last executing test programs: 14m21.420616573s ago: executing program 32 (id=42): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x402, 0x300000000000) inotify_init1$auto(0x3000000000000) socket(0x15, 0x5, 0x0) getsockopt$auto(0x4, 0x114, 0x2721, 0xfffffffffffffffc, 0x0) r0 = socket(0xa, 0x5, 0x0) getsockopt$auto(r0, 0x82, 0x1, 0x0, &(0x7f0000000040)=0x44e) 13m49.081051233s ago: executing program 4 (id=157): r0 = socket(0xa, 0x801, 0x106) (async) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000021}, 0x8004) (async) connect$auto(0x3, &(0x7f0000000140)={0xa, @sa_data_min="c4aeed448dc7fe8000"}, 0x55) socket(0x2, 0x3, 0x1) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) mincore$auto(0x0, 0x8000000000005b, 0xfffffffffffffffc) (async) socket(0x2, 0x1, 0x106) (async, rerun: 64) getsockopt$auto(0x6, 0x11c, 0x3, 0xfffffffffffffffe, 0xfffffffffffffffd) (async, rerun: 64) shutdown$auto(r0, 0x2006) (async, rerun: 32) connect$auto(0x3, &(0x7f0000000140)={0xa, @sa_data_min="c4aeed448dc7fe8000"}, 0x55) (async, rerun: 32) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(0xffffffffffffffff, 0x0, 0x15) (async, rerun: 64) socket(0x11, 0x2, 0x4) (rerun: 64) sendmsg$auto_WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x4008844}, 0x2000c000) (async, rerun: 64) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async, rerun: 64) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) (async) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async, rerun: 64) madvise$auto(0x0, 0x200007, 0x19) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) socket(0x15, 0x5, 0x0) (rerun: 32) bind$auto(0x3, &(0x7f0000000080)={0x2, @sockaddr_1_1={"59c7ef"}}, 0x6b) r1 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x400, 0x18, 0x21}, 0x18) close_range$auto(r0, r1, 0x81) 13m48.658282298s ago: executing program 33 (id=157): r0 = socket(0xa, 0x801, 0x106) (async) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000021}, 0x8004) (async) connect$auto(0x3, &(0x7f0000000140)={0xa, @sa_data_min="c4aeed448dc7fe8000"}, 0x55) socket(0x2, 0x3, 0x1) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) mincore$auto(0x0, 0x8000000000005b, 0xfffffffffffffffc) (async) socket(0x2, 0x1, 0x106) (async, rerun: 64) getsockopt$auto(0x6, 0x11c, 0x3, 0xfffffffffffffffe, 0xfffffffffffffffd) (async, rerun: 64) shutdown$auto(r0, 0x2006) (async, rerun: 32) connect$auto(0x3, &(0x7f0000000140)={0xa, @sa_data_min="c4aeed448dc7fe8000"}, 0x55) (async, rerun: 32) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(0xffffffffffffffff, 0x0, 0x15) (async, rerun: 64) socket(0x11, 0x2, 0x4) (rerun: 64) sendmsg$auto_WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x4008844}, 0x2000c000) (async, rerun: 64) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async, rerun: 64) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) (async) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async, rerun: 64) madvise$auto(0x0, 0x200007, 0x19) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) socket(0x15, 0x5, 0x0) (rerun: 32) bind$auto(0x3, &(0x7f0000000080)={0x2, @sockaddr_1_1={"59c7ef"}}, 0x6b) r1 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x400, 0x18, 0x21}, 0x18) close_range$auto(r0, r1, 0x81) 13m33.785978978s ago: executing program 34 (id=188): bpf$auto(0x0, &(0x7f0000000100)=@task_fd_query={0x6, 0x4, 0x200, 0xffffffff, 0x8, 0xc, 0x66b, 0x0, 0x1}, 0x6f4) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0x0, 0x8003) madvise$auto(0x3, 0x5, 0x17) socket(0x2, 0x2, 0x1) close_range$auto(0x0, 0xfffffffffffff001, 0x2) socket(0x2, 0x1, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) ioctl$auto(r0, 0x0, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x10004) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x800008000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) io_setup$auto(0x3, 0x0) socket(0x1e, 0x5, 0x0) prctl$auto(0x3, 0x6e, 0x7ff, 0x2, 0x0) r1 = socket(0xa, 0x2, 0x88) bpf$auto(0x0, &(0x7f0000000000)=@link_update={r1, @new_prog_fd=0x4, 0x4, @old_map_fd=0x3ff}, 0xa3) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) io_setup$auto(0xb, 0x0) mincore$auto(0xfffffffffffffffc, 0x80000001, 0x0) read$auto(0x3, 0x0, 0x7) setsockopt$auto(0x3, 0x0, 0xd, 0x0, 0x28) write$auto(0x3, 0x0, 0xfdef) socket(0xa, 0x3, 0x73) setsockopt$auto(0x400000000000003, 0x29, 0x7, 0x0, 0x401) madvise$auto(0x0, 0xffffffffffff0001, 0x15) mremap$auto(0x1, 0x3, 0x6, 0x3ff, 0x6) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, 0x0, 0x8004) move_pages$auto(0x0, 0x5, &(0x7f0000000380)=&(0x7f0000000280), &(0x7f00000003c0)=0x1, 0x0, 0x2) 13m11.288924093s ago: executing program 35 (id=241): mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x400000000002, 0x8000) prctl$auto(0xf, 0xffc, 0x7fffffffffffffff, 0x8, 0x4) 11m34.579043198s ago: executing program 36 (id=493): mlockall$auto(0x7) prctl$auto(0x23, 0xc, 0x84d5, 0x96f, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) io_uring_setup$auto(0x6, 0x0) futex$auto(&(0x7f0000000000)=0x11b, 0x8, 0x0, &(0x7f0000000040)={0xf, 0x2}, &(0x7f0000000080)=0x1, 0x6) madvise$auto(0x0, 0x200007, 0x19) mlockall$auto(0x7) (async) prctl$auto(0x23, 0xc, 0x84d5, 0x96f, 0x0) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) io_uring_setup$auto(0x6, 0x0) (async) futex$auto(&(0x7f0000000000)=0x11b, 0x8, 0x0, &(0x7f0000000040)={0xf, 0x2}, &(0x7f0000000080)=0x1, 0x6) (async) madvise$auto(0x0, 0x200007, 0x19) (async) 10m35.92802873s ago: executing program 7 (id=697): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) mlock$auto(0x9, 0x6) socket(0xa, 0x1, 0x84) io_pgetevents$auto(0x7, 0x2, 0xfffffffffffff801, 0xfffffffffffffffc, 0x0, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) setsockopt$auto(0x3, 0x10000000084, 0x81, 0x0, 0x8) (async) setsockopt$auto(0x3, 0x10000000084, 0x81, 0x0, 0x8) mmap$auto(0x0, 0xa, 0xdb, 0x9b72, 0x5, 0x8000) (async) mmap$auto(0x0, 0xa, 0xdb, 0x9b72, 0x5, 0x8000) io_uring_setup$auto(0x6, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x89fc, &(0x7f0000000000)={'ip_vti0\x00'}) setsockopt$auto(0x3, 0x39fa, 0x80, 0x0, 0x8) select$auto(0x6d0c, 0x0, &(0x7f0000000100)={[0x8, 0x1, 0x800000000000008, 0xc, 0x9, 0x3, 0x3, 0x1, 0x40009, 0xffffffff, 0x3c, 0x14, 0x3, 0x1, 0x1, 0x2000000b]}, 0x0, 0x0) connect$auto(0x3, &(0x7f0000000140)={0xa, @sa_data_min="c4aeed448dc7fe8000"}, 0x55) (async) connect$auto(0x3, &(0x7f0000000140)={0xa, @sa_data_min="c4aeed448dc7fe8000"}, 0x55) shutdown$auto(0x200000003, 0x2) (async) shutdown$auto(0x200000003, 0x2) madvise$auto(0x0, 0xffffffffffff0002, 0x15) (async) madvise$auto(0x0, 0xffffffffffff0002, 0x15) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) writev$auto(0x1, &(0x7f0000000100)={0x0, 0x400000040000fdef}, 0x1) syz_genetlink_get_family_id$auto_MAC80211_HWSIM(0x0, 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_NEW_RADIO(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004084}, 0x48000) syz_genetlink_get_family_id$auto_MAC80211_HWSIM(0x0, 0xffffffffffffffff) ppoll$auto(0x0, 0x9eba, &(0x7f0000000140)={0x5852, 0x1000}, 0x0, 0x1) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) io_uring_setup$auto(0x6, 0x0) msync$auto(0x2000001fffeffc, 0x8001, 0xffffffff) sendmsg$auto_HWSIM_CMD_NEW_RADIO(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20005811}, 0x4048040) (async) sendmsg$auto_HWSIM_CMD_NEW_RADIO(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20005811}, 0x4048040) socket$nl_generic(0x10, 0x3, 0x10) socket(0x15, 0x5, 0x0) (async) socket(0x15, 0x5, 0x0) fanotify_init$auto(0x65, 0x2) (async) fanotify_init$auto(0x65, 0x2) dup2$auto(0x5, 0x4) 10m34.757050815s ago: executing program 37 (id=699): socket(0x2, 0x801, 0x84) bpf$auto(0x5, &(0x7f0000000000)=@bpf_attr_3={0x8, 0xffffffef, 0x18c, 0x6a, 0x0, 0x8, 0x3, 0x9, 0xfffffff8, "63acf0e05b2d33ebc15774e816ef77cf", 0x0, 0x541, 0x4, 0x7, 0x6d, 0x1008, 0x4, 0x2, 0xe, 0x5, @attach_btf_obj_fd=0x3, 0x166, 0x7ff, 0x6, 0x6, 0x48000000, 0xa7c2}, 0x7) connect$auto(0x3, &(0x7f0000000000)={0x2, @sockaddr_1_1={"d9ef7f"}}, 0x55) listen$auto(0x3, 0x9) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0x11, 0x3, 0x2) socket(0x21, 0x2, 0xa) mmap$auto(0x0, 0x8, 0x1000000004, 0x9b72, 0x2, 0x8000) getsockopt$auto(0x6, 0x110, 0x2, 0xffffffffffffffff, 0x0) accept$auto(0x3, 0x0, 0x0) listen$auto(0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_TIPCv2(&(0x7f0000002400), r2) sendmsg$auto_TIPC_NL_BEARER_SET(r2, &(0x7f0000002600)={0x0, 0x0, &(0x7f00000025c0)={&(0x7f0000005ac0)={0x18, r3, 0x1, 0x70bd26, 0x25dfdbff, {}, [@TIPC_NLA_BEARER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4008841}, 0x4000800) close_range$auto(r0, r1, 0xb3) connect$auto(0x3, &(0x7f0000000000)={0x2, @sockaddr_1_1}, 0x55) 10m34.420085127s ago: executing program 7 (id=703): socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x89fc, &(0x7f0000000280)={'syz_tun\x00'}) r0 = socket(0x22, 0x2, 0x24) r1 = socket$nl_generic(0x10, 0x3, 0x10) modify_ldt$auto(0x1, &(0x7f00000001c0), 0x10) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) setrlimit$auto(0x1000000007, 0x0) accept$auto(0x3, 0x0, 0x0) clone$auto(0x9001, 0x5, 0xffffffffffffffff, 0xfffffffffffffffc, 0x6) r2 = syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_OVS_DP_CMD_NEW(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010025bd7000fcdbdf250100000008000200", @ANYRES32=0x4, @ANYBLOB="080001004853520008000200", @ANYRES32=0x9, @ANYBLOB="542c24a140000000"], 0x34}, 0x1, 0x0, 0x0, 0x20000811}, 0x24008090) sendmsg$auto_NL80211_CMD_GET_INTERFACE(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x20018048}, 0x4c081) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8000, 0x0) io_uring_setup$auto(0x6, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'virt_wifi0\x00', 0x0}) sendmsg$auto_NL80211_CMD_SET_WIPHY(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16, @ANYBLOB="010026bd7000fddb557d000882e997266a416c655ede6cb2caf390bc77cdcb7804f72fd0c78718504c69", @ANYRES32=r4, @ANYBLOB="08003f0080ffffff"], 0x24}, 0x1, 0x0, 0x0, 0x4000090}, 0x20004884) sendmsg$auto_NL80211_CMD_DISASSOCIATE(r1, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0x34, 0x0, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [@NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0x9}, @NL80211_ATTR_SAE_PWE={0x5, 0x12a, 0x5}, @NL80211_ATTR_WIPHY_ANTENNA_RX={0x8, 0x6a, 0x4}, @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, 0x8c}]}, 0x34}}, 0x0) socket(0x2, 0x1, 0x106) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socket(0xa, 0x6, 0x0) socket(0xa, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x9, 0x4020005, 0x6, 0x10, 0x25a0, 0x7ffe) recvmsg$auto(0x4, 0x0, 0x7ffb) 10m33.873444153s ago: executing program 7 (id=704): madvise$auto(0x0, 0x2000040080000004, 0xe) clock_gettime$auto(0x401, &(0x7f0000000180)={0x6}) open(&(0x7f0000000040)='./cgroup.cpu/cpuset.cpus\x00', 0x121342, 0x0) clone$auto(0x1002, 0x9, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x9) syz_genetlink_get_family_id$auto_TIPCv2(&(0x7f0000000080), 0xffffffffffffffff) clone$auto(0x200, 0xff, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x100000000) madvise$auto(0x1ffff000, 0x5510, 0x8) clone$auto(0x7, 0x59f4bc, &(0x7f0000000000)=0x7, &(0x7f00000000c0)=0x3ff, 0x20000000000) clone$auto(0x2, 0x8, &(0x7f0000000100)=0x5, &(0x7f0000000140)=0xc6b4, 0x9945) 10m33.034495337s ago: executing program 7 (id=709): syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000140), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_BATADV_CMD_SET_MESH(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=ANY=[@ANYRESOCT=r0], 0x1c}, 0x1, 0x0, 0x0, 0x44000}, 0x44) r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_DEL_KEY(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="9df7acea525cbc333ae263372fdb3e2bb6b99c8301894093030aa0ca0be4300260efc64850b49eb9bbe4e6d8567b43a12808936be888ab725bb3039112ec60ea497beceb52bfcb5858b4ef5f7266809cba06e11a69cd2a7b868a399afd4cfde0fc0e2da2c9a1b75ed8e4506a8162dfb634b0f23f64f79c8944ccb6bb8df65b553e20ce1ad5668f4396774eadbd371ed4cfd11fdc4decbcade8327fcbbcec07b94b4e907f4198e89cfdce7655578cb7dccca0ad24e0e0174097d7ca5fb61df918", @ANYRES16=r1, @ANYBLOB="10002cbd7000fbdbdf250c00000008009f0002000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4008030}, 0x20004880) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) socket(0x2, 0x1, 0x4) io_uring_setup$auto(0x6, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0xa, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1e, 0x4, 0x0) socket(0x1e, 0x4, 0x0) get_robust_list$auto(0x0, 0x0, 0x0) setsockopt$auto(0xffffffffffffffff, 0x400, 0x3, 0x0, 0x6) setsockopt$auto(0x3, 0x10f, 0x87, 0x0, 0x14) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0) close_range$auto(0x2, 0x8, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket(0x0, 0x801, 0x84) socket$nl_generic(0x10, 0x3, 0x10) io_uring_setup$auto(0x6, 0x0) mprotect$auto(0x1ffff000, 0x8000000000000001, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x1, 0x84) setsockopt$auto(0x3, 0x29, 0x10, 0xffffffffffffffff, 0x3) fsopen$auto(0x0, 0x1) epoll_create$auto(0x4) epoll_ctl$auto(0x5, 0x1, r2, 0x0) connect$auto(0x3, &(0x7f0000000180)={0x2, @sockaddr_1_1={"1b86b04995e7147b34b3e05e6cd9d2146a5d28e27663bd8f2a3e96fc237240515e280278112ed6ae2f7eb7effbd8508f40a4b684f51d152b0f232f9529d036236ecd62ad1eda0b3140dcea32bf38f55aa5e8054f2ad6ef7fa7e32921abcaf2e76ef3e7ee34e303770820b68e210435b7e8d88191"}}, 0x56) 10m32.17330543s ago: executing program 7 (id=711): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_DEAUTHENTICATE(r0, &(0x7f0000000480)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000440)={&(0x7f0000000080)={0x390, r1, 0x400, 0x70bd2c, 0x25dfdbfd, {}, [@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x9}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x5939}, @NL80211_ATTR_BEACON_TAIL={0x355, 0xf, "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"}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xd}, @NL80211_ATTR_HANDLE_DFS={0x4}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x8000}]}, 0x390}, 0x1, 0x0, 0x0, 0x880}, 0x8) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) sysfs$auto(0x2, 0x6, 0x0) fsopen$auto(0x0, 0x1) statmount$auto(&(0x7f00000004c0)={0x7fff, 0x4, 0x10000, 0xffff, 0x7}, &(0x7f0000000500)={0x6, 0x9, 0x3, 0x8, 0x80, 0x7, 0x1, 0x8, 0x1, 0x1, 0x3, 0x40, 0x7, 0x6, 0x5, 0x7f, 0x6, 0xc, 0xeeed, 0xaad8, [0x2, 0x9, 0x8, 0x7, 0xd, 0x4, 0x0, 0xa04, 0x8000000000000001, 0x0, 0x1, 0xfffffffffffff32a, 0x2, 0xfffffffffffffff9, 0x0, 0x8, 0x5, 0x8000000000000001, 0x4, 0x9, 0x9, 0x0, 0x4, 0x8001, 0x6, 0x8, 0x100000000, 0x0, 0xf27a, 0x4, 0x4, 0x9, 0x80000001, 0x8000000000000000, 0x5, 0x401, 0x1, 0x7, 0x7, 0xfffffffffffffffe, 0x10000000, 0x1dc1, 0x6, 0x4, 0x1, 0xfffffffffffffffb, 0x6, 0x7, 0x8], "4246f1798cbabb1b3657168bac93414d794bfa5294650acad17258f6144c606ca686a6c154abe87956527dd09fd14e1cf427951c44c52ad2dd877b1917bef2301e8e142a1914083c74abfa98056ce3fc06e244b7d2e5fb4b3d17c18f10bf9c7c51ad0e62c3b206b1797acb0a75746920010d8b"}, 0xfffffffffffffc29, 0x7) 10m30.747825282s ago: executing program 7 (id=715): socket(0x2, 0x1, 0x106) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) (async) madvise$auto(0x0, 0xffffffffffff0005, 0x19) (async) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x7ffd) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) (async) fcntl$auto(0x2, 0x40c, 0x7f) (async) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x4, 0x8000) 10m15.193141871s ago: executing program 38 (id=715): socket(0x2, 0x1, 0x106) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) (async) madvise$auto(0x0, 0xffffffffffff0005, 0x19) (async) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x7ffd) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) (async) fcntl$auto(0x2, 0x40c, 0x7f) (async) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x4, 0x8000) 8m43.792477892s ago: executing program 9 (id=976): r0 = open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x100) copy_file_range$auto(r0, &(0x7f0000000140)=0xffff, r0, 0x0, 0xfffffffffffffffc, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8004) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) r1 = open(&(0x7f0000000080)='./file0\x00', 0x440542, 0x5a) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0xc) socket(0x28, 0x1, 0x0) connect$auto(0x3, &(0x7f0000000180)={0x28, @sockaddr_1_1}, 0x54) ioctl$auto(0x3, 0x5411, 0xda2e) fanotify_init$auto(0x5ca, 0x747) setuid$auto(0xe) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) swapoff$auto(0x0) syz_genetlink_get_family_id$auto_ila(&(0x7f0000000040), r1) fcntl$auto(0x2, 0x40c, 0x7f) pipe2$auto(&(0x7f0000000000)=0x2fa5, 0x3) open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x100) (async) copy_file_range$auto(r0, &(0x7f0000000140)=0xffff, r0, 0x0, 0xfffffffffffffffc, 0x0) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8004) (async) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) (async) open(&(0x7f0000000080)='./file0\x00', 0x440542, 0x5a) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) close_range$auto(0x2, 0x8, 0x0) (async) socket(0x10, 0x2, 0xc) (async) socket(0x28, 0x1, 0x0) (async) connect$auto(0x3, &(0x7f0000000180)={0x28, @sockaddr_1_1}, 0x54) (async) ioctl$auto(0x3, 0x5411, 0xda2e) (async) fanotify_init$auto(0x5ca, 0x747) (async) setuid$auto(0xe) (async) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) (async) swapoff$auto(0x0) (async) syz_genetlink_get_family_id$auto_ila(&(0x7f0000000040), r1) (async) fcntl$auto(0x2, 0x40c, 0x7f) (async) pipe2$auto(&(0x7f0000000000)=0x2fa5, 0x3) (async) 8m38.340095492s ago: executing program 9 (id=994): close_range$auto(0x0, 0xfffffffffffff000, 0x2) bpf$auto(0x0, &(0x7f00000001c0)=@task_fd_query={0x9, 0x21eb, 0x7ff, 0x6, 0xa, 0x1000009, 0x5f, 0x0, 0x3}, 0x6f3) (async) socket(0x10, 0x2, 0x0) (async) memfd_create$auto(&(0x7f0000000000)='\xc4--:\xdd:,./-${\x00', 0x4) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket(0xa, 0x3, 0x100) (async) socket(0x2, 0x2, 0x6) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_ETHTOOL_MSG_CABLE_TEST_ACT(r0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x9882900}, 0xc, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[], 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x5) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000300), r2) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) renameat2$auto(0x5, 0x0, 0x0, 0xffffffffffffffff, 0x3) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffff7, 0x8000) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_MAC80211_HWSIM(&(0x7f0000000280), r3) sendmsg$auto_HWSIM_CMD_GET_RADIO(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYBLOB="1400005510a851e1423ed08e73ad1c89c49397a65d0a03fad04536c4deefa9c8378d1988f8a2a20175a19acb63004b7d5dd7f37aebd213163516f955140423d63c15c299601f50e3b03101ebec8d634de63b8efc47c6425871d7740819d867d21dbaf55b5f9d942cd0bb7db9bceaae9b545b93dc5678c79eaf5582e8bb94bbdf6747f9050b1827ce1b43c2e1f444922867e7b602881c64ae372f86075285764b78ad996ba4713ea03cdc7b6090bdfc1ed6a82f08fd41b7262ef077168b70a3409610b19ffe28e354db2e", @ANYRES16=r4, @ANYBLOB="010b29bd7000fddbdf2506000000"], 0x14}, 0x1, 0x0, 0x0, 0x8044}, 0x10000) (async) recvmmsg$auto(0x5, 0x0, 0x3, 0x6, 0x0) (async) sendmmsg$auto(0x3, &(0x7f0000000000)={{0x0, 0x2, 0x0, 0x106, 0x0, 0x1, 0x3}, 0xed7138c}, 0x7, 0x0) (async) socket(0x2a, 0x800, 0x7fff) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket(0x18, 0x5, 0x0) (async) keyctl$auto(0x4, 0xfffffffd, 0x2, 0x0, 0x8) (async) eventfd$auto(0x3) (async) r5 = socket(0xa, 0x2, 0x88) bpf$auto(0x0, &(0x7f0000000000)=@bpf_attr_5={@target_ifindex, r5, 0x10001, 0xb, 0xffffffffffffffff, @relative_fd=r1, 0x4}, 0xa3) (async) socket$nl_generic(0x10, 0x3, 0x10) 8m38.074916693s ago: executing program 9 (id=996): r0 = gettid() rt_sigqueueinfo$auto(r0, 0x0, &(0x7f00000014c0)={@siginfo_0_0={0x2, 0x4, 0x8, @_sigfault={0x0, @_addr_bnd={"a6a8be019204a55f", 0x0, 0x0}}}}) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r1 = socket(0xa, 0x801, 0x84) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000021}, 0x8004) connect$auto(0x3, &(0x7f0000000140)={0xa, @sa_data_min="c4aeed448dc7fe80000000000100"}, 0x55) mmap$auto(0x400, 0x4, 0x7fffffffffffffff, 0x400000000010, 0x1, 0x2) connect$auto(0x3, &(0x7f0000000140)={0xa, @sa_data_min="c4aeed448dc7fe8000"}, 0x55) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) fanotify_init$auto(0x5, 0x2000000000002) socket(0x28, 0x80805, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000000c0)='ns/pid\x00') open(&(0x7f0000000000)='./file0\x00', 0x4242, 0xe1d2b27bdc14aabc) open(&(0x7f0000000000)='./file1\x00', 0x10677d, 0x37e5c9853cd1b999) fanotify_mark$auto(0x0, 0x11, 0x9, 0x4, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) shutdown$auto(0x200000003, 0x2) write$auto(0x3, 0x0, 0x34000) r2 = socket(0x18, 0x4, 0x1) ioctl$sock_SIOCGIFINDEX(r2, 0x40047452, 0x0) close_range$auto(0x0, 0xffffeffe, 0x2) pipe$auto(0x0) pipe$auto(&(0x7f0000000040)=0x1) tee$auto(0x2000000000000, 0x3, 0x3ff, 0x77) socket(0x15, 0x5, 0x0) setsockopt$auto(0x3, 0x114, 0x5, 0x0, 0xa0) setsockopt$auto(0x3, 0x10000000084, 0x7b, 0x0, 0x8) setsockopt$auto(0x3, 0x10000000084, 0x7c, 0x0, 0x8) close_range$auto(0x2, 0x8000, 0x0) syz_genetlink_get_family_id$auto_NLBL_MGMT(&(0x7f0000000000), r1) 8m37.389268722s ago: executing program 9 (id=999): ioprio_set$auto(0x2, 0x800000000, 0x8) (async) mknod$auto(&(0x7f0000000180)='u[,&*}\x00\a\x00\x00\x00?\xa4\x1fN\xa1~5Z\xc7\r\f}M4\xa8m\xe6\x19[11\xab\xff-E\xac9(\xb4O\xa0t4h\x9f-gn\x1f\x0f\x18\xc5\x82-s\x83\xe6\xaeR\x81\r_\x0e\x19\x12\x85\bvf(e\xday)\t\x15\xf6\xc8\xee\x04\x16\xc1\x9a!\x87I7\x8cD&zg\xb0a\xab|E\xde\x14\xee[\xc8\xc0\xa8Nh\x0f\xa3\xdbT\xb3\xb8\xd2F\xa0\xc4]\xaf\xc43&\xe4\x01\x05\xd2\x15\xf8\xf1!\x9d\x92\xbbHL9aD\xb4\x80\xed\xba>\"\xb6\x7f\xa3f\x1d\a\xa1\x87\x84uA\xd8\xe7\xd2\xf3[r\xc5S&}D[\x97\xf1\xd9\xf8Y\x03\x84\xb4\xd7\x16\x19\xe5\x17\x10\xd8fcG:\xfbY8\x17w\x98?\x03@\xe5\x02\x05\x93h\xb9\xf7\xef\x84\x8aGlN\a\x1e', 0x1, 0x4) (async) mq_notify$auto(0xbc, &(0x7f0000000140)={@sival_int=0x4, 0x4, 0xc, @_sigev_thread={0x0, 0x0}}) (async) r0 = socket(0x2, 0x801, 0x100) (async) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) (async) io_uring_setup$auto(0x6, 0x0) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) (async) connect$auto(0x3, &(0x7f00000018c0)={0x2, @sa_data_min="915ba9fec23ea3df94bb303b2f9d"}, 0x55) (async) close_range$auto(0x2, 0x8, 0x0) acct$auto(&(0x7f0000000380)='u[,&*}\x00\a\x00\x00\x00?\xa4\x1fN\xa1~5Z\xc7\r\f}M4\xa8m\xe6\x19[11\xab\xff-E\xac9(\xb4O\xa0t4h\x9f-gn\x1f\x0f\x18\xc5\x82-s\x83\xe6\xaeR\x81\r_\x0e\x19\x12\x85\bvf(e\xday)\t\x15\xf6\xc8\xee\x04\x16\xc1\x9a!\x87I7\x8cD&zg\xb0a\xab|E\xde\x14\xee[\xc8\xc0\xa8Nh\x0f\xa3\xdbT\xb3\xb8\xd2F\xa0\xc4]\xaf\xc43&\xe4\x01\x05\xd2\x15\xf8\xf1!\x9d\x92\xbbHL9aD\xb4\x80\xed\xba>\"\xb6\x7f\xa3f\x1d\a\xa1\x87\x84uA\xd8\xe7\xd2\xf3[r\xc5S&}D[\x97\xf1\xd9\xf8Y\x03\x84\xb4\xd7\x16\x19\xe5\x17\x10\xd8fcG:\xfbY8\x17w\x98?\x03@\xe5\x02\x05\x93h\xb9\xf7\xef\x84\x8aGlN\a\x1e') (async) acct$auto(0x0) accept$auto(r0, &(0x7f0000000000)={0xfffd, @sockaddr_1_1={"733db5a8ada00ae54eab30e29e98d8292f80bbcaf351d7f42fe980265f335a3c13c6b4a72c55469719aabd181453b0fdf5760f6550acc9b105ad5c80ecd8975fd2270056153b6f558e87262428537a79f0d71cf9f7f6f25e392971d2f1c9628c3b10af10f70bed2d3d7a6c3e8e4d6dcd6797388a8ec20504dac15f379f8d1ca33b1aff84728088adcee14609f4d00a60a2d525271c6e6cdd3390601dbe176c940b5cd5b9872df28d77b3be31210ab3df872138d0e97292fb0559e4c1"}}, &(0x7f00000000c0)=0x3) 8m37.032192004s ago: executing program 9 (id=1004): mmap$auto(0x0, 0x40009, 0xa, 0x9b72, 0x2, 0x28000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x3, 0x7) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x402, 0x300000000000) prctl$auto(0x34, 0xffff, 0xa, 0x800, 0x6c) r0 = open(&(0x7f0000000000)='./file0\x00', 0x10100, 0x80) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x402342, 0x136) dup3$auto(r0, r1, 0x6) rt_sigqueueinfo$auto(0x1, 0x7, &(0x7f0000000040)={@siginfo_0_0={0x0, 0x5, 0xffffffc4, @_sigpoll={0x52, 0x7}}}) 8m34.453658803s ago: executing program 9 (id=1009): exit$auto(0x7) unshare$auto(0x40000080) futex_wait$auto(0x0, 0x0, 0x7f, 0x2, 0x0, 0x1) socket(0xa, 0x3, 0xff) select$auto(0xfffffffd, 0x0, &(0x7f0000000100)={[0x7, 0x207, 0x7, 0xd, 0xfffffffffffffff9, 0xda5, 0x8000000000000001, 0x2800000000000004, 0x9, 0xff, 0xff, 0x7, 0x4, 0xffff, 0x5, 0xb]}, 0x0, 0x0) connect$auto(0x3, &(0x7f0000000140)={0xa, @sa_data_min="c4aeed448dc7fe8000"}, 0x55) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) write$auto(0x3, 0x0, 0x81) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) clone$auto(0x8001, 0x5, 0xffffffffffffffff, 0xfffffffffffffffc, 0x6) socketpair$auto(0x3, 0x1, 0xfffffffc, 0x0) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) bpf$auto(0x0, 0x0, 0x6f4) acct$auto(&(0x7f0000000000)='\x00') sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) close_range$auto(0x2, 0x8000, 0x0) exit$auto(0x7) (async) unshare$auto(0x40000080) (async) futex_wait$auto(0x0, 0x0, 0x7f, 0x2, 0x0, 0x1) (async) socket(0xa, 0x3, 0xff) (async) select$auto(0xfffffffd, 0x0, &(0x7f0000000100)={[0x7, 0x207, 0x7, 0xd, 0xfffffffffffffff9, 0xda5, 0x8000000000000001, 0x2800000000000004, 0x9, 0xff, 0xff, 0x7, 0x4, 0xffff, 0x5, 0xb]}, 0x0, 0x0) (async) connect$auto(0x3, &(0x7f0000000140)={0xa, @sa_data_min="c4aeed448dc7fe8000"}, 0x55) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) write$auto(0x3, 0x0, 0x81) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) clone$auto(0x8001, 0x5, 0xffffffffffffffff, 0xfffffffffffffffc, 0x6) (async) socketpair$auto(0x3, 0x1, 0xfffffffc, 0x0) (async) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) (async) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) (async) bpf$auto(0x0, 0x0, 0x6f4) (async) acct$auto(&(0x7f0000000000)='\x00') (async) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) (async) close_range$auto(0x2, 0x8000, 0x0) (async) 8m34.322203151s ago: executing program 39 (id=1009): exit$auto(0x7) unshare$auto(0x40000080) futex_wait$auto(0x0, 0x0, 0x7f, 0x2, 0x0, 0x1) socket(0xa, 0x3, 0xff) select$auto(0xfffffffd, 0x0, &(0x7f0000000100)={[0x7, 0x207, 0x7, 0xd, 0xfffffffffffffff9, 0xda5, 0x8000000000000001, 0x2800000000000004, 0x9, 0xff, 0xff, 0x7, 0x4, 0xffff, 0x5, 0xb]}, 0x0, 0x0) connect$auto(0x3, &(0x7f0000000140)={0xa, @sa_data_min="c4aeed448dc7fe8000"}, 0x55) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) write$auto(0x3, 0x0, 0x81) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) clone$auto(0x8001, 0x5, 0xffffffffffffffff, 0xfffffffffffffffc, 0x6) socketpair$auto(0x3, 0x1, 0xfffffffc, 0x0) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) bpf$auto(0x0, 0x0, 0x6f4) acct$auto(&(0x7f0000000000)='\x00') sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) close_range$auto(0x2, 0x8000, 0x0) exit$auto(0x7) (async) unshare$auto(0x40000080) (async) futex_wait$auto(0x0, 0x0, 0x7f, 0x2, 0x0, 0x1) (async) socket(0xa, 0x3, 0xff) (async) select$auto(0xfffffffd, 0x0, &(0x7f0000000100)={[0x7, 0x207, 0x7, 0xd, 0xfffffffffffffff9, 0xda5, 0x8000000000000001, 0x2800000000000004, 0x9, 0xff, 0xff, 0x7, 0x4, 0xffff, 0x5, 0xb]}, 0x0, 0x0) (async) connect$auto(0x3, &(0x7f0000000140)={0xa, @sa_data_min="c4aeed448dc7fe8000"}, 0x55) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) write$auto(0x3, 0x0, 0x81) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) clone$auto(0x8001, 0x5, 0xffffffffffffffff, 0xfffffffffffffffc, 0x6) (async) socketpair$auto(0x3, 0x1, 0xfffffffc, 0x0) (async) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) (async) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) (async) bpf$auto(0x0, 0x0, 0x6f4) (async) acct$auto(&(0x7f0000000000)='\x00') (async) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) (async) close_range$auto(0x2, 0x8000, 0x0) (async) 8m16.360709891s ago: executing program 4 (id=1010): r0 = socket(0x10, 0x2, 0x0) r1 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f0000000040), 0xffffffffffffffff) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x9, 0xdf, 0xeb1, 0x1, 0x8000) sysfs$auto(0x2, 0x4f, 0x0) fsopen$auto(0x0, 0x1) (async) fsopen$auto(0x0, 0x1) r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), r0) sendmsg$auto_NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, r2, 0x400, 0x70bd27, 0x25dfdbfe, {}, [@NL80211_ATTR_BSS_HT_OPMODE={0x6, 0x6d, 0x2}, @NL80211_ATTR_SMPS_MODE={0x5, 0xd5, 0xf5}, @NL80211_ATTR_SCHED_SCAN_MULTI={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x20000000) (async) sendmsg$auto_NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, r2, 0x400, 0x70bd27, 0x25dfdbfe, {}, [@NL80211_ATTR_BSS_HT_OPMODE={0x6, 0x6d, 0x2}, @NL80211_ATTR_SMPS_MODE={0x5, 0xd5, 0xf5}, @NL80211_ATTR_SCHED_SCAN_MULTI={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x20000000) close_range$auto(0x0, 0xfffffffffffff000, 0x0) (async) close_range$auto(0x0, 0xfffffffffffff000, 0x0) io_uring_setup$auto(0x6, 0x0) (async) io_uring_setup$auto(0x6, 0x0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x402, 0x300000000000) capget$auto(0x0, 0x0) (async) capget$auto(0x0, 0x0) capset$auto(0x0, 0xfffffffffffffffe) close_range$auto(0x2, 0x1b, 0x0) (async) close_range$auto(0x2, 0x1b, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x3, 0xa) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) (async) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) mincore$auto(0x1000, 0x8001, 0x0) fcntl$auto(0x8000000000000001, 0x6, 0x8) stat$auto(&(0x7f0000000000)='..\x00\x00', 0x0) (async) stat$auto(&(0x7f0000000000)='..\x00\x00', 0x0) fcntl$auto(0x8000000000000001, 0x26, 0x2) mprotect$auto(0x3, 0x52, 0x7fff) sendmsg$auto_CTRL_CMD_GETFAMILY(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01"], 0x24}, 0x1, 0x0, 0x0, 0x4008810}, 0x30040005) mprotect$auto(0x1ffff000, 0x8000000000000001, 0x4) sendmsg$auto_NFSD_CMD_THREADS_SET(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000021}, 0x8004) clock_nanosleep$auto(0x1, 0x1000, &(0x7f0000000000)={0x88e, 0x7ff}, &(0x7f0000000080)={0x4, 0x5c04}) (async) clock_nanosleep$auto(0x1, 0x1000, &(0x7f0000000000)={0x88e, 0x7ff}, &(0x7f0000000080)={0x4, 0x5c04}) 8m15.352690271s ago: executing program 4 (id=1055): madvise$auto(0x0, 0x2000040080000004, 0xe) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) mount$auto(0x0, &(0x7f0000000100)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0x10001, 0x0) pivot_root$auto(&(0x7f0000000000)='}[,&*}\x00', 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x513d, 0x2) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x0, 0xffffffffffff0001, 0x15) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x53, 0x9) mmap$auto(0x0, 0x401008, 0xdf, 0x9b72, 0x1, 0x8000) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x14, 0x0, 0x1, 0x70bd28, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x4000804) syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000180), 0xffffffffffffffff) sendmmsg$auto(0x3, &(0x7f0000000000)={{0x0, 0x2, 0x0, 0x106, 0x0, 0x1, 0x697b}, 0xed7138c}, 0x9a6, 0xe000) socket(0xa, 0x2, 0x73) sendmsg$auto_NL80211_CMD_SET_PMK(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x4800) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x1ffff000, 0x5510, 0x8) mmap$auto(0x0, 0x5, 0xdf, 0x9b72, 0xc, 0x8000) clone$auto(0x8000000000000000, 0x104, 0xfffffffffffffffc, 0x0, 0x100000000) madvise$auto(0x0, 0x3, 0x15) sysfs$auto(0x2, 0x10000000000002b, 0x0) fsopen$auto(0x0, 0x1) close_range$auto(0x2, 0x8, 0x0) 8m12.971192314s ago: executing program 4 (id=1064): socket(0xa, 0x1, 0x84) (async) close_range$auto(0x0, 0xfffffffffffff000, 0x2) (async, rerun: 64) timerfd_create$auto(0x9, 0x8) (async, rerun: 64) epoll_create$auto(0xb73) (async) keyctl$auto(0x8, 0xfffffffffffffffd, 0xffffffffffffffff, 0x5092, 0x2) (async, rerun: 32) socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) unshare$auto(0x200) connect$auto(0x3, &(0x7f0000000140)={0xa, @sa_data_min="c4aeed448dc7fe8000"}, 0x55) connect$auto(0x3, &(0x7f0000000180)={0x4, @sockaddr_1_1={"cab6bcc290b64cdb1576e7cbaf2b5fa5963331e0e81f0c72bac56d8f1dce4f81271ce3c7766a08144e2346b576a650390c0b4137e7356a3e60a60a44e77296ba70b23fbd424d5dd3fb49bb1c3e6bde56d98bfe4bf5c3c45fa888e7c8cc69c9ddd51c"}}, 0x55) (async) mprotect$auto(0x1ffff000, 0x8000000000000001, 0xd) r0 = socket(0x2, 0x801, 0x100) (async) poll$auto(&(0x7f0000000d40)={0x3, 0x1, 0xa}, 0x5, 0x400) sendmsg$auto_NL80211_CMD_START_AP(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x2000c004) (async) connect$auto(0x3, &(0x7f00000000c0)={0x2, @sockaddr_1_1}, 0x55) (async, rerun: 64) r1 = open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x100) (rerun: 64) copy_file_range$auto(r1, &(0x7f0000000140)=0xffff, r1, 0x0, 0x21c1, 0x0) (async) r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/mnt\x00') r3 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/mnt\x00') setns(r3, 0x0) (async) umount2$auto(&(0x7f0000000080)='.\x00', 0x3) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x6, 0x8000) (async, rerun: 32) mremap$auto(0x85, 0x4, 0x1000047d, 0x7, 0x100000000) (rerun: 32) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) setns(r2, 0x0) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) (async, rerun: 64) mount$auto(0x0, &(0x7f0000000240)='}[,&*}\x00', 0x0, 0x7f, 0x0) (async, rerun: 64) mknod$auto(&(0x7f0000000040)=':,\x00', 0xc9, 0xc8) (async, rerun: 64) execve$auto(&(0x7f0000000000)=':,\x00', 0x0, 0x0) (rerun: 64) settimeofday$auto(&(0x7f00000000c0)={0x1, 0x227}, 0x0) (async) settimeofday$auto(&(0x7f0000000000)={0x4, 0x9}, &(0x7f0000000040)={0x0, 0x2}) 8m10.927874443s ago: executing program 4 (id=1073): socket(0xa, 0x801, 0x84) creat$auto(&(0x7f0000000080)='-\\&]\x00', 0x7f) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000002500), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_OVS_DP_CMD_NEW(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x2c, r3, 0x1, 0x2070bd26, 0x25dfdbf8, {}, [@OVS_DP_ATTR_UPCALL_PID={0x8, 0x2, 0x4}, @OVS_DP_ATTR_NAME={0x8, 0x1, 'HfR\x00'}, @OVS_DP_ATTR_UPCALL_PID={0x8, 0x2, 0x9}]}, 0x2c}, 0x1, 0x0, 0x0, 0x801}, 0x80) r4 = syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000080), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_OVS_DP_CMD_DEL(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002abd7000fedbdf2502"], 0x38}, 0x1, 0x0, 0x0, 0x20040011}, 0x20000000) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000500)={'gretap0\x00', 0x0}) socket(0xa, 0x23af690fef30229, 0x9) sendmsg$auto_OVS_DP_CMD_GET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={0x98, r1, 0x5, 0x70bd29, 0x25dfdbff, {}, [@OVS_DP_ATTR_IFINDEX={0x8, 0x9, r7}, @OVS_DP_ATTR_NAME={0x7c, 0x1, '-\xf1\x8a\xfd\xb5\xa74\xdcK\n\n\x02!<\xdc\xff{A>WF\xbe\xd6\xe9C\xa3\x0e:\xf4\n\x9c\x97\x8a\x93\x99\x05\x19\x95\xc1\x00>\xa4\x84\x7f}o\xf3!\xa6\x0f\xee\x93\xf2M\xb9\xd0\x90\x15\xd6\xcc\xd3k\x8b0xffffffffffffffff, 0x55, 0x1, 0x6, 0x5}, 0x7f, 0x9, 0x1, 0x0, 0xdd7, 0xffff, 0xc3f6, 0x0, &(0x7f0000001100)=[0x1, 0xaff, 0x2, 0x3, 0x7fffffffffffffff, 0x80000000, 0xe, 0x100000001], &(0x7f0000001140)=[0x2]}) shmctl$auto(0x400, 0x8, &(0x7f0000001280)={{0x7, r4, r5, 0x1, 0x5, 0x8, 0x2}, 0x9, 0x8, 0x0, 0xfffffffffffffff1, 0x81, 0x0, 0x4, 0x0, &(0x7f0000001200)=[0x10000, 0xf, 0x10000, 0x5], &(0x7f0000001240)=[0x8, 0x2, 0x0, 0xfff, 0xc34, 0x100000001, 0xaef]}) 2m19.242862659s ago: executing program 3 (id=2354): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ovs_vport(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_OVS_VPORT_CMD_NEW(r0, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000001180)={&(0x7f0000000340)={0x30, r1, 0x1, 0x70bd26, 0x25dfdbff, {}, [@OVS_VPORT_ATTR_NETNSID={0x8, 0x9, 0x4}, @OVS_VPORT_ATTR_TYPE={0x8, 0x2, 0x4}, @OVS_VPORT_ATTR_NAME={0x6, 0x3, '*\x00'}, @OVS_VPORT_ATTR_UPCALL_PID={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x4040010}, 0x800) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x2, 0x88) r2 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x8000a, 0x2) socket(0x2, 0x801, 0x100) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) sendmmsg$auto(r2, &(0x7f0000000000)={{0x0, 0x8, 0x0, 0xe, &(0x7f0000000a40)=[0x8e, 0x100000001], 0x8e, 0x40}, 0x8}, 0x1, 0x8) r3 = syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000880), 0xffffffffffffffff) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000440), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000940)={'batadv0\x00', 0x0}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_BATADV_CMD_GET_TRANSTABLE_GLOBAL(r6, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000040)={0x1c, r3, 0x301, 0x70bd2c, 0x25dfdbfc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8800}, 0x0) readv$auto(0x5, &(0x7f00000002c0)={0x0, 0x1}, 0x6) 2m17.132862845s ago: executing program 42 (id=2314): socket(0x10, 0x2, 0x6) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) select$auto(0x3, 0x0, &(0x7f0000000100)={[0x9, 0x200, 0x0, 0x7, 0x7, 0x3, 0x6, 0x2, 0x0, 0x10000005e58296f, 0x1e, 0xfffffffffffff735, 0xffffffffffffffff, 0x200, 0x8, 0x6]}, 0x0, 0x0) connect$auto(0x3, &(0x7f0000000140)={0xa, @sa_data_min="c4aeed448dc7fe8000"}, 0x55) mkdir$auto(&(0x7f0000000000)='\xef\xff\x00', 0x7b) madvise$auto(0x0, 0x2000040080000004, 0x12) mmap$auto(0x7, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x400000000008000) madvise$auto(0x8, 0x1, 0x8) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x2) mount_setattr$auto(0x1, &(0x7f00000000c0)='\xe6/\x00', 0x7, 0x0, 0x9) socket(0x2a, 0x80000, 0x24) madvise$auto(0xfffffffffffffff7, 0xffffffffffff0005, 0x17) rseq$auto(&(0x7f0000000200)={0xe, 0x1, 0x8, 0xa, 0x0, 0x80000000, "9e740bcce128dc9a9104df5668d3f81e35df0aec83edd15f70afc29cd054cf9907115753078aff654f06653cec8d03b7060abee4d8322158981c1e8f4f994fbf68308f019ec75b"}, 0x8, 0x8000002, 0x6) syz_genetlink_get_family_id$auto_HSR(0x0, 0xffffffffffffffff) ioprio_get$auto(0x1, 0xe93) semctl$auto(0x201, 0xfffffffffffffffa, 0x3, 0x0) mmap$auto(0x0, 0x8000000000004, 0x4000000000df, 0x40eb2, 0x402, 0x300000000000) clock_nanosleep$auto(0x7, 0x6, 0x0, 0xfffffffffffffffd) fchown$auto(0x5, 0x8, 0x3) madvise$auto(0x0, 0xffffffffffff0005, 0x19) r0 = socket(0xa, 0x2, 0x73) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_SET_PMK(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x4800) mkdir$auto(&(0x7f0000000080)='\xe6/\x00', 0x9841) r2 = syz_genetlink_get_family_id$auto_SMC_GEN_NETLINK(&(0x7f00000001c0), r1) r3 = socket$nl_generic(0x10, 0x3, 0x10) landlock_restrict_self$auto(0x5, 0x1b7) shmctl$auto(0x57, 0x2, &(0x7f0000000100)={{0x2f29, 0xfd, 0xf, 0x401, 0x7ff, 0x0, 0x1}, 0x3, 0xd46, 0x3ff, 0x844, 0x2, 0x1, 0x2, 0x0, 0x0, 0x0}) r4 = syz_genetlink_get_family_id$auto_ovs_ct_limit(&(0x7f0000000840), r3) sendmsg$auto_OVS_CT_LIMIT_CMD_SET(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000002e00)={&(0x7f0000000440)=ANY=[@ANYBLOB="ac613fa026d651cc8d66f0ab548c533357371667b6664b4622d89231a0e908e37e0fcc0377c398c37fb0f6afefa9e4937b433a045f8a009ae3426c0206564207fa63693023d82b60b6133d52321c04f6285d17c0822a62c56b40d5cba05d4d654d77fa87ec33fb603de61f690768dba3cf7c4ac852f6aec9f15e6cd6ad3fde525600f7a3dd60b8cf7a0aa74bd871d29094dce601cf039137", @ANYRESDEC=r0, @ANYBLOB="01002abd7000fb4781c1c9e551926fdbdf25010000", @ANYRES8=r2, @ANYRESDEC=r4, @ANYRESOCT=0x0], 0x140}}, 0x20044890) 2m16.51030551s ago: executing program 3 (id=2360): mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x402, 0x300000000000) (async) read$auto(0x3, 0x0, 0x10) (async) io_uring_setup$auto(0x6, 0x0) (async) socket(0x3, 0x3, 0x40c) (async) socket(0xa, 0x3, 0x33) (async) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000021}, 0x8004) connect$auto(0x3, &(0x7f0000000140)={0xa, @sa_data_min="c40900448dc7fe8000"}, 0x55) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) (async) lsm_list_modules$auto(0x0, 0x0, 0x0) (async, rerun: 32) sendmmsg$auto(0x15, &(0x7f0000000100)={{0x0, 0x6, 0x0, 0x7f, 0x0, 0x8000, 0x2}, 0x7}, 0x3, 0x0) (rerun: 32) sendmmsg$auto(0x3, &(0x7f0000000000)={{0x0, 0xffffffff, 0x0, 0x106, 0x0, 0x1, 0x3}, 0xed7138c}, 0x7, 0x0) syslog$auto(0x2, &(0x7f0000000000)='\x00', 0x8) (async) close_range$auto(0x2, 0x8000, 0x0) (async) socket(0xa, 0x1, 0x84) (async) listen$auto(0x3, 0x81) (async) accept$auto(0x3, 0x0, 0x0) (async) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async) accept$auto(0x3, 0xffffffffffffffff, 0xfffffffffffffffd) (async) futex_waitv$auto(&(0x7f0000000000)={0xfffffffffffffffc, 0x2c, 0x6, 0x8}, 0x202bf50, 0x1, 0x0, 0x62c0) (async) mprotect$auto(0x1ffff000, 0x8000000000000001, 0x4) (async) io_uring_setup$auto(0x7ea, &(0x7f0000000000)={0x6, 0x6c53, 0x10000400, 0x7, 0x1005, 0x7, 0x7, [0x4, 0x2e9, 0x30], {0x2, 0x1, 0x8, 0x7, 0xce60, 0x100005, 0x800001, 0xf5c, 0x2000007}, {0x4, 0x1003, 0xffff7ffe, 0x2, 0x8, 0x200, 0x2003, 0x0, 0x3}}) listen$auto(0x3, 0x0) 2m15.455983622s ago: executing program 3 (id=2361): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x19) io_uring_setup$auto(0x40000002c55, 0x0) socket(0x11, 0x3, 0x2) mmap$auto(0x0, 0x9, 0x3ff57696, 0x9b72, 0x2, 0x8000000000008000) getsockopt$auto(0x3, 0x200000000001, 0x1c, 0x0, 0x0) r0 = socket(0xa, 0x2, 0x0) close_range$auto(0x2, r0, 0x0) mknod$auto(&(0x7f0000000180)=':,\x00', 0xc9, 0xfffffffa) execve$auto(&(0x7f0000000040)=':,\x00', 0x0, 0x0) madvise$auto(0x0, 0x2000040080000004, 0xe) 1m59.585920722s ago: executing program 43 (id=2361): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x19) io_uring_setup$auto(0x40000002c55, 0x0) socket(0x11, 0x3, 0x2) mmap$auto(0x0, 0x9, 0x3ff57696, 0x9b72, 0x2, 0x8000000000008000) getsockopt$auto(0x3, 0x200000000001, 0x1c, 0x0, 0x0) r0 = socket(0xa, 0x2, 0x0) close_range$auto(0x2, r0, 0x0) mknod$auto(&(0x7f0000000180)=':,\x00', 0xc9, 0xfffffffa) execve$auto(&(0x7f0000000040)=':,\x00', 0x0, 0x0) madvise$auto(0x0, 0x2000040080000004, 0xe) 57.750582423s ago: executing program 8 (id=2489): socket(0xa, 0x6, 0x400008b) (async) select$auto(0x6d10, 0x0, &(0x7f0000000100)={[0xd, 0x200, 0x800000000000008, 0xc, 0xad14, 0x3, 0x6, 0x1, 0x40009, 0x5e582971, 0x4002000000000000, 0x10, 0x659c, 0x8, 0x2, 0x5]}, 0x0, 0x0) (async) connect$auto(0x3, &(0x7f0000000140)={0xa, @sa_data_min="c4aeed448dc7fe8000"}, 0x55) (async) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) (async) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0) 57.174230283s ago: executing program 8 (id=2492): ioperm$auto(0x5, 0x378, 0xc2) (async) setregid$auto(0xb1, 0x2) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ovs_meter(&(0x7f0000003040), 0xffffffffffffffff) (async) mmap$auto(0x0, 0x9, 0xdf, 0xeb1, 0x401, 0x8000) (async) close_range$auto(0x2, 0x8, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_procfs$namespace(0xffffffffffffffff, 0x0) socket(0x1, 0xa, 0x493) (async, rerun: 64) socket(0x3, 0x3, 0xa) (async, rerun: 64) socket$nl_generic(0x10, 0x3, 0x10) (async) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) (async) socket(0x2, 0xa, 0xe57a) (async, rerun: 64) socket(0x2b, 0x80000, 0x1) (async, rerun: 64) setsockopt$auto(0x6, 0x8000000000000006, 0xa, 0x0, 0x6) (async, rerun: 64) sendmsg$auto_OVS_METER_CMD_SET(r0, &(0x7f0000003240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="5da929bd7000fcdbdf2502000000080007002e000000"], 0x1c}, 0x1, 0x0, 0x0, 0xc0}, 0x40) (async, rerun: 64) socket(0xf, 0x1, 0x84) shutdown$auto(0x200000003, 0x2) mmap$auto(0xfffffffffffffffc, 0x400005, 0xdf, 0x9b72, 0x5, 0x8000) (async) fstatfs$auto(0x3, 0x0) shutdown$auto(0x200000003, 0x2) (async) memfd_create$auto(0x0, 0xe) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async, rerun: 32) madvise$auto(0x0, 0xffffffffffff0005, 0x19) (async, rerun: 32) execve$auto(0x0, 0x0, 0x0) (async) setreuid$auto(0x9, 0x5) (async) madvise$auto(0x0, 0x7ffffffffffffffc, 0xc) (async, rerun: 64) mremap$auto(0x4000, 0xfee0, 0x3fd6, 0x3, 0xfffff000) (rerun: 64) setsockopt$auto(0x3, 0x10000000084, 0x7d, 0x0, 0x632b491c) (async) ioprio_set$auto(0x2, 0x800000000, 0x8) 54.632188639s ago: executing program 8 (id=2498): mmap$auto(0x0, 0x408008, 0xe3, 0x9b72, 0x2, 0x8000) setrlimit$auto(0x1000000007, 0x0) socket(0x2a, 0x2, 0x0) 49.055511213s ago: executing program 0 (id=2510): mmap$auto(0x0, 0x20000a, 0x2, 0x40eb1, 0x622, 0x300000000000) mlockall$auto(0x7) recvfrom$auto(0x4, 0x0, 0x101d0, 0x3ffffd, 0x0, 0x0) clone$auto(0xd2d2, 0x7fffffffffffffff, 0xffffffffffffffff, 0x0, 0x1) mmap$auto(0x0, 0x9, 0x3ff57696, 0x9b72, 0x2, 0x8000000000008000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket(0xa, 0x801, 0x84) getsockopt$auto(0x6, 0x8, 0x25, 0x0, 0x0) madvise$auto(0x0, 0x20499d, 0x9) 47.937325594s ago: executing program 0 (id=2511): close_range$auto(0x2, 0x8000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x3, 0x6) socket$nl_generic(0x10, 0x3, 0x10) mprotect$auto(0x1ffff000, 0x8000000000000001, 0x4) getxattr$auto(&(0x7f0000000000)='(/}\'^\x00', &(0x7f0000000080)=':-.\'\x00', &(0x7f00000000c0)=[0x8000000000000001, 0x100000000, 0x4, 0x1, 0x7fffffffffffffff, 0x1], 0x1) socket(0x10, 0x2, 0xc) socket(0x2, 0x1, 0x0) setsockopt$auto(0x6, 0x6, 0x10, &(0x7f0000000040)='|s\x0e\x0e@\xee\xcd\xa25\xa4', 0xc) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) bpf$auto(0x2, &(0x7f00000001c0)=@raw_tracepoint={0x5, 0xffff, 0x0, 0x3}, 0xc) close_range$auto(0x2, 0x8000, 0x0) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) bind$auto(0x3, &(0x7f0000000040)={0x1, @sockaddr_1_1}, 0xb) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYBLOB="5cb045"], 0xfdef}, 0x1, 0x0, 0x0, 0x20000000}, 0x2000000) mprotect$auto(0x1ffff000, 0x8000000000000001, 0x4) r0 = socket(0x10, 0x2, 0xc) sendmsg$auto_CTRL_CMD_GETPOLICY(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x2000000) bind$auto(0x2, &(0x7f00000001c0)={0x1, @sockaddr_1_1}, 0xb) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x18001, 0xc6) pidfd_send_signal$auto(r1, 0x5, &(0x7f0000000140)={@_si_pad}, 0x2) 47.457029873s ago: executing program 0 (id=2512): symlink$auto(&(0x7f0000000000)='\\\':.\x00', &(0x7f0000000340)='\xfb\x00') mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) ioperm$auto(0x3, 0xe, 0x2000000000000149) readlink$auto(&(0x7f0000000b00)='\xfb\x00', 0x0, 0x800) 47.222541538s ago: executing program 0 (id=2513): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000080), r0) sendmsg$auto_NL80211_CMD_SET_NOACK_MAP(r0, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000040)={0x14, 0x0, 0x2, 0x70bd28, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x50}, 0x804) sendmsg$auto_NFSD_CMD_THREADS_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r1, 0x1, 0x70bd2d, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x40000021}, 0x4040810) 46.817405201s ago: executing program 0 (id=2514): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x34, r2, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x8}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0xc1}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x11e789c}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x48080) sendmsg$auto_L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="904c3d36", @ANYRES16=r2, @ANYBLOB="040026bd7000fddbdf2502000000050005002500000008001700", @ANYRES32=r0, @ANYBLOB="06000e000200000006001d0003000000050012000800000008000b0005000000"], 0x44}}, 0x24000090) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'pimreg\x00'}) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) syz_genetlink_get_family_id$auto_handshake(0x0, 0xffffffffffffffff) madvise$auto(0x0, 0xffffffffffff0001, 0x15) epoll_ctl$auto(0x6, 0x80000001, 0x2, 0x0) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) msync$auto(0x1ffff000, 0x100000000005, 0x400000004) madvise$auto(0x0, 0xffffffffffff0001, 0x17) madvise$auto(0x2000000040000, 0x7, 0xa) stat$auto(&(0x7f0000000000)='..\x00\x00', 0x0) mprotect$auto(0x1ffff000, 0x8000000000000001, 0x4) close_range$auto(0x0, 0xfffffffffffff000, 0x2) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/net\x00') fchdir$auto(0xf4400000000) unlink$auto(0x0) setsockopt$auto(0x10000000006, 0x0, 0x6, 0xfffffffffffffffc, 0x20000000000000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x2, 0x3, 0xa) connect$auto(0x3, &(0x7f00000000c0)={0x2, @sockaddr_1_1}, 0x55) sendmmsg$auto(0x3, 0x0, 0x9a6, 0xa00) socket(0x10, 0x3, 0xa) socket(0x2, 0x1, 0x0) 45.744588011s ago: executing program 0 (id=2517): setresgid$auto(0x81, 0x800000a0, 0x8) socket(0x2, 0x5, 0x1) unshare$auto(0x40000080) exit$auto(0x1) clone$auto(0x840008002, 0x7, 0xffffffffffffffff, 0xfffffffffffffffc, 0x400000000006) mknod$auto(&(0x7f0000000180)='u[,&*}\x00\a\x00\x00\x00?\xa4\x1fN\xa1~5Z\xc7\r\f}M4\xa8m\xe6\x19[11\xab\xff-E\xac9(\xb4O\xa0t4h\x9f-gn\x1f\x0f\x18\xc5\x82-s\x83\xe6\xaeR\x81\r_\x0e\x19\x12\x85\bvf(e\xday)\t\x15\xf6\xc8\xee\x04\x16\xc1\x9a!\x87I7\x8cD&zg\xb0a\xab|E\xde\x14\xee[\xc8\xc0\xa8Nh\x0f\xa3\xdbT\xb3\xb8\xd2F\xa0\xc4]\xaf\xc43&\xe4\x01\x05\xd2\x15\xf8\xf1!\x9d\x92\xbbHL9aD\xb4\x80\xed\xba>\"\xb6\x7f\xa3f\x1d\a\xa1\x87\x84uA\xd8\xe7\xd2\xf3[r\xc5S&}D[\x97\xf1\xd9\xf8Y\x03\x84\xb4\xd7\x16\x19\xe5\x17\x10\xd8fcG:\xfbY8\x17w\x98?\x03@\xe5\x02\x05\x93h\xb9\xf7\xef\x84\x8aGlN\a\x1e', 0x1, 0x4) acct$auto(&(0x7f0000000380)='u[,&*}\x00\a\x00\x00\x00?\xa4\x1fN\xa1~5Z\xc7\r\f}M4\xa8m\xe6\x19[11\xab\xff-E\xac9(\xb4O\xa0t4h\x9f-gn\x1f\x0f\x18\xc5\x82-s\x83\xe6\xaeR\x81\r_\x0e\x19\x12\x85\bvf(e\xday)\t\x15\xf6\xc8\xee\x04\x16\xc1\x9a!\x87I7\x8cD&zg\xb0a\xab|E\xde\x14\xee[\xc8\xc0\xa8Nh\x0f\xa3\xdbT\xb3\xb8\xd2F\xa0\xc4]\xaf\xc43&\xe4\x01\x05\xd2\x15\xf8\xf1!\x9d\x92\xbbHL9aD\xb4\x80\xed\xba>\"\xb6\x7f\xa3f\x1d\a\xa1\x87\x84uA\xd8\xe7\xd2\xf3[r\xc5S&}D[\x97\xf1\xd9\xf8Y\x03\x84\xb4\xd7\x16\x19\xe5\x17\x10\xd8fcG:\xfbY8\x17w\x98?\x03@\xe5\x02\x05\x93h\xb9\xf7\xef\x84\x8aGlN\a\x1e') acct$auto(0x0) socket(0x6, 0x5, 0x8) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) socket$nl_generic(0x10, 0x3, 0x10) clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) process_mrelease$auto(0x4, 0x0) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) mmap$auto(0x0, 0x400005, 0xe2, 0x9b72, 0x2, 0x8000) socketpair$auto(0x1, 0x0, 0x8000000000000000, 0x0) read$auto(0x4, 0x0, 0xfdef) write$auto(0x3, 0x0, 0x10001) splice$auto(0x4, 0x0, 0x2, 0x0, 0x7141, 0xf) open(&(0x7f0000000000)='./file0\x00', 0xa61c2, 0x10) socket(0x15, 0x2, 0x0) socket(0x2, 0x3, 0x1) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) prctl$auto(0x82000006, 0x1, 0x2000000001, 0x1, 0x9) socket(0x1, 0x1, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) io_uring_setup$auto(0x6, 0x0) poll$auto(&(0x7f0000000040)={0x3, 0x1, 0x5}, 0x5, 0x80000000) clock_adjtime$auto(0x0, &(0x7f0000000000)={0x7, 0x8, 0x4, 0x8, 0x7fffffff, 0xffffffc0, 0x6, 0x5, 0x3, {0xfffffffa, 0x8}, 0xb9, 0x8, 0x1000, 0x2, 0xb, 0x5, 0x2000006, 0x101, 0x7fff, 0x4}) setresuid$auto(0x7, 0x8, 0x8001) 30.151454533s ago: executing program 44 (id=2517): setresgid$auto(0x81, 0x800000a0, 0x8) socket(0x2, 0x5, 0x1) unshare$auto(0x40000080) exit$auto(0x1) clone$auto(0x840008002, 0x7, 0xffffffffffffffff, 0xfffffffffffffffc, 0x400000000006) mknod$auto(&(0x7f0000000180)='u[,&*}\x00\a\x00\x00\x00?\xa4\x1fN\xa1~5Z\xc7\r\f}M4\xa8m\xe6\x19[11\xab\xff-E\xac9(\xb4O\xa0t4h\x9f-gn\x1f\x0f\x18\xc5\x82-s\x83\xe6\xaeR\x81\r_\x0e\x19\x12\x85\bvf(e\xday)\t\x15\xf6\xc8\xee\x04\x16\xc1\x9a!\x87I7\x8cD&zg\xb0a\xab|E\xde\x14\xee[\xc8\xc0\xa8Nh\x0f\xa3\xdbT\xb3\xb8\xd2F\xa0\xc4]\xaf\xc43&\xe4\x01\x05\xd2\x15\xf8\xf1!\x9d\x92\xbbHL9aD\xb4\x80\xed\xba>\"\xb6\x7f\xa3f\x1d\a\xa1\x87\x84uA\xd8\xe7\xd2\xf3[r\xc5S&}D[\x97\xf1\xd9\xf8Y\x03\x84\xb4\xd7\x16\x19\xe5\x17\x10\xd8fcG:\xfbY8\x17w\x98?\x03@\xe5\x02\x05\x93h\xb9\xf7\xef\x84\x8aGlN\a\x1e', 0x1, 0x4) acct$auto(&(0x7f0000000380)='u[,&*}\x00\a\x00\x00\x00?\xa4\x1fN\xa1~5Z\xc7\r\f}M4\xa8m\xe6\x19[11\xab\xff-E\xac9(\xb4O\xa0t4h\x9f-gn\x1f\x0f\x18\xc5\x82-s\x83\xe6\xaeR\x81\r_\x0e\x19\x12\x85\bvf(e\xday)\t\x15\xf6\xc8\xee\x04\x16\xc1\x9a!\x87I7\x8cD&zg\xb0a\xab|E\xde\x14\xee[\xc8\xc0\xa8Nh\x0f\xa3\xdbT\xb3\xb8\xd2F\xa0\xc4]\xaf\xc43&\xe4\x01\x05\xd2\x15\xf8\xf1!\x9d\x92\xbbHL9aD\xb4\x80\xed\xba>\"\xb6\x7f\xa3f\x1d\a\xa1\x87\x84uA\xd8\xe7\xd2\xf3[r\xc5S&}D[\x97\xf1\xd9\xf8Y\x03\x84\xb4\xd7\x16\x19\xe5\x17\x10\xd8fcG:\xfbY8\x17w\x98?\x03@\xe5\x02\x05\x93h\xb9\xf7\xef\x84\x8aGlN\a\x1e') acct$auto(0x0) socket(0x6, 0x5, 0x8) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) socket$nl_generic(0x10, 0x3, 0x10) clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) process_mrelease$auto(0x4, 0x0) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) mmap$auto(0x0, 0x400005, 0xe2, 0x9b72, 0x2, 0x8000) socketpair$auto(0x1, 0x0, 0x8000000000000000, 0x0) read$auto(0x4, 0x0, 0xfdef) write$auto(0x3, 0x0, 0x10001) splice$auto(0x4, 0x0, 0x2, 0x0, 0x7141, 0xf) open(&(0x7f0000000000)='./file0\x00', 0xa61c2, 0x10) socket(0x15, 0x2, 0x0) socket(0x2, 0x3, 0x1) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) prctl$auto(0x82000006, 0x1, 0x2000000001, 0x1, 0x9) socket(0x1, 0x1, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) io_uring_setup$auto(0x6, 0x0) poll$auto(&(0x7f0000000040)={0x3, 0x1, 0x5}, 0x5, 0x80000000) clock_adjtime$auto(0x0, &(0x7f0000000000)={0x7, 0x8, 0x4, 0x8, 0x7fffffff, 0xffffffc0, 0x6, 0x5, 0x3, {0xfffffffa, 0x8}, 0xb9, 0x8, 0x1000, 0x2, 0xb, 0x5, 0x2000006, 0x101, 0x7fff, 0x4}) setresuid$auto(0x7, 0x8, 0x8001) 21.470676485s ago: executing program 5 (id=2556): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) mprotect$auto(0x1ffff000, 0x800007, 0x6) eventfd2$auto(0x7, 0xf) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x7fe000000000, 0x2, 0x9b72, 0x5, 0x0) (async) mmap$auto(0x0, 0x7fe000000000, 0x2, 0x9b72, 0x5, 0x0) 20.724116508s ago: executing program 5 (id=2557): r0 = socket(0x29, 0x2, 0xff) setsockopt$auto(r0, 0x0, 0x61, &(0x7f0000000000)='#)!]\'\'&\'', 0x10001) connect$auto(r0, &(0x7f0000000040)={0x6, @sockaddr_1_1={"248e75d49a0b56fe83ad0200a286809f5c257a86df36567349d184e0bf2baef7fef9499ae28c9bcb87ce153daff6ac92ce3186d3bbb75ea03bb0bcccf8e5cf219cfc270cb2a51d90bc240e6dbd03994a954ba8e09c3d6c2c14972a2b79bf292be5df44c52beb9eb8547d0c071a50cc9c7ae6643de1ec3c7c60ebbe6765e627190c13290febadcbbdc71f1afda75c07c162438e"}}, 0x8) utimes$auto(&(0x7f0000000100)='}\x00', &(0x7f0000000140)={0x5, 0xfff}) shutdown$auto(r0, 0x4) r1 = socket(0x5, 0x0, 0x9) mkdir$auto(&(0x7f0000000180)='#)!]\'\'&\'', 0x6f) ppoll$auto(&(0x7f00000001c0)={r1, 0x9, 0xf}, 0x0, &(0x7f0000000200)={0xe, 0x10}, &(0x7f0000000240)={0x8}, 0x0) mq_open$auto(&(0x7f0000000280)='@&\x00', 0x3, 0x415, &(0x7f00000002c0)={0x8, 0x3, 0x7}) flistxattr$auto(r1, &(0x7f0000000300)='\x00', 0x7f) mkdir$auto(&(0x7f0000000340)='}\x00', 0x4) r3 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000380), r2) unshare$auto(0x8) syz_genetlink_get_family_id$auto_batadv(&(0x7f00000003c0), r1) epoll_create$auto(0x3) utimes$auto(&(0x7f0000000400)='\x00', &(0x7f0000000440)={0x5, 0x8}) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NETDEV_CMD_QUEUE_GET(r4, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x24, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {}, [@NETDEV_A_QUEUE_ID={0x8, 0x1, 0x6}, @NETDEV_A_QUEUE_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x40) utimes$auto(&(0x7f0000000580)='\x00', &(0x7f00000005c0)={0x8}) r5 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000640), r2) sendmsg$auto_NL802154_CMD_ASSOCIATE(r2, &(0x7f00000007c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000780)={&(0x7f0000000680)={0xf8, r5, 0x400, 0x70bd28, 0x25dfdbfc, {}, [@NL802154_ATTR_SEC_DEVKEY={0xe1, 0x2f, "844b3aa37ee93cfb68182eb8123c3f1ff169df8a5937581a5a5dd6fa3f31f0460f450f3abfe2f2e4b44fc9e7149ff518cf4c658dc1954b2121574f92a612d87d51ae2ba687250d0b926cc012d68276b84c7692ab50d586b2af3a93c2b971114f3eec119b746a930f9562431a8ba3275b668dc16ca976ee521d137e2de8cf107ecf37ea1c174eb81902d2a010037e2a1b030eb3a5dba48dbbc7577d4331de28409bed6320a92fa05c8287acadd9c53c6ae5cffc577d33b8e9f3b9bbc753d9a7ce10d0a876cddbefb5b1e864c576e9273b6d5754eda2abb975ee7171fb48"}]}, 0xf8}, 0x1, 0x0, 0x0, 0x14000010}, 0x10) sendmsg$auto_TIPC_NL_BEARER_DISABLE(r2, &(0x7f0000000a00)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000840)={0x158, 0x0, 0x800, 0x70bd29, 0x25dfdbfc, {}, [@TIPC_NLA_PUBL={0x1b, 0x3, "586cb8afd1bea6316da30b3b7d3400616c70ee91173503"}, @TIPC_NLA_PUBL={0xa6, 0x3, "5c272933fdd40dc5bc93b467e45f7d25311e42f109b5261f07ef2090b8d547dbd80c34ef0752d8c028497d74e4ddecdfa915fff3ea5df0bce7b59a59622d96463e8da775e12ebc78993f0644eb06d2cc8ec78ec46245b0673b3f0750896ed70c4b686cfcd64cc0930d7dcac60c497a46e0624a06b6c561191c73f3afbaa5e9f5fb0528744c700c3c71a98ddd880efc2b911b7060d1a0125f155914be0b197a37b492"}, @TIPC_NLA_LINK={0x11, 0x4, "6282b42761b1bd5287570ec150"}, @TIPC_NLA_NET={0x6b, 0x7, "8d4e69ca8e485a24f02f817a652988d84abe326d86dfc9ee068a979361fc982b8bcad3d5f4078c8d265d946e9250698b40fa06c9bfd3c5f62cd1b104896689a786ad4812fa0b0663a6725723af296693398e99f7d4b3ea3a7e4f7685ccc0c84bb727c2e4c860d4"}]}, 0x158}, 0x1, 0x0, 0x0, 0x854}, 0x4040000) sendmsg$auto_L2TP_CMD_TUNNEL_DELETE(r2, &(0x7f0000000b40)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a80)={0x48, r3, 0x8, 0x70bd2b, 0x25dfdbfd, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x5}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0xffff}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x80000000}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e22}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x7}]}, 0x48}, 0x1, 0x0, 0x0, 0x40001}, 0xc080) r6 = syz_open_procfs$namespace(0x0, &(0x7f0000000b80)='ns/time_for_children\x00') fcntl$getown(r6, 0x9) sendmsg$auto_NL802154_CMD_GET_SEC_KEY(r4, &(0x7f0000000c80)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x24, r5, 0x100, 0x70bd25, 0x25dfdbfc, {}, [@NL802154_ATTR_SCAN_DONE_REASON={0x5, 0x25, 0x3}, @NL802154_ATTR_CHANNEL={0x5, 0x8, 0x7}]}, 0x24}, 0x1, 0x0, 0x0, 0x81}, 0x8004) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000d00), r0) sendmsg$auto_ETHTOOL_MSG_CHANNELS_SET(r7, &(0x7f0000000dc0)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x2c, r8, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0x8}, @ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0x1}, @ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0x3620000}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004000}, 0x4000000) sendmsg$auto_MAC802154_HWSIM_CMD_DEL_RADIO(r0, &(0x7f0000001140)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001100)={&(0x7f0000000e80)={0x278, 0x0, 0x300, 0x70bd26, 0x25dfdbfe, {}, [@MAC802154_HWSIM_ATTR_RADIO_EDGES={0xe1, 0x3, "aece64c0eeb8d4599fb7686a089f5ed5da801b2f2e3df5c005bed1dff8e0e562b973135f80e1105f69db18485fa04b7927916475e90bef7624cca59d5b3f0c0c6bf558ae70dc80772a4e55bfd9ff77dcb39686c1eba71fd898dfda3efbc7d3c1405f4a9a9d62040b46ff8b83298059f5834f3e75cc9ab42795f6c29df3260fadd7a7d4430099d14444534fc2979b88d4f334bb8d5d62ef5e3c65545d8637dca00ea5aea726c0d7f6c03e2de14291e147cd51a84607f62a155139558f24cb07134430dfddc1510716549b9f931e33e05345db00e6bc42caa14b584304dd"}, @MAC802154_HWSIM_ATTR_RADIO_ID={0x8, 0x1, 0x9}, @MAC802154_HWSIM_ATTR_RADIO_EDGES={0xdc, 0x3, "cea811174c2391441c643041a9e3b6487c5f872209f9738c2bdd2b64b34d5378c356d410856f0bbc6b9e23ce828c5ed0530ded9f84316d69424cb7284f2e66152f4d676a8b164dc3b5ac2b98b860a73dc5fee68851d5535b1dc382968f4f7d75bd118e60fce81de7e4f1ae0bd60ef444950755c439ebc94a8c0219f01407d1bfadc0dbcb1f73ee23d924a5bc1ed35b60f07721405d0b8f6ebb1ce89a8f9db2d79d8077babb4754a92be3aed5190f6d99ec3cdb23938fe14a6fa5a86da8dbe6f289e0dfecfbf0a27951d86c11aab0926224d5ae6dabd8f90b"}, @MAC802154_HWSIM_ATTR_RADIO_EDGES={0x69, 0x3, "970acd756b0f7659ee39a4fb1b5cdc16a0ad6e5c2adb5de71054997445e104c8a4c13b92bdf3c30909f04d43506aa6446a2d3419cd56bb913fab095895ac9819a4c9d3fea201189a5b38fb872730c391de2197db7d33d269ed6f7d3e0a1f72f4236299a5eb"}, @MAC802154_HWSIM_ATTR_RADIO_EDGE={0x2f, 0x2, "76b5a97fa573132d20ca54c0f7d7298d9eda389a6617ab018bd1e06406ea240ecb0e214ba473462b13f76c"}]}, 0x278}, 0x1, 0x0, 0x0, 0x40080}, 0x20004) 20.26713478s ago: executing program 5 (id=2558): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x48000}, 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x19) io_uring_setup$auto(0x6, 0x0) mmap$auto(0xf000, 0xd, 0x1000000003, 0x38, 0x5, 0x8000) io_uring_register$auto(0x2, 0x0, &(0x7f0000000040)=[0x800000, 0x8], 0x3) 18.449171362s ago: executing program 5 (id=2560): socket(0x2, 0x2, 0x106) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) setreuid$auto(0x3, 0x7) bpf$auto(0x0, &(0x7f0000000000)=@link_update={0xa, @new_map_fd=0x2, 0x7, @old_prog_fd=0x13b}, 0xa3) madvise$auto(0x0, 0xffffffffffff0001, 0x15) mmap$auto(0x0, 0x8, 0x1000000004, 0x9b72, 0x2, 0x8000) get_mempolicy$auto(0x0, 0x0, 0x81, 0x8, 0x2) socket(0x2, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2c, 0x3, 0x0) getsockopt$auto(0x6, 0x11b, 0x1d05, 0x0, 0xfffffffffffffffd) settimeofday$auto(0x0, 0x0) 16.747627031s ago: executing program 5 (id=2564): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) fsconfig$auto(0x0, 0x6, 0xfffffffffffffffe, 0xfffffffffffffffe, 0x8000000000000001) sendmsg$auto_WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x4008810}, 0x20008000) socket(0x2, 0x2, 0x88) bind$auto(0x3, &(0x7f0000000080)={0x2, @sockaddr_1_1}, 0x68) connect$auto(0x3, &(0x7f00000000c0)={0x2, @sockaddr_1_1}, 0x55) futex_waitv$auto(&(0x7f0000000040)={0x6, 0x874f, 0x101}, 0xfeac, 0x0, &(0x7f0000000100)={0xf12f, 0x7}, 0x6) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_TIPCv2(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_ovs_meter(&(0x7f00000001c0), r0) sendmsg$auto_OVS_METER_CMD_SET(r2, &(0x7f0000000440)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000003c0)={&(0x7f0000000200)={0x1ac, r3, 0x400, 0x70bd2b, 0x25dfdbfe, {}, [@OVS_METER_ATTR_USED={0xc}, @OVS_METER_ATTR_KBPS={0x4}, @OVS_METER_ATTR_BANDS={0xbc, 0x4, "da61d60dfb8909cac54bc2b35546eaba2295c4d609a6be35f9b5cc9d38b72628dbf59f2a0929bd1bb07f571f032b91cf51c55bd51d68e29994ac74d3f3da206b507a44564390dd04d22d9d990f58081a42032c06593fc44c30856361c148f5f03f92bb1b552abf6c8eebf38fbd89b7195c3c96ebc5d6beb60e91bb5fc2676eec0ba2a27da0d9c194605ff4e808c37dd64255ff3ce78c5326950257e1222d8a907b1db66949c47d66c5878131f9c9040ea32ee3d3a5c739cf"}, @OVS_METER_ATTR_BANDS={0xc5, 0x4, "10ac250a9c677d5b041054834dfcf5937f2806a7de559dc4026e046a111d7c8dfe6bd3089859cd5859c0b79f4df8a1df58019223d277a3225a56183593ecf3d9959b31f84e25bc0cc05a69e58318d111950b5a1721a5f08d20fb320bdb02bcdfd3bb2b210162436f9452aa15f737efd725134be6398f312fdafb1c3411fcd14f6e6af0c0e2d56245a3fa3db9e280fd6e46d0bcff0e3677da44ded0038081aa92db9b55049717e0f03bfc248c74855a0941be466e392b33cfa3751620f3b5fe077c"}, @OVS_METER_ATTR_KBPS={0x4}]}, 0x1ac}, 0x1, 0x0, 0x0, 0x10}, 0x20000) (async) sendmsg$auto_OVS_METER_CMD_SET(r2, &(0x7f0000000440)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000003c0)={&(0x7f0000000200)={0x1ac, r3, 0x400, 0x70bd2b, 0x25dfdbfe, {}, [@OVS_METER_ATTR_USED={0xc}, @OVS_METER_ATTR_KBPS={0x4}, @OVS_METER_ATTR_BANDS={0xbc, 0x4, "da61d60dfb8909cac54bc2b35546eaba2295c4d609a6be35f9b5cc9d38b72628dbf59f2a0929bd1bb07f571f032b91cf51c55bd51d68e29994ac74d3f3da206b507a44564390dd04d22d9d990f58081a42032c06593fc44c30856361c148f5f03f92bb1b552abf6c8eebf38fbd89b7195c3c96ebc5d6beb60e91bb5fc2676eec0ba2a27da0d9c194605ff4e808c37dd64255ff3ce78c5326950257e1222d8a907b1db66949c47d66c5878131f9c9040ea32ee3d3a5c739cf"}, @OVS_METER_ATTR_BANDS={0xc5, 0x4, "10ac250a9c677d5b041054834dfcf5937f2806a7de559dc4026e046a111d7c8dfe6bd3089859cd5859c0b79f4df8a1df58019223d277a3225a56183593ecf3d9959b31f84e25bc0cc05a69e58318d111950b5a1721a5f08d20fb320bdb02bcdfd3bb2b210162436f9452aa15f737efd725134be6398f312fdafb1c3411fcd14f6e6af0c0e2d56245a3fa3db9e280fd6e46d0bcff0e3677da44ded0038081aa92db9b55049717e0f03bfc248c74855a0941be466e392b33cfa3751620f3b5fe077c"}, @OVS_METER_ATTR_KBPS={0x4}]}, 0x1ac}, 0x1, 0x0, 0x0, 0x10}, 0x20000) sendmsg$auto_TIPC_NL_LINK_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={0x18, r1, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@TIPC_NLA_LINK={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x40001}, 0x20000000) (async) sendmsg$auto_TIPC_NL_LINK_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={0x18, r1, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@TIPC_NLA_LINK={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x40001}, 0x20000000) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) (async) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sysfs$auto(0x2, 0x3, 0x0) setsockopt$auto(0x3, 0x1, 0x3f, 0x0, 0x9) (async) setsockopt$auto(0x3, 0x1, 0x3f, 0x0, 0x9) madvise$auto(0x0, 0x7ffffffffffffffc, 0xc) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0xa, 0x801, 0x84) semctl$auto(0xcc613f1, 0x2, 0x13, 0x0) (async) semctl$auto(0xcc613f1, 0x2, 0x13, 0x0) setsockopt$auto(0x3, 0x10000000084, 0xd, 0x0, 0x8) mremap$auto(0x4000, 0xfee0, 0x3fd6, 0x3, 0xfffff000) 12.552073544s ago: executing program 5 (id=2571): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) close_range$auto(0x2, 0x8000, 0x0) (async) socket(0x1, 0x5, 0x0) (async) io_uring_setup$auto(0x6, 0x0) (async) mmap$auto(0x0, 0xe, 0x43, 0x12, 0x3, 0x8000) (async) setuid$auto(0xe) (async) sendmmsg$auto(0x3, 0x0, 0x7, 0x0) (async) mincore$auto(0x0, 0x1, 0x0) waitid$auto(0x7f, 0x9, &(0x7f0000000000)={@siginfo_0_0={0x3, 0x8, 0xfff, @_timer={0x7, 0x0, @sival_int=0x6, 0xf}}}, 0x2, 0x0) (async) bpf$auto(0x12, &(0x7f0000000000)=@info={0x2800, 0x1ff, 0x2}, 0xcf) r1 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000010c0), 0xffffffffffffffff) sendmsg$auto_CTRL_CMD_GETPOLICY(r0, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001100)={0x28, r1, 0x301, 0x70bd29, 0x25dfdbff, {}, [@CTRL_ATTR_OP={0x8, 0xa, 0x7}, @CTRL_ATTR_FAMILY_NAME={0xb, 0x2, 'TIPCv2\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0xe0db2389416cc6ce}, 0xc040810) 6.025406403s ago: executing program 6 (id=2578): r0 = socket(0x10, 0x2, 0x0) (async, rerun: 32) r1 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000001080), 0xffffffffffffffff) (rerun: 32) sendmsg$auto_L2TP_CMD_NOOP(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x14, r1, 0x1, 0x70bd27, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x841}, 0x20000040) (async, rerun: 32) socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) io_uring_setup$auto(0x3ff, 0x0) (async) socket(0xa, 0x5, 0x0) (async) getsockopt$auto(0x6, 0x40000000084, 0x85, 0xfffffffffffffffe, 0x0) 5.540285488s ago: executing program 6 (id=2579): bpf$auto(0x23, &(0x7f0000000100)=@task_fd_query={0x2, 0x2, 0x4, 0x0, 0x84, 0x7, 0xffffffffffffffff, 0x5, 0x10}, 0x10) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0xffffffffffff0001, 0x15) madvise$auto(0x0, 0xffffffffffff0005, 0x19) fcntl$auto(0x2, 0x403, 0x80000001) 3.277385002s ago: executing program 6 (id=2580): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_THERMAL_GENL_CMD_CDEV_GET(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="040027bd70060000002506f986009541df33d610ce76b5160c6b593e17b975f3147265e17988931abdc6bfa2ce0fc99f839fa1e12eab52223ccd0377595565d176683b6429eb6c00c3d8a749b2ffb0797a34cebee8d19b05a0e0ed51b58eb8fee4f561029276ddb19a19c695244715adac25d39a1661eda1521af381a7078d3f2ec4b4159ae2d8c80de399f3ac0fba6a831ebb343b787c7eccd824b148650f1c018f340d50ba9d6697ff5247c1591893b0d07f5d7d2e26"], 0x14}, 0x1, 0x0, 0x0, 0x840}, 0x4004080) syz_genetlink_get_family_id$auto_MAC80211_HWSIM(&(0x7f0000000780), r0) syz_genetlink_get_family_id$auto_IPVS(&(0x7f0000000c00), r0) ioperm$auto(0x7, 0x6, 0x2) mlockall$auto(0x7) select$auto(0x7, 0x0, &(0x7f0000000080)={[0x209c, 0xe9e, 0x4, 0x15, 0x1000, 0x47, 0xc, 0xf, 0x0, 0x0, 0xe, 0xd59, 0x101, 0xff, 0x2, 0x3]}, 0x0, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) close_range$auto(0x2, 0x8000, 0x0) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x1000) tee$auto(0x0, 0x5, 0xfffffffffffffff1, 0x4) setsockopt$auto(0x6, 0x6, 0xd, &(0x7f0000000040)='ns/cg\x0fB\x05\x81>', 0xc) mprotect$auto(0x1ffff000, 0x8000000000000001, 0x4) close_range$auto(0x0, 0xfffffffffffff000, 0x2) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00') socket(0xa, 0x3, 0xff) select$auto(0x3, 0x0, &(0x7f0000000100)={[0xd, 0x200, 0x0, 0xc, 0x8, 0x3, 0x6, 0x2, 0x9, 0x5e582970, 0x4000000000000000, 0x2, 0x4, 0x5, 0x8, 0x6]}, 0x0, 0x0) connect$auto(0x3, &(0x7f0000000140)={0xa, @sa_data_min="c4aeed448dc7fe8000"}, 0x55) write$auto(0x3, 0x0, 0x5c8) fchdir$auto(0xf4400000000) lstat$auto(&(0x7f0000000040)='\x00', 0x0) ioperm$auto(0x1, 0x6, 0x14c) shmctl$auto(0x0, 0xf, &(0x7f0000000080)={{0x7, 0xee00, 0x0, 0x4, 0x2, 0x800, 0x6}, 0x2, 0xd, 0x0, 0x2, 0x4, 0x101, 0x4, 0x0, 0x0, 0x0}) dup$auto(0x1) mmap$auto(0x799dcef8, 0x8001, 0xdf, 0x9b72, 0x1, 0x8000) socket(0x2, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) open(&(0x7f0000000000)='./file0\x00', 0xa61c2, 0x84) 2.856155251s ago: executing program 6 (id=2581): r0 = socket(0x1e, 0x1, 0x0) sendmsg$auto_ETHTOOL_MSG_MM_GET(r0, &(0x7f0000000100)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x40400c0}, 0x14002881) close_range$auto(0x0, 0xfffffffffffff001, 0x2) (async) close_range$auto(0x0, 0xfffffffffffff001, 0x2) socket(0x2, 0x1, 0x0) socket(0x1e, 0x1, 0x0) (async) socket(0x1e, 0x1, 0x0) socket(0x10, 0x2, 0x0) (async) socket(0x10, 0x2, 0x0) memfd_create$auto(&(0x7f0000000000)='\xc4--:\xdd:,./-${\x00', 0x4) (async) memfd_create$auto(&(0x7f0000000000)='\xc4--:\xdd:,./-${\x00', 0x4) mmap$auto(0x0, 0x8, 0x1000000016, 0x13, 0x3, 0x400180000000) sendmsg$auto_NL802154_CMD_SET_CCA_MODE(0xffffffffffffffff, &(0x7f0000001f40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) readv$auto(0x3, &(0x7f00000000c0)={0x0, 0x8}, 0x400) mprotect$auto(0x0, 0x8000000000000001, 0x6) statmount$auto(0x0, &(0x7f0000000040)={0x1, 0x0, 0x36, 0x828, 0x9, 0x8000000000000000, 0x9f, 0x7, 0x9, 0x8, 0x2, 0x9, 0x3, 0x8, 0x0, 0x200000000000f, 0x100, 0x1, 0x10001, 0x2cf8, [0x9, 0x7f, 0x40, 0x1, 0x7fffffffffffffff, 0x2, 0x600, 0x3, 0x80000000, 0x8, 0x395e, 0xfffffffffffffff9, 0x10, 0x3, 0x35c4, 0x0, 0x6, 0x0, 0xea8, 0xc, 0xd9, 0x48, 0x5, 0x1, 0x200000000803, 0x7fffffffffffffff, 0x15, 0x11, 0xb, 0x8000000000000000, 0x2ab, 0x8, 0x800, 0x81, 0x1, 0x4003, 0xffffffffffff0000, 0x6b, 0xfffffffffffffff9, 0x4, 0x2b7, 0x4, 0xf, 0xffffffffffffff26, 0x8, 0x7, 0x6, 0x7a, 0xdc]}, 0xe3c, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mremap$auto(0x0, 0x4, 0x4, 0x7, 0x100000000) clone$auto(0x7, 0x7fffffffffffffff, 0xffffffffffffffff, 0x0, 0x1) (async) clone$auto(0x7, 0x7fffffffffffffff, 0xffffffffffffffff, 0x0, 0x1) close_range$auto(0x0, 0xfffffffffffff000, 0x2) (async) close_range$auto(0x0, 0xfffffffffffff000, 0x2) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_RSS_GET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2], 0x14}, 0x1, 0x0, 0x0, 0x6004832}, 0x4010) mprotect$auto(0x1, 0xffff, 0xffffffffffff8000) 1.098552853s ago: executing program 8 (id=2498): mmap$auto(0x0, 0x408008, 0xe3, 0x9b72, 0x2, 0x8000) setrlimit$auto(0x1000000007, 0x0) socket(0x2a, 0x2, 0x0) 788.31569ms ago: executing program 6 (id=2582): copy_file_range$auto(0x2, 0x0, 0x2, 0x0, 0x8001, 0x9) (async) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) (async) mmap$auto(0x1, 0xff, 0x1000, 0x19, 0x2, 0x2000000000) (async) prctl$auto(0x1000000003b, 0x1, 0x8, 0xc0d, 0x7) (async) open(&(0x7f0000001e80)='./file0\x00', 0x101043, 0x189) (async) syz_open_procfs$namespace(0x0, &(0x7f0000000a80)='ns/net\x00') (async) syz_open_procfs$namespace(0x0, &(0x7f0000000440)='ns/net\x00') (async) open(&(0x7f0000000800)='./file0\x00', 0x2040, 0x0) open(&(0x7f0000000080)='./file0\x00', 0x101002, 0x1c) (async) write$auto(0x7, 0x0, 0x0) (async) ioperm$auto(0x7, 0x6, 0x80) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) remap_file_pages$auto(0x6a27, 0x40007, 0x4000000000000000, 0x3, 0x4) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) add_key$auto(&(0x7f0000000000)='\\[,-.]\x00', &(0x7f0000000040)='\x00', &(0x7f0000000080)=[0x9, 0x9], 0x6, 0x6) (async) fallocate$auto(0x3, 0x0, 0xe, 0x8ec5) mlockall$auto(0x7) (async) rename$auto(0x0, 0x0) ioperm$auto(0x2, 0x6, 0xb6) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) (async) shmat$auto(0x0, 0x0, 0x0) (async) madvise$auto(0x0, 0xffffffffffff0001, 0x15) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) (async) memfd_secret$auto(0x0) 761.678816ms ago: executing program 8 (id=2583): syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/mnt\x00') mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) sysfs$auto(0x2, 0x100000000000026, 0x0) fsopen$auto(0x0, 0x1) close_range$auto(0x2, 0x8, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) r2 = open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x100) r3 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x1d, 0x2, 0x2) fanotify_init$auto(0x2, 0x2) sendfile$auto(0x6, 0x3, 0x0, 0xc01) r4 = syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000180), r2) sendmsg$auto_BATADV_CMD_GET_BLA_BACKBONE(r3, &(0x7f0000000300)={&(0x7f0000000140), 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x40, r4, 0x300, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_BANDWIDTH_DOWN={0x8, 0x1c, 0xe}, @BATADV_ATTR_BLA_BACKBONE={0xa, 0x21, "c0229305b76a"}, @BATADV_ATTR_TPMETER_COOKIE={0x8, 0xd, 0x1ff}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000090}, 0x40000) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) r5 = fcntl$getown(r0, 0x9) syz_open_procfs$namespace(r5, &(0x7f0000000100)='ns/cgroup\x00') bpf$auto(0x0, &(0x7f0000000040)=@bpf_attr_5={@target_ifindex=r1, 0x7f, 0x99, 0x8, 0x1, @relative_id=0x8, 0x5}, 0x92) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) bpf$auto(0x2, &(0x7f00000001c0)=@raw_tracepoint={0x5, 0xffff, 0x0, 0x3}, 0xc) io_uring_setup$auto(0x2, 0x0) bpf$auto(0x2, &(0x7f00000001c0)=@raw_tracepoint={0x5, 0x4, 0x0, 0x3}, 0xe) 507.903122ms ago: executing program 8 (id=2584): bpf$auto(0x2, &(0x7f00000001c0)=@link_update={0xffffffffffffffff, @new_map_fd, 0x13d6}, 0xc) mprotect$auto(0x1ffff000, 0x8000000000000001, 0x4) io_uring_setup$auto(0xd, &(0x7f00000001c0)={0xffff, 0x5, 0x200000, 0x0, 0x0, 0xfffffffb, 0xffffffffffffffff, [0x9, 0x4, 0x3], {0x0, 0x9, 0x12a000, 0x9, 0x0, 0x1, 0x8, 0x4, 0x8000000000000000}, {0x100, 0x5, 0xb, 0x8, 0x5, 0x401, 0x401, 0x100, 0x6}}) mmap$auto(0x0, 0x20004, 0x4000000000e1, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0x18, 0xfffffffffffffffa, 0x8000) socket(0x28, 0x5, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sysfs$auto(0x2, 0x1e, 0x0) fsopen$auto(0x0, 0x1) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8000, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) r0 = socket(0x23, 0x80805, 0x0) inotify_init1$auto(0x3000000000000) fcntl$auto(0x4, 0x4, 0xa553) close_range$auto(0x2, 0x8000, 0x0) setsockopt$auto(0x400000000000003, 0x28, 0x6, 0x0, 0x56d) close_range$auto(0x0, 0xffffeffe, 0x2) pipe$auto(0x0) pipe$auto(0x0) syz_genetlink_get_family_id$auto_NLBL_UNLBL(&(0x7f0000000040), r0) tee$auto(0x2000000000000, 0x3, 0x3ff, 0x9) syz_genetlink_get_family_id$auto_netdev(&(0x7f0000000000), r0) socket(0x2, 0x5, 0x0) close_range$auto(0x7, 0xfffffffffffffff8, 0x2) getrandom$auto(0x0, 0x6000000, 0x3) ioctl$auto(0xc8, 0x400454e2, 0x5c8d) socket(0x21, 0x1, 0x4) setsockopt$auto(0x3, 0x10000000084, 0x14, 0x0, 0x8) 0s ago: executing program 6 (id=2585): mmap$auto(0x1, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) (async) utimensat$auto(0x8c00, &(0x7f00000014c0)='/\x00', 0x0, 0x0) kernel console output (not intermixed with test programs): 546.223497][T12531] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 546.232812][T12531] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 546.240823][T12531] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 546.248860][T12531] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 546.256540][T12531] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 546.276930][T12531] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 546.493998][T12898] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 547.146493][T12898] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 547.490842][T15702] chnl_net:caif_netlink_parms(): no params data found [ 547.878394][T15702] bridge0: port 1(bridge_slave_0) entered blocking state [ 547.885950][T15702] bridge0: port 1(bridge_slave_0) entered disabled state [ 547.947065][T15702] bridge_slave_0: entered allmulticast mode [ 547.971637][T15702] bridge_slave_0: entered promiscuous mode [ 548.017766][T15702] bridge0: port 2(bridge_slave_1) entered blocking state [ 548.024918][T15702] bridge0: port 2(bridge_slave_1) entered disabled state [ 548.057011][T15702] bridge_slave_1: entered allmulticast mode [ 548.064242][T15702] bridge_slave_1: entered promiscuous mode [ 548.228467][T12531] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 548.247690][T12531] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 548.260443][T12531] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 548.268525][T12531] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 548.279624][T12531] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 548.288374][T12531] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 548.367139][ T5862] Bluetooth: hci2: command tx timeout [ 548.478235][T12898] bridge_slave_1: left allmulticast mode [ 548.483983][T12898] bridge_slave_1: left promiscuous mode [ 548.506436][T12898] bridge0: port 2(bridge_slave_1) entered disabled state [ 548.532028][T12898] bridge_slave_0: left allmulticast mode [ 548.538177][T12898] bridge_slave_0: left promiscuous mode [ 548.543923][T12898] bridge0: port 1(bridge_slave_0) entered disabled state [ 549.451696][T12898] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 549.470720][T12898] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 549.484239][T12898] bond0 (unregistering): Released all slaves [ 549.524532][T15702] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 549.651291][T15702] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 549.889362][T15702] team0: Port device team_slave_0 added [ 550.023097][T15702] team0: Port device team_slave_1 added [ 550.147528][T12898] hsr_slave_0: left promiscuous mode [ 550.173635][T12898] hsr_slave_1: left promiscuous mode [ 550.182022][T12898] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 550.195337][T15768] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 550.222881][T12898] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 550.234068][T15768] CIFS mount error: No usable UNC path provided in device string! [ 550.234068][T15768] [ 550.245179][T12898] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 550.252784][T12898] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 550.298084][T15768] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 550.318649][T12898] veth1_macvtap: left promiscuous mode [ 550.324331][T12898] veth1_vlan: left promiscuous mode [ 550.340734][T15774] CIFS mount error: No usable UNC path provided in device string! [ 550.340734][T15774] [ 550.357520][T12898] veth0_vlan: left promiscuous mode [ 550.367333][T12531] Bluetooth: hci0: command tx timeout [ 550.376044][T15774] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 550.447052][T12531] Bluetooth: hci2: command tx timeout [ 550.532069][ T5862] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 550.543053][ T5862] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 550.552057][ T5862] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 550.572566][ T5862] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 550.582347][ T5862] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 550.595679][ T5862] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 551.284300][T12898] team0 (unregistering): Port device team_slave_1 removed [ 551.328791][T12898] team0 (unregistering): Port device team_slave_0 removed [ 551.741735][T15702] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 551.756041][T15702] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 551.785987][T15702] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 551.803733][T15702] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 551.811631][T15702] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 551.845920][T15702] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 552.015698][T15803] nbd: illegal input index -33554433 [ 552.026355][T15702] hsr_slave_0: entered promiscuous mode [ 552.044806][T15702] hsr_slave_1: entered promiscuous mode [ 552.060397][T15702] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 552.104293][T15702] Cannot create hsr debugfs directory [ 552.448414][T12531] Bluetooth: hci0: command tx timeout [ 552.526935][T12531] Bluetooth: hci2: command tx timeout [ 552.552407][T15738] chnl_net:caif_netlink_parms(): no params data found [ 552.614197][T15782] chnl_net:caif_netlink_parms(): no params data found [ 552.687281][T12531] Bluetooth: hci1: command tx timeout [ 552.921449][T15782] bridge0: port 1(bridge_slave_0) entered blocking state [ 552.942212][T15782] bridge0: port 1(bridge_slave_0) entered disabled state [ 552.957900][T15782] bridge_slave_0: entered allmulticast mode [ 552.968663][T15782] bridge_slave_0: entered promiscuous mode [ 552.978370][T15738] bridge0: port 1(bridge_slave_0) entered blocking state [ 552.992686][T15738] bridge0: port 1(bridge_slave_0) entered disabled state [ 553.000281][T15738] bridge_slave_0: entered allmulticast mode [ 553.007856][T15738] bridge_slave_0: entered promiscuous mode [ 553.016294][T15738] bridge0: port 2(bridge_slave_1) entered blocking state [ 553.024100][T15738] bridge0: port 2(bridge_slave_1) entered disabled state [ 553.032451][T15738] bridge_slave_1: entered allmulticast mode [ 553.039757][T15738] bridge_slave_1: entered promiscuous mode [ 553.085842][T12901] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 553.138482][T15782] bridge0: port 2(bridge_slave_1) entered blocking state [ 553.145814][T15782] bridge0: port 2(bridge_slave_1) entered disabled state [ 553.153395][T15782] bridge_slave_1: entered allmulticast mode [ 553.161937][T15782] bridge_slave_1: entered promiscuous mode [ 553.230222][T12901] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 553.293339][T15738] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 553.339331][T12901] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 553.364686][T15782] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 553.388322][T15782] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 553.413420][T15738] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 553.459742][T12901] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 553.549847][T15782] team0: Port device team_slave_0 added [ 553.589881][T15782] team0: Port device team_slave_1 added [ 553.602846][T15738] team0: Port device team_slave_0 added [ 553.611724][T15738] team0: Port device team_slave_1 added [ 553.728120][T15738] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 553.736411][T15738] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 553.765784][T15738] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 553.834575][T15782] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 553.846896][T15782] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 553.879449][T15782] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 553.900497][T15782] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 553.908686][T15782] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 553.935168][T15782] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 553.957412][T15738] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 553.964398][T15738] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 554.002367][T15738] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 554.029824][T15702] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 554.142201][T15702] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 554.159168][T15702] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 554.232717][T12901] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 554.284052][T15702] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 554.333273][T12901] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 554.388112][T15738] hsr_slave_0: entered promiscuous mode [ 554.394499][T15738] hsr_slave_1: entered promiscuous mode [ 554.400992][T15738] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 554.410231][T15738] Cannot create hsr debugfs directory [ 554.432586][T15782] hsr_slave_0: entered promiscuous mode [ 554.445533][T15782] hsr_slave_1: entered promiscuous mode [ 554.453003][T15782] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 554.481683][T15782] Cannot create hsr debugfs directory [ 554.527068][T12531] Bluetooth: hci0: command tx timeout [ 554.561277][T12901] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 554.617729][T12531] Bluetooth: hci2: command tx timeout [ 554.732621][T12901] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 554.774219][T15870] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1369'. [ 554.778043][T12531] Bluetooth: hci1: command tx timeout [ 554.929457][T15702] 8021q: adding VLAN 0 to HW filter on device bond0 [ 554.947721][T15702] 8021q: adding VLAN 0 to HW filter on device team0 [ 554.992755][T15702] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 555.003560][T15702] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 555.064685][ T6644] bridge0: port 1(bridge_slave_0) entered blocking state [ 555.071922][ T6644] bridge0: port 1(bridge_slave_0) entered forwarding state [ 555.092687][ T6644] bridge0: port 2(bridge_slave_1) entered blocking state [ 555.099879][ T6644] bridge0: port 2(bridge_slave_1) entered forwarding state [ 555.389303][T12901] bridge_slave_1: left allmulticast mode [ 555.395102][T12901] bridge_slave_1: left promiscuous mode [ 555.417763][T12901] bridge0: port 2(bridge_slave_1) entered disabled state [ 555.444589][T12901] bridge_slave_0: left allmulticast mode [ 555.450764][T12901] bridge_slave_0: left promiscuous mode [ 555.457262][T12901] bridge0: port 1(bridge_slave_0) entered disabled state [ 555.479479][T12901] bridge_slave_1: left allmulticast mode [ 555.485199][T12901] bridge_slave_1: left promiscuous mode [ 555.491850][T12901] bridge0: port 2(bridge_slave_1) entered disabled state [ 555.502838][T12901] bridge_slave_0: left allmulticast mode [ 555.508986][T12901] bridge_slave_0: left promiscuous mode [ 555.514774][T12901] bridge0: port 1(bridge_slave_0) entered disabled state [ 556.303605][T12901] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 556.316200][T12901] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 556.334818][T12901] bond0 (unregistering): Released all slaves [ 556.503008][T12901] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 556.523574][T12901] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 556.544109][T12901] bond0 (unregistering): Released all slaves [ 556.625941][T12531] Bluetooth: hci0: command tx timeout [ 556.847079][T12531] Bluetooth: hci1: command tx timeout [ 556.997313][T15702] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 557.241675][T15702] veth0_vlan: entered promiscuous mode [ 557.253578][T15702] veth1_vlan: entered promiscuous mode [ 557.285164][T15702] veth0_macvtap: entered promiscuous mode [ 557.294519][T15702] veth1_macvtap: entered promiscuous mode [ 557.310268][T15702] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 557.321354][T15702] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 557.331308][T15702] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 557.342001][T15702] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 557.351998][T15702] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 557.362502][T15702] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 557.373614][T15702] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 557.383558][T15702] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 557.394217][T15702] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 557.404173][T15702] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 557.415075][T15702] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 557.425119][T15702] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 557.435651][T15702] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 557.449581][T15702] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 557.512266][T15702] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 557.521436][T15702] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 557.530539][T15702] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 557.540329][T15702] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 557.620094][T12901] hsr_slave_0: left promiscuous mode [ 557.645819][T12901] hsr_slave_1: left promiscuous mode [ 557.668289][T12901] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 557.675791][T12901] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 557.714678][T12901] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 557.727097][T12901] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 557.773945][T12901] hsr_slave_0: left promiscuous mode [ 557.788111][T12901] hsr_slave_1: left promiscuous mode [ 557.802726][T12901] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 557.820786][T12901] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 557.838153][T12901] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 557.855850][T12901] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 557.935501][T12901] veth1_macvtap: left promiscuous mode [ 557.941344][T12901] veth0_macvtap: left promiscuous mode [ 557.947102][T12901] veth1_vlan: left promiscuous mode [ 557.952456][T12901] veth0_vlan: left promiscuous mode [ 557.968621][T12901] veth1_macvtap: left promiscuous mode [ 557.974216][T12901] veth0_macvtap: left promiscuous mode [ 558.000286][T12901] veth1_vlan: left promiscuous mode [ 558.005775][T12901] veth0_vlan: left promiscuous mode [ 558.932654][T12531] Bluetooth: hci1: command tx timeout [ 558.968630][T12901] team0 (unregistering): Port device team_slave_1 removed [ 559.060327][T12901] team0 (unregistering): Port device team_slave_0 removed [ 560.231335][T15916] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1374'. [ 560.671710][T12901] team0 (unregistering): Port device team_slave_1 removed [ 560.724564][T12901] team0 (unregistering): Port device team_slave_0 removed [ 561.608807][T15738] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 561.628942][T15738] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 561.827883][T15738] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 561.904496][T15738] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 562.379800][ T6644] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 562.402339][ T6644] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 562.624675][ T6834] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 562.640186][ T6834] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 562.733629][T15738] 8021q: adding VLAN 0 to HW filter on device bond0 [ 562.815521][T15738] 8021q: adding VLAN 0 to HW filter on device team0 [ 562.869321][ T6685] bridge0: port 1(bridge_slave_0) entered blocking state [ 562.876481][ T6685] bridge0: port 1(bridge_slave_0) entered forwarding state [ 562.918968][ T6685] bridge0: port 2(bridge_slave_1) entered blocking state [ 562.926108][ T6685] bridge0: port 2(bridge_slave_1) entered forwarding state [ 563.095762][T15947] netlink: 334 bytes leftover after parsing attributes in process `syz.3.1379'. [ 563.202833][T15782] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 563.250317][T15782] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 563.394996][T15738] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 563.432977][T15738] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 563.577059][T15782] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 563.595526][T15782] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 563.835167][T15782] 8021q: adding VLAN 0 to HW filter on device bond0 [ 563.901901][T15782] 8021q: adding VLAN 0 to HW filter on device team0 [ 563.954361][ T6685] bridge0: port 1(bridge_slave_0) entered blocking state [ 563.961567][ T6685] bridge0: port 1(bridge_slave_0) entered forwarding state [ 563.997804][ T6685] bridge0: port 2(bridge_slave_1) entered blocking state [ 564.004980][ T6685] bridge0: port 2(bridge_slave_1) entered forwarding state [ 564.085845][T15782] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 564.116945][T15782] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 564.209146][T15738] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 564.649896][T15782] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 565.044752][T15738] veth0_vlan: entered promiscuous mode [ 565.090208][T15738] veth1_vlan: entered promiscuous mode [ 565.161296][T15738] veth0_macvtap: entered promiscuous mode [ 565.184672][T15738] veth1_macvtap: entered promiscuous mode [ 565.208610][T15738] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 565.219644][T15738] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 565.231958][T15738] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 565.246863][T15738] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 565.261463][T15738] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 565.278423][T15738] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 565.288992][T15738] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 565.299003][T15738] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 565.318174][T15738] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 565.335341][T15738] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 565.374048][T15738] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 565.398590][T15738] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 565.412963][T15738] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 565.432448][T15738] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 565.636883][ T6644] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 565.662495][ T6644] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 565.734812][T15782] veth0_vlan: entered promiscuous mode [ 565.766311][T15281] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 565.785279][T15281] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 565.794358][T15782] veth1_vlan: entered promiscuous mode [ 565.820620][T15782] veth0_macvtap: entered promiscuous mode [ 565.830609][T15782] veth1_macvtap: entered promiscuous mode [ 565.846926][T15782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 565.858513][T15782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 565.868485][T15782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 565.879557][T15782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 565.889839][T15782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 565.900670][T15782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 565.913462][T15782] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 565.929763][T15782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 565.952528][T15782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 565.968749][T15782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 565.980947][T15782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 565.991574][T15782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 566.006862][T15782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 566.028421][T15782] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 566.130214][T15782] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 566.165128][T15782] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 566.194483][T15782] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 566.213833][T15782] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 566.245551][T16009] svc: failed to register nfsdv3 RPC service (errno 111). [ 566.332514][T16009] svc: failed to register nfsaclv3 RPC service (errno 111). [ 566.435122][T16013] can: request_module (can-proto-4) failed. [ 566.565620][T16022] Process accounting resumed [ 566.633635][T12901] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 566.644407][T12901] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 566.707173][T13420] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 566.723842][T13420] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 567.631864][T16036] netlink: 'syz.3.1390': attribute type 3 has an invalid length. [ 568.293761][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 568.301267][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 569.089229][T16073] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1399'. [ 569.160357][T16074] Invalid ELF header magic: != ELF [ 574.420858][T16202] svc: failed to register nfsdv3 RPC service (errno 111). [ 574.436348][T16202] svc: failed to register nfsaclv3 RPC service (errno 111). [ 586.608625][T16549] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1468'. [ 595.869829][T16790] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1501'. [ 598.768664][T16861] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1511'. [ 599.077502][T16848] kexec: Could not allocate control_code_buffer [ 600.927041][T16909] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1516'. [ 602.102525][T16951] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1524'. [ 606.392240][T13420] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 606.751965][T13420] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 606.860404][ T5862] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 606.875490][ T5862] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 606.885208][ T5862] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 606.907788][ T5862] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 606.923408][ T5862] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 606.931369][ T5862] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 607.040080][T13420] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 607.099124][T17072] netlink: 338 bytes leftover after parsing attributes in process `syz.5.1540'. [ 607.128086][T17073] netlink: 338 bytes leftover after parsing attributes in process `syz.5.1540'. [ 607.174974][T17073] netlink: 338 bytes leftover after parsing attributes in process `syz.5.1540'. [ 607.252746][T13420] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 607.304056][T17073] netlink: 338 bytes leftover after parsing attributes in process `syz.5.1540'. [ 607.707004][T13420] bridge_slave_1: left allmulticast mode [ 607.736230][T13420] bridge_slave_1: left promiscuous mode [ 607.754503][T13420] bridge0: port 2(bridge_slave_1) entered disabled state [ 607.815132][T13420] bridge_slave_0: left allmulticast mode [ 607.829739][T13420] bridge_slave_0: left promiscuous mode [ 607.850847][T13420] bridge0: port 1(bridge_slave_0) entered disabled state [ 608.789337][T13420] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 608.821139][T13420] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 608.843540][T13420] bond0 (unregistering): Released all slaves [ 609.006890][ T5862] Bluetooth: hci0: command tx timeout [ 609.327299][T17066] chnl_net:caif_netlink_parms(): no params data found [ 609.620747][T17125] svc: failed to register nfsdv3 RPC service (errno 111). [ 609.630082][T17125] svc: failed to register nfsaclv3 RPC service (errno 111). [ 609.975064][T13420] hsr_slave_0: left promiscuous mode [ 610.018610][T13420] hsr_slave_1: left promiscuous mode [ 610.087260][T13420] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 610.094765][T13420] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 610.164270][T13420] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 610.173820][T13420] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 610.239380][T13420] veth1_macvtap: left promiscuous mode [ 610.259443][T13420] veth0_macvtap: left promiscuous mode [ 610.265131][T13420] veth1_vlan: left promiscuous mode [ 610.277359][T13420] veth0_vlan: left promiscuous mode [ 610.954437][T13420] team0 (unregistering): Port device team_slave_1 removed [ 611.017441][T13420] team0 (unregistering): Port device team_slave_0 removed [ 611.092882][ T5862] Bluetooth: hci0: command tx timeout [ 611.940469][T17066] bridge0: port 1(bridge_slave_0) entered blocking state [ 611.954741][T17066] bridge0: port 1(bridge_slave_0) entered disabled state [ 611.972907][T17066] bridge_slave_0: entered allmulticast mode [ 611.988563][T17066] bridge_slave_0: entered promiscuous mode [ 612.063580][T17066] bridge0: port 2(bridge_slave_1) entered blocking state [ 612.072656][T17066] bridge0: port 2(bridge_slave_1) entered disabled state [ 612.091122][T17066] bridge_slave_1: entered allmulticast mode [ 612.109754][T17066] bridge_slave_1: entered promiscuous mode [ 612.269441][T17066] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 612.321776][T17066] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 612.411894][T17066] team0: Port device team_slave_0 added [ 612.433708][T17066] team0: Port device team_slave_1 added [ 612.527617][T17066] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 612.534646][T17066] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 612.567434][T17066] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 612.611491][T17066] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 612.632535][T17066] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 612.676508][T17066] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 612.995539][T17066] hsr_slave_0: entered promiscuous mode [ 613.047718][T17066] hsr_slave_1: entered promiscuous mode [ 613.167577][ T5862] Bluetooth: hci0: command tx timeout [ 614.200429][T17066] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 614.265824][T17066] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 614.316513][T17066] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 614.341204][T17066] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 614.552533][T17066] 8021q: adding VLAN 0 to HW filter on device bond0 [ 614.578355][T17066] 8021q: adding VLAN 0 to HW filter on device team0 [ 614.601317][T16295] bridge0: port 1(bridge_slave_0) entered blocking state [ 614.608539][T16295] bridge0: port 1(bridge_slave_0) entered forwarding state [ 614.620250][T16295] bridge0: port 2(bridge_slave_1) entered blocking state [ 614.627494][T16295] bridge0: port 2(bridge_slave_1) entered forwarding state [ 614.692837][T17066] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 614.733425][T17066] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 615.246938][ T5862] Bluetooth: hci0: command tx timeout [ 615.277714][T17066] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 615.848785][T17066] veth0_vlan: entered promiscuous mode [ 615.873707][T17066] veth1_vlan: entered promiscuous mode [ 615.944862][T17066] veth0_macvtap: entered promiscuous mode [ 615.965928][T17066] veth1_macvtap: entered promiscuous mode [ 616.028918][T17066] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 616.059344][T17066] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 616.081686][T17066] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 616.097075][T17066] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 616.141582][T17066] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 616.173524][T17066] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 616.206519][T17066] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 616.265097][T17066] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 616.275940][T17066] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 616.286010][T17066] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 616.297688][T17066] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 616.307673][T17066] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 616.318611][T17066] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 616.330509][T17066] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 616.342055][T17066] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 616.350976][T17066] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 616.359859][T17066] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 616.369178][T17066] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 616.607239][ T6644] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 616.615150][ T6644] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 616.626855][T15283] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 616.634765][T15283] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 616.771520][T17283] svc: failed to register nfsdv3 RPC service (errno 111). [ 616.795312][T17283] svc: failed to register nfsaclv3 RPC service (errno 111). [ 617.562170][T17309] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1572'. [ 619.074213][T17337] can: request_module (can-proto-0) failed. [ 621.626449][T17441] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1593'. [ 621.760292][T17452] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1594'. [ 624.452990][T17536] CIFS mount error: No usable UNC path provided in device string! [ 624.452990][T17536] [ 624.537222][T17536] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 625.648584][T17578] unsupported nlmsg_type 40 [ 625.884310][T17581] netlink: 'syz.1.1612': attribute type 11 has an invalid length. [ 625.938451][T17581] netlink: 'syz.1.1612': attribute type 11 has an invalid length. [ 626.248491][T17556] workqueue: name exceeds WQ_NAME_LEN. Truncating to: ýÿÿÿÿÿÿÿ-œä¾ž6y“Õ¼Ÿ¦÷ k†Áa;« [ 627.108570][T17600] can: request_module (can-proto-0) failed. [ 627.544409][T17625] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1617'. [ 629.739193][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 629.745601][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 630.149709][T17678] netlink: 'syz.3.1625': attribute type 11 has an invalid length. [ 630.370041][T17684] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1626'. [ 631.131982][T17702] netlink: 'syz.5.1631': attribute type 11 has an invalid length. [ 631.286525][T15283] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 631.571819][T15283] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 631.932346][T15283] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 632.186278][T15283] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 632.573599][T15283] bridge_slave_1: left allmulticast mode [ 632.594012][T15283] bridge_slave_1: left promiscuous mode [ 632.622515][T15283] bridge0: port 2(bridge_slave_1) entered disabled state [ 632.750980][T15283] bridge_slave_0: left allmulticast mode [ 632.776299][T15283] bridge_slave_0: left promiscuous mode [ 632.817551][T15283] bridge0: port 1(bridge_slave_0) entered disabled state [ 632.825930][T12531] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 632.837216][T12531] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 632.847601][T12531] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 632.868859][T12531] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 632.876875][T12531] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 632.884414][T12531] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 634.370840][T15283] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 634.435883][T15283] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 634.481087][T15283] bond0 (unregistering): Released all slaves [ 634.945535][T12531] Bluetooth: hci0: command tx timeout [ 635.187456][T17760] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1641'. [ 635.525925][T15283] hsr_slave_0: left promiscuous mode [ 635.536498][T15283] hsr_slave_1: left promiscuous mode [ 635.579052][T15283] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 635.606358][T15283] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 635.633738][T15283] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 635.654587][T15283] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 635.732976][T15283] veth1_macvtap: left promiscuous mode [ 635.744680][T15283] veth0_macvtap: left promiscuous mode [ 635.762393][T15283] veth1_vlan: left promiscuous mode [ 635.791351][T15283] veth0_vlan: left promiscuous mode [ 637.007099][ T5862] Bluetooth: hci0: command tx timeout [ 637.622024][T15283] team0 (unregistering): Port device team_slave_1 removed [ 637.683591][T15283] team0 (unregistering): Port device team_slave_0 removed [ 638.819094][T17727] chnl_net:caif_netlink_parms(): no params data found [ 639.097057][ T5862] Bluetooth: hci0: command tx timeout [ 639.439198][T17727] bridge0: port 1(bridge_slave_0) entered blocking state [ 639.448629][T17727] bridge0: port 1(bridge_slave_0) entered disabled state [ 639.467026][T17727] bridge_slave_0: entered allmulticast mode [ 639.474267][T17727] bridge_slave_0: entered promiscuous mode [ 639.517444][T17727] bridge0: port 2(bridge_slave_1) entered blocking state [ 639.524723][T17727] bridge0: port 2(bridge_slave_1) entered disabled state [ 639.552960][T17727] bridge_slave_1: entered allmulticast mode [ 639.575190][T17727] bridge_slave_1: entered promiscuous mode [ 639.661340][T17727] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 639.705454][T17727] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 639.818472][T17727] team0: Port device team_slave_0 added [ 639.828998][T17727] team0: Port device team_slave_1 added [ 639.985950][T17727] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 639.993731][T17727] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 640.019943][T17727] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 640.091000][T17727] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 640.098157][T17727] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 640.128725][T17727] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 640.315201][T17727] hsr_slave_0: entered promiscuous mode [ 640.340051][T17727] hsr_slave_1: entered promiscuous mode [ 641.075683][T17884] netlink: 'syz.5.1657': attribute type 19 has an invalid length. [ 641.151186][T17884] netlink: 334 bytes leftover after parsing attributes in process `syz.5.1657'. [ 641.166866][ T5862] Bluetooth: hci0: command tx timeout [ 641.362923][T17727] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 641.419931][T17727] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 641.459954][T17727] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 641.491302][T17727] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 641.720973][T17727] 8021q: adding VLAN 0 to HW filter on device bond0 [ 641.780830][T17727] 8021q: adding VLAN 0 to HW filter on device team0 [ 641.824387][T12906] bridge0: port 1(bridge_slave_0) entered blocking state [ 641.831671][T12906] bridge0: port 1(bridge_slave_0) entered forwarding state [ 641.898053][T13420] bridge0: port 2(bridge_slave_1) entered blocking state [ 641.905414][T13420] bridge0: port 2(bridge_slave_1) entered forwarding state [ 642.002974][T17727] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 642.021567][T17727] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 642.490782][T17727] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 643.223100][T17727] veth0_vlan: entered promiscuous mode [ 643.371343][T17727] veth1_vlan: entered promiscuous mode [ 643.691035][T17727] veth0_macvtap: entered promiscuous mode [ 643.775685][T17727] veth1_macvtap: entered promiscuous mode [ 644.074653][T17727] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 644.112161][T17727] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 644.137106][T17727] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 644.151833][T17727] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 644.162075][T17727] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 644.183140][T17727] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 644.219519][T17727] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 644.287329][T17727] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 644.316638][T17727] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 644.327689][T17727] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 644.345545][T17727] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 644.365291][T17727] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 644.396856][T17727] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 644.418599][T17727] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 644.478486][T17727] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 644.516789][T17727] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 644.525606][T17727] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 644.566907][T17727] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 644.767194][T12902] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 644.817535][T12902] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 644.931307][T12902] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 644.967086][T12902] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 645.163566][T17987] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1633'. [ 647.083922][T18025] Process accounting resumed [ 647.327458][T18048] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1678'. [ 649.894836][T18106] netlink: 330 bytes leftover after parsing attributes in process `syz.6.1687'. [ 650.180043][T18118] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1688'. [ 651.834353][T18160] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1695'. [ 652.029988][T18162] openvswitch: HSR: Dropping previously announced user features [ 652.117621][T18165] delete_channel: no stack [ 652.566267][T18178] Process accounting resumed [ 652.997474][T18188] Process accounting resumed [ 655.836923][T18255] netlink: 342 bytes leftover after parsing attributes in process `syz.1.1712'. [ 659.683105][T18369] netlink: 244 bytes leftover after parsing attributes in process `syz.1.1733'. [ 660.123371][T18397] bridge0: port 2(bridge_slave_1) entered disabled state [ 663.735433][T13420] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 664.009436][T12531] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 664.020098][T12531] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 664.029611][T12531] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 664.040216][T12531] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 664.048477][T12531] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 664.056100][T12531] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 664.196278][T13420] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 664.485813][T13420] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 665.161846][T13420] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 665.664501][T18519] chnl_net:caif_netlink_parms(): no params data found [ 665.701755][T13420] bridge_slave_1: left allmulticast mode [ 665.722496][T13420] bridge_slave_1: left promiscuous mode [ 665.741187][T13420] bridge0: port 2(bridge_slave_1) entered disabled state [ 665.760230][T13420] bridge_slave_0: left allmulticast mode [ 665.766018][T13420] bridge_slave_0: left promiscuous mode [ 665.776470][T13420] bridge0: port 1(bridge_slave_0) entered disabled state [ 666.126938][ T5862] Bluetooth: hci3: command tx timeout [ 666.437157][T18573] FAULT_INJECTION: forcing a failure. [ 666.437157][T18573] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 666.486641][T18573] CPU: 1 UID: 0 PID: 18573 Comm: syz.6.1766 Not tainted 6.12.0-rc6-syzkaller #0 [ 666.495788][T18573] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 666.505906][T18573] Call Trace: [ 666.509229][T18573] [ 666.512210][T18573] dump_stack_lvl+0x16c/0x1f0 [ 666.516958][T18573] should_fail_ex+0x497/0x5b0 [ 666.521713][T18573] _copy_to_user+0x32/0xd0 [ 666.526202][T18573] simple_read_from_buffer+0xd0/0x160 [ 666.531674][T18573] proc_fail_nth_read+0x198/0x270 [ 666.536790][T18573] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 666.542426][T18573] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 666.548055][T18573] vfs_read+0x1df/0xbe0 [ 666.552290][T18573] ? __fget_files+0x23a/0x3f0 [ 666.557043][T18573] ? fdget_pos+0x24c/0x360 [ 666.561534][T18573] ? __pfx_lock_release+0x10/0x10 [ 666.566648][T18573] ? trace_lock_acquire+0x14a/0x1d0 [ 666.571931][T18573] ? __pfx_vfs_read+0x10/0x10 [ 666.576678][T18573] ? __pfx___mutex_lock+0x10/0x10 [ 666.581798][T18573] ? __fget_files+0x244/0x3f0 [ 666.586560][T18573] ksys_read+0x12f/0x260 [ 666.590884][T18573] ? __pfx_ksys_read+0x10/0x10 [ 666.595742][T18573] do_syscall_64+0xcd/0x250 [ 666.600318][T18573] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 666.606302][T18573] RIP: 0033:0x7fa7e337d15c [ 666.610796][T18573] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 666.630485][T18573] RSP: 002b:00007fa7e41a5030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 666.638975][T18573] RAX: ffffffffffffffda RBX: 00007fa7e3535f80 RCX: 00007fa7e337d15c [ 666.647010][T18573] RDX: 000000000000000f RSI: 00007fa7e41a50a0 RDI: 0000000000000003 [ 666.655052][T18573] RBP: 00007fa7e41a5090 R08: 0000000000000000 R09: 0000000000000000 [ 666.663107][T18573] R10: 0000000000000006 R11: 0000000000000246 R12: 0000000000000001 [ 666.671140][T18573] R13: 0000000000000000 R14: 00007fa7e3535f80 R15: 00007ffedafd4068 [ 666.679341][T18573] [ 667.016417][T13420] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 667.039474][T13420] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 667.053377][T13420] bond0 (unregistering): Released all slaves [ 667.263031][T13420] HSR: left promiscuous mode [ 667.572608][T18588] netlink: 'syz.5.1770': attribute type 2 has an invalid length. [ 667.855997][T18519] bridge0: port 1(bridge_slave_0) entered blocking state [ 667.867851][T18519] bridge0: port 1(bridge_slave_0) entered disabled state [ 667.897025][T18519] bridge_slave_0: entered allmulticast mode [ 667.904336][T18519] bridge_slave_0: entered promiscuous mode [ 667.989984][T18519] bridge0: port 2(bridge_slave_1) entered blocking state [ 668.006892][T18519] bridge0: port 2(bridge_slave_1) entered disabled state [ 668.014217][T18519] bridge_slave_1: entered allmulticast mode [ 668.040253][T18519] bridge_slave_1: entered promiscuous mode [ 668.199749][T18519] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 668.209260][ T5862] Bluetooth: hci3: command tx timeout [ 668.243622][T18519] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 668.253514][ T5862] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 668.269214][ T5862] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 668.279292][ T5862] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 668.317283][ T5862] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 668.330002][ T5862] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 668.340295][ T5862] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 668.490388][T18519] team0: Port device team_slave_0 added [ 668.533824][T18519] team0: Port device team_slave_1 added [ 668.653403][T18519] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 668.664180][T18519] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 668.728512][T18519] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 668.829476][T18519] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 668.844806][T18519] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 668.906823][T18519] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 669.004282][T18519] hsr_slave_0: entered promiscuous mode [ 669.011892][T18519] hsr_slave_1: entered promiscuous mode [ 669.019089][T18519] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 669.027325][T18519] Cannot create hsr debugfs directory [ 669.390509][T13420] hsr_slave_0: left promiscuous mode [ 669.400521][T13420] hsr_slave_1: left promiscuous mode [ 669.407208][T13420] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 669.414683][T13420] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 669.425208][T13420] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 669.432943][T13420] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 669.453950][T13420] veth1_macvtap: left promiscuous mode [ 669.460349][T13420] veth0_macvtap: left promiscuous mode [ 669.465988][T13420] veth1_vlan: left promiscuous mode [ 669.471725][T13420] veth0_vlan: left promiscuous mode [ 670.194919][T13420] team0 (unregistering): Port device team_slave_1 removed [ 670.253961][T13420] team0 (unregistering): Port device team_slave_0 removed [ 670.286906][T12531] Bluetooth: hci3: command tx timeout [ 670.448638][T12531] Bluetooth: hci2: command tx timeout [ 671.074350][T18599] chnl_net:caif_netlink_parms(): no params data found [ 671.441961][T18599] bridge0: port 1(bridge_slave_0) entered blocking state [ 671.482746][T18599] bridge0: port 1(bridge_slave_0) entered disabled state [ 671.517010][T18599] bridge_slave_0: entered allmulticast mode [ 671.547101][T18599] bridge_slave_0: entered promiscuous mode [ 671.577477][T18599] bridge0: port 2(bridge_slave_1) entered blocking state [ 671.584758][T18599] bridge0: port 2(bridge_slave_1) entered disabled state [ 671.608358][T18599] bridge_slave_1: entered allmulticast mode [ 671.616619][T18599] bridge_slave_1: entered promiscuous mode [ 671.745286][T18599] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 671.767109][T18519] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 671.809595][T18519] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 671.854684][T18519] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 671.871908][T18599] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 671.929524][T18599] team0: Port device team_slave_0 added [ 671.946124][T18519] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 671.976405][T18599] team0: Port device team_slave_1 added [ 672.097755][T13420] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 672.215531][T18599] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 672.227942][T18599] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 672.261335][T18599] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 672.325946][T13420] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 672.367070][T12531] Bluetooth: hci3: command tx timeout [ 672.435728][T18599] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 672.457866][T18599] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 672.493122][T18599] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 672.538952][T12531] Bluetooth: hci2: command tx timeout [ 672.560720][T13420] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 672.721425][T13420] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 672.768195][T12531] Bluetooth: hci1: command 0x0406 tx timeout [ 672.819601][T18599] hsr_slave_0: entered promiscuous mode [ 672.831858][T18599] hsr_slave_1: entered promiscuous mode [ 672.841504][T18599] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 672.855172][T18599] Cannot create hsr debugfs directory [ 673.175865][T13420] bridge_slave_1: left allmulticast mode [ 673.192420][T13420] bridge_slave_1: left promiscuous mode [ 673.217092][T13420] bridge0: port 2(bridge_slave_1) entered disabled state [ 673.236283][T13420] bridge_slave_0: left allmulticast mode [ 673.254720][T13420] bridge_slave_0: left promiscuous mode [ 673.274699][T13420] bridge0: port 1(bridge_slave_0) entered disabled state [ 674.606814][ T5862] Bluetooth: hci2: command tx timeout [ 674.689770][T13420] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 674.707069][T13420] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 674.721012][T13420] bond0 (unregistering): Released all slaves [ 674.951728][T18519] 8021q: adding VLAN 0 to HW filter on device bond0 [ 675.290634][T18519] 8021q: adding VLAN 0 to HW filter on device team0 [ 675.349835][T15283] bridge0: port 1(bridge_slave_0) entered blocking state [ 675.357087][T15283] bridge0: port 1(bridge_slave_0) entered forwarding state [ 675.387908][T15283] bridge0: port 2(bridge_slave_1) entered blocking state [ 675.395097][T15283] bridge0: port 2(bridge_slave_1) entered forwarding state [ 675.559925][T18599] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 675.586416][T18599] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 675.635821][T18599] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 675.651422][T18679] nbd: couldn't find device at index 511 [ 675.654078][T18599] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 675.667767][T18679] netlink: 'syz.5.1793': attribute type 3 has an invalid length. [ 675.688431][T18519] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 675.699081][T18519] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 675.900184][T13420] hsr_slave_0: left promiscuous mode [ 675.957711][T13420] hsr_slave_1: left promiscuous mode [ 675.996341][T13420] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 676.004374][T13420] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 676.025886][T13420] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 676.036952][T13420] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 676.072432][T13420] veth1_macvtap: left promiscuous mode [ 676.087801][T13420] veth0_macvtap: left promiscuous mode [ 676.093665][T13420] veth1_vlan: left promiscuous mode [ 676.117186][T13420] veth0_vlan: left promiscuous mode [ 676.693480][ T5862] Bluetooth: hci2: command tx timeout [ 677.370309][T13420] team0 (unregistering): Port device team_slave_1 removed [ 677.508924][T13420] team0 (unregistering): Port device team_slave_0 removed [ 678.363077][T18704] gre0: entered allmulticast mode [ 678.517072][T18519] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 678.591186][T18599] 8021q: adding VLAN 0 to HW filter on device bond0 [ 678.711526][T18599] 8021q: adding VLAN 0 to HW filter on device team0 [ 678.768432][ T6654] bridge0: port 1(bridge_slave_0) entered blocking state [ 678.775672][ T6654] bridge0: port 1(bridge_slave_0) entered forwarding state [ 678.798653][ T6654] bridge0: port 2(bridge_slave_1) entered blocking state [ 678.805841][ T6654] bridge0: port 2(bridge_slave_1) entered forwarding state [ 678.920039][T18519] veth0_vlan: entered promiscuous mode [ 678.957988][T18519] veth1_vlan: entered promiscuous mode [ 678.986397][T18599] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 679.058536][T18519] veth0_macvtap: entered promiscuous mode [ 679.097135][T18519] veth1_macvtap: entered promiscuous mode [ 679.160464][T18519] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 679.194660][T18519] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 679.223986][T18519] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 679.244217][T18519] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 679.262644][T18519] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 679.276012][T18519] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 679.295577][T18519] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 679.306196][T18519] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 679.326455][T18519] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 679.346495][T18519] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 679.379041][T18519] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 679.407873][T18519] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 679.424039][T18519] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 679.453566][T18519] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 679.647827][T18599] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 679.698345][T16295] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 679.706248][T16295] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 679.797921][T18599] veth0_vlan: entered promiscuous mode [ 679.813886][T12902] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 679.837936][T18599] veth1_vlan: entered promiscuous mode [ 679.861691][T12902] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 679.956299][T18599] veth0_macvtap: entered promiscuous mode [ 679.992374][T18599] veth1_macvtap: entered promiscuous mode [ 680.055943][T18599] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 680.096733][T18599] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 680.126245][T18599] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 680.150210][T18599] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 680.164541][T18599] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 680.177043][T18599] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 680.193205][T18599] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 680.226207][T18599] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 680.248820][T18599] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 680.263565][T18599] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 680.275986][T18599] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 680.296289][T18599] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 680.310407][T18599] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 680.326593][T18599] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 680.390698][T18599] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 680.404796][T18599] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 680.424279][T18599] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 680.434397][T18599] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 680.625092][T16782] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 680.657272][T16782] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 680.767244][T16782] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 680.829103][T16782] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 681.526888][T18742] svc: failed to register nfsdv3 RPC service (errno 111). [ 681.559621][T18742] svc: failed to register nfsaclv3 RPC service (errno 111). [ 690.809421][T18964] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1838'. [ 691.171099][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 691.177688][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 693.052781][T19047] nbd: must specify at least one socket [ 693.977616][T19061] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1854'. [ 696.314983][T19148] svc: failed to register nfsdv3 RPC service (errno 111). [ 696.360223][T19148] svc: failed to register nfsaclv3 RPC service (errno 111). [ 703.537611][T19336] Process accounting resumed [ 704.916881][T19369] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1892'. [ 706.141710][T19424] netlink: 'syz.3.1902': attribute type 1 has an invalid length. [ 706.154241][T19424] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1902'. [ 706.565210][T19433] netlink: 342 bytes leftover after parsing attributes in process `syz.5.1906'. [ 707.217483][T19435] svc: failed to register nfsdv3 RPC service (errno 111). [ 707.292269][T19435] svc: failed to register nfsaclv3 RPC service (errno 111). [ 708.057154][T19468] Process accounting resumed [ 708.751873][T19483] svc: failed to register nfsdv3 RPC service (errno 111). [ 708.791274][T19483] svc: failed to register nfsaclv3 RPC service (errno 111). [ 712.077588][T19587] Process accounting resumed [ 713.270133][T19644] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1936'. [ 713.284823][T19642] HfR: entered promiscuous mode [ 713.291105][T19644] HfR: left promiscuous mode [ 713.294692][T19643] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1936'. [ 716.712900][T19732] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1949'. [ 716.819104][T19731] svc: failed to register nfsdv3 RPC service (errno 111). [ 716.886725][T19731] svc: failed to register nfsaclv3 RPC service (errno 111). [ 719.859948][ T29] audit: type=1800 audit(4319.763:10): pid=19768 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.1950" name="SYSV00000008" dev="hugetlbfs" ino=0 res=0 errno=0 [ 725.000787][T19897] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 725.026834][T19897] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 725.217729][T19911] netlink: 334 bytes leftover after parsing attributes in process `syz.3.1978'. [ 726.492762][T19944] ptrace attach of "./syz-executor exec"[17727] was attempted by "ùµ\x07Ÿ0¿Ø¨Ñ÷èBŸ`ÝRØ€b˜“è ±Ó¡x,̵ګ¸Šopˆï=IA—_ã£û¶Ù›r4Ýþ (Ù}Ÿ¦LCWQƒ&š—½Ê=„<ÊŸüèŽP\x07ó)Øw‘·ÔÛ¢…¿ªs˜Ò òK52¯hv‹`­\x0a‰øƒÄBÅe]²V{I;i2ð²8\x0cFÒQÒU9”µ\x0cð.’Lš´@‚#Ò¨žƒ›Å×X­ì}gš¥H_½x<5H®ÏI¾&ïÞaÔü€¹Å^ê¦Ë{ÉÚ››4¡CfÄŸ¼÷ÌþvÁÊFãxÞ%¿obOû\x0dý=\x0cŠ@Ø?jNŠàRg¨Á@iPÊX6 TÿïÒìËž5ÛÛ¦¶&fHÂëg~Ÿa‚Ã2€q™ÑŠõ,‘îØŸ\x09å á¸7\x0aÂo\x0aë¼FTâ~ õf«ù†?{‚åû}㱶ŽtÔ}¡Ài~DŒ”¢æi Í\x22ÌÏ{Ê-µÐm³ÙVN¥pÓÒê‡.¶§¾_y^Ô]@÷–ùú®\x1b8ý§GÞƒÇy7¾‘õÿãÛbÆ•H!YG¼!µ+XÁË¡Àúyøž2ÁŒt÷ݲ+_;1¯ lz­d $lš7°\x09ÓTƒ~¤fŽ… ³®²pw¯nkÈŸì‘\x22ÎI/ÓÙý»H«„Ô¼¾I…Ø›î—@” wÿ0›äí¿æ¬Ý›«3l²eq;ôÖÇ!ø4†[’Dì– Ô™quÖ›Í<¤Ë5Ô¾Û™ƒÊÓbs\x07;(vQš»‰)xW‹ìŸààÂN9})ÿ½Wøgfî<ßKÉRµ=Öˆb\x1b\x0d1d?ýÏ\x1b=êÚäÊêÙÕ1]Ÿ¤xy÷¯ñZ.^—o›äFÒE„\x0cVl­ÄžŒ¦¼ú:1i\x09ÁþMú‹£Ú.™­ÌH ÕøpêÒ­¶1†™L¥\x1b‘Ñ7!U¦:ÏÛà¤üìâô”ÐÈ¥Û=§†ÄœÙûswYK{4îѲ“2ŒZ¢_ áõãÚ©~6¡ùž‘t\x0a÷=‰†èø1ç&á’¿:“—âÒÃ}{üXò6ä[ég :•ë: “ºÁ(ï÷­¦&eWÂRQ/\x07#ï4÷»û|œ«C'fLåœ;ÙþN%£:2GñªœÕÊÛêZÐdryô¥0Ï®sI9ží—M4{)0‚‚©MâW [ 726.869005][T19965] tc_dump_action: action bad kind [ 727.005694][T19965] netlink: 'syz.6.1993': attribute type 11 has an invalid length. [ 727.837398][T19981] futex_wake_op: syz.3.1998 tries to shift op by 64; fix this program [ 727.866342][T19984] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1999'. [ 727.880476][T19984] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1999'. [ 727.893210][T19984] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1999'. [ 727.922669][T19984] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1999'. [ 727.939316][T19984] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1999'. [ 727.966389][T19984] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1999'. [ 727.984180][T19984] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1999'. [ 727.994134][T19984] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1999'. [ 728.007211][T19984] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1999'. [ 730.340369][T20020] Invalid ELF header magic: != ELF [ 732.546442][T20081] __nla_validate_parse: 8 callbacks suppressed [ 732.546469][T20081] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2018'. [ 733.620476][T20096] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2022'. [ 734.364466][T20119] ptrace attach of "./syz-executor exec"[17727] was attempted by ""[20119] [ 734.557067][T20123] netlink: 330 bytes leftover after parsing attributes in process `syz.6.2028'. [ 734.954779][T20128] netlink: 338 bytes leftover after parsing attributes in process `syz.5.2029'. [ 735.167617][T20132] netlink: 338 bytes leftover after parsing attributes in process `syz.5.2029'. [ 735.267908][T20132] netlink: 338 bytes leftover after parsing attributes in process `syz.5.2029'. [ 735.443221][T20132] netlink: 338 bytes leftover after parsing attributes in process `syz.5.2029'. [ 739.460675][T20258] HSR: entered promiscuous mode [ 741.107332][T20299] svc: failed to register nfsdv3 RPC service (errno 111). [ 741.140626][T20299] svc: failed to register nfsaclv3 RPC service (errno 111). [ 744.780129][T20390] Process accounting resumed [ 745.008303][T20400] netlink: zone id is out of range [ 745.017583][T20400] netlink: zone id is out of range [ 745.029767][T20400] netlink: zone id is out of range [ 745.044942][T20400] netlink: zone id is out of range [ 745.060050][T20400] netlink: zone id is out of range [ 745.100419][T20400] netlink: zone id is out of range [ 745.122212][T20400] netlink: zone id is out of range [ 745.128083][T20400] netlink: zone id is out of range [ 745.134729][T20400] netlink: zone id is out of range [ 745.140823][T20400] netlink: zone id is out of range [ 745.461461][T20412] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2083'. [ 747.773205][T20454] delete_channel: no stack [ 752.451310][T20605] delete_channel: no stack [ 752.610470][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 752.617183][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 755.557674][T20680] netlink: 346 bytes leftover after parsing attributes in process `syz.6.2146'. [ 755.609625][T20673] netlink: 346 bytes leftover after parsing attributes in process `syz.6.2146'. [ 755.899186][T20685] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2149'. [ 755.957140][T20687] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2149'. [ 757.314965][ T29] audit: type=1326 audit(4357.213:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20696 comm="syz.3.2151" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f35d357e719 code=0x0 [ 759.839130][T20711] Bluetooth: hci0: command 0x0406 tx timeout [ 761.847415][T20774] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2169'. [ 761.894254][T20774] HSR: entered promiscuous mode [ 767.018182][T20873] Process accounting resumed [ 767.164395][T20874] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2190'. [ 767.816584][T20873] Process accounting resumed [ 769.521427][T20913] svc: failed to register nfsdv3 RPC service (errno 111). [ 769.592250][T20913] svc: failed to register nfsaclv3 RPC service (errno 111). [ 770.523776][T20941] netlink: 'syz.5.2213': attribute type 11 has an invalid length. [ 773.245465][T20999] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2228'. [ 787.459403][T21198] bridge0: port 2(bridge_slave_1) entered disabled state [ 787.827434][T21205] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2274'. [ 787.990349][T12905] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 788.737550][T21213] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 788.749383][T21213] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 788.760225][T21213] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 788.770084][T21213] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 788.778243][T21213] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 788.795143][T21213] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 789.610676][T12905] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 790.075533][T12905] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 790.526754][T21213] Bluetooth: hci3: command 0x0406 tx timeout [ 790.527003][T21214] Bluetooth: hci2: command 0x0406 tx timeout [ 790.846983][T20711] Bluetooth: hci0: command tx timeout [ 790.896429][T12905] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 791.030622][T21215] chnl_net:caif_netlink_parms(): no params data found [ 791.925297][T21215] bridge0: port 1(bridge_slave_0) entered blocking state [ 791.933199][T21215] bridge0: port 1(bridge_slave_0) entered disabled state [ 791.940628][T21215] bridge_slave_0: entered allmulticast mode [ 791.947927][T21215] bridge_slave_0: entered promiscuous mode [ 791.956245][T21215] bridge0: port 2(bridge_slave_1) entered blocking state [ 791.963744][T21215] bridge0: port 2(bridge_slave_1) entered disabled state [ 791.971245][T21215] bridge_slave_1: entered allmulticast mode [ 791.978581][T21215] bridge_slave_1: entered promiscuous mode [ 792.299541][T21260] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2286'. [ 792.630028][T21215] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 792.670469][T21215] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 792.927150][T20711] Bluetooth: hci0: command tx timeout [ 792.955331][T21215] team0: Port device team_slave_0 added [ 792.969981][T21215] team0: Port device team_slave_1 added [ 793.158316][T12905] bridge_slave_1: left promiscuous mode [ 793.164128][T12905] bridge0: port 2(bridge_slave_1) entered disabled state [ 793.208725][T12905] bridge_slave_0: left allmulticast mode [ 793.214443][T12905] bridge_slave_0: left promiscuous mode [ 793.238000][T12905] bridge0: port 1(bridge_slave_0) entered disabled state [ 794.760787][T12905] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 794.794038][T12905] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 794.811911][T12905] bond0 (unregistering): Released all slaves [ 794.867483][T21215] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 794.874501][T21215] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 794.946771][T21215] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 795.006908][T20711] Bluetooth: hci0: command tx timeout [ 795.016484][T12905] HSR: left promiscuous mode [ 795.058941][T21215] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 795.066317][T21215] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 795.154372][T21215] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 795.390822][T21215] hsr_slave_0: entered promiscuous mode [ 795.440841][T21215] hsr_slave_1: entered promiscuous mode [ 795.479207][T21215] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 795.487470][T21215] Cannot create hsr debugfs directory [ 796.391608][T12905] hsr_slave_0: left promiscuous mode [ 796.433880][T12905] hsr_slave_1: left promiscuous mode [ 796.483126][T12905] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 796.508979][T12905] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 796.548475][T12905] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 796.556719][T12905] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 796.729897][T12905] veth1_macvtap: left promiscuous mode [ 796.735613][T12905] veth0_macvtap: left promiscuous mode [ 796.765905][T12905] veth1_vlan: left promiscuous mode [ 796.791982][T12905] veth0_vlan: left promiscuous mode [ 797.090878][T20711] Bluetooth: hci0: command tx timeout [ 800.032670][T12905] team0 (unregistering): Port device team_slave_1 removed [ 800.272717][T12905] team0 (unregistering): Port device team_slave_0 removed [ 803.359095][T21215] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 803.397732][T21215] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 803.494105][T21215] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 803.522185][T21215] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 804.210417][T21215] 8021q: adding VLAN 0 to HW filter on device bond0 [ 804.233327][T21215] 8021q: adding VLAN 0 to HW filter on device team0 [ 804.249291][ T6835] bridge0: port 1(bridge_slave_0) entered blocking state [ 804.256457][ T6835] bridge0: port 1(bridge_slave_0) entered forwarding state [ 804.353787][T12905] bridge0: port 2(bridge_slave_1) entered blocking state [ 804.361035][T12905] bridge0: port 2(bridge_slave_1) entered forwarding state [ 805.063680][T21215] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 805.864471][T21215] veth0_vlan: entered promiscuous mode [ 805.878272][T21215] veth1_vlan: entered promiscuous mode [ 805.903499][T21215] veth0_macvtap: entered promiscuous mode [ 805.913300][T21215] veth1_macvtap: entered promiscuous mode [ 805.973257][T21215] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 806.004357][T21215] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 806.024747][T21215] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 806.078742][T21215] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 806.107259][T21215] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 806.137620][T21215] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 806.179643][T21215] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 806.204073][T21215] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 806.246661][T21215] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 806.266717][T21215] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 806.286861][T21215] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 806.298829][T21215] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 806.309485][T21215] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 806.320819][T21215] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 806.331509][T21215] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 806.340421][T21215] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 806.349330][T21215] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 806.358100][T21215] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 806.612634][ T6654] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 806.658254][ T6654] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 806.749244][ T6680] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 806.778753][ T6680] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 807.034148][T21417] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2301'. [ 807.778084][T21435] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2309'. [ 809.617993][T21467] netlink: 342 bytes leftover after parsing attributes in process `syz.6.2315'. [ 814.050674][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 814.057186][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 821.405572][T21609] FAULT_INJECTION: forcing a failure. [ 821.405572][T21609] name failslab, interval 1, probability 0, space 0, times 1 [ 821.455223][T21609] CPU: 0 UID: 0 PID: 21609 Comm: syz.6.2352 Not tainted 6.12.0-rc6-syzkaller #0 [ 821.464355][T21609] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 821.474447][T21609] Call Trace: [ 821.477760][T21609] [ 821.480721][T21609] dump_stack_lvl+0x16c/0x1f0 [ 821.485466][T21609] should_fail_ex+0x497/0x5b0 [ 821.490192][T21609] ? fs_reclaim_acquire+0xae/0x150 [ 821.495373][T21609] should_failslab+0xc2/0x120 [ 821.500128][T21609] __kmalloc_noprof+0xcb/0x410 [ 821.504953][T21609] iovec_from_user.part.0+0xf3/0x130 [ 821.510293][T21609] __import_iovec+0xd6/0x6d0 [ 821.514932][T21609] ? __lock_acquire+0xbdd/0x3ce0 [ 821.519942][T21609] import_iovec+0x108/0x140 [ 821.524503][T21609] vfs_readv+0x19b/0x890 [ 821.528786][T21609] ? find_held_lock+0x2d/0x110 [ 821.533615][T21609] ? __pfx_vfs_readv+0x10/0x10 [ 821.538419][T21609] ? find_held_lock+0x2d/0x110 [ 821.543239][T21609] ? __pfx_lock_release+0x10/0x10 [ 821.548328][T21609] ? trace_lock_acquire+0x14a/0x1d0 [ 821.553676][T21609] ? __fget_files+0x244/0x3f0 [ 821.558406][T21609] ? do_readv+0x289/0x370 [ 821.562772][T21609] do_readv+0x289/0x370 [ 821.566968][T21609] ? __pfx_do_readv+0x10/0x10 [ 821.571712][T21609] do_syscall_64+0xcd/0x250 [ 821.576265][T21609] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 821.582220][T21609] RIP: 0033:0x7ff71c37e719 [ 821.586672][T21609] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 821.606325][T21609] RSP: 002b:00007ff71d1f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000013 [ 821.614784][T21609] RAX: ffffffffffffffda RBX: 00007ff71c535f80 RCX: 00007ff71c37e719 [ 821.622794][T21609] RDX: 0000000000000009 RSI: 00000000200002c0 RDI: 0000000000000005 [ 821.630799][T21609] RBP: 00007ff71d1f6090 R08: 0000000000000000 R09: 0000000000000000 [ 821.638808][T21609] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 821.646843][T21609] R13: 0000000000000000 R14: 00007ff71c535f80 R15: 00007ffece760898 [ 821.654869][T21609] [ 825.658057][ T5862] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 825.668562][ T5862] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 825.677739][ T5862] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 825.688658][ T5862] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 825.696383][ T5862] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 825.703967][ T5862] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 827.739796][T21640] chnl_net:caif_netlink_parms(): no params data found [ 827.886759][ T5862] Bluetooth: hci4: command tx timeout [ 829.967005][ T5862] Bluetooth: hci4: command tx timeout [ 830.275923][T21640] bridge0: port 1(bridge_slave_0) entered blocking state [ 830.316870][T21640] bridge0: port 1(bridge_slave_0) entered disabled state [ 830.365840][T21640] bridge_slave_0: entered allmulticast mode [ 830.447058][T21640] bridge_slave_0: entered promiscuous mode [ 830.488966][T21640] bridge0: port 2(bridge_slave_1) entered blocking state [ 830.534658][T21640] bridge0: port 2(bridge_slave_1) entered disabled state [ 830.579183][T21640] bridge_slave_1: entered allmulticast mode [ 830.609410][T21640] bridge_slave_1: entered promiscuous mode [ 830.834363][T21640] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 830.935935][T21640] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 831.183464][T21640] team0: Port device team_slave_0 added [ 831.242321][T21640] team0: Port device team_slave_1 added [ 831.594578][T21640] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 831.630330][T21640] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 831.769000][T21640] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 831.866920][T21640] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 831.873949][T21640] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 832.047561][ T5862] Bluetooth: hci4: command tx timeout [ 832.058673][T21640] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 832.215866][T21640] hsr_slave_0: entered promiscuous mode [ 832.255857][T21640] hsr_slave_1: entered promiscuous mode [ 834.127060][ T5862] Bluetooth: hci4: command tx timeout [ 835.811313][T21640] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 835.900256][T21640] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 836.000035][T21640] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 836.130135][T21640] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 836.287549][T21640] 8021q: adding VLAN 0 to HW filter on device bond0 [ 836.309505][T21640] 8021q: adding VLAN 0 to HW filter on device team0 [ 836.393526][ T6666] bridge0: port 1(bridge_slave_0) entered blocking state [ 836.400722][ T6666] bridge0: port 1(bridge_slave_0) entered forwarding state [ 836.491788][T15283] bridge0: port 2(bridge_slave_1) entered blocking state [ 836.498974][T15283] bridge0: port 2(bridge_slave_1) entered forwarding state [ 838.112506][T21640] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 838.373008][T21640] veth0_vlan: entered promiscuous mode [ 838.447152][T21640] veth1_vlan: entered promiscuous mode [ 838.576530][T21640] veth0_macvtap: entered promiscuous mode [ 838.649608][T21640] veth1_macvtap: entered promiscuous mode [ 838.718361][T21640] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 838.756508][T21640] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 838.828075][T21640] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 838.891154][T21640] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 838.969449][T21640] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 839.031128][T21640] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 839.054708][T21640] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 839.085967][T21640] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 839.134945][T21640] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 839.232943][T21640] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 839.305415][T21640] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 839.330946][T21790] net_ratelimit: 8 callbacks suppressed [ 839.330968][T21790] netlink: zone id is out of range [ 839.356838][T21640] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 839.367723][T21790] netlink: zone id is out of range [ 839.372875][T21790] netlink: zone id is out of range [ 839.403182][T21640] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 839.414334][T21790] netlink: zone id is out of range [ 839.435473][T21790] netlink: zone id is out of range [ 839.445043][T21640] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 839.474665][T21794] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 839.487037][T21640] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 839.516823][T21790] netlink: zone id is out of range [ 839.521985][T21790] netlink: zone id is out of range [ 839.528841][T21640] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 839.574595][T21640] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 839.596119][T21790] netlink: zone id is out of range [ 839.621277][T21790] netlink: zone id is out of range [ 839.639349][T21640] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 839.775525][T21640] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 839.848019][T21640] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 839.916843][T21640] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 839.925617][T21640] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 840.468178][ T6835] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 840.476057][ T6835] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 840.702137][ T6666] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 840.755476][ T6666] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 841.496742][T21828] netlink: 342 bytes leftover after parsing attributes in process `syz.0.2357'. [ 844.200734][T20711] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 844.221172][T20711] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 844.229481][T20711] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 844.242710][T20711] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 844.250572][T20711] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 844.261953][T20711] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 845.063451][T21874] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2393'. [ 845.852022][T21885] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2394'. [ 845.878481][T21863] chnl_net:caif_netlink_parms(): no params data found [ 845.925069][T21887] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2394'. [ 846.367867][T20711] Bluetooth: hci5: command tx timeout [ 846.754006][T21863] bridge0: port 1(bridge_slave_0) entered blocking state [ 846.807812][T21863] bridge0: port 1(bridge_slave_0) entered disabled state [ 846.872784][T21863] bridge_slave_0: entered allmulticast mode [ 846.929742][T21863] bridge_slave_0: entered promiscuous mode [ 846.973142][T21863] bridge0: port 2(bridge_slave_1) entered blocking state [ 847.036764][T21863] bridge0: port 2(bridge_slave_1) entered disabled state [ 847.112574][T21863] bridge_slave_1: entered allmulticast mode [ 847.185160][T21863] bridge_slave_1: entered promiscuous mode [ 847.539102][T21863] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 847.641086][T21863] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 848.425165][T21863] team0: Port device team_slave_0 added [ 848.446936][T20711] Bluetooth: hci5: command tx timeout [ 848.481280][T21863] team0: Port device team_slave_1 added [ 850.543335][T20711] Bluetooth: hci5: command tx timeout [ 851.182509][T21863] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 851.225313][T21863] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 851.336419][T21863] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 851.688283][T21863] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 851.695319][T21863] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 851.826807][T21863] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 852.615007][T20711] Bluetooth: hci5: command tx timeout [ 853.440630][T21863] hsr_slave_0: entered promiscuous mode [ 853.573022][T21863] hsr_slave_1: entered promiscuous mode [ 853.675572][T21863] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 853.696726][T21863] Cannot create hsr debugfs directory [ 854.608614][T21997] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2406'. [ 854.707501][T22000] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2406'. [ 859.494258][T22023] delete_channel: no stack [ 859.814671][T22043] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2412'. [ 862.739514][ T6654] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 863.129339][ T6654] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 863.771267][ T6654] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 864.092452][ T6654] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 865.044348][T22106] mmap: syz.0.2423 (22106): VmData 21086208 exceed data ulimit 3. Update limits or use boot option ignore_rlimit_data. [ 865.307121][T21863] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 865.430657][T21863] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 865.577966][T21863] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 865.607833][T21863] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 866.160333][ T6654] bridge_slave_1: left allmulticast mode [ 866.166854][ T6654] bridge_slave_1: left promiscuous mode [ 866.172655][ T6654] bridge0: port 2(bridge_slave_1) entered disabled state [ 866.343165][ T6654] bridge_slave_0: left allmulticast mode [ 866.364130][ T6654] bridge_slave_0: left promiscuous mode [ 866.386247][ T6654] bridge0: port 1(bridge_slave_0) entered disabled state [ 868.575160][ T6654] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 868.666895][ T6654] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 868.701464][ T6654] bond0 (unregistering): Released all slaves [ 868.874762][ T6654] HSR: left promiscuous mode [ 869.416314][T21863] 8021q: adding VLAN 0 to HW filter on device bond0 [ 869.699569][T21863] 8021q: adding VLAN 0 to HW filter on device team0 [ 869.968121][ T6654] hsr_slave_0: left promiscuous mode [ 870.360874][ T6654] hsr_slave_1: left promiscuous mode [ 870.382006][ T6654] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 870.410757][ T6654] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 870.440253][ T6654] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 870.459887][ T6654] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 870.553526][ T6654] veth1_macvtap: left promiscuous mode [ 870.596907][ T6654] veth0_macvtap: left promiscuous mode [ 870.617617][ T6654] veth1_vlan: left promiscuous mode [ 870.639482][ T6654] veth0_vlan: left promiscuous mode [ 873.758741][ T6654] team0 (unregistering): Port device team_slave_1 removed [ 874.140972][ T6654] team0 (unregistering): Port device team_slave_0 removed [ 875.497067][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 875.503424][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 875.683837][T15279] bridge0: port 1(bridge_slave_0) entered blocking state [ 875.691038][T15279] bridge0: port 1(bridge_slave_0) entered forwarding state [ 875.760043][T15279] bridge0: port 2(bridge_slave_1) entered blocking state [ 875.767244][T15279] bridge0: port 2(bridge_slave_1) entered forwarding state [ 876.098890][T21863] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 876.711523][ T6654] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 877.782135][ T6654] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 877.956031][T21863] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 877.986269][ T5862] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 877.996201][ T5862] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 878.004724][ T5862] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 878.013614][ T5862] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 878.021846][ T5862] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 878.029635][ T5862] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 878.532038][ T6654] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 878.925246][T22270] chnl_net:caif_netlink_parms(): no params data found [ 880.136837][ T5862] Bluetooth: hci2: command tx timeout [ 880.378556][ T6654] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 880.411249][T22301] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2452'. [ 880.666924][T22270] bridge0: port 1(bridge_slave_0) entered blocking state [ 880.674073][T22270] bridge0: port 1(bridge_slave_0) entered disabled state [ 880.730476][T22270] bridge_slave_0: entered allmulticast mode [ 880.768108][T22270] bridge_slave_0: entered promiscuous mode [ 880.804685][T22270] bridge0: port 2(bridge_slave_1) entered blocking state [ 880.853806][T22270] bridge0: port 2(bridge_slave_1) entered disabled state [ 880.878535][T22270] bridge_slave_1: entered allmulticast mode [ 880.914797][T22270] bridge_slave_1: entered promiscuous mode [ 881.444598][T21863] veth0_vlan: entered promiscuous mode [ 881.571731][T22270] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 881.751439][ T6654] bridge_slave_1: left allmulticast mode [ 881.774041][ T6654] bridge_slave_1: left promiscuous mode [ 881.787488][ T6654] bridge0: port 2(bridge_slave_1) entered disabled state [ 881.830059][ T6654] bridge_slave_0: left allmulticast mode [ 881.851967][ T6654] bridge_slave_0: left promiscuous mode [ 881.878980][ T6654] bridge0: port 1(bridge_slave_0) entered disabled state [ 882.207469][ T5862] Bluetooth: hci2: command tx timeout [ 884.197258][ T6654] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 884.252952][ T6654] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 884.287456][ T5862] Bluetooth: hci2: command tx timeout [ 885.579553][ T6654] bond0 (unregistering): Released all slaves [ 885.610184][T22270] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 885.638231][T21863] veth1_vlan: entered promiscuous mode [ 886.156529][T22270] team0: Port device team_slave_0 added [ 886.260758][T22270] team0: Port device team_slave_1 added [ 886.336384][T21863] veth0_macvtap: entered promiscuous mode [ 886.376929][ T5862] Bluetooth: hci2: command tx timeout [ 886.401169][T22270] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 886.426720][T22270] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 886.626787][T22270] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 886.913848][T22270] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 886.947629][T22270] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 887.034599][T22270] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 887.117940][T21863] veth1_macvtap: entered promiscuous mode [ 887.166022][T21863] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 887.226997][T21863] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 887.266635][T21863] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 887.291148][T21863] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 887.326288][T21863] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 887.354736][T21863] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 887.416347][T21863] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 887.444697][T21863] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 887.498703][T21863] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 887.659710][T21863] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 887.686998][T21863] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 887.714296][T21863] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 887.757365][T21863] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 887.807062][T21863] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 887.841880][T21863] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 887.875473][T21863] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 887.911647][T21863] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 887.975217][T21863] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 888.112003][ T6654] hsr_slave_0: left promiscuous mode [ 888.305331][ T6654] hsr_slave_1: left promiscuous mode [ 888.332980][ T6654] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 888.346911][ T6654] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 888.378543][ T6654] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 888.386011][ T6654] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 888.445962][ T6654] veth1_macvtap: left promiscuous mode [ 888.503162][ T6654] veth0_macvtap: left promiscuous mode [ 888.508935][ T6654] veth1_vlan: left promiscuous mode [ 888.514249][ T6654] veth0_vlan: left promiscuous mode [ 891.491406][ T6654] team0 (unregistering): Port device team_slave_1 removed [ 891.665859][ T6654] team0 (unregistering): Port device team_slave_0 removed [ 892.983425][T22270] hsr_slave_0: entered promiscuous mode [ 893.041811][T22270] hsr_slave_1: entered promiscuous mode [ 893.061593][T21863] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 893.095467][T21863] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 893.123104][T21863] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 893.146747][T21863] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 893.200156][T22465] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 893.366669][T22465] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 894.103227][T12899] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 894.136602][T12899] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 894.550753][T15283] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 894.586144][T15283] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 895.759339][T22270] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 895.826386][T22270] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 895.859442][T22270] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 895.908328][T22270] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 896.586320][T22270] 8021q: adding VLAN 0 to HW filter on device bond0 [ 896.848307][T22270] 8021q: adding VLAN 0 to HW filter on device team0 [ 896.890330][ T6654] bridge0: port 1(bridge_slave_0) entered blocking state [ 896.897578][ T6654] bridge0: port 1(bridge_slave_0) entered forwarding state [ 896.930057][ T6654] bridge0: port 2(bridge_slave_1) entered blocking state [ 896.937237][ T6654] bridge0: port 2(bridge_slave_1) entered forwarding state [ 899.309637][T22270] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 899.808710][T22270] veth0_vlan: entered promiscuous mode [ 899.891185][T22270] veth1_vlan: entered promiscuous mode [ 900.011906][T22270] veth0_macvtap: entered promiscuous mode [ 900.057181][T22270] veth1_macvtap: entered promiscuous mode [ 900.156952][T22270] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 900.216611][T22270] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 900.287009][T22270] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 900.336782][T22270] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 900.380944][T22270] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 900.416610][T22270] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 900.470172][T22270] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 900.502747][T22270] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 900.548218][T22270] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 900.609464][T22270] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 900.654227][T22270] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 900.695365][T22270] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 900.746758][T22270] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 900.793551][T22270] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 900.849264][T22270] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 900.927239][T22270] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 900.976889][T22270] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 901.020585][T22270] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 901.246557][T22270] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 901.306253][T22270] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 901.359165][T22270] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 901.391797][T22270] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 901.708539][ T6680] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 901.716422][ T6680] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 901.858461][T13420] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 901.884312][T13420] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 909.016733][T15287] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 909.214224][T15287] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 909.505960][T20711] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 909.517282][T20711] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 909.527898][T20711] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 909.536104][T20711] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 909.543991][T20711] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 909.552486][T20711] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 909.744380][T15287] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 910.090418][T15287] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 910.464636][T22693] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2504'. [ 910.916902][T15287] bridge_slave_1: left allmulticast mode [ 910.926631][T15287] bridge_slave_1: left promiscuous mode [ 910.944193][T15287] bridge0: port 2(bridge_slave_1) entered disabled state [ 911.083448][T15287] bridge_slave_0: left allmulticast mode [ 911.139506][T15287] bridge_slave_0: left promiscuous mode [ 911.170465][T15287] bridge0: port 1(bridge_slave_0) entered disabled state [ 911.657862][ T5862] Bluetooth: hci4: command tx timeout [ 913.407246][ T5862] Bluetooth: hci0: command 0x0406 tx timeout [ 913.737073][ T5862] Bluetooth: hci4: command tx timeout [ 914.325226][T15287] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 914.417390][T15287] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 914.459530][T15287] bond0 (unregistering): Released all slaves [ 914.857672][T22669] chnl_net:caif_netlink_parms(): no params data found [ 915.812005][T20711] Bluetooth: hci4: command tx timeout [ 916.729225][T22773] Process accounting resumed [ 917.886935][T20711] Bluetooth: hci4: command tx timeout [ 918.807607][T22669] bridge0: port 1(bridge_slave_0) entered blocking state [ 918.847974][T22669] bridge0: port 1(bridge_slave_0) entered disabled state [ 918.876822][T22669] bridge_slave_0: entered allmulticast mode [ 918.895603][T22669] bridge_slave_0: entered promiscuous mode [ 919.054169][T15287] hsr_slave_0: left promiscuous mode [ 919.070560][T15287] hsr_slave_1: left promiscuous mode [ 919.097101][T15287] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 919.104556][T15287] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 919.153914][T15287] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 919.188321][T15287] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 919.307878][T15287] veth1_macvtap: left promiscuous mode [ 919.356849][T15287] veth0_macvtap: left promiscuous mode [ 919.378795][T15287] veth1_vlan: left promiscuous mode [ 919.404663][T15287] veth0_vlan: left promiscuous mode [ 922.159174][T15287] team0 (unregistering): Port device team_slave_1 removed [ 922.349288][T15287] team0 (unregistering): Port device team_slave_0 removed [ 925.975297][T22669] bridge0: port 2(bridge_slave_1) entered blocking state [ 925.986273][T22669] bridge0: port 2(bridge_slave_1) entered disabled state [ 926.050531][T22669] bridge_slave_1: entered allmulticast mode [ 926.092287][T22669] bridge_slave_1: entered promiscuous mode [ 926.721551][T22669] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 926.751808][T22669] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 927.738626][T22891] netlink: 2 bytes leftover after parsing attributes in process `syz.5.2535'. [ 928.035764][T22669] team0: Port device team_slave_0 added [ 928.097614][T22669] team0: Port device team_slave_1 added [ 928.290856][T22669] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 928.325041][T22669] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 928.401293][T22669] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 928.446823][T22669] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 928.490476][T22669] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 928.602476][T22669] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 928.620972][T22904] nbd: must specify at least one socket [ 930.105558][T22669] hsr_slave_0: entered promiscuous mode [ 930.872987][T22669] hsr_slave_1: entered promiscuous mode [ 930.956903][T22669] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 930.964539][T22669] Cannot create hsr debugfs directory [ 932.897433][ T5862] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 932.908014][ T5862] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 932.915920][ T5862] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 932.924736][ T5862] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 932.933556][ T5862] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 932.941166][ T5862] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 934.302908][T23009] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2545'. [ 934.844258][T15282] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 934.985298][T23009] HfR: entered promiscuous mode [ 935.007607][ T5862] Bluetooth: hci5: command tx timeout [ 936.198677][T15282] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 936.596124][T15282] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 936.930415][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 936.936866][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 937.096625][T20711] Bluetooth: hci5: command tx timeout [ 937.407057][T23050] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2551'. [ 939.167259][T20711] Bluetooth: hci5: command tx timeout [ 939.707001][T15282] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 939.840333][T22669] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 939.911302][T22669] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 940.023265][T22669] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 940.108712][T22669] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 940.206278][T22976] chnl_net:caif_netlink_parms(): no params data found [ 940.431402][T15282] bridge_slave_1: left allmulticast mode [ 940.449761][T15282] bridge_slave_1: left promiscuous mode [ 940.455545][T15282] bridge0: port 2(bridge_slave_1) entered disabled state [ 940.505335][T15282] bridge_slave_0: left allmulticast mode [ 940.513881][T15282] bridge_slave_0: left promiscuous mode [ 940.548091][T15282] bridge0: port 1(bridge_slave_0) entered disabled state [ 941.257343][T20711] Bluetooth: hci5: command tx timeout [ 942.101232][T15282] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 942.137834][T15282] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 942.173423][T15282] bond0 (unregistering): Released all slaves [ 942.293921][T22669] 8021q: adding VLAN 0 to HW filter on device bond0 [ 942.311048][T22669] 8021q: adding VLAN 0 to HW filter on device team0 [ 942.345996][T22669] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 942.356515][T22669] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 942.765992][T12905] bridge0: port 1(bridge_slave_0) entered blocking state [ 942.773194][T12905] bridge0: port 1(bridge_slave_0) entered forwarding state [ 942.805763][T12905] bridge0: port 2(bridge_slave_1) entered blocking state [ 942.812959][T12905] bridge0: port 2(bridge_slave_1) entered forwarding state [ 943.073050][T22976] bridge0: port 1(bridge_slave_0) entered blocking state [ 943.148283][T22976] bridge0: port 1(bridge_slave_0) entered disabled state [ 943.185557][T22976] bridge_slave_0: entered allmulticast mode [ 943.222868][T22976] bridge_slave_0: entered promiscuous mode [ 943.345789][T22976] bridge0: port 2(bridge_slave_1) entered blocking state [ 943.387786][T22976] bridge0: port 2(bridge_slave_1) entered disabled state [ 943.425105][T22976] bridge_slave_1: entered allmulticast mode [ 943.477378][T22976] bridge_slave_1: entered promiscuous mode [ 944.260688][T22976] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 944.651117][T22976] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 944.814118][T22669] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 945.049187][T15282] hsr_slave_0: left promiscuous mode [ 945.076482][T15282] hsr_slave_1: left promiscuous mode [ 945.128323][T15282] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 945.135805][T15282] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 945.177917][T15282] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 945.185402][T15282] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 945.714389][T15282] veth1_macvtap: left promiscuous mode [ 945.748853][T15282] veth0_macvtap: left promiscuous mode [ 945.769253][T15282] veth1_vlan: left promiscuous mode [ 945.774724][T15282] veth0_vlan: left promiscuous mode [ 947.856488][T15282] team0 (unregistering): Port device team_slave_1 removed [ 947.943146][T15282] team0 (unregistering): Port device team_slave_0 removed [ 948.967124][T22976] team0: Port device team_slave_0 added [ 948.991837][T22976] team0: Port device team_slave_1 added [ 949.185233][T22976] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 949.216806][T22976] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 949.314643][T22976] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 949.349586][T22976] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 949.383838][T22976] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 949.527023][T22976] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 950.008537][T22976] hsr_slave_0: entered promiscuous mode [ 950.093391][T22976] hsr_slave_1: entered promiscuous mode [ 950.268949][T22669] veth0_vlan: entered promiscuous mode [ 950.397433][T22669] veth1_vlan: entered promiscuous mode [ 950.697375][ T6685] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 950.968533][ T5862] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 950.979564][ T5862] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 951.007240][ T5862] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 951.015902][ T5862] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 951.084333][ T5862] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 951.096920][ T5862] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 951.414235][ T6685] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 951.474754][T22669] veth0_macvtap: entered promiscuous mode [ 951.898931][ T6685] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 951.955902][T22669] veth1_macvtap: entered promiscuous mode [ 952.508033][ T6685] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 952.585675][T22669] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 952.646978][T22669] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 952.694890][T22669] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 952.753114][T22669] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 952.794608][T22669] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 952.841199][T22669] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 952.878617][T22669] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 953.166843][T20711] Bluetooth: hci1: command tx timeout [ 953.218850][T22669] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 953.235816][T22669] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 953.246333][T22669] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 953.271262][T22669] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 953.292225][T22669] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 953.334118][T22669] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 953.346250][T22669] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 953.636383][T22669] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 953.647007][T22669] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 953.655754][T22669] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 953.698487][T22669] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 954.001276][T23202] chnl_net:caif_netlink_parms(): no params data found [ 954.038943][ T6685] bridge_slave_1: left promiscuous mode [ 954.044745][ T6685] bridge0: port 2(bridge_slave_1) entered disabled state [ 954.117680][ T6685] bridge_slave_0: left allmulticast mode [ 954.123401][ T6685] bridge_slave_0: left promiscuous mode [ 954.145137][ T6685] bridge0: port 1(bridge_slave_0) entered disabled state [ 954.778382][ T6685] gre0 (unregistering): left allmulticast mode [ 955.256910][T20711] Bluetooth: hci1: command tx timeout [ 955.442142][ T6685] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 955.461961][ T6685] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 955.490063][ T6685] bond0 (unregistering): Released all slaves [ 956.195571][T12906] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 956.236688][T12906] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 956.290392][T22976] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 956.350968][T22976] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 956.520204][T22976] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 956.549304][T22976] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 956.600699][T12899] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 956.626724][T12899] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 956.640600][ T6685] hsr_slave_0: left promiscuous mode [ 956.656187][ T6685] hsr_slave_1: left promiscuous mode [ 956.673345][ T6685] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 956.705976][ T6685] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 956.777417][ T6685] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 956.796641][ T6685] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 956.855540][ T6685] veth1_macvtap: left promiscuous mode [ 956.883558][ T6685] veth0_macvtap: left promiscuous mode [ 956.906970][ T6685] veth1_vlan: left promiscuous mode [ 956.912343][ T6685] veth0_vlan: left promiscuous mode [ 957.346886][T20711] Bluetooth: hci1: command tx timeout [ 959.019681][ T6685] team0 (unregistering): Port device team_slave_1 removed [ 959.183270][ T6685] team0 (unregistering): Port device team_slave_0 removed [ 959.417281][T20711] Bluetooth: hci1: command tx timeout [ 960.497212][T23202] bridge0: port 1(bridge_slave_0) entered blocking state [ 960.523663][T23202] bridge0: port 1(bridge_slave_0) entered disabled state [ 960.556830][T23202] bridge_slave_0: entered allmulticast mode [ 960.565784][T23202] bridge_slave_0: entered promiscuous mode [ 960.582512][T23202] bridge0: port 2(bridge_slave_1) entered blocking state [ 960.592466][T23202] bridge0: port 2(bridge_slave_1) entered disabled state [ 960.606513][T23202] bridge_slave_1: entered allmulticast mode [ 960.615889][T23202] bridge_slave_1: entered promiscuous mode [ 960.824967][T23202] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 960.858129][T23202] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 961.132041][T23202] team0: Port device team_slave_0 added [ 961.180194][T23202] team0: Port device team_slave_1 added [ 961.380403][T23202] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 961.396609][T23202] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 961.476850][T23202] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 961.537511][T23202] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 961.544546][T23202] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 961.616650][T23202] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 962.013504][T22976] 8021q: adding VLAN 0 to HW filter on device bond0 [ 962.096021][T22976] 8021q: adding VLAN 0 to HW filter on device team0 [ 962.233656][T23202] hsr_slave_0: entered promiscuous mode [ 962.266155][T23202] hsr_slave_1: entered promiscuous mode [ 962.319739][T23202] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 962.334347][T23202] Cannot create hsr debugfs directory [ 962.428820][T12899] bridge0: port 1(bridge_slave_0) entered blocking state [ 962.436013][T12899] bridge0: port 1(bridge_slave_0) entered forwarding state [ 962.494453][T12899] bridge0: port 2(bridge_slave_1) entered blocking state [ 962.501639][T12899] bridge0: port 2(bridge_slave_1) entered forwarding state [ 962.527211][ T30] INFO: task syz.1.2314:21472 blocked for more than 143 seconds. [ 962.535271][ T30] Not tainted 6.12.0-rc6-syzkaller #0 [ 962.566646][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 962.646578][ T30] task:syz.1.2314 state:D stack:27696 pid:21472 tgid:21471 ppid:18519 flags:0x00000004 [ 962.687479][ T30] Call Trace: [ 962.690832][ T30] [ 962.693806][ T30] __schedule+0xe55/0x5740 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 962.728340][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 962.786695][ T30] ? __pfx___schedule+0x10/0x10 [ 962.791646][ T30] ? schedule+0x298/0x350 [ 962.796033][ T30] ? __pfx_lock_release+0x10/0x10 [ 962.830365][ T30] ? trace_lock_acquire+0x14a/0x1d0 [ 962.869153][ T30] ? lock_acquire+0x2f/0xb0 [ 962.876845][ T30] ? schedule+0x1fd/0x350 [ 962.881256][ T30] schedule+0xe7/0x350 [ 962.927518][ T30] schedule_timeout+0x258/0x2a0 [ 962.932482][ T30] ? __pfx_schedule_timeout+0x10/0x10 [ 962.985262][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 963.013379][ T30] __wait_for_common+0x3e1/0x600 [ 963.036964][ T30] ? __pfx_schedule_timeout+0x10/0x10 [ 963.042432][ T30] ? __pfx___wait_for_common+0x10/0x10 [ 963.096586][ T30] ? __pfx_try_to_wake_up+0x10/0x10 [ 963.101907][ T30] wait_for_completion_state+0x1c/0x40 [ 963.140947][ T30] do_coredump+0x82f/0x4160 [ 963.145542][ T30] ? hlock_class+0x4e/0x130 [ 963.186671][ T30] ? stack_depot_save_flags+0x28/0x900 [ 963.206692][ T30] ? __pfx_do_coredump+0x10/0x10 [ 963.211737][ T30] ? kmem_cache_free+0x152/0x4b0 [ 963.252770][ T30] ? syscall_exit_to_user_mode+0x150/0x2a0 [ 963.293840][ T30] ? do_syscall_64+0xda/0x250 [ 963.312687][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 963.333153][ T30] get_signal+0x237c/0x26d0 [ 963.386630][ T30] ? lockdep_hardirqs_on+0x7c/0x110 [ 963.391973][ T30] ? __pfx_get_signal+0x10/0x10 [ 963.432734][ T30] ? force_sig_info_to_task+0x3a0/0x660 [ 963.477011][ T30] arch_do_signal_or_restart+0x90/0x7e0 [ 963.482656][ T30] ? __pfx_force_exit_sig+0x10/0x10 [ 963.499217][ T30] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 963.505493][ T30] syscall_exit_to_user_mode+0x150/0x2a0 [ 963.521850][ T30] do_syscall_64+0xda/0x250 [ 963.526449][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 963.562574][ T30] RIP: 0033:0x7f30b01804e4 [ 963.576059][ T30] RSP: 002b:00007f30b1054ed0 EFLAGS: 00000246 ORIG_RAX: 000000000000002d [ 963.606656][ T30] RAX: ffffffffffffffda RBX: 00007f30b1054fc0 RCX: 00007f30b01804e4 [ 963.614701][ T30] RDX: 0000000000001000 RSI: 00007f30b1055010 RDI: 0000000000000004 [ 963.659088][ T30] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 963.686668][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 963.694711][ T30] R13: 00007f30b1054f68 R14: 00007f30b1055010 R15: 0000000000000000 [ 963.734964][ T30] [ 963.746750][ T30] [ 963.746750][ T30] Showing all locks held in the system: [ 963.754515][ T30] 3 locks held by kworker/0:1/9: [ 963.759628][ T30] #0: ffff88801ac80948 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x1212/0x1b30 [ 963.776753][ T30] #1: ffffc900000e7d80 ((fqdir_free_work).work){+.+.}-{0:0}, at: process_one_work+0x8bb/0x1b30 [ 963.796684][ T30] #2: ffffffff8ddc2fc0 (rcu_state.barrier_mutex){+.+.}-{3:3}, at: rcu_barrier+0x48/0x700 [ 963.807368][ T30] 1 lock held by khungtaskd/30: [ 963.812259][ T30] #0: ffffffff8ddb7800 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x7f/0x390 [ 963.829504][ T30] 2 locks held by dhcpcd/5511: [ 963.834316][ T30] #0: ffffffff8fa9a428 (vlan_ioctl_mutex){+.+.}-{3:3}, at: sock_ioctl+0x4a2/0x6c0 [ 963.843961][ T30] #1: ffffffff8fac5328 (rtnl_mutex){+.+.}-{3:3}, at: vlan_ioctl_handler+0xcf/0xa80 [ 963.853554][ T30] 2 locks held by getty/5606: [ 963.858420][ T30] #0: ffff8880318a10a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 963.868334][ T30] #1: ffffc900032532f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0xfba/0x1480 [ 963.878623][ T30] 3 locks held by kworker/1:3/5888: [ 963.883863][ T30] #0: ffff88801ac80948 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x1212/0x1b30 [ 963.894536][ T30] #1: ffffc900043ffd80 (deferred_process_work){+.+.}-{0:0}, at: process_one_work+0x8bb/0x1b30 [ 963.905073][ T30] #2: ffffffff8fac5328 (rtnl_mutex){+.+.}-{3:3}, at: switchdev_deferred_process_work+0xe/0x20 [ 963.915605][ T30] 6 locks held by kworker/u8:32/6685: [ 963.921053][ T30] 3 locks held by kworker/u8:7/12906: [ 963.926459][ T30] #0: ffff88801ac89148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x1212/0x1b30 [ 963.937829][ T30] #1: ffffc9000356fd80 ((linkwatch_work).work){+.+.}-{0:0}, at: process_one_work+0x8bb/0x1b30 [ 963.948425][ T30] #2: ffffffff8fac5328 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0x51/0xc0 [ 963.957710][ T30] 3 locks held by kworker/u8:23/15287: [ 963.963207][ T30] #0: ffff88814cef2148 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work+0x1212/0x1b30 [ 963.974473][ T30] #1: ffffc90004cd7d80 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_one_work+0x8bb/0x1b30 [ 963.986836][ T30] #2: ffffffff8fac5328 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_dad_work+0xcf/0x14d0 [ 963.996340][ T30] 1 lock held by syz.1.2314/21474: [ 964.001555][ T30] 4 locks held by syz-executor/22669: [ 964.007055][ T30] 1 lock held by syz-executor/22976: [ 964.012373][ T30] #0: ffffffff8fac5328 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x372/0xea0 [ 964.021973][ T30] 1 lock held by syz-executor/23202: [ 964.027341][ T30] #0: ffffffff8fac5328 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x372/0xea0 [ 964.036914][ T30] 2 locks held by syz.6.2581/23293: [ 964.042151][ T30] 2 locks held by syz.6.2581/23295: [ 964.047612][ T30] 2 locks held by syz.8.2584/23309: [ 964.052853][ T30] 2 locks held by syz.6.2585/23314: [ 964.058173][ T30] [ 964.060541][ T30] ============================================= [ 964.060541][ T30] [ 964.069047][ T30] NMI backtrace for cpu 1 [ 964.073411][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.12.0-rc6-syzkaller #0 [ 964.082305][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 964.092399][ T30] Call Trace: [ 964.095707][ T30] [ 964.098671][ T30] dump_stack_lvl+0x116/0x1f0 [ 964.103388][ T30] nmi_cpu_backtrace+0x27b/0x390 [ 964.108371][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 964.114400][ T30] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 964.120434][ T30] watchdog+0xf0c/0x1240 [ 964.124737][ T30] ? __pfx_watchdog+0x10/0x10 [ 964.129458][ T30] ? lockdep_hardirqs_on+0x7c/0x110 [ 964.134724][ T30] ? __kthread_parkme+0x148/0x220 [ 964.139783][ T30] ? __pfx_watchdog+0x10/0x10 [ 964.144505][ T30] kthread+0x2c1/0x3a0 [ 964.148608][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 964.153846][ T30] ? __pfx_kthread+0x10/0x10 [ 964.158488][ T30] ret_from_fork+0x45/0x80 [ 964.162937][ T30] ? __pfx_kthread+0x10/0x10 [ 964.167563][ T30] ret_from_fork_asm+0x1a/0x30 [ 964.172383][ T30] [ 964.175844][ T30] Sending NMI from CPU 1 to CPUs 0: [ 964.181209][ C0] NMI backtrace for cpu 0 [ 964.181223][ C0] CPU: 0 UID: 0 PID: 21474 Comm: syz.1.2314 Not tainted 6.12.0-rc6-syzkaller #0 [ 964.181253][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 964.181268][ C0] RIP: 0010:sha256_transform_rorx+0x4c4/0x1120 [ 964.181301][ C0] Code: 7b f0 e9 19 c4 43 7b f0 f1 0b 03 44 3c 2c 44 09 c6 c5 a5 72 d2 0a 45 89 d7 c4 63 7b f0 e3 0d 45 31 f5 45 31 df c5 e5 73 d2 13 43 7b f0 f1 06 45 21 cf 01 c2 21 ce c5 ed 73 d2 11 45 31 f5 45 [ 964.181326][ C0] RSP: 0018:ffffc90011717200 EFLAGS: 00000286 [ 964.181346][ C0] RAX: 0000000064dfbed6 RBX: 00000000b236094f RCX: 000000007756c27b [ 964.181363][ C0] RDX: 000000004949e123 RSI: 00000000f33ebd7f RDI: 0000000000000100 [ 964.181380][ C0] RBP: ffffc90011717420 R08: 00000000631ebd3b R09: 0000000074a0b75b [ 964.181397][ C0] R10: 000000008c491d8d R11: 000000002d3e0424 R12: 000000004a7d91b0 [ 964.181414][ C0] R13: 00000000bb3539ac R14: 00000000eb6e9416 R15: 00000000a17719a9 [ 964.181431][ C0] FS: 00007f30b10356c0(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 964.181457][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 964.181475][ C0] CR2: 000055c61a7cd018 CR3: 0000000046130000 CR4: 00000000003526f0 [ 964.181492][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 964.181507][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 964.181523][ C0] Call Trace: [ 964.181530][ C0] [ 964.181539][ C0] ? nmi_cpu_backtrace+0x1d8/0x390 [ 964.181577][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 964.181615][ C0] ? nmi_handle+0x1a9/0x5c0 [ 964.181642][ C0] ? sha256_transform_rorx+0x4c4/0x1120 [ 964.181688][ C0] ? default_do_nmi+0x6a/0x160 [ 964.181721][ C0] ? exc_nmi+0x170/0x1e0 [ 964.181752][ C0] ? end_repeat_nmi+0xf/0x53 [ 964.181782][ C0] ? sha256_transform_rorx+0x4c4/0x1120 [ 964.181811][ C0] ? sha256_transform_rorx+0x4c4/0x1120 [ 964.181840][ C0] ? sha256_transform_rorx+0x4c4/0x1120 [ 964.181868][ C0] [ 964.181876][ C0] [ 964.181907][ C0] ? integrity_kernel_read+0x7f/0xb0 [ 964.181951][ C0] _sha256_update+0x17e/0x220 [ 964.181979][ C0] ? __pfx_sha256_transform_rorx+0x10/0x10 [ 964.182016][ C0] ima_calc_file_hash_tfm+0x302/0x3e0 [ 964.182050][ C0] ? __pfx_ima_calc_file_hash_tfm+0x10/0x10 [ 964.182101][ C0] ? hlock_class+0x4e/0x130 [ 964.182131][ C0] ? ima_alloc_tfm+0x21d/0x2d0 [ 964.182161][ C0] ? generic_fillattr+0x663/0x8c0 [ 964.182197][ C0] ima_calc_file_hash+0x1ba/0x490 [ 964.182231][ C0] ima_collect_measurement+0x8a7/0xa10 [ 964.182266][ C0] ? process_measurement+0x70a/0x2370 [ 964.182299][ C0] ? __pfx_ima_collect_measurement+0x10/0x10 [ 964.182334][ C0] ? lock_acquire.part.0+0x11b/0x380 [ 964.182382][ C0] ? rcu_is_watching+0x12/0xc0 [ 964.182410][ C0] ? trace_contention_end+0xea/0x140 [ 964.182450][ C0] ? is_bad_inode+0xd/0x40 [ 964.182489][ C0] ? xattr_resolve_name+0x27b/0x3f0 [ 964.182531][ C0] ? vfs_getxattr_alloc+0xf1/0x340 [ 964.182558][ C0] ? ima_get_hash_algo+0x27d/0x410 [ 964.182584][ C0] ? __pfx_ima_get_hash_algo+0x10/0x10 [ 964.182615][ C0] ? process_measurement+0x1271/0x2370 [ 964.182644][ C0] process_measurement+0x1271/0x2370 [ 964.182679][ C0] ? __pfx_process_measurement+0x10/0x10 [ 964.182708][ C0] ? kasan_save_track+0x14/0x30 [ 964.182745][ C0] ? find_held_lock+0x2d/0x110 [ 964.182776][ C0] ? aa_file_perm+0x4c6/0xfe0 [ 964.182803][ C0] ? __pfx_lock_release+0x10/0x10 [ 964.182840][ C0] ? trace_lock_acquire+0x14a/0x1d0 [ 964.182881][ C0] ? __pfx_aa_file_perm+0x10/0x10 [ 964.182910][ C0] ? lockdep_init_map_type+0x16d/0x7d0 [ 964.182952][ C0] ima_file_mmap+0x1b1/0x1d0 [ 964.182981][ C0] ? __pfx_ima_file_mmap+0x10/0x10 [ 964.183020][ C0] security_mmap_file+0x8bd/0x990 [ 964.183048][ C0] vm_mmap_pgoff+0xdb/0x360 [ 964.183088][ C0] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 964.183125][ C0] ? hugetlbfs_get_inode+0x32d/0x530 [ 964.183171][ C0] ksys_mmap_pgoff+0x1c8/0x5c0 [ 964.183206][ C0] __x64_sys_mmap+0x125/0x190 [ 964.183234][ C0] do_syscall_64+0xcd/0x250 [ 964.183262][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 964.183302][ C0] RIP: 0033:0x7f30b017e719 [ 964.183321][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 964.183346][ C0] RSP: 002b:00007f30b1035038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 964.183382][ C0] RAX: ffffffffffffffda RBX: 00007f30b0336058 RCX: 00007f30b017e719 [ 964.183400][ C0] RDX: 00004000000000df RSI: 0008000000000004 RDI: 0000000000000000 [ 964.183417][ C0] RBP: 00007f30b01f139e R08: 0000000000000402 R09: 0000300000000000 [ 964.183433][ C0] R10: 0000000000040eb2 R11: 0000000000000246 R12: 0000000000000000 [ 964.183449][ C0] R13: 0000000000000000 R14: 00007f30b0336058 R15: 00007ffd07827238 [ 964.183473][ C0] [ 964.184218][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 964.668532][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.12.0-rc6-syzkaller #0 [ 964.677327][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 964.687403][ T30] Call Trace: [ 964.690697][ T30] [ 964.693647][ T30] dump_stack_lvl+0x3d/0x1f0 [ 964.698266][ T30] panic+0x71d/0x800 [ 964.702197][ T30] ? __pfx_panic+0x10/0x10 [ 964.706656][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 964.712070][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 964.718091][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 964.723494][ T30] ? watchdog+0xd76/0x1240 [ 964.727977][ T30] ? watchdog+0xd69/0x1240 [ 964.732439][ T30] watchdog+0xd87/0x1240 [ 964.736725][ T30] ? __pfx_watchdog+0x10/0x10 [ 964.741439][ T30] ? lockdep_hardirqs_on+0x7c/0x110 [ 964.746694][ T30] ? __kthread_parkme+0x148/0x220 [ 964.751763][ T30] ? __pfx_watchdog+0x10/0x10 [ 964.756509][ T30] kthread+0x2c1/0x3a0 [ 964.760619][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 964.765885][ T30] ? __pfx_kthread+0x10/0x10 [ 964.770528][ T30] ret_from_fork+0x45/0x80 [ 964.774975][ T30] ? __pfx_kthread+0x10/0x10 [ 964.779596][ T30] ret_from_fork_asm+0x1a/0x30 [ 964.784412][ T30] [ 964.787793][ T30] Kernel Offset: disabled [ 964.792132][ T30] Rebooting in 86400 seconds..