last executing test programs: 3m4.031622161s ago: executing program 32 (id=1432): socket(0xa, 0x5, 0x0) setsockopt$auto(0x400000000000003, 0x29, 0x43, 0xffffffffffffffff, 0x0) mmap$auto(0x2, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r0 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_SMC_NETLINK_GET_DEV_SMCD(r1, &(0x7f0000004380)={0x0, 0x0, &(0x7f0000004340)={&(0x7f0000004300)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB='\v'], 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x810) syz_genetlink_get_family_id$auto_TIPCv2(&(0x7f0000000040), r1) read$auto(r1, &(0x7f0000000100)='nl80211\x00', 0xbe62) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="12"], 0x1ac}}, 0x40000) syz_genetlink_get_family_id$auto_SMC_GEN_NETLINK(&(0x7f0000000000), r0) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x100002, &(0x7f00000001c0)={0x0, 0x20000000000010c0}, 0x2000001, 0x0, 0xfffffffffffffffd, 0x1000}, 0x7}, 0x3, 0x2000) mknod$auto(&(0x7f0000000140)='./file0\x00', 0x7ee, 0x4) 2m56.850020127s ago: executing program 33 (id=1471): r0 = open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x20) chmod$auto(&(0x7f00000000c0)='./file0\x00', 0xf4ba) open(&(0x7f0000000180)='./file0\x00', 0x50000, 0x8) execve$auto(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) chroot$auto(&(0x7f0000000000)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) execve$auto(&(0x7f0000000080)='./file0\x00', &(0x7f0000000240)=&(0x7f0000000200)='team_slave_1\x00', 0x0) execve$auto(&(0x7f0000000100)='./file0\x00', &(0x7f0000000040)=&(0x7f0000000380)='t\x94\x12m_\xce\xd5(\x8d&\x8a\xbcs\x95\x0e\xb0N\x94\x9b\xe0[gb4\x91\x05\xcc\x01\x92\x0e\xeb\xfcV\xf7\xd7\xbas1w\xe9\x9c\xdd\x9d\'w\xf78\xbc\xef\xb8\xbe\xe7\xa56\tI\at+u\xf4\xd8\xa4l\xcd\x877<:\x14\x01>7\xe9\x1cz\xdd\xe4G\x11\xbdC\x1al\x06\x9e\t\x18\xc2ue\xbb\xdcK\xfb\x82-\xa3\xb0#\xcf\x97\x9bD\x7fIM\x92le\xf4/\x1d|\x11\xb3O\x9fRF(\vA\x96\":\xd2T\x1c\xa1\x96W\xe2\x8e3\xe6', &(0x7f0000000340)=&(0x7f0000000300)='{-(%\x00') 2m26.029927878s ago: executing program 3 (id=1576): syslog$auto(0x0, &(0x7f0000000080)='\xfevZ\xcdo\xa1w\"\xb5\xef\x95\xd4B\xd6\xff\xa6\b\x00\x00\x00v\xfc\"\xa2\xd6\x1cqG!S1\x92\x10\x9b\x99\xfdz\x999G P,al\xa2\xbf$]\x1e\xf6z\x83\x01nl\x16\xc3U\xb9\xe7\x18\xf1*\xacN\xa7;>\x9d9\x96\x9e+\x7f\x01b\x9c\ni\xb1L\x81\xcd\xf1\xefB\xaf?\xf4\xfe\xb79\xf0H\x12.\x15\x00'/114, 0x6) fcntl$auto(0x300000000000000, 0x402, 0x80000004) setreuid$auto(0x3, 0x7) get_mempolicy$auto(&(0x7f00000001c0)=0x5, 0x0, 0x2d0000000000000, 0x59, 0x4) r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x200006, 0x2, 0x40eb1, 0x602, 0x300000000000) r1 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000010c0), 0xffffffffffffffff) sendmsg$auto_CTRL_CMD_GETPOLICY(r0, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x20, r1, 0x301, 0x4070bd25, 0x25dfdbff, {}, [@CTRL_ATTR_FAMILY_NAME={0xc, 0x2, 'nl80211\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x30000881}, 0xc040810) recvfrom$auto(0x3, 0x0, 0x800000000e, 0xfffff4a4, 0x0, 0xfffffffffffffffd) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_SMC_PNETID(&(0x7f0000000440), 0xffffffffffffffff) close_range$auto(0x0, 0xfffffffffffff000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x3, 0x6) mmap$auto(0x0, 0x8000000000000000, 0x9, 0xffffffff, 0x7, 0xee) madvise$auto(0x0, 0x7ffffffffffffffc, 0xc) mremap$auto(0x4000, 0x1fee0, 0x3fd6, 0x3, 0xfffff000) syz_genetlink_get_family_id$auto_ethtool(&(0x7f00000003c0), 0xffffffffffffffff) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) fanotify_init$auto(0x5, 0x2) io_uring_setup$auto(0x6, 0x0) io_uring_setup$auto(0x6, 0x0) socket(0xa, 0x801, 0x106) connect$auto(0x3, &(0x7f0000000140)={0xa, @sa_data_min="c4aeed448dc7fe8000"}, 0x55) ioctl$auto(0x3, 0x5411, 0x38) syslog$auto(0x9, &(0x7f0000000000)='^:\x00', 0x6d1f) 2m25.691318599s ago: executing program 3 (id=1579): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r0 = syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff) get_mempolicy$auto(0x0, &(0x7f0000000140)=0x6f89, 0x2, 0x8, 0x9) bpf$auto(0x0, &(0x7f0000000100)=@bpf_attr_4={0x1e, 0x4, 0x80000001, 0x8}, 0x6f4) socket(0xa, 0x5, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) shutdown$auto(0x200000003, 0x2) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) socket(0x15, 0x5, 0x0) recvmmsg$auto(0x3, 0x0, 0x3, 0x4d, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_OVS_FLOW_CMD_GET(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010029bd7000fedbdf2503000000040008000c000180080010"], 0x24}, 0x1, 0x0, 0x0, 0x40010}, 0x800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0x1ac}}, 0x801) r2 = socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x3, 0xa) read$auto(0x3, 0x0, 0xf34) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) setsockopt$auto(0x3, 0x1, 0x1d, 0x0, 0x9) clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) setsockopt$auto(0x200000000000003, 0x1, 0x29, 0x0, 0x300) clock_gettime$auto(0x1, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0xa00) r3 = syz_genetlink_get_family_id$auto_wireguard(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$auto_WG_CMD_SET_DEVICE(r2, &(0x7f00000028c0)={0x0, 0x0, &(0x7f0000002880)={&(0x7f0000000000)={0x30, r3, 0x21, 0x70bd26, 0x25dfdbfe, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e20}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x80) 2m24.862599593s ago: executing program 3 (id=1584): socket(0xa, 0x801, 0x84) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000021}, 0x8004) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) connect$auto(0x3, &(0x7f0000000140)={0xa, @sa_data_min="c4aeed448dc7fe8000007400"}, 0x55) select$auto(0x6, 0x0, &(0x7f0000000100)={[0x20000000000d, 0x203, 0x3, 0xc, 0x5, 0x3, 0x5, 0x2000000000000002, 0x9, 0x8, 0x7bb4, 0xa, 0x4, 0xaab, 0x5, 0x4006]}, 0x0, 0x0) connect$auto(0x3, &(0x7f0000000140)={0xa, @sa_data_min="c4aeed448dc7fe8000"}, 0x55) shutdown$auto(0x200000003, 0x2) setsockopt$auto(0x3, 0x10000000084, 0x79, 0x0, 0x8) 2m23.970837714s ago: executing program 3 (id=1591): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="147b5a3a693397bd0e0a06257c46783d5026f463c9d0dbc62e000000", @ANYRES16=0x0, @ANYBLOB="040027bd7000fbdbdf2514000000"], 0x14}, 0x1, 0x0, 0x0, 0x48891}, 0x20) bpf$auto(0x0, &(0x7f0000000280)=@bpf_attr_4={0x8000000000000001, 0x4, 0xffff, 0x8}, 0x6f4) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_DEBUG_GET(r0, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x14, r1, 0x400, 0x70bd2b, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x400) setsockopt$auto(0x3, 0x1, 0x21, 0x0, 0x9) syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000040), r0) mq_notify$auto(0x5cf5, &(0x7f00000006c0)={@sival_ptr=0x0, 0x3, 0x2, @_sigev_thread={0x0, 0x0}}) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x848000000015, 0x805, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'macvtap0\x00'}) bind$auto(0x3, &(0x7f0000000000)={0x2, @sockaddr_1_1={"90927f"}}, 0x68) select$auto(0xfffffffd, 0x0, 0x0, 0x0, 0x0) connect$auto(0x3, &(0x7f0000000140)={0xa, @sa_data_min="c4aeed448dc7fe8000"}, 0x55) sendmsg$auto_HSR_C_GET_NODE_STATUS(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x200004d0}, 0x40) close_range$auto(0x2, 0x8, 0x0) 2m23.452391709s ago: executing program 3 (id=1594): set_mempolicy$auto(0x6, &(0x7f0000000000)=0x7e, 0x4) open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x20) chmod$auto(&(0x7f00000000c0)='./file0\x00', 0xf4ba) open(&(0x7f0000000180)='./file0\x00', 0x50000, 0x8) mmap$auto(0x1000000000000000, 0x5, 0x6, 0x8012, 0x3, 0xfffffffffffffff7) open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x100) sendfile$auto(0x6, 0x3, 0x0, 0x8000) mmap$auto(0x1, 0x80000001, 0xe2, 0xeb0, 0x401, 0x8000) prctl$auto(0x1000000003b, 0x8000000000001, 0x4, 0x5, 0x10006) unshare$auto(0x40000080) vmsplice$auto(0x3, 0x0, 0x9, 0x7) madvise$auto(0xa6f, 0x24c, 0x817) madvise$auto(0x0, 0x20200, 0x15) socket(0x2, 0x5, 0x0) munmap$auto(0x20001000, 0x7) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) keyctl$auto(0x2000000000000016, 0x1000, 0xfffffffffffffffc, 0x102, 0x7ffffffd) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x808000) socket$nl_generic(0x10, 0x3, 0x10) socket(0x18, 0xa, 0x8e5) socket(0x2, 0x3, 0xa) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket(0x11, 0xa, 0xfffffffc) socket(0xa, 0x801, 0x84) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x1, 0xf) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) pipe2$auto(0x0, 0x80) setsockopt$auto(0x3, 0x1, 0xd, 0x0, 0x8) 2m22.366911545s ago: executing program 3 (id=1602): statmount$auto(0x0, &(0x7f0000000040)={0x0, 0x0, 0x5ae, 0x5, 0x7, 0x8000000009, 0x10000, 0x10, 0x5, 0x4, 0x6, 0x9, 0x5, 0x9, 0x1ff, 0x7698, 0x8, 0x10000, 0x0, 0x6, [0x6f, 0x2, 0x80000001, 0x800, 0x4000000001, 0x57b3, 0x81, 0x6, 0xf437, 0x7, 0xa60, 0x7, 0x6, 0x0, 0x1000001, 0xffffffffffffffe6, 0x0, 0x8, 0x4, 0xffffffffffff9316, 0x807fff, 0x3, 0xca, 0x2000000008, 0x8000000000000007, 0x8000, 0xe, 0xffffffffffffff1d, 0x2, 0x80, 0x5a72c917, 0x6, 0xa, 0x7828, 0x4, 0x40, 0x80000001, 0xd, 0xd, 0x7fffffff, 0x0, 0x100000000005, 0x5, 0x0, 0x1000000000000e47, 0x7fffffffffffffff, 0x4, 0x1, 0x85]}, 0x8, 0x0) sendmsg$auto_HWSIM_CMD_DEL_RADIO(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="01"], 0x14}, 0x1, 0x0, 0x0, 0x20040800}, 0x24004000) socket(0x10, 0x2, 0x6) mmap$auto(0x0, 0xfff, 0xdf, 0x9b72, 0x400, 0x28000) rseq$auto(&(0x7f0000000300)={0x0, 0x9, 0x0, 0x4, 0xffffffff, 0xfffffffe}, 0x8000, 0x0, 0x3) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) timerfd_create$auto(0x7d55, 0x4) 2m5.035004821s ago: executing program 34 (id=1605): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x8, 0x3ff57696, 0x9b72, 0x5, 0x8000000000008000) madvise$auto(0x0, 0xffffffffffff0004, 0x19) mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) r0 = socket(0x10, 0x2, 0x0) socket(0x27, 0x2, 0x0) prctl$auto(0x1d, 0x8000000000000001, 0x8, 0x5, 0x1) mknod$auto(&(0x7f00000003c0)=':,\x00\xbd\x80\xd6\x002\xb37\xff\x1a\x9e99\xda\xd1v\'\xc6\xd2Fw;\x00v\xdce\xad\xf4\xdb\xc7\x946\xe4\f\x9el]L+\x06\x130V\x1b,d\x8f\xa0\xabDUdk\xac\x82\\tyQ\xd8j\a\x1a[\xdb\x96\x1f{2\x04\xc5Y\xc1@\x0e\xeeWZ\x94N\xd4\xc8q=\x9b\xd1\x7fR3\xb6`\x00\xb3\xe5|1\xba\r\x85\x89\xfe\xed\xe1\xad`\x92\xc7\x9c\xd7\xd8\x15\t&\xb7\xfc\x82\xc4\xd3J\xae\x810\x19\x14\t\xc2\xa5V\xaa\x8d\x04\xf5\xf3\xd6\xd1\xe9k\xaf\x1a\xc6u\x96\xf7\xaa\x84\x92\x995m\xf9O\xc0\x1e\xa05\xdb\xa5\xae\r\x06\xe6\xc3\xd0\xf8:\xf7\xc5u\x91\xf8\x91\xee\xd8y\xb8\xc1)\xad\x05\xeb\xe9\xab\r\x9a@\aa(\x1a\xa4\xc1\xcf\\\xf0\xc3~\xbbd\x94\x9c\x02\xd4\xfc\xd2`\xd9\x83{-\x81zY\\\xac!#\xea\xba\x86)\xe9\xbc\x82\xf6\xd2\x7f\xdb\xa1\xd5\x89|\xa0O\xfcqZ\x85@A\x90\"\x11L\xdd\xa5\x9f\xf5', 0x20e9, 0x103) open(&(0x7f0000000280)=':,\x00\xbd\x80\xd6\x002\xb37\xff\x1a\x9e99\xda\xd1v\'\xc6\xd2Fw;\x00v\xdce\xad\xf4\xdb\xc7\x946\xe4\f\x9el]L+\x06\x130V\x1b,d\x8f\xa0\xabDUdk\xac\x82\\tyQ\xd8j\a\x1a[\xdb\x96\x1f{2\x04\xc5Y\xc1@\x0e\xeeWZ\x94N\xd4\xc8q=\x9b\xd1\x7fR3\xb6`\x00\xb3\xe5|1\xba\r\x85\x89\xfe\xed\xe1\xad`\x92\xc7\x9c\xd7\xd8\x15\t&\xb7\xfc\x82\xc4\xd3J\xae\x810\x19\x14\t\xc2\xa5V\xaa\x8d\x04\xf5\xf3\xd6\xd1\xe9k\xaf\x1a\xc6u\x96\xf7\xaa\x84\x92\x995m\xf9O\xc0\x1e\xa05\xdb\xa5\xae\r\x06\xe6\xc3\xd0\xf8:\xf7\xc5u\x91\xf8\x91\xee\xd8y\xb8\xc1)\xad\x05\xeb\xe9\xab\r\x9a@\aa(\x1a\xa4\xc1\xcf\\\xf0\xc3~\xbbd\x94\x9c\x02\xd4\xfc\xd2`\xd9\x83{-\x81zY\\\xac!#\xea\xba\x86)\xe9\xbc\x82\xf6\xd2\x7f\xdb\xa1\xd5\x89|\xa0O\xfcqZ\x85@A\x90\"\x11L\xdd\xa5\x9f\xf5\x00', 0x20102, 0x100) preadv2$auto(0x3, &(0x7f0000001000)={0x0, 0xfff5}, 0x5, 0xffffffffffffffff, 0x7, 0x2e) futex$auto(&(0x7f0000000080)=0x2948, 0x0, 0x2948, &(0x7f00000000c0)={0x225c17d03}, 0x0, 0x5) futex$auto(&(0x7f0000000000)=0xf0fe, 0x5, 0x4, 0x0, &(0x7f0000000080)=0x9, 0x4000000) syz_genetlink_get_family_id$auto_IPVS(&(0x7f0000000380), r0) bpf$auto(0x5, &(0x7f0000000000)=@bpf_attr_3={0x8, 0x9067, 0x18c, 0x4, 0x2, 0x8, 0x5, 0x57b8, 0xfffffff8, "63acf0e05b2d33ebc15774e816ef77cf", 0x0, 0x543, 0x4, 0x207, 0x3, 0x4, 0x4, 0x2, 0xe, 0xa, @attach_prog_fd, 0x166, 0x7fb, 0x80000200006, 0xa, 0x48000000, 0xa7c2}, 0x102) bind$auto(0x3, &(0x7f0000000040)={0xa, @sa_data_min="001000000000fe8000"}, 0x69) close_range$auto(0x0, 0xfffffffffffff000, 0x2) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00') r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/net\x00') sendmsg$auto_HANDSHAKE_CMD_ACCEPT(r1, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x5c, 0x0, 0x200, 0x70bd2b, 0x25dfdbff, {}, [@HANDSHAKE_A_ACCEPT_HANDLER_CLASS={0x8, 0x2, 0x2877}, @HANDSHAKE_A_ACCEPT_HANDLER_CLASS={0x8, 0x2, 0x7f}, @HANDSHAKE_A_ACCEPT_HANDLER_CLASS={0x8}, @HANDSHAKE_A_ACCEPT_HANDLER_CLASS={0x8, 0x2, 0x8}, @HANDSHAKE_A_ACCEPT_HANDLER_CLASS={0x8, 0x2, 0x8}, @HANDSHAKE_A_ACCEPT_HANDLER_CLASS={0x8, 0x2, 0x2}, @HANDSHAKE_A_ACCEPT_HANDLER_CLASS={0x8}, @HANDSHAKE_A_ACCEPT_HANDLER_CLASS={0x8, 0x2, 0x1000}, @HANDSHAKE_A_ACCEPT_HANDLER_CLASS={0x8, 0x2, 0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x1}, 0x44004) ioctl$NS_GET_PARENT(r2, 0xb701, 0x0) socket(0x1d, 0x2, 0x7) setsockopt$auto(r0, 0x6b, 0x1, 0xffffffffffffffff, 0x4000) madvise$auto(0x0, 0x80000001, 0x8) inotify_add_watch$auto(0x4, 0x0, 0x80000000) r3 = socket(0x10, 0x2, 0xc) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="18000000", @ANYRES8=r3, @ANYRES8=r4], 0x18}, 0x1, 0x0, 0x0, 0x60008004}, 0x84) sendto$auto(r4, &(0x7f00000000c0)=[0x6, 0x105, 0xb3f4, 0xfff, 0x5fd8], 0x6, 0xfffffff7, &(0x7f0000000140)={0x0, @sa_data_min="ad3c2d1a9f27f8235d6c14e281af"}, 0x9) fsopen$auto(&(0x7f0000000100)='\x00', 0xfffffff2) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) 1m55.045727515s ago: executing program 35 (id=1602): statmount$auto(0x0, &(0x7f0000000040)={0x0, 0x0, 0x5ae, 0x5, 0x7, 0x8000000009, 0x10000, 0x10, 0x5, 0x4, 0x6, 0x9, 0x5, 0x9, 0x1ff, 0x7698, 0x8, 0x10000, 0x0, 0x6, [0x6f, 0x2, 0x80000001, 0x800, 0x4000000001, 0x57b3, 0x81, 0x6, 0xf437, 0x7, 0xa60, 0x7, 0x6, 0x0, 0x1000001, 0xffffffffffffffe6, 0x0, 0x8, 0x4, 0xffffffffffff9316, 0x807fff, 0x3, 0xca, 0x2000000008, 0x8000000000000007, 0x8000, 0xe, 0xffffffffffffff1d, 0x2, 0x80, 0x5a72c917, 0x6, 0xa, 0x7828, 0x4, 0x40, 0x80000001, 0xd, 0xd, 0x7fffffff, 0x0, 0x100000000005, 0x5, 0x0, 0x1000000000000e47, 0x7fffffffffffffff, 0x4, 0x1, 0x85]}, 0x8, 0x0) sendmsg$auto_HWSIM_CMD_DEL_RADIO(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="01"], 0x14}, 0x1, 0x0, 0x0, 0x20040800}, 0x24004000) socket(0x10, 0x2, 0x6) mmap$auto(0x0, 0xfff, 0xdf, 0x9b72, 0x400, 0x28000) rseq$auto(&(0x7f0000000300)={0x0, 0x9, 0x0, 0x4, 0xffffffff, 0xfffffffe}, 0x8000, 0x0, 0x3) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) timerfd_create$auto(0x7d55, 0x4) 1m55.040286713s ago: executing program 5 (id=1612): setresuid$auto(0x0, 0x8, 0x8000) r0 = socket(0x2, 0x1, 0x0) fchown$auto(r0, 0x8000, 0x7) mq_open$auto(&(0x7f0000000000)='-\x00', 0x9d2, 0x0, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) mount$auto(0x0, &(0x7f0000000040)='}[,&*}\x00\x0e\x15F\xf7\x1a\xd1K+\xedy\xc6\x9bb\x94\xb4^\xc2\x83%\xfbw}\xfb_P\"\x19\xdfi\xe9hA|Q\x8a_F\x04:Q\x90\'\x06', &(0x7f0000000140)='nfsd\x00', 0x10000, 0x0) open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x0) fallocate$auto(0x3, 0x3, 0xe, 0x7) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) memfd_create$auto(&(0x7f0000000040)='A^^\x02\x00\xef\x97\x8aY\x00\x00\xd2\x8c\xb05\x03\\\xb2\xbf247{\xde\t8\f\x00\x00\v\x00\x82\xcc\"K\xe1IIT\x00'/54, 0x8) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1a00"], 0x1ac}}, 0x40000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x2, 0x0) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) mount$auto(0x0, &(0x7f0000000740)='}[,&*}\x00', 0x0, 0xfffe, 0x0) chdir$auto(&(0x7f0000000000)='}[,&*}\x00') close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) open(&(0x7f0000000100)='.\x00', 0x0, 0x408) getdents$auto(0x0, 0x0, 0x18) socket(0xa, 0x801, 0x84) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000021}, 0x8004) connect$auto(0x3, &(0x7f0000000140)={0xa, @sa_data_min="c4aeed448dc7fe80000000000100"}, 0x55) connect$auto(0x3, &(0x7f0000000140)={0xa, @sa_data_min="c4aeed448dc7fe8000"}, 0x55) shutdown$auto(0x200000003, 0x2) write$auto(0x3, 0x0, 0x34000) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) clone$auto(0x1001, 0x4, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x49) 1m54.725757839s ago: executing program 5 (id=1615): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x100000001, 0x4, 0x1, 0x16, 0x81, 0x5) rseq$auto(&(0x7f0000000300)={0xe, 0x401, 0x0, 0x6, 0xffffffff, 0x2000002}, 0x8000, 0x0, 0x6) prctl$auto(0x1000000003b, 0x1, 0x404, 0x6, 0x8000000000007) r0 = open(&(0x7f0000000000)='./file0\x00', 0x4749c2, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x6, 0x800008000) write$auto(0x3, 0x0, 0x296) r1 = socket(0x2, 0x1, 0x106) listen$auto(r0, 0x81) shutdown$auto(0x200000003, 0x2) sendmsg$auto_WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="df8300e8ae56b927af", @ANYRESOCT=r1, @ANYRES64=r1, @ANYRES8, @ANYRESOCT=r0], 0x14}, 0x1, 0x0, 0x0, 0x4008810}, 0x2000c041) bind$auto(0x3, &(0x7f0000000080)={0x2, @sockaddr_1_1}, 0x6b) connect$auto(0x3, &(0x7f00000000c0)={0x2, @sockaddr_1_1}, 0x55) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) socket$nl_generic(0x10, 0x3, 0x10) fchdir$auto(r1) mmap$auto(0x0, 0xc, 0x9c0f, 0x44eb2, 0x10006, 0x300000000000) getpeername$auto(0x3, 0x0, 0x0) write$auto(0x3, 0x0, 0xfffffdef) mmap$auto(0x0, 0x5, 0x1, 0x40eb2, 0x402, 0x300000000000) unshare$auto(0x40000080) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, 0x0, 0x400c000) write$auto(0x3, 0x0, 0x81) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x4, 0x81, 0x9b72, 0x2, 0x8001) setsockopt$auto(0xffffffffffffffff, 0x9, 0x2, 0x0, 0xf) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x1000000, 0xffffffffffff0001, 0x15) 1m53.994386322s ago: executing program 5 (id=1617): mmap$auto(0x0, 0x400009, 0xdf, 0x9b72, 0x8000000000000003, 0x8000) r0 = socket(0x18, 0x801, 0x2) symlink$auto(&(0x7f0000000000)='\xe4\'+@\\+%\x00', &(0x7f0000000040)='\'--[[+\\\x00') r1 = open(0x0, 0x642, 0x91) mmap$auto(0x80, 0x2, 0x4000000000000, 0x12, 0xffffffff, 0xe) r2 = socket(0x15, 0x5, 0x0) setsockopt$auto(r2, 0x114, 0x8, 0x0, 0x8001) mmap$auto(0x0, 0x400008, 0xdb, 0x113, 0x2, 0x8000) ioperm$auto(0x7, 0x7f, 0x48000000) setpgid$auto(0x0, 0x0) madvise$auto(0x0, 0xffffffffffff0004, 0x19) mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) getcwd$auto(0x0, 0xffffffffffffffff) mknod$auto(&(0x7f0000000040)='\xfd\x90\x8f2\x14\x92\x00\xbf\xdf\xcf\x9a\xae}\xd9\xf95\xc5gV\x82\f\xe5h\xfe\x83\xe4\xbe\x8c\x1f\xa5\xf1_T\xde\xf7\xd4\x83D\x9eXS\xd6\x90T\xc1v\xad#\xc4q\x8b\xed2\xadW:0\xef\x9c.=\xba\x0fy\x8f\xcd\xd6\xde\xa9i\xec\xe8\xca\x9f\xf3\x82b\xa2y\xa87J\xfc \xc5\xd8\x80\xba\xaaV\x8f{\x1f\x1b\xb0\n\x97\\\xa7\xe3\xdf\xc29-*;#r\xc8\xd1\x14RcF\x87\xe4\x1c\x1fGL\xa5\x19\x90\xd6\x8d*\xe6\b(\x1a\xea\x95\xdc\xa6)5\xae&yAl\x1e\xe3j Lp\x91\r\xed%\xafZ\xf8w\xf2}\xcdGS\xce\xb9\xdck\x86\x00.6\xe6{\xc1\x00\x1bW5\x81\xda!\xcb.O\xa9\xf3\xa7\x88+\xb9\xf3\x9a7\xa4\xe6)<\xa79\xa4\x87\\\xb4\xbf\v\x03\x87\xac\x87r\x02\x05\xdb\xe4\xde,V\xb6G\xba.WR\xe2<~\xdd\xb2\xe53hj_;\xa5qm\x92\xc7P\xc9.\x82w8\x1f\xfcX\xe4\x14\xc72cC\xd3\x00'/263, 0x1, 0x4) sendmsg$auto_NL80211_CMD_NOTIFY_RADAR(r1, &(0x7f0000000300)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000002c0)={&(0x7f0000000800)={0x5b4, 0x0, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@NL80211_ATTR_OBSS_COLOR_BITMAP={0xc, 0x12e, 0x9}, @NL80211_ATTR_USE_RRM={0x4}, @NL80211_ATTR_BSSID={0x27, 0xf5, "2fb58d69d2e6cbfea5a376892e1a4abdc1d2200d568ae8507806958de8d90a903c9a50"}, @NL80211_ATTR_PREV_BSSID={0x6f, 0x4f, "27abd54a3b38c194f2cc92b6741562b2097ff6969bde1082289fe58f457a26bc4842abdedf4570f4c8cd49f3c43b2f68c6b62dc4b5a68408addc63cbad69a75c1fce38979c55aedddd873e0ed853fd9737230e5cb69b48382b44fe83e2ab061c73ea562f7bdd6e1727787f"}, @NL80211_ATTR_IE={0x4a4, 0x2a, "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"}, @NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0x4}, @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}, @NL80211_ATTR_IE_RIC={0x1b, 0xb2, "43b805e47fac1a0b7add4cb90cfca0c959abe475e77548"}, @NL80211_ATTR_FILS_ERP_REALM={0x21, 0xfa, "ced3681b4dada9682f50e387d00f6f5ff183792355c4dc45b64613db8b"}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x7f}]}, 0x5b4}, 0x1, 0x0, 0x0, 0x4080000}, 0x20000055) rename$auto(&(0x7f0000000180)='\xfd\x90\x8f2\x14\x92\x00\xbf\xdf\xcf\x9a\xae}\xd9\xf95\xc5gV\x82\f\xe5h\xfe\x83\xe4\xbe\x8c\x1f\xa5\xf1_T\xde\xf7\xd4\x83D\x9eXS\xd6\x90T\xc1v\xad#\xc4q\x8b\xed2\xadW:0\xef\x9c.=\xba\x0fy\x8f\xcd\xd6\xde\xa9i\xec\xe8\xca\x9f\xf3\x82b\xa2y\xa87J\xfc \xc5\xd8\x80\xba\xaaV\x8f{\x1f\x1b\xb0\n\x97\\\xa7\xe3\xdf\xc29-*;#r\xc8\xd1\x14RcF\x87\xe4\x1c\x1fGL\xa5\x19\x90\xd6\x8d*\xe6\b(\x1a\xea\x95\xdc\xa6)5\xae&yAl\x1e\xe3j Lp\x91\r\xed%\xafZ\xf8w\xf2}\xcdGS\xce\xb9\xdck\x86\x00.6\xe6{\xc1\x00\x1bW5\x81\xda!\xcb.O\xa9\xf3\xa7\x88+\xb9\xf3\x9a7\xa4\xe6)<\xa79\xa4\x87\\\xb4\xbf\v\x03\x87\xac\x87r\x02\x05\xdb\xe4\xde,V\xb6G\xba.WR\xe2<~\xdd\xb2\xe53hj_;\xa5qm\x92\xc7P\xc9.\x82w8\x1f\xfcX\xe4\x14\xc72cC\xd3\x00', 0x0) syz_genetlink_get_family_id$auto_nbd(&(0x7f00000007c0), 0xffffffffffffffff) mmap$auto(0x0, 0x400009, 0xdf, 0x9b72, 0x8000000000000003, 0x8000) getsockopt$auto(r0, 0x11c, 0x4, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 1m52.846816087s ago: executing program 5 (id=1620): syslog$auto(0x0, &(0x7f0000000080)='\xfevZ\xcdo\xa1w\"\xb5\xef\x95\xd4B\xd6\xff\xa6\b\x00\x00\x00v\xfc\"\xa2\xd6\x1cqG!S1\x92\x10\x9b\x99\xfdz\x999G P,al\xa2\xbf$]\x1e\xf6z\x83\x01nl\x16\xc3U\xb9\xe7\x18\xf1*\xacN\xa7;>\x9d9\x96\x9e+\x7f\x01b\x9c\ni\xb1L\x81\xcd\xf1\xefB\xaf?\xf4\xfe\xb79\xf0H\x12.\x15\x00'/114, 0x6) setreuid$auto(0x3, 0x7) get_mempolicy$auto(&(0x7f00000001c0)=0x5, 0x0, 0x2d0000000000000, 0x59, 0x4) r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x200006, 0x2, 0x40eb1, 0x602, 0x300000000000) r1 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000010c0), 0xffffffffffffffff) sendmsg$auto_CTRL_CMD_GETPOLICY(r0, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x20, r1, 0x301, 0x4070bd25, 0x25dfdbff, {}, [@CTRL_ATTR_FAMILY_NAME={0xc, 0x2, 'nl80211\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x30000881}, 0xc040810) recvfrom$auto(0x3, 0x0, 0x800000000e, 0xfffff4a4, 0x0, 0xfffffffffffffffd) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_SMC_PNETID(&(0x7f0000000440), 0xffffffffffffffff) close_range$auto(0x0, 0xfffffffffffff000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x3, 0x6) faccessat2$auto(0x1, &(0x7f0000000040)='\x00', 0x4, 0x1000) mmap$auto(0x0, 0x8000000000000000, 0x9, 0xffffffff, 0x7, 0xee) madvise$auto(0x0, 0x7ffffffffffffffc, 0xc) mremap$auto(0x4000, 0x1fee0, 0x3fd6, 0x3, 0xfffff000) syz_genetlink_get_family_id$auto_ethtool(&(0x7f00000003c0), 0xffffffffffffffff) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) fanotify_init$auto(0x5, 0x2) io_uring_setup$auto(0x6, 0x0) io_uring_setup$auto(0x6, 0x0) socket(0xa, 0x801, 0x106) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000021}, 0x8004) connect$auto(0x3, &(0x7f0000000140)={0xa, @sa_data_min="c4aeed448dc7fe8000"}, 0x55) ioctl$auto(0x3, 0x5411, 0x38) sendmsg$auto_ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000004c0)={0x0}, 0x1, 0x0, 0x0, 0x10001}, 0x0) syslog$auto(0x9, &(0x7f0000000000)='^:\x00', 0x6d1f) 1m52.712305511s ago: executing program 5 (id=1621): tkill$auto(0x80000000000001, 0x7) setuid$auto(0xe) keyctl$auto(0x2000000000000012, 0x7fff, 0x5069, 0x1, 0x65c) socket(0xa, 0x5, 0x0) shutdown$auto(0x200000003, 0x2) r0 = socket(0xa, 0x801, 0x100) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'hsr0\x00', 0x0}) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) madvise$auto(0x0, 0xffffffffffff0001, 0x17) sendmsg$auto_NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="1c00180095fdb1afb636ccef14397f2bfb08409f0d4fef386166d0a88e15b55362c7e189937bd3fc0141d1d45253259201acaf74a0ffa8e4777e3fd30fda7df7f5c06e18f6b58e64a5553ea722972f901bd296d3320655707e300d29e60e349d434274a7ac21585ff9cd6f0ef8443ad66eddb838795f34b44c5fd7296561724bcf657011a312c01d095511a6741eb3d1117e18e2a033597e6430eb9b86269b56a39d05aaa898715e74eaa9a419eba270e895fca196d4dcf0c60242760d583a25432bcf0187ae74d3a517ff0b91a5665c904147962b9cfe98c4", @ANYRES16=0x0, @ANYBLOB="010029bd7000fddbdf250200000008000300", @ANYRES32=r1, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x24048080}, 0x80) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) mincore$auto(0x1000, 0x8001, 0x0) setsockopt$auto(0x3, 0x10000000084, 0x2, 0x0, 0x8) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000a00), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_VENDOR(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000380)=ANY=[@ANYBLOB="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", @ANYRES16=r3, @ANYBLOB="230325bd7000fbdbdf25670000000800c300010000"], 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40088d4) connect$auto(0x3, &(0x7f0000000180)={0xa, @sa_data_min="8ed5de207bd494802440f68b38e5"}, 0x55) sendmsg$auto_NL80211_CMD_ADD_LINK(r0, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000300)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="94060000", @ANYRES16=0x0, @ANYBLOB="01002bbd7000fddbdf65940000000400cf000500f6000600000005001d00810000000600b300000000001e00940086636dffb3c2fa9a982d20dfb22fc36446a3d20f1cc666da2e140000040027c0400680006cac49f60e213f75ca2be7b68c86f44c395179b94b01e1f73313bf2c60732b86d6d3cc4062330f3d06afcd1e32f603a5fcce03074d01a8c331e206e41a6cc3a6454b6ed77f76f33a9ea6f076178aca323f125dfa87abc682fd8332a678a08e5d31a13018b328c39dc1162a28e1a99bb943f87e05a2af31d3a6f5b2ea9f4cc94ca7e4d2af6824ab3b9f6df7493ef26bf305beb76bf5c18808ba59c7d72970e95dbd1abaf0ad0f19c0aa56f94240e4789efc62373feb503ee5f591f930148194bd93982d160cefb31d4f671b2ef8e937f1914e59a8ea48bbdcafcd632cb321a0edf1e7186d9ad8ccea9f2a9940f15f4972d7d488bb2da690bc7c554ccde4570e03fc1260311084bdcf009f7698a341162279390f88a101717456f0a496edd20eb7913a55886d9bb2d6b40e208af2d89af8819ccb17f98aa7840da1e3472e5c608682137e57f8ac8c48c07ad0e1ccc8d8277c9b6c72427ad3473bab4da45abc738814e40f0c93dcfb2b571b76ab4e98aa48665a6d6e7019523a93c3ad0a7247bc10989944bb88718f42c6c25cc4e9449ece83afa6c8a56db81cd84c1435b6c6d5bcdc7263bdb0549d58556626816e8c4ba58e4a9b217dace1e1e9ecfc50a8ee40dc131ed92fe69d7a92d0f51c661002a2d1ab57296b3b2812d110dc85080e1e341898c3e896d9aedaa17a0d676d978fb2a3fdce2c507a0ca551455040b405d4dbb190df3aaa3661de6db17f7df4ad6898ef6687dc68e2cab0cc6e42cc63460106864ccb7042f27bf4ee7eb0074daab43c50b4532c776dd70346d1df3f046fc192b8203901c02334bd5e446e68499c1e11b0b1fbb988966cf58aefa38163c59bbe45d3c5927b9382ef9e722262da2b4e08add98e9d5a0e74d32e3e1647d61e791f801c329bd0a27f5758ea61e1e00076ecb9df9ca091bc3134c024cca77730adebe41af186253e99a857c2c8c32cbf81f915ce3a6cb9aa20029bdb870d9e22fdea7c46bf634f49414aa3f81315def943a784d592247bde1871208883e0bbb3da4f4ab57d06928fe663b23f0825c4fb7a123ad74f2ede5761b794fa41e490dd81ec6fbeb7beda6094cd50a83f9280987d72d714c71f25fa7547d4feabaf927642262c87949ee95896e700338a70c44d7df398d5a5735b8aad57a3bbe2dcba6f4aa12e38cdc0c6503ac1a2716a1f3164b8346a8da8f52e66b3f03ab3913b4ca1aa220ec2122dca0d533bf629653c24a5dcbd387fe34e347c05f7468f16b950ac39069ae72f160af6c04a883c5ea13aaeb972a11de74a955a490464f9cda80f3d61fd6fcc5df3983e487af53af5ae734009d467808664c9a012e0e303106c1de832090efadd47ff95a54b59b652335b37cc4550d7b42dd3689b7bdd66a51e8825b654401d194daced6d5a38e3e547c90051a8d2f95c45acff48033bfe543ddc8bd136efac3a0ddf33f5b90dfb21c3531d28267bb959d83b864176b63ca4903a6fd95a86f5edf705c3740718ca1a12c0941813d183b1ffd9116a68f8dcb9927fe381958b5bbe3c4d09644fd1b1234f744921ee9ffc651e3bd3f58b07f2b21f24053f6ac44ac7522b904420a2ba3185e8b53a9a89969f7a0f94bd20aa38f5c98225ac630903ef2540af70f375f697646404e98abbed13a784e2f9071c677c6310fc417192da1fa76dc918a749d36217452e4e11af6b86e68a0534d26999bc59740ffe4ea82d1201f84b8fb1520665ea976cf1dfe39c9737557469d4896ffe2951d4564d62827285cf53bff4663f47861efe126f33dcbeab0ade222e7f048a5c7877eb36c3c480818445a89fc503c280fc5d84e7052919f3b7ff3590959508c0e55007a46d3a1ca9227cd0e56eca5282897e175d30181969d61e3595909baad6c59ae463c94f89448fc0751da700017d8df9f6bc6ddb8a9c93aec1f94a1395b42df63690ac56ba407ecfa14533478533b7a278167e8c69ed4da1d7191f4d6ac3fc2adb66211d3488d3a57cbd5334a9ba1700184438af774ab0ee0714af58d351d3afa617c388aedaf7bea49b788787adc7c930acff3acf4e0d20ba525bda0fafb9f0515dd4c19850f3de412bfbcfd5e0fe50cc37cd8b7c467efd42d64168c0b597d1728bc613b3a22e15bff111e81039d80a46f76b49cd08df195724ee34e857c37ffc813c91d057ea5258186975b3fd9c814c52b649294a2196258ca2d570e0692f6793e1e37019895d4a8e47e8c863f7b296577b2168f011bef8ae4b14e8daa8"], 0x694}, 0x1, 0x0, 0x0, 0x4000}, 0x0) ioperm$auto(0x7, 0x6, 0x2) socket(0x11, 0x3, 0x2) fcntl$auto(0xff80000000000000, 0x406, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x5, 0x0) mq_open$auto(&(0x7f0000000000)='.\xf1e4\xdf\x16\x95kxE\xd9x\x15\xb0\xf6V\x93\xb4E\x06\xc5}l', 0x400056a, 0x9, 0x0) mq_notify$auto(0x7, 0x0) close_range$auto(0x2, 0x8000, 0x0) 1m52.273927058s ago: executing program 5 (id=1624): set_mempolicy$auto(0x6, &(0x7f0000000000)=0x7e, 0x4) open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x20) chmod$auto(&(0x7f00000000c0)='./file0\x00', 0xf4ba) open(&(0x7f0000000180)='./file0\x00', 0x50000, 0x8) mmap$auto(0x1000000000000000, 0x5, 0x6, 0x8012, 0x3, 0xfffffffffffffff7) open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x100) sendfile$auto(0x6, 0x3, 0x0, 0x8000) prctl$auto(0x1000000003b, 0x8000000000001, 0x4, 0x5, 0x10006) unshare$auto(0x40000080) writev$auto(0x1, &(0x7f0000000100)={0x0, 0x400000000000fdef}, 0x1) vmsplice$auto(0x3, 0x0, 0x9, 0x7) madvise$auto(0xa6f, 0x24c, 0x817) madvise$auto(0x0, 0x20200, 0x15) socket(0x2, 0x5, 0x0) munmap$auto(0x20001000, 0x7) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) keyctl$auto(0x2000000000000016, 0x1000, 0xfffffffffffffffc, 0x102, 0x7ffffffd) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x808000) socket$nl_generic(0x10, 0x3, 0x10) socket(0x18, 0xa, 0x8e5) socket(0x2, 0x3, 0xa) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket(0x11, 0xa, 0xfffffffc) socket(0xa, 0x801, 0x84) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x1, 0xf) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) pipe2$auto(0x0, 0x80) setsockopt$auto(0x3, 0x1, 0xd, 0x0, 0x8) 1m52.029814759s ago: executing program 36 (id=1624): set_mempolicy$auto(0x6, &(0x7f0000000000)=0x7e, 0x4) open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x20) chmod$auto(&(0x7f00000000c0)='./file0\x00', 0xf4ba) open(&(0x7f0000000180)='./file0\x00', 0x50000, 0x8) mmap$auto(0x1000000000000000, 0x5, 0x6, 0x8012, 0x3, 0xfffffffffffffff7) open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x100) sendfile$auto(0x6, 0x3, 0x0, 0x8000) prctl$auto(0x1000000003b, 0x8000000000001, 0x4, 0x5, 0x10006) unshare$auto(0x40000080) writev$auto(0x1, &(0x7f0000000100)={0x0, 0x400000000000fdef}, 0x1) vmsplice$auto(0x3, 0x0, 0x9, 0x7) madvise$auto(0xa6f, 0x24c, 0x817) madvise$auto(0x0, 0x20200, 0x15) socket(0x2, 0x5, 0x0) munmap$auto(0x20001000, 0x7) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) keyctl$auto(0x2000000000000016, 0x1000, 0xfffffffffffffffc, 0x102, 0x7ffffffd) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x808000) socket$nl_generic(0x10, 0x3, 0x10) socket(0x18, 0xa, 0x8e5) socket(0x2, 0x3, 0xa) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket(0x11, 0xa, 0xfffffffc) socket(0xa, 0x801, 0x84) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x1, 0xf) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) pipe2$auto(0x0, 0x80) setsockopt$auto(0x3, 0x1, 0xd, 0x0, 0x8) 1m39.933966913s ago: executing program 8 (id=1625): syslog$auto(0x0, &(0x7f0000000080)='\xfevZ\xcdo\xa1w\"\xb5\xef\x95\xd4B\xd6\xff\xa6\b\x00\x00\x00v\xfc\"\xa2\xd6\x1cqG!S1\x92\x10\x9b\x99\xfdz\x999G P,al\xa2\xbf$]\x1e\xf6z\x83\x01nl\x16\xc3U\xb9\xe7\x18\xf1*\xacN\xa7;>\x9d9\x96\x9e+\x7f\x01b\x9c\ni\xb1L\x81\xcd\xf1\xefB\xaf?\xf4\xfe\xb79\xf0H\x12.\x15\x00'/114, 0x6) fcntl$auto(0x300000000000000, 0x402, 0x80000004) setreuid$auto(0x3, 0x7) get_mempolicy$auto(&(0x7f00000001c0)=0x5, 0x0, 0x2d0000000000000, 0x59, 0x4) r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x200006, 0x2, 0x40eb1, 0x602, 0x300000000000) sendmsg$auto_CTRL_CMD_GETPOLICY(r0, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x20, 0x0, 0x301, 0x4070bd25, 0x25dfdbff, {}, [@CTRL_ATTR_FAMILY_NAME={0xc, 0x2, 'nl80211\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x30000881}, 0xc040810) recvfrom$auto(0x3, 0x0, 0x800000000e, 0xfffff4a4, 0x0, 0xfffffffffffffffd) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_SMC_PNETID(&(0x7f0000000440), 0xffffffffffffffff) close_range$auto(0x0, 0xfffffffffffff000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x3, 0x6) faccessat2$auto(0x1, &(0x7f0000000040)='\x00', 0x4, 0x1000) mmap$auto(0x0, 0x8000000000000000, 0x9, 0xffffffff, 0x7, 0xee) madvise$auto(0x0, 0x7ffffffffffffffc, 0xc) mremap$auto(0x4000, 0x1fee0, 0x3fd6, 0x3, 0xfffff000) syz_genetlink_get_family_id$auto_ethtool(&(0x7f00000003c0), 0xffffffffffffffff) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) fanotify_init$auto(0x5, 0x2) io_uring_setup$auto(0x6, 0x0) io_uring_setup$auto(0x6, 0x0) socket(0xa, 0x801, 0x106) connect$auto(0x3, &(0x7f0000000140)={0xa, @sa_data_min="c4aeed448dc7fe8000"}, 0x55) ioctl$auto(0x3, 0x5411, 0x38) syslog$auto(0x9, &(0x7f0000000000)='^:\x00', 0x6d1f) 1m38.991780547s ago: executing program 8 (id=1636): r0 = socket(0xa, 0x1, 0x84) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) mremap$auto(0x0, 0x7, 0x3fd6, 0x3, 0x20000000) setsockopt$auto(0x3, 0x10000000084, 0x80, 0x0, 0xb) mknod$auto(&(0x7f0000000b00)='X))\x00', 0x63c1, 0x7ff) mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) mmap$auto(0x5, 0x89, 0x3, 0xffffffffffff6159, 0x3, 0x9e2) rseq$auto(&(0x7f0000000300)={0xe, 0x401, 0x0, 0x6, 0xffffffff, 0x2}, 0x8002, 0x0, 0x6) fcntl$auto(0x0, 0x407, 0x1) io_uring_setup$auto(0x1, 0x0) futex$auto(0x0, 0x6, 0x8, 0x0, 0x0, 0x80000001) acct$auto(&(0x7f0000000100)='X))\x00') select$auto(0xd, 0x0, &(0x7f0000000100)={[0x8, 0x200, 0x800000000000008, 0x200000c, 0x9, 0x100, 0x6, 0x800000001, 0x10000, 0x3, 0x4000000000000000, 0x18, 0x93, 0x8, 0x8, 0x6]}, 0x0, 0x0) shutdown$auto(0x200000003, 0x2) sendmsg$auto_HWSIM_CMD_NEW_RADIO(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004084}, 0x48000) io_uring_setup$auto(0x6, 0x0) fsconfig$auto(0xffb, 0x7, 0x0, 0xffffffffffffffff, 0x6) msync$auto(0x1ffff000, 0x80100000000005, 0x400000004) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) sendmsg$auto_HWSIM_CMD_NEW_RADIO(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20005811}, 0x4048040) dup2$auto(0x5, 0x4) splice$auto(0x4, 0x0, 0x2, 0x0, 0x80000001, 0x9) 1m23.919434372s ago: executing program 37 (id=1636): r0 = socket(0xa, 0x1, 0x84) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) mremap$auto(0x0, 0x7, 0x3fd6, 0x3, 0x20000000) setsockopt$auto(0x3, 0x10000000084, 0x80, 0x0, 0xb) mknod$auto(&(0x7f0000000b00)='X))\x00', 0x63c1, 0x7ff) mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) mmap$auto(0x5, 0x89, 0x3, 0xffffffffffff6159, 0x3, 0x9e2) rseq$auto(&(0x7f0000000300)={0xe, 0x401, 0x0, 0x6, 0xffffffff, 0x2}, 0x8002, 0x0, 0x6) fcntl$auto(0x0, 0x407, 0x1) io_uring_setup$auto(0x1, 0x0) futex$auto(0x0, 0x6, 0x8, 0x0, 0x0, 0x80000001) acct$auto(&(0x7f0000000100)='X))\x00') select$auto(0xd, 0x0, &(0x7f0000000100)={[0x8, 0x200, 0x800000000000008, 0x200000c, 0x9, 0x100, 0x6, 0x800000001, 0x10000, 0x3, 0x4000000000000000, 0x18, 0x93, 0x8, 0x8, 0x6]}, 0x0, 0x0) shutdown$auto(0x200000003, 0x2) sendmsg$auto_HWSIM_CMD_NEW_RADIO(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004084}, 0x48000) io_uring_setup$auto(0x6, 0x0) fsconfig$auto(0xffb, 0x7, 0x0, 0xffffffffffffffff, 0x6) msync$auto(0x1ffff000, 0x80100000000005, 0x400000004) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) sendmsg$auto_HWSIM_CMD_NEW_RADIO(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20005811}, 0x4048040) dup2$auto(0x5, 0x4) splice$auto(0x4, 0x0, 0x2, 0x0, 0x80000001, 0x9) 1m9.712623539s ago: executing program 6 (id=1668): statmount$auto(0x0, &(0x7f0000000040)={0x0, 0x0, 0x5ae, 0x5, 0x7, 0x8000000009, 0x10000, 0x10, 0x5, 0x4, 0x6, 0x9, 0x5, 0x9, 0x1ff, 0x7698, 0x8, 0x10000, 0x0, 0x6, [0x6f, 0x2, 0x80000001, 0x800, 0x4000000001, 0x57b3, 0x81, 0x6, 0xf437, 0x7, 0xa60, 0x7, 0x6, 0x0, 0x1000001, 0xffffffffffffffe6, 0x0, 0x8, 0x4, 0xffffffffffff9316, 0x807fff, 0x3, 0xca, 0x2000000008, 0x8000000000000007, 0x8000, 0xe, 0xffffffffffffff1d, 0x2, 0x80, 0x5a72c917, 0x6, 0xa, 0x7828, 0x4, 0x40, 0x80000001, 0xd, 0xd, 0x7fffffff, 0x0, 0x100000000005, 0x5, 0x0, 0x1000000000000e47, 0x7fffffffffffffff, 0x4, 0x1, 0x85]}, 0x8, 0x0) socket(0xa, 0x5, 0x0) io_uring_setup$auto(0x72f69ad1, &(0x7f0000000180)={0x6, 0x8000, 0x8, 0x8001, 0x2, 0xfffe, 0xffffffffffffffff, [], {0x6, 0x9, 0x10001, 0x6, 0x9, 0x2d9, 0x5, 0x47ff, 0x18}, {0x5, 0x60b, 0x1000, 0x2, 0x200, 0x1, 0xff, 0x6, 0xe0000000000000}}) mmap$auto(0x0, 0x8, 0xdf, 0x12, 0x4, 0x8000) mprotect$auto(0x0, 0x4, 0x4) socket(0x10, 0x2, 0x6) mmap$auto(0x0, 0xfff, 0xdf, 0x9b72, 0x400, 0x28000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) rseq$auto(&(0x7f0000000300)={0x0, 0x9, 0x0, 0x4, 0xffffffff, 0xfffffffe}, 0x8000, 0x0, 0x3) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0xa, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1e, 0x4, 0x0) r0 = socket(0x1e, 0x4, 0x0) get_robust_list$auto(0x0, 0x0, 0x0) setsockopt$auto(r0, 0x10f, 0x87, 0x0, 0x14) setsockopt$auto(0x3, 0x10f, 0x87, 0x0, 0x14) r1 = socket(0x1e, 0x4, 0x0) setsockopt$auto(r1, 0x10f, 0x87, 0x0, 0x14) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0) close_range$auto(0x2, 0x8, 0x0) syz_genetlink_get_family_id$auto_nl802154(&(0x7f00000000c0), 0xffffffffffffffff) open(&(0x7f0000000100)='.\x00', 0x0, 0x408) getdents64$auto(0x0, 0x0, 0x18) madvise$auto(0x0, 0xffffffffffff0001, 0x15) shmdt$auto(0x0) 1m8.889202873s ago: executing program 6 (id=1673): mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) r0 = socket(0x11, 0x80003, 0x300) io_uring_setup$auto(0x1, 0x0) futex$auto(0x0, 0x6, 0x6, 0x0, 0x0, 0x9) fsconfig$auto(0xfb5, 0x4, 0xfffffffffffffffc, 0xffffffffffffffff, 0xffffffffffffffff) setsockopt$auto(r0, 0x107, 0x12, 0x0, 0x4) syz_genetlink_get_family_id$auto_TIPCv2(&(0x7f0000000040), 0xffffffffffffffff) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8947, &(0x7f0000000000)={'vlan1\x00'}) futex_waitv$auto(&(0x7f0000000000)={0xf, 0x5d94, 0x4, 0x4}, 0x77, 0x0, 0x0, 0x62bd) close_range$auto(0x0, 0xfffffffffffff000, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) getrandom$auto(0x0, 0x5fffffc, 0x3) getrandom$auto(0x0, 0x7, 0x3) keyctl$auto(0x1d, 0x725fffffffb, 0x69c9, 0x2, 0x6) bpf$auto(0x0, &(0x7f00000001c0)=@task_fd_query={0x9, 0x21eb, 0x7ff, 0x6, 0xa, 0x1000009, 0x5f, 0x0, 0x3}, 0x6f3) bpf$auto(0x18, &(0x7f0000000040)=@task_fd_query={r2, 0xffffffffffffffff, 0x9, 0x8, 0x8, 0x7, 0xffffffffffffffff, 0x4, 0x2}, 0x92) mprotect$auto(0x1ffff000, 0x8000000000000001, 0x4) mmap$auto(0xfffffffffffffff7, 0x80000001, 0x6, 0x18, 0x8, 0x3) prctl$auto(0x1000000003b, 0x1, 0x4, 0x40000000003, 0x7) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) io_uring_setup$auto(0x7ff, &(0x7f0000000000)={0x6, 0x68a, 0x400, 0x7, 0x201005, 0x6, 0x7, [0x4, 0x802e9, 0x8], {0x0, 0x1, 0x8, 0x7, 0x2, 0x5, 0x1000001, 0xfffffffc, 0x7}, {0x4, 0xffe, 0xfffffffb, 0x6, 0x9, 0x6, 0x3, 0x0, 0x101}}) madvise$auto(0x0, 0x3e, 0x15) ppoll$auto(&(0x7f0000000100)={r3, 0x5, 0xfb}, 0x7ff, &(0x7f0000000140)={0x101, 0x6}, &(0x7f0000000180)={0x100}, 0x8) connect$auto(r4, &(0x7f0000000280)={0x3, @sa_data_min="b9284059ecc71452f10e34f0762e"}, 0x253) 1m6.335371352s ago: executing program 7 (id=1684): mq_open$auto(&(0x7f0000000080)='\xb1\x01aC\x84e\f\x00', 0x9d2, 0x1, 0x0) ioperm$auto(0x7, 0x7f, 0x48000000) close_range$auto(0x0, 0xfffffffffffff000, 0x0) socket(0xa, 0x3, 0x3a) r0 = getpid() pidfd_open$auto(r0, 0x0) process_madvise$auto(0x1, 0xfffffffffffffffc, 0x0, 0x14, 0x8000000000000000) mq_timedsend$auto(0x3, &(0x7f0000000040)='*\x00\x06p\x9cx8\xd5\x00\x00\x00$g\xd7\x96\x14<\xc4\xb5\xa1l-\x8f\x00', 0x0, 0x8, 0x0) mmap$auto(0x0, 0x9, 0xdf, 0x9b72, 0x2, 0x9) io_uring_setup$auto(0x6, 0x0) bpf$auto(0xe, &(0x7f00000001c0)=@bpf_attr_5={@target_ifindex, 0xffffffffffffffff, 0x18, 0x6ea75249, 0xffffffffffffffff, @relative_id=0x6, 0x2}, 0x9) statx$auto(0x564, 0xfffffffffffffffc, 0x1000, 0x3, 0x0) keyctl$auto(0xf, 0xdfffffffffffffff, 0x69c9, 0x2, 0xbcc) r2 = socket(0x23, 0x80805, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket(0xa, 0x2, 0x0) r5 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$auto_NL80211_CMD_NEW_KEY(r3, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r5, @ANYBLOB="13042bbd7000fbdbdf250b00000008000300", @ANYRES32=r6, @ANYBLOB="04000200"], 0x20}, 0x1, 0x0, 0x0, 0x4804}, 0x80) poll$auto(&(0x7f0000000000)={r2, 0x1, 0x8}, 0x5, 0x400) setsockopt$auto(r7, 0x113, 0x3, 0x0, 0x79ad226b) clone$auto(0x1000, 0x9, 0xfffffffffffffffc, 0xfffffffffffffffc, 0x5) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000100), r1) timer_settime$auto(0x0, 0xffff8000, 0x0, 0x0) timer_gettime$auto(0x0, 0x0) r8 = socket(0x1e, 0x2, 0x0) getsockopt$auto(r8, 0x10f, 0x87, 0x0, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x200100, 0x21) socket$nl_generic(0x10, 0x3, 0x10) mknod$auto(&(0x7f0000000140)='./file0\x00', 0x2, 0x6) 1m5.993074401s ago: executing program 7 (id=1687): r0 = socket(0x18, 0x5, 0x1) connect$auto(r0, &(0x7f0000000000)={0xe2f, @sa_data_min="bee42159ad47ba5348254d708091"}, 0x26) inotify_add_watch$auto(0xffffffffffffffff, 0x0, 0x0) openat2$auto(0xffffffffffffffff, 0x0, 0x0, 0xfc) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) syz_genetlink_get_family_id$auto_wireguard(0x0, 0xffffffffffffffff) r1 = syz_clone(0x10211, 0x0, 0x0, 0x0, 0x0, 0x0) move_pages$auto(r1, 0x1002, 0x0, &(0x7f0000001140), 0x0, 0x2) ioperm$auto(0x7, 0x6, 0x3) arch_prctl$auto(0x1021, 0x3) futex_wake$auto(0x0, 0x8, 0x7, 0x2) sendmsg$auto_BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, 0x0, 0x20008800) clone$auto(0x10051c, 0x6, 0x0, 0xffffffffffffffff, 0x80000001) mmap$auto(0xf000, 0x8, 0x1000000003, 0x9b72, 0x2, 0x8000) open(&(0x7f0000000000)='./file0\x00', 0x200, 0x101) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x40000008000) mmap$auto(0xfffffffffffffffc, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x8, 0x329, 0x10011, 0x2, 0x8000) sendmsg$auto_HWSIM_CMD_TX_INFO_FRAME(0xffffffffffffffff, 0x0, 0x40000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) mknod$auto(&(0x7f0000000180)=':,\x00', 0xcb, 0xfffffffa) execve$auto(&(0x7f0000000000)=':,\x00', 0x0, 0x0) symlink$auto(&(0x7f00000001c0)='-\x00', &(0x7f0000000280)=')s:\x00') unlink$auto(&(0x7f0000000300)=')s:\x00') execve$auto(&(0x7f00000002c0)=':,\x00', &(0x7f0000000400)=0x0, 0x0) execve$auto(&(0x7f00000005c0)=':,\x00', &(0x7f0000000640)=0x0, &(0x7f00000006c0)=0x0) keyctl$auto(0x3, 0xfffffffd, 0x6, 0x0, 0x80b8c) 54.840915095s ago: executing program 6 (id=1689): open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x20) chmod$auto(&(0x7f00000000c0)='./file0\x00', 0xf4ba) open(&(0x7f0000000180)='./file0\x00', 0x50000, 0x8) execve$auto(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) chroot$auto(&(0x7f0000000000)='./file0\x00') execve$auto(&(0x7f0000000080)='./file0\x00', &(0x7f0000000240)=&(0x7f0000000200)='team_slave_1\x00', 0x0) execve$auto(&(0x7f0000000100)='./file0\x00', 0x0, &(0x7f0000000340)=&(0x7f0000000300)='{-(%\x00') 54.767482106s ago: executing program 9 (id=1691): socket(0xa, 0x5, 0x0) io_uring_setup$auto(0x72f69ad1, &(0x7f0000000180)={0x6, 0x8000, 0x8, 0x8001, 0x2, 0xfffe, 0xffffffffffffffff, [], {0x6, 0x9, 0x10001, 0x6, 0x9, 0x2d9, 0x5, 0x47ff, 0x18}, {0x5, 0x60b, 0x1000, 0x2, 0x200, 0x1, 0xff, 0x6, 0xe0000000000000}}) mmap$auto(0x0, 0x8, 0xdf, 0x12, 0x4, 0x8000) mprotect$auto(0x0, 0x4, 0x4) sendmsg$auto_HWSIM_CMD_DEL_RADIO(0xffffffffffffffff, 0x0, 0x24004000) socket(0x10, 0x2, 0x6) mmap$auto(0x0, 0xfff, 0xdf, 0x9b72, 0x400, 0x28000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) rseq$auto(0x0, 0x8000, 0x0, 0x3) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0xa, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1e, 0x4, 0x0) r0 = socket(0x1e, 0x4, 0x0) get_robust_list$auto(0x0, 0x0, 0x0) setsockopt$auto(r0, 0x10f, 0x87, 0x0, 0x14) setsockopt$auto(0x3, 0x10f, 0x87, 0x0, 0x14) r1 = socket(0x1e, 0x4, 0x0) setsockopt$auto(r1, 0x10f, 0x87, 0x0, 0x14) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0) close_range$auto(0x2, 0x8, 0x0) syz_genetlink_get_family_id$auto_nl802154(&(0x7f00000000c0), 0xffffffffffffffff) open(&(0x7f0000000100)='.\x00', 0x0, 0x408) getdents64$auto(0x0, 0x0, 0x18) madvise$auto(0x0, 0xffffffffffff0001, 0x15) shmdt$auto(0x0) 54.647402829s ago: executing program 7 (id=1692): open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x20) chmod$auto(&(0x7f00000000c0)='./file0\x00', 0xf4ba) open(&(0x7f0000000180)='./file0\x00', 0x50000, 0x8) execve$auto(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) chroot$auto(&(0x7f0000000000)='./file0\x00') execve$auto(&(0x7f0000000080)='./file0\x00', &(0x7f0000000240)=&(0x7f0000000200)='team_slave_1\x00', 0x0) execve$auto(&(0x7f0000000100)='./file0\x00', &(0x7f0000000040)=0x0, &(0x7f0000000340)=&(0x7f0000000300)='{-(%\x00') 54.522773869s ago: executing program 6 (id=1694): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000001100), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_STOP_NAN(r2, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000001180)={&(0x7f0000001140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYRES16=r3, @ANYRES32=r1, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0xc000) sendmsg$auto_BATADV_CMD_GET_ROUTING_ALGOS(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYRESOCT=r0, @ANYRES32=r2, @ANYRES8=r2], 0xfffffffffffffe0a}, 0x1, 0x0, 0x0, 0x24000095}, 0x4040004) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) timerfd_create$auto(0x9, 0x0) (async) timerfd_create$auto(0x9, 0x0) semctl$auto(0x1ff, 0x2, 0x13, 0x4) ioctl$auto(0x3, 0x40085400, 0x5) (async) ioctl$auto(0x3, 0x40085400, 0x5) prctl$auto(0x0, 0x9, 0x2008, 0xffffffffffffffff, 0x0) mmap$auto(0x0, 0x8, 0x3, 0x9b72, 0xffffffffffffffff, 0x8000) (async) mmap$auto(0x0, 0x8, 0x3, 0x9b72, 0xffffffffffffffff, 0x8000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x7f, 0x8000) pipe$auto(0x0) (async) pipe$auto(0x0) pipe$auto(0x0) tee$auto(0x2000000000000, 0x3, 0x3ff, 0x9) process_vm_writev$auto(0x0, &(0x7f0000002980)={0x0, 0x4}, 0x3, 0x0, 0x4, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000db, 0xeb1, 0x401, 0x8000) (async) mmap$auto(0x0, 0x20009, 0x4000000000db, 0xeb1, 0x401, 0x8000) clone$auto(0x7, 0x7fffffffffffffff, 0xffffffffffffffff, 0x0, 0x1) (async) clone$auto(0x7, 0x7fffffffffffffff, 0xffffffffffffffff, 0x0, 0x1) mlock$auto(0xfbe8, 0x4) mlock$auto(0x7, 0x5c5) mlock$auto(0x4, 0x0) (async) mlock$auto(0x4, 0x0) ioperm$auto(0x7, 0x6, 0x2) (async) ioperm$auto(0x7, 0x6, 0x2) set_robust_list$auto(0x0, 0x6) mlock$auto(0x81, 0xffff) alarm$auto(0x8) mmap$auto(0x0, 0x7fffffffffffffff, 0xdf, 0x9b72, 0x2, 0x8000) (async) mmap$auto(0x0, 0x7fffffffffffffff, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x8, 0x3ff57696, 0x9b72, 0x2, 0x8000000000008000) ioprio_set$auto(0xfffffff3, 0x6, 0x10007) ioprio_get$auto(0x3, 0x0) 53.859302475s ago: executing program 9 (id=1695): r0 = socket(0x2, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000000)={0x2, @sockaddr_1_1={"90927f"}}, 0x68) connect$auto(0x3, &(0x7f0000000000)={0x2, @sockaddr_1_1}, 0x55) write$auto(r0, &(0x7f00000001c0)='nl80211\x00', 0xffff) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) socket(0x10, 0x3, 0xa) socket(0x2, 0x1, 0x0) setsockopt$auto(0x1, 0x1, 0x50, &(0x7f0000000000)='\x00', 0xbb) socket(0x5, 0x0, 0x0) mmap$auto(0x0, 0x20009, 0x20004000000000df, 0xeb1, 0x401, 0x8000) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x6, &(0x7f0000000180), 0x1) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0xa, 0x801, 0x84) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000021}, 0x8004) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) connect$auto(0x3, &(0x7f0000000140)={0xa, @sa_data_min="c4aeed448dc7fe8000"}, 0x55) select$auto(0xa, 0x0, &(0x7f0000000100)={[0x20000000000d, 0x203, 0x0, 0xc, 0x5, 0x3, 0x5, 0x2000000000000002, 0x9, 0x8, 0xff, 0xa, 0x4, 0xaab, 0x5, 0x4006]}, 0x0, 0x0) connect$auto(0x3, &(0x7f0000000140)={0xa, @sa_data_min="c4aeed448dc7fe8000"}, 0x55) shutdown$auto(0x200000003, 0x2) setsockopt$auto(0x3, 0x10000000084, 0x23, 0x0, 0x8) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) 53.590847389s ago: executing program 7 (id=1696): syslog$auto(0x0, &(0x7f0000000080)='\xfevZ\xcdo\xa1w\"\xb5\xef\x95\xd4B\xd6\xff\xa6\b\x00\x00\x00v\xfc\"\xa2\xd6\x1cqG!S1\x92\x10\x9b\x99\xfdz\x999G P,al\xa2\xbf$]\x1e\xf6z\x83\x01nl\x16\xc3U\xb9\xe7\x18\xf1*\xacN\xa7;>\x9d9\x96\x9e+\x7f\x01b\x9c\ni\xb1L\x81\xcd\xf1\xefB\xaf?\xf4\xfe\xb79\xf0H\x12.\x15\x00'/114, 0x6) fcntl$auto(0x300000000000000, 0x402, 0x80000004) setreuid$auto(0x3, 0x7) get_mempolicy$auto(&(0x7f00000001c0)=0x5, 0x0, 0x2d0000000000000, 0x59, 0x4) r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x200006, 0x2, 0x40eb1, 0x602, 0x300000000000) syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000010c0), 0xffffffffffffffff) sendmsg$auto_CTRL_CMD_GETPOLICY(r0, &(0x7f00000011c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x30000881}, 0xc040810) recvfrom$auto(0x3, 0x0, 0x800000000e, 0xfffff4a4, 0x0, 0xfffffffffffffffd) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_SMC_PNETID(&(0x7f0000000440), 0xffffffffffffffff) close_range$auto(0x0, 0xfffffffffffff000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x3, 0x6) faccessat2$auto(0x1, &(0x7f0000000040)='\x00', 0x4, 0x1000) mmap$auto(0x0, 0x8000000000000000, 0x9, 0xffffffff, 0x7, 0xee) madvise$auto(0x0, 0x7ffffffffffffffc, 0xc) mremap$auto(0x4000, 0x1fee0, 0x3fd6, 0x3, 0xfffff000) syz_genetlink_get_family_id$auto_ethtool(&(0x7f00000003c0), 0xffffffffffffffff) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) fanotify_init$auto(0x5, 0x2) io_uring_setup$auto(0x6, 0x0) io_uring_setup$auto(0x6, 0x0) socket(0xa, 0x801, 0x106) connect$auto(0x3, &(0x7f0000000140)={0xa, @sa_data_min="c4aeed448dc7fe8000"}, 0x55) ioctl$auto(0x3, 0x5411, 0x38) syslog$auto(0x9, &(0x7f0000000000)='^:\x00', 0x6d1f) 53.375454124s ago: executing program 6 (id=1697): syslog$auto(0x0, &(0x7f0000000080)='\xfevZ\xcdo\xa1w\"\xb5\xef\x95\xd4B\xd6\xff\xa6\b\x00\x00\x00v\xfc\"\xa2\xd6\x1cqG!S1\x92\x10\x9b\x99\xfdz\x999G P,al\xa2\xbf$]\x1e\xf6z\x83\x01nl\x16\xc3U\xb9\xe7\x18\xf1*\xacN\xa7;>\x9d9\x96\x9e+\x7f\x01b\x9c\ni\xb1L\x81\xcd\xf1\xefB\xaf?\xf4\xfe\xb79\xf0H\x12.\x15\x00'/114, 0x6) fcntl$auto(0x300000000000000, 0x402, 0x80000004) setreuid$auto(0x3, 0x7) get_mempolicy$auto(&(0x7f00000001c0)=0x5, 0x0, 0x2d0000000000000, 0x59, 0x4) r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x200006, 0x2, 0x40eb1, 0x602, 0x300000000000) syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000010c0), 0xffffffffffffffff) sendmsg$auto_CTRL_CMD_GETPOLICY(r0, 0x0, 0xc040810) recvfrom$auto(0x3, 0x0, 0x800000000e, 0xfffff4a4, 0x0, 0xfffffffffffffffd) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_SMC_PNETID(&(0x7f0000000440), 0xffffffffffffffff) close_range$auto(0x0, 0xfffffffffffff000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x3, 0x6) faccessat2$auto(0x1, &(0x7f0000000040)='\x00', 0x4, 0x1000) mmap$auto(0x0, 0x8000000000000000, 0x9, 0xffffffff, 0x7, 0xee) madvise$auto(0x0, 0x7ffffffffffffffc, 0xc) mremap$auto(0x4000, 0x1fee0, 0x3fd6, 0x3, 0xfffff000) syz_genetlink_get_family_id$auto_ethtool(&(0x7f00000003c0), 0xffffffffffffffff) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) fanotify_init$auto(0x5, 0x2) io_uring_setup$auto(0x6, 0x0) io_uring_setup$auto(0x6, 0x0) socket(0xa, 0x801, 0x106) connect$auto(0x3, &(0x7f0000000140)={0xa, @sa_data_min="c4aeed448dc7fe8000"}, 0x55) ioctl$auto(0x3, 0x5411, 0x38) syslog$auto(0x9, &(0x7f0000000000)='^:\x00', 0x6d1f) 53.25000474s ago: executing program 9 (id=1698): socket(0x29, 0x2, 0x0) ioctl$auto(0x3, 0x89e0, 0xfffffffffffff4e0) mmap$auto(0x0, 0x20007, 0x80000000000000df, 0x10004000eb1, 0x8, 0x8000) close_range$auto(0x2, 0x8, 0x0) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000040)={{0x0, 0x6, 0x0, 0x5, &(0x7f0000000a40)=[0x5b84, 0x100000001], 0x8000, 0x40}, 0x8}, 0x1, 0x9) sendmmsg$auto(0x3, &(0x7f0000000000)={{0x0, 0x2, 0x0, 0xff, 0x0, 0x1, 0x3}, 0xed7138c}, 0xb, 0x0) statmount$auto(0x0, &(0x7f0000000040)={0x0, 0x0, 0x5ae, 0x5, 0x7, 0x8000000009, 0x10000, 0x10, 0x5, 0x4, 0x6, 0x9, 0x5, 0x9, 0x1ff, 0x7698, 0x8, 0x10000, 0x0, 0x6, [0x6f, 0x2, 0x80000001, 0x800, 0x4000000001, 0x57b3, 0x100, 0x6, 0xf437, 0x7, 0xa60, 0x7, 0x6, 0x0, 0x1000001, 0xffffffffffffffe6, 0x0, 0x8, 0x4, 0xffffffffffff9316, 0x807fff, 0x3, 0xca, 0x2000000008, 0x8000000000000007, 0x8000, 0xe, 0xffffffffffffff1d, 0x2, 0x80, 0x5a72c917, 0x6, 0xa, 0x7828, 0x4, 0x40, 0x80000001, 0xd, 0xd, 0x7fffffff, 0x0, 0x100000000005, 0x5, 0x0, 0x1000000000000e47, 0x7fffffffffffffff, 0x4, 0x1, 0x85]}, 0x8, 0x0) utimes$auto(0x0, &(0x7f0000000040)={0x800, 0x591}) close_range$auto(0x0, 0xfffffffffffff000, 0x2) syz_clone3(&(0x7f0000001440)={0x110010080, 0x0, 0x0, 0x0, {0x3e}, 0x0, 0x0, 0x0, 0x0}, 0x58) open(&(0x7f0000000100)='.\x00', 0x248440, 0x408) mmap$auto(0x0, 0x9, 0x72, 0x8b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) ioctl$auto(0x1, 0x5421, 0xa) getdents64$auto(0x0, 0x0, 0x18) sendmsg$auto_SMC_NETLINK_GET_DEV_SMCD(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x34, 0x0, 0x800, 0x70bd27, 0x25dfdbfb, {}, [0x7, 0x6, 0x8000, 0x8]}, 0x34}, 0x1, 0x0, 0x0, 0x4000001}, 0x4000011) ppoll$auto(&(0x7f0000000240)={0xffffffffffffffff, 0x65b8, 0x9}, 0x3, &(0x7f0000000340)={0xf258, 0x1}, &(0x7f0000000380)={0x1}, 0x8) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_TIPCv2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_TIPC_NL_ADDR_LEGACY_GET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x14, r2, 0x1, 0x70bd2a, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x4800) shutdown$auto(r0, 0xa8) 52.952787015s ago: executing program 9 (id=1700): close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) fanotify_init$auto(0x200, 0x1) socket(0x1, 0x803, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1d, 0x2, 0x2) socket(0xa, 0x3, 0x100) fanotify_mark$auto(0x0, 0x1, 0x7, 0x4, 0x0) fanotify_mark$auto(0x0, 0x201, 0x9, 0x4, 0x0) socket(0xa, 0x2, 0x3a) connect$auto(0x3, &(0x7f0000000040)={0xa, @sockaddr_1_1={"a93a0b63c441ff"}}, 0x55) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) getsockopt$auto(0x3, 0x200000000001, 0x1c, 0x0, 0x0) 52.841201618s ago: executing program 9 (id=1701): syz_genetlink_get_family_id$auto_TIPCv2(0x0, 0xffffffffffffffff) ioperm$auto(0x7, 0x6, 0x2) mknod$auto(&(0x7f0000000000)='*-\x00', 0x5, 0x8) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x40400, 0x48) fchmodat2$auto(r0, &(0x7f0000000340)='*-\x00', 0xd800, 0x100) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_IOAM6(&(0x7f0000001340), 0xffffffffffffffff) sendmsg$auto_IOAM6_CMD_ADD_SCHEMA(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000100)={0x20, r2, 0x1, 0x70bd27, 0x25dfdbff, {}, [@IOAM6_ATTR_SC_DATA={0x4}, @IOAM6_ATTR_SC_ID={0x8, 0x4, 0xc}]}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x8800) ioperm$auto(0x7, 0x6, 0x2) sched_setattr$auto(0x0, &(0x7f00000002c0)={0x4, 0x4e, 0x1d, 0xc, 0x6, 0x5f05, 0x2, 0x9, 0x877, 0x6}, 0x0) 52.738206619s ago: executing program 9 (id=1702): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x8, 0x3ff57696, 0x9b72, 0x2, 0x8000000000008000) msync$auto(0x1ffff000, 0x80100000000005, 0x400000004) madvise$auto(0x0, 0xffffffffffff0004, 0x19) mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) getpriority$auto(0x2, 0x7ff) clone$auto(0x5, 0x5, 0xfffffffffffffffc, 0xfffffffffffffffc, 0x10) prctl$auto(0x1000000003b, 0x1, 0xfff, 0x3, 0x7) open(&(0x7f0000000000)='./file0\x00', 0x40440, 0x40) fcntl$auto(0x3, 0x400, 0x1) truncate$auto(&(0x7f0000000080)='./file0\x00', 0x7fff) mmap$auto(0x0, 0x8, 0x2, 0x9b72, 0x5, 0x0) socket(0xa, 0x801, 0x106) listen$auto(0x3, 0x83) io_uring_setup$auto(0x6, 0x0) setsockopt$auto(0x3, 0x1, 0x1, 0x0, 0x9) close_range$auto(0x2, 0x8000, 0x0) mmap$auto(0x0, 0x10000000400008, 0xe0, 0x9b72, 0x2, 0x800008000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) mmap$auto(0x0, 0x9, 0xdf, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) connect$auto(0xffffffffffffffff, &(0x7f00000000c0)={0xe, @sockaddr_1_1={"171c1fb1d19b54ce5702f58376f64682f1821e1362ff70fa1301c8ca26cb214b08d39e3a4cdd1c1b94cb925d43c8f0e3480ed475b1aed07c0d972abb43b1cbacc873bc25fb190938acd159a780e4d072d9df50e426d97f5ca94bf40992f0c00879c40df51ccba3990bf84de1f2b7dbe2ee34497af7ea57d28aa3b57aae03e9455ff917988fe9b7117e1565e585f16887f2be5d39e7c5671244159130f19f8b4722619f068b0c4ce263d686b0398ecff9be34519a19c0f083370fc3e86c1d2e890d64af209a1e"}}, 0xd) shmctl$auto(0x0, 0xb, 0x0) close_range$auto(0x2, 0x8000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x2, 0x15) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_HWSIM_CMD_DEL_RADIO(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="01"], 0x14}, 0x1, 0x0, 0x0, 0x20040800}, 0x24004000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="13"], 0x1ac}}, 0x4004) 52.509211123s ago: executing program 7 (id=1703): pwrite64$auto(0xc8, &(0x7f0000000000)='\vX\xb5n\x91pds\x1c\xb2J\x99\x00:\x00!\r>\x94f\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\xf1`\x9f\x1e\xf9\xa4\xf8\x15\x02l@\x18*\xc0\xc1\xf2\x14^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0\xcd\x01\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xb6\x00\x00\x00\a\x00\x00', 0x48, 0x7) 52.404532472s ago: executing program 7 (id=1704): open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x20) chmod$auto(&(0x7f00000000c0)='./file0\x00', 0xf4ba) open(&(0x7f0000000180)='./file0\x00', 0x50000, 0x8) execve$auto(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) chroot$auto(&(0x7f0000000000)='./file0\x00') execve$auto(&(0x7f0000000080)='./file0\x00', &(0x7f0000000240)=&(0x7f0000000200)='team_slave_1\x00', 0x0) execve$auto(&(0x7f0000000100)='./file0\x00', 0x0, &(0x7f0000000340)=&(0x7f0000000300)='{-(%\x00') 52.318735677s ago: executing program 6 (id=1706): mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) ioctl$auto(0xc8, 0x1, 0x1) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_OVS_DP_CMD_NEW(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x40, r1, 0x1, 0x70bd26, 0x25dfdbff, {}, [@OVS_DP_ATTR_UPCALL_PID={0x8, 0x2, 0x4}, @OVS_DP_ATTR_NAME={0x11, 0x1, 'ovs_datapath\x00'}, @OVS_DP_ATTR_NAME={0x6, 0x1, '/\x00'}, @OVS_DP_ATTR_MASKS_CACHE_SIZE={0x8, 0x7, 0x800}]}, 0x40}, 0x1, 0x0, 0x0, 0x801}, 0x80) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x1, 0x84) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) setsockopt$auto(0x3, 0x10000000084, 0x81, 0x0, 0x8) setsockopt$auto(0x3, 0x10000000084, 0x80, 0x0, 0x8) select$auto(0xd, 0x0, &(0x7f0000000100)={[0xd, 0x200, 0x800000000000008, 0xc, 0x9, 0x3, 0x5, 0x800000001, 0x10000, 0x3, 0x4000000000000000, 0x18, 0x93, 0x8, 0x8, 0x6]}, 0x0, 0x0) writev$auto(0x1, &(0x7f0000000100)={0x0, 0x400000040000fdef}, 0x1) sendmsg$auto_HWSIM_CMD_NEW_RADIO(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004084}, 0x48000) io_uring_setup$auto(0x6, 0x0) select$auto(0x2, &(0x7f0000000040)={[0x100000002, 0x7, 0x92c5, 0x1, 0x26, 0x7fffffffffffffff, 0x8, 0x8, 0x6, 0x3, 0x10001, 0x200, 0xffffffff, 0x101, 0x8000, 0x5]}, &(0x7f0000000180)={[0x1, 0x2, 0xfffffffffffffffc, 0xc, 0x9, 0x7, 0x0, 0x2, 0x6, 0xab92, 0x927, 0x1, 0x7, 0x0, 0x7, 0x1e00]}, &(0x7f0000000200)={[0x8, 0x9, 0xffffffffffffffa7, 0x0, 0xd, 0x10001, 0x8, 0x7, 0x800, 0x81, 0x4, 0x81, 0x5, 0x2, 0x5, 0xb676]}, &(0x7f00000000c0)={0x8000000000096, 0x41}) msync$auto(0x1ffff000, 0x80100000000005, 0x400000004) dup2$auto(0x5, 0x4) splice$auto(0x4, 0x0, 0x2, 0x0, 0x80000001, 0x9) syz_genetlink_get_family_id$auto_nbd(&(0x7f0000000340), 0xffffffffffffffff) unshare$auto(0x40000080) ioctl$auto(0xc8, 0x400454d9, 0x5c8d) mlockall$auto(0x7) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x8, 0x3ff57696, 0x9b72, 0x2, 0x8000000000008000) msync$auto(0x1ffff000, 0x80100000000002, 0x400000004) madvise$auto(0x0, 0xffffffffffff0004, 0x19) socket$nl_generic(0x10, 0x3, 0x10) 32.363494025s ago: executing program 38 (id=1706): mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) ioctl$auto(0xc8, 0x1, 0x1) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_OVS_DP_CMD_NEW(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x40, r1, 0x1, 0x70bd26, 0x25dfdbff, {}, [@OVS_DP_ATTR_UPCALL_PID={0x8, 0x2, 0x4}, @OVS_DP_ATTR_NAME={0x11, 0x1, 'ovs_datapath\x00'}, @OVS_DP_ATTR_NAME={0x6, 0x1, '/\x00'}, @OVS_DP_ATTR_MASKS_CACHE_SIZE={0x8, 0x7, 0x800}]}, 0x40}, 0x1, 0x0, 0x0, 0x801}, 0x80) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x1, 0x84) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) setsockopt$auto(0x3, 0x10000000084, 0x81, 0x0, 0x8) setsockopt$auto(0x3, 0x10000000084, 0x80, 0x0, 0x8) select$auto(0xd, 0x0, &(0x7f0000000100)={[0xd, 0x200, 0x800000000000008, 0xc, 0x9, 0x3, 0x5, 0x800000001, 0x10000, 0x3, 0x4000000000000000, 0x18, 0x93, 0x8, 0x8, 0x6]}, 0x0, 0x0) writev$auto(0x1, &(0x7f0000000100)={0x0, 0x400000040000fdef}, 0x1) sendmsg$auto_HWSIM_CMD_NEW_RADIO(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004084}, 0x48000) io_uring_setup$auto(0x6, 0x0) select$auto(0x2, &(0x7f0000000040)={[0x100000002, 0x7, 0x92c5, 0x1, 0x26, 0x7fffffffffffffff, 0x8, 0x8, 0x6, 0x3, 0x10001, 0x200, 0xffffffff, 0x101, 0x8000, 0x5]}, &(0x7f0000000180)={[0x1, 0x2, 0xfffffffffffffffc, 0xc, 0x9, 0x7, 0x0, 0x2, 0x6, 0xab92, 0x927, 0x1, 0x7, 0x0, 0x7, 0x1e00]}, &(0x7f0000000200)={[0x8, 0x9, 0xffffffffffffffa7, 0x0, 0xd, 0x10001, 0x8, 0x7, 0x800, 0x81, 0x4, 0x81, 0x5, 0x2, 0x5, 0xb676]}, &(0x7f00000000c0)={0x8000000000096, 0x41}) msync$auto(0x1ffff000, 0x80100000000005, 0x400000004) dup2$auto(0x5, 0x4) splice$auto(0x4, 0x0, 0x2, 0x0, 0x80000001, 0x9) syz_genetlink_get_family_id$auto_nbd(&(0x7f0000000340), 0xffffffffffffffff) unshare$auto(0x40000080) ioctl$auto(0xc8, 0x400454d9, 0x5c8d) mlockall$auto(0x7) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x8, 0x3ff57696, 0x9b72, 0x2, 0x8000000000008000) msync$auto(0x1ffff000, 0x80100000000002, 0x400000004) madvise$auto(0x0, 0xffffffffffff0004, 0x19) socket$nl_generic(0x10, 0x3, 0x10) 32.272563394s ago: executing program 39 (id=1702): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x8, 0x3ff57696, 0x9b72, 0x2, 0x8000000000008000) msync$auto(0x1ffff000, 0x80100000000005, 0x400000004) madvise$auto(0x0, 0xffffffffffff0004, 0x19) mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) getpriority$auto(0x2, 0x7ff) clone$auto(0x5, 0x5, 0xfffffffffffffffc, 0xfffffffffffffffc, 0x10) prctl$auto(0x1000000003b, 0x1, 0xfff, 0x3, 0x7) open(&(0x7f0000000000)='./file0\x00', 0x40440, 0x40) fcntl$auto(0x3, 0x400, 0x1) truncate$auto(&(0x7f0000000080)='./file0\x00', 0x7fff) mmap$auto(0x0, 0x8, 0x2, 0x9b72, 0x5, 0x0) socket(0xa, 0x801, 0x106) listen$auto(0x3, 0x83) io_uring_setup$auto(0x6, 0x0) setsockopt$auto(0x3, 0x1, 0x1, 0x0, 0x9) close_range$auto(0x2, 0x8000, 0x0) mmap$auto(0x0, 0x10000000400008, 0xe0, 0x9b72, 0x2, 0x800008000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) mmap$auto(0x0, 0x9, 0xdf, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) connect$auto(0xffffffffffffffff, &(0x7f00000000c0)={0xe, @sockaddr_1_1={"171c1fb1d19b54ce5702f58376f64682f1821e1362ff70fa1301c8ca26cb214b08d39e3a4cdd1c1b94cb925d43c8f0e3480ed475b1aed07c0d972abb43b1cbacc873bc25fb190938acd159a780e4d072d9df50e426d97f5ca94bf40992f0c00879c40df51ccba3990bf84de1f2b7dbe2ee34497af7ea57d28aa3b57aae03e9455ff917988fe9b7117e1565e585f16887f2be5d39e7c5671244159130f19f8b4722619f068b0c4ce263d686b0398ecff9be34519a19c0f083370fc3e86c1d2e890d64af209a1e"}}, 0xd) shmctl$auto(0x0, 0xb, 0x0) close_range$auto(0x2, 0x8000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x2, 0x15) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_HWSIM_CMD_DEL_RADIO(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="01"], 0x14}, 0x1, 0x0, 0x0, 0x20040800}, 0x24004000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="13"], 0x1ac}}, 0x4004) 32.090648061s ago: executing program 40 (id=1704): open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x20) chmod$auto(&(0x7f00000000c0)='./file0\x00', 0xf4ba) open(&(0x7f0000000180)='./file0\x00', 0x50000, 0x8) execve$auto(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) chroot$auto(&(0x7f0000000000)='./file0\x00') execve$auto(&(0x7f0000000080)='./file0\x00', &(0x7f0000000240)=&(0x7f0000000200)='team_slave_1\x00', 0x0) execve$auto(&(0x7f0000000100)='./file0\x00', 0x0, &(0x7f0000000340)=&(0x7f0000000300)='{-(%\x00') 7.11299724s ago: executing program 0 (id=1733): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8002) mbind$auto(0x0, 0x100000004, 0x100000000, 0x0, 0x20000000000006, 0x2) clone$auto(0x1, 0xfffffffffffffffd, 0x0, 0x0, 0x800) (async) clone$auto(0x1, 0xfffffffffffffffd, 0x0, 0x0, 0x800) migrate_pages$auto(0x0, 0x4, 0x0, 0x0) socket(0x18, 0x2, 0x9) (async) r0 = socket(0x18, 0x2, 0x9) setsockopt$auto(r0, 0x104000000000010e, 0x1, 0x0, 0x16) (async) setsockopt$auto(r0, 0x104000000000010e, 0x1, 0x0, 0x16) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_TIPCv2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_TIPC_NL_NET_SET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000002b40)=ANY=[@ANYBLOB="18000000", @ANYRES16=r2, @ANYBLOB="010029bd7000fbdbdf250f0000000400076bc11aeeb925ce894b93a69bea19bb4d5896e01decdbd317822cb4024d7ce4be8f45a79108674f0e8802db27b46e2018d0f014d0d4e592d35af094fa76ac77fd532840e64b6bb0c671b18f75a37f7c081098871f6cde531554dc55648d22a51b73ffdfdc61e8f1211971a4cead33199743"], 0x18}, 0x1, 0x0, 0x0, 0x8005}, 0x4004000) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz0\x00', 0x200002, 0x0) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz0\x00', 0x200002, 0x0) getpid() (async) r3 = getpid() syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid$auto(r4, 0x0) move_pages$auto(r4, 0x8000, 0x0, 0x0, 0x0, 0x9ec4) (async) move_pages$auto(r4, 0x8000, 0x0, 0x0, 0x0, 0x9ec4) sendmsg$auto_TIPC_NL_LINK_GET(r0, &(0x7f0000002b00)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB, @ANYRES32=r3, @ANYBLOB="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", @ANYRESOCT=0x0, @ANYBLOB="ab00a8009eba2aad568febe8e958584b13e02f593123c6562deba6aed00fb5f1a9ffc82793199e91a378410a89bfe703f581fca2a40f11625f340399f1b1ca40316ba28cdd736534a020881d4a26ccd5760e52fa51a5bc3d7d8437b83a5fdfe82e41077ebbb1c038d9fbaba8a6eeacee4b0fc0df5ff4922d05be001891e20f8988230353e08076e893bf2a3e518f89b8ad9fbc43d7af4f20d67206500bbb7ca44e1cbfcf018d168a9142ba000400c880040008802d26b0ff4cb87fb1ffb96b862109b5814b7767ca58cf9032c99da12ce9c819cdbd8abcee27313c955532b754cffda44ce0e87e1fb1fc8d9a2cd1dfd613beb56901d380846032f07870c5a2c8ef33fb48380d3d32c21e2ea8626a1ac0f403d9602a3109a2cd0c250cb3b84f654fca3d239adc8a61851d5982fc06a6e7712fa335571804558ede575c189ccf32943869cbac20453ee5b1ce7f1728c3f303d541522d77bb17ae89ea96f066cfaadbcbd022a71afa6d2caf9d5a8fc2b5c2ed9dff1b1d283b6bd1b527f30499a636add1b5162ed7acb542fb08005b00", @ANYRES32=r3, @ANYBLOB="1400f700ff010000000000000000000000000001b6dcdaa7948fce37b2baa737c6fa18a6b93fb05452497c4ccc161ed3d856e1e97912b329a612ab6f55e13cbb9341ba7029ae0af3c2c0666735dc24c4f9a5bec5405d8289b3ac5c80a8f62d9ae498b0678c0952fe5b1b28be989409b830a925e73e508ba6db4657ffec72ae5daa9efd95f2feca75be880ee27b629ff0a6638134f47fb6535b8a84e30764d1ab40001f8affb7bf7f3b34e6470085288ae04b49fb055168043cdfb926c5f8d2a9f57f411b550bd4b63f2d000000dfc1521e4abf0a7f8e0fd15e28b3678d2dce6bbdaa05afd10655487ce1e234d06e1d45ffcb07bcea1429397ab332a01b1a24eaf3cba7ae0a5168c6b161f3058c53b67e70dc6981b2542dd2dcfbc5743d313b7d4209965d5190274ef976034930ef749ad5ea90eeff7429bc839dd7d19a782672a1b87ba0c9b437546544b497a85ee8240638acf192aa95417dbee951c45a08000b8004002880402304800800bd00", @ANYRES32=r4, @ANYRES8=r0], 0x28a8}, 0x1, 0x0, 0x0, 0x24008046}, 0x40) socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_ETHTOOL_MSG_CABLE_TEST_ACT(r5, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x4040014) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$auto(0x1, 0x1, 0x43, &(0x7f0000000000)='\x00', 0xbb) socket(0x2b, 0x6, 0x1) bind$auto(0x3, &(0x7f0000000040)={0x101, @sa_data_min="001000000000fe8000"}, 0x69) ioperm$auto(0x7, 0x6, 0x2) socket(0xa, 0x801, 0x106) madvise$auto(0x9, 0xa, 0xa) mmap$auto(0x0, 0x2020009, 0x3, 0xeb2, 0xfffffffffffffffb, 0x8000) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb2, 0xfffffffffffffffb, 0x8000) socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22240, 0x155) 6.255479578s ago: executing program 0 (id=1739): mknod$auto(&(0x7f0000000180)=':,\x00', 0xcb, 0xfffffffa) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) close_range$auto(0x2, 0x8000, 0x0) sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x48000}, 0x0) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x3) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) execve$auto(&(0x7f0000000000)=':,\x00', 0x0, 0x0) socket(0xa, 0x801, 0x106) mmap$auto(0x0, 0x9, 0xc00000072, 0x8b72, 0x1000000002, 0x8000) close_range$auto(0x2, 0xa, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1e, 0x4, 0x0) r0 = socket(0x1e, 0x4, 0x0) get_robust_list$auto(0x0, 0x0, 0x0) setsockopt$auto(r0, 0x10f, 0x87, 0x0, 0x14) setsockopt$auto(0x3, 0x10f, 0x87, 0x0, 0x14) write$auto(0x3, 0x0, 0xfdef) bpf$auto(0x0, &(0x7f0000000100)=@task_fd_query={0x19, 0x4, 0x4, 0x809, 0x8, 0xc, 0x66b, 0xa, 0x6}, 0x6f4) bind$auto(0x3, 0xfffffffffffffffd, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) sendto$auto(0x4, 0x0, 0xff, 0x6, 0x0, 0xe) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0) close_range$auto(0x2, 0x8, 0x0) listen$auto(0x3, 0x83) listen$auto(0x3, 0x81) r1 = syz_genetlink_get_family_id$auto_netdev(&(0x7f00000002c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NETDEV_CMD_QUEUE_GET(r2, &(0x7f0000005dc0)={0x0, 0x0, &(0x7f0000005d80)={&(0x7f0000005d40)={0x14, r1, 0x1, 0x70bd2c, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x200000c9}, 0x4000000) 5.191686625s ago: executing program 1 (id=1745): socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x3, 0xdf, 0xeb1, 0x401, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x3, 0x6) getsockopt$auto(0x6, 0xff, 0x20, 0x0, 0x0) statmount$auto(0x0, &(0x7f0000000040)={0x1, 0x20002, 0x5ae, 0x5, 0x7, 0x8000000009, 0x10000, 0x10, 0x5, 0x8, 0x6, 0x5, 0x5, 0x9, 0x1ff, 0x7698, 0x8, 0x10000, 0x7, 0x6, [0x6f, 0x2, 0x80000001, 0x800, 0x4000000001, 0x57b3, 0x81, 0x5, 0xf437, 0x7, 0xa60, 0x7, 0x6, 0x1, 0x1000001, 0xffffffffffffffe6, 0x8000000, 0x8, 0x4, 0xffffffffffff9316, 0x8001, 0x2e8, 0xca, 0x2000000008, 0x8000000000000007, 0x8000, 0xe, 0xffffffffffffff1d, 0x2, 0x80, 0x5a72c917, 0x6, 0xa, 0x7828, 0x0, 0x40, 0x80000001, 0xd, 0xd, 0x7fffffff, 0x0, 0x100000000005, 0x5, 0x0, 0x1000000000000e47, 0x7fffffffffffffff, 0x4, 0x1, 0x85]}, 0x8, 0x0) sendmsg$auto_HWSIM_CMD_DEL_RADIO(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="01"], 0x14}, 0x1, 0x0, 0x0, 0x20040800}, 0x24004000) mmap$auto(0x0, 0xfff, 0xdf, 0x9b72, 0x400, 0x28000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) rseq$auto(&(0x7f0000000300)={0x0, 0x9, 0x0, 0x4, 0xffffffff, 0xfffffffe}, 0x8000, 0x0, 0x3) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) madvise$auto(0x9, 0x4b65, 0x27cd) socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) write$auto(0x3, 0x0, 0x100082) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000000), 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, 0x0, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@NFSD_A_SERVER_GRACETIME={0x8, 0x2, 0x18000000}, @NFSD_A_SERVER_GRACETIME={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x804) shmdt$auto(0x0) timer_create$auto(0x9, 0x0, &(0x7f0000000040)=0x200) getuid() ioperm$auto(0xfb, 0x5, 0xe) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0xffffffffffff0005, 0x19) sched_setparam$auto(0x0, &(0x7f0000000100)) newfstatat$auto(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)={0xb3d, 0xa, 0x7, 0xe5, 0xee01, 0xee01, 0x0, 0x7f, 0x0, 0x2, 0x6, 0xffffffffffff9ce9, 0x4, 0x43, 0x7ff, 0x5, 0x6}, 0x2) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000001180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14000078", @ANYRES16=0x0, @ANYBLOB="010325bd7000ffdbdf250a000000"], 0x14}, 0x1, 0x0, 0x0, 0x20000800}, 0xc040810) timer_settime$auto(0x0, 0xffff8000, &(0x7f00000000c0)={{0xf, 0x10007}, {0x9}}, 0x0) 4.428895756s ago: executing program 0 (id=1749): statmount$auto(0x0, &(0x7f0000000040)={0x0, 0x2, 0x5ae, 0x5, 0x7, 0x6, 0x10000, 0x10, 0x8, 0x4, 0x6, 0x9, 0x5, 0x4, 0x1ff, 0x7698, 0x8, 0x10000, 0x0, 0x6, [0x13, 0x2, 0x80000001, 0x800, 0x4000000003, 0x57b3, 0x81, 0x8, 0x0, 0x7, 0x4, 0x7, 0x8, 0x8, 0x1, 0xffffffffffffffe6, 0xfffffffffffffffa, 0x8, 0x0, 0xffffffffffff9316, 0x7fff, 0x3, 0xca, 0x8, 0x7, 0x8000, 0x4, 0xffffffffffffff1d, 0x2, 0x80, 0x5a72c916, 0x6, 0x10000002, 0x7828, 0x2, 0x40, 0x4, 0xd, 0xd, 0xfffffffffffffff8, 0x0, 0x5, 0x5, 0x6, 0xe47, 0x7fffffffffffffff, 0x4, 0x7fff000000000, 0x85]}, 0x8, 0x0) sendmsg$auto_HWSIM_CMD_DEL_RADIO(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="01"], 0x14}, 0x1, 0x0, 0x0, 0x20040800}, 0x24004000) r0 = socket(0x10, 0x2, 0x6) sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72016000", @ANYBLOB="1300"], 0x1ac}}, 0x40000) 4.182307213s ago: executing program 0 (id=1750): iopl$auto(0x3) mmap$auto(0x0, 0x8, 0x2, 0x9b72, 0x5, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socket(0x23, 0x80805, 0x0) memfd_secret$auto(0x0) socket(0x23, 0x2, 0x0) recvfrom$auto(0x3, 0x0, 0x800000000e, 0xfd, 0x0, 0xfffffffffffffffd) socket(0x2b, 0x1, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x9, 0x3ff57696, 0x9b72, 0x2, 0x8000000000008000) sendmmsg$auto(0xffffffffffffffff, 0x0, 0xffffff02, 0x800) r0 = socket(0x11, 0x80003, 0x300) socket(0xa, 0x2, 0x73) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) setsockopt$auto(r0, 0x107, 0x12, 0x0, 0x4) connect$auto(0x3, 0x0, 0x55) socket(0x2, 0x80000, 0xa) write$auto(0xc8, 0x0, 0x40f6) ppoll$auto(&(0x7f0000000000)={0xffffffffffffffff, 0x40, 0x4}, 0x4, 0x0, &(0x7f00000000c0)={0x7fff}, 0x8) socket(0xa, 0x4, 0x0) mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x20000008000) socket(0xa, 0x801, 0x84) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x801, 0x84) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) 3.480952571s ago: executing program 1 (id=1756): r0 = open(&(0x7f0000000000)='./file0\x00', 0x261c2, 0x84) fallocate$auto(0x8000000000000003, 0x2, 0xb, 0xcbd5d) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r1 = socket(0xa, 0x1, 0x84) setsockopt$auto(0x3, 0x10000000084, 0x82, 0x0, 0x5) r2 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000080), r0) r3 = getgid() mlockall$auto(0x7) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) move_pages$auto(0x0, 0xd0, 0x0, &(0x7f0000001140), 0x0, 0x2) r4 = geteuid() msgctl$auto(0x0, 0x1, &(0x7f00000001c0)={{0x80100000, r4, r3, 0x92f8, 0x8, 0x4000d5, 0x1009}, 0x0, 0x0, 0x800, 0x7, 0x8, 0xc, 0x10001, 0x8, 0x5, 0x5, 0x0, 0xfff}) lstat$auto(&(0x7f0000000080)='-!-\x00', &(0x7f0000000180)={0x3, 0x9, 0xf, 0x5, 0x0, 0xee01, 0x0, 0x7fff, 0x7, 0x7, 0x23, 0x5319, 0x8, 0x6, 0xfffffffffffffff8, 0x40, 0x9}) syz_genetlink_get_family_id$auto_SMC_GEN_NETLINK(&(0x7f0000000300), r1) stat$auto(&(0x7f0000000000)=']{\x00', &(0x7f0000000240)={0x6, 0xe5a5, 0x6, 0x8, r4, r5, 0x0, 0xffffffffffffff80, 0x21a, 0xffffffff, 0x1, 0x7fffffff, 0x9, 0x16b, 0xa, 0x200, 0x1}) sendmsg$auto_NL802154_CMD_STOP_BEACONS(r0, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="80010000", @ANYRES16=r2, @ANYBLOB="00042abd7000fddbdf252700000005000900000008000d0bd900000005001a000300000008001d00"/50, @ANYRES32=r0, @ANYBLOB="08002a0046a6000018012d8008004a00", @ANYRES32, @ANYBLOB='\b\x003\x00', @ANYRES32=r4, @ANYBLOB="bd00c4800400e1800400ad806061f38f825ffd2ef6b59de7509eef8402b3e86d08cf21c305e952c3b683f3943010b21dde170d6735c222c2681182fc6f8cdcca97099904e43bf11b4d4b30f3cfd47d0e00d29e364a1bfe1700a6f250f83db5eae156076a6acb7ebe06eb8631f411c7526066ec517ac7489dc0d973b8303158bf24b828d178fcdbd80e977390ab93f9b6ccfbc6c0c82c9777365b31ba3c461ed0eb3a32881b4f3c549ad14ae9267defd1913e2829293ce2e50ee527bddf000000300046800400018020000d00fcd7de36a8cf3600c49ac2584eb2590a6062f84d3cf72c11ca66680508001b00", @ANYRES32=r0, @ANYBLOB="1400010000000000000000000000ffff7f00000108001d00", @ANYRES32=r0, @ANYBLOB="1c0019800600f8007b0000001000e9800400b000040030800400ca80"], 0x180}, 0x1, 0x0, 0x0, 0x10}, 0x40) 3.202621914s ago: executing program 4 (id=1757): mmap$auto(0x0, 0x200006, 0x2, 0x40eb1, 0x602, 0x300000000000) mremap$auto(0x0, 0x7, 0x3fd6, 0x3, 0x20000000) mmap$auto(0x0, 0x401, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x1fffffff, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) 3.133609364s ago: executing program 4 (id=1758): statmount$auto(0x0, &(0x7f0000000040)={0x0, 0x2, 0x5ae, 0x5, 0x7, 0x6, 0x10000, 0x10, 0x8, 0x4, 0x6, 0x9, 0x5, 0x4, 0x1ff, 0x7698, 0x8, 0x10000, 0x0, 0x6, [0x13, 0x2, 0x80000001, 0x800, 0x4000000003, 0x57b3, 0x81, 0x8, 0x0, 0x7, 0x4, 0x7, 0x8, 0x8, 0x1, 0xffffffffffffffe6, 0xfffffffffffffffa, 0x8, 0x0, 0xffffffffffff9316, 0x7fff, 0x3, 0xca, 0x8, 0x7, 0x8000, 0x4, 0xffffffffffffff1d, 0x2, 0x80, 0x5a72c916, 0x6, 0x10000002, 0x7828, 0x2, 0x40, 0x4, 0xd, 0xd, 0xfffffffffffffff8, 0x0, 0x5, 0x5, 0x6, 0xe47, 0x7fffffffffffffff, 0x4, 0x7fff000000000, 0x85]}, 0x8, 0x0) sendmsg$auto_HWSIM_CMD_DEL_RADIO(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="01"], 0x14}, 0x1, 0x0, 0x0, 0x20040800}, 0x24004000) r0 = socket(0x10, 0x2, 0x6) sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="72010000", @ANYRES32=r0], 0x1ac}}, 0x40000) 3.083435274s ago: executing program 4 (id=1759): r0 = socket(0xa, 0x801, 0x84) r1 = getpgrp(0x0) syz_open_procfs$namespace(r1, &(0x7f0000000040)='ns/net\x00') statx$auto(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x9, 0x4, &(0x7f0000000180)={0x7, 0xffffff72, 0x2, 0xf683, 0xffffffffffffffff, 0xee01, 0x9, 0x5, 0xd2b8, 0x1d, 0x2, 0x6, {0x5, 0xf11}, {0x3, 0x5}, {0x6}, {0x400, 0x80}, 0x0, 0x4, 0x6, 0x8a600000, 0xffff, 0xf1a, 0x2, 0x6, 0x40, 0x1, 0xffff, 0x6521, [0x4, 0x0, 0xb, 0x4, 0x7, 0x7, 0xc, 0x6, 0x3]}) sendmsg$auto_SEG6_CMD_DUMPHMAC(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000280)={0x1184, 0x0, 0x400, 0x70bd26, 0x25dfdbff, {}, [@SEG6_ATTR_HMACINFO={0x1146, 0x7, 0x0, 0x1, [@typed={0x8, 0xc, 0x0, 0x0, @pid=r1}, @nested={0x10, 0x11, 0x0, 0x1, [@typed={0x8, 0x2, 0x0, 0x0, @uid=r2}, @nested={0x4, 0x101}]}, @nested={0x18, 0x100, 0x0, 0x1, [@typed={0x14, 0x140, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, @nested={0x18, 0xb7, 0x0, 0x1, [@typed={0x14, 0x40, 0x0, 0x0, @ipv6=@private2={0xfc, 0x2, '\x00', 0x1}}]}, @typed={0xc, 0x13d, 0x0, 0x0, @u64=0x4}, @generic="da1b0a9f89cf65be7f7b4d43af96650be75181831c861e4cf51a3704e9449dc16a2d016af6d1163f05660d8e4958dd3df8bb656b9b363110febcc4e6cc338b7e60ff39dcf03540d3dd0bf30aae6cf8006eaec858c90250a8b396e4b782b4048375434c95254bb3f35df9993235c0fe2dc425a166167b344368ebc36d4f0dc49d6a6688ce8fc3ded4f5b83544a83c54d1c692789cdd45a3f8007354eedc0c8f53a3afcf5fef3b550bcf1283cf7a", @generic="76aa309254aa36798224fdb296a6f64760526175ce0656aa0e21d4566172c10c6b130668494614727f7c2940dd1099e95e9d524a4eba174c48b32f6aba451ef14d932625ffb2463e0ea792cc6e36dc02778a9715a83384a75ba3839c36cb60ca3e2eab242528bf113ac466da50ef37861b5270a24e4d58f3ea72178ebd690ef2ad2eb0883b1d410fe7c6bc229b4219566f45e10a5426121159575771da4f9abe3ef93d53b304dfe5416171fa9c8dc282ce08372e23c363704c542779a6a2cc1586b8003e80f705defb5f6be5aab299f05127d689c9581d9f1c084e59f038728b4ecb29385e94c5666b7c7beb1d1a2630cec03e8d0ea517e0e180f6aa81ddbc1eece8eb37ef6194b18ed4c0809b4f7ca673784bedce39c8e4ab65a7f14bd5ca237c7b0beac42909910922af7c0cc7d9b623af38179e5c98ef1ab39e790868b9ba7b20eaf1d4774d79a0e955a9457acfcfc8d48196eff6fc077bb643aba8bcd64f7b2f20568222a253f90b23019dcd1e940ee2d4db13124ad9bb5f9ae291aac135489bd8e77e54f513ab5f6c36122224f8b0054c446bf43b8434d5165ead65a198c63faddea4aabf9342e995c6ba81fc74d94899c62318c35f618fa520910299a9d4508b54b44110588a835811be446436438822f60f96360a4509eeb43e87f091acb69371bffb681c5be0ee1a8d7cb6d28b88a71a6d9e68a2725f872958151a94df9718078f5e4dcb77c638795e85613162397e1083a254f2aa2706f640997d41cb15de6169027c31cf6ed2f6fe0f73348904499aada3fefe493e6757b96099a0499b4b165c415498636ea17a8597bb5c694a7fd92d29831d8c24b9cf683adf4679f867d641256f7e2c7869d9529f0336a1dda5ee5dd9ccb075cd6284735ed98aa7154a1d212885ca56e4a077f22a9420d29be527a296a03ec7dbc9277c3114728cd72a4bf7b133492bc7a185958a6819235e54551229521b37c685cb911b4c3aa2856dbeeee229fd23c769f50fc988b4fc44f2daa10d35facaa212167acc361165f3105e1451a61dd1012b8af758de5fd78dc0e798d20dc273b352c869273af5ccc8db5a1f4d84aa03e35a23b61a98e99c16c53bcbf3cf9a209e40df1b2a9be8e96277fe0788805052160db1a8da8ace68a29ea8ba87a198391ec8c32e709bc100b33da72f72096a7bc52a8471df916860872959bb742236185a19225841b6a84555826e3bc1db11f24ca4551fe5e152bec5e6350f090a1ae3d469b5af1cc380b1adc76a18666bd6d3244a6e4c4d15fd39e02ce87aba179f7df45da9e0abe40f40bd8dba9ef00f41271c850fa24b00dc460e6d1a41f3b9ae006f734a416bd9e44943b5d777b57c4c275ac72398b0af5a1d776081d139bce45dbea9fba0d1fed150d42c712e9720e15a37d924389fc5e616b1387b524fd5dbf2e860d9ef99f1a59f846c659158654fab097a0d4a669c143e658eff73e2ade539a903eb2550c46c39286a7a7ddb4b591d78b0fe237f60de700c5987953e93c55940cb4b39996b3685fb135ea423a3fd792738563fe5432649a8ceab4698157bc902ee839a8c7470ff798eb9b808409afc50d377a8ba7218e1c465051090b48539f842e5ee9c26ad689d264f378b3ada89b6ca68c523514d84fa47750d1765b5143b7c03cfe6ee5e9984f6882ace527a0e1f6fe3409c084e5ac096bae3210d9b65e1ebee4981927ad5ade4ae3fb172e6276949c5ea45a27bc1ee3212b04366f21a89df3b81723a576f689582a9560412c8fe359c2534f2d16d36fbce07cfd5e7bd245f55554c1151bd41fd302c869801a2946df56457b31404f3d97f8fe4739d1631d40c2896a13e99ab247de29cdfd1ada39e13b4ae04c1b12c020c87b3d616fc308e2bca5990c5d1806a6dd83b5c65c685cbc3a418f842c446e2ac30b1e516b1ccf0a27e7ada0fef2503edf9ca42195e2325a59e33761086c4b559ac87a260393c30efa143a25c7b59c36d8e90e0069c46aaebbf786b8e4f0745e1d6d92473f8527af8d860e45200c2a277e81781e17a3fc0eee3604e4ee5c2deb1fc4d056bd52742c824f6454da3dc2ed27cbf33ffe809360bd32bd4503fbbe3f3b84acc55ba901ff9e2adc5532889584b791b193a1664f82b89976f73379b510f3dc0f5810726a716470944338efaf09abf1710fd04433301a15628585f2b5b3f24e634987015deaf613d3bfc57b9cb50340c309af7de546dbcd7f1bfb5fa2cf5b79e803d8f579e3fe4b37f5495dd9d31a3a894304ed554c7ca8f3fa7770afcbdbcae174f4d275fbb5c95bd97c731ab74049601911f2bd93a081a8f18757e2576d0a6af7cc2620f4af563a0af39f13f3335f7e1c0d8e93a536e02211269d5e058ac22563a466792e4842baff08a6366e9047ad69e9b30a9b9de1c872efacf6de80ffd934be368c35b7a57d04ec8747b97ba3ce702bca89fea83970f271109e13f6230456cf82bee25a8fad83ded660b1b7ff224550c84f8e41c34fa4a4e70fe6662dfd02e759368c71277f508f82e247bde8f3b04a0770ae8b24f579ef324b4d4bbccb376deef317d8333d0fe0643da9bf096cc5c02badac8f503b9fdeb89cb7b949bfe4a24d619d6dff62f61274a7dd54bbbb0493bc4f3c373d784ec8b91aca50178905254ad2baa13dce1fde8743a294355afb9e3bb1cc3120fa9c18ba0b03a59783317c2f43702d1aa5829c399fb0712b0775c1f6175c3f9fa2451dc3cfdc6e60b0eddf1671405acffc8f393d442b89408871dc0112a36fc7d6e74366c0f969be991886a8bd32734b92c7654fdbc66b25216f16e090e618ef06857137ece271e5d9c203eec97412d25f48b80d57670d04336e1b3a317ae9e138927443347e2f4a4661ca8867dd1450186fb0df1e7e77de4c04a6e35814b2860c6dbcad7e021c8e3fa102ce23f2edef79dfb7a22f73093efcc9b7f15fb05a8578310b9e93792e5bcec86ec21b3bd76bb57e18643d54597aed515af1c02a26d4f6a66fd785abb96413db870e3db3bcdb80a12e77b2b6bbc1276949588afcc003c34402844b35e0f78ee20cec26b7d014e0c017b56f1e54789122bf51661f3dac3690e23f08fb3a593ed06b3bea05a77784fba2f7a6da16f7b3b5cb3452ede95eca73ffe8f91ff67ab58d5441fcc87cbba1435a5e2e1142d9c7ab0b344c6db41c3d1a2f479738c0c62ced9547e5403c42fa0a14852b2031fff1e7509793f06434f385d60602d2292267d7d4945879bd94e04138baa1d4b5ccb42024d51405beecc3081ca7ad9f7e4102fa4b33191fca3f8ae8e50466e9a5dafe5b7b9cbcdc3c6ee1eaf045c615960d85bc5c66e3ba30080947176c504b7850912f80ae506cff17106a55185aa372468dd4ba818e4141a6357629421f3384ad245dd2f7acb8d8a2556fd379b4fe7386f885584c60532ffd13a3a8402dfa3f4dbd4f1dba98b6081ba4cf78b47d2868045d437010fec41ea09249059a1c5da6e56dc28cba7821431fb65da4bdc1f6f1affcd9009def042bb76e990b438b8d55516653c9061e3df97757c9fd5551d3a8c60b43da5eb4698859aec953bf081863d84beee3ac9424dfee8807dde4619980f2ddd0fdc1e7fec060c43cb31a319c22b1a433e8f747c841947c23b809b41b835ed53ad8d207974141a43847e87e08c49fb029eadc1921fed0b50c10d1f6d8cf8fad024a3510cfbe8ba799e847acc319c97ba0f69dd1dd9b789a8d9a5bea7f85beb26ba7e87b74bd0786c1397396c281be5b24b812a630c75e03f22397542bc1b45e272c06fa9aa842820d0202ecce3d6050b076a7fccad8a83e2f423bc95c560e061c1128e67011bd89cd23b608c6934565a845404b25a9054702208b35c5c1cac0e4d0ba6e24fcc3c0d4c557647dc8190936219b8aaf17eefb611d46797c74e433733fefbdfe42ea376f7f6c73a64c49f8baa5307df205befa81085cba326192a8b72acdb23b9c64da2b0f74be888144b8990550bfc14d8ad4b415bc3a3806e83ef885d5cfb483f2d7d671e62af6e55b09e07f254fcba37e6bc37fef214edee17d5561c01c5574e8ead9813bf228c8c1670da9ee2574f4b2018daffb29d5f581a140355f079f627bb9d3483c20a03c49eed740cbfe3a51800f9378d703051384b89667d12260705236f8f68a70fa06c01fc9c3d8e326f98a3d7242d81872cbb32cad176a622cc2e1ff558b928741acf72d96ba7185e5972227eed58e698b1d112a1029c3819ccbee8b60543fceba72e628a3dc7d7346d75233a44e8a55e7f4c09e517291eebaac2b92a3b14b40b8ca2223512dd895c609f7b9b013ec84dbba999d78db94048c92a807f01b14ba5127cf65356192ff055b42b28ee8c17bb0287e1dc926f454db78bc13d007a1398f897d3bf80e9403b93bdbbcd53bd3b9d3cce09ed43f338ec8254237bf8287f785172ad0510205e4fc340cf0b8bdf2c5832ba6a254cf81dce5e5c8fec4a7e1875c87a9c58a377d175923ee9f71ecfc47b3ff0184c7b948633f8c05b8578be6efc794d3be937271032131256e57caed634079b3c25a0ed49891b2a12415c9ff9b324c3754133af937fd956d7f89a166021cf06f52d58f35f642ed1df351526c40eb396845d222c00458eacfd0af07a86b907ed11d44aac7081b89595f35a72b489358457115096f6cc762ea4ad4df8a9796b6c04e447a1448b78393b4dd662cb328211041d2b926c9bd91e9aa288b50ea8c2be8b435ffdfc7fbd91c1787d65d4f43d931a44f54b1a36cba742d3126711dbe63cce07be7bc8256a3634b3c31af8a061dc5ab3414ad2594871fd3401c3cca6917bfd20b2ec44181511e38003d7c7b46c7d43fb7a57f532a70ba7d0470d2199e34c6a24b6ff7319b4c0bc5115807e33d0f08e1f3ed090406ade7c93846ad25ceb9022920638ec6780a1c0eef93cd163c11e0b17c3824599d43c43ed400e3c590b3fd8799724298aa795f30b7c5d2163e56ef46a3a17d7047c2fcb16c386561647fe20eadb3553074bb21c8d73988a272508e9ad11d9dfe0195c6dba20dcfae144674f2988f6b9c2fb9523fd67766cc449de466f8c60ff9efe9ab829a6bcfa7c0494b307ba63ab3959c1d59fe685a0b5d62448c80a363169f4e0cc066023c354404778326e1437c5f984d17de8c6739e7e0971e1e548d829c4e5d235f18c67b34afbb3e86d81939c83c8f0fee54d69de2388cf5439e1dc99cc4139d10c1b93ca3c4e59d66abfa4adbd6949a74b5ba61a30b70cea0ef73b06d7708d0f0e501dbb02d9ded21277bd12958e5a75bb04e323ce989633b26588b0a750ad4cce2695041d2b43580fe151a3f563288d6b598405d4a7987bf1689abcc9918c11da41d86154fdba70fec04ad0c5d7b544d43183d06382e85712eb67671aa198983c49cc92c2622d899a5b63fa0a2c9dca591a8f1fa5baa983d91c769318d38ebe14c7973bca3f0b9e63ebc52e6fddcfce4f6bcbad1389f2d634baa93ae657cbc51a6c3ea7a2e7f893757bb7eaff8ad4267815acf8d99858c9c864e1adf39e321f759240df0a82eeb9822ad450620033a897bcbfeac54e19de7ad91d6dba1e6b79b4f4f52b9daecb2e5136619a2b8eb9b737e10fd05d56934e2284f67054003c5b0f5d378d57ffbecb66d61ca53d0b23512906f07f975c8c1f1de5d0058492c25c3987aa759fcbb8491ff67d9dc18bd0b02395da02816026beaf0414f9af9d34709b8cf267523ecc4e7a64824e7c85e2a2915974a851e21df8408f00b5af426a39aea78e6e618614ee90fe52e809da9091d5", @nested={0xa, 0x11e, 0x0, 0x1, [@nested={0x4, 0x98}, @generic="a71e"]}, @generic="2b7daabea945b63bf0415d3bf39354a68112ac3373cd0b87c2f4ed02e53e5ea49363af8c950a6d555bd1466d44f40273f6f16028c2"]}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x9a}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x3}, @SEG6_ATTR_ALGID={0x5, 0x6, 0xcd}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x6}]}, 0x1184}, 0x1, 0x0, 0x0, 0x8000}, 0x40) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000021}, 0x8004) connect$auto(0x3, &(0x7f0000000140)={0xa, @sa_data_min="c4aeed448dc7fe80000000000100"}, 0x55) connect$auto(0x3, &(0x7f0000000140)={0xa, @sa_data_min="c4aeed448dc7fe8000"}, 0x55) shutdown$auto(0x200000003, 0x2) write$auto(0x3, 0x0, 0x34000) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) clone$auto(0x1001, 0x4, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x49) sendmsg$auto_TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, 0x0, 0x20000000) setsockopt$auto(0x3, 0x10000000084, 0x7c, 0x0, 0x8) 3.021520091s ago: executing program 1 (id=1760): statmount$auto(0x0, &(0x7f0000000040)={0x0, 0x0, 0x5ae, 0x5, 0x7, 0x8000000009, 0x10000, 0x10, 0x5, 0x4, 0x6, 0x9, 0x5, 0x9, 0x1ff, 0x7698, 0x8, 0x10000, 0x0, 0x6, [0x6f, 0x2, 0x80000001, 0x800, 0x4000000001, 0x57b3, 0x81, 0x6, 0xf437, 0x1000000007, 0xa60, 0x7, 0x6, 0x0, 0x1000001, 0xffffffffffffffe6, 0x0, 0x8, 0x4, 0xffffffffffff9316, 0x807fff, 0x3, 0xca, 0x2000000008, 0x8000000000000007, 0x8000, 0xe, 0xffffffffffffff1d, 0x2, 0x80, 0x5a72c917, 0x6, 0xa, 0x7828, 0x4, 0x40, 0x80000001, 0xd, 0xd, 0x7fffffff, 0x0, 0x100000000005, 0x5, 0x0, 0x1000000000000e47, 0x7fffffffffffffff, 0x4, 0x1, 0x85]}, 0x8, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x2, 0x3, 0xa) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) setsockopt$auto(0x3, 0x1, 0x5, 0x0, 0x9) sendto$auto(0x3, 0x0, 0x8, 0xe, &(0x7f0000000040)={0x2, @sockaddr_1_1}, 0x1c) getrandom$auto(0x0, 0x6000000, 0x3) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) mbind$auto(0x0, 0x100000004, 0x100000000, 0x0, 0x20000000000006, 0x2) fchown$auto(0x693, 0x66ed, 0x1ca4) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) utimes$auto(0x0, &(0x7f0000000040)={0x800, 0x591}) r0 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x45, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010029bd7000fddbdf250200000008000300", @ANYRES32, @ANYBLOB="08001d81"], 0x24}, 0x1, 0x0, 0x0, 0x20040010}, 0x20000084) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x19) clone$auto(0xd2d2, 0x7fffffffffffffff, 0xffffffffffffffff, 0x0, 0x1) clone$auto(0x8001, 0x5, 0xffffffffffffffff, 0xfffffffffffffffc, 0x6) sendmsg$auto_NL80211_CMD_FRAME_WAIT_CANCEL(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xd8, r0, 0x200, 0x70bd2b, 0x25dfdbfe, {}, [@NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x8e, 0xbd, "71ed06a815f229abd67cbd6dbe2308fe395757264d35ca23e9af9d5535fca136dc65cf809cf63006a6f5a17b7cc53f7bd900a5b941df797e05fa01722feb8d67d7a9a5bddba21fe7db55befc3a802260ff94aba5a6f5bd544bb7a7db2f647c88a6b976d91d70a63c74f320fabc6f61033f9ab1ac0e458d77a0dcbbb00d6e0d3f7f1ba723292560148e7e"}, @NL80211_ATTR_STA_WME={0x34, 0x81, 0x0, 0x1, [@NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x6}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x65}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x2c}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x3}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0xfc}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0xfb}]}]}, 0xd8}, 0x1, 0x0, 0x0, 0x4000043}, 0x400c0) 2.577863361s ago: executing program 4 (id=1761): socket(0xa, 0x5, 0x0) io_uring_setup$auto(0x72f69ad1, &(0x7f0000000180)={0x6, 0x8000, 0x8, 0x8001, 0x2, 0xfffe, 0xffffffffffffffff, [], {0x6, 0x9, 0x10001, 0x6, 0x9, 0x2d9, 0x5, 0x47ff, 0x18}, {0x5, 0x60b, 0x1000, 0x2, 0x200, 0x1, 0xff, 0x6, 0xe0000000000000}}) mmap$auto(0x0, 0x8, 0xdf, 0x12, 0x4, 0x8000) mprotect$auto(0x0, 0x4, 0x4) sendmsg$auto_HWSIM_CMD_DEL_RADIO(0xffffffffffffffff, 0x0, 0x24004000) socket(0x10, 0x2, 0x6) mmap$auto(0x0, 0xfff, 0xdf, 0x9b72, 0x400, 0x28000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) rseq$auto(&(0x7f0000000300)={0x0, 0x9, 0x0, 0x4, 0xffffffff, 0xfffffffe}, 0x8000, 0x0, 0x3) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0xa, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1e, 0x4, 0x0) r0 = socket(0x1e, 0x4, 0x0) get_robust_list$auto(0x0, 0x0, 0x0) setsockopt$auto(r0, 0x10f, 0x87, 0x0, 0x14) setsockopt$auto(0x3, 0x10f, 0x87, 0x0, 0x14) r1 = socket(0x1e, 0x4, 0x0) setsockopt$auto(r1, 0x10f, 0x87, 0x0, 0x14) sendmmsg$auto(0x3, 0x0, 0x9a6, 0xa7f) close_range$auto(0x2, 0x8, 0x0) syz_genetlink_get_family_id$auto_nl802154(0x0, 0xffffffffffffffff) open(0x0, 0x0, 0x408) getdents64$auto(0x0, 0x0, 0x18) madvise$auto(0x0, 0xffffffffffff0001, 0x15) shmdt$auto(0x0) 2.192364252s ago: executing program 2 (id=1762): r0 = socket(0x2, 0x1, 0x106) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_thermal(&(0x7f0000000200), r1) sendmsg$auto_THERMAL_GENL_CMD_TZ_GET_TRIP(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x48800) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0x2000007, 0x3) statmount$auto(0x0, &(0x7f0000000040)={0x0, 0x2, 0x5ae, 0x5, 0x7, 0x6, 0x10000, 0x10, 0xa, 0x4, 0x6, 0x9, 0x5, 0x4, 0x1ff, 0x2, 0x8, 0x10000, 0x0, 0x6, [0x13, 0x2, 0x80000001, 0x800, 0x4000000003, 0x57b3, 0x81, 0x6, 0x0, 0x7, 0x4, 0x4, 0x6, 0x8, 0x1, 0xffffffffffffffe6, 0xfffffffffffffffa, 0x8, 0x0, 0xffffffffffff9316, 0x29, 0x3, 0xca, 0x8, 0x7, 0x8000, 0xe, 0xffffffffffffff1d, 0x2, 0x80, 0x5a72c916, 0x6, 0x2, 0x7828, 0x4, 0x40, 0x4, 0xd, 0xd, 0xfffffffffffffff8, 0x0, 0x5, 0x5, 0x6, 0xe48, 0x7fffffffffffffff, 0x1fffffffc0, 0x7fff000000000, 0x85]}, 0x6, 0x1000000) syz_genetlink_get_family_id$auto_MAC80211_HWSIM(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB='.\x00'], 0x1ac}}, 0x40000) mprotect$auto(0x1ffff000, 0x8000000000000001, 0x4) sendmsg$auto_NCSI_CMD_SET_PACKAGE_MASK(r2, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4c004}, 0x40080c0) sendmsg$auto_HWSIM_CMD_DEL_RADIO(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="01"], 0x14}, 0x1, 0x0, 0x0, 0x20040800}, 0x24004000) r3 = socket(0x10, 0x2, 0x6) sendmsg$auto_NL80211_CMD_GET_REG(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1300"], 0x1ac}}, 0x40000) bpf$auto(0x0, &(0x7f0000000340)=@link_update={0x1e, @new_map_fd=0x7fff, 0x10003, @old_prog_fd=0x1}, 0x4) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) fanotify_init$auto(0x5, 0x2) socket(0xa, 0x2, 0x0) r5 = socket(0x29, 0x2, 0x0) sendmmsg$auto(0x2, &(0x7f0000000240)={{0x0, 0x6, &(0x7f00000001c0)={&(0x7f0000000000), 0x10}, 0x2, 0x0, 0xd8, 0xfff}, 0x2}, 0x5, 0xfe64) r6 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000280), r0) r7 = getpgid(0xffffffffffffffff) newfstatat$auto(r4, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000400)={0x77, 0x4, 0x3, 0x7ff, 0xee00, 0x0, 0x0, 0x7, 0x80, 0x200, 0xd6, 0x4e, 0x8, 0x3, 0x6, 0x3, 0x8}, 0xf0000000) r9 = getpid() sendmsg$auto_NL80211_CMD_DEL_PMK(r5, &(0x7f0000001780)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000300)={&(0x7f00000004c0)={0x1294, r6, 0x300, 0x70bd2c, 0x25dfdbff, {}, [@NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x5}, @NL80211_ATTR_OBSS_COLOR_BITMAP={0xc, 0x12e, 0x47a}, @NL80211_ATTR_MBSSID_ELEMS={0x126c, 0x133, 0x0, 0x1, [@typed={0x4, 0xf1}, @nested={0x1084, 0xef, 0x0, 0x1, [@generic="b9d327b372d4577a5c1be20e84604b170f13c8cdc1cc6beadc452c18382d498ea1df37567ce0ddfb18e277c96967d3df4b6c63597fb0c76e1a217c48ace8a7655706711d0ff45ab43ee9e7d6ff7718d3b9dc400cdd5e3b6b", @typed={0x8, 0x4, 0x0, 0x0, @pid=r7}, @typed={0x8, 0xf3, 0x0, 0x0, @fd=r4}, @typed={0xc, 0xbc, 0x0, 0x0, @str='thermal\x00'}, @typed={0x7, 0x9a, 0x0, 0x0, @str='[:\x00'}, @typed={0x4, 0x137}, @generic="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"]}, @typed={0x8, 0x13c, 0x0, 0x0, @uid=r8}, @nested={0x1d2, 0x76, 0x0, 0x1, [@nested={0x4, 0xf2}, @generic="8f570b497385cccf30a9d11b00d7d23aff51cc3b82afb7592f049f0b5ef14d4e2d9524fd7ab9eef282b2fa8d0362a465449b52cdff3d5c774216ac9f979712fb5b062aa260e9dfc5ff7a8e3a0ab093cf1acac43a6ee62b2cd4e604d7bca3305cbb3af00be122ce29659fc53238ed19e20d9cd8db9cbdf9", @generic="ac0375bd3f7199317fc2808028564171380904b296fb22c5413ac61cc549649cb7e932d4216bd76155d63ab515f94414e53aa61ef00f13baf3bdd86770bd3298c69c0e205bafba7d69efb83c5a340f9210c903c0c8753c19ba8092e9e5b424506024d79c907b014f5161dd216dfb4bce0baf75e78e0102e0f7d0527f27df46475abe30bce1824f67aec3332b09fa18acc592c424a25de03074890bcb4c9a", @nested={0x4, 0x96}, @typed={0x8, 0x73, 0x0, 0x0, @pid=r9}, @generic="88736f1cfe7a6821d9c618a71ce847d87148835ebbd3ba606b3997d16cca7990ab93b04044076a09bf4007bc", @typed={0x8, 0x8d, 0x0, 0x0, @fd=r1}, @generic="da55dcf6890b08900b83cfda9b6e9751b2db2e5bc9e91712712da3598dee9078f0371444dea38f9fe0559de02ec5", @typed={0x8, 0x8a, 0x0, 0x0, @ipv4=@broadcast}, @generic="fcd0b78e9dd518f76142fe1aa85eb0691d7bb091768ef165a9b9999663e983d4be2667db9ea0e14810dfc259e74d52205a73968e9ce8c3e682b18c081c0c88"]}, @typed={0x4, 0x3c}]}]}, 0x1294}, 0x1, 0x0, 0x0, 0x80}, 0x4000000) prctl$auto(0x8, 0x669, 0xbef, 0x2, 0x8) 1.967801127s ago: executing program 0 (id=1763): r0 = socket(0x10, 0x3, 0x6) r1 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_THREADS_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r1, 0x1, 0x70bd28, 0x25dfdbfe, {0x2, 0x0, 0xfff0}, [@NFSD_A_SERVER_SCOPE={0x8, 0x4, '@%%\x00'}, @NFSD_A_SERVER_LEASETIME={0x8, 0x3, 0x9}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x40) 1.801682876s ago: executing program 2 (id=1764): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f00000007c0), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_TUNNEL_INFO_GET(r0, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)={&(0x7f0000000f00)={0x14, r1, 0x705, 0x70bd25, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x880) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bond_slave_0\x00', 0x0}) getuid() (async) sendmsg$auto_ETHTOOL_MSG_LINKINFO_SET(r0, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x1c, r1, 0x1, 0x70bd29, 0x25dfdbff, {}, [@ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0x9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x804) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) fstat$auto(0xffffffffffffffff, &(0x7f0000000000)={0x9, 0xffc, 0x7, 0xfffffffd, 0x0, 0xee01, 0x0, 0x6, 0x1, 0x5, 0xc0f, 0x2, 0x7ff, 0x92bc, 0xffffffff, 0x6, 0x3}) (async) r5 = getuid() setreuid$auto(r4, r5) (async) sendmsg$auto_ETHTOOL_MSG_CABLE_TEST_TDR_ACT(r0, &(0x7f0000000740)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000700)={&(0x7f00000001c0)={0x1e0, r1, 0x300, 0x70bd27, 0x25dfdbfc, {}, [@ETHTOOL_A_CABLE_TEST_TDR_CFG={0x1a0, 0x2, 0x0, 0x1, [@nested={0x8, 0xbb, 0x0, 0x1, [@typed={0x4, 0x28}]}, @nested={0xc3, 0xa1, 0x0, 0x1, [@nested={0x4, 0xa7}, @generic="725c54c020c734de5d4387ac5c6144a9e72bf8a6f4467fb92855b9e29f0551128d1b55bd716a8c22b35f9cddf9f8ac472bed5098f4ac3e9a68afa5f882c519f7719d87799c5839ba516d781c9145bd49d719ff2549cceb24e78a657ae9a2a4cd2e4cbc45e6986c852a0c23ba724b1b83b1f4760afcb72029e2fc5aeccec4137b4f88c2118abe278a304b40dd388eb9e735b1fbe5c75b3a6ba3a9db69d0b29d889fd3cd13ca41a29c7970fb642b7c1e60bf95bb", @typed={0x8, 0x7, 0x0, 0x0, @uid=r5}]}, @generic="574218d044b2aac9b26dc82a22b956a260e70bd3e0fe86697dd67e91eace70c1fa340bcf1425d67735732be2430a4ac4041752869eaebc7e03dd9b646321550d42fade5c918afb693c26de2a4a7cf4dd5da6f68dec46418b40ea75c5803efbc4f75aa4ce6cc4f8e041cd7cde31e64a32508641b92bccc810375849b6f3f551e361de6df4fdf890d4785659d0b00fea62ae43a85f57ba10f69341e52fdda56a56a1dbd1bc7acf88914d68f1d2a2ad34cbec9abe717a25f2f284bf7f9ade2bfb99bd38f03ef65ecde77a63e96b9a65a5ee"]}, @ETHTOOL_A_CABLE_TEST_TDR_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}, @ETHTOOL_A_CABLE_TEST_TDR_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @ETHTOOL_A_CABLE_TEST_TDR_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}]}, 0x1e0}, 0x1, 0x0, 0x0, 0x811}, 0x24040094) 1.709355667s ago: executing program 4 (id=1765): syslog$auto(0x0, &(0x7f0000000080)='\xfevZ\xcdo\xa1w\"\xb5\xef\x95\xd4B\xd6\xff\xa6\b\x00\x00\x00v\xfc\"\xa2\xd6\x1cqG!S1\x92\x10\x9b\x99\xfdz\x999G P,al\xa2\xbf$]\x1e\xf6z\x83\x01nl\x16\xc3U\xb9\xe7\x18\xf1*\xacN\xa7;>\x9d9\x96\x9e+\x7f\x01b\x9c\ni\xb1L\x81\xcd\xf1\xefB\xaf?\xf4\xfe\xb79\xf0H\x12.\x15\x00'/114, 0x6) fcntl$auto(0x300000000000000, 0x402, 0x80000004) setreuid$auto(0x3, 0x7) get_mempolicy$auto(&(0x7f00000001c0)=0x5, 0x0, 0x2d0000000000000, 0x59, 0x4) r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x200006, 0x2, 0x40eb1, 0x602, 0x300000000000) r1 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000010c0), 0xffffffffffffffff) sendmsg$auto_CTRL_CMD_GETPOLICY(r0, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x20, r1, 0x301, 0x4070bd25, 0x25dfdbff, {}, [@CTRL_ATTR_FAMILY_NAME={0xc, 0x2, 'nl80211\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x30000881}, 0xc040810) recvfrom$auto(0x3, 0x0, 0x800000000e, 0xfffff4a4, 0x0, 0xfffffffffffffffd) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_SMC_PNETID(&(0x7f0000000440), 0xffffffffffffffff) close_range$auto(0x0, 0xfffffffffffff000, 0x3f00) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x3, 0x6) faccessat2$auto(0x1, &(0x7f0000000040)='\x00', 0x4, 0x1000) mmap$auto(0x0, 0x8000000000000000, 0x9, 0xffffffff, 0x7, 0xee) madvise$auto(0x0, 0x7ffffffffffffffc, 0xc) mremap$auto(0x4000, 0x1fee0, 0x3fd6, 0x3, 0xfffff000) syz_genetlink_get_family_id$auto_ethtool(&(0x7f00000003c0), 0xffffffffffffffff) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) fanotify_init$auto(0x5, 0x2) io_uring_setup$auto(0x6, 0x0) io_uring_setup$auto(0x6, 0x0) socket(0xa, 0x801, 0x106) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000021}, 0x8004) connect$auto(0x3, &(0x7f0000000140)={0xa, @sa_data_min="c4aeed448dc7fe8000"}, 0x55) ioctl$auto(0x3, 0x5411, 0x38) sendmsg$auto_ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000004c0)={0x0}, 0x1, 0x0, 0x0, 0x10001}, 0x0) syslog$auto(0x9, &(0x7f0000000000)='^:\x00', 0x6d1f) 1.483403968s ago: executing program 2 (id=1766): syslog$auto(0x0, &(0x7f0000000080)='\xfevZ\xcdo\xa1w\"\xb5\xef\x95\xd4B\xd6\xff\xa6\b\x00\x00\x00v\xfc\"\xa2\xd6\x1cqG!S1\x92\x10\x9b\x99\xfdz\x999G P,al\xa2\xbf$]\x1e\xf6z\x83\x01nl\x16\xc3U\xb9\xe7\x18\xf1*\xacN\xa7;>\x9d9\x96\x9e+\x7f\x01b\x9c\ni\xb1L\x81\xcd\xf1\xefB\xaf?\xf4\xfe\xb79\xf0H\x12.\x15\x00'/114, 0x6) fcntl$auto(0x300000000000000, 0x402, 0x80000004) setreuid$auto(0x3, 0x7) get_mempolicy$auto(&(0x7f00000001c0)=0x5, 0x0, 0x2d0000000000000, 0x59, 0x4) r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x200006, 0x2, 0x40eb1, 0x602, 0x300000000000) r1 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000010c0), 0xffffffffffffffff) sendmsg$auto_CTRL_CMD_GETPOLICY(r0, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x20, r1, 0x301, 0x4070bd25, 0x25dfdbff, {}, [@CTRL_ATTR_FAMILY_NAME={0xc, 0x2, 'nl80211\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x30000881}, 0xc040810) recvfrom$auto(0x3, 0x0, 0x800000000e, 0xfffff4a4, 0x0, 0xfffffffffffffffd) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_SMC_PNETID(&(0x7f0000000440), 0xffffffffffffffff) close_range$auto(0x0, 0xfffffffffffff000, 0xf000) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x3, 0x6) faccessat2$auto(0x1, &(0x7f0000000040)='\x00', 0x4, 0x1000) mmap$auto(0x0, 0x8000000000000000, 0x9, 0xffffffff, 0x7, 0xee) madvise$auto(0x0, 0x7ffffffffffffffc, 0xc) mremap$auto(0x4000, 0x1fee0, 0x3fd6, 0x3, 0xfffff000) syz_genetlink_get_family_id$auto_ethtool(&(0x7f00000003c0), 0xffffffffffffffff) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) fanotify_init$auto(0x5, 0x2) io_uring_setup$auto(0x6, 0x0) io_uring_setup$auto(0x6, 0x0) socket(0xa, 0x801, 0x106) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000021}, 0x8004) connect$auto(0x3, &(0x7f0000000140)={0xa, @sa_data_min="c4aeed448dc7fe8000"}, 0x55) ioctl$auto(0x3, 0x5411, 0x38) sendmsg$auto_ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000004c0)={0x0}, 0x1, 0x0, 0x0, 0x10001}, 0x0) syslog$auto(0x9, &(0x7f0000000000)='^:\x00', 0x6d1f) 1.373442851s ago: executing program 4 (id=1767): exit$auto(0x7) mmap$auto(0x0, 0x7, 0xdf, 0x9b72, 0x2, 0x8000) io_setup$auto(0x1, 0x0) io_pgetevents$auto(0x76d, 0x2, 0xa31f, 0x0, 0x0, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) clone$auto(0x8001, 0x5, 0xffffffffffffffff, 0xfffffffffffffffc, 0x6) socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) r0 = syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) statmount$auto(0x0, &(0x7f0000000040)={0x0, 0x0, 0x38, 0xffffff01, 0x9, 0x8000000000000000, 0x8, 0x7, 0x9, 0x5, 0x5, 0x9, 0x3, 0x8, 0x5, 0xf, 0x0, 0x9, 0x10001, 0x5, [0x9, 0x7f, 0x77, 0x1, 0x8, 0xe06, 0x400, 0x3, 0x80000000, 0x8, 0x3, 0xfffffffffffffff9, 0x10, 0x3, 0x35c4, 0x1, 0x6, 0x8, 0xea8, 0x8, 0x5, 0x8, 0x5, 0x1, 0x200000000800, 0x9, 0x5, 0x2, 0x800, 0x8000000000000000, 0x2ab, 0x8, 0x7ff, 0x1, 0x1, 0x3, 0xffffffffffff0000, 0x6b, 0xfffffffffffffff9, 0x4, 0x2ba, 0x4, 0xf, 0xffffffffffffff26, 0x9, 0x7fffffff, 0x6, 0x7d, 0xdc]}, 0x800, 0x0) mprotect$auto(0x1ffff000, 0x8000000000000001, 0x4) select$auto(0xb, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x200000000000000, 0x5}) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) bpf$auto(0x0, 0x0, 0x6f4) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) sendmsg$auto_NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, r0, 0x400, 0x70bd27, 0x25dfdbfc, {}, [@NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x101}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x40015) close_range$auto(0x2, 0x8000, 0x0) 1.361917685s ago: executing program 0 (id=1768): syz_genetlink_get_family_id$auto_TIPCv2(&(0x7f0000002500), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0xa, 0x801, 0x84) select$auto(0xa, 0x0, &(0x7f0000000100)={[0x20000000000d, 0x3af, 0x0, 0xc, 0x5, 0x3, 0x5, 0x2000000000000002, 0x9, 0x369057ee, 0xff, 0xa, 0x4, 0xaab, 0x99, 0x800004006]}, 0x0, 0x0) connect$auto(0x3, &(0x7f0000000140)={0xa, @sa_data_min="c4aeed448dc7fe8000"}, 0x55) socket(0x2, 0x2, 0x0) io_uring_setup$auto(0x6, 0x0) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) connect$auto(0x3, &(0x7f0000000140)={0x2, @sa_data_min="6a2f7ff43519eb7100"}, 0x55) ioctl$auto(0xc8, 0x400454ce, 0x5c8d) seccomp$auto(0x1, 0x9, 0xfffffffffffffffe) sysinfo$auto(0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) sendmsg$auto_WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x4008810}, 0x20018000) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22240, 0x155) socket(0x2, 0x1, 0x0) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) connect$auto(0x3, &(0x7f00000001c0)={0x2, @sockaddr_1_1={"c2a172"}}, 0x55) shutdown$auto(0x200000003, 0x2) bind$auto(0x3, &(0x7f0000000080)={0x2, @sockaddr_1_1}, 0x6b) io_uring_setup$auto(0x9, 0x0) connect$auto(0x3, &(0x7f00000000c0)={0x2, @sockaddr_1_1}, 0x55) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) setsockopt$auto(0x3, 0x1, 0xd, 0x0, 0x8) close_range$auto(0x2, 0x8000, 0x0) 1.355664818s ago: executing program 2 (id=1769): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) socket(0x2, 0x1, 0x0) clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22040, 0x75) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) connect$auto(0x3, &(0x7f0000000000)={0x2, @sa_data_min="0800e00000000000c1728d2af766"}, 0x55) sendmsg$auto_MACSEC_CMD_DEL_RXSA(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000040)=ANY=[], 0x148}, 0x1, 0x0, 0x0, 0x80}, 0x80) 1.199863741s ago: executing program 2 (id=1770): socket(0xa, 0x2, 0x0) setsockopt$auto(0x400000000000003, 0x29, 0x4c, 0x0, 0x20056b) 1.168712615s ago: executing program 1 (id=1771): r0 = socket(0x2b, 0x1, 0x1) listen$auto(0x3, 0x81) r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), r0) sendmsg$auto_NL80211_CMD_DEL_NAN_FUNCTION(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x7c, r1, 0x100, 0x70bd25, 0x25dfdbfd, {}, [@NL80211_ATTR_MNTR_FLAGS={0x5d, 0x17, "64a3ae110a99a9b6a4743a204228657a2ac8c3de818942517e3b0df2d93261dd3b1082eb5b33863ccf47c0c483f4449403eac1dc53b9d96528eecf7c8fde1b59c731eb271334acc2c5d273587f37a63c7f7390b83ce04f81f0"}, @NL80211_ATTR_WIPHY_ANTENNA_TX={0x8, 0x69, 0x77f}]}, 0x7c}, 0x1, 0x0, 0x0, 0x801}, 0x4004014) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) setsockopt$auto(0x3, 0x8000000000000006, 0x22, 0x0, 0x7ffffc) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_OVS_METER_CMD_SET(r3, &(0x7f0000002b40)={0x0, 0x0, &(0x7f0000002b00)={&(0x7f0000000080)={0x14, 0x0, 0x6, 0x70bd28, 0x25dfdbfa}, 0x14}, 0x1, 0x0, 0x0, 0x8080}, 0x4004004) syz_genetlink_get_family_id$auto_IPVS(&(0x7f0000002c80), r3) r4 = syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000004100), r3) sendmsg$auto_OVS_DP_CMD_SET(r3, &(0x7f00000041c0)={0x0, 0x0, &(0x7f0000004180)={&(0x7f0000004140)={0x14, r4, 0x92357bca98804707, 0x70bd28, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x40000c0}, 0x4004804) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'veth0\x00', 0x0}) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000000c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0100250000004000000001"], 0x2c}, 0x1, 0x0, 0x0, 0x20004994}, 0x4000884) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'wg2\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'ip6_vti0\x00', 0x0}) syz_clone3(&(0x7f0000000500)={0x0, &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)=0x0, {0x39}, &(0x7f0000000300)=""/130, 0x82, &(0x7f00000003c0)=""/226, &(0x7f00000004c0)=[0xffffffffffffffff], 0x1}, 0x58) sendmsg$auto_OVS_DP_CMD_DEL(r2, &(0x7f0000000640)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x60, r4, 0x200, 0x70bd28, 0x25dfdbff, {}, [@OVS_DP_ATTR_NAME={0x5, 0x1, '\x00'}, @OVS_DP_ATTR_NAME={0xc, 0x1, 'nl80211\x00'}, @OVS_DP_ATTR_NAME={0x6, 0x1, '$\x00'}, @OVS_DP_ATTR_NAME={0x5, 0x1, '\x00'}, @OVS_DP_ATTR_IFINDEX={0x8, 0x9, r6}, @OVS_DP_ATTR_UPCALL_PID={0x8, 0x2, 0xffffffffffffffff}, @OVS_DP_ATTR_IFINDEX={0x8, 0x9, r7}, @OVS_DP_ATTR_IFINDEX={0x8, 0x9, r8}, @OVS_DP_ATTR_UPCALL_PID={0x8, 0x2, r9}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000014}, 0x400a800) socket(0x2b, 0x1, 0x1) (async) listen$auto(0x3, 0x81) (async) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), r0) (async) sendmsg$auto_NL80211_CMD_DEL_NAN_FUNCTION(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x7c, r1, 0x100, 0x70bd25, 0x25dfdbfd, {}, [@NL80211_ATTR_MNTR_FLAGS={0x5d, 0x17, "64a3ae110a99a9b6a4743a204228657a2ac8c3de818942517e3b0df2d93261dd3b1082eb5b33863ccf47c0c483f4449403eac1dc53b9d96528eecf7c8fde1b59c731eb271334acc2c5d273587f37a63c7f7390b83ce04f81f0"}, @NL80211_ATTR_WIPHY_ANTENNA_TX={0x8, 0x69, 0x77f}]}, 0x7c}, 0x1, 0x0, 0x0, 0x801}, 0x4004014) (async) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async) setsockopt$auto(0x3, 0x8000000000000006, 0x22, 0x0, 0x7ffffc) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$auto_OVS_METER_CMD_SET(r3, &(0x7f0000002b40)={0x0, 0x0, &(0x7f0000002b00)={&(0x7f0000000080)={0x14, 0x0, 0x6, 0x70bd28, 0x25dfdbfa}, 0x14}, 0x1, 0x0, 0x0, 0x8080}, 0x4004004) (async) syz_genetlink_get_family_id$auto_IPVS(&(0x7f0000002c80), r3) (async) syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000004100), r3) (async) sendmsg$auto_OVS_DP_CMD_SET(r3, &(0x7f00000041c0)={0x0, 0x0, &(0x7f0000004180)={&(0x7f0000004140)={0x14, r4, 0x92357bca98804707, 0x70bd28, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x40000c0}, 0x4004804) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'veth0\x00'}) (async) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000000c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0100250000004000000001"], 0x2c}, 0x1, 0x0, 0x0, 0x20004994}, 0x4000884) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'wg2\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'ip6_vti0\x00'}) (async) syz_clone3(&(0x7f0000000500)={0x0, &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0), {0x39}, &(0x7f0000000300)=""/130, 0x82, &(0x7f00000003c0)=""/226, &(0x7f00000004c0)=[0xffffffffffffffff], 0x1}, 0x58) (async) sendmsg$auto_OVS_DP_CMD_DEL(r2, &(0x7f0000000640)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x60, r4, 0x200, 0x70bd28, 0x25dfdbff, {}, [@OVS_DP_ATTR_NAME={0x5, 0x1, '\x00'}, @OVS_DP_ATTR_NAME={0xc, 0x1, 'nl80211\x00'}, @OVS_DP_ATTR_NAME={0x6, 0x1, '$\x00'}, @OVS_DP_ATTR_NAME={0x5, 0x1, '\x00'}, @OVS_DP_ATTR_IFINDEX={0x8, 0x9, r6}, @OVS_DP_ATTR_UPCALL_PID={0x8, 0x2, 0xffffffffffffffff}, @OVS_DP_ATTR_IFINDEX={0x8, 0x9, r7}, @OVS_DP_ATTR_IFINDEX={0x8, 0x9, r8}, @OVS_DP_ATTR_UPCALL_PID={0x8, 0x2, r9}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000014}, 0x400a800) (async) 795.170889ms ago: executing program 2 (id=1772): mmap$auto(0x0, 0x3, 0xdf, 0xeb1, 0x401, 0x8000) mkdir$auto(&(0x7f00000001c0)='}[,&*}\x00', 0xc001) unshare$auto(0x40000080) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_OVS_DP_CMD_NEW(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={0x2c, r1, 0x1, 0x70bd27, 0x25dfdbff, {}, [@OVS_DP_ATTR_UPCALL_PID={0x8, 0x2, 0x4}, @OVS_DP_ATTR_UPCALL_PID={0x8}, @OVS_DP_ATTR_NAME={0x6, 0x1, '/\x02'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x801}, 0x80) fcntl$auto(r0, 0x0, 0x9) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0xa, 0x5, 0x0) timer_create$auto(0x3, 0x0, 0x0) mq_open$auto(&(0x7f0000000200)='#)-\\&[}\x00', 0xde8, 0xb, &(0x7f0000000240)={0x4, 0x4, 0x1, 0x5}) mq_open$auto(&(0x7f0000000280)='#)-\\&[}\x00', 0x5, 0x10, 0x0) mmap$auto(0x0, 0x8001, 0x4000000000df, 0x610, 0x6, 0x300000000000) io_uring_setup$auto(0x6, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_gtp(&(0x7f0000000000), r2) sendmsg$auto_GTP_CMD_NEWPDP(r3, &(0x7f0000003080)={0x0, 0x0, &(0x7f0000003040)={&(0x7f0000000080)={0x28, r4, 0x0, 0x70bd2b, 0x25dfdbfd, {}, [@GTPA_TID={0xc, 0x3, 0x80}, @GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000810}, 0x80) r5 = gettid() mremap$auto(0x4000, 0xfee0, 0x3fd6, 0x3, 0xfffff000) bpf$auto(0x6, &(0x7f00000002c0)=@bpf_attr_7={@prog_id=0x7, 0xfff, 0x80000001}, 0x9) process_vm_readv$auto(r5, &(0x7f0000000040)={0x0, 0x8}, 0x4, &(0x7f00000000c0)={0x0, 0x100000000000002}, 0x6, 0x0) 395.548164ms ago: executing program 1 (id=1773): socket(0xa, 0x2, 0x0) setsockopt$auto(0x400000000000003, 0x29, 0x4, 0x0, 0x20056b) 0s ago: executing program 1 (id=1774): mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$auto_NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000100)=ANY=[@ANYBLOB="53ae814ff53eb79ac7327f3b5c204084b8e37370bf02772bf32af0262af0bcdd23f5a330c43b4bd41cffe37a4464be166a047ac3b89176917bb993877ce2a03f03f37faf28cca147dd9db6eafc3fea5ad1330d7c3254cc901bff62671bb0f1ef14fe47863e7082138855d8e82a499d72fa053b9ffeab1be40831d57171c59984176ed6589d967d2babfd711848379938418c5dabb6785af2ed38a12b98160b45043a8db03a33055cffa1313b", @ANYRES16=r1, @ANYBLOB="010025bd7000fedbdf25140000000800010008000000"], 0x1c}}, 0x4004840) sendmsg$auto_NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={&(0x7f0000000080), 0xc, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="7a41f648f7b801ba62d7bbb759ab24592beba28bc28f4adc41781ff9df796d308cb5679bd7a28dd69985d09da2fa956d94b8445a1a6eebbd2f4c1353860814205575fa8236471b75565f77d423df", @ANYRES16=0x0, @ANYBLOB="000127bd7000ffdbdf2532000000050053000900000008003501050000000800a500060000000500080003000000"], 0x34}, 0x1, 0x0, 0x0, 0x20000044}, 0x40001) r2 = socket(0x2, 0x6, 0x0) r3 = socket(0x18, 0x5, 0x1) connect$auto(r3, &(0x7f0000000000)={0xe2f, @sa_data_min="bee42159ad47ba5348254d708091"}, 0x26) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) getsockopt$auto(r2, 0x10d, 0xa, 0x0, &(0x7f00000000c0)=0x4) io_uring_setup$auto(0x6, 0x0) r4 = socket(0x1e, 0x1, 0x0) getsockname$auto(r4, &(0x7f0000000000)={0x4, @sockaddr_1_1}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mprotect$auto(0x1ffff010, 0x8000000000800001, 0x5) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) close_range$auto(r2, r2, 0x3) madvise$auto(0x0, 0xffffffffffff0001, 0x15) clone$auto(0x81000005, 0x6, 0xfffffffffffffffd, 0xffffffffffffffff, 0x80000001) clone$auto(0x4, 0x6, &(0x7f0000000000)=0xe, 0x0, 0x0) bind$auto(0x7, &(0x7f0000000000)={0x6, @sockaddr_1_1}, 0x3e) mmap$auto(0xa0000000000000, 0x7, 0x2, 0x6ffe, 0x9, 0x7) socket(0xa, 0x2, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x261c2, 0x84) socket(0x15, 0x3, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2c, 0x3, 0x0) fallocate$auto(0x8000000000000003, 0x0, 0xd, 0xcbd5d) sendfile$auto(0x6, 0x3, 0x0, 0xc01) setsockopt$auto(0x400000000000003, 0x29, 0x16, 0x0, 0x20056b) kernel console output (not intermixed with test programs): ly 0 port 6081 - 0 [ 456.210260][ T7732] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 456.229451][ T7732] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 456.264803][ T5876] Bluetooth: hci0: command tx timeout [ 456.338044][ T3493] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 456.383799][ T3493] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 456.429626][ T5889] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 456.466250][ T5889] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 457.093761][ T7878] bridge0: port 3(veth1) entered blocking state [ 457.118804][ T7878] bridge0: port 3(veth1) entered disabled state [ 457.145313][ T7878] veth1: entered allmulticast mode [ 457.265381][ T7878] veth1: entered promiscuous mode [ 457.327201][ T7878] bridge0: port 3(veth1) entered blocking state [ 457.333937][ T7878] bridge0: port 3(veth1) entered forwarding state [ 458.346097][ T5876] Bluetooth: hci0: command tx timeout [ 459.297498][ T7953] netlink: 24 bytes leftover after parsing attributes in process `syz.2.536'. [ 459.722760][ T7969] netlink: 50 bytes leftover after parsing attributes in process `syz.0.541'. [ 461.291750][ T8019] netlink: 3 bytes leftover after parsing attributes in process `syz.2.554'. [ 463.052530][ T8081] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 466.340705][ T8145] nbd: must specify at least one socket [ 466.352924][ T8146] nbd: must specify at least one socket [ 467.150884][ T8169] netlink: 8 bytes leftover after parsing attributes in process `syz.3.597'. [ 467.209653][ T8169] openvswitch: netlink: Flow key attr not present in new flow. [ 470.701224][ T8248] netlink: 8 bytes leftover after parsing attributes in process `syz.3.624'. [ 470.872629][ T8254] netlink: 8 bytes leftover after parsing attributes in process `syz.0.628'. [ 472.486582][ T8286] netlink: 50 bytes leftover after parsing attributes in process `syz.1.636'. [ 473.067356][ T5871] Bluetooth: hci1: command 0x0406 tx timeout [ 473.067364][ T54] Bluetooth: hci3: command 0x0406 tx timeout [ 475.623997][ T8350] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 476.205779][ T8366] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 476.245612][ T8366] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 478.100158][ T8403] netlink: 4 bytes leftover after parsing attributes in process `syz.2.667'. [ 480.533358][ T8457] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 481.571909][ T8488] HSR: entered promiscuous mode [ 482.747798][ T8515] netlink: 50 bytes leftover after parsing attributes in process `syz.1.700'. [ 483.124789][ T8526] netlink: 50 bytes leftover after parsing attributes in process `syz.1.705'. [ 483.976793][ T8547] kernel read not supported for file /#)-\&[} (pid: 8547 comm: syz.0.710) [ 483.985795][ T29] audit: type=1804 audit(8277292150.610:7): pid=8547 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.710" name="#)-\&[}" dev="mqueue" ino=18854 res=1 errno=0 [ 484.046069][ T29] audit: type=1800 audit(8277292150.650:8): pid=8547 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.710" name="#)-\&[}" dev="mqueue" ino=18854 res=0 errno=0 [ 484.518391][ T8560] nbd: must specify at least one socket [ 484.967246][ T8586] netlink: 50 bytes leftover after parsing attributes in process `syz.3.724'. [ 485.603154][ T8613] netlink: 12 bytes leftover after parsing attributes in process `syz.1.734'. [ 485.628568][ T8613] netlink: 12 bytes leftover after parsing attributes in process `syz.1.734'. [ 487.970468][ T8705] workqueue: name exceeds WQ_NAME_LEN. Truncating to: -侞6yռ ka; [ 488.899480][ T8730] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 489.482042][ T8752] netlink: 342 bytes leftover after parsing attributes in process `syz.3.773'. [ 489.881229][ T8769] nfsd: Unknown parameter 'w' [ 490.684793][ T8795] netlink: 240 bytes leftover after parsing attributes in process `syz.1.786'. [ 491.167320][ T8810] netlink: 50 bytes leftover after parsing attributes in process `syz.1.791'. [ 491.940649][ T8830] : Can't lookup blockdev [ 492.797948][ T8851] nbd: socks must be embedded in a SOCK_ITEM attr [ 493.669839][ T8893] netlink: 50 bytes leftover after parsing attributes in process `syz.2.820'. [ 497.580528][ T8996] netlink: 4 bytes leftover after parsing attributes in process `syz.2.855'. [ 498.621318][ T9022] nfsd: Unknown parameter 'i ]*' [ 498.652859][ T9022] netlink: 342 bytes leftover after parsing attributes in process `syz.0.860'. [ 499.013643][ T5923] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 499.219268][ T5923] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 499.296158][ T5881] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 499.313264][ T5881] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 499.328166][ T5881] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 499.442907][ T5923] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 499.461234][ T5881] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 499.469524][ T5881] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 499.477316][ T5881] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 499.537204][ T5923] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 499.773556][ T5923] veth1: left allmulticast mode [ 499.790266][ T5923] veth1: left promiscuous mode [ 499.799311][ T5923] bridge0: port 3(veth1) entered disabled state [ 499.809747][ T5923] bridge_slave_1: left allmulticast mode [ 499.818778][ T5923] bridge_slave_1: left promiscuous mode [ 499.824761][ T5923] bridge0: port 2(bridge_slave_1) entered disabled state [ 499.839246][ T5923] bridge_slave_0: left allmulticast mode [ 499.845268][ T5923] bridge_slave_0: left promiscuous mode [ 499.851278][ T5923] bridge0: port 1(bridge_slave_0) entered disabled state [ 500.755899][ T5923] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 500.781225][ T5923] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 500.837157][ T5923] bond0 (unregistering): Released all slaves [ 500.857802][ T9085] netlink: 8 bytes leftover after parsing attributes in process `syz.0.881'. [ 501.242696][ T9040] chnl_net:caif_netlink_parms(): no params data found [ 501.544733][ T5876] Bluetooth: hci2: command tx timeout [ 501.691851][ T5923] hsr_slave_0: left promiscuous mode [ 501.713259][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.732350][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.744115][ T5923] hsr_slave_1: left promiscuous mode [ 501.754095][ T5923] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 501.799098][ T5923] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 501.864445][ T5923] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 501.874689][ T5923] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 501.929378][ T5923] veth1_macvtap: left promiscuous mode [ 501.951439][ T5923] veth0_macvtap: left promiscuous mode [ 501.979114][ T5923] veth1_vlan: left promiscuous mode [ 502.001620][ T5923] veth0_vlan: left promiscuous mode [ 503.311637][ T5923] team0 (unregistering): Port device team_slave_1 removed [ 503.382430][ T5923] team0 (unregistering): Port device team_slave_0 removed [ 503.635210][ T5876] Bluetooth: hci2: command tx timeout [ 504.240382][ T9040] bridge0: port 1(bridge_slave_0) entered blocking state [ 504.253650][ T9040] bridge0: port 1(bridge_slave_0) entered disabled state [ 504.262264][ T9040] bridge_slave_0: entered allmulticast mode [ 504.279179][ T9040] bridge_slave_0: entered promiscuous mode [ 504.291109][ T9040] bridge0: port 2(bridge_slave_1) entered blocking state [ 504.301560][ T9040] bridge0: port 2(bridge_slave_1) entered disabled state [ 504.309939][ T9040] bridge_slave_1: entered allmulticast mode [ 504.317209][ T9040] bridge_slave_1: entered promiscuous mode [ 504.377168][ T9040] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 504.402574][ T9040] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 504.443844][ T9040] team0: Port device team_slave_0 added [ 504.464973][ T9040] team0: Port device team_slave_1 added [ 504.492136][ T9040] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 504.499732][ T9040] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 504.526299][ T9040] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 504.539390][ T9040] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 504.547193][ T9040] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 504.573420][ T9040] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 504.653965][ T9040] hsr_slave_0: entered promiscuous mode [ 504.661628][ T9040] hsr_slave_1: entered promiscuous mode [ 504.668805][ T9040] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 504.678268][ T9040] Cannot create hsr debugfs directory [ 505.295695][ T9189] mmap: syz.0.904 (9189): VmData 37597184 exceed data ulimit 2. Update limits or use boot option ignore_rlimit_data. [ 505.705415][ T5876] Bluetooth: hci2: command tx timeout [ 505.834473][ T9040] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 505.862473][ T9040] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 505.924284][ T9040] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 505.961246][ T9040] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 506.115658][ T9040] 8021q: adding VLAN 0 to HW filter on device bond0 [ 506.133038][ T9040] 8021q: adding VLAN 0 to HW filter on device team0 [ 506.146335][ T5923] bridge0: port 1(bridge_slave_0) entered blocking state [ 506.153467][ T5923] bridge0: port 1(bridge_slave_0) entered forwarding state [ 506.278266][ T3493] bridge0: port 2(bridge_slave_1) entered blocking state [ 506.285490][ T3493] bridge0: port 2(bridge_slave_1) entered forwarding state [ 506.712738][ T9040] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 506.997611][ T9040] veth0_vlan: entered promiscuous mode [ 507.048482][ T9040] veth1_vlan: entered promiscuous mode [ 507.120315][ T9040] veth0_macvtap: entered promiscuous mode [ 507.171286][ T9040] veth1_macvtap: entered promiscuous mode [ 507.271692][ T9040] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 507.298816][ T9040] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 507.328572][ T9040] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 507.368931][ T9040] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 507.403123][ T9040] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 507.441061][ T9040] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 507.464049][ T9040] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 507.496443][ T9040] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 507.524960][ T9040] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 507.562405][ T9040] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 507.602212][ T9040] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 507.625102][ T9040] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 507.657055][ T9040] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 507.709073][ T9040] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 507.737568][ T9040] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 507.746406][ T9040] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 507.755914][ T9040] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 507.765374][ T9040] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 507.804694][ T5876] Bluetooth: hci2: command tx timeout [ 507.892799][ T68] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 507.908429][ T68] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 508.022431][ T3493] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 508.061074][ T3493] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 508.552153][ T9276] netlink: 50 bytes leftover after parsing attributes in process `syz.0.912'. [ 508.605674][ T9276] netlink: 24 bytes leftover after parsing attributes in process `syz.0.912'. [ 510.637800][ T9316] netlink: 28 bytes leftover after parsing attributes in process `syz.3.924'. [ 510.915206][ T9323] lo: entered promiscuous mode [ 511.151575][ T9323] lo: left promiscuous mode [ 511.826348][ T9351] syz.1.935(9351): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 512.049818][ T9361] netlink: 4 bytes leftover after parsing attributes in process `syz.1.938'. [ 513.547479][ T9396] HSR: entered promiscuous mode [ 518.124825][ T9503] netlink: 28 bytes leftover after parsing attributes in process `syz.3.980'. [ 524.013063][ T9622] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1016'. [ 528.004532][ T9712] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1042'. [ 538.790052][ T9892] netlink: 334 bytes leftover after parsing attributes in process `syz.2.1095'. [ 538.871528][ T5895] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 538.916875][ T9892] netlink: 4510 bytes leftover after parsing attributes in process `syz.2.1095'. [ 539.060975][ T5895] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 539.170525][ T5895] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 539.426722][ T5895] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 539.904944][ T5895] bridge_slave_1: left allmulticast mode [ 539.910646][ T5895] bridge_slave_1: left promiscuous mode [ 539.992478][ T5895] bridge0: port 2(bridge_slave_1) entered disabled state [ 540.088414][ T5895] bridge_slave_0: left allmulticast mode [ 540.094110][ T5895] bridge_slave_0: left promiscuous mode [ 540.153327][ T5895] bridge0: port 1(bridge_slave_0) entered disabled state [ 540.376666][ T5881] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 540.386810][ T5881] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 540.395781][ T5881] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 540.403917][ T5881] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 540.412069][ T5881] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 540.420332][ T5881] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 541.044498][ T29] audit: type=1326 audit(8277292207.670:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9901 comm="syz.0.1100" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa1bf97e759 code=0x0 [ 541.816202][ T5895] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 541.836772][ T5895] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 541.855607][ T5895] bond0 (unregistering): Released all slaves [ 542.364170][ T5895] HSR: left promiscuous mode [ 542.529521][ T9953] syz.2.1108 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 542.587180][ T5881] Bluetooth: hci1: command tx timeout [ 542.638919][ T9913] chnl_net:caif_netlink_parms(): no params data found [ 542.917786][ T9913] bridge0: port 1(bridge_slave_0) entered blocking state [ 542.930700][ T9913] bridge0: port 1(bridge_slave_0) entered disabled state [ 542.943359][ T9913] bridge_slave_0: entered allmulticast mode [ 542.952568][ T9913] bridge_slave_0: entered promiscuous mode [ 542.994713][ T9913] bridge0: port 2(bridge_slave_1) entered blocking state [ 543.001855][ T9913] bridge0: port 2(bridge_slave_1) entered disabled state [ 543.021920][ T9913] bridge_slave_1: entered allmulticast mode [ 543.030201][ T9913] bridge_slave_1: entered promiscuous mode [ 543.091455][ T9913] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 543.125297][ T9913] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 543.170539][ T5895] hsr_slave_0: left promiscuous mode [ 543.184192][ T5895] hsr_slave_1: left promiscuous mode [ 543.198272][ T5895] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 543.209446][ T5895] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 543.220320][ T5895] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 543.232556][ T5895] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 543.269922][ T5895] veth1_macvtap: left promiscuous mode [ 543.276104][ T5895] veth0_macvtap: left promiscuous mode [ 543.281927][ T5895] veth1_vlan: left promiscuous mode [ 543.287489][ T5895] veth0_vlan: left promiscuous mode [ 543.861503][ T5895] team0 (unregistering): Port device team_slave_1 removed [ 543.929685][ T5895] team0 (unregistering): Port device team_slave_0 removed [ 544.560156][ T9913] team0: Port device team_slave_0 added [ 544.586724][ T9913] team0: Port device team_slave_1 added [ 544.643104][ T9913] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 544.659210][ T9913] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 544.705105][ T5881] Bluetooth: hci1: command tx timeout [ 544.724872][ T9913] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 544.757753][ T9913] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 544.773083][ T9913] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 544.802236][ T9913] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 544.908437][ T9913] hsr_slave_0: entered promiscuous mode [ 544.928943][ T9913] hsr_slave_1: entered promiscuous mode [ 544.943381][ T9913] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 544.961692][ T9913] Cannot create hsr debugfs directory [ 545.056215][T10005] netlink: 'syz.2.1119': attribute type 1 has an invalid length. [ 546.168193][ T9913] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 546.200449][ T9913] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 546.243737][ T9913] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 546.288540][ T9913] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 546.360861][ T9913] 8021q: adding VLAN 0 to HW filter on device bond0 [ 546.377381][ T9913] 8021q: adding VLAN 0 to HW filter on device team0 [ 546.399419][ T6159] bridge0: port 1(bridge_slave_0) entered blocking state [ 546.406662][ T6159] bridge0: port 1(bridge_slave_0) entered forwarding state [ 546.446109][ T6159] bridge0: port 2(bridge_slave_1) entered blocking state [ 546.453362][ T6159] bridge0: port 2(bridge_slave_1) entered forwarding state [ 546.593838][ T9913] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 546.604428][ T9913] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 546.748892][ T5881] Bluetooth: hci1: command tx timeout [ 547.017778][ T9913] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 547.146776][ T9913] veth0_vlan: entered promiscuous mode [ 547.188394][ T9913] veth1_vlan: entered promiscuous mode [ 547.278135][ T9913] veth0_macvtap: entered promiscuous mode [ 547.310353][ T9913] veth1_macvtap: entered promiscuous mode [ 547.358747][ T9913] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 547.385807][ T9913] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 547.403101][ T9913] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 547.440214][ T9913] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 547.460518][ T9913] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 547.484705][ T9913] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 547.516046][ T9913] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 547.538419][ T9913] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 547.555090][ T9913] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 547.587132][ T9913] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 547.634599][ T9913] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 547.666239][ T9913] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 547.694598][ T9913] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 547.716074][ T9913] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 547.743613][ T9913] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 547.764995][ T9913] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 547.784351][ T9913] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 547.805410][ T9913] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 547.969190][ T68] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 547.999002][ T68] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 548.060980][ T6159] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 548.082547][ T6159] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 548.830714][ T5881] Bluetooth: hci1: command tx timeout [ 549.185772][T10149] delete_channel: no stack [ 549.201520][T10149] team0: entered allmulticast mode [ 549.212196][T10149] team_slave_0: entered allmulticast mode [ 549.228375][T10149] team_slave_1: entered allmulticast mode [ 551.423906][T10237] openvswitch: netlink: IP tunnel dst address not specified [ 552.073344][T10273] sysfs: cannot create duplicate filename '/class/ieee80211/-侞6yռ ka;+1)p;!X+@' [ 552.098085][T10273] CPU: 0 UID: 0 PID: 10273 Comm: syz.2.1173 Not tainted 6.12.0-syzkaller-01782-gbf9aa14fc523 #0 [ 552.108561][T10273] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 552.118651][T10273] Call Trace: [ 552.121962][T10273] [ 552.124923][T10273] dump_stack_lvl+0x16c/0x1f0 [ 552.129658][T10273] sysfs_warn_dup+0x7f/0xa0 [ 552.134206][T10273] sysfs_do_create_link_sd+0x124/0x140 [ 552.139719][T10273] sysfs_create_link+0x61/0xc0 [ 552.144524][T10273] device_add+0x62e/0x1a70 [ 552.149161][T10273] ? __pfx_device_add+0x10/0x10 [ 552.154057][T10273] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 552.160002][T10273] ? ieee80211_set_bitrate_flags+0x249/0x6a0 [ 552.166029][T10273] wiphy_register+0x20d7/0x2d30 [ 552.170940][T10273] ? __pfx_wiphy_register+0x10/0x10 [ 552.176204][T10273] ieee80211_register_hw+0x2959/0x3fb0 [ 552.181728][T10273] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 552.187584][T10273] ? net_generic+0xea/0x2a0 [ 552.192137][T10273] ? rcu_is_watching+0x12/0xc0 [ 552.196960][T10273] ? trace_hrtimer_init+0x19d/0x220 [ 552.202201][T10273] ? __hrtimer_init+0x106/0x2c0 [ 552.207100][T10273] mac80211_hwsim_new_radio+0x2c47/0x56c0 [ 552.212888][T10273] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 552.218991][T10273] ? __kmalloc_node_track_caller_noprof+0x22d/0x440 [ 552.225613][T10273] ? hwsim_new_radio_nl+0x9ff/0x12b0 [ 552.230946][T10273] hwsim_new_radio_nl+0xb42/0x12b0 [ 552.236100][T10273] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 552.241878][T10273] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 552.249292][T10273] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 552.256842][T10273] genl_family_rcv_msg_doit+0x202/0x2f0 [ 552.262436][T10273] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 552.268560][T10273] ? bpf_lsm_capable+0x9/0x10 [ 552.273278][T10273] ? security_capable+0x7e/0x260 [ 552.278274][T10273] ? ns_capable+0xd7/0x110 [ 552.282735][T10273] genl_rcv_msg+0x565/0x800 [ 552.287304][T10273] ? __pfx_genl_rcv_msg+0x10/0x10 [ 552.292380][T10273] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 552.297987][T10273] netlink_rcv_skb+0x165/0x410 [ 552.302794][T10273] ? __pfx_genl_rcv_msg+0x10/0x10 [ 552.307863][T10273] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 552.313207][T10273] ? down_read+0xc9/0x330 [ 552.317569][T10273] ? __pfx_down_read+0x10/0x10 [ 552.322374][T10273] ? netlink_deliver_tap+0x1ae/0xcf0 [ 552.327699][T10273] genl_rcv+0x28/0x40 [ 552.331723][T10273] netlink_unicast+0x53c/0x7f0 [ 552.336530][T10273] ? __pfx_netlink_unicast+0x10/0x10 [ 552.341938][T10273] ? __phys_addr_symbol+0x30/0x80 [ 552.346999][T10273] ? __check_object_size+0x488/0x710 [ 552.352334][T10273] netlink_sendmsg+0x8b8/0xd70 [ 552.357150][T10273] ? __pfx_netlink_sendmsg+0x10/0x10 [ 552.362522][T10273] ____sys_sendmsg+0x9ae/0xb40 [ 552.367339][T10273] ? copy_msghdr_from_user+0x10b/0x160 [ 552.372837][T10273] ? __pfx_____sys_sendmsg+0x10/0x10 [ 552.378183][T10273] ___sys_sendmsg+0x135/0x1e0 [ 552.382904][T10273] ? __pfx____sys_sendmsg+0x10/0x10 [ 552.388146][T10273] ? __pfx_lock_release+0x10/0x10 [ 552.393209][T10273] ? trace_lock_acquire+0x14a/0x1d0 [ 552.398530][T10273] ? __fget_files+0x206/0x3a0 [ 552.403337][T10273] __sys_sendmsg+0x16e/0x220 [ 552.407972][T10273] ? __pfx___sys_sendmsg+0x10/0x10 [ 552.413127][T10273] ? __x64_sys_futex+0x1e1/0x4c0 [ 552.418131][T10273] do_syscall_64+0xcd/0x250 [ 552.422669][T10273] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 552.428608][T10273] RIP: 0033:0x7fdd3697e759 [ 552.433050][T10273] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 552.452692][T10273] RSP: 002b:00007fdd376f7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 552.461154][T10273] RAX: ffffffffffffffda RBX: 00007fdd36b35f80 RCX: 00007fdd3697e759 [ 552.469158][T10273] RDX: 0000000024000054 RSI: 0000000020000000 RDI: 0000000000000003 [ 552.477160][T10273] RBP: 00007fdd369f175e R08: 0000000000000000 R09: 0000000000000000 [ 552.485160][T10273] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 552.493172][T10273] R13: 0000000000000000 R14: 00007fdd36b35f80 R15: 00007fffe4e55688 [ 552.501192][T10273] [ 554.487863][T10340] do_dccp_getsockopt: sockopt(PACKET_SIZE) is deprecated: fix your app [ 554.494952][T10342] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1189'. [ 554.508200][T10342] netlink: 3 bytes leftover after parsing attributes in process `syz.3.1189'. [ 554.518034][T10342] tc_dump_action: action bad kind [ 554.826933][T10352] netlink: 50 bytes leftover after parsing attributes in process `syz.2.1193'. [ 556.115682][T10395] netlink: 50 bytes leftover after parsing attributes in process `syz.3.1204'. [ 557.444226][T10436] netlink: 334 bytes leftover after parsing attributes in process `syz.1.1215'. [ 558.480425][T10458] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1223'. [ 563.169842][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.176311][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.686015][T10585] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1265'. [ 565.673206][T10622] netlink: zone id is out of range [ 565.707882][T10622] netlink: set zone limit has 4 unknown bytes [ 565.857531][T10640] bridge0: port 3(batadv0) entered blocking state [ 565.894042][T10640] bridge0: port 3(batadv0) entered disabled state [ 565.951048][T10640] batadv0: entered allmulticast mode [ 565.993566][T10640] batadv0: entered promiscuous mode [ 566.018751][ T68] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 566.028326][ T68] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 566.065281][T10640] bridge0: port 3(batadv0) entered blocking state [ 566.071960][T10640] bridge0: port 3(batadv0) entered forwarding state [ 566.386374][T10660] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1286'. [ 570.105093][T10765] netlink: ct family unspecified [ 570.927244][T10797] netlink: 'syz.2.1327': attribute type 7 has an invalid length. [ 570.953413][T10797] netlink: 'syz.2.1327': attribute type 7 has an invalid length. [ 572.718122][T10859] netlink: zone id is out of range [ 572.748208][T10859] netlink: zone id is out of range [ 572.926560][T10866] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1347'. [ 575.005786][T10905] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1361'. [ 575.477133][ T5876] Bluetooth: hci0: command 0x0406 tx timeout [ 576.677105][T10953] netlink: 288 bytes leftover after parsing attributes in process `syz.2.1376'. [ 581.732102][T11061] sctp: [Deprecated]: syz.1.1409 (pid 11061) Use of struct sctp_assoc_value in delayed_ack socket option. [ 581.732102][T11061] Use struct sctp_sack_info instead [ 582.688675][T11093] svc: failed to register nfsdv3 RPC service (errno 111). [ 582.707842][T11093] svc: failed to register nfsaclv3 RPC service (errno 111). [ 583.562958][ T29] audit: type=1326 audit(4294967305.460:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11115 comm="syz.3.1429" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f3ef7b7e759 code=0x0 [ 583.878899][ T6059] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 584.076989][ T6059] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 584.185321][ T6059] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 584.438213][ T6059] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 584.487713][T11134] netlink: 3 bytes leftover after parsing attributes in process `syz.2.1435'. [ 584.506444][ T5876] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 584.515939][ T5876] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 584.524027][ T5876] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 584.544819][ T5876] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 584.554445][ T5876] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 584.563425][ T5876] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 584.813569][ T6059] bridge_slave_1: left allmulticast mode [ 584.821319][ T6059] bridge_slave_1: left promiscuous mode [ 584.838770][T11141] netlink: 50 bytes leftover after parsing attributes in process `syz.3.1436'. [ 584.858455][ T6059] bridge0: port 2(bridge_slave_1) entered disabled state [ 584.887555][ T6059] bridge_slave_0: left allmulticast mode [ 584.902204][ T6059] bridge_slave_0: left promiscuous mode [ 584.925067][ T6059] bridge0: port 1(bridge_slave_0) entered disabled state [ 585.728450][ T6059] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 585.743054][ T6059] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 585.760483][ T6059] bond0 (unregistering): Released all slaves [ 585.850105][ T6059] HSR: left promiscuous mode [ 586.093596][T11136] chnl_net:caif_netlink_parms(): no params data found [ 586.675315][ T5876] Bluetooth: hci0: command tx timeout [ 586.972415][T11136] bridge0: port 1(bridge_slave_0) entered blocking state [ 586.984790][T11136] bridge0: port 1(bridge_slave_0) entered disabled state [ 586.992023][T11136] bridge_slave_0: entered allmulticast mode [ 587.013133][T11136] bridge_slave_0: entered promiscuous mode [ 587.036992][T11136] bridge0: port 2(bridge_slave_1) entered blocking state [ 587.044127][T11136] bridge0: port 2(bridge_slave_1) entered disabled state [ 587.073224][T11136] bridge_slave_1: entered allmulticast mode [ 587.082404][T11226] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1453'. [ 587.084943][T11136] bridge_slave_1: entered promiscuous mode [ 587.107374][T11226] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1453'. [ 587.205341][T11228] netlink: 300 bytes leftover after parsing attributes in process `syz.1.1453'. [ 587.308182][T11136] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 587.335422][T11136] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 587.525316][ T6059] hsr_slave_0: left promiscuous mode [ 587.531342][ T6059] hsr_slave_1: left promiscuous mode [ 587.538668][ T6059] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 587.546168][ T6059] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 587.554025][ T6059] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 587.561670][ T6059] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 587.586687][ T6059] veth1_macvtap: left promiscuous mode [ 587.592258][ T6059] veth0_macvtap: left promiscuous mode [ 587.598319][ T6059] veth1_vlan: left promiscuous mode [ 587.603637][ T6059] veth0_vlan: left promiscuous mode [ 588.386775][T11245] netlink: 50 bytes leftover after parsing attributes in process `syz.1.1459'. [ 588.424144][ T6059] team0 (unregistering): Port device team_slave_1 removed [ 588.507335][ T6059] team0 (unregistering): Port device team_slave_0 removed [ 588.755452][ T5876] Bluetooth: hci0: command tx timeout [ 589.061101][T11136] team0: Port device team_slave_0 added [ 589.096932][T11136] team0: Port device team_slave_1 added [ 589.243046][T11136] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 589.259751][T11136] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 589.322574][T11136] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 589.452523][T11136] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 589.465357][T11136] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 589.500110][T11136] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 589.627312][T11136] hsr_slave_0: entered promiscuous mode [ 589.638560][T11136] hsr_slave_1: entered promiscuous mode [ 590.269030][T11136] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 590.302170][T11136] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 590.327600][T11136] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 590.371709][T11136] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 590.494201][T11299] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1470'. [ 590.834748][ T5876] Bluetooth: hci0: command tx timeout [ 590.843979][T11136] 8021q: adding VLAN 0 to HW filter on device bond0 [ 591.108709][ T6059] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 591.247232][T11136] 8021q: adding VLAN 0 to HW filter on device team0 [ 591.267642][ T5913] bridge0: port 1(bridge_slave_0) entered blocking state [ 591.274795][ T5913] bridge0: port 1(bridge_slave_0) entered forwarding state [ 591.487963][ T6059] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 591.553939][ T5913] bridge0: port 2(bridge_slave_1) entered blocking state [ 591.561115][ T5913] bridge0: port 2(bridge_slave_1) entered forwarding state [ 591.656586][T11136] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 591.866650][ T6059] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 591.974223][ T5881] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 591.984399][ T5881] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 591.992597][ T5881] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 592.006900][ T5881] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 592.037254][ T5881] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 592.055733][ T5881] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 592.147317][ T6059] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 592.252121][T11136] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 592.621787][ T6059] bridge_slave_1: left allmulticast mode [ 592.637837][ T6059] bridge_slave_1: left promiscuous mode [ 592.665248][ T6059] bridge0: port 2(bridge_slave_1) entered disabled state [ 592.690935][ T6059] bridge_slave_0: left allmulticast mode [ 592.702716][ T6059] bridge_slave_0: left promiscuous mode [ 592.725821][ T6059] bridge0: port 1(bridge_slave_0) entered disabled state [ 592.913466][ T5881] Bluetooth: hci0: command tx timeout [ 593.482073][ T6059] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 593.509233][ T6059] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 593.527784][ T6059] bond0 (unregistering): Released all slaves [ 593.562568][T11335] chnl_net:caif_netlink_parms(): no params data found [ 593.830921][T11136] veth0_vlan: entered promiscuous mode [ 593.958510][T11136] veth1_vlan: entered promiscuous mode [ 593.976347][T11335] bridge0: port 1(bridge_slave_0) entered blocking state [ 593.983470][T11335] bridge0: port 1(bridge_slave_0) entered disabled state [ 594.013890][T11335] bridge_slave_0: entered allmulticast mode [ 594.026573][T11335] bridge_slave_0: entered promiscuous mode [ 594.105071][ T5881] Bluetooth: hci2: command tx timeout [ 594.157167][T11335] bridge0: port 2(bridge_slave_1) entered blocking state [ 594.191630][T11335] bridge0: port 2(bridge_slave_1) entered disabled state [ 594.211919][T11335] bridge_slave_1: entered allmulticast mode [ 594.243556][T11335] bridge_slave_1: entered promiscuous mode [ 594.388549][T11335] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 594.440523][T11136] veth0_macvtap: entered promiscuous mode [ 596.039035][T11335] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 596.111801][T11136] veth1_macvtap: entered promiscuous mode [ 596.168731][T11335] team0: Port device team_slave_0 added [ 596.185919][ T5881] Bluetooth: hci2: command tx timeout [ 596.209808][ T6059] hsr_slave_0: left promiscuous mode [ 596.215941][ T6059] hsr_slave_1: left promiscuous mode [ 596.232825][ T6059] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 596.259194][ T6059] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 596.276723][ T6059] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 596.284235][ T6059] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 596.310292][ T6059] veth1_macvtap: left promiscuous mode [ 596.315910][ T6059] veth0_macvtap: left promiscuous mode [ 596.321437][ T6059] veth1_vlan: left promiscuous mode [ 596.326798][ T6059] veth0_vlan: left promiscuous mode [ 596.715017][ T6059] team0 (unregistering): Port device team_slave_1 removed [ 596.760395][ T6059] team0 (unregistering): Port device team_slave_0 removed [ 597.105357][T11335] team0: Port device team_slave_1 added [ 597.170395][T11335] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 597.178385][T11335] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 597.210247][T11335] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 597.258786][T11136] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 597.269538][T11136] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 597.279988][T11136] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 597.290622][T11136] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 597.304383][T11136] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 597.323473][T11335] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 597.330662][T11335] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 597.379428][T11335] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 597.449562][T11136] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 597.463241][T11136] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 597.474861][T11136] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 597.485405][T11136] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 597.499405][T11136] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 597.520523][T11335] hsr_slave_0: entered promiscuous mode [ 597.527920][T11335] hsr_slave_1: entered promiscuous mode [ 597.534398][T11335] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 597.545570][T11335] Cannot create hsr debugfs directory [ 597.567485][T11136] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 597.577656][T11136] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 597.586679][T11136] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 597.595928][T11136] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 597.872767][ T5923] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 597.894674][ T5923] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 598.044429][ T6159] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 598.053874][ T6159] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 598.165548][T11335] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 598.204631][T11335] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 598.228501][T11335] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 598.252854][T11335] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 598.265302][ T5881] Bluetooth: hci2: command tx timeout [ 598.495028][T11335] 8021q: adding VLAN 0 to HW filter on device bond0 [ 598.652129][T11335] 8021q: adding VLAN 0 to HW filter on device team0 [ 598.727820][ T3493] bridge0: port 1(bridge_slave_0) entered blocking state [ 598.735057][ T3493] bridge0: port 1(bridge_slave_0) entered forwarding state [ 598.750498][ T3493] bridge0: port 2(bridge_slave_1) entered blocking state [ 598.757755][ T3493] bridge0: port 2(bridge_slave_1) entered forwarding state [ 599.309113][T11335] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 599.836734][T11335] veth0_vlan: entered promiscuous mode [ 599.857256][T11335] veth1_vlan: entered promiscuous mode [ 599.883165][T11335] veth0_macvtap: entered promiscuous mode [ 599.920723][T11335] veth1_macvtap: entered promiscuous mode [ 600.021338][T11335] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 600.042684][T11335] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 600.068123][T11335] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 600.080419][T11335] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 600.098587][T11335] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 600.119670][T11335] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 600.131480][T11335] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 600.158996][T11335] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 600.180412][T11335] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 600.200020][T11335] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 600.211232][T11335] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 600.230280][T11335] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 600.250369][T11335] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 600.262968][T11335] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 600.306063][T11335] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 600.331986][T11335] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 600.345052][ T5881] Bluetooth: hci2: command tx timeout [ 600.364065][T11335] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 600.413726][T11335] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 600.711647][ T68] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 600.747845][ T68] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 600.846588][ T6159] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 600.885244][ T6159] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 601.463118][ T29] audit: type=1326 audit(4294967323.360:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11529 comm="syz.2.1501" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fdd3697e759 code=0x0 [ 601.745357][T11531] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1501'. [ 602.080499][T11577] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1509'. [ 603.091662][T11614] delete_channel: no stack [ 603.279460][T11628] debugfs: Directory '-侞6yռ ka;+1)p;!X+@' with parent 'ieee80211' already present! [ 603.637492][T11642] debugfs: Directory '-侞6yռ ka;+1)p;!X+@' with parent 'ieee80211' already present! [ 606.187219][T11742] netlink: 50 bytes leftover after parsing attributes in process `syz.3.1546'. [ 607.298882][T11764] netlink: 172 bytes leftover after parsing attributes in process `syz.4.1553'. [ 610.876072][T11847] sysfs: cannot create duplicate filename '/class/ieee80211/-侞6yռ ka;+1)p;!X+@' [ 610.915123][T11847] CPU: 1 UID: 0 PID: 11847 Comm: syz.3.1566 Not tainted 6.12.0-syzkaller-01782-gbf9aa14fc523 #0 [ 610.925621][T11847] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 610.935717][T11847] Call Trace: [ 610.939025][T11847] [ 610.942024][T11847] dump_stack_lvl+0x16c/0x1f0 [ 610.946761][T11847] sysfs_warn_dup+0x7f/0xa0 [ 610.951310][T11847] sysfs_do_create_link_sd+0x124/0x140 [ 610.956833][T11847] sysfs_create_link+0x61/0xc0 [ 610.961640][T11847] device_add+0x62e/0x1a70 [ 610.966104][T11847] ? __pfx_device_add+0x10/0x10 [ 610.971005][T11847] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 610.976951][T11847] ? ieee80211_set_bitrate_flags+0x249/0x6a0 [ 610.983003][T11847] wiphy_register+0x20d7/0x2d30 [ 610.987915][T11847] ? __pfx_wiphy_register+0x10/0x10 [ 610.993177][T11847] ieee80211_register_hw+0x2959/0x3fb0 [ 610.998689][T11847] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 611.004529][T11847] ? net_generic+0xea/0x2a0 [ 611.009076][T11847] ? rcu_is_watching+0x12/0xc0 [ 611.013884][T11847] ? trace_hrtimer_init+0x19d/0x220 [ 611.019125][T11847] ? __hrtimer_init+0x106/0x2c0 [ 611.024002][T11847] mac80211_hwsim_new_radio+0x2c47/0x56c0 [ 611.029761][T11847] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 611.035843][T11847] ? __kmalloc_node_track_caller_noprof+0x22d/0x440 [ 611.042450][T11847] ? hwsim_new_radio_nl+0x9ff/0x12b0 [ 611.047762][T11847] hwsim_new_radio_nl+0xb42/0x12b0 [ 611.052892][T11847] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 611.058463][T11847] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 611.065937][T11847] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 611.073335][T11847] genl_family_rcv_msg_doit+0x202/0x2f0 [ 611.078906][T11847] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 611.085000][T11847] ? bpf_lsm_capable+0x9/0x10 [ 611.089695][T11847] ? security_capable+0x7e/0x260 [ 611.094648][T11847] ? ns_capable+0xd7/0x110 [ 611.099081][T11847] genl_rcv_msg+0x565/0x800 [ 611.103604][T11847] ? __pfx_genl_rcv_msg+0x10/0x10 [ 611.108646][T11847] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 611.114249][T11847] netlink_rcv_skb+0x165/0x410 [ 611.119034][T11847] ? __pfx_genl_rcv_msg+0x10/0x10 [ 611.124078][T11847] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 611.129394][T11847] ? down_read+0xc9/0x330 [ 611.133750][T11847] ? __pfx_down_read+0x10/0x10 [ 611.138529][T11847] ? netlink_deliver_tap+0x1ae/0xcf0 [ 611.144013][T11847] genl_rcv+0x28/0x40 [ 611.148010][T11847] netlink_unicast+0x53c/0x7f0 [ 611.152796][T11847] ? __pfx_netlink_unicast+0x10/0x10 [ 611.158098][T11847] ? __phys_addr_symbol+0x30/0x80 [ 611.163141][T11847] ? __check_object_size+0x488/0x710 [ 611.168458][T11847] netlink_sendmsg+0x8b8/0xd70 [ 611.173252][T11847] ? __pfx_netlink_sendmsg+0x10/0x10 [ 611.178571][T11847] ____sys_sendmsg+0x9ae/0xb40 [ 611.183443][T11847] ? copy_msghdr_from_user+0x10b/0x160 [ 611.188915][T11847] ? __pfx_____sys_sendmsg+0x10/0x10 [ 611.194233][T11847] ___sys_sendmsg+0x135/0x1e0 [ 611.198925][T11847] ? __pfx____sys_sendmsg+0x10/0x10 [ 611.204156][T11847] ? __pfx_lock_release+0x10/0x10 [ 611.209217][T11847] ? trace_lock_acquire+0x14a/0x1d0 [ 611.214545][T11847] ? __fget_files+0x206/0x3a0 [ 611.219271][T11847] __sys_sendmsg+0x16e/0x220 [ 611.223883][T11847] ? __pfx___sys_sendmsg+0x10/0x10 [ 611.229013][T11847] ? __x64_sys_futex+0x1e1/0x4c0 [ 611.233991][T11847] do_syscall_64+0xcd/0x250 [ 611.238508][T11847] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 611.244427][T11847] RIP: 0033:0x7f3ef7b7e759 [ 611.248855][T11847] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 611.268475][T11847] RSP: 002b:00007f3ef892f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 611.276905][T11847] RAX: ffffffffffffffda RBX: 00007f3ef7d35f80 RCX: 00007f3ef7b7e759 [ 611.284972][T11847] RDX: 0000000024000054 RSI: 0000000020000000 RDI: 0000000000000003 [ 611.292949][T11847] RBP: 00007f3ef7bf175e R08: 0000000000000000 R09: 0000000000000000 [ 611.301016][T11847] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 611.308992][T11847] R13: 0000000000000000 R14: 00007f3ef7d35f80 R15: 00007ffefaaad438 [ 611.316988][T11847] [ 619.094062][T11558] syz.2.1501 (11558) used greatest stack depth: 19152 bytes left [ 619.393375][T11543] syz.2.1501 (11543) used greatest stack depth: 18096 bytes left [ 622.660093][T12024] debugfs: Directory '-侞6yռ ka;+1)p;!X+@' with parent 'ieee80211' already present! [ 622.755609][T12019] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 623.046957][T12039] netlink: 50 bytes leftover after parsing attributes in process `syz.2.1582'. [ 624.587828][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.594210][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.872297][T12097] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 636.512247][T12236] HSR: entered promiscuous mode [ 643.560139][ T6059] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 643.646465][ T6059] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 643.708616][ T6059] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 643.779170][ T6059] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 643.878557][ T6059] bridge_slave_1: left allmulticast mode [ 643.893098][ T6059] bridge_slave_1: left promiscuous mode [ 643.899297][ T6059] bridge0: port 2(bridge_slave_1) entered disabled state [ 643.909495][ T6059] bridge_slave_0: left allmulticast mode [ 643.915328][ T6059] bridge_slave_0: left promiscuous mode [ 643.920977][ T6059] bridge0: port 1(bridge_slave_0) entered disabled state [ 644.190358][ T6059] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 644.201863][ T6059] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 644.212643][ T6059] bond0 (unregistering): Released all slaves [ 644.590475][ T6059] hsr_slave_0: left promiscuous mode [ 644.601579][ T6059] hsr_slave_1: left promiscuous mode [ 644.608365][ T6059] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 644.621976][ T6059] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 644.630251][ T6059] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 644.642710][ T6059] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 644.670513][ T6059] veth1_macvtap: left promiscuous mode [ 644.681374][ T6059] veth0_macvtap: left promiscuous mode [ 644.687639][ T6059] veth1_vlan: left promiscuous mode [ 644.692982][ T6059] veth0_vlan: left promiscuous mode [ 645.181877][ T6059] team0 (unregistering): Port device team_slave_1 removed [ 645.217767][ T6059] team0 (unregistering): Port device team_slave_0 removed [ 645.902904][ T6059] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 645.981636][ T6059] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 646.062478][ T6059] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 646.147159][ T6059] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 646.261554][ T6059] bridge_slave_1: left allmulticast mode [ 646.289509][ T6059] bridge_slave_1: left promiscuous mode [ 646.301395][ T6059] bridge0: port 2(bridge_slave_1) entered disabled state [ 646.317505][ T6059] bridge_slave_0: left allmulticast mode [ 646.323193][ T6059] bridge_slave_0: left promiscuous mode [ 646.332271][ T6059] bridge0: port 1(bridge_slave_0) entered disabled state [ 646.600711][ T6059] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 646.612332][ T6059] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 646.625471][ T6059] bond0 (unregistering): Released all slaves [ 646.953033][ T6059] hsr_slave_0: left promiscuous mode [ 646.963710][ T6059] hsr_slave_1: left promiscuous mode [ 646.979480][ T6059] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 646.987933][ T6059] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 647.000049][ T6059] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 647.008904][ T6059] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 647.033003][ T6059] veth1_macvtap: left promiscuous mode [ 647.038958][ T6059] veth0_macvtap: left promiscuous mode [ 647.045217][ T6059] veth1_vlan: left promiscuous mode [ 647.050554][ T6059] veth0_vlan: left promiscuous mode [ 647.390972][ T6059] team0 (unregistering): Port device team_slave_1 removed [ 647.428335][ T6059] team0 (unregistering): Port device team_slave_0 removed [ 653.265042][ T5876] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 653.274522][ T5876] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 653.282679][ T5876] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 653.291177][ T5876] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 653.303158][ T5876] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 653.310636][ T5876] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 653.453959][ T5881] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 653.463668][ T5881] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 653.471568][ T5881] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 653.513795][ T5881] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 653.525063][ T5881] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 653.533356][ T5881] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 653.728747][T12519] chnl_net:caif_netlink_parms(): no params data found [ 653.972434][T12528] chnl_net:caif_netlink_parms(): no params data found [ 653.984333][T12519] bridge0: port 1(bridge_slave_0) entered blocking state [ 653.992076][T12519] bridge0: port 1(bridge_slave_0) entered disabled state [ 654.003213][T12519] bridge_slave_0: entered allmulticast mode [ 654.010992][T12519] bridge_slave_0: entered promiscuous mode [ 654.019634][T12519] bridge0: port 2(bridge_slave_1) entered blocking state [ 654.028086][T12519] bridge0: port 2(bridge_slave_1) entered disabled state [ 654.047015][T12519] bridge_slave_1: entered allmulticast mode [ 654.058218][T12519] bridge_slave_1: entered promiscuous mode [ 654.206071][T12543] sysfs: cannot create duplicate filename '/class/ieee80211/-侞6yռ ka;+1)p;!X+@' [ 654.218302][T12543] CPU: 1 UID: 0 PID: 12543 Comm: syz.2.1616 Not tainted 6.12.0-syzkaller-01782-gbf9aa14fc523 #0 [ 654.228758][T12543] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 654.238842][T12543] Call Trace: [ 654.242567][T12543] [ 654.245511][T12543] dump_stack_lvl+0x16c/0x1f0 [ 654.250221][T12543] sysfs_warn_dup+0x7f/0xa0 [ 654.254745][T12543] sysfs_do_create_link_sd+0x124/0x140 [ 654.260229][T12543] sysfs_create_link+0x61/0xc0 [ 654.265014][T12543] device_add+0x62e/0x1a70 [ 654.269465][T12543] ? __pfx_device_add+0x10/0x10 [ 654.274350][T12543] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 654.280279][T12543] ? ieee80211_set_bitrate_flags+0x249/0x6a0 [ 654.286294][T12543] wiphy_register+0x20d7/0x2d30 [ 654.291182][T12543] ? __pfx_wiphy_register+0x10/0x10 [ 654.296419][T12543] ieee80211_register_hw+0x2959/0x3fb0 [ 654.301915][T12543] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 654.307731][T12543] ? net_generic+0xea/0x2a0 [ 654.312265][T12543] ? rcu_is_watching+0x12/0xc0 [ 654.317044][T12543] ? trace_hrtimer_init+0x19d/0x220 [ 654.322266][T12543] ? __hrtimer_init+0x106/0x2c0 [ 654.327139][T12543] mac80211_hwsim_new_radio+0x2c47/0x56c0 [ 654.333004][T12543] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 654.339126][T12543] ? __kmalloc_node_track_caller_noprof+0x22d/0x440 [ 654.345750][T12543] ? hwsim_new_radio_nl+0x9ff/0x12b0 [ 654.351071][T12543] hwsim_new_radio_nl+0xb42/0x12b0 [ 654.356210][T12543] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 654.361784][T12543] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 654.369181][T12543] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 654.376580][T12543] genl_family_rcv_msg_doit+0x202/0x2f0 [ 654.382156][T12543] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 654.388257][T12543] ? bpf_lsm_capable+0x9/0x10 [ 654.392956][T12543] ? security_capable+0x7e/0x260 [ 654.397915][T12543] ? ns_capable+0xd7/0x110 [ 654.402482][T12543] genl_rcv_msg+0x565/0x800 [ 654.407027][T12543] ? __pfx_genl_rcv_msg+0x10/0x10 [ 654.412084][T12543] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 654.417671][T12543] netlink_rcv_skb+0x165/0x410 [ 654.422459][T12543] ? __pfx_genl_rcv_msg+0x10/0x10 [ 654.427513][T12543] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 654.432835][T12543] ? down_read+0xc9/0x330 [ 654.437180][T12543] ? __pfx_down_read+0x10/0x10 [ 654.441957][T12543] ? netlink_deliver_tap+0x1ae/0xcf0 [ 654.447263][T12543] genl_rcv+0x28/0x40 [ 654.451262][T12543] netlink_unicast+0x53c/0x7f0 [ 654.456048][T12543] ? __pfx_netlink_unicast+0x10/0x10 [ 654.461434][T12543] ? __phys_addr_symbol+0x30/0x80 [ 654.466487][T12543] ? __check_object_size+0x488/0x710 [ 654.471800][T12543] netlink_sendmsg+0x8b8/0xd70 [ 654.476599][T12543] ? __pfx_netlink_sendmsg+0x10/0x10 [ 654.481923][T12543] ____sys_sendmsg+0x9ae/0xb40 [ 654.486705][T12543] ? copy_msghdr_from_user+0x10b/0x160 [ 654.492178][T12543] ? __pfx_____sys_sendmsg+0x10/0x10 [ 654.497513][T12543] ___sys_sendmsg+0x135/0x1e0 [ 654.502204][T12543] ? __pfx____sys_sendmsg+0x10/0x10 [ 654.507424][T12543] ? __pfx_lock_release+0x10/0x10 [ 654.512476][T12543] ? trace_lock_acquire+0x14a/0x1d0 [ 654.517714][T12543] ? __fget_files+0x206/0x3a0 [ 654.522416][T12543] __sys_sendmsg+0x16e/0x220 [ 654.527016][T12543] ? __pfx___sys_sendmsg+0x10/0x10 [ 654.532141][T12543] ? __x64_sys_futex+0x1e1/0x4c0 [ 654.537116][T12543] do_syscall_64+0xcd/0x250 [ 654.541635][T12543] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 654.547543][T12543] RIP: 0033:0x7fdd3697e759 [ 654.551962][T12543] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 654.571579][T12543] RSP: 002b:00007fdd376f7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 654.580002][T12543] RAX: ffffffffffffffda RBX: 00007fdd36b35f80 RCX: 00007fdd3697e759 [ 654.587998][T12543] RDX: 0000000024000054 RSI: 0000000020000000 RDI: 0000000000000003 [ 654.595988][T12543] RBP: 00007fdd369f175e R08: 0000000000000000 R09: 0000000000000000 [ 654.603968][T12543] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 654.611946][T12543] R13: 0000000000000000 R14: 00007fdd36b35f80 R15: 00007fffe4e55688 [ 654.619941][T12543] [ 654.733557][T12519] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 654.830216][T12519] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 654.862363][T12528] bridge0: port 1(bridge_slave_0) entered blocking state [ 654.869716][T12528] bridge0: port 1(bridge_slave_0) entered disabled state [ 654.878272][T12528] bridge_slave_0: entered allmulticast mode [ 654.885755][T12528] bridge_slave_0: entered promiscuous mode [ 654.908143][T12528] bridge0: port 2(bridge_slave_1) entered blocking state [ 654.915444][T12528] bridge0: port 2(bridge_slave_1) entered disabled state [ 654.922729][T12528] bridge_slave_1: entered allmulticast mode [ 654.930201][T12528] bridge_slave_1: entered promiscuous mode [ 654.966165][T12519] team0: Port device team_slave_0 added [ 655.029828][T12528] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 655.053274][T12519] team0: Port device team_slave_1 added [ 655.112339][T12528] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 655.163188][T12519] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 655.170467][T12519] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 655.252094][T12519] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 655.272258][T12519] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 655.280880][T12519] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 655.309123][T12519] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 655.385491][ T5881] Bluetooth: hci0: command tx timeout [ 655.453302][T12528] team0: Port device team_slave_0 added [ 655.471419][T12519] hsr_slave_0: entered promiscuous mode [ 655.504972][T12519] hsr_slave_1: entered promiscuous mode [ 655.535430][T12528] team0: Port device team_slave_1 added [ 655.599898][T12528] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 655.607379][T12528] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 655.634158][T12528] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 655.646618][ T5881] Bluetooth: hci1: command tx timeout [ 655.662792][T12528] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 655.670049][T12528] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 655.697046][T12528] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 655.819402][T12568] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1623'. [ 655.838630][T12528] hsr_slave_0: entered promiscuous mode [ 655.857495][T12528] hsr_slave_1: entered promiscuous mode [ 655.863520][T12528] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 655.872619][T12528] Cannot create hsr debugfs directory [ 655.924009][ T5913] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 656.046950][ T5913] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 656.217770][ T5913] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 656.297566][ T5876] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 656.316011][ T5876] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 656.324306][ T5876] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 656.335587][ T5876] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 656.351597][ T5876] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 656.360850][ T5913] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 656.371039][ T5876] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 656.439189][T12519] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 656.466457][T12519] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 656.523437][T12519] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 656.551278][T12519] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 656.729428][ T5913] bridge_slave_1: left allmulticast mode [ 656.758295][ T5913] bridge_slave_1: left promiscuous mode [ 656.764839][ T5913] bridge0: port 2(bridge_slave_1) entered disabled state [ 656.825995][ T5913] bridge_slave_0: left allmulticast mode [ 656.831680][ T5913] bridge_slave_0: left promiscuous mode [ 656.838257][ T5913] bridge0: port 1(bridge_slave_0) entered disabled state [ 657.151651][ T5913] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 657.162612][ T5913] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 657.173332][ T5913] bond0 (unregistering): Released all slaves [ 657.183514][T12528] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 657.202456][T12528] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 657.253419][T12528] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 657.266549][T12528] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 657.287598][ T5913] HSR: left promiscuous mode [ 657.434372][T12577] chnl_net:caif_netlink_parms(): no params data found [ 657.480552][ T5876] Bluetooth: hci0: command tx timeout [ 657.630331][T12519] 8021q: adding VLAN 0 to HW filter on device bond0 [ 657.697343][T12519] 8021q: adding VLAN 0 to HW filter on device team0 [ 657.716737][ T5876] Bluetooth: hci1: command tx timeout [ 657.732113][ T5923] bridge0: port 1(bridge_slave_0) entered blocking state [ 657.739273][ T5923] bridge0: port 1(bridge_slave_0) entered forwarding state [ 657.882396][ T6059] bridge0: port 2(bridge_slave_1) entered blocking state [ 657.889568][ T6059] bridge0: port 2(bridge_slave_1) entered forwarding state [ 657.928976][ T5913] hsr_slave_0: left promiscuous mode [ 657.948373][ T5913] hsr_slave_1: left promiscuous mode [ 657.958968][ T5913] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 657.986263][ T5913] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 658.001379][ T5913] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 658.012580][ T5913] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 658.058150][ T5913] veth1_macvtap: left promiscuous mode [ 658.063723][ T5913] veth0_macvtap: left promiscuous mode [ 658.076023][ T5913] veth1_vlan: left promiscuous mode [ 658.084735][ T5913] veth0_vlan: left promiscuous mode [ 658.429320][ T5876] Bluetooth: hci2: command tx timeout [ 658.609768][ T5913] team0 (unregistering): Port device team_slave_1 removed [ 658.649348][ T5913] team0 (unregistering): Port device team_slave_0 removed [ 659.023271][T12577] bridge0: port 1(bridge_slave_0) entered blocking state [ 659.033719][T12577] bridge0: port 1(bridge_slave_0) entered disabled state [ 659.041064][T12577] bridge_slave_0: entered allmulticast mode [ 659.055019][T12577] bridge_slave_0: entered promiscuous mode [ 659.119555][T12577] bridge0: port 2(bridge_slave_1) entered blocking state [ 659.126998][T12577] bridge0: port 2(bridge_slave_1) entered disabled state [ 659.134199][T12577] bridge_slave_1: entered allmulticast mode [ 659.143104][T12577] bridge_slave_1: entered promiscuous mode [ 659.194514][T12577] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 659.208207][T12577] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 659.332675][T12528] 8021q: adding VLAN 0 to HW filter on device bond0 [ 659.370283][T12577] team0: Port device team_slave_0 added [ 659.422378][T12577] team0: Port device team_slave_1 added [ 659.539216][T12528] 8021q: adding VLAN 0 to HW filter on device team0 [ 659.558929][T12577] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 659.566566][ T5876] Bluetooth: hci0: command tx timeout [ 659.576340][T12577] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 659.603425][T12577] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 659.620274][T12577] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 659.627503][T12577] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 659.653932][T12577] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 659.742480][ T5913] bridge0: port 1(bridge_slave_0) entered blocking state [ 659.749663][ T5913] bridge0: port 1(bridge_slave_0) entered forwarding state [ 659.762681][ T5913] bridge0: port 2(bridge_slave_1) entered blocking state [ 659.769790][ T5913] bridge0: port 2(bridge_slave_1) entered forwarding state [ 659.785348][ T5876] Bluetooth: hci1: command tx timeout [ 659.787239][T12577] hsr_slave_0: entered promiscuous mode [ 659.799668][T12577] hsr_slave_1: entered promiscuous mode [ 659.805958][T12577] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 659.813879][T12577] Cannot create hsr debugfs directory [ 659.897335][T12519] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 660.131983][T12577] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 660.148715][T12577] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 660.168500][T12577] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 660.188568][T12577] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 660.347310][T12577] 8021q: adding VLAN 0 to HW filter on device bond0 [ 660.360102][T12528] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 660.409065][T12577] 8021q: adding VLAN 0 to HW filter on device team0 [ 660.438285][ T5889] bridge0: port 1(bridge_slave_0) entered blocking state [ 660.445437][ T5889] bridge0: port 1(bridge_slave_0) entered forwarding state [ 660.489277][ T5889] bridge0: port 2(bridge_slave_1) entered blocking state [ 660.496463][ T5889] bridge0: port 2(bridge_slave_1) entered forwarding state [ 660.506024][ T5876] Bluetooth: hci2: command tx timeout [ 660.528540][T12519] veth0_vlan: entered promiscuous mode [ 660.603432][T12519] veth1_vlan: entered promiscuous mode [ 660.704438][T12519] veth0_macvtap: entered promiscuous mode [ 660.719544][T12519] veth1_macvtap: entered promiscuous mode [ 660.773421][T12519] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 660.792096][T12519] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 660.803889][T12519] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 660.822974][T12519] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 660.835829][T12519] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 660.847415][T12519] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 660.869696][T12519] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 660.881503][T12519] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 660.890554][T12519] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 660.914487][T12519] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 660.943723][T12528] veth0_vlan: entered promiscuous mode [ 660.969478][T12528] veth1_vlan: entered promiscuous mode [ 660.986409][T12577] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 661.070597][T12528] veth0_macvtap: entered promiscuous mode [ 661.123640][T12528] veth1_macvtap: entered promiscuous mode [ 661.197678][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 661.208713][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 661.251040][T12528] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 661.274807][T12528] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 661.285717][T12528] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 661.301319][T12528] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 661.323634][T12528] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 661.345298][ T5895] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 661.361713][T12528] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 661.372788][T12528] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 661.383063][ T5895] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 661.390797][T12528] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 661.390820][T12528] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 661.412640][T12528] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 661.443528][T12577] veth0_vlan: entered promiscuous mode [ 661.458333][T12528] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 661.474625][T12528] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 661.483357][T12528] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 661.492939][T12528] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 661.522167][T12577] veth1_vlan: entered promiscuous mode [ 661.611098][T12577] veth0_macvtap: entered promiscuous mode [ 661.626033][ T5876] Bluetooth: hci0: command tx timeout [ 661.642893][T12577] veth1_macvtap: entered promiscuous mode [ 661.654248][ T6059] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 661.677645][ T6059] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 661.696989][T12577] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 661.712183][T12577] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 661.722698][T12577] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 661.734102][T12577] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 661.744709][T12577] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 661.756766][T12577] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 661.768407][T12577] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 661.783019][T12577] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 661.794356][T12577] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 661.806747][T12577] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 661.818403][T12577] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 661.828991][T12577] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 661.839944][T12577] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 661.852922][T12577] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 661.864994][ T5876] Bluetooth: hci1: command tx timeout [ 661.882052][ T5889] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 661.891762][T12577] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 661.901434][T12577] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 661.913091][T12577] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 661.929713][ T5889] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 661.939781][T12577] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 662.051107][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 662.060620][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 662.097151][ T5913] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 662.109049][ T5913] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 662.585069][ T5876] Bluetooth: hci2: command tx timeout [ 664.664737][ T5876] Bluetooth: hci2: command tx timeout [ 668.487314][T13018] debugfs: Directory '-侞6yռ ka;+1)p;!X+@' with parent 'ieee80211' already present! [ 684.534039][T13227] sysfs: cannot create duplicate filename '/class/ieee80211/-侞6yռ ka;+1)p;!X+@' [ 684.586178][T13227] CPU: 0 UID: 0 PID: 13227 Comm: syz.2.1653 Not tainted 6.12.0-syzkaller-01782-gbf9aa14fc523 #0 [ 684.596854][T13227] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 684.606953][T13227] Call Trace: [ 684.610260][T13227] [ 684.613221][T13227] dump_stack_lvl+0x16c/0x1f0 [ 684.617966][T13227] sysfs_warn_dup+0x7f/0xa0 [ 684.622521][T13227] sysfs_do_create_link_sd+0x124/0x140 [ 684.628040][T13227] sysfs_create_link+0x61/0xc0 [ 684.632853][T13227] device_add+0x62e/0x1a70 [ 684.637356][T13227] ? __pfx_device_add+0x10/0x10 [ 684.642267][T13227] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 684.648233][T13227] ? ieee80211_set_bitrate_flags+0x249/0x6a0 [ 684.654288][T13227] wiphy_register+0x20d7/0x2d30 [ 684.659212][T13227] ? __pfx_wiphy_register+0x10/0x10 [ 684.664490][T13227] ieee80211_register_hw+0x2959/0x3fb0 [ 684.670008][T13227] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 684.675843][T13227] ? net_generic+0xea/0x2a0 [ 684.680397][T13227] ? rcu_is_watching+0x12/0xc0 [ 684.685200][T13227] ? trace_hrtimer_init+0x19d/0x220 [ 684.690450][T13227] ? __hrtimer_init+0x106/0x2c0 [ 684.695355][T13227] mac80211_hwsim_new_radio+0x2c47/0x56c0 [ 684.701148][T13227] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 684.707358][T13227] ? __kmalloc_node_track_caller_noprof+0x22d/0x440 [ 684.714008][T13227] ? hwsim_new_radio_nl+0x9ff/0x12b0 [ 684.719359][T13227] hwsim_new_radio_nl+0xb42/0x12b0 [ 684.724526][T13227] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 684.730131][T13227] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 684.737548][T13227] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 684.744973][T13227] genl_family_rcv_msg_doit+0x202/0x2f0 [ 684.750561][T13227] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 684.756687][T13227] ? bpf_lsm_capable+0x9/0x10 [ 684.761409][T13227] ? security_capable+0x7e/0x260 [ 684.766391][T13227] ? ns_capable+0xd7/0x110 [ 684.770893][T13227] genl_rcv_msg+0x565/0x800 [ 684.775451][T13227] ? __pfx_genl_rcv_msg+0x10/0x10 [ 684.780531][T13227] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 684.786140][T13227] netlink_rcv_skb+0x165/0x410 [ 684.790962][T13227] ? __pfx_genl_rcv_msg+0x10/0x10 [ 684.796037][T13227] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 684.801391][T13227] ? down_read+0xc9/0x330 [ 684.805788][T13227] ? __pfx_down_read+0x10/0x10 [ 684.810583][T13227] ? netlink_deliver_tap+0x1ae/0xcf0 [ 684.815916][T13227] genl_rcv+0x28/0x40 [ 684.819951][T13227] netlink_unicast+0x53c/0x7f0 [ 684.824756][T13227] ? __pfx_netlink_unicast+0x10/0x10 [ 684.830085][T13227] ? __phys_addr_symbol+0x30/0x80 [ 684.835244][T13227] ? __check_object_size+0x488/0x710 [ 684.840590][T13227] netlink_sendmsg+0x8b8/0xd70 [ 684.845919][T13227] ? __pfx_netlink_sendmsg+0x10/0x10 [ 684.851267][T13227] ____sys_sendmsg+0x9ae/0xb40 [ 684.856167][T13227] ? copy_msghdr_from_user+0x10b/0x160 [ 684.861676][T13227] ? __pfx_____sys_sendmsg+0x10/0x10 [ 684.867040][T13227] ___sys_sendmsg+0x135/0x1e0 [ 684.871788][T13227] ? __pfx____sys_sendmsg+0x10/0x10 [ 684.877044][T13227] ? __pfx_lock_release+0x10/0x10 [ 684.882123][T13227] ? trace_lock_acquire+0x14a/0x1d0 [ 684.887409][T13227] ? __fget_files+0x206/0x3a0 [ 684.892145][T13227] __sys_sendmsg+0x16e/0x220 [ 684.896778][T13227] ? __pfx___sys_sendmsg+0x10/0x10 [ 684.901932][T13227] ? __x64_sys_futex+0x1e1/0x4c0 [ 684.906952][T13227] do_syscall_64+0xcd/0x250 [ 684.911498][T13227] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 684.917446][T13227] RIP: 0033:0x7fdd3697e759 [ 684.921894][T13227] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 684.941550][T13227] RSP: 002b:00007fdd376f7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 684.950003][T13227] RAX: ffffffffffffffda RBX: 00007fdd36b35f80 RCX: 00007fdd3697e759 [ 684.958014][T13227] RDX: 0000000024000054 RSI: 0000000020000000 RDI: 0000000000000003 [ 684.966022][T13227] RBP: 00007fdd369f175e R08: 0000000000000000 R09: 0000000000000000 [ 684.974026][T13227] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 684.982031][T13227] R13: 0000000000000000 R14: 00007fdd36b35f80 R15: 00007fffe4e55688 [ 684.990058][T13227] [ 685.010270][ T5881] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 685.020550][ T5881] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 685.029298][ T5881] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 685.037713][ T5881] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 685.045760][ T5881] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 685.054199][ T5881] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 685.829524][T13229] chnl_net:caif_netlink_parms(): no params data found [ 686.039279][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.053168][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.084315][T13229] bridge0: port 1(bridge_slave_0) entered blocking state [ 686.092106][T13229] bridge0: port 1(bridge_slave_0) entered disabled state [ 686.099743][T13229] bridge_slave_0: entered allmulticast mode [ 686.107943][T13229] bridge_slave_0: entered promiscuous mode [ 686.116446][T13229] bridge0: port 2(bridge_slave_1) entered blocking state [ 686.117705][T13251] netlink: 'syz.2.1657': attribute type 1 has an invalid length. [ 686.124387][T13229] bridge0: port 2(bridge_slave_1) entered disabled state [ 686.138849][T13229] bridge_slave_1: entered allmulticast mode [ 686.147277][T13229] bridge_slave_1: entered promiscuous mode [ 686.277681][T13229] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 686.290310][T13229] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 686.391942][T13229] team0: Port device team_slave_0 added [ 686.403446][T13229] team0: Port device team_slave_1 added [ 686.441220][T13229] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 686.448387][T13229] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 686.495360][T13229] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 686.508719][T13229] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 686.515715][T13229] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 686.542635][T13229] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 686.596625][T13255] sysfs: cannot create duplicate filename '/class/ieee80211/-侞6yռ ka;+1)p;!X+@' [ 686.614929][T13255] CPU: 1 UID: 0 PID: 13255 Comm: syz.6.1659 Not tainted 6.12.0-syzkaller-01782-gbf9aa14fc523 #0 [ 686.625413][T13255] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 686.635507][T13255] Call Trace: [ 686.638822][T13255] [ 686.641790][T13255] dump_stack_lvl+0x16c/0x1f0 [ 686.646521][T13255] sysfs_warn_dup+0x7f/0xa0 [ 686.651053][T13255] sysfs_do_create_link_sd+0x124/0x140 [ 686.656534][T13255] sysfs_create_link+0x61/0xc0 [ 686.661317][T13255] device_add+0x62e/0x1a70 [ 686.665774][T13255] ? __pfx_device_add+0x10/0x10 [ 686.670652][T13255] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 686.676574][T13255] ? ieee80211_set_bitrate_flags+0x249/0x6a0 [ 686.682578][T13255] wiphy_register+0x20d7/0x2d30 [ 686.687464][T13255] ? __pfx_wiphy_register+0x10/0x10 [ 686.692700][T13255] ieee80211_register_hw+0x2959/0x3fb0 [ 686.698186][T13255] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 686.704005][T13255] ? net_generic+0xea/0x2a0 [ 686.708539][T13255] ? rcu_is_watching+0x12/0xc0 [ 686.713318][T13255] ? trace_hrtimer_init+0x19d/0x220 [ 686.718541][T13255] ? __hrtimer_init+0x106/0x2c0 [ 686.723412][T13255] mac80211_hwsim_new_radio+0x2c47/0x56c0 [ 686.729172][T13255] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 686.735261][T13255] ? __kmalloc_node_track_caller_noprof+0x22d/0x440 [ 686.741863][T13255] ? hwsim_new_radio_nl+0x9ff/0x12b0 [ 686.747176][T13255] hwsim_new_radio_nl+0xb42/0x12b0 [ 686.752309][T13255] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 686.757881][T13255] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 686.765268][T13255] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 686.772659][T13255] genl_family_rcv_msg_doit+0x202/0x2f0 [ 686.778224][T13255] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 686.784316][T13255] ? bpf_lsm_capable+0x9/0x10 [ 686.789019][T13255] ? security_capable+0x7e/0x260 [ 686.793975][T13255] ? ns_capable+0xd7/0x110 [ 686.798407][T13255] genl_rcv_msg+0x565/0x800 [ 686.802930][T13255] ? __pfx_genl_rcv_msg+0x10/0x10 [ 686.807971][T13255] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 686.813549][T13255] netlink_rcv_skb+0x165/0x410 [ 686.818332][T13255] ? __pfx_genl_rcv_msg+0x10/0x10 [ 686.823376][T13255] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 686.828697][T13255] ? down_read+0xc9/0x330 [ 686.833038][T13255] ? __pfx_down_read+0x10/0x10 [ 686.837814][T13255] ? rcu_is_watching+0x12/0xc0 [ 686.842606][T13255] genl_rcv+0x28/0x40 [ 686.846607][T13255] netlink_unicast+0x53c/0x7f0 [ 686.851400][T13255] ? __pfx_netlink_unicast+0x10/0x10 [ 686.856703][T13255] ? __phys_addr_symbol+0x30/0x80 [ 686.861742][T13255] ? __check_object_size+0x488/0x710 [ 686.867079][T13255] netlink_sendmsg+0x8b8/0xd70 [ 686.871862][T13255] ? __pfx_netlink_sendmsg+0x10/0x10 [ 686.877173][T13255] ____sys_sendmsg+0x9ae/0xb40 [ 686.881949][T13255] ? copy_msghdr_from_user+0x10b/0x160 [ 686.887416][T13255] ? __pfx_____sys_sendmsg+0x10/0x10 [ 686.892729][T13255] ___sys_sendmsg+0x135/0x1e0 [ 686.897416][T13255] ? __pfx____sys_sendmsg+0x10/0x10 [ 686.902638][T13255] ? __pfx_lock_release+0x10/0x10 [ 686.907681][T13255] ? trace_lock_acquire+0x14a/0x1d0 [ 686.912945][T13255] ? fput+0x67/0x440 [ 686.916873][T13255] ? __fget_files+0x206/0x3a0 [ 686.921578][T13255] __sys_sendmsg+0x16e/0x220 [ 686.926177][T13255] ? __pfx___sys_sendmsg+0x10/0x10 [ 686.931297][T13255] ? __x64_sys_futex+0x1e1/0x4c0 [ 686.936268][T13255] do_syscall_64+0xcd/0x250 [ 686.940784][T13255] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 686.946700][T13255] RIP: 0033:0x7fe5da77e759 [ 686.951143][T13255] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 686.970767][T13255] RSP: 002b:00007fe5db572038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 686.979197][T13255] RAX: ffffffffffffffda RBX: 00007fe5da935f80 RCX: 00007fe5da77e759 [ 686.987348][T13255] RDX: 0000000024000054 RSI: 0000000020000000 RDI: 0000000000000003 [ 686.995327][T13255] RBP: 00007fe5da7f175e R08: 0000000000000000 R09: 0000000000000000 [ 687.003304][T13255] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 687.011277][T13255] R13: 0000000000000000 R14: 00007fe5da935f80 R15: 00007ffda4ac5948 [ 687.019270][T13255] [ 687.090643][T13229] hsr_slave_0: entered promiscuous mode [ 687.118043][T13229] hsr_slave_1: entered promiscuous mode [ 687.127425][T13229] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 687.135393][T13229] Cannot create hsr debugfs directory [ 687.145808][ T5876] Bluetooth: hci4: command tx timeout [ 687.480545][T13229] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 687.516786][T13229] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 687.527597][T13229] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 687.543968][T13229] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 687.635572][T13229] 8021q: adding VLAN 0 to HW filter on device bond0 [ 687.653357][T13229] 8021q: adding VLAN 0 to HW filter on device team0 [ 687.665429][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 687.672556][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 687.709795][ T5895] bridge0: port 2(bridge_slave_1) entered blocking state [ 687.716977][ T5895] bridge0: port 2(bridge_slave_1) entered forwarding state [ 687.786695][T13229] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 687.797379][T13229] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 688.091244][T13229] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 688.382943][T13229] veth0_vlan: entered promiscuous mode [ 688.393603][T13229] veth1_vlan: entered promiscuous mode [ 688.422124][T13229] veth0_macvtap: entered promiscuous mode [ 688.432109][T13229] veth1_macvtap: entered promiscuous mode [ 688.447264][T13229] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 688.458046][T13229] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 688.468119][T13229] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 688.481024][T13229] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 688.490916][T13229] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 688.501530][T13229] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 688.511513][T13229] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 688.522407][T13229] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 688.533741][T13229] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 688.543934][T13229] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 688.554459][T13229] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 688.565196][T13229] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 688.576549][T13229] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 688.589378][T13229] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 688.600194][T13229] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 688.610693][T13229] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 688.621285][T13229] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 688.633806][T13229] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 688.650707][T13229] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 688.660009][T13229] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 688.670440][T13229] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 688.681112][T13229] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 688.743666][ T6059] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 688.760989][ T6059] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 688.783780][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 688.792950][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 689.225924][ T5876] Bluetooth: hci4: command tx timeout [ 691.304817][ T5876] Bluetooth: hci4: command tx timeout [ 693.385115][ T5876] Bluetooth: hci4: command tx timeout [ 698.346800][T13303] debugfs: Directory '-侞6yռ ka;+1)p;!X+@' with parent 'ieee80211' already present! [ 698.585156][T13309] netlink: 'syz.2.1669': attribute type 1 has an invalid length. [ 699.868269][T13335] debugfs: Directory '-侞6yռ ka;+1)p;!X+@' with parent 'ieee80211' already present! [ 713.574202][T13396] sysfs: cannot create duplicate filename '/class/ieee80211/-侞6yռ ka;+1)p;!X+@' [ 713.596196][T13396] CPU: 0 UID: 0 PID: 13396 Comm: syz.2.1693 Not tainted 6.12.0-syzkaller-01782-gbf9aa14fc523 #0 [ 713.606670][T13396] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 713.616766][T13396] Call Trace: [ 713.620071][T13396] [ 713.623025][T13396] dump_stack_lvl+0x16c/0x1f0 [ 713.627750][T13396] sysfs_warn_dup+0x7f/0xa0 [ 713.632288][T13396] sysfs_do_create_link_sd+0x124/0x140 [ 713.637783][T13396] sysfs_create_link+0x61/0xc0 [ 713.642581][T13396] device_add+0x62e/0x1a70 [ 713.647049][T13396] ? __pfx_device_add+0x10/0x10 [ 713.651943][T13396] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 713.657890][T13396] ? ieee80211_set_bitrate_flags+0x249/0x6a0 [ 713.663916][T13396] wiphy_register+0x20d7/0x2d30 [ 713.668822][T13396] ? __pfx_wiphy_register+0x10/0x10 [ 713.674093][T13396] ieee80211_register_hw+0x2959/0x3fb0 [ 713.679611][T13396] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 713.685453][T13396] ? net_generic+0xea/0x2a0 [ 713.690003][T13396] ? rcu_is_watching+0x12/0xc0 [ 713.694797][T13396] ? trace_hrtimer_init+0x19d/0x220 [ 713.700038][T13396] ? __hrtimer_init+0x106/0x2c0 [ 713.704937][T13396] mac80211_hwsim_new_radio+0x2c47/0x56c0 [ 713.710729][T13396] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 713.716837][T13396] ? __kmalloc_node_track_caller_noprof+0x22d/0x440 [ 713.723457][T13396] ? hwsim_new_radio_nl+0x9ff/0x12b0 [ 713.728803][T13396] hwsim_new_radio_nl+0xb42/0x12b0 [ 713.733961][T13396] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 713.739564][T13396] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 713.746988][T13396] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 713.754419][T13396] genl_family_rcv_msg_doit+0x202/0x2f0 [ 713.760017][T13396] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 713.766141][T13396] ? bpf_lsm_capable+0x9/0x10 [ 713.770870][T13396] ? security_capable+0x7e/0x260 [ 713.775856][T13396] ? ns_capable+0xd7/0x110 [ 713.780319][T13396] genl_rcv_msg+0x565/0x800 [ 713.784873][T13396] ? __pfx_genl_rcv_msg+0x10/0x10 [ 713.789951][T13396] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 713.795562][T13396] netlink_rcv_skb+0x165/0x410 [ 713.800368][T13396] ? __pfx_genl_rcv_msg+0x10/0x10 [ 713.805441][T13396] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 713.810783][T13396] ? down_read+0xc9/0x330 [ 713.815182][T13396] ? __pfx_down_read+0x10/0x10 [ 713.819984][T13396] ? netlink_deliver_tap+0x1ae/0xcf0 [ 713.825315][T13396] genl_rcv+0x28/0x40 [ 713.829331][T13396] netlink_unicast+0x53c/0x7f0 [ 713.834135][T13396] ? __pfx_netlink_unicast+0x10/0x10 [ 713.839459][T13396] ? __phys_addr_symbol+0x30/0x80 [ 713.844520][T13396] ? __check_object_size+0x488/0x710 [ 713.849852][T13396] netlink_sendmsg+0x8b8/0xd70 [ 713.854677][T13396] ? __pfx_netlink_sendmsg+0x10/0x10 [ 713.860014][T13396] ____sys_sendmsg+0x9ae/0xb40 [ 713.864822][T13396] ? copy_msghdr_from_user+0x10b/0x160 [ 713.870309][T13396] ? __pfx_____sys_sendmsg+0x10/0x10 [ 713.875656][T13396] ___sys_sendmsg+0x135/0x1e0 [ 713.880381][T13396] ? __pfx____sys_sendmsg+0x10/0x10 [ 713.885632][T13396] ? __pfx_lock_release+0x10/0x10 [ 713.890704][T13396] ? trace_lock_acquire+0x14a/0x1d0 [ 713.895963][T13396] ? __fget_files+0x206/0x3a0 [ 713.900702][T13396] __sys_sendmsg+0x16e/0x220 [ 713.905330][T13396] ? __pfx___sys_sendmsg+0x10/0x10 [ 713.910471][T13396] ? __x64_sys_futex+0x1e1/0x4c0 [ 713.915468][T13396] do_syscall_64+0xcd/0x250 [ 713.920015][T13396] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 713.926054][T13396] RIP: 0033:0x7fdd3697e759 [ 713.930502][T13396] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 713.950145][T13396] RSP: 002b:00007fdd376f7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 713.958687][T13396] RAX: ffffffffffffffda RBX: 00007fdd36b35f80 RCX: 00007fdd3697e759 [ 713.966696][T13396] RDX: 0000000024000054 RSI: 0000000020000000 RDI: 0000000000000003 [ 713.974702][T13396] RBP: 00007fdd369f175e R08: 0000000000000000 R09: 0000000000000000 [ 713.982706][T13396] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 713.990708][T13396] R13: 0000000000000000 R14: 00007fdd36b35f80 R15: 00007fffe4e55688 [ 713.998726][T13396] [ 735.940043][ T5881] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 735.958772][ T5881] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 735.971036][ T5881] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 735.980195][ T5881] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 735.991249][ T5881] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 736.014956][ T5881] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 736.445161][ T5876] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 736.454346][ T5876] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 736.465016][ T5876] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 736.488741][ T5876] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 736.497563][ T5876] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 736.508079][ T5876] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 736.515659][ T5876] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 736.525783][ T5876] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 736.539778][ T5876] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 736.581533][T13474] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 736.590889][T13474] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 736.599850][T13474] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 736.788822][T13459] chnl_net:caif_netlink_parms(): no params data found [ 736.928153][ T5889] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 737.055629][ T5889] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 737.199174][T13459] bridge0: port 1(bridge_slave_0) entered blocking state [ 737.211688][T13459] bridge0: port 1(bridge_slave_0) entered disabled state [ 737.231688][T13459] bridge_slave_0: entered allmulticast mode [ 737.243000][T13459] bridge_slave_0: entered promiscuous mode [ 737.292213][ T5889] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 737.343085][T13459] bridge0: port 2(bridge_slave_1) entered blocking state [ 737.353817][T13459] bridge0: port 2(bridge_slave_1) entered disabled state [ 737.369720][T13459] bridge_slave_1: entered allmulticast mode [ 737.379745][T13459] bridge_slave_1: entered promiscuous mode [ 737.434516][ T5889] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 737.539916][T13473] chnl_net:caif_netlink_parms(): no params data found [ 737.580368][T13459] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 737.603296][T13459] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 737.721023][T13459] team0: Port device team_slave_0 added [ 737.774100][T13459] team0: Port device team_slave_1 added [ 737.842361][T13494] sock: sock_set_timeout: `syz.2.1715' (pid 13494) tries to set negative timeout [ 737.858475][T13470] chnl_net:caif_netlink_parms(): no params data found [ 737.956055][T13459] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 737.963136][T13459] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 737.991461][T13459] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 738.059860][ T5889] bridge_slave_1: left allmulticast mode [ 738.066109][ T5889] bridge_slave_1: left promiscuous mode [ 738.071871][ T5889] bridge0: port 2(bridge_slave_1) entered disabled state [ 738.099186][ T5889] bridge_slave_0: left allmulticast mode [ 738.106107][T13474] Bluetooth: hci4: command tx timeout [ 738.112506][ T5889] bridge_slave_0: left promiscuous mode [ 738.119454][ T5889] bridge0: port 1(bridge_slave_0) entered disabled state [ 738.584848][T13474] Bluetooth: hci5: command tx timeout [ 738.613565][ T5889] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 738.636153][ T5889] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 738.663047][ T5889] bond0 (unregistering): Released all slaves [ 738.669238][T13474] Bluetooth: hci6: command tx timeout [ 738.685369][T13459] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 738.692714][T13459] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 738.719700][T13459] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 738.794852][T13473] bridge0: port 1(bridge_slave_0) entered blocking state [ 738.801983][T13473] bridge0: port 1(bridge_slave_0) entered disabled state [ 738.811436][T13473] bridge_slave_0: entered allmulticast mode [ 738.827501][T13473] bridge_slave_0: entered promiscuous mode [ 738.892164][T13473] bridge0: port 2(bridge_slave_1) entered blocking state [ 738.899779][T13473] bridge0: port 2(bridge_slave_1) entered disabled state [ 738.907157][T13473] bridge_slave_1: entered allmulticast mode [ 738.914284][T13473] bridge_slave_1: entered promiscuous mode [ 738.939109][T13470] bridge0: port 1(bridge_slave_0) entered blocking state [ 738.952508][T13470] bridge0: port 1(bridge_slave_0) entered disabled state [ 738.965143][T13470] bridge_slave_0: entered allmulticast mode [ 738.984469][T13470] bridge_slave_0: entered promiscuous mode [ 739.056914][T13473] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 739.082942][T13470] bridge0: port 2(bridge_slave_1) entered blocking state [ 739.100808][T13470] bridge0: port 2(bridge_slave_1) entered disabled state [ 739.111955][T13470] bridge_slave_1: entered allmulticast mode [ 739.125885][T13470] bridge_slave_1: entered promiscuous mode [ 739.271465][T13473] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 739.339820][T13470] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 739.418084][T13459] hsr_slave_0: entered promiscuous mode [ 739.472060][T13459] hsr_slave_1: entered promiscuous mode [ 739.494935][T13459] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 739.502542][T13459] Cannot create hsr debugfs directory [ 739.672025][T13470] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 739.847159][T13473] team0: Port device team_slave_0 added [ 739.923253][T13473] team0: Port device team_slave_1 added [ 740.010934][T13470] team0: Port device team_slave_0 added [ 740.047189][T13470] team0: Port device team_slave_1 added [ 740.093409][ T5889] hsr_slave_0: left promiscuous mode [ 740.135894][ T5889] hsr_slave_1: left promiscuous mode [ 740.174848][ T5889] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 740.182326][ T5889] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 740.195226][T13474] Bluetooth: hci4: command tx timeout [ 740.201372][ T5889] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 740.224738][ T5889] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 740.267760][ T5889] veth1_macvtap: left promiscuous mode [ 740.273330][ T5889] veth0_macvtap: left promiscuous mode [ 740.284989][ T5889] veth1_vlan: left promiscuous mode [ 740.295291][ T5889] veth0_vlan: left promiscuous mode [ 740.669897][T13474] Bluetooth: hci5: command tx timeout [ 740.744718][T13474] Bluetooth: hci6: command tx timeout [ 741.185814][ T5889] team0 (unregistering): Port device team_slave_1 removed [ 741.290907][ T5889] team0 (unregistering): Port device team_slave_0 removed [ 742.264904][T13474] Bluetooth: hci4: command tx timeout [ 742.326949][T13473] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 742.333937][T13473] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 742.375307][T13473] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 742.510818][T13473] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 742.529896][T13473] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 742.558083][T13473] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 742.578133][T13470] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 742.605568][T13470] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 742.654742][T13470] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 742.667757][T13470] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 742.675278][T13470] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 742.708358][T13470] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 742.744748][T13474] Bluetooth: hci5: command tx timeout [ 742.824785][T13474] Bluetooth: hci6: command tx timeout [ 742.896365][T13470] hsr_slave_0: entered promiscuous mode [ 742.925196][T13470] hsr_slave_1: entered promiscuous mode [ 742.939059][T13470] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 742.955005][T13470] Cannot create hsr debugfs directory [ 743.018043][T13473] hsr_slave_0: entered promiscuous mode [ 743.045966][T13473] hsr_slave_1: entered promiscuous mode [ 743.065362][T13473] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 743.072971][T13473] Cannot create hsr debugfs directory [ 744.060197][ T5889] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 744.290771][ T5889] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 744.347481][T13474] Bluetooth: hci4: command tx timeout [ 744.494988][ T5889] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 744.606604][ T5889] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 744.826321][T13474] Bluetooth: hci5: command tx timeout [ 744.906964][T13474] Bluetooth: hci6: command tx timeout [ 744.932108][T13459] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 745.035137][T13459] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 745.061406][T13459] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 745.107159][T13459] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 745.144971][ T5889] bridge_slave_1: left allmulticast mode [ 745.150677][ T5889] bridge_slave_1: left promiscuous mode [ 745.160310][ T5889] bridge0: port 2(bridge_slave_1) entered disabled state [ 745.181335][ T5889] bridge_slave_0: left allmulticast mode [ 745.187426][ T5889] bridge_slave_0: left promiscuous mode [ 745.194633][ T5889] bridge0: port 1(bridge_slave_0) entered disabled state [ 745.621687][ T5889] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 745.633756][ T5889] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 745.645758][ T5889] bond0 (unregistering): Released all slaves [ 745.811956][T13459] 8021q: adding VLAN 0 to HW filter on device bond0 [ 745.839598][T13459] 8021q: adding VLAN 0 to HW filter on device team0 [ 745.887902][ T68] bridge0: port 1(bridge_slave_0) entered blocking state [ 745.895075][ T68] bridge0: port 1(bridge_slave_0) entered forwarding state [ 745.912145][ T6059] bridge0: port 2(bridge_slave_1) entered blocking state [ 745.919310][ T6059] bridge0: port 2(bridge_slave_1) entered forwarding state [ 746.148894][ T5889] hsr_slave_0: left promiscuous mode [ 746.165980][ T5889] hsr_slave_1: left promiscuous mode [ 746.195225][ T5889] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 746.202709][ T5889] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 746.230364][ T5889] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 746.243154][ T5889] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 746.281125][ T5889] veth1_macvtap: left promiscuous mode [ 746.286839][ T5889] veth0_macvtap: left promiscuous mode [ 746.292631][ T5889] veth1_vlan: left promiscuous mode [ 746.298219][ T5889] veth0_vlan: left promiscuous mode [ 746.804069][ T5889] team0 (unregistering): Port device team_slave_1 removed [ 746.853581][ T5889] team0 (unregistering): Port device team_slave_0 removed [ 747.469099][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.476523][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.517620][T13459] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 747.628924][T13459] veth0_vlan: entered promiscuous mode [ 747.649481][T13459] veth1_vlan: entered promiscuous mode [ 747.696853][T13459] veth0_macvtap: entered promiscuous mode [ 747.716217][T13459] veth1_macvtap: entered promiscuous mode [ 747.733062][T13459] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 747.744130][T13459] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 747.755392][T13459] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 747.767765][T13459] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 747.778010][T13459] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 747.788777][T13459] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 747.800370][T13459] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 747.811759][T13459] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 747.823026][T13459] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 747.834360][T13459] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 747.845081][T13459] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 747.854985][T13459] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 747.865542][T13459] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 747.877236][T13459] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 747.902544][T13459] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 747.913081][T13459] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 747.923284][T13459] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 747.932274][T13459] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 748.216958][ T5923] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 748.217694][T13470] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 748.251315][ T5923] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 748.346908][T13470] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 748.373032][T13470] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 748.484315][T13470] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 748.580524][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 748.590610][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 748.722079][T13473] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 748.739201][T13473] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 748.755564][T13473] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 748.778598][T13470] 8021q: adding VLAN 0 to HW filter on device bond0 [ 748.789347][T13473] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 748.818078][T13470] 8021q: adding VLAN 0 to HW filter on device team0 [ 748.840929][ T5895] bridge0: port 1(bridge_slave_0) entered blocking state [ 748.848074][ T5895] bridge0: port 1(bridge_slave_0) entered forwarding state [ 748.867040][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 748.874145][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 749.051320][T13473] 8021q: adding VLAN 0 to HW filter on device bond0 [ 749.093507][T13473] 8021q: adding VLAN 0 to HW filter on device team0 [ 749.110293][ T6059] bridge0: port 1(bridge_slave_0) entered blocking state [ 749.117480][ T6059] bridge0: port 1(bridge_slave_0) entered forwarding state [ 749.127441][ T6059] bridge0: port 2(bridge_slave_1) entered blocking state [ 749.134534][ T6059] bridge0: port 2(bridge_slave_1) entered forwarding state [ 749.184120][T13470] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 749.581148][T13473] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 749.603644][T13470] veth0_vlan: entered promiscuous mode [ 749.619623][T13470] veth1_vlan: entered promiscuous mode [ 749.671373][T13473] veth0_vlan: entered promiscuous mode [ 749.692054][T13470] veth0_macvtap: entered promiscuous mode [ 749.703877][T13470] veth1_macvtap: entered promiscuous mode [ 749.725762][T13473] veth1_vlan: entered promiscuous mode [ 749.762698][T13470] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 749.773494][T13470] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 749.786481][T13470] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 749.797417][T13470] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 749.807715][T13470] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 749.820007][T13470] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 749.830291][T13470] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 749.841079][T13470] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 749.852414][T13470] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 749.862491][T13470] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 749.873534][T13470] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 749.883761][T13470] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 749.894461][T13470] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 749.904389][T13470] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 749.916006][T13470] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 749.926049][T13470] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 749.936983][T13470] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 749.948800][T13470] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 749.960757][T13470] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 749.969572][T13470] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 749.979789][T13470] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 749.988578][T13470] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 750.011098][T13473] veth0_macvtap: entered promiscuous mode [ 750.021430][T13473] veth1_macvtap: entered promiscuous mode [ 750.092335][ T6059] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 750.105022][T13473] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 750.121315][T13473] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 750.122468][ T6059] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 750.131443][T13473] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 750.131465][T13473] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 750.131484][T13473] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 750.131501][T13473] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 750.131520][T13473] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 750.131537][T13473] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 750.131554][T13473] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 750.131570][T13473] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 750.224177][T13473] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 750.243400][T13473] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 750.255010][T13473] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 750.265209][T13473] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 750.275670][T13473] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 750.285696][T13473] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 750.296151][T13473] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 750.306179][T13473] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 750.316649][T13473] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 750.327634][T13473] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 750.338177][T13473] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 750.349671][T13473] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 750.372196][T13473] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 750.382119][T13473] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 750.392017][T13473] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 750.401079][T13473] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 750.434124][ T5923] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 750.445464][ T5923] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 750.527703][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 750.544518][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 750.577179][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 750.594346][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 756.409708][ T5913] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 756.582070][ T5913] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 756.735451][ T5913] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 756.857772][ T5913] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 757.085301][ T5913] bridge_slave_1: left allmulticast mode [ 757.096141][ T5913] bridge_slave_1: left promiscuous mode [ 757.101904][ T5913] bridge0: port 2(bridge_slave_1) entered disabled state [ 757.130959][ T5913] bridge_slave_0: left allmulticast mode [ 757.147101][ T5913] bridge_slave_0: left promiscuous mode [ 757.152878][ T5913] bridge0: port 1(bridge_slave_0) entered disabled state [ 757.994966][ T5913] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 758.020046][ T5913] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 758.040892][ T5913] bond0 (unregistering): Released all slaves [ 758.491331][ T5913] hsr_slave_0: left promiscuous mode [ 758.538879][ T5913] hsr_slave_1: left promiscuous mode [ 758.561923][ T5913] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 758.589145][ T5913] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 758.609632][ T5913] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 758.639321][ T5913] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 758.715804][ T5913] veth1_macvtap: left promiscuous mode [ 758.727023][ T5913] veth0_macvtap: left promiscuous mode [ 758.750569][ T5913] veth1_vlan: left promiscuous mode [ 758.767267][ T5913] veth0_vlan: left promiscuous mode [ 759.585239][ T5913] team0 (unregistering): Port device team_slave_1 removed [ 759.636145][ T5913] team0 (unregistering): Port device team_slave_0 removed [ 766.045962][T14087] netlink: 318 bytes leftover after parsing attributes in process `syz.2.1762'. [ 766.109255][T14087] netlink: 318 bytes leftover after parsing attributes in process `syz.2.1762'. [ 767.057592][T14123] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1771'. [ 767.265991][T14133] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1771'. [ 767.403727][T14143] kernel read not supported for file /#)-\&[} (pid: 14143 comm: syz.2.1772) [ 767.599303][ T29] audit: type=1800 audit(4294967489.350:12): pid=14143 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1772" name="#)-\&[}" dev="mqueue" ino=28883 res=0 errno=0 [ 808.916998][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.923428][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 862.184795][T15609] Bluetooth: hci6: command 0x0406 tx timeout [ 862.190776][ T54] Bluetooth: hci4: command 0x0406 tx timeout [ 862.197074][T15609] Bluetooth: hci5: command 0x0406 tx timeout [ 870.349540][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.357520][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 900.425096][ T30] INFO: task syz.9.1702:13439 blocked for more than 143 seconds. [ 900.432881][ T30] Not tainted 6.12.0-syzkaller-01782-gbf9aa14fc523 #0 [ 900.440779][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 900.450645][ T30] task:syz.9.1702 state:D stack:24976 pid:13439 tgid:13437 ppid:13229 flags:0x00004006 [ 900.461434][ T30] Call Trace: [ 900.464874][ T30] [ 900.467837][ T30] __schedule+0xe5a/0x5ae0 [ 900.472302][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 900.477874][ T30] ? __pfx___schedule+0x10/0x10 [ 900.482768][ T30] ? schedule+0x298/0x350 [ 900.487308][ T30] ? __pfx_lock_release+0x10/0x10 [ 900.492378][ T30] ? trace_lock_acquire+0x14a/0x1d0 [ 900.497762][ T30] ? lock_acquire+0x2f/0xb0 [ 900.502307][ T30] ? schedule+0x1fd/0x350 [ 900.506821][ T30] schedule+0xe7/0x350 [ 900.510929][ T30] jbd2_log_wait_commit+0x2ef/0x460 [ 900.516337][ T30] ? __pfx_jbd2_log_wait_commit+0x10/0x10 [ 900.522101][ T30] ? __pfx_lock_release+0x10/0x10 [ 900.527461][ T30] ? trace_lock_acquire+0x14a/0x1d0 [ 900.532698][ T30] ? __pfx_autoremove_wake_function+0x10/0x10 [ 900.538966][ T30] ? lock_acquire+0x2f/0xb0 [ 900.543512][ T30] ? jbd2_complete_transaction+0x23/0x200 [ 900.550323][ T30] jbd2_complete_transaction+0x18f/0x200 [ 900.556532][ T30] ext4_fc_commit+0x6cd/0xa40 [ 900.561261][ T30] ? _raw_read_unlock+0x28/0x50 [ 900.566339][ T30] ext4_sync_file+0x44f/0xf30 [ 900.571054][ T30] ? __pfx_ext4_sync_file+0x10/0x10 [ 900.576448][ T30] vfs_fsync_range+0x136/0x220 [ 900.581263][ T30] __do_sys_msync+0x3c6/0x5b0 [ 900.586110][ T30] do_syscall_64+0xcd/0x250 [ 900.590644][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 900.596735][ T30] RIP: 0033:0x7fa8da77e759 [ 900.601174][ T30] RSP: 002b:00007fa8db57c038 EFLAGS: 00000246 ORIG_RAX: 000000000000001a [ 900.609721][ T30] RAX: ffffffffffffffda RBX: 00007fa8da936058 RCX: 00007fa8da77e759 [ 900.617871][ T30] RDX: 0000000400000004 RSI: 0080100000000005 RDI: 000000001ffff000 [ 900.629287][ T30] RBP: 00007fa8da7f175e R08: 0000000000000000 R09: 0000000000000000 [ 900.639755][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 900.649976][ T30] R13: 0000000000000000 R14: 00007fa8da936058 R15: 00007ffcfe230978 [ 900.658911][ T30] [ 900.662014][ T30] [ 900.662014][ T30] Showing all locks held in the system: [ 900.669869][ T30] 6 locks held by kworker/u8:0/11: [ 900.675787][ T30] #0: ffff8881416dc948 ((wq_completion)writeback){+.+.}-{0:0}, at: process_one_work+0x1212/0x1b30 [ 900.686630][ T30] #1: ffffc90000107d80 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_one_work+0x8bb/0x1b30 [ 900.698717][ T30] #2: ffff8880356120e0 (&type->s_umount_key#32){++++}-{4:4}, at: super_trylock_shared+0x1e/0xf0 [ 900.709426][ T30] #3: ffff888035614b98 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: do_writepages+0x1b3/0x820 [ 900.719935][ T30] #4: ffff888035616958 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0xf6c/0x1430 [ 900.729649][ T30] #5: ffff88807846a040 (&ei->i_data_sem){++++}-{4:4}, at: ext4_map_blocks+0x352/0x1370 [ 900.739584][ T30] 1 lock held by khungtaskd/30: [ 900.744459][ T30] #0: ffffffff8ddba640 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x7f/0x390 [ 900.755608][ T30] 1 lock held by klogd/5209: [ 900.760629][ T30] 2 locks held by getty/5601: [ 900.765691][ T30] #0: ffff888030f2b0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 900.775641][ T30] #1: ffffc90002f062f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0xfba/0x1480 [ 900.786126][ T30] 4 locks held by syz-executor/5856: [ 900.791428][ T30] #0: ffff888034107658 (&vma->vm_lock->lock){++++}-{4:4}, at: lock_vma_under_rcu+0x13e/0x980 [ 900.802006][ T30] #1: ffff888035612518 (sb_pagefaults){.+.+}-{0:0}, at: do_page_mkwrite+0x177/0x380 [ 900.811815][ T30] #2: ffff88807846a350 (mapping.invalidate_lock){++++}-{4:4}, at: ext4_page_mkwrite+0x37e/0x1760 [ 900.823983][ T30] #3: ffff88807846a040 (&ei->i_data_sem){++++}-{4:4}, at: ext4_da_get_block_prep+0x6a0/0x11e0 [ 900.835364][ T30] 2 locks held by kworker/u8:8/6159: [ 900.840687][ T30] 2 locks held by syz.1.1760/14101: [ 900.846118][ T30] #0: ffff88807611c420 (sb_writers#5){.+.+}-{0:0}, at: get_signal+0x23f3/0x2610 [ 900.860526][ T30] #1: ffff8880524fd9a0 (&mm->mmap_lock){++++}-{4:4}, at: get_dump_page+0xb6/0x220 [ 900.870404][ T30] 2 locks held by syz.2.1769/14116: [ 900.876353][ T30] #0: ffff8880294de420 (sb_writers#5){.+.+}-{0:0}, at: get_signal+0x23f3/0x2610 [ 900.885671][ T30] #1: ffff888061fca8e0 (&mm->mmap_lock){++++}-{4:4}, at: get_dump_page+0xb6/0x220 [ 900.895230][ T30] 2 locks held by syz.4.1767/14128: [ 900.900455][ T30] #0: ffff888033546420 (sb_writers#5){.+.+}-{0:0}, at: get_signal+0x23f3/0x2610 [ 900.910018][ T30] #1: ffff88807aa9cfe0 (&mm->mmap_lock){++++}-{4:4}, at: get_dump_page+0xb6/0x220 [ 900.919504][ T30] 2 locks held by syz.1.1774/14168: [ 900.924820][ T30] #0: ffff88807611c420 (sb_writers#5){.+.+}-{0:0}, at: get_signal+0x23f3/0x2610 [ 900.934054][ T30] #1: ffff8880356f4fe0 (&mm->mmap_lock){++++}-{4:4}, at: get_dump_page+0xb6/0x220 [ 900.943596][ T30] 2 locks held by syz.1.1774/14172: [ 900.948902][ T30] #0: ffff88807611c420 (sb_writers#5){.+.+}-{0:0}, at: get_signal+0x23f3/0x2610 [ 900.958908][ T30] #1: ffff88801ac74fe0 (&mm->mmap_lock){++++}-{4:4}, at: get_dump_page+0xb6/0x220 [ 900.970001][ T30] [ 900.972384][ T30] ============================================= [ 900.972384][ T30] [ 900.980962][ T30] NMI backtrace for cpu 0 [ 900.985320][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.12.0-syzkaller-01782-gbf9aa14fc523 #0 [ 900.995485][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 901.005565][ T30] Call Trace: [ 901.008851][ T30] [ 901.011799][ T30] dump_stack_lvl+0x116/0x1f0 [ 901.016499][ T30] nmi_cpu_backtrace+0x27b/0x390 [ 901.021449][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 901.027447][ T30] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 901.033443][ T30] watchdog+0xf0c/0x1240 [ 901.037710][ T30] ? __pfx_watchdog+0x10/0x10 [ 901.042423][ T30] ? lockdep_hardirqs_on+0x7c/0x110 [ 901.047639][ T30] ? __kthread_parkme+0x148/0x220 [ 901.052688][ T30] ? __pfx_watchdog+0x10/0x10 [ 901.057384][ T30] kthread+0x2c1/0x3a0 [ 901.061466][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 901.066683][ T30] ? __pfx_kthread+0x10/0x10 [ 901.071287][ T30] ret_from_fork+0x45/0x80 [ 901.075710][ T30] ? __pfx_kthread+0x10/0x10 [ 901.080312][ T30] ret_from_fork_asm+0x1a/0x30 [ 901.085107][ T30] [ 901.089313][ T30] Sending NMI from CPU 0 to CPUs 1: [ 901.095179][ C1] NMI backtrace for cpu 1 [ 901.095196][ C1] CPU: 1 UID: 0 PID: 68 Comm: kworker/u8:4 Not tainted 6.12.0-syzkaller-01782-gbf9aa14fc523 #0 [ 901.095224][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 901.095239][ C1] Workqueue: events_unbound nsim_dev_trap_report_work [ 901.095271][ C1] RIP: 0010:kasan_save_stack+0x28/0x60 [ 901.095308][ C1] Code: 90 90 66 0f 1f 00 41 54 31 c0 b9 40 00 00 00 41 89 f4 55 89 fd 31 d2 be 40 00 00 00 53 48 81 ec 00 02 00 00 48 89 e3 48 89 df 48 ab 48 89 df e8 ed 62 8a ff 44 89 e1 89 ea 48 89 df 89 c6 e8 [ 901.095332][ C1] RSP: 0018:ffffc900015d7868 EFLAGS: 00010282 [ 901.095350][ C1] RAX: 0000000000000000 RBX: ffffc900015d7868 RCX: 0000000000000010 [ 901.095365][ C1] RDX: 0000000000000000 RSI: 0000000000000040 RDI: ffffc900015d79e8 [ 901.095380][ C1] RBP: 0000000000082820 R08: 0000000000000007 R09: 0000000000000000 [ 901.095395][ C1] R10: ffff88803346d000 R11: 000000000000004f R12: 0000000000000001 [ 901.095410][ C1] R13: 0000000000001000 R14: 0000000000001000 R15: 00000000ffffffff [ 901.095426][ C1] FS: 0000000000000000(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 901.095449][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 901.095465][ C1] CR2: 0000564cd36fa600 CR3: 000000000db7e000 CR4: 00000000003526f0 [ 901.095481][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 901.095495][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 901.095510][ C1] Call Trace: [ 901.095516][ C1] [ 901.095524][ C1] ? nmi_cpu_backtrace+0x1d8/0x390 [ 901.095555][ C1] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 901.095591][ C1] ? nmi_handle+0x1a9/0x5c0 [ 901.095615][ C1] ? kasan_save_stack+0x28/0x60 [ 901.095648][ C1] ? default_do_nmi+0x6a/0x160 [ 901.095676][ C1] ? exc_nmi+0x170/0x1e0 [ 901.095701][ C1] ? end_repeat_nmi+0xf/0x53 [ 901.095728][ C1] ? kasan_save_stack+0x28/0x60 [ 901.095761][ C1] ? kasan_save_stack+0x28/0x60 [ 901.095799][ C1] ? kasan_save_stack+0x28/0x60 [ 901.095833][ C1] [ 901.095840][ C1] [ 901.095869][ C1] kasan_save_track+0x14/0x30 [ 901.095901][ C1] __kasan_kmalloc+0xaa/0xb0 [ 901.095934][ C1] __kmalloc_node_track_caller_noprof+0x20f/0x440 [ 901.095960][ C1] ? __alloc_skb+0x164/0x380 [ 901.095996][ C1] kmalloc_reserve+0xef/0x2c0 [ 901.096024][ C1] __alloc_skb+0x164/0x380 [ 901.096057][ C1] ? __pfx___alloc_skb+0x10/0x10 [ 901.096091][ C1] ? kfree_skbmem+0x1a4/0x1f0 [ 901.096122][ C1] ? kfree_skbmem+0x1a4/0x1f0 [ 901.096152][ C1] nsim_dev_trap_report_work+0x2a4/0xc90 [ 901.096193][ C1] process_one_work+0x958/0x1b30 [ 901.096233][ C1] ? __pfx_nsim_dev_trap_report_work+0x10/0x10 [ 901.096263][ C1] ? __pfx_process_one_work+0x10/0x10 [ 901.096301][ C1] ? assign_work+0x1a0/0x250 [ 901.096335][ C1] worker_thread+0x6c8/0xf00 [ 901.096376][ C1] ? __pfx_worker_thread+0x10/0x10 [ 901.096411][ C1] kthread+0x2c1/0x3a0 [ 901.096436][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 901.096466][ C1] ? __pfx_kthread+0x10/0x10 [ 901.096493][ C1] ret_from_fork+0x45/0x80 [ 901.096514][ C1] ? __pfx_kthread+0x10/0x10 [ 901.096540][ C1] ret_from_fork_asm+0x1a/0x30 [ 901.096580][ C1] [ 901.097540][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 901.416440][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.12.0-syzkaller-01782-gbf9aa14fc523 #0 [ 901.426604][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 901.436678][ T30] Call Trace: [ 901.439965][ T30] [ 901.442904][ T30] dump_stack_lvl+0x3d/0x1f0 [ 901.447519][ T30] panic+0x71d/0x800 [ 901.451427][ T30] ? __pfx_panic+0x10/0x10 [ 901.455853][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 901.461235][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 901.467237][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 901.472626][ T30] ? watchdog+0xd76/0x1240 [ 901.477068][ T30] ? watchdog+0xd69/0x1240 [ 901.481505][ T30] watchdog+0xd87/0x1240 [ 901.485777][ T30] ? __pfx_watchdog+0x10/0x10 [ 901.490464][ T30] ? lockdep_hardirqs_on+0x7c/0x110 [ 901.495678][ T30] ? __kthread_parkme+0x148/0x220 [ 901.500718][ T30] ? __pfx_watchdog+0x10/0x10 [ 901.505413][ T30] kthread+0x2c1/0x3a0 [ 901.509489][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 901.514700][ T30] ? __pfx_kthread+0x10/0x10 [ 901.519296][ T30] ret_from_fork+0x45/0x80 [ 901.523715][ T30] ? __pfx_kthread+0x10/0x10 [ 901.528315][ T30] ret_from_fork_asm+0x1a/0x30 [ 901.533120][ T30] [ 901.536421][ T30] Kernel Offset: disabled [ 901.540751][ T30] Rebooting in 86400 seconds..