last executing test programs:

4m28.059323133s ago: executing program 2 (id=58):
r0 = socket(0x10, 0x2, 0x0)
r1 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000001080), 0xffffffffffffffff)
sendmsg$auto_L2TP_CMD_NOOP(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=ANY=[@ANYBLOB='(\x00', @ANYRES16=r1, @ANYBLOB="0100273d7000ffdbdf2500a604c312000100070001"], 0x28}, 0x1, 0x0, 0x0, 0x841}, 0x104)

4m27.939535512s ago: executing program 2 (id=59):
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
mlock$auto(0x4, 0x0) (async)
remap_file_pages$auto(0x9, 0xd17c, 0x0, 0x3, 0x9)
sendmsg$auto_OVS_DP_CMD_NEW(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="010026bd7020f8dbdf2501000000080002001f40f27e4182d90371455ab36d20699605ee5fa70304f3cccd37add3e03a3f62bd1927c5c821e37dab367b672372e7ae999f5426208845af776b9e0a2ab486a574f23d54a604c99daa94a51c8bb340aba25aafb464d0bfc7df01ecfaa0916b667306ff736a9b75e789343832f8a8dce849a6d443e991f47a02122b6d51c7ffb7b06a8d1ebd6fe98d5b84718f007ba41f95c04c2cca1e2cac3e67c4d2e0969c5b473a934ab8232ea5aa282e5da1", @ANYRES32=0x4, @ANYBLOB="080001004866520008000200", @ANYRES32=0x9, @ANYBLOB], 0x2c}, 0x1, 0x0, 0x0, 0x801}, 0x80)
socket(0x2, 0xa, 0xe572)
mmap$auto(0x0, 0x8, 0xdddb, 0x9b72, 0x2, 0x8000) (async)
r1 = socket(0x11, 0x80003, 0x300)
semctl$auto(0x201, 0xfffffffffffffffa, 0x3, 0x0) (async)
setsockopt$auto(r1, 0x4, 0xd, 0x0, 0xfffffff8) (async)
semctl$auto(0x6, 0x4, 0x10, 0xfffffffffffffffc) (async)
syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000080), 0xffffffffffffffff) (async)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
socket(0xa, 0x3, 0x6) (async)
socket(0x2, 0x1, 0x106) (async)
getsockopt$auto(0x4, 0x6, 0x1, &(0x7f0000000080)='\x00', &(0x7f00000000c0)=0x1) (async)
sendmsg$auto_OVS_DP_CMD_DEL(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="d8d80000e040b55906f547f7015c8ba28e772e906d03dea2f184a6a0d4178200601ef03bdca6467a14b462c1e92e19aa748527f09f034ecc844946010eca44c4b2f75d5bac2206f4d39ebe0ad6b5aa8f32869923258e8d80dc9d99dabf5e2705fe11e7147cf8d43711710da69ddf95d123b5f33e260554733e556310b4c5e6add74d182114e4ad65be302403cfee20426e552b1779c5a677d689605ebe166791bf41cd012cfe39795439dcbc9d0d9f26d03c04e3fe50c411e4eed044d56f", @ANYRES32=r2, @ANYBLOB="01002abd7000fedbdf2502"], 0x38}, 0x1, 0x0, 0x0, 0x11}, 0x20000000)

4m27.555320164s ago: executing program 2 (id=61):
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) (async)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) (async)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
rt_sigaction$auto(0x3, 0x0, 0x0, 0x8)
r0 = socket(0x10, 0x2, 0x4) (async)
sendfile$auto(0x1, 0x3, 0x0, 0xc01)
socket(0xa, 0x1, 0x84) (async)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) (async)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x3, 0x7) (async)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x1, 0x1, 0x1) (async)
connect$auto(0x4, &(0x7f0000000000)={0x6, @sa_data_min="d9c42a2dc36559b3d3cb15b16a9f"}, 0x7f) (async, rerun: 64)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async, rerun: 64)
madvise$auto(0x0, 0xffffffffffff0001, 0x15) (async)
socket(0x840000000002, 0x3, 0xff) (async)
connect$auto(0x3, &(0x7f00000000c0)={0x2, @sockaddr_1_1}, 0x55) (async, rerun: 32)
sendmmsg$auto(0x3, &(0x7f0000000040)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x1f4) (async, rerun: 32)
r1 = syz_genetlink_get_family_id$auto_netdev(&(0x7f0000001700), 0xffffffffffffffff)
sendmsg$auto_NETDEV_CMD_DEV_GET(r0, &(0x7f0000001840)={0x0, 0x0, &(0x7f0000001800)={&(0x7f00000017c0)=ANY=[@ANYBLOB="1c00442d", @ANYRES16=r1, @ANYBLOB="010025bd7000fedbdf2501000000"], 0x14}, 0x1, 0x0, 0x0, 0x40010}, 0x28044004)
mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x1, 0x8000) (async, rerun: 32)
shmat$auto(0x0, 0x0, 0x0) (async, rerun: 32)
clone$auto(0x40083b42, 0x5c84, 0xfffffffffffffffe, 0x0, 0x100000000000f) (async)
mount$auto(0x0, 0x0, 0x0, 0x9, 0x0)

4m23.470750897s ago: executing program 2 (id=72):
mmap$auto(0x0, 0x10001, 0x2, 0x1b, 0x5, 0x0)
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x23, 0x80805, 0x0)
memfd_secret$auto(0x0)
socket(0x2b, 0x1, 0x1)
open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x100)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x1d, 0x2, 0x2)
fanotify_init$auto(0x2, 0x2)
sendfile$auto(0x6, 0x3, 0x0, 0xc01)
sendfile$auto(0x3, 0x3, 0x0, 0x400000000006)
socket$nl_generic(0x10, 0x3, 0x10)
clone$auto(0x2003b46, 0x5c84, 0xfffffffffffffffc, 0x0, 0x14)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket(0x200000000000011, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x89b0, &(0x7f0000000140)={'bridge0\x00'})
socket(0xa, 0x5, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
socketpair$auto(0x2, 0x4, 0x8000000000000000, 0x0)
recvmmsg$auto(0x4, &(0x7f0000000200)={{0x0, 0x4, &(0x7f0000000140)={0x0, 0x4da}, 0x4, 0x0, 0x8, 0x800}, 0x3}, 0x7, 0xe, 0x0)
write$auto(0x3, 0x0, 0x10001)
pipe2$auto(0x0, 0x80)
getsockopt$auto(0x6, 0x84, 0x70, 0x0, 0x0)
ioperm$auto(0x7, 0x6, 0x5)
msgsnd$auto(0x5, 0x0, 0x3, 0x8)

4m22.582785305s ago: executing program 2 (id=74):
mmap$auto(0x0, 0x400005, 0xfffffffffffffffe, 0x9b72, 0x2, 0x8000)
sendmsg$auto_WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x4008810}, 0x2000c041)
r0 = socket(0x2, 0x1, 0x0)
bind$auto(0x3, &(0x7f0000000080)={0x2, @sockaddr_1_1}, 0x6b)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = open(&(0x7f0000000000)='./cgroup\x00', 0x0, 0x23)
r4 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f00000002c0), r2)
sendmsg$auto_NFSD_CMD_THREADS_SET(r3, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x5c, r4, 0x0, 0x70bd2c, 0x25dfdbfc, {}, [@NFSD_A_SERVER_THREADS={0x8, 0x1, 0xfff}, @NFSD_A_SERVER_GRACETIME={0x8, 0x2, 0xfff}, @NFSD_A_SERVER_GRACETIME={0x8, 0x2, 0x5}, @NFSD_A_SERVER_LEASETIME={0x8, 0x3, 0x8}, @NFSD_A_SERVER_GRACETIME={0x8, 0x2, 0x9a6}, @NFSD_A_SERVER_SCOPE={0x7, 0x4, '!-\x00'}, @NFSD_A_SERVER_GRACETIME={0x8, 0x2, 0x8}, @NFSD_A_SERVER_GRACETIME={0x8}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0x3}]}, 0x5c}, 0x1, 0x0, 0x0, 0x44}, 0x0)
statx$auto(r3, 0x0, 0x1, 0x1, 0x0)
connect$auto(0x3, &(0x7f00000000c0)={0x2, @sockaddr_1_1}, 0x55)
recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd)
write$auto(0x3, 0x0, 0xfffffdef)
setsockopt$auto(r0, 0x4, 0x8001, 0x0, 0x4)
unshare$auto(0x40000080)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
fchmod$auto(r1, 0x81)
clone$auto(0x400000000d0, 0x7, 0xffffffffffffffff, 0xfffffffffffffffc, 0x9)
write$auto(0x3, 0x0, 0x8000fdef)

4m20.195294328s ago: executing program 2 (id=82):
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
r0 = socket(0xa, 0x5, 0x0)
getsockopt$auto(r0, 0x84, 0x3, 0x0, &(0x7f0000000080)=0x9b)
mknod$auto(&(0x7f0000000000)='}[,&*}\x00', 0x1, 0x4)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r1, &(0x7f0000000380)={&(0x7f0000000240), 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x44, r2, 0x8, 0x70bd26, 0x25dfdbff, {}, [@NL80211_ATTR_MBSSID_CONFIG={0x9, 0x132, "0600001e00"}, @NL80211_ATTR_SSID={0x6, 0x34, 'v}'}, @NL80211_ATTR_MESH_PEER_AID={0x6, 0xed, 0x4}, @NL80211_ATTR_WDEV={0xc, 0x99, 0xe}, @NL80211_ATTR_WIPHY_TX_POWER_LEVEL={0x8, 0x62, 0xff}]}, 0x44}}, 0x8c0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x800008000)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
statmount$auto(0x0, &(0x7f0000000040)={0x1, 0x0, 0x36, 0x828, 0x9, 0x8000000000000000, 0x9f, 0x7, 0x9, 0x8, 0x2, 0x9, 0x9f70, 0x7, 0x0, 0x200000000000f, 0x100, 0x1, 0x10001, 0x2cf8, [0x9, 0x7f, 0x40, 0x1, 0x10001, 0x2, 0x600, 0x3, 0x7ffffffc, 0x8, 0x395e, 0xfffffffffffffff9, 0x10, 0x3, 0x35c4, 0x0, 0x6, 0x0, 0xea8, 0xc, 0xd9, 0x48, 0x5, 0x1, 0x0, 0x7fffffffffffffdf, 0x16, 0x11, 0x2, 0x8000000000000000, 0x2ab, 0x8, 0x800, 0x1, 0x1, 0x4003, 0xffffffffffff0000, 0x6a, 0xfffffffffffffff9, 0x4, 0x2b7, 0x4, 0x10, 0xffffffffffffff26, 0x9, 0x7, 0x6, 0x7a, 0xdc]}, 0xe3c, 0x0)
socket(0x11, 0x3, 0x2)
r3 = socket(0x10, 0x2, 0x4)
sendmsg$auto_NFSD_CMD_THREADS_SET(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="2c0000001400"], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x400c000)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
socket(0x11, 0x2, 0x4)
read$auto(0x4, 0x0, 0x80)
ioctl$auto(0xc8, 0x400454c8, 0x5c8d)
shmctl$auto(0x9, 0xd, 0x0)
mbind$auto(0x0, 0x100000004, 0x4, 0x0, 0x20000000000006, 0x2)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x800000002, 0x8000)
socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0)
sendto$auto(0x4, 0x0, 0xff, 0x6, 0x0, 0xe)
move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000)
setsockopt$auto(0x3, 0x1, 0x1d, 0x0, 0x9)
read$auto(0x3, 0x0, 0x10)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
listxattr$auto(&(0x7f0000000040)='}[,&*}\x00', 0x0, 0x0)
sendmsg$auto_BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, 0x0, 0x10)

4m4.973410455s ago: executing program 32 (id=82):
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
r0 = socket(0xa, 0x5, 0x0)
getsockopt$auto(r0, 0x84, 0x3, 0x0, &(0x7f0000000080)=0x9b)
mknod$auto(&(0x7f0000000000)='}[,&*}\x00', 0x1, 0x4)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r1, &(0x7f0000000380)={&(0x7f0000000240), 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x44, r2, 0x8, 0x70bd26, 0x25dfdbff, {}, [@NL80211_ATTR_MBSSID_CONFIG={0x9, 0x132, "0600001e00"}, @NL80211_ATTR_SSID={0x6, 0x34, 'v}'}, @NL80211_ATTR_MESH_PEER_AID={0x6, 0xed, 0x4}, @NL80211_ATTR_WDEV={0xc, 0x99, 0xe}, @NL80211_ATTR_WIPHY_TX_POWER_LEVEL={0x8, 0x62, 0xff}]}, 0x44}}, 0x8c0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x800008000)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
statmount$auto(0x0, &(0x7f0000000040)={0x1, 0x0, 0x36, 0x828, 0x9, 0x8000000000000000, 0x9f, 0x7, 0x9, 0x8, 0x2, 0x9, 0x9f70, 0x7, 0x0, 0x200000000000f, 0x100, 0x1, 0x10001, 0x2cf8, [0x9, 0x7f, 0x40, 0x1, 0x10001, 0x2, 0x600, 0x3, 0x7ffffffc, 0x8, 0x395e, 0xfffffffffffffff9, 0x10, 0x3, 0x35c4, 0x0, 0x6, 0x0, 0xea8, 0xc, 0xd9, 0x48, 0x5, 0x1, 0x0, 0x7fffffffffffffdf, 0x16, 0x11, 0x2, 0x8000000000000000, 0x2ab, 0x8, 0x800, 0x1, 0x1, 0x4003, 0xffffffffffff0000, 0x6a, 0xfffffffffffffff9, 0x4, 0x2b7, 0x4, 0x10, 0xffffffffffffff26, 0x9, 0x7, 0x6, 0x7a, 0xdc]}, 0xe3c, 0x0)
socket(0x11, 0x3, 0x2)
r3 = socket(0x10, 0x2, 0x4)
sendmsg$auto_NFSD_CMD_THREADS_SET(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="2c0000001400"], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x400c000)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
socket(0x11, 0x2, 0x4)
read$auto(0x4, 0x0, 0x80)
ioctl$auto(0xc8, 0x400454c8, 0x5c8d)
shmctl$auto(0x9, 0xd, 0x0)
mbind$auto(0x0, 0x100000004, 0x4, 0x0, 0x20000000000006, 0x2)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x800000002, 0x8000)
socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0)
sendto$auto(0x4, 0x0, 0xff, 0x6, 0x0, 0xe)
move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000)
setsockopt$auto(0x3, 0x1, 0x1d, 0x0, 0x9)
read$auto(0x3, 0x0, 0x10)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
listxattr$auto(&(0x7f0000000040)='}[,&*}\x00', 0x0, 0x0)
sendmsg$auto_BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, 0x0, 0x10)

3m2.963236167s ago: executing program 1 (id=347):
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000)
sendmsg$auto_WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x88d0}, 0x2000c041)
socket(0x2, 0x1, 0x0)
bind$auto(0x3, &(0x7f0000000080)={0x2, @sockaddr_1_1}, 0x6b)
connect$auto(0x3, &(0x7f00000000c0)={0x2, @sockaddr_1_1}, 0x55)
recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd)
r0 = socket(0x21, 0x80000, 0x7ff80000)
pwrite64$auto(r0, &(0x7f0000000180)='}\x00', 0x4, 0x9d)
write$auto(0x3, 0x0, 0xfffffdef)
connect$auto(0x3, &(0x7f0000000140)={0xa, @sockaddr_1_1}, 0x55)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
r1 = socket(0xa, 0x801, 0x100)
setsockopt$auto(r1, 0x6, 0x5, 0x0, 0xfb3)
r2 = socket(0x840000000002, 0x3, 0xff)
setsockopt$auto(0x3, 0x0, 0x4, 0x0, 0x28)
sendmsg$auto_NL80211_CMD_DEL_PMK(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[], 0x80}, 0x1, 0x0, 0x0, 0x4001}, 0x44)
read$auto(0x3, 0x0, 0xf34)
mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000)
socket(0xa, 0x2, 0x0)
semctl$auto(0x1ff, 0x2, 0x13, 0x1)
lsm_list_modules$auto(0x0, 0x0, 0x0)
mount_setattr$auto(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x2)
sendmmsg$auto(0x3, &(0x7f0000000000)={{0x0, 0x2, 0x0, 0x106, 0x0, 0x6c, 0x697b}, 0xed7138c}, 0x9a6, 0x0)
shutdown$auto(0x200000003, 0x2)
sendfile$auto(0x1, 0x3, 0x0, 0xc01)
socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0)
fanotify_init$auto(0x80, 0x3)
set_tid_address$auto(&(0x7f0000000040)=0x4)
mmap$auto(0xfff, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffff7, 0x8000)

3m0.606210795s ago: executing program 1 (id=353):
mmap$auto(0x0, 0x2, 0xdf, 0xeb1, 0xffffffff, 0x8000) (async)
close_range$auto(0x0, 0xfffffffffffff000, 0x2) (async)
getpid() (async)
socket(0xa, 0x801, 0x84)
mmap$auto(0x9, 0x401, 0xfff8000000000000, 0x10, 0x4, 0x8) (async)
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$auto_ETHTOOL_MSG_TUNNEL_INFO_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r1, 0x1, 0x70bd29, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x8040000}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10) (async)
socket$nl_generic(0x10, 0x3, 0x10)
sysfs$auto(0x2, 0x0, 0x0) (async)
fsopen$auto(0x0, 0x1) (async)
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$auto_MAC80211_HWSIM(&(0x7f0000001a80), r2)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
close_range$auto(0x0, 0xffffffffffffffff, 0x0) (async)
stat$auto(&(0x7f0000000000)='..\x00\x00', 0x0) (async)
mprotect$auto(0x1ffff000, 0x8000000000000001, 0xd) (async)
syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00') (async)
getdents$auto(0x0, 0x0, 0x18) (async)
sendmsg$auto_HWSIM_CMD_FRAME(r2, &(0x7f0000003200)={0x0, 0x0, &(0x7f00000031c0)={&(0x7f0000001ac0)={0x14, r3, 0x1, 0x70bd25, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x2400004d}, 0x0) (async)
socket(0xa, 0x3, 0x3a) (async, rerun: 64)
ioctl$auto(0x1, 0x89a0, 0x8) (rerun: 64)
epoll_create$auto(0x4) (async)
epoll_ctl$auto(0x5, 0x1, 0x8000000000000000, 0x0)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r4 = socket(0x29, 0x5, 0x0)
sendmmsg$auto(r4, 0x0, 0x9a6, 0x3ec0)

2m59.951104018s ago: executing program 1 (id=359):
signalfd4$auto(0xffffffff, &(0x7f0000000080)={0x8000}, 0x8, 0x0)
select$auto(0x5, &(0x7f0000000000)={[0xeb, 0x8001, 0x4, 0xd1, 0xb, 0x1ff, 0x500000, 0x10000, 0x7fffffffffffffff, 0x4, 0x105, 0x10001, 0x0, 0x4, 0xffffffffffffffff, 0x1]}, 0x0, 0x0, 0x0)
tee$auto(0x1000, 0x9, 0x0, 0x7)
close_range$auto(0x2, 0x8, 0x0)
mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001)
r0 = socket(0x2, 0x3, 0xa)
getsockopt$auto(r0, 0x0, 0x29, 0x0, &(0x7f0000000040)=0xdbb)
mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', 0x0, 0x623c8451, 0x0)
clone$auto(0xf, 0x6, 0xfffffffffffffffd, 0xfffffffffffffffd, 0xc0c9)
prctl$auto(0x10000000016, 0x1, 0x4, 0x5, 0x0)

2m58.781726571s ago: executing program 1 (id=368):
map_shadow_stack$auto(0x0, 0x7, 0x9)
mlockall$auto(0x7)
mmap$auto(0x0, 0x20009, 0x8, 0xeb1, 0x401, 0x8000)
mlock$auto(0xcd2, 0x7)
mlockall$auto(0x7)

2m56.71297362s ago: executing program 1 (id=379):
r0 = socket(0x10, 0x2, 0x4)
sendmsg$auto_NFSD_CMD_THREADS_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="2c0000001200"], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000580), 0xffffffffffffffff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r4=>0x0})
sendmsg$auto_NL80211_CMD_STOP_AP(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="29012cbd70f70000002517db000008000300", @ANYRES32=r4], 0x1c}, 0x1, 0x0, 0x0, 0x4004050}, 0x14)
sendmsg$auto_NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r2, 0x804, 0x70bd2a, 0x25dfdbfe, {}, [@NL80211_ATTR_PUNCT_BITMAP={0x8, 0x142, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4414}, 0x0)
r5 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f0000000040), 0xffffffffffffffff)
r6 = socket(0x10, 0x2, 0x0)
sendmsg$auto_CTRL_CMD_GETFAMILY(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01f92abd77dcb7fcdf25030000000a"], 0x24}, 0x1, 0x0, 0x0, 0x4008810}, 0x30040005)
mprotect$auto(0x1ffff000, 0x8000000000000001, 0x4)
sendmsg$auto_NFSD_CMD_THREADS_SET(r6, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x8044)

2m55.446843546s ago: executing program 1 (id=387):
r0 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0xa, 0x801, 0x84)
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
shutdown$auto(0x200000003, 0x2)
recvmmsg$auto(0x3, 0x0, 0x10000, 0x300, 0x0)
listen$auto(0x3, 0x400000)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
setsockopt$auto(0x3, 0x10000000084, 0x7d, 0x0, 0xc)
sendmsg$auto_ETHTOOL_MSG_RSS_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="f8ff"], 0x14}, 0x1, 0x0, 0x0, 0x7}, 0x4010)
close_range$auto(0x0, 0x3, 0x4000000000002)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$auto(0x1, 0x1, 0x25, &(0x7f0000000000)='\x00', 0xbb)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$auto_NL80211_CMD_SET_WIPHY(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="01002928cd49050e876996649d0808000300", @ANYRES32=r3, @ANYBLOB="05003e00f7"], 0x24}, 0x1, 0x0, 0x0, 0x24048080}, 0x80)

2m40.232749572s ago: executing program 33 (id=387):
r0 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0xa, 0x801, 0x84)
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
shutdown$auto(0x200000003, 0x2)
recvmmsg$auto(0x3, 0x0, 0x10000, 0x300, 0x0)
listen$auto(0x3, 0x400000)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
setsockopt$auto(0x3, 0x10000000084, 0x7d, 0x0, 0xc)
sendmsg$auto_ETHTOOL_MSG_RSS_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="f8ff"], 0x14}, 0x1, 0x0, 0x0, 0x7}, 0x4010)
close_range$auto(0x0, 0x3, 0x4000000000002)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$auto(0x1, 0x1, 0x25, &(0x7f0000000000)='\x00', 0xbb)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$auto_NL80211_CMD_SET_WIPHY(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="01002928cd49050e876996649d0808000300", @ANYRES32=r3, @ANYBLOB="05003e00f7"], 0x24}, 0x1, 0x0, 0x0, 0x24048080}, 0x80)

1m27.122605695s ago: executing program 4 (id=730):
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x48000}, 0x0)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
ppoll$auto(&(0x7f0000002340)={0x8000, 0x0, 0xfffb}, 0x1, &(0x7f0000002380)={0x22e, 0x4}, &(0x7f00000023c0)={0x3}, 0x8)
close_range$auto(0x2, 0x8000, 0x0)
io_uring_setup$auto(0x6, 0x0)
io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x3)
mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
bpf$auto(0x6, 0xffffffffffffffff, 0x0)
sysfs$auto(0x2, 0x2, 0x0)
fsopen$auto(0x0, 0x1)
open(&(0x7f0000000000)='./file0\x00', 0xa41c2, 0x84)
socket(0x2, 0x801, 0x100)
pipe$auto(&(0x7f0000000080))
fallocate$auto(0x8000000000000003, 0x0, 0xd, 0xcbd5d)
sendfile$auto(0x6, 0x3, 0x0, 0xfffffdef)
close_range$auto(0x2, 0x8000, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002)
io_uring_register$auto(0xffffffffffffffff, 0x7, &(0x7f0000000040)=[0x7fffffff, 0x1, 0x31, 0x6, 0x8, 0x8, 0x6], 0x1ff)
r1 = syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f00000000c0), r0)
sendmsg$auto_OVS_FLOW_CMD_DEL(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f00000002c0)={0x1bc, r1, 0x200, 0x70bd2a, 0x25dfdbfc, {}, [@OVS_FLOW_ATTR_MASK={0xe9, 0x7, "29e43bc65764487a7a4e7107648ff168cf9273d3e876901a42cff50bdfeb780eff0cc4ab460c95fb3542571a84f72f8d3bd3fcd89b5ab146a163453cb0e6414b74e9d57e1e23acdb3a8df1472d7b6c53407fdc85e096b43411b5cb2787e8aaa2dbb64f400ae499062fea0e1cdeaeb549fd99cdf53d797031b4ed8b815c01cdba6e264397609aca412b3d94fd9feeee28e90e84f9a0130f5c7b5e9975f530c90b527c4d7ec909f5b9389a055c9419388290f86dcdfac7ccba566eb80c9215fd3a21546377bf51601d1bdd9b72cdad39bd26fa310c00147e231785affe88d66e7010d1496e4a"}, @OVS_FLOW_ATTR_UFID={0x5, 0x9, 0x8}, @OVS_FLOW_ATTR_ACTIONS={0xb4, 0x2, "33aba7b25c226cd9c7085091c3fbbd8ff22c46fc09187f1aeead91987864d09ed3588749ba9b518ff4a3bd5caa05d3bd4207f5a3561fa501cd4c237cc19790093f613c74dbf2b866d5375357b0eca7c010109bdd5d97772bb200d637a6f828aee48ceed9b9dbcd5d3f1878f236f83d75815a5ab268b33e4997db917ac7decfdbb39b19180fbe216e2c1b0960b7b939a6328780590ebe5db7266e41fc324999be28c45feb8ee6004e4abef2ec9ba3974e"}]}, 0x1bc}, 0x1, 0x0, 0x0, 0x24040001}, 0x8840)

1m24.452432068s ago: executing program 4 (id=738):
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
flock$auto(0x2000, 0x10000)
madvise$auto(0x0, 0xffffffffffff0001, 0x17)
madvise$auto(0x0, 0x7fffffffffffffff, 0xa)
unshare$auto(0x200)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
syz_genetlink_get_family_id$auto_nfsd(0x0, 0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x2, 0x801, 0x100)
socket(0x11, 0x3, 0x2)
getsockopt$auto(0x6, 0x107, 0x16, 0x0, 0x0)
r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/mnt\x00')
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$auto_handshake(&(0x7f0000000080), r2)
listen$auto(0xde, 0x9)
sendmsg$auto_HANDSHAKE_CMD_ACCEPT(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010027459e35531312c85f606fa9bd7000fddbdf250200000008000200fd000000"], 0x1c}, 0x1, 0x0, 0x0, 0x2000}, 0x2004881c)
setns(r0, 0x0)
clone$auto(0xfffffffe00000, 0x5, 0xfffffffffffffffc, 0xfffffffffffffffc, 0x4)
clone$auto(0x6, 0x10001, 0x0, 0x0, 0x4)
remap_file_pages$auto(0x7, 0x100000001, 0x0, 0x9, 0x4)
mbind$auto(0xf000, 0x2, 0x8000000000000000, 0x0, 0x6, 0x2)

1m23.764895484s ago: executing program 4 (id=739):
clone$auto(0x8, 0xce, &(0x7f0000000000)=0xc, &(0x7f0000000040)=0x1, 0x0)
r0 = open(&(0x7f0000000080)='./file0\x00', 0x24040, 0x80)
sendmsg$auto_TIPC_NL_MEDIA_SET(r0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000280)={&(0x7f0000000100)={0x150, 0x0, 0x0, 0x70bd28, 0x25dfdbfd, {}, [@TIPC_NLA_SOCK={0x97, 0x2, "679131eef7f94600941c80a4a47b3256e8b71cd9bb3b53ecccf7c5cb0b868be611cdfc18fd0543f024fe18d72a2e52840788dec01f526509c470f1bac4b5dbf3a7115194a9bfc41b1d4cb1d2a37b684504941f9a8b37d33d2ef4d3907c0837f1fe6baa0c18e3aba8dbaf52ecf4a236b2b4160a3fe549754f7cb11845f872a6c7767481fa3b416d4d5bd940726f699ec14c9176"}, @TIPC_NLA_PUBL={0x14, 0x3, "7b6e97cda7f5698cfee4778b01b8d10e"}, @TIPC_NLA_NET={0x90, 0x7, "78699d90d34d63bbf91295b15edff1e207750fadfe12477795f9f7fd7f9c0db4ec4d0759323715f46f3e4c61086dbea0b3fdefbb651d2c5cfd00fd09f85ee142264a64942b99f348bf48cf9b33058cf5bf99e3bf3fb62d26f1c2d03441672b717c3c6136ab635e3dd8e00e7b3e39a2d52aecbe3639e4abae7e0b794b3dd8dccf145b98f871534f2b1f2dcfcd"}]}, 0x150}}, 0x20040004)
r1 = socket(0x1a, 0x3, 0x9)
adjtimex$auto(&(0x7f0000000300)={0x7, 0x0, 0xe, 0x3, 0x4, 0x4, 0x7, 0x0, 0x8, 0x0, 0x1, {0x56a, 0x7ff}, 0x8000000000, 0x8, 0x0, 0xcb8, 0x0, 0x10001, 0x6, 0x8000000000000001, 0x1ffc0000000000, 0xb, 0x9})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
adjtimex$auto(&(0x7f0000000400)={0x8c9, 0x0, 0xfffffffffffffffb, 0x6, 0x0, 0x8, 0xffff8000, 0x0, 0x8000000000000000, 0xffff, 0x4, {0x0, 0x43}, 0x80, 0x0, 0x5e594e20, 0x5, 0x0, 0x7, 0x7, 0x2, 0x40, 0x10000, 0x7fff})
bind$auto(r1, &(0x7f0000000500)={0x1, @sa_data_min="cea22e87a2c136faf238c4ef91ef"}, 0x9)
r3 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000580), 0xffffffffffffffff)
sendmsg$auto_ETHTOOL_MSG_MODULE_SET(r1, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x2c, r3, 0x8, 0x70bd2b, 0x25dfdbff, {}, [@ETHTOOL_A_MODULE_POWER_MODE_POLICY={0x5, 0x2, 0xe}, @ETHTOOL_A_MODULE_POWER_MODE_POLICY={0x5, 0x2, 0xed}, @ETHTOOL_A_MODULE_POWER_MODE_POLICY={0x5, 0x2, 0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x48080}, 0x800)
sysfs$auto(0x6c, 0xffffffffd804b1c3, 0x0)
timerfd_gettime$auto(r0, &(0x7f0000000680)={{0x6, 0x8}, {0x1, 0x7}})
r4 = syz_genetlink_get_family_id$auto_IPVS(&(0x7f0000000700), r1)
sendmsg$auto_IPVS_CMD_DEL_DEST(r1, &(0x7f0000000800)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x54, r4, 0x20, 0x70bd29, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xffffffff}, @IPVS_CMD_ATTR_DAEMON={0x38, 0x3, "594369ecdeeb2db30509cd6972aa28d1ea87bbcc936fd7da64f5ec912109902aae1dfce96f01d756f055d57ed04de97ba71e2063"}]}, 0x54}, 0x1, 0x0, 0x0, 0xc040014}, 0x400c4)
sendmsg$auto_ETHTOOL_MSG_MM_SET(r0, &(0x7f0000000900)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x14, r3, 0x400, 0x70bd2c, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20044840)
r5 = socket(0x6, 0x2, 0x3)
sendmsg$auto_NFC_CMD_DEACTIVATE_TARGET(r5, &(0x7f0000000a00)={&(0x7f0000000940), 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x1c, 0x0, 0x20, 0x70bd26, 0x25dfdbff, {}, [@NFC_ATTR_RF_MODE={0x5, 0xb, 0xa}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x20004081)
sysfs$auto(0x1, 0x8b9, 0x9)
adjtimex$auto(&(0x7f0000000a40)={0xc4b, 0x0, 0x5c13, 0xb0, 0x0, 0x9, 0x6, 0x0, 0x0, 0x401, 0x3, {0x10, 0x3}, 0x3, 0xca, 0x3, 0xf, 0x0, 0x78, 0x8, 0x3, 0x0, 0x29cf, 0xfffffc35})
mount$auto(&(0x7f0000000b40)='veth0_to_bond\x00', &(0x7f0000000b80)='ethtool\x00', &(0x7f0000000bc0)='ethtool\x00', 0xc76, &(0x7f0000000c00))
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$auto_NET_DM(&(0x7f0000000c80), r0)
sendmsg$auto_NET_DM_CMD_CONFIG_GET(r6, &(0x7f0000000d40)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000cc0)={0x30, r7, 0x2, 0x70bd2d, 0x25dfdbfd, {}, [@NET_DM_ATTR_TRUNC_LEN={0x8}, @NET_DM_ATTR_QUEUE_LEN={0x8, 0xb, 0x6}, @NET_DM_ATTR_QUEUE_LEN={0x8, 0xb, 0x9}, @NET_DM_ATTR_SW_DROPS={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000004}, 0x0)
r8 = socket(0x27, 0x3, 0x1)
symlink$auto(&(0x7f0000000d80)='(\x00', &(0x7f0000000dc0)=',:+\\]$-*\xfd \x00')
sendmsg$auto_NET_DM_CMD_START(r8, &(0x7f0000000ec0)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e40)={0x2c, r7, 0x24, 0x70bd26, 0x25dfdbff, {}, [@NET_DM_ATTR_SW_DROPS={0x4}, @NET_DM_ATTR_UNSPEC={0x12, 0x0, "191c2d85b342694d21bdd3819ccb"}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000}, 0x8000)
stat$auto(&(0x7f0000000f00)='[\x00', &(0x7f0000000f40)={0x6, 0x2, 0x1, 0x5, 0xee00, 0xffffffffffffffff, 0x0, 0x2, 0x7fffffffffffffff, 0x6, 0x7, 0x9, 0x6, 0x0, 0x1000, 0x401, 0x5})
vmsplice$auto(r8, &(0x7f0000001040)={&(0x7f0000001000)=[0x3, 0x8001, 0x7, 0x3, 0x6], 0x9}, 0x6, 0x0)
r9 = syz_genetlink_get_family_id$auto_TIPCv2(&(0x7f00000010c0), r2)
sendmsg$auto_TIPC_NL_BEARER_ADD(r6, &(0x7f00000013c0)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001380)={&(0x7f0000001100)={0x278, r9, 0x0, 0x70bd29, 0x25dfdbfe, {}, [@TIPC_NLA_LINK={0xf3, 0x4, "24cd15a9d124168d16d4988e48b2cb815a79c8b3e5827e71f761ad268b34f8f8c52727cef1c5ebeabf51385ebd7ea5529fa5c7f089be0dd7c0292a02a9a0d91b80953ccc02dc0d730a01e61a5ab5b64a8f7a7f03fe58f90af07d15298ff386093e6db659793800cea31edb39c2c1f9cfdeb3a8fb12e71da4029322214e524416ebf0d0786356373bcbe1485be033dc3d01231b1855aac3dbd4338609d0bd541f1477ad8520b45738430184c6b3e340e932e623a61a1771084f4012c236bd172a4bf57ab653fc1c2772dd89c9e681fea9217173706ba08d6579d7b89eae81bf63e3d7637ada0e5d257fd58a9e2fd3cf"}, @TIPC_NLA_NODE={0x34, 0x6, "2bb886b363fb4275b00e301365b2f4344025f6b044e687f4c995e553cd6964c7bab2b9207c4cc1b883af28447a7c1748"}, @TIPC_NLA_UNSPEC={0x72, 0x0, "02398f9c2cd978fe3ef79ea05aa977007b0452f412cb35193cb9bb951914cbb82998df821fbad95fcb4f6bff4b968f3e34213152527f969f282b8fc778f0ff96325614a6c9728b8e742cfad5cc15e46c66f1d5e3c21b982b6e3f6c466341d58a33aa643977cc089be63fe7363f3e"}, @TIPC_NLA_LINK={0xc5, 0x4, "3be24504aebc4c76af909dd135244b1296062c91524bd3c64584af2025cf8df8d1a26870fa679eef2c3b4b5b697d1379eac7e18bb9998594c4e4b11032b2c0ca033f3352d7b33eae3eb2b0df94a4314b87524b37e7ff5028566a7e9896afa4b0d931ffb8f3660746bd465b1521d7941ab3e179594fb1f2ca8ecf96b1ae142aa477f26e9fce23e3c03cd840e93e343e5aa2056d20d2b846cc662e421e72f3e6113f59582d4b1b954e5ffa0c4f32b575363467c0bbeac2a7a3f526e80a6e4828cfa7"}]}, 0x278}, 0x1, 0x0, 0x0, 0x20004800}, 0x0)

1m23.43213352s ago: executing program 4 (id=741):
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10) (async)
socket(0x25, 0x1, 0x3)
socket(0x2b, 0x1, 0x1)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async)
socket(0x2, 0x3, 0xa) (async)
setsockopt$auto(0x3, 0x0, 0x29, 0x0, 0x28) (async)
r0 = socket(0x15, 0x5, 0x0)
bind$auto(0x7, &(0x7f0000000040)={0x2, @sa_data_min="590eac1414349774a263b19050fe"}, 0x6f) (async)
bind$auto(r0, &(0x7f0000000440)={0x2, @sockaddr_1_1={"b3d53a4e36"}}, 0x68)

1m22.651495808s ago: executing program 4 (id=744):
io_uring_setup$auto(0x6, 0x0)
clock_nanosleep$auto(0x2, 0x543bae6e, 0x0, 0xfffffffffffffffd)
sendmsg$auto_GTP_CMD_ECHOREQ(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x30, 0x0, 0x800, 0x70bd25, 0x25dfdbfc, {}, [@GTPA_LINK={0x8, 0x1, 0xffff0000}, @GTPA_MS_ADDR6={0x14, 0xc, {@u6_addr32=[0x83ae, 0x7fff, 0x4, 0x54d]}}]}, 0x30}, 0x1, 0x0, 0x0, 0xc800}, 0x4000)
sendmsg$auto_BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x300, 0x70bd26, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4c894}, 0x4)
r0 = socket(0x10, 0x2, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB=' \x00\''], 0x1ac}}, 0x40000)
mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x200000000008000)
io_uring_setup$auto(0x1, 0x0)
futex$auto(0x0, 0x6, 0x8, 0x0, 0x0, 0x80000001)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
mmap$auto(0x7, 0x1004, 0x6, 0x40eb2, 0x402, 0x300000000003)
tkill$auto(0x1, 0x7)

1m21.054986937s ago: executing program 4 (id=747):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_TIPCv2(&(0x7f0000001540), 0xffffffffffffffff)
sendmsg$auto_TIPC_NL_PUBL_GET(r0, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000001580)={0x18, r1, 0x321, 0x70bd28, 0x25dfdbff, {}, [@TIPC_NLA_SOCK={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x5}, 0x4008080)
syz_genetlink_get_family_id$auto_NLBL_UNLBL(&(0x7f0000000000), r0)

1m20.702199659s ago: executing program 34 (id=747):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_TIPCv2(&(0x7f0000001540), 0xffffffffffffffff)
sendmsg$auto_TIPC_NL_PUBL_GET(r0, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000001580)={0x18, r1, 0x321, 0x70bd28, 0x25dfdbff, {}, [@TIPC_NLA_SOCK={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x5}, 0x4008080)
syz_genetlink_get_family_id$auto_NLBL_UNLBL(&(0x7f0000000000), r0)

1m1.038811804s ago: executing program 0 (id=802):
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
fanotify_init$auto(0x5, 0x2)
mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000)
io_uring_setup$auto(0x6, 0x0)
mremap$auto(0x0, 0x7, 0x3fd6, 0x3, 0x20000000)
mprotect$auto(0x1ffff000, 0x8000000000000001, 0x4)
mprotect$auto(0x1ffff000, 0x810002, 0x6)
io_uring_setup$auto(0x6, 0x0)
io_uring_setup$auto(0x6, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x800000000008000)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
close_range$auto(0x2, 0x8000, 0x0)
mlockall$auto(0x2)

57.673091883s ago: executing program 0 (id=804):
mprotect$auto(0x1ffff000, 0x800007, 0x6)
select$auto(0x6, &(0x7f0000000040)={[0x8, 0x1003, 0x4, 0x83, 0x7fffffff, 0x9, 0x7f, 0x400, 0x2, 0x8, 0x822, 0x1, 0x471, 0x6f, 0x7, 0x5]}, 0x0, 0x0, 0x0)
openat2$auto(0x7a6, 0xfffffffffffffffd, 0x0, 0x18)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
mprotect$auto(0x8000, 0x401003, 0x100008)

53.271298217s ago: executing program 0 (id=814):
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000)
close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002)
fanotify_init$auto(0x200, 0x2010000000000)
socket(0x26, 0x80805, 0x0)
open(&(0x7f0000000040)='./file1\x00', 0x1252c2, 0xa0)
memfd_create$auto(0x0, 0x7)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
ftruncate$auto(0x3, 0xffffffffffffffe)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
mknod$auto(&(0x7f0000000000)='}[,&*}\x00', 0x1, 0x4)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x800008000)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
shmctl$auto(0x9, 0xd, 0x0)
mbind$auto(0x0, 0x100000004, 0x4, 0x0, 0x20000000000006, 0x2)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
listxattr$auto(&(0x7f0000000040)='}[,&*}\x00', 0x0, 0x0)
sendmsg$auto_BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, 0x0, 0x10)
mremap$auto(0x4000, 0xfee0, 0x3fd6, 0x3, 0xfffff000)
socket$nl_generic(0x10, 0x3, 0x10)

44.833794492s ago: executing program 0 (id=831):
rt_sigqueueinfo$auto(0x1, 0x7, &(0x7f0000000040)={@siginfo_0_0={0x0, 0x5, 0xfffffffb, @_sigpoll={0x52, <r0=>0x7}}})
sendmsg$auto_NL80211_CMD_NEW_KEY(r0, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="20000000aec9b9766e857f40fea46b03172f253978523b58fa408e6a3cd27156b67f2986d2647b289d1a60f12cbc457d5d164518b7636eccc6d7aac72061751b8de50efb10c368a51101051d58da7c6dbe34f46a2c5f33a6", @ANYRES16=0x0, @ANYBLOB="13042bbd7000fbdbdf250b00000008000300", @ANYRES32=0x0, @ANYBLOB="0400d000"], 0x20}, 0x1, 0x0, 0x0, 0x4804}, 0x80)
mmap$auto(0x6, 0x400008, 0xdf, 0x14, 0x2, 0x0)
syz_open_procfs$namespace(0x0, 0x0)
r1 = socket(0x10, 0x2, 0x0)
fsopen$auto(0x0, 0x427)
close_range$auto(0x2, 0x8, 0x0)
socket(0x10, 0x2, 0xc)
socket(0x28, 0x1, 0x0)
connect$auto(0x3, &(0x7f0000000180)={0x28, @sockaddr_1_1}, 0x54)
statmount$auto(0x0, &(0x7f0000000040)={0x0, 0x0, 0x36, 0x828, 0x9, 0x8000000000000000, 0x8, 0x7, 0x9, 0x5, 0x5, 0x9, 0x3, 0x8, 0x5, 0xf, 0x0, 0x10009, 0x10001, 0x5, [0x9, 0x7f, 0x77, 0x1, 0x7fffffffffffffff, 0xe06, 0x400, 0x3, 0x80000000, 0x8, 0x3, 0xfffffffffffffff9, 0x10, 0x3, 0x35c4, 0x1, 0x6, 0x8, 0xea8, 0x8, 0xd9, 0x8, 0x5, 0x1, 0x200000000803, 0x9, 0x5, 0x401, 0x800, 0x8000000000000000, 0x2ab, 0x8, 0x6, 0x1, 0x1, 0x3, 0xffffffffffff0000, 0x6b, 0xfffffffffffffff9, 0x4, 0x2b7, 0x4, 0xf, 0xffffffffffffff26, 0xecc, 0x7fffffff, 0x6, 0x7d, 0xdc]}, 0xe3c, 0x0)
mmap$auto(0x7, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
connect$auto(0x3, &(0x7f0000000180)={0x28, @sockaddr_1_1}, 0x54)
recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0)
mmap$auto(0x0, 0x1, 0x4000000000df, 0x44eb2, 0x3, 0x300000000000)
mremap$auto(0x0, 0x7, 0x3fd6, 0x3, 0x20000000)
mprotect$auto(0x1ffff000, 0x810002, 0x6)
sendmsg$auto_NL80211_CMD_GET_REG(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1c"], 0x1ac}, 0x1, 0x0, 0x0, 0x4044000}, 0x800)
sendmmsg$auto(r1, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0)
prctl$auto(0x0, 0x2, 0x3ff, 0x7fffffffffffffff, 0x24)
rseq$auto(&(0x7f0000000000)={0xe, 0x401, 0x0, 0x6, 0xffffffff, 0x2}, 0x7ffe, 0x0, 0x6)
mmap$auto(0xffffffffffffffff, 0x4020008, 0xdf, 0x14, 0x401, 0x2)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x12004)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
getcpu$auto(0x0, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)

35.529132855s ago: executing program 3 (id=853):
unshare$auto(0x40000080)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
getrandom$auto(0x0, 0x6000000, 0x3)
ioctl$auto(0xc8, 0x400454d9, 0x5c8d)
mlockall$auto(0x7)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
socket(0x1, 0x1, 0x1)
mlockall$auto(0x4)
socket(0x2c, 0x80003, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
memfd_create$auto(&(0x7f0000000000)='!\x00', 0x16)
fallocate$auto(0x8000000000000003, 0x0, 0xd, 0x2cbd5d)
r1 = syz_genetlink_get_family_id$auto_MAC80211_HWSIM(&(0x7f0000000640), r0)
sendmsg$auto_HWSIM_CMD_NEW_RADIO(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000680)={0x18, r1, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@HWSIM_ATTR_DESTROY_RADIO_ON_CLOSE={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x40000}, 0x48000)
writev$auto(0x5, &(0x7f0000000540)={&(0x7f0000000500)=[0x3d88], 0x1}, 0x7)
sendmsg$auto_HWSIM_CMD_NEW_RADIO(0xffffffffffffffff, 0x0, 0x48000)
pipe2$auto(0x0, 0x80)
socket(0xf, 0x3, 0x2)
bpf$auto(0x0, &(0x7f0000000000)=@link_update={0xa, @new_map_fd=0x2, 0x7, @old_prog_fd=0x13b}, 0xa3)
bpf$auto(0x0, &(0x7f0000000100)=@link_create={@prog_fd=0x1, @target_fd=0xa, 0x3, 0x8, @tracing={0x4, 0xffffffff}}, 0xfbf)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
bpf$auto(0x2, &(0x7f00000001c0)=@raw_tracepoint={0x5, 0xffff, 0x0, 0x3}, 0xc)
bpf$auto(0x1, &(0x7f00000001c0)=@raw_tracepoint={0x5, 0xffff, 0x0, 0x3}, 0xc)
r2 = gettid()
tkill$auto(r2, 0x7)
syz_genetlink_get_family_id$auto_TASKSTATS(&(0x7f0000000040), 0xffffffffffffffff)

34.701805715s ago: executing program 0 (id=855):
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x2, 0x8000)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
stat$auto(&(0x7f0000000000)='..\x00\x00', 0x0)
mprotect$auto(0x1ffff000, 0x8000000000000001, 0xd)
r0 = getpid()
r1 = syz_open_procfs$namespace(r0, &(0x7f0000000000)='ns/mnt\x00')
getdents64$auto(r1, 0x0, 0x18)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
poll$auto(0x0, 0x519, 0x6)
io_uring_setup$auto(0x9, &(0x7f0000000140)={0x800, 0x2333, 0xbc0, 0x4, 0x8, 0x1, <r2=>0xffffffffffffffff, [0xfffffffa, 0x4, 0x5], {0x2, 0x101, 0x3, 0xfb2, 0x1, 0x8, 0x80, 0xe1, 0x8}, {0x80, 0x50ee, 0xfffffffa, 0x3, 0x5b1, 0x9, 0x7, 0xfffffff8, 0x7ff}})
fsetxattr$auto(r2, 0x0, 0x0, 0x1, 0x5)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$auto_tcp_metrics(&(0x7f0000000040), 0xffffffffffffffff)
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
socket$nl_generic(0x10, 0x3, 0x10)
pidfd_open$auto(0x1, 0x0)
syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/mnt\x00')
socket(0x10, 0x2, 0x0)
sendmsg$auto_TCP_METRICS_CMD_DEL(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002dbd7000ffdbdf250200000001000a01"], 0x7b}, 0x1, 0x0, 0x0, 0x44004}, 0x24000800)
r5 = socket(0x10, 0x3, 0x6)
fallocate$auto(r5, 0xfffffbff, 0x1000, 0x0)
syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000040), 0xffffffffffffffff)
r6 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f00000000c0), r5)
sendmsg$auto_NFSD_CMD_THREADS_SET(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x14, r6, 0x100, 0x70bd2b, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x44010}, 0x20041890)

33.685344222s ago: executing program 0 (id=858):
unshare$auto(0x40000080)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
socket(0xa, 0x3, 0x6)
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid_for_children\x00')
socket(0xa, 0x3, 0x3a)
move_pages$auto(0x1, 0xf54, 0x0, 0x0, 0x0, 0x8000000000000000)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_IPVS(&(0x7f0000002100), r0)
close_range$auto(0x2, 0x8, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x10, 0x2, 0x0)
sendmsg$auto_IPVS_CMD_DEL_DAEMON(r0, &(0x7f0000003400)={0x0, 0x0, &(0x7f00000033c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="aa6d46baa8eddf705f207094a67a33bedc312a41f53efc44044afd7f09ddb75281d986d3aae28628a592cbf91352603afdb8c80f1aa90db7a9462ff53b482a9fd0d3cf347e0a0103dc45e52e854653b57f703090a414392dd43f2fe445e4630205db4cdd4949b8141c5a5891f4b990c6f772d223bfcf6be14f40b12710ebcde8eed4e2cae87811df606cb6e324243f68e3f2c1f0692e0606260a54d8508ba78afb4c3533333d743c1339993c45ea2e23bcece083", @ANYRES16=r1, @ANYBLOB="010027bd7000fbdbdf250a000000"], 0x14}, 0x1, 0x0, 0x0, 0x4000054}, 0x4000870)
ioctl$auto(0x1, 0x890c, 0x6)
mlockall$auto(0x7)
sendmsg$auto_HWSIM_CMD_NEW_RADIO(0xffffffffffffffff, 0x0, 0x48000)

33.558573932s ago: executing program 3 (id=859):
socket(0xa, 0x3, 0x100)
mmap$auto(0x0, 0x202000c, 0x35dec353, 0xeb0, 0xfffffffffffffffa, 0xfff)
sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000021}, 0x8004)
connect$auto(0x3, &(0x7f0000000140)={0xa, @sa_data_min="c40900448dc7fe8000"}, 0x55)
write$auto(0x3, 0x0, 0xfdef)

33.413989204s ago: executing program 3 (id=861):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_MAC80211_HWSIM(&(0x7f0000000640), 0xffffffffffffffff)
sendmsg$auto_HWSIM_CMD_REPORT_PMSR(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="21c938ae34dc9f64f44e528930e9e036dd", @ANYRES16=r1, @ANYBLOB="010026bd7000fcdbdf250b0000000c000200eb081f5026b42444"], 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x0)

33.352768813s ago: executing program 3 (id=862):
rseq$auto(&(0x7f0000000300)={0xe, 0x401, 0x0, 0x6, 0xffffffff, 0x2}, 0x8000, 0x0, 0x6)
lsm_get_self_attr$auto(0xfc9, 0x0, &(0x7f0000000040)=0x8, 0x9)
mmap$auto(0x0, 0x3, 0xdf, 0x9b72, 0x2, 0x8000)
prctl$auto(0x7fff, 0x4e, 0x4, 0x5, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
mmap$auto(0x0, 0x4000b, 0x7, 0x9b72, 0x7, 0x28000)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
mincore$auto(0x0, 0x10000, 0x0)
mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x402, 0x300000000000)
getgroups$auto(0xeda, 0x0)
getgroups$auto(0x4, &(0x7f0000000000))

32.843540386s ago: executing program 3 (id=866):
open(&(0x7f0000000000)='./file0\x00', 0x4242, 0xe1d2b27bdc14aabc)
mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000)
writev$auto(0x4, &(0x7f0000000080)={&(0x7f0000000040)=[0x2], 0x1000000000000000}, 0x7)
io_uring_setup$auto(0x6, 0x0)
close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002)
fanotify_init$auto(0x200, 0x2010000000000)
r0 = open(0x0, 0x242, 0xe1d2b27bdc14aabc)
fanotify_mark$auto(0x400000000000, 0x101, 0xdd, r0, 0x0)
mprotect$auto(0x1ffff000, 0x8000000000000001, 0x4)
unlink$auto(0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
socket(0x2, 0x6, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$auto_MAC80211_HWSIM(&(0x7f0000000e40), 0xffffffffffffffff)
sendmsg$auto_HWSIM_CMD_NEW_RADIO(r1, &(0x7f0000000f40)={0x0, 0x0, &(0x7f0000000f00)={&(0x7f0000000e80)={0x1c, r2, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [@HWSIM_ATTR_IFTYPE_SUPPORT={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0xc0)
setsockopt$auto(0x3, 0x0, 0x82, 0x0, 0x9)
socket$nl_generic(0x10, 0x3, 0x10)
clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2)
memfd_create$auto(0x0, 0x7)
fchown$auto(0x5, 0x8, 0x3)
fchown$auto(0x5, 0x8, 0x3)
socket(0x28, 0x80000, 0x2)

32.463216683s ago: executing program 3 (id=867):
madvise$auto(0x0, 0x7fffffffffffffff, 0xa)
exit$auto(0x7)
unshare$auto(0x40000080)
mmap$auto(0x0, 0x400008, 0xdc, 0x9b72, 0x1000002, 0x8000) (async)
mmap$auto(0x0, 0x400008, 0xdc, 0x9b72, 0x1000002, 0x8000)
getdents64$auto(0xffffffffffffffff, &(0x7f0000000000)={0x4, 0x3b13, 0x8, 0x96}, 0x9)
clone$auto(0x8001, 0x5, 0xffffffffffffffff, 0xfffffffffffffffc, 0x6) (async)
clone$auto(0x8001, 0x5, 0xffffffffffffffff, 0xfffffffffffffffc, 0x6)

23.41555379s ago: executing program 6 (id=882):
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffff7, 0x8000) (async)
r0 = socket(0xa, 0x3, 0x100) (async)
select$auto(0x6d0c, 0x0, &(0x7f0000000100)={[0x0, 0x1ff, 0x800000000000008, 0xc, 0x9, 0xfffffffffffffff9, 0x6, 0x1, 0x400040009, 0x5e582972, 0x4000000000000000, 0x14, 0x93, 0xffffffffffffff17, 0x8, 0x8]}, 0x0, 0x0) (async)
connect$auto(0x3, &(0x7f0000000140)={0xa, @sa_data_min="c40900448dc7fe8000"}, 0x55)
select$auto(0x3, 0x0, &(0x7f0000000100)={[0x9, 0x200, 0x0, 0x9, 0x9, 0x3, 0x6, 0x2, 0x9, 0x5e58296f, 0x1, 0x9, 0x3, 0x200, 0x6, 0xf]}, 0x0, 0x0)
sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x24004141)
sendmmsg$auto(0x3, &(0x7f0000000040)={{0x0, 0x2, &(0x7f0000000080)={0x0, 0x1}, 0x10a, 0x0, 0x0, 0x3ff}, 0xed7138c}, 0x200, 0x0) (async)
poll$auto(&(0x7f00000000c0)={r0, 0x2}, 0x2, 0x0) (async)
sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="1100000012"], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x400c000) (async)
sendmmsg$auto(0x3, &(0x7f0000000000)={{0x0, 0x2, 0x0, 0x106, 0x0, 0x1, 0x3}, 0xed7138c}, 0x7, 0x0)

23.126995051s ago: executing program 6 (id=883):
mlockall$auto(0x5)
mlockall$auto(0xffff8a94)
rename$auto(&(0x7f0000000000)='}\x00', &(0x7f0000000040)='+-.-)$)(\x00')
mlockall$auto(0x1)
r0 = open(&(0x7f0000000080)='./file0\x00', 0x4a80, 0x40)
pwrite64$auto(r0, &(0x7f00000000c0)='}\x00', 0x100, 0x9)
mprotect$auto(0xfc8e, 0x800, 0x3ff)
mount$auto(&(0x7f0000000100)='ip6gre0\x00', &(0x7f0000000140)='\\\x00', &(0x7f0000000180)='\x00', 0xfffffffffffffffb, &(0x7f00000001c0)=[0x4, 0x2d, 0x5, 0x61b9, 0x6, 0x1])
mmap$auto(0x7f, 0x2, 0x8638, 0x18, 0xfff, 0x1)
mmap$auto(0x6, 0x3, 0x8, 0x18, 0xe01, 0x80)
mlockall$auto(0x3)
mprotect$auto(0x3, 0x0, 0x5)
mlockall$auto(0x3)
semget$auto(0x0, 0x200, 0x7)
syz_genetlink_get_family_id$auto_nlctrl(&(0x7f0000000200), r0)
connect$auto(r0, &(0x7f0000000240)={0x1, @sockaddr_1_1={"1555664ef504501403be740e00cf04aed670e8598e0ffcba5e8826c94a846f16ad2f3e7b199d64dc469e570fef4366b18ac3afbde9d141d49e8b3ae5ca054c94dcb0"}}, 0x1)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000300), r0)
sendmsg$auto_L2TP_CMD_SESSION_CREATE(r1, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x3c, r2, 0x800, 0x70bd2a, 0x25dfdbfe, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0xfffffffc}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0xffff}, @L2TP_ATTR_USING_IPSEC={0x5, 0x15, 0x43}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x6}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0xe}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x20000000)
r3 = socket(0x2c, 0x2, 0x8)
fgetxattr$auto(r3, &(0x7f0000000400)='+{.^\x00', &(0x7f0000000440)=[0x10000, 0x87, 0x8, 0xffffffffffffffff], 0x8)
statx$auto(r0, &(0x7f0000000480)='![[\'.%\x19\x00', 0x9, 0x55, &(0x7f00000004c0)={0x0, 0x200, 0x7ff, 0x58, <r4=>0xee00, 0xee00, 0x6, 0x8, 0x3, 0x6, 0x9, 0x69f, {0x4, 0x9}, {0x8, 0x1}, {0x4, 0x4}, {0x4000000000000000, 0xb}, 0x84, 0x80, 0x7, 0x7, 0x5, 0xd, 0x1727, 0x0, 0x5, 0x6, 0x9, 0x83f3, [0x40, 0x0, 0x7, 0x3, 0xb, 0x9, 0x2d87a198, 0x1672, 0x5]})
r5 = getegid()
fstat$auto(r1, &(0x7f00000005c0)={0x1, 0x4, 0x7fffffffffffffff, 0x232, r4, r5, 0x0, 0x100, 0x3, 0x3, 0x5, 0x4, 0x6, 0xffffffffffffffff, 0x0, 0x4, 0x2})
r6 = open$dir(&(0x7f0000000680)='./file0\x00', 0x80, 0x8)
mount_setattr$auto(r6, &(0x7f00000006c0)='\x00', 0x91d, &(0x7f0000000700)={0x1, 0x81, 0xf, 0x2ac}, 0x8ee)
mprotect$auto(0x4, 0x8000000000000001, 0x2)
socket(0x18, 0xa, 0x10000)
r7 = syz_genetlink_get_family_id$auto_NLBL_UNLBL(&(0x7f0000000780), r1)
sendmsg$auto_NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000900)={&(0x7f00000007c0)={0x118, r7, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x33}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x2}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x5}, @NLBL_UNLABEL_A_IFACE={0x6, 0x6, '}\x00'}, @NLBL_UNLABEL_A_SECCTX={0xe4, 0x7, "eeaf9ad1453e433e63daff76165cde0b6a991ae2b21ca9e24920e69c87710fb58c23a020b3d223a1450b01addc6875af9669610b5d6661299e998fe90ceea189121f3d6ae1c8ca2bbeded28a02b9291a5f8c453c3286cd5dac960ca549e3f0bb44ec4dd268c470c39e666e515ab4510c2635789e5960727af1f203c277e43bab84b0e6b4fbc8eab17deee44d0a9914f06f5f980b5ac468b319db1703e772b77514d6252cc448828604655097ea983d4b6f3025521e6404f97f45d219e2302a1571ecc275cd7ba2d4d5b74e6f0d51fc9170dd5e89362433f8c126c0d446f1269b"}]}, 0x118}, 0x1, 0x0, 0x0, 0x80c0}, 0x4000014)

18.325052672s ago: executing program 35 (id=858):
unshare$auto(0x40000080)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
socket(0xa, 0x3, 0x6)
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid_for_children\x00')
socket(0xa, 0x3, 0x3a)
move_pages$auto(0x1, 0xf54, 0x0, 0x0, 0x0, 0x8000000000000000)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_IPVS(&(0x7f0000002100), r0)
close_range$auto(0x2, 0x8, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x10, 0x2, 0x0)
sendmsg$auto_IPVS_CMD_DEL_DAEMON(r0, &(0x7f0000003400)={0x0, 0x0, &(0x7f00000033c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="aa6d46baa8eddf705f207094a67a33bedc312a41f53efc44044afd7f09ddb75281d986d3aae28628a592cbf91352603afdb8c80f1aa90db7a9462ff53b482a9fd0d3cf347e0a0103dc45e52e854653b57f703090a414392dd43f2fe445e4630205db4cdd4949b8141c5a5891f4b990c6f772d223bfcf6be14f40b12710ebcde8eed4e2cae87811df606cb6e324243f68e3f2c1f0692e0606260a54d8508ba78afb4c3533333d743c1339993c45ea2e23bcece083", @ANYRES16=r1, @ANYBLOB="010027bd7000fbdbdf250a000000"], 0x14}, 0x1, 0x0, 0x0, 0x4000054}, 0x4000870)
ioctl$auto(0x1, 0x890c, 0x6)
mlockall$auto(0x7)
sendmsg$auto_HWSIM_CMD_NEW_RADIO(0xffffffffffffffff, 0x0, 0x48000)

18.319400221s ago: executing program 6 (id=891):
stat$auto(&(0x7f0000000000)='L)<-\x00', &(0x7f0000000040)={0x10, 0xfffffffffffffffb, 0x5288, 0xfffff556, <r0=>0xee00, <r1=>0xee00, 0x0, 0x2, 0x401, 0xa, 0xa0ee, 0x10001, 0x8, 0x7, 0x8000000000000000, 0x9})
stat$auto(&(0x7f0000000100)='(\x00', &(0x7f0000000140)={0x7, 0xc7c0, 0x3bd4, 0x8000, <r2=>0xee01, <r3=>0x0, 0x0, 0xfffffffffffffff9, 0x9, 0x8, 0x100000000, 0x7fffffffffffffff, 0x8, 0x9, 0x7bb, 0x9, 0x9})
shmctl$auto(0x54, 0x7, &(0x7f00000002c0)={{0x6, r0, <r4=>r3, 0x2, 0x1, 0x8, 0x2}, 0x5, 0x453, 0x10, 0x100000001, 0x9d, 0x8, 0x7, 0x0, &(0x7f0000000200)=[0x0, 0x4, 0x7, 0xb1a5, 0xddb2, 0x1, 0x4000000000], &(0x7f0000000240)=[0x2, 0x8, 0xffffffffffff563c, 0x2, 0xffffffffffff0e7d, 0x10cebdb5, 0x6, 0x6, 0x3]})
sched_setaffinity$auto(0xffffffffffffffff, 0x85e, &(0x7f0000000340)=0x3)
r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x474182, 0x4)
newfstatat$auto(0xffffffffffffff9c, &(0x7f0000000400)='\x00', &(0x7f0000000440)={0x7, 0xffffffffffff8000, 0x16, 0x0, <r6=>r0, r1, 0x0, 0xff, 0x7, 0x40, 0x3ff, 0x4, 0x7, 0x3e, 0x0, 0x902b, 0x2}, 0x7)
msgctl$auto(0x1, 0x0, &(0x7f0000000580)={{0x9, r2, <r7=>r4, 0x7be, 0xd, 0x9, 0xff}, &(0x7f0000000500)=0x6, &(0x7f0000000540), 0x40, 0x3, 0x20000000000000, 0xd, 0xfffffffffffffffc, 0xfffe, 0x8, 0x401, 0xe, 0xfffffff9})
newfstatat$auto(r5, &(0x7f00000003c0)='\\):{\x00', &(0x7f0000000600)={0x80000000, 0x7, 0x0, 0xff, r6, r7, 0x0, 0x80, 0x4, 0x7, 0x3, 0x10, 0xdcfe, 0x8, 0x0, 0xffffffffff3424dd, 0x1}, 0xffffffff)
select$auto(0x5, &(0x7f00000006c0)={[0x4, 0x8, 0x7, 0x8f, 0x56e, 0x3, 0x2d, 0x1ff, 0xc, 0x1000, 0x4, 0x101, 0x4, 0x8ba, 0xa, 0x4]}, &(0x7f0000000740)={[0x7, 0x4, 0x7ff, 0xfffffffffffffff8, 0x0, 0x4, 0x9, 0x400, 0xc, 0x9a2f, 0x6, 0x8000000000000001, 0xf, 0x10, 0x5, 0x3]}, &(0x7f00000007c0)={[0x5, 0xb, 0x8, 0x7, 0x401, 0x0, 0xe660, 0x7, 0x3, 0x3, 0x9, 0x400, 0x4, 0x9, 0x8, 0x3]}, &(0x7f0000000840)={0x0, 0x4292})
madvise$auto(0x8, 0x0, 0x0)
r8 = socket(0x22, 0x5, 0x0)
r9 = syz_genetlink_get_family_id$auto_gtp(&(0x7f00000008c0), 0xffffffffffffffff)
sendmsg$auto_GTP_CMD_NEWPDP(r8, &(0x7f00000009c0)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000980)={&(0x7f0000000900)={0x54, r9, 0x4, 0x70bd2c, 0x25dfdbfe, {}, [@GTPA_NET_NS_FD={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, 0x9}, @GTPA_FLOW={0x6, 0x6, 0x200}, @GTPA_LINK={0x8, 0x1, 0x3}, @GTPA_PEER_ADDRESS={0x8, 0x4, 0x5}, @GTPA_FAMILY={0x5, 0xd, 0x6}, @GTPA_LINK={0x8, 0x1, 0x6}, @GTPA_FLOW={0x6, 0x6, 0x2}]}, 0x54}, 0x1, 0x0, 0x0, 0x4004}, 0x40048d0)
sendmsg$auto_NL80211_CMD_GET_REG(r8, &(0x7f0000000b80)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000a40)={0xe4, 0x0, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@NL80211_ATTR_PROBE_RESP={0xc1, 0x91, "21057dba4ba9bc4df8e8a77e269d694ed4092496f54367efd4d52d5f667a9aff89fadf4d426df5a33f4c4bd457dd87dfe39d4b98bccc8db59ab8bc9e65cb67c2a7b9874d5a42ba9bc406d35c14e6111153b158976dc91184c44652363a1a9d9a4d67c0d818439373469ba295364286119fb29ca2e6be31575dc1d57529de9bc5d28048f07f8375682bd2501de97b4fcc71cb4f393ee6b3ec835187ec48cc39fcf459ad8b4e8863035359d6e4098aa5f583623ca5c6c5e811471ffcc274"}, @NL80211_ATTR_MEASUREMENT_DURATION_MANDATORY={0x4}, @NL80211_ATTR_SSID={0x5, 0x34, 'M'}]}, 0xe4}, 0x1, 0x0, 0x0, 0x4000}, 0x854)
acct$auto(&(0x7f0000000bc0)='\\):{\x00')
r10 = open$dir(&(0x7f0000000c00)='./file0\x00', 0x80900, 0x3)
setsockopt$auto(r10, 0x5, 0xf11, &(0x7f0000000c40)='(\x00', 0x8)
r11 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_handshake(&(0x7f0000000c80), r11)
sendmsg$auto_ETHTOOL_MSG_DEBUG_GET(r8, &(0x7f0000000d80)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000d00)={0x24, 0x0, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@ETHTOOL_A_DEBUG_HEADER={0x7, 0x1, "211f41"}, @ETHTOOL_A_DEBUG_HEADER={0x7, 0x1, "fde8f2"}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x40)
select$auto(0xc, &(0x7f0000000dc0)={[0x8000000000000001, 0xa7af, 0x7, 0xbd, 0x0, 0x7ff, 0xd, 0x1, 0x4, 0xfffffffffffffffe, 0x8211, 0xfffffffffffffff8, 0x3, 0x5e5b, 0x6, 0x5]}, &(0x7f0000000e40)={[0x7, 0x1, 0x1, 0x1, 0x378, 0x9, 0x8001, 0x8000000000000001, 0x7, 0xe56, 0x40, 0x4, 0x8, 0x1, 0x3, 0xfffffffffffffc01]}, &(0x7f0000000ec0)={[0xad6, 0x7, 0x6, 0x48338085, 0x70a, 0x4190, 0x6, 0xf, 0x0, 0x0, 0x544, 0x44cc, 0x9, 0xa4, 0xa2, 0x8000]}, &(0x7f0000000f40)={0x8000, 0x2})
flock$auto(r8, 0x3)
msync$auto(0x2, 0xe9e, 0x5)
syz_genetlink_get_family_id$auto_gtp(&(0x7f0000000f80), r11)
mmap$auto(0xd, 0xdd6, 0x10001, 0x600000000010, 0x0, 0x1)
r12 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_GTP_CMD_NEWPDP(r12, &(0x7f00000010c0)={&(0x7f0000000fc0)={0x10, 0x0, 0x0, 0x20020}, 0xc, &(0x7f0000001080)={&(0x7f0000001000)={0x70, r9, 0x400, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_O_TEI={0x8, 0x9, 0x6}, @GTPA_MS_ADDR6={0x14, 0xc, {@u6_addr16=[0x7, 0x5, 0x7, 0xe, 0x7b, 0x8, 0x2, 0x38]}}, @GTPA_PEER_ADDRESS={0x8, 0x4, 0x2}, @GTPA_I_TEI={0x8, 0x8, 0x6}, @GTPA_I_TEI={0x8, 0x8, 0x6}, @GTPA_PEER_ADDRESS={0x8, 0x4, 0x2}, @GTPA_FAMILY={0x5, 0xd, 0x5}, @GTPA_NET_NS_FD={0x8}, @GTPA_LINK={0x8, 0x1, 0x5}, @GTPA_I_TEI={0x8, 0x8, 0x8}]}, 0x70}, 0x1, 0x0, 0x0, 0x20000080}, 0x40c0)
settimeofday$auto(&(0x7f0000001100)={0x53, 0xffffffffffffffff}, &(0x7f0000001140)={0x40000, 0x2})
mmap$auto(0x2, 0x1, 0x0, 0x12, 0x9, 0x3b76)
select$auto(0x9, &(0x7f0000001180)={[0x5, 0x9, 0xe2, 0x9, 0xa61c, 0x8, 0x8, 0x3, 0x1, 0x6, 0x6, 0x0, 0x6, 0x8000, 0x6, 0x8]}, &(0x7f0000001200)={[0x7fff, 0x1, 0x5, 0xffffffffffffffff, 0x4000400000000000, 0x0, 0x4, 0x5a8e, 0x1, 0x2000000000000000, 0x1, 0x6, 0x101, 0x8, 0x762, 0x3fc]}, &(0x7f0000001280)={[0x101, 0x3ff, 0x7, 0x2, 0x2, 0xb5bf, 0x1, 0x7ff, 0x101, 0x2, 0xfffffffffffffff9, 0x2, 0xffffffffffffffff, 0x8000000000000001, 0xffffffffffffffff, 0x95d4]}, &(0x7f0000001300)={0xecda, 0x200})

18.118176098s ago: executing program 6 (id=892):
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
select$auto(0x3, 0x0, 0x0, 0x0, 0x0)
mmap$auto(0x0, 0xc, 0x4000000000df, 0x44eb2, 0x10006, 0x300000000000)
open(&(0x7f0000000000)='./cgroup\x00', 0x0, 0x64)
rename$auto(&(0x7f0000000280)='-},\xa8#}@%#\x00', &(0x7f00000002c0)='[&])-\x00')
flistxattr$auto(0x3, 0x0, 0x3)
newfstatat$auto(0xffffffffffffffff, 0x0, 0x0, 0xc472)
pselect6$auto(0x800, &(0x7f0000000000)={[0x3, 0x4, 0x10, 0xffffffffffffffff, 0x4, 0x7, 0x4, 0x9, 0x9, 0x52, 0x1, 0x4, 0x0, 0x0, 0x20b, 0x9]}, &(0x7f0000000080)={[0x2bd, 0x0, 0x3, 0x0, 0xe175, 0x10, 0xe4e4, 0x81, 0x10000, 0x0, 0x7fff, 0x6db482f9, 0x13, 0x7, 0x1, 0x8]}, &(0x7f0000000100)={[0x1, 0x6, 0x1, 0x4, 0xffff, 0x3ff, 0x2, 0xb, 0x15, 0x400000000000000, 0x5, 0x4, 0x1000, 0x9, 0xf, 0x3]}, &(0x7f0000000180)={0x5, 0x7}, &(0x7f00000001c0)=[0x4, 0x7fffffffffffffff, 0xfff, 0x3, 0x18, 0x40000000000000, 0x7ff, 0x0, 0xffffffffffff80f4])
syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff)
sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000021}, 0x8004)
socket(0xa, 0x6, 0x0)
listen$auto(0x3, 0x81)
shutdown$auto(0x200000003, 0x2)
connect$auto(0x3, &(0x7f0000000140)={0xa, @sa_data_min="c4aeed448dc7fe8000"}, 0x55)
shutdown$auto(0x200000003, 0x2)
socketpair$auto(0x4, 0x7, 0x70, &(0x7f0000000240)=0x3)
madvise$auto(0x0, 0x20000a, 0x4)

17.30980076s ago: executing program 36 (id=867):
madvise$auto(0x0, 0x7fffffffffffffff, 0xa)
exit$auto(0x7)
unshare$auto(0x40000080)
mmap$auto(0x0, 0x400008, 0xdc, 0x9b72, 0x1000002, 0x8000) (async)
mmap$auto(0x0, 0x400008, 0xdc, 0x9b72, 0x1000002, 0x8000)
getdents64$auto(0xffffffffffffffff, &(0x7f0000000000)={0x4, 0x3b13, 0x8, 0x96}, 0x9)
clone$auto(0x8001, 0x5, 0xffffffffffffffff, 0xfffffffffffffffc, 0x6) (async)
clone$auto(0x8001, 0x5, 0xffffffffffffffff, 0xfffffffffffffffc, 0x6)

17.046698797s ago: executing program 6 (id=894):
socket$nl_generic(0x10, 0x3, 0x10) (async)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'pimreg\x00'})
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) (async)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x3, 0x7) (async)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
syz_genetlink_get_family_id$auto_handshake(0x0, 0xffffffffffffffff)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
epoll_ctl$auto(0x6, 0x80000001, 0x2, 0x0)
syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) (async)
ioprio_set$auto(0x1, 0x0, 0x0)
msync$auto(0x1ffff000, 0x100000000005, 0x400000004)
madvise$auto(0x0, 0xffffffffffff0001, 0x17) (async)
madvise$auto(0x1ffff000, 0x208000000010001, 0x8)
madvise$auto(0x8000000000000000, 0x7fffffffffffffff, 0x889) (async)
madvise$auto(0x8000000000000001, 0x0, 0x0) (async)
madvise$auto(0x2000000040000, 0x7, 0xa)
mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) (async)
rseq$auto(&(0x7f0000000300)={0xe, 0x401, 0x0, 0x6, 0xffffffff, 0x2}, 0x8002, 0x0, 0x6) (async)
socket(0xa, 0x2, 0x88)
mmap$auto(0x6, 0x6, 0x10000, 0x13, 0xffffffffffffff52, 0x9) (async)
connect$auto(0x3, 0x0, 0x55) (async)
close_range$auto(0x2, 0x8000, 0x0) (async)
tkill$auto(0x1, 0x7) (async)
rseq$auto(&(0x7f0000000300)={0xe, 0x401, 0x0, 0x6, 0xffffffff, 0x2}, 0x8000, 0x0, 0x6) (async)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
syz_open_procfs$namespace(0xffffffffffffffff, 0x0) (async)
mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) (async)
mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x402, 0x300000000000) (async)
mmap$auto(0x100000000000, 0x4000d, 0xdf, 0x9b72, 0x9, 0x28000)

12.043537327s ago: executing program 6 (id=900):
socket(0x2, 0x3, 0xa)
mmap$auto(0x0, 0x4, 0xdf, 0x80000000000eb1, 0x3, 0x0)
connect$auto(0x3, &(0x7f00000000c0)={0x8, @sockaddr_1_1}, 0x55)
r0 = socket(0x11, 0x80003, 0x300)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
readv$auto(0x4, &(0x7f0000000100)={0x0, 0x1000}, 0x8)
syz_genetlink_get_family_id$auto_ovs_ct_limit(&(0x7f0000000000), r0)
write$auto(0xc8, 0x0, 0x40f6)

11.784066418s ago: executing program 37 (id=900):
socket(0x2, 0x3, 0xa)
mmap$auto(0x0, 0x4, 0xdf, 0x80000000000eb1, 0x3, 0x0)
connect$auto(0x3, &(0x7f00000000c0)={0x8, @sockaddr_1_1}, 0x55)
r0 = socket(0x11, 0x80003, 0x300)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
readv$auto(0x4, &(0x7f0000000100)={0x0, 0x1000}, 0x8)
syz_genetlink_get_family_id$auto_ovs_ct_limit(&(0x7f0000000000), r0)
write$auto(0xc8, 0x0, 0x40f6)

2.698587396s ago: executing program 5 (id=914):
mknod$auto(&(0x7f0000000180)=':,\x00', 0xc9, 0xfffffffa)
execve$auto(&(0x7f0000000040)=':,\x00', &(0x7f00000000c0)=&(0x7f0000000080)='$+[-+\x98%(,\x00', &(0x7f0000000200)=&(0x7f00000001c0)=':,\x00')
madvise$auto(0x0, 0x7fffffffffffffff, 0xe)
socket(0xa, 0x3, 0x6)
socket(0x1e, 0x80805, 0x0)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
socket(0xa, 0x3, 0xff)
select$auto(0xfffffffd, 0x0, &(0x7f0000000100)={[0x20000000000d, 0x203, 0x80000000000000, 0x1, 0x9, 0x3, 0x1, 0x2800000000000002, 0x9, 0xfffffffffffffffb, 0xff, 0x7ff, 0x4, 0xffff, 0x74, 0xb]}, 0x0, 0x0)
ioperm$auto(0xaf, 0xe, 0x991b)
memfd_create$auto(&(0x7f00000002c0)='IPVS\x00', 0x7)
readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1)
connect$auto(0x3, &(0x7f0000000140)={0xa, @sa_data_min="c4aeed448dc7fe8000"}, 0x55)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x9fe)
select$auto(0x7, 0x0, &(0x7f0000000100)={[0x9, 0x5, 0x0, 0xfffffffffffffff6, 0x7, 0xfffbfffffffdffff, 0xdffffffffffffff8, 0x2, 0x4005, 0x10000005e58296f, 0x1e, 0xffffffffffffffff, 0x3, 0x202, 0x1, 0x9]}, 0x0, 0x0)
connect$auto(0x3, &(0x7f0000000140)={0xa, @sa_data_min="c4aeed448dc7fe8000"}, 0x55)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0xff00)
write$auto(0x3, 0x0, 0xfdef)
mmap$auto(0x3, 0x5, 0x3, 0x3ff, 0x6, 0x8a)
mmap$auto(0x0, 0x20009, 0x8d28, 0xeb0, 0x401, 0x8000)
connect$auto(0x3, &(0x7f0000000140)={0x2, @sa_data_min="6a2f7ff43519eb7100"}, 0x55)
write$auto(0x3, 0x0, 0xfdef)
recvmmsg$auto(0x3, 0x0, 0x8, 0x0, 0x0)
socket(0xf, 0x4, 0x73)
mmap$auto(0x0, 0x8, 0xdf, 0xeb0, 0x401, 0x4)
connect$auto(0x3, &(0x7f0000000140)={0xa}, 0x55)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0)
socket(0xf, 0xa, 0x8000)
getcwd$auto(0x0, 0x400)
recvfrom$auto(0x3, 0x0, 0x142e, 0x2, &(0x7f0000000100)={0x8, @sockaddr_1_1}, 0x0)
madvise$auto(0x1ffff000, 0x208000000010001, 0x8)

1.763140741s ago: executing program 5 (id=915):
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x1, 0x300000000000)
clone$auto(0x7, 0x7fffffffffffffff, 0xffffffffffffffff, 0x0, 0x1)
mlock$auto(0xfbe8, 0x4)
socket(0xa, 0x801, 0x106)
sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000021}, 0x8004)
connect$auto(0x3, &(0x7f0000000140)={0xa, @sa_data_min="c4aeed448dc7fe8000"}, 0x55)
shutdown$auto(0x200000003, 0x2)
connect$auto(0x3, &(0x7f0000000140)={0xa, @sa_data_min="c4aeed448dc7fe8000"}, 0x55)

1.538560683s ago: executing program 5 (id=916):
r0 = socket(0x2, 0x1, 0x106)
ioctl$auto(0x3, 0x8907, 0xfffffffffffff4e0)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
close_range$auto(0x2, 0x8, 0x0)
syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid_for_children\x00')
socket(0xa, 0x3, 0x3a)
sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000021}, 0x8004)
connect$auto(0x3, &(0x7f0000000140)={0xa, @sa_data_min="c40900448dc7fe8000"}, 0x55)
sendmmsg$auto(0x3, &(0x7f0000000000)={{0x0, 0x2, &(0x7f0000000040)={0x0, 0x1}, 0x4, 0x0, 0x1}, 0xed7138c}, 0x2, 0x50)
clock_nanosleep$auto(0x9, 0x0, &(0x7f0000000000)={0x0, 0x200}, 0x0)
socket(0xa, 0x2, 0x0)
bind$auto(0x3, &(0x7f0000000040)={0xa, @sa_data_min="001000000000fe8000"}, 0x1b)
dup2$auto(0x0, 0x3)
r1 = syz_genetlink_get_family_id$auto_NLBL_CALIPSO(&(0x7f0000000040), r0)
sendmsg$auto_NLBL_CALIPSO_C_REMOVE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r1, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_MTYPE={0x8, 0x2, 0x5}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8, 0x2, 0x7}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0xf2}]}, 0x34}}, 0x0)

1.383614854s ago: executing program 5 (id=917):
io_setup$auto(0x1c9c, &(0x7f00000004c0))
signalfd4$auto(0xffffffff, &(0x7f0000000080)={0x8000}, 0x8, 0x0) (async)
signalfd4$auto(0xffffffff, &(0x7f0000000080)={0x8000}, 0x8, 0x0)
select$auto(0x4, &(0x7f00000000c0)={[0xeb, 0x8001, 0x4, 0xd1, 0xb, 0x1ff, 0x500000, 0x10000, 0x7fffffffffffffff, 0x4, 0x105, 0x10001, 0x0, 0x4, 0xffffffffffffffff, 0x1]}, 0x0, 0x0, 0x0) (async)
select$auto(0x4, &(0x7f00000000c0)={[0xeb, 0x8001, 0x4, 0xd1, 0xb, 0x1ff, 0x500000, 0x10000, 0x7fffffffffffffff, 0x4, 0x105, 0x10001, 0x0, 0x4, 0xffffffffffffffff, 0x1]}, 0x0, 0x0, 0x0)
open(&(0x7f0000000000)='./file0\x00', 0x40440, 0x40)
prctl$auto(0xe, 0x7, 0x8, 0x9, 0x4080001) (async)
prctl$auto(0xe, 0x7, 0x8, 0x9, 0x4080001)
setreuid$auto(0x8c4a, 0x5)
open(&(0x7f0000000000)='./file0\x00', 0x40900, 0x127) (async)
r0 = open(&(0x7f0000000000)='./file0\x00', 0x40900, 0x127)
close_range$auto(r0, 0x8, 0xfffffffd)
fsopen$auto(&(0x7f0000000400)='\x00', 0x2) (async)
fsopen$auto(&(0x7f0000000400)='\x00', 0x2)
mmap$auto(0x0, 0x8, 0x2, 0x9b72, 0x5, 0x0)
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
socket$nl_generic(0x10, 0x3, 0x10)
statmount$auto(&(0x7f0000000040)={0x6, 0x8e, 0x8000000000000000, 0x2, 0x6}, &(0x7f0000000140)={0x200, 0x4, 0x7d65, 0x3, 0x6, 0x4, 0x7, 0x10001, 0x1, 0x5, 0x4, 0x1, 0x6, 0xb0, 0x8, 0x8, 0xfffffffffffffff8, 0x8, 0xbc9, 0x5, [0x6, 0x6, 0x5, 0x80000000, 0x10000, 0x40000000000000, 0x268e, 0x1, 0x4, 0x431c, 0x200, 0x7ff, 0x4, 0xffffffff, 0x9, 0x7, 0x1000, 0x1, 0x40, 0x2, 0x0, 0x4dba51d2, 0xff, 0x0, 0x6, 0x80000000, 0x668, 0x1, 0x5c4, 0xfffffffffffffff8, 0x1, 0x2, 0x9, 0x1ff, 0x2, 0x7, 0x8, 0x3, 0x2, 0x8, 0x2e, 0x80000001, 0x2, 0xffffffffffffff81, 0x4800, 0x8, 0x7, 0x4, 0x7], "a9800ef1713e4a3718acd87552f235c9376aee82f36302e859a4059bb8b106dc5c794337afacac57c32a1e13fe519e3586e277b6bd4920580a65e5edf85ae07d2d99840f0969db99bbddcec83be6951a81d1dcfdcd60669bb58091e005c968e150f7a0ae802f4f9b2322479c9b5c13b68d11f1a809c4804bb3f8f3247a84ffcb15e4dd4106a7e4396ef675179bba6510d8"}, 0x4, 0x4) (async)
statmount$auto(&(0x7f0000000040)={0x6, 0x8e, 0x8000000000000000, 0x2, 0x6}, &(0x7f0000000140)={0x200, 0x4, 0x7d65, 0x3, 0x6, 0x4, 0x7, 0x10001, 0x1, 0x5, 0x4, 0x1, 0x6, 0xb0, 0x8, 0x8, 0xfffffffffffffff8, 0x8, 0xbc9, 0x5, [0x6, 0x6, 0x5, 0x80000000, 0x10000, 0x40000000000000, 0x268e, 0x1, 0x4, 0x431c, 0x200, 0x7ff, 0x4, 0xffffffff, 0x9, 0x7, 0x1000, 0x1, 0x40, 0x2, 0x0, 0x4dba51d2, 0xff, 0x0, 0x6, 0x80000000, 0x668, 0x1, 0x5c4, 0xfffffffffffffff8, 0x1, 0x2, 0x9, 0x1ff, 0x2, 0x7, 0x8, 0x3, 0x2, 0x8, 0x2e, 0x80000001, 0x2, 0xffffffffffffff81, 0x4800, 0x8, 0x7, 0x4, 0x7], "a9800ef1713e4a3718acd87552f235c9376aee82f36302e859a4059bb8b106dc5c794337afacac57c32a1e13fe519e3586e277b6bd4920580a65e5edf85ae07d2d99840f0969db99bbddcec83be6951a81d1dcfdcd60669bb58091e005c968e150f7a0ae802f4f9b2322479c9b5c13b68d11f1a809c4804bb3f8f3247a84ffcb15e4dd4106a7e4396ef675179bba6510d8"}, 0x4, 0x4)
socket(0x23, 0x80805, 0x0)
memfd_secret$auto(0x0) (async)
memfd_secret$auto(0x0)
socket(0x2b, 0x1, 0x1)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0xa, 0x5, 0x0)
ioctl$NS_GET_PARENT(r0, 0xb702, 0x0)
getsockopt$auto(0x6, 0x84, 0x74, 0x0, &(0x7f0000000080)=0x9c8)
getegid()
clone$auto(0xc, 0x6, 0xfffffffffffffffd, 0xfffffffffffffffd, 0x8000000000000000) (async)
clone$auto(0xc, 0x6, 0xfffffffffffffffd, 0xfffffffffffffffd, 0x8000000000000000)
prctl$auto(0x10000000016, 0x1, 0x4, 0x5, 0x0)

1.08750991s ago: executing program 5 (id=918):
socket$nl_generic(0x10, 0x3, 0x10) (async)
socket(0xa, 0x801, 0x84)
sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x60044061}, 0x0) (async)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0xa, 0x801, 0x84)
connect$auto(0x3, &(0x7f0000000140)={0xa, @sa_data_min="c40900448dc7fe8000"}, 0x55) (async)
listen$auto(0x3, 0x81) (async)
accept$auto(0x3, 0x0, 0x0) (async)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0xfca5, 0x28000) (async)
getsockopt$auto(0x6, 0x84, 0x66, 0x0, &(0x7f00000000c0)=0x10000) (async)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async)
io_uring_setup$auto(0x6, 0x0) (async)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
select$auto(0xb, 0x0, 0x0, &(0x7f0000000180)={[0x8, 0xffffffff, 0x20000000006, 0x15, 0x6, 0x1, 0x4, 0x1, 0x100000000000e, 0xb, 0x2dde, 0x2, 0xfffffffffffffffa, 0xab, 0x8000000000000, 0x6]}, 0x0) (async)
close_range$auto(0x2, 0x8000, 0x0)

0s ago: executing program 5 (id=919):
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
r0 = socket(0x23, 0x80805, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'dummy0\x00'})
clone$auto(0x6, 0x401, 0xffffffffffffffff, 0xfffffffffffffffc, 0xa31b)
mlock$auto(0x81, 0xffff)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.1.176' (ED25519) to the list of known hosts.
[   81.173267][ T5831] cgroup: Unknown subsys name 'net'
[   81.311075][ T5831] cgroup: Unknown subsys name 'cpuset'
[   81.319925][ T5831] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   82.965801][ T5831] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   85.051418][ T5852] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   85.060820][ T5852] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   85.068968][ T5852] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   85.077167][ T5852] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   85.085257][ T5858] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   85.096941][ T5858] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   85.101972][ T5853] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   85.127197][ T5853] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   85.137983][ T5852] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   85.145849][ T5852] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   85.146006][ T5853] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   85.160459][ T5852] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   85.161321][ T5853] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[   85.171992][ T5859] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   85.175193][ T5853] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   85.182910][ T5859] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   85.192216][ T5853] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   85.199320][ T5859] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   85.203597][ T5853] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[   85.210267][ T5859] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[   85.217202][ T5853] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[   85.223771][ T5859] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   85.238473][ T5859] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   85.239524][ T5853] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   85.646811][ T5841] chnl_net:caif_netlink_parms(): no params data found
[   85.703921][ T5840] chnl_net:caif_netlink_parms(): no params data found
[   85.781889][ T5842] chnl_net:caif_netlink_parms(): no params data found
[   85.813745][ T5841] bridge0: port 1(bridge_slave_0) entered blocking state
[   85.822113][ T5841] bridge0: port 1(bridge_slave_0) entered disabled state
[   85.829605][ T5841] bridge_slave_0: entered allmulticast mode
[   85.836517][ T5841] bridge_slave_0: entered promiscuous mode
[   85.844442][ T5843] chnl_net:caif_netlink_parms(): no params data found
[   85.863341][ T5841] bridge0: port 2(bridge_slave_1) entered blocking state
[   85.871150][ T5841] bridge0: port 2(bridge_slave_1) entered disabled state
[   85.878461][ T5841] bridge_slave_1: entered allmulticast mode
[   85.885195][ T5841] bridge_slave_1: entered promiscuous mode
[   85.967892][ T5841] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   85.992353][ T5840] bridge0: port 1(bridge_slave_0) entered blocking state
[   85.999655][ T5840] bridge0: port 1(bridge_slave_0) entered disabled state
[   86.007309][ T5840] bridge_slave_0: entered allmulticast mode
[   86.014195][ T5840] bridge_slave_0: entered promiscuous mode
[   86.023484][ T5841] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   86.043593][ T5840] bridge0: port 2(bridge_slave_1) entered blocking state
[   86.050832][ T5840] bridge0: port 2(bridge_slave_1) entered disabled state
[   86.058128][ T5840] bridge_slave_1: entered allmulticast mode
[   86.064941][ T5840] bridge_slave_1: entered promiscuous mode
[   86.133196][ T5840] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   86.150107][ T5841] team0: Port device team_slave_0 added
[   86.167977][ T5842] bridge0: port 1(bridge_slave_0) entered blocking state
[   86.175205][ T5842] bridge0: port 1(bridge_slave_0) entered disabled state
[   86.186285][ T5842] bridge_slave_0: entered allmulticast mode
[   86.193377][ T5842] bridge_slave_0: entered promiscuous mode
[   86.202652][ T5842] bridge0: port 2(bridge_slave_1) entered blocking state
[   86.209958][ T5842] bridge0: port 2(bridge_slave_1) entered disabled state
[   86.217352][ T5842] bridge_slave_1: entered allmulticast mode
[   86.224148][ T5842] bridge_slave_1: entered promiscuous mode
[   86.232546][ T5840] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   86.252553][ T5841] team0: Port device team_slave_1 added
[   86.293038][ T5843] bridge0: port 1(bridge_slave_0) entered blocking state
[   86.301371][ T5843] bridge0: port 1(bridge_slave_0) entered disabled state
[   86.311992][ T5843] bridge_slave_0: entered allmulticast mode
[   86.319026][ T5843] bridge_slave_0: entered promiscuous mode
[   86.335754][ T5840] team0: Port device team_slave_0 added
[   86.353061][ T5843] bridge0: port 2(bridge_slave_1) entered blocking state
[   86.360569][ T5843] bridge0: port 2(bridge_slave_1) entered disabled state
[   86.368259][ T5843] bridge_slave_1: entered allmulticast mode
[   86.375004][ T5843] bridge_slave_1: entered promiscuous mode
[   86.384276][ T5842] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   86.394974][ T5840] team0: Port device team_slave_1 added
[   86.405439][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_0
[   86.412510][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   86.439052][ T5841] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   86.462367][ T5842] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   86.482556][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_1
[   86.492241][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   86.518805][ T5841] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   86.563009][ T5843] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   86.584216][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_0
[   86.591743][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   86.618374][ T5840] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   86.631809][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_1
[   86.638845][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   86.664790][ T5840] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   86.689483][ T5843] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   86.709838][ T5842] team0: Port device team_slave_0 added
[   86.757173][ T5842] team0: Port device team_slave_1 added
[   86.765228][ T5843] team0: Port device team_slave_0 added
[   86.776448][ T5841] hsr_slave_0: entered promiscuous mode
[   86.783171][ T5841] hsr_slave_1: entered promiscuous mode
[   86.803704][ T5843] team0: Port device team_slave_1 added
[   86.859006][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_0
[   86.866001][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   86.892465][ T5842] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   86.916757][ T5840] hsr_slave_0: entered promiscuous mode
[   86.923116][ T5840] hsr_slave_1: entered promiscuous mode
[   86.930280][ T5840] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   86.938426][ T5840] Cannot create hsr debugfs directory
[   86.944545][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_0
[   86.951658][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   86.978547][ T5843] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   86.998124][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_1
[   87.005101][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   87.031608][ T5842] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   87.045425][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_1
[   87.052494][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   87.078566][ T5843] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   87.191110][ T5842] hsr_slave_0: entered promiscuous mode
[   87.198120][ T5842] hsr_slave_1: entered promiscuous mode
[   87.204980][ T5842] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   87.213547][ T5842] Cannot create hsr debugfs directory
[   87.253069][ T5843] hsr_slave_0: entered promiscuous mode
[   87.260642][ T5843] hsr_slave_1: entered promiscuous mode
[   87.267557][ T5843] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   87.275156][ T5843] Cannot create hsr debugfs directory
[   87.313028][ T5851] Bluetooth: hci0: command tx timeout
[   87.318784][ T5853] Bluetooth: hci2: command tx timeout
[   87.318846][ T5844] Bluetooth: hci1: command tx timeout
[   87.324946][ T5859] Bluetooth: hci3: command tx timeout
[   87.492909][ T5841] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   87.507478][ T5841] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   87.547713][ T5841] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   87.559013][ T5841] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   87.619203][ T5840] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   87.636185][ T5840] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   87.645620][ T5840] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   87.661291][ T5840] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   87.721382][ T5842] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   87.744461][ T5842] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   87.754940][ T5842] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   87.775170][ T5842] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   87.873756][ T5843] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   87.894836][ T5843] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   87.911832][ T5843] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   87.925884][ T5843] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   87.958012][ T5841] 8021q: adding VLAN 0 to HW filter on device bond0
[   88.011607][ T5841] 8021q: adding VLAN 0 to HW filter on device team0
[   88.025424][ T2926] bridge0: port 1(bridge_slave_0) entered blocking state
[   88.032751][ T2926] bridge0: port 1(bridge_slave_0) entered forwarding state
[   88.066193][ T5842] 8021q: adding VLAN 0 to HW filter on device bond0
[   88.090904][   T11] bridge0: port 2(bridge_slave_1) entered blocking state
[   88.098058][   T11] bridge0: port 2(bridge_slave_1) entered forwarding state
[   88.116973][ T5840] 8021q: adding VLAN 0 to HW filter on device bond0
[   88.152597][ T5842] 8021q: adding VLAN 0 to HW filter on device team0
[   88.182736][ T5840] 8021q: adding VLAN 0 to HW filter on device team0
[   88.201795][ T2926] bridge0: port 1(bridge_slave_0) entered blocking state
[   88.208926][ T2926] bridge0: port 1(bridge_slave_0) entered forwarding state
[   88.235882][ T2926] bridge0: port 2(bridge_slave_1) entered blocking state
[   88.243036][ T2926] bridge0: port 2(bridge_slave_1) entered forwarding state
[   88.261932][   T11] bridge0: port 1(bridge_slave_0) entered blocking state
[   88.269091][   T11] bridge0: port 1(bridge_slave_0) entered forwarding state
[   88.309475][   T62] bridge0: port 2(bridge_slave_1) entered blocking state
[   88.316650][   T62] bridge0: port 2(bridge_slave_1) entered forwarding state
[   88.395704][ T5843] 8021q: adding VLAN 0 to HW filter on device bond0
[   88.471013][ T5843] 8021q: adding VLAN 0 to HW filter on device team0
[   88.496721][   T62] bridge0: port 1(bridge_slave_0) entered blocking state
[   88.503865][   T62] bridge0: port 1(bridge_slave_0) entered forwarding state
[   88.546450][   T62] bridge0: port 2(bridge_slave_1) entered blocking state
[   88.553777][   T62] bridge0: port 2(bridge_slave_1) entered forwarding state
[   88.670309][ T5841] 8021q: adding VLAN 0 to HW filter on device batadv0
[   88.773206][ T5841] veth0_vlan: entered promiscuous mode
[   88.842078][ T5841] veth1_vlan: entered promiscuous mode
[   88.868908][ T5840] 8021q: adding VLAN 0 to HW filter on device batadv0
[   88.928729][ T5842] 8021q: adding VLAN 0 to HW filter on device batadv0
[   88.974365][ T5841] veth0_macvtap: entered promiscuous mode
[   88.984659][ T5841] veth1_macvtap: entered promiscuous mode
[   89.013137][ T5843] 8021q: adding VLAN 0 to HW filter on device batadv0
[   89.051318][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_0
[   89.064259][ T5840] veth0_vlan: entered promiscuous mode
[   89.086453][ T5842] veth0_vlan: entered promiscuous mode
[   89.096252][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_1
[   89.120156][ T5841] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   89.130953][ T5841] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   89.139813][ T5841] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   89.149767][ T5841] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   89.175136][ T5840] veth1_vlan: entered promiscuous mode
[   89.185273][ T5842] veth1_vlan: entered promiscuous mode
[   89.229794][ T5843] veth0_vlan: entered promiscuous mode
[   89.259332][ T5843] veth1_vlan: entered promiscuous mode
[   89.314551][ T1320] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   89.320489][ T5842] veth0_macvtap: entered promiscuous mode
[   89.332811][ T1320] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   89.355121][ T5840] veth0_macvtap: entered promiscuous mode
[   89.364568][ T5842] veth1_macvtap: entered promiscuous mode
[   89.385989][ T5840] veth1_macvtap: entered promiscuous mode
[   89.392238][ T5859] Bluetooth: hci1: command tx timeout
[   89.392303][ T5844] Bluetooth: hci3: command tx timeout
[   89.398099][ T5859] Bluetooth: hci0: command tx timeout
[   89.403286][ T5844] Bluetooth: hci2: command tx timeout
[   89.444859][   T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   89.461682][   T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   89.471158][ T5842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   89.484538][ T5842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   89.501820][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_0
[   89.513760][ T5842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   89.524986][ T5842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   89.537029][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_1
[   89.555728][ T5843] veth0_macvtap: entered promiscuous mode
[   89.567328][ T5840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   89.578233][ T5840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   89.588452][ T5840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   89.599405][ T5840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   89.610984][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_0
[   89.629675][ T5842] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   89.647396][ T5842] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   89.652120][ T5841] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   89.656132][ T5842] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   89.681055][ T5842] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   89.699747][ T5843] veth1_macvtap: entered promiscuous mode
[   89.720675][ T5840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   89.734247][ T5840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   89.746437][ T5840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   89.769151][ T5840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   89.799316][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_1
[   89.822558][ T5840] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   89.831620][ T5840] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   89.843039][ T5840] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   89.854473][ T5840] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   89.908800][ T5843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   89.925695][ T5843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   89.936421][ T5843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   89.947666][ T5843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   89.958707][ T5843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   89.969916][ T5843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   89.981424][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_0
[   90.024083][ T5843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   90.035652][ T5843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   90.045972][ T5843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   90.056542][ T5843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   90.066442][ T5843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   90.077102][ T5843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   90.088923][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_1
[   90.113324][   T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   90.127200][   T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   90.139713][ T5843] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   90.153406][ T5843] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   90.163203][ T5843] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   90.171967][ T5843] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   90.254625][ T1320] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   90.264512][ T1320] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   90.289201][ T1320] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   90.306988][ T1320] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   90.387167][   T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   90.395067][   T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   90.413763][ T1320] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   90.458330][ T1320] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   90.538808][ T1320] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   90.556497][ T1320] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   91.124666][ T5923] could not allocate digest TFM handle Linux
[   91.172886][ T5929] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   91.471439][ T5844] Bluetooth: hci2: command tx timeout
[   91.477026][ T5844] Bluetooth: hci0: command tx timeout
[   91.482966][ T5844] Bluetooth: hci3: command tx timeout
[   91.487699][ T5859] Bluetooth: hci1: command tx timeout
[   92.048263][   T46] cfg80211: failed to load regulatory.db
[   92.125693][ T5946] process 'syz.3.8' launched '/dev/fd/3' with NULL argv: empty string added
[   93.547268][ T5853] Bluetooth: hci3: command tx timeout
[   93.551034][ T5859] Bluetooth: hci1: command tx timeout
[   93.552734][ T5844] Bluetooth: hci0: command tx timeout
[   93.558180][ T5859] Bluetooth: hci2: command tx timeout
[   95.594817][ T5990] netlink: 4 bytes leftover after parsing attributes in process `syz.1.15'.
[   95.998205][ T6015] netlink: 12 bytes leftover after parsing attributes in process `syz.1.26'.
[   96.024623][ T6011] HfR: entered promiscuous mode
[   96.052939][ T6015] HfR: left promiscuous mode
[   96.856898][ T6033] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   98.008906][   T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   98.165011][   T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   98.318372][   T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   98.453990][   T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   98.578829][ T6072] mmap: syz.3.41 (6072) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[   98.606468][ T5853] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   98.627769][ T5853] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   98.635884][ T5853] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   98.657541][ T5853] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   98.690961][ T5853] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[   98.699150][ T5853] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   99.030201][   T12] bridge_slave_1: left allmulticast mode
[   99.036375][   T12] bridge_slave_1: left promiscuous mode
[   99.043914][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[   99.060167][   T12] bridge_slave_0: left allmulticast mode
[   99.065900][   T12] bridge_slave_0: left promiscuous mode
[   99.073914][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[   99.168459][ T6081] cgroup: fork rejected by pids controller in /syz2
[  100.827209][ T5853] Bluetooth: hci1: command tx timeout
[  102.910642][ T5853] Bluetooth: hci1: command tx timeout
[  103.049836][ T6243] =======================================================
[  103.049836][ T6243] WARNING: The mand mount option has been deprecated and
[  103.049836][ T6243]          and is ignored by this kernel. Remove the mand
[  103.049836][ T6243]          option from the mount to silence this warning.
[  103.049836][ T6243] =======================================================
[  103.663310][ T6251] Zero length message leads to an empty skb
[  104.279516][ T6257] netlink: 342 bytes leftover after parsing attributes in process `syz.0.53'.
[  104.935447][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  104.987945][ T5853] Bluetooth: hci1: command tx timeout
[  105.156157][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  105.179365][   T12] bond0 (unregistering): Released all slaves
[  105.630584][ T6273] delete_channel: no stack
[  105.891557][ T6285] syz.2.59 uses obsolete (PF_INET,SOCK_PACKET)
[  106.029762][ T6073] chnl_net:caif_netlink_parms(): no params data found
[  106.416746][   T12] hsr_slave_0: left promiscuous mode
[  106.481092][   T12] hsr_slave_1: left promiscuous mode
[  106.507102][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  106.516772][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[  106.540477][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  106.548832][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[  106.605746][   T12] veth1_macvtap: left promiscuous mode
[  106.626286][   T12] veth0_macvtap: left promiscuous mode
[  106.637710][   T12] veth1_vlan: left promiscuous mode
[  106.648135][   T12] veth0_vlan: left promiscuous mode
[  106.987529][ T6318] netlink: 8 bytes leftover after parsing attributes in process `syz.3.64'.
[  107.066774][ T5853] Bluetooth: hci1: command tx timeout
[  107.783097][   T12] team0 (unregistering): Port device team_slave_1 removed
[  107.850112][   T12] team0 (unregistering): Port device team_slave_0 removed
[  108.893976][ T6073] bridge0: port 1(bridge_slave_0) entered blocking state
[  108.906534][ T6073] bridge0: port 1(bridge_slave_0) entered disabled state
[  108.921789][ T6073] bridge_slave_0: entered allmulticast mode
[  108.930735][ T6073] bridge_slave_0: entered promiscuous mode
[  109.038058][ T6073] bridge0: port 2(bridge_slave_1) entered blocking state
[  109.057153][ T6073] bridge0: port 2(bridge_slave_1) entered disabled state
[  109.076003][ T6073] bridge_slave_1: entered allmulticast mode
[  109.125438][ T6073] bridge_slave_1: entered promiscuous mode
[  109.144129][ T6348] HSR: entered promiscuous mode
[  109.246385][ T6356] delete_channel: no stack
[  109.284400][ T6073] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  109.311505][ T6073] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  109.511945][ T6073] team0: Port device team_slave_0 added
[  109.545512][ T6073] team0: Port device team_slave_1 added
[  109.623376][ T6073] batman_adv: batadv0: Adding interface: batadv_slave_0
[  109.641234][ T6073] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  109.700143][ T6073] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  109.730637][ T6073] batman_adv: batadv0: Adding interface: batadv_slave_1
[  109.746034][ T6073] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  109.836906][ T6073] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  110.123418][ T6073] hsr_slave_0: entered promiscuous mode
[  110.157357][ T6073] hsr_slave_1: entered promiscuous mode
[  112.419738][ T6073] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  112.549634][ T6073] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  112.656854][ T6073] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  112.757593][ T6073] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  113.012564][ T6073] 8021q: adding VLAN 0 to HW filter on device bond0
[  113.067785][ T6073] 8021q: adding VLAN 0 to HW filter on device team0
[  113.100851][ T1320] bridge0: port 1(bridge_slave_0) entered blocking state
[  113.108104][ T1320] bridge0: port 1(bridge_slave_0) entered forwarding state
[  113.160257][ T1320] bridge0: port 2(bridge_slave_1) entered blocking state
[  113.167543][ T1320] bridge0: port 2(bridge_slave_1) entered forwarding state
[  113.841392][ T6073] 8021q: adding VLAN 0 to HW filter on device batadv0
[  113.975846][ T6073] veth0_vlan: entered promiscuous mode
[  114.018655][ T6073] veth1_vlan: entered promiscuous mode
[  114.109248][ T6073] veth0_macvtap: entered promiscuous mode
[  114.150478][ T6073] veth1_macvtap: entered promiscuous mode
[  114.209164][ T6073] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  114.221552][ T6073] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  114.251934][ T6073] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  114.274313][ T6073] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  114.296809][ T6073] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  114.316688][ T6073] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  114.328700][ T6073] batman_adv: batadv0: Interface activated: batadv_slave_0
[  114.359599][ T6073] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  114.393961][ T6073] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  114.424339][ T6073] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  114.449922][ T6073] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  114.474460][ T6073] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  114.501509][ T6073] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  114.543136][ T6073] batman_adv: batadv0: Interface activated: batadv_slave_1
[  114.589215][ T6073] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  114.635424][ T6073] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  114.664838][ T6073] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  114.694037][ T6073] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  115.130822][ T1320] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  115.157470][ T1320] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  115.616911][ T1320] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  115.624798][ T1320] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  115.746881][ T6483] can: request_module (can-proto-0) failed.
[  119.437890][ T6544] netlink: 'syz.0.91': attribute type 11 has an invalid length.
[  119.466308][ T6544] netlink: 'syz.0.91': attribute type 11 has an invalid length.
[  123.337204][   T29] audit: type=1804 audit(1730708046.790:2): pid=6619 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.103" name="#)-\&[}" dev="mqueue" ino=9527 res=1 errno=0
[  123.398334][ T6619] kernel read not supported for file /#)-\&[} (pid: 6619 comm: syz.1.103)
[  123.504741][   T29] audit: type=1800 audit(8277292035.030:3): pid=6619 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.103" name="#)-\&[}" dev="mqueue" ino=9527 res=0 errno=0
[  128.526682][ T6683] netlink: 6 bytes leftover after parsing attributes in process `syz.1.115'.
[  128.566684][ T6683] netlink: 3 bytes leftover after parsing attributes in process `syz.1.115'.
[  130.153302][ T5844] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  130.369025][ T5844] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  130.377892][ T5844] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  130.386383][ T5844] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  130.489607][ T5844] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  130.498331][ T5844] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  131.444405][ T6691] chnl_net:caif_netlink_parms(): no params data found
[  132.037996][ T6691] bridge0: port 1(bridge_slave_0) entered blocking state
[  132.045205][ T6691] bridge0: port 1(bridge_slave_0) entered disabled state
[  132.066926][ T6691] bridge_slave_0: entered allmulticast mode
[  132.083764][ T6691] bridge_slave_0: entered promiscuous mode
[  132.169908][ T6691] bridge0: port 2(bridge_slave_1) entered blocking state
[  132.185007][ T6691] bridge0: port 2(bridge_slave_1) entered disabled state
[  132.210297][ T6691] bridge_slave_1: entered allmulticast mode
[  132.229102][ T6691] bridge_slave_1: entered promiscuous mode
[  132.463600][ T6592] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  132.571265][ T6691] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  132.587361][ T5853] Bluetooth: hci4: command tx timeout
[  132.957811][ T6592] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  133.001681][ T6691] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  133.168937][ T6592] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  133.222999][ T6691] team0: Port device team_slave_0 added
[  133.239839][ T6691] team0: Port device team_slave_1 added
[  133.426262][ T6592] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  133.487163][ T6691] batman_adv: batadv0: Adding interface: batadv_slave_0
[  133.494197][ T6691] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  133.562664][ T6691] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  133.595944][ T6691] batman_adv: batadv0: Adding interface: batadv_slave_1
[  133.616662][ T6691] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  133.684426][ T6691] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  134.031797][ T6691] hsr_slave_0: entered promiscuous mode
[  134.087366][ T6691] hsr_slave_1: entered promiscuous mode
[  134.107053][ T6691] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  134.114745][ T6691] Cannot create hsr debugfs directory
[  134.409635][ T6592] bridge_slave_1: left allmulticast mode
[  134.433987][ T6592] bridge_slave_1: left promiscuous mode
[  134.447783][ T6592] bridge0: port 2(bridge_slave_1) entered disabled state
[  134.464981][ T6592] bridge_slave_0: left allmulticast mode
[  134.483086][ T6592] bridge_slave_0: left promiscuous mode
[  134.491386][ T6592] bridge0: port 1(bridge_slave_0) entered disabled state
[  134.688086][ T5853] Bluetooth: hci4: command tx timeout
[  136.746841][ T5853] Bluetooth: hci4: command tx timeout
[  137.061001][ T6592] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  137.178716][ T6592] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  137.309774][ T6592] bond0 (unregistering): Released all slaves
[  138.117069][ T1300] ieee802154 phy0 wpan0: encryption failed: -22
[  138.123665][ T1300] ieee802154 phy1 wpan1: encryption failed: -22
[  138.334434][ T6691] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  138.415615][ T6691] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  138.826794][ T5853] Bluetooth: hci4: command tx timeout
[  138.861754][ T6691] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  138.947910][ T6691] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  139.492689][ T6691] 8021q: adding VLAN 0 to HW filter on device bond0
[  139.591122][ T6691] 8021q: adding VLAN 0 to HW filter on device team0
[  139.679648][ T1320] bridge0: port 1(bridge_slave_0) entered blocking state
[  139.686844][ T1320] bridge0: port 1(bridge_slave_0) entered forwarding state
[  139.910062][ T6592] hsr_slave_0: left promiscuous mode
[  139.926959][ T6592] hsr_slave_1: left promiscuous mode
[  140.026870][ T6592] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  140.034340][ T6592] batman_adv: batadv0: Removing interface: batadv_slave_0
[  140.077553][ T6592] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  140.085001][ T6592] batman_adv: batadv0: Removing interface: batadv_slave_1
[  140.215851][ T6592] veth1_macvtap: left promiscuous mode
[  140.221610][ T6592] veth0_macvtap: left promiscuous mode
[  140.235002][ T6592] veth1_vlan: left promiscuous mode
[  140.254618][ T6592] veth0_vlan: left promiscuous mode
[  142.182345][ T6592] team0 (unregistering): Port device team_slave_1 removed
[  142.393802][ T6592] team0 (unregistering): Port device team_slave_0 removed
[  143.826957][ T6691] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  143.862580][ T6691] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  144.286477][ T6691] 8021q: adding VLAN 0 to HW filter on device batadv0
[  145.021457][ T6691] veth0_vlan: entered promiscuous mode
[  145.053238][ T6691] veth1_vlan: entered promiscuous mode
[  145.132687][ T6691] veth0_macvtap: entered promiscuous mode
[  145.170261][ T6691] veth1_macvtap: entered promiscuous mode
[  145.222710][ T6691] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  145.266509][ T6691] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  145.304207][ T6691] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  145.334255][ T6691] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  145.354863][ T6691] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  145.386054][ T6691] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  145.419462][ T6691] batman_adv: batadv0: Interface activated: batadv_slave_0
[  145.456920][ T6691] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  145.484504][ T6691] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  145.523987][ T6691] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  145.563017][ T6691] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  145.586621][ T6691] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  145.613754][ T6691] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  145.642652][ T6691] batman_adv: batadv0: Interface activated: batadv_slave_1
[  145.685751][ T6691] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  145.735806][ T6691] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  145.746433][ T6691] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  145.772302][ T6691] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  145.984893][   T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  146.036269][   T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  146.106842][ T6589] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  146.128796][ T6589] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  146.252002][ T1320] bridge0: port 2(bridge_slave_1) entered blocking state
[  146.259211][ T1320] bridge0: port 2(bridge_slave_1) entered forwarding state
[  148.009776][ T6916] netlink: 306 bytes leftover after parsing attributes in process `syz.1.153'.
[  151.108838][ T6582] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  151.256816][ T6582] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  151.338084][ T6982] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  151.442591][ T5844] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  151.458331][ T5844] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  151.471841][ T5844] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  151.482708][ T5844] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  151.491586][ T5844] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  151.506836][ T5844] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  151.507885][ T6582] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  151.771515][ T6582] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  151.938780][ T7005] svc: failed to register nfsdv3 RPC service (errno 111).
[  151.966207][ T7005] svc: failed to register nfsaclv3 RPC service (errno 111).
[  152.304570][ T6996] chnl_net:caif_netlink_parms(): no params data found
[  152.561560][ T6582] bridge_slave_1: left allmulticast mode
[  152.614420][ T6582] bridge_slave_1: left promiscuous mode
[  152.657066][ T6582] bridge0: port 2(bridge_slave_1) entered disabled state
[  152.737451][ T6582] bridge_slave_0: left allmulticast mode
[  152.754172][ T6582] bridge_slave_0: left promiscuous mode
[  152.793323][ T6582] bridge0: port 1(bridge_slave_0) entered disabled state
[  153.626790][ T5853] Bluetooth: hci1: command tx timeout
[  154.024430][ T6582] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  154.063072][ T6582] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  154.114830][ T6582] bond0 (unregistering): Released all slaves
[  154.440393][ T6996] bridge0: port 1(bridge_slave_0) entered blocking state
[  154.463460][ T6996] bridge0: port 1(bridge_slave_0) entered disabled state
[  154.505630][ T6996] bridge_slave_0: entered allmulticast mode
[  154.547895][ T6996] bridge_slave_0: entered promiscuous mode
[  154.769450][ T6996] bridge0: port 2(bridge_slave_1) entered blocking state
[  154.788547][ T6996] bridge0: port 2(bridge_slave_1) entered disabled state
[  154.795827][ T6996] bridge_slave_1: entered allmulticast mode
[  154.817881][ T6996] bridge_slave_1: entered promiscuous mode
[  154.960986][ T6996] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  155.155005][ T6996] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  155.514545][ T6996] team0: Port device team_slave_0 added
[  155.604611][ T6582] hsr_slave_0: left promiscuous mode
[  155.660171][ T6582] hsr_slave_1: left promiscuous mode
[  155.675970][ T6582] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  155.696080][ T6582] batman_adv: batadv0: Removing interface: batadv_slave_0
[  155.707860][ T5853] Bluetooth: hci1: command tx timeout
[  155.751982][ T6582] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  155.769873][ T6582] batman_adv: batadv0: Removing interface: batadv_slave_1
[  155.866576][ T6582] veth1_macvtap: left promiscuous mode
[  155.880986][ T6582] veth0_macvtap: left promiscuous mode
[  155.896783][ T6582] veth1_vlan: left promiscuous mode
[  155.902135][ T6582] veth0_vlan: left promiscuous mode
[  157.089066][ T6582] team0 (unregistering): Port device team_slave_1 removed
[  157.179121][ T6582] team0 (unregistering): Port device team_slave_0 removed
[  157.789576][ T5853] Bluetooth: hci1: command tx timeout
[  158.286471][ T6996] team0: Port device team_slave_1 added
[  158.467239][ T6996] batman_adv: batadv0: Adding interface: batadv_slave_0
[  158.474252][ T6996] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  158.595945][ T6996] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  158.644042][ T6996] batman_adv: batadv0: Adding interface: batadv_slave_1
[  158.697083][ T6996] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  158.762053][ T6996] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  159.098637][ T6996] hsr_slave_0: entered promiscuous mode
[  159.105204][ T6996] hsr_slave_1: entered promiscuous mode
[  159.479788][ T7148] netlink: 4 bytes leftover after parsing attributes in process `syz.3.188'.
[  159.867073][ T5853] Bluetooth: hci1: command tx timeout
[  160.325230][ T6996] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  160.351996][ T6996] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  160.377001][ T6996] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  160.398641][ T6996] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  160.635732][ T6996] 8021q: adding VLAN 0 to HW filter on device bond0
[  160.697726][ T6996] 8021q: adding VLAN 0 to HW filter on device team0
[  160.747821][ T6582] bridge0: port 1(bridge_slave_0) entered blocking state
[  160.754984][ T6582] bridge0: port 1(bridge_slave_0) entered forwarding state
[  160.819516][ T6582] bridge0: port 2(bridge_slave_1) entered blocking state
[  160.826685][ T6582] bridge0: port 2(bridge_slave_1) entered forwarding state
[  161.385979][ T6996] 8021q: adding VLAN 0 to HW filter on device batadv0
[  161.428290][ T7201] nbd: must specify at least one socket
[  161.548887][ T6996] veth0_vlan: entered promiscuous mode
[  161.584033][ T6996] veth1_vlan: entered promiscuous mode
[  161.697453][ T6996] veth0_macvtap: entered promiscuous mode
[  161.725082][ T6996] veth1_macvtap: entered promiscuous mode
[  161.800182][ T6996] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  161.830360][ T6996] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  161.856640][ T6996] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  161.877285][ T6996] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  161.901798][ T6996] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  161.916020][ T6996] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  161.929557][ T6996] batman_adv: batadv0: Interface activated: batadv_slave_0
[  161.969357][ T6996] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  161.990668][ T6996] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  162.006058][ T6996] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  162.032117][ T6996] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  162.042589][ T6996] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  162.053622][ T6996] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  162.108150][ T6996] batman_adv: batadv0: Interface activated: batadv_slave_1
[  162.161324][ T6996] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  162.202870][ T6996] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  162.232668][ T6996] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  162.260851][ T6996] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  162.439851][ T6600] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  162.463802][ T6600] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  162.548597][ T6600] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  162.556492][ T6600] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  162.951908][ T7244] netlink: 8 bytes leftover after parsing attributes in process `syz.3.204'.
[  163.007515][ T7242] netlink: 8 bytes leftover after parsing attributes in process `syz.3.204'.
[  165.317344][ T7284] RDS: rds_bind could not find a transport for fe80::300:0:0:0, load rds_tcp or rds_rdma?
[  167.005885][ T7352] netlink: 342 bytes leftover after parsing attributes in process `syz.0.227'.
[  168.929777][ T7394] kernel read not supported for file /#)-\&[} (pid: 7394 comm: syz.0.237)
[  168.929894][   T29] audit: type=1804 audit(8277292047.370:4): pid=7394 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.237" name="#)-\&[}" dev="mqueue" ino=14184 res=1 errno=0
[  169.031867][   T29] audit: type=1800 audit(8277292047.440:5): pid=7394 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.237" name="#)-\&[}" dev="mqueue" ino=14184 res=0 errno=0
[  169.710909][ T7418] netlink: 4 bytes leftover after parsing attributes in process `syz.0.241'.
[  175.428054][ T7600] netlink: 8 bytes leftover after parsing attributes in process `syz.1.268'.
[  175.461200][ T7598] netlink: 8 bytes leftover after parsing attributes in process `syz.1.268'.
[  176.170749][ T7630] netlink: 8 bytes leftover after parsing attributes in process `syz.3.273'.
[  176.486693][   T29] audit: type=1326 audit(8277292054.920:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7643 comm="syz.4.276" exe="/root/syz-executor" sig=9 arch=c000003e syscall=157 compat=0 ip=0x7f500077e719 code=0x0
[  176.805898][ T7658] RDS: rds_bind could not find a transport for ::ffff:119.235.224.153, load rds_tcp or rds_rdma?
[  177.574271][ T7680] netlink: 6 bytes leftover after parsing attributes in process `syz.1.281'.
[  177.620947][ T7680] netlink: 3 bytes leftover after parsing attributes in process `syz.1.281'.
[  178.035040][ T7699] RDS: rds_bind could not find a transport for 2abd:7000:fcdb:df25:100::, load rds_tcp or rds_rdma?
[  178.485873][ T7726] netlink: zone id is out of range
[  178.500616][ T7726] netlink: zone id is out of range
[  178.521120][ T7726] netlink: zone id is out of range
[  178.526332][ T7726] netlink: zone id is out of range
[  178.556964][ T7726] netlink: zone id is out of range
[  178.562153][ T7726] netlink: zone id is out of range
[  178.596639][ T7726] netlink: zone id is out of range
[  178.601812][ T7726] netlink: zone id is out of range
[  178.646780][ T7726] netlink: zone id is out of range
[  178.651983][ T7726] netlink: zone id is out of range
[  178.673913][   T29] audit: type=1326 audit(8277292057.110:7): auid=4294967295 uid=0 gid=1023 ses=4294967295 subj=unconfined pid=7731 comm=093D exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f500077e719 code=0x0
[  187.816003][ T7924] xs_local_setup_socket: unhandled error (13) connecting to /var/run/rpcbind.sock
[  187.934050][ T7924] svc: failed to register nfsdv3 RPC service (errno 111).
[  188.017128][ T7924] svc: failed to register nfsaclv3 RPC service (errno 111).
[  189.397156][ T7972] HfR: entered promiscuous mode
[  190.996332][ T7994] syz.4.345(7994): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored.
[  193.948543][   T29] audit: type=1326 audit(8277292072.390:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8051 comm="syz.1.359" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6410f7e719 code=0x0
[  194.175686][ T8068] syz.0.360 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[  197.636882][ T8138] HfR: entered promiscuous mode
[  197.923272][ T8150] netlink: 4 bytes leftover after parsing attributes in process `syz.1.379'.
[  198.448274][ T8154] netlink: 342 bytes leftover after parsing attributes in process `syz.4.385'.
[  199.554707][ T1300] ieee802154 phy0 wpan0: encryption failed: -22
[  199.561288][ T1300] ieee802154 phy1 wpan1: encryption failed: -22
[  200.915696][ T8192] kernel read not supported for file /ÿ)-\&[} (pid: 8192 comm: syz.4.395)
[  200.931435][   T29] audit: type=1800 audit(8277292079.360:9): pid=8192 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.395" name=FF292D5C265B7D dev="mqueue" ino=17143 res=0 errno=0
[  201.255215][ T8201] netlink: 306 bytes leftover after parsing attributes in process `syz.0.397'.
[  203.904795][ T8245] netlink: 4 bytes leftover after parsing attributes in process `syz.0.406'.
[  203.924970][ T8245] veth0_macvtap: left promiscuous mode
[  203.965239][ T8245] macvtap0: entered promiscuous mode
[  203.987137][ T8245] macvtap0: entered allmulticast mode
[  205.437408][ T5853] Bluetooth: hci4: SCO packet for unknown connection handle 0
[  206.064903][ T8291] nbd: illegal input index 50331648
[  209.697427][ T8315] netlink: 12 bytes leftover after parsing attributes in process `syz.0.421'.
[  211.868009][ T5859] Bluetooth: hci0: command 0x0406 tx timeout
[  211.874165][ T5859] Bluetooth: hci2: command 0x0406 tx timeout
[  214.046293][ T5853] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  214.056499][ T5853] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  214.068882][ T5853] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  214.220554][ T5853] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  214.443580][ T5853] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  214.467005][ T5853] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  215.641444][ T8390] chnl_net:caif_netlink_parms(): no params data found
[  216.562057][ T8390] bridge0: port 1(bridge_slave_0) entered blocking state
[  216.580348][ T8390] bridge0: port 1(bridge_slave_0) entered disabled state
[  216.594521][ T8390] bridge_slave_0: entered allmulticast mode
[  216.614353][ T8390] bridge_slave_0: entered promiscuous mode
[  216.653141][ T8390] bridge0: port 2(bridge_slave_1) entered blocking state
[  216.674076][ T8390] bridge0: port 2(bridge_slave_1) entered disabled state
[  216.681507][ T5853] Bluetooth: hci3: command tx timeout
[  216.700658][ T8062] syz.1.359 (8062) used greatest stack depth: 19456 bytes left
[  216.714983][ T8390] bridge_slave_1: entered allmulticast mode
[  216.767833][ T8390] bridge_slave_1: entered promiscuous mode
[  217.093392][ T8390] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  217.130306][ T8390] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  217.477417][ T8390] team0: Port device team_slave_0 added
[  217.511949][ T8390] team0: Port device team_slave_1 added
[  217.792533][ T8390] batman_adv: batadv0: Adding interface: batadv_slave_0
[  217.806552][ T8390] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  217.856620][ T8390] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  217.888739][ T8390] batman_adv: batadv0: Adding interface: batadv_slave_1
[  217.895764][ T8390] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  217.943022][ T8390] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  218.126026][ T8390] hsr_slave_0: entered promiscuous mode
[  218.189960][ T8390] hsr_slave_1: entered promiscuous mode
[  218.196440][ T8390] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  218.242410][ T8390] Cannot create hsr debugfs directory
[  218.746759][ T5853] Bluetooth: hci3: command tx timeout
[  219.147057][ T8390] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  219.200431][ T8390] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  219.221997][ T8390] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  219.305215][   T11] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  219.336601][ T8390] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  219.430451][   T11] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  219.661813][   T11] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  219.732826][ T8495] netlink: 11 bytes leftover after parsing attributes in process `syz.0.463'.
[  219.757782][ T7756] syz.1.286 (7756) used greatest stack depth: 18192 bytes left
[  219.941198][   T11] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  220.081722][ T8390] 8021q: adding VLAN 0 to HW filter on device bond0
[  220.238465][ T8390] 8021q: adding VLAN 0 to HW filter on device team0
[  220.287061][ T7927] bridge0: port 1(bridge_slave_0) entered blocking state
[  220.294267][ T7927] bridge0: port 1(bridge_slave_0) entered forwarding state
[  220.328462][ T7927] bridge0: port 2(bridge_slave_1) entered blocking state
[  220.335686][ T7927] bridge0: port 2(bridge_slave_1) entered forwarding state
[  220.565329][   T11] bridge_slave_1: left allmulticast mode
[  220.587121][   T11] bridge_slave_1: left promiscuous mode
[  220.592931][   T11] bridge0: port 2(bridge_slave_1) entered disabled state
[  220.615432][   T11] bridge_slave_0: left allmulticast mode
[  220.624215][   T11] bridge_slave_0: left promiscuous mode
[  220.652003][   T11] bridge0: port 1(bridge_slave_0) entered disabled state
[  220.766666][ T8502] sctp: [Deprecated]: syz.3.464 (pid 8502) Use of int in max_burst socket option deprecated.
[  220.766666][ T8502] Use struct sctp_assoc_value instead
[  220.836941][ T5853] Bluetooth: hci3: command tx timeout
[  221.134460][ T8534] svc: failed to register nfsdv3 RPC service (errno 111).
[  221.143152][ T8534] svc: failed to register nfsaclv3 RPC service (errno 111).
[  221.256366][   T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  221.273124][   T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  221.285203][   T11] bond0 (unregistering): Released all slaves
[  221.581047][ T8540] delete_channel: no stack
[  222.159978][ T8390] 8021q: adding VLAN 0 to HW filter on device batadv0
[  222.401551][   T11] hsr_slave_0: left promiscuous mode
[  222.520878][   T11] hsr_slave_1: left promiscuous mode
[  222.541782][   T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  222.561694][   T11] batman_adv: batadv0: Removing interface: batadv_slave_0
[  222.588414][   T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  222.612386][   T11] batman_adv: batadv0: Removing interface: batadv_slave_1
[  222.770005][   T11] veth1_macvtap: left promiscuous mode
[  222.775593][   T11] veth0_macvtap: left promiscuous mode
[  222.796821][   T11] veth1_vlan: left promiscuous mode
[  222.802221][   T11] veth0_vlan: left promiscuous mode
[  222.906865][ T5853] Bluetooth: hci3: command tx timeout
[  223.812792][   T11] team0 (unregistering): Port device team_slave_1 removed
[  223.894391][   T11] team0 (unregistering): Port device team_slave_0 removed
[  224.068233][ T8611] Process accounting resumed
[  225.079484][ T8390] veth0_vlan: entered promiscuous mode
[  225.114716][ T8390] veth1_vlan: entered promiscuous mode
[  225.137878][ T8624] netlink: 'syz.0.489': attribute type 7 has an invalid length.
[  225.161294][ T8624] netlink: 'syz.0.489': attribute type 7 has an invalid length.
[  225.241762][ T8390] veth0_macvtap: entered promiscuous mode
[  225.272748][ T8390] veth1_macvtap: entered promiscuous mode
[  225.329773][ T8390] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  225.367112][ T8390] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  225.384673][ T8390] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  225.395693][ T8390] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  225.445912][ T8390] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  225.461100][ T8390] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  225.484469][ T8390] batman_adv: batadv0: Interface activated: batadv_slave_0
[  225.541298][ T8390] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  225.582774][ T8390] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  225.620327][ T8390] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  225.648618][ T8390] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  225.694898][ T8390] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  225.722616][ T8390] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  225.807968][ T8390] batman_adv: batadv0: Interface activated: batadv_slave_1
[  225.822265][ T8390] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  225.844734][ T8390] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  225.855269][ T8390] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  225.864394][ T8390] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  226.030036][   T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  226.053246][   T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  226.120711][ T6581] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  226.150645][ T6581] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  230.690139][ T8841] mmap: syz.0.522 (8841): VmData 20692992 exceed data ulimit 3. Update limits or use boot option ignore_rlimit_data.
[  230.967428][ T8845] net_ratelimit: 1 callbacks suppressed
[  230.967453][ T8845] openvswitch: netlink: Message has 81 unknown bytes.
[  232.411854][ T8900] netlink: 4 bytes leftover after parsing attributes in process `syz.3.530'.
[  232.458323][ T8900] ip6gre0: entered promiscuous mode
[  232.463607][ T8900] ip6gre0: entered allmulticast mode
[  232.566860][ T8900] netlink: 4 bytes leftover after parsing attributes in process `syz.3.530'.
[  234.456860][ T8959] netlink: 4 bytes leftover after parsing attributes in process `syz.0.539'.
[  235.050368][ T8973] netlink: 24 bytes leftover after parsing attributes in process `syz.0.541'.
[  236.136774][ T8997] netlink: 'syz.5.543': attribute type 11 has an invalid length.
[  236.144584][ T8997] netlink: 'syz.5.543': attribute type 11 has an invalid length.
[  241.258363][ T9083] HSR: entered promiscuous mode
[  248.479320][ T9170] delete_channel: no stack
[  252.577639][   T29] audit: type=1800 audit(8277292131.010:10): pid=9303 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.589" name="SYSV00000008" dev="hugetlbfs" ino=0 res=0 errno=0
[  252.737632][ T9318] netlink: 338 bytes leftover after parsing attributes in process `syz.3.592'.
[  252.826637][ T5853] Bluetooth: hci4: command 0x0406 tx timeout
[  254.420234][ T9366] netlink: 8 bytes leftover after parsing attributes in process `syz.3.598'.
[  258.632425][ T9438] Process accounting resumed
[  259.297593][ T9462] Process accounting resumed
[  261.022062][ T1300] ieee802154 phy0 wpan0: encryption failed: -22
[  261.030029][ T1300] ieee802154 phy1 wpan1: encryption failed: -22
[  261.854260][ T9526] openvswitch: HfR: Dropping previously announced user features
[  261.907679][ T9526] netlink: 12 bytes leftover after parsing attributes in process `syz.4.639'.
[  261.936703][ T9526] HfR: left promiscuous mode
[  264.580428][ T9580] delete_channel: no stack
[  265.421718][ T9596] Invalid ELF header magic: != ELF
[  268.532167][ T9639] netlink: 4 bytes leftover after parsing attributes in process `syz.5.664'.
[  268.570530][ T9639] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[  268.738540][ T6580] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  268.933862][ T6580] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  269.312598][ T6580] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  269.787653][ T6580] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  269.965662][ T5853] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  269.975284][ T5853] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  269.983895][ T5853] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  269.995598][ T5853] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  270.010305][ T5853] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  270.028439][ T5853] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  270.434381][ T6580] bridge_slave_1: left allmulticast mode
[  270.440659][ T6580] bridge_slave_1: left promiscuous mode
[  270.461938][ T6580] bridge0: port 2(bridge_slave_1) entered disabled state
[  270.506221][ T6580] bridge_slave_0: left allmulticast mode
[  270.512497][ T6580] bridge_slave_0: left promiscuous mode
[  270.520379][ T6580] bridge0: port 1(bridge_slave_0) entered disabled state
[  271.926316][ T6580] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  271.961443][ T6580] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  272.016255][ T6580] bond0 (unregistering): Released all slaves
[  272.052886][ T9670] chnl_net:caif_netlink_parms(): no params data found
[  272.106632][ T5844] Bluetooth: hci1: command tx timeout
[  272.511371][ T6580] HSR: left promiscuous mode
[  273.126900][ T6580] HfR: left promiscuous mode
[  273.511843][ T9670] bridge0: port 1(bridge_slave_0) entered blocking state
[  273.536773][ T9670] bridge0: port 1(bridge_slave_0) entered disabled state
[  273.582884][ T9670] bridge_slave_0: entered allmulticast mode
[  273.599158][ T9670] bridge_slave_0: entered promiscuous mode
[  273.685509][ T9670] bridge0: port 2(bridge_slave_1) entered blocking state
[  273.695604][ T9670] bridge0: port 2(bridge_slave_1) entered disabled state
[  273.709176][ T9670] bridge_slave_1: entered allmulticast mode
[  273.729166][ T9670] bridge_slave_1: entered promiscuous mode
[  273.840777][ T9670] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  273.871453][ T9670] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  274.042733][ T9670] team0: Port device team_slave_0 added
[  274.067067][ T9670] team0: Port device team_slave_1 added
[  274.188893][ T5844] Bluetooth: hci1: command tx timeout
[  274.293424][ T9721] netlink: 8 bytes leftover after parsing attributes in process `syz.5.679'.
[  274.298414][ T9670] batman_adv: batadv0: Adding interface: batadv_slave_0
[  274.337078][ T9670] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  274.369333][ T9670] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  274.509022][ T9727] nbd: must specify at least one socket
[  274.693654][ T9670] batman_adv: batadv0: Adding interface: batadv_slave_1
[  274.702270][ T9670] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  274.789819][ T9670] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  274.977533][ T9670] hsr_slave_0: entered promiscuous mode
[  275.006956][ T9670] hsr_slave_1: entered promiscuous mode
[  275.126602][ T6580] hsr_slave_0: left promiscuous mode
[  275.144350][ T6580] hsr_slave_1: left promiscuous mode
[  275.172236][ T6580] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  275.197431][ T6580] batman_adv: batadv0: Removing interface: batadv_slave_0
[  275.218362][ T6580] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  275.241311][ T6580] batman_adv: batadv0: Removing interface: batadv_slave_1
[  275.283755][ T6580] veth1_macvtap: left promiscuous mode
[  275.317147][ T6580] veth0_macvtap: left promiscuous mode
[  275.323869][ T6580] veth1_vlan: left promiscuous mode
[  275.332972][ T6580] veth0_vlan: left promiscuous mode
[  275.834952][ T9761] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  276.266677][ T5844] Bluetooth: hci1: command tx timeout
[  276.777487][ T6580] team0 (unregistering): Port device team_slave_1 removed
[  276.916139][ T6580] team0 (unregistering): Port device team_slave_0 removed
[  278.346821][ T5844] Bluetooth: hci1: command tx timeout
[  279.938595][ T9670] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  279.986394][ T9670] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  280.015529][ T9670] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  280.055596][ T9670] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  280.303554][ T9670] 8021q: adding VLAN 0 to HW filter on device bond0
[  280.357746][ T9670] 8021q: adding VLAN 0 to HW filter on device team0
[  280.401984][   T35] bridge0: port 1(bridge_slave_0) entered blocking state
[  280.409180][   T35] bridge0: port 1(bridge_slave_0) entered forwarding state
[  280.478688][   T35] bridge0: port 2(bridge_slave_1) entered blocking state
[  280.485841][   T35] bridge0: port 2(bridge_slave_1) entered forwarding state
[  281.105154][ T9670] 8021q: adding VLAN 0 to HW filter on device batadv0
[  281.234049][ T9670] veth0_vlan: entered promiscuous mode
[  281.280420][ T9670] veth1_vlan: entered promiscuous mode
[  281.384793][ T9670] veth0_macvtap: entered promiscuous mode
[  281.420738][ T9670] veth1_macvtap: entered promiscuous mode
[  281.475075][ T9670] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  281.506721][ T9670] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  281.516736][ T9670] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  281.527223][ T9670] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  281.537152][ T9670] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  281.547726][ T9670] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  281.559697][ T9670] batman_adv: batadv0: Interface activated: batadv_slave_0
[  281.599965][ T9670] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  281.611142][ T9670] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  281.621157][ T9670] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  281.631669][ T9670] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  281.641555][ T9670] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  281.652846][ T9670] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  281.667849][ T9670] batman_adv: batadv0: Interface activated: batadv_slave_1
[  281.689971][ T9670] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  281.716746][ T9670] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  281.725501][ T9670] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  281.776636][ T9670] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  282.030771][   T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  282.092801][   T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  282.162682][ T6586] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  282.227214][ T6586] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  282.517063][ T9872] netlink: 334 bytes leftover after parsing attributes in process `syz.4.707'.
[  285.573107][ T9960] netlink: 32 bytes leftover after parsing attributes in process `syz.0.720'.
[  290.711509][T10051] RDS: rds_bind could not find a transport for ::ffff:58.78.54.0, load rds_tcp or rds_rdma?
[  290.971503][T10052] netlink: 8 bytes leftover after parsing attributes in process `syz.5.742'.
[  291.081456][T10054] netlink: 'syz.4.744': attribute type 12 has an invalid length.
[  291.139229][T10054] netlink: 322 bytes leftover after parsing attributes in process `syz.4.744'.
[  292.938276][ T6586] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  293.493351][ T5853] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  293.503625][ T5853] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  293.513380][ T5853] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  293.539172][ T5853] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  293.546765][T10078] svc: failed to register nfsdv3 RPC service (errno 111).
[  293.558629][ T5853] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  293.570961][ T5853] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  293.720916][T10078] svc: failed to register nfsaclv3 RPC service (errno 512).
[  293.849861][ T6586] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  294.444733][ T6586] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  294.677000][T10094] delete_channel: no stack
[  294.869946][ T6586] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  295.626681][ T5844] Bluetooth: hci2: command tx timeout
[  295.797491][T10082] chnl_net:caif_netlink_parms(): no params data found
[  296.200343][ T6586] bridge_slave_1: left allmulticast mode
[  296.206061][ T6586] bridge_slave_1: left promiscuous mode
[  296.222990][ T6586] bridge0: port 2(bridge_slave_1) entered disabled state
[  296.377547][ T6586] bridge_slave_0: left allmulticast mode
[  296.383273][ T6586] bridge_slave_0: left promiscuous mode
[  296.415620][ T6586] bridge0: port 1(bridge_slave_0) entered disabled state
[  297.706631][ T5844] Bluetooth: hci2: command tx timeout
[  297.993126][T10150] nbd: must specify at least one socket
[  298.837028][ T6586] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  298.897547][ T6586] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  298.978455][ T6586] bond0 (unregistering): Released all slaves
[  299.369233][ T6586] HSR: left promiscuous mode
[  299.786849][ T5844] Bluetooth: hci2: command tx timeout
[  299.888471][T10082] bridge0: port 1(bridge_slave_0) entered blocking state
[  299.916654][T10082] bridge0: port 1(bridge_slave_0) entered disabled state
[  299.966747][T10082] bridge_slave_0: entered allmulticast mode
[  299.996739][T10082] bridge_slave_0: entered promiscuous mode
[  300.035882][T10082] bridge0: port 2(bridge_slave_1) entered blocking state
[  300.076604][T10082] bridge0: port 2(bridge_slave_1) entered disabled state
[  300.083898][T10082] bridge_slave_1: entered allmulticast mode
[  300.147588][T10082] bridge_slave_1: entered promiscuous mode
[  300.650853][T10082] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  300.677490][T10082] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  301.311637][T10082] team0: Port device team_slave_0 added
[  301.341553][T10082] team0: Port device team_slave_1 added
[  301.836766][ T6586] hsr_slave_0: left promiscuous mode
[  301.866796][ T5844] Bluetooth: hci2: command tx timeout
[  301.917744][ T6586] hsr_slave_1: left promiscuous mode
[  302.048984][ T6586] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  302.067151][ T6586] batman_adv: batadv0: Removing interface: batadv_slave_0
[  302.104971][ T6586] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  302.126824][ T6586] batman_adv: batadv0: Removing interface: batadv_slave_1
[  302.323042][ T6586] veth1_macvtap: left promiscuous mode
[  302.373015][ T6586] veth0_macvtap: left promiscuous mode
[  302.388441][ T6586] veth1_vlan: left promiscuous mode
[  302.393850][ T6586] veth0_vlan: left promiscuous mode
[  302.426191][T10198] netlink: 12 bytes leftover after parsing attributes in process `syz.0.768'.
[  305.033798][ T6586] team0 (unregistering): Port device team_slave_1 removed
[  305.307924][ T6586] team0 (unregistering): Port device team_slave_0 removed
[  307.459363][T10082] batman_adv: batadv0: Adding interface: batadv_slave_0
[  307.494333][T10082] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  307.531131][T10082] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  307.570364][T10082] batman_adv: batadv0: Adding interface: batadv_slave_1
[  307.588615][T10082] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  307.647819][T10082] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  308.005190][T10082] hsr_slave_0: entered promiscuous mode
[  308.108002][T10082] hsr_slave_1: entered promiscuous mode
[  308.176756][T10082] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  308.184432][T10082] Cannot create hsr debugfs directory
[  309.078214][T10082] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  309.150585][T10082] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  309.304600][T10082] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  309.562413][T10082] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  309.659917][T10300] netlink: 'syz.0.791': attribute type 6 has an invalid length.
[  309.669058][T10300] netlink: 330 bytes leftover after parsing attributes in process `syz.0.791'.
[  310.177884][T10314] cgroup: fork rejected by pids controller in /syz0
[  310.313178][T10082] 8021q: adding VLAN 0 to HW filter on device bond0
[  310.396944][T10082] 8021q: adding VLAN 0 to HW filter on device team0
[  310.413466][ T6601] bridge0: port 1(bridge_slave_0) entered blocking state
[  310.420703][ T6601] bridge0: port 1(bridge_slave_0) entered forwarding state
[  310.467002][ T6601] bridge0: port 2(bridge_slave_1) entered blocking state
[  310.474173][ T6601] bridge0: port 2(bridge_slave_1) entered forwarding state
[  310.688517][T10082] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  311.209730][T10082] 8021q: adding VLAN 0 to HW filter on device batadv0
[  311.874007][T10082] veth0_vlan: entered promiscuous mode
[  311.918352][T10082] veth1_vlan: entered promiscuous mode
[  312.015435][T10082] veth0_macvtap: entered promiscuous mode
[  312.044880][T10082] veth1_macvtap: entered promiscuous mode
[  312.133258][T10082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  312.156679][T10082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  312.185212][T10082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  312.216741][T10082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  312.246576][T10082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  312.257804][T10082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  312.279213][T10082] batman_adv: batadv0: Interface activated: batadv_slave_0
[  312.364491][T10082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  312.416564][T10082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  312.426445][T10082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  312.474183][T10082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  312.515629][T10082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  312.556576][T10082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  312.579452][T10082] batman_adv: batadv0: Interface activated: batadv_slave_1
[  312.639628][T10082] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  312.667929][T10082] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  312.677248][T10082] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  312.706685][T10082] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  316.933810][ T6587] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  316.962708][ T6587] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  317.129357][ T2926] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  317.158014][ T2926] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  318.420502][T10699] netlink: 4 bytes leftover after parsing attributes in process `syz.3.808'.
[  319.090580][T10480] delete_channel: no stack
[  322.445807][ T1300] ieee802154 phy0 wpan0: encryption failed: -22
[  322.452358][ T1300] ieee802154 phy1 wpan1: encryption failed: -22
[  325.914997][T10835] netlink: 32 bytes leftover after parsing attributes in process `syz.6.825'.
[  330.859841][T10888] netlink: 'syz.3.836': attribute type 12 has an invalid length.
[  330.916736][T10888] netlink: 322 bytes leftover after parsing attributes in process `syz.3.836'.
[  331.717142][T10899] netlink: 322 bytes leftover after parsing attributes in process `syz.6.838'.
[  339.878875][ T5853] Bluetooth: hci3: command 0x0406 tx timeout
[  340.353710][T11089] netlink: 'syz.6.860': attribute type 1 has an invalid length.
[  345.445524][T11141] svc: failed to register nfsdv3 RPC service (errno 111).
[  345.466170][T11141] svc: failed to register nfsaclv3 RPC service (errno 111).
[  351.772857][T11168] netlink: 342 bytes leftover after parsing attributes in process `syz.5.876'.
[  355.834545][ T5853] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  355.843906][ T5853] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  355.852925][ T5853] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  355.865711][ T5853] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  355.876214][ T5853] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  355.887430][ T5853] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  356.607160][ T5844] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  356.656840][ T5844] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  356.696707][ T5844] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  356.705062][ T5844] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  356.716300][ T5844] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  356.723727][ T5844] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  357.946961][ T5844] Bluetooth: hci4: command tx timeout
[  358.182335][T11223] netlink: 342 bytes leftover after parsing attributes in process `syz.5.889'.
[  358.191827][T11224] netlink: 342 bytes leftover after parsing attributes in process `syz.5.889'.
[  358.826645][ T5844] Bluetooth: hci5: command tx timeout
[  360.026596][ T5844] Bluetooth: hci4: command tx timeout
[  360.185081][T11243] chnl_net:caif_netlink_parms(): no params data found
[  360.907763][ T5844] Bluetooth: hci5: command tx timeout
[  362.106643][ T5844] Bluetooth: hci4: command tx timeout
[  362.266989][ T5853] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  362.288838][ T5853] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  362.305643][ T5853] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  362.314547][ T5853] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  362.329650][ T5853] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  362.337704][ T5853] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  362.394542][ T6601] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  362.600642][ T6601] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  362.740460][T11243] bridge0: port 1(bridge_slave_0) entered blocking state
[  362.766606][T11243] bridge0: port 1(bridge_slave_0) entered disabled state
[  362.777226][T11243] bridge_slave_0: entered allmulticast mode
[  362.787086][T11243] bridge_slave_0: entered promiscuous mode
[  362.859451][ T6601] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  362.885326][T11234] chnl_net:caif_netlink_parms(): no params data found
[  362.905983][T11243] bridge0: port 2(bridge_slave_1) entered blocking state
[  362.913822][T11243] bridge0: port 2(bridge_slave_1) entered disabled state
[  362.927667][T11243] bridge_slave_1: entered allmulticast mode
[  362.934858][T11243] bridge_slave_1: entered promiscuous mode
[  362.986805][ T5844] Bluetooth: hci5: command tx timeout
[  363.005261][ T6601] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  363.104354][T11243] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  363.203287][T11243] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  363.383941][T11291] netlink: 12 bytes leftover after parsing attributes in process `syz.5.902'.
[  363.440717][T11243] team0: Port device team_slave_0 added
[  363.516590][T11287] netlink: 4 bytes leftover after parsing attributes in process `syz.5.902'.
[  363.588436][T11243] team0: Port device team_slave_1 added
[  363.640802][T11234] bridge0: port 1(bridge_slave_0) entered blocking state
[  363.654307][T11234] bridge0: port 1(bridge_slave_0) entered disabled state
[  363.662208][T11234] bridge_slave_0: entered allmulticast mode
[  363.669410][T11234] bridge_slave_0: entered promiscuous mode
[  363.685689][T11234] bridge0: port 2(bridge_slave_1) entered blocking state
[  363.692961][T11234] bridge0: port 2(bridge_slave_1) entered disabled state
[  363.700317][T11234] bridge_slave_1: entered allmulticast mode
[  363.708945][T11234] bridge_slave_1: entered promiscuous mode
[  363.755515][T11243] batman_adv: batadv0: Adding interface: batadv_slave_0
[  363.769694][T11243] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  363.799969][T11243] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  363.814444][T11243] batman_adv: batadv0: Adding interface: batadv_slave_1
[  363.821936][T11243] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  363.850027][T11243] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  363.960914][T11234] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  364.014249][T11234] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  364.110860][T11234] team0: Port device team_slave_0 added
[  364.161636][T11278] chnl_net:caif_netlink_parms(): no params data found
[  364.184383][T11243] hsr_slave_0: entered promiscuous mode
[  364.187426][ T5844] Bluetooth: hci4: command tx timeout
[  364.197565][T11243] hsr_slave_1: entered promiscuous mode
[  364.203828][T11243] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  364.211670][T11243] Cannot create hsr debugfs directory
[  364.219923][T11234] team0: Port device team_slave_1 added
[  364.383243][ T6601] bridge_slave_1: left allmulticast mode
[  364.389143][ T6601] bridge_slave_1: left promiscuous mode
[  364.395613][ T6601] bridge0: port 2(bridge_slave_1) entered disabled state
[  364.406413][ T6601] bridge_slave_0: left allmulticast mode
[  364.412717][ T6601] bridge_slave_0: left promiscuous mode
[  364.419187][ T6601] bridge0: port 1(bridge_slave_0) entered disabled state
[  364.427855][ T5844] Bluetooth: hci2: command tx timeout
[  365.066828][ T5844] Bluetooth: hci5: command tx timeout
[  365.151400][ T6601] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  365.183293][ T6601] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  365.205556][ T6601] bond0 (unregistering): Released all slaves
[  365.235248][T11234] batman_adv: batadv0: Adding interface: batadv_slave_0
[  365.285492][T11234] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  365.327507][T11234] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  365.476809][T11234] batman_adv: batadv0: Adding interface: batadv_slave_1
[  365.483900][T11234] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  365.575618][T11234] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  365.798492][T11278] bridge0: port 1(bridge_slave_0) entered blocking state
[  365.805750][T11278] bridge0: port 1(bridge_slave_0) entered disabled state
[  365.823135][T11278] bridge_slave_0: entered allmulticast mode
[  365.847788][T11278] bridge_slave_0: entered promiscuous mode
[  366.017563][T11278] bridge0: port 2(bridge_slave_1) entered blocking state
[  366.024773][T11278] bridge0: port 2(bridge_slave_1) entered disabled state
[  366.042075][T11278] bridge_slave_1: entered allmulticast mode
[  366.049818][T11278] bridge_slave_1: entered promiscuous mode
[  366.104570][T11234] hsr_slave_0: entered promiscuous mode
[  366.134420][T11234] hsr_slave_1: entered promiscuous mode
[  366.142848][T11234] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  366.150883][T11234] Cannot create hsr debugfs directory
[  366.190640][T11278] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  366.243478][T11278] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  366.325740][T11278] team0: Port device team_slave_0 added
[  366.371966][ T6601] hsr_slave_0: left promiscuous mode
[  366.378134][ T6601] hsr_slave_1: left promiscuous mode
[  366.387088][ T6601] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  366.394526][ T6601] batman_adv: batadv0: Removing interface: batadv_slave_0
[  366.419270][ T6601] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  366.427175][ T6601] batman_adv: batadv0: Removing interface: batadv_slave_1
[  366.458824][ T6601] veth1_macvtap: left promiscuous mode
[  366.464408][ T6601] veth0_macvtap: left promiscuous mode
[  366.476778][ T6601] veth1_vlan: left promiscuous mode
[  366.482129][ T6601] veth0_vlan: left promiscuous mode
[  366.490628][T11325] nfsd: Unknown parameter 'IPVS'
[  366.507153][ T5844] Bluetooth: hci2: command tx timeout
[  366.652097][T11329] nfsd: Unknown parameter 'IPVS'
[  367.411933][ T6601] team0 (unregistering): Port device team_slave_1 removed
[  367.471602][ T6601] team0 (unregistering): Port device team_slave_0 removed
[  368.199445][T11278] team0: Port device team_slave_1 added
[  368.314601][T11278] batman_adv: batadv0: Adding interface: batadv_slave_0
[  368.341578][T11278] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  368.387079][T11278] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  368.417973][T11243] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  368.443456][T11278] batman_adv: batadv0: Adding interface: batadv_slave_1
[  368.457624][T11278] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  368.497542][T11278] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  368.541906][T11243] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  368.587022][ T5844] Bluetooth: hci2: command tx timeout
[  368.601453][T11243] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  368.680010][T11278] hsr_slave_0: entered promiscuous mode
[  368.715864][T11278] hsr_slave_1: entered promiscuous mode
[  368.746743][T11278] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  368.754367][T11278] Cannot create hsr debugfs directory
[  368.802151][T11243] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  369.061143][T11234] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  369.073058][T11234] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  369.117197][T11234] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  369.121297][T11352] GUP no longer grows the stack in syz.5.911 (11352): 14000-41000 (4000)
[  369.132912][T11352] CPU: 1 UID: 0 PID: 11352 Comm: syz.5.911 Not tainted 6.12.0-rc5-syzkaller-00330-ga33ab3f94f51 #0
[  369.143673][T11352] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  369.153781][T11352] Call Trace:
[  369.157079][T11352]  <TASK>
[  369.160018][T11352]  dump_stack_lvl+0x16c/0x1f0
[  369.164742][T11352]  gup_vma_lookup+0x1d2/0x220
[  369.169451][T11352]  __get_user_pages+0x236/0x3b50
[  369.174441][T11352]  ? __pfx___get_user_pages+0x10/0x10
[  369.179855][T11352]  __gup_longterm_locked+0x22e/0x1b30
[  369.185277][T11352]  ? __pfx_lock_acquire.part.0+0x10/0x10
[  369.190949][T11352]  ? __pfx___gup_longterm_locked+0x10/0x10
[  369.196802][T11352]  ? rwsem_read_trylock+0x12d/0x250
[  369.202038][T11352]  ? __pfx_rwsem_read_trylock+0x10/0x10
[  369.207603][T11352]  ? process_vm_rw_core.constprop.0+0x40d/0x9f0
[  369.213877][T11352]  pin_user_pages_remote+0xee/0x150
[  369.219107][T11352]  ? __pfx_pin_user_pages_remote+0x10/0x10
[  369.224938][T11352]  ? down_read+0xc9/0x330
[  369.229294][T11352]  process_vm_rw_core.constprop.0+0x439/0x9f0
[  369.235441][T11352]  ? futex_wait_queue+0x101/0x1f0
[  369.240516][T11352]  ? __pfx_process_vm_rw_core.constprop.0+0x10/0x10
[  369.247198][T11352]  process_vm_rw+0x301/0x360
[  369.251821][T11352]  ? __pfx_process_vm_rw+0x10/0x10
[  369.256970][T11352]  ? up_write+0x1b2/0x520
[  369.261324][T11352]  ? __pfx___do_sys_mremap+0x10/0x10
[  369.266648][T11352]  ? xfd_validate_state+0x5d/0x180
[  369.271783][T11352]  ? rcu_is_watching+0x12/0xc0
[  369.276562][T11352]  __x64_sys_process_vm_readv+0xe2/0x1c0
[  369.282223][T11352]  ? do_syscall_64+0x91/0x250
[  369.286929][T11352]  ? lockdep_hardirqs_on+0x7c/0x110
[  369.292188][T11352]  do_syscall_64+0xcd/0x250
[  369.296713][T11352]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  369.302644][T11352] RIP: 0033:0x7f3d9317e719
[  369.307107][T11352] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  369.326757][T11352] RSP: 002b:00007f3d92bff038 EFLAGS: 00000246 ORIG_RAX: 0000000000000136
[  369.335202][T11352] RAX: ffffffffffffffda RBX: 00007f3d93335f80 RCX: 00007f3d9317e719
[  369.343194][T11352] RDX: 0000000000000004 RSI: 0000000020000040 RDI: 00000000000001fe
[  369.351206][T11352] RBP: 00007f3d931f132e R08: 0000000000000006 R09: 0000000000000000
[  369.359202][T11352] R10: 00000000200000c0 R11: 0000000000000246 R12: 0000000000000000
[  369.367212][T11352] R13: 0000000000000000 R14: 00007f3d93335f80 R15: 00007ffd84e62a08
[  369.375229][T11352]  </TASK>
[  369.415354][T11234] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  369.560333][ T6601] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  369.649089][T11243] 8021q: adding VLAN 0 to HW filter on device bond0
[  369.785653][ T6601] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  369.880400][ T6601] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  369.907574][T11278] netdevsim netdevsim9 netdevsim0: renamed from eth0
[  369.935206][T11243] 8021q: adding VLAN 0 to HW filter on device team0
[  369.992224][ T6601] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  370.017396][T11278] netdevsim netdevsim9 netdevsim1: renamed from eth1
[  370.038343][T11278] netdevsim netdevsim9 netdevsim2: renamed from eth2
[  370.060753][T11278] netdevsim netdevsim9 netdevsim3: renamed from eth3
[  370.123898][ T7925] bridge0: port 1(bridge_slave_0) entered blocking state
[  370.131092][ T7925] bridge0: port 1(bridge_slave_0) entered forwarding state
[  370.154728][ T6581] bridge0: port 2(bridge_slave_1) entered blocking state
[  370.161980][ T6581] bridge0: port 2(bridge_slave_1) entered forwarding state
[  370.369392][T11234] 8021q: adding VLAN 0 to HW filter on device bond0
[  370.510346][T11234] 8021q: adding VLAN 0 to HW filter on device team0
[  370.552607][T11364] TCP: TCP_TX_DELAY enabled
[  370.558611][ T6601] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  370.605560][ T6581] bridge0: port 1(bridge_slave_0) entered blocking state
[  370.612750][ T6581] bridge0: port 1(bridge_slave_0) entered forwarding state
[  370.666829][ T5844] Bluetooth: hci2: command tx timeout
[  370.700744][ T6601] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  370.779275][ T6581] bridge0: port 2(bridge_slave_1) entered blocking state
[  370.786588][ T6581] bridge0: port 2(bridge_slave_1) entered forwarding state
[  370.912618][ T6601] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  371.051309][ T6601] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  371.169878][T11278] 8021q: adding VLAN 0 to HW filter on device bond0
[  371.210454][T11243] 8021q: adding VLAN 0 to HW filter on device batadv0
[  371.249855][T11278] 8021q: adding VLAN 0 to HW filter on device team0
[  371.322938][ T6580] bridge0: port 1(bridge_slave_0) entered blocking state
[  371.330255][ T6580] bridge0: port 1(bridge_slave_0) entered forwarding state
[  371.428416][  T959] bridge0: port 2(bridge_slave_1) entered blocking state
[  371.435677][  T959] bridge0: port 2(bridge_slave_1) entered forwarding state
[  371.490553][ T6601] bridge_slave_1: left allmulticast mode
[  371.534570][ T6601] bridge_slave_1: left promiscuous mode
[  371.545471][ T6601] bridge0: port 2(bridge_slave_1) entered disabled state
[  371.567951][ T6601] bridge_slave_0: left allmulticast mode
[  371.579460][ T6601] bridge_slave_0: left promiscuous mode
[  371.589115][ T6601] bridge0: port 1(bridge_slave_0) entered disabled state
[  371.612988][ T6601] bridge_slave_1: left allmulticast mode
[  371.627109][ T6601] bridge_slave_1: left promiscuous mode
[  371.635197][ T6601] bridge0: port 2(bridge_slave_1) entered disabled state
[  371.654527][ T6601] bridge_slave_0: left allmulticast mode
[  371.663470][ T6601] bridge_slave_0: left promiscuous mode
[  371.671362][ T6601] bridge0: port 1(bridge_slave_0) entered disabled state
[  372.587123][ T6601] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  372.619747][ T6601] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  372.633527][ T6601] bond0 (unregistering): Released all slaves
[  372.814915][ T6601] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  372.835378][ T6601] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  372.855268][ T6601] bond0 (unregistering): Released all slaves
[  373.124798][T11234] 8021q: adding VLAN 0 to HW filter on device batadv0
[  373.134956][T11278] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  373.158046][T11278] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  373.250732][T11243] veth0_vlan: entered promiscuous mode
[  373.387184][T11243] veth1_vlan: entered promiscuous mode
[  373.627145][    C0] ==================================================================
[  373.635286][    C0] BUG: KASAN: slab-use-after-free in __rhashtable_lookup.constprop.0+0x426/0x550
[  373.644467][    C0] Read of size 4 at addr ffff8880676c0008 by task modprobe/11437
[  373.652222][    C0] 
[  373.654567][    C0] CPU: 0 UID: 0 PID: 11437 Comm: modprobe Not tainted 6.12.0-rc5-syzkaller-00330-ga33ab3f94f51 #0
[  373.665195][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  373.675289][    C0] Call Trace:
[  373.678602][    C0]  <IRQ>
[  373.681487][    C0]  dump_stack_lvl+0x116/0x1f0
[  373.686220][    C0]  print_report+0xc3/0x620
[  373.690698][    C0]  ? __virt_addr_valid+0x5e/0x590
[  373.695770][    C0]  ? __phys_addr+0xc6/0x150
[  373.700333][    C0]  kasan_report+0xd9/0x110
[  373.704812][    C0]  ? __rhashtable_lookup.constprop.0+0x426/0x550
[  373.711209][    C0]  ? __rhashtable_lookup.constprop.0+0x426/0x550
[  373.717610][    C0]  __rhashtable_lookup.constprop.0+0x426/0x550
[  373.723818][    C0]  ? lock_acquire+0x2f/0xb0
[  373.728382][    C0]  ? ila_nf_input+0x1bd/0x620
[  373.733118][    C0]  ila_nf_input+0x1ee/0x620
[  373.737871][    C0]  ? __pfx_ila_nf_input+0x10/0x10
[  373.742947][    C0]  nf_hook_slow+0xbb/0x200
[  373.747434][    C0]  nf_hook.constprop.0+0x42e/0x750
[  373.752616][    C0]  ? __pfx_ip6_rcv_finish+0x10/0x10
[  373.757855][    C0]  ? __pfx_nf_hook.constprop.0+0x10/0x10
[  373.763556][    C0]  ? sock_wfree+0x46a/0x880
[  373.768104][    C0]  ? __pfx_ip6_rcv_finish+0x10/0x10
[  373.773372][    C0]  ? __pfx_ipv6_rcv+0x10/0x10
[  373.778086][    C0]  ipv6_rcv+0xa4/0x680
[  373.782227][    C0]  ? __pfx_ipv6_rcv+0x10/0x10
[  373.786980][    C0]  __netif_receive_skb_one_core+0x12e/0x1e0
[  373.792931][    C0]  ? __pfx___netif_receive_skb_one_core+0x10/0x10
[  373.799412][    C0]  ? trace_lock_acquire+0x14a/0x1d0
[  373.804654][    C0]  ? process_backlog+0x3f1/0x15f0
[  373.809708][    C0]  ? process_backlog+0x3f1/0x15f0
[  373.814760][    C0]  __netif_receive_skb+0x1d/0x160
[  373.819827][    C0]  process_backlog+0x443/0x15f0
[  373.824718][    C0]  __napi_poll.constprop.0+0xb7/0x550
[  373.830136][    C0]  net_rx_action+0xa92/0x1010
[  373.834849][    C0]  ? __pfx_net_rx_action+0x10/0x10
[  373.839985][    C0]  ? __pfx_mark_lock+0x10/0x10
[  373.844777][    C0]  ? rcu_is_watching+0x12/0xc0
[  373.849564][    C0]  ? trace_rcu_utilization+0x100/0x160
[  373.855060][    C0]  ? rcu_core+0xada/0x14d0
[  373.859528][    C0]  ? mark_held_locks+0x9f/0xe0
[  373.864336][    C0]  handle_softirqs+0x213/0x8f0
[  373.869138][    C0]  ? __pfx_handle_softirqs+0x10/0x10
[  373.874450][    C0]  irq_exit_rcu+0xbb/0x120
[  373.878886][    C0]  sysvec_apic_timer_interrupt+0xa4/0xc0
[  373.884569][    C0]  </IRQ>
[  373.887512][    C0]  <TASK>
[  373.890453][    C0]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  373.896474][    C0] RIP: 0010:lock_acquire.part.0+0x155/0x380
[  373.902405][    C0] Code: b8 ff ff ff ff 65 0f c1 05 70 5c 98 7e 83 f8 01 0f 85 d0 01 00 00 9c 58 f6 c4 02 0f 85 e5 01 00 00 48 85 ed 0f 85 b6 01 00 00 <48> b8 00 00 00 00 00 fc ff df 48 01 c3 48 c7 03 00 00 00 00 48 c7
[  373.922037][    C0] RSP: 0018:ffffc90004ebf5d0 EFLAGS: 00000206
[  373.928130][    C0] RAX: 0000000000000046 RBX: 1ffff920009d7ebb RCX: 0000000000000001
[  373.936146][    C0] RDX: 0000000000000001 RSI: ffffffff8b4ccbe0 RDI: ffffffff8bb135a0
[  373.944137][    C0] RBP: 0000000000000200 R08: 0000000000000000 R09: fffffbfff2d32788
[  373.952151][    C0] R10: ffffffff96993c47 R11: 0000000000000000 R12: 0000000000000000
[  373.960142][    C0] R13: ffffffff8ddb7800 R14: 0000000000000000 R15: 0000000000000000
[  373.968142][    C0]  ? __pfx_lock_acquire.part.0+0x10/0x10
[  373.973833][    C0]  ? rcu_is_watching+0x12/0xc0
[  373.978621][    C0]  ? trace_lock_acquire+0x14a/0x1d0
[  373.983850][    C0]  ? page_ext_get+0x34/0x310
[  373.988479][    C0]  ? lock_acquire+0x2f/0xb0
[  373.993015][    C0]  ? page_ext_get+0x34/0x310
[  373.997631][    C0]  page_ext_get+0x3a/0x310
[  374.002073][    C0]  ? page_ext_get+0x34/0x310
[  374.006697][    C0]  __reset_page_owner+0x32/0x400
[  374.011655][    C0]  free_unref_folios+0x956/0x1310
[  374.016714][    C0]  folios_put_refs+0x551/0x750
[  374.021509][    C0]  ? __pfx_folios_put_refs+0x10/0x10
[  374.026832][    C0]  ? lock_acquire+0x2f/0xb0
[  374.031374][    C0]  ? mlock_drain_local+0x6f/0x4f0
[  374.036432][    C0]  free_pages_and_swap_cache+0x45f/0x510
[  374.042105][    C0]  ? __pfx_free_pages_and_swap_cache+0x10/0x10
[  374.048295][    C0]  ? hlock_class+0x4e/0x130
[  374.052831][    C0]  ? __pfx___might_resched+0x10/0x10
[  374.058152][    C0]  ? mark_held_locks+0x9f/0xe0
[  374.062966][    C0]  __tlb_batch_free_encoded_pages+0xf9/0x290
[  374.068984][    C0]  tlb_finish_mmu+0x168/0x7b0
[  374.073696][    C0]  exit_mmap+0x3df/0xb30
[  374.077961][    C0]  ? __pfx_exit_mmap+0x10/0x10
[  374.082749][    C0]  ? __mutex_lock+0x1a6/0x9c0
[  374.087453][    C0]  __mmput+0x12a/0x480
[  374.091537][    C0]  mmput+0x62/0x70
[  374.095275][    C0]  do_exit+0x9bf/0x2d70
[  374.099455][    C0]  ? do_group_exit+0x1c3/0x2a0
[  374.104245][    C0]  ? __pfx_lock_release+0x10/0x10
[  374.109299][    C0]  ? do_raw_spin_lock+0x12d/0x2c0
[  374.114364][    C0]  ? __pfx_do_exit+0x10/0x10
[  374.118982][    C0]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  374.124382][    C0]  do_group_exit+0xd3/0x2a0
[  374.128925][    C0]  __x64_sys_exit_group+0x3e/0x50
[  374.133981][    C0]  x64_sys_call+0x14a9/0x16a0
[  374.138693][    C0]  do_syscall_64+0xcd/0x250
[  374.143219][    C0]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  374.149148][    C0] RIP: 0033:0x7feb4f15da90
[  374.153575][    C0] Code: Unable to access opcode bytes at 0x7feb4f15da66.
[  374.160597][    C0] RSP: 002b:00007ffdac993628 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7
[  374.169031][    C0] RAX: ffffffffffffffda RBX: 00007feb4f24e860 RCX: 00007feb4f15da90
[  374.177021][    C0] RDX: 00000000000000e7 RSI: 000000000000003c RDI: 0000000000000001
[  374.185004][    C0] RBP: 00007feb4f24e860 R08: 00007ffdac9934a0 R09: 00007ffdac993580
[  374.193095][    C0] R10: 00007ffdac9934e0 R11: 0000000000000246 R12: 0000000000000000
[  374.201096][    C0] R13: 0000000000000001 R14: 00007feb4f252658 R15: 0000000000000001
[  374.209098][    C0]  </TASK>
[  374.212132][    C0] 
[  374.214460][    C0] Allocated by task 5509:
[  374.218797][    C0]  kasan_save_stack+0x33/0x60
[  374.223510][    C0]  kasan_save_track+0x14/0x30
[  374.228240][    C0]  __kasan_kmalloc+0xaa/0xb0
[  374.232855][    C0]  __kmalloc_node_track_caller_noprof+0x20f/0x440
[  374.239305][    C0]  kmalloc_reserve+0xef/0x2c0
[  374.244037][    C0]  __alloc_skb+0x164/0x380
[  374.248473][    C0]  netlink_dump+0x2c1/0xcc0
[  374.252999][    C0]  netlink_recvmsg+0xa0d/0xf30
[  374.257872][    C0]  sock_recvmsg+0x1f6/0x250
[  374.262415][    C0]  ____sys_recvmsg+0x219/0x6b0
[  374.267215][    C0]  ___sys_recvmsg+0x115/0x1a0
[  374.271918][    C0]  __sys_recvmsg+0x114/0x1e0
[  374.276540][    C0]  do_syscall_64+0xcd/0x250
[  374.281061][    C0]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  374.287018][    C0] 
[  374.289357][    C0] Freed by task 5509:
[  374.293364][    C0]  kasan_save_stack+0x33/0x60
[  374.298067][    C0]  kasan_save_track+0x14/0x30
[  374.302858][    C0]  kasan_save_free_info+0x3b/0x60
[  374.307909][    C0]  __kasan_slab_free+0x51/0x70
[  374.312713][    C0]  kfree+0x14f/0x4b0
[  374.316647][    C0]  skb_free_head+0x108/0x1d0
[  374.321279][    C0]  skb_release_data+0x560/0x730
[  374.326154][    C0]  consume_skb+0xbf/0x100
[  374.330505][    C0]  netlink_recvmsg+0x606/0xf30
[  374.335294][    C0]  sock_recvmsg+0x1f6/0x250
[  374.339828][    C0]  ____sys_recvmsg+0x219/0x6b0
[  374.344622][    C0]  ___sys_recvmsg+0x115/0x1a0
[  374.349324][    C0]  __sys_recvmsg+0x114/0x1e0
[  374.353949][    C0]  do_syscall_64+0xcd/0x250
[  374.358471][    C0]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  374.364396][    C0] 
[  374.366728][    C0] The buggy address belongs to the object at ffff8880676c0000
[  374.366728][    C0]  which belongs to the cache kmalloc-8k of size 8192
[  374.380811][    C0] The buggy address is located 8 bytes inside of
[  374.380811][    C0]  freed 8192-byte region [ffff8880676c0000, ffff8880676c2000)
[  374.394570][    C0] 
[  374.396925][    C0] The buggy address belongs to the physical page:
[  374.403347][    C0] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x676c0
[  374.412132][    C0] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  374.420646][    C0] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[  374.428218][    C0] page_type: f5(slab)
[  374.432227][    C0] raw: 00fff00000000040 ffff88801ac42280 dead000000000122 0000000000000000
[  374.440833][    C0] raw: 0000000000000000 0000000000020002 00000001f5000000 0000000000000000
[  374.449441][    C0] head: 00fff00000000040 ffff88801ac42280 dead000000000122 0000000000000000
[  374.458220][    C0] head: 0000000000000000 0000000000020002 00000001f5000000 0000000000000000
[  374.466910][    C0] head: 00fff00000000003 ffffea00019db001 ffffffffffffffff 0000000000000000
[  374.475595][    C0] head: 0000000000000008 0000000000000000 00000000ffffffff 0000000000000000
[  374.484269][    C0] page dumped because: kasan: bad access detected
[  374.490715][    C0] page_owner tracks the page as allocated
[  374.496448][    C0] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd28c0(GFP_NOWAIT|__GFP_IO|__GFP_FS|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5509, tgid 5509 (dhcpcd), ts 373081250814, free_ts 372998693855
[  374.517334][    C0]  post_alloc_hook+0x2d1/0x350
[  374.522132][    C0]  get_page_from_freelist+0x101e/0x3070
[  374.527708][    C0]  __alloc_pages_noprof+0x223/0x25a0
[  374.533016][    C0]  alloc_pages_mpol_noprof+0x2c9/0x610
[  374.538512][    C0]  new_slab+0x2ba/0x3f0
[  374.542690][    C0]  ___slab_alloc+0xd1d/0x16f0
[  374.547384][    C0]  __slab_alloc.constprop.0+0x56/0xb0
[  374.552775][    C0]  __kmalloc_node_track_caller_noprof+0x365/0x440
[  374.559226][    C0]  kmalloc_reserve+0xef/0x2c0
[  374.563940][    C0]  __alloc_skb+0x164/0x380
[  374.568379][    C0]  netlink_dump+0x2c1/0xcc0
[  374.572907][    C0]  netlink_recvmsg+0xa0d/0xf30
[  374.577695][    C0]  sock_recvmsg+0x1f6/0x250
[  374.582226][    C0]  ____sys_recvmsg+0x219/0x6b0
[  374.587032][    C0]  ___sys_recvmsg+0x115/0x1a0
[  374.591731][    C0]  __sys_recvmsg+0x114/0x1e0
[  374.596337][    C0] page last free pid 6601 tgid 6601 stack trace:
[  374.602670][    C0]  free_unref_page+0x5f4/0xdc0
[  374.607466][    C0]  __folio_put+0x30d/0x3d0
[  374.611917][    C0]  kvfree+0x47/0x50
[  374.615754][    C0]  rhashtable_free_and_destroy+0x16c/0x990
[  374.621585][    C0]  ila_xlat_exit_net+0x59/0xa0
[  374.626380][    C0]  ops_exit_list+0xb0/0x180
[  374.630900][    C0]  cleanup_net+0x5b7/0xb40
[  374.635333][    C0]  process_one_work+0x958/0x1b30
[  374.640300][    C0]  worker_thread+0x6c8/0xf00
[  374.644921][    C0]  kthread+0x2c1/0x3a0
[  374.649014][    C0]  ret_from_fork+0x45/0x80
[  374.653445][    C0]  ret_from_fork_asm+0x1a/0x30
[  374.658243][    C0] 
[  374.660575][    C0] Memory state around the buggy address:
[  374.666210][    C0]  ffff8880676bff00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  374.674292][    C0]  ffff8880676bff80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  374.682363][    C0] >ffff8880676c0000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  374.690426][    C0]                       ^
[  374.694755][    C0]  ffff8880676c0080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  374.702830][    C0]  ffff8880676c0100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  374.710898][    C0] ==================================================================
[  374.719116][    C0] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  374.726342][    C0] CPU: 0 UID: 0 PID: 11437 Comm: modprobe Not tainted 6.12.0-rc5-syzkaller-00330-ga33ab3f94f51 #0
[  374.736975][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  374.747053][    C0] Call Trace:
[  374.750363][    C0]  <IRQ>
[  374.753231][    C0]  dump_stack_lvl+0x3d/0x1f0
[  374.757863][    C0]  panic+0x71d/0x800
[  374.761820][    C0]  ? __pfx_panic+0x10/0x10
[  374.766328][    C0]  ? check_panic_on_warn+0x1f/0xb0
[  374.771508][    C0]  check_panic_on_warn+0xab/0xb0
[  374.776506][    C0]  end_report+0x117/0x180
[  374.780887][    C0]  kasan_report+0xe9/0x110
[  374.785361][    C0]  ? __rhashtable_lookup.constprop.0+0x426/0x550
[  374.791841][    C0]  ? __rhashtable_lookup.constprop.0+0x426/0x550
[  374.798253][    C0]  __rhashtable_lookup.constprop.0+0x426/0x550
[  374.804469][    C0]  ? lock_acquire+0x2f/0xb0
[  374.809033][    C0]  ? ila_nf_input+0x1bd/0x620
[  374.813782][    C0]  ila_nf_input+0x1ee/0x620
[  374.818358][    C0]  ? __pfx_ila_nf_input+0x10/0x10
[  374.823522][    C0]  nf_hook_slow+0xbb/0x200
[  374.827996][    C0]  nf_hook.constprop.0+0x42e/0x750
[  374.833187][    C0]  ? __pfx_ip6_rcv_finish+0x10/0x10
[  374.838439][    C0]  ? __pfx_nf_hook.constprop.0+0x10/0x10
[  374.844142][    C0]  ? sock_wfree+0x46a/0x880
[  374.848693][    C0]  ? __pfx_ip6_rcv_finish+0x10/0x10
[  374.853945][    C0]  ? __pfx_ipv6_rcv+0x10/0x10
[  374.858662][    C0]  ipv6_rcv+0xa4/0x680
[  374.862773][    C0]  ? __pfx_ipv6_rcv+0x10/0x10
[  374.867490][    C0]  __netif_receive_skb_one_core+0x12e/0x1e0
[  374.873471][    C0]  ? __pfx___netif_receive_skb_one_core+0x10/0x10
[  374.879951][    C0]  ? trace_lock_acquire+0x14a/0x1d0
[  374.885204][    C0]  ? process_backlog+0x3f1/0x15f0
[  374.890292][    C0]  ? process_backlog+0x3f1/0x15f0
[  374.895379][    C0]  __netif_receive_skb+0x1d/0x160
[  374.900485][    C0]  process_backlog+0x443/0x15f0
[  374.905403][    C0]  __napi_poll.constprop.0+0xb7/0x550
[  374.910844][    C0]  net_rx_action+0xa92/0x1010
[  374.915587][    C0]  ? __pfx_net_rx_action+0x10/0x10
[  374.920760][    C0]  ? __pfx_mark_lock+0x10/0x10
[  374.925585][    C0]  ? rcu_is_watching+0x12/0xc0
[  374.930407][    C0]  ? trace_rcu_utilization+0x100/0x160
[  374.935927][    C0]  ? rcu_core+0xada/0x14d0
[  374.940401][    C0]  ? mark_held_locks+0x9f/0xe0
[  374.945229][    C0]  handle_softirqs+0x213/0x8f0
[  374.950047][    C0]  ? __pfx_handle_softirqs+0x10/0x10
[  374.955389][    C0]  irq_exit_rcu+0xbb/0x120
[  374.959855][    C0]  sysvec_apic_timer_interrupt+0xa4/0xc0
[  374.965581][    C0]  </IRQ>
[  374.968546][    C0]  <TASK>
[  374.971510][    C0]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  374.977583][    C0] RIP: 0010:lock_acquire.part.0+0x155/0x380
[  374.983532][    C0] Code: b8 ff ff ff ff 65 0f c1 05 70 5c 98 7e 83 f8 01 0f 85 d0 01 00 00 9c 58 f6 c4 02 0f 85 e5 01 00 00 48 85 ed 0f 85 b6 01 00 00 <48> b8 00 00 00 00 00 fc ff df 48 01 c3 48 c7 03 00 00 00 00 48 c7
[  375.003171][    C0] RSP: 0018:ffffc90004ebf5d0 EFLAGS: 00000206
[  375.009284][    C0] RAX: 0000000000000046 RBX: 1ffff920009d7ebb RCX: 0000000000000001
[  375.017316][    C0] RDX: 0000000000000001 RSI: ffffffff8b4ccbe0 RDI: ffffffff8bb135a0
[  375.025315][    C0] RBP: 0000000000000200 R08: 0000000000000000 R09: fffffbfff2d32788
[  375.033332][    C0] R10: ffffffff96993c47 R11: 0000000000000000 R12: 0000000000000000
[  375.041347][    C0] R13: ffffffff8ddb7800 R14: 0000000000000000 R15: 0000000000000000
[  375.049382][    C0]  ? __pfx_lock_acquire.part.0+0x10/0x10
[  375.055084][    C0]  ? rcu_is_watching+0x12/0xc0
[  375.059893][    C0]  ? trace_lock_acquire+0x14a/0x1d0
[  375.065149][    C0]  ? page_ext_get+0x34/0x310
[  375.069798][    C0]  ? lock_acquire+0x2f/0xb0
[  375.074360][    C0]  ? page_ext_get+0x34/0x310
[  375.079008][    C0]  page_ext_get+0x3a/0x310
[  375.083487][    C0]  ? page_ext_get+0x34/0x310
[  375.088143][    C0]  __reset_page_owner+0x32/0x400
[  375.093162][    C0]  free_unref_folios+0x956/0x1310
[  375.098264][    C0]  folios_put_refs+0x551/0x750
[  375.103099][    C0]  ? __pfx_folios_put_refs+0x10/0x10
[  375.108456][    C0]  ? lock_acquire+0x2f/0xb0
[  375.113052][    C0]  ? mlock_drain_local+0x6f/0x4f0
[  375.118152][    C0]  free_pages_and_swap_cache+0x45f/0x510
[  375.123853][    C0]  ? __pfx_free_pages_and_swap_cache+0x10/0x10
[  375.130095][    C0]  ? hlock_class+0x4e/0x130
[  375.134664][    C0]  ? __pfx___might_resched+0x10/0x10
[  375.139995][    C0]  ? mark_held_locks+0x9f/0xe0
[  375.144829][    C0]  __tlb_batch_free_encoded_pages+0xf9/0x290
[  375.150880][    C0]  tlb_finish_mmu+0x168/0x7b0
[  375.155628][    C0]  exit_mmap+0x3df/0xb30
[  375.159957][    C0]  ? __pfx_exit_mmap+0x10/0x10
[  375.164783][    C0]  ? __mutex_lock+0x1a6/0x9c0
[  375.169530][    C0]  __mmput+0x12a/0x480
[  375.173648][    C0]  mmput+0x62/0x70
[  375.177414][    C0]  do_exit+0x9bf/0x2d70
[  375.181625][    C0]  ? do_group_exit+0x1c3/0x2a0
[  375.186457][    C0]  ? __pfx_lock_release+0x10/0x10
[  375.191548][    C0]  ? do_raw_spin_lock+0x12d/0x2c0
[  375.196623][    C0]  ? __pfx_do_exit+0x10/0x10
[  375.201265][    C0]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  375.206694][    C0]  do_group_exit+0xd3/0x2a0
[  375.211255][    C0]  __x64_sys_exit_group+0x3e/0x50
[  375.216333][    C0]  x64_sys_call+0x14a9/0x16a0
[  375.221094][    C0]  do_syscall_64+0xcd/0x250
[  375.225650][    C0]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  375.231607][    C0] RIP: 0033:0x7feb4f15da90
[  375.236060][    C0] Code: Unable to access opcode bytes at 0x7feb4f15da66.
[  375.243110][    C0] RSP: 002b:00007ffdac993628 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7
[  375.251576][    C0] RAX: ffffffffffffffda RBX: 00007feb4f24e860 RCX: 00007feb4f15da90
[  375.259585][    C0] RDX: 00000000000000e7 RSI: 000000000000003c RDI: 0000000000000001
[  375.267599][    C0] RBP: 00007feb4f24e860 R08: 00007ffdac9934a0 R09: 00007ffdac993580
[  375.275621][    C0] R10: 00007ffdac9934e0 R11: 0000000000000246 R12: 0000000000000000
[  375.283639][    C0] R13: 0000000000000001 R14: 00007feb4f252658 R15: 0000000000000001
[  375.291660][    C0]  </TASK>
[  375.295287][    C0] Kernel Offset: disabled
[  375.299623][    C0] Rebooting in 86400 seconds..