last executing test programs: 5.730165835s ago: executing program 3 (id=11): mmap$auto(0x0, 0x8, 0x1000000004, 0x9b72, 0x2, 0x8000) socket(0xa, 0x3, 0x6) socket(0x2b, 0x1, 0x1) semctl$auto(0x1ff, 0x2, 0x10000000013, 0x0) socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0x8, 0x1000000004, 0x9b72, 0x2, 0x8000) read$auto(0x3, 0x6, 0x4c0) socket$nl_generic(0x10, 0x3, 0x10) clone$auto(0x3b46, 0x6, 0x20000048, 0x0, 0x10) socket$nl_generic(0x10, 0x3, 0x10) ftruncate$auto(0x6, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) dup3$auto(0x8000000000000001, 0x5, 0x800000000) write$auto(0x5, 0x800, 0x80000001) fcntl$auto(0x0, 0x407, 0x100000) 4.658129263s ago: executing program 3 (id=17): r0 = open(&(0x7f0000000000)='./file0\x00', 0xc0, 0x2) setregid$auto(0x9, 0x7fffffffffffffff) close_range$auto(0x0, 0xfffffffffffff000, 0x2) bpf$auto(0xf, 0x5, 0x0) keyctl$auto(0x4, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0, 0x6) open(&(0x7f0000000000)='./file0\x00', 0x40440, 0x40) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), r0) 3.952089239s ago: executing program 3 (id=22): mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) unshare$auto(0x200) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/mnt\x00') setns(r0, 0x0) clone$auto(0xfffffffe00000, 0x5, 0x641f4af7, 0x2, 0x4) semctl$auto(0x1ff, 0x2, 0x13, 0x4) migrate_pages$auto(0x1, 0xc, 0x9, 0x7) r1 = socket(0x2, 0x3, 0x2) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) socket$nl_generic(0x10, 0x3, 0x10) madvise$auto(0x6, 0x4080000020, 0x17) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0xa, 0x5, 0x0) sync$auto() semctl$auto(0x1ff, 0x100000001, 0x13, 0x9) r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), r1) sendmsg$auto_NL80211_CMD_NEW_KEY256(r2, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000200)={&(0x7f0000000080)={0x140, r3, 0x800, 0x70bd27, 0x25dfdbfc, {}, [@NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, 0x1}, @NL80211_ATTR_WIPHY_DYN_ACK={0x4}, @NL80211_ATTR_KEY_SEQ={0xc, 0xa, "69284a8af9672775"}, @NL80211_ATTR_SCAN_SSIDS={0x109, 0x2d, "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"}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}]}, 0x140}, 0x1, 0x0, 0x0, 0x40}, 0x0) open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) getsockopt$auto(0x7f, 0x40, 0x1, 0x7f86, 0x2) mprotect$auto(0x8000000000000000, 0x1, 0x80) ioctl$sock_SIOCGIFINDEX(r1, 0x401c5820, 0x0) 2.819922518s ago: executing program 0 (id=28): r0 = socket(0x10, 0x2, 0x0) r1 = syz_genetlink_get_family_id$auto_TIPCv2(&(0x7f00000002c0), 0xffffffffffffffff) mmap$auto(0x0, 0x8, 0x1000000004, 0x9b72, 0x2, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x5, 0x0) socket(0x2, 0x6, 0x0) listen$auto(0x3, 0x81) close_range$auto(0x2, 0x8000, 0x0) getsockopt$auto(0x6, 0x40000000084, 0x20, 0x9, 0x6) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) mincore$auto(0x0, 0x81, 0x8) sendmsg$auto_TIPC_NL_BEARER_SET438(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)={0x14, r1, 0x3, 0x70bd2b, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x2000c000}, 0x20000800) 2.584723295s ago: executing program 3 (id=29): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) socket(0x26, 0x0, 0x5) (async) r1 = syz_genetlink_get_family_id$auto_MAC80211_HWSIM(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_NEW_RADIO79(r0, &(0x7f0000000100)={0x0, 0xfffffc34, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, r1, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@HWSIM_ATTR_RADIO_NAME={0x13, 0x11, 'MAC80211_HWSIM\x00'}, @HWSIM_ATTR_REG_HINT_ALPHA2={0x5, 0xb, '*'}]}, 0x30}, 0x1, 0x0, 0x0, 0x20044003}, 0x48014) 2.381353112s ago: executing program 0 (id=30): r0 = socket(0x10, 0x2, 0x0) r1 = syz_genetlink_get_family_id$auto_TIPCv2(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$auto_TIPC_NL_BEARER_SET438(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)={0x14, r1, 0x3, 0x70bd2b, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x2000c000}, 0x20000800) 2.380786552s ago: executing program 2 (id=31): r0 = socket(0x10, 0x2, 0x0) r1 = syz_genetlink_get_family_id$auto_TIPCv2(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$auto_TIPC_NL_BEARER_SET438(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)={0x14, r1, 0x3, 0x70bd2b, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x2000c000}, 0x20000800) (fail_nth: 1) 2.233635017s ago: executing program 1 (id=32): mmap$auto(0x0, 0x8, 0x2, 0xff0, 0x2, 0xff) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) mincore$auto(0x0, 0x8000000000005b, 0x2) (async) mknod$auto(0x2, 0x3, 0x2) (async, rerun: 32) mknod$auto(0x2, 0x3, 0x2) (async, rerun: 32) close_range$auto(0x7d, 0x5, 0xffffffefefffffff) (async) getxattr$auto(0x5, 0x4, 0x4, 0xfffffffffffffff7) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ovs_meter(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_OVS_METER_CMD_SET393(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r1, 0x2, 0x70bd29, 0x25dfdbfd, {}, [@OVS_METER_ATTR_ID={0x8, 0x1, 0x7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004000}, 0x4000) mmap$auto(0x4, 0x9, 0xffffffffffffb0ad, 0x1f, 0x2, 0x6) io_uring_setup$auto(0xffffffff00000001, 0x10) (async) socket(0x1, 0x1, 0x1) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00') r2 = socket(0x2, 0x1, 0x106) sendmsg$auto_BATADV_CMD_GET_ORIGINATORS9(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x2004c810) shutdown$auto(0x5, 0x2) (async) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) (async) connect$auto(0x5, 0x11, 0x36) (async) ioperm$auto(0x7b, 0x6, 0x2) (async, rerun: 64) open(&(0x7f0000000140)='./file0\x00', 0xc2800, 0x50) (async, rerun: 64) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) (async) faccessat$auto(0x0, 0x80, 0x4) close_range$auto(0x7fffffff, 0x9, 0x2) (async) sync$auto() (async, rerun: 32) memfd_create$auto(0x1ff, 0x400) (rerun: 32) 2.204056048s ago: executing program 0 (id=33): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = open(&(0x7f0000000100)='.\x00', 0x591002, 0x408) setgid$auto(0x7) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) mremap$auto(0x0, 0x2, 0x3fd6, 0x3, 0x7fffffffb000) mmap$auto(0x0, 0x5, 0xdf, 0x9b72, 0x2, 0x8000) mlockall$auto(0x7) mlockall$auto(0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0x26, 0x80805, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x8000000401, 0x8000) semctl$auto(0x1ff, 0x2, 0x10000000016, 0x0) bind$auto(0x3, 0xa, 0x7f) mprotect$auto(0x1ffff000, 0x8000000000000001, 0xd) close_range$auto(0x0, 0xfffffffffffff000, 0x0) pselect6$auto(0x9, 0x1c00000, 0x4, 0x4000000000000000, 0x9, 0x7) mmap$auto(0x0, 0x9, 0x72, 0x8b72, 0x2, 0x8000) socket(0xa, 0x3, 0x6) setsockopt$auto(0x1, 0x2000103, 0x22, 0x2, 0xa) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x3, 0x6) getsockopt$auto(0x6, 0x29, 0x24, 0x2009, 0x6) clone$auto(0x8000000000000000, 0x104, 0x200, 0x1, 0x100000000) mmap$auto(0xf000, 0x8, 0x1000000003, 0x9b72, 0x2, 0x8000) 1.857291773s ago: executing program 2 (id=34): r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x9, 0x72, 0x8b72, 0x2, 0x8000) close_range$auto(0x2, 0x8000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) ioctl$sock_SIOCGIFINDEX(r0, 0x40086602, &(0x7f0000000000)={'macvtap0\x00'}) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0xfffffffffffffff8, 0x7508, 0x12e9, 0x13, 0x2a, 0x0) msgctl$auto(0x85, 0x7, 0x3) pselect6$auto(0x9, 0x6, 0x85b, 0x3ff, 0xe7, 0x8) 1.669532863s ago: executing program 1 (id=35): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x3, 0x9, 0xc33d, 0xf74b, 0x12) rt_sigprocmask$auto(0x100000000, 0x8fd8, 0x5e, 0x8) (async) mmap$auto(0x0, 0x3, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) (async) fanotify_init$auto(0x5, 0x2) (async) io_uring_setup$auto(0x3ff, 0x3) socket$nl_generic(0x10, 0x3, 0x10) (async) socket(0x21, 0x2, 0x2) (async) setsockopt$auto(0x3, 0x1000000110, 0x1, 0xc99, 0x1) (async) r0 = socket(0x23, 0x2, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000140), r1) sendmsg$auto_ETHTOOL_MSG_PSE_SET58(r1, &(0x7f00000003c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="000180bd6b00fddbdf252500000008000300000000000800060003000000"], 0x24}}, 0x0) (async) r3 = syz_genetlink_get_family_id$auto_SMC_GEN_NETLINK(&(0x7f0000000f40), r1) sendmsg$auto_SMC_NETLINK_REMOVE_UEID420(r1, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001100)={&(0x7f0000000f80)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="01002b9d7000fcdbfcf511"], 0x14}, 0x1, 0x0, 0x0, 0x4010}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000200), r4) sendmsg$auto_OVS_FLOW_CMD_NEW388(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000240)={0x54, r5, 0x1, 0x70bd27, 0x25dfdbff, {}, [@OVS_FLOW_ATTR_PROBE={0x4}, @OVS_FLOW_ATTR_ACTIONS={0x4}, @OVS_FLOW_ATTR_KEY={0x37, 0x1, "33009703470276439b36cb6515b36bc1ca60f1220f2a6c3eba0713604d0b304d7d75a9a4490af560bf4af015280c2c37c1a2cb"}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000}, 0xc4) (async) sendmsg$auto_OVS_FLOW_CMD_SET389(r1, &(0x7f0000000640)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000600)={&(0x7f0000000440)={0x1bc, r5, 0x200, 0x70bd28, 0x25dfdbff, {}, [@OVS_FLOW_ATTR_PROBE={0x4}, @OVS_FLOW_ATTR_UFID_FLAGS={0x8, 0xa, 0xa8d6}, @OVS_FLOW_ATTR_KEY={0xef, 0x1, "17468dbaa1b6bf8d4cf88e71228a66b8e19c523d72cd4057e697d4cf1711a6e7143b57491cda8c29cf097da55950fdf065f8fe0577cda697525205afa5ebda3479b6294ebba19d36becaad2321ddb1ebd7c6b86353393a58c05cb55af5a1e754966bbebfa11a5e09d2c79807010ac98a936a01a15cc401ed98dd1a6abc3d547a1d13251c7cc2ed265040d88b63313436400f81e17458a89cee08a450ea4dc895db3ab564aa46c72b4411da5309e2ee40b0697171595bc732a3ccd68f55401e32a7dcbb6b5c232daf5593f7363f224272c9463a85ffe400d652b101bd2cbcffdcc1fe9be4632e2be4dbe5e4"}, @OVS_FLOW_ATTR_MASK={0xab, 0x7, "79ec5d651a188a16d51d998bfe8fbe6d3121939e85b24f9c982629dc77879b901ba16abddce2c5868fb74b192d8db79193f52f5673e262a30a177efd7667f4852a65fd88f01c54c236050f13393a098185817ea9b96dee00fcf0f92fed781cbc8bb51e7c68166245c39a2703a6e7460eca7b58ab612017f07f716010a69260af3c2941bd4983781e2cb3b16d8bd926b0821eb9fe5fa4f053276705cdf89d020a2ddfbfc121b9b0"}]}, 0x1bc}}, 0x0) (async) sendmsg$auto_TCP_METRICS_CMD_GET427(r0, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x7feb7afaaf532465}, 0x4c, &(0x7f00000002c0)={&(0x7f0000000240)={0x4c, 0x0, 0x100, 0x70bd2a, 0x25dfdbfd, {}, [@TCP_METRICS_ATTR_SADDR_IPV4={0x8, 0xb, @rand_addr=0x64010102}, @TCP_METRICS_ATTR_ADDR_IPV6={0x14, 0x2, @mcast2}, @TCP_METRICS_ATTR_SADDR_IPV4={0x8, 0xb, @broadcast}, @TCP_METRICS_ATTR_ADDR_IPV6={0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000801}, 0x40) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000001c0)={'batadv0\x00'}) (async) mlockall$auto(0x7) (async) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) (async) mlock$auto(0xfbe8, 0x3) mlock$auto(0x7c88, 0x7fff) socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = socket(0x22, 0x2, 0x2) ioctl$sock_SIOCGIFINDEX(r7, 0x80044944, 0x0) 1.609367811s ago: executing program 3 (id=36): mlockall$auto(0x7) ptrace$auto(0x10, 0x10000000000001, 0xffffffffffffff56, 0x868f) setreuid$auto(0x6, 0xa) finit_module$auto(0x1, 0x200000000000, 0x1) mlockall$auto(0xb206) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) setgid$auto(0x8) write$auto(0x3, 0x0, 0x81) mlockall$auto(0x6) socket(0x2, 0x5, 0x0) ioperm$auto(0x3, 0x5, 0x149) fchmod$auto(0x7e77, 0x8001) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x402, 0x300000000000) mmap$auto(0x0, 0x400008, 0x8003, 0x409b72, 0x2, 0x8000) prctl$auto(0x101000000003b, 0x1, 0xa, 0xf1b, 0x107) open(&(0x7f0000000000)='./file0\x00', 0x7ffd, 0x24) lstat$auto(0x20000000, 0x3) keyctl$auto(0x10, 0x5, 0x7ffc, 0x400, 0x400) mlock$auto(0xfbe8, 0xc) fchown$auto(0x8000000000000001, 0x3ff, 0x6) munmap$auto(0x1000000, 0x2000000c) exit$auto(0x2) arch_prctl$auto(0x7, 0x8000000000000001) madvise$auto(0x0, 0xffffffffffff0001, 0x9) 1.525227787s ago: executing program 0 (id=37): socket$nl_generic(0x10, 0x3, 0x10) madvise$auto(0x0, 0x7fffffffffffffff, 0xb) open(&(0x7f0000000000)='./file0\x00', 0x7ffd, 0x0) socket(0x15, 0x5, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x121342, 0x80) ioperm$auto(0x7, 0x6, 0x2) pread64$auto(0x0, 0x6, 0x3e, 0x4) open(&(0x7f0000000040)='./file0\x00', 0x80042, 0x2) mmap$auto(0x0, 0x3, 0xdf, 0x9b72, 0x2, 0x8000) write$auto(0x6, 0x8, 0x10000000000) sendfile$auto(0x2, 0x6, 0x401, 0x6) 1.393641444s ago: executing program 2 (id=38): mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) socket(0x2, 0x800, 0x28b) shmctl$auto(0x101, 0x1, 0x6) r0 = socket(0x10, 0x2, 0x0) r1 = syz_genetlink_get_family_id$auto_TIPCv2(&(0x7f00000002c0), 0xffffffffffffffff) syz_genetlink_get_family_id$auto_IPVS(&(0x7f0000000000), r0) personality$auto(0x40004010410ffc) socket(0x2, 0x3, 0x1) mmap$auto(0x0, 0x9, 0x3ff57693, 0x9b72, 0x2, 0x800000000000c000) getsockopt$auto(0x3, 0x0, 0x9, 0x3, 0xa3) setreuid$auto(0x0, 0x20000000004) setresuid$auto(0x0, 0x0, 0x4) setresuid$auto(0xffffffffffffffff, 0x8, 0x8000) sendmsg$auto_TIPC_NL_BEARER_SET438(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB="1400003c", @ANYRES16=r1, @ANYBLOB="03002bbd7000ffdbdf2505000000"], 0x14}, 0x1, 0x0, 0x0, 0x2000c000}, 0x20000800) 1.371848849s ago: executing program 1 (id=39): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x5, 0x0) (async, rerun: 32) mmap$auto(0xfff, 0xd, 0x1fc, 0xffffffffffffffbe, 0x8008000001002, 0x4) (async, rerun: 32) io_uring_setup$auto(0x4000000000000a, 0xa) (async) shutdown$auto(0x5, 0x2) (async) recvmmsg$auto(0x5, 0x4, 0x71, 0x1560, 0x7) (async) dup2$auto(0x5, 0x4) (async) splice$auto(0x9, 0xb, 0x2, 0xfffffffffffffffd, 0x1003, 0xf) 1.26954636s ago: executing program 0 (id=40): mmap$auto(0x0, 0x8, 0x1000000004, 0x9b72, 0x2, 0x8000) socket(0xa, 0x3, 0x6) socket(0x2b, 0x1, 0x1) semctl$auto(0x1ff, 0x2, 0x10000000013, 0x0) socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0x8, 0x1000000004, 0x9b72, 0x2, 0x8000) read$auto(0x3, 0x6, 0x4c0) socket$nl_generic(0x10, 0x3, 0x10) clone$auto(0x3b46, 0x6, 0x20000048, 0x0, 0x10) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$auto(0x3, 0x29, 0x14, 0xe33, 0x90) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) dup3$auto(0x8000000000000001, 0x5, 0x800000000) write$auto(0x5, 0x800, 0x80000001) fcntl$auto(0x0, 0x407, 0x100000) 1.033740414s ago: executing program 1 (id=41): pidfd_open$auto(0x1, 0x0) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) (async) socketpair$auto(0xffff, 0x6, 0xfffffffffffffff7, 0x8) (async) mmap$auto(0x6, 0x4, 0x296, 0x49f3, 0x1, 0x101) (async) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) (async) socketpair$auto(0x4, 0x5, 0x80000, 0xc) (async) dup2$auto(0x0, 0x3) (async) select$auto(0x46, 0xfffffffffffffff7, 0x7, 0x9, 0x2) sysinfo$auto(0x1) io_uring_setup$auto(0x3ff, 0x3) 1.033220275s ago: executing program 2 (id=42): r0 = socket(0x10, 0x2, 0x0) r1 = syz_genetlink_get_family_id$auto_TIPCv2(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$auto_TIPC_NL_BEARER_SET438(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)={0x14, r1, 0x3, 0x70bd2b, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x2000c000}, 0x20000800) 836.008525ms ago: executing program 1 (id=43): close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) prlimit64$auto(0x1, 0x1400000000, 0x3, 0x5) fanotify_init$auto(0x5, 0xffffffffffffffff) mmap$auto(0x0, 0x9, 0x72, 0x8b72, 0x2, 0x8000) io_uring_setup$auto(0x6, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x6, 0x0) setsockopt$auto(0x3, 0x10d, 0xd, 0xe33, 0x8) 769.916237ms ago: executing program 2 (id=44): r0 = socket(0x10, 0x2, 0x0) r1 = syz_genetlink_get_family_id$auto_TIPCv2(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$auto_TIPC_NL_BEARER_SET438(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)={0x14, r1, 0x3, 0x70bd2b, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x2000c000}, 0x20000800) (fail_nth: 2) 513.688393ms ago: executing program 1 (id=45): ioperm$auto(0x3b, 0xf99b, 0x6) (async) pkey_free$auto(0x0) (async) syz_genetlink_get_family_id$auto_ovs_meter(0x0, 0xffffffffffffffff) (async) socket(0xf, 0x3, 0x2) (async) socket(0x2, 0x2, 0x2) (async) msgctl$auto(0xfffffffffffffb57, 0x8, 0x2bde) (async) clone$auto(0x2, 0x4, 0x641f4af9, 0x2, 0x7) (async) r0 = socket(0x2, 0x2, 0x0) syz_genetlink_get_family_id$auto_IPVS(&(0x7f0000000080), r0) (async) mlockall$auto(0x5) syz_genetlink_get_family_id$auto_nfsd(&(0x7f00000001c0), 0xffffffffffffffff) 184.632544ms ago: executing program 0 (id=46): socket(0x2b, 0x1, 0x1) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x400008, 0x200e0, 0xbb72, 0x56, 0x8000) mremap$auto(0x0, 0x2, 0x8, 0x3, 0x40) mmap$auto(0x20761b1e, 0xffffffff, 0xd2f3, 0xeb2, 0x401, 0x4) mremap$auto(0x9, 0x2, 0x8, 0x3, 0x7efffbffb000) socket$nl_generic(0x10, 0x3, 0x10) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/time_for_children\x00') syz_genetlink_get_family_id$auto_ovs_datapath(0x0, 0xffffffffffffffff) r0 = socket(0x1e, 0x5, 0x0) open(&(0x7f0000022ff6)='./control\x00', 0x2640, 0x28) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'veth0_to_hsr\x00'}) socket(0x2, 0x5, 0x0) listen$auto(0x7, 0x2000000000) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_ovs_meter(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$auto_OVS_METER_CMD_SET393(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000080)=ANY=[@ANYBLOB="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", @ANYRES16=r2, @ANYBLOB="0100ff070000fcdbdf2502000000080001000c000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4000808}, 0x4008810) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) fcntl$auto(0xd2, 0x0, 0x4) socket$nl_generic(0x10, 0x3, 0x10) dup3$auto(0x8000000000000001, 0x5, 0x800000000) write$auto(0x100000000005, 0x6, 0x80000001) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) clock_gettime$auto(0xb, 0x3) madvise$auto(0x0, 0x2000000080000001, 0x3) accept$auto(0x8, 0x80f0, 0xf) mmap$auto(0x0, 0x400008, 0xafab, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x19) 12.096921ms ago: executing program 2 (id=47): socket(0xa, 0x2, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) setsockopt$auto(0x3, 0x0, 0x30, 0xe33, 0xa206) fanotify_init$auto(0x200, 0x2) 0s ago: executing program 3 (id=48): r0 = socket(0x10, 0x2, 0x0) pidfd_open$auto(0x1, 0x0) socket(0x2, 0x2, 0x1) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x1d, 0x3, 0x1) socketpair$auto(0xffff, 0x6, 0xfffffffffffffff7, 0xb) io_uring_setup$auto(0x3ff, 0x3) mmap$auto(0x0, 0x20007, 0xdf, 0x632, 0x8, 0x8002) move_pages$auto(0x1, 0xf88, 0x5, 0xf0, 0x1, 0x8000000000000000) memfd_secret$auto(0x0) mmap$auto(0x0, 0x9, 0xffb, 0x8000000008011, 0x3, 0x8000) mlockall$auto(0x7) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x6, 0x0) setreuid$auto(0x3, 0x7) socket(0x29, 0x5, 0x0) socket(0x2, 0x1, 0x0) socketpair$auto(0x0, 0xe7, 0x9, 0x790) mmap$auto(0xf000, 0x8, 0x1000000003, 0x2009b72, 0x2, 0x8000) setsockopt$auto(0x6, 0x8000000000000006, 0x2a, 0x4808, 0x7ffffc) r1 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_CTRL_CMD_GETFAMILY21(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01006e6c6374726c0000000000000000"], 0x20}, 0x1, 0x0, 0x0, 0x4004050}, 0x440d0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.3' (ED25519) to the list of known hosts. [ 75.549020][ T5224] cgroup: Unknown subsys name 'net' [ 75.662173][ T5224] cgroup: Unknown subsys name 'cpuset' [ 75.671475][ T5224] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 76.741110][ T1273] ieee802154 phy0 wpan0: encryption failed: -22 [ 76.747903][ T1273] ieee802154 phy1 wpan1: encryption failed: -22 [ 77.400375][ T5224] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 79.261288][ T54] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 79.276532][ T5247] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 79.279298][ T54] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 79.284949][ T5247] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 79.299575][ T5247] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 79.307723][ T54] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 79.316076][ T5247] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 79.328260][ T54] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 79.328875][ T5250] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 79.345590][ T54] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 79.352973][ T5250] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 79.354345][ T54] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 79.367978][ T54] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 79.375239][ T5249] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 79.376202][ T54] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 79.384092][ T5249] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 79.390598][ T54] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 79.398036][ T5249] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 79.404919][ T54] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 79.411892][ T5249] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 79.420135][ T5239] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 79.426832][ T54] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 79.433528][ T5239] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 79.447061][ T5239] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 79.808107][ T5233] chnl_net:caif_netlink_parms(): no params data found [ 79.941822][ T5238] chnl_net:caif_netlink_parms(): no params data found [ 79.993247][ T5233] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.000530][ T5233] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.008597][ T5233] bridge_slave_0: entered allmulticast mode [ 80.015920][ T5233] bridge_slave_0: entered promiscuous mode [ 80.024346][ T5235] chnl_net:caif_netlink_parms(): no params data found [ 80.049557][ T5233] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.057092][ T5233] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.064723][ T5233] bridge_slave_1: entered allmulticast mode [ 80.072107][ T5233] bridge_slave_1: entered promiscuous mode [ 80.116121][ T5237] chnl_net:caif_netlink_parms(): no params data found [ 80.167374][ T5238] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.174608][ T5238] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.182493][ T5238] bridge_slave_0: entered allmulticast mode [ 80.190256][ T5238] bridge_slave_0: entered promiscuous mode [ 80.198176][ T5238] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.205331][ T5238] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.212643][ T5238] bridge_slave_1: entered allmulticast mode [ 80.219654][ T5238] bridge_slave_1: entered promiscuous mode [ 80.229121][ T5233] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.245755][ T5233] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.318917][ T5238] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.330930][ T5238] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.363389][ T5235] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.370656][ T5235] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.378341][ T5235] bridge_slave_0: entered allmulticast mode [ 80.385163][ T5235] bridge_slave_0: entered promiscuous mode [ 80.395844][ T5233] team0: Port device team_slave_0 added [ 80.405166][ T5233] team0: Port device team_slave_1 added [ 80.424472][ T5235] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.431784][ T5235] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.439443][ T5235] bridge_slave_1: entered allmulticast mode [ 80.446225][ T5235] bridge_slave_1: entered promiscuous mode [ 80.476277][ T5238] team0: Port device team_slave_0 added [ 80.485298][ T5238] team0: Port device team_slave_1 added [ 80.544595][ T5233] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.552950][ T5233] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.579981][ T5233] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.593362][ T5237] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.600904][ T5237] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.608202][ T5237] bridge_slave_0: entered allmulticast mode [ 80.615127][ T5237] bridge_slave_0: entered promiscuous mode [ 80.623878][ T5238] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.631063][ T5238] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.657317][ T5238] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.671630][ T5235] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.683853][ T5235] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.693593][ T5233] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.700976][ T5233] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.727370][ T5233] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.744391][ T5237] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.752023][ T5237] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.759385][ T5237] bridge_slave_1: entered allmulticast mode [ 80.766253][ T5237] bridge_slave_1: entered promiscuous mode [ 80.773473][ T5238] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.780598][ T5238] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.806970][ T5238] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.870786][ T5235] team0: Port device team_slave_0 added [ 80.891146][ T5237] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.920032][ T5235] team0: Port device team_slave_1 added [ 80.948650][ T5238] hsr_slave_0: entered promiscuous mode [ 80.955216][ T5238] hsr_slave_1: entered promiscuous mode [ 80.965592][ T5237] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.995153][ T5233] hsr_slave_0: entered promiscuous mode [ 81.001598][ T5233] hsr_slave_1: entered promiscuous mode [ 81.011591][ T5233] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 81.019990][ T5233] Cannot create hsr debugfs directory [ 81.044045][ T5237] team0: Port device team_slave_0 added [ 81.079169][ T5237] team0: Port device team_slave_1 added [ 81.094526][ T5235] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.102058][ T5235] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.128335][ T5235] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.141986][ T5235] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.149184][ T5235] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.175542][ T5235] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.251497][ T5237] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.259038][ T5237] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.285638][ T5237] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.301681][ T5237] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.308873][ T5237] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.335909][ T5237] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.415835][ T5235] hsr_slave_0: entered promiscuous mode [ 81.425585][ T5235] hsr_slave_1: entered promiscuous mode [ 81.431991][ T5235] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 81.440591][ T5235] Cannot create hsr debugfs directory [ 81.458249][ T5241] Bluetooth: hci3: command tx timeout [ 81.504031][ T5237] hsr_slave_0: entered promiscuous mode [ 81.510510][ T5237] hsr_slave_1: entered promiscuous mode [ 81.516639][ T5237] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 81.524669][ T5237] Cannot create hsr debugfs directory [ 81.547522][ T5241] Bluetooth: hci1: command tx timeout [ 81.553433][ T5241] Bluetooth: hci0: command tx timeout [ 81.559747][ T5239] Bluetooth: hci2: command tx timeout [ 81.686831][ T5233] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 81.700513][ T5233] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 81.728242][ T5233] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 81.738091][ T5233] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 81.823795][ T5238] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 81.839776][ T5238] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 81.850779][ T5238] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 81.895029][ T5238] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 81.964974][ T5235] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 81.980490][ T5235] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 82.020745][ T5235] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 82.032407][ T5235] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 82.102317][ T5237] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 82.126589][ T5233] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.139927][ T5237] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 82.161083][ T5237] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 82.175535][ T5237] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 82.213955][ T5233] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.251622][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.259071][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.301131][ T62] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.308375][ T62] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.327398][ T5238] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.374257][ T5233] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 82.387010][ T5233] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 82.436259][ T5238] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.483477][ T62] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.490734][ T62] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.540313][ T62] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.547499][ T62] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.617130][ T5235] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.646980][ T5237] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.676060][ T5235] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.700144][ T2949] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.707330][ T2949] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.723801][ T2949] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.731008][ T2949] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.754884][ T5238] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 82.783067][ T5233] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.800288][ T5237] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.824814][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.831989][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.868901][ T2949] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.876165][ T2949] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.904918][ T5235] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 82.922958][ T5235] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 83.032819][ T5233] veth0_vlan: entered promiscuous mode [ 83.082849][ T5233] veth1_vlan: entered promiscuous mode [ 83.171815][ T5233] veth0_macvtap: entered promiscuous mode [ 83.193799][ T5238] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.212053][ T5233] veth1_macvtap: entered promiscuous mode [ 83.254026][ T5233] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.339000][ T5238] veth0_vlan: entered promiscuous mode [ 83.350278][ T5233] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.365794][ T5233] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.385768][ T5233] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.395527][ T5233] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.404664][ T5233] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.464850][ T5235] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.474060][ T5238] veth1_vlan: entered promiscuous mode [ 83.547880][ T54] Bluetooth: hci3: command tx timeout [ 83.558703][ T5238] veth0_macvtap: entered promiscuous mode [ 83.568609][ T5238] veth1_macvtap: entered promiscuous mode [ 83.588204][ T5235] veth0_vlan: entered promiscuous mode [ 83.596006][ T5237] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.618225][ T54] Bluetooth: hci2: command tx timeout [ 83.627308][ T54] Bluetooth: hci0: command tx timeout [ 83.632768][ T54] Bluetooth: hci1: command tx timeout [ 83.661118][ T5238] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.672508][ T5238] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.685054][ T5238] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.695057][ T5238] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.707397][ T5238] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.719444][ T5238] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.741673][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.753381][ T5235] veth1_vlan: entered promiscuous mode [ 83.762416][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.765073][ T5238] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.779830][ T5238] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.789852][ T5238] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.798860][ T5238] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.875929][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.896743][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.924974][ T5237] veth0_vlan: entered promiscuous mode [ 83.995551][ T5237] veth1_vlan: entered promiscuous mode [ 84.009865][ T5235] veth0_macvtap: entered promiscuous mode [ 84.065852][ T5235] veth1_macvtap: entered promiscuous mode [ 84.109580][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.134919][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.163919][ T5237] veth0_macvtap: entered promiscuous mode [ 84.192661][ T5235] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.204715][ T5235] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.220991][ T5235] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.233694][ T5235] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.251404][ T5235] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.261082][ T5237] veth1_macvtap: entered promiscuous mode [ 84.280933][ T5235] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.295397][ T5235] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.306968][ T5302] process 'syz.1.5' launched '/dev/fd/0' with NULL argv: empty string added [ 84.307300][ T5235] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.326821][ T5235] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.344410][ T5235] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.353905][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.362746][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.390148][ T5235] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.399778][ T5235] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.409480][ T5235] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.420483][ T5235] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.449667][ T5237] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.465346][ T5237] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.475779][ T5237] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.505166][ T5237] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.533006][ T5237] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.547821][ T5237] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.580381][ T5237] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.591121][ T5237] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.602363][ T5237] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.612726][ T5237] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.623913][ T5237] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.634404][ T5237] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.651858][ T5237] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.665087][ T5237] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.711304][ T5237] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.740716][ T5237] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.760964][ T5237] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.776536][ T5237] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.009285][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.028286][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.067094][ T5313] ptrace attach of "./syz-executor exec"[5238] was attempted by "./syz-executor exec"[5313] [ 85.152228][ T5313] coredump: 5(syz.0.8): coredump has not been created, error -13 [ 85.169881][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.182112][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.198329][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.210451][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.320073][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.335151][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.383864][ T5315] Zero length message leads to an empty skb [ 85.619836][ T5241] Bluetooth: hci3: command tx timeout [ 85.702278][ T5239] Bluetooth: hci0: command tx timeout [ 85.702296][ T5241] Bluetooth: hci2: command tx timeout [ 85.708742][ T54] Bluetooth: hci1: command tx timeout [ 86.615925][ T5340] ptrace attach of "./syz-executor exec"[5238] was attempted by "./syz-executor exec"[5340] [ 86.767989][ T5338] coredump: 14(syz.0.15): coredump has not been created, error -13 [ 87.701786][ T54] Bluetooth: hci3: command tx timeout [ 87.712176][ T5308] coredump: 10(syz.1.7): interrupted: fatal signal pending [ 87.733457][ T5308] coredump: 10(syz.1.7): written to core: VMAs: 33, size 80568320; core: 45906514 bytes, pos 66527232 [ 87.778493][ T54] Bluetooth: hci2: command tx timeout [ 87.780229][ T5241] Bluetooth: hci1: command tx timeout [ 87.783988][ T54] Bluetooth: hci0: command tx timeout [ 88.301548][ T5377] ptrace attach of "./syz-executor exec"[5238] was attempted by "./syz-executor exec"[5377] [ 88.468704][ T5374] coredump: 26(syz.0.26): coredump has not been created, error -13 [ 89.204642][ T5387] FAULT_INJECTION: forcing a failure. [ 89.204642][ T5387] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 89.302731][ T5387] CPU: 0 UID: 0 PID: 5387 Comm: syz.2.31 Not tainted 6.11.0-syzkaller-05778-g176000734ee2 #0 [ 89.313073][ T5387] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 89.324065][ T5387] Call Trace: [ 89.327395][ T5387] [ 89.330380][ T5387] dump_stack_lvl+0x16c/0x1f0 [ 89.335200][ T5387] should_fail_ex+0x497/0x5b0 [ 89.339962][ T5387] _copy_from_user+0x30/0xf0 [ 89.345315][ T5387] copy_msghdr_from_user+0x99/0x160 [ 89.350581][ T5387] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 89.356469][ T5387] ? __pfx___lock_acquire+0x10/0x10 [ 89.361801][ T5387] ___sys_sendmsg+0xff/0x1e0 [ 89.366550][ T5387] ? __pfx____sys_sendmsg+0x10/0x10 [ 89.371992][ T5387] ? find_held_lock+0x2d/0x110 [ 89.376835][ T5387] ? ksys_write+0x21c/0x260 [ 89.381442][ T5387] ? __fget_light+0x173/0x210 [ 89.386213][ T5387] __sys_sendmsg+0x117/0x1f0 [ 89.390990][ T5387] ? __pfx___sys_sendmsg+0x10/0x10 [ 89.396216][ T5387] do_syscall_64+0xcd/0x250 [ 89.400888][ T5387] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 89.406940][ T5387] RIP: 0033:0x7fb99c97def9 [ 89.411428][ T5387] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 89.431277][ T5387] RSP: 002b:00007fb99d830038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 89.439776][ T5387] RAX: ffffffffffffffda RBX: 00007fb99cb35f80 RCX: 00007fb99c97def9 [ 89.447980][ T5387] RDX: 0000000020000800 RSI: 00000000200000c0 RDI: 0000000000000003 [ 89.456253][ T5387] RBP: 00007fb99d830090 R08: 0000000000000000 R09: 0000000000000000 [ 89.464390][ T5387] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 89.472418][ T5387] R13: 0000000000000000 R14: 00007fb99cb35f80 R15: 00007ffcd271dd78 [ 89.480773][ T5387] [ 89.787936][ T5402] coredump: 36(syz.0.33): coredump has not been created, error -13 [ 90.393708][ T5415] ptrace attach of "./syz-executor exec"[5235] was attempted by "./syz-executor exec"[5415] [ 90.857552][ T5435] FAULT_INJECTION: forcing a failure. [ 90.857552][ T5435] name failslab, interval 1, probability 0, space 0, times 1 [ 90.933931][ T5435] CPU: 1 UID: 0 PID: 5435 Comm: syz.2.44 Not tainted 6.11.0-syzkaller-05778-g176000734ee2 #0 [ 90.944181][ T5435] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 90.954389][ T5435] Call Trace: [ 90.957714][ T5435] [ 90.960691][ T5435] dump_stack_lvl+0x16c/0x1f0 [ 90.965446][ T5435] should_fail_ex+0x497/0x5b0 [ 90.970196][ T5435] ? fs_reclaim_acquire+0xae/0x160 [ 90.975426][ T5435] should_failslab+0xc2/0x120 [ 90.980186][ T5435] kmem_cache_alloc_node_noprof+0x71/0x310 [ 90.986127][ T5435] ? __alloc_skb+0x2b3/0x380 [ 90.990787][ T5435] __alloc_skb+0x2b3/0x380 [ 90.995357][ T5435] ? __pfx___alloc_skb+0x10/0x10 [ 91.000361][ T5435] ? __pfx___might_resched+0x10/0x10 [ 91.005729][ T5435] netlink_alloc_large_skb+0x69/0x130 [ 91.011150][ T5435] netlink_sendmsg+0x689/0xd70 [ 91.016001][ T5435] ? __pfx_netlink_sendmsg+0x10/0x10 [ 91.021361][ T5435] ____sys_sendmsg+0x9ae/0xb40 [ 91.026162][ T5435] ? copy_msghdr_from_user+0x10b/0x160 [ 91.031655][ T5435] ? __pfx_____sys_sendmsg+0x10/0x10 [ 91.037076][ T5435] ? __pfx___lock_acquire+0x10/0x10 [ 91.042319][ T5435] ___sys_sendmsg+0x135/0x1e0 [ 91.047122][ T5435] ? __pfx____sys_sendmsg+0x10/0x10 [ 91.052371][ T5435] ? find_held_lock+0x2d/0x110 [ 91.057182][ T5435] ? ksys_write+0x21c/0x260 [ 91.061757][ T5435] ? __fget_light+0x173/0x210 [ 91.066503][ T5435] __sys_sendmsg+0x117/0x1f0 [ 91.071127][ T5435] ? __pfx___sys_sendmsg+0x10/0x10 [ 91.076288][ T5435] do_syscall_64+0xcd/0x250 [ 91.080867][ T5435] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 91.086795][ T5435] RIP: 0033:0x7fb99c97def9 [ 91.091325][ T5435] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 91.111356][ T5435] RSP: 002b:00007fb99d830038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 91.119998][ T5435] RAX: ffffffffffffffda RBX: 00007fb99cb35f80 RCX: 00007fb99c97def9 [ 91.127994][ T5435] RDX: 0000000020000800 RSI: 00000000200000c0 RDI: 0000000000000003 [ 91.135989][ T5435] RBP: 00007fb99d830090 R08: 0000000000000000 R09: 0000000000000000 [ 91.144078][ T5435] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 91.152162][ T5435] R13: 0000000000000000 R14: 00007fb99cb35f80 R15: 00007ffcd271dd78 [ 91.160263][ T5435] [ 91.862121][ T5442] ------------[ cut here ]------------ [ 91.868026][ T5442] WARNING: CPU: 1 PID: 5442 at include/linux/cpumask.h:135 io_sq_offload_create+0xe3d/0x1090 [ 91.878663][ T5442] Modules linked in: [ 91.883064][ T5442] CPU: 1 UID: 0 PID: 5442 Comm: syz.3.48 Not tainted 6.11.0-syzkaller-05778-g176000734ee2 #0 [ 91.893571][ T5442] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 91.904347][ T5442] RIP: 0010:io_sq_offload_create+0xe3d/0x1090 [ 91.910575][ T5442] Code: 44 24 08 e9 2f f7 ff ff e8 70 a3 0d fd 44 89 e3 e9 06 ff ff ff e8 63 a3 0d fd 4c 89 ff e8 4b bb 7d fd eb ad e8 54 a3 0d fd 90 <0f> 0b 90 e9 f3 fd ff ff e8 46 a3 0d fd 31 ff 89 de e8 7d a5 0d fd [ 91.931236][ T5442] RSP: 0018:ffffc9000452fcd8 EFLAGS: 00010287 [ 91.938737][ T5442] RAX: 0000000000000522 RBX: ffff88814b83f800 RCX: ffffc90009281000 [ 91.946873][ T5442] RDX: 0000000000040000 RSI: ffffffff847dabfc RDI: 0000000000000005 [ 91.955479][ T5442] RBP: ffff88802d6d2000 R08: 0000000000000005 R09: 0000000000000007 [ 91.963705][ T5442] R10: 0000000000000008 R11: 0000000000000000 R12: 0000000000000008 [ 91.971812][ T5442] R13: 1ffff920008a5fa0 R14: ffffc9000452fd20 R15: 0000000000000000 [ 91.979912][ T5442] FS: 00007f5103dff6c0(0000) GS:ffff8880b8900000(0000) knlGS:0000000000000000 [ 91.988992][ T5442] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 91.995647][ T5442] CR2: 000000110c338895 CR3: 0000000072cfc000 CR4: 00000000003506f0 [ 92.003873][ T5442] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 92.012048][ T5442] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 92.020858][ T5442] Call Trace: [ 92.024201][ T5442] [ 92.027973][ T5442] ? __warn+0xea/0x3d0 [ 92.032138][ T5442] ? io_sq_offload_create+0xe3d/0x1090 [ 92.037761][ T5442] ? report_bug+0x3c0/0x580 [ 92.042787][ T5442] ? handle_bug+0x54/0xa0 [ 92.047281][ T5442] ? exc_invalid_op+0x17/0x50 [ 92.052049][ T5442] ? asm_exc_invalid_op+0x1a/0x20 [ 92.057227][ T5442] ? io_sq_offload_create+0xe3c/0x1090 [ 92.062862][ T5442] ? io_sq_offload_create+0xe3d/0x1090 [ 92.068463][ T5442] ? io_sq_offload_create+0xe3c/0x1090 [ 92.074021][ T5442] ? __pfx_io_sq_offload_create+0x10/0x10 [ 92.080022][ T5442] ? io_pages_map+0x1dd/0x510 [ 92.084965][ T5442] io_uring_setup+0x180f/0x3730 [ 92.090053][ T5442] ? __pfx_io_uring_setup+0x10/0x10 [ 92.095360][ T5442] __x64_sys_io_uring_setup+0x98/0x140 [ 92.101059][ T5442] do_syscall_64+0xcd/0x250 [ 92.105733][ T5442] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 92.111772][ T5442] RIP: 0033:0x7f510437def9 [ 92.116250][ T5442] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 92.137104][ T5442] RSP: 002b:00007f5103dff038 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9 [ 92.146402][ T5442] RAX: ffffffffffffffda RBX: 00007f5104535f80 RCX: 00007f510437def9 [ 92.154501][ T5442] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 00000000000003ff [ 92.162598][ T5442] RBP: 00007f51043f0b76 R08: 0000000000000000 R09: 0000000000000000 [ 92.170689][ T5442] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 92.179004][ T5442] R13: 0000000000000000 R14: 00007f5104535f80 R15: 00007fff5d2ed9b8 [ 92.187281][ T5442] [ 92.190357][ T5442] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 92.198189][ T5442] CPU: 1 UID: 0 PID: 5442 Comm: syz.3.48 Not tainted 6.11.0-syzkaller-05778-g176000734ee2 #0 [ 92.208375][ T5442] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 92.218451][ T5442] Call Trace: [ 92.221746][ T5442] [ 92.224703][ T5442] dump_stack_lvl+0x3d/0x1f0 [ 92.229344][ T5442] panic+0x70f/0x7f0 [ 92.233278][ T5442] ? __pfx_panic+0x10/0x10 [ 92.237735][ T5442] ? show_trace_log_lvl+0x29d/0x3d0 [ 92.242990][ T5442] ? io_sq_offload_create+0xe3d/0x1090 [ 92.248491][ T5442] check_panic_on_warn+0xab/0xb0 [ 92.253470][ T5442] __warn+0xf6/0x3d0 [ 92.257403][ T5442] ? io_sq_offload_create+0xe3d/0x1090 [ 92.262919][ T5442] report_bug+0x3c0/0x580 [ 92.267305][ T5442] handle_bug+0x54/0xa0 [ 92.271502][ T5442] exc_invalid_op+0x17/0x50 [ 92.276075][ T5442] asm_exc_invalid_op+0x1a/0x20 [ 92.280957][ T5442] RIP: 0010:io_sq_offload_create+0xe3d/0x1090 [ 92.287076][ T5442] Code: 44 24 08 e9 2f f7 ff ff e8 70 a3 0d fd 44 89 e3 e9 06 ff ff ff e8 63 a3 0d fd 4c 89 ff e8 4b bb 7d fd eb ad e8 54 a3 0d fd 90 <0f> 0b 90 e9 f3 fd ff ff e8 46 a3 0d fd 31 ff 89 de e8 7d a5 0d fd [ 92.306722][ T5442] RSP: 0018:ffffc9000452fcd8 EFLAGS: 00010287 [ 92.312816][ T5442] RAX: 0000000000000522 RBX: ffff88814b83f800 RCX: ffffc90009281000 [ 92.320947][ T5442] RDX: 0000000000040000 RSI: ffffffff847dabfc RDI: 0000000000000005 [ 92.328953][ T5442] RBP: ffff88802d6d2000 R08: 0000000000000005 R09: 0000000000000007 [ 92.337044][ T5442] R10: 0000000000000008 R11: 0000000000000000 R12: 0000000000000008 [ 92.345471][ T5442] R13: 1ffff920008a5fa0 R14: ffffc9000452fd20 R15: 0000000000000000 [ 92.353476][ T5442] ? io_sq_offload_create+0xe3c/0x1090 [ 92.359016][ T5442] ? io_sq_offload_create+0xe3c/0x1090 [ 92.364516][ T5442] ? __pfx_io_sq_offload_create+0x10/0x10 [ 92.370284][ T5442] ? io_pages_map+0x1dd/0x510 [ 92.375039][ T5442] io_uring_setup+0x180f/0x3730 [ 92.379949][ T5442] ? __pfx_io_uring_setup+0x10/0x10 [ 92.385467][ T5442] __x64_sys_io_uring_setup+0x98/0x140 [ 92.390984][ T5442] do_syscall_64+0xcd/0x250 [ 92.395527][ T5442] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 92.401541][ T5442] RIP: 0033:0x7f510437def9 [ 92.405979][ T5442] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 92.425792][ T5442] RSP: 002b:00007f5103dff038 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9 [ 92.434331][ T5442] RAX: ffffffffffffffda RBX: 00007f5104535f80 RCX: 00007f510437def9 [ 92.442786][ T5442] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 00000000000003ff [ 92.451138][ T5442] RBP: 00007f51043f0b76 R08: 0000000000000000 R09: 0000000000000000 [ 92.459328][ T5442] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 92.467432][ T5442] R13: 0000000000000000 R14: 00007f5104535f80 R15: 00007fff5d2ed9b8 [ 92.475587][ T5442] [ 92.478893][ T5442] Kernel Offset: disabled [ 92.483291][ T5442] Rebooting in 86400 seconds..