last executing test programs: 25.468768131s ago: executing program 0 (id=63): socket(0x2c, 0x2, 0x9) mmap$auto(0x0, 0x1, 0x10000000000df, 0xeb2, 0x401, 0x7) socketpair$auto(0x3, 0x5, 0x7, 0x0) setsockopt$auto(0x3, 0x0, 0x13, 0x0, 0x9) mq_open$auto(0xffffffffffffffff, 0x200, 0x663c5371, 0x0) bind$auto(0x3, &(0x7f0000000040)={0xa, @sa_data_min="c054fdab44b93e00"}, 0x69) r0 = socket(0x1d, 0xa, 0xc3) fcntl$auto(r0, 0x7ff, 0xd9) socket(0xa, 0x1, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0) socket(0x2, 0x3, 0xa) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) move_pages$auto(0x1, 0xf54, 0x0, 0x0, 0x0, 0x8000000000000000) setsockopt$auto(0x3, 0x0, 0x60, 0x0, 0x10001) shmget$auto(0xffffffffffffffff, 0xb0d, 0xa7db6ba) socket(0x2, 0x801, 0x100) connect$auto(0x3, &(0x7f00000000c0)={0x2, @sockaddr_1_1}, 0x55) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) ioctl$auto(0x3, 0x541b, 0x38) connect$auto(0x3, &(0x7f0000000180)={0xa, @sockaddr_1_1}, 0x55) eventfd$auto(0x9f) mmap$auto(0x0, 0x9, 0xdf, 0xeb1, 0x401, 0x8000) mknod$auto(&(0x7f0000000000)='}[,&*}\x00', 0x1, 0x4) link$auto(&(0x7f00000000c0)='}[,&*}\x00\xa2\xbd\xac\x1b\xa6\xee+\xbb\xddh\xf9Bb\xee.\x06nt\xf6`\xa5\xfaJ\x01\xfb\xff87\x830^\x8c\xf8\xa7\xbcXs\x06w\x7f}g\xa1\xccBV\xb4\x84\x15\x97;eO\xebKV\xe8\x11\x1b&\x96f\x9b.\xb1J\x81\t\x98\x92\xc4\xfb\xf0]f\x18\x1b\xabCK<\xf0\xfcI\xc3*\x96\x8cHvh\x06L\xfdC\xc2\x01\xaf6dA\xd6\x8d7\n\xc7y\xbbV\x13\xb8\a\xe9\xba7w\xd5v\x1d\x95\xcer\xaap\xa0\x7f\x9f\x02\xc3]\xf4\xe89\x86S\xfb\xc1\x03OZ\'7\f\xcc>\xf8\xa9\xa8\xc8\x02\xc4\xc1\xe0\r\xd7\xc2(\x18w\xc9\x85\b\xd7\xef\xbbg\x96\xe5\xdc/\xa5V\x90#\v\xbd\xe8}\x1d\\}\x8f\x16w1\x00n\xd1\xa7\xd1s\x19d\xff)g', &(0x7f0000000080)='#\x00') unlink$auto(&(0x7f00000001c0)='}[,&*}\x00') setsockopt$auto(r0, 0x10000000084, 0x7b, 0x0, 0x6) 24.717821019s ago: executing program 0 (id=69): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x3ddd077, 0x1, 0x4, 0x13, 0x0, 0x4d) prctl$auto(0x10000, 0x3, 0x4, 0x3, 0x8000007) io_uring_setup$auto(0x6, 0x0) r0 = open(0x0, 0x242, 0xe1d2b27bdc14aabc) unlink$auto(0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) eventfd$auto(0x9) sendmsg$auto_NL80211_CMD_GET_INTERFACE(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000000", @ANYRESHEX=r2, @ANYBLOB="010b27bd70002cfa539f1183d46a08000300", @ANYRES32=r4], 0x1c}}, 0x4000080) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000040), r0) mremap$auto(0x0, 0x4, 0x4, 0x7, 0x100000000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) statx$auto(0xffffff9c, 0x0, 0x1000, 0x1, 0x0) modify_ldt$auto(0x1, 0x0, 0x10) modify_ldt$auto(0x1, 0x0, 0x10) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x400, 0xa000) clone$auto(0x7, 0x7fffffffffffffff, 0xffffffffffffffff, 0x0, 0x1) clone$auto(0x7, 0x7fffffffffffffff, 0xffffffffffffffff, 0x0, 0x1) clone$auto(0x200, 0x8000, 0xfffffffffffffffe, 0xffffffffffffffff, 0x5) r5 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/mnt\x00') socket$nl_generic(0x10, 0x3, 0x10) ioctl$NS_GET_PARENT(r5, 0x8008b705, 0x0) mount$auto(&(0x7f00000011c0)='syzkaller1\x00', &(0x7f0000001200)='-\xa5&\'\x00', &(0x7f0000001240)='(--\'*^)#(\x00', 0xfffffffffffffff9, &(0x7f0000001280)=[0x7fff, 0x7fffffff, 0x3, 0x8, 0x3]) syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000000c0), r0) 23.340860171s ago: executing program 0 (id=73): mmap$auto(0x0, 0x200004, 0x4000000000df, 0x40eb2, 0x402, 0x300000000000) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8) bpf$auto(0x9, &(0x7f0000000100)=@token_create={0x2}, 0x9) mlockall$auto(0x7) mremap$auto(0x0, 0x4, 0x4, 0x3, 0x200000) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) timer_create$auto(0xfffffff9, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000080), r1) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NFSD_CMD_THREADS_SET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r2, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@NFSD_A_SERVER_THREADS={0x8, 0x1, 0x7fffffff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000021}, 0x8004) sendmsg$auto_NFSD_CMD_THREADS_SET(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r2, 0x20, 0x70bd2d, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x99) connect$auto(r0, &(0x7f0000000000)={0x0, @sa_data_min="f4f55a2aaccd7596302a55a4a4c4"}, 0x0) mmap$auto(0x0, 0x400048, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) fanotify_init$auto(0x5, 0x2000000000002) socket$nl_generic(0x10, 0x3, 0x10) socket(0x26, 0x80805, 0x0) open(&(0x7f0000000080)='./file1\x00', 0x4242, 0xe1d2b27bdc14aabe) ftruncate$auto(0x3, 0x43e) preadv2$auto(0x3, &(0x7f00000001c0)={&(0x7f0000000100), 0x1}, 0x1, 0x0, 0x5, 0x7) mprotect$auto(0x1ffff000, 0x8000000000000001, 0x4) 21.593694018s ago: executing program 0 (id=83): r0 = socket(0x200000000000011, 0x2, 0x0) mmap$auto(0x0, 0x2020009, 0x1, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r1 = socket(0x18, 0x5, 0x2) epoll_ctl$auto(r1, 0xc, 0xffffffffffffffff, &(0x7f00000000c0)={0xff, 0x3263}) close_range$auto(0x2, 0x8, 0x0) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) sendmmsg$auto(0x3, &(0x7f0000000000)={{0x0, 0x2, &(0x7f0000000040)={0x0, 0x34000}, 0x4, 0x0, 0x1}, 0xed7138c}, 0x2, 0x9) bpf$auto(0x0, &(0x7f0000000000)=@link_update={0x1e, @new_prog_fd, 0x3, @old_map_fd=0x9747}, 0xa3) socket(0x2, 0x1, 0x0) mmap$auto(0x0, 0x10001, 0x1000000008, 0x13, 0x3, 0x8000) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) ppoll$auto(&(0x7f0000000000)={0x9, 0x3, 0x600}, 0x6, 0x0, 0x0, 0x8) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_TASKSTATS(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_TASKSTATS_CMD_GET(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x1c, r3, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [@TASKSTATS_CMD_ATTR_PID={0x8, 0x1, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8001}, 0x20011030) ioctl$sock_SIOCGIFINDEX(r0, 0x89b0, &(0x7f0000000140)={'bond0\x00'}) socket(0x200000000000011, 0x2, 0x0) (async) mmap$auto(0x0, 0x2020009, 0x1, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) socket(0x18, 0x5, 0x2) (async) epoll_ctl$auto(r1, 0xc, 0xffffffffffffffff, &(0x7f00000000c0)={0xff, 0x3263}) (async) close_range$auto(0x2, 0x8, 0x0) (async) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) (async) sendmmsg$auto(0x3, &(0x7f0000000000)={{0x0, 0x2, &(0x7f0000000040)={0x0, 0x34000}, 0x4, 0x0, 0x1}, 0xed7138c}, 0x2, 0x9) (async) bpf$auto(0x0, &(0x7f0000000000)=@link_update={0x1e, @new_prog_fd, 0x3, @old_map_fd=0x9747}, 0xa3) (async) socket(0x2, 0x1, 0x0) (async) mmap$auto(0x0, 0x10001, 0x1000000008, 0x13, 0x3, 0x8000) (async) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) (async) ppoll$auto(&(0x7f0000000000)={0x9, 0x3, 0x600}, 0x6, 0x0, 0x0, 0x8) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$auto_TASKSTATS(&(0x7f0000000040), 0xffffffffffffffff) (async) sendmsg$auto_TASKSTATS_CMD_GET(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x1c, r3, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [@TASKSTATS_CMD_ATTR_PID={0x8, 0x1, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8001}, 0x20011030) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x89b0, &(0x7f0000000140)={'bond0\x00'}) (async) 20.126076296s ago: executing program 0 (id=94): mknod$auto(&(0x7f0000000180)=':,\x00', 0xcc, 0x9) execve$auto(&(0x7f0000000040)=':,\x00', &(0x7f00000000c0)=&(0x7f0000000080)='$+[-+\x98%(,\x00', &(0x7f0000000200)=&(0x7f00000001c0)=':,\x00') madvise$auto(0x0, 0x7fffffffffffffff, 0xe) socket(0xa, 0x3, 0x6) socket(0x1e, 0x80805, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) (async) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) socket(0xa, 0x3, 0xff) select$auto(0xfffffffd, 0x0, &(0x7f0000000100)={[0xe06, 0x203, 0x0, 0xc, 0x9, 0x6, 0x1, 0x2800000000000002, 0x9, 0x5e582971, 0xff, 0x2c, 0x4, 0xffff, 0x74, 0xb]}, 0x0, 0x0) connect$auto(0x3, &(0x7f0000000140)={0xa, @sa_data_min="c4aeed448dc7fe8000"}, 0x55) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x9fe) settimeofday$auto(&(0x7f0000000000)={0xa9, 0x88e}, &(0x7f0000000240)={0x4, 0x2}) select$auto(0x7, 0x0, &(0x7f0000000100)={[0x9, 0x5, 0x0, 0xfffffffffffffff6, 0x7, 0xfffffffffffdffff, 0xdffffffffffffff8, 0x2, 0x0, 0x10000005e58296f, 0x1e, 0x7, 0x3, 0x200, 0x1, 0x9]}, 0x0, 0x0) connect$auto(0x3, &(0x7f0000000140)={0xa, @sa_data_min="c4aeed448dc7fe8000"}, 0x55) (async) connect$auto(0x3, &(0x7f0000000140)={0xa, @sa_data_min="c4aeed448dc7fe8000"}, 0x55) sendmmsg$auto(0x3, 0x0, 0x9a6, 0xff00) (async) sendmmsg$auto(0x3, 0x0, 0x9a6, 0xff00) write$auto(0x3, 0x0, 0xfdef) (async) write$auto(0x3, 0x0, 0xfdef) mmap$auto(0x3, 0x5, 0x3, 0x3ff, 0x6, 0x8a) mmap$auto(0x0, 0x20009, 0x8d28, 0xeb0, 0x401, 0x8000) (async) mmap$auto(0x0, 0x20009, 0x8d28, 0xeb0, 0x401, 0x8000) connect$auto(0x3, &(0x7f0000000140)={0x2, @sa_data_min="6a2f7ff43519eb7100"}, 0x55) write$auto(0x3, 0x0, 0xfdef) (async) write$auto(0x3, 0x0, 0xfdef) recvmmsg$auto(0x3, 0x0, 0x8, 0x0, 0x0) socket(0xa, 0x3, 0x73) (async) socket(0xa, 0x3, 0x73) mmap$auto(0x0, 0x8, 0xdf, 0xeb0, 0x401, 0x4) connect$auto(0x3, &(0x7f0000000140)={0xa}, 0x55) (async) connect$auto(0x3, &(0x7f0000000140)={0xa}, 0x55) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0) socket(0xf, 0xa, 0x8000) getcwd$auto(0x0, 0x400) recvfrom$auto(0x3, 0x0, 0x142e, 0x2, &(0x7f0000000100)={0x8, @sockaddr_1_1}, 0x0) (async) recvfrom$auto(0x3, 0x0, 0x142e, 0x2, &(0x7f0000000100)={0x8, @sockaddr_1_1}, 0x0) madvise$auto(0x1ffff000, 0x208000000010001, 0x8) 13.594171038s ago: executing program 0 (id=125): socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x3, 0x3a) mmap$auto(0x0, 0x128009, 0xdf, 0xeb1, 0x401, 0x8000) statx$auto(0xffffff9c, 0x0, 0x1000, 0x1, 0x0) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000021}, 0x8004) connect$auto(0x3, &(0x7f0000000140)={0xa, @sa_data_min="c40900448dc7fe8000"}, 0x55) write$auto(0x3, 0x0, 0x5) socket(0x1d, 0x2, 0x6) getsockopt$auto(0x4, 0x6, 0x17, 0xfffffffffffffffc, 0x0) 8.843870567s ago: executing program 2 (id=147): r0 = syz_genetlink_get_family_id$auto_MAC80211_HWSIM(&(0x7f0000000640), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000010c0), 0xffffffffffffffff) sendfile$auto(0x1, 0x3, 0x0, 0xc01) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00') mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) bpf$auto(0x5, &(0x7f0000000000)=@iter_create={0x15, 0x8}, 0x7) mprotect$auto(0x1ffff000, 0x8000000000000001, 0x4) bpf$auto(0x0, &(0x7f0000000000)=@link_create={@map_fd=0x6, @target_fd=0x2, 0x7, 0x10005, @bpf_attr_link_create_4_1={0xd}}, 0xa3) syz_genetlink_get_family_id$auto_netdev(&(0x7f0000003340), 0xffffffffffffffff) bpf$auto(0x15, 0x0, 0x0) socket(0x11, 0xa, 0x300) mmap$auto(0x0, 0x3, 0xdf, 0xeb1, 0x403, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x2000, 0x0) sendmsg$auto_CTRL_CMD_GETPOLICY(r1, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x20, r2, 0x301, 0x4870bd25, 0x25dfdbff, {}, [@CTRL_ATTR_FAMILY_NAME={0x31, 0x2, 'nl80211\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x30000881}, 0xc040810) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000100), r1) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r3, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x20, r0, 0x201, 0x70bd25, 0x25dfdbfb, {}, [@HWSIM_ATTR_PERM_ADDR={0xb, 0x16, "97882974038c96"}]}, 0x20}, 0x1, 0x0, 0x0, 0x20005811}, 0x4004) 7.205918129s ago: executing program 2 (id=152): socket(0x2, 0x2, 0x88) sendmsg$auto_WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x4008810}, 0x20008000) rseq$auto(&(0x7f0000000300)={0xe, 0x401, 0x0, 0x6, 0xffffffff, 0x2}, 0x8000, 0x0, 0x6) mmap$auto(0x0, 0x8, 0x1000000004, 0x9b72, 0x2, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) symlink$auto(&(0x7f0000000000)=')\'{\x00', 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000000c0)='ns/ipc\x00') socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2c, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x11, 0x3, 0x4) bind$auto(0x7, &(0x7f0000000040)={0x11, @sockaddr_1_1={"09bf77019e6a233ac0ea0deae756d22f2203c96537810a000000000000000000"}}, 0x41) 6.681870165s ago: executing program 2 (id=154): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000700), r0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000740)={'wlan1\x00', 0x0}) sendmsg$auto_NL80211_CMD_SET_CHANNEL(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000780)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010027bd70010ee2dffd67da490008000300", @ANYRES32=r2], 0x1c}, 0x1, 0x0, 0x0, 0x4080}, 0x20000000) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) socket$nl_generic(0x10, 0x3, 0x10) socket(0xf, 0x3, 0x2) bpf$auto(0x0, &(0x7f0000000000)=@link_update={0xa, @new_map_fd=0x2, 0x7, @old_prog_fd=0x13b}, 0xa3) bpf$auto(0x2, &(0x7f00000001c0)=@raw_tracepoint={0x5, 0xffff, 0x0, 0x3}, 0xc) bpf$auto(0x1, &(0x7f00000001c0)=@raw_tracepoint={0x5, 0xffff, 0x0, 0x3}, 0xc) mprotect$auto(0x1ffff000, 0x8000000000000001, 0xd) r3 = socket$nl_generic(0x10, 0x3, 0x10) fcntl$auto(0x9, 0x9, 0x947) sendmsg$auto_HSR_C_GET_NODE_LIST(r3, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x40) 2.459086109s ago: executing program 2 (id=162): socket(0x2, 0x2, 0x88) sendmsg$auto_WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x4008810}, 0x20008000) rseq$auto(&(0x7f0000000300)={0xe, 0x401, 0x0, 0x6, 0xffffffff, 0x2}, 0x8000, 0x0, 0x6) mmap$auto(0x0, 0x8, 0x1000000004, 0x9b72, 0x2, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket(0x26, 0x80805, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000000c0)='ns/ipc\x00') socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2c, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x11, 0x3, 0x4) bind$auto(0x7, &(0x7f0000000040)={0x11, @sockaddr_1_1={"09bf77019e6a233ac0ea0deae756d22f2203c96537810a000000000000000000"}}, 0x41) 2.251692858s ago: executing program 3 (id=163): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) mmap$auto(0xfffffffffffffff8, 0x20009, 0x9, 0xeb1, 0x401, 0x8002) mmap$auto(0x10000, 0x8000, 0x2, 0x100000010, 0x7, 0x1) prctl$auto(0x1000000003b, 0x1, 0x4, 0x2, 0x7) mmap$auto(0x20000005, 0x1006, 0x4, 0x13, 0x2, 0x2) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) mmap$auto(0x0, 0x2020009, 0xebcc7df, 0x90, 0xfffffffffffffffa, 0x8000) mmap$auto(0xfcc, 0xffffffffffffffff, 0x6a, 0x263e, 0xfff, 0x10) mmap$auto(0x5, 0x20009, 0xdf, 0x11, 0x404, 0x0) prctl$auto(0x1000000003b, 0x1, 0x4, 0x2, 0x7) madvise$auto(0x0, 0xffffffffffff0001, 0x15) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) fsopen$auto(&(0x7f00000001c0)='nfsd\x00', 0x1) sysfs$auto(0x2, 0x1c, 0x0) fsopen$auto(0x0, 0xffffffe7) close_range$auto(0x2, 0x8000, 0x0) close_range$auto(0x2, 0x8000, 0x0) io_uring_setup$auto(0x2, 0x0) io_uring_register$auto(0x2, 0x18, &(0x7f0000000040), 0x9) tee$auto(0x32c8, 0x7, 0x0, 0x5) mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0xf, 0x0) socket$nl_generic(0x10, 0x3, 0x10) pipe2$auto(&(0x7f0000000140)=0x2, 0x800) read$auto(0x4, 0x0, 0x80) chdir$auto(&(0x7f0000000000)='}[,&*}\x00') socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) statx$auto(0xffffff9c, 0x0, 0x1000, 0x1, 0x0) rename$auto(0x0, 0x0) 2.153646025s ago: executing program 2 (id=164): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) sendmsg$auto_BATADV_CMD_TP_METER(0xffffffffffffffff, 0x0, 0x20008005) setrlimit$auto(0x1000000007, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x15) fsconfig$auto(0x3, 0x3, 0xfffffffffffffffd, 0x0, 0x8000) mremap$auto(0x0, 0x4, 0x4, 0x7, 0x100000000) io_uring_setup$auto(0x6, 0x0) madvise$auto(0x0, 0x200007, 0x19) prctl$auto(0x23, 0xc, 0x0, 0x2, 0x9) r0 = socket$nl_generic(0x10, 0x3, 0x10) pidfd_open$auto(0x1, 0x0) io_uring_setup$auto(0x6, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0x840000000002, 0x3, 0xff) mmap$auto(0x0, 0x1004, 0x4000000000df, 0x40eb2, 0x402, 0x300000000000) clock_gettime$auto(0x8, 0x0) capget$auto(0x0, 0x0) capget$auto(0x0, &(0x7f0000000100)={0x3, 0x400, 0x1ff}) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) r1 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000040), r0) r2 = getpgrp(0x0) sendmsg$auto_NL802154_CMD_GET_INTERFACE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="09ee2cbd7823c062b554e5f20700d38fa38ce41c00ae916ebe14775de404206d5eea8fd0a389015849b437eddd0fd6985edcee76d0efe738fbffd8bd67caf0f50013733eb33c04bd4ba963c1ae0d6d4bad2985d149fddab651534234e9ea98505ed6af98bc9d3f3877d646ff810f72b50c796298c7d30f5cfb65bc76ce7a64e001f54906a69707d0717e9fe639e6bae9da47e594d5ff6f2f6f606ab1e1e3bfcc4139d383d16448", @ANYRES32=r2, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x58c1}, 0x400c000) socket$nl_generic(0x10, 0x3, 0x10) socket(0x13, 0x3, 0x80000000) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x4, 0x300000000000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8000, 0x0) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x1a, &(0x7f0000000000), 0x1) 2.127426794s ago: executing program 1 (id=165): mmap$auto(0x0, 0xa, 0xdb, 0x9b72, 0x5, 0x8000) (async) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/uts\x00') socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1d, 0x4, 0x1) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$auto_nbd(&(0x7f0000002100), 0xffffffffffffffff) sendmsg$auto_NBD_CMD_DISCONNECT(r0, &(0x7f0000002240)={0x0, 0x0, &(0x7f0000002200)={&(0x7f0000002140)={0x1c, r1, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20044800}, 0x4000) (async) socket(0x2, 0x801, 0x100) connect$auto(0x3, &(0x7f00000000c0)={0x2, @sockaddr_1_1}, 0x55) (async) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) ioctl$auto(0x3, 0x800005411, 0x38) (async) open(&(0x7f0000000000)='./file0\x00', 0x261c2, 0x84) (async) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) (async) memfd_secret$auto(0x0) pipe2$auto(0x0, 0x80) sendfile$auto(0x6, 0x3, 0x0, 0x0) getsockopt$auto(0x6, 0x65, 0x3, 0xffffffffffffffff, 0x0) (async) socket(0xf, 0x3, 0x2) (async) mmap$auto(0x0, 0x8, 0x2, 0x9b72, 0x5, 0x0) (async) close_range$auto(0x0, 0xfffffffffffff000, 0x2) (async) socket$nl_generic(0x10, 0x3, 0x10) socket(0x23, 0x80805, 0x0) (async) memfd_secret$auto(0x0) (async) socket(0x2b, 0x1, 0x1) (async) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) (async) socket(0xa, 0x5, 0x0) (async) getsockopt$auto(0x6, 0x84, 0x82, 0x0, &(0x7f0000000080)=0x9c8) (async) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) 1.77303357s ago: executing program 3 (id=166): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) getrandom$auto(0x0, 0x6000000, 0x3) (async) close_range$auto(0x2, 0x8, 0x0) (async, rerun: 32) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r0 = socket(0x10, 0x3, 0x6) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) (async) socket(0x2, 0x1, 0x0) (async) setsockopt$auto(0x6, 0x8000000000000006, 0x8, 0x0, 0x7ffffc) mmap$auto(0x0, 0x401008, 0xdf, 0x9b72, 0x1, 0x8000) (async, rerun: 32) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) (async, rerun: 32) sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x2c, 0x0, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, 0x1}, @GTPA_MS_ADDRESS={0x8, 0x5, 0x4}, @GTPA_LINK={0x8, 0x1, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8010}, 0x4004804) syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000180), 0xffffffffffffffff) (async, rerun: 64) sendmmsg$auto(0x3, &(0x7f0000000000)={{0x0, 0x2, 0x0, 0x106, 0x0, 0x1, 0x697b}, 0xed7138c}, 0x9a6, 0xe000) (async, rerun: 64) write$auto(r0, &(0x7f00000000c0)='\')H&}-!.\x00', 0x8) 1.601847929s ago: executing program 1 (id=167): r0 = socket(0x10, 0x2, 0xc) r1 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000000c0), 0xffffffffffffffff) r2 = syz_genetlink_get_family_id$auto_802_15_4_MAC(&(0x7f0000000040), r0) sendmsg$auto_IEEE802154_ASSOCIATE_RESP(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x24, r2, 0x20, 0x70bd28, 0x25dfdbfe, {}, [@IEEE802154_ATTR_CCA_MODE={0x5, 0x23, 0x9}, @IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0xfac}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x14) mq_getsetattr$auto(0x0, &(0x7f0000000180)={0xa, 0x40000, 0x6, 0xfffffffffffffff7}, 0x0) sendmsg$auto_CTRL_CMD_GETPOLICY(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="5cb04505669709e465251500000adb"], 0xfdef}, 0x1, 0x0, 0x0, 0x20000000}, 0x2000000) 1.366866s ago: executing program 1 (id=168): mknod$auto(&(0x7f00000001c0)=':h\xb7\x1d\xeb\xdb\xf2(,>', 0xc9, 0x3) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'veth0_to_bond\x00'}) ioctl$auto(r0, 0x9, 0x19) execve$auto(&(0x7f0000000000)=':,\x00', 0x0, 0x0) mknod$auto(&(0x7f0000000140)=':,\x00', 0x5, 0x3ff) mknod$auto(&(0x7f0000000080)='\x00', 0xffff, 0xffffff33) mprotect$auto(0x1ffff000, 0x8000000000000001, 0xd) mount$auto(&(0x7f0000000000)='pimreg\x00', &(0x7f0000000040)='\x00', 0x0, 0x10dfd057, 0x0) mount$auto(&(0x7f00000000c0)='veth1_to_bridge\x00', &(0x7f0000000100)='\x00', 0x0, 0x444, 0x0) 1.19072078s ago: executing program 1 (id=169): r0 = socket(0xa, 0x801, 0x84) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x8, 0x9, 0x2) (async) semctl$auto(0x4000001ff, 0xffffffffffffffff, 0x13, 0x3) (async) ioctl$auto(0xc8, 0x400454dc, 0xe) connect$auto(r0, &(0x7f0000000000)={0x2, @sockaddr_1_1={"d9ef7f"}}, 0x55) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000bc0), 0xffffffffffffffff) mmap$auto(0x0, 0x8, 0x2, 0x9b72, 0x5, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) sendmsg$auto_MACSEC_CMD_ADD_RXSC(0xffffffffffffffff, 0x0, 0x4000) (async) mlockall$auto(0x7) (async) mmap$auto(0x0, 0x4, 0x1, 0x40eb2, 0x402, 0x300000000000) (async) timerfd_settime$auto(r0, 0x9, &(0x7f0000000080)={{0x8, 0x2}, {0xffffffffffffffff, 0x8}}, &(0x7f0000000140)={{0x9, 0x2}, {0x8, 0x7fffffffffffffff}}) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f00000001c0), r0) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'geneve0\x00', 0x0}) (async) r7 = getpid() syz_open_procfs$namespace(r7, &(0x7f0000000000)='ns/cgroup\x00') (async) sendmsg$auto_OVS_DP_CMD_GET(r0, &(0x7f0000000380)={&(0x7f0000000180), 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x48, r5, 0x8, 0x70bd28, 0x25dfdbfe, {}, [@OVS_DP_ATTR_NAME={0xc, 0x1, 'batadv0\x00'}, @OVS_DP_ATTR_MASKS_CACHE_SIZE={0x8, 0x7, 0x8000}, @OVS_DP_ATTR_IFINDEX={0x8, 0x9, r6}, @OVS_DP_ATTR_UPCALL_PID={0x8}, @OVS_DP_ATTR_MASKS_CACHE_SIZE={0x8, 0x7, 0x3}, @OVS_DP_ATTR_UPCALL_PID={0x8, 0x2, r7}]}, 0x48}, 0x1, 0x0, 0x0, 0x40004080}, 0x10000) r8 = syz_genetlink_get_family_id$auto_IPVS(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$auto_IPVS_CMD_GET_CONFIG(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000000c0)={0x14, r8, 0x811, 0x0, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x40008051}, 0x4000) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) (async) read$auto(0x3, 0x0, 0x7) sendmsg$auto_BATADV_CMD_GET_TRANSTABLE_LOCAL(r2, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000100)={0x1c, r1, 0x305, 0x70bd23, 0x25dfdbfb, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40040}, 0x4000040) select$auto(0xe, 0x0, 0x0, &(0x7f0000000200)={[0x8, 0xffffffffffffff49, 0x5, 0x1823, 0x800000000004, 0x1, 0x5, 0x19, 0xd3c, 0x5, 0x2dde, 0x8, 0xfffffffffffffffa, 0xab, 0x0, 0x1]}, &(0x7f0000000040)={0x0, 0x7}) 737.77931ms ago: executing program 2 (id=170): mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x402, 0x300000000000) socket(0xa, 0x2, 0x73) mmap$auto(0x0, 0x400008, 0x7f, 0x9b72, 0x2, 0x8000) clock_gettime$auto(0x1, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0xa00) clone$auto(0x7, 0x7fffffffffffffff, 0xffffffffffffffff, 0x0, 0x1) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x8a802, 0x14) fchmodat$auto(r0, &(0x7f0000000140)='\x00', 0x7) dup2$auto(0x800000003, 0x3) r1 = socket(0x8, 0x5, 0x4) bpf$auto(0x0, &(0x7f0000000100)=@bpf_attr_4={0x12, 0x4, 0x80000001, 0x8}, 0x6f4) sendmmsg$auto(0x3, &(0x7f0000000040)={{0x0, 0x2, &(0x7f00000001c0)={0x0, 0x1}, 0x7fff, 0x0, 0x0, 0xa}, 0xed7138c}, 0x200, 0x0) r3 = socket(0x10, 0x2, 0x0) syz_genetlink_get_family_id$auto_tcp_metrics(0x0, 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_REG(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB=' \x00\''], 0x1ac}}, 0x40000) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) clock_nanosleep$auto(0x6, 0x6, 0x0, 0xfffffffffffffffd) clone$auto(0x56, 0x6, 0x0, 0x0, 0xfffffffffffffffe) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0xa636, 0x8005) landlock_restrict_self$auto(r1, 0x5) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) futex_wake$auto(&(0x7f0000000080)=[0x70], 0x4, 0x7, 0x80000000) ioperm$auto(0x3, 0x5, 0x149) bind$auto(0x4, 0xfffffffffffffffe, 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) set_robust_list$auto(0xfffffffffffffffe, 0xffffffffffffffff) socketpair$auto(0x8, 0x5, 0x8, &(0x7f0000000040)=0x4) sendmsg$auto_NCSI_CMD_SET_PACKAGE_MASK(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x20004051) sendmmsg$auto(r2, &(0x7f0000000000)={{0x0, 0x400002, 0x0, 0x106, 0x0, 0x1, 0x697c}, 0xed7138c}, 0x19a3, 0x40004) mmap$auto(0x1, 0x0, 0x97bc, 0x12, 0x7, 0x0) 693.756268ms ago: executing program 3 (id=171): r0 = socket$nl_generic(0x10, 0x3, 0x10) setgroups$auto(0xe32, &(0x7f0000000040)=0x9) syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000080), r0) r1 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f00000000c0), r0) sendmsg$auto_NFSD_CMD_THREADS_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="6ec64759109753d2e5b81172e1295c100ce778391593f2519d258eee62241b8efa7bda67c64b87c0db3cc73c959fae1e62dad008204c53dbc6dae1714e506d63ca2a699fa1cbbc02166794053c97629a9a309dee9e91f1423e7a45da65f1dfbe09ea14bb0a6717bb93ce481eea96c2740c27d714578e5751f729d8fb4abe8411a9e822e22cdfa6c95aa103e6022a6840a471df135113a6b074f73cbffc5866e11da31cb19e88c0dbf8000000000000000000", @ANYRES16=r1, @ANYBLOB="01002dbd7000ffdbdf25020000000800010001000000090004006e66736400000000090004006e66736400000000090004006e667364000000000800010007000000"], 0x48}, 0x1, 0x0, 0x0, 0x8f640af1a6778917}, 0x8004) 574.69842ms ago: executing program 3 (id=172): socket(0x2, 0x2, 0x88) sendmsg$auto_WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x4008810}, 0x20008000) rseq$auto(&(0x7f0000000300)={0xe, 0x401, 0x0, 0x6, 0xffffffff, 0x2}, 0x8000, 0x0, 0x6) mmap$auto(0x0, 0x8, 0x1000000004, 0x9b72, 0x2, 0x8000) socket(0x26, 0x80805, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000000c0)='ns/ipc\x00') socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2c, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x11, 0x3, 0x4) bind$auto(0x7, &(0x7f0000000040)={0x11, @sockaddr_1_1={"09bf77019e6a233ac0ea0deae756d22f2203c96537810a000000000000000000"}}, 0x41) 466.099293ms ago: executing program 3 (id=173): mmap$auto(0x0, 0x9, 0x3ff57696, 0x9b72, 0x2, 0x8000000000008000) socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) socket(0x37, 0x4, 0x10) socket(0x15, 0x5, 0x0) fanotify_init$auto(0x65, 0x2) (async) fanotify_init$auto(0x65, 0x2) pipe$auto(&(0x7f0000000080)) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x2, 0x3, 0xa) socket(0xa, 0x3, 0x6) (async) socket(0xa, 0x3, 0x6) socket(0x11, 0x80003, 0x300) (async) r1 = socket(0x11, 0x80003, 0x300) socketpair$auto(0x41, 0x5, 0x4245, 0x0) (async) socketpair$auto(0x41, 0x5, 0x4245, 0x0) setsockopt$auto(r1, 0x107, 0x18, 0x0, 0x9) mq_open$auto(0x0, 0x3ff, 0x7, &(0x7f0000000140)={0x7, 0x2f05, 0xa509, 0x4}) connect$auto(0x3, &(0x7f0000000140)={0xa, @sa_data_min="c4aeed448dc7fe8000"}, 0x55) get_mempolicy$auto(0x0, &(0x7f0000000040)=0x64, 0xfffffffffffffff7, 0x2, 0x4) (async) get_mempolicy$auto(0x0, &(0x7f0000000040)=0x64, 0xfffffffffffffff7, 0x2, 0x4) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) bpf$auto(0x5, &(0x7f0000000000)=@bpf_attr_3={0x8, 0xffffffff, 0x18c, 0x6a, 0x0, 0x8, 0x9, 0x9, 0xfffffff8, "63acf0e05b2d33ebc15774e816ef77cf", 0x0, 0x541, 0x4, 0xa, 0x3, 0x1009, 0x10001, 0x0, 0xe, 0x5, @attach_btf_obj_fd=0x20003, 0x166, 0x7ff, 0x20006, 0x26, 0x48000000, 0xa7c2}, 0x7) connect$auto(r0, &(0x7f0000000180)={0xfffe, @sa_data_min="1fe0664912c980a8f7a705a30e07"}, 0x55) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0) setsockopt$auto(0x3, 0x1, 0x19, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x2, 0x0) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_RSS_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x6004832}, 0x40000) (async) sendmsg$auto_ETHTOOL_MSG_RSS_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x6004832}, 0x40000) recvmmsg$auto(0x3, 0x0, 0x6, 0x7bd6, 0x0) 401.770391ms ago: executing program 1 (id=174): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$auto(&(0x7f0000000000)=0x4, 0x4) waitid$auto(0x2, 0xffffff81, &(0x7f0000000180)={@_si_pad}, 0x9, &(0x7f0000000200)={{0x2, 0xfffffffffffffff8}, {0x1, 0x3}, 0x7, 0x7, 0x80000000, 0x5, 0x9, 0x80000001, 0x8, 0x8, 0x861, 0x40, 0x80000001, 0x6b, 0x7e, 0xfffffffffffffffd}) r0 = socket(0x21, 0x2, 0xa) syz_genetlink_get_family_id$auto_TASKSTATS(&(0x7f0000000040), r0) socket(0xa, 0x801, 0x84) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x1b, 0x0}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x801, 0x84) connect$auto(0x3, &(0x7f0000000140)={0xa, @sa_data_min="c40900448dc7fe8000"}, 0x55) map_shadow_stack$auto(0x100, 0x8, 0x2) listen$auto(0x3, 0x81) accept$auto(0x3, 0x0, 0x0) mmap$auto(0x0, 0x2, 0xdf, 0x9b72, 0x7, 0x28000) getsockopt$auto(0x6, 0x84, 0x6d, 0x0, &(0x7f00000000c0)=0x10000) waitid$auto(0x0, 0x2, 0x0, 0x4, 0x0) 165.25729ms ago: executing program 3 (id=175): mmap$auto(0x0, 0x2, 0xdf, 0xeb1, 0xffffffff, 0x8000) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) socket(0x2, 0x1, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_ila(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_ILA_CMD_ADD(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r2, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@ILA_ATTR_IDENT_TYPE={0x5, 0x8, 0xe}, @ILA_ATTR_IDENT_TYPE={0x5, 0x8, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000001}, 0x20000040) bpf$auto(0x5, &(0x7f0000000000)=@bpf_attr_3={0x8, 0x9067, 0x18c, 0x4, 0x2, 0x8, 0x4, 0x57b8, 0xfffffff8, "63acf0e05b2d33ebc15774e816ef77cf", 0x0, 0x543, 0x4, 0x207, 0x3, 0x4, 0x4, 0x2, 0xe, 0xa, @attach_btf_obj_fd=0x3, 0x166, 0x7fb, 0x80000200006, 0xa, 0x48000000, 0xa7c2}, 0x102) socket(0xa, 0x801, 0x84) bind$auto(0x3, &(0x7f0000000040)={0xa, @sa_data_min="001000000000fe8000"}, 0x69) sendmsg$auto_ILA_CMD_FLUSH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r2, 0x1, 0x70bd2a, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x20000090) socket(0x2, 0x801, 0x100) epoll_create$auto(0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) capget$auto(0x0, 0x0) epoll_ctl$auto(0x5, 0x1, r3, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) epoll_ctl$auto(0x5, 0x3, r3, 0x0) write$auto(0x3, 0x0, 0xfff5) sendmmsg$auto(0x3, &(0x7f0000000000)={{0x0, 0x2, 0x0, 0x106, 0x0, 0x1, 0x3}, 0xed7138c}, 0x7, 0x0) close_range$auto(0x2, 0x8000, 0x0) 0s ago: executing program 1 (id=176): r0 = socket(0xa, 0x801, 0x106) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_netdev(&(0x7f0000001500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'ipvlan0\x00', 0x0}) sendmsg$auto_NETDEV_CMD_QUEUE_GET(r1, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000000040)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010026bd7000fedbdf250a000000080003000100000008000200", @ANYRES32=r3, @ANYBLOB="08000100"], 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x22048814) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.33' (ED25519) to the list of known hosts. [ 65.225730][ T5827] cgroup: Unknown subsys name 'net' [ 65.355544][ T5827] cgroup: Unknown subsys name 'cpuset' [ 65.363427][ T5827] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 66.678364][ T5827] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 69.302671][ T5847] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 69.311132][ T5847] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 69.320442][ T5847] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 69.328408][ T5847] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 69.337111][ T5847] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 69.345952][ T5847] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 69.353683][ T5847] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 69.354605][ T5852] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 69.360994][ T5847] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 69.370145][ T5853] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 69.378466][ T5847] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 69.386555][ T5853] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 69.391461][ T5847] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 69.396912][ T5853] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 69.404283][ T5847] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 69.410180][ T5855] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 69.417767][ T5847] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 69.425784][ T5853] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 69.443949][ T5851] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 69.452970][ T5853] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 69.462702][ T5853] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 69.471063][ T5853] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 69.483064][ T5855] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 69.490748][ T54] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 69.779182][ T5844] chnl_net:caif_netlink_parms(): no params data found [ 69.870409][ T5838] chnl_net:caif_netlink_parms(): no params data found [ 69.914019][ T5836] chnl_net:caif_netlink_parms(): no params data found [ 69.954753][ T5837] chnl_net:caif_netlink_parms(): no params data found [ 69.988589][ T5844] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.997049][ T5844] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.006696][ T5844] bridge_slave_0: entered allmulticast mode [ 70.014221][ T5844] bridge_slave_0: entered promiscuous mode [ 70.024032][ T5844] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.031170][ T5844] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.038506][ T5844] bridge_slave_1: entered allmulticast mode [ 70.045605][ T5844] bridge_slave_1: entered promiscuous mode [ 70.103927][ T5838] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.111073][ T5838] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.118866][ T5838] bridge_slave_0: entered allmulticast mode [ 70.125832][ T5838] bridge_slave_0: entered promiscuous mode [ 70.161698][ T5838] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.169041][ T5838] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.178961][ T5838] bridge_slave_1: entered allmulticast mode [ 70.185840][ T5838] bridge_slave_1: entered promiscuous mode [ 70.197498][ T5844] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.209965][ T5836] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.217238][ T5836] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.225003][ T5836] bridge_slave_0: entered allmulticast mode [ 70.231584][ T5836] bridge_slave_0: entered promiscuous mode [ 70.247988][ T5844] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.266863][ T5836] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.274097][ T5836] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.281217][ T5836] bridge_slave_1: entered allmulticast mode [ 70.288553][ T5836] bridge_slave_1: entered promiscuous mode [ 70.321641][ T5837] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.328891][ T5837] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.336601][ T5837] bridge_slave_0: entered allmulticast mode [ 70.343733][ T5837] bridge_slave_0: entered promiscuous mode [ 70.361677][ T5838] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.380324][ T5837] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.387562][ T5837] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.395184][ T5837] bridge_slave_1: entered allmulticast mode [ 70.401877][ T5837] bridge_slave_1: entered promiscuous mode [ 70.410100][ T5836] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.423265][ T5836] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.433767][ T5838] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.445904][ T5844] team0: Port device team_slave_0 added [ 70.476044][ T5844] team0: Port device team_slave_1 added [ 70.516591][ T5837] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.529723][ T5836] team0: Port device team_slave_0 added [ 70.540034][ T5838] team0: Port device team_slave_0 added [ 70.555879][ T5837] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.566687][ T5836] team0: Port device team_slave_1 added [ 70.576000][ T5838] team0: Port device team_slave_1 added [ 70.582955][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.589927][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.616412][ T5844] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.651416][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.658525][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.685051][ T5844] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.722679][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.729655][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.756330][ T5838] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.770508][ T5837] team0: Port device team_slave_0 added [ 70.787963][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.795064][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.822165][ T5836] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.842532][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.849500][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.878771][ T5838] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.900778][ T5837] team0: Port device team_slave_1 added [ 70.916635][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.923703][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.950108][ T5836] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.971032][ T5844] hsr_slave_0: entered promiscuous mode [ 70.978123][ T5844] hsr_slave_1: entered promiscuous mode [ 71.015858][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.022949][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.049601][ T5837] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.063503][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.070468][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.096564][ T5837] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.117999][ T5838] hsr_slave_0: entered promiscuous mode [ 71.125972][ T5838] hsr_slave_1: entered promiscuous mode [ 71.132589][ T5838] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 71.140412][ T5838] Cannot create hsr debugfs directory [ 71.197004][ T5836] hsr_slave_0: entered promiscuous mode [ 71.204693][ T5836] hsr_slave_1: entered promiscuous mode [ 71.210683][ T5836] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 71.218682][ T5836] Cannot create hsr debugfs directory [ 71.253906][ T5837] hsr_slave_0: entered promiscuous mode [ 71.260442][ T5837] hsr_slave_1: entered promiscuous mode [ 71.268879][ T5837] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 71.276642][ T5837] Cannot create hsr debugfs directory [ 71.497689][ T5845] Bluetooth: hci0: command tx timeout [ 71.503587][ T54] Bluetooth: hci3: command tx timeout [ 71.529982][ T5844] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 71.542902][ T5844] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 71.552633][ T5844] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 71.571983][ T54] Bluetooth: hci1: command tx timeout [ 71.577653][ T5845] Bluetooth: hci2: command tx timeout [ 71.588503][ T5844] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 71.634741][ T5838] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 71.648451][ T5838] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 71.659890][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.666845][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.672928][ T5838] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 71.686197][ T5838] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 71.731902][ T5836] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 71.745033][ T5836] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 71.757673][ T5836] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 71.772372][ T5836] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 71.846623][ T5837] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 71.859460][ T5837] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 71.882438][ T5837] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 71.892777][ T5837] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 71.943889][ T5844] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.988447][ T5844] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.005182][ T5838] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.026838][ T3486] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.034401][ T3486] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.074470][ T3486] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.081546][ T3486] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.099746][ T5838] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.136550][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.143733][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.180870][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.187983][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.205824][ T5836] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.267450][ T5837] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.288560][ T5836] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.319406][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.326580][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.355803][ T1327] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.362980][ T1327] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.392860][ T5837] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.446276][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.453451][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.499000][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.506187][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.579774][ T5844] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.694067][ T5844] veth0_vlan: entered promiscuous mode [ 72.728480][ T5844] veth1_vlan: entered promiscuous mode [ 72.750493][ T5838] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.814736][ T5844] veth0_macvtap: entered promiscuous mode [ 72.836967][ T5836] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.848520][ T5844] veth1_macvtap: entered promiscuous mode [ 72.884994][ T5838] veth0_vlan: entered promiscuous mode [ 72.918646][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.939536][ T5838] veth1_vlan: entered promiscuous mode [ 72.953408][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.971525][ T5837] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.000283][ T5844] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.016419][ T5844] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.027305][ T5844] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.036206][ T5844] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.047379][ T5836] veth0_vlan: entered promiscuous mode [ 73.067556][ T5836] veth1_vlan: entered promiscuous mode [ 73.099639][ T5838] veth0_macvtap: entered promiscuous mode [ 73.111547][ T5838] veth1_macvtap: entered promiscuous mode [ 73.163284][ T5838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.174875][ T5838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.187252][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.208514][ T5836] veth0_macvtap: entered promiscuous mode [ 73.217184][ T5837] veth0_vlan: entered promiscuous mode [ 73.228925][ T5838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.239713][ T5838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.251284][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.271691][ T5836] veth1_macvtap: entered promiscuous mode [ 73.279576][ T5838] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.288978][ T5838] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.298255][ T5838] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.307244][ T5838] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.333322][ T3486] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.347645][ T3486] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.350044][ T5837] veth1_vlan: entered promiscuous mode [ 73.394206][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.405530][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.418790][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.429863][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.442268][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.456781][ T3486] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.466182][ T3486] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.481148][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.493842][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.504347][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.515323][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.531145][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.561132][ T5836] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.571175][ T5836] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.579548][ T5844] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 73.581641][ T5845] Bluetooth: hci0: command tx timeout [ 73.601299][ T54] Bluetooth: hci3: command tx timeout [ 73.607784][ T5836] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.616724][ T5836] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.653137][ T54] Bluetooth: hci1: command tx timeout [ 73.658815][ T5845] Bluetooth: hci2: command tx timeout [ 73.726031][ T5837] veth0_macvtap: entered promiscuous mode [ 73.737468][ T5837] veth1_macvtap: entered promiscuous mode [ 73.752206][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.762776][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.772673][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.783149][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.793065][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.803571][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.815053][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.827218][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.838258][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.848651][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.859376][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.869447][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.879944][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.891530][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.901955][ T5837] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.910693][ T5837] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.919666][ T5837] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.928716][ T5837] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.945982][ T1327] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.956787][ T1327] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.018841][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.030374][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.071390][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.079688][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.130609][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.142985][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.170930][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.179012][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.235721][ T3516] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.251570][ T3516] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.371224][ T5906] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 74.735008][ T5918] syz.2.5 uses obsolete (PF_INET,SOCK_PACKET) [ 74.758648][ T5918] openvswitch: netlink: Key type 8590 is out of range max 32 [ 74.905487][ T5925] syz.2.6(5925): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 75.661913][ T5845] Bluetooth: hci0: command tx timeout [ 75.662661][ T54] Bluetooth: hci3: command tx timeout [ 75.731888][ T54] Bluetooth: hci2: command tx timeout [ 75.731987][ T5845] Bluetooth: hci1: command tx timeout [ 76.506913][ T5962] process 'syz.2.16' launched ':,' with NULL argv: empty string added [ 76.866552][ T5972] Zero length message leads to an empty skb [ 77.695590][ T6002] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 77.738796][ T5845] Bluetooth: hci3: command tx timeout [ 77.738806][ T54] Bluetooth: hci0: command tx timeout [ 77.813672][ T5845] Bluetooth: hci2: command tx timeout [ 77.813687][ T54] Bluetooth: hci1: command tx timeout [ 79.197904][ T6029] netlink: 4 bytes leftover after parsing attributes in process `syz.3.31'. [ 79.769958][ T6049] mmap: syz.1.34 (6049) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 81.923984][ T968] cfg80211: failed to load regulatory.db [ 83.002290][ T6089] netlink: 330 bytes leftover after parsing attributes in process `syz.0.44'. [ 85.146665][ T6172] netlink: 8 bytes leftover after parsing attributes in process `syz.3.67'. [ 87.887903][ T6219] netlink: 8 bytes leftover after parsing attributes in process `syz.1.75'. [ 88.032775][ T6202] svc: failed to register nfsdv3 RPC service (errno 111). [ 88.094067][ T6202] svc: failed to register nfsaclv3 RPC service (errno 111). [ 88.888233][ T6235] can: request_module (can-proto-5) failed. [ 90.600712][ T6292] netlink: 334 bytes leftover after parsing attributes in process `syz.3.95'. [ 90.632170][ T6293] netlink: 'syz.2.97': attribute type 11 has an invalid length. [ 92.254034][ T6317] netlink: 334 bytes leftover after parsing attributes in process `syz.1.100'. [ 93.407245][ T6349] svc: failed to register nfsdv3 RPC service (errno 111). [ 93.428198][ T6349] svc: failed to register nfsaclv3 RPC service (errno 111). [ 95.980651][ T52] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.294680][ T52] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.617456][ T52] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.925078][ T52] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.015589][ T6434] netlink: 8 bytes leftover after parsing attributes in process `syz.3.126'. [ 97.143173][ T6437] netlink: 8 bytes leftover after parsing attributes in process `syz.3.126'. [ 97.275894][ T54] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 97.305622][ T54] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 97.320474][ T54] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 97.340134][ T54] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 97.352048][ T54] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 97.361196][ T54] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 97.512780][ T52] bridge_slave_1: left allmulticast mode [ 97.518767][ T52] bridge_slave_1: left promiscuous mode [ 97.573207][ T52] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.605287][ T6430] Process accounting resumed [ 97.767346][ T52] bridge_slave_0: left allmulticast mode [ 97.778702][ T52] bridge_slave_0: left promiscuous mode [ 97.802046][ T52] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.478858][ T6473] syz.3.132 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 99.207623][ T52] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 99.322452][ T52] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 99.380571][ T52] bond0 (unregistering): Released all slaves [ 99.416790][ T5845] Bluetooth: hci0: command tx timeout [ 99.935194][ T6440] chnl_net:caif_netlink_parms(): no params data found [ 101.135203][ T6440] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.172711][ T6440] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.192319][ T6440] bridge_slave_0: entered allmulticast mode [ 101.199385][ T6440] bridge_slave_0: entered promiscuous mode [ 101.229723][ T6440] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.264581][ T6440] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.274433][ T6440] bridge_slave_1: entered allmulticast mode [ 101.281530][ T6440] bridge_slave_1: entered promiscuous mode [ 101.491904][ T5845] Bluetooth: hci0: command tx timeout [ 102.020021][ T6440] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 102.035721][ T6440] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 102.401543][ T6440] team0: Port device team_slave_0 added [ 102.532863][ T6440] team0: Port device team_slave_1 added [ 103.111267][ T52] hsr_slave_0: left promiscuous mode [ 103.164233][ T52] hsr_slave_1: left promiscuous mode [ 103.199832][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 103.207749][ T52] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 103.275533][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 103.306580][ T52] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 103.435587][ T52] veth1_macvtap: left promiscuous mode [ 103.465708][ T52] veth0_macvtap: left promiscuous mode [ 103.471637][ T52] veth1_vlan: left promiscuous mode [ 103.485852][ T52] veth0_vlan: left promiscuous mode [ 103.572158][ T5845] Bluetooth: hci0: command tx timeout [ 105.652611][ T5845] Bluetooth: hci0: command tx timeout [ 106.127840][ T52] team0 (unregistering): Port device team_slave_1 removed [ 106.307264][ T52] team0 (unregistering): Port device team_slave_0 removed [ 107.536389][ T6440] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 107.546140][ T6440] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 107.589975][ T6440] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 107.677451][ T6440] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 107.697531][ T6440] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 107.800961][ T6440] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 108.104218][ T6440] hsr_slave_0: entered promiscuous mode [ 108.112282][ T6440] hsr_slave_1: entered promiscuous mode [ 108.150251][ T6440] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 108.171277][ T6440] Cannot create hsr debugfs directory [ 109.803839][ T6440] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 109.832803][ T6440] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 109.888117][ T6440] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 109.938612][ T6440] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 110.240345][ T6440] 8021q: adding VLAN 0 to HW filter on device bond0 [ 110.280085][ T6698] ------------[ cut here ]------------ [ 110.286770][ T6698] skb_assert_len [ 110.294045][ T6440] 8021q: adding VLAN 0 to HW filter on device team0 [ 110.310490][ T6698] WARNING: CPU: 1 PID: 6698 at include/linux/skbuff.h:2679 __dev_queue_xmit+0x22cf/0x4350 [ 110.320682][ T6698] Modules linked in: [ 110.324730][ T6698] CPU: 1 UID: 0 PID: 6698 Comm: syz.1.176 Not tainted 6.12.0-rc5-syzkaller-00330-ga33ab3f94f51 #0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 110.335578][ T6698] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 110.345916][ T6698] RIP: 0010:__dev_queue_xmit+0x22cf/0x4350 [ 110.351961][ T6698] Code: 47 70 9b f8 40 84 ed 75 25 e8 5d 6e 9b f8 c6 05 c7 83 14 07 01 90 48 c7 c6 c0 ea 7a 8c 48 c7 c7 60 b9 7a 8c e8 92 ed 5c f8 90 <0f> 0b 90 90 e8 38 6e 9b f8 0f b6 2d a1 83 14 07 31 ff 89 ee e8 08 [ 110.371702][ T6698] RSP: 0018:ffffc900045b7188 EFLAGS: 00010286 [ 110.377850][ T6698] RAX: 0000000000000000 RBX: ffff88802854e640 RCX: ffffc90004c92000 [ 110.386073][ T6698] RDX: 0000000000040000 RSI: ffffffff814e24c6 RDI: 0000000000000001 [ 110.395007][ T6698] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 [ 110.403872][ T6440] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 110.403933][ T6440] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 110.424776][ T6698] R10: 0000000000000001 R11: 0000000000000001 R12: ffff88802854e650 [ 110.432836][ T6698] R13: 0000000000000000 R14: 0000000000000000 R15: ffff88806917a000 [ 110.440846][ T6698] FS: 00007fd5383786c0(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 110.450005][ T6698] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 110.456730][ T6698] CR2: 00007f0b93cd9f98 CR3: 00000000302fe000 CR4: 00000000003526f0 [ 110.464978][ T6698] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 110.473067][ T6698] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 110.481096][ T6698] Call Trace: [ 110.484503][ T6698] [ 110.487467][ T6698] ? __warn+0xea/0x3d0 [ 110.492317][ T6698] ? preempt_schedule_notrace+0x62/0xe0 [ 110.497911][ T6698] ? __dev_queue_xmit+0x22cf/0x4350 [ 110.503711][ T6698] ? report_bug+0x3c0/0x580 [ 110.508276][ T6698] ? handle_bug+0x54/0xa0 [ 110.512698][ T6698] ? exc_invalid_op+0x17/0x50 [ 110.517414][ T6698] ? asm_exc_invalid_op+0x1a/0x20 [ 110.522619][ T6698] ? __warn_printk+0x1a6/0x350 [ 110.527423][ T6698] ? __dev_queue_xmit+0x22cf/0x4350 [ 110.532974][ T6698] ? __dev_queue_xmit+0x22ce/0x4350 [ 110.538217][ T6698] ? netlink_sendmsg+0x8b8/0xd70 [ 110.543305][ T6698] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 110.549428][ T6698] ? __pfx___dev_queue_xmit+0x10/0x10 [ 110.554920][ T6698] ? rcu_is_watching+0x12/0xc0 [ 110.559719][ T6698] ? trace_kmem_cache_alloc+0x2d/0xe0 [ 110.565239][ T6698] ? __copy_skb_header+0x2e8/0x5b0 [ 110.570401][ T6698] ? __skb_clone+0x570/0x760 [ 110.575681][ T6698] netlink_deliver_tap+0xa8a/0xcf0 [ 110.581474][ T6698] netlink_unicast+0x6b4/0x7f0 [ 110.586422][ T6698] ? __pfx_netlink_unicast+0x10/0x10 [ 110.592319][ T6698] ? __nla_parse+0x40/0x60 [ 110.593160][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.596762][ T6698] netdev_nl_queue_get_doit+0x37f/0x6a0 [ 110.604648][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 110.609844][ T6698] genl_family_rcv_msg_doit+0x202/0x2f0 [ 110.622811][ T6698] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 110.628947][ T6698] ? __radix_tree_lookup+0x21f/0x2c0 [ 110.634347][ T6698] genl_rcv_msg+0x565/0x800 [ 110.638898][ T6698] ? __pfx_genl_rcv_msg+0x10/0x10 [ 110.644130][ T6698] ? __pfx_netdev_nl_queue_get_doit+0x10/0x10 [ 110.650261][ T6698] netlink_rcv_skb+0x165/0x410 [ 110.655176][ T6698] ? __pfx_genl_rcv_msg+0x10/0x10 [ 110.660246][ T6698] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 110.665627][ T6698] ? down_read+0xc9/0x330 [ 110.670348][ T6698] ? __pfx_down_read+0x10/0x10 [ 110.675227][ T6698] ? netlink_deliver_tap+0x1ae/0xcf0 [ 110.680565][ T6698] genl_rcv+0x28/0x40 [ 110.684629][ T6698] netlink_unicast+0x53c/0x7f0 [ 110.689450][ T6698] ? __pfx_netlink_unicast+0x10/0x10 [ 110.695557][ T6698] ? __phys_addr_symbol+0x30/0x80 [ 110.700647][ T6698] ? __check_object_size+0x488/0x710 [ 110.706549][ T6698] netlink_sendmsg+0x8b8/0xd70 [ 110.711382][ T6698] ? __pfx_netlink_sendmsg+0x10/0x10 [ 110.716802][ T6698] ____sys_sendmsg+0x9ae/0xb40 [ 110.721613][ T6698] ? copy_msghdr_from_user+0x10b/0x160 [ 110.727174][ T6698] ? __pfx_____sys_sendmsg+0x10/0x10 [ 110.732573][ T6698] ? __pfx___lock_acquire+0x10/0x10 [ 110.737827][ T6698] ___sys_sendmsg+0x135/0x1e0 [ 110.742651][ T6698] ? __pfx____sys_sendmsg+0x10/0x10 [ 110.747906][ T6698] ? lock_acquire+0x2f/0xb0 [ 110.752495][ T6698] ? __fget_files+0x40/0x3f0 [ 110.757142][ T6698] ? fdget+0x176/0x210 [ 110.761250][ T6698] __sys_sendmsg+0x117/0x1f0 [ 110.765958][ T6698] ? __pfx___sys_sendmsg+0x10/0x10 [ 110.771121][ T6698] ? __x64_sys_futex+0x1e1/0x4c0 [ 110.776375][ T6698] do_syscall_64+0xcd/0x250 [ 110.781007][ T6698] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 110.786992][ T6698] RIP: 0033:0x7fd53757e719 [ 110.791445][ T6698] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 110.811825][ T6698] RSP: 002b:00007fd538378038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 110.820296][ T6698] RAX: ffffffffffffffda RBX: 00007fd537735f80 RCX: 00007fd53757e719 [ 110.828872][ T6698] RDX: 0000000022048814 RSI: 0000000020001640 RDI: 0000000000000004 [ 110.836975][ T6698] RBP: 00007fd5375f132e R08: 0000000000000000 R09: 0000000000000000 [ 110.845040][ T6698] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 110.853229][ T6698] R13: 0000000000000000 R14: 00007fd537735f80 R15: 00007fffe32f4bf8 [ 110.861255][ T6698] [ 110.863268][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 110.864322][ T6698] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 110.864337][ T6698] CPU: 1 UID: 0 PID: 6698 Comm: syz.1.176 Not tainted 6.12.0-rc5-syzkaller-00330-ga33ab3f94f51 #0 [ 110.864366][ T6698] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 110.864381][ T6698] Call Trace: [ 110.864390][ T6698] [ 110.864400][ T6698] dump_stack_lvl+0x3d/0x1f0 [ 110.864433][ T6698] panic+0x71d/0x800 [ 110.864467][ T6698] ? __pfx_panic+0x10/0x10 [ 110.864499][ T6698] ? show_trace_log_lvl+0x29d/0x3d0 [ 110.864539][ T6698] ? __dev_queue_xmit+0x22cf/0x4350 [ 110.864574][ T6698] check_panic_on_warn+0xab/0xb0 [ 110.864609][ T6698] __warn+0xf6/0x3d0 [ 110.864639][ T6698] ? preempt_schedule_notrace+0x62/0xe0 [ 110.864674][ T6698] ? __dev_queue_xmit+0x22cf/0x4350 [ 110.864709][ T6698] report_bug+0x3c0/0x580 [ 110.864750][ T6698] handle_bug+0x54/0xa0 [ 110.864775][ T6698] exc_invalid_op+0x17/0x50 [ 110.864800][ T6698] asm_exc_invalid_op+0x1a/0x20 [ 110.864840][ T6698] RIP: 0010:__dev_queue_xmit+0x22cf/0x4350 [ 110.864874][ T6698] Code: 47 70 9b f8 40 84 ed 75 25 e8 5d 6e 9b f8 c6 05 c7 83 14 07 01 90 48 c7 c6 c0 ea 7a 8c 48 c7 c7 60 b9 7a 8c e8 92 ed 5c f8 90 <0f> 0b 90 90 e8 38 6e 9b f8 0f b6 2d a1 83 14 07 31 ff 89 ee e8 08 [ 110.864898][ T6698] RSP: 0018:ffffc900045b7188 EFLAGS: 00010286 [ 110.864920][ T6698] RAX: 0000000000000000 RBX: ffff88802854e640 RCX: ffffc90004c92000 [ 110.864937][ T6698] RDX: 0000000000040000 RSI: ffffffff814e24c6 RDI: 0000000000000001 [ 110.864954][ T6698] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 [ 110.864970][ T6698] R10: 0000000000000001 R11: 0000000000000001 R12: ffff88802854e650 [ 110.864986][ T6698] R13: 0000000000000000 R14: 0000000000000000 R15: ffff88806917a000 [ 110.865013][ T6698] ? __warn_printk+0x1a6/0x350 [ 110.865048][ T6698] ? __dev_queue_xmit+0x22ce/0x4350 [ 110.865079][ T6698] ? netlink_sendmsg+0x8b8/0xd70 [ 110.865113][ T6698] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 110.865157][ T6698] ? __pfx___dev_queue_xmit+0x10/0x10 [ 110.865215][ T6698] ? rcu_is_watching+0x12/0xc0 [ 110.865243][ T6698] ? trace_kmem_cache_alloc+0x2d/0xe0 [ 110.865278][ T6698] ? __copy_skb_header+0x2e8/0x5b0 [ 110.865316][ T6698] ? __skb_clone+0x570/0x760 [ 110.865359][ T6698] netlink_deliver_tap+0xa8a/0xcf0 [ 110.865397][ T6698] netlink_unicast+0x6b4/0x7f0 [ 110.865433][ T6698] ? __pfx_netlink_unicast+0x10/0x10 [ 110.865465][ T6698] ? __nla_parse+0x40/0x60 [ 110.865503][ T6698] netdev_nl_queue_get_doit+0x37f/0x6a0 [ 110.865543][ T6698] genl_family_rcv_msg_doit+0x202/0x2f0 [ 110.865581][ T6698] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 110.865627][ T6698] ? __radix_tree_lookup+0x21f/0x2c0 [ 110.865669][ T6698] genl_rcv_msg+0x565/0x800 [ 110.865709][ T6698] ? __pfx_genl_rcv_msg+0x10/0x10 [ 110.865744][ T6698] ? __pfx_netdev_nl_queue_get_doit+0x10/0x10 [ 110.865792][ T6698] netlink_rcv_skb+0x165/0x410 [ 110.865830][ T6698] ? __pfx_genl_rcv_msg+0x10/0x10 [ 110.865869][ T6698] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 110.865914][ T6698] ? down_read+0xc9/0x330 [ 110.865939][ T6698] ? __pfx_down_read+0x10/0x10 [ 110.865966][ T6698] ? netlink_deliver_tap+0x1ae/0xcf0 [ 110.866002][ T6698] genl_rcv+0x28/0x40 [ 110.866034][ T6698] netlink_unicast+0x53c/0x7f0 [ 110.866070][ T6698] ? __pfx_netlink_unicast+0x10/0x10 [ 110.866103][ T6698] ? __phys_addr_symbol+0x30/0x80 [ 110.866132][ T6698] ? __check_object_size+0x488/0x710 [ 110.866169][ T6698] netlink_sendmsg+0x8b8/0xd70 [ 110.866207][ T6698] ? __pfx_netlink_sendmsg+0x10/0x10 [ 110.866251][ T6698] ____sys_sendmsg+0x9ae/0xb40 [ 110.866284][ T6698] ? copy_msghdr_from_user+0x10b/0x160 [ 110.866311][ T6698] ? __pfx_____sys_sendmsg+0x10/0x10 [ 110.866353][ T6698] ? __pfx___lock_acquire+0x10/0x10 [ 110.866392][ T6698] ___sys_sendmsg+0x135/0x1e0 [ 110.866422][ T6698] ? __pfx____sys_sendmsg+0x10/0x10 [ 110.866464][ T6698] ? lock_acquire+0x2f/0xb0 [ 110.866495][ T6698] ? __fget_files+0x40/0x3f0 [ 110.866534][ T6698] ? fdget+0x176/0x210 [ 110.866563][ T6698] __sys_sendmsg+0x117/0x1f0 [ 110.866589][ T6698] ? __pfx___sys_sendmsg+0x10/0x10 [ 110.866618][ T6698] ? __x64_sys_futex+0x1e1/0x4c0 [ 110.866667][ T6698] do_syscall_64+0xcd/0x250 [ 110.866693][ T6698] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 110.866728][ T6698] RIP: 0033:0x7fd53757e719 [ 110.866749][ T6698] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 110.866771][ T6698] RSP: 002b:00007fd538378038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 110.866794][ T6698] RAX: ffffffffffffffda RBX: 00007fd537735f80 RCX: 00007fd53757e719 [ 110.866818][ T6698] RDX: 0000000022048814 RSI: 0000000020001640 RDI: 0000000000000004 [ 110.866834][ T6698] RBP: 00007fd5375f132e R08: 0000000000000000 R09: 0000000000000000 [ 110.866850][ T6698] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 110.866866][ T6698] R13: 0000000000000000 R14: 00007fd537735f80 R15: 00007fffe32f4bf8 [ 110.866899][ T6698] [ 110.871511][ T6698] Kernel Offset: disabled