0x3, 0x89e2, 0x91) close_range$auto(r0, 0x8000, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socket(0xa, 0x5, 0x0) fcntl$auto(0xff80000000000000, 0x406, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x2, 0x200) socket$nl_generic(0x10, 0x3, 0x10) mq_open$auto(&(0x7f0000000000)='#)-Q\xe2wv\x01\x97\xb7e\x86#\x8bG\r\xfflK\\&[}\x00\x1cB\x9cz\xc0\r\x95\x1f\xd05\xd8\xda\x02\x01\xf6#\xa5\x97\x9bD\xdc\x12\xe8!\xb0-\xb5H\xe1\xe8\xf9\x11\x0f', 0xde8, 0xb, 0x0) mq_open$auto(&(0x7f0000000280)='#)-\\&[}\x00', 0x5, 0x10, 0x0) mq_getsetattr$auto(0x7, &(0x7f0000000140)={0x0, 0x2, 0x8001}, &(0x7f0000000180)={0x0, 0x4, 0x9, 0xfffffffffffffd3e}) futex$auto(&(0x7f0000000080)=0x2948, 0x0, 0x2948, 0x0, 0x0, 0x5) socket$nl_generic(0x10, 0x3, 0x10) rt_sigaction$auto(0x6, &(0x7f0000000200)={0x0, 0xd3b3, 0x0, {0x6}}, 0x0, 0x8) open(&(0x7f0000001e80)='./file0\x00', 0x127282, 0x10e) syz_open_procfs$namespace(0x0, &(0x7f00000001c0)='ns/uts\x00') dup$auto(0x1) 24.429932514s ago: executing program 6 (id=1583): iopl$auto(0x3) (async) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) (async) close_range$auto(0x0, 0xfffffffffffff000, 0x2) (async) r0 = socket(0x2, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) (async) getcwd$auto(0x0, 0xffffffffffffffff) (async) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async) getsockopt$auto(r0, 0x8, 0x6, &(0x7f0000000140)='\x00', &(0x7f0000000180)=0x3) (async) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) (async) clone3$auto(&(0x7f0000000000)={0x200, 0x5, 0x7, 0x2, 0x7, 0x87, 0x8, 0xb, 0x9, 0x2, 0xcb6}, 0xaa) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) pwritev2$auto(0x4, &(0x7f0000001fc0)={&(0x7f0000001f00), 0x7}, 0x1, 0xffffffffffffffff, 0x81, 0x8) (async) inotify_init1$auto(0x3000000000000) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) sendmsg$auto_WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x44000) (async) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) (async, rerun: 64) open(0x0, 0x22240, 0x155) (async, rerun: 64) socket(0x2b, 0x1, 0x0) (async) bind$auto(0x3, &(0x7f0000000080)={0x2, @sockaddr_1_1}, 0x6b) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) timer_create$auto(0x8, 0x0, 0x0) (async, rerun: 32) select$auto(0x4, 0x0, &(0x7f0000000080)={[0x209c, 0xe9e, 0x4, 0x5, 0x1000, 0x100000001, 0xc, 0xf, 0x0, 0x40, 0xe, 0xd59, 0x101, 0xff, 0x2, 0x80080001]}, 0x0, 0x0) (rerun: 32) timer_settime$auto(0x0, 0xffff8000, &(0x7f00000000c0)={{0xf, 0x10007}, {0x9}}, 0x0) (async, rerun: 64) timer_settime$auto(0x0, 0x8, &(0x7f0000000200)={{0x0, 0x7fffffff}, {0x9000}}, &(0x7f0000000240)={{0x1, 0x4}, {0x9000, 0xe8}}) (async, rerun: 64) connect$auto(0x3, &(0x7f00000000c0)={0x2, @sockaddr_1_1}, 0x55) 23.889907682s ago: executing program 35 (id=1583): iopl$auto(0x3) (async) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) (async) close_range$auto(0x0, 0xfffffffffffff000, 0x2) (async) r0 = socket(0x2, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) (async) getcwd$auto(0x0, 0xffffffffffffffff) (async) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async) getsockopt$auto(r0, 0x8, 0x6, &(0x7f0000000140)='\x00', &(0x7f0000000180)=0x3) (async) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) (async) clone3$auto(&(0x7f0000000000)={0x200, 0x5, 0x7, 0x2, 0x7, 0x87, 0x8, 0xb, 0x9, 0x2, 0xcb6}, 0xaa) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) pwritev2$auto(0x4, &(0x7f0000001fc0)={&(0x7f0000001f00), 0x7}, 0x1, 0xffffffffffffffff, 0x81, 0x8) (async) inotify_init1$auto(0x3000000000000) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) sendmsg$auto_WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x44000) (async) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) (async, rerun: 64) open(0x0, 0x22240, 0x155) (async, rerun: 64) socket(0x2b, 0x1, 0x0) (async) bind$auto(0x3, &(0x7f0000000080)={0x2, @sockaddr_1_1}, 0x6b) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) timer_create$auto(0x8, 0x0, 0x0) (async, rerun: 32) select$auto(0x4, 0x0, &(0x7f0000000080)={[0x209c, 0xe9e, 0x4, 0x5, 0x1000, 0x100000001, 0xc, 0xf, 0x0, 0x40, 0xe, 0xd59, 0x101, 0xff, 0x2, 0x80080001]}, 0x0, 0x0) (rerun: 32) timer_settime$auto(0x0, 0xffff8000, &(0x7f00000000c0)={{0xf, 0x10007}, {0x9}}, 0x0) (async, rerun: 64) timer_settime$auto(0x0, 0x8, &(0x7f0000000200)={{0x0, 0x7fffffff}, {0x9000}}, &(0x7f0000000240)={{0x1, 0x4}, {0x9000, 0xe8}}) (async, rerun: 64) connect$auto(0x3, &(0x7f00000000c0)={0x2, @sockaddr_1_1}, 0x55) 13.800507276s ago: executing program 36 (id=1576): mmap$auto(0x0, 0x100000200004, 0x4000000000df, 0x40eb2, 0x402, 0x300000000000) setrlimit$auto(0x2, &(0x7f0000000000)={0x0, 0x80000000}) dup2$auto(0x0, 0x4) close_range$auto(0x0, 0xe903, 0x2) socket(0x1e, 0x4, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x1, 0x0) setsockopt$auto(0x2, 0x1, 0x50, &(0x7f0000000000)='\x00', 0x40) mmap$auto(0x0, 0x8, 0x2, 0x9b72, 0x5, 0x0) socket(0xa, 0x801, 0x106) setsockopt$auto(0x3, 0x6, 0x12, 0x0, 0xfb3) r0 = socket(0xa, 0x2, 0x3a) setsockopt$auto(r0, 0x29, 0x3b, &(0x7f0000000080)='\x15!\xa8^J/\xddCx4!\x00\xd3\x8f\x1e\x1b\xc3 \xe2\xa8\xd6\xd9\xc0\xa2\x0f\x88\xb1e\x8a\xd8?\xfe\xda\xc4\xef\xff(i\xc6@\x91[\vBj\x0eQ\xce\x16\'C\x8cYA\x92u\xd5\xb8\\\x82,\xe2=y\x9bR\xbcn\xa0c\x16~\x86\"t\xde\x14\xe4\xa5\xfe\xb5', 0x110) setsockopt$auto(0x400000000000003, 0x29, 0x37, 0xffffffffffffffff, 0x0) mknod$auto(&(0x7f0000000000)='}[,&*}\x00', 0x1, 0x4) mknod$auto(&(0x7f0000000340)='F\x81R\xb4q\xf4\xc4z4\xb9\x00d\x8bv\xeb\x02\x101\f\x0f\x1f\x9a\xc1\xcf\r\xb7\x9f\x99w\x14gd\x1b3\xf8h\xad\x97\'-\xb1{\x04\x00\x00\x003*\t7}H<\vZy\xe31c|(i\x8ap\xe3~\x92\\l1\xcb\x94\xd7\xe5\xa1\xba\xb1OR\xe0\xe1\xedu/\xa9\xb5j\xace\xc1\xf5\x8e\xab\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00X\xff\x93\xddP\x80\xd2\xb4\xeeV\xb9\xeb\x00\xff\x84t\xc7\xa7\x81\xafc\xe5\xf0U\xddHIl\xaa\x12\xd112h\x8e\xa8{\xc4\xc8\xd8\xa7\xd4\xefE\xf5!\xaa\xd3m\xadne\xd1\xb1\x12\x15\xaf?ugg\xec\xb5D\xb4\xf5p\x01\xf9(\xe9\xcej.\x06G)\x12\x94\xf6\nQ\'\xfal\xf7\x048\xf3\x7f\x9a\x80oD\xc2\x8d\x9e\xd2\x8dUo\x0e\xe4&\xfe\x89\x9a\x18\xa4X\x93\xd5m\x15\x06\x81\xba\x14\x92\xdf\xd8\xa9\x8d\x9d\xa7I\xce\x1a?\x12\xf4\x16\xcb\xc4\xe3\x0e\x04!1|\xc3\xba\x8c\x92\xa7\xf6\x15\xd0\x12\xbd\xfc\x10U\r)\xc8\xf1/,\xfd\t\xe2\x80\x96\xfb\f\xe7G\f\xe4VG\xb2XaA*\a1\xc9AN\xead\xcb\xa67\xef\x1cOc@\xeeu1\xa0y\x98*\x1a\xf7p\x8e6B4\x9frL\x1f\xaf\xc7\xf6!\fL\xbc\xcc\vri\x85;Z\x04\xd0\xb6\xbehg\x1e\xe9\x93\xb8^\xb1\xff\xde\xadme\xe5\xa3\x94-4\xa9 \x05\x83\r[r\xacP\x89\xc4\xb9\x01\x10\x84\r\xef\x04b\xd0\xf2&\xbc\xc9\xf2\xe8\x04\xd3z\a\xf3\xef\xf4-o1Q8d\x93\xaa\xdc\x961\x8c\xc7#rgP\xce\x81U4ZK\xcc\x87\xd8\xd6U\\\xd3]^>\f9\xc7\xff4\x9b\xc7\xa6\x01LS\x14P\x814\x95(\xd1s}\xbf\xc6)\xb2fgM|o\x85N3\x8db6RLK\xa8\xb5\xbd\x9e\x11\x9a6t\x17~$\xfa|\xd3K\x87V\x8eK\xb0\xf3\x95\xc4\xc9\'\x92 \x9c\xefH\x8c7\x00\x1f\x90,\xf2qu\x0f\xbc%2\"\x8f\xc9\x1b\xd7\xfeQ\xcf\xc1v\x94\xe2\xf7\x84\xc8\xa36%\x87\xa4', 0x0, 0x0) mount$auto(&(0x7f0000000280), &(0x7f00000000c0)='}[,&*}\x00', 0x0, 0xb71e, 0x0) mount$auto(0x0, &(0x7f0000000180)='}[,&*}\x00', 0x0, 0x6f, 0x0) rename$auto(&(0x7f0000000040)='/\\\x00', &(0x7f0000000100)='@$#-[)\x00') sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, 0x0, 0x8004) io_submit$auto(0x7, 0x7f, &(0x7f00000000c0)=&(0x7f0000000000)={0x6fffffffffffff, 0x7, 0x10005, 0x3, 0x2, 0x3b, 0xfffffffffffffc00, 0x9, 0xfff, 0x0, 0x6}) writev$auto(0x4, &(0x7f0000000080)={&(0x7f0000000000), 0xfdef}, 0x5) ioperm$auto(0x8001, 0x6, 0x8) prctl$auto(0x9, 0x5, 0x6, 0x8, 0x5) 10.306778013s ago: executing program 37 (id=1582): socket(0xa, 0x801, 0x84) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000021}, 0x8004) connect$auto(0x3, &(0x7f0000000140)={0xa, @sa_data_min="c4aeed448dc7fe8000"}, 0x55) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) unshare$auto(0x40000080) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) truncate$auto(0x0, 0xa) mmap$auto(0x0, 0x40000004, 0x4000000000df, 0x40eb5, 0x401, 0x300000000000) r0 = socket(0x15, 0x5, 0x0) socket(0x10, 0x4, 0x0) socket(0x29, 0x2, 0x0) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) ioctl$auto(0x3, 0x89e2, 0x91) ioctl$auto(0x3, 0x89e2, 0x91) close_range$auto(r0, 0x8000, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socket(0xa, 0x5, 0x0) fcntl$auto(0xff80000000000000, 0x406, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x2, 0x200) socket$nl_generic(0x10, 0x3, 0x10) mq_open$auto(&(0x7f0000000000)='#)-Q\xe2wv\x01\x97\xb7e\x86#\x8bG\r\xfflK\\&[}\x00\x1cB\x9cz\xc0\r\x95\x1f\xd05\xd8\xda\x02\x01\xf6#\xa5\x97\x9bD\xdc\x12\xe8!\xb0-\xb5H\xe1\xe8\xf9\x11\x0f', 0xde8, 0xb, 0x0) mq_open$auto(&(0x7f0000000280)='#)-\\&[}\x00', 0x5, 0x10, 0x0) mq_getsetattr$auto(0x7, &(0x7f0000000140)={0x0, 0x2, 0x8001}, &(0x7f0000000180)={0x0, 0x4, 0x9, 0xfffffffffffffd3e}) futex$auto(&(0x7f0000000080)=0x2948, 0x0, 0x2948, 0x0, 0x0, 0x5) socket$nl_generic(0x10, 0x3, 0x10) rt_sigaction$auto(0x6, &(0x7f0000000200)={0x0, 0xd3b3, 0x0, {0x6}}, 0x0, 0x8) open(&(0x7f0000001e80)='./file0\x00', 0x127282, 0x10e) syz_open_procfs$namespace(0x0, &(0x7f00000001c0)='ns/uts\x00') dup$auto(0x1) 0s ago: executing program 5 (id=1578): socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffff7, 0x8000) (async) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) mkdir$auto(&(0x7f00000001c0)='}[,&*}\x00', 0xc001) (async) mount$auto(0x0, &(0x7f0000000100)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0x10001, 0x0) link$auto(&(0x7f0000000340)='}[,&*}\x00', &(0x7f0000000380)='#\x00') open(0x0, 0x22240, 0x155) socket(0x2b, 0x1, 0x0) (async) r0 = socket(0x2, 0x3, 0xa) read$auto(0x3, 0x0, 0xf34) (async, rerun: 64) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) (rerun: 64) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) (async) setsockopt$auto(0x3, 0x1, 0x1d, 0x0, 0x9) setsockopt$auto(0x3, 0x1, 0x41, 0x0, 0x88) (async) connect$auto(0x3, &(0x7f00000000c0)={0x2, @sockaddr_1_1}, 0x55) (async) socket(0x11, 0xa, 0x0) socket$nl_generic(0x10, 0x3, 0x10) eventfd2$auto(0xc5, 0x1) (async) write$auto(0x5, &(0x7f00000017c0)=',\x00', 0x8) (async) write$auto(0x3, 0x0, 0xffd8) write$auto(r0, 0x0, 0x100000001) (async) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x10, 0x2, 0x4) sendmsg$auto_NFSD_CMD_THREADS_SET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c0000001400c7d2a2e1917949643de42be7"], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x400c000) (async, rerun: 32) prctl$auto(0x59616d61, 0xffffffffffffffff, 0x6, 0x8, 0xfff) (async, rerun: 32) r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), r1) sendmsg$auto_NL80211_CMD_GET_MPP(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x81102}, 0xc, &(0x7f0000000200)={&(0x7f00000003c0)={0x148, r2, 0x200, 0x70bd25, 0x25dfdbff, {}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0x5}, @NL80211_ATTR_EMA_RNR_ELEMS={0x102, 0x145, "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"}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x7fff}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, "24d9faf2600eb28190b2c71d84650af730a08afe18f138128ea5"}]}, 0x148}}, 0x10) (async, rerun: 64) socket(0x2, 0x801, 0x100) (async, rerun: 64) recvmmsg$auto(0x5, 0x0, 0x3, 0x6, 0x0) (async, rerun: 64) syz_genetlink_get_family_id$auto_gtp(&(0x7f0000000100), 0xffffffffffffffff) (rerun: 64) kernel console output (not intermixed with test programs): .229341][ T7362] ? __pfx_do_coredump+0x10/0x10 [ 185.234293][ T7362] ? kmem_cache_free+0x152/0x4b0 [ 185.239249][ T7362] ? irqentry_exit_to_user_mode+0x13f/0x280 [ 185.245165][ T7362] ? asm_exc_page_fault+0x26/0x30 [ 185.250270][ T7362] get_signal+0x237c/0x26d0 [ 185.254792][ T7362] ? force_sig_fault+0xad/0xf0 [ 185.259569][ T7362] ? __pfx_get_signal+0x10/0x10 [ 185.264437][ T7362] arch_do_signal_or_restart+0x90/0x7e0 [ 185.270006][ T7362] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 185.276181][ T7362] ? __bad_area_nosemaphore+0x334/0x6a0 [ 185.281758][ T7362] ? do_user_addr_fault+0x920/0x13f0 [ 185.287072][ T7362] irqentry_exit_to_user_mode+0x13f/0x280 [ 185.292818][ T7362] asm_exc_page_fault+0x26/0x30 [ 185.297699][ T7362] RIP: 0033:0x21000 [ 185.301521][ T7362] Code: Unable to access opcode bytes at 0x20fd6. [ 185.307935][ T7362] RSP: 002b:000000000000000d EFLAGS: 00010246 [ 185.314017][ T7362] RAX: 0000000000000000 RBX: 00007f6fe8d35f80 RCX: 00007f6fe8b7e719 [ 185.321993][ T7362] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000058 [ 185.329970][ T7362] RBP: 00007f6fe8bf132e R08: 0000000000000006 R09: 0000000000000000 [ 185.337950][ T7362] R10: ffffffffff600000 R11: 0000000000000246 R12: 0000000000000000 [ 185.345931][ T7362] R13: 0000000000000000 R14: 00007f6fe8d35f80 R15: 00007fff5a9a2828 [ 185.353915][ T7362] ? 0xffffffffff600000 [ 185.358086][ T7362] [ 185.392154][ T7362] memory: usage 307200kB, limit 307200kB, failcnt 32101 [ 185.399391][ T7362] memory+swap: usage 408296kB, limit 9007199254740988kB, failcnt 0 [ 185.407664][ T7362] kmem: usage 3612kB, limit 9007199254740988kB, failcnt 0 [ 185.414924][ T7362] Memory cgroup stats for /syz0: [ 185.415091][ T7362] cache 310710272 [ 185.423764][ T7362] rss 155648 [ 185.426978][ T7362] rss_huge 0 [ 185.431105][ T7362] shmem 310702080 [ 185.434957][ T7362] mapped_file 4096 [ 185.438702][ T7362] dirty 4096 [ 185.441915][ T7362] writeback 0 [ 185.445306][ T7362] workingset_refault_anon 1185 [ 185.450086][ T7362] workingset_refault_file 8910 [ 185.454965][ T7362] swap 103522304 [ 185.458526][ T7362] swapcached 4096 [ 185.462172][ T7362] pgpgin 254872 [ 185.465925][ T7362] pgpgout 181531 [ 185.469490][ T7362] pgfault 71229 [ 185.472961][ T7362] pgmajfault 562 [ 185.476683][ T7362] inactive_anon 205250560 [ 185.481027][ T7362] active_anon 105205760 [ 185.485274][ T7362] inactive_file 4096 [ 185.489183][ T7362] active_file 4096 [ 185.492916][ T7362] unevictable 0 [ 185.496553][ T7362] hierarchical_memory_limit 314572800 [ 185.501945][ T7362] hierarchical_memsw_limit 9223372036854771712 [ 185.508204][ T7362] total_cache 310710272 [ 185.512373][ T7362] total_rss 155648 [ 185.516208][ T7362] total_rss_huge 0 [ 185.519939][ T7362] total_shmem 310702080 [ 185.524196][ T7362] total_mapped_file 4096 [ 185.529880][ T7362] total_dirty 4096 [ 185.548430][ T7362] total_writeback 0 [ 185.552250][ T7362] total_workingset_refault_anon 1185 [ 185.631465][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 185.703634][ T7362] total_workingset_refault_file 8910 [ 185.708982][ T7362] total_swap 103522304 [ 185.713065][ T7362] total_swapcached 4096 [ 185.755623][ T35] bond0 (unregistering): Released all slaves [ 185.826711][ T7362] total_pgpgin 254872 [ 185.830744][ T7362] total_pgpgout 181531 [ 185.923630][ T7362] total_pgfault 71229 [ 185.937128][ T7362] total_pgmajfault 562 [ 185.951485][ T7362] total_inactive_anon 205250560 [ 185.983750][ T7362] total_active_anon 105205760 [ 185.988496][ T7362] total_inactive_file 4096 [ 185.992924][ T7362] total_active_file 4096 [ 186.083651][ T7362] total_unevictable 0 [ 186.087697][ T7362] anon_cost 0 [ 186.091005][ T7362] file_cost 0 [ 186.173646][ T7362] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.161,pid=6850,uid=0 [ 186.272228][ T7362] Memory cgroup out of memory: Killed process 6850 (syz.0.161) total-vm:96032kB, anon-rss:760kB, file-rss:18384kB, shmem-rss:128kB, UID:0 pgtables:204kB oom_score_adj:1000 [ 186.315232][ T35] HSR: left promiscuous mode [ 187.690656][ T7686] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 187.785861][ T7686] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 187.806311][ T7686] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 188.131734][ T7686] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 188.405611][ T31] oom_reaper: reaped process 6850 (syz.0.161), now anon-rss:88kB, file-rss:15944kB, shmem-rss:128kB [ 188.550943][ T7688] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 188.596801][ T7688] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 188.632649][ T7688] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 188.662754][ T7688] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 188.697626][ T35] hsr_slave_0: left promiscuous mode [ 188.744913][ T35] hsr_slave_1: left promiscuous mode [ 188.828800][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 188.837813][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 188.894835][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 188.902329][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 188.976585][ T35] hsr_slave_0: left promiscuous mode [ 189.083042][ T35] hsr_slave_1: left promiscuous mode [ 189.096201][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 189.114968][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 189.134182][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 189.151740][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 189.305351][ T35] veth1_macvtap: left promiscuous mode [ 189.313947][ T35] veth0_macvtap: left promiscuous mode [ 189.319596][ T35] veth1_vlan: left promiscuous mode [ 189.343762][ T35] veth0_vlan: left promiscuous mode [ 189.449393][ T35] veth1_macvtap: left promiscuous mode [ 189.455179][ T35] veth0_macvtap: left promiscuous mode [ 189.460813][ T35] veth1_vlan: left promiscuous mode [ 189.474149][ T35] veth0_vlan: left promiscuous mode [ 191.264677][ T6850] syz.0.161 (6850) used greatest stack depth: 17584 bytes left [ 191.387758][ T35] team0 (unregistering): Port device team_slave_1 removed [ 191.439021][ T35] team0 (unregistering): Port device team_slave_0 removed [ 191.598094][ T5843] Bluetooth: hci1: command 0x0406 tx timeout [ 193.522658][ T35] team0 (unregistering): Port device team_slave_1 removed [ 193.639386][ T35] team0 (unregistering): Port device team_slave_0 removed [ 194.661225][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.667789][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.027696][ T7686] 8021q: adding VLAN 0 to HW filter on device bond0 [ 195.069138][ T7686] 8021q: adding VLAN 0 to HW filter on device team0 [ 195.173645][ T7601] bridge0: port 1(bridge_slave_0) entered blocking state [ 195.180788][ T7601] bridge0: port 1(bridge_slave_0) entered forwarding state [ 195.228268][ T7601] bridge0: port 2(bridge_slave_1) entered blocking state [ 195.235448][ T7601] bridge0: port 2(bridge_slave_1) entered forwarding state [ 195.279165][ T7688] 8021q: adding VLAN 0 to HW filter on device bond0 [ 195.382129][ T7688] 8021q: adding VLAN 0 to HW filter on device team0 [ 195.430065][ T7600] bridge0: port 1(bridge_slave_0) entered blocking state [ 195.437244][ T7600] bridge0: port 1(bridge_slave_0) entered forwarding state [ 195.487255][ T7603] bridge0: port 2(bridge_slave_1) entered blocking state [ 195.494442][ T7603] bridge0: port 2(bridge_slave_1) entered forwarding state [ 195.520454][ T7686] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 195.970550][ T7686] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 196.032180][ T7688] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 196.146696][ T7686] veth0_vlan: entered promiscuous mode [ 196.179745][ T7686] veth1_vlan: entered promiscuous mode [ 196.262155][ T7686] veth0_macvtap: entered promiscuous mode [ 196.288733][ T7686] veth1_macvtap: entered promiscuous mode [ 196.346478][ T7686] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 196.377779][ T7686] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 196.403688][ T7686] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 196.427795][ T7686] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 196.445089][ T7686] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 196.479717][ T7686] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 196.506194][ T7686] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 196.542561][ T7686] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 196.583706][ T7686] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 196.609378][ T7686] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 196.636551][ T7686] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.673707][ T7686] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.704226][ T7686] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.712986][ T7686] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.939877][ T7688] veth0_vlan: entered promiscuous mode [ 196.970400][ T7688] veth1_vlan: entered promiscuous mode [ 197.289323][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 197.314163][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 197.347990][ T7688] veth0_macvtap: entered promiscuous mode [ 197.393024][ T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 197.404153][ T7688] veth1_macvtap: entered promiscuous mode [ 197.419911][ T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 197.568386][ T7688] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 197.586838][ T7688] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 197.608509][ T7688] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 197.629947][ T7688] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 197.660643][ T7688] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 197.697715][ T7688] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 197.726454][ T7688] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 198.281393][ T7688] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 198.323685][ T7688] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 198.353623][ T7688] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 198.365477][ T7688] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 198.375363][ T7688] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 198.385827][ T7688] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 198.397023][ T7688] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 198.414451][ T7688] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.423604][ T7688] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.432332][ T7688] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.441419][ T7688] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.335384][ T7596] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 199.351990][ T7596] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 199.402039][ T81] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 199.413592][ T81] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 205.589882][ T8087] netlink: 4 bytes leftover after parsing attributes in process `syz.4.358'. [ 205.621394][ T8085] svc: failed to register nfsdv3 RPC service (errno 111). [ 205.663014][ T8085] svc: failed to register nfsaclv3 RPC service (errno 111). [ 210.856795][ T29] audit: type=1326 audit(1730037377.338:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8180 comm=093D exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc0c3d7e719 code=0x0 [ 210.922617][ T8183] openvswitch: netlink: Flow key attribute not present in set flow. [ 213.963026][ T8235] Dead loop on virtual device ip6_vti0, fix it urgently! [ 213.978642][ T8235] Dead loop on virtual device ip6_vti0, fix it urgently! [ 213.994147][ T8235] Dead loop on virtual device ip6_vti0, fix it urgently! [ 214.001808][ T8235] Dead loop on virtual device ip6_vti0, fix it urgently! [ 214.053982][ T8235] Dead loop on virtual device ip6_vti0, fix it urgently! [ 214.062273][ T8235] Dead loop on virtual device ip6_vti0, fix it urgently! [ 217.729812][ T8347] netlink: 'syz.3.397': attribute type 11 has an invalid length. [ 218.571150][ T5843] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 218.580543][ T5843] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 218.589904][ T5843] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 218.600677][ T5843] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 218.611936][ T5843] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 218.630658][ T5843] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 219.572809][ T8375] chnl_net:caif_netlink_parms(): no params data found [ 220.538324][ T8375] bridge0: port 1(bridge_slave_0) entered blocking state [ 220.568701][ T8375] bridge0: port 1(bridge_slave_0) entered disabled state [ 220.601662][ T8375] bridge_slave_0: entered allmulticast mode [ 220.637126][ T8375] bridge_slave_0: entered promiscuous mode [ 220.672430][ T8375] bridge0: port 2(bridge_slave_1) entered blocking state [ 220.696158][ T8375] bridge0: port 2(bridge_slave_1) entered disabled state [ 220.714049][ T5843] Bluetooth: hci4: command tx timeout [ 220.746046][ T8375] bridge_slave_1: entered allmulticast mode [ 220.778794][ T8375] bridge_slave_1: entered promiscuous mode [ 220.965883][ T8375] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 221.021317][ T8375] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 221.417073][ T8375] team0: Port device team_slave_0 added [ 221.748627][ T8375] team0: Port device team_slave_1 added [ 221.943031][ T8375] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 221.972278][ T8375] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 222.082105][ T8375] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 222.165113][ T8375] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 222.207321][ T8375] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 222.325519][ T5843] Bluetooth: hci3: command 0x0406 tx timeout [ 222.362731][ T8375] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 222.794042][ T5838] Bluetooth: hci4: command tx timeout [ 223.406317][ T8375] hsr_slave_0: entered promiscuous mode [ 223.559181][ T8375] hsr_slave_1: entered promiscuous mode [ 224.873681][ T5838] Bluetooth: hci4: command tx timeout [ 225.481261][ T8375] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 225.553482][ T8375] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 225.687172][ T8375] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 225.887022][ T8375] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 226.175330][ T8375] 8021q: adding VLAN 0 to HW filter on device bond0 [ 226.240706][ T8375] 8021q: adding VLAN 0 to HW filter on device team0 [ 226.410638][ T8375] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 226.453871][ T8375] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 226.632704][ T81] bridge0: port 1(bridge_slave_0) entered blocking state [ 226.639885][ T81] bridge0: port 1(bridge_slave_0) entered forwarding state [ 226.708472][ T81] bridge0: port 2(bridge_slave_1) entered blocking state [ 226.715649][ T81] bridge0: port 2(bridge_slave_1) entered forwarding state [ 226.953785][ T5838] Bluetooth: hci4: command tx timeout [ 227.865490][ T8375] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 229.078101][ T8375] veth0_vlan: entered promiscuous mode [ 229.179454][ T8375] veth1_vlan: entered promiscuous mode [ 229.369623][ T8375] veth0_macvtap: entered promiscuous mode [ 229.408079][ T8375] veth1_macvtap: entered promiscuous mode [ 229.471008][ T8375] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 229.513664][ T8375] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 229.533737][ T8375] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 229.574805][ T8375] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 229.593765][ T8375] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 229.618278][ T8375] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 229.655301][ T8375] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 229.684235][ T8375] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 229.726242][ T8375] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 229.773155][ T8375] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 229.784392][ T8375] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 229.804545][ T8375] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 229.815202][ T8375] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 229.847778][ T8375] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 229.866368][ T8375] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 229.889320][ T8375] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 229.914138][ T8375] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 229.938764][ T8375] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 231.052271][ T8375] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.093745][ T8375] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.106222][ T8375] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.139626][ T8375] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.519160][ T7602] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.744619][ T8558] workqueue: name exceeds WQ_NAME_LEN. Truncating to: ýÿÿÿÿÿÿÿ-œä¾ž6y“Õ¼Ÿ¦÷ k†Áa;« [ 232.407035][ T7602] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.894929][ T7598] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 232.902805][ T7598] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 233.194441][ T7602] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.727850][ T7602] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.838346][ T7598] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 233.873733][ T7598] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 234.522654][ T7602] bridge_slave_1: left allmulticast mode [ 234.535860][ T7602] bridge_slave_1: left promiscuous mode [ 234.541723][ T7602] bridge0: port 2(bridge_slave_1) entered disabled state [ 234.554735][ T8579] ======================================================= [ 234.554735][ T8579] WARNING: The mand mount option has been deprecated and [ 234.554735][ T8579] and is ignored by this kernel. Remove the mand [ 234.554735][ T8579] option from the mount to silence this warning. [ 234.554735][ T8579] ======================================================= [ 234.730518][ T7602] bridge_slave_0: left allmulticast mode [ 234.738395][ T7602] bridge_slave_0: left promiscuous mode [ 234.754717][ T7602] bridge0: port 1(bridge_slave_0) entered disabled state [ 235.762664][ T8603] cifs: Unknown parameter 'n' [ 237.294284][ T7602] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 237.380135][ T7602] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 237.416460][ T7602] bond0 (unregistering): Released all slaves [ 237.497756][ T8592] netlink: 4 bytes leftover after parsing attributes in process `syz.1.442'. [ 237.531338][ T8592] ip6gre0: entered promiscuous mode [ 237.549355][ T8592] ip6gre0: entered allmulticast mode [ 237.619814][ T7602] HSR: left promiscuous mode [ 239.254981][ T7602] hsr_slave_0: left promiscuous mode [ 239.270230][ T7602] hsr_slave_1: left promiscuous mode [ 239.283184][ T7602] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 239.302651][ T7602] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 239.310930][ T7602] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 239.319044][ T7602] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 239.347781][ T7602] veth1_macvtap: left promiscuous mode [ 239.353512][ T7602] veth0_macvtap: left promiscuous mode [ 239.360160][ T7602] veth1_vlan: left promiscuous mode [ 239.373799][ T7602] veth0_vlan: left promiscuous mode [ 240.104728][ T7602] team0 (unregistering): Port device team_slave_1 removed [ 240.200625][ T7602] team0 (unregistering): Port device team_slave_0 removed [ 240.622277][ T8681] kexec: Could not allocate control_code_buffer [ 242.901188][ T8738] netlink: 5 bytes leftover after parsing attributes in process `syz.4.467'. [ 243.281121][ T8741] can: request_module (can-proto-4) failed. [ 245.016926][ T8800] delete_channel: no stack [ 245.053882][ T8800] delete_channel: no stack [ 247.935501][ T8887] netlink: 'syz.4.489': attribute type 11 has an invalid length. [ 248.015179][ T8887] netlink: 'syz.4.489': attribute type 11 has an invalid length. [ 249.895182][ T8941] netlink: 'syz.4.498': attribute type 11 has an invalid length. [ 249.944031][ T8941] netlink: 'syz.4.498': attribute type 11 has an invalid length. [ 251.458177][ T7602] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.855950][ T7602] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 252.059019][ T7602] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 252.149375][ T5843] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 252.164694][ T5843] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 252.173061][ T5843] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 252.207191][ T5843] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 252.227581][ T5843] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 252.236093][ T5151] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 252.386558][ T7602] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 252.405265][ T5151] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 252.415132][ T5151] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 252.423136][ T5151] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 252.431143][ T5151] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 252.438801][ T5151] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 252.446218][ T5151] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 252.802835][ T7602] bridge_slave_1: left allmulticast mode [ 252.821718][ T7602] bridge_slave_1: left promiscuous mode [ 252.832003][ T7602] bridge0: port 2(bridge_slave_1) entered disabled state [ 252.884758][ T7602] bridge_slave_0: left allmulticast mode [ 252.891107][ T7602] bridge_slave_0: left promiscuous mode [ 252.897295][ T7602] bridge0: port 1(bridge_slave_0) entered disabled state [ 253.541981][ T9000] sctp: [Deprecated]: syz.3.508 (pid 9000) Use of int in max_burst socket option deprecated. [ 253.541981][ T9000] Use struct sctp_assoc_value instead [ 253.707694][ T7602] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 253.719568][ T7602] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 253.732125][ T7602] bond0 (unregistering): Released all slaves [ 254.258342][ T8995] chnl_net:caif_netlink_parms(): no params data found [ 254.319690][ T5151] Bluetooth: hci0: command tx timeout [ 254.381929][ T8992] chnl_net:caif_netlink_parms(): no params data found [ 254.473726][ T5151] Bluetooth: hci1: command tx timeout [ 254.510483][ T7602] hsr_slave_0: left promiscuous mode [ 254.531039][ T7602] hsr_slave_1: left promiscuous mode [ 254.564399][ T7602] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 254.572129][ T7602] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 254.602213][ T7602] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 254.644603][ T7602] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 254.732967][ T7602] veth1_macvtap: left promiscuous mode [ 254.748803][ T7602] veth0_macvtap: left promiscuous mode [ 254.759105][ T7602] veth1_vlan: left promiscuous mode [ 254.773593][ T7602] veth0_vlan: left promiscuous mode [ 255.738962][ T7602] team0 (unregistering): Port device team_slave_1 removed [ 255.816247][ T7602] team0 (unregistering): Port device team_slave_0 removed [ 256.079793][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.086310][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.393900][ T5151] Bluetooth: hci0: command tx timeout [ 256.559761][ T5151] Bluetooth: hci1: command tx timeout [ 257.281361][ T9053] netlink: 330 bytes leftover after parsing attributes in process `syz.3.516'. [ 257.293994][ T8995] bridge0: port 1(bridge_slave_0) entered blocking state [ 257.331444][ T8995] bridge0: port 1(bridge_slave_0) entered disabled state [ 257.359288][ T8995] bridge_slave_0: entered allmulticast mode [ 257.367137][ T8995] bridge_slave_0: entered promiscuous mode [ 257.390036][ T8995] bridge0: port 2(bridge_slave_1) entered blocking state [ 257.408293][ T8995] bridge0: port 2(bridge_slave_1) entered disabled state [ 257.424023][ T8995] bridge_slave_1: entered allmulticast mode [ 257.435131][ T8995] bridge_slave_1: entered promiscuous mode [ 257.497306][ T8992] bridge0: port 1(bridge_slave_0) entered blocking state [ 257.518321][ T8992] bridge0: port 1(bridge_slave_0) entered disabled state [ 257.535889][ T8992] bridge_slave_0: entered allmulticast mode [ 257.543476][ T8992] bridge_slave_0: entered promiscuous mode [ 257.604433][ T8995] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 257.616928][ T8995] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 257.645153][ T8992] bridge0: port 2(bridge_slave_1) entered blocking state [ 257.652287][ T8992] bridge0: port 2(bridge_slave_1) entered disabled state [ 257.659831][ T8992] bridge_slave_1: entered allmulticast mode [ 257.667592][ T8992] bridge_slave_1: entered promiscuous mode [ 257.702114][ T8995] team0: Port device team_slave_0 added [ 257.737295][ T8992] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 257.748619][ T8995] team0: Port device team_slave_1 added [ 257.775758][ T8992] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 257.796648][ T8995] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 257.803971][ T8995] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 257.830608][ T8995] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 257.844196][ T8995] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 257.852043][ T8995] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 257.878185][ T8995] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 257.909005][ T8992] team0: Port device team_slave_0 added [ 257.930815][ T8992] team0: Port device team_slave_1 added [ 258.010300][ T8995] hsr_slave_0: entered promiscuous mode [ 258.044444][ T8995] hsr_slave_1: entered promiscuous mode [ 258.055188][ T8995] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 258.066293][ T8995] Cannot create hsr debugfs directory [ 258.105765][ T8992] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 258.113067][ T8992] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 258.145879][ T8992] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 258.193247][ T8992] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 258.212372][ T8992] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 258.252615][ T8992] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 258.431943][ T7602] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.483767][ T5151] Bluetooth: hci0: command tx timeout [ 258.614212][ T8992] hsr_slave_0: entered promiscuous mode [ 258.629831][ T8992] hsr_slave_1: entered promiscuous mode [ 258.634223][ T5151] Bluetooth: hci1: command tx timeout [ 258.651108][ T8992] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 258.658854][ T8992] Cannot create hsr debugfs directory [ 258.712999][ T7602] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.897863][ T7602] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.038443][ T7602] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.217306][ T8995] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 259.258215][ T8995] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 259.340742][ T8995] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 259.466047][ T8995] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 259.694345][ T7602] bridge_slave_1: left allmulticast mode [ 259.700049][ T7602] bridge_slave_1: left promiscuous mode [ 259.722637][ T7602] bridge0: port 2(bridge_slave_1) entered disabled state [ 259.781945][ T7602] bridge_slave_0: left allmulticast mode [ 259.801663][ T7602] bridge_slave_0: left promiscuous mode [ 259.822019][ T7602] bridge0: port 1(bridge_slave_0) entered disabled state [ 260.554438][ T5151] Bluetooth: hci0: command tx timeout [ 260.714179][ T5151] Bluetooth: hci1: command tx timeout [ 260.747628][ T7602] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 260.768273][ T7602] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 260.811441][ T7602] bond0 (unregistering): Released all slaves [ 261.198821][ T8995] 8021q: adding VLAN 0 to HW filter on device bond0 [ 261.217681][ T8995] 8021q: adding VLAN 0 to HW filter on device team0 [ 261.229461][ T8539] bridge0: port 1(bridge_slave_0) entered blocking state [ 261.236629][ T8539] bridge0: port 1(bridge_slave_0) entered forwarding state [ 261.300094][ T8992] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 261.326391][ T8992] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 261.355339][ T8539] bridge0: port 2(bridge_slave_1) entered blocking state [ 261.362524][ T8539] bridge0: port 2(bridge_slave_1) entered forwarding state [ 261.502874][ T8992] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 261.526559][ T8992] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 261.990749][ T7602] hsr_slave_0: left promiscuous mode [ 262.007469][ T7602] hsr_slave_1: left promiscuous mode [ 262.029173][ T7602] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 262.037128][ T7602] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 262.047327][ T7602] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 262.054945][ T7602] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 262.095942][ T7602] veth1_macvtap: left promiscuous mode [ 262.101533][ T7602] veth0_macvtap: left promiscuous mode [ 262.113758][ T7602] veth1_vlan: left promiscuous mode [ 262.119252][ T7602] veth0_vlan: left promiscuous mode [ 264.358946][ T7602] team0 (unregistering): Port device team_slave_1 removed [ 264.515716][ T7602] team0 (unregistering): Port device team_slave_0 removed [ 265.860528][ T9187] syz.5.539 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 266.018823][ T9153] netlink: 'syz.3.532': attribute type 6 has an invalid length. [ 266.053737][ T9153] netlink: 330 bytes leftover after parsing attributes in process `syz.3.532'. [ 266.168747][ T8992] 8021q: adding VLAN 0 to HW filter on device bond0 [ 266.237268][ T8995] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 266.298805][ T8992] 8021q: adding VLAN 0 to HW filter on device team0 [ 266.352774][ T5977] bridge0: port 1(bridge_slave_0) entered blocking state [ 266.359965][ T5977] bridge0: port 1(bridge_slave_0) entered forwarding state [ 266.407643][ T6182] bridge0: port 2(bridge_slave_1) entered blocking state [ 266.414853][ T6182] bridge0: port 2(bridge_slave_1) entered forwarding state [ 267.140494][ T8992] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 267.270322][ T9220] nbd: must specify at least one socket [ 267.290760][ T8995] veth0_vlan: entered promiscuous mode [ 267.306472][ T8992] veth0_vlan: entered promiscuous mode [ 267.364453][ T8992] veth1_vlan: entered promiscuous mode [ 267.371405][ T8995] veth1_vlan: entered promiscuous mode [ 267.485840][ T8992] veth0_macvtap: entered promiscuous mode [ 267.536464][ T8992] veth1_macvtap: entered promiscuous mode [ 267.545897][ T8995] veth0_macvtap: entered promiscuous mode [ 267.575774][ T8995] veth1_macvtap: entered promiscuous mode [ 267.629308][ T8995] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 267.670388][ T8995] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 267.694140][ T8995] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 267.733581][ T8995] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 267.765986][ T8995] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 267.776740][ T8992] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 267.814210][ T8992] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 267.830862][ T8992] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 267.852817][ T8992] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 267.898481][ T8992] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 267.943668][ T8992] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 267.974947][ T8992] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 267.999333][ T8995] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 268.033592][ T8995] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 268.043456][ T8995] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 268.056881][ T8995] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 268.068523][ T8995] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 268.151679][ T8992] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 268.162553][ T8992] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 268.172692][ T8992] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 268.183450][ T8992] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 268.193391][ T8992] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 268.203948][ T8992] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 268.215078][ T8992] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 268.225279][ T8992] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.234421][ T8992] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.243144][ T8992] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.252261][ T8992] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.316012][ T8995] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.347629][ T8995] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.375665][ T8995] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.395964][ T8995] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.688547][ T7603] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 268.705298][ T7603] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 268.713297][ T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 268.740753][ T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 268.901629][ T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 268.920499][ T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 268.941132][ T5977] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 268.967973][ T5977] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 269.590924][ T9275] netlink: 229 bytes leftover after parsing attributes in process `syz.5.548'. [ 269.910972][ T9314] netlink: 16 bytes leftover after parsing attributes in process `syz.1.553'. [ 270.664084][ T9352] netlink: 334 bytes leftover after parsing attributes in process `syz.5.559'. [ 271.558338][ T9386] svc: failed to register nfsdv3 RPC service (errno 111). [ 271.609070][ T9386] svc: failed to register nfsaclv3 RPC service (errno 111). [ 271.697794][ T5977] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.950366][ T5977] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.337673][ T5977] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.598549][ T5977] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.616081][ T5838] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 272.626432][ T5838] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 272.663321][ T5838] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 272.673221][ T5838] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 272.681343][ T5838] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 272.682544][ T9415] netlink: 4 bytes leftover after parsing attributes in process `syz.1.568'. [ 272.699243][ T5838] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 273.246707][ T5977] bridge_slave_1: left allmulticast mode [ 273.252406][ T5977] bridge_slave_1: left promiscuous mode [ 273.277877][ T5977] bridge0: port 2(bridge_slave_1) entered disabled state [ 273.433940][ T5977] bridge_slave_0: left allmulticast mode [ 273.443628][ T5977] bridge_slave_0: left promiscuous mode [ 273.449366][ T5977] bridge0: port 1(bridge_slave_0) entered disabled state [ 274.797680][ T5838] Bluetooth: hci1: command tx timeout [ 274.919745][ T5977] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 274.961889][ T5977] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 274.990254][ T5977] bond0 (unregistering): Released all slaves [ 275.481655][ T9421] chnl_net:caif_netlink_parms(): no params data found [ 276.345593][ T9421] bridge0: port 1(bridge_slave_0) entered blocking state [ 276.352721][ T9421] bridge0: port 1(bridge_slave_0) entered disabled state [ 276.408665][ T9421] bridge_slave_0: entered allmulticast mode [ 276.429567][ T9421] bridge_slave_0: entered promiscuous mode [ 276.456941][ T5977] hsr_slave_0: left promiscuous mode [ 276.483956][ T5977] hsr_slave_1: left promiscuous mode [ 276.490155][ T5977] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 276.509717][ T5977] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 276.524456][ T5977] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 276.532024][ T5977] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 276.577236][ T5977] veth1_macvtap: left promiscuous mode [ 276.613834][ T5977] veth0_macvtap: left promiscuous mode [ 276.621583][ T5977] veth1_vlan: left promiscuous mode [ 276.628036][ T5977] veth0_vlan: left promiscuous mode [ 276.873773][ T5838] Bluetooth: hci1: command tx timeout [ 277.954292][ T5977] team0 (unregistering): Port device team_slave_1 removed [ 278.066080][ T5977] team0 (unregistering): Port device team_slave_0 removed [ 278.546847][ T9421] bridge0: port 2(bridge_slave_1) entered blocking state [ 278.554266][ T9421] bridge0: port 2(bridge_slave_1) entered disabled state [ 278.561468][ T9421] bridge_slave_1: entered allmulticast mode [ 278.570641][ T9421] bridge_slave_1: entered promiscuous mode [ 278.653003][ T9421] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 278.701562][ T9421] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 278.764455][ T9521] svc: failed to register nfsdv3 RPC service (errno 111). [ 278.819512][ T9521] svc: failed to register nfsaclv3 RPC service (errno 111). [ 278.867783][ T9421] team0: Port device team_slave_0 added [ 278.891518][ T9421] team0: Port device team_slave_1 added [ 278.954310][ T5838] Bluetooth: hci1: command tx timeout [ 278.965846][ T9421] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 278.999114][ T9421] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 279.031248][ T9421] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 279.093265][ T9421] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 279.110960][ T9421] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 279.142344][ T9421] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 279.223445][ T9421] hsr_slave_0: entered promiscuous mode [ 279.290439][ T9421] hsr_slave_1: entered promiscuous mode [ 279.314473][ T9421] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 279.322116][ T9421] Cannot create hsr debugfs directory [ 279.477199][ T7603] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.686671][ T7603] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.800995][ T7603] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.958437][ T5151] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 279.968526][ T5151] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 279.976901][ T5151] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 279.986772][ T5151] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 279.990119][ T7603] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.995433][ T5151] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 280.015457][ T5151] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 280.462277][ T7603] bridge_slave_1: left allmulticast mode [ 280.474005][ T7603] bridge_slave_1: left promiscuous mode [ 280.502468][ T7603] bridge0: port 2(bridge_slave_1) entered disabled state [ 280.523350][ T7603] bridge_slave_0: left allmulticast mode [ 280.530970][ T7603] bridge_slave_0: left promiscuous mode [ 280.543585][ T7603] bridge0: port 1(bridge_slave_0) entered disabled state [ 281.035811][ T5838] Bluetooth: hci1: command tx timeout [ 281.368503][ T7603] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 281.408928][ T7603] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 281.434960][ T7603] bond0 (unregistering): Released all slaves [ 281.562312][ T9421] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 281.642575][ T9421] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 281.755410][ T9421] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 281.832560][ T9556] chnl_net:caif_netlink_parms(): no params data found [ 281.859620][ T9421] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 282.057571][ T7603] hsr_slave_0: left promiscuous mode [ 282.063514][ T7603] hsr_slave_1: left promiscuous mode [ 282.074436][ T5838] Bluetooth: hci0: command tx timeout [ 282.080949][ T7603] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 282.088489][ T7603] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 282.097124][ T7603] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 282.105015][ T7603] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 282.131424][ T7603] veth1_macvtap: left promiscuous mode [ 282.137204][ T7603] veth0_macvtap: left promiscuous mode [ 282.142809][ T7603] veth1_vlan: left promiscuous mode [ 282.148316][ T7603] veth0_vlan: left promiscuous mode [ 283.308693][ T7603] team0 (unregistering): Port device team_slave_1 removed [ 283.350004][ T9624] netlink: 64 bytes leftover after parsing attributes in process `syz.5.602'. [ 283.400842][ T7603] team0 (unregistering): Port device team_slave_0 removed [ 284.155490][ T5838] Bluetooth: hci0: command tx timeout [ 284.702198][ T9556] bridge0: port 1(bridge_slave_0) entered blocking state [ 284.709809][ T9556] bridge0: port 1(bridge_slave_0) entered disabled state [ 284.717134][ T9556] bridge_slave_0: entered allmulticast mode [ 284.725908][ T9556] bridge_slave_0: entered promiscuous mode [ 284.737039][ T9556] bridge0: port 2(bridge_slave_1) entered blocking state [ 284.744191][ T9556] bridge0: port 2(bridge_slave_1) entered disabled state [ 284.751369][ T9556] bridge_slave_1: entered allmulticast mode [ 284.760035][ T9556] bridge_slave_1: entered promiscuous mode [ 284.866922][ T9556] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 284.896436][ T9556] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 285.050336][ T9556] team0: Port device team_slave_0 added [ 285.072645][ T9556] team0: Port device team_slave_1 added [ 285.231176][ T9556] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 285.257972][ T9556] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 285.303793][ T9556] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 285.327406][ T9556] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 285.334521][ T9556] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 285.379075][ T9556] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 285.600681][ T9556] hsr_slave_0: entered promiscuous mode [ 285.610435][ T9556] hsr_slave_1: entered promiscuous mode [ 285.622175][ T9556] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 285.634912][ T9556] Cannot create hsr debugfs directory [ 285.656420][ T9421] 8021q: adding VLAN 0 to HW filter on device bond0 [ 285.746866][ T9421] 8021q: adding VLAN 0 to HW filter on device team0 [ 285.861914][ T7604] bridge0: port 1(bridge_slave_0) entered blocking state [ 285.869112][ T7604] bridge0: port 1(bridge_slave_0) entered forwarding state [ 285.927025][ T7604] bridge0: port 2(bridge_slave_1) entered blocking state [ 285.934225][ T7604] bridge0: port 2(bridge_slave_1) entered forwarding state [ 286.234541][ T5838] Bluetooth: hci0: command tx timeout [ 286.680554][ T9421] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 287.457061][ T9556] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 287.549975][ T9556] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 287.589169][ T9556] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 287.681644][ T9556] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 287.810798][ T9421] veth0_vlan: entered promiscuous mode [ 287.861199][ T9421] veth1_vlan: entered promiscuous mode [ 287.941837][ T9421] veth0_macvtap: entered promiscuous mode [ 287.968547][ T9421] veth1_macvtap: entered promiscuous mode [ 288.080476][ T9421] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 288.116599][ T9421] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 288.143592][ T9421] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 288.173721][ T9421] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 288.205105][ T9421] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 288.224805][ T9556] 8021q: adding VLAN 0 to HW filter on device bond0 [ 288.313824][ T5838] Bluetooth: hci0: command tx timeout [ 288.325422][ T9421] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 288.373739][ T9421] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 288.412901][ T9421] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 288.445339][ T9421] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 288.467397][ T9421] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 288.536344][ T9421] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 288.553617][ T9421] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 288.573453][ T9421] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 288.603599][ T9421] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 288.728176][ T9556] 8021q: adding VLAN 0 to HW filter on device team0 [ 288.812044][ T5977] bridge0: port 1(bridge_slave_0) entered blocking state [ 288.819247][ T5977] bridge0: port 1(bridge_slave_0) entered forwarding state [ 288.851522][ T5977] bridge0: port 2(bridge_slave_1) entered blocking state [ 288.858711][ T5977] bridge0: port 2(bridge_slave_1) entered forwarding state [ 289.041035][ T5977] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 289.058873][ T5977] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 289.102420][ T5977] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 289.125998][ T5977] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 289.404183][ T9556] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 289.445732][ T9556] veth0_vlan: entered promiscuous mode [ 289.467674][ T9556] veth1_vlan: entered promiscuous mode [ 289.498617][ T9556] veth0_macvtap: entered promiscuous mode [ 289.511123][ T9556] veth1_macvtap: entered promiscuous mode [ 289.541397][ T9556] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 289.560755][ T9556] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 289.572223][ T9556] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 289.589952][ T9556] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 289.608266][ T9556] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 289.628333][ T9556] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 289.645064][ T9556] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 289.663183][ T9762] )zV: entered promiscuous mode [ 289.733084][ T9556] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 289.762418][ T9556] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 289.778697][ T9556] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 289.809167][ T9556] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 289.834428][ T9556] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 289.869174][ T9556] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 289.894805][ T9556] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 289.934715][ T9556] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 289.943470][ T9556] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 289.983813][ T9556] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 289.992569][ T9556] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 290.286783][ T7597] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 290.332878][ T7597] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 290.422749][ T6180] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 290.450227][ T6180] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 293.929619][ T9924] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 294.721910][ T9953] netlink: 8 bytes leftover after parsing attributes in process `syz.3.645'. [ 295.359750][ T9963] can: request_module (can-proto-5) failed. [ 297.162168][T10042] cgroup: fork rejected by pids controller in /syz3 [ 299.115174][T10132] delete_channel: no stack [ 300.196738][T10160] netlink: 334 bytes leftover after parsing attributes in process `syz.6.670'. [ 302.558348][T10185] ptrace attach of "./syz-executor exec"[6312] was attempted by "./syz-executor exec"[10185] [ 315.474210][T10475] netlink: 121 bytes leftover after parsing attributes in process `syz.6.722'. [ 316.914960][T10498] netlink: 'syz.6.727': attribute type 11 has an invalid length. [ 316.922747][T10498] netlink: 'syz.6.727': attribute type 11 has an invalid length. [ 317.036954][T10505] netlink: 'syz.6.727': attribute type 11 has an invalid length. [ 317.066887][T10505] netlink: 'syz.6.727': attribute type 11 has an invalid length. [ 317.517882][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.524733][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.930810][T10558] netlink: 342 bytes leftover after parsing attributes in process `syz.6.737'. [ 330.935719][T10719] can: request_module (can-proto-0) failed. [ 331.785276][T10737] can: request_module (can-proto-0) failed. [ 333.107922][T10755] netlink: 16 bytes leftover after parsing attributes in process `syz.1.766'. [ 333.898846][T10759] svc: failed to register nfsdv3 RPC service (errno 111). [ 333.981519][T10759] svc: failed to register nfsaclv3 RPC service (errno 111). [ 338.355800][T10808] svc: failed to register nfsdv3 RPC service (errno 111). [ 338.464451][T10808] svc: failed to register nfsaclv3 RPC service (errno 111). [ 345.198220][ T5151] Bluetooth: hci4: command 0x0406 tx timeout [ 348.273234][T10977] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 348.333899][T10977] CIFS mount error: No usable UNC path provided in device string! [ 348.333899][T10977] [ 348.350923][T10977] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 349.225781][T10987] netlink: 342 bytes leftover after parsing attributes in process `syz.5.823'. [ 355.865412][T11074] netlink: 8 bytes leftover after parsing attributes in process `syz.5.845'. [ 361.553941][ T29] audit: type=1326 audit(8277292085.493:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11173 comm="syz.1.870" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f429577e719 code=0x0 [ 364.062426][T11225] Process accounting resumed [ 365.585837][T11255] openvswitch: netlink: Flow key attribute not present in set flow. [ 365.740075][ T6182] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 366.623154][ T6182] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 367.240716][T10056] syz.3.661 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 367.330448][T10056] CPU: 0 UID: 0 PID: 10056 Comm: syz.3.661 Not tainted 6.12.0-rc4-syzkaller-00261-g850925a8133c #0 [ 367.341196][T10056] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 367.351274][T10056] Call Trace: [ 367.354563][T10056] [ 367.357506][T10056] dump_stack_lvl+0x16c/0x1f0 [ 367.362195][T10056] dump_header+0x101/0x900 [ 367.366631][T10056] oom_kill_process+0x270/0xa60 [ 367.371520][T10056] out_of_memory+0x351/0x1700 [ 367.376237][T10056] ? __pfx_out_of_memory+0x10/0x10 [ 367.381377][T10056] ? rcu_read_unlock+0x17/0x60 [ 367.386161][T10056] ? find_held_lock+0x2d/0x110 [ 367.390948][T10056] mem_cgroup_out_of_memory+0x207/0x270 [ 367.396506][T10056] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 367.402590][T10056] ? do_raw_spin_unlock+0x172/0x230 [ 367.407804][T10056] try_charge_memcg+0x5b9/0xaf0 [ 367.412679][T10056] ? __pfx_try_charge_memcg+0x10/0x10 [ 367.418068][T10056] ? get_mem_cgroup_from_mm+0x7f/0x5f0 [ 367.423545][T10056] ? get_mem_cgroup_from_mm+0x129/0x5f0 [ 367.429108][T10056] __mem_cgroup_charge+0x9b/0x280 [ 367.434163][T10056] shmem_alloc_and_add_folio+0x507/0xc00 [ 367.439816][T10056] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 367.445987][T10056] ? shmem_allowable_huge_orders+0xcd/0x3f0 [ 367.451895][T10056] ? mark_lock+0xb5/0xc60 [ 367.456251][T10056] shmem_get_folio_gfp+0x689/0x1530 [ 367.461465][T10056] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 367.467109][T10056] ? inode_update_timestamps+0x165/0x580 [ 367.472755][T10056] shmem_write_begin+0x161/0x300 [ 367.477705][T10056] ? __pfx_shmem_write_begin+0x10/0x10 [ 367.483172][T10056] ? lockdep_hardirqs_on+0x7c/0x110 [ 367.488385][T10056] ? balance_dirty_pages_ratelimited_flags+0x92/0x1270 [ 367.495246][T10056] ? ktime_get_coarse_real_ts64+0x147/0x200 [ 367.501165][T10056] generic_perform_write+0x2ba/0x920 [ 367.506473][T10056] ? __pfx_generic_perform_write+0x10/0x10 [ 367.512287][T10056] ? __mark_inode_dirty+0x2ae/0xe60 [ 367.517498][T10056] ? generic_update_time+0xcf/0xf0 [ 367.522619][T10056] ? mnt_put_write_access_file+0x45/0xf0 [ 367.528272][T10056] shmem_file_write_iter+0x10e/0x140 [ 367.533577][T10056] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 367.539400][T10056] __kernel_write_iter+0x318/0xa80 [ 367.544520][T10056] ? __pfx___kernel_write_iter+0x10/0x10 [ 367.550157][T10056] ? get_dump_page+0x15c/0x220 [ 367.554942][T10056] ? copy_mc_enhanced_fast_string+0xa/0x13 [ 367.560764][T10056] dump_user_range+0x389/0x8a0 [ 367.565552][T10056] ? __pfx_dump_user_range+0x10/0x10 [ 367.570854][T10056] ? elf_coredump_extra_notes_write+0xbe/0x430 [ 367.577019][T10056] ? __pfx_writenote+0x10/0x10 [ 367.581804][T10056] elf_core_dump+0x2766/0x3840 [ 367.586601][T10056] ? __pfx_elf_core_dump+0x10/0x10 [ 367.591724][T10056] ? kasan_save_stack+0x42/0x60 [ 367.596588][T10056] ? kasan_save_stack+0x33/0x60 [ 367.601453][T10056] ? __kasan_kmalloc+0xaa/0xb0 [ 367.606227][T10056] ? __kmalloc_node_noprof+0x211/0x440 [ 367.611699][T10056] ? __kvmalloc_node_noprof+0xad/0x1a0 [ 367.617174][T10056] ? irqentry_exit_to_user_mode+0x13f/0x280 [ 367.623080][T10056] ? asm_exc_page_fault+0x26/0x30 [ 367.628178][T10056] ? rcu_is_watching+0x12/0xc0 [ 367.632973][T10056] ? trace_lock_acquire+0x14a/0x1d0 [ 367.638198][T10056] ? get_signal+0x237c/0x26d0 [ 367.642894][T10056] ? do_coredump+0x2c42/0x4160 [ 367.647755][T10056] do_coredump+0x2c42/0x4160 [ 367.652372][T10056] ? __pfx_do_coredump+0x10/0x10 [ 367.657315][T10056] ? kmem_cache_free+0x152/0x4b0 [ 367.662264][T10056] ? irqentry_exit_to_user_mode+0x13f/0x280 [ 367.668173][T10056] ? asm_exc_page_fault+0x26/0x30 [ 367.673267][T10056] get_signal+0x237c/0x26d0 [ 367.677791][T10056] ? force_sig_fault+0xad/0xf0 [ 367.682564][T10056] ? __pfx_get_signal+0x10/0x10 [ 367.687419][T10056] ? __pfx_is_prefetch.constprop.0+0x10/0x10 [ 367.693446][T10056] arch_do_signal_or_restart+0x90/0x7e0 [ 367.699016][T10056] ? trace_irq_disable.constprop.0+0xe4/0x130 [ 367.705104][T10056] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 367.711272][T10056] ? __bad_area_nosemaphore+0x334/0x6a0 [ 367.716853][T10056] ? do_user_addr_fault+0x920/0x13f0 [ 367.722167][T10056] irqentry_exit_to_user_mode+0x13f/0x280 [ 367.727909][T10056] asm_exc_page_fault+0x26/0x30 [ 367.732776][T10056] RIP: 0033:0x20fff [ 367.736599][T10056] Code: Unable to access opcode bytes at 0x20fd5. [ 367.743006][T10056] RSP: 002b:000000000000000a EFLAGS: 00010206 [ 367.749078][T10056] RAX: 0000000000000000 RBX: 00007fc376535f80 RCX: 00007fc37637e719 [ 367.757054][T10056] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000020003b46 [ 367.765027][T10056] RBP: 00007fc3763f132e R08: 0000000000000002 R09: 0000000000000000 [ 367.773000][T10056] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 367.780974][T10056] R13: 0000000000000000 R14: 00007fc376535f80 R15: 00007ffc1050a688 [ 367.788965][T10056] [ 367.909163][ T5151] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 367.936309][ T5151] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 367.963988][ T5151] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 367.989442][T10056] memory: usage 307200kB, limit 307200kB, failcnt 38394 [ 368.033515][ T5151] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 368.073877][ T5151] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 368.087016][ T6182] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 368.098618][ T5151] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 368.187815][T10056] memory+swap: usage 428164kB, limit 9007199254740988kB, failcnt 0 [ 368.262815][T10056] kmem: usage 2824kB, limit 9007199254740988kB, failcnt 0 [ 368.283437][T11260] Invalid ELF header magic: != ELF [ 368.290686][T10056] Memory cgroup stats for /syz3: [ 368.290854][T10056] cache 310665216 [ 368.339844][T10056] rss 188416 [ 368.343095][T10056] rss_huge 0 [ 368.373655][T10056] shmem 310665216 [ 368.450058][T10056] mapped_file 135168 [ 368.454247][T10056] dirty 0 [ 368.457204][T10056] writeback 0 [ 368.460500][T10056] workingset_refault_anon 4053 [ 368.515279][T10056] workingset_refault_file 7935 [ 368.520111][T10056] swap 123867136 [ 368.556763][ T6182] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 368.621659][T10056] swapcached 827392 [ 368.648364][T10056] pgpgin 712015 [ 368.695025][T10056] pgpgout 639498 [ 368.698629][T10056] pgfault 191356 [ 368.702187][T10056] pgmajfault 645 [ 368.721910][T10056] inactive_anon 151085056 [ 368.727949][T10056] active_anon 159850496 [ 368.732252][T10056] inactive_file 0 [ 368.744252][T10056] active_file 0 [ 368.747749][T10056] unevictable 0 [ 368.751222][T10056] hierarchical_memory_limit 314572800 [ 368.758863][T10056] hierarchical_memsw_limit 9223372036854771712 [ 368.765460][T10056] total_cache 310665216 [ 368.769648][T10056] total_rss 188416 [ 368.773390][T10056] total_rss_huge 0 [ 368.777991][T10056] total_shmem 310665216 [ 368.782364][T10056] total_mapped_file 135168 [ 368.787278][T10056] total_dirty 0 [ 368.790766][T10056] total_writeback 0 [ 368.795178][T10056] total_workingset_refault_anon 4053 [ 368.800713][T10056] total_workingset_refault_file 7935 [ 368.814566][T10056] total_swap 123867136 [ 368.855295][T10056] total_swapcached 827392 [ 368.895427][ T6182] bridge_slave_1: left allmulticast mode [ 368.912412][ T6182] bridge_slave_1: left promiscuous mode [ 368.919701][T11275] netlink: 8 bytes leftover after parsing attributes in process `syz.5.893'. [ 368.934915][T10056] total_pgpgin 712015 [ 368.938036][ T6182] bridge0: port 2(bridge_slave_1) entered disabled state [ 368.938919][T10056] total_pgpgout 639498 [ 368.965542][T10056] total_pgfault 191356 [ 368.972091][ T6182] bridge_slave_0: left allmulticast mode [ 368.980482][ T6182] bridge_slave_0: left promiscuous mode [ 368.985266][T10056] total_pgmajfault 645 [ 368.993924][ T6182] bridge0: port 1(bridge_slave_0) entered disabled state [ 369.006602][T10056] total_inactive_anon 151085056 [ 369.011564][T10056] total_active_anon 159850496 [ 369.034979][T10056] total_inactive_file 0 [ 369.039188][T10056] total_active_file 0 [ 369.043181][T10056] total_unevictable 0 [ 369.080003][T10056] anon_cost 0 [ 369.083348][T10056] file_cost 0 [ 369.104819][T10056] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.661,pid=10072,uid=0 [ 369.177928][T10056] Memory cgroup out of memory: Killed process 10072 (syz.3.661) total-vm:92004kB, anon-rss:748kB, file-rss:28368kB, shmem-rss:128kB, UID:0 pgtables:152kB oom_score_adj:1000 [ 370.154696][ T5151] Bluetooth: hci0: command tx timeout [ 370.850685][T11301] svc: failed to register nfsdv3 RPC service (errno 111). [ 370.872610][T11301] svc: failed to register nfsaclv3 RPC service (errno 111). [ 371.357243][ T31] oom_reaper: reaped process 10072 (syz.3.661), now anon-rss:88kB, file-rss:25824kB, shmem-rss:128kB [ 372.233840][ T5151] Bluetooth: hci0: command tx timeout [ 372.419179][T11300] svc: failed to register nfsdv3 RPC service (errno 512). [ 372.443938][T11300] svc: failed to register nfsaclv3 RPC service (errno 512). [ 372.802561][ T6182] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 372.885719][ T6182] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 373.045893][ T6182] bond0 (unregistering): Released all slaves [ 373.423790][T11268] chnl_net:caif_netlink_parms(): no params data found [ 374.225032][T11268] bridge0: port 1(bridge_slave_0) entered blocking state [ 374.239338][T11268] bridge0: port 1(bridge_slave_0) entered disabled state [ 374.255578][T11268] bridge_slave_0: entered allmulticast mode [ 374.275865][T11268] bridge_slave_0: entered promiscuous mode [ 374.313723][ T5151] Bluetooth: hci0: command tx timeout [ 374.519424][T11268] bridge0: port 2(bridge_slave_1) entered blocking state [ 374.558280][T11268] bridge0: port 2(bridge_slave_1) entered disabled state [ 374.572628][T11268] bridge_slave_1: entered allmulticast mode [ 374.580176][T11268] bridge_slave_1: entered promiscuous mode [ 375.128469][T11268] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 375.147100][T11268] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 375.409030][ T6182] hsr_slave_0: left promiscuous mode [ 375.415659][ T6182] hsr_slave_1: left promiscuous mode [ 375.434938][ T6182] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 375.442505][ T6182] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 375.464068][ T6182] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 375.487219][ T6182] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 375.518684][ T6182] veth1_macvtap: left promiscuous mode [ 375.529889][ T6182] veth0_macvtap: left promiscuous mode [ 375.541711][ T6182] veth1_vlan: left promiscuous mode [ 375.563269][ T6182] veth0_vlan: left promiscuous mode [ 375.841174][T11351] delete_channel: no stack [ 376.393765][ T5151] Bluetooth: hci0: command tx timeout [ 376.404093][ T6182] team0 (unregistering): Port device team_slave_1 removed [ 376.452994][ T6182] team0 (unregistering): Port device team_slave_0 removed [ 377.216936][T11268] team0: Port device team_slave_0 added [ 377.273831][T11268] team0: Port device team_slave_1 added [ 377.409918][T11268] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 377.429944][T11268] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 377.457892][T11268] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 377.483475][T11268] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 377.499252][T11268] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 377.526458][T11268] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 377.730589][T11268] hsr_slave_0: entered promiscuous mode [ 377.786493][T11268] hsr_slave_1: entered promiscuous mode [ 377.811678][T11268] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 377.831039][T11268] Cannot create hsr debugfs directory [ 378.963004][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.969641][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.981114][T11268] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 379.032841][T11268] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 379.111130][T11268] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 379.137223][T11268] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 379.148073][T11427] netlink: 4 bytes leftover after parsing attributes in process `syz.6.916'. [ 379.361693][T11268] 8021q: adding VLAN 0 to HW filter on device bond0 [ 379.420640][T11268] 8021q: adding VLAN 0 to HW filter on device team0 [ 379.516158][T11438] bridge0: port 1(bridge_slave_0) entered blocking state [ 379.523279][T11438] bridge0: port 1(bridge_slave_0) entered forwarding state [ 379.627432][T11438] bridge0: port 2(bridge_slave_1) entered blocking state [ 379.634657][T11438] bridge0: port 2(bridge_slave_1) entered forwarding state [ 380.220699][T11268] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 380.289425][T11268] veth0_vlan: entered promiscuous mode [ 380.302101][T11268] veth1_vlan: entered promiscuous mode [ 380.331258][T11268] veth0_macvtap: entered promiscuous mode [ 380.340336][T11268] veth1_macvtap: entered promiscuous mode [ 380.355500][T11268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 380.366086][T11268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 380.375963][T11268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 380.386518][T11268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 380.396574][T11268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 380.407309][T11268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 380.418711][T11268] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 380.431290][T11268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 380.441986][T11268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 380.452081][T11268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 380.462914][T11268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 380.473062][T11268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 380.483975][T11268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 380.496196][T11268] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 380.511334][T11268] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 380.520157][T11268] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 380.529020][T11268] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 380.537894][T11268] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 380.585605][T11481] netlink: 'syz.5.925': attribute type 11 has an invalid length. [ 380.741847][ T8539] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 380.772149][ T8539] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 380.860303][T11436] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 380.913617][T11436] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 381.299798][T11433] kexec: Could not allocate control_code_buffer [ 382.794268][T11561] netlink: 12 bytes leftover after parsing attributes in process `syz.1.940'. [ 384.053190][T11609] netlink: 72 bytes leftover after parsing attributes in process `syz.3.943'. [ 395.760191][ T5838] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 395.770832][ T5838] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 395.779601][ T5838] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 395.788811][ T5838] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 395.798841][ T5838] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 395.807501][ T5838] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 395.947316][ T1154] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 396.434976][ T1154] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 396.817337][ T1154] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 397.082482][ T1154] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 397.348164][T11809] chnl_net:caif_netlink_parms(): no params data found [ 397.498189][ T1154] bridge_slave_1: left allmulticast mode [ 397.513603][ T1154] bridge_slave_1: left promiscuous mode [ 397.530250][ T1154] bridge0: port 2(bridge_slave_1) entered disabled state [ 397.559730][ T1154] bridge_slave_0: left allmulticast mode [ 397.577164][ T1154] bridge_slave_0: left promiscuous mode [ 397.587324][ T1154] bridge0: port 1(bridge_slave_0) entered disabled state [ 397.837681][ T5151] Bluetooth: hci1: command tx timeout [ 399.193453][ T1154] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 399.243996][ T1154] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 399.333230][ T1154] bond0 (unregistering): Released all slaves [ 399.455443][ T1154] )zV: left promiscuous mode [ 399.812315][T11809] bridge0: port 1(bridge_slave_0) entered blocking state [ 399.830445][T11809] bridge0: port 1(bridge_slave_0) entered disabled state [ 399.850815][T11809] bridge_slave_0: entered allmulticast mode [ 399.864924][T11809] bridge_slave_0: entered promiscuous mode [ 399.914274][ T5151] Bluetooth: hci1: command tx timeout [ 399.993956][T11809] bridge0: port 2(bridge_slave_1) entered blocking state [ 400.001114][T11809] bridge0: port 2(bridge_slave_1) entered disabled state [ 400.041675][T11809] bridge_slave_1: entered allmulticast mode [ 400.083862][T11809] bridge_slave_1: entered promiscuous mode [ 400.297164][T11809] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 400.348801][T11809] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 400.468531][T11809] team0: Port device team_slave_0 added [ 400.520405][T11809] team0: Port device team_slave_1 added [ 400.594213][T11905] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 400.721674][T11809] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 400.773680][T11809] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 400.916450][T11809] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 401.207348][T11809] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 401.252132][T11809] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 401.279277][T11809] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 401.454954][T11809] hsr_slave_0: entered promiscuous mode [ 401.461596][T11809] hsr_slave_1: entered promiscuous mode [ 401.481577][T11809] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 401.492424][T11809] Cannot create hsr debugfs directory [ 401.765776][ T1154] hsr_slave_0: left promiscuous mode [ 401.777474][ T1154] hsr_slave_1: left promiscuous mode [ 401.790728][ T1154] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 401.809814][ T1154] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 401.824770][ T1154] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 401.832501][ T1154] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 401.888436][ T1154] veth1_macvtap: left promiscuous mode [ 401.908847][ T1154] veth0_macvtap: left promiscuous mode [ 401.920444][ T1154] veth1_vlan: left promiscuous mode [ 401.933265][ T1154] veth0_vlan: left promiscuous mode [ 401.994743][ T5151] Bluetooth: hci1: command tx timeout [ 402.051981][ T5838] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 402.071073][ T5838] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 402.082610][ T5838] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 402.117753][ T5838] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 402.143728][ T5838] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 402.154483][ T5838] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 402.592322][T11979] syz.5.1025 (11979): attempted to duplicate a private mapping with mremap. This is not supported. [ 402.787451][ T1154] team0 (unregistering): Port device team_slave_1 removed [ 402.831754][ T1154] team0 (unregistering): Port device team_slave_0 removed [ 403.140685][T11981] can: request_module (can-proto-0) failed. [ 403.459168][T11988] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1027'. [ 403.999667][T11809] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 404.032881][T11809] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 404.074061][ T5151] Bluetooth: hci1: command tx timeout [ 404.087958][T11957] chnl_net:caif_netlink_parms(): no params data found [ 404.102984][T11809] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 404.150112][T11809] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 404.233818][ T5151] Bluetooth: hci0: command tx timeout [ 404.251438][T12007] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1028'. [ 404.291420][ T1154] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 404.368922][ T1154] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 404.420199][T11957] bridge0: port 1(bridge_slave_0) entered blocking state [ 404.434804][T11957] bridge0: port 1(bridge_slave_0) entered disabled state [ 404.447883][T11957] bridge_slave_0: entered allmulticast mode [ 404.470375][T11957] bridge_slave_0: entered promiscuous mode [ 404.529211][ T1154] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 404.574901][T11957] bridge0: port 2(bridge_slave_1) entered blocking state [ 404.583001][T11957] bridge0: port 2(bridge_slave_1) entered disabled state [ 404.594277][T11957] bridge_slave_1: entered allmulticast mode [ 404.601467][T11957] bridge_slave_1: entered promiscuous mode [ 404.690552][ T1154] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 404.775074][T11957] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 404.817944][T11957] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 404.908700][T11957] team0: Port device team_slave_0 added [ 404.960244][T11957] team0: Port device team_slave_1 added [ 405.034894][T11809] 8021q: adding VLAN 0 to HW filter on device bond0 [ 405.051097][T11809] 8021q: adding VLAN 0 to HW filter on device team0 [ 405.109765][ T8537] bridge0: port 1(bridge_slave_0) entered blocking state [ 405.116971][ T8537] bridge0: port 1(bridge_slave_0) entered forwarding state [ 405.135132][ T8537] bridge0: port 2(bridge_slave_1) entered blocking state [ 405.142266][ T8537] bridge0: port 2(bridge_slave_1) entered forwarding state [ 405.267077][T11957] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 405.285136][T11957] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 405.296027][T12030] netlink: 229 bytes leftover after parsing attributes in process `syz.3.1032'. [ 405.320054][T11957] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 405.354118][ T1154] bridge_slave_1: left allmulticast mode [ 405.359822][ T1154] bridge_slave_1: left promiscuous mode [ 405.372466][ T1154] bridge0: port 2(bridge_slave_1) entered disabled state [ 405.391745][ T1154] bridge_slave_0: left allmulticast mode [ 405.397542][ T1154] bridge_slave_0: left promiscuous mode [ 405.403448][ T1154] bridge0: port 1(bridge_slave_0) entered disabled state [ 405.936103][ T1154] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 405.948127][ T1154] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 405.959941][ T1154] bond0 (unregistering): Released all slaves [ 405.987696][T11809] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 406.002876][T11957] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 406.010486][T11957] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 406.038457][T11957] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 406.204347][T11957] hsr_slave_0: entered promiscuous mode [ 406.223324][T11957] hsr_slave_1: entered promiscuous mode [ 406.241445][T11957] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 406.270933][T11957] Cannot create hsr debugfs directory [ 406.314003][ T5151] Bluetooth: hci0: command tx timeout [ 406.566426][ T1154] hsr_slave_0: left promiscuous mode [ 406.592909][ T1154] hsr_slave_1: left promiscuous mode [ 406.614304][ T1154] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 406.649738][ T1154] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 406.684486][ T1154] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 406.691935][ T1154] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 406.728238][ T1154] veth1_macvtap: left promiscuous mode [ 406.753790][ T1154] veth0_macvtap: left promiscuous mode [ 406.759446][ T1154] veth1_vlan: left promiscuous mode [ 406.773700][ T1154] veth0_vlan: left promiscuous mode [ 407.473712][ T1154] team0 (unregistering): Port device team_slave_1 removed [ 407.611789][ T1154] team0 (unregistering): Port device team_slave_0 removed [ 408.396695][ T5151] Bluetooth: hci0: command tx timeout [ 408.820429][T11809] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 409.621743][T11809] veth0_vlan: entered promiscuous mode [ 409.660864][T11809] veth1_vlan: entered promiscuous mode [ 409.788441][T11957] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 409.826697][T11957] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 409.850296][T11957] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 409.911932][T11809] veth0_macvtap: entered promiscuous mode [ 409.940854][T11957] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 410.011514][T11809] veth1_macvtap: entered promiscuous mode [ 410.062702][T11809] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 410.085278][T11809] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 410.104571][T11809] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 410.133629][T11809] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 410.155470][T11809] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 410.178445][T11809] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 410.211814][T11809] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 410.231629][T11809] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 410.266723][T11809] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 410.296077][T11809] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 410.346244][T11809] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 410.371255][T11809] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 410.383635][T11809] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 410.398616][T11809] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 410.474179][ T5151] Bluetooth: hci0: command tx timeout [ 410.611733][T12126] delete_channel: no stack [ 410.614092][T11957] 8021q: adding VLAN 0 to HW filter on device bond0 [ 410.723991][T11957] 8021q: adding VLAN 0 to HW filter on device team0 [ 410.771506][ T7589] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 410.774430][ T5977] bridge0: port 1(bridge_slave_0) entered blocking state [ 410.784263][ T7589] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 410.786513][ T5977] bridge0: port 1(bridge_slave_0) entered forwarding state [ 410.879041][ T5977] bridge0: port 2(bridge_slave_1) entered blocking state [ 410.886228][ T5977] bridge0: port 2(bridge_slave_1) entered forwarding state [ 410.972126][ T8537] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 411.000054][ T8537] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 411.400119][T11957] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 411.444865][T11957] veth0_vlan: entered promiscuous mode [ 411.456731][T11957] veth1_vlan: entered promiscuous mode [ 411.509532][T11957] veth0_macvtap: entered promiscuous mode [ 411.522356][T11957] veth1_macvtap: entered promiscuous mode [ 411.595617][T11957] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 411.634288][T11957] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 411.683769][T11957] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 411.713582][T11957] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 411.723447][T11957] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 411.769786][T11957] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 411.809161][T11957] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 411.875260][T11957] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 411.921456][T11957] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 411.948377][T11957] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 411.963586][T11957] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 412.003698][T11957] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 412.014618][T11957] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 412.031420][T11957] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 412.071183][T11957] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 412.095109][T11957] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 412.113334][T11957] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 412.147309][T11957] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 412.421686][ T1154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 412.456686][ T1154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 412.522126][ T7594] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 412.544409][ T7594] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 415.689129][ T29] audit: type=1326 audit(8277292139.653:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12259 comm="syz.1.1069" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f3e2297e719 code=0x0 [ 418.122404][T12309] nfs: Bad value for 'source' [ 418.506225][T12324] svc: failed to register nfsdv3 RPC service (errno 111). [ 418.546172][T12324] svc: failed to register nfsaclv3 RPC service (errno 111). [ 418.603002][T12339] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1086'. [ 419.078791][T12350] nbd: must specify at least one socket [ 423.270052][T12408] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1109'. [ 424.386129][T12455] netlink: 342 bytes leftover after parsing attributes in process `syz.3.1115'. [ 424.424651][T12449] netlink: 342 bytes leftover after parsing attributes in process `syz.3.1115'. [ 425.428038][T12492] delete_channel: no stack [ 425.744284][T12502] Malformed UNC in devname [ 425.744284][T12502] [ 425.751136][T12502] CIFS: VFS: Malformed UNC in devname [ 429.514405][ T5151] Bluetooth: hci4: Malformed HCI Event [ 429.699231][T12599] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1153'. [ 433.031282][T12715] svc: failed to register nfsdv3 RPC service (errno 111). [ 433.056861][T12715] svc: failed to register nfsaclv3 RPC service (errno 111). [ 435.522319][T12789] netlink: 334 bytes leftover after parsing attributes in process `syz.1.1197'. [ 435.549495][T12789] netlink: 334 bytes leftover after parsing attributes in process `syz.1.1197'. [ 439.853353][T12881] netlink: 'syz.5.1218': attribute type 7 has an invalid length. [ 440.400778][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.408221][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 442.284584][T12904] netlink: 342 bytes leftover after parsing attributes in process `syz.6.1222'. [ 442.321352][T12904] netlink: 342 bytes leftover after parsing attributes in process `syz.6.1222'. [ 443.295347][T12922] Process accounting resumed [ 443.343220][T12922] Process accounting resumed [ 443.360856][T12920] Process accounting resumed [ 443.405433][T12922] Process accounting resumed [ 443.410707][T12923] Process accounting resumed [ 443.495991][T12922] Process accounting resumed [ 443.558795][T12922] Process accounting resumed [ 443.632272][T12922] Process accounting resumed [ 443.688351][T12922] Process accounting resumed [ 443.693442][T12922] Process accounting resumed [ 443.699233][T12922] Process accounting resumed [ 443.720858][T12922] Process accounting resumed [ 443.726189][T12922] Process accounting resumed [ 443.731160][T12922] Process accounting resumed [ 443.736428][T12922] Process accounting resumed [ 443.741387][T12922] Process accounting resumed [ 443.750076][T12922] Process accounting resumed [ 443.757844][T12922] Process accounting resumed [ 443.763460][T12922] Process accounting resumed [ 443.768553][T12922] Process accounting resumed [ 443.774328][T12922] Process accounting resumed [ 443.780252][T12922] Process accounting resumed [ 443.786714][T12922] Process accounting resumed [ 443.791761][T12922] Process accounting resumed [ 443.796856][T12922] Process accounting resumed [ 443.801900][T12922] Process accounting resumed [ 443.808132][T12922] Process accounting resumed [ 443.813173][T12922] Process accounting resumed [ 443.818424][T12922] Process accounting resumed [ 443.823441][T12922] Process accounting resumed [ 443.829309][T12922] Process accounting resumed [ 443.834589][T12922] Process accounting resumed [ 444.579199][T12929] Process accounting resumed [ 444.808342][T12946] netlink: 'syz.6.1231': attribute type 19 has an invalid length. [ 444.878363][T12946] netlink: 334 bytes leftover after parsing attributes in process `syz.6.1231'. [ 445.359347][T12949] openvswitch: netlink: Message has 4 unknown bytes. [ 447.214743][T12999] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1243'. [ 451.730667][T13059] HfR: entered promiscuous mode [ 451.803674][T13053] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1254'. [ 451.854207][T13053] HfR: left promiscuous mode [ 456.186263][T13145] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1275'. [ 456.419057][T13145] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1275'. [ 456.440552][T13147] netlink: 'syz.3.1276': attribute type 11 has an invalid length. [ 456.480769][T13147] netlink: 'syz.3.1276': attribute type 11 has an invalid length. [ 457.197313][T13173] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1284'. [ 459.095276][T13199] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1290'. [ 460.268671][T13241] svc: failed to register nfsdv3 RPC service (errno 512). [ 460.293841][T13241] svc: failed to register nfsaclv3 RPC service (errno 512). [ 460.508450][T13229] cgroup: fork rejected by pids controller in /syz5 [ 460.816656][T13290] svc: failed to register nfsdv3 RPC service (errno 111). [ 460.839503][T13290] svc: failed to register nfsaclv3 RPC service (errno 111). [ 462.384708][T13323] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1313'. [ 462.434542][T13323] netlink: 326 bytes leftover after parsing attributes in process `syz.6.1313'. [ 465.697071][T13392] netlink: 56 bytes leftover after parsing attributes in process `syz.5.1327'. [ 469.137270][T13479] could not allocate digest TFM handle [ 469.197307][T13473] could not allocate digest TFM handle [ 472.268207][ T7605] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 472.518111][ T7605] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 472.817197][ T7605] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 472.864397][ T5838] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 472.883440][ T5838] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 472.893822][ T5838] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 472.901756][ T5838] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 472.909419][ T5838] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 472.916833][ T5838] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 473.065849][ T7605] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 473.783946][ T7605] bridge_slave_1: left allmulticast mode [ 473.790050][ T7605] bridge_slave_1: left promiscuous mode [ 473.832564][ T7605] bridge0: port 2(bridge_slave_1) entered disabled state [ 473.920310][ T7605] bridge_slave_0: left allmulticast mode [ 473.927851][ T7605] bridge_slave_0: left promiscuous mode [ 473.937720][ T7605] bridge0: port 1(bridge_slave_0) entered disabled state [ 474.036715][T13582] svc: failed to register nfsdv3 RPC service (errno 111). [ 474.099130][T13582] svc: failed to register nfsaclv3 RPC service (errno 111). [ 474.955434][ T5151] Bluetooth: hci1: command tx timeout [ 475.595005][ T7605] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 475.657674][ T7605] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 475.698122][ T7605] bond0 (unregistering): Released all slaves [ 475.869516][T13567] chnl_net:caif_netlink_parms(): no params data found [ 476.263840][T13567] bridge0: port 1(bridge_slave_0) entered blocking state [ 476.289985][T13567] bridge0: port 1(bridge_slave_0) entered disabled state [ 476.311879][T13567] bridge_slave_0: entered allmulticast mode [ 476.329537][T13567] bridge_slave_0: entered promiscuous mode [ 476.366890][T13567] bridge0: port 2(bridge_slave_1) entered blocking state [ 476.383235][T13567] bridge0: port 2(bridge_slave_1) entered disabled state [ 476.407475][T13567] bridge_slave_1: entered allmulticast mode [ 476.428547][T13567] bridge_slave_1: entered promiscuous mode [ 476.785732][T13567] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 476.811599][ T7605] hsr_slave_0: left promiscuous mode [ 476.850260][ T7605] hsr_slave_1: left promiscuous mode [ 476.904195][ T7605] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 476.943837][ T7605] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 477.004395][ T7605] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 477.011843][ T7605] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 477.033855][ T5151] Bluetooth: hci1: command tx timeout [ 477.145748][ T7605] veth1_macvtap: left promiscuous mode [ 477.182689][ T7605] veth0_macvtap: left promiscuous mode [ 477.203029][ T7605] veth1_vlan: left promiscuous mode [ 477.223233][ T7605] veth0_vlan: left promiscuous mode [ 478.210094][ T29] audit: type=1800 audit(1882499351.672:6): pid=13676 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1388" name="SYSV00010000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 478.594605][ T7605] team0 (unregistering): Port device team_slave_1 removed [ 478.660686][ T7605] team0 (unregistering): Port device team_slave_0 removed [ 479.115529][ T5151] Bluetooth: hci1: command tx timeout [ 479.129762][T13567] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 479.327269][T13567] team0: Port device team_slave_0 added [ 479.342965][T13567] team0: Port device team_slave_1 added [ 479.423615][T13567] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 479.430619][T13567] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 479.485232][T13567] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 479.509777][T13567] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 479.537311][T13567] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 479.599648][T13567] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 479.827228][T13567] hsr_slave_0: entered promiscuous mode [ 479.950158][T13567] hsr_slave_1: entered promiscuous mode [ 480.026207][T13567] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 480.037373][T13567] Cannot create hsr debugfs directory [ 480.187695][T13727] netlink: 'syz.3.1396': attribute type 7 has an invalid length. [ 481.193931][ T5151] Bluetooth: hci1: command tx timeout [ 482.067737][T13567] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 482.126364][T13567] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 482.157570][T13567] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 482.321923][T13567] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 482.545086][T13567] 8021q: adding VLAN 0 to HW filter on device bond0 [ 482.610667][T13567] 8021q: adding VLAN 0 to HW filter on device team0 [ 482.677246][ T7602] bridge0: port 1(bridge_slave_0) entered blocking state [ 482.684425][ T7602] bridge0: port 1(bridge_slave_0) entered forwarding state [ 482.727126][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 482.734290][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 483.487138][T13567] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 484.121996][T13567] veth0_vlan: entered promiscuous mode [ 484.173748][T13567] veth1_vlan: entered promiscuous mode [ 484.215644][T13804] delete_channel: no stack [ 484.284323][T13567] veth0_macvtap: entered promiscuous mode [ 484.306728][T13567] veth1_macvtap: entered promiscuous mode [ 484.342860][T13567] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 484.383582][T13567] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 484.417201][T13567] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 484.431221][T13567] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 484.448014][T13567] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 484.464951][T13567] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 484.498419][T13567] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 484.539217][T13567] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 484.572134][T13567] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 484.602774][T13567] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 484.632133][T13567] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 484.668429][T13567] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 484.695116][T13567] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 484.735911][T13567] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 484.756304][T13567] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 484.772343][T13567] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 484.799104][T13567] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 484.822501][T13567] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 484.995464][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 485.020066][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 485.077005][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 485.095489][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 486.150179][T13905] netlink: 334 bytes leftover after parsing attributes in process `syz.1.1416'. [ 488.643033][T13987] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1430'. [ 488.688651][T13987] tc_dump_action: action bad kind [ 496.548301][T14139] Invalid ELF header magic: != ELF [ 497.421839][T14157] xs_local_setup_socket: unhandled error (13) connecting to /var/run/rpcbind.sock [ 497.448346][T14157] svc: failed to register nfsdv3 RPC service (errno 111). [ 497.456811][T14157] svc: failed to register nfsaclv3 RPC service (errno 111). [ 497.746783][T14178] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 497.774025][T14178] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 498.166327][T14182] can: request_module (can-proto-4) failed. [ 499.033164][T14206] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1479'. [ 499.712164][T14223] netlink: 'syz.1.1485': attribute type 11 has an invalid length. [ 500.964217][T14249] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1492'. [ 501.268183][T14257] netlink: 104 bytes leftover after parsing attributes in process `syz.6.1495'. [ 501.850895][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.857294][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 505.377408][T14386] nbd: must specify at least one socket [ 506.514927][T14419] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1532'. [ 507.742211][T14431] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 510.367122][T14521] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1559'. [ 515.301776][ T7601] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 515.344572][ T5838] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 515.353693][ T5838] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 515.362818][ T5838] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 515.371123][ T5838] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 515.379153][ T5838] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 515.388068][ T5838] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 515.731089][ T7601] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 516.026790][ T7601] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 516.582452][ T7601] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 516.727326][T14629] chnl_net:caif_netlink_parms(): no params data found [ 517.145907][T14629] bridge0: port 1(bridge_slave_0) entered blocking state [ 517.153102][T14629] bridge0: port 1(bridge_slave_0) entered disabled state [ 517.164553][T14629] bridge_slave_0: entered allmulticast mode [ 517.171618][T14629] bridge_slave_0: entered promiscuous mode [ 517.225635][T14629] bridge0: port 2(bridge_slave_1) entered blocking state [ 517.232773][T14629] bridge0: port 2(bridge_slave_1) entered disabled state [ 517.264094][T14629] bridge_slave_1: entered allmulticast mode [ 517.271319][T14629] bridge_slave_1: entered promiscuous mode [ 517.513886][ T5151] Bluetooth: hci2: command tx timeout [ 517.597277][T14629] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 517.610146][T14629] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 517.864804][ T7601] bridge_slave_1: left allmulticast mode [ 517.870502][ T7601] bridge_slave_1: left promiscuous mode [ 517.895963][ T7601] bridge0: port 2(bridge_slave_1) entered disabled state [ 517.957369][ T7601] bridge_slave_0: left allmulticast mode [ 517.963064][ T7601] bridge_slave_0: left promiscuous mode [ 517.985439][ T7601] bridge0: port 1(bridge_slave_0) entered disabled state [ 519.489693][ T7601] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 519.523209][ T7601] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 519.535731][ T7601] bond0 (unregistering): Released all slaves [ 519.550481][ T5838] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 519.561962][ T5838] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 519.576546][ T5838] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 519.589610][ T5838] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 519.597289][ T5838] Bluetooth: hci2: command tx timeout [ 519.603239][ T5838] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 519.610680][ T5838] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 519.868478][T14629] team0: Port device team_slave_0 added [ 519.992284][T14629] team0: Port device team_slave_1 added [ 520.227547][T14629] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 520.243808][T14629] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 520.283622][T14629] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 520.309957][T14629] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 520.333836][T14629] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 520.374904][T14629] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 520.934524][T14629] hsr_slave_0: entered promiscuous mode [ 521.273877][T14629] hsr_slave_1: entered promiscuous mode [ 522.483717][T14629] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 522.491323][T14629] Cannot create hsr debugfs directory [ 522.497053][ T5843] Bluetooth: hci1: command tx timeout [ 522.503139][ T5843] Bluetooth: hci2: command tx timeout [ 522.873479][ T7601] hsr_slave_0: left promiscuous mode [ 522.879638][ T7601] hsr_slave_1: left promiscuous mode [ 522.892512][ T7601] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 522.913656][ T7601] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 522.934205][ T7601] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 522.941862][ T7601] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 523.003013][ T7601] veth1_macvtap: left promiscuous mode [ 523.045819][ T7601] veth0_macvtap: left promiscuous mode [ 523.081963][ T7601] veth1_vlan: left promiscuous mode [ 523.087816][ T7601] veth0_vlan: left promiscuous mode [ 524.556336][T14675] Bluetooth: hci2: command tx timeout [ 524.561799][T14675] Bluetooth: hci0: command 0x0406 tx timeout [ 524.567994][T14675] Bluetooth: hci1: command tx timeout [ 524.725964][ T7601] team0 (unregistering): Port device team_slave_1 removed [ 524.768818][ T7601] team0 (unregistering): Port device team_slave_0 removed [ 526.639705][ T5838] Bluetooth: hci1: command tx timeout [ 526.921124][T14661] chnl_net:caif_netlink_parms(): no params data found [ 527.314092][T14661] bridge0: port 1(bridge_slave_0) entered blocking state [ 527.321214][T14661] bridge0: port 1(bridge_slave_0) entered disabled state [ 527.328819][T14661] bridge_slave_0: entered allmulticast mode [ 527.336471][T14661] bridge_slave_0: entered promiscuous mode [ 527.344916][T14661] bridge0: port 2(bridge_slave_1) entered blocking state [ 527.352021][T14661] bridge0: port 2(bridge_slave_1) entered disabled state [ 527.359911][T14661] bridge_slave_1: entered allmulticast mode [ 527.367196][T14661] bridge_slave_1: entered promiscuous mode [ 527.393389][T14661] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 527.405224][T14661] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 527.510267][T14661] team0: Port device team_slave_0 added [ 527.603266][T14661] team0: Port device team_slave_1 added [ 527.767092][T14661] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 527.780272][T14661] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 527.863723][T14661] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 527.941377][T14629] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 527.977798][T14661] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 527.990949][T14661] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 528.060399][T14661] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 528.123661][T14629] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 528.201457][T14629] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 528.223292][T14661] hsr_slave_0: entered promiscuous mode [ 528.249356][T14661] hsr_slave_1: entered promiscuous mode [ 528.301542][T14629] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 528.587448][ T7601] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 528.733597][ T5838] Bluetooth: hci1: command tx timeout [ 528.897753][ T7601] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 529.118323][ T7601] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 529.270023][ T7601] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 529.451953][T14629] 8021q: adding VLAN 0 to HW filter on device bond0 [ 529.528773][T14661] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 529.570387][T14661] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 529.618151][T14661] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 529.764415][ T5151] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 529.774171][ T5151] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 529.783069][ T5151] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 529.790996][ T5151] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 529.800393][ T5151] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 529.808003][ T5151] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 529.851606][T14661] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 529.912832][T14629] 8021q: adding VLAN 0 to HW filter on device team0 [ 530.036198][ T7601] bridge_slave_1: left allmulticast mode [ 530.041890][ T7601] bridge_slave_1: left promiscuous mode [ 530.049236][ T7601] bridge0: port 2(bridge_slave_1) entered disabled state [ 530.058799][ T7601] bridge_slave_0: left allmulticast mode [ 530.065014][ T7601] bridge_slave_0: left promiscuous mode [ 530.070719][ T7601] bridge0: port 1(bridge_slave_0) entered disabled state [ 531.192361][ T7601] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 531.250771][ T7601] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 531.272816][ T7601] bond0 (unregistering): Released all slaves [ 531.395844][ T7594] bridge0: port 1(bridge_slave_0) entered blocking state [ 531.402972][ T7594] bridge0: port 1(bridge_slave_0) entered forwarding state [ 531.478478][ T7594] bridge0: port 2(bridge_slave_1) entered blocking state [ 531.485649][ T7594] bridge0: port 2(bridge_slave_1) entered forwarding state [ 531.809290][T14629] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 531.834289][ T5151] Bluetooth: hci4: command tx timeout [ 532.233792][T14629] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 533.036785][ T7601] hsr_slave_0: left promiscuous mode [ 533.124826][ T5838] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 533.134797][ T5838] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 533.148708][ T5838] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 533.161921][ T5838] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 533.175349][ T7601] hsr_slave_1: left promiscuous mode [ 533.181932][ T7601] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 533.226687][ T7601] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 533.244501][ T5838] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 533.252225][ T5838] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 533.375414][ T7601] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 533.382858][ T7601] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 533.413299][ T7601] veth1_macvtap: left promiscuous mode [ 533.422470][ T7601] veth0_macvtap: left promiscuous mode [ 533.431184][ T7601] veth1_vlan: left promiscuous mode [ 533.441109][ T7601] veth0_vlan: left promiscuous mode [ 533.915850][ T5151] Bluetooth: hci4: command tx timeout [ 535.327479][ T7601] team0 (unregistering): Port device team_slave_1 removed [ 535.363702][ T5151] Bluetooth: hci3: command tx timeout [ 535.472874][ T7601] team0 (unregistering): Port device team_slave_0 removed [ 535.993676][ T5151] Bluetooth: hci4: command tx timeout [ 536.620825][T14661] 8021q: adding VLAN 0 to HW filter on device bond0 [ 536.761071][T14661] 8021q: adding VLAN 0 to HW filter on device team0 [ 536.795700][T14661] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 536.806155][T14661] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 536.887184][ T1154] bridge0: port 1(bridge_slave_0) entered blocking state [ 536.894342][ T1154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 536.919769][ T1154] bridge0: port 2(bridge_slave_1) entered blocking state [ 536.926933][ T1154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 537.382862][T14702] chnl_net:caif_netlink_parms(): no params data found [ 537.438347][ T5151] Bluetooth: hci3: command tx timeout [ 537.468288][T14629] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 537.784982][T14661] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 538.074937][ T5151] Bluetooth: hci4: command tx timeout [ 539.514042][ T5151] Bluetooth: hci3: command tx timeout [ 539.532231][T14629] veth0_vlan: entered promiscuous mode [ 539.559139][T14702] bridge0: port 1(bridge_slave_0) entered blocking state [ 539.566452][T14702] bridge0: port 1(bridge_slave_0) entered disabled state [ 539.573819][T14702] bridge_slave_0: entered allmulticast mode [ 539.580776][T14702] bridge_slave_0: entered promiscuous mode [ 539.619161][T14629] veth1_vlan: entered promiscuous mode [ 539.643017][T14702] bridge0: port 2(bridge_slave_1) entered blocking state [ 539.654098][T14702] bridge0: port 2(bridge_slave_1) entered disabled state [ 539.661317][T14702] bridge_slave_1: entered allmulticast mode [ 539.686534][T14702] bridge_slave_1: entered promiscuous mode [ 539.708811][T14716] chnl_net:caif_netlink_parms(): no params data found [ 540.211297][T14629] veth0_macvtap: entered promiscuous mode [ 540.222976][T14661] veth0_vlan: entered promiscuous mode [ 540.243351][T14702] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 540.265826][T14702] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 540.305341][T14629] veth1_macvtap: entered promiscuous mode [ 540.322391][T14629] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 540.333475][T14629] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 540.344186][T14629] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 540.355319][T14629] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 540.366902][T14629] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 540.378011][T14629] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 540.388909][T14629] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 540.399650][T14629] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 540.410721][T14629] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 540.422286][T14629] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 540.432942][T14629] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 540.463743][T14629] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 540.472482][T14629] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 540.493938][T14629] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 540.574535][T14716] bridge0: port 1(bridge_slave_0) entered blocking state [ 540.581657][T14716] bridge0: port 1(bridge_slave_0) entered disabled state [ 540.588955][T14716] bridge_slave_0: entered allmulticast mode [ 540.595973][T14716] bridge_slave_0: entered promiscuous mode [ 540.603787][T14716] bridge0: port 2(bridge_slave_1) entered blocking state [ 540.610886][T14716] bridge0: port 2(bridge_slave_1) entered disabled state [ 540.618165][T14716] bridge_slave_1: entered allmulticast mode [ 540.625155][T14716] bridge_slave_1: entered promiscuous mode [ 540.652480][T14716] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 540.664987][T14716] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 540.745617][T14661] veth1_vlan: entered promiscuous mode [ 540.958032][T14702] team0: Port device team_slave_0 added [ 541.017312][T14716] team0: Port device team_slave_0 added [ 541.042424][T14702] team0: Port device team_slave_1 added [ 541.073584][T14661] veth0_macvtap: entered promiscuous mode [ 541.124698][T14716] team0: Port device team_slave_1 added [ 541.133340][ T7601] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 541.176107][ T7601] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 541.261849][T14661] veth1_macvtap: entered promiscuous mode [ 541.370356][T14702] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 541.386484][T14702] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 541.453925][T14702] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 541.485869][T14702] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 541.492846][T14702] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 541.596820][ T5151] Bluetooth: hci3: command tx timeout [ 541.603375][T14702] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 541.780342][T14716] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 541.799861][T14716] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 541.863578][T14716] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 541.973303][T14716] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 541.980526][T14716] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 542.006713][T14716] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 542.113136][T14702] hsr_slave_0: entered promiscuous mode [ 542.134507][T14702] hsr_slave_1: entered promiscuous mode [ 542.173664][T14702] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 542.181269][T14702] Cannot create hsr debugfs directory [ 542.226192][T14716] hsr_slave_0: entered promiscuous mode [ 542.254532][T14716] hsr_slave_1: entered promiscuous mode [ 542.264710][T14716] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 542.272289][T14716] Cannot create hsr debugfs directory [ 542.349184][ T1154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 542.361723][T14661] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 542.381050][ T1154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 542.389659][T14661] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 542.413391][T14661] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 542.431563][T14661] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 542.441698][T14661] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 542.463927][T14661] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 542.497953][T14661] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 542.876892][T14806] Oops: general protection fault, probably for non-canonical address 0xdffffc0000002c03: 0000 [#1] PREEMPT SMP KASAN PTI [ 542.889521][T14806] KASAN: probably user-memory-access in range [0x0000000000016018-0x000000000001601f] [ 542.899069][T14806] CPU: 1 UID: 0 PID: 14806 Comm: syz.5.1578 Not tainted 6.12.0-rc4-syzkaller-00261-g850925a8133c #0 [ 542.909837][T14806] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 542.919896][T14806] RIP: 0010:__smc_diag_dump.constprop.0+0x3e2/0x2500 [ 542.926593][T14806] Code: 4c 8b b3 58 05 00 00 4d 85 f6 0f 84 f6 02 00 00 e8 a3 b8 d1 f6 49 8d 7e 18 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 86 1c 00 00 48 b8 00 00 00 00 00 fc ff df 4d 8b [ 542.946214][T14806] RSP: 0018:ffffc90004dff160 EFLAGS: 00010206 [ 542.952288][T14806] RAX: dffffc0000000000 RBX: ffff88806ca57300 RCX: ffffffff88feca74 [ 542.960264][T14806] RDX: 0000000000002c03 RSI: ffffffff8abb00fd RDI: 0000000000016018 [ 542.968241][T14806] RBP: ffff88807b9f45e0 R08: 0000000000000005 R09: 0000000000000000 [ 542.976219][T14806] R10: 0000000080000001 R11: 0000000000000000 R12: 0000000000000000 [ 542.984192][T14806] R13: ffff88803b650000 R14: 0000000000016000 R15: 0000000000000002 [ 542.992167][T14806] FS: 00007f6cc6bde6c0(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 543.001108][T14806] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 543.007697][T14806] CR2: 00007f6cc6b9bf98 CR3: 000000008baea000 CR4: 00000000003526f0 [ 543.015678][T14806] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 543.023655][T14806] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 543.031635][T14806] Call Trace: [ 543.034915][T14806] [ 543.037850][T14806] ? die_addr+0x3b/0xa0 [ 543.042016][T14806] ? exc_general_protection+0x155/0x230 [ 543.047576][T14806] ? asm_exc_general_protection+0x26/0x30 [ 543.053316][T14806] ? sock_diag_save_cookie+0x44/0xd0 [ 543.058615][T14806] ? __smc_diag_dump.constprop.0+0x3cd/0x2500 [ 543.064696][T14806] ? __smc_diag_dump.constprop.0+0x3e2/0x2500 [ 543.070778][T14806] ? __pfx_mark_lock+0x10/0x10 [ 543.075556][T14806] ? __pfx___smc_diag_dump.constprop.0+0x10/0x10 [ 543.081894][T14806] ? hlock_class+0x4e/0x130 [ 543.086406][T14806] ? __lock_acquire+0x163e/0x3ce0 [ 543.091458][T14806] ? __pfx___lock_acquire+0x10/0x10 [ 543.096676][T14806] ? mark_held_locks+0x9f/0xe0 [ 543.101456][T14806] ? lock_acquire.part.0+0x11b/0x380 [ 543.106761][T14806] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 543.112409][T14806] ? rcu_is_watching+0x12/0xc0 [ 543.117187][T14806] ? trace_lock_acquire+0x14a/0x1d0 [ 543.122401][T14806] ? smc_diag_dump_proto+0x103/0x420 [ 543.127709][T14806] ? lock_acquire+0x2f/0xb0 [ 543.132235][T14806] ? smc_diag_dump_proto+0x103/0x420 [ 543.137540][T14806] smc_diag_dump_proto+0x26d/0x420 [ 543.142674][T14806] smc_diag_dump+0x27/0x90 [ 543.147105][T14806] netlink_dump+0x552/0xcc0 [ 543.151624][T14806] ? __pfx_netlink_dump+0x10/0x10 [ 543.156660][T14806] ? __mutex_lock+0x1a6/0x9c0 [ 543.161355][T14806] ? find_held_lock+0x2d/0x110 [ 543.166135][T14806] ? lock_acquire+0x2f/0xb0 [ 543.170656][T14806] ? netlink_lookup+0x3d/0x270 [ 543.175436][T14806] __netlink_dump_start+0x6d9/0x980 [ 543.180653][T14806] smc_diag_handler_dump+0x1fb/0x240 [ 543.185960][T14806] ? __pfx_smc_diag_handler_dump+0x10/0x10 [ 543.191778][T14806] ? trace_lock_acquire+0x14a/0x1d0 [ 543.196985][T14806] ? __pfx_smc_diag_dump+0x10/0x10 [ 543.202114][T14806] sock_diag_rcv_msg+0x437/0x790 [ 543.207069][T14806] netlink_rcv_skb+0x165/0x410 [ 543.211852][T14806] ? __pfx_sock_diag_rcv_msg+0x10/0x10 [ 543.217331][T14806] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 543.222640][T14806] ? netlink_deliver_tap+0x1ae/0xcf0 [ 543.227941][T14806] netlink_unicast+0x53c/0x7f0 [ 543.232729][T14806] ? __pfx_netlink_unicast+0x10/0x10 [ 543.238030][T14806] ? __phys_addr_symbol+0x30/0x80 [ 543.243066][T14806] ? __check_object_size+0x488/0x710 [ 543.248367][T14806] netlink_sendmsg+0x8b8/0xd70 [ 543.253154][T14806] ? __pfx_netlink_sendmsg+0x10/0x10 [ 543.258455][T14806] ? lock_acquire+0x2f/0xb0 [ 543.262973][T14806] ? __might_fault+0xe3/0x190 [ 543.267660][T14806] ____sys_sendmsg+0x9ae/0xb40 [ 543.272441][T14806] ? copy_msghdr_from_user+0x10b/0x160 [ 543.277910][T14806] ? __pfx_____sys_sendmsg+0x10/0x10 [ 543.283212][T14806] ? kfree+0x274/0x4b0 [ 543.287292][T14806] ? __pfx___lock_acquire+0x10/0x10 [ 543.292524][T14806] ___sys_sendmsg+0x135/0x1e0 [ 543.297226][T14806] ? __pfx____sys_sendmsg+0x10/0x10 [ 543.302456][T14806] ? lock_acquire+0x2f/0xb0 [ 543.306982][T14806] ? __fget_files+0x40/0x3f0 [ 543.311589][T14806] ? fdget+0x176/0x210 [ 543.315667][T14806] __sys_sendmsg+0x117/0x1f0 [ 543.320268][T14806] ? __pfx___sys_sendmsg+0x10/0x10 [ 543.325394][T14806] ? blkcg_maybe_throttle_current+0x646/0xf00 [ 543.331482][T14806] do_syscall_64+0xcd/0x250 [ 543.335995][T14806] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 543.341910][T14806] RIP: 0033:0x7f6cc717e719 [ 543.346329][T14806] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 543.365960][T14806] RSP: 002b:00007f6cc6bde038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 543.374391][T14806] RAX: ffffffffffffffda RBX: 00007f6cc7336208 RCX: 00007f6cc717e719 [ 543.382385][T14806] RDX: 000000000400c000 RSI: 0000000020000140 RDI: 000000000000000f [ 543.390370][T14806] RBP: 00007f6cc71f132e R08: 0000000000000000 R09: 0000000000000000 [ 543.398344][T14806] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 543.406328][T14806] R13: 0000000000000000 R14: 00007f6cc7336208 R15: 00007fff5c298088 [ 543.414324][T14806] [ 543.417358][T14806] Modules linked in: [ 543.422923][T14806] ---[ end trace 0000000000000000 ]--- [ 543.429296][T14806] RIP: 0010:__smc_diag_dump.constprop.0+0x3e2/0x2500 [ 543.436914][T14806] Code: 4c 8b b3 58 05 00 00 4d 85 f6 0f 84 f6 02 00 00 e8 a3 b8 d1 f6 49 8d 7e 18 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 86 1c 00 00 48 b8 00 00 00 00 00 fc ff df 4d 8b [ 543.456578][T14806] RSP: 0018:ffffc90004dff160 EFLAGS: 00010206 [ 543.462655][T14806] RAX: dffffc0000000000 RBX: ffff88806ca57300 RCX: ffffffff88feca74 [ 543.470651][T14806] RDX: 0000000000002c03 RSI: ffffffff8abb00fd RDI: 0000000000016018 [ 543.478655][T14806] RBP: ffff88807b9f45e0 R08: 0000000000000005 R09: 0000000000000000 [ 543.486673][T14806] R10: 0000000080000001 R11: 0000000000000000 R12: 0000000000000000 [ 543.494694][T14806] R13: ffff88803b650000 R14: 0000000000016000 R15: 0000000000000002 [ 543.502686][T14806] FS: 00007f6cc6bde6c0(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 543.511671][T14806] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 543.518581][T14806] CR2: 00007f6cc6b9bf98 CR3: 000000008baea000 CR4: 00000000003526f0 [ 543.526850][T14806] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 543.534950][T14806] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 543.542938][T14806] Kernel panic - not syncing: Fatal exception [ 543.549257][T14806] Kernel Offset: disabled [ 543.553568][T14806] Rebooting in 86400 seconds..