last executing test programs: 23.509680392s ago: executing program 2 (id=189): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) sendmsg$auto_BATADV_CMD_GET_ROUTING_ALGOS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="35a7434959804201c29349228532d1d4cdd255859da359811c34c6fb053cc0c43e7fea317e875a74c6e9e494f85df8a0083641969b82ff3ad87f1ec5cc4880ede276cd1c5301df4b6880f682ac025f264b9451f942e166c301f63637c3da31fe148862ed86215d38d0b92393b98cbc45d246833db27bea590a3abbd7d01a914ce4a8285340f5dfb9f31893798394709cd8a48bb465d3f0881007a6616ee2b15cb028b6296e705065b58a15d06067e7a56655378401"], 0x14}, 0x1, 0x0, 0x0, 0x8050}, 0x4000004) mknod$auto(&(0x7f0000000180)=':,\x00', 0xc9, 0xfffffffa) madvise$auto(0x4, 0x81, 0x93) execve$auto(&(0x7f0000000040)=':,\x00', &(0x7f00000000c0)=&(0x7f0000000080)='$+[-+\x98%(,\x00', &(0x7f0000000200)=&(0x7f00000001c0)=':,\x00') 23.293035899s ago: executing program 2 (id=190): r0 = socket(0x1a, 0x1, 0x0) mmap$auto(0x0, 0x400006, 0xde, 0x9b72, 0x2, 0x2008000) r1 = socket(0xa, 0x3, 0x73) mmap$auto(0x0, 0x9, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x40000002c55, 0x0) socket(0x2, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000080)={0x2, @sockaddr_1_1}, 0x6b) connect$auto(0x3, &(0x7f00000000c0)={0x2, @sockaddr_1_1}, 0x55) mprotect$auto(0x1ffff000, 0x8000000000000001, 0x4) shutdown$auto(0x200000003, 0x2) socket(0xa, 0x2, 0x0) select$auto(0x3, 0x0, 0x0, 0x0, 0x0) connect$auto(0x3, &(0x7f0000000140)={0xa, @sa_data_min="c4aeed448dc7fe8000"}, 0x55) connect$auto(0x3, &(0x7f00000000c0)={0x2, @sockaddr_1_1}, 0x55) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) mincore$auto(0x1, 0x8, &(0x7f0000000100)=',\'\\%#\'[\\:^-\x00') sendmmsg$auto(0x3, &(0x7f0000000040)={{0x0, 0x2, &(0x7f0000000080)={0x0, 0x44}, 0x10a, 0x0, 0x0, 0x3ff}, 0xed7138c}, 0x200, 0x0) bind$auto(0x3, &(0x7f0000000040)={0xa, @sa_data_min="001000"}, 0x69) sendmsg$auto_WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xffffffffffffff38, &(0x7f0000000280)={&(0x7f0000000580)=ANY=[@ANYBLOB="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", @ANYRESDEC, @ANYBLOB="863d9f60a571e6de0a7cf82fda3ca9a93658316e84ad2a9b3b0e1214bc08111d3175f18df906374acd3757f500c2aec21fe34d3761775bd6f0f35e12", @ANYRES64=r1, @ANYBLOB="cdc7608a21746eb602dafb82a9e2d736b03e77190702e65f6c2612d2647c89eb26dbe4a852f125878da720c51802acc85f4994f95e2cd9cc3a0da29b98f77600d9b36d8898972c784d242c0692ac89243f3d250aed2fc2e582d4a23076c15a50ab28e30bf4aa89c8d7cef258c3fb933522599755ff7555a377d62157f01e022c7f08ea5fffc584e918a9c49784198470e9473021b515c2396f3660fd6fe26bc25b3cdb0c52c25e544727d1e6dcdd01745b3e51e6880e4583aa4c9677e71b38c6dbbb5fecb7dfbc8881df0fad4c90c3521d95cc010b70819998ab243fab9895b53f7e5f"], 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) sendmsg$auto_L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="020028bd7000fcdbdf2505000000060003004a0d0000199274af60ee7effa46e1688ec3d72d21776c44b23e7bf994b34a7620d4b"], 0x1c}}, 0x20000010) bind$auto(0x3, &(0x7f0000000080)={0x2, @sockaddr_1_1}, 0x6b) connect$auto(0x3, &(0x7f00000000c0)={0x2, @sockaddr_1_1}, 0x55) sendmmsg$auto(0x3, &(0x7f0000000000)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0x4000000006}, 0x4, 0x0, 0x1, 0x697b}, 0xed7138c}, 0x2, 0x9) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) connect$auto(0x3, 0x0, 0x55) 22.329837643s ago: executing program 2 (id=193): sendmsg$auto_WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x4008810}, 0x20008000) r0 = socket(0x2, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000080)={0x2, @sockaddr_1_1}, 0x6b) connect$auto(0x3, 0x0, 0x55) sendmsg$auto_NL80211_CMD_SET_REKEY_OFFLOAD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="14000b00", @ANYRES16=0x0, @ANYBLOB="01002dbd7000fedbdf254f000000"], 0x14}, 0x1, 0x0, 0x0, 0x850}, 0x40005) shutdown$auto(0x200000003, 0x2) io_uring_setup$auto(0x2, 0x0) mmap$auto(0x9, 0x9, 0x3, 0x411, 0x7, 0x6) sendfile$auto(0x1, 0x3, 0x0, 0xc01) 22.185718344s ago: executing program 2 (id=194): open(&(0x7f0000000040)='./file0\x00', 0x480001, 0x88) prctl$auto(0x1000000001c, 0x5, 0x8, 0x200000000000009, 0xcc) setreuid$auto(0x0, 0x7) fcntl$auto(0x3, 0x400, 0x1) setreuid$auto(0x3ff, 0x0) close_range$auto(0x2, 0x8000, 0x0) 22.033234526s ago: executing program 2 (id=195): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0x10, 0xc) ioperm$auto(0x7, 0x6, 0x2) rt_sigqueueinfo$auto(0x1, 0x7, &(0x7f0000000040)={@siginfo_0_0={0x0, 0x5, 0xfffffffb, @_sigpoll={0x52, 0x7}}}) 21.621194504s ago: executing program 2 (id=198): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_IPVS(&(0x7f0000002100), r0) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) (async) ioprio_set$auto(0x1, 0x0, 0x0) (async) msync$auto(0x1ffff000, 0x100000000005, 0x400000004) madvise$auto(0x0, 0xffffffffffff0001, 0x17) madvise$auto(0x1ffff000, 0x208000000010001, 0x8) (async) madvise$auto(0x8000000000000000, 0x7fffffffffffffff, 0x889) (async) madvise$auto(0x2000000040000, 0x7, 0xa) rseq$auto(&(0x7f0000000300)={0xe, 0x401, 0x0, 0x6, 0xffffffff, 0x2}, 0x8000, 0x0, 0x6) socket(0x1e, 0x1, 0x0) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) poll$auto(&(0x7f0000000d40)={0x3, 0x1, 0xa}, 0x5, 0x400) (async) setsockopt$auto(0x3, 0x1, 0x20, 0x0, 0x9) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x9, 0x8000) (async) syz_open_procfs$namespace(0xffffffffffffffff, 0x0) (async) mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) r2 = gettid() process_vm_writev$auto(r2, &(0x7f0000002980)={0x0, 0x7ff}, 0x3, &(0x7f0000002a40)={0x0, 0x7}, 0x4, 0x0) pidfd_open$auto(r2, 0x5) (async) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x402, 0x300000000000) (async) mmap$auto(0x100000000000, 0x4000d, 0xdf, 0x17, 0x7, 0x28000) (async) clone$auto(0x20001002, 0xd7b0, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x1000004000008) mq_open$auto(0x0, 0xb0, 0x2, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket(0x10, 0x2, 0x0) (async) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x402, 0x300000000000) lsm_list_modules$auto(0x0, &(0x7f0000000100)=0xbefc, 0x0) (async) sendmsg$auto_IPVS_CMD_DEL_DAEMON(r0, &(0x7f0000003400)={0x0, 0x0, &(0x7f00000033c0)={&(0x7f0000000000)={0x1c, r1, 0x1, 0x70bd27, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000054}, 0x4000870) 21.33009715s ago: executing program 32 (id=198): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_IPVS(&(0x7f0000002100), r0) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) (async) ioprio_set$auto(0x1, 0x0, 0x0) (async) msync$auto(0x1ffff000, 0x100000000005, 0x400000004) madvise$auto(0x0, 0xffffffffffff0001, 0x17) madvise$auto(0x1ffff000, 0x208000000010001, 0x8) (async) madvise$auto(0x8000000000000000, 0x7fffffffffffffff, 0x889) (async) madvise$auto(0x2000000040000, 0x7, 0xa) rseq$auto(&(0x7f0000000300)={0xe, 0x401, 0x0, 0x6, 0xffffffff, 0x2}, 0x8000, 0x0, 0x6) socket(0x1e, 0x1, 0x0) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) poll$auto(&(0x7f0000000d40)={0x3, 0x1, 0xa}, 0x5, 0x400) (async) setsockopt$auto(0x3, 0x1, 0x20, 0x0, 0x9) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x9, 0x8000) (async) syz_open_procfs$namespace(0xffffffffffffffff, 0x0) (async) mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) r2 = gettid() process_vm_writev$auto(r2, &(0x7f0000002980)={0x0, 0x7ff}, 0x3, &(0x7f0000002a40)={0x0, 0x7}, 0x4, 0x0) pidfd_open$auto(r2, 0x5) (async) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x402, 0x300000000000) (async) mmap$auto(0x100000000000, 0x4000d, 0xdf, 0x17, 0x7, 0x28000) (async) clone$auto(0x20001002, 0xd7b0, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x1000004000008) mq_open$auto(0x0, 0xb0, 0x2, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket(0x10, 0x2, 0x0) (async) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x402, 0x300000000000) lsm_list_modules$auto(0x0, &(0x7f0000000100)=0xbefc, 0x0) (async) sendmsg$auto_IPVS_CMD_DEL_DAEMON(r0, &(0x7f0000003400)={0x0, 0x0, &(0x7f00000033c0)={&(0x7f0000000000)={0x1c, r1, 0x1, 0x70bd27, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000054}, 0x4000870) 8.37732301s ago: executing program 0 (id=254): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000021}, 0x8004) connect$auto(0x3, &(0x7f0000000140)={0xa, @sa_data_min="c4aeed448dc7fe8000"}, 0x55) exit$auto(0x3) mprotect$auto(0x1ffff000, 0x8000000000000001, 0x4) close_range$auto(0x0, 0x2000000003, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x3, 0x2) socket(0x2, 0x1, 0x0) socket(0xa, 0x5, 0x0) socketpair$auto(0x3, 0x5, 0x7, 0x0) setsockopt$auto(0x3, 0x0, 0xf, 0x0, 0xb) bind$auto(0x3, &(0x7f0000000140)={0xa, @sa_data_min="bfb75aafbff83e2900"}, 0x69) mlockall$auto(0xaa6) shutdown$auto(0x200000003, 0x2) connect$auto(0x3, &(0x7f0000000140)={0xa, @sa_data_min="c40900448dc7fe8000"}, 0x55) 7.396451144s ago: executing program 0 (id=261): r0 = socket$nl_generic(0x10, 0x3, 0x10) signalfd4$auto(r0, &(0x7f0000000000)={0xf}, 0x9, 0xffffff43) r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000080), r0) sendmsg$auto_NL80211_CMD_SET_PMK(r0, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="000827bd7000fddbdf257b000000460066004e21000057002c00077df84400d80721ce4ff1aabb13175c7e36b9ee9bae3c2cba0a198536eb110cb0eb3e230ea8af4578533b63f2e5baa0b96e9223150700e64d3e59ad43e1a03cab1822232a89b24bbd1c96083d679a1af6751f00"], 0x74}, 0x1, 0x0, 0x0, 0x24000000}, 0x40) r2 = syz_genetlink_get_family_id$auto_ila(&(0x7f00000000c0), 0xffffffffffffffff) write$auto(0x800000000000c8, 0x0, 0x1a) sendmsg$auto_ILA_CMD_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010028bd7004fbdbdb250300000008000400", @ANYRES32=0x0, @ANYBLOB="0c0003000300000000000000"], 0x28}, 0x1, 0x0, 0x0, 0x4004}, 0x10) 7.165138462s ago: executing program 0 (id=262): sendmsg$auto_WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x4008810}, 0x20008000) r0 = socket(0x2, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000080)={0x2, @sockaddr_1_1}, 0x6b) connect$auto(0x3, &(0x7f00000000c0)={0x2, @sockaddr_1_1}, 0x55) sendmsg$auto_NL80211_CMD_SET_REKEY_OFFLOAD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x850}, 0x40005) shutdown$auto(0x200000003, 0x2) io_uring_setup$auto(0x2, 0x0) mmap$auto(0x9, 0x9, 0x3, 0x411, 0x7, 0x6) sendfile$auto(0x1, 0x3, 0x0, 0xc01) 6.977260747s ago: executing program 0 (id=264): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$auto_IPVS(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$auto_IPVS_CMD_DEL_DAEMON(r0, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000340)={&(0x7f00000001c0)={0x168, r1, 0x10, 0x70bd2a, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x77, 0x2, "05d30342c0713ecfc1b7a2e40e474b6ccd8ecb8b1ba55c9013eb8bad95970f34eb775bce06ff8250bf871c66cb3b886430d6cfd6819bb2be3d840c958b31eedb72e9adc6d4b354327c4649dcd6e5f7c2e107b847b6a81b4588d241d4c3f570277f55b7728e1ae544d056dacdce1dc21884a55c"}, @IPVS_CMD_ATTR_DAEMON={0x6d, 0x3, "1d9f6e9aec67e2f901294167db01ca65078c8efb4a6603f3b1a3bb85d18f694d546b7b0ae8aa8fee3feeaec246502d124e64882595fcb5867da5d6c3383367479fe812f8f1013157b94502ceb05a266927094de606340e1480845705457b5a4e2dbb97435b1df74bcf"}, @IPVS_CMD_ATTR_DEST={0x6c, 0x2, "854f28e3ca57c967774da70a5915453349a67ea1ad0501470652545308b28afe3cf4a676e2e6a791c781b41b542e4962cabdd7df62ea90659789febd5006f66f2596f77de902858aaf12b811dcb50ee6cdbabf65f485a74b4c8c2f863ce9ea0629f6210451ad241d"}]}, 0x168}, 0x1, 0x0, 0x0, 0x40}, 0x4044001) (async) socket(0x11, 0x80003, 0x300) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) bpf$auto(0xd, &(0x7f0000000080)=@iter_create={0x1, 0x2}, 0x2) (async) socket(0x11, 0xa, 0x300) (async) write$auto(0xc8, 0x0, 0x40f6) (async) getdents64$auto(0x2, 0xfffffffffffffffe, 0x1) (async) io_submit$auto(0x3, 0x7f, &(0x7f0000000040)=&(0x7f0000000000)={0x6fffffffffffff, 0x2, 0x10001, 0x3, 0x2, 0x3b, 0x2, 0x9, 0xfff, 0x0, 0x6}) (async) writev$auto(0xc8, &(0x7f00000028c0)={&(0x7f0000000000), 0xfdef}, 0x9) 6.71720473s ago: executing program 0 (id=265): rt_sigqueueinfo$auto(0x1, 0x7, &(0x7f00000000c0)={@siginfo_0_0={0x0, 0x5, 0x80000000, @_sigpoll={0x800000000001, 0x7}}}) 5.915476903s ago: executing program 1 (id=271): r0 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r0, 0x100, 0x70bd26, 0x25dfdbfc, {}, [@L2TP_ATTR_IP_SADDR={0x8, 0x18, 0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x7fff}]}, 0x24}, 0x1, 0x0, 0x0, 0x8080}, 0x8004) socket(0xa, 0x801, 0x3) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) setsockopt$auto(0x3, 0x0, 0xf, 0x0, 0xb) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x5, 0x8000) setrlimit$auto(0x8, 0x0) mprotect$auto(0x1ffff000, 0x8000000000000001, 0x4) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) socket(0xa, 0x1, 0x0) socket(0x23, 0x80805, 0x0) memfd_secret$auto(0x0) socket(0x2b, 0x1, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x5, 0x0) getsockopt$auto(0x6, 0x84, 0x11, 0x0, &(0x7f0000000080)=0x9c8) 5.7451387s ago: executing program 0 (id=272): sendmsg$auto_WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x4008810}, 0x20008000) r0 = socket(0x2, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000080)={0x2, @sockaddr_1_1}, 0x6b) connect$auto(0x3, &(0x7f00000000c0)={0x2, @sockaddr_1_1}, 0x55) sendmsg$auto_NL80211_CMD_SET_REKEY_OFFLOAD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x850}, 0x40005) shutdown$auto(0x200000003, 0x2) io_uring_setup$auto(0x2, 0x0) mmap$auto(0x9, 0x9, 0x3, 0x411, 0x7, 0x6) sendfile$auto(0x1, 0x3, 0x0, 0xc01) 5.356728587s ago: executing program 33 (id=272): sendmsg$auto_WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x4008810}, 0x20008000) r0 = socket(0x2, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000080)={0x2, @sockaddr_1_1}, 0x6b) connect$auto(0x3, &(0x7f00000000c0)={0x2, @sockaddr_1_1}, 0x55) sendmsg$auto_NL80211_CMD_SET_REKEY_OFFLOAD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x850}, 0x40005) shutdown$auto(0x200000003, 0x2) io_uring_setup$auto(0x2, 0x0) mmap$auto(0x9, 0x9, 0x3, 0x411, 0x7, 0x6) sendfile$auto(0x1, 0x3, 0x0, 0xc01) 4.395089276s ago: executing program 1 (id=277): socket(0xa, 0x801, 0x84) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) shutdown$auto(0x200000003, 0x2) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) ptrace$auto(0xc1, 0x5, 0x3, 0x80000) recvmmsg$auto(0x3, 0x0, 0x6, 0x7bd6, 0x0) connect$auto(0x3, &(0x7f0000000000)={0x2, @sockaddr_1_1={"d9ef7f"}}, 0x55) socketpair$auto(0x2a6, 0x5, 0x3, &(0x7f0000000040)=0x6) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x402, 0x300000000000) rseq$auto(&(0x7f0000000080)={0x4, 0x9, 0x97, 0xfea1, 0xffffff1b, 0x8001}, 0xed, 0x9, 0x4) getsockopt$auto(0x3, 0x200000000001, 0x1c, 0x0, 0x0) 3.446795845s ago: executing program 1 (id=281): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000021}, 0x8004) connect$auto(0x3, &(0x7f0000000140)={0xa, @sa_data_min="c4aeed448dc7fe8000"}, 0x55) exit$auto(0x3) mprotect$auto(0x1ffff000, 0x8000000000000001, 0x4) close_range$auto(0x0, 0x2000000003, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x3, 0x2) socket(0x2, 0x1, 0x0) socket(0xa, 0x5, 0x0) socketpair$auto(0x3, 0x5, 0x7, 0x0) setsockopt$auto(0x3, 0x0, 0xf, 0x0, 0xb) bind$auto(0x3, &(0x7f0000000140)={0xa, @sa_data_min="bfb75aafbff83e2900"}, 0x69) mlockall$auto(0xaa6) shutdown$auto(0x200000003, 0x2) connect$auto(0x3, &(0x7f0000000140)={0xa, @sa_data_min="c40900448dc7fe8000"}, 0x55) 3.241185546s ago: executing program 4 (id=282): open(&(0x7f0000000040)='./file1\x00', 0x18000, 0x82) socket(0x2, 0x1, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x0) sysfs$auto(0x2, 0x100000000000033, 0x0) fsopen$auto(0x0, 0x1) close_range$auto(0x1, 0x8000, 0x0) eventfd$auto(0x6) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000900), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000880), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000940)={'batadv0\x00', 0x0}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_BATADV_CMD_GET_TRANSTABLE_GLOBAL(r6, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='\f\x00\x00\b', @ANYRES16=r3, @ANYBLOB="01032cbd7000fcdbdf250700000008000300", @ANYRES32=r5, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x8800}, 0x0) sendmsg$auto_BATADV_CMD_SET_MESH(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x38, r3, 0x400, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_MESH_ADDRESS={0xa, 0x5, "c5b19fca749c"}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0xe}, @BATADV_ATTR_TT_CRC32={0x8, 0x13, 0x4}, @BATADV_ATTR_TT_LAST_TTVN={0x5, 0x12, 0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x40000) sendmsg$auto_VDPA_CMD_DEV_DEL(r6, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x34, 0x0, 0x10, 0x70bd25, 0x25dfdbfb, {}, [@VDPA_ATTR_DEV_NET_CFG_MAX_VQP={0x6, 0xc, 0x9}, @VDPA_ATTR_MGMTDEV_BUS_NAME={0x9, 0x1, '\\#-&\x00'}, @VDPA_ATTR_MGMTDEV_BUS_NAME={0xb, 0x1, 'batadv\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x4004}, 0x20000000) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000300), r7) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000003c0)={'macsec0\x00', 0x0}) sendmsg$auto_BATADV_CMD_GET_TRANSTABLE_GLOBAL(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000000492d83ed833a0dc53acff67d881ae4779155e3941a0dcbabb4f4249ba70b4d2291345d354da411264c338bcffad4110ade163bc3d0e577305cfdcb1f2ee64cc1e641c575ab07dd682b6295a7d24bd39f9933354faf29233c256426dec7ffe5fe4e380d1f795e2016b77f84e66d2c75bb5de49298646e0b5a5454e6b754b024243440de100f90", @ANYRES16=r1, @ANYBLOB="01032cbd7000fcdbdf250700000008000300", @ANYRES32=r8, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x8800}, 0x0) pidfd_open$auto(0x1, 0x0) fspick$auto(0xe, 0x0, 0x6) open_by_handle_at$auto(0xffffff9c, &(0x7f0000000040)={0xc, 0x2, "4c6c8e85b194f29b6efd901e"}, 0x2) fallocate$auto(0x8000000000000003, 0x0, 0xd, 0xcbd5d) sendfile$auto(0x6, 0x3, 0x0, 0xc01) 3.210287145s ago: executing program 4 (id=283): open(&(0x7f0000000080)='./cgroup\x00', 0x4e8401, 0x6) bpf$auto(0x10, &(0x7f0000000000)=@bpf_attr_1={0x8, 0x19, @value=0x507, 0xd9}, 0xcf) (async) bpf$auto(0x10, &(0x7f0000000000)=@bpf_attr_1={0x8, 0x19, @value=0x507, 0xd9}, 0xcf) shmget$auto(0x10000, 0x2, 0xe64) 3.139783824s ago: executing program 3 (id=284): r0 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r0, 0x100, 0x70bd26, 0x25dfdbfc, {}, [@L2TP_ATTR_IP_SADDR={0x8, 0x18, 0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x7fff}]}, 0x24}, 0x1, 0x0, 0x0, 0x8080}, 0x8004) socket(0xa, 0x801, 0x3) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) setsockopt$auto(0x3, 0x0, 0xf, 0x0, 0xb) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x5, 0x8000) setrlimit$auto(0x8, 0x0) mprotect$auto(0x1ffff000, 0x8000000000000001, 0x4) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) socket(0xa, 0x1, 0x0) socket(0x23, 0x80805, 0x0) memfd_secret$auto(0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x5, 0x0) getsockopt$auto(0x6, 0x84, 0x11, 0x0, &(0x7f0000000080)=0x9c8) 2.95701575s ago: executing program 4 (id=285): socket(0xa, 0x801, 0x4) ioperm$auto(0x2, 0x0, 0x2) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) rseq$auto(0x0, 0x7ffd, 0x0, 0x6) syz_genetlink_get_family_id$auto_ovs_packet(0x0, 0xffffffffffffffff) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(0xffffffffffffffff, 0x0, 0x80000) socket(0xf, 0x3, 0x2) getpeername$auto(0x3, 0x0, 0x0) listxattr$auto(&(0x7f0000000000)='%\x00', 0x0, 0x8) setsockopt$auto(0x400000000000003, 0x29, 0x6, 0x0, 0x8) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) clone$auto(0x2, 0x8000000000000001, 0x0, 0xfffffffffffffffe, 0x4000000000000003) mincore$auto(0x1000, 0x8001, 0x0) mmap$auto(0x0, 0x4, 0xdf, 0xeb1, 0x401, 0x8000) clone$auto(0x5, 0x37fab337, &(0x7f0000000040)=0x7e7, &(0x7f0000000080)=0x7, 0x80000001) mount_setattr$auto(0x5, 0x0, 0x0, 0x0, 0x283) 2.445307339s ago: executing program 3 (id=286): timer_create$auto(0x0, 0x0, &(0x7f0000000040)=0x200) (async, rerun: 64) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) socket$nl_generic(0x10, 0x3, 0x10) (async) bpf$auto(0x0, &(0x7f0000000000)=@link_update={0xa, @new_prog_fd=0x1, 0x7, @old_map_fd=0x3ff}, 0xa3) bpf$auto(0x2, &(0x7f00000001c0)=@raw_tracepoint={0x5, 0xffff, 0x0, 0x3}, 0xc) (async) select$auto(0x4, 0x0, &(0x7f0000000080)={[0x209c, 0xe9e, 0x18300000000, 0x5, 0x1000, 0xda, 0xc, 0xf, 0x0, 0x57fffffff, 0x4, 0x6, 0x101, 0xff, 0x2, 0x80080001]}, 0x0, 0x0) timer_settime$auto(0x0, 0xffff8000, &(0x7f00000000c0)={{0xf, 0x10007}, {0x9}}, 0x0) (async, rerun: 64) timer_gettime$auto(0x0, 0xfffffffffffffffc) (rerun: 64) 2.225931555s ago: executing program 3 (id=287): r0 = socket(0x1a, 0x1, 0x0) r1 = socket(0xa, 0x3, 0x73) sendmsg$auto_WG_CMD_GET_DEVICE(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x4008810}, 0x20008000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x40000002c55, 0x0) socket(0x2, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000080)={0x2, @sockaddr_1_1}, 0x6b) connect$auto(0x3, &(0x7f00000000c0)={0x2, @sockaddr_1_1}, 0x55) mprotect$auto(0x1ffff000, 0x8000000000000001, 0x4) shutdown$auto(0x200000003, 0x2) socket(0xa, 0x2, 0x0) select$auto(0x3, 0x0, 0x0, 0x0, 0x0) connect$auto(0x3, &(0x7f0000000140)={0xa, @sa_data_min="c4aeed448dc7fe8000"}, 0x55) connect$auto(0x3, &(0x7f00000000c0)={0x2, @sockaddr_1_1}, 0x55) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) mincore$auto(0x1, 0x8, &(0x7f0000000100)=',\'\\%#\'[\\:^-\x00') sendmmsg$auto(0x3, &(0x7f0000000040)={{0x0, 0x2, &(0x7f0000000080)={0x0, 0x44}, 0x10a, 0x0, 0x0, 0x3ff}, 0xed7138c}, 0x200, 0x0) bind$auto(0x3, &(0x7f0000000040)={0xa, @sa_data_min="001000"}, 0x69) sendmsg$auto_WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xffffffffffffff38, &(0x7f0000000280)={&(0x7f0000000580)=ANY=[@ANYBLOB="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", @ANYRESDEC, @ANYBLOB="863d9f60a571e6de0a7cf82fda3ca9a93658316e84ad2a9b3b0e1214bc08111d3175f18df906374acd3757f500c2aec21fe34d3761775bd6f0f35e12", @ANYRES64=r1, @ANYBLOB="cdc7608a21746eb602dafb82a9e2d736b03e77190702e65f6c2612d2647c89eb26dbe4a852f125878da720c51802acc85f4994f95e2cd9cc3a0da29b98f77600d9b36d8898972c784d242c0692ac89243f3d250aed2fc2e582d4a23076c15a50ab28e30bf4aa89c8d7cef258c3fb933522599755ff7555a377d62157f01e022c7f08ea5fffc584e918a9c49784198470e9473021b515c2396f3660fd6fe26bc25b3cdb0c52c25e544727d1e6dcdd01745b3e51e6880e4583aa4c9677e71b38c6dbbb5fecb7dfbc8881df0fad4c90c3521d95cc010b70819998ab243fab9895b53f7e5f"], 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) sendmsg$auto_L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="020028bd7000fcdbdf2505000000060003004a0d0000199274af60ee7effa46e1688ec3d72d21776c44b23e7bf994b34a7620d4b"], 0x1c}}, 0x20000010) bind$auto(0x3, &(0x7f0000000080)={0x2, @sockaddr_1_1}, 0x6b) connect$auto(0x3, &(0x7f00000000c0)={0x2, @sockaddr_1_1}, 0x55) sendmmsg$auto(0x3, &(0x7f0000000000)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0x4000000006}, 0x4, 0x0, 0x1, 0x697b}, 0xed7138c}, 0x2, 0x9) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) connect$auto(0x3, 0x0, 0x55) 2.121040423s ago: executing program 1 (id=288): r0 = socket(0x29, 0x5, 0x8) fcntl$auto(r0, 0x409, 0x1000000000000010) r1 = open$dir(&(0x7f00000004c0)='./file0\x00', 0x101000, 0x80) fchown$auto(r1, 0xd, 0xa2f9) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket(0x2, 0x1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x23, 0x80805, 0x0) socket(0x25, 0x1, 0x3) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) adjtimex$auto(&(0x7f0000000500)={0xfff, 0x0, 0x7, 0x1, 0x3, 0x80000000, 0x10001, 0x0, 0xe7, 0x3, 0x401, {0x2, 0xfffffffffffffff9}, 0x81, 0x301b, 0xa, 0x6, 0x0, 0x4, 0x7fff, 0x143, 0x1ff, 0x2, 0x7}) rt_sigaction$auto(0x9, &(0x7f0000000100)={0x0, 0x7, 0x0, {0x429fdebf}}, 0x0, 0x8) r3 = socket(0xa, 0x2, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r4 = socket(0x26, 0x80805, 0x0) symlink$auto(&(0x7f0000000600)='\x00', &(0x7f0000000640)='nl802154\x00') ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$auto_wireguard(&(0x7f0000000080), 0xffffffffffffffff) madvise$auto(0x8, 0xfff, 0x1000) sendmsg$auto_WG_CMD_SET_DEVICE(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000002880)={&(0x7f0000000340)=ANY=[@ANYBLOB="30c00000", @ANYRES16=r6, @ANYBLOB="210026bd7000fddbdf25010000001400020077673000000000000000000000000000080007007f000000"], 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x80) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'veth0_to_hsr\x00', 0x0}) io_uring_setup$auto(0x7fff, &(0x7f0000000440)={0x1, 0x88c, 0xe, 0xae, 0x8, 0x2, r5, [0xfffffffd, 0x0, 0x2], {0x56c0e102, 0x377e, 0xf, 0x0, 0xfffffffc, 0x4, 0x6, 0x467, 0x2}, {0x81, 0x3, 0x7fffffff, 0xfffffff5, 0x2, 0x5, 0xee5, 0x7, 0x5}}) sendmsg$auto_WG_CMD_GET_DEVICE(r2, &(0x7f0000000400)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000003c0)={&(0x7f00000001c0)={0x1f8, r6, 0x400, 0x70bd25, 0x25dfdbfd, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'ip_vti0\x00'}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1000}, @WGDEVICE_A_IFINDEX={0x8}, @WGDEVICE_A_PEERS={0x47, 0x8, "48bfb2c3cedf5a37ad5303a28093d64289da5bd0356285d651065a02b52f9e52060d8e58dd25e528eca31e2d769f61803b0c08b2ffa81db6dee2e69481b2da3f9e3fc7"}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e20}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r7}, @WGDEVICE_A_PRIVATE_KEY={0xc5, 0x3, "ce6ffe3a680b40094520d17d4fb35e575d7a57917a469fdb43eb0960d003455086f9e9949c66215c1175db87a3c88a5e9f82acd3b8cb0cb27a9776ffdc0ad9611edf0d2d6cff0662ec9c697a0e75ee46e5b4656355a6f0a3d0433a760bb30021e556ed53ba41651828c82d412ee3d200122faee1dd5d833241af4b37f74e9bef3cb265cc18a938996814833fe7448ddb4688ca26de6538c62f438190f2135458fdb89e3181997bdef18aa531235781f1f5795e088206af79d840f6cb0a3001e4d4"}, @WGDEVICE_A_PUBLIC_KEY={0x12, 0x4, "92b4722b1c680831479979f24fc3"}, @WGDEVICE_A_PEERS={0x8c, 0x8, "2b1062b11775be5a55b69a0fd047d9a33a41e646d3c7ba8add54fb6457d36091da4ce99f9e31878401779d95ab3d3d632b24f51ab8fff3f3689ff1fe6cbcc83475e56c61c01f1124251de561fa063261e6a228d83156cc4082964cc9df3c31b91d589cea681fb2e6c5b589fefa257637ae35905f6cf9524cd739bc531fd70bea80d508134967a8f5"}]}, 0x1f8}, 0x1, 0x0, 0x0, 0x40080}, 0x40004) syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000000), r4) connect$auto(0x3, &(0x7f0000000040)={0xa, @sockaddr_1_1={"56571853d002b037010357d4102f7fee77f4c204731ca00d39de7337d02d8df7f07379bd20eb5b52f6e3e5014416b7370bd11b0c9d4dab4e29670702ee351148a31eb2f67a5322ce60d52a542134043c717d6516b59a6bcba439b215b6a8f877e10dc225069b225996cea6c130f0cf17fda75ef7433a389a6bcb7d52237457e3416041a0f286d329b361d4d6bac60516d47df26daf41124eac9c27c4e31d4463b5614ae263f8a5839048a71464050478"}}, 0x16) connect$auto(0x3, &(0x7f0000000140)={0xa, @sa_data_min="c4aeed448dc7fe8000"}, 0x55) mprotect$auto(0x1ffff000, 0x8000000000000001, 0x4) sendto$auto(0x3, 0x0, 0xf, 0x101, &(0x7f0000000140)={0x2, @sockaddr_1_1}, 0x18) recvmmsg$auto(0x3, 0x0, 0x6, 0x7bd6, 0x0) 1.722675063s ago: executing program 4 (id=289): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000080), r0) sendmsg$auto_NFSD_CMD_THREADS_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r1, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@NFSD_A_SERVER_THREADS={0x8, 0x1, 0x7fffffff}, @NFSD_A_SERVER_LEASETIME={0x8, 0x3, 0x300}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000021}, 0x8004) r2 = syz_genetlink_get_family_id$auto_NLBL_UNLBL(&(0x7f0000000040), r0) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) io_uring_setup$auto(0x6, 0x0) open(0x0, 0x22240, 0x155) bpf$auto(0x7, &(0x7f0000000140)=@bpf_attr_11={0x0, 0xd, 0x7, 0xfffffffe, 0x1ff, 0x939, 0x3, 0x1ff}, 0x8) sendmsg$auto_NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x44, r2, 0x20, 0x70bd2a, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, {0x5}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, {0x5}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, {0x5}}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x81}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, {0x1}}]}, 0x44}, 0x1, 0x0, 0x0, 0x805}, 0x40050) 1.230483387s ago: executing program 3 (id=290): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) statx$auto(0xffffff9c, 0x0, 0x1000, 0x1, 0x0) socket(0x2, 0x3, 0xa) setsockopt$auto(0x3, 0x0, 0x30, 0x0, 0x10001) set_mempolicy$auto(0x2, &(0x7f0000000080)=0x7e, 0x4) getxattr$auto(&(0x7f0000003240)='/\x00', &(0x7f0000003280)='],&\x00', 0x0, 0xffffffffffffffba) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mbind$auto(0x0, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) move_pages$auto(0x0, 0xd0, &(0x7f0000001100), &(0x7f0000001140), 0x0, 0x2) 1.17318392s ago: executing program 1 (id=291): r0 = socket(0xa, 0x2, 0x0) recvmmsg$auto(0x3, &(0x7f0000000100)={{0x0, 0x9, &(0x7f0000000080)={0x0, 0x9}, 0x7, 0x0, 0x1, 0x4}, 0x4}, 0x10000, 0x0, &(0x7f0000000380)={0x0, 0xbe}) shutdown$auto(0x200000003, 0x2) prctl$auto(0x2, 0x8001, 0x1, 0x9, 0x6) mmap$auto(0x0, 0x9, 0xdf, 0x1000000eb1, 0x401, 0x8000) io_uring_setup$auto(0x6, 0x0) mknod$auto(0x0, 0x1081, 0x3) io_uring_setup$auto(0x6, 0x0) close_range$auto(0x2, r0, 0x0) open(0x0, 0xa240, 0x15e) open(0x0, 0x161342, 0x100) semctl$auto(0x800005, 0x3ff, 0x8243, 0x200) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x88, 0x8000) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22242, 0x155) socket(0x2, 0x1, 0x0) bind$auto(0x3, 0x0, 0x6b) socket(0x8, 0x2, 0x3a) r1 = socket$nl_generic(0x10, 0x3, 0x10) getresuid$auto(0xfffffffffffffffc, 0xfffffffffffffffe, 0xfffffffffffffffc) socket(0xa, 0x801, 0x84) setsockopt$auto(0x3, 0x0, 0x4, 0x0, 0x0) connect$auto(0x3, &(0x7f0000000000)={0x2, @sockaddr_1_1={"d9ef7f"}}, 0x55) socket$nl_generic(0x10, 0x3, 0x10) lseek$auto(r1, 0xffffffffffffff81, 0xa) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_DEL_STATION(r2, &(0x7f0000001a40)={0x0, 0x0, &(0x7f0000001a00)={&(0x7f0000000140)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002abd7000fddbdf25ffffffff20000d016f46be20118d67c9229d9ccfa2594d3a7be63f9fffc7b6e31f8837686b085dace6dea49d9ffd801123ef304905221bcf3f68c84744148267a2f049b861ff05d0192694fc593563fc49ad3d47"], 0x34}, 0x1, 0x0, 0x0, 0x4800}, 0x10) eventfd$auto(0x4) 734.952392ms ago: executing program 4 (id=292): socket(0xa, 0x1, 0x84) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) semctl$auto(0x201, 0xfffffffffffffffa, 0x3, 0x0) setsockopt$auto(0x3, 0x1, 0x2, 0x0, 0x8) listen$auto(0x3, 0x81) listen$auto(0x3, 0x0) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x2, 0x6, 0x0) bind$auto(0x3, &(0x7f0000000080)={0x2, @sockaddr_1_1={"59c7ef"}}, 0x6b) connect$auto(0x3, &(0x7f00000000c0)={0x2, @sockaddr_1_1}, 0x55) mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x001\xe9\x84,\x11h\x9ez<\xc3\xd1\a\xfa\x9aJ\xb1R=XX\x8c\xa2\xf2\t\x06\xb3|S>\xa9\x14gl\xbb\x83\x9e\xa4\x91\x80\x89\xbd\xf6\xd7;\x11\x16odR$\x12c\x8b$[j\xb0\xf7\xd4\x1d\x7f\xcf\x1fj\xad\xd3bvi\xf4\xb7n\xb2\xe2\xa8\x82\xec\xc9\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\xa0~\xf0\xb1z\x9a/ \x8e\xed\xd4\xe7\xc4-\xf5\xd7{\bc%\xfc\x05MH\xea\xbe|9@,\xbf:.\x91\xc9d\x1b\xf0\xd4i\xdfW\xb6\xa4\xe9\n~,n\xdc\xc9\x9c\x9f\x10\x0e\x04\x80Q\xbc\xfa\x13\xd2\xdc|\x93\xa3\xf7^\x1b\xe3\xc7\xcd\x18@T\xf4\xe5%T\xcbn\x96JS\xfe\x03\xebc\xd1(\xc4\x9e\x9a\xae\xd5\x1d\x93oA\x8d\xc6Q\x99\xce}\x1b\xf3\xe3\x9bJ/\x80\x99v\x8c\xe3O\xc0{\xcf\xe5\xf4?\xa6fc\xed\x9a\xfa\xf7\xa7u\xcd\x90mL\x10w R\x85\xfe\rM\x8dM\x17\x92\x1e\xea\x97\x91\xd7\x1a.4\x84\xb7\x8eA\x03\x1c`V\xf7HBS\x11\xeb@I\xe2VIc\x9f\\\xe3\xeb\xc0-\xedO\x9d\x00', 0x0, 0x2985, 0x0) connect$auto(0x3, &(0x7f00000000c0)={0x2, @sockaddr_1_1}, 0x55) setsockopt$auto(0x3, 0x1, 0x2, 0x0, 0x8) listen$auto(0x3, 0x81) 355.917109ms ago: executing program 1 (id=293): r0 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r0, 0x100, 0x70bd26, 0x25dfdbfc, {}, [@L2TP_ATTR_IP_SADDR={0x8, 0x18, 0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x7fff}]}, 0x24}, 0x1, 0x0, 0x0, 0x8080}, 0x8004) socket(0xa, 0x801, 0x3) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) setsockopt$auto(0x3, 0x0, 0xf, 0x0, 0xb) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x5, 0x8000) setrlimit$auto(0x8, 0x0) mprotect$auto(0x1ffff000, 0x8000000000000001, 0x4) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) socket(0xa, 0x1, 0x0) socket(0x23, 0x80805, 0x0) memfd_secret$auto(0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x5, 0x0) getsockopt$auto(0x6, 0x84, 0x11, 0x0, &(0x7f0000000080)=0x9c8) 229.094101ms ago: executing program 3 (id=294): close_range$auto(0x0, 0xffffffffffffffff, 0x7) bpf$auto(0x0, &(0x7f0000000100)=@task_fd_query={0x5, 0x21ea, 0x7ff, 0x3, 0x1, 0x80000001, 0x800002e}, 0x6f4) bpf$auto(0x19, 0xfffffffffffffffe, 0x0) mmap$auto(0x0, 0x3, 0x3, 0x8012, 0x40, 0x8000) fspick$auto(r2, &(0x7f0000000440)='\x00', 0xb) mmap$auto(0x1ff, 0x10, 0x3, 0xeb1, 0xfffffffffffffff9, 0xe) semctl$auto(0x9, 0x2, 0x13, 0x1) unshare$auto(0x200) r3 = syz_open_procfs$namespace(r0, &(0x7f0000000000)='ns/mnt\x00') setns(r3, 0x0) clone$auto(0xfffffffe00000, 0x5, 0xfffffffffffffffc, 0xfffffffffffffffc, 0x4) clone$auto(0xbb46, 0x406, 0xfffffffffffffffe, 0x0, 0x95c) setrlimit$auto(0x8, 0x0) mlockall$auto(0x7) r4 = socket(0xa, 0x2, 0x3a) sendmsg$auto_NL80211_CMD_DEL_PMK(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="80"], 0x80}, 0x1, 0x0, 0x0, 0x4001}, 0x40044) syz_genetlink_get_family_id$auto_nlctrl(&(0x7f0000000080), r4) syz_genetlink_get_family_id$auto_ovs_datapath(0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$auto_IOAM6(&(0x7f0000000300), r1) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), r1) sendmsg$auto_NL802154_CMD_GET_WPAN_PHY(r4, &(0x7f0000000400)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f0000000580)=ANY=[@ANYRESHEX, @ANYRES16=0x0, @ANYBLOB="000a28bd7000ffdbdf25010000000800010006000000050008000400000008002a00ffffff7f9b0030001b420a4842aef83c10fb0342bc9d8ce112506b78da5f8314fed64472f5f51b66fb6b7fe509e26df9b0e2902e206c570630d7492d066017d955618b0800a6b9a805c3be5d680b11895802dd78ac7dcf169a19221d0b91f1299602f8ca3fa09e7346171bcd6041673d2162bdb6571b7f030a25bdcd80c0d18619a54d7b04d3b22ffb00cd3fe13e6c9b007c57c2ccf8e6cbe2cb183d22b7e171da4ef94ac812b8323cf092fdfe2e2cbf18d5c919875eb7b4ad6ac55c0c796a20766761a3d07e820000000000"], 0xc8}, 0x1, 0x0, 0x0, 0x4044014}, 0x404a050) sendmsg$auto_NL80211_CMD_REQ_SET_REG(r5, &(0x7f0000002140)={0x0, 0x0, &(0x7f0000002100)={&(0x7f0000000340)=ANY=[@ANYBLOB="6105988884af4b0bbe27a40e84ffb9bd607fc109bd60830bbfec7ef55ee395a22c394f3ae280eb44db75ce85c1a19bb07170eedfbf8e8de2c303c07990ad9a52e4d34462197f732d096aa99e8df3bf317e6c7943f9086a54695ad70004e9968942f966e2c5f8727059f899847e8e8165e68475358cf73d92a619fa5626f2fe25680d21a9b3", @ANYRES8=r4, @ANYBLOB="01002dbd7000fddbdf251b000000"], 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) prctl$auto(0x1000000003b, 0x7, 0x2, 0x5, 0x3) socket(0x2, 0x1, 0x0) open(&(0x7f0000000800)='./file0\x00', 0x0, 0x0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x402, 0x300000000000) io_uring_setup$auto(0x6, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 45.662644ms ago: executing program 4 (id=295): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000021}, 0x8004) connect$auto(0x3, &(0x7f0000000140)={0xa, @sa_data_min="c4aeed448dc7fe8000"}, 0x55) exit$auto(0x3) mprotect$auto(0x1ffff000, 0x8000000000000001, 0x4) close_range$auto(0x0, 0x2000000003, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x3, 0x2) socket(0x2, 0x1, 0x0) socket(0xa, 0x5, 0x0) socketpair$auto(0x3, 0x5, 0x7, 0x0) setsockopt$auto(0x3, 0x0, 0xf, 0x0, 0xb) bind$auto(0x3, &(0x7f0000000140)={0xa, @sa_data_min="bfb75aafbff83e2900"}, 0x69) mlockall$auto(0xaa6) shutdown$auto(0x200000003, 0x2) connect$auto(0x3, &(0x7f0000000140)={0xa, @sa_data_min="c40900448dc7fe8080ffffffffff"}, 0x55) 0s ago: executing program 3 (id=296): r0 = open(&(0x7f0000000000)='./file0\x00', 0x261c2, 0x84) socket(0x2, 0x3, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000080), r0) r3 = getpid() sendmsg$auto_NL802154_CMD_SET_LBT_MODE(r1, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000340)={&(0x7f00000000c0)={0x278, r2, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@NL802154_ATTR_PAN_ID={0x6, 0x9, 0x5}, @NL802154_ATTR_COORDINATOR={0xe9, 0x1e, "99c5549ce61c304ae00577d93a458423a52fa6137632b1cb7026536254639ef661f6c98fad0a5c5c67b2f494a0499a5a107442f45a5aa09ea40a5f83c3c02bbd638f72ae07acd519987bccd255f571da9402cb7ad79105019314bf1b4aa3b081c3f574712e7abf24d1fc37628309b0b86f7fa4d956de85ba4d36b5797ed57af60ada3d45bd1eae6c7eeb1ce76939e1466410b220ba207b9b65283a4a75d835ba929fa76886860968a4a29135d364f797d95de3af0dadae2c5b57d46441e19a028b89bd0f08cfa75cc29d23db95360d3709b812629f9d2b9081f0c9497e4dbc7490d791619c"}, @NL802154_ATTR_SCAN_MEAN_PRF={0x100, 0x23, "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"}, @NL802154_ATTR_COORDINATOR={0x65, 0x1e, "9f754cd05fcfa2cac305ea669fc8d1850e1eb7a2a49080025c4269010bf97696e95eb53fd5df59d0b2772d4bf202ebc6b74e99df8b1a70a794059b4f961a82a05cdf813c3f04b63c94bb1bda1a77f1911ede4f6b03d6748fc597000137d85a3eab"}, @NL802154_ATTR_PID={0x8, 0x1c, r3}]}, 0x278}, 0x1, 0x0, 0x0, 0x4000001}, 0x4000095) socket(0xa, 0x2, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) mincore$auto(0x1000, 0x6, 0x0) fallocate$auto(0x8000000000000003, 0x0, 0xd, 0xcbd5d) sendfile$auto(0x6, 0x3, 0x0, 0xc01) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.173' (ED25519) to the list of known hosts. [ 65.309046][ T5832] cgroup: Unknown subsys name 'net' [ 65.483380][ T5832] cgroup: Unknown subsys name 'cpuset' [ 65.491309][ T5832] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 66.880307][ T5832] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 68.535264][ T5852] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 68.543625][ T5852] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 68.553365][ T5852] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 68.563215][ T5852] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 68.568306][ T5853] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 68.578622][ T5856] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 68.579103][ T5853] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 68.594503][ T5853] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 68.594582][ T5854] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 68.602069][ T5853] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 68.608656][ T5856] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 68.617916][ T5853] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 68.625970][ T5856] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 68.630146][ T5853] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 68.638054][ T5856] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 68.644804][ T5853] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 68.653795][ T5856] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 68.658002][ T5853] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 68.673433][ T5856] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 68.681374][ T5853] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 68.681377][ T5851] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 68.682465][ T5855] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 68.704139][ T5855] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 68.705126][ T5856] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 68.988532][ T5844] chnl_net:caif_netlink_parms(): no params data found [ 69.135437][ T5841] chnl_net:caif_netlink_parms(): no params data found [ 69.178282][ T5844] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.185712][ T5844] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.193926][ T5844] bridge_slave_0: entered allmulticast mode [ 69.201188][ T5844] bridge_slave_0: entered promiscuous mode [ 69.212282][ T5844] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.219492][ T5844] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.226675][ T5844] bridge_slave_1: entered allmulticast mode [ 69.233767][ T5844] bridge_slave_1: entered promiscuous mode [ 69.272775][ T5842] chnl_net:caif_netlink_parms(): no params data found [ 69.301442][ T5844] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.344358][ T5844] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.393656][ T5844] team0: Port device team_slave_0 added [ 69.401695][ T5844] team0: Port device team_slave_1 added [ 69.407594][ T5843] chnl_net:caif_netlink_parms(): no params data found [ 69.437446][ T5841] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.444815][ T5841] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.452226][ T5841] bridge_slave_0: entered allmulticast mode [ 69.459467][ T5841] bridge_slave_0: entered promiscuous mode [ 69.481281][ T5841] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.488457][ T5841] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.495834][ T5841] bridge_slave_1: entered allmulticast mode [ 69.502486][ T5841] bridge_slave_1: entered promiscuous mode [ 69.523218][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.530513][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.556499][ T5844] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.601292][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.608277][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.635801][ T5844] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.653128][ T5841] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.681977][ T5841] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.694272][ T5842] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.702102][ T5842] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.709516][ T5842] bridge_slave_0: entered allmulticast mode [ 69.716122][ T5842] bridge_slave_0: entered promiscuous mode [ 69.724421][ T5842] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.731594][ T5842] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.738769][ T5842] bridge_slave_1: entered allmulticast mode [ 69.745764][ T5842] bridge_slave_1: entered promiscuous mode [ 69.815033][ T5841] team0: Port device team_slave_0 added [ 69.824056][ T5841] team0: Port device team_slave_1 added [ 69.831312][ T5843] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.838426][ T5843] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.845959][ T5843] bridge_slave_0: entered allmulticast mode [ 69.853285][ T5843] bridge_slave_0: entered promiscuous mode [ 69.862415][ T5842] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.875496][ T5842] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.887413][ T5844] hsr_slave_0: entered promiscuous mode [ 69.894225][ T5844] hsr_slave_1: entered promiscuous mode [ 69.916327][ T5843] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.923706][ T5843] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.931248][ T5843] bridge_slave_1: entered allmulticast mode [ 69.938242][ T5843] bridge_slave_1: entered promiscuous mode [ 69.964088][ T5842] team0: Port device team_slave_0 added [ 69.971571][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.978506][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.004954][ T5841] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.046936][ T5842] team0: Port device team_slave_1 added [ 70.054270][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.063894][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.090454][ T5841] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.110276][ T5843] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.137119][ T5843] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.168378][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.178045][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.204950][ T5842] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.245545][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.252533][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.278894][ T5842] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.300941][ T5843] team0: Port device team_slave_0 added [ 70.317749][ T5841] hsr_slave_0: entered promiscuous mode [ 70.324585][ T5841] hsr_slave_1: entered promiscuous mode [ 70.331721][ T5841] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 70.340044][ T5841] Cannot create hsr debugfs directory [ 70.361585][ T5843] team0: Port device team_slave_1 added [ 70.390958][ T5842] hsr_slave_0: entered promiscuous mode [ 70.397191][ T5842] hsr_slave_1: entered promiscuous mode [ 70.403711][ T5842] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 70.411371][ T5842] Cannot create hsr debugfs directory [ 70.473688][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.481012][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.507362][ T5843] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.546063][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.553264][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.579653][ T5843] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.672422][ T5843] hsr_slave_0: entered promiscuous mode [ 70.678634][ T5843] hsr_slave_1: entered promiscuous mode [ 70.685674][ T5843] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 70.693665][ T5843] Cannot create hsr debugfs directory [ 70.770146][ T5856] Bluetooth: hci2: command tx timeout [ 70.770184][ T5848] Bluetooth: hci1: command tx timeout [ 70.775823][ T5856] Bluetooth: hci0: command tx timeout [ 70.781424][ T5848] Bluetooth: hci3: command tx timeout [ 70.812818][ T5841] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 70.827112][ T5841] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 70.847325][ T5841] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 70.857261][ T5841] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 70.934673][ T5844] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 70.943863][ T5844] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 70.953381][ T5844] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 70.966563][ T5844] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 71.014782][ T5842] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 71.042932][ T5842] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 71.053590][ T5842] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 71.067557][ T5842] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 71.151478][ T5843] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 71.163318][ T5843] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 71.178912][ T5843] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 71.196943][ T5843] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 71.278019][ T5841] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.305916][ T5844] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.339207][ T5841] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.364579][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.371907][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.395942][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.403069][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.414168][ T5844] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.435908][ T5842] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.464202][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.471711][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.496141][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.503281][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.541421][ T5842] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.557785][ T5843] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.581275][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.588347][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.610367][ T5843] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.628745][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.635911][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.678615][ T3576] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.685745][ T3576] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.768548][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.775757][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.816823][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.823725][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.976443][ T5841] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.044036][ T5844] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.110655][ T5841] veth0_vlan: entered promiscuous mode [ 72.159174][ T5841] veth1_vlan: entered promiscuous mode [ 72.194161][ T5844] veth0_vlan: entered promiscuous mode [ 72.204284][ T5842] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.236837][ T5843] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.247503][ T5844] veth1_vlan: entered promiscuous mode [ 72.285018][ T5841] veth0_macvtap: entered promiscuous mode [ 72.307327][ T5841] veth1_macvtap: entered promiscuous mode [ 72.352739][ T5842] veth0_vlan: entered promiscuous mode [ 72.362158][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.382131][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.391656][ T5843] veth0_vlan: entered promiscuous mode [ 72.405184][ T5844] veth0_macvtap: entered promiscuous mode [ 72.417076][ T5841] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.426393][ T5841] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.436242][ T5841] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.445376][ T5841] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.458936][ T5844] veth1_macvtap: entered promiscuous mode [ 72.472933][ T5842] veth1_vlan: entered promiscuous mode [ 72.484652][ T5844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.495927][ T5844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.508164][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.518629][ T5843] veth1_vlan: entered promiscuous mode [ 72.545449][ T5844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.556245][ T5844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.567641][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.582308][ T5844] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.591410][ T5844] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.600424][ T5844] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.609134][ T5844] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.657979][ T5842] veth0_macvtap: entered promiscuous mode [ 72.746964][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.750663][ T5842] veth1_macvtap: entered promiscuous mode [ 72.764590][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.788417][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.797419][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.807454][ T5843] veth0_macvtap: entered promiscuous mode [ 72.844406][ T1153] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.845801][ T5843] veth1_macvtap: entered promiscuous mode [ 72.858915][ T5848] Bluetooth: hci3: command tx timeout [ 72.862818][ T5856] Bluetooth: hci0: command tx timeout [ 72.864779][ T5848] Bluetooth: hci1: command tx timeout [ 72.870453][ T5152] Bluetooth: hci2: command tx timeout [ 72.884771][ T1153] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.897033][ T3518] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.905442][ T3518] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.921461][ T5842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.934150][ T5842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.944213][ T5842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.954686][ T5842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.966810][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.993237][ T5842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.006917][ T5842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.018322][ T5842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.028069][ T5841] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 73.028798][ T5842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.057590][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.072162][ T5843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.085915][ T5843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.103914][ T5843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.115399][ T5843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.125910][ T5843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.136478][ T5843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.153006][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.172666][ T5842] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.197441][ T5842] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.207918][ T5842] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.231853][ T5842] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.275100][ T5843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.309778][ T5843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.322613][ T5843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.344354][ T5843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.368108][ T5843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.398911][ T5843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.418789][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.465479][ T5843] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.482493][ T5843] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.493100][ T5843] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.502313][ T5843] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.708088][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.737048][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.768262][ T3518] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.777044][ T3518] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.817513][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.836412][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.869106][ T3518] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.896103][ T3518] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.963710][ T1153] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.996187][ T5919] Zero length message leads to an empty skb [ 74.116649][ T1153] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.284395][ T5926] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3'. [ 74.325270][ T1153] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.684842][ T5152] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 74.700226][ T5152] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 74.711215][ T5152] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 74.730389][ T5152] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 74.741789][ T5152] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 74.749838][ T5152] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 74.929614][ T5152] Bluetooth: hci2: command tx timeout [ 74.935237][ T5856] Bluetooth: hci1: command tx timeout [ 74.941012][ T5853] Bluetooth: hci3: command tx timeout [ 74.987120][ T1153] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.456364][ T1153] bridge_slave_1: left allmulticast mode [ 75.466556][ T1153] bridge_slave_1: left promiscuous mode [ 75.474860][ T1153] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.524401][ T1153] bridge_slave_0: left allmulticast mode [ 75.533423][ T1153] bridge_slave_0: left promiscuous mode [ 75.539201][ T1153] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.991272][ T1153] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 76.004280][ T1153] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 76.031135][ T1153] bond0 (unregistering): Released all slaves [ 76.073414][ T5967] netlink: 8 bytes leftover after parsing attributes in process `syz.2.14'. [ 76.266953][ T5943] chnl_net:caif_netlink_parms(): no params data found [ 76.805444][ T1153] hsr_slave_0: left promiscuous mode [ 76.834284][ T1153] hsr_slave_1: left promiscuous mode [ 76.843628][ T1153] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 76.851265][ T5856] Bluetooth: hci0: command tx timeout [ 76.857816][ T1153] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 76.890837][ T1153] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 76.955458][ T1153] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 77.009734][ T5856] Bluetooth: hci1: command tx timeout [ 77.015205][ T5856] Bluetooth: hci2: command tx timeout [ 77.022153][ T5152] Bluetooth: hci3: command tx timeout [ 77.026909][ T1153] veth1_macvtap: left promiscuous mode [ 77.048958][ T1153] veth0_macvtap: left promiscuous mode [ 77.054681][ T1153] veth1_vlan: left promiscuous mode [ 77.060348][ T1153] veth0_vlan: left promiscuous mode [ 77.144745][ T5998] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 78.345677][ T1153] team0 (unregistering): Port device team_slave_1 removed [ 78.424083][ T1153] team0 (unregistering): Port device team_slave_0 removed [ 78.940489][ T5856] Bluetooth: hci0: command tx timeout [ 79.552938][ T5943] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.578822][ T5943] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.611604][ T5943] bridge_slave_0: entered allmulticast mode [ 79.618742][ T5943] bridge_slave_0: entered promiscuous mode [ 79.675247][ T6017] HSR: entered promiscuous mode [ 79.689739][ T5943] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.713660][ T5943] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.743260][ T5943] bridge_slave_1: entered allmulticast mode [ 79.773920][ T5943] bridge_slave_1: entered promiscuous mode [ 80.040775][ T5943] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.084305][ T5943] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.405480][ T5943] team0: Port device team_slave_0 added [ 80.445568][ T5943] team0: Port device team_slave_1 added [ 80.580230][ T5943] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.587217][ T5943] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.624178][ T5943] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.669847][ T5943] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.676849][ T5943] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.704724][ T5943] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.876715][ T5943] hsr_slave_0: entered promiscuous mode [ 80.894908][ T5943] hsr_slave_1: entered promiscuous mode [ 80.919508][ T5943] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 80.927897][ T5943] Cannot create hsr debugfs directory [ 81.019923][ T5856] Bluetooth: hci0: command tx timeout [ 82.054653][ T8] cfg80211: failed to load regulatory.db [ 82.177677][ T6071] process 'syz.0.23' launched ':,' with NULL argv: empty string added [ 83.089827][ T5856] Bluetooth: hci0: command tx timeout [ 84.367709][ T5943] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 84.449859][ T5943] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 84.550045][ T5943] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 84.579827][ T5943] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 84.838063][ T5943] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.924412][ T5943] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.975038][ T6118] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.982261][ T6118] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.058323][ T6118] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.065538][ T6118] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.594084][ T5943] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.720910][ T5943] veth0_vlan: entered promiscuous mode [ 85.763657][ T5943] veth1_vlan: entered promiscuous mode [ 85.848204][ T5943] veth0_macvtap: entered promiscuous mode [ 85.884067][ T5943] veth1_macvtap: entered promiscuous mode [ 85.971078][ T5943] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.010767][ T5943] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.056628][ T5943] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.086812][ T5943] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.118122][ T5943] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.149374][ T5943] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.199649][ T5943] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.228042][ T5943] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.257311][ T5943] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.299393][ T5943] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.338299][ T5943] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.369507][ T5943] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.412491][ T5943] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.453237][ T5943] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.514302][ T5943] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.543057][ T5943] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.579603][ T5943] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.629367][ T5943] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.022371][ T6114] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.041980][ T6114] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.116523][ T6118] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.128166][ T6118] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.223111][ T6257] netlink: 20 bytes leftover after parsing attributes in process `syz.1.44'. [ 92.633415][ T29] audit: type=1326 audit(1730280069.878:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6369 comm="syz.3.63" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd7a857e719 code=0x0 [ 93.124035][ T6388] netlink: 8 bytes leftover after parsing attributes in process `syz.0.68'. [ 93.858298][ T6400] netlink: 4 bytes leftover after parsing attributes in process `syz.3.71'. [ 97.470983][ T6483] syz.2.89 uses obsolete (PF_INET,SOCK_PACKET) [ 99.024391][ T6528] RDS: rds_bind could not find a transport for fe80::300:0:0:0, load rds_tcp or rds_rdma? [ 99.683801][ T6535] netlink: 306 bytes leftover after parsing attributes in process `syz.3.98'. [ 101.142411][ T6601] Invalid ELF header magic: != ELF [ 103.057412][ T6642] svc: failed to register nfsdv3 RPC service (errno 111). [ 103.076252][ T6642] svc: failed to register nfsaclv3 RPC service (errno 111). [ 104.587522][ T29] audit: type=1107 audit(1730280081.838:3): pid=6688 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 104.679430][ T29] audit: type=1107 audit(1730280081.898:4): pid=6688 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 104.805028][ T6695] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 109.626280][ T6801] svc: failed to register nfsdv3 RPC service (errno 111). [ 109.682161][ T6801] svc: failed to register nfsaclv3 RPC service (errno 111). [ 110.943575][ T6842] netlink: 4 bytes leftover after parsing attributes in process `syz.3.169'. [ 110.992040][ T6842] team0: entered promiscuous mode [ 111.015507][ T6842] team_slave_0: entered promiscuous mode [ 111.029487][ T6843] netlink: 12 bytes leftover after parsing attributes in process `syz.3.169'. [ 111.059774][ T6842] team_slave_1: entered promiscuous mode [ 113.985154][ T6926] gre0: entered allmulticast mode [ 115.483640][ T3599] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.703464][ T3599] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.014480][ T3599] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.134435][ T5853] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 116.157976][ T5853] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 116.169609][ T5853] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 116.182429][ T5853] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 116.199089][ T5853] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 116.209868][ T5853] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 116.273840][ T3599] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.087596][ T3599] bridge_slave_1: left allmulticast mode [ 117.109391][ T3599] bridge_slave_1: left promiscuous mode [ 117.131645][ T3599] bridge0: port 2(bridge_slave_1) entered disabled state [ 117.179104][ T3599] bridge_slave_0: left allmulticast mode [ 117.195270][ T3599] bridge_slave_0: left promiscuous mode [ 117.212732][ T3599] bridge0: port 1(bridge_slave_0) entered disabled state [ 118.205693][ T6964] delete_channel: no stack [ 118.377996][ T3599] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 118.405451][ T3599] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 118.429732][ T3599] bond0 (unregistering): Released all slaves [ 118.473566][ T6945] chnl_net:caif_netlink_parms(): no params data found [ 118.534248][ T5853] Bluetooth: hci2: command tx timeout [ 118.993135][ T7012] netlink: 12 bytes leftover after parsing attributes in process `syz.1.216'. [ 119.140446][ T7012] : entered promiscuous mode [ 119.153558][ T6945] bridge0: port 1(bridge_slave_0) entered blocking state [ 119.161590][ T6945] bridge0: port 1(bridge_slave_0) entered disabled state [ 119.175424][ T6945] bridge_slave_0: entered allmulticast mode [ 119.190324][ T6945] bridge_slave_0: entered promiscuous mode [ 119.210906][ T6945] bridge0: port 2(bridge_slave_1) entered blocking state [ 119.218098][ T6945] bridge0: port 2(bridge_slave_1) entered disabled state [ 119.225401][ T6945] bridge_slave_1: entered allmulticast mode [ 119.233330][ T6945] bridge_slave_1: entered promiscuous mode [ 119.745557][ T6945] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 119.758590][ T6945] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 119.921475][ T6945] team0: Port device team_slave_0 added [ 119.945963][ T3599] hsr_slave_0: left promiscuous mode [ 119.959881][ T3599] hsr_slave_1: left promiscuous mode [ 119.969216][ T3599] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 119.982961][ T3599] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 120.010239][ T3599] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 120.018765][ T3599] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 120.064756][ T3599] veth1_macvtap: left promiscuous mode [ 120.079604][ T3599] veth0_macvtap: left promiscuous mode [ 120.085387][ T3599] veth1_vlan: left promiscuous mode [ 120.139542][ T3599] veth0_vlan: left promiscuous mode [ 120.626523][ T5853] Bluetooth: hci2: command tx timeout [ 121.777570][ T3599] team0 (unregistering): Port device team_slave_1 removed [ 121.925342][ T3599] team0 (unregistering): Port device team_slave_0 removed [ 122.579168][ T6945] team0: Port device team_slave_1 added [ 122.677420][ T6945] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 122.689505][ T5853] Bluetooth: hci2: command tx timeout [ 122.695650][ T6945] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 122.722288][ T6945] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 122.762807][ T6945] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 122.778516][ T6945] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 122.805558][ T6945] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 122.934257][ T6945] hsr_slave_0: entered promiscuous mode [ 122.971909][ T6945] hsr_slave_1: entered promiscuous mode [ 122.986002][ T6945] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 122.994331][ T6945] Cannot create hsr debugfs directory [ 123.517943][ T7078] svc: failed to register nfsdv3 RPC service (errno 111). [ 123.531840][ T7078] svc: failed to register nfsaclv3 RPC service (errno 111). [ 123.736788][ T6945] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 123.792636][ T6945] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 123.844415][ T6945] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 124.028612][ T6945] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 124.273931][ T6945] 8021q: adding VLAN 0 to HW filter on device bond0 [ 124.331947][ T6945] 8021q: adding VLAN 0 to HW filter on device team0 [ 124.368988][ T6556] bridge0: port 1(bridge_slave_0) entered blocking state [ 124.376229][ T6556] bridge0: port 1(bridge_slave_0) entered forwarding state [ 124.425706][ T6556] bridge0: port 2(bridge_slave_1) entered blocking state [ 124.432910][ T6556] bridge0: port 2(bridge_slave_1) entered forwarding state [ 124.530827][ T6945] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 124.770191][ T5853] Bluetooth: hci2: command tx timeout [ 124.914219][ T6945] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 125.458911][ T6945] veth0_vlan: entered promiscuous mode [ 125.494645][ T6945] veth1_vlan: entered promiscuous mode [ 125.553883][ T6945] veth0_macvtap: entered promiscuous mode [ 125.588782][ T6945] veth1_macvtap: entered promiscuous mode [ 125.616999][ T6945] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 125.656037][ T6945] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 125.679516][ T6945] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 125.709355][ T6945] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 125.725641][ T6945] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 125.752251][ T6945] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 125.788128][ T6945] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 125.834505][ T6945] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 125.869529][ T6945] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 125.884803][ T6945] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 125.897366][ T6945] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 125.929568][ T6945] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 125.980959][ T6945] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 126.016802][ T6945] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 126.068175][ T6945] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.099529][ T6945] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.108301][ T6945] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.147677][ T6945] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.353826][ T7180] can: request_module (can-proto-4) failed. [ 126.417687][ T6591] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 126.434809][ T6591] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 126.502820][ T6556] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 126.523584][ T6556] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 131.946238][ T6107] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.149842][ T5856] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 132.190290][ T5856] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 132.219552][ T5856] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 132.260330][ T5856] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 132.269033][ T5856] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 132.276860][ T5856] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 132.633989][ T6107] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.814312][ T6107] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.041763][ T6107] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.253431][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.260371][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.282271][ T7398] mmap: syz.4.278 (7398) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 133.335368][ T7379] chnl_net:caif_netlink_parms(): no params data found [ 133.943399][ T7379] bridge0: port 1(bridge_slave_0) entered blocking state [ 133.958059][ T7379] bridge0: port 1(bridge_slave_0) entered disabled state [ 133.994476][ T7379] bridge_slave_0: entered allmulticast mode [ 134.013014][ T7379] bridge_slave_0: entered promiscuous mode [ 134.043698][ T6107] bridge_slave_1: left allmulticast mode [ 134.067361][ T6107] bridge_slave_1: left promiscuous mode [ 134.078601][ T6107] bridge0: port 2(bridge_slave_1) entered disabled state [ 134.121017][ T6107] bridge_slave_0: left allmulticast mode [ 134.136405][ T6107] bridge_slave_0: left promiscuous mode [ 134.159733][ T6107] bridge0: port 1(bridge_slave_0) entered disabled state [ 134.370101][ T5856] Bluetooth: hci1: command tx timeout [ 135.061566][ T6107] gre0 (unregistering): left allmulticast mode [ 135.523318][ T7442] svc: failed to register nfsdv3 RPC service (errno 111). [ 135.555161][ T7442] svc: failed to register nfsaclv3 RPC service (errno 111). [ 136.165749][ T6107] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 136.232287][ T6107] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 136.287939][ T6107] bond0 (unregistering): Released all slaves [ 136.366468][ T7379] bridge0: port 2(bridge_slave_1) entered blocking state [ 136.385059][ T7379] bridge0: port 2(bridge_slave_1) entered disabled state [ 136.409528][ T7379] bridge_slave_1: entered allmulticast mode [ 136.430728][ T7379] bridge_slave_1: entered promiscuous mode [ 136.461011][ T5856] Bluetooth: hci1: command tx timeout [ 137.017840][ T7379] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 137.090424][ C1] ================================================================== [ 137.091341][ C0] ------------[ cut here ]------------ [ 137.098518][ C1] BUG: KASAN: slab-use-after-free in __rhashtable_lookup.constprop.0+0x426/0x550 [ 137.098578][ C1] Read of size 4 at addr ffff888067c78008 by task kworker/u8:30/6556 [ 137.098605][ C1] [ 137.098629][ C1] CPU: 1 UID: 0 PID: 6556 Comm: kworker/u8:30 Not tainted 6.12.0-rc5-syzkaller-00044-gc1e939a21eb1 #0 [ 137.104306][ C0] UBSAN: shift-out-of-bounds in lib/rhashtable.c:1188:34 [ 137.113344][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 137.113367][ C1] Workqueue: bat_events batadv_nc_worker [ 137.121489][ C0] shift exponent 4294936704 is too large for 32-bit type 'int' [ 137.123737][ C1] [ 137.123747][ C1] Call Trace: [ 137.170552][ C1] [ 137.173418][ C1] dump_stack_lvl+0x116/0x1f0 [ 137.178142][ C1] print_report+0xc3/0x620 [ 137.182604][ C1] ? __virt_addr_valid+0x5e/0x590 [ 137.187671][ C1] ? __phys_addr+0xc6/0x150 [ 137.192209][ C1] kasan_report+0xd9/0x110 [ 137.196670][ C1] ? __rhashtable_lookup.constprop.0+0x426/0x550 [ 137.203040][ C1] ? __rhashtable_lookup.constprop.0+0x426/0x550 [ 137.209410][ C1] __rhashtable_lookup.constprop.0+0x426/0x550 [ 137.215606][ C1] ? lock_acquire+0x2f/0xb0 [ 137.220152][ C1] ? ila_nf_input+0x1bd/0x620 [ 137.224866][ C1] ila_nf_input+0x1ee/0x620 [ 137.229423][ C1] ? __pfx_ila_nf_input+0x10/0x10 [ 137.234507][ C1] nf_hook_slow+0xbb/0x200 [ 137.238978][ C1] nf_hook.constprop.0+0x42e/0x750 [ 137.244162][ C1] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 137.249415][ C1] ? __pfx_nf_hook.constprop.0+0x10/0x10 [ 137.255110][ C1] ? sock_wfree+0x46a/0x880 [ 137.259667][ C1] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 137.264914][ C1] ? __pfx_ipv6_rcv+0x10/0x10 [ 137.269639][ C1] ipv6_rcv+0xa4/0x680 [ 137.273757][ C1] ? __pfx_ipv6_rcv+0x10/0x10 [ 137.278483][ C1] __netif_receive_skb_one_core+0x12e/0x1e0 [ 137.284429][ C1] ? __pfx___netif_receive_skb_one_core+0x10/0x10 [ 137.290895][ C1] ? trace_lock_acquire+0x14a/0x1d0 [ 137.296129][ C1] ? process_backlog+0x3f1/0x15f0 [ 137.301199][ C1] ? process_backlog+0x3f1/0x15f0 [ 137.306266][ C1] __netif_receive_skb+0x1d/0x160 [ 137.311333][ C1] process_backlog+0x443/0x15f0 [ 137.316228][ C1] __napi_poll.constprop.0+0xb7/0x550 [ 137.321649][ C1] net_rx_action+0xa92/0x1010 [ 137.326379][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 137.331546][ C1] ? __pfx_mark_lock+0x10/0x10 [ 137.336359][ C1] ? kvm_sched_clock_read+0x11/0x20 [ 137.341600][ C1] ? sched_clock+0x38/0x60 [ 137.346060][ C1] ? sched_clock_cpu+0x6d/0x4d0 [ 137.350961][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 137.356816][ C1] ? mark_held_locks+0x9f/0xe0 [ 137.361625][ C1] handle_softirqs+0x213/0x8f0 [ 137.366426][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 137.371761][ C1] ? batadv_nc_purge_paths+0x1c6/0x390 [ 137.377263][ C1] ? __pfx_batadv_nc_to_purge_nc_path_coding+0x10/0x10 [ 137.384159][ C1] do_softirq+0xb2/0xf0 [ 137.388347][ C1] [ 137.391296][ C1] [ 137.394242][ C1] __local_bh_enable_ip+0x100/0x120 [ 137.399476][ C1] batadv_nc_purge_paths+0x1c6/0x390 [ 137.404821][ C1] batadv_nc_worker+0x913/0x1060 [ 137.409814][ C1] ? __pfx_batadv_nc_worker+0x10/0x10 [ 137.415232][ C1] ? rcu_is_watching+0x12/0xc0 [ 137.420025][ C1] ? trace_lock_acquire+0x14a/0x1d0 [ 137.425258][ C1] ? process_one_work+0x8bb/0x1b30 [ 137.430415][ C1] ? lock_acquire+0x2f/0xb0 [ 137.434963][ C1] ? process_one_work+0x8bb/0x1b30 [ 137.440120][ C1] process_one_work+0x958/0x1b30 [ 137.445106][ C1] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 137.450787][ C1] ? __pfx_process_one_work+0x10/0x10 [ 137.456208][ C1] ? assign_work+0x1a0/0x250 [ 137.460841][ C1] worker_thread+0x6c8/0xf00 [ 137.465488][ C1] ? __pfx_worker_thread+0x10/0x10 [ 137.470641][ C1] kthread+0x2c1/0x3a0 [ 137.474739][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 137.479975][ C1] ? __pfx_kthread+0x10/0x10 [ 137.484597][ C1] ret_from_fork+0x45/0x80 [ 137.489038][ C1] ? __pfx_kthread+0x10/0x10 [ 137.493655][ C1] ret_from_fork_asm+0x1a/0x30 [ 137.498473][ C1] [ 137.501511][ C1] [ 137.501514][ C0] CPU: 0 UID: 0 PID: 16 Comm: ksoftirqd/0 Not tainted 6.12.0-rc5-syzkaller-00044-gc1e939a21eb1 #0 [ 137.503824][ C1] Allocated by task 6114: [ 137.514387][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 137.518696][ C1] kasan_save_stack+0x33/0x60 [ 137.528746][ C0] Call Trace: [ 137.528759][ C0] [ 137.533410][ C1] kasan_save_track+0x14/0x30 [ 137.536697][ C0] dump_stack_lvl+0x16c/0x1f0 [ 137.539611][ C1] __kasan_kmalloc+0xaa/0xb0 [ 137.544273][ C0] __ubsan_handle_shift_out_of_bounds+0x2a5/0x480 [ 137.548928][ C1] __kmalloc_node_track_caller_noprof+0x20f/0x440 [ 137.553521][ C0] __rht_bucket_nested.cold+0x18/0x14a [ 137.559904][ C1] kmalloc_reserve+0xef/0x2c0 [ 137.566317][ C0] rht_bucket_nested+0x1a/0x40 [ 137.571751][ C1] __alloc_skb+0x164/0x380 [ 137.576428][ C0] __rhashtable_lookup.constprop.0+0x419/0x550 [ 137.581168][ C1] nsim_dev_trap_report_work+0x2a4/0xc90 [ 137.585573][ C0] ? lock_acquire+0x2f/0xb0 [ 137.591700][ C1] process_one_work+0x958/0x1b30 [ 137.597317][ C0] ? ila_nf_input+0x1bd/0x620 [ 137.601799][ C1] worker_thread+0x6c8/0xf00 [ 137.606733][ C0] ila_nf_input+0x1ee/0x620 [ 137.611377][ C1] kthread+0x2c1/0x3a0 [ 137.615954][ C0] ? __pfx_ila_nf_input+0x10/0x10 [ 137.620432][ C1] ret_from_fork+0x45/0x80 [ 137.624484][ C0] nf_hook_slow+0xbb/0x200 [ 137.629488][ C1] ret_from_fork_asm+0x1a/0x30 [ 137.633901][ C0] nf_hook.constprop.0+0x42e/0x750 [ 137.638286][ C1] [ 137.638294][ C1] Freed by task 6114: [ 137.643030][ C0] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 137.648116][ C1] kasan_save_stack+0x33/0x60 [ 137.650434][ C0] ? __pfx_nf_hook.constprop.0+0x10/0x10 [ 137.654393][ C1] kasan_save_track+0x14/0x30 [ 137.659574][ C0] ? sock_wfree+0x46a/0x880 [ 137.664227][ C1] kasan_save_free_info+0x3b/0x60 [ 137.669849][ C0] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 137.674497][ C1] __kasan_slab_free+0x51/0x70 [ 137.678992][ C0] ? __pfx_ipv6_rcv+0x10/0x10 [ 137.684007][ C1] kfree+0x14f/0x4b0 [ 137.689189][ C0] ipv6_rcv+0xa4/0x680 [ 137.693930][ C1] skb_free_head+0x108/0x1d0 [ 137.698595][ C0] ? __pfx_ipv6_rcv+0x10/0x10 [ 137.702466][ C1] skb_release_data+0x560/0x730 [ 137.706517][ C0] __netif_receive_skb_one_core+0x12e/0x1e0 [ 137.711087][ C1] consume_skb+0xbf/0x100 [ 137.715749][ C0] ? __pfx___netif_receive_skb_one_core+0x10/0x10 [ 137.720574][ C1] nsim_dev_trap_report_work+0x878/0xc90 [ 137.726458][ C0] ? trace_lock_acquire+0x14a/0x1d0 [ 137.730765][ C1] process_one_work+0x958/0x1b30 [ 137.737164][ C0] ? process_backlog+0x3f1/0x15f0 [ 137.742774][ C1] worker_thread+0x6c8/0xf00 [ 137.747971][ C0] ? process_backlog+0x3f1/0x15f0 [ 137.752883][ C1] kthread+0x2c1/0x3a0 [ 137.757903][ C0] __netif_receive_skb+0x1d/0x160 [ 137.762475][ C1] ret_from_fork+0x45/0x80 [ 137.767487][ C0] process_backlog+0x443/0x15f0 [ 137.771531][ C1] ret_from_fork_asm+0x1a/0x30 [ 137.776555][ C0] __napi_poll.constprop.0+0xb7/0x550 [ 137.780940][ C1] [ 137.780949][ C1] The buggy address belongs to the object at ffff888067c78000 [ 137.780949][ C1] which belongs to the cache kmalloc-4k of size 4096 [ 137.785785][ C0] net_rx_action+0xa92/0x1010 [ 137.790521][ C1] The buggy address is located 8 bytes inside of [ 137.790521][ C1] freed 4096-byte region [ffff888067c78000, ffff888067c79000) [ 137.795898][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 137.798193][ C1] [ 137.798201][ C1] The buggy address belongs to the physical page: [ 137.812225][ C0] ? __switch_to+0x749/0x1180 [ 137.816896][ C1] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x67c78 [ 137.830579][ C0] ? kvm_sched_clock_read+0x11/0x20 [ 137.835661][ C1] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 137.837978][ C0] ? sched_clock+0x38/0x60 [ 137.844372][ C1] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 137.849033][ C0] ? sched_clock_cpu+0x6d/0x4d0 [ 137.857765][ C1] page_type: f5(slab) [ 137.862974][ C0] handle_softirqs+0x213/0x8f0 [ 137.871440][ C1] raw: 00fff00000000040 ffff88801ac42140 dead000000000122 0000000000000000 [ 137.875840][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 137.883360][ C1] raw: 0000000000000000 0000000000040004 00000001f5000000 0000000000000000 [ 137.888180][ C0] ? rcu_is_watching+0x12/0xc0 [ 137.892150][ C1] head: 00fff00000000040 ffff88801ac42140 dead000000000122 0000000000000000 [ 137.896882][ C0] ? __pfx_run_ksoftirqd+0x10/0x10 [ 137.905456][ C1] head: 0000000000000000 0000000000040004 00000001f5000000 0000000000000000 [ 137.910713][ C0] ? smpboot_thread_fn+0x59d/0xa30 [ 137.919288][ C1] head: 00fff00000000003 ffffea00019f1e01 ffffffffffffffff 0000000000000000 [ 137.924018][ C0] run_ksoftirqd+0x3a/0x60 [ 137.932678][ C1] head: 0000000000000008 0000000000000000 00000000ffffffff 0000000000000000 [ 137.937759][ C0] smpboot_thread_fn+0x661/0xa30 [ 137.946419][ C1] page dumped because: kasan: bad access detected [ 137.946447][ C1] page_owner tracks the page as allocated [ 137.951536][ C0] ? __kthread_parkme+0x148/0x220 [ 137.960201][ C1] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 6114, tgid 6114 (kworker/u8:21), ts 136570008780, free_ts 136550654935 [ 137.964643][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 137.973285][ C1] post_alloc_hook+0x2d1/0x350 [ 137.978209][ C0] kthread+0x2c1/0x3a0 [ 137.984602][ C1] get_page_from_freelist+0x101e/0x3070 [ 137.990313][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 137.995314][ C1] __alloc_pages_noprof+0x223/0x25a0 [ 138.016301][ C0] ? __pfx_kthread+0x10/0x10 [ 138.021739][ C1] alloc_pages_mpol_noprof+0x2c9/0x610 [ 138.026493][ C0] ret_from_fork+0x45/0x80 [ 138.030537][ C1] new_slab+0x2ba/0x3f0 [ 138.036065][ C0] ? __pfx_kthread+0x10/0x10 [ 138.041239][ C1] ___slab_alloc+0xd1d/0x16f0 [ 138.046514][ C0] ret_from_fork_asm+0x1a/0x30 [ 138.051083][ C1] __slab_alloc.constprop.0+0x56/0xb0 [ 138.056545][ C0] [ 138.060921][ C1] __kmalloc_node_track_caller_noprof+0x365/0x440 [ 138.065158][ C0] ---[ end trace ]--- [ 138.069625][ C1] kmalloc_reserve+0xef/0x2c0 [ 138.069665][ C1] __alloc_skb+0x164/0x380 [ 138.074320][ C0] Kernel panic - not syncing: UBSAN: panic_on_warn set ... [ 138.074337][ C0] CPU: 0 UID: 0 PID: 16 Comm: ksoftirqd/0 Not tainted 6.12.0-rc5-syzkaller-00044-gc1e939a21eb1 #0 [ 138.074377][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 138.074396][ C0] Call Trace: [ 138.074409][ C0] [ 138.074421][ C0] dump_stack_lvl+0x3d/0x1f0 [ 138.074463][ C0] panic+0x71d/0x800 [ 138.074507][ C0] ? intel_dsi_prepare+0x2b20/0x3cb0 [ 138.074558][ C0] ? __pfx_panic+0x10/0x10 [ 138.074610][ C0] ? __pfx__printk+0x10/0x10 [ 138.074666][ C0] ? check_panic_on_warn+0x1f/0xb0 [ 138.074718][ C0] check_panic_on_warn+0xab/0xb0 [ 138.074767][ C0] __ubsan_handle_shift_out_of_bounds+0x2cc/0x480 [ 138.074827][ C0] __rht_bucket_nested.cold+0x18/0x14a [ 138.074884][ C0] rht_bucket_nested+0x1a/0x40 [ 138.074937][ C0] __rhashtable_lookup.constprop.0+0x419/0x550 [ 138.074984][ C0] ? lock_acquire+0x2f/0xb0 [ 138.075031][ C0] ? ila_nf_input+0x1bd/0x620 [ 138.075076][ C0] ila_nf_input+0x1ee/0x620 [ 138.075118][ C0] ? __pfx_ila_nf_input+0x10/0x10 [ 138.075157][ C0] nf_hook_slow+0xbb/0x200 [ 138.075212][ C0] nf_hook.constprop.0+0x42e/0x750 [ 138.075264][ C0] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 138.075318][ C0] ? __pfx_nf_hook.constprop.0+0x10/0x10 [ 138.075369][ C0] ? sock_wfree+0x46a/0x880 [ 138.075434][ C0] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 138.075497][ C0] ? __pfx_ipv6_rcv+0x10/0x10 [ 138.075546][ C0] ipv6_rcv+0xa4/0x680 [ 138.075598][ C0] ? __pfx_ipv6_rcv+0x10/0x10 [ 138.075647][ C0] __netif_receive_skb_one_core+0x12e/0x1e0 [ 138.075696][ C0] ? __pfx___netif_receive_skb_one_core+0x10/0x10 [ 138.075747][ C0] ? trace_lock_acquire+0x14a/0x1d0 [ 138.075788][ C0] ? process_backlog+0x3f1/0x15f0 [ 138.075840][ C0] ? process_backlog+0x3f1/0x15f0 [ 138.075885][ C0] __netif_receive_skb+0x1d/0x160 [ 138.075933][ C0] process_backlog+0x443/0x15f0 [ 138.075989][ C0] __napi_poll.constprop.0+0xb7/0x550 [ 138.076043][ C0] net_rx_action+0xa92/0x1010 [ 138.076103][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 138.076149][ C0] ? __switch_to+0x749/0x1180 [ 138.076196][ C0] ? kvm_sched_clock_read+0x11/0x20 [ 138.076243][ C0] ? sched_clock+0x38/0x60 [ 138.076291][ C0] ? sched_clock_cpu+0x6d/0x4d0 [ 138.076363][ C0] handle_softirqs+0x213/0x8f0 [ 138.076408][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 138.076452][ C0] ? rcu_is_watching+0x12/0xc0 [ 138.076491][ C0] ? __pfx_run_ksoftirqd+0x10/0x10 [ 138.076526][ C0] ? smpboot_thread_fn+0x59d/0xa30 [ 138.076563][ C0] run_ksoftirqd+0x3a/0x60 [ 138.076596][ C0] smpboot_thread_fn+0x661/0xa30 [ 138.076633][ C0] ? __kthread_parkme+0x148/0x220 [ 138.076675][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 138.076712][ C0] kthread+0x2c1/0x3a0 [ 138.076748][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 138.076793][ C0] ? __pfx_kthread+0x10/0x10 [ 138.076831][ C0] ret_from_fork+0x45/0x80 [ 138.076861][ C0] ? __pfx_kthread+0x10/0x10 [ 138.076899][ C0] ret_from_fork_asm+0x1a/0x30 [ 138.076966][ C0] [ 138.405322][ C0] Kernel Offset: disabled [ 138.409729][ C0] Rebooting in 86400 seconds..