last executing test programs: 10.883260992s ago: executing program 2 (id=3): ioperm$auto(0x7, 0x6, 0x1) openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000000), 0x500, 0x0) unshare$auto(0x40000080) close_range$auto(0x2, 0x8, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/net/bond0/flags\x00', 0x101142, 0x0) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) execve$auto(0x0, 0x0, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/system/clocksource/clocksource0/current_clocksource\x00', 0x8502, 0x0) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) write$auto(0x3, 0x0, 0x100082) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket(0x840000000002, 0x3, 0xff) fcntl$auto_F_SETLKW(r1, 0x7, r0) r2 = prctl$auto_PR_SET_ENDIAN(0x14, 0x404, r0, 0xfffffffffffffff8, 0x8) r3 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_THREADS_SET(r2, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x3c, r3, 0x100, 0x70bd26, 0x25dfdbfd, {}, [@NFSD_A_SERVER_LEASETIME={0x8, 0x3, 0x8}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0x7}, @NFSD_A_SERVER_LEASETIME={0x8, 0x3, 0x5}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0x1c0}, @NFSD_A_SERVER_LEASETIME={0x8, 0x3, 0x200}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8011}, 0x20004001) bpf$auto(0x0, &(0x7f0000000100)=@task_fd_query={0x7, 0x4, 0x200, 0x1001, 0x0, 0xf, 0xffffffffffffffff, 0x1400000, 0x5}, 0x6f4) 9.872942004s ago: executing program 2 (id=9): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyprintk\x00', 0x40001, 0x0) write$auto(0x3, 0x0, 0xfdef) ioctl$auto_TIOCVHANGUP2(0xffffffffffffffff, 0x5437, 0x0) getrandom$auto(0x0, 0xe, 0x7) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) r0 = socket(0x2, 0x1, 0x0) fcntl$auto(0x3, 0x4, 0xa553) mmap$auto(0x0, 0x3, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) mlockall$auto(0x7) shmget$auto(0x400, 0x10563, 0x568c12f2) shmat$auto(0x0, &(0x7f0000000580)='(\x00', 0xfffffffa) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sda\x00', 0x8001, 0x0) ioctl$auto(r2, 0x5387, r1) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0xffff, @dev={0xac, 0x14, 0x14, 0xd}}, 0x6a) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x101, 0x0, 0x5, 0x9ad}, 0x5}, 0x5, 0x20000000) 9.072375361s ago: executing program 2 (id=12): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/platform/usbip-vudc.0/usbip_status\x00', 0x20440, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f00000000c0)=""/82, 0x52) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = mq_open$auto(&(0x7f00000000c0)='\x12\xe6D\b\x9e\x00\x80\x8d\f\xb9w-\xbd!\x9eb\xed\xfb\x0f\xe5\x9dZ\xc2\xd1\x01wBV\x91\x8f_\xc0.\x84\xfe\x84\xd1se\x01\x06\x00\xb3\x13_Y&\xa9\x88\xe4\xa2\xb0V\x85\x92<\xb6\xdcT \\\xf2\v\xb1\xe2\xd8\xfa\xd8V\xe5\x00\xfa\xe9!\xc5<\xce\x18=\x06\xdagq\xb5\r\t\xb2\xde\x99\xd50\xbb\x192\x1c4\x86\xc0\xc1-\xd5\x10\xc3\xfc*[8\x89h\xc5\xba\xff\xc8u5\x1eJJ1\xcc8\xc9\xee\xa7{\x9dY\x9f-\xa7|\x92r\x19\x053\x12\xecS\x96\xb2\xfd~N\xce\xf9\xb4\xc7~\xd2\x05\xa7\x896\x1c\x8b5\'\xec]\xe7t\xa3-\f;\xeb\x89+\x06\xac\xcf\xab\x8d\x91\xa3\xb2\xd8\x87\xce\rM\xcd}!\x8c\x7fx\xfb\xe2\t\xff\xc9\x1eRJG\xf3pi\t\x7f\x87\xf1D\xa2,>z\x8e\xf3\xfcl\xe0h\x15w\xbe\xdb\xa1]\xac~\xb6\xc1\xec4\x1d\x90\x16H\xbd\xf9\xb8\x83\xebV#\xdc:2Z\x12\xb2\xe5f\xcaW.B\xdc\x9cA\x12tQ\x8d\x8bn\xd17E\x14\xdd\xb2\xbf7\x03\xdev\xebD\xe8d\x1d\xdd\x8e\x1f\x8f\xd7F\xa2\xe2\xa6\x9c\x87Y\xe8\xe3\xe4\x7f\xf5\xf1\xf9\x8c\x95\xbe\xf6u\x15\x06\xf2-u{D\xb3De\x16\"\x9d\xa8L\xa2y7\x90\xa8\xd1\x051\xb4 }-\xfb\xd8\xff=\xf0\x87\xb3\x8f\x96\x97\xaa\x98\xc1\xaf_Q\xc14\xe2(\b\xb2gz\x0e\x10\x19\x044\xa6\xd4W\x99\tl\xc4A\xd6\xc9\x82\xfa\xe6\x97\fqE\x1eI|?\t]\x14I\x11\xbaS\x97\xb5F\xf9\x06\xf6\xae.\xa1\xb9\x1by\f\x03\x1b\xd3\xbf\xfa\xd6\xdeJ\x91\x05\xff\xb1\xd7\xa8\n=\xb6\xb61\x80', &(0x7f0000000080)='W\x00') ioctl$auto(r1, 0x5, r1) 4.106804619s ago: executing program 0 (id=27): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) preadv$auto(0x40000000000003, &(0x7f0000000080)={0x0, 0xfffffffd}, 0x6, 0x8, 0x5) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) io_uring_setup$auto(0x6, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x181081, 0x0) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) r1 = openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0) ioctl$auto_SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, 0x0) r2 = openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0) ioctl$auto_SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, 0x0) ioctl$auto(0x3, 0xc0303e03, r0) r3 = socket(0x0, 0x0, 0x1) sendmsg$auto_NFC_CMD_DEP_LINK_DOWN(r3, 0x0, 0x20000001) sendmsg$auto_NL80211_CMD_GET_MPP(r3, 0x0, 0x880) munmap$auto(0x8000, 0xffffffff) close_range$auto(0x2, 0x8, 0x0) 3.791318014s ago: executing program 3 (id=28): mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) write$auto(0xffffffffffffffff, 0x0, 0x2) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/card1/timer_source\x00', 0x189001, 0x0) write$auto(r0, 0x0, 0xe) close_range$auto(0x2, 0x8, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x80, 0x0) r1 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$auto_SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f00000000c0)={{0x0, 0x2, 0x200800, 0xffffffff, 0xfffffffb}, "0dd7fd004929347eeeccdf0732f77b1f6de0d6d51768a257a97ca5e9ca6310ea"}) ioctl$auto_SNDRV_TIMER_IOCTL_CONTINUE(r1, 0x54a2, 0x0) pread64$auto(0xffffffffffffffff, 0x0, 0x8100000041, 0x413e) mmap$auto(0xffffffffffffffff, 0x20009, 0x4000000000df, 0x13, 0x401, 0x7ffe) mmap$auto(0x0, 0x20009, 0x120000000, 0x40000000000eb1, 0x401, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x20006, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0xf1, 0x2, 0x8000) io_uring_setup$auto(0x6, 0x0) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, 0x0, 0x0, 0x0) timer_create$auto(0x3, 0x0, &(0x7f0000000140)=0x6) exit$auto(0x6) mmap$auto(0x2, 0x40000000000000c, 0xfffffffffffffffc, 0x9b7e, 0x2, 0x8cf6) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyprintk\x00', 0x40001, 0x0) write$auto(r2, 0x0, 0xeffd) mmap$auto(0x7fffffffffffffff, 0x40009, 0xa, 0x9b72, 0x2, 0x28000) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/pagemap\x00', 0x121800, 0x0) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mmap$auto(0x700000000, 0x13c, 0x6, 0x9b72, 0x2, 0x8000) socket(0x2, 0x5, 0x0) 3.41306352s ago: executing program 0 (id=29): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) syz_clone(0x40100100, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/tty/ttyyb/power/runtime_suspended_time\x00', 0x8ea182, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f0000000000)="42bf46", 0x3) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/mm/transparent_hugepage/hugepages-512kB/enabled\x00', 0x129302, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) init_module$auto(0x0, 0xfffff, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x8, 0x4, 0x1) madvise$auto(0x0, 0x8000000000000000, 0x15) sendmsg$auto_NETDEV_CMD_DEV_GET(r0, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c040000", @ANYRES16=0x0, @ANYBLOB="000129bd7000fbdbdf250100000008000100", @ANYRES32=0x0, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x8881) madvise$auto(0x0, 0x2000000080000001, 0x3) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) capget$auto(0x0, 0xfffffffffffffffe) capset$auto(0x0, 0x0) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x80, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x0, 0x100000000008000) shutdown$auto(0x200000003, 0x2) mremap$auto(0x4000, 0xfee0, 0x3fd6, 0x3, 0xfffff000) mmap$auto(0x200000000000000, 0x400006, 0xdf, 0x12, 0x2, 0x8001) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000100), r2) sendmsg$auto_NL802154_CMD_GET_SEC_LEVEL(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010f2cbd0300000000000000000008000300", @ANYRES32=0x0, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x40084}, 0x40) sendmsg$auto_NL802154_CMD_SEND_BEACONS(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="00000100f4afcb06eb729a2f1015ffad68207576e322cdc06ee90a48f8f5d6ba8c34009b34bab7caeb16027945f5a1705a", @ANYBLOB="d75612fde62eeb916a67", @ANYBLOB="02002cbd70000300"/18], 0x28}, 0x1, 0x0, 0x0, 0x4100}, 0x91) mbind$auto(0x400000002000, 0x100000008, 0x100000000, 0x0, 0x81, 0x2) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, 0x0, 0x80800, 0x0) 2.485637343s ago: executing program 3 (id=30): r0 = socket(0x2, 0x2, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) lsm_list_modules$auto(0x0, 0x0, 0x0) mmap$auto(0xaaaa, 0x20409, 0xdc, 0x14, 0x401, 0x8000) r1 = syz_clone(0x40100100, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = prctl$auto(0x3e, 0xfffffffffffffffd, r1, 0xffffffff00000001, 0x0) r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000200), r0) sendmsg$auto_NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x48, r3, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@NL80211_ATTR_EHT_CAPABILITY={0x33, 0x136, "985b7e2ef356f21c7619659fb4061ac575e82148253c8c72cf95322293db3d780ad54a396741a30031f962af8fda0c"}]}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x4) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) r4 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) r5 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000540)='/dev/tty45\x00', 0x201, 0x0) pwrite64$auto(0xc8, &(0x7f0000000000)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x89\x06s\x1cJ\x99\x00:\x00!\r>\x94\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\xf1`\x9f\x1e\xf9\xa4\xf8\x15\x02l@\x18*\xc0\xc1\xf2\x14^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2', 0x10, 0x6) ioctl$auto_TIOCSTI2(r5, 0x5412, &(0x7f0000000840)="12915fb9d5") openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/bus/usb/drivers/usbtouchscreen/new_id\x00', 0xbce02, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000bc0), r2) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_tcp_metrics(&(0x7f00000001c0), r4) unshare$auto(0x40000080) mmap$auto(0x0, 0x40009, 0x3, 0x9b72, 0x7, 0x28000) sysfs$auto(0x2, 0x10000000000002d, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7fffffff, 0xd, 0x2, 0x6, 0x7, 0x8, 0xffffffffffffffff, [], {0x6, 0x6, 0xf, 0x29f, 0x100, 0x83, 0x101, 0x6, 0x2}, {0x100, 0x1, 0x52, 0x5, 0x1, 0x40, 0x76c5, 0x8, 0x100000000}}) io_uring_register$auto(0x2, 0x11, &(0x7f0000000180), 0x83) 2.198995834s ago: executing program 1 (id=31): openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000080)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x4000000000007, 0xa505}, 0x800}, 0x4, 0x4008) r0 = socket(0x29, 0x2, 0x0) r1 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200", @ANYBLOB="5de1"], 0x1ac}}, 0x40000) recvmmsg$auto(r1, &(0x7f0000000040)={{0x0, 0x5, 0x0, 0x5, 0x0, 0x200002, 0x13}, 0x803}, 0xfffffff9, 0x10, 0x0) ioctl$auto(r0, 0x8931, 0x24) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0xe0002, 0x0) close_range$auto(0x2, 0xa, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000340)='/sys/devices/platform/vhci_hcd.0/usbip_debug\x00', 0x8002, 0x0) r3 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x40802, 0x0) read$auto(r3, 0x0, 0xb4d3) clock_adjtime$auto(0x0, &(0x7f0000000040)={0xfbb, 0x0, 0x7f, 0xfffffffff7fffffe, 0x600, 0x1, 0x7, 0x0, 0x7, 0x8, 0x5, {0x3ff, 0x7}, 0xfffffffffffffffa, 0xa5, 0xa, 0x13c, 0x0, 0xc3, 0x1000, 0x800000000000007, 0x5, 0x90, 0xfffffff5}) write$auto(r2, 0x0, 0x7ff) write$auto(0x3, 0x0, 0xffd8) readv$auto(0x3, 0x0, 0x1) 1.329341925s ago: executing program 1 (id=32): r0 = socket(0x28, 0x1, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000001a40), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_CABLE_TEST_TDR_ACT(0xffffffffffffffff, &(0x7f0000002f40)={0x0, 0x0, &(0x7f0000002f00)={&(0x7f00000001c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="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"], 0x20}, 0x1, 0x0, 0x0, 0x801}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'veth0_to_bridge\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$auto_NL80211_CMD_SET_WOWLAN(r3, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000001180)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="0100ff000000000000ea4900000008000300", @ANYRES32=r5], 0x1c}}, 0x14000080) r6 = socket(0x2, 0x6, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'bond_slave_1\x00', 0x0}) sendmsg$auto_ETHTOOL_MSG_CABLE_TEST_TDR_ACT(0xffffffffffffffff, &(0x7f0000021740)={0x0, 0x0, &(0x7f0000021700)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r7], 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x4004804) sendmsg$auto_ETHTOOL_MSG_FEC_SET(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0x78, r1, 0x200, 0x70bd2b, 0x25dfdbff, {}, [@ETHTOOL_A_FEC_HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}]}, @ETHTOOL_A_FEC_MODES={0xc, 0x2, 0x0, 0x1, [@typed={0x8, 0xb7, 0x0, 0x0, @fd=r0}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x400001c}, 0x4040000) connect$auto(0x3, &(0x7f00000000c0)=@vsock={0x28, 0x0, 0x2710, @my=0x1}, 0x55) setsockopt$auto(0x3, 0x1, 0x3c, 0x0, 0x9) 874.780231ms ago: executing program 1 (id=33): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) fanotify_init$auto(0x5, 0x2000000000002) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x26, 0x80805, 0x0) clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r2 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f00000000c0), r1) sendmsg$auto_NL802154_CMD_GET_SEC_KEY(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB="78e00000", @ANYRES16=r2, @ANYBLOB="020029bd7000fcdbdf25160000000500240003000000050010000800000054022e801400c200ff010000000000000000000000000001040035003802dd800400d3004f0f27b03dc463047f8c88e95cab23364c64ccadfc6c0c4095a524d254998465725f96fa847ee9e99ae1ea8f22e258912ea26785b1f8615a35e793f1bdb5d00ccbb447f658adf3d6d987972fb4ad82effe3943aa5b0ad0498b7c282d6adcf0603aa0b378afd2d323107c99cea1ea497f6b54e0fde737596c8629398239c842f29b00b7a81fd3d90eb1f4061b55d0c1a504f8c2bc4b72bf040034800400168008008f00", @ANYRES32=r0, @ANYBLOB="0400c78075cbd79365bd9b5fcac1293bdc39aad082e5b2fecdd1bc0752923c3661884366393fd7d62cc2e26df2433a89bbaf1c1485a02ece437ee7534571c510311f425fc4c289c56129221c2f35d4aec85a302714ea3aa87be7610adc735c203416ecb40a15f0ccc37afa46c7747e3cc7b0d1989835204eb20ab57e1d9304891c2f85c4548f2e41e263e2d39ee3f3619783ae5bcd0ead78a07305a240dab052a862a61ecef4bd1f25c662050fbd5566faaaa4e44e56f1eaa67f2eb2bf8a3ee3d1852addd1bd57ed072c69a0791eeb170dac801ffbc9b6a7eb1a0f7fa28e02080c4f4a846a3c4aa2075a2e0a195e0647a5e26b766fc466d237b769ed1d7ee6970c27f0438719719045314d741bfd77cfc30edc36bc3693e4d5cb2c8f40954457e8bc093a8bc6488b12c04801006d7956318cda4aa6e709e190681c596708b02ae93b07c62fa9346fea7ce006b07b1a7dbaadbbb2b00e32461fc0edd7d7bbb29ef4dd5435181486e50ffd8a76ef2ad9a48eca36dd5624d7270da2512fc40e3ff12b000f17f1e4e97ca8"], 0x278}}, 0x810) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000380)='/sys/devices/system/cpu/cpu1/hotplug/target\x00', 0x800, 0x0) r4 = open(&(0x7f0000000180)='./file0\x00', 0x80000, 0x10) read$auto(r3, 0x0, 0x6) r5 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r5, &(0x7f0000000200)={0x0, 0x7}, 0x3) write$auto(r5, &(0x7f0000000040)='/sys/devices/system/cpu/cpu1/hotplug/target\x00', 0x5) r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/hugetlb.1GB.rsvd.limit_in_bytes\x00', 0xc2481, 0x0) write$auto(r6, &(0x7f0000000040)='\xdb\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x8) dup2$auto(r4, r0) unshare$auto(0x40000080) ioctl$auto(0x3, 0xff09, 0x0) 373.520389ms ago: executing program 0 (id=34): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_msr_fops_msr(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cpu/0/msr\x00', 0x181f82, 0x0) mmap$auto(0x0, 0x20009, 0xe0, 0xeb1, 0xffffffffffffffff, 0x4) readv$auto(r0, &(0x7f00000000c0)={0x0, 0x101d0}, 0x400) madvise$auto(0x0, 0xffffffffffff0005, 0x17) r1 = socket(0x10, 0x2, 0x4) mmap$auto(0x0, 0x2000d, 0x4000000200df, 0xeb1, 0x404, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x800) bpf$auto(0x9, &(0x7f00000001c0)=@test={r1, 0x10000, 0x7, 0x1000, 0x101, 0x0, 0x0, 0xfff, 0x10000, 0x8, 0x7fc00000000, 0x4, 0x4, 0x2}, 0x6f3) sendmsg$auto_ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="d4000000", @ANYRES16=0x0, @ANYRES32=0x0], 0xd4}, 0x1, 0x0, 0x0, 0x20000010}, 0x20008000) r2 = socket(0x1d, 0x3, 0x1) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) capget$auto(0x0, 0xfffffffffffffffe) getsockopt$auto(r2, 0x65, 0x1, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) madvise$auto(0x0, 0x8000000000000000, 0x15) madvise$auto(0x0, 0x1010001, 0x100000003) 199.623935ms ago: executing program 3 (id=35): socket(0x2a, 0x1, 0x0) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS1\x00', 0x20000, 0x0) ioctl$auto_TIOCGDEV2(r0, 0x80285442, 0x0) ioctl$auto_FUSE_DEV_IOC_BACKING_CLOSE(0xffffffffffffffff, 0x4004e502, 0x0) ioprio_set$auto(0x6, 0x0, 0x8) statmount$auto(0x0, &(0x7f0000000180)={0x1, 0x1, 0x1000009, 0x3, 0x22, 0x940, 0x9ffde, 0x5, 0x6, 0x3ff, 0x9, 0x400005, 0xfff, 0x4, 0xb0, 0x8, 0x9, 0x3, 0x5, 0x6, 0x6, 0xffffffff, 0x0, 0x3, 0x80, 0x0, [0x3, 0x5, 0x200000000, 0x3ff, 0x0, 0x500, 0xfffffffffffffffd, 0x8, 0x3, 0x0, 0xc72, 0x7ffffffffffffffd, 0x0, 0x1, 0x0, 0x0, 0x40000000004, 0x5, 0x1000000800, 0x0, 0x0, 0x0, 0x9, 0x10000040000000, 0xcea, 0x0, 0xfffffffffffffffc, 0x800000, 0xfffffffffffffffa, 0x4, 0xffffffffffffffff, 0x2, 0x4001, 0xfffffffffffffffd, 0x0, 0xb548, 0x8, 0x0, 0xfffffffffffffff9, 0x0, 0x6c1a, 0x1, 0x0, 0x9f, 0x0, 0x3]}, 0x200, 0x81) mmap$auto(0x0, 0x2020009, 0x3, 0xeb2, 0xfffffffffffffffb, 0x8000) socketpair$auto(0x4000001a, 0x10000001, 0x5, 0x0) mmap$auto(0x0, 0x100004005, 0x800002, 0x40eb2, 0x401, 0x300000000000) prctl$auto(0x1, 0x4, 0x4, 0x3, 0x4) mmap$auto(0x0, 0x400005, 0xffffffffffeffffe, 0x9b72, 0xc76, 0x8000) close_range$auto(0x2, 0x8, 0x0) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x4008081}, 0x10004010) socket(0x2, 0x80802, 0x0) r1 = socket(0x2, 0x1, 0x0) fcntl$auto(0x3, 0x4, 0xa553) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0xffff, @remote}, 0x6a) sendmmsg$auto(r1, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x5, 0x20000000) r2 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_fastopen_blackhole_timeout_sec\x00', 0x0, 0x0) socket(0x2, 0x801, 0x100) connect$auto(0x3, &(0x7f00000000c0), 0x55) recvmmsg$auto(0x3, 0x0, 0x10000, 0x6, 0x0) connect$auto(r2, &(0x7f0000000140)=@in={0x2, 0x0, @loopback}, 0x5) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x10}, 0x3, 0x1) select$auto(0xa, &(0x7f0000000180)={[0x80000000, 0xbfd3, 0x44, 0x1, 0x3, 0x7fffffffffffffff, 0x8, 0x4, 0x1, 0x8, 0x5, 0x9, 0xfffffffffffffffc, 0x9000000000, 0x9, 0x33ca]}, &(0x7f0000000240)={[0x8, 0xf, 0x7, 0x3ff, 0x9fed, 0x100000001, 0x800000000, 0x5, 0x5, 0x1, 0x7, 0xb, 0x63, 0x1, 0x1, 0x6]}, 0x0, 0x0) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) mmap$auto(0x0, 0x40000202000d, 0x3, 0xebd, 0xfffffffffffffffa, 0xb) read$auto(0xffffffffffffffff, 0x0, 0x20) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) openat$auto_proc_pid_set_comm_operations_base(0xffffffffffffff9c, 0x0, 0x10500, 0x0) 0s ago: executing program 2 (id=36): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x2, 0x1, 0x0) mmap$auto(0x0, 0x400005, 0xfffffffffffffffe, 0x9b72, 0x2, 0x8000) socket(0x10, 0x2, 0x0) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB='\a\x00\x00'], 0x14}, 0x1, 0x0, 0x0, 0x20008000}, 0x10004010) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1a00"], 0x1ac}}, 0x40000) r1 = socket(0x1e, 0x1, 0x0) getsockname$auto(r1, 0x0, &(0x7f0000000040)=0xd1) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x20000800) socket(0xa, 0x3, 0x3a) setsockopt$auto(0x400000000000003, 0x29, 0xc8, 0x0, 0x567) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_tracing_cpumask_fops_trace(0xffffffffffffff9c, 0x0, 0x8002, 0x0) close_range$auto(0x2, 0xa, 0x0) socket(0x18, 0xa, 0x1) socket(0xa, 0x2, 0x0) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "ab06fdffff00fff500"}, 0x55) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) close_range$auto(0x2, 0x8, 0x0) openat$auto_uprobe_events_ops_trace_uprobe(0xffffffffffffff9c, &(0x7f00000009c0)='/sys/kernel/tracing/uprobe_events\x00', 0x302, 0x0) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4ea2, @remote}, 0x6a) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0x101}, 0x8}, 0x7, 0x20020000) syz_genetlink_get_family_id$auto_nl80211(0x0, r0) setsockopt$auto(0x3, 0x1, 0x25, 0x0, 0x3) write$auto(0x3, 0x0, 0xfffffdef) move_pages$auto(0x0, 0xd0, 0x0, 0x0, 0x0, 0x2) socket$nl_generic(0x10, 0x3, 0x10) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.10.28' (ED25519) to the list of known hosts. [ 75.375799][ T5829] cgroup: Unknown subsys name 'net' [ 75.490945][ T5829] cgroup: Unknown subsys name 'cpuset' [ 75.499426][ T5829] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 76.490461][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 76.496950][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 77.112867][ T5829] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 78.917600][ T5841] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 78.937897][ T5847] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 78.945572][ T5847] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 78.954993][ T5853] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 78.963811][ T5853] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 78.971705][ T5853] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 78.979182][ T5853] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 78.989894][ T5853] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 78.994577][ T5849] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 78.997354][ T5853] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 79.012853][ T5853] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 79.020106][ T5849] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 79.030869][ T5847] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 79.040352][ T5853] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 79.049412][ T5853] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 79.054768][ T5847] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 79.058709][ T5853] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 79.072087][ T5847] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 79.083549][ T5846] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 79.091255][ T5846] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 79.441959][ T5850] chnl_net:caif_netlink_parms(): no params data found [ 79.502289][ T5838] chnl_net:caif_netlink_parms(): no params data found [ 79.536210][ T5844] chnl_net:caif_netlink_parms(): no params data found [ 79.591572][ T5843] chnl_net:caif_netlink_parms(): no params data found [ 79.608847][ T5850] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.616229][ T5850] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.624408][ T5850] bridge_slave_0: entered allmulticast mode [ 79.631444][ T5850] bridge_slave_0: entered promiscuous mode [ 79.644547][ T5850] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.651854][ T5850] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.659184][ T5850] bridge_slave_1: entered allmulticast mode [ 79.665914][ T5850] bridge_slave_1: entered promiscuous mode [ 79.728942][ T5850] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.760377][ T5850] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.832111][ T5850] team0: Port device team_slave_0 added [ 79.838335][ T5844] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.845447][ T5844] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.853293][ T5844] bridge_slave_0: entered allmulticast mode [ 79.860793][ T5844] bridge_slave_0: entered promiscuous mode [ 79.868511][ T5844] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.875675][ T5844] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.882945][ T5844] bridge_slave_1: entered allmulticast mode [ 79.890078][ T5844] bridge_slave_1: entered promiscuous mode [ 79.896653][ T5838] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.903853][ T5838] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.911144][ T5838] bridge_slave_0: entered allmulticast mode [ 79.918056][ T5838] bridge_slave_0: entered promiscuous mode [ 79.934721][ T5850] team0: Port device team_slave_1 added [ 79.949020][ T5838] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.956231][ T5838] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.963535][ T5838] bridge_slave_1: entered allmulticast mode [ 79.970402][ T5838] bridge_slave_1: entered promiscuous mode [ 79.986607][ T5843] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.994248][ T5843] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.001996][ T5843] bridge_slave_0: entered allmulticast mode [ 80.009337][ T5843] bridge_slave_0: entered promiscuous mode [ 80.034590][ T5844] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.059984][ T5843] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.067289][ T5843] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.074556][ T5843] bridge_slave_1: entered allmulticast mode [ 80.081571][ T5843] bridge_slave_1: entered promiscuous mode [ 80.099436][ T5844] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.111628][ T5838] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.136561][ T5850] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.143585][ T5850] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.169637][ T5850] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.190432][ T5838] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.210039][ T5843] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.222311][ T5843] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.232904][ T5850] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.240110][ T5850] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.266392][ T5850] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.316226][ T5844] team0: Port device team_slave_0 added [ 80.325873][ T5844] team0: Port device team_slave_1 added [ 80.334817][ T5838] team0: Port device team_slave_0 added [ 80.351974][ T5843] team0: Port device team_slave_0 added [ 80.385868][ T5838] team0: Port device team_slave_1 added [ 80.401501][ T5843] team0: Port device team_slave_1 added [ 80.409288][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.416271][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.442659][ T5844] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.455767][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.462918][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.489485][ T5844] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.512271][ T5850] hsr_slave_0: entered promiscuous mode [ 80.518913][ T5850] hsr_slave_1: entered promiscuous mode [ 80.544747][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.552438][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.578933][ T5838] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.599741][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.606823][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.633093][ T5843] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.645875][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.653186][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.679302][ T5843] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.702186][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.709516][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.736216][ T5838] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.808281][ T5843] hsr_slave_0: entered promiscuous mode [ 80.814485][ T5843] hsr_slave_1: entered promiscuous mode [ 80.820847][ T5843] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 80.828936][ T5843] Cannot create hsr debugfs directory [ 80.842352][ T5844] hsr_slave_0: entered promiscuous mode [ 80.849375][ T5844] hsr_slave_1: entered promiscuous mode [ 80.855490][ T5844] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 80.863162][ T5844] Cannot create hsr debugfs directory [ 80.911199][ T5838] hsr_slave_0: entered promiscuous mode [ 80.918142][ T5838] hsr_slave_1: entered promiscuous mode [ 80.924196][ T5838] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 80.931988][ T5838] Cannot create hsr debugfs directory [ 81.138897][ T5841] Bluetooth: hci3: command tx timeout [ 81.138900][ T5852] Bluetooth: hci1: command tx timeout [ 81.139235][ T5841] Bluetooth: hci0: command tx timeout [ 81.156776][ T5846] Bluetooth: hci2: command tx timeout [ 81.179676][ T5850] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 81.193760][ T5850] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 81.213620][ T5850] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 81.233005][ T5850] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 81.260422][ T5844] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 81.291417][ T5844] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 81.305918][ T5844] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 81.323183][ T5844] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 81.349446][ T5843] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 81.364674][ T5843] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 81.374577][ T5843] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 81.389590][ T5843] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 81.450457][ T5838] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 81.466374][ T5838] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 81.475659][ T5838] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 81.493459][ T5838] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 81.586211][ T5850] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.633148][ T5850] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.664298][ T2958] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.671697][ T2958] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.691782][ T5844] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.717763][ T2958] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.724891][ T2958] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.746687][ T5838] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.771822][ T5843] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.793726][ T5844] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.805899][ T5838] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.831382][ T2958] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.838617][ T2958] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.852275][ T2958] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.859407][ T2958] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.874523][ T5843] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.894738][ T2958] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.901942][ T2958] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.910952][ T2958] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.918099][ T2958] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.929982][ T2958] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.937087][ T2958] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.955440][ T2958] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.962801][ T2958] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.979154][ T5850] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 82.123535][ T5838] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 82.146124][ T5838] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 82.165458][ T5843] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 82.304199][ T5850] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.411393][ T5850] veth0_vlan: entered promiscuous mode [ 82.430046][ T5850] veth1_vlan: entered promiscuous mode [ 82.473398][ T5844] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.490719][ T5843] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.510451][ T5850] veth0_macvtap: entered promiscuous mode [ 82.542220][ T5850] veth1_macvtap: entered promiscuous mode [ 82.554692][ T5838] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.594401][ T5844] veth0_vlan: entered promiscuous mode [ 82.604024][ T5850] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.626045][ T5850] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.638455][ T5850] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.648443][ T5850] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.657817][ T5850] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.666566][ T5850] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.703966][ T5844] veth1_vlan: entered promiscuous mode [ 82.713376][ T5843] veth0_vlan: entered promiscuous mode [ 82.730187][ T5838] veth0_vlan: entered promiscuous mode [ 82.753769][ T5843] veth1_vlan: entered promiscuous mode [ 82.782462][ T5838] veth1_vlan: entered promiscuous mode [ 82.812033][ T5844] veth0_macvtap: entered promiscuous mode [ 82.853503][ T5844] veth1_macvtap: entered promiscuous mode [ 82.876545][ T5838] veth0_macvtap: entered promiscuous mode [ 82.893133][ T5843] veth0_macvtap: entered promiscuous mode [ 82.905038][ T5838] veth1_macvtap: entered promiscuous mode [ 82.913867][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.915576][ T5843] veth1_macvtap: entered promiscuous mode [ 82.930886][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.952483][ T5844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.964157][ T5844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.976622][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.994966][ T5843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.005801][ T5843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.016386][ T5843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.027528][ T5843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.038510][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.067921][ T5844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.078893][ T5844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.090011][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.098852][ T5838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.109589][ T5838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.120066][ T5838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.132187][ T5838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.143057][ T5838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.153783][ T5838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.165605][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.181952][ T5843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.193550][ T5843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.203814][ T5843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.207981][ T5846] Bluetooth: hci1: command tx timeout [ 83.215324][ T5841] Bluetooth: hci3: command tx timeout [ 83.223134][ T5846] Bluetooth: hci2: command tx timeout [ 83.225267][ T5853] Bluetooth: hci0: command tx timeout [ 83.231572][ T5843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.247983][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.257075][ T2958] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.259116][ T5838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.265950][ T2958] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.285124][ T5838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.295746][ T5838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.306494][ T5838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.316420][ T5838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.327347][ T5838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.338476][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.346394][ T5844] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.355546][ T5844] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.364593][ T5844] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.374097][ T5844] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.390567][ T5843] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.399543][ T5843] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.409603][ T5843] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.418453][ T5843] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.440494][ T5838] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.452809][ T5838] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.462965][ T5838] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.472765][ T5838] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.590830][ T5850] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 83.625876][ T81] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.639544][ T81] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.696277][ T81] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.726172][ T81] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.766471][ T2958] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.788355][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.796318][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.813224][ T2958] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.919083][ T2958] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.960941][ T2958] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.079771][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.111504][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.630559][ T5915] syz.0.5 uses obsolete (PF_INET,SOCK_PACKET) [ 85.288981][ T5853] Bluetooth: hci2: command tx timeout [ 85.295002][ T5853] Bluetooth: hci1: command tx timeout [ 85.301054][ T5853] Bluetooth: hci0: command tx timeout [ 85.307069][ T5853] Bluetooth: hci3: command tx timeout [ 85.679170][ T5939] [U]  [ 85.682190][ T5939] [U] [ 85.684963][ T5939] [U] [ 85.687736][ T5939] [U] [ 85.736903][ T5939] [U] [ 85.739712][ T5939] [U] [ 85.742476][ T5939] [U] [ 85.745231][ T5939] [U] [ 85.861873][ T5939] [U] [ 86.057614][ T30] audit: type=1800 audit(6038322641.480:2): pid=5939 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.9" name="SYSV00000400" dev="tmpfs" ino=0 res=0 errno=0 [ 86.295012][ T5931] netlink: 334 bytes leftover after parsing attributes in process `syz.0.7'. [ 86.666824][ T5953] bond0: option all_slaves_active: invalid value () [ 87.368813][ T5841] Bluetooth: hci3: command tx timeout [ 87.374295][ T5841] Bluetooth: hci0: command tx timeout [ 87.379801][ T5853] Bluetooth: hci1: command tx timeout [ 87.380272][ T5846] Bluetooth: hci2: command tx timeout [ 87.607045][ T5964] capability: warning: `syz.1.14' uses 32-bit capabilities (legacy support in use) [ 88.008510][ T5964] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 88.100800][ T5964] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 88.437312][ T5964] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 88.771799][ T5964] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 88.917484][ T5964] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 89.037345][ T5970] mmap: syz.2.16 (5970) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 89.130215][ T5964] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 89.262831][ T5964] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 89.318975][ T5964] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 89.495936][ T5964] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 89.664850][ T5964] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 89.757350][ T5964] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 89.818266][ T5964] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 90.007343][ T5846] Bluetooth: hci0: command 0x0c1a tx timeout [ 90.403231][ T6004] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 90.807412][ T5846] Bluetooth: hci1: command 0x0c1a tx timeout [ 91.288184][ T5846] Bluetooth: hci2: command 0x0c1a tx timeout [ 91.302525][ T6019] Invalid ELF header magic: != ELF [ 91.689006][ T5846] Bluetooth: hci3: command 0x0c1a tx timeout [ 91.868360][ T1208] cfg80211: failed to load regulatory.db [ 92.074175][ T6030] [U] [ 92.077055][ T6030] [U] [ 92.079793][ T6030] [U] [ 92.082522][ T6030] [U] [ 92.097373][ T5846] Bluetooth: hci0: command 0x0c1a tx timeout [ 92.125321][ T6030] [U] [ 92.128099][ T6030] [U] [ 92.130823][ T6030] [U] [ 92.133545][ T6030] [U] [ 92.139999][ T6030] [U] [ 92.142779][ T6030] [U] [ 92.145530][ T6030] [U] [ 92.148281][ T6030] [U] [ 92.184677][ T6035] Invalid ELF header magic: != ELF [ 92.277607][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 92.287443][ T0] NOHZ tick-stop error: local softirq work is pending, handler #242!!! [ 92.297078][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 92.306056][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 92.360192][ T6030] [U] [ 92.362987][ T6030] [U] [ 92.365737][ T6030] [U] [ 92.368485][ T6030] [U] [ 92.488595][ T6030] [U] [ 92.491392][ T6030] [U] [ 92.494145][ T6030] [U] [ 92.496893][ T6030] [U] [ 92.558453][ T6030] [U] [ 92.561247][ T6030] [U] [ 92.563995][ T6030] [U] [ 92.566747][ T6030] [U] [ 92.619253][ T6030] [U] [ 92.622045][ T6030] [U] [ 92.624792][ T6030] [U] [ 92.627546][ T6030] [U] [ 92.700884][ T6030] [U] [ 92.890709][ T5846] Bluetooth: hci1: command 0x0c1a tx timeout [ 93.030171][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 93.244062][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 93.252643][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 93.261287][ T0] NOHZ tick-stop error: local softirq work is pending, handler #240!!! [ 93.367335][ T5846] Bluetooth: hci2: command 0x0c1a tx timeout [ 93.768751][ T5846] Bluetooth: hci3: command 0x0c1a tx timeout [ 94.067908][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 94.117814][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 94.173572][ T5846] Bluetooth: hci0: command 0x0c1a tx timeout [ 94.582151][ T6062] FAULT_INJECTION: forcing a failure. [ 94.582151][ T6062] name failslab, interval 1, probability 0, space 0, times 1 [ 94.647267][ T6062] CPU: 1 UID: 0 PID: 6062 Comm: syz.1.33 Not tainted 6.14.0-syzkaller-10514-g7f2ff7b62617 #0 PREEMPT(full) [ 94.647315][ T6062] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 94.647339][ T6062] Call Trace: [ 94.647349][ T6062] [ 94.647364][ T6062] dump_stack_lvl+0x16c/0x1f0 [ 94.647417][ T6062] should_fail_ex+0x512/0x640 [ 94.647448][ T6062] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 94.647485][ T6062] should_failslab+0xc2/0x120 [ 94.647520][ T6062] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 94.647551][ T6062] ? __proc_create+0xc3/0x8c0 [ 94.647588][ T6062] ? __proc_create+0x2ce/0x8c0 [ 94.647635][ T6062] __proc_create+0x2ce/0x8c0 [ 94.647678][ T6062] ? __pfx___proc_create+0x10/0x10 [ 94.647727][ T6062] proc_create_reg+0x7d/0x180 [ 94.647770][ T6062] proc_create_data+0x86/0x110 [ 94.647807][ T6062] ? __pfx_proc_create_data+0x10/0x10 [ 94.647849][ T6062] ? net_generic+0xf4/0x2a0 [ 94.647897][ T6062] nfsd_net_init+0x2ed/0x3a0 [ 94.647948][ T6062] ? __pfx_nfsd_net_init+0x10/0x10 [ 94.647999][ T6062] ops_init+0x1df/0x5f0 [ 94.648041][ T6062] setup_net+0x21e/0x850 [ 94.648084][ T6062] ? __pfx_setup_net+0x10/0x10 [ 94.648123][ T6062] ? lockdep_init_map_type+0x5c/0x280 [ 94.648154][ T6062] ? __pfx_down_read_killable+0x10/0x10 [ 94.648203][ T6062] ? debug_mutex_init+0x37/0x70 [ 94.648252][ T6062] copy_net_ns+0x2a6/0x5f0 [ 94.648299][ T6062] create_new_namespaces+0x3ea/0xad0 [ 94.648353][ T6062] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 94.648403][ T6062] ksys_unshare+0x45b/0xa40 [ 94.648450][ T6062] ? __pfx_ksys_unshare+0x10/0x10 [ 94.648498][ T6062] ? xfd_validate_state+0x5d/0x180 [ 94.648534][ T6062] ? rcu_is_watching+0x12/0xc0 [ 94.648580][ T6062] __x64_sys_unshare+0x31/0x40 [ 94.648633][ T6062] do_syscall_64+0xcd/0x260 [ 94.648675][ T6062] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 94.648707][ T6062] RIP: 0033:0x7f96b858d169 [ 94.648742][ T6062] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 94.648774][ T6062] RSP: 002b:00007f96b935b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 94.648806][ T6062] RAX: ffffffffffffffda RBX: 00007f96b87a5fa0 RCX: 00007f96b858d169 [ 94.648827][ T6062] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 94.648845][ T6062] RBP: 00007f96b860e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 94.648863][ T6062] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 94.648881][ T6062] R13: 0000000000000000 R14: 00007f96b87a5fa0 R15: 00007ffdf157ea18 [ 94.648915][ T6062] [ 95.041227][ T5846] Bluetooth: hci1: command 0x0c1a tx timeout [ 95.412048][ T6069] Zero length message leads to an empty skb [ 95.448569][ T5846] Bluetooth: hci2: command 0x0c1a tx timeout [ 95.849086][ T5846] Bluetooth: hci3: command 0x0c1a tx timeout [ 96.482876][ T6062] ------------[ cut here ]------------ [ 96.488425][ T6062] name 'nfsd' [ 96.494522][ T6062] WARNING: CPU: 1 PID: 6062 at fs/proc/generic.c:721 remove_proc_entry+0x1d0/0x530 [ 96.503992][ T6062] Modules linked in: [ 96.507976][ T6062] CPU: 1 UID: 0 PID: 6062 Comm: syz.1.33 Not tainted 6.14.0-syzkaller-10514-g7f2ff7b62617 #0 PREEMPT(full) [ 96.519605][ T6062] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 96.529829][ T6062] RIP: 0010:remove_proc_entry+0x1d0/0x530 [ 96.535825][ T6062] Code: ff e8 14 2b 62 ff 48 c7 c7 00 bf 61 8e e8 08 0d 15 09 e8 03 2b 62 ff 90 48 8b 74 24 18 48 c7 c7 00 1f a2 8b e8 e1 b8 21 ff 90 <0f> 0b 90 90 e9 fa 00 00 00 e8 e2 2a 62 ff 4d 85 e4 74 c4 e8 d8 2a [ 96.555979][ T6062] RSP: 0018:ffffc90004e4fb70 EFLAGS: 00010282 [ 96.562171][ T6062] RAX: 0000000000000000 RBX: 0000000000000001 RCX: ffffc9000ca41000 [ 96.570248][ T6062] RDX: 0000000000080000 RSI: ffffffff817aabf5 RDI: 0000000000000001 [ 96.578277][ T6062] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 [ 96.586869][ T6062] R10: 0000000000000001 R11: 0000000000000001 R12: ffff888020752140 [ 96.595733][ T6062] R13: 0000000000000004 R14: ffffffff8bafd060 R15: dffffc0000000000 [ 96.604206][ T6062] FS: 00007f96b935b6c0(0000) GS:ffff888124ae2000(0000) knlGS:0000000000000000 [ 96.619113][ T6062] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 96.625755][ T6062] CR2: 0000001b30e1bff8 CR3: 000000007eb0c000 CR4: 00000000003526f0 [ 96.634096][ T6062] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 96.642494][ T6062] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 96.651065][ T6062] Call Trace: [ 96.654415][ T6062] [ 96.657387][ T6062] ? __warn+0xea/0x3c0 [ 96.661804][ T6062] ? preempt_schedule_notrace+0x62/0xe0 [ 96.667410][ T6062] ? remove_proc_entry+0x1d0/0x530 [ 96.672816][ T6062] ? report_bug+0x3c3/0x580 [ 96.677371][ T6062] ? remove_proc_entry+0x1d0/0x530 [ 96.682639][ T6062] ? handle_bug+0x184/0x210 [ 96.687639][ T6062] ? exc_invalid_op+0x17/0x50 [ 96.692938][ T6062] ? asm_exc_invalid_op+0x1a/0x20 [ 96.698027][ T6062] ? __warn_printk+0x1a5/0x350 [ 96.702974][ T6062] ? remove_proc_entry+0x1d0/0x530 [ 96.708138][ T6062] ? __pfx_remove_proc_entry+0x10/0x10 [ 96.714140][ T6062] ? net_generic+0xf4/0x2a0 [ 96.718719][ T6062] nfsd_net_exit+0x27/0x50 [ 96.723246][ T6062] ? __pfx_nfsd_net_exit+0x10/0x10 [ 96.728423][ T6062] ops_exit_list+0xb0/0x180 [ 96.733072][ T6062] setup_net+0x4e8/0x850 [ 96.737380][ T6062] ? __pfx_setup_net+0x10/0x10 [ 96.742501][ T6062] ? lockdep_init_map_type+0x5c/0x280 [ 96.747928][ T6062] ? __pfx_down_read_killable+0x10/0x10 [ 96.753830][ T6062] ? debug_mutex_init+0x37/0x70 [ 96.758738][ T6062] copy_net_ns+0x2a6/0x5f0 [ 96.763271][ T6062] create_new_namespaces+0x3ea/0xad0 [ 96.768624][ T6062] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 96.774392][ T6062] ksys_unshare+0x45b/0xa40 [ 96.778993][ T6062] ? __pfx_ksys_unshare+0x10/0x10 [ 96.784086][ T6062] ? xfd_validate_state+0x5d/0x180 [ 96.789743][ T6062] ? rcu_is_watching+0x12/0xc0 [ 96.794577][ T6062] __x64_sys_unshare+0x31/0x40 [ 96.799774][ T6062] do_syscall_64+0xcd/0x260 [ 96.804325][ T6062] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 96.810353][ T6062] RIP: 0033:0x7f96b858d169 [ 96.814818][ T6062] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 96.834520][ T6062] RSP: 002b:00007f96b935b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 96.843286][ T6062] RAX: ffffffffffffffda RBX: 00007f96b87a5fa0 RCX: 00007f96b858d169 [ 96.851680][ T6062] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 96.859761][ T6062] RBP: 00007f96b860e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 96.867785][ T6062] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 96.876531][ T6062] R13: 0000000000000000 R14: 00007f96b87a5fa0 R15: 00007ffdf157ea18 [ 96.884725][ T6062] [ 96.887785][ T6062] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 96.895130][ T6062] CPU: 1 UID: 0 PID: 6062 Comm: syz.1.33 Not tainted 6.14.0-syzkaller-10514-g7f2ff7b62617 #0 PREEMPT(full) [ 96.906639][ T6062] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 96.916718][ T6062] Call Trace: [ 96.920018][ T6062] [ 96.922967][ T6062] dump_stack_lvl+0x3d/0x1f0 [ 96.927597][ T6062] panic+0x71c/0x800 [ 96.931546][ T6062] ? __pfx_panic+0x10/0x10 [ 96.935984][ T6062] ? show_trace_log_lvl+0x29c/0x3c0 [ 96.941222][ T6062] ? remove_proc_entry+0x1d0/0x530 [ 96.946371][ T6062] check_panic_on_warn+0xab/0xb0 [ 96.951336][ T6062] __warn+0xf6/0x3c0 [ 96.955256][ T6062] ? preempt_schedule_notrace+0x62/0xe0 [ 96.960830][ T6062] ? remove_proc_entry+0x1d0/0x530 [ 96.965978][ T6062] report_bug+0x3c3/0x580 [ 96.970336][ T6062] ? remove_proc_entry+0x1d0/0x530 [ 96.975482][ T6062] handle_bug+0x184/0x210 [ 96.979861][ T6062] exc_invalid_op+0x17/0x50 [ 96.984415][ T6062] asm_exc_invalid_op+0x1a/0x20 [ 96.989301][ T6062] RIP: 0010:remove_proc_entry+0x1d0/0x530 [ 96.995093][ T6062] Code: ff e8 14 2b 62 ff 48 c7 c7 00 bf 61 8e e8 08 0d 15 09 e8 03 2b 62 ff 90 48 8b 74 24 18 48 c7 c7 00 1f a2 8b e8 e1 b8 21 ff 90 <0f> 0b 90 90 e9 fa 00 00 00 e8 e2 2a 62 ff 4d 85 e4 74 c4 e8 d8 2a [ 97.014745][ T6062] RSP: 0018:ffffc90004e4fb70 EFLAGS: 00010282 [ 97.020851][ T6062] RAX: 0000000000000000 RBX: 0000000000000001 RCX: ffffc9000ca41000 [ 97.028847][ T6062] RDX: 0000000000080000 RSI: ffffffff817aabf5 RDI: 0000000000000001 [ 97.036839][ T6062] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 [ 97.044844][ T6062] R10: 0000000000000001 R11: 0000000000000001 R12: ffff888020752140 [ 97.052848][ T6062] R13: 0000000000000004 R14: ffffffff8bafd060 R15: dffffc0000000000 [ 97.060855][ T6062] ? __warn_printk+0x1a5/0x350 [ 97.065653][ T6062] ? __pfx_remove_proc_entry+0x10/0x10 [ 97.071151][ T6062] ? net_generic+0xf4/0x2a0 [ 97.075693][ T6062] nfsd_net_exit+0x27/0x50 [ 97.080237][ T6062] ? __pfx_nfsd_net_exit+0x10/0x10 [ 97.085392][ T6062] ops_exit_list+0xb0/0x180 [ 97.089927][ T6062] setup_net+0x4e8/0x850 [ 97.094203][ T6062] ? __pfx_setup_net+0x10/0x10 [ 97.098994][ T6062] ? lockdep_init_map_type+0x5c/0x280 [ 97.104424][ T6062] ? __pfx_down_read_killable+0x10/0x10 [ 97.110053][ T6062] ? debug_mutex_init+0x37/0x70 [ 97.114984][ T6062] copy_net_ns+0x2a6/0x5f0 [ 97.119486][ T6062] create_new_namespaces+0x3ea/0xad0 [ 97.124816][ T6062] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 97.130506][ T6062] ksys_unshare+0x45b/0xa40 [ 97.135093][ T6062] ? __pfx_ksys_unshare+0x10/0x10 [ 97.140167][ T6062] ? xfd_validate_state+0x5d/0x180 [ 97.145317][ T6062] ? rcu_is_watching+0x12/0xc0 [ 97.150125][ T6062] __x64_sys_unshare+0x31/0x40 [ 97.154936][ T6062] do_syscall_64+0xcd/0x260 [ 97.159501][ T6062] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 97.165418][ T6062] RIP: 0033:0x7f96b858d169 [ 97.169864][ T6062] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 97.189510][ T6062] RSP: 002b:00007f96b935b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 97.197952][ T6062] RAX: ffffffffffffffda RBX: 00007f96b87a5fa0 RCX: 00007f96b858d169 [ 97.205957][ T6062] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 97.213961][ T6062] RBP: 00007f96b860e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 97.221965][ T6062] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 97.229994][ T6062] R13: 0000000000000000 R14: 00007f96b87a5fa0 R15: 00007ffdf157ea18 [ 97.238018][ T6062] [ 97.241411][ T6062] Kernel Offset: disabled [ 97.245793][ T6062] Rebooting in 86400 seconds..