last executing test programs: 6m7.212260153s ago: executing program 32 (id=258): mmap$auto(0x0, 0x40009, 0x1ff, 0x9b72, 0x7, 0x28000) r0 = socket(0x22, 0x2, 0x4) r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), r0) sendmsg$auto_NL80211_CMD_GET_INTERFACE(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x78, r1, 0x800, 0x70bd2b, 0x25dfdbfd, {}, [@NL80211_ATTR_INACTIVITY_TIMEOUT={0x6, 0x96, 0xd}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x25, 0xcd, "10de993b1bdec0621a376b4f1171fe8ab91ab9400ad107fde98cd3b007ea664c8d"}, @NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x7}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x9}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x80}, @NL80211_ATTR_P2P_OPPPS={0x5, 0xa3, 0xf8}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x7}, @NL80211_ATTR_QOS_MAP={0x4}, @NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0xfe}]}, 0x78}, 0x1, 0x0, 0x0, 0x54}, 0x20000000) ioctl$sock_SIOCGIFINDEX(r0, 0x80044943, 0x0) mmap$auto(0x0, 0x40009, 0x1ff, 0x9b72, 0x7, 0x28000) (async) socket(0x22, 0x2, 0x4) (async) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), r0) (async) sendmsg$auto_NL80211_CMD_GET_INTERFACE(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x78, r1, 0x800, 0x70bd2b, 0x25dfdbfd, {}, [@NL80211_ATTR_INACTIVITY_TIMEOUT={0x6, 0x96, 0xd}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x25, 0xcd, "10de993b1bdec0621a376b4f1171fe8ab91ab9400ad107fde98cd3b007ea664c8d"}, @NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x7}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x9}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x80}, @NL80211_ATTR_P2P_OPPPS={0x5, 0xa3, 0xf8}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x7}, @NL80211_ATTR_QOS_MAP={0x4}, @NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0xfe}]}, 0x78}, 0x1, 0x0, 0x0, 0x54}, 0x20000000) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x80044943, 0x0) (async) 5m30.361468826s ago: executing program 4 (id=432): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ila(&(0x7f00000000c0), 0xffffffffffffffff) (async) r1 = syz_genetlink_get_family_id$auto_ila(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$auto_ILA_CMD_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={0x28, r1, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@ILA_ATTR_IFINDEX={0x8}, @ILA_ATTR_LOCATOR_MATCH={0xc, 0x3, 0x3}]}, 0x28}, 0x1, 0x0, 0x0, 0x4004}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_802_15_4_MAC(&(0x7f0000000080), r0) sendmsg$auto_IEEE802154_LLSEC_ADD_DEV(r2, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x34, r3, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x4b}, @IEEE802154_ATTR_DEST_SHORT_ADDR={0x6, 0xe, 0x3}, @IEEE802154_ATTR_STATUS={0x5, 0x3, 0x90}, @IEEE802154_ATTR_DURATION={0x5, 0x15, 0x56}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x20000004) (async) sendmsg$auto_IEEE802154_LLSEC_ADD_DEV(r2, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x34, r3, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x4b}, @IEEE802154_ATTR_DEST_SHORT_ADDR={0x6, 0xe, 0x3}, @IEEE802154_ATTR_STATUS={0x5, 0x3, 0x90}, @IEEE802154_ATTR_DURATION={0x5, 0x15, 0x56}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x20000004) 5m29.747623408s ago: executing program 4 (id=434): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) timerfd_create$auto(0x9, 0x0) semctl$auto(0x1ff, 0x2, 0x13, 0x4) madvise$auto(0x0, 0x2000040080000004, 0xe) open(&(0x7f0000000100)='./file0\x00', 0x450a84, 0x10) clone$auto(0x200, 0x8000, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x5) r0 = gettid() process_vm_writev$auto(r0, &(0x7f0000000640)={0x0, 0x9dee}, 0x3ff, &(0x7f00000006c0)={0x0, 0x12}, 0x400, 0x0) clone$auto(0x5, 0x7, 0x0, 0x0, 0x10001) ioctl$auto(0x3, 0x400853fc, 0x48) r1 = gettid() rt_tgsigqueueinfo$auto(0xe, r1, 0xec3d, &(0x7f0000000240)={@_si_pad}) readv$auto(0x3, &(0x7f0000000380)={0x0, 0x100}, 0x3) 5m27.4469191s ago: executing program 4 (id=447): mmap$auto(0x3d, 0xa, 0x828, 0x17, 0x3, 0xb1) (async) mmap$auto(0x7a7cbff2, 0x0, 0xffffffffffffff72, 0xfff, 0xf886, 0x8) (async, rerun: 32) r0 = open$dir(&(0x7f0000000000)='./file0\x00', 0x4001, 0x5) (rerun: 32) getpeername$auto(r0, &(0x7f0000000040)={0x2, @sa_data_min="af85b0d9f4de7f438b6fc8e4cbe4"}, &(0x7f0000000080)=0x5df) timerfd_create$auto(0x0, 0x40) (async) write$auto(r0, &(0x7f00000000c0)='-\xac(\x00', 0xa) rseq$auto(&(0x7f0000000100)={0x6, 0x2, 0x3, 0x4, 0x7ad, 0x65, "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"}, 0x9, 0x3, 0x89ed96c) mmap$auto(0x1, 0x0, 0x0, 0x14, 0x9a, 0x3) (async) mmap$auto(0x3, 0x6, 0x401, 0x7f, 0x4, 0x2) setregid$auto(0x8, 0x7f) (async) mmap$auto(0xffffffffffffffff, 0x7, 0x7d, 0x80000010, 0x7, 0x5) (async, rerun: 64) getgroups$auto(0x7, &(0x7f0000001140)=0x6) (async, rerun: 64) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000001180), r1) (async) setregid$auto(0x8, 0xb) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) setsockopt$auto(r1, 0x2, 0x9, &(0x7f00000011c0)='-\xac(\x00', 0x0) (rerun: 64) setregid$auto(0x3, 0x0) sendmmsg$auto(r1, &(0x7f0000001300)={{&(0x7f0000001200)=[0x6, 0x2, 0x0], 0xffffffb1, &(0x7f0000001280)={&(0x7f0000001240)=[0x8, 0x9, 0x4], 0x8b}, 0x1, &(0x7f00000012c0)=[0xe0000000000, 0x8000000000000000], 0x7, 0x3}, 0x9}, 0xfff, 0x200) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000001380), r1) sendmsg$auto_NL80211_CMD_STOP_AP(r3, &(0x7f0000001440)={&(0x7f0000001340), 0xc, &(0x7f0000001400)={&(0x7f00000013c0)={0x14, r4, 0x200, 0x70bd27, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x40010}, 0x800) (async) syz_genetlink_get_family_id$auto_nbd(&(0x7f0000001480), r2) (async) sendfile$auto(r2, r0, &(0x7f00000014c0)=0x2, 0x8) (async) mmap$auto(0x5, 0x2, 0x2, 0x10, 0x6, 0x14e13df0) (async, rerun: 64) fchmod$auto(r0, 0x0) (rerun: 64) request_key$auto(&(0x7f0000001500)='@\'[-\x00', &(0x7f0000001540)='nbd\x00', &(0x7f0000001580)='-\xac(\x00', 0x80000001) (async) ppoll$auto(&(0x7f00000015c0)={r2, 0x8, 0x3}, 0x6, &(0x7f0000001600)={0x9, 0x9}, &(0x7f0000001640)={0x6}, 0x800080000000) sendmsg$auto_NL80211_CMD_SET_MCAST_RATE(r5, &(0x7f0000001dc0)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001d80)={&(0x7f00000016c0)={0x694, r4, 0xc74e0317db3a5209, 0x70bd2d, 0x25dfdbfb, {}, [@NL80211_ATTR_BEACON_HEAD={0x5eb, 0xe, "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"}, @NL80211_ATTR_VHT_CAPABILITY={0x4}, @NL80211_ATTR_MAC={0x88, 0x6, "faedd98aa70ff9fd0aafece040950a3812ef9a96189ccbae2364470a8d444eddf63aad681cbad5c0b67f537c4432878341f05ab9e4bd41c502b97c2de779d85206b7bfd0e875f7b20c7b0cdf4b10107b6216066b1efa36db8b77377f1902268a79b27f541de3f065ba9558d74e0f9f0bd31e255803a613e08001f96ce55b7cf01c9bf920"}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x3}]}, 0x694}}, 0x48080) (async, rerun: 64) bind$auto(0xffffffffffffffff, &(0x7f0000001e00)={0x5a3, @sa_data_min="ef6d8c50a2b0fe4d63d6cf994f5b"}, 0x4) (rerun: 64) 5m27.043978127s ago: executing program 4 (id=449): mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) madvise$auto(0x0, 0x7ffffffffffffffc, 0xc) mremap$auto(0x1, 0xfee2, 0x3fd3, 0x3, 0x5) 5m25.763740518s ago: executing program 4 (id=458): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8000, 0x0) io_uring_setup$auto(0x3fd, 0x0) mmap$auto(0x0, 0x6, 0x329, 0x10011, 0x2, 0x8000) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x8, 0xe1, 0x9b72, 0x2, 0x8000) mbind$auto(0x0, 0xfa9d, 0xd00, &(0x7f00000000c0)=0xfb, 0x400, 0x2) mremap$auto(0x0, 0x2, 0x3fd6, 0x3, 0x7fffffffb000) syz_genetlink_get_family_id$auto_gtp(&(0x7f0000000040), r0) pipe2$auto(0x0, 0x80) close_range$auto(0x7, 0xfffffffffffffff8, 0x2) bpf$auto(0x6, 0x0, 0x1) madvise$auto(0x200000000012, 0x7ffdffffffff9, 0x3) open(&(0x7f0000000000)='./file0\x00', 0x263c2, 0x84) socket(0x840000000002, 0x3, 0xff) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) fallocate$auto(0x8000000000000003, 0x0, 0xd, 0xcbd5d) sendfile$auto(0x6, 0x3, 0x0, 0xc01) mmap$auto(0x0, 0x9, 0xdf, 0xeb1, 0x100000000001, 0x8000) clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_ila(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_ILA_CMD_ADD(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="010028bd700010dcdf250100000010119945f3ac71c12238a0e5d633698fe497baaaa6e8d962861e8a98980d21e66562deebf4e35fb566affdfbec7b47063de05a6f951f840a19ddf62c1f250dbfd16987f6956075f1fd6bc09252eeaf82cf3a206a91c6d957"], 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) pipe2$auto(&(0x7f0000000000)=0x3bd, 0x80000001) mmap$auto(0x0, 0x42b, 0xdf, 0x9b72, 0x2, 0x2) move_pages$auto(0x0, 0x5, 0x0, &(0x7f00000003c0)=0x1, 0x0, 0x2) 5m23.060856326s ago: executing program 4 (id=474): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) rseq$auto(&(0x7f0000000300)={0xe, 0x401, 0x0, 0x6, 0xffffffff, 0x2}, 0x8000, 0x0, 0x6) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0xffffffffffff0001, 0x15) madvise$auto(0x0, 0xffffffffffff0005, 0x19) timer_create$auto(0x8, 0x0, 0x0) socket(0xa, 0x801, 0x84) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x3) io_uring_setup$auto(0x6, 0x0) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) bind$auto(0x3, &(0x7f0000000080)={0x2, @sockaddr_1_1}, 0x6b) 5m11.784853517s ago: executing program 2 (id=510): close_range$auto(0x0, 0xfffffffffffff000, 0x2) (async) close_range$auto(0x0, 0xfffffffffffff000, 0x2) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00') r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/net\x00') mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) (async) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) getpeername$auto(0x3, 0x0, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x2) memfd_create$auto(0x0, 0x4) mknod$auto(0x0, 0x1, 0x4) pidfd_open$auto(0x0, 0x3) r1 = ioctl$NS_GET_PARENT(r0, 0xff07, 0x0) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x5, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x2, 0x7) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x10, 0x2, 0x0) sendmsg$auto_NETDEV_CMD_QUEUE_GET(0xffffffffffffffff, 0x0, 0x4000) (async) sendmsg$auto_NETDEV_CMD_QUEUE_GET(0xffffffffffffffff, 0x0, 0x4000) msync$auto(0x1ffff000, 0x100000000005, 0x400000004) madvise$auto(0x3, 0xffffffffffff0001, 0x17) (async) madvise$auto(0x3, 0xffffffffffff0001, 0x17) madvise$auto(0x2000000040000, 0x7, 0xa) (async) madvise$auto(0x2000000040000, 0x7, 0xa) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x400000000002, 0x8000) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x400000000002, 0x8000) mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) (async) mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x402, 0x300000000000) close_range$auto(0x2, r1, 0xfffffffd) (async) close_range$auto(0x2, r1, 0xfffffffd) socket(0xa, 0x801, 0x106) listen$auto(0x3, 0x83) mmap$auto(0x0, 0x8, 0xdfc6, 0x29b7f, 0xbc2a, 0x400000000008000) setsockopt$auto(0x3, 0x0, 0x1, 0x0, 0x9) mbind$auto(0x0, 0x100000004, 0x100000000, 0x0, 0x20000000000006, 0x2) move_pages$auto(0x0, 0xd0, 0x0, 0x0, 0x0, 0x102) preadv$auto(0xfe, 0x0, 0x7fffffff, 0x3, 0x14) syz_genetlink_get_family_id$auto_handshake(&(0x7f0000000000), r2) (async) syz_genetlink_get_family_id$auto_handshake(&(0x7f0000000000), r2) 5m8.919794396s ago: executing program 2 (id=518): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0xa, 0x801, 0x84) connect$auto(0x3, &(0x7f0000000000)={0x2, @sockaddr_1_1={"d9ef7f"}}, 0x55) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x402, 0x300000000000) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) close_range$auto(0x2, 0x8000, 0x0) socket(0x1, 0x5, 0x0) io_uring_setup$auto(0x6, 0x0) mmap$auto(0x0, 0xe, 0x43, 0x12, 0x3, 0x8000) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) madvise$auto(0x0, 0x3, 0x14) mmap$auto(0x3, 0x10000, 0x20, 0x12, 0x80, 0x1) getsockopt$auto(0x3, 0x200000000001, 0x1c, 0x0, 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) arch_prctl$auto(0x2002, 0x2) r0 = open(&(0x7f0000000000)='./file0\x00', 0x200080, 0xe0) r1 = syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000080), 0xffffffffffffffff) stat$auto(&(0x7f0000000000)='..\x00\x00', 0x0) mprotect$auto(0x1ffff000, 0x8000000000000001, 0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid_for_children\x00') mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) fstat$auto(0x3, 0x0) sendmsg$auto_OVS_FLOW_CMD_GET(r0, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="10923b8739fed08489010000", @ANYRES16=r1, @ANYBLOB="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"], 0x110}, 0x1, 0x0, 0x0, 0x20000890}, 0x4800) syz_genetlink_get_family_id$auto_ovs_packet(0x0, 0xffffffffffffffff) r2 = socket(0x10, 0x3, 0x6) r3 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_FEC_SET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)={0xf8, r3, 0x1, 0x70bd29, 0x25dfdbff, {}, [@ETHTOOL_A_FEC_MODES={0xb1, 0x2, "2c78bbd486144602543afaeb48d47db230b6fccb9f80b12beea70a54c3483404b46defc5a6c58345e6c94e7db5b8ab5f5221193805b2ef79d3446602cfc96a7d1658196a32c8dd8df733ce0a63af950057b5c92dc5f5b4999bb85648256f90341a3b7337d7f730259c684b365df552f8adf3c94f9bda3ce361db0a26c6f35395b710a25d8eb22e1727e6d0b07c5aeceae60bc34f49c784c0ebeebf540cb0452b506f03373588ee9395ea65b508"}, @ETHTOOL_A_FEC_MODES={0x2d, 0x2, "3b6dbb442d4da77fbd1c9d22056a193ed43e12dafea2be2deaca9fdc7232db838b4b0bfc8d0000008d"}]}, 0xf8}, 0x1, 0x0, 0x0, 0x4014}, 0x4800) sendmsg$auto_ETHTOOL_MSG_LINKINFO_GET(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r3, 0x4, 0x70bd2c, 0x25dfdbfb, {}, [@ETHTOOL_A_LINKINFO_HEADER={0x7, 0x1, "9a3b5e"}, @ETHTOOL_A_LINKINFO_HEADER={0x7, 0x1, "fecfa7"}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x4) 5m7.927565973s ago: executing program 33 (id=474): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) rseq$auto(&(0x7f0000000300)={0xe, 0x401, 0x0, 0x6, 0xffffffff, 0x2}, 0x8000, 0x0, 0x6) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0xffffffffffff0001, 0x15) madvise$auto(0x0, 0xffffffffffff0005, 0x19) timer_create$auto(0x8, 0x0, 0x0) socket(0xa, 0x801, 0x84) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x3) io_uring_setup$auto(0x6, 0x0) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) bind$auto(0x3, &(0x7f0000000080)={0x2, @sockaddr_1_1}, 0x6b) 5m6.87023251s ago: executing program 2 (id=523): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) sendmsg$auto_GTP_CMD_ECHOREQ(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x24, 0x0, 0x203, 0x70bd25, 0x25dfdbff, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, 0x2}, @GTPA_LINK={0x8, 0x1, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r0 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000200), r1) (async) r2 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000200), r1) sendmsg$auto_ETHTOOL_MSG_PRIVFLAGS_GET(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r2, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@ETHTOOL_A_PRIVFLAGS_HEADER={0x7, 0x1, "f93019"}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x7, 0x1, "a50fc8"}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x4000000) (async) sendmsg$auto_ETHTOOL_MSG_PRIVFLAGS_GET(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r2, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@ETHTOOL_A_PRIVFLAGS_HEADER={0x7, 0x1, "f93019"}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x7, 0x1, "a50fc8"}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x4000000) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$auto_NL80211_CMD_SET_WIPHY(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010029bd7020fddbdf250700000008000300", @ANYRES32=r4], 0x24}, 0x1, 0x0, 0x0, 0x20040010}, 0x20000084) mremap$auto(0x0, 0xffffffffffffffff, 0x3fd6, 0x3, 0x7fffffffb000) mremap$auto(0x6, 0x0, 0x6, 0xb, 0x6) (async) mremap$auto(0x6, 0x0, 0x6, 0xb, 0x6) 5m6.087943995s ago: executing program 2 (id=526): r0 = open(&(0x7f0000000000)='./file0\x00', 0x261c2, 0x84) (async) mmap$auto(0x0, 0x61, 0x100001000000004, 0xfa31, 0x400, 0x8000) (async) write$auto(0x3, 0x0, 0x296) (async) fallocate$auto(0x8000000000000003, 0x0, 0xd, 0xcbd5d) (async) mmap$auto(0x0, 0x5, 0xfffffffffffffe01, 0x8011, 0x3, 0x8000) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) r1 = ioctl$NS_GET_PARENT(r0, 0xb702, 0x0) mmap$auto(0x0, 0x8, 0x1000000004, 0x9b72, 0x20002, 0x8000) (async) timer_create$auto(0xa, 0x0, 0xfffffffffffffffd) (async) io_uring_enter$auto(r1, 0x9, 0x80000000, 0x100, &(0x7f0000000040)=[0x7fffffffffffffff, 0x7], 0x4d) 5m5.859758249s ago: executing program 2 (id=529): mmap$auto(0x0, 0x20009, 0x10000000000df, 0xeb2, 0x401, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)) fcntl$auto(0x0, 0x402, 0x80) fcntl$auto(0x0, 0x402, 0x20007fffffff) socket(0x15, 0x5, 0x0) ioctl$auto(0x3, 0x8b32, 0x91) mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) rseq$auto(&(0x7f0000000300)={0xe, 0x401, 0x0, 0x6, 0xffffffff, 0x2}, 0x8002, 0x0, 0x6) io_uring_setup$auto(0x1, 0x0) futex$auto(0x0, 0x6, 0x8, 0x0, 0x0, 0x80000001) tkill$auto(0x1, 0x7) 5m3.725083374s ago: executing program 2 (id=537): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_nbd(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$auto_NBD_CMD_CONNECT(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000100)={0x28, r2, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x5}, @NBD_ATTR_SOCKETS={0x8, 0x7, '\x00\x00\x00\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x40080}, 0x20040000) ioctl$sock_SIOCGIFINDEX(r0, 0x5460, 0x0) 5m3.413151857s ago: executing program 34 (id=537): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_nbd(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$auto_NBD_CMD_CONNECT(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000100)={0x28, r2, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x5}, @NBD_ATTR_SOCKETS={0x8, 0x7, '\x00\x00\x00\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x40080}, 0x20040000) ioctl$sock_SIOCGIFINDEX(r0, 0x5460, 0x0) 3m22.867303375s ago: executing program 3 (id=911): r0 = socket$nl_generic(0x10, 0x3, 0x10) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) madvise$auto(0x6, 0x664, 0xfffffffd) socket(0x2, 0x1, 0x106) prctl$auto(0x1000000001c, 0x5, 0x8, 0x9, 0x80001) setreuid$auto(0x15, 0x5) keyctl$auto(0x4, 0xfffff7ffffffffff, 0x8081, 0x8, 0x8) socket(0x2b, 0x1, 0x1) rseq$auto(&(0x7f0000000000)={0xe, 0x401, 0x0, 0x6, 0xffffffff, 0x2}, 0x7ffe, 0x0, 0x6) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x621f, 0x10004) socket(0xa, 0x5, 0x0) pipe2$auto(0x0, 0x80) setsockopt$auto(0x3, 0x1, 0xf, 0x0, 0x8) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000021}, 0x8004) connect$auto(0x3, &(0x7f0000000140)={0xa, @sa_data_min="c4aeed448dc7fe8000"}, 0x55) listen$auto(0x3, 0x83) move_mount$auto(0x1, &(0x7f0000000000)='\x00', 0x8000, 0x0, 0x6) madvise$auto(0x0, 0xffffffffffff0001, 0x15) madvise$auto(0x0, 0xffffffffffff0005, 0x19) dup3$auto(0x1, 0x0, 0x40000000000) socket(0x2, 0x1, 0x106) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = syz_genetlink_get_family_id$auto_ovs_meter(&(0x7f0000002e40), 0xffffffffffffffff) sendmsg$auto_OVS_METER_CMD_FEATURES(r0, &(0x7f0000002f40)={0x0, 0x0, &(0x7f0000002f00)={&(0x7f0000002e80)={0x20, r1, 0x3, 0x70bd2a, 0x25dfdbfd, {}, [@OVS_METER_ATTR_USED={0xc, 0x5, 0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x90}, 0x10) 3m22.007898489s ago: executing program 3 (id=915): unshare$auto(0x40000080) mmap$auto(0x0, 0x2020009, 0x3, 0xeb0, 0xfffffffffffffff8, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) writev$auto(0x1, &(0x7f0000000100)={0x0, 0x400000000000fdef}, 0x1) socket$nl_generic(0x10, 0x3, 0x10) open(&(0x7f0000000080)='./cgroup\x00', 0x4e8401, 0x6) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)) read$auto(0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$auto(0x1, 0x541b, 0x8) io_uring_setup$auto(0x6, 0x0) io_uring_setup$auto(0x6, 0x0) 3m20.903931684s ago: executing program 3 (id=918): sendmsg$auto_IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, 0x0, 0x4000870) r0 = socket(0xa, 0x3, 0x110) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x2, 0x7) madvise$auto(0x0, 0xffffffffffff0001, 0x15) rt_tgsigqueueinfo$auto(0x80, 0xffffffff, 0x7, &(0x7f0000000180)={@siginfo_0_0={0x3a, 0x85, 0xfffffff5, @_sigchld={0xffff, 0x6, 0x8, 0x4d79, 0x6}}}) close_range$auto(0x0, 0xfffffffffffff000, 0x2) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/cgroup\x00') socket(0xa, 0x5, 0xc) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/net\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_INTERFACE(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000700)={0x1c, r3, 0xb01, 0x70bd27, 0x25dfdbfb, {}, [@NL80211_ATTR_UNSOL_BCAST_PROBE_RESP={0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4000080) sendmsg$auto_NL80211_CMD_SET_POWER_SAVE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000200)={0x48c, r3, 0x0, 0x70bd27, 0x25dfdbfb, {}, [@NL80211_ATTR_BEACON_HEAD={0x401, 0xe, "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"}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x7}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_BSS_CTS_PROT={0x5, 0x1c, 0xd}, @NL80211_ATTR_QOS_MAP={0x5e, 0xc7, "65c27492d06a966e690851a36ce3760707d727d5211c88ce0fff804fd1dc0073e302f6ea51d483944e634d7b1dde130a379afb8e7929037f14815555bbb475ee14ea5b41c3dceaeb1dd13985584277cbabcec81fb91a4f30fd83"}]}, 0x48c}, 0x1, 0x0, 0x0, 0x800}, 0x1) ioctl$NS_GET_PARENT(r1, 0xb701, 0x0) socket(0x1d, 0x2, 0x7) connect$auto(0x3, &(0x7f0000000180)={0x1d, @sockaddr_1_1}, 0x54) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) prctl$auto(0x7, 0x7fffffff, 0x9, 0x2, 0x80fc) syz_genetlink_get_family_id$auto_macsec(&(0x7f0000000080), r0) 3m20.376565383s ago: executing program 3 (id=920): socket(0x2b, 0x1, 0x1) bpf$auto(0x0, &(0x7f0000000280)=@bpf_attr_4={0x1e, 0x4, 0x1, 0x8}, 0x6f4) listen$auto(0x3, 0x81) (async) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) (async) select$auto(0x4, 0x0, &(0x7f0000000080)={[0x209c, 0xe9e, 0x4, 0x5, 0x1000, 0x100000001, 0xc, 0xf, 0x0, 0x40, 0xe, 0xd59, 0x101, 0xff, 0x2, 0x80080001]}, 0x0, 0x0) (async) timer_create$auto(0xb, 0x0, 0x0) (async) timer_settime$auto(0x0, 0xffff8000, &(0x7f00000000c0)={{0xf, 0x10007}, {0x9}}, 0x0) (async) timer_settime$auto(0x0, 0x8, &(0x7f0000000040)={{0x0, 0xd3}, {0x1000}}, &(0x7f0000000100)={{0xa04, 0x4}, {0x9000, 0x7ff}}) (async) mmap$auto(0x0, 0x2020009, 0xa, 0x4040000000eb1, 0xfffffffffffffffa, 0x7) r0 = socket(0x10, 0x3, 0x6) open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) (async) ioperm$auto(0x8, 0x9, 0x2) (async) fsync$auto(0x3) (async) r1 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_FEC_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0xf8, r1, 0x1, 0x70bd29, 0x25dfdbff, {}, [@ETHTOOL_A_FEC_MODES={0xb9, 0x2, "2c78bbd486144602543afaeb48d47db230b6fcb59f80b12beea70a54c3483404b46defc5a6c583202dc94e7db5b8ab5f5221193805b2ef79d3446602cfc96a7d1658196a6cc80900f733ce0a63af950057b5c92dc5f5b4999bb85648256f90341a3b7337d7f7b16f6687e7cb903ee8bf30259c684b365df552f8adf3c94f9bda3ce361db0a26c6f35395b710a25d8eb22e1727e6d0b07c5aeceae60bc34f49c784c0ebeebf540cb0452b506f03373588ee9395ea65"}, @ETHTOOL_A_FEC_MODES={0x27, 0x2, "3b6dbb442d4da77fbd1c9d22056a193ed43e12dafea2be2deaca9fdc7232db838b4b0b"}]}, 0xf8}, 0x1, 0x0, 0x0, 0x4014}, 0x4800) setsockopt$auto(r0, 0xfffffffe, 0x9, 0x0, 0x8) 3m20.171846909s ago: executing program 3 (id=922): mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r0 = socket(0xa, 0x5, 0x0) bind$auto(0x3, &(0x7f0000000040)={0xa, @sockaddr_1_1={"44c889ce6bedc9"}}, 0x6b) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x3, 0xa) connect$auto(0x3, &(0x7f00000000c0)={0x2, @sockaddr_1_1}, 0x55) sendmmsg$auto(0x3, 0x0, 0x9a6, 0xa00) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) getrandom$auto(0x0, 0x6000000, 0x3) ioperm$auto(0x2, 0x7, 0x3) tkill$auto(0x1, 0x7) open(0x0, 0xa61c2, 0x86) prctl$auto(0x3f, 0x1, 0x4, 0x80, 0x7) mbind$auto(0x1ffff000, 0x8000000000000001, 0x100000000, 0x0, 0x1, 0x2) mbind$auto(0x1ffff000, 0x3fc1, 0x1, 0x0, 0x7ffb, 0x8000000000000002) keyctl$auto(0x20000000000001f, 0x20000002, 0x8000, 0xf, 0x8400000000000007) mmap$auto(0x4, 0x400005, 0xf, 0x19, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) madvise$auto(0x0, 0xffffffffffffffff, 0x8) pkey_free$auto(0x89) bind$auto(r0, &(0x7f0000000080)={0x3, @sockaddr_1_1={"a617caa6e5c08b1218e3776c63b1560895a1d926300aaad22a41ffb82aaad14e9c34ff524f49e5cc25afa1af466ba913eb8dbb57b7494e05936bc1d19c0f6a2cb3979c28d17955f068c7a2842053902669f035181843c5b6212bd318373e45ff8b17013c7813fc114b52b34d73fe7d28065533f454feb136e3c13ad0889df19b8494f1f74cc3c0b215bca9144a55a854cd1b45a8384b53871bdb"}}, 0xffffff18) 3m19.732165598s ago: executing program 5 (id=923): close_range$auto(0x2, 0x8, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/user\x00') bpf$auto(0x3, &(0x7f0000000100)=@bpf_attr_11={0x80000000000021, 0x1ffffffff, 0x5, 0x7, 0x1, 0x6f, 0x9dd8, 0xe98e}, 0x6f4) prctl$auto(0x10000000016, 0x1, 0x4, 0x5, 0x0) 3m18.661241925s ago: executing program 5 (id=925): pselect6$auto(0x10001, 0x0, 0x0, 0x0, 0x0, 0x0) (async) setgroups$auto(0x3ff, 0x0) (async) unshare$auto(0x20000080) (async) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/mnt\x00') setns(r0, 0x0) (async) mount$auto(0x0, &(0x7f00000000c0)='.\x00', &(0x7f0000000180)='nfsd\x00', 0x8, 0x0) (async) mount$auto(0x0, &(0x7f00000000c0)='.\x00', &(0x7f0000000180)='nfsd\x00', 0x8, 0x0) (async) mount$auto(0x0, &(0x7f00000000c0)='.\x00', &(0x7f00000001c0)='nfsd\x00\xee\x1a\x8f\xa2~?\xe2\x82fg\xb3G\xbe\xc8\x12\xae\xc3\xc0@[\x99\xec\xbf(\xec\xc3\xb2\xf2\x15Zi\xc4S6\'\x14\x05\t\x8c\xd5?\xa0\x00\xd8\xe4\xafW\xcc\xa3\xce\tI\x95\xe12\xaclJ\xba\xeb\xe4\x83Z\xaev\xd7\xd9\xdd_\x14O\x84\xaa\x13W\xb7\x06\'fvQ\x95\xc5\xd1\x98\xe3T\xcdfk\xc7\xe9\x96\r\x91\xb0\xc46\xf2\xfc\xef\xfe\xa0\xc9d\xb3h$\xeb\xad\xa4P\x8f\xc3bM{4RQ\x00\x9d)_\xd81(\x03\xfd\rw\xca1\x88|\xe5\x1e\x10\x89X\x01\xe9\xf6g\x95xx\xaf\xa9~m\x05\xe1\xa8\xda\x80\xc5\x8f\xb41\x81\xf0\xa3\xa2\xe4\x81\xb9\x92\xda\x13\xfe5\xfb\xc6\xd8>\x01\xd4\x14', 0x5, 0x0) (async) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) mount$auto(0x0, &(0x7f0000000100)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0x10001, 0x0) (async) pivot_root$auto(&(0x7f0000000000)='}[,&*}\x00', &(0x7f0000000040)='.\x00') futex_waitv$auto(&(0x7f0000000080)={0x7fffffffffffffff, 0x6, 0xa00}, 0x4eb, 0x618a7d22, &(0x7f0000000280)={0x80, 0x6}, 0x8) 3m18.513981146s ago: executing program 5 (id=927): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_MAC80211_HWSIM(&(0x7f0000001a80), r0) sendmsg$auto_HWSIM_CMD_FRAME(r0, &(0x7f0000003200)={0x0, 0x0, &(0x7f00000031c0)={&(0x7f0000001ac0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="010025bd70250200000000ed2603"], 0x14}, 0x1, 0x0, 0x0, 0x2400004d}, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) poll$auto(&(0x7f0000000040)={0xffffffffffffffff, 0xff, 0xd}, 0x5, 0x40000) sendto$auto(r2, &(0x7f0000000080)=[0x2400000000], 0x9, 0x8, &(0x7f00000000c0)={0x0, @sa_data_min="ee130febe804a89222c847d78231"}, 0x400) madvise$auto(0x0, 0xffffffffffff0001, 0x15) syz_genetlink_get_family_id$auto_TIPCv2(&(0x7f0000000000), 0xffffffffffffffff) close_range$auto(0x0, 0xffffeffe, 0x4000000000002) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x3, 0xff) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x2, 0x88) getsockopt$auto(0x6, 0x40000000029, 0x1, 0xfffffffffffffffe, 0x0) clone$auto(0x6, 0x401, 0xffffffffffffffff, 0xfffffffffffffffc, 0xa31b) mlock$auto(0x81, 0xffff) vmsplice$auto(r2, &(0x7f00000001c0)={&(0x7f0000000180)=[0x3, 0x0, 0x182], 0x80000000}, 0x7, 0x2) bpf$auto(0xfff, &(0x7f0000001280)=@task_fd_query={0x2, 0x4, 0x8201, 0x2, 0x8, 0xc, 0xe3, 0x4000000002, 0x3}, 0x6f4) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) open(0x0, 0x22240, 0x155) swapoff$auto(0x0) mmap$auto(0x0, 0x8, 0x1000000004, 0x13, 0x3, 0x110000000) clone$auto(0x1, 0x8000000000000000, &(0x7f0000000100)=0x7d9, &(0x7f0000000140)=0x242, 0x9) r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000002c0), r2) sendmsg$auto_NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x18, r3, 0x4, 0x70bd29, 0x25dfdbfd, {}, [@NL80211_ATTR_REG_INDOOR={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x10}, 0x20000001) 3m17.916963979s ago: executing program 3 (id=929): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_MAC80211_HWSIM(&(0x7f0000000a00), r0) sendmsg$auto_HWSIM_CMD_GET_RADIO(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010028900000001000000000000008000a0000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x48000}, 0x4) (async) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) (async, rerun: 32) madvise$auto(0x0, 0x2000040080000004, 0xe) (rerun: 32) syz_genetlink_get_family_id$auto_IPVS(&(0x7f00000000c0), r0) (async) madvise$auto(0x0, 0xffffffffffff0001, 0x14) madvise$auto(0x1ffff000, 0x208000000010001, 0x8) socket(0xa, 0x801, 0x84) (async) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000021}, 0x8004) connect$auto(0x3, &(0x7f0000000140)={0xa, @sa_data_min="c4aeed448dc7fe8000"}, 0x55) (async) shutdown$auto(0x200000003, 0x2) (async) shutdown$auto(0x200000003, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) socket(0xa, 0x3, 0x6) (async) bpf$auto(0x3, &(0x7f00000001c0)=@task_fd_query={0x0, r0, 0x7ff, 0x6, 0xa, 0x1000209, 0xffffffffffffffff, 0x0, 0x3}, 0x4) (async, rerun: 32) close_range$auto(0x0, 0xfffffffffffff001, 0x2) (async, rerun: 32) socket$nl_generic(0x10, 0x3, 0x10) socket(0x23, 0x800, 0x8) (async, rerun: 32) sendmmsg$auto(0x3, &(0x7f0000000000)={{0x0, 0x2, 0x0, 0x106, 0x0, 0x1, 0x3}, 0xed7138c}, 0x7, 0x0) (async, rerun: 32) socket(0xf, 0x2, 0x10008) (async) socket$nl_generic(0x10, 0x3, 0x10) eventfd$auto(0x3) (async, rerun: 32) eventfd$auto(0x0) (rerun: 32) r3 = socket(0xa, 0x2, 0x88) bpf$auto(0x5, &(0x7f0000000000)=@link_update={r3, @new_prog_fd=0x4, 0x4, @old_prog_fd=r2}, 0xa3) (async, rerun: 64) getsockopt$auto(0x6, 0x29, 0x18, 0x0, 0x0) (async, rerun: 64) write$auto(r0, &(0x7f0000000040)='MAC80211_HWSIM\x00', 0x1) 3m17.402661917s ago: executing program 35 (id=929): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_MAC80211_HWSIM(&(0x7f0000000a00), r0) sendmsg$auto_HWSIM_CMD_GET_RADIO(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010028900000001000000000000008000a0000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x48000}, 0x4) (async) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) (async, rerun: 32) madvise$auto(0x0, 0x2000040080000004, 0xe) (rerun: 32) syz_genetlink_get_family_id$auto_IPVS(&(0x7f00000000c0), r0) (async) madvise$auto(0x0, 0xffffffffffff0001, 0x14) madvise$auto(0x1ffff000, 0x208000000010001, 0x8) socket(0xa, 0x801, 0x84) (async) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000021}, 0x8004) connect$auto(0x3, &(0x7f0000000140)={0xa, @sa_data_min="c4aeed448dc7fe8000"}, 0x55) (async) shutdown$auto(0x200000003, 0x2) (async) shutdown$auto(0x200000003, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) socket(0xa, 0x3, 0x6) (async) bpf$auto(0x3, &(0x7f00000001c0)=@task_fd_query={0x0, r0, 0x7ff, 0x6, 0xa, 0x1000209, 0xffffffffffffffff, 0x0, 0x3}, 0x4) (async, rerun: 32) close_range$auto(0x0, 0xfffffffffffff001, 0x2) (async, rerun: 32) socket$nl_generic(0x10, 0x3, 0x10) socket(0x23, 0x800, 0x8) (async, rerun: 32) sendmmsg$auto(0x3, &(0x7f0000000000)={{0x0, 0x2, 0x0, 0x106, 0x0, 0x1, 0x3}, 0xed7138c}, 0x7, 0x0) (async, rerun: 32) socket(0xf, 0x2, 0x10008) (async) socket$nl_generic(0x10, 0x3, 0x10) eventfd$auto(0x3) (async, rerun: 32) eventfd$auto(0x0) (rerun: 32) r3 = socket(0xa, 0x2, 0x88) bpf$auto(0x5, &(0x7f0000000000)=@link_update={r3, @new_prog_fd=0x4, 0x4, @old_prog_fd=r2}, 0xa3) (async, rerun: 64) getsockopt$auto(0x6, 0x29, 0x18, 0x0, 0x0) (async, rerun: 64) write$auto(r0, &(0x7f0000000040)='MAC80211_HWSIM\x00', 0x1) 3m17.274956377s ago: executing program 5 (id=931): r0 = socket(0x11, 0xa, 0x300) mmap$auto(0x0, 0x5, 0x2, 0x40eb5, 0x402, 0x300000002000) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x801, 0x84) socket(0x2c, 0x80003, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x2, 0x3a) socket(0xa, 0x2, 0x0) socket(0xa, 0x2, 0x88) socket(0xa, 0x2, 0x0) connect$auto(0x3, 0x0, 0x55) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) mq_open$auto(0x0, 0x3ff, 0x7, &(0x7f0000000140)={0x7, 0x2f05, 0xa509, 0x4}) open(&(0x7f0000000000)='./file0\x00', 0x261c2, 0x84) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8) clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) socket$nl_generic(0x10, 0x3, 0x10) read$auto(r0, &(0x7f0000000080)='\x00', 0x7) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0xf, 0x0) chdir$auto(&(0x7f0000000000)='}[,&*}\x00') mincore$auto(0x0, 0x8000000000005a, 0x0) 3m16.812926837s ago: executing program 5 (id=934): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) (async) r0 = socket(0x10, 0x80000, 0x8a) ioctl$sock_SIOCGIFINDEX(r0, 0x8955, &(0x7f0000000bc0)={'vxcan1\x00'}) (async) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x10004) socket(0x1, 0x0, 0x0) (async) madvise$auto(0x0, 0xffffffffffff0005, 0x19) (async) mkdir$auto(&(0x7f00000001c0)='}[,&*}\x00', 0xc001) mount$auto(0x0, &(0x7f0000000100)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0x10001, 0x0) mprotect$auto(0x1ffff000, 0x8000000000000001, 0x4) open(&(0x7f0000000100)='.\x00', 0x0, 0x408) (async, rerun: 64) close_range$auto(0x2, 0x8, 0x0) (async, rerun: 64) bpf$auto(0x20, &(0x7f0000000000)=@prog_bind_map={0xffffffffffffffff, 0xffffffffffffffff, 0x3}, 0x7) io_cancel$auto(0x4, &(0x7f0000000100)={0x8, 0x8, 0x800, 0x8000, 0x3, 0x80000000, 0x0, 0x9, 0x1, 0x0, 0x3, r1}, &(0x7f0000000140)={0x4, 0x3, 0x5, 0x6}) (async) mprotect$auto(0x1ffff000, 0x810002, 0x0) (async) socket(0x10, 0x2, 0x4) (async, rerun: 32) mknod$auto(&(0x7f0000000040)=':,\x00', 0xc9, 0xc8) (async, rerun: 32) execve$auto(&(0x7f0000000000)=':,\x00', 0x0, 0x0) (async) mprotect$auto(0x1ffff000, 0x8000000000000001, 0xd) (async) mount$auto(&(0x7f0000000000)='pimreg\x00', &(0x7f0000000040)='\x00', 0x0, 0x10dfd057, 0x0) fspick$auto(0xffffffffffffff9c, &(0x7f0000000000)='!\x00', 0x6) (async) fsmount$auto(0x4, 0x0, 0x200003) settimeofday$auto(0x0, &(0x7f0000000100)={0x4, 0x8}) recvfrom$auto(r3, &(0x7f0000000180)=[0x0, 0x2], 0x2, 0x6, &(0x7f00000001c0)={0x8, @sa_data_min="dd68bc4fd5f9e144a12388ce227d"}, &(0x7f0000000200)=0x25d) (async) madvise$auto(0x0, 0xffffffffffff0001, 0x15) (async) socket(0xa, 0x801, 0x6) (async) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async, rerun: 32) setsockopt$auto(0x3, 0x10000000084, 0x80, 0x0, 0x8) (rerun: 32) madvise$auto(0x0, 0xffffffffffff0005, 0x19) (async) syz_genetlink_get_family_id$auto_NLBL_MGMT(&(0x7f00000000c0), r2) prctl$auto(0x10001, 0x8001, 0x9, 0x0, 0x8000) 3m11.881438573s ago: executing program 5 (id=944): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) socket(0x15, 0x5, 0x0) (async, rerun: 64) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) (rerun: 64) close_range$auto(0x0, 0xfffffffffffff000, 0x2) syz_open_procfs$namespace(0x0, 0x0) (async) socket(0x11, 0x80003, 0x300) (async) syz_genetlink_get_family_id$auto_nbd(0x0, 0xffffffffffffffff) (async, rerun: 32) ioctl$auto(0x1, 0x541b, 0x8) (async, rerun: 32) clock_nanosleep$auto(0x2, 0x543bae6e, 0x0, 0xfffffffffffffffd) clock_nanosleep$auto(0x2, 0x543bae6e, 0x0, 0xfffffffffffffffd) (async) mmap$auto(0x100000000, 0x8, 0x4000000000e2, 0x11, 0x81, 0x100000001) (async) setitimer$auto(0x80000000, 0x0, &(0x7f0000000100)={{0x80000000, 0x1}, {0x0, 0x3}}) r0 = socket(0x2, 0x1, 0x106) (async, rerun: 64) r1 = socket(0x2, 0x3, 0x1) (rerun: 64) ioctl$auto(r1, 0x890d, 0x7ffffffffffe) getsockopt$auto(0x4, 0x6, 0x19, 0xfffffffffffffffc, 0x0) sendmsg$auto_GTP_CMD_ECHOREQ(0xffffffffffffffff, 0x0, 0x4000) (async) r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) (async, rerun: 64) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$auto_NL80211_CMD_SET_WIPHY(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={0x24, r2, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r5}, @NL80211_ATTR_WIPHY_TX_POWER_SETTING={0x8, 0x61, 0xe0}]}, 0x24}, 0x1, 0x0, 0x0, 0x24048080}, 0x80) (async, rerun: 32) sendmsg$auto_BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x300, 0x70bd26, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4c894}, 0x4) (async, rerun: 32) r6 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="72010000", @ANYRESDEC=r0], 0x1ac}}, 0x40000) setsockopt$auto(r6, 0x6, 0x4, &(0x7f0000000140)='\x00', 0x4) 3m11.456154096s ago: executing program 36 (id=944): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) socket(0x15, 0x5, 0x0) (async, rerun: 64) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) (rerun: 64) close_range$auto(0x0, 0xfffffffffffff000, 0x2) syz_open_procfs$namespace(0x0, 0x0) (async) socket(0x11, 0x80003, 0x300) (async) syz_genetlink_get_family_id$auto_nbd(0x0, 0xffffffffffffffff) (async, rerun: 32) ioctl$auto(0x1, 0x541b, 0x8) (async, rerun: 32) clock_nanosleep$auto(0x2, 0x543bae6e, 0x0, 0xfffffffffffffffd) clock_nanosleep$auto(0x2, 0x543bae6e, 0x0, 0xfffffffffffffffd) (async) mmap$auto(0x100000000, 0x8, 0x4000000000e2, 0x11, 0x81, 0x100000001) (async) setitimer$auto(0x80000000, 0x0, &(0x7f0000000100)={{0x80000000, 0x1}, {0x0, 0x3}}) r0 = socket(0x2, 0x1, 0x106) (async, rerun: 64) r1 = socket(0x2, 0x3, 0x1) (rerun: 64) ioctl$auto(r1, 0x890d, 0x7ffffffffffe) getsockopt$auto(0x4, 0x6, 0x19, 0xfffffffffffffffc, 0x0) sendmsg$auto_GTP_CMD_ECHOREQ(0xffffffffffffffff, 0x0, 0x4000) (async) r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) (async, rerun: 64) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$auto_NL80211_CMD_SET_WIPHY(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={0x24, r2, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r5}, @NL80211_ATTR_WIPHY_TX_POWER_SETTING={0x8, 0x61, 0xe0}]}, 0x24}, 0x1, 0x0, 0x0, 0x24048080}, 0x80) (async, rerun: 32) sendmsg$auto_BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x300, 0x70bd26, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4c894}, 0x4) (async, rerun: 32) r6 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="72010000", @ANYRESDEC=r0], 0x1ac}}, 0x40000) setsockopt$auto(r6, 0x6, 0x4, &(0x7f0000000140)='\x00', 0x4) 2m47.736781787s ago: executing program 1 (id=1039): r0 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) setuid$auto(0xe) memfd_create$auto(&(0x7f00000002c0)='IPVS\x00', 0x7) mmap$auto(0xfffffffffffffffe, 0x2, 0x2, 0x9b72, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0x22, 0x5, 0x3) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffff7, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) uname$auto(0x0) mount$auto(0x0, &(0x7f0000000100)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0x10001, 0x0) mount$auto(0x0, &(0x7f0000000100), 0x0, 0xdad, 0x0) unshare$auto(0x200) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/mnt\x00') setns(r1, 0x0) clone$auto(0xfffffffe20000, 0x4, 0xfffffffffffffffc, 0xfffffffffffffffc, 0xfa6) getsockopt$auto(0x6, 0x40000000084, 0x4, 0xfffffffffffffffe, 0x0) fallocate$auto(0x3, 0x3, 0x1, 0x400000008ec6) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) socket$nl_generic(0x10, 0x3, 0x10) connect$auto(0x3, 0xfffffffffffffffe, 0x0) sendmsg$auto_NL80211_CMD_SET_WIPHY(r2, &(0x7f0000000040)={0x0, 0xfdce, &(0x7f0000000100)={&(0x7f0000001340)=ANY=[@ANYBLOB="a0ca0aeadd62058af6467c510657fecad9d7541a3f2ae068c62bf42e2c5ab3d53c5ac9b7498c0ba0d8e93802ff8bf8673c78bca5b515239bdf54390d61deed6649925e4e9f7e21680010bcac716eb25e12ec75056dbcedbb89cb36ce1eedbbd49e6cbdabb4e6a8f15dbbc8ee0131e7099d838289397f59fce44b3b7a07b8bad01bc23309a9d0dde91bbcf1216dfe9454bda1b1c318958e590fb2d6d16684098f1842b851c9edac28de444a2eb61a5482f16b684ac601a6b07806fffaf15dc00ba911", @ANYRES16=r0, @ANYBLOB="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"], 0x1024}, 0x1, 0x0, 0x0, 0x44010}, 0x20000084) 2m47.273905532s ago: executing program 1 (id=1042): socket(0xa, 0x6, 0x1) (async) mmap$auto(0x0, 0x400008, 0x7f, 0x9b72, 0x2, 0x8000) (async) madvise$auto(0x0, 0x8000, 0x96d1) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$auto_macsec(&(0x7f0000000a00), 0xffffffffffffffff) sendmsg$auto_MACSEC_CMD_ADD_RXSA(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000ac0)={0x14, r1, 0x1, 0x70bd27, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4000804}, 0x8880) (async) clock_gettime$auto(0x1, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0xa00) 2m46.471853668s ago: executing program 1 (id=1046): socket(0x2c, 0x80003, 0x0) socket(0xa, 0x2, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) clock_nanosleep$auto(0x8, 0x1, &(0x7f0000000080)={0x6, 0x1}, 0x0) getrandom$auto(0x0, 0x6000000, 0x3) ioctl$auto(0xc8, 0x400454d9, 0x5c8d) mlockall$auto(0x7) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) getrandom$auto(&(0x7f0000000080)='TASKSTATS\x00', 0x6, 0x9) socket(0x1, 0x1, 0x1) socket(0x2c, 0x80003, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) memfd_create$auto(&(0x7f0000000000)='!\x00', 0x16) fallocate$auto(0x8000000000000003, 0x0, 0xd, 0x2cbd5d) r1 = syz_genetlink_get_family_id$auto_MAC80211_HWSIM(&(0x7f0000000640), r0) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000000c0)=ANY=[@ANYBLOB="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", @ANYRES16=r1, @ANYBLOB="010025bd7000fcdbdf250400000004001000"], 0x18}, 0x1, 0x0, 0x0, 0x40000}, 0x48000) mlockall$auto(0x200) writev$auto(0x5, &(0x7f0000000540)={&(0x7f0000000500)=[0x3d88], 0x1}, 0x7) sendmsg$auto_HWSIM_CMD_NEW_RADIO(0xffffffffffffffff, 0x0, 0x48000) pipe2$auto(0x0, 0x80) r2 = gettid() tkill$auto(r2, 0x7) syz_genetlink_get_family_id$auto_TASKSTATS(&(0x7f0000000040), 0xffffffffffffffff) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) select$auto(0x3, 0x0, &(0x7f0000000100)={[0x80000003, 0x200, 0x0, 0xc, 0x8, 0x1, 0x20006, 0x8000000000000002, 0x81, 0x2460000000000000, 0x4000000000000000, 0x5, 0x4, 0xaf, 0x8, 0x6]}, 0x0, 0x0) connect$auto(0x3, &(0x7f0000000140)={0xa, @sa_data_min="c4aeed448dc7fe8000"}, 0x55) socket(0x11, 0x80003, 0x300) socket$nl_generic(0x10, 0x3, 0x10) write$auto(0x3, 0x0, 0xfdef) 2m45.350046087s ago: executing program 8 (id=1050): mmap$auto(0x200000080000, 0x20009, 0x4000000000df, 0xeb1, 0x6, 0x8000) mmap$auto(0xb1, 0x3, 0x9, 0x18, 0x5, 0x1) open(&(0x7f0000000800)='./file0\x00', 0x30b4c0, 0x50) mmap$auto(0x8, 0xa, 0x8, 0x15, 0x3fd, 0x105) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x86ee, 0xffffffffffffebab, 0xdc, 0x410, 0x7fff, 0x8000) getsockopt$auto(0x4, 0x1, 0xf, 0xffffffffffffffff, 0x0) mlockall$auto(0x7) 2m45.130574386s ago: executing program 1 (id=1051): socket(0xa, 0x2, 0x88) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) select$auto(0x3, 0x0, &(0x7f0000000100)={[0x9, 0x7, 0x0, 0x9, 0xfffffffffffffffc, 0x3, 0x6, 0x2, 0x9, 0xffff, 0x4000000000000000, 0xd, 0x3, 0x200000201, 0x7, 0x6]}, 0x0, 0x0) connect$auto(0x3, &(0x7f0000000000)={0xa, @sa_data_min="c4aeed448dc7fe8000"}, 0x55) sendto$auto(0x3, 0x0, 0xf, 0xe, &(0x7f0000000100)={0x2, @sa_data_min="c449e72204736b00"}, 0x19) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x801, 0x106) setsockopt$auto(0x3, 0x6, 0x9, 0x0, 0x1) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) rt_sigtimedwait$auto(0x0, 0xfffffffffffffffd, 0xfffffffffffffffd, 0x8) r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000001f40), 0xffffffffffffffff) mmap$auto(0x4, 0x8, 0x4000000000df, 0xeb1, 0x9, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket(0x15, 0x5, 0x0) bpf$auto(0x0, &(0x7f0000000100)=@bpf_attr_0={0x1a, 0x506, 0x1, 0xffff, 0xfffffffa, 0x1, 0x4, 'p\x00', 0x0, 0x5, 0x3, 0x56, 0x2, 0x2, 0xffffffffffffffff, 0x6}, 0x6f4) poll$auto(0x0, 0x2, 0xc) sendmsg$auto_NL80211_CMD_SET_WIPHY(r1, &(0x7f0000002000)={0x0, 0x0, &(0x7f0000001fc0)={&(0x7f0000001f80)={0x20, r2, 0x201, 0x70bd27, 0x25dfdbfe, {}, [@NL80211_ATTR_WDEV={0xc}]}, 0x20}, 0x1, 0x0, 0x0, 0x20040040}, 0x4008040) sendmsg$auto_NL80211_CMD_GET_SURVEY(r0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000080)={&(0x7f0000000180)={0xe0, r2, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_FREQ_FIXED={0x4}, @NL80211_ATTR_CQM={0xb1, 0x5e, "18756faf69bfdb72febdbb7bcd624beafc634e0cb9b6837f479c25c546c7fbfa5b95dda31dbd1a7de204adbe8f65b29efa5b3a60ae2384e0cb066d0e5ae18bb087e104673cf939db85a4f038b8b59f008e55bab5aaac1a21aec26f13269692dc92f5f4fd3fc688c281fcb4cff3d73110bbe2a48449f316d39e1a1f1b50e0c9c0ffd6ce6f7d6238156eb66e4a74dd04f2908846561f93ce36e0466c8b043da013772a77a8c4bc17a6e0ab80db7c"}, @NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x103}, @NL80211_ATTR_BSS_DUMP_INCLUDE_USE_DATA={0x4}]}, 0xe0}, 0x1, 0x0, 0x0, 0x8c0}, 0x4040800) 2m44.988870085s ago: executing program 8 (id=1052): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r0 = socket(0x11, 0x80003, 0x300) r1 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$auto_NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000400)={&(0x7f00000002c0)={0x124, r1, 0xc45f2b90ecb9fd9a, 0x70bd29, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x4}, @NL802154_ATTR_SCAN_PREAMBLE_CODES={0xa0, 0x22, "05321e76e9a2229a30712150cb109cdad8172821ff8c7c2c0364c87e121e5357c664ce24b03ac987188469765af0c2eea208b609718014d936663fe9e2309fc9e04b1b2c216515080c6fd0a9303874b3120fabe8538d95a7df57c13506445046f7b1e30e6ab617a297dbf0e5c178be37400d16620fa44608154a6b5553b4cda1221a09378ecdb2da2c675fa3fad908b7300af57fe3637eb47ecfa4ae"}, @NL802154_ATTR_SEC_DEVKEY={0x56, 0x2f, "0b760d3d37eec549af5c61bbb878b95d6cc5339b27ca8b0e3cf965b5411e6e0593b92a1df3c3cf103a71a1eb6e5181d14f992ad80fa0648b9419bd3ce5b5f69b49346349b164bb8f953ca3122f0eb8a4a392"}, @NL802154_ATTR_SCAN_MEAN_PRF={0x4}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0xd}]}, 0x124}, 0x1, 0x0, 0x0, 0x4000855}, 0x24000004) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) ioperm$auto(0x800, 0x5, 0xd) write$auto(0x3, 0x0, 0x81) socket(0x28, 0xb, 0x7) getgroups$auto(0xeda, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) setsockopt$auto(r0, 0x107, 0x12, 0x0, 0x4) bpf$auto(0x5, &(0x7f0000000000)=@iter_create={0x19, 0x5}, 0x7) statmount$auto(0x0, &(0x7f0000000040)={0x1, 0x0, 0x36, 0x828, 0x9, 0x8000000000000000, 0x9f, 0x7, 0x9, 0x8, 0x2, 0x9, 0x3, 0x8, 0x0, 0x200000000000f, 0x100, 0x1, 0x10001, 0x2cf8, [0x9, 0x7f, 0x40, 0x1, 0x7fffffffffffffff, 0x2, 0x600, 0x3, 0x80000000, 0x8, 0x395e, 0xfffffffffffffff9, 0x10, 0x3, 0x35c4, 0x0, 0x6, 0x0, 0xea8, 0xc, 0xd9, 0x48, 0x5, 0x1, 0x200000000803, 0x7fffffffffffffff, 0x15, 0x11, 0xb, 0x8000000000000000, 0xb65, 0x8, 0x800, 0x20081, 0x1, 0x4003, 0xffffffffffff0000, 0x6b, 0xfffffffffffffff9, 0x4, 0x2b7, 0x4, 0xf, 0xffffffffffffff26, 0x8, 0x7, 0x6, 0x7a, 0xdc]}, 0xe3c, 0x0) r2 = socket(0x10, 0x2, 0x4) sendmsg$auto_NFSD_CMD_THREADS_SET(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="2c0000001400"], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x400c000) 2m44.456758155s ago: executing program 8 (id=1054): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x2, 0x6, 0x0) (async, rerun: 64) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) (rerun: 64) close_range$auto(r0, r1, 0x1) (async) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) io_uring_setup$auto(0x6, 0x0) (rerun: 32) socket$nl_generic(0x10, 0x3, 0x10) (async) socket(0xa, 0x801, 0x84) mmap$auto(0x1, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) (async, rerun: 32) clone$auto(0x10051c, 0x6, 0x0, 0xffffffffffffffff, 0x80000001) (async, rerun: 32) setsockopt$auto(0x3, 0x10000000084, 0x7b, 0x0, 0x8) (async, rerun: 32) socket(0xa, 0x800, 0x84) (async, rerun: 32) close_range$auto(0x0, 0xfffffffffffff000, 0x2) r2 = socket$nl_generic(0x10, 0x3, 0x10) pidfd_open$auto(0x1, 0x0) (async, rerun: 64) pidfd_send_signal$auto(0x1, 0xfffff495, &(0x7f0000000140)={@siginfo_0_0={0xfffff495, 0x4, 0xfffffffa, @_sigsys={0x0, 0xffffffff}}}, 0x4) (async, rerun: 64) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000c80), r3) sendmsg$auto_L2TP_CMD_TUNNEL_GET(r3, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000dc0)={&(0x7f0000000cc0)={0x14, r4, 0x121, 0x70bd2c, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x81}, 0x0) (async) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) (async, rerun: 32) mmap$auto(0x0, 0xa, 0xdb, 0x9b72, 0x5, 0x8000) (rerun: 32) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mmap$auto(0x0, 0x800400008, 0xdf, 0x9b72, 0x8001, 0x8000) (async, rerun: 64) getsockopt$auto(r2, 0xf6, 0xcc80, &(0x7f0000000000)='%$\x00', &(0x7f0000000040)=0x10) (rerun: 64) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) (async) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) get_mempolicy$auto(0x0, 0x0, 0x7f, 0x8, 0x3) 2m44.432981694s ago: executing program 1 (id=1055): statmount$auto(0x0, &(0x7f0000000040)={0x1, 0xfffffffe, 0x36, 0x828, 0x9, 0x8000000000000000, 0x8, 0x7, 0x9, 0x5, 0x2, 0x9, 0x5, 0x8, 0x5, 0xf, 0x100, 0x80000000, 0x10001, 0x9, [0x9, 0x7f, 0x77, 0x4, 0x7fffffffffffffff, 0xe06, 0x400, 0x3, 0x80000000, 0x8, 0x4, 0x7ffffffffffffff9, 0x10, 0x3, 0x35c4, 0x1, 0x5, 0x8, 0xea8, 0xb2fa, 0xd9, 0x8, 0x5, 0xffffffffffffffff, 0x202, 0x7fffffffffffffff, 0x8000000000000004, 0x5a2c, 0x3, 0x8000000000000000, 0x2aa, 0x8, 0x7ff, 0x1, 0x5, 0x2, 0xffffffffffff0000, 0x6b, 0xf, 0x4, 0x2b7, 0x4, 0xf, 0xffffffffffffff26, 0x8, 0x4, 0x6, 0x7a, 0x20000000000000dc]}, 0xe3c, 0x0) r0 = socket(0x10, 0x2, 0x4) sendmsg$auto_NFSD_CMD_THREADS_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="2c0000001400"], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x400c000) (async) sendmsg$auto_NFSD_CMD_THREADS_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="2c0000001400"], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x400c000) set_mempolicy$auto(0x4006, &(0x7f0000000000)=0xc, 0x7) (async) set_mempolicy$auto(0x4006, &(0x7f0000000000)=0xc, 0x7) bpf$auto(0xf, &(0x7f0000000100)=@batch={0x30, 0x0, 0x1, 0x400, 0x537, 0x9b9, 0x8, 0x3}, 0x200) syz_genetlink_get_family_id$auto_IPVS(&(0x7f0000000080), 0xffffffffffffffff) 2m43.795824163s ago: executing program 1 (id=1057): mmap$auto(0x3, 0x0, 0x7, 0xeb1, 0xfffffffffffffffa, 0x7fff) r0 = open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) fcntl$auto(0x3, 0x400, 0x1) open(&(0x7f0000000000)='./file0\x00', 0x24083, 0x20) dup2$auto(0x0, 0x3) inotify_init1$auto(0x0) mmap$auto(0x3, 0x20000000000c, 0x4100000000df, 0x40eb2, 0x482, 0x300000000000) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x2b, 0x5, 0x84) sendmsg$auto_MAC802154_HWSIM_CMD_GET_RADIO(0xffffffffffffffff, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="010029bd7000ffdbdf3501000000050023005c000000"], 0x1c}, 0x1, 0x0, 0x0, 0x80c4}, 0x20000080) socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYRES16=r1, @ANYBLOB="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"], 0x1ac}}, 0x40000) socket$nl_generic(0x10, 0x3, 0x10) clock_getres$auto(0xfffffffffffffffb, 0x0) socket(0x23, 0x5, 0x8000000) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x2, 0x3a) socket(0xa, 0x2, 0x0) socket(0xa, 0x2, 0x88) socket(0xa, 0x2, 0x0) connect$auto(0x3, 0x0, 0x55) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid\x00') clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x89fc, &(0x7f0000000040)={'bridge0\x00'}) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mmap$auto(0x0, 0x6, 0x5, 0xeb1, 0xfffffffffffffffa, 0x800) 2m41.933739551s ago: executing program 8 (id=1062): futex$auto(0xffffffffffffffff, 0xffffffffffff117f, 0x8, 0xffffffffffffffff, 0xfffffffffffffffe, 0x3) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_tcp_metrics(&(0x7f0000000ac0), 0xffffffffffffffff) (async) r1 = syz_genetlink_get_family_id$auto_tcp_metrics(&(0x7f0000000ac0), 0xffffffffffffffff) sendmsg$auto_TCP_METRICS_CMD_GET(r0, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000b00)={0x14, r1, 0x89c1beb01534ff9b, 0x70bd29, 0x25dfdbfb}, 0x14}}, 0x8998) 2m39.891880394s ago: executing program 8 (id=1068): sendmsg$auto_BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000326bd7000fedbdf250200000800130001"], 0x24}, 0x1, 0x0, 0x0, 0x4c894}, 0x4) r0 = getpgrp(0xffffffffffffffff) syz_open_procfs$namespace(r0, &(0x7f0000000000)='ns/pid\x00') r1 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB=' \x00\''], 0x1ac}}, 0x40000) socketpair$auto(0x64f, 0xfffffffc, 0x3, &(0x7f0000000100)=0x9) 2m33.749645534s ago: executing program 8 (id=1083): mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) mprotect$auto(0x1ffff000, 0x8000000000000001, 0x6) (async) r0 = socket(0x2, 0x5, 0x0) (async) connect$auto(0x3, &(0x7f0000000140)={0x2, @sa_data_min="09ff7f0000000100"}, 0x55) setsockopt$auto(r0, 0xfffffffc, 0xda8, &(0x7f0000000000)='\x00', 0x0) sendto$auto(0x3, 0x0, 0x8, 0xe, &(0x7f0000000140)={0x2, @sockaddr_1_1}, 0x1c) 2m28.344618933s ago: executing program 37 (id=1057): mmap$auto(0x3, 0x0, 0x7, 0xeb1, 0xfffffffffffffffa, 0x7fff) r0 = open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) fcntl$auto(0x3, 0x400, 0x1) open(&(0x7f0000000000)='./file0\x00', 0x24083, 0x20) dup2$auto(0x0, 0x3) inotify_init1$auto(0x0) mmap$auto(0x3, 0x20000000000c, 0x4100000000df, 0x40eb2, 0x482, 0x300000000000) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x2b, 0x5, 0x84) sendmsg$auto_MAC802154_HWSIM_CMD_GET_RADIO(0xffffffffffffffff, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="010029bd7000ffdbdf3501000000050023005c000000"], 0x1c}, 0x1, 0x0, 0x0, 0x80c4}, 0x20000080) socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYRES16=r1, @ANYBLOB="1e0081c03c4d63741dd4e2667df3d376950c046dc1fedb344f5a4ca5d7a9fe4ea71a6d1c44807c8dbabc560ba9f5fcccc751e37aca0ec723e56ea194a9372351c85d22cdb8824bf044206c7bdcec40ae420db3e65548bfd3c54f1fe84da5e841e9e803b6214c1c407cd3e9ff1d466bce861b4001272aa6029373f2023a2da2166e63524c6445c6c235b06c1efe6ff15af64bdd9c8dab09840909a10b8dcde2c00fd38428ae1e21cce11f0203a25ab7d21cce3dc7960500c99decc0a1e65753af056954de5c6f7591c53d18c193defc4882ce98dc4734cfe572d707e03ca75e860e6f8a8b909f8cabd4ffbdefb41f2b9f8d50dd178c999f588effe4525392f68db24e4d08a02e3357d34541e0043b7a08bb20e6cc66e4f2892846be9b9198166014264b7609ca5c92910989d9abb816f7cd5ac8b4566c2f37c48704"], 0x1ac}}, 0x40000) socket$nl_generic(0x10, 0x3, 0x10) clock_getres$auto(0xfffffffffffffffb, 0x0) socket(0x23, 0x5, 0x8000000) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x2, 0x3a) socket(0xa, 0x2, 0x0) socket(0xa, 0x2, 0x88) socket(0xa, 0x2, 0x0) connect$auto(0x3, 0x0, 0x55) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid\x00') clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x89fc, &(0x7f0000000040)={'bridge0\x00'}) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mmap$auto(0x0, 0x6, 0x5, 0xeb1, 0xfffffffffffffffa, 0x800) 2m17.63225104s ago: executing program 38 (id=1083): mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) mprotect$auto(0x1ffff000, 0x8000000000000001, 0x6) (async) r0 = socket(0x2, 0x5, 0x0) (async) connect$auto(0x3, &(0x7f0000000140)={0x2, @sa_data_min="09ff7f0000000100"}, 0x55) setsockopt$auto(r0, 0xfffffffc, 0xda8, &(0x7f0000000000)='\x00', 0x0) sendto$auto(0x3, 0x0, 0x8, 0xe, &(0x7f0000000140)={0x2, @sockaddr_1_1}, 0x1c) 10.129361189s ago: executing program 0 (id=1376): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x400000000000, 0x20009, 0x7, 0xeb1, 0x401, 0x8000) mmap$auto(0x400000000000, 0x1000, 0x4000000000e1, 0x44eb2, 0x10006, 0x300000000000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x4008810}, 0x20008000) socket(0x2, 0x2, 0x88) bind$auto(0x3, &(0x7f0000000080)={0x2, @sockaddr_1_1}, 0x68) connect$auto(0x3, &(0x7f00000000c0)={0x2, @sockaddr_1_1}, 0x55) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0) recvmmsg$auto(r0, 0x0, 0x7, 0x7, 0x0) r1 = socket(0x10, 0x2, 0x0) r2 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000001780), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_PSE_GET(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r2, 0x701, 0x70bd25, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x40880}, 0x10040000) write$auto(r1, &(0x7f0000000040)='\'\x00', 0x90c) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0x21, 0x2, 0xa) socket$nl_generic(0x10, 0x3, 0x10) sendmmsg$auto(0x6, &(0x7f0000000140)={{0x0, 0x3, &(0x7f00000002c0)={0x0, 0xb}, 0x1, &(0x7f0000000180)=[0x340], 0x20, 0x8000000}, 0xc}, 0x6, 0x0) 9.711928547s ago: executing program 6 (id=1377): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000900), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$auto_BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x1c, r1, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004801}, 0x4000800) 9.146441659s ago: executing program 6 (id=1378): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x19) socket(0xa, 0x2, 0x88) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) connect$auto(0x3, &(0x7f0000000140)={0xa, @sa_data_min="c4aeed448dc7fe8000"}, 0x55) connect$auto(0x3, &(0x7f00000000c0)={0x2, @sockaddr_1_1}, 0x55) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) exit$auto(0x4) rseq$auto(&(0x7f0000000300)={0xd, 0x401, 0x0, 0x6, 0xffffffff, 0x2}, 0x8000, 0x0, 0x6) madvise$auto(0x0, 0xffffffffffff0001, 0x15) madvise$auto(0x0, 0xffffffffffff0005, 0x19) request_key$auto(0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) rseq$auto(0x0, 0x7f, 0x741, 0x7ff) madvise$auto(0x0, 0x200007, 0x8) 7.134297899s ago: executing program 9 (id=1381): unshare$auto(0x40000080) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) clone$auto(0x400000000d0, 0x7, 0xffffffffffffffff, 0xfffffffffffffffc, 0x9) bpf$auto(0x0, &(0x7f0000000100)=@task_fd_query={0x6, 0x4, 0x7fb, 0x3, 0x401, 0x8, 0x2e, 0x2, 0x3}, 0x6f0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_MAC80211_HWSIM(&(0x7f0000000280), r0) sendmsg$auto_HWSIM_CMD_GET_RADIO(r0, &(0x7f0000000340)={0x0, 0x59, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, r1, 0xb01, 0x70bd29, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x8044}, 0x10000) 7.006492134s ago: executing program 0 (id=1382): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000bc0), 0xffffffffffffffff) sendmsg$auto_BATADV_CMD_GET_TRANSTABLE_LOCAL(r0, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="050323bd7000fbdbdf25060000000800030081"], 0x1c}, 0x1, 0x0, 0x0, 0x40040}, 0x4000040) setuid$auto(0xe) msgctl$auto(0x0, 0x0, 0x0) tkill$auto(0x80000000000001, 0x7) keyctl$auto(0x2000000000000012, 0x7fff, 0x5069, 0x1, 0x65c) 6.641321045s ago: executing program 0 (id=1383): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) unshare$auto(0x40000080) ioperm$auto(0x2, 0x3, 0x1) prctl$auto(0x10000000020, 0xffff, 0xc, 0x5, 0x3) clone$auto(0x1ff, 0x3, 0x0, 0xfffffffffffffffd, 0xffffffff00000000) ioperm$auto(0x2, 0x8000, 0x2b325536) writev$auto(0x1, &(0x7f0000000100)={0x0, 0x400000000000fdef}, 0x1) madvise$auto(0x0, 0x20200, 0x15) 6.226112504s ago: executing program 9 (id=1384): r0 = socket(0xa, 0x3, 0x73) mmap$auto(0x1, 0x8, 0xdf, 0xfff, 0x6, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x6, 0x0) socket(0xa, 0x801, 0x84) mmap$auto(0x0, 0x8, 0xdf, 0x9b7f, 0x2, 0x8000) r1 = gettid() capget$auto(&(0x7f0000000000)={0x0, r1}, &(0x7f0000000040)={0x8, 0xe3, 0x8}) connect$auto(r0, &(0x7f0000000080)={0x4, @sockaddr_1_1={"ba32293d30096b521fed173bbd67699764da1249b6fe370f80de2656ac9db35e5cad30ea1075a4144f19cc09d7b203314e819efc67392b163f01513b760aeb3819e5918880d24ded5383be885fbb00ba84eb326f6e3e853fd670d5a19eb6715c02f9ea0e0ae62f470ae82386fec612596fd67738f6f098159e465804ff69f93802b9323b02e184ad6f539e3929ca89f8920119ff29cada896fb173658d6ce7fe80516db90c008892609d1dd1930a3d6f9978ef6aebd7f106"}}, 0x6) mmap$auto(0x2, 0x4, 0xadd, 0xd0db, 0x5, 0x7fffffffffffffff) getsockopt$auto(0x6, 0x40000000084, 0x1d, 0xfffffffffffffffe, 0x0) mmap$auto(0x0, 0xa, 0xdb, 0x9b72, 0x5, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) ioperm$auto(0x3, 0x6, 0xabdb) msgrcv$auto(0x0, 0xffffffffffffffff, 0x10001, 0x8, 0x2) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000001b40), r2) r4 = syz_open_procfs$namespace(0xffffffffffffffff, 0x0) bpf$auto(0x0, &(0x7f0000000100)=@task_fd_query={0x9, 0x21e9, 0x7ff, 0x3, 0x100000000, 0x1, 0x2e, 0x0, 0x3}, 0x6f4) writev$auto(0x2, 0x0, 0x3ff) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_SMC_PNETID(&(0x7f0000000180), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_MAC80211_HWSIM(&(0x7f0000000640), r5) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000240)=ANY=[@ANYBLOB="18000000", @ANYRESOCT=r3, @ANYBLOB="010025bd7000fcdbdf5d0e6ad69c0000000000000000", @ANYRESDEC=r4], 0x18}, 0x1, 0x0, 0x0, 0x20000d04}, 0x48000) getgid() close_range$auto(0x2, 0x8, 0x0) madvise$auto(0x0, 0xffffffffffff0008, 0x19) madvise$auto(0x0, 0xffffffffffff0001, 0x15) 5.5943742s ago: executing program 6 (id=1386): socket(0xa, 0x2, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) connect$auto(0x3, &(0x7f0000000140)={0xa}, 0x55) connect$auto(0x3, &(0x7f0000000140)={0xa, @sa_data_min="c4aeed448dc7fe8000"}, 0x55) mprotect$auto(0x1ffff000, 0x8000000000000001, 0x4) sendto$auto(0x3, 0x0, 0xf, 0x101, &(0x7f0000000140)={0x2, @sockaddr_1_1}, 0x18) r0 = open(&(0x7f0000000000)='./file1\x00', 0x82000, 0x0) io_uring_setup$auto(0xfff, &(0x7f0000000080)={0x1, 0xffff, 0x7, 0x0, 0x1, 0x8, r0, [0xf, 0x2, 0x3], {0xf, 0x5, 0x200000, 0x6, 0x5, 0x3, 0x1, 0x8, 0x37c90a26}, {0x9, 0x80000000, 0x82, 0x5, 0x61e9, 0x40001, 0x64, 0x8000, 0x6}}) fallocate$auto(0x3, 0x1, 0x8b, 0x8) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/net\x00') ioctl$NS_GET_PARENT(r1, 0x8004b708, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x694482, 0x4b) 5.35525741s ago: executing program 9 (id=1387): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) rseq$auto(&(0x7f0000000300)={0xe, 0x401, 0x0, 0x6, 0xffffffff, 0x2}, 0x8000, 0x0, 0x6) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) (async) mmap$auto(0x0, 0x2020009, 0x7fffffff, 0xeb1, 0x81, 0x8000) (async) madvise$auto(0x0, 0xffffffffffff0005, 0x19) (async) madvise$auto(0x0, 0xffffffffffff0001, 0x15) fchownat$auto(0xffffffffffffffff, &(0x7f0000000040)='}\x00', 0x8000, 0xfbf, 0x5) (async) r1 = syz_genetlink_get_family_id$auto_ovs_ct_limit(&(0x7f0000000040), r0) sendmsg$auto_OVS_CT_LIMIT_CMD_SET(r0, &(0x7f0000002e40)={0x0, 0x0, &(0x7f0000002e00)={&(0x7f00000000c0)={0x98, r1, 0x1, 0x70bd2e, 0x25dfdbfb, {}, [@OVS_CT_LIMIT_ATTR_ZONE_LIMIT={0x4}, @OVS_CT_LIMIT_ATTR_ZONE_LIMIT={0x7d, 0x1, "fc46576fbb73d009051b4abc8a71602f7a70b54ab3230f14c03d1c32a97daaaa7baa9828a90b27bfb3f1029b8892c60c6fe6f4b23e0df9b6ad8e2b53f97f1ed45921ae3ac31443e6660171e842749158fa4bd10e1486888248bd74688cc6a8e775b1e40269330fbf3d574a19829c00"/121}]}, 0x98}, 0x1, 0x0, 0x0, 0x42}, 0x4004094) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$auto_ovs_meter(&(0x7f0000003040), 0xffffffffffffffff) sendmsg$auto_OVS_METER_CMD_SET(r2, &(0x7f0000003240)={0x0, 0x0, &(0x7f0000003200)={&(0x7f0000000040)={0x38, r3, 0x159198c6007aa95d, 0x70bd29, 0x25dfdbfc, {}, [@OVS_METER_ATTR_KBPS={0x4}, @OVS_METER_ATTR_BANDS={0x4}, @OVS_METER_ATTR_ID={0x8, 0x1, 0x5}, @OVS_METER_ATTR_STATS={0x14, 0x3, {0x2579, 0xc}}]}, 0x38}, 0x1, 0x0, 0x0, 0xc0}, 0x40) 4.348933224s ago: executing program 7 (id=1390): mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x5, 0x8000) sendmsg$auto_WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x4008810}, 0x20008000) close_range$auto(0x2, 0x8, 0x0) socket(0x15, 0x5, 0x0) socket(0x2, 0x1, 0x106) bind$auto(0x3, &(0x7f0000000080)={0x2, @sockaddr_1_1}, 0x6b) setsockopt$auto(0x3, 0x1, 0x21, 0x0, 0x9) connect$auto(0x3, &(0x7f00000000c0)={0x2, @sockaddr_1_1}, 0x55) 4.240058625s ago: executing program 9 (id=1391): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000001e80), r0) sendmsg$auto_ETHTOOL_MSG_MODULE_EEPROM_GET(r0, &(0x7f0000001f80)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000001ec0)={0x1c, r1, 0x309, 0x70bd26, 0x25dfdbfd, {}, [@ETHTOOL_A_MODULE_EEPROM_OFFSET={0x8, 0x2, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x4000804) mmap$auto(0x0, 0x9, 0x3ff57696, 0x9b72, 0x2, 0x8000000000008000) io_uring_setup$auto(0x6, 0x0) socket(0xa, 0x801, 0x106) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/time_for_children\x00') ioctl$NS_GET_PARENT(r3, 0xc0189436, 0x20000000) r4 = syz_genetlink_get_family_id$auto_netdev(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$auto_NETDEV_CMD_PAGE_POOL_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x14, r4, 0x301, 0x70bd26, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x8810}, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mmap$auto(0x6, 0x6, 0x2, 0x17, 0x5e62, 0xd71) mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) futex_waitv$auto(&(0x7f0000000000)={0xf, 0x5d94, 0x4, 0x4}, 0x77, 0x0, 0x0, 0x62bd) mprotect$auto(0x1ffff000, 0x8000000000000001, 0x4) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x402, 0x300000000000) pipe$auto(&(0x7f0000000080)=0x8) io_uring_setup$auto(0x40005, &(0x7f0000000000)={0x6, 0x1, 0x400, 0x7, 0x1005, 0x6, 0x7, [0x4, 0x2e9, 0x8], {0x0, 0x1, 0x8, 0x7, 0x5, 0x5, 0x1, 0xfffffffc, 0x7}, {0x4, 0x1000fff, 0xffff7fff, 0x2, 0x8, 0x200, 0x3, 0x0, 0x3}}) sysfs$auto(0x2, 0x23, 0x0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) sysfs$auto(0x2, 0x49, 0x0) fsopen$auto(0x0, 0x1) close_range$auto(0x2, 0x8000, 0x0) 3.839503419s ago: executing program 7 (id=1392): bpf$auto(0x1, &(0x7f00000001c0)=@task_fd_query={0x9, 0x21eb, 0x400007ff, 0x6, 0xa, 0x1000, 0x5f, 0x2000, 0x6}, 0x6f2) socket(0x10, 0x2, 0x0) memfd_create$auto(&(0x7f0000000000)='\xc4--:\xdd:,./-${\x00', 0x4) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) inotify_init1$auto(0x3000000000000) prctl$auto(0x1000000003b, 0x1, 0x9, 0x5, 0x3) ioctl$auto(0x3, 0x80000541b, 0x38) socket(0xa, 0x3, 0x100) socket(0x2a, 0x2, 0x6) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_802_15_4_MAC(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x3, 0x6) socket$nl_generic(0x10, 0x3, 0x10) socket(0x23, 0x80805, 0x0) bind$auto(0x7, &(0x7f0000000040)={0x23, @sa_data_min="c163e830f54ecb29d5c93c7f8d62"}, 0x3e) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) sendmmsg$auto(0x3, &(0x7f0000000000)={{0x0, 0x2, 0x0, 0x106, 0x0, 0x1, 0x3}, 0xed7138c}, 0x7, 0x0) socket(0xa, 0x3, 0x6) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0xa, 0x2, 0x88) bpf$auto(0x0, &(0x7f0000000000)=@link_update={r1, @new_prog_fd=0x4, 0x4, @old_map_fd=r0}, 0xa3) 3.460910059s ago: executing program 7 (id=1393): socket(0x2, 0x5, 0x0) waitid$auto(0x1, 0x5067, 0xfffffffffffffffd, 0x4, 0x0) connect$auto(0x3, &(0x7f0000000280)={0x2, @sockaddr_1_1={"9f53a1"}}, 0x55) getpeername$auto(0x3, 0x0, 0x0) 3.203660891s ago: executing program 6 (id=1394): socket(0x29, 0x1, 0x2) mmap$auto(0x8, 0x8, 0xfffffffffffffffa, 0x13, 0x3, 0x0) 2.731813965s ago: executing program 6 (id=1395): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_TIPCv2(&(0x7f0000000bc0), 0xffffffffffffffff) sendmsg$auto_TIPC_NL_MON_SET(r0, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x30, r1, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@TIPC_NLA_MON={0x19, 0x9, "7459519d19c7369c4f67af3193256d8be57afdca30"}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000010}, 0x8000) 2.599824626s ago: executing program 0 (id=1396): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) fanotify_init$auto(0x5, 0x2) io_uring_setup$auto(0x6, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x801, 0x84) bpf$auto(0x0, &(0x7f0000000100)=@bpf_attr_11={0x21, 0x7, 0x9, 0x2, 0x301, 0x6b, 0x9ddb, 0xe98e}, 0x6f4) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0xffffffffffffffcd, 0x0, 0x1, 0x0, 0x0, 0x40000021}, 0x8004) connect$auto(0x3, &(0x7f0000000140)={0xa, @sa_data_min="c4aeed448dc7fe8000"}, 0x55) select$auto(0xa, 0x0, &(0x7f0000000100)={[0x20000080000d, 0x203, 0x0, 0xc, 0x5, 0x3, 0x5, 0x2000000000000002, 0x9, 0x8, 0xa05, 0xa, 0x4, 0xaab, 0x5, 0x4006]}, 0x0, 0x0) connect$auto(0x3, &(0x7f0000000140)={0xa, @sa_data_min="c4aeed448dc7fe8000"}, 0x55) shutdown$auto(0x200000003, 0x2) setsockopt$auto(0x3, 0x10000000084, 0x7d, 0x0, 0xc) clone$auto(0xf, 0x5, &(0x7f0000000240)=0x2, &(0x7f0000000280)=0x5, 0x100000000) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) socket(0x2c, 0x3, 0x0) socket(0x2c, 0x3, 0x0) statmount$auto(0x0, &(0x7f0000000040)={0x1, 0xfffffffe, 0x36, 0x828, 0x9, 0x8000000000000000, 0xb, 0x7, 0x9, 0x5, 0x2, 0x9, 0x3, 0x8, 0x5, 0xf, 0xff, 0x80000000, 0x10001, 0x5, [0x9, 0x7f, 0x77, 0x1, 0x7fffffffffffffff, 0xe06, 0x400, 0x3, 0x80000000, 0x8, 0x4, 0x7ffffffffffffff9, 0x10, 0x3, 0x35c4, 0x1, 0x6, 0x8, 0xea8, 0xb2fa, 0x6, 0x8, 0x5, 0x1, 0xff, 0x7fffffffffffffff, 0x8000000000000004, 0x5a2c, 0x9fc, 0x8000000000000000, 0x2aa, 0x8, 0x7ff, 0x1, 0x1, 0x2, 0xffffffffffff0000, 0x6b, 0xf, 0x4, 0x2b7, 0x4, 0xf, 0xffffffffffffff26, 0x8, 0x4, 0x106, 0x7a, 0xdc]}, 0xe3c, 0x0) r0 = socket(0x10, 0x2, 0x4) sendmsg$auto_NFSD_CMD_THREADS_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="2c0000001400"], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x400c000) fanotify_init$auto(0x65, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x3, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) io_uring_setup$auto(0x48, 0x0) r1 = socket(0x18, 0x4, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x40047452, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000e00), 0xffffffffffffffff) 2.579199046s ago: executing program 9 (id=1397): madvise$auto(0x0, 0x7fffffffffffffff, 0xa) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) getrandom$auto(0x0, 0x6000000, 0x3) (async) clone$auto(0x200, 0x8000, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x5) (async) keyctl$auto(0x10, 0x4, 0x5cd, 0x6, 0x1) (async) remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0x3, 0x4) (async) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) memfd_create$auto(&(0x7f0000000000)='\x00', 0xe) (async) mlockall$auto(0x7) (async) open_tree$auto(0x80000000, &(0x7f00000000c0)='/\x00\x80\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x96\x8e\xd3\xb2\x03\xc4\xa6\xd4\xb6Kv0\x12\xc2O\x04\xa9\xc3\xf5\xa7\x87<\x01\xc2\xa8Y\x8c-\xd9\xd9syDZ\\\x91\x94\xd3\x18w<\x15\xdf\xfb\\T\xe9\xbc\xd5\x05\xf1\n\x0f', 0x8001) close_range$auto(0x2, 0x8, 0x0) poll$auto(&(0x7f0000000000)={0xffffffffffffffff, 0x3, 0x5}, 0x57eb, 0x83) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) (async, rerun: 64) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) (async, rerun: 64) close_range$auto(0x2, 0x8, 0x0) (async, rerun: 64) open(0x0, 0x22241, 0x155) (async, rerun: 64) socket(0xa, 0x5, 0x0) setsockopt$auto(0x3, 0x10000000084, 0x19, 0x0, 0x8) (async) mmap$auto(0xffffffff, 0x9, 0x2, 0x13, 0x7, 0x40) (async, rerun: 64) syz_genetlink_get_family_id$auto_TIPCv2(&(0x7f0000000040), 0xffffffffffffffff) (rerun: 64) sendmsg$auto_TIPC_NL_LINK_GET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000", @ANYRES32=r1, @ANYRES8], 0x18}, 0x1, 0x0, 0x0, 0x44001}, 0x20000000) syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000080), r0) 2.17634088s ago: executing program 7 (id=1398): connect$auto(0xffffffffffffffff, &(0x7f0000000000)={0x7ff, @sockaddr_1_1={"194932abb484adf38f5ecc6f394b3ae29be9d7e3464ebee57f535962263bc58968e25128bec4b1932db672fb99d66761725772495c7a0bce0cb9c2044cc31db23e6d00e31057c0c9f29c6ff6ea591a46"}}, 0x7f) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x6400, 0x42) move_mount$auto(0xffffffffffffff9c, &(0x7f0000000080)='\x00', r0, &(0x7f0000000100)='/\x00', 0x4) setsockopt$auto(r0, 0xfffffffc, 0x80000000, &(0x7f0000000140)='\x00', 0x9) r1 = open$dir(&(0x7f0000000180)='./file0\x00', 0x40041, 0x1dc) dup3$auto(r0, r1, 0xc) readlinkat$auto(r1, &(0x7f00000001c0)='\x00', &(0x7f0000000200)='/\x00', 0x40) process_madvise$auto(r1, &(0x7f0000000280)={&(0x7f0000000240)=[0x1, 0x5, 0x3, 0x5, 0x8, 0x7f, 0x8], 0x1}, 0x1000, 0x8000, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) fanotify_init$auto(0x8, 0x8) io_uring_setup$auto(0x0, &(0x7f00000002c0)={0x4, 0xd0a, 0x8, 0x8, 0xffffffff, 0x8000, r2, [0x401, 0xc4d, 0x4], {0xed8f, 0xffff0001, 0x1000, 0x8, 0x1, 0x7, 0x1, 0x4, 0x200}, {0x6, 0xc9, 0x2, 0xfffffffe, 0x8000, 0x33b8, 0x0, 0x9, 0x8}}) madvise$auto(0xf55, 0x7fffffffffffffff, 0xb) r4 = syz_genetlink_get_family_id$auto_IPVS(&(0x7f0000000380), r3) sendmsg$auto_IPVS_CMD_DEL_DAEMON(r3, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x1c, r4, 0x100, 0x70bd25, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2400c011}, 0x8000) connect$auto(r3, &(0x7f0000000480)={0x2, @sa_data_min="b49890c9a98cf293c234c2946b48"}, 0x5) socket(0x29, 0x0, 0xff) pselect6$auto(0x3ff, &(0x7f00000004c0)={[0x4, 0xffffffff, 0x800, 0x4, 0x100000001, 0xfffffffffffffffd, 0xfffffffffffffffe, 0x5, 0x9, 0x2, 0x8, 0x3ff, 0x5, 0x19a3, 0x0, 0x5]}, &(0x7f0000000540)={[0x6, 0x7fcf, 0x7f, 0x9, 0xc, 0x0, 0x3, 0x4, 0xeba1, 0x2, 0x8f48, 0x5, 0x9, 0x9, 0x882f]}, &(0x7f00000005c0)={[0x3, 0x5, 0x8, 0x8a, 0x7, 0x2, 0x3, 0x6, 0x200, 0x5, 0x7, 0x7, 0x1, 0x0, 0x6, 0x8000]}, &(0x7f0000000640)={0x2, 0x1}, &(0x7f0000000680)=[0x8, 0x3]) r5 = open(&(0x7f00000006c0)='./file1\x00', 0x8917be6c829a6507, 0xa8) io_uring_setup$auto(0x5, &(0x7f0000000700)={0x9, 0xffffffff, 0x7, 0x80000001, 0xfffffffc, 0x1, r2, [0x1, 0x6, 0x9], {0x0, 0x8, 0x3, 0x6, 0x3, 0x2e, 0x7f, 0x10000, 0x9}, {0x401, 0x81, 0x4, 0x5, 0x5, 0x2a, 0x0, 0x6367, 0x16}}) connect$auto(r6, &(0x7f0000000780)={0x1, @sockaddr_1_1={"cfa4cffda9e71e3c89ce6ec5e553dffa7471cfc2c3f2bfedc9aea5d0b338e26efde269eb7d5bb52f667f6f4a74ecd0e484b11c4fb89f7db7265f8c1adfd519e1c1dfe20086942d45eba7894d1182d59159fa1f26"}}, 0x4) mq_unlink$auto(&(0x7f0000000800)='\x00') r7 = open(&(0x7f0000000840)='./file0\x00', 0x0, 0x16) accept$auto(r7, &(0x7f0000000880)={0x0, @sa_data_min="48026fc3fac0b64a7a17293166a8"}, &(0x7f00000008c0)=0x7fff) close_range$auto(r3, r0, 0xfffffffd) socket$nl_generic(0x10, 0x3, 0x10) dup3$auto(r5, 0xffffffffffffffff, 0xeeab) connect$auto(r3, &(0x7f0000000900)={0x0, @sockaddr_1_1={"1599df0882309aadec67bbdfa4b2dcce1bc54bd62fc257686b65c888b42f19d21297dc7123d066e636b2f34f8b32c54f450da4b47df7d9b06d2a0252"}}, 0x7) r8 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000980), r2) sendmsg$auto_NL80211_CMD_MODIFY_LINK_STA(r3, &(0x7f0000000e40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000e00)={&(0x7f00000009c0)={0x424, r8, 0x400, 0x70bd29, 0x25dfdbfc, {}, [@NL80211_ATTR_PROBE_RESP={0x3b6, 0x91, "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"}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_MESH_CONFIG={0x4}, @NL80211_ATTR_FILS_ERP_RRK={0x2f, 0xfc, "1596c2443c40c610aa59de497b9ddbb44527f80550176ac534cafed50f3572758274209f744f704ca77257"}, @NL80211_ATTR_WDEV={0xc, 0x99, 0xfffffffffffffff9}, @NL80211_ATTR_COOKIE={0xc}, @NL80211_ATTR_USE_RRM={0x4}]}, 0x424}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000001) sendmsg$auto_ETHTOOL_MSG_PLCA_SET_CFG(r3, &(0x7f0000000f80)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000f40)={&(0x7f0000000f00)={0x34, 0x0, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@ETHTOOL_A_PLCA_BURST_CNT={0x8, 0x8, 0x10001}, @ETHTOOL_A_PLCA_BURST_TMR={0x8, 0x9, 0x1}, @ETHTOOL_A_PLCA_BURST_CNT={0x8, 0x8, 0x8}, @ETHTOOL_A_PLCA_NODE_ID={0x8, 0x6, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x80) 1.83936027s ago: executing program 7 (id=1399): mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket(0x9, 0x1, 0x0) socket(0x1e, 0x1, 0x0) io_uring_setup$auto(0x78e6, 0x0) mmap$auto(0x0, 0x9, 0xffb, 0x8000000008011, 0x3, 0x8000) madvise$auto(0x0, 0xc, 0x15) 1.73884789s ago: executing program 0 (id=1400): socket$nl_generic(0x10, 0x3, 0x10) open(&(0x7f0000000080)='./cgroup\x00', 0x40001, 0x6) r0 = socket(0x10, 0x2, 0xc) (async) r1 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$auto_CTRL_CMD_GETPOLICY(r0, &(0x7f00000002c0)={0x0, 0xf5, &(0x7f0000000180)={&(0x7f0000000240)={0x14, r1, 0x1f5, 0x70bd28, 0x25dfdbfb, {0xa, 0x0, 0xa00}}, 0xfdef}, 0x1, 0x0, 0x0, 0x20000000}, 0x2000000) syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000040), r0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000140)='ns/ipc\x00') r2 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000001080), 0xffffffffffffffff) sendmsg$auto_L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="15000000", @ANYRES16=r2, @ANYBLOB="89f527bd7000fcdbdf2504000000"], 0x14}, 0x1, 0x0, 0x0, 0x41}, 0x4048000) (async, rerun: 32) readv$auto(0x4, &(0x7f0000000100)={0x0, 0x1000}, 0x8) (rerun: 32) 1.515303397s ago: executing program 6 (id=1401): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioperm$auto(0xde, 0x9, 0x100402) fremovexattr$auto(0x2, 0x0) socket(0x15, 0x5, 0x0) socket(0xa, 0x5, 0x0) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x40008000) io_uring_setup$auto(0x6, 0x0) fanotify_init$auto(0x65, 0x2) write$auto(0x6, 0x0, 0x2) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) prctl$auto(0x1000000003b, 0x1, 0x4, 0x3, 0x7) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) syz_genetlink_get_family_id$auto_handshake(0x0, 0xffffffffffffffff) madvise$auto(0x0, 0xffffffffffff0001, 0x15) sched_getparam$auto(0x0, &(0x7f0000000240)={0x8000}) 1.163365921s ago: executing program 7 (id=1402): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x800000002, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0x8, 0x0) chdir$auto(&(0x7f0000000000)='}[,&*}\x00') rseq$auto(&(0x7f0000000300)={0xe, 0x401, 0x0, 0x6, 0xffffffff, 0x2}, 0x8002, 0x0, 0x6) umount2$auto(&(0x7f0000000080)='.\x00', 0x3) sendto$auto(0x4, 0x0, 0x102, 0xb, 0x0, 0xfffffff0) 891.766587ms ago: executing program 0 (id=1403): sendmsg$auto_WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x4008810}, 0x20008000) socket(0x2, 0x1, 0x0) (async) bind$auto(0x3, &(0x7f0000000080)={0x2, @sockaddr_1_1}, 0x6b) (async) connect$auto(0x3, &(0x7f0000000100)={0x2, @sockaddr_1_1={"75fde05481df03d56bd994e58f13b53a4f2272449add1c324df5dd51fd8a5d589e2d982150ee4ecbe42ffae96f780cb45f9be15fd0d722048eb117273bb45fd330c6f3da7e1f9784ad43fd78673aa260d2c48e64e05dc507e3a8a1298adca58dd94c46e9f70d049b5b252337463e528bdcd624fb6652058027d1553988de8a12585b19938498e29a49dd818f94ea0d67eda23cf7673af0fab8000000"}}, 0x55) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, 0x0, 0x8004) (async) mmap$auto(0x0, 0x4, 0x2e0, 0x40eb1, 0x2, 0x4) (async) clone$auto(0x40083b42, 0x5c84, 0xfffffffffffffffe, 0x0, 0x100000000000f) r0 = socket(0x2, 0x5, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async) setsockopt$auto(r0, 0x10000000084, 0x7, 0x0, 0x4) (async) write$auto(0x3, 0x0, 0xffd8) (async) sendfile$auto(0x1, 0x3, 0x0, 0xc01) pwrite64$auto(0xffffffffffffffff, &(0x7f0000000040)=']\\\x00', 0x4, 0xfffffffffffffff4) 0s ago: executing program 9 (id=1404): socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) getsockopt$auto(0x3, 0x200000000001, 0x11, 0x0, 0x0) bind$auto(0x3, 0x0, 0x6b) recvmmsg$auto(0x3, 0x0, 0x10000, 0x6, 0x0) shutdown$auto(0x200000003, 0x2) unshare$auto(0x40000080) syz_genetlink_get_family_id$auto_IPVS(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) clone$auto(0x6, 0x7fffffffffffffff, &(0x7f0000000000)=0x6, &(0x7f0000000040)=0xff, 0xb) socket$nl_generic(0x10, 0x3, 0x10) clone$auto(0x646a8dac, 0x8, 0x0, 0x0, 0x4) kernel console output (not intermixed with test programs): fs: Directory 'hsr0' with parent 'hsr' already present! [ 104.274990][ T6678] nbd: must specify a device to reconfigure [ 104.283353][ T6519] Cannot create hsr debugfs directory [ 104.336251][ T6678] nbd: must specify a device to reconfigure [ 104.342445][ T6678] nbd: must specify a device to reconfigure [ 104.350307][ T6678] nbd: must specify a device to reconfigure [ 104.422253][ T6678] nbd: must specify a device to reconfigure [ 104.478449][ T6678] nbd: must specify a device to reconfigure [ 104.627402][ T6678] delete_channel: no stack [ 104.670338][ T6678] delete_channel: no stack [ 104.674954][ T6678] delete_channel: no stack [ 104.691675][ T6678] delete_channel: no stack [ 104.706695][ T6678] delete_channel: no stack [ 104.711312][ T6678] delete_channel: no stack [ 104.738048][ T6678] delete_channel: no stack [ 104.742669][ T6678] delete_channel: no stack [ 104.758730][ T6678] delete_channel: no stack [ 104.773062][ T6678] delete_channel: no stack [ 104.799172][ T6678] delete_channel: no stack [ 104.810721][ T6678] delete_channel: no stack [ 104.815460][ T6678] delete_channel: no stack [ 104.843047][ T6678] delete_channel: no stack [ 104.848172][ T6678] delete_channel: no stack [ 104.852753][ T6678] delete_channel: no stack [ 104.863583][ T6678] delete_channel: no stack [ 104.876680][ T6678] delete_channel: no stack [ 104.881758][ T6678] delete_channel: no stack [ 104.891183][ T6678] delete_channel: no stack [ 104.899329][ T6678] delete_channel: no stack [ 104.904571][ T6705] netlink: 8 bytes leftover after parsing attributes in process `syz.3.192'. [ 104.926046][ T6678] delete_channel: no stack [ 104.930775][ T6678] delete_channel: no stack [ 104.935358][ T6678] delete_channel: no stack [ 104.971132][ T6678] delete_channel: no stack [ 104.995656][ T6678] delete_channel: no stack [ 105.011033][ T6678] delete_channel: no stack [ 105.015625][ T6678] delete_channel: no stack [ 105.037374][ T6678] delete_channel: no stack [ 105.041982][ T6678] delete_channel: no stack [ 105.062687][ T6678] delete_channel: no stack [ 105.089787][ T6678] delete_channel: no stack [ 105.094460][ T6678] delete_channel: no stack [ 105.381496][ T6729] raw_sendmsg: syz.1.195 forgot to set AF_INET. Fix it! [ 105.443635][ T5859] Bluetooth: hci0: command tx timeout [ 105.898380][ T6740] sctp: [Deprecated]: syz.1.197 (pid 6740) Use of struct sctp_assoc_value in delayed_ack socket option. [ 105.898380][ T6740] Use struct sctp_sack_info instead [ 106.114107][ T6751] netlink: 342 bytes leftover after parsing attributes in process `syz.3.196'. [ 106.504153][ T6519] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 106.544823][ T6519] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 106.583650][ T6519] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 106.618339][ T6519] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 106.874241][ T6519] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.931554][ T6519] 8021q: adding VLAN 0 to HW filter on device team0 [ 107.022062][ T3562] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.030068][ T3562] bridge0: port 1(bridge_slave_0) entered forwarding state [ 107.067698][ T3562] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.074892][ T3562] bridge0: port 2(bridge_slave_1) entered forwarding state [ 107.207413][ T6519] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 107.555536][ T6519] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 107.592536][ T6519] veth0_vlan: entered promiscuous mode [ 107.662645][ T6519] veth1_vlan: entered promiscuous mode [ 107.729021][ T6519] veth0_macvtap: entered promiscuous mode [ 107.760575][ T6519] veth1_macvtap: entered promiscuous mode [ 107.817987][ T6519] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 107.847041][ T6519] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.883504][ T6519] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 107.935907][ T6519] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.954589][ T6519] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 107.994682][ T6519] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 108.029411][ T6519] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 108.396769][ T6519] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 108.407344][ T6519] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 108.417356][ T6519] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 108.428196][ T6519] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 108.438167][ T6519] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 108.449019][ T6519] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 108.461340][ T6519] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 108.471466][ T6519] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.480268][ T6519] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.489062][ T6519] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.497940][ T6519] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.923931][ T3562] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.952457][ T3562] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.040388][ T519] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.079491][ T519] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.186219][ T6923] nbd: must specify an index to disconnect [ 115.942145][ T6996] netlink: 4 bytes leftover after parsing attributes in process `syz.0.236'. [ 116.052369][ T6988] svc: failed to register nfsdv3 RPC service (errno 111). [ 116.095945][ T6988] svc: failed to register nfsaclv3 RPC service (errno 111). [ 118.764489][ T7043] netlink: 4 bytes leftover after parsing attributes in process `syz.0.250'. [ 119.440167][ T7062] netlink: 4 bytes leftover after parsing attributes in process `syz.3.256'. [ 119.499954][ T7065] netlink: 12 bytes leftover after parsing attributes in process `syz.3.256'. [ 119.942944][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.180174][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.322955][ T7074] netlink: 4 bytes leftover after parsing attributes in process `syz.3.260'. [ 120.477172][ T5858] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 120.504713][ T5858] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 120.514488][ T5858] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 120.522751][ T5858] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 120.532597][ T5858] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 120.541052][ T5858] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 120.771812][ T7087] netlink: 12 bytes leftover after parsing attributes in process `syz.3.263'. [ 120.793656][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.919315][ T7084] netlink: 4 bytes leftover after parsing attributes in process `syz.3.263'. [ 120.948746][ T7084] team0: entered promiscuous mode [ 120.974010][ T7084] team_slave_0: entered promiscuous mode [ 121.006819][ T7084] team_slave_1: entered promiscuous mode [ 121.104992][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.278336][ T7095] Process accounting resumed [ 121.760322][ T7079] chnl_net:caif_netlink_parms(): no params data found [ 121.838032][ T12] bridge_slave_1: left allmulticast mode [ 121.843979][ T12] bridge_slave_1: left promiscuous mode [ 121.885954][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 122.064327][ T12] bridge_slave_0: left allmulticast mode [ 122.084894][ T12] bridge_slave_0: left promiscuous mode [ 122.117210][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 122.627564][ T5859] Bluetooth: hci3: command tx timeout [ 123.703084][ T7140] ptrace attach of "./syz-executor exec"[5845] was attempted by "./syz-executor exec"[7140] [ 124.098897][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 124.156352][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 124.207998][ T12] bond0 (unregistering): Released all slaves [ 124.696032][ T5859] Bluetooth: hci3: command tx timeout [ 124.797305][ T7079] bridge0: port 1(bridge_slave_0) entered blocking state [ 124.804458][ T7079] bridge0: port 1(bridge_slave_0) entered disabled state [ 124.848147][ T7079] bridge_slave_0: entered allmulticast mode [ 124.855242][ T7079] bridge_slave_0: entered promiscuous mode [ 124.948234][ T7079] bridge0: port 2(bridge_slave_1) entered blocking state [ 124.955371][ T7079] bridge0: port 2(bridge_slave_1) entered disabled state [ 125.016345][ T7079] bridge_slave_1: entered allmulticast mode [ 125.050891][ T7079] bridge_slave_1: entered promiscuous mode [ 125.228484][ T7079] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 125.254051][ T7079] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 125.486875][ T7079] team0: Port device team_slave_0 added [ 125.513198][ T7176] netlink: 8 bytes leftover after parsing attributes in process `syz.1.275'. [ 125.677213][ T7079] team0: Port device team_slave_1 added [ 125.725292][ T7079] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 125.755868][ T7079] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 125.821859][ T7079] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 125.868103][ T7079] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 125.875078][ T7079] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 125.935805][ T7079] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 126.014147][ T12] hsr_slave_0: left promiscuous mode [ 126.021560][ T12] hsr_slave_1: left promiscuous mode [ 126.039897][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 126.057278][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 126.076090][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 126.083543][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 126.147489][ T12] veth1_macvtap: left promiscuous mode [ 126.153051][ T12] veth0_macvtap: left promiscuous mode [ 126.192905][ T12] veth1_vlan: left promiscuous mode [ 126.198368][ T12] veth0_vlan: left promiscuous mode [ 126.775994][ T5859] Bluetooth: hci3: command tx timeout [ 126.853960][ T12] team0 (unregistering): Port device team_slave_1 removed [ 126.895590][ T12] team0 (unregistering): Port device team_slave_0 removed [ 127.218687][ T7184] netlink: 4 bytes leftover after parsing attributes in process `syz.1.278'. [ 127.421867][ T7079] hsr_slave_0: entered promiscuous mode [ 127.441274][ T7079] hsr_slave_1: entered promiscuous mode [ 127.889127][ T7079] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 127.921529][ T7079] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 127.962018][ T7079] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 128.025471][ T7079] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 128.196047][ T5858] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 128.204502][ T5858] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 128.213658][ T5858] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 128.227257][ T5858] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 128.235654][ T5858] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 128.243508][ T5858] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 128.362021][ T12] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.565935][ T12] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.738102][ T12] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.856505][ T5858] Bluetooth: hci3: command tx timeout [ 128.888476][ T12] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.024987][ T7079] 8021q: adding VLAN 0 to HW filter on device bond0 [ 129.073588][ T7079] 8021q: adding VLAN 0 to HW filter on device team0 [ 129.122638][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 129.129812][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 129.191667][ T7235] chnl_net:caif_netlink_parms(): no params data found [ 129.225204][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 129.232410][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 129.381260][ T12] bridge_slave_1: left allmulticast mode [ 129.402559][ T12] bridge_slave_1: left promiscuous mode [ 129.430286][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 129.470061][ T12] bridge_slave_0: left allmulticast mode [ 129.476710][ T12] bridge_slave_0: left promiscuous mode [ 129.482548][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 130.102955][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 130.133567][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 130.152586][ T12] bond0 (unregistering): Released all slaves [ 130.300302][ T5858] Bluetooth: hci1: command tx timeout [ 130.363311][ T7235] bridge0: port 1(bridge_slave_0) entered blocking state [ 130.386741][ T7235] bridge0: port 1(bridge_slave_0) entered disabled state [ 130.393932][ T7235] bridge_slave_0: entered allmulticast mode [ 130.432866][ T7235] bridge_slave_0: entered promiscuous mode [ 130.494176][ T7235] bridge0: port 2(bridge_slave_1) entered blocking state [ 130.507746][ T7235] bridge0: port 2(bridge_slave_1) entered disabled state [ 130.525148][ T7235] bridge_slave_1: entered allmulticast mode [ 130.541383][ T7235] bridge_slave_1: entered promiscuous mode [ 130.652538][ T7235] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 130.721463][ T7235] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 130.933871][ T7235] team0: Port device team_slave_0 added [ 131.017416][ T7235] team0: Port device team_slave_1 added [ 131.044282][ T7079] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 131.144633][ T12] hsr_slave_0: left promiscuous mode [ 131.152917][ T12] hsr_slave_1: left promiscuous mode [ 131.164482][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 131.172413][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 131.182329][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 131.191380][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 131.219388][ T12] veth1_macvtap: left promiscuous mode [ 131.225114][ T12] veth0_macvtap: left promiscuous mode [ 131.237121][ T12] veth1_vlan: left promiscuous mode [ 131.242614][ T12] veth0_vlan: left promiscuous mode [ 131.807778][ T12] team_slave_1 (unregistering): left promiscuous mode [ 131.820940][ T12] team0 (unregistering): Port device team_slave_1 removed [ 131.934537][ T12] team_slave_0 (unregistering): left promiscuous mode [ 131.953426][ T12] team0 (unregistering): Port device team_slave_0 removed [ 132.248304][ T7307] netlink: 4 bytes leftover after parsing attributes in process `syz.2.300'. [ 132.381168][ T5858] Bluetooth: hci1: command tx timeout [ 132.732336][ T7310] netlink: 28 bytes leftover after parsing attributes in process `syz.2.301'. [ 132.761597][ T7235] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 132.769096][ T7235] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 132.833451][ T7235] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 132.867154][ T7235] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 132.874143][ T7235] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 132.978044][ T7235] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 133.116335][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.122731][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.369458][ T7235] hsr_slave_0: entered promiscuous mode [ 133.450803][ T7235] hsr_slave_1: entered promiscuous mode [ 133.514751][ T7235] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 133.525840][ T7235] Cannot create hsr debugfs directory [ 133.703441][ T7079] veth0_vlan: entered promiscuous mode [ 133.818876][ T7079] veth1_vlan: entered promiscuous mode [ 133.937766][ T7079] veth0_macvtap: entered promiscuous mode [ 133.973687][ T7079] veth1_macvtap: entered promiscuous mode [ 134.046693][ T7079] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 134.076939][ T7079] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.096256][ T7079] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 134.117120][ T7079] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.147213][ T7079] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 134.315562][ T7079] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 134.335816][ T7079] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.355813][ T7079] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 134.383819][ T7079] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.414532][ T7079] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 134.459552][ T5858] Bluetooth: hci1: command tx timeout [ 134.462314][ T7079] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.505893][ T7079] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.514657][ T7079] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.524440][ T7079] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.802409][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 134.814965][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 134.909388][ T7235] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 134.921323][ T7235] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 134.996344][ T7235] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 135.009031][ T7235] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 135.024292][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 135.034478][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 135.411773][ T7235] 8021q: adding VLAN 0 to HW filter on device bond0 [ 135.480758][ T7235] 8021q: adding VLAN 0 to HW filter on device team0 [ 135.535630][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 135.542828][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 135.619950][ T3562] bridge0: port 2(bridge_slave_1) entered blocking state [ 135.627151][ T3562] bridge0: port 2(bridge_slave_1) entered forwarding state [ 135.733083][ T7235] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 135.766513][ T7235] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 136.239603][ T7235] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 136.389173][ T7235] veth0_vlan: entered promiscuous mode [ 136.423345][ T7235] veth1_vlan: entered promiscuous mode [ 136.484441][ T7235] veth0_macvtap: entered promiscuous mode [ 136.501051][ T7235] veth1_macvtap: entered promiscuous mode [ 136.536192][ T5858] Bluetooth: hci1: command tx timeout [ 136.575715][ T7235] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 136.616200][ T7235] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 136.660854][ T7235] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 136.709812][ T7235] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 136.733065][ T7235] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 136.757162][ T7235] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 136.787303][ T7235] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 136.802029][ T7235] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 136.813227][ T7235] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 136.840886][ T7235] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 136.851662][ T7235] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 136.862557][ T7235] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 136.876337][ T7235] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 136.888861][ T7235] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 136.981401][ T7235] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.990518][ T7235] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.000001][ T7235] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.009043][ T7235] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.260091][ T69] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 137.303620][ T69] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 137.460909][ T3562] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 137.494499][ T3562] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 143.233222][ T7580] netlink: 4 bytes leftover after parsing attributes in process `syz.3.350'. [ 144.530727][ T7623] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 146.345428][ T7681] nbd: must specify a size in bytes for the device [ 149.195514][ T7770] netlink: 121 bytes leftover after parsing attributes in process `syz.3.392'. [ 152.434950][ T7898] netlink: 'syz.1.410': attribute type 11 has an invalid length. [ 152.452160][ T7898] netlink: 'syz.1.410': attribute type 11 has an invalid length. [ 153.536154][ T7916] svc: failed to register nfsdv3 RPC service (errno 111). [ 153.552920][ T7916] svc: failed to register nfsaclv3 RPC service (errno 111). [ 154.456645][ T7970] can: request_module (can-proto-4) failed. [ 157.884397][ T8045] netlink: 5 bytes leftover after parsing attributes in process `syz.3.438'. [ 157.915069][ T8043] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 161.301003][ T8137] netlink: 40 bytes leftover after parsing attributes in process `syz.1.457'. [ 161.333317][ T8137] HSR: entered promiscuous mode [ 164.389151][ T8216] netlink: 4 bytes leftover after parsing attributes in process `syz.3.476'. [ 168.185832][ T7942] syz.4.416 (7942) used greatest stack depth: 19808 bytes left [ 173.757828][ T8331] svc: failed to register nfsdv3 RPC service (errno 111). [ 173.965950][ T8331] svc: failed to register nfsaclv3 RPC service (errno 111). [ 179.434980][ T5859] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 179.455039][ T5859] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 179.479886][ T5859] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 179.528932][ T5859] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 179.543843][ T5859] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 179.552469][ T5859] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 180.171532][ T8398] chnl_net:caif_netlink_parms(): no params data found [ 180.699770][ T8398] bridge0: port 1(bridge_slave_0) entered blocking state [ 180.732511][ T8398] bridge0: port 1(bridge_slave_0) entered disabled state [ 180.741835][ T8398] bridge_slave_0: entered allmulticast mode [ 180.765319][ T8422] syz.2.523 (8422): attempted to duplicate a private mapping with mremap. This is not supported. [ 180.773146][ T8398] bridge_slave_0: entered promiscuous mode [ 180.785482][ T8398] bridge0: port 2(bridge_slave_1) entered blocking state [ 180.806032][ T8398] bridge0: port 2(bridge_slave_1) entered disabled state [ 180.831435][ T8398] bridge_slave_1: entered allmulticast mode [ 180.858485][ T8398] bridge_slave_1: entered promiscuous mode [ 180.995707][ T7979] syz.4.416 (7979) used greatest stack depth: 18928 bytes left [ 181.300488][ T8398] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 181.448655][ T8398] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 181.666302][ T5859] Bluetooth: hci4: command tx timeout [ 181.882008][ T8453] netlink: 173 bytes leftover after parsing attributes in process `syz.3.533'. [ 182.079905][ T8398] team0: Port device team_slave_0 added [ 182.119887][ T8398] team0: Port device team_slave_1 added [ 183.076116][ T8466] netlink: 28 bytes leftover after parsing attributes in process `syz.3.536'. [ 183.176534][ T8466] delete_channel: no stack [ 183.328255][ T8398] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 183.335420][ T8398] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 183.425820][ T8398] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 183.475962][ T8398] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 183.482951][ T8398] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 183.576314][ T8398] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 183.742028][ T5859] Bluetooth: hci4: command tx timeout [ 183.906962][ T3562] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.269553][ T5858] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 184.279146][ T5858] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 184.288018][ T5858] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 184.300194][ T5858] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 184.308291][ T5858] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 184.315690][ T5858] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 184.460314][ T3562] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.585988][ T8073] syz.4.434 (8073) used greatest stack depth: 18480 bytes left [ 184.615121][ T8398] hsr_slave_0: entered promiscuous mode [ 184.718324][ T8398] hsr_slave_1: entered promiscuous mode [ 184.755521][ T8398] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 184.770317][ T8398] Cannot create hsr debugfs directory [ 184.963479][ T3562] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.191198][ T3562] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.816351][ T5858] Bluetooth: hci4: command tx timeout [ 185.838091][ T3562] bridge_slave_1: left allmulticast mode [ 185.845864][ T3562] bridge_slave_1: left promiscuous mode [ 185.852762][ T3562] bridge0: port 2(bridge_slave_1) entered disabled state [ 186.019049][ T3562] bridge_slave_0: left allmulticast mode [ 186.024750][ T3562] bridge_slave_0: left promiscuous mode [ 186.046111][ T3562] bridge0: port 1(bridge_slave_0) entered disabled state [ 186.380478][ T5858] Bluetooth: hci0: command tx timeout [ 186.386580][ T5858] Bluetooth: hci2: command 0x0406 tx timeout [ 187.535385][ T3562] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 187.576199][ T3562] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 187.639212][ T3562] bond0 (unregistering): Released all slaves [ 187.661850][ T8398] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 187.753767][ T8398] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 187.786900][ T8398] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 187.812605][ T8474] chnl_net:caif_netlink_parms(): no params data found [ 187.905882][ T55] Bluetooth: hci4: command tx timeout [ 187.939376][ T8398] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 188.259739][ T8474] bridge0: port 1(bridge_slave_0) entered blocking state [ 188.288899][ T8474] bridge0: port 1(bridge_slave_0) entered disabled state [ 188.309375][ T8474] bridge_slave_0: entered allmulticast mode [ 188.329413][ T8474] bridge_slave_0: entered promiscuous mode [ 188.340704][ T8474] bridge0: port 2(bridge_slave_1) entered blocking state [ 188.355908][ T8474] bridge0: port 2(bridge_slave_1) entered disabled state [ 188.363245][ T8474] bridge_slave_1: entered allmulticast mode [ 188.374363][ T8474] bridge_slave_1: entered promiscuous mode [ 188.462934][ T3562] hsr_slave_0: left promiscuous mode [ 188.472141][ T55] Bluetooth: hci0: command tx timeout [ 188.484107][ T3562] hsr_slave_1: left promiscuous mode [ 188.491568][ T3562] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 188.500285][ T3562] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 188.522701][ T3562] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 188.536730][ T3562] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 188.586710][ T3562] veth1_macvtap: left promiscuous mode [ 188.592282][ T3562] veth0_macvtap: left promiscuous mode [ 188.605889][ T3562] veth1_vlan: left promiscuous mode [ 188.611328][ T3562] veth0_vlan: left promiscuous mode [ 189.206847][ T3562] team0 (unregistering): Port device team_slave_1 removed [ 189.249983][ T3562] team0 (unregistering): Port device team_slave_0 removed [ 189.670137][ T8474] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 189.685623][ T8474] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 189.738424][ T8474] team0: Port device team_slave_0 added [ 189.750183][ T8474] team0: Port device team_slave_1 added [ 189.860786][ T8474] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 189.880095][ T8474] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 189.917090][ T8474] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 189.945075][ T8474] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 189.959631][ T8474] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 190.016083][ T8474] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 190.093290][ T8474] hsr_slave_0: entered promiscuous mode [ 190.106267][ T8474] hsr_slave_1: entered promiscuous mode [ 190.130401][ T8474] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 190.138453][ T8474] Cannot create hsr debugfs directory [ 190.173491][ T8398] 8021q: adding VLAN 0 to HW filter on device bond0 [ 190.348518][ T8398] 8021q: adding VLAN 0 to HW filter on device team0 [ 190.454332][ T8527] bridge0: port 1(bridge_slave_0) entered blocking state [ 190.461534][ T8527] bridge0: port 1(bridge_slave_0) entered forwarding state [ 190.536553][ T55] Bluetooth: hci0: command tx timeout [ 190.580358][ T8524] bridge0: port 2(bridge_slave_1) entered blocking state [ 190.587535][ T8524] bridge0: port 2(bridge_slave_1) entered forwarding state [ 190.624039][ T3562] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.641599][ T8590] netlink: 316 bytes leftover after parsing attributes in process `syz.1.549'. [ 190.792221][ T3562] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.898120][ T3562] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.134792][ T3562] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.168542][ T8474] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 191.226495][ T8474] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 191.265945][ T8474] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 191.289166][ T8474] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 191.575706][ T8398] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 191.604633][ T3562] bridge_slave_1: left allmulticast mode [ 191.629138][ T3562] bridge_slave_1: left promiscuous mode [ 191.646393][ T3562] bridge0: port 2(bridge_slave_1) entered disabled state [ 191.704551][ T3562] bridge_slave_0: left allmulticast mode [ 191.726814][ T3562] bridge_slave_0: left promiscuous mode [ 191.732593][ T3562] bridge0: port 1(bridge_slave_0) entered disabled state [ 192.616020][ T5859] Bluetooth: hci0: command tx timeout [ 193.136828][ T3562] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 193.179032][ T3562] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 193.267901][ T3562] bond0 (unregistering): Released all slaves [ 193.315508][ T8474] 8021q: adding VLAN 0 to HW filter on device bond0 [ 193.469119][ T8474] 8021q: adding VLAN 0 to HW filter on device team0 [ 193.528507][ T8525] bridge0: port 1(bridge_slave_0) entered blocking state [ 193.535688][ T8525] bridge0: port 1(bridge_slave_0) entered forwarding state [ 193.577566][ T8525] bridge0: port 2(bridge_slave_1) entered blocking state [ 193.584718][ T8525] bridge0: port 2(bridge_slave_1) entered forwarding state [ 193.882699][ T8398] veth0_vlan: entered promiscuous mode [ 193.900361][ T8398] veth1_vlan: entered promiscuous mode [ 194.171549][ T8398] veth0_macvtap: entered promiscuous mode [ 194.223091][ T8398] veth1_macvtap: entered promiscuous mode [ 194.295422][ T8398] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 194.317882][ T8398] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 194.338009][ T8398] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 194.357939][ T8398] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 194.383905][ T8398] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 194.414155][ T8398] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 194.433001][ T8398] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 194.541769][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.548443][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.846886][ T8398] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 194.872343][ T8398] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 194.892829][ T8398] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 194.905958][ T8398] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 194.926389][ T8398] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 194.945902][ T8398] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 194.967101][ T8398] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 194.984012][ T8474] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 195.367117][ T3562] hsr_slave_0: left promiscuous mode [ 195.374530][ T3562] hsr_slave_1: left promiscuous mode [ 195.462977][ T3562] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 195.479648][ T3562] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 195.502005][ T3562] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 195.515968][ T3562] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 195.669301][ T3562] veth1_macvtap: left promiscuous mode [ 195.674878][ T3562] veth0_macvtap: left promiscuous mode [ 195.681055][ T3562] veth1_vlan: left promiscuous mode [ 195.690811][ T3562] veth0_vlan: left promiscuous mode [ 197.363223][ T3562] team0 (unregistering): Port device team_slave_1 removed [ 197.432416][ T3562] team0 (unregistering): Port device team_slave_0 removed [ 198.372065][ T8398] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.386676][ T8398] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.395433][ T8398] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.416926][ T8398] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.479673][ T8526] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 199.505812][ T8526] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 199.730156][ T8474] veth0_vlan: entered promiscuous mode [ 199.818604][ T8529] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 199.825964][ T8474] veth1_vlan: entered promiscuous mode [ 199.835936][ T8529] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 199.956671][ T8474] veth0_macvtap: entered promiscuous mode [ 199.979695][ T8474] veth1_macvtap: entered promiscuous mode [ 200.007856][ T8474] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 200.018971][ T8474] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 200.031358][ T8474] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 200.051490][ T8474] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 200.061884][ T8474] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 200.085880][ T8474] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 200.102015][ T8474] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 200.140732][ T8474] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 200.185816][ T8474] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 200.195671][ T8474] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 200.255901][ T8474] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 200.269451][ T8474] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 200.286068][ T8474] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 200.304844][ T8474] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 200.348267][ T8474] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.386080][ T8474] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.394828][ T8474] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.445916][ T8474] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.450180][ T8723] svc: failed to register nfsdv3 RPC service (errno 111). [ 200.461149][ T8730] netlink: 12 bytes leftover after parsing attributes in process `syz.5.520'. [ 200.521807][ T8723] svc: failed to register nfsaclv3 RPC service (errno 111). [ 200.742790][ T8529] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 200.775463][ T8529] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 200.887744][ T8523] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 200.895611][ T8523] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 202.856088][ T8809] syz.5.575(8809): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 203.525114][ T8839] kernel read not supported for file /" (pid: 8839 comm: syz.5.581) [ 203.601586][ T29] audit: type=1800 audit(8277292075.320:2): pid=8839 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.581" name=220E dev="mqueue" ino=21395 res=0 errno=0 [ 203.825656][ T3562] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.029088][ T3562] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.179672][ T3562] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.345040][ T55] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 204.354897][ T55] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 204.364006][ T55] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 204.372986][ T55] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 204.380929][ T55] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 204.388857][ T55] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 204.594636][ T3562] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.097017][ T3562] bridge_slave_1: left allmulticast mode [ 205.102723][ T3562] bridge_slave_1: left promiscuous mode [ 205.126056][ T3562] bridge0: port 2(bridge_slave_1) entered disabled state [ 205.298236][ T3562] bridge_slave_0: left allmulticast mode [ 205.303934][ T3562] bridge_slave_0: left promiscuous mode [ 205.309891][ T3562] bridge0: port 1(bridge_slave_0) entered disabled state [ 206.459698][ T5859] Bluetooth: hci0: command tx timeout [ 206.817360][ T3562] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 206.856153][ T3562] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 206.908945][ T3562] bond0 (unregistering): Released all slaves [ 207.005233][ T8864] chnl_net:caif_netlink_parms(): no params data found [ 208.367834][ T8864] bridge0: port 1(bridge_slave_0) entered blocking state [ 208.375188][ T8864] bridge0: port 1(bridge_slave_0) entered disabled state [ 208.395497][ T8864] bridge_slave_0: entered allmulticast mode [ 208.406592][ T8864] bridge_slave_0: entered promiscuous mode [ 208.541554][ T5859] Bluetooth: hci0: command tx timeout [ 208.583137][ T3562] hsr_slave_0: left promiscuous mode [ 208.714293][ T3562] hsr_slave_1: left promiscuous mode [ 208.724574][ T3562] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 208.745282][ T3562] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 208.850221][ T3562] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 208.871904][ T3562] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 208.938870][ T3562] veth1_macvtap: left promiscuous mode [ 208.944451][ T3562] veth0_macvtap: left promiscuous mode [ 208.970614][ T3562] veth1_vlan: left promiscuous mode [ 208.981057][ T3562] veth0_vlan: left promiscuous mode [ 210.463019][ T3562] team0 (unregistering): Port device team_slave_1 removed [ 210.616334][ T5859] Bluetooth: hci0: command tx timeout [ 210.632786][ T3562] team0 (unregistering): Port device team_slave_0 removed [ 211.550498][ T8864] bridge0: port 2(bridge_slave_1) entered blocking state [ 211.559199][ T8864] bridge0: port 2(bridge_slave_1) entered disabled state [ 211.571876][ T8864] bridge_slave_1: entered allmulticast mode [ 211.579199][ T8864] bridge_slave_1: entered promiscuous mode [ 211.713453][ T8864] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 211.868733][ T8864] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 211.933008][ T8995] svc: failed to register nfsdv3 RPC service (errno 111). [ 211.973011][ T8995] svc: failed to register nfsaclv3 RPC service (errno 512). [ 212.009435][ T8864] team0: Port device team_slave_0 added [ 212.027190][ T8864] team0: Port device team_slave_1 added [ 212.070293][ T8864] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 212.082661][ T8864] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 212.122098][ T8864] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 212.135367][ T8864] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 212.142578][ T8864] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 212.168635][ T8864] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 212.268484][ T8864] hsr_slave_0: entered promiscuous mode [ 212.275054][ T8864] hsr_slave_1: entered promiscuous mode [ 212.374982][ T8997] svc: failed to register nfsdv3 RPC service (errno 512). [ 212.394401][ T8997] svc: failed to register nfsaclv3 RPC service (errno 512). [ 212.696352][ T5859] Bluetooth: hci0: command tx timeout [ 213.105711][ T8864] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 213.127817][ T8864] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 213.155331][ T8864] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 213.186908][ T8864] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 213.401673][ T8864] 8021q: adding VLAN 0 to HW filter on device bond0 [ 213.464988][ T8864] 8021q: adding VLAN 0 to HW filter on device team0 [ 213.492877][ T8529] bridge0: port 1(bridge_slave_0) entered blocking state [ 213.500079][ T8529] bridge0: port 1(bridge_slave_0) entered forwarding state [ 213.523294][ T9040] syz_tun: tun_chr_ioctl cmd 1074025681 [ 213.545436][ T8524] bridge0: port 2(bridge_slave_1) entered blocking state [ 213.552645][ T8524] bridge0: port 2(bridge_slave_1) entered forwarding state [ 213.911314][ T8864] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 214.493270][ T8864] veth0_vlan: entered promiscuous mode [ 214.577248][ T8864] veth1_vlan: entered promiscuous mode [ 214.663864][ T8864] veth0_macvtap: entered promiscuous mode [ 214.692533][ T8864] veth1_macvtap: entered promiscuous mode [ 214.749114][ T8864] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 214.783457][ T8864] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.810800][ T8864] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 214.837282][ T8864] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.870467][ T8864] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 214.903468][ T8864] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.933022][ T8864] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 214.952988][ T8864] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 214.985204][ T8864] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.005870][ T8864] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 215.026015][ T8864] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.045825][ T8864] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 215.070760][ T8864] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.097345][ T8864] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 215.320644][ T8864] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.351936][ T8864] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.386599][ T8864] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.421265][ T8864] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.822599][ T8521] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 215.850895][ T8521] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 215.943348][ T8524] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 215.976826][ T8524] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 217.953219][ T29] audit: type=1326 audit(39219.270:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9147 comm="syz.6.628" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4d5e37e719 code=0x0 [ 219.807843][ T9233] netlink: 28 bytes leftover after parsing attributes in process `syz.5.641'. [ 220.490359][ T9259] workqueue: name exceeds WQ_NAME_LEN. Truncating to: -侞6yռ ka; [ 223.169125][ T9342] bridge0: port 2(bridge_slave_1) entered disabled state [ 226.384027][ T9446] mmap: syz.6.682 (9446): VmData 37470208 exceed data ulimit 3. Update limits or use boot option ignore_rlimit_data. [ 226.677186][ T9450] netlink: 'syz.5.681': attribute type 7 has an invalid length. [ 226.701337][ T9449] netlink: 'syz.5.681': attribute type 7 has an invalid length. [ 230.894941][ T3562] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.342341][ T3562] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.763685][ T3562] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.051435][ T3562] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.206498][ T55] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 232.218409][ T55] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 232.226672][ T55] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 232.235607][ T55] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 232.243360][ T55] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 232.253668][ T55] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 232.850655][ T3562] bridge_slave_1: left promiscuous mode [ 232.860332][ T3562] bridge0: port 2(bridge_slave_1) entered disabled state [ 232.934532][ T3562] bridge_slave_0: left allmulticast mode [ 232.940497][ T3562] bridge_slave_0: left promiscuous mode [ 232.946377][ T3562] bridge0: port 1(bridge_slave_0) entered disabled state [ 233.035393][ T5859] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 233.047610][ T5859] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 233.056944][ T5859] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 233.067144][ T5859] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 233.075486][ T5859] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 233.091359][ T5859] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 234.178415][ T3562] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 234.201743][ T3562] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 234.249461][ T3562] bond0 (unregistering): Released all slaves [ 234.285882][ T9607] chnl_net:caif_netlink_parms(): no params data found [ 234.296032][ T5859] Bluetooth: hci1: command tx timeout [ 235.068214][ T9607] bridge0: port 1(bridge_slave_0) entered blocking state [ 235.085437][ T9607] bridge0: port 1(bridge_slave_0) entered disabled state [ 235.103101][ T9607] bridge_slave_0: entered allmulticast mode [ 235.117286][ T9607] bridge_slave_0: entered promiscuous mode [ 235.186216][ T5859] Bluetooth: hci3: command tx timeout [ 235.256999][ T3562] hsr_slave_0: left promiscuous mode [ 235.297326][ T3562] hsr_slave_1: left promiscuous mode [ 235.367866][ T3562] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 235.375324][ T3562] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 235.506886][ T3562] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 235.514464][ T3562] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 235.555881][ T3562] veth1_macvtap: left promiscuous mode [ 235.561470][ T3562] veth0_macvtap: left promiscuous mode [ 235.586052][ T3562] veth1_vlan: left promiscuous mode [ 235.601013][ T3562] veth0_vlan: left promiscuous mode [ 235.859601][ T9682] netlink: 8 bytes leftover after parsing attributes in process `syz.1.720'. [ 236.376055][ T5859] Bluetooth: hci1: command tx timeout [ 236.853134][ T3562] team0 (unregistering): Port device team_slave_1 removed [ 236.959675][ T3562] team0 (unregistering): Port device team_slave_0 removed [ 237.326054][ T5859] Bluetooth: hci3: command tx timeout [ 238.133452][ T9607] bridge0: port 2(bridge_slave_1) entered blocking state [ 238.141052][ T9607] bridge0: port 2(bridge_slave_1) entered disabled state [ 238.148977][ T9607] bridge_slave_1: entered allmulticast mode [ 238.158649][ T9607] bridge_slave_1: entered promiscuous mode [ 238.254456][ T9607] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 238.300816][ T9607] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 238.456039][ T5859] Bluetooth: hci1: command tx timeout [ 238.460899][ T9607] team0: Port device team_slave_0 added [ 238.512759][ T9607] team0: Port device team_slave_1 added [ 238.680739][ T9607] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 238.698617][ T9607] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 238.774352][ T9607] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 238.817926][ T9607] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 238.845628][ T9607] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 238.931794][ T9607] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 239.198839][ T9607] hsr_slave_0: entered promiscuous mode [ 239.258184][ T9607] hsr_slave_1: entered promiscuous mode [ 239.312663][ T9607] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 239.325866][ T9607] Cannot create hsr debugfs directory [ 239.335947][ T5859] Bluetooth: hci3: command tx timeout [ 239.620699][ T3562] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.662901][ T9628] chnl_net:caif_netlink_parms(): no params data found [ 239.885523][ T3562] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.230764][ T3562] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.395407][ T9628] bridge0: port 1(bridge_slave_0) entered blocking state [ 240.423340][ T9628] bridge0: port 1(bridge_slave_0) entered disabled state [ 240.456042][ T9628] bridge_slave_0: entered allmulticast mode [ 240.515954][ T9628] bridge_slave_0: entered promiscuous mode [ 240.523953][ T9628] bridge0: port 2(bridge_slave_1) entered blocking state [ 240.531820][ T9628] bridge0: port 2(bridge_slave_1) entered disabled state [ 240.539229][ T5859] Bluetooth: hci1: command tx timeout [ 240.545171][ T9628] bridge_slave_1: entered allmulticast mode [ 240.556997][ T9628] bridge_slave_1: entered promiscuous mode [ 240.609502][ T3562] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.730522][ T9628] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 240.763763][ T9628] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 241.110333][ T9628] team0: Port device team_slave_0 added [ 241.132688][ T9628] team0: Port device team_slave_1 added [ 241.327878][ T9628] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 241.346040][ T9628] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 241.406491][ T9628] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 241.416204][ T5859] Bluetooth: hci3: command tx timeout [ 241.418863][ T3562] bridge_slave_1: left allmulticast mode [ 241.446262][ T3562] bridge_slave_1: left promiscuous mode [ 241.452040][ T3562] bridge0: port 2(bridge_slave_1) entered disabled state [ 241.499522][ T3562] bridge_slave_0: left allmulticast mode [ 241.522402][ T3562] bridge_slave_0: left promiscuous mode [ 241.531156][ T3562] bridge0: port 1(bridge_slave_0) entered disabled state [ 242.242924][ T3562] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 242.264848][ T3562] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 242.285005][ T3562] bond0 (unregistering): Released all slaves [ 242.365077][ T9628] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 242.373447][ T9628] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 242.409225][ T9628] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 242.626495][ T9628] hsr_slave_0: entered promiscuous mode [ 242.661152][ T9628] hsr_slave_1: entered promiscuous mode [ 242.677446][ T9628] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 242.685090][ T9628] Cannot create hsr debugfs directory [ 242.874644][ T9607] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 242.999492][ T9607] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 243.039185][ T9607] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 243.206290][ T9607] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 244.000050][ T9607] 8021q: adding VLAN 0 to HW filter on device bond0 [ 244.102939][ T9607] 8021q: adding VLAN 0 to HW filter on device team0 [ 244.197383][ T3562] hsr_slave_0: left promiscuous mode [ 244.217575][ T3562] hsr_slave_1: left promiscuous mode [ 244.247492][ T3562] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 244.258385][ T3562] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 244.295661][ T3562] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 244.310277][ T3562] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 244.355379][ T3562] veth1_macvtap: left promiscuous mode [ 244.383136][ T3562] veth0_macvtap: left promiscuous mode [ 244.394698][ T3562] veth1_vlan: left promiscuous mode [ 244.418290][ T3562] veth0_vlan: left promiscuous mode [ 245.294493][ T3562] team0 (unregistering): Port device team_slave_1 removed [ 245.356672][ T3562] team0 (unregistering): Port device team_slave_0 removed [ 245.779921][ T8529] bridge0: port 1(bridge_slave_0) entered blocking state [ 245.787101][ T8529] bridge0: port 1(bridge_slave_0) entered forwarding state [ 245.807936][ T8521] bridge0: port 2(bridge_slave_1) entered blocking state [ 245.815178][ T8521] bridge0: port 2(bridge_slave_1) entered forwarding state [ 246.044549][ T9628] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 246.091133][ T9628] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 246.113407][ T9628] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 246.162788][ T9628] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 246.365697][ T9628] 8021q: adding VLAN 0 to HW filter on device bond0 [ 246.440364][ T9628] 8021q: adding VLAN 0 to HW filter on device team0 [ 246.478897][ T8521] bridge0: port 1(bridge_slave_0) entered blocking state [ 246.486046][ T8521] bridge0: port 1(bridge_slave_0) entered forwarding state [ 246.494991][ T8521] bridge0: port 2(bridge_slave_1) entered blocking state [ 246.502156][ T8521] bridge0: port 2(bridge_slave_1) entered forwarding state [ 246.674770][ T9628] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 246.697282][ T9628] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 246.984138][ T9607] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 247.279133][ T9914] ptrace attach of "./syz-executor exec"[8864] was attempted by "./syz-executor exec"[9914] [ 247.302215][ T9628] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 247.448657][ T9628] veth0_vlan: entered promiscuous mode [ 247.475281][ T9628] veth1_vlan: entered promiscuous mode [ 247.584884][ T9628] veth0_macvtap: entered promiscuous mode [ 247.624856][ T9628] veth1_macvtap: entered promiscuous mode [ 247.675656][ T9628] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 247.725981][ T9628] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 247.751341][ T9628] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 247.785968][ T9628] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 247.809447][ T9628] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 247.837627][ T9628] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 247.848363][ T9628] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 247.865960][ T9628] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 247.892823][ T9628] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 247.937189][ T9628] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 247.969886][ T9628] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.991668][ T9628] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.015956][ T9628] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.025273][ T9628] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.130782][ T9607] veth0_vlan: entered promiscuous mode [ 248.280348][ T9607] veth1_vlan: entered promiscuous mode [ 248.374095][ T8529] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 248.422092][ T8529] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 248.522114][ T9607] veth0_macvtap: entered promiscuous mode [ 248.533587][ T8529] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 248.542002][ T8529] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 248.582899][ T9607] veth1_macvtap: entered promiscuous mode [ 248.638730][ T9607] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 248.706101][ T9607] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.734302][ T9607] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 248.786726][ T9607] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.825872][ T9607] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 248.855900][ T9607] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.869388][ T9607] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 248.900826][ T9607] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 248.911499][ T9607] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.921450][ T9607] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 248.932011][ T9607] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.942104][ T9607] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 248.952939][ T9607] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.964573][ T9607] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 248.975012][ T9607] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.983880][ T9607] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.992787][ T9607] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.001757][ T9607] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.224565][ T9982] kernel read not supported for file /#)-\&[} (pid: 9982 comm: syz.1.756) [ 249.241361][ T29] audit: type=1804 audit(39250.540:4): pid=9982 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.756" name="#)-\&[}" dev="mqueue" ino=27404 res=1 errno=0 [ 249.282773][ T29] audit: type=1800 audit(39250.600:5): pid=9982 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.756" name="#)-\&[}" dev="mqueue" ino=27404 res=0 errno=0 [ 249.580641][ T8525] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 249.635524][ T8525] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 249.687261][ T3562] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 249.730953][ T3562] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 250.051423][T10012] HfR: entered promiscuous mode [ 252.442514][T10102] netlink: 'syz.1.784': attribute type 11 has an invalid length. [ 252.463278][T10102] netlink: 'syz.1.784': attribute type 11 has an invalid length. [ 255.675939][T10203] netlink: 8 bytes leftover after parsing attributes in process `syz.6.806'. [ 256.035287][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.045931][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 257.113515][T10223] netlink: 24 bytes leftover after parsing attributes in process `syz.1.810'. [ 257.874509][T10226] netlink: 8 bytes leftover after parsing attributes in process `syz.5.812'. [ 261.325903][T10288] netlink: 16 bytes leftover after parsing attributes in process `syz.6.823'. [ 268.803307][T10396] netlink: 8 bytes leftover after parsing attributes in process `syz.5.851'. [ 269.155648][T10412] GUP no longer grows the stack in syz.5.855 (10412): 1000-401000 (0) [ 269.164697][T10412] CPU: 1 UID: 0 PID: 10412 Comm: syz.5.855 Not tainted 6.12.0-rc5-syzkaller-00047-g4236f913808c #0 [ 269.175418][T10412] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 269.185501][T10412] Call Trace: [ 269.188802][T10412] [ 269.191762][T10412] dump_stack_lvl+0x16c/0x1f0 [ 269.196473][T10412] gup_vma_lookup+0x1d2/0x220 [ 269.201187][T10412] fixup_user_fault+0x26f/0x540 [ 269.206082][T10412] fault_in_user_writeable+0x70/0xe0 [ 269.211397][T10412] futex_wake_op+0x96c/0xdc0 [ 269.216029][T10412] ? __pfx_futex_wake_op+0x10/0x10 [ 269.221191][T10412] ? futex_wake+0x18e/0x4e0 [ 269.225708][T10412] ? __pfx_futex_wake+0x10/0x10 [ 269.230579][T10412] ? fput+0x30/0x390 [ 269.234486][T10412] do_futex+0x2eb/0x350 [ 269.238653][T10412] ? __pfx_do_futex+0x10/0x10 [ 269.243337][T10412] ? __pfx_do_sendfile+0x10/0x10 [ 269.248283][T10412] __x64_sys_futex+0x1e1/0x4c0 [ 269.253058][T10412] ? __pfx___x64_sys_futex+0x10/0x10 [ 269.258350][T10412] ? rcu_is_watching+0x12/0xc0 [ 269.263124][T10412] do_syscall_64+0xcd/0x250 [ 269.267635][T10412] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 269.273546][T10412] RIP: 0033:0x7f168057e719 [ 269.277973][T10412] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 269.297589][T10412] RSP: 002b:00007f168139b038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 269.306011][T10412] RAX: ffffffffffffffda RBX: 00007f1680735f80 RCX: 00007f168057e719 [ 269.313980][T10412] RDX: 0000000000000002 RSI: 0000000000000085 RDI: 0000000000000000 [ 269.321950][T10412] RBP: 00007f16805f132e R08: 0000000000000000 R09: 0000000000000001 [ 269.329920][T10412] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 269.337889][T10412] R13: 0000000000000000 R14: 00007f1680735f80 R15: 00007ffcafaedd98 [ 269.345878][T10412] [ 269.899586][ T8523] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.189074][ T8523] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.421683][ T8523] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.783821][ T8523] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.032714][ T55] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 271.042970][ T55] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 271.051233][ T55] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 271.062381][ T55] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 271.071430][ T55] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 271.079796][ T55] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 271.335545][ T8523] bridge_slave_1: left allmulticast mode [ 271.371017][ T8523] bridge_slave_1: left promiscuous mode [ 271.391024][ T8523] bridge0: port 2(bridge_slave_1) entered disabled state [ 271.627769][ T8523] bridge_slave_0: left allmulticast mode [ 271.634244][ T8523] bridge_slave_0: left promiscuous mode [ 271.656036][ T8523] bridge0: port 1(bridge_slave_0) entered disabled state [ 273.176854][ T5859] Bluetooth: hci0: command tx timeout [ 273.611164][ T8523] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 273.706451][ T8523] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 273.808018][ T8523] bond0 (unregistering): Released all slaves [ 274.289421][T10445] chnl_net:caif_netlink_parms(): no params data found [ 274.828962][T10445] bridge0: port 1(bridge_slave_0) entered blocking state [ 274.850428][T10445] bridge0: port 1(bridge_slave_0) entered disabled state [ 274.875977][T10445] bridge_slave_0: entered allmulticast mode [ 274.906034][T10445] bridge_slave_0: entered promiscuous mode [ 274.915872][T10445] bridge0: port 2(bridge_slave_1) entered blocking state [ 274.922988][T10445] bridge0: port 2(bridge_slave_1) entered disabled state [ 274.949278][T10445] bridge_slave_1: entered allmulticast mode [ 275.005733][T10445] bridge_slave_1: entered promiscuous mode [ 275.256472][ T5859] Bluetooth: hci0: command tx timeout [ 275.865382][T10445] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 275.889060][T10445] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 276.393513][T10445] team0: Port device team_slave_0 added [ 276.620903][ T8523] hsr_slave_0: left promiscuous mode [ 276.638921][ T8523] hsr_slave_1: left promiscuous mode [ 276.666036][ T8523] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 276.673625][ T8523] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 276.706304][ T8523] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 276.733069][ T8523] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 276.748301][ T29] audit: type=1326 audit(8277292050.670:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10555 comm="syz.5.883" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f168057e719 code=0x0 [ 276.754433][ T8523] veth1_macvtap: left promiscuous mode [ 276.790402][ T8523] veth0_macvtap: left promiscuous mode [ 276.796317][ T8523] veth1_vlan: left promiscuous mode [ 276.801668][ T8523] veth0_vlan: left promiscuous mode [ 277.337424][ T5859] Bluetooth: hci0: command tx timeout [ 278.717051][ T8523] team0 (unregistering): Port device team_slave_1 removed [ 278.913663][ T8523] team0 (unregistering): Port device team_slave_0 removed [ 279.415923][ T5859] Bluetooth: hci0: command tx timeout [ 280.298450][T10445] team0: Port device team_slave_1 added [ 280.412765][T10445] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 280.431995][T10445] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 280.480743][T10445] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 280.524829][T10445] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 280.557539][T10445] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 280.644846][T10445] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 280.700755][T10619] nbd: must specify a size in bytes for the device [ 280.993680][T10445] hsr_slave_0: entered promiscuous mode [ 281.027790][T10445] hsr_slave_1: entered promiscuous mode [ 281.998577][T10658] kernel read not supported for file /#)-\&[} (pid: 10658 comm: syz.3.901) [ 282.017045][ T29] audit: type=1804 audit(8277292055.920:7): pid=10658 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.901" name="#)-\&[}" dev="mqueue" ino=31305 res=1 errno=0 [ 282.099475][ T29] audit: type=1800 audit(8277292056.020:8): pid=10658 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.901" name="#)-\&[}" dev="mqueue" ino=31305 res=0 errno=0 [ 282.848368][T10445] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 283.141637][T10445] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 283.217950][T10445] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 283.273722][T10445] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 283.799909][T10445] 8021q: adding VLAN 0 to HW filter on device bond0 [ 283.930868][T10445] 8021q: adding VLAN 0 to HW filter on device team0 [ 283.997818][ T8522] bridge0: port 1(bridge_slave_0) entered blocking state [ 284.004955][ T8522] bridge0: port 1(bridge_slave_0) entered forwarding state [ 284.118746][ T8522] bridge0: port 2(bridge_slave_1) entered blocking state [ 284.125969][ T8522] bridge0: port 2(bridge_slave_1) entered forwarding state [ 284.863239][T10709] netlink: 4 bytes leftover after parsing attributes in process `syz.3.911'. [ 285.402144][T10445] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 285.789358][T10755] nfsd: Unknown parameter 'IPVS' [ 285.824736][T10755] nfsd: Unknown parameter 'IPVS' [ 286.477014][T10445] veth0_vlan: entered promiscuous mode [ 286.521312][T10445] veth1_vlan: entered promiscuous mode [ 286.668242][T10445] veth0_macvtap: entered promiscuous mode [ 286.809271][T10445] veth1_macvtap: entered promiscuous mode [ 286.867007][T10445] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 286.915948][T10445] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 286.954219][T10445] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 286.978641][T10445] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 287.005830][T10445] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 287.026106][T10445] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 287.049301][T10445] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 287.069981][T10445] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 287.100024][T10445] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 287.135694][T10445] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 287.184562][T10445] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 287.214990][T10445] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 287.245878][T10445] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 287.277126][T10445] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 287.337505][T10445] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.367408][T10445] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.403328][T10445] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.432474][T10445] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.634265][ T29] audit: type=1326 audit(8277292061.550:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10804 comm="syz.5.923" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f168057e719 code=0x0 [ 287.660057][ T8524] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 287.677986][ T8524] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 287.877419][ T8525] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 287.885308][ T8525] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 289.422846][ T3610] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 289.849706][ T3610] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.689421][ T55] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 290.701203][ T55] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 290.710653][ T55] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 290.718912][ T55] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 290.727574][ T55] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 290.735422][ T55] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 290.998152][ T3610] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 291.218747][ T3610] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 291.971603][ T3610] bridge_slave_1: left allmulticast mode [ 291.995943][ T3610] bridge_slave_1: left promiscuous mode [ 292.025040][ T3610] bridge0: port 2(bridge_slave_1) entered disabled state [ 292.101041][ T3610] bridge_slave_0: left allmulticast mode [ 292.150058][ T3610] bridge_slave_0: left promiscuous mode [ 292.191465][ T3610] bridge0: port 1(bridge_slave_0) entered disabled state [ 292.855947][ T55] Bluetooth: hci3: command tx timeout [ 293.931892][ T3610] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 293.972629][ T3610] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 293.998733][ T3610] bond0 (unregistering): Released all slaves [ 294.687421][T10863] chnl_net:caif_netlink_parms(): no params data found [ 294.731240][T10918] netlink: 40 bytes leftover after parsing attributes in process `syz.1.942'. [ 294.935921][ T55] Bluetooth: hci3: command tx timeout [ 295.209156][T10918] openvswitch: HSR: Dropping previously announced user features [ 295.331721][ T3610] hsr_slave_0: left promiscuous mode [ 295.365080][ T3610] hsr_slave_1: left promiscuous mode [ 295.413504][ T3610] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 295.446873][ T3610] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 295.476492][ T3610] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 295.483957][ T3610] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 295.587256][ T3610] veth1_macvtap: left promiscuous mode [ 295.592843][ T3610] veth0_macvtap: left promiscuous mode [ 295.618249][ T3610] veth1_vlan: left promiscuous mode [ 295.623606][ T3610] veth0_vlan: left promiscuous mode [ 296.057038][ T5859] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 296.070496][ T5859] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 296.078967][ T5859] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 296.093715][ T5859] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 296.101559][ T5859] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 296.109398][ T5859] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 296.632036][ T3610] team0 (unregistering): Port device team_slave_1 removed [ 296.682455][ T3610] team0 (unregistering): Port device team_slave_0 removed [ 297.016225][ T55] Bluetooth: hci3: command tx timeout [ 297.376346][T10863] bridge0: port 1(bridge_slave_0) entered blocking state [ 297.416651][T10863] bridge0: port 1(bridge_slave_0) entered disabled state [ 297.423896][T10863] bridge_slave_0: entered allmulticast mode [ 297.456304][T10863] bridge_slave_0: entered promiscuous mode [ 297.472276][T10863] bridge0: port 2(bridge_slave_1) entered blocking state [ 297.481812][T10863] bridge0: port 2(bridge_slave_1) entered disabled state [ 297.489847][T10863] bridge_slave_1: entered allmulticast mode [ 297.498968][T10863] bridge_slave_1: entered promiscuous mode [ 297.639531][T10863] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 297.659193][T10863] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 297.717989][T10863] team0: Port device team_slave_0 added [ 297.784786][T10863] team0: Port device team_slave_1 added [ 297.936452][T10863] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 297.943462][T10863] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 298.024050][T10863] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 298.089913][T10863] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 298.099275][T10863] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 298.126482][T10863] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 298.137471][ T55] Bluetooth: hci1: command tx timeout [ 298.356184][T10863] hsr_slave_0: entered promiscuous mode [ 298.374367][T10863] hsr_slave_1: entered promiscuous mode [ 298.385447][T10863] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 298.399781][T10863] Cannot create hsr debugfs directory [ 298.537323][ T3610] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 298.677843][ T3610] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 298.753216][T10945] chnl_net:caif_netlink_parms(): no params data found [ 298.834914][ T3610] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 298.944029][ T3610] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 299.012063][T10945] bridge0: port 1(bridge_slave_0) entered blocking state [ 299.030659][T10945] bridge0: port 1(bridge_slave_0) entered disabled state [ 299.044487][T10945] bridge_slave_0: entered allmulticast mode [ 299.052757][T10945] bridge_slave_0: entered promiscuous mode [ 299.075727][T10945] bridge0: port 2(bridge_slave_1) entered blocking state [ 299.086581][T10945] bridge0: port 2(bridge_slave_1) entered disabled state [ 299.093960][T10945] bridge_slave_1: entered allmulticast mode [ 299.101520][ T55] Bluetooth: hci3: command tx timeout [ 299.110844][T10945] bridge_slave_1: entered promiscuous mode [ 299.258547][T10945] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 299.303359][T10945] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 299.431639][T11001] HfR: entered promiscuous mode [ 299.510749][T10945] team0: Port device team_slave_0 added [ 299.531133][ T3610] bridge_slave_1: left allmulticast mode [ 299.564791][ T3610] bridge_slave_1: left promiscuous mode [ 299.576225][ T3610] bridge0: port 2(bridge_slave_1) entered disabled state [ 299.621517][ T3610] bridge_slave_0: left allmulticast mode [ 299.636111][ T3610] bridge_slave_0: left promiscuous mode [ 299.642104][ T3610] bridge0: port 1(bridge_slave_0) entered disabled state [ 299.989917][T11023] netlink: 8 bytes leftover after parsing attributes in process `syz.6.958'. [ 300.215965][ T55] Bluetooth: hci1: command tx timeout [ 300.363065][ T3610] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 300.380053][ T3610] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 300.399996][ T3610] bond0 (unregistering): Released all slaves [ 300.428893][T10945] team0: Port device team_slave_1 added [ 300.483307][ T3610] HfR: left promiscuous mode [ 300.721263][T10945] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 300.737623][T10945] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 300.811852][T10945] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 300.840340][T10945] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 300.847409][T10945] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 300.874700][T10945] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 300.995350][T10863] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 301.092076][T10863] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 301.109985][T10863] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 301.254267][T10945] hsr_slave_0: entered promiscuous mode [ 301.265602][T10945] hsr_slave_1: entered promiscuous mode [ 301.303654][T10945] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 301.316139][T10945] Cannot create hsr debugfs directory [ 301.378588][T10863] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 301.652243][ T3610] hsr_slave_0: left promiscuous mode [ 301.695025][ T3610] hsr_slave_1: left promiscuous mode [ 301.755988][ T3610] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 301.763456][ T3610] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 301.773259][ T3610] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 301.780810][ T3610] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 301.817586][ T3610] veth1_macvtap: left promiscuous mode [ 301.823154][ T3610] veth0_macvtap: left promiscuous mode [ 301.841836][ T3610] veth1_vlan: left promiscuous mode [ 301.855972][ T3610] veth0_vlan: left promiscuous mode [ 302.295967][ T55] Bluetooth: hci1: command tx timeout [ 302.644204][ T3610] team0 (unregistering): Port device team_slave_1 removed [ 302.693090][ T3610] team0 (unregistering): Port device team_slave_0 removed [ 303.497513][T10863] 8021q: adding VLAN 0 to HW filter on device bond0 [ 303.605546][T10863] 8021q: adding VLAN 0 to HW filter on device team0 [ 303.690512][ T8528] bridge0: port 1(bridge_slave_0) entered blocking state [ 303.697710][ T8528] bridge0: port 1(bridge_slave_0) entered forwarding state [ 303.744428][ T8528] bridge0: port 2(bridge_slave_1) entered blocking state [ 303.751600][ T8528] bridge0: port 2(bridge_slave_1) entered forwarding state [ 303.907053][T10945] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 303.958222][T10945] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 304.011328][T10945] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 304.060131][T10945] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 304.311526][T10945] 8021q: adding VLAN 0 to HW filter on device bond0 [ 304.348904][T10945] 8021q: adding VLAN 0 to HW filter on device team0 [ 304.386758][ T55] Bluetooth: hci1: command tx timeout [ 304.399230][ T3610] bridge0: port 1(bridge_slave_0) entered blocking state [ 304.406565][ T3610] bridge0: port 1(bridge_slave_0) entered forwarding state [ 304.428551][ T8526] bridge0: port 2(bridge_slave_1) entered blocking state [ 304.435681][ T8526] bridge0: port 2(bridge_slave_1) entered forwarding state [ 304.587442][T10863] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 305.102144][T10945] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 305.239225][T10863] veth0_vlan: entered promiscuous mode [ 305.297587][T10863] veth1_vlan: entered promiscuous mode [ 305.383077][T10863] veth0_macvtap: entered promiscuous mode [ 305.419023][T10863] veth1_macvtap: entered promiscuous mode [ 305.479841][T10863] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 305.504920][T10863] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 305.533997][T10863] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 305.549661][T10863] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 305.564918][T10863] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 305.604808][T10863] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 305.642500][T10863] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 305.652705][T10863] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 305.664301][T10863] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 305.701962][T10863] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 305.748610][T10863] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 305.766027][T10863] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 305.796320][T10863] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 305.805078][T10863] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 305.918501][T10945] veth0_vlan: entered promiscuous mode [ 305.994772][T10945] veth1_vlan: entered promiscuous mode [ 306.055375][ T3562] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 306.091660][ T3562] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 306.206939][T10945] veth0_macvtap: entered promiscuous mode [ 306.226660][ T8507] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 306.234802][ T8507] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 306.273842][T10945] veth1_macvtap: entered promiscuous mode [ 306.344893][T10945] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 306.376583][T10945] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 306.406501][T10945] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 306.435876][T10945] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 306.445732][T10945] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 306.485811][T10945] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 306.497816][T10945] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 306.564459][T10945] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 306.623828][T10945] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 306.645925][T10945] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 306.675872][T10945] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 306.700620][T10945] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 306.732495][T10945] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 306.767149][T10945] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 306.803776][T10945] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.829643][T10945] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.848847][T10945] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.869780][T10945] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.054111][ T8526] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 307.077638][ T8526] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 307.109616][ T3562] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 307.148939][ T3562] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 307.475410][T11190] netlink: 5 bytes leftover after parsing attributes in process `syz.8.945'. [ 309.112775][T11250] netlink: 12 bytes leftover after parsing attributes in process `syz.6.981'. [ 309.772899][T11269] debugfs: Directory '-侞6yռ ka;+1)p;!X+@' with parent 'ieee80211' already present! [ 310.022109][T11270] netlink: 5 bytes leftover after parsing attributes in process `syz.6.984'. [ 310.140560][T11272] dummy0: entered allmulticast mode [ 315.515183][T11440] Process accounting resumed [ 317.423097][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.430980][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 319.533733][T11544] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1034'. [ 323.131073][T11630] cgroup: fork rejected by pids controller in /syz8 [ 324.699093][T11780] could not allocate digest TFM handle [ 330.037021][T11901] netlink: 342 bytes leftover after parsing attributes in process `syz.8.1068'. [ 332.218059][T11956] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1078'. [ 332.667200][T11964] delete_channel: no stack [ 334.220216][T12003] svc: failed to register nfsdv3 RPC service (errno 111). [ 334.296096][T12003] svc: failed to register nfsaclv3 RPC service (errno 111). [ 339.119281][ T5859] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 339.128980][ T5859] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 339.138051][ T5859] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 339.159153][ T5859] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 339.190543][ T5859] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 339.197987][ T5859] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 339.801172][T12071] chnl_net:caif_netlink_parms(): no params data found [ 340.527949][T12071] bridge0: port 1(bridge_slave_0) entered blocking state [ 340.535085][T12071] bridge0: port 1(bridge_slave_0) entered disabled state [ 340.542852][T12071] bridge_slave_0: entered allmulticast mode [ 340.556231][T12071] bridge_slave_0: entered promiscuous mode [ 340.564503][T12071] bridge0: port 2(bridge_slave_1) entered blocking state [ 340.575875][T12071] bridge0: port 2(bridge_slave_1) entered disabled state [ 340.583097][T12071] bridge_slave_1: entered allmulticast mode [ 340.609981][T12071] bridge_slave_1: entered promiscuous mode [ 340.782970][T12071] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 340.794864][T12071] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 340.952410][T12071] team0: Port device team_slave_0 added [ 340.975168][T12071] team0: Port device team_slave_1 added [ 341.256004][ T5859] Bluetooth: hci4: command tx timeout [ 341.411789][T12071] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 341.435816][T12071] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 341.551991][T12071] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 341.624541][T12071] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 341.641783][T12071] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 341.717688][T12071] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 342.057643][T12071] hsr_slave_0: entered promiscuous mode [ 342.086130][T12071] hsr_slave_1: entered promiscuous mode [ 342.109906][T12071] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 342.142397][T12071] Cannot create hsr debugfs directory [ 343.363501][ T5859] Bluetooth: hci4: command tx timeout [ 345.415980][ T5859] Bluetooth: hci4: command tx timeout [ 346.190964][T12071] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 346.503263][T12071] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 346.683054][T12071] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 346.838777][T12071] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 347.497561][ T5859] Bluetooth: hci4: command tx timeout [ 347.569302][T12071] 8021q: adding VLAN 0 to HW filter on device bond0 [ 347.689100][T12071] 8021q: adding VLAN 0 to HW filter on device team0 [ 347.789384][ T3544] bridge0: port 1(bridge_slave_0) entered blocking state [ 347.796554][ T3544] bridge0: port 1(bridge_slave_0) entered forwarding state [ 347.923162][ T3610] bridge0: port 2(bridge_slave_1) entered blocking state [ 347.930332][ T3610] bridge0: port 2(bridge_slave_1) entered forwarding state [ 348.188529][T12071] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 348.284534][T12071] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 349.379842][T12071] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 351.020777][T12071] veth0_vlan: entered promiscuous mode [ 351.123491][T12071] veth1_vlan: entered promiscuous mode [ 351.137214][ T55] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 351.161207][ T55] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 351.170321][ T55] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 351.179729][ T55] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 351.188571][ T55] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 351.206745][ T55] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 351.471166][T12071] veth0_macvtap: entered promiscuous mode [ 351.709971][T12071] veth1_macvtap: entered promiscuous mode [ 351.765283][T12071] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 352.142919][T12071] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 352.195876][T12071] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 352.231964][T12071] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 352.288378][T12071] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 352.336081][T12071] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 352.366214][T12071] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 352.416043][T12071] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 352.472894][T12071] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 352.552388][T12071] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 352.616428][T12071] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 352.657962][T12071] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 352.713011][T12071] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 352.785825][T12071] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 352.855925][T12071] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 352.919440][T12071] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 353.016524][T12071] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 353.067327][T12071] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 353.173182][T12071] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 353.225930][T12071] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 353.274486][ T55] Bluetooth: hci5: command tx timeout [ 353.292350][T12071] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 353.656158][T12071] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 354.715437][T12230] chnl_net:caif_netlink_parms(): no params data found [ 355.336081][ T55] Bluetooth: hci5: command tx timeout [ 355.917847][ T3562] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 355.925714][ T3562] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 355.962360][T12230] bridge0: port 1(bridge_slave_0) entered blocking state [ 355.970356][T12230] bridge0: port 1(bridge_slave_0) entered disabled state [ 356.005980][T12230] bridge_slave_0: entered allmulticast mode [ 356.013083][T12230] bridge_slave_0: entered promiscuous mode [ 356.038760][T12230] bridge0: port 2(bridge_slave_1) entered blocking state [ 356.085875][T12230] bridge0: port 2(bridge_slave_1) entered disabled state [ 356.093141][T12230] bridge_slave_1: entered allmulticast mode [ 356.126967][T12230] bridge_slave_1: entered promiscuous mode [ 356.732445][ T3544] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 356.785191][ T3544] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 356.839492][T12230] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 356.877240][T12230] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 357.415946][ T55] Bluetooth: hci5: command tx timeout [ 357.980824][T12230] team0: Port device team_slave_0 added [ 358.027520][T12230] team0: Port device team_slave_1 added [ 359.496387][ T55] Bluetooth: hci5: command tx timeout [ 361.939193][T12230] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 361.953522][T12230] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 362.045922][T12230] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 362.076969][T12230] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 362.120634][T12230] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 362.199338][T12230] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 364.540543][T12230] hsr_slave_0: entered promiscuous mode [ 364.766220][T12230] hsr_slave_1: entered promiscuous mode [ 364.889274][T12230] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 364.904597][T12230] Cannot create hsr debugfs directory [ 367.047506][T12385] tc_dump_action: action bad kind [ 367.681155][ T8512] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 368.102070][ T8512] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 368.664579][ T8512] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 369.056761][ T8512] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 369.356540][T12230] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 369.406897][T12230] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 369.469823][T12230] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 369.579066][T12230] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 370.000678][T12230] 8021q: adding VLAN 0 to HW filter on device bond0 [ 370.017611][T12230] 8021q: adding VLAN 0 to HW filter on device team0 [ 370.054185][T12230] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 370.064713][T12230] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 370.101125][ T8509] bridge0: port 1(bridge_slave_0) entered blocking state [ 370.108296][ T8509] bridge0: port 1(bridge_slave_0) entered forwarding state [ 370.147288][ T8509] bridge0: port 2(bridge_slave_1) entered blocking state [ 370.154416][ T8509] bridge0: port 2(bridge_slave_1) entered forwarding state [ 370.427068][ T8512] bridge_slave_1: left allmulticast mode [ 370.432763][ T8512] bridge_slave_1: left promiscuous mode [ 370.463106][ T8512] bridge0: port 2(bridge_slave_1) entered disabled state [ 370.840089][T12457] netlink: 'syz.9.1136': attribute type 1 has an invalid length. [ 370.957313][ T8512] bridge_slave_0: left allmulticast mode [ 370.963003][ T8512] bridge_slave_0: left promiscuous mode [ 370.976027][ T8512] bridge0: port 1(bridge_slave_0) entered disabled state [ 372.673882][ T8512] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 372.784529][ T8512] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 372.851206][ T8512] bond0 (unregistering): Released all slaves [ 373.162932][T12230] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 373.498157][T12230] veth0_vlan: entered promiscuous mode [ 373.511236][T12230] veth1_vlan: entered promiscuous mode [ 373.532901][T12230] veth0_macvtap: entered promiscuous mode [ 373.542338][T12230] veth1_macvtap: entered promiscuous mode [ 373.557069][T12230] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 373.567668][T12230] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 373.578651][T12230] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 373.589672][T12230] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 373.599839][T12230] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 373.610709][T12230] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 373.620853][T12230] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 373.631668][T12230] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 373.641761][T12230] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 373.652238][T12230] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 373.664367][T12230] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 373.679187][T12230] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 373.689785][T12230] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 373.699726][T12230] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 373.710209][T12230] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 373.720163][T12230] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 373.730688][T12230] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 373.741247][T12230] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 373.751883][T12230] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 373.761764][T12230] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 373.772292][T12230] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 373.784360][T12230] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 373.839601][T12230] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 373.848699][T12230] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 373.857571][T12230] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 373.866382][T12230] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 375.322031][ T8524] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 375.373432][ T8524] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 375.818802][ T8508] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 375.855803][ T8508] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 376.126213][ T8512] hsr_slave_0: left promiscuous mode [ 376.151113][ T8512] hsr_slave_1: left promiscuous mode [ 376.218741][T12543] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1153'. [ 376.254879][T12543] nbd: must specify a device to reconfigure [ 376.270806][ T8512] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 376.305948][ T8512] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 376.331635][ T8512] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 376.363549][ T8512] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 376.466531][ T8512] veth1_macvtap: left promiscuous mode [ 376.472089][ T8512] veth0_macvtap: left promiscuous mode [ 376.526705][ T8512] veth1_vlan: left promiscuous mode [ 376.533050][ T8512] veth0_vlan: left promiscuous mode [ 378.127527][T12577] svc: failed to register nfsdv3 RPC service (errno 111). [ 378.181519][T12577] svc: failed to register nfsaclv3 RPC service (errno 111). [ 378.860293][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.875934][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 380.703707][ T8512] team0 (unregistering): Port device team_slave_1 removed [ 381.478036][ T8512] team0 (unregistering): Port device team_slave_0 removed [ 385.446715][ T8512] dummy0 (unregistering): left allmulticast mode [ 386.785059][T12645] HSR: entered promiscuous mode [ 388.716079][T12651] tc_dump_action: action bad kind [ 390.304177][T12708] delete_channel: no stack [ 396.385462][ T5859] Bluetooth: hci0: command 0x0406 tx timeout [ 397.959188][ T8509] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 398.209420][ T8509] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 398.257227][T12809] netlink: 24 bytes leftover after parsing attributes in process `syz.9.1192'. [ 398.435515][ T8509] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 398.741029][ T8509] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 399.622278][ T8509] bridge_slave_1: left allmulticast mode [ 399.635627][ T8509] bridge_slave_1: left promiscuous mode [ 399.692334][ T8509] bridge0: port 2(bridge_slave_1) entered disabled state [ 399.741049][ T8509] bridge_slave_0: left allmulticast mode [ 399.774234][ T8509] bridge_slave_0: left promiscuous mode [ 399.803675][ T8509] bridge0: port 1(bridge_slave_0) entered disabled state [ 400.556382][ T5859] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 400.567725][ T5859] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 400.576652][ T5859] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 400.586679][ T5859] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 400.594715][ T5859] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 400.602899][ T5859] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 401.749059][ T8509] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 401.808799][ T8509] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 401.845034][ T8509] bond0 (unregistering): Released all slaves [ 402.746004][ T5859] Bluetooth: hci1: command tx timeout [ 403.338698][ T8509] hsr_slave_0: left promiscuous mode [ 403.399592][ T8509] hsr_slave_1: left promiscuous mode [ 403.426843][ T8509] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 403.451257][ T8509] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 403.490819][ T8509] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 403.525865][ T8509] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 403.691825][ T8509] veth1_macvtap: left promiscuous mode [ 403.714381][ T8509] veth0_macvtap: left promiscuous mode [ 403.736239][ T8509] veth1_vlan: left promiscuous mode [ 403.741614][ T8509] veth0_vlan: left promiscuous mode [ 404.775917][ T5859] Bluetooth: hci1: command tx timeout [ 406.679942][ T8509] team0 (unregistering): Port device team_slave_1 removed [ 406.855895][ T5859] Bluetooth: hci1: command tx timeout [ 407.466736][ T8509] team0 (unregistering): Port device team_slave_0 removed [ 408.937735][ T5859] Bluetooth: hci1: command tx timeout [ 411.119635][T12836] chnl_net:caif_netlink_parms(): no params data found [ 413.331111][T12836] bridge0: port 1(bridge_slave_0) entered blocking state [ 413.354289][T12836] bridge0: port 1(bridge_slave_0) entered disabled state [ 413.381613][T12836] bridge_slave_0: entered allmulticast mode [ 413.409722][T12836] bridge_slave_0: entered promiscuous mode [ 413.440218][T12836] bridge0: port 2(bridge_slave_1) entered blocking state [ 413.475955][T12836] bridge0: port 2(bridge_slave_1) entered disabled state [ 413.485481][T12836] bridge_slave_1: entered allmulticast mode [ 413.503141][T12836] bridge_slave_1: entered promiscuous mode [ 414.068013][T12836] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 414.187552][T12836] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 414.602982][T12836] team0: Port device team_slave_0 added [ 414.626852][T12836] team0: Port device team_slave_1 added [ 415.209426][T12836] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 415.505922][T12836] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 415.583197][T12836] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 415.644501][T12836] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 415.683115][T12836] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 415.824468][T12836] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 416.215275][T12836] hsr_slave_0: entered promiscuous mode [ 416.242086][T12836] hsr_slave_1: entered promiscuous mode [ 416.262406][T12836] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 416.313245][T12836] Cannot create hsr debugfs directory [ 416.531739][T13057] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1225'. [ 416.779856][ T55] Bluetooth: hci3: command 0x0406 tx timeout [ 418.568631][T12836] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 418.676749][T12836] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 418.731957][T12836] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 418.821809][T12836] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 419.190923][T12836] 8021q: adding VLAN 0 to HW filter on device bond0 [ 419.245921][T12836] 8021q: adding VLAN 0 to HW filter on device team0 [ 419.280947][ T8527] bridge0: port 1(bridge_slave_0) entered blocking state [ 419.288096][ T8527] bridge0: port 1(bridge_slave_0) entered forwarding state [ 419.383672][ T8527] bridge0: port 2(bridge_slave_1) entered blocking state [ 419.390842][ T8527] bridge0: port 2(bridge_slave_1) entered forwarding state [ 420.160582][T12836] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 420.338264][T12836] veth0_vlan: entered promiscuous mode [ 420.353626][T12836] veth1_vlan: entered promiscuous mode [ 420.415277][T12836] veth0_macvtap: entered promiscuous mode [ 420.521959][T12836] veth1_macvtap: entered promiscuous mode [ 420.564532][T12836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 420.585463][T12836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 420.608438][T12836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 420.655699][T12836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 420.694096][T12836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 420.696429][T13098] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1230'. [ 420.713566][T12836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 420.772203][T12836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 420.825875][T12836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 420.850350][T12836] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 420.877037][T12836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 420.893901][T12836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 420.904306][T12836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 420.914940][T12836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 420.924970][T12836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 420.935530][T12836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 420.945614][T12836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 420.956316][T12836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 420.967389][T12836] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 421.068417][T12836] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 421.077448][T12836] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 421.087208][T12836] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 421.106371][T12836] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 421.710264][ T8527] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 421.736116][ T8527] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 421.887198][ T8512] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 421.895352][ T8512] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 427.503817][T13222] can: request_module (can-proto-0) failed. [ 435.761664][T13352] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1268'. [ 436.335482][T13361] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1271'. [ 440.299128][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.305530][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 441.857328][T13478] delete_channel: no stack [ 442.247003][T13486] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1297'. [ 442.448769][T13486] svc: failed to register nfsdv3 RPC service (errno 111). [ 442.535506][T13486] svc: failed to register nfsaclv3 RPC service (errno 111). [ 449.144158][T13605] svc: failed to register nfsdv3 RPC service (errno 111). [ 449.224014][T13605] svc: failed to register nfsaclv3 RPC service (errno 111). [ 450.176094][T13634] FAULT_INJECTION: forcing a failure. [ 450.176094][T13634] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 450.289953][T13634] CPU: 1 UID: 0 PID: 13634 Comm: syz.0.1320 Not tainted 6.12.0-rc5-syzkaller-00047-g4236f913808c #0 [ 450.300767][T13634] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 450.310836][T13634] Call Trace: [ 450.314126][T13634] [ 450.317070][T13634] dump_stack_lvl+0x16c/0x1f0 [ 450.321770][T13634] should_fail_ex+0x497/0x5b0 [ 450.326478][T13634] _copy_from_user+0x32/0x100 [ 450.331188][T13634] sctp_getsockopt+0x1685/0x7ae0 [ 450.336153][T13634] ? aa_label_sk_perm+0x19d/0x5a0 [ 450.341211][T13634] ? __pfx_sctp_getsockopt+0x10/0x10 [ 450.346542][T13634] ? __pfx___lock_acquire+0x10/0x10 [ 450.351773][T13634] ? hlock_class+0x4e/0x130 [ 450.356299][T13634] ? __lock_acquire+0xbdd/0x3ce0 [ 450.361271][T13634] ? find_held_lock+0x2d/0x110 [ 450.366058][T13634] ? __might_fault+0x13b/0x190 [ 450.370842][T13634] ? __pfx_lock_release+0x10/0x10 [ 450.376240][T13634] ? trace_lock_acquire+0x14a/0x1d0 [ 450.381466][T13634] ? lock_acquire+0x2f/0xb0 [ 450.385997][T13634] ? __might_fault+0xe3/0x190 [ 450.390694][T13634] ? __might_fault+0xe3/0x190 [ 450.395391][T13634] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 450.401313][T13634] ? do_sock_getsockopt+0x3fe/0x870 [ 450.406539][T13634] do_sock_getsockopt+0x3fe/0x870 [ 450.411588][T13634] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 450.417156][T13634] ? __fget_files+0x244/0x3f0 [ 450.421866][T13634] __sys_getsockopt+0x1a1/0x270 [ 450.426736][T13634] ? __pfx___sys_getsockopt+0x10/0x10 [ 450.432124][T13634] ? fput+0x30/0x390 [ 450.436045][T13634] ? ksys_write+0x1ad/0x260 [ 450.440575][T13634] ? __pfx_ksys_write+0x10/0x10 [ 450.445451][T13634] __x64_sys_getsockopt+0xbd/0x160 [ 450.450586][T13634] ? do_syscall_64+0x91/0x250 [ 450.455281][T13634] ? lockdep_hardirqs_on+0x7c/0x110 [ 450.460515][T13634] do_syscall_64+0xcd/0x250 [ 450.465084][T13634] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 450.471008][T13634] RIP: 0033:0x7f7ddc37e719 [ 450.475441][T13634] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 450.495084][T13634] RSP: 002b:00007f7ddbdff038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 450.503531][T13634] RAX: ffffffffffffffda RBX: 00007f7ddc535f80 RCX: 00007f7ddc37e719 [ 450.511529][T13634] RDX: 000000000000007d RSI: 0000000000000084 RDI: 0000000000000006 [ 450.519517][T13634] RBP: 00007f7ddbdff090 R08: 00000000200000c0 R09: 0000000000000000 [ 450.527509][T13634] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 450.535504][T13634] R13: 0000000000000000 R14: 00007f7ddc535f80 R15: 00007ffdd634a568 [ 450.543514][T13634] [ 454.267721][T13686] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 454.828332][T13686] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 455.108548][ T29] audit: type=1326 audit(8277292229.030:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13690 comm="syz.7.1332" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6189b7e719 code=0x0 [ 457.960648][T13727] netlink: 4424 bytes leftover after parsing attributes in process `syz.7.1340'. [ 459.294758][T13738] svc: failed to register nfsdv3 RPC service (errno 111). [ 459.403028][T13738] svc: failed to register nfsaclv3 RPC service (errno 111). [ 462.858380][ T55] Bluetooth: hci4: command 0x0406 tx timeout [ 481.445399][T13991] HfR: entered promiscuous mode [ 481.491638][T13991] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1385'. [ 481.546513][T13991] HfR: left promiscuous mode [ 482.060853][T14001] netlink: zone id is out of range [ 482.093748][T14001] netlink: zone id is out of range [ 482.183673][T14001] netlink: zone id is out of range [ 482.250106][T14001] netlink: zone id is out of range [ 482.255270][T14001] netlink: zone id is out of range [ 482.426105][T14001] netlink: zone id is out of range [ 482.431277][T14001] netlink: zone id is out of range [ 482.505837][T14001] netlink: zone id is out of range [ 482.510995][T14001] netlink: zone id is out of range [ 482.607221][T14001] netlink: set zone limit has 4 unknown bytes [ 484.846321][T14063] netlink: 21 bytes leftover after parsing attributes in process `syz.6.1395'. [ 487.143518][ T30] INFO: task syz.1.1057:11703 blocked for more than 143 seconds. SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 487.183874][ T30] Not tainted 6.12.0-rc5-syzkaller-00047-g4236f913808c #0 [ 487.935876][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 487.944594][ T30] task:syz.1.1057 state:D stack:28592 pid:11703 tgid:11681 ppid:5845 flags:0x00000004 [ 488.045921][ T30] Call Trace: [ 488.049256][ T30] [ 488.052208][ T30] __schedule+0xe55/0x5730 [ 488.086029][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 488.126048][ T30] ? __pfx___schedule+0x10/0x10 [ 488.130974][ T30] ? schedule+0x298/0x350 [ 488.135331][ T30] ? __pfx_lock_release+0x10/0x10 [ 488.185991][ T30] ? trace_lock_acquire+0x14a/0x1d0 [ 488.191261][ T30] ? lock_acquire+0x2f/0xb0 [ 488.234689][ T30] ? schedule+0x1fd/0x350 [ 488.246108][ T30] schedule+0xe7/0x350 [ 488.250244][ T30] schedule_timeout+0x258/0x2a0 [ 488.255171][ T30] ? __pfx_schedule_timeout+0x10/0x10 [ 488.285844][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 488.291119][ T30] __wait_for_common+0x3e1/0x600 [ 488.312861][ T30] ? __pfx_schedule_timeout+0x10/0x10 [ 488.318641][ T30] ? __pfx___wait_for_common+0x10/0x10 [ 488.324143][ T30] ? __pfx_try_to_wake_up+0x10/0x10 [ 488.354431][ T30] wait_for_completion_state+0x1c/0x40 [ 488.360262][ T30] do_coredump+0x82f/0x4160 [ 488.382626][ T30] ? hlock_class+0x4e/0x130 [ 488.404307][ T30] ? stack_depot_save_flags+0x28/0x900 [ 488.423372][ T30] ? __pfx_do_coredump+0x10/0x10 [ 488.443501][ T30] ? kmem_cache_free+0x152/0x4b0 [ 488.461849][ T30] ? syscall_exit_to_user_mode+0x150/0x2a0 [ 488.485888][ T30] ? do_syscall_64+0xda/0x250 [ 488.490637][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 488.535974][ T30] get_signal+0x237c/0x26d0 [ 488.540552][ T30] ? lockdep_hardirqs_on+0x7c/0x110 [ 488.581802][ T30] ? __pfx_get_signal+0x10/0x10 [ 488.591537][ T30] ? force_sig_info_to_task+0x3a0/0x660 [ 488.620935][ T30] arch_do_signal_or_restart+0x90/0x7e0 [ 488.646301][ T30] ? __pfx_force_exit_sig+0x10/0x10 [ 488.651566][ T30] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 488.711544][ T30] syscall_exit_to_user_mode+0x150/0x2a0 [ 488.736031][ T30] do_syscall_64+0xda/0x250 [ 488.740596][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 488.779036][ T30] RIP: 0033:0x7f4c1717e719 [ 488.783506][ T30] RSP: 002b:00007f4c17fb70e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 488.835459][ T30] RAX: ffffffffffffffda RBX: 00007f4c17336138 RCX: 00007f4c1717e719 [ 488.855627][ T30] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f4c1733613c [ 488.911702][ T30] RBP: 00007f4c17336130 R08: 00007f4c17ffa080 R09: 0000000000000000 [ 488.965817][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f4c1733613c [ 488.990539][ T30] R13: 0000000000000000 R14: 00007fff421250a0 R15: 00007fff42125188 [ 489.046216][ T30] [ 489.049823][ T30] [ 489.049823][ T30] Showing all locks held in the system: [ 489.135861][ T30] 1 lock held by khungtaskd/30: [ 489.140765][ T30] #0: ffffffff8ddb7800 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x7f/0x390 [ 489.217191][ T30] 2 locks held by getty/5598: [ 489.221921][ T30] #0: ffff88814d7820a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 489.377839][ T30] #1: ffffc90002f062f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0xfba/0x1480 [ 489.445894][ T30] 2 locks held by kworker/0:4/5886: [ 489.451142][ T30] #0: ffff88801ac80948 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x1212/0x1b30 [ 489.566831][ T30] #1: ffffc90004497d80 (key_gc_work){+.+.}-{0:0}, at: process_one_work+0x8bb/0x1b30 [ 489.656008][ T30] 5 locks held by kworker/u8:17/8509: [ 489.661438][ T30] #0: ffff88801baed948 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x1212/0x1b30 [ 489.755859][ T30] #1: ffffc9000ce9fd80 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x8bb/0x1b30 [ 489.825986][ T30] #2: ffffffff8faaef10 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0xbb/0xb40 [ 489.835398][ T30] #3: ffffffff8fac4b28 (rtnl_mutex){+.+.}-{3:3}, at: cleanup_net+0x503/0xb40 [ 489.969393][ T30] #4: ffffffff8ddc30f8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: exp_funnel_lock+0x1a4/0x3b0 [ 490.045888][ T30] 2 locks held by kworker/u8:35/8528: [ 490.051309][ T30] #0: ffff888144eb5148 ((wq_completion)iou_exit){+.+.}-{0:0}, at: process_one_work+0x1212/0x1b30 [ 490.185933][ T30] #1: ffffc9000bf1fd80 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_one_work+0x8bb/0x1b30 [ 490.291994][ T30] 1 lock held by syz.1.1057/11682: [ 490.355857][ T30] 1 lock held by syz.7.1305/13545: [ 490.361325][ T30] 2 locks held by syz.6.1368/13884: [ 490.393726][ T30] 1 lock held by syz.9.1381/13975: [ 490.405927][ T30] 2 locks held by syz.0.1396/14072: [ 490.411178][ T30] 2 locks held by dhcpcd/14109: [ 490.435886][ T30] #0: ffff888065c80e08 (&sb->s_type->i_mutex_key#10){+.+.}-{3:3}, at: __sock_release+0x86/0x270 [ 490.476122][ T30] #1: ffffffff8ddc30f8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: exp_funnel_lock+0x1a4/0x3b0 [ 490.515868][ T30] 2 locks held by syz.9.1404/14113: [ 490.521138][ T30] #0: ffffffff8faaef10 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x292/0x6b0 [ 490.555863][ T30] #1: ffffffff8fac4b28 (rtnl_mutex){+.+.}-{3:3}, at: ip_tunnel_init_net+0x1b0/0x6e0 [ 490.585836][ T30] [ 490.588208][ T30] ============================================= [ 490.588208][ T30] [ 490.615881][ T30] NMI backtrace for cpu 1 [ 490.620256][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.12.0-rc5-syzkaller-00047-g4236f913808c #0 [ 490.630761][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 490.643161][ T30] Call Trace: [ 490.646447][ T30] [ 490.649380][ T30] dump_stack_lvl+0x116/0x1f0 [ 490.654066][ T30] nmi_cpu_backtrace+0x27b/0x390 [ 490.659017][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 490.665017][ T30] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 490.671008][ T30] watchdog+0xf0c/0x1240 [ 490.675267][ T30] ? __pfx_watchdog+0x10/0x10 [ 490.679957][ T30] ? lockdep_hardirqs_on+0x7c/0x110 [ 490.685522][ T30] ? __kthread_parkme+0x148/0x220 [ 490.690552][ T30] ? __pfx_watchdog+0x10/0x10 [ 490.695243][ T30] kthread+0x2c1/0x3a0 [ 490.699317][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 490.704531][ T30] ? __pfx_kthread+0x10/0x10 [ 490.709158][ T30] ret_from_fork+0x45/0x80 [ 490.713593][ T30] ? __pfx_kthread+0x10/0x10 [ 490.718203][ T30] ret_from_fork_asm+0x1a/0x30 [ 490.723003][ T30] [ 490.726719][ T30] Sending NMI from CPU 1 to CPUs 0: [ 490.731973][ C0] NMI backtrace for cpu 0 [ 490.731988][ C0] CPU: 0 UID: 0 PID: 13635 Comm: syz.0.1320 Not tainted 6.12.0-rc5-syzkaller-00047-g4236f913808c #0 [ 490.732013][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 490.732025][ C0] RIP: 0010:unwind_next_frame+0xaad/0x20c0 [ 490.732053][ C0] Code: e9 ae f5 ff ff 4c 89 f7 e8 40 05 b1 00 e9 a5 f6 ff ff e8 66 05 b1 00 e9 62 f6 ff ff e8 8c a8 c3 ff e9 f0 f8 ff ff 4d 8d 7e f8 08 00 00 00 4c 89 ef 4c 89 4c 24 20 4c 89 fe 48 89 4c 24 18 e8 [ 490.732073][ C0] RSP: 0018:ffffc90004f6ee08 EFLAGS: 00000046 [ 490.732090][ C0] RAX: 0000000000000002 RBX: 0000000000000001 RCX: ffffffff90acb74a [ 490.732104][ C0] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000001 [ 490.732117][ C0] RBP: ffffc90004f6ef10 R08: ffffffff90acb750 R09: ffffffff90acb74e [ 490.732132][ C0] R10: ffffc90004f6eec8 R11: 0000000000003d12 R12: ffffc90004f6ef18 [ 490.732146][ C0] R13: ffffc90004f6eec8 R14: ffffc90004f6eec8 R15: ffffc90004f6eec0 [ 490.732161][ C0] FS: 0000000000000000(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 490.732182][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 490.732197][ C0] CR2: 000056307f2e7680 CR3: 000000000db7c000 CR4: 00000000003526f0 [ 490.732212][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 490.732224][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 490.732237][ C0] Call Trace: [ 490.732244][ C0] [ 490.732251][ C0] ? nmi_cpu_backtrace+0x1d8/0x390 [ 490.732279][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 490.732307][ C0] ? nmi_handle+0x1a9/0x5c0 [ 490.732329][ C0] ? unwind_next_frame+0xaad/0x20c0 [ 490.732351][ C0] ? default_do_nmi+0x6a/0x160 [ 490.732374][ C0] ? exc_nmi+0x170/0x1e0 [ 490.732396][ C0] ? end_repeat_nmi+0xf/0x53 [ 490.732429][ C0] ? unwind_next_frame+0xaad/0x20c0 [ 490.732451][ C0] ? unwind_next_frame+0xaad/0x20c0 [ 490.732473][ C0] ? unwind_next_frame+0xaad/0x20c0 [ 490.732494][ C0] [ 490.732500][ C0] [ 490.732507][ C0] ? __unwind_start+0x54c/0x7c0 [ 490.732527][ C0] ? get_stack_info_noinstr+0x18/0x120 [ 490.732553][ C0] __unwind_start+0x437/0x7c0 [ 490.732573][ C0] ? hlock_class+0x4e/0x130 [ 490.732596][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 490.732620][ C0] arch_stack_walk+0x74/0x100 [ 490.732645][ C0] ? __unwind_start+0x54c/0x7c0 [ 490.732667][ C0] stack_trace_save+0x95/0xd0 [ 490.732688][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 490.732711][ C0] ? __lock_acquire+0xbdd/0x3ce0 [ 490.732740][ C0] kasan_save_stack+0x33/0x60 [ 490.732785][ C0] __kasan_record_aux_stack+0xba/0xd0 [ 490.732806][ C0] ? __pfx_radix_tree_node_rcu_free+0x10/0x10 [ 490.732832][ C0] __call_rcu_common.constprop.0+0x99/0x7a0 [ 490.732865][ C0] xas_store+0xc87/0x1960 [ 490.732897][ C0] __filemap_remove_folio+0x368/0x570 [ 490.732926][ C0] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 490.732954][ C0] ? __pfx___filemap_remove_folio+0x10/0x10 [ 490.732983][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 490.733004][ C0] ? lock_acquire+0x2f/0xb0 [ 490.733030][ C0] ? filemap_remove_folio+0xbe/0x210 [ 490.733059][ C0] filemap_remove_folio+0xc8/0x210 [ 490.733086][ C0] truncate_inode_folio+0x49/0x70 [ 490.733106][ C0] shmem_undo_range+0x36e/0x1170 [ 490.733135][ C0] ? __pfx_shmem_undo_range+0x10/0x10 [ 490.733170][ C0] ? mark_lock+0xb5/0xc60 [ 490.733197][ C0] ? hlock_class+0x4e/0x130 [ 490.733218][ C0] ? mark_lock+0xb5/0xc60 [ 490.733255][ C0] ? __pfx___lock_acquire+0x10/0x10 [ 490.733282][ C0] ? hlock_class+0x4e/0x130 [ 490.733304][ C0] ? __lock_acquire+0x163e/0x3ce0 [ 490.733332][ C0] shmem_evict_inode+0x3a3/0xba0 [ 490.733357][ C0] ? find_held_lock+0x2d/0x110 [ 490.733380][ C0] ? __pfx_shmem_evict_inode+0x10/0x10 [ 490.733404][ C0] ? evict+0x3c8/0x970 [ 490.733427][ C0] ? __pfx_lock_release+0x10/0x10 [ 490.733463][ C0] ? lock_acquire+0x2f/0xb0 [ 490.733490][ C0] ? __pfx_shmem_evict_inode+0x10/0x10 [ 490.733515][ C0] evict+0x409/0x970 [ 490.733538][ C0] ? __pfx_evict+0x10/0x10 [ 490.733568][ C0] iput+0x530/0x890 [ 490.733589][ C0] ? __pfx_generic_delete_inode+0x10/0x10 [ 490.733612][ C0] dentry_unlink_inode+0x29c/0x480 [ 490.733638][ C0] __dentry_kill+0x1d0/0x600 [ 490.733664][ C0] dput.part.0+0x4b1/0x9b0 [ 490.733691][ C0] dput+0x1f/0x30 [ 490.733715][ C0] __fput+0x513/0xb60 [ 490.733743][ C0] task_work_run+0x14e/0x250 [ 490.733771][ C0] ? __pfx_task_work_run+0x10/0x10 [ 490.733802][ C0] do_exit+0xadd/0x2d70 [ 490.733829][ C0] ? __pfx_do_exit+0x10/0x10 [ 490.733857][ C0] do_group_exit+0xd3/0x2a0 [ 490.733895][ C0] get_signal+0x2658/0x26d0 [ 490.733921][ C0] ? __pfx_get_signal+0x10/0x10 [ 490.733943][ C0] ? rcu_is_watching+0x12/0xc0 [ 490.733964][ C0] ? trace_irq_disable.constprop.0+0xe4/0x130 [ 490.733994][ C0] arch_do_signal_or_restart+0x90/0x7e0 [ 490.734022][ C0] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 490.734052][ C0] ? do_user_addr_fault+0xa4b/0x13f0 [ 490.734084][ C0] irqentry_exit_to_user_mode+0x13f/0x280 [ 490.734114][ C0] asm_exc_page_fault+0x26/0x30 [ 490.734141][ C0] RIP: 0033:0x0 [ 490.734155][ C0] Code: Unable to access opcode bytes at 0xffffffffffffffd6. [ 490.734164][ C0] RSP: 002b:0000000000000009 EFLAGS: 00010217 [ 490.734179][ C0] RAX: 0000000000000000 RBX: 00007f7ddc535f80 RCX: 00007f7ddc37e719 [ 490.734193][ C0] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000020003b46 [ 490.734206][ C0] RBP: 00007f7ddc3f132e R08: 0020000000020002 R09: 0000000000000000 [ 490.734220][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 490.734233][ C0] R13: 0000000000000000 R14: 00007f7ddc535f80 R15: 00007ffdd634a568 [ 490.734254][ C0] [ 490.945854][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 490.945873][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.12.0-rc5-syzkaller-00047-g4236f913808c #0 [ 490.945903][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 490.945918][ T30] Call Trace: [ 490.945926][ T30] [ 490.945937][ T30] dump_stack_lvl+0x3d/0x1f0 [ 490.945969][ T30] panic+0x71d/0x800 [ 490.946001][ T30] ? __pfx_panic+0x10/0x10 [ 490.946032][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 490.946062][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 490.946102][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 490.946129][ T30] ? watchdog+0xd76/0x1240 [ 490.946161][ T30] ? watchdog+0xd69/0x1240 [ 490.946197][ T30] watchdog+0xd87/0x1240 [ 490.946234][ T30] ? __pfx_watchdog+0x10/0x10 [ 490.946264][ T30] ? lockdep_hardirqs_on+0x7c/0x110 [ 490.946299][ T30] ? __kthread_parkme+0x148/0x220 [ 490.946329][ T30] ? __pfx_watchdog+0x10/0x10 [ 490.946361][ T30] kthread+0x2c1/0x3a0 [ 490.946386][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 490.946416][ T30] ? __pfx_kthread+0x10/0x10 [ 490.946444][ T30] ret_from_fork+0x45/0x80 [ 490.946466][ T30] ? __pfx_kthread+0x10/0x10 [ 490.946493][ T30] ret_from_fork_asm+0x1a/0x30 [ 490.946539][ T30] [ 491.423996][ T30] Kernel Offset: disabled [ 491.428324][ T30] Rebooting in 86400 seconds..