last executing test programs: 5.850389853s ago: executing program 0 (id=41): unshare$auto(0x40000080) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) removexattr$auto(0x0, 0x0) mmap$auto(0x4, 0x2020009, 0x8, 0xeb1, 0xffffffffffeffffa, 0x7ffd) getrandom$auto(0x0, 0xab, 0xfff) read$auto_proc_reg_file_ops_compat_inode(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_WG_CMD_GET_DEVICE(0xffffffffffffffff, 0x0, 0x4000) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) r0 = socketpair$auto(0x1d, 0x2, 0x2, 0x0) close_range$auto(0x2, 0x8, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_TIPC_NL_MON_PEER_GET(r1, &(0x7f0000002880)={0x0, 0x0, &(0x7f0000002840)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="edfb2bbd7000fbdbdf2513000000f199e3280d9352b27dac32517dd77c3b13f4cebbf19038974bd6753a8c304b4cc924d70dfaf9a07315518c822921e524cbab8870"], 0x14}}, 0x4000000) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000000)) bind$auto(r0, &(0x7f0000000080)=@nfc={0x27, 0x0, 0xffffffffffffffff, 0x3}, 0x10000006) open(0x0, 0x252802, 0x190) socket(0x1, 0x1, 0x0) r3 = openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000380), 0x82002, 0x0) ioctl$auto_RTC_ALM_SET(r3, 0x40247007, &(0x7f0000000300)={0xb, 0x7, 0x2, 0x2, 0x110f, 0x3, 0x7f, 0x1ff, 0xd}) connect$auto(0x3, &(0x7f00000001c0), 0x55) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0xfffffffffffefffd, 0x17) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0x80000001, 0x8) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) mmap$auto(0x0, 0x2020009, 0xffff, 0xeb1, 0xfffffffffffffffa, 0x8000) remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0x6, 0x4) 4.756790693s ago: executing program 0 (id=45): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = socket(0x10, 0x80002, 0x0) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_MODULE_EEPROM_GET(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10000000}, 0x40000) sendmsg$auto_CIFS_GENL_CMD_SWN_NOTIFY(r0, 0x0, 0x2800) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) shutdown$auto(r0, 0x6) r1 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x40802, 0x0) pread64$auto(r1, &(0x7f0000000100)='/proc/comedi\x00', 0xffff, 0xa) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000002f40), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'bridge_slave_1\x00'}) sendmsg$auto_ETHTOOL_MSG_FEATURES_GET(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'veth0_vlan\x00', 0x0}) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x60, 0x0, 0x800, 0x70bd2d, 0x25dfdbfe, {}, [@HSR_A_IF2_AGE={0x8, 0x4, 0xab7}, @HSR_A_IF2_SEQ={0x6, 0x7, 0x8000}, @HSR_A_IFINDEX={0x8, 0x2, r3}, @HSR_A_NODE_ADDR_B={0xa, 0x5, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, @HSR_A_NODE_ADDR={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x43}}, @HSR_A_NODE_ADDR={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x19}}, @HSR_A_IFINDEX={0x8, 0x2, r3}, @HSR_A_IF1_SEQ={0x6, 0x6, 0x124c}]}, 0x60}, 0x1, 0x0, 0x0, 0x40080}, 0x40) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0xc004) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000280), r0) 4.224743291s ago: executing program 0 (id=46): r0 = socket(0x1e, 0x4, 0x0) setsockopt$auto(r0, 0x10f, 0x87, 0x0, 0x14) recvfrom$auto(r0, 0x0, 0xc, 0xb21, 0x0, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, r0, 0x28000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc6}, 0x1, 0x0, 0x0, 0x3423}, 0x3}, 0x3, 0x79d94ad) close_range$auto(0x2, 0x8, 0x0) 4.084728887s ago: executing program 1 (id=47): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/dev_mcast\x00', 0x4000, 0x0) r1 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x161302, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0x8, 0x8000) read$auto(0x3, 0x0, 0x1f40) close_range$auto(r1, r1, 0x0) r2 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv6/conf/all/forwarding\x00', 0x42a81, 0x0) r3 = openat$auto_proc_coredump_filter_operations_base(0xffffffffffffff9c, 0x0, 0xca042, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/bus/usb/drivers/usb_acecad/new_id\x00', 0x60301, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r4 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000340)='/proc/sys/net/netfilter/nf_conntrack_buckets\x00', 0x101000, 0x0) read$auto(r4, 0x0, 0x1ff) write$auto(0x3, 0x0, 0xfdef) pwritev$auto(r3, &(0x7f0000000180)={0x0, 0x9}, 0x837, 0xb6, 0x3) pwrite64$auto(r2, 0x0, 0x1, 0x2) openat$auto_tracing_cpumask_fops_trace(0xffffffffffffff9c, 0x0, 0x8002, 0x0) write$auto(0x3, 0x0, 0xfdef) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/015/001\x00', 0xa901, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_ETHTOOL_MSG_STATS_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYRESOCT, @ANYRES32=r0, @ANYRESDEC=0x0], 0x14}, 0x1, 0x0, 0x0, 0x4000840}, 0x40080b2) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) ioctl$auto(0x3, 0x8008551c, 0x38) unshare$auto(0x40000080) mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0xff1, 0x8000) 4.084421173s ago: executing program 2 (id=48): r0 = syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0x8, 0x2, 0x9b72, 0x5, 0x0) sendmsg$auto_OVS_DP_CMD_DEL(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB='(\x00\x00b', @ANYRES16=0x0, @ANYBLOB="010029bd7000ffdbdf2502000000110001006f76735f646174617061746800000000"], 0x28}, 0x1, 0x0, 0x0, 0x20040c04}, 0xc0804) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1a"], 0x1ac}}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) r2 = syz_clone(0x2200000, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev$auto(r2, 0x0, 0x3, 0x0, 0x4, 0x0) sendmsg$auto_NL802154_CMD_GET_INTERFACE(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x34, 0x0, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@NL802154_ATTR_LBT_MODE={0x5, 0x13, 0x1}, @NL802154_ATTR_PEER={0x4}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x8}, @NL802154_ATTR_PID={0x8, 0x1c, r2}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x81) r3 = socket(0x18, 0x5, 0x2) close_range$auto(0x2, 0x8, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_OVS_FLOW_CMD_GET(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYRESDEC=r0, @ANYRES32=r3, @ANYBLOB="010029bd700000dcdf250200000004000800200001801c001080060009"], 0x38}, 0x1, 0x0, 0x0, 0x200400f0}, 0x4000) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000010c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000001100)={'wlan0\x00', 0x0}) sendmsg$auto_NL80211_CMD_SET_QOS_MAP(r7, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000001180)={&(0x7f0000001140)={0x1c, r8, 0x1, 0x70bd29, 0x25dfdbff, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x10) sendmsg$auto_NL80211_CMD_SET_CHANNEL(r5, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x4c, r8, 0x200, 0x70bd29, 0x25dfdbfb, {}, [@NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x2}, @NL80211_ATTR_WIPHY_RTS_THRESHOLD={0x8, 0x40, 0x7f}, @NL80211_ATTR_WIPHY_FREQ_HINT={0x8, 0xc9, 0x800000}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, "69681d38e025d37aeb4b80243ff2f27f1e560bba141b12629eba"}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000001}, 0x50) 3.728142335s ago: executing program 2 (id=49): socket(0xa, 0x3, 0x3a) setreuid$auto(0x0, 0x2) setsockopt$auto(0x400000000000003, 0x29, 0xcd, 0x0, 0x567) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket$nl_generic(0x10, 0x3, 0x10) pidfd_open$auto(0x1, 0x9) socket(0x2000000000000021, 0x2, 0x10000000000002) socket(0x2a, 0x2, 0x0) bind$auto(0x3, &(0x7f0000000080)=@qipcrtr={0x2a, 0x1, 0x8000}, 0x6b) 3.628170617s ago: executing program 2 (id=50): openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000400)='/dev/mtd0\x00', 0x28082, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) socket(0x2, 0x1, 0x0) connect$auto(0x3, &(0x7f00000000c0), 0x55) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = pipe2$auto(0x0, 0x80) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = socket(0x2, 0x1, 0x0) close_range$auto(0x2, 0x8, 0x0) memfd_create$auto(0x0, 0xe) socket(0x2, 0x1, 0x106) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @loopback}, 0x6a) sendmmsg$auto(r1, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x5, 0x20000000) write$auto(0x3, 0x0, 0xfdf3) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) pipe2$auto(0x0, 0x80) shutdown$auto(0x200000003, 0x2) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x19) migrate_pages$auto(0x0, 0x4, &(0x7f0000000100)=0x7f, &(0x7f0000000140)=0x3) add_key$auto(&(0x7f0000000000)='/dev/mtd0\x00', &(0x7f0000000040)='.[+$*\x00', &(0x7f0000000100)="3093436f2e0da687b6daaa33c36f49e22a2d3ac5c8b993cf6a26ea4f1adb3d3c98c3c393fde73fa6d41acc87de58e14d3381113d690323a559707a9ce66b3560db1ced2d90dfb25acfa7e8f7035b0b392ca988c3f4c22805d43d09289f0f6fbe039cf71f5c994b335d97db63fe46df20830899826e54eba8ebaff55854be0ca8f32a93581a61fe918b8704b0128bc71b87d891ed81589865da5685a2427f2639467aa4d445dab353d462f8202d2859f02a221dc7075a2da740e11b66b8fe160f6c063fc1ecb85a54217d4c201508d94c34de81831791fc9d22ceba299f714235445eec94bd7c1ab8ffcae4acd6fe", 0x8, 0x6) setsockopt$auto(0x3, 0x1, 0xf, 0x0, 0x8) listen$auto(0x3, 0x83) r2 = gettid() syz_clone3(&(0x7f0000000300)={0xc020000, 0x0, 0x0, 0x0, {0x19}, 0x0, 0x0, 0x0, &(0x7f0000000000)=[r2], 0x0, {r0}}, 0x58) mq_notify$auto(r0, &(0x7f00000003c0)={@sival_ptr=&(0x7f00000002c0)="4d0a087760bfb61a5aaa22a2c83909eae35549edaed64f1985739a1720c02a7e92302c6862d5e89db705c16c909d3be442ce893b69a820bf31492fe1dbb9ebbcc566d7d672c0e93313a8a583a48b39d974fa36fa42daebefb57a4eecba5a20d950a1b1aaf4344ea2566570928a843a17ca3c6c45ecf1390860fcf6db429276ba72b9c19c305b8d3ff82691772ef505fa119b7513c58613245c5dd57279a15296881f4d749006822c53043b6d8f343fdf0e4d6e56ef6f6479fb7c5e5000cb1038c1511bf3fa4a9d20d63f58b3e52e247f3035226eb499cabad9a6d017468d804463f65494fcca3b3708a6bf7f73c3d250681a2b52413e04da", @raw=0x200000, 0x8a, @_tid=r2}) setsockopt$auto(0x3, 0x1, 0x31, 0x0, 0x9) ioctl$auto(0x3, 0xc0404d1a, 0x38) 3.206631496s ago: executing program 0 (id=52): unshare$auto(0x40000080) (async) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) removexattr$auto(0x0, 0x0) (async) mmap$auto(0x4, 0x2020009, 0x8, 0xeb1, 0xffffffffffeffffa, 0x7ffd) (async) getrandom$auto(0x0, 0x6000000, 0x3) r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/net/rxrpc/calls\x00', 0x100, 0x0) read$auto_proc_reg_file_ops_compat_inode(r0, &(0x7f0000000040)=""/88, 0x58) read$auto_proc_reg_file_ops_compat_inode(r0, &(0x7f0000001080)=""/4092, 0xffc) (async) sendmsg$auto_IEEE802154_LLSEC_ADD_DEV(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB="50010000", @ANYRES16=0x0, @ANYRES64=r0], 0x150}, 0x1, 0x0, 0x0, 0x8000804}, 0x40400c5) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$auto_WG_CMD_GET_DEVICE(0xffffffffffffffff, 0x0, 0x4000) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) (async) socketpair$auto(0x1d, 0x2, 0x2, 0x0) (async) open(0x0, 0x252802, 0x190) (async) socket(0x1f, 0x6, 0xa4) setsockopt$auto(0x3, 0x1, 0xf44, 0x0, 0x9) msync$auto(0x8, 0x7, 0x4) (async) connect$auto(0x3, &(0x7f00000001c0), 0x55) (async) socket(0x8, 0x5, 0x9) (async) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) (async) madvise$auto(0x0, 0xfffffffffffefffd, 0x17) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) madvise$auto(0x0, 0x80000001, 0x8) (async) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) mmap$auto(0x0, 0x2020009, 0xffff, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0x6, 0x4) 2.853850796s ago: executing program 1 (id=53): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x0, 0x100000000008000) write$auto(0x800000000000c8, 0x0, 0x1a) mmap$auto(0x6, 0x9, 0x6, 0x32d4, 0x10000, 0x80000001) ioctl$auto(0xc8, 0xffffffff800454dd, 0x4000000000008) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x60742, 0x0) shutdown$auto(0x200000003, 0x2) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) mremap$auto(0x4000, 0xfee0, 0x3fd6, 0x3, 0xfffff000) set_mempolicy$auto(0x8003, &(0x7f0000000280)=0x7b, 0x4) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) mmap$auto(0x0, 0x7fffffffffffffff, 0xdf, 0x15, 0x7, 0x28000) write$auto(0x3, 0x0, 0x7fffffff) read$auto(0x3, 0x0, 0x80) madvise$auto(0x0, 0x3, 0x66) r0 = socket(0xa, 0x1, 0x84) getsockopt$auto(r0, 0x84, 0x1b, 0x0, &(0x7f0000000040)=0x400) mmap$auto(0x0, 0x4, 0x4000000020df, 0x40eb2, 0x402, 0x300000000000) capset$auto(0x0, 0x0) r1 = openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000980)='/proc/self/pagemap\x00', 0x80800, 0x0) read$auto(r1, 0x0, 0x39b8) ioperm$auto(0x1000, 0x40, 0x6) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) close_range$auto(0x2, 0x8, 0x0) 2.852556508s ago: executing program 3 (id=54): madvise$auto(0x0, 0x8000000000000000, 0x15) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_smc_pnetid(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$auto_SMC_PNETID_ADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x2c, r1, 0xd3bed26fbb0d8463, 0x70bd29, 0x25dfdbfe, {0x2, 0x0, 0x300}, [@SMC_PNETID_ETHNAME={0xc, 0x2, 'syz_tun\x00'}, @SMC_PNETID_NAME={0xc, 0x1, 'ethtool\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000001}, 0x1c054) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000200)='/dev/snd/midiC2D1\x00', 0x80b01, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r2 = open(&(0x7f0000000140)='./file0\x00', 0x40, 0x0) fanotify_init$auto(0x5, 0x2) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv6/conf/batadv_slave_0/proxy_ndp\x00', 0x382, 0x0) lseek$auto(0x3, 0x2, 0x4) sysfs$auto(0x2, 0x4, 0x4) mincore$auto(0x1000, 0x8001, 0x0) r3 = io_uring_setup$auto(0x2, 0x0) io_uring_enter$auto(r3, 0x1, 0xcd00, 0x7, 0x0, 0xffffffffffffffff) ioctl$auto_SNDRV_RAWMIDI_IOCTL_STATUS32(r2, 0xc0245720, &(0x7f0000000240)={0x1, 0x80, 0x3, 0x6, 0xb04d, "68e6fe89d79059ae94debcc36b2972d2"}) syz_genetlink_get_family_id$auto_hsr(0x0, 0xffffffffffffffff) 2.788795916s ago: executing program 2 (id=55): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) poll$auto(&(0x7f0000000280)={0xffffffffffffffff, 0x8, 0x27}, 0x400, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_ioam6(&(0x7f0000001a40), r1) sendmsg$auto_IOAM6_CMD_DEL_SCHEMA(r0, &(0x7f0000001b00)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000001a80)={0x14, r2, 0x800, 0x70bd2a, 0x25dfdbf6}, 0x14}}, 0x90) sendmsg$auto_IOAM6_CMD_DEL_NAMESPACE(r0, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000300)={&(0x7f0000000380)={0x4c, r2, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@IOAM6_ATTR_NS_ID={0x6}, @IOAM6_ATTR_NS_ID={0x6, 0x1, 0x9edf}, @IOAM6_ATTR_NS_ID={0x6, 0x1, 0xb}, @IOAM6_ATTR_NS_ID={0x6, 0x1, 0x8}, @IOAM6_ATTR_NS_ID={0x6, 0x1, 0x7}, @IOAM6_ATTR_NS_ID={0x6, 0x1, 0x736a}, @IOAM6_ATTR_NS_ID={0x6, 0x1, 0x2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20040800}, 0x4004000) r3 = socket$nl_generic(0x10, 0x3, 0x10) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptyx1\x00', 0x2c0e03, 0x0) ioctl$auto(0x3, 0x5411, 0xfffffffffffff4e0) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), r3) sysfs$auto(0x58, 0xe, 0xe934) sendmsg$auto_ETHTOOL_MSG_FEC_GET(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x4000010}, 0x4c0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) connect$auto(0x3, 0xfffffffffffffffe, 0x0) openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, 0x0, 0x80000, 0x0) getrandom$auto(0x0, 0x6000000, 0x3) r4 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mincore$auto(0x0, 0xffffffff, 0x0) ioctl$auto(r4, 0x4b6a, 0xd2b6) syz_genetlink_get_family_id$auto_batadv(0x0, 0xffffffffffffffff) close_range$auto(0x2, 0x8000, 0x0) r5 = io_uring_setup$auto(0x6, 0x0) mremap$auto(0xc1, 0x1, 0x10, 0x7, 0x4) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(r5, 0xffffffffffffffff, 0x0) r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000340)='/sys/devices/platform/vhci_hcd.0/usbip_debug\x00', 0x8002, 0x0) write$auto(r6, &(0x7f0000000100)='\t\nD\\\'\x02\x00\x0f;\xd1\t\xbe\b\xe8P\xd2#\xcb\x98p\x81\xe7\x82k\xde|P\xfc\xcb%\xd4\xc2\xe8\x16A\xed \xec7\xa7\x9f\x969\x92t\xc9\xe9J\x1d-X_\xa1\xff@\x88\xbfP\xe9\x91\x82R+N\xe5\x10\x87\x92j\x953\x94\x13\xc4`\xbf\xa0\'\xd5F\x1a\xa0lSQ\x00\x99\xcf\xea\x86\xc3J\x8aE\f*T\x9dn5w}\x17\x97\x92*,\xddn6\xc3\xa4\xbc_\x9a\x9c\xc8\x80\xa3\xb9\x9aQL\x1d\xae\x14Ycd\xc0\xcf,\xb5Z\xab\xac_\xd5e3P\x97\x10X\x7fB\x88\xe63\xca\x00\xcf\xd1\xe3\xce*6\x11\xcbmv\x86\x0eM\xe7\x90\xbb]\xf5\x0f\x00\xee\x8e\x00\x00\x00\x00\x00\x00\x008\x1f\x9a\xe3\xa0\x14\xac\xf2{\x94E;\xef\xd0\x80\x8an\v\x9b\xf4M\xf8\x02\xd2\xe9\xb1\x81\x8d@\r\xc7\x11/\xaa9\xbbl\xb7\x90__[r\\\x9e\xcc\xbe2nw\xac\x02(\xf9\x9ajI\x1c\x91\xd7\xc7\xbc\x15\x8d\x03q\xb9\xd5\xe1\xb2\xc6\x89\x93M\x7f\xaf\xa1\xb9g\f\xe4\xfcfA\x8b\xd0\xd7\x8f\xd8R\x90*\xa6\x8d\xf7\xe5\xb1`E\xb8J[\xa9N\xac\x9bg\xe4\xeegb\xcab\xd1\x10\xfe\xac\xca1XH\xde\xc4\x10l\xaa\x012\x80\xac', 0xce) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x40802, 0x0) 2.240049882s ago: executing program 3 (id=56): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = socket(0x10, 0x80002, 0x0) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_MODULE_EEPROM_GET(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10000000}, 0x40000) sendmsg$auto_CIFS_GENL_CMD_SWN_NOTIFY(r0, 0x0, 0x2800) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) shutdown$auto(r0, 0x6) r1 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x40802, 0x0) pread64$auto(r1, &(0x7f0000000100)='/proc/comedi\x00', 0xffff, 0xa) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000002f40), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'bridge_slave_1\x00'}) sendmsg$auto_ETHTOOL_MSG_FEATURES_GET(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'veth0_vlan\x00', 0x0}) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x60, 0x0, 0x800, 0x70bd2d, 0x25dfdbfe, {}, [@HSR_A_IF2_AGE={0x8, 0x4, 0xab7}, @HSR_A_IF2_SEQ={0x6, 0x7, 0x8000}, @HSR_A_IFINDEX={0x8, 0x2, r3}, @HSR_A_NODE_ADDR_B={0xa, 0x5, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, @HSR_A_NODE_ADDR={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x43}}, @HSR_A_NODE_ADDR={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x19}}, @HSR_A_IFINDEX={0x8, 0x2, r3}, @HSR_A_IF1_SEQ={0x6, 0x6, 0x124c}]}, 0x60}, 0x1, 0x0, 0x0, 0x40080}, 0x40) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0xc004) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000280), r0) 1.814111705s ago: executing program 0 (id=57): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb3, 0x401, 0x8000) r0 = socket(0x2b, 0x1, 0x1) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) getrandom$auto(0x0, 0x6000000, 0x3) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) ioctl$auto(0x4000000000000c8, 0x800454cf, 0x3) setsockopt$auto(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x4) mmap$auto(0x0, 0x2020009, 0x6, 0xeb1, 0xfffffffffffffffa, 0x8000) keyctl$auto(0x2000000000000017, 0x3ff, 0x2a, 0x0, 0x4) socket(0x1d, 0x1, 0x10001) keyctl$auto(0x2000000000000017, 0x3ff, 0x0, 0x0, 0x3) socket$nl_generic(0x10, 0x3, 0x10) socket(0x11, 0x3, 0x2) clock_settime$auto(0x8, &(0x7f0000000000)={0x100000000, 0x6}) adjtimex$auto(0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/est_cpulist\x00', 0x0, 0x0) mprotect$auto(0x1ffff000, 0x8000000000000001, 0xd) acct$auto(&(0x7f0000000000)='}\x00') openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/nbd15\x00', 0x14b602, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume_offset\x00', 0x8a000, 0x0) mprotect$auto(0x1ffff000, 0x8000000000000001, 0xd) r1 = openat$auto_zero_fops_mem(0xffffffffffffff9c, &(0x7f0000000000), 0x109002, 0x0) sendfile$auto(r1, r1, 0x0, 0x3) acct$auto(0x0) adjtimex$auto(&(0x7f0000000540)={0x72, 0x0, 0x9, 0x9, 0x4, 0x2, 0xfffffffd, 0x0, 0x4, 0x9533, 0x7, {0x201, 0xfffffffffffffff9}, 0x9cc9, 0x80, 0x6, 0x6, 0x0, 0x100000000, 0x5, 0x8f, 0x3, 0x8, 0x14}) madvise$auto(0x0, 0xf663, 0x15) pipe2$auto(0x0, 0x80) inotify_rm_watch$auto(r0, 0x1) 1.747662582s ago: executing program 3 (id=58): close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendto$auto(0xffffffffffffffff, 0x0, 0x14, 0x7, &(0x7f0000000440)=@hci={0x1f, 0x1}, 0x7) mmap$auto(0x0, 0x2, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) r0 = openat$auto_ftrace_avail_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/tracing/available_events\x00', 0x0, 0x0) pread64$auto(r0, 0x0, 0x1, 0x100000001) r1 = openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000400)='/dev/mtd0\x00', 0x28082, 0x0) write$auto_mtd_fops_mtdchar(r1, &(0x7f0000000440)="df015800371b82", 0x20000) r2 = socket(0x25, 0x1, 0x3) socket(0xa, 0x1, 0x84) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_TIPC_NL_PEER_REMOVE(r3, &(0x7f00000110c0)={0x0, 0x0, &(0x7f0000011080)={&(0x7f0000000480)=ANY=[@ANYBLOB="70010000", @ANYRES16=r4, @ANYRES16=r3, @ANYRES32=r2, @ANYRESOCT, @ANYRES8=r4, @ANYBLOB="10000180040034800400b7000400f9800031bcd53fb7ed1adfd2a01583e994e6225262b611b08cc1345ad8187929418f387309000000c86cd240b1d5ee31ad"], 0x170}, 0x1, 0x0, 0x0, 0x20008105}, 0x40) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) io_uring_setup$auto(0x6, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) r5 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/v4l-subdev0\x00', 0x169000, 0x0) close_range$auto(r5, 0x8, 0x0) open(0x0, 0x163340, 0x6a) socket(0x2, 0x80802, 0x0) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) connect$auto(0x3, &(0x7f0000000000)=@l2tp={0x2, 0x0, @multicast1, 0x4}, 0x55) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7fffffe) r6 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/controlC1\x00', 0x0, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_LIST(r6, 0xc0505510, &(0x7f0000000280)={0x3, 0xff, 0x4, @inferred, &(0x7f0000000240)={@inferred, 0x1, 0x2421, 0x44e, "d92aa16f2f66e58b6cea66578135f0dc04ea8573c7bf60abb63edcb5576f3ad34386ca2829a85cf64d2420f4"}, "1a7f56fb5892ef23335220fef6a2f8347a8faa0cd56c9b02826bf0cf2044945a501ffea8b2f06b235e4354e83e3e2d56e6bb"}) 1.296867687s ago: executing program 3 (id=59): socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x9, 0x8000) r0 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/v4l-subdev3\x00', 0x169000, 0x0) ioctl$auto(r0, 0x80405600, r0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000800)='/sys/devices/virtual/bdi/43:384/max_bytes\x00', 0x181482, 0x0) read$auto(r1, 0x0, 0x9) write$auto(0x3, 0x0, 0x80000002) r2 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event0\x00', 0x80, 0x0) ioctl$auto_evdev_fops_evdev(r2, 0x40104593, 0x0) 1.194537795s ago: executing program 3 (id=60): socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'pimreg\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'pimreg\x00'}) r1 = socket(0x22, 0x3, 0x1) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000000), r1) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) (async) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYBLOB="69769d961adcfb412e5217dd55cbb5fa4ba9b9b48335f6d3bae83f4829d8818b1060d6ab3d7546b247d1dcb6c77d085f68a12f1466cb4cd390c4a335d92cb60ac3d6fa6bf368ac36585d783b13dd1bf9fb70709b27d141fce325eb4c11a5f8c977b7ca2d8421c60f0f455e4e7081cace5aa957447dce70fd0e1eea4d61422e1780166efab45f986c882f6c9ba1d59b5c8cab67e1b5cb835b6f7641130e391343ef310010cad850b5e9", @ANYBLOB="000226bd7000fedbdf25030000000800030000020000060007000400000008000200", @ANYRES32=0x0, @ANYBLOB="0a00050000000000000000000a000100d19d0c87343100000a000100000000000000000008005ebf65613212f5279a03666c5231f3273ad2343cf0b44eadba325b825570c1fbadaa0fecf569c63e0401a9351242227b16fa8378a637029f22f70b48f49932c32ebf3bb5c00c5a76e0b0ba020bb42fb92877038bb15f78786e9530e12e8b0146476b5725a2883c720eafb3a372", @ANYRES32=0x0, @ANYBLOB="0a0001000000"], 0x6c}, 0x1, 0x0, 0x0, 0x40080}, 0x40090) openat$auto_nsim_dev_health_break_fops_health(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/netdevsim/netdevsim2/health/break_health\x00', 0x220080, 0x0) close_range$auto(0x2, 0x8, 0x0) r2 = socket(0x2, 0x800, 0x100) r3 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYRESOCT=0x0], 0x1ac}}, 0x4004) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x0, &(0x7f00000002c0)={0x0, 0xc4}, 0x3, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) prctl$auto(0x1000000003b, 0x1, 0x4, 0x3, 0x7) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) syz_genetlink_get_family_id$auto_handshake(0x0, r3) madvise$auto(0x0, 0xffffffffffff0001, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000980)='/sys/devices/platform/dummy_hcd.5/usb6/power/level\x00', 0x0, 0x0) (async) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000980)='/sys/devices/platform/dummy_hcd.5/usb6/power/level\x00', 0x0, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r4, &(0x7f00000009c0)=""/231, 0xe7) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000140)={{&(0x7f0000000180)="b46557685267a028e14e25a5b7d9003af9ce45fa5b437217a685454a0392c0a552f8be9f0ce46fd2c3cd3f08bbb2ca0f42ab2578e39acc36b4ad3c7297a66a5cd421979ee5da27fe0327e133bbb03c1e062c430383927eee3452f9f98497c3ef4223e273144dbedb62", 0x16, 0x0, 0xa, 0x0, 0x1f, 0x9}, 0x800009}, 0x5, 0x20000000) (async) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000140)={{&(0x7f0000000180)="b46557685267a028e14e25a5b7d9003af9ce45fa5b437217a685454a0392c0a552f8be9f0ce46fd2c3cd3f08bbb2ca0f42ab2578e39acc36b4ad3c7297a66a5cd421979ee5da27fe0327e133bbb03c1e062c430383927eee3452f9f98497c3ef4223e273144dbedb62", 0x16, 0x0, 0xa, 0x0, 0x1f, 0x9}, 0x800009}, 0x5, 0x20000000) sendmsg$auto_NFC_CMD_DEV_UP(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)=ANY=[@ANYRES16=0x0, @ANYBLOB="20062abd7000fddbdf25020000006d"], 0x9c}, 0x1, 0x0, 0x0, 0x1}, 0x80) open(&(0x7f0000000040)='./file0\x00', 0x149443, 0x0) (async) open(&(0x7f0000000040)='./file0\x00', 0x149443, 0x0) ppoll$auto(0x0, 0x7f, 0x0, &(0x7f00000001c0)={0x3}, 0x8) (async) ppoll$auto(0x0, 0x7f, 0x0, &(0x7f00000001c0)={0x3}, 0x8) mount$auto(&(0x7f0000000000)='veth0_macvtap\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='n@\x19\xcc', 0x1, &(0x7f00000001c0)) (async) mount$auto(&(0x7f0000000000)='veth0_macvtap\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='n@\x19\xcc', 0x1, &(0x7f00000001c0)) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/platform/dummy_hcd.3/usb4/4-0:1.0/ep_81/bEndpointAddress\x00', 0x8a00, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r5, &(0x7f00000000c0)=""/17, 0x11) bpf$auto(0x4, &(0x7f0000000400)=@prog_bind_map={r1, r2, 0xfffff09c}, 0x4) ioctl$auto_SNDRV_RAWMIDI_IOCTL_STATUS32(r6, 0xc0245720, &(0x7f0000000280)={0x1, 0x2, 0x5, 0x3, 0x1, "7ff5ebf23f613940093b06b28112c1b3"}) (async) ioctl$auto_SNDRV_RAWMIDI_IOCTL_STATUS32(r6, 0xc0245720, &(0x7f0000000280)={0x1, 0x2, 0x5, 0x3, 0x1, "7ff5ebf23f613940093b06b28112c1b3"}) writev$auto(0xc8, 0x0, 0x1) 720.338722ms ago: executing program 1 (id=61): wait4$auto(0x2, 0xfffffffffffffffe, 0x5, 0x0) sendmsg$auto_TASKSTATS_CMD_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x400c0}, 0x4040000) shmctl$auto(0x3, 0xffffffff, 0x0) r0 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200", @ANYBLOB="5de1"], 0x1ac}}, 0x40000) recvmmsg$auto(r0, &(0x7f0000000140)={{0x0, 0x4, 0x0, 0x5, 0x0, 0x2, 0x8}, 0x800}, 0x10a, 0x8, 0x0) gettid() ioctl$auto(0xffffffffffffffff, 0x1, 0xffffffffffffffff) chmod$auto(&(0x7f0000000040)='\xe1\x9eHU\x00', 0x3) 693.720591ms ago: executing program 2 (id=62): r0 = openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, &(0x7f0000002640), 0x0, 0x0) ioctl$auto_USB_RAW_IOCTL_EPS_INFO(r0, 0x83c0550b, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_ipvs(&(0x7f0000000040), r1) sendmsg$auto_IPVS_CMD_GET_SERVICE(r1, &(0x7f00000015c0)={0x0, 0x0, &(0x7f0000001580)={&(0x7f00000002c0)={0x14, r2, 0x301, 0x70bd27, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x2004000d}, 0x20000800) 573.926327ms ago: executing program 1 (id=63): r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x0) socket(0xa, 0x1, 0x0) socketpair$auto(0x1e, 0x1, 0x0, 0x0) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/pts/ptmx\x00', 0x0, 0x0) ioctl$auto_TIOCSETD2(r1, 0x5423, 0x0) ppoll$auto(&(0x7f0000000040)={r0, 0x3, 0x3}, 0x8, 0x0, 0x0, 0x8) close_range$auto(0x0, 0xfffffffffffff000, 0x2) mmap$auto(0x0, 0x402000b, 0xdf, 0x10000000000eb1, 0x401, 0x8000) fanotify_init$auto(0x5, 0x2000000000002) inotify_init1$auto(0x3000000000000) socket(0x15, 0x5, 0x0) getsockopt$auto(0x2, 0x114, 0x2711, 0xfffffffffffffffc, 0x0) 356.613513ms ago: executing program 2 (id=64): mmap$auto(0x0, 0x20009, 0x10000000000df, 0xeb2, 0x401, 0x8000) (async) r0 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000080), 0x80080, 0x0) (async) mmap$auto(0x0, 0x400005, 0xfffffffffffffffe, 0x12, 0x2, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) r1 = openat$auto_mISDN_fops_timerdev(0xffffffffffffff9c, &(0x7f0000000000), 0x102000, 0x0) ioctl$auto(r1, 0x80044940, 0x0) (async) read$auto_comedi_fops_comedi_fops(0xffffffffffffffff, &(0x7f00000002c0)=""/131, 0x83) unshare$auto(0x40000080) r2 = socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) mount_setattr$auto(r2, 0x0, 0x0, 0x0, 0x0) (async) preadv$auto(0x40000000000003, 0x0, 0x6, 0x8, 0x5) (async) ioctl$auto_PPPIOCSMRU(0xffffffffffffffff, 0xc004743e, 0x0) (async) r3 = openat$auto_proc_mountinfo_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cpuinfo\x00', 0x8800, 0x0) openat$auto_tracing_free_buffer_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/free_buffer\x00', 0x200, 0x0) (async) close_range$auto(r2, r3, 0x5) (async) mprotect$auto(0x1ffff000, 0x8000000000002001, 0x4) (async) r4 = socket(0x2b, 0x1, 0x1) (async) socketpair$auto(0x5, 0x2000207, 0x8001, 0x0) ioctl$auto(r4, 0x8941, 0x4) io_uring_setup$auto(0x85, 0x0) (async) socket(0xa, 0x1, 0x83) (async) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x40080, 0x0) (async) r5 = openat$auto_cpuid_fops_cpuid(0xffffffffffffff9c, &(0x7f00000018c0)='/dev/cpu/1/cpuid\x00', 0x12141, 0x0) read$auto(r5, &(0x7f0000000000)='=-/*)$\x00', 0x1000) (async) openat$auto_clear_warn_once_fops_(0xffffffffffffff9c, &(0x7f0000000000), 0x602742, 0x0) (async) mprotect$auto(0x1, 0x7ffffffe, 0xd) (async) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) (async) openat$auto_i2cdev_fops_i2c_dev(0xffffffffffffff9c, &(0x7f0000000180), 0x80001, 0x0) (async) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8) ioctl$auto_PPPIOCSMRU(r0, 0xc004743e, 0x0) 308.450963ms ago: executing program 1 (id=65): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/net/rose4/statistics/tx_dropped\x00', 0x0, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) open(&(0x7f0000000100)='.\x00', 0x0, 0x408) getdents$auto(0x0, 0x0, 0x18) r1 = openat$auto_tracing_mark_raw_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/tracing/trace_marker_raw\x00', 0xc05, 0x0) write$auto_tracing_mark_raw_fops_trace(r1, 0x0, 0x10) getdents64$auto(0x0, 0x0, 0x41) ioperm$auto(0x7, 0x6, 0x5) close_range$auto(0x0, 0xffffffffffffefff, 0x4000000000002) fanotify_init$auto(0x5, 0x2) open(&(0x7f0000000000)='./file0\x00', 0x7ffd, 0x10c) r2 = getpgid(0x0) pidfd_open$auto(r2, 0x0) pidfd_send_signal$auto(0x2, 0x6, 0x0, 0x4) socket(0xa, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2b, 0x1, 0x1) getpid() setsockopt$auto(0x3, 0x0, 0x2b, 0x0, 0x108) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000000400)=""/178, 0xb2) 82.243567ms ago: executing program 1 (id=66): statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0xb, 0x3, 0xfffffffb, 0x940, 0x1ffde, 0x3, 0x2000000000000006, 0x8, 0x4, 0x5, 0x2, 0x5, 0xb0, 0x5, 0x2, 0xffff7fcc, 0x5, 0x7, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, [0x0, 0x0, 0x8, 0x0, 0x8000000000000, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x3, 0x0, 0x3, 0x0, 0x4]}, 0x200, 0x81) openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, 0x0, 0xc0040, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'veth1_to_bridge\x00'}) r1 = openat$auto_nsim_dev_trap_fa_cookie_fops_dev(0xffffffffffffff9c, &(0x7f0000000340)='/sys/kernel/debug/netdevsim/netdevsim2/trap_flow_action_cookie\x00', 0x80, 0x0) read$auto_nsim_dev_trap_fa_cookie_fops_dev(r1, 0x0, 0x0) socket(0x1d, 0x3, 0x1) r2 = socket(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$auto(0x3, &(0x7f0000000040)=@can={0x1d, r3}, 0x6a) sendmsg$auto_NL80211_CMD_CHANGE_NAN_CONFIG(r0, 0x0, 0x0) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[], 0x58}, 0x1, 0x0, 0x0, 0x40080}, 0x40091) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000226bd7000fedbdf25030000000800030009000000060007000080000008000200", @ANYRES32=0x0, @ANYBLOB="0a00050000000000000000000a000100aaaaaaaaaabb00000a000500aaaaaaaaaa370000080004001000", @ANYRES32=0x0, @ANYBLOB="08001b"], 0x68}, 0x1, 0x0, 0x0, 0x40080}, 0x40090) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x3, 0x100) socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11"], 0x3c}, 0x1, 0x0, 0x0, 0x40090}, 0x8000) r4 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}, 0x1, 0x4001e}, 0x40000) 82.033425ms ago: executing program 3 (id=67): mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) openat$auto_kernel_debug_fops_orangefs_debugfs(0xffffffffffffff9c, &(0x7f0000000640), 0x201, 0x0) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) move_pages$auto(0x1, 0xf54, 0x0, 0x0, 0x0, 0x8000000000000000) r1 = openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000000)='/dev/binderfs/binder0\x00', 0x20400, 0x0) ioctl$auto(r1, 0xc018620c, 0x9) write$auto(0x3, 0x0, 0xfffffdef) 0s ago: executing program 0 (id=68): open(&(0x7f0000000100)='.\x00', 0x591002, 0x408) (async) r0 = open(&(0x7f0000000100)='.\x00', 0x591002, 0x408) linkat$auto(r0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080)='&&\x00', 0x1000) write$auto_blk_mq_debugfs_fops_blk_mq_debugfs(r0, &(0x7f0000000040)="d985f66f541d7fc270829249006c4bbec3f81f40236479beaf0f6860b63ea6f9210bd747fdfabc4bb085fd144312b26978d1a6754aca76fc", 0x38) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/lockd/parameters/nlm_timeout\x00', 0x101042, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) (async) close_range$auto(0x0, 0xfffffffffffff000, 0x2) r1 = socket(0x10, 0x2, 0x0) r2 = io_uring_setup$auto(0x6, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) bind$auto(r2, &(0x7f0000000040)=@phonet={0x23, 0x4b, 0xeb, 0x9}, 0x66) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x5, 0x20000000) (async) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x5, 0x20000000) close_range$auto(0x2, 0x8, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) inotify_add_watch$auto(r1, &(0x7f0000000200)='&&\x00', 0x6d) (async) inotify_add_watch$auto(r1, &(0x7f0000000200)='&&\x00', 0x6d) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptyw4\x00', 0x4002, 0x0) (async) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptyw4\x00', 0x4002, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000001a40), r4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000001a80)={'wg2\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000001a80)={'wg2\x00', 0x0}) sendmsg$auto_ETHTOOL_MSG_CABLE_TEST_TDR_ACT(r4, &(0x7f0000002f40)={0x0, 0x0, &(0x7f0000002f00)={&(0x7f0000000180)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01002bbd7000fcdbdf251b0000000c00018008000100", @ANYRES32=r6, @ANYBLOB="0c00028008000200", @ANYRES32, @ANYBLOB="4f8f60d2b203c5c880fb6b4f371c5ae4400d08fc362393349ea01c6ad4e7ba6c12b614d569e9738e2c448adf5aa91e880eb8cde2"], 0x2c}, 0x1, 0x0, 0x0, 0x24040000}, 0x0) sendmmsg$auto(r3, &(0x7f0000000100)={{0x0, 0x4, 0x0, 0x2, 0x0, 0x400}, 0x4}, 0xfff, 0xb07e) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x80805, 0x0) connect$auto(0x3, &(0x7f00000000c0)=@in={0x2, 0x0, @rand_addr=0xc0586300}, 0x55) write$auto(0x3, 0x0, 0xfdef) openat$auto_proc_setgroups_operations_base(0xffffffffffffff9c, &(0x7f0000000140)='/proc/thread-self/setgroups\x00', 0x80100, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.13' (ED25519) to the list of known hosts. [ 63.499324][ T5818] cgroup: Unknown subsys name 'net' [ 63.630982][ T5818] cgroup: Unknown subsys name 'cpuset' [ 63.639927][ T5818] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 65.001756][ T5818] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 66.660261][ T5828] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 66.677449][ T5828] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 66.700366][ T54] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 66.730226][ T5833] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 66.738898][ T5833] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 66.747300][ T5833] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 66.755593][ T5833] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 66.763548][ T5833] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 66.778407][ T5833] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 66.778675][ T5838] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 66.794261][ T5833] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 66.794429][ T5838] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 66.812257][ T5145] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 66.819897][ T5145] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 66.823008][ T5839] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 66.827787][ T5145] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 66.841770][ T5841] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 66.844163][ T5145] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 66.858469][ T5841] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 66.858837][ T5145] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 66.873554][ T5145] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 66.878512][ T5841] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 66.889192][ T5841] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 66.897305][ T5841] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 67.157835][ T5827] chnl_net:caif_netlink_parms(): no params data found [ 67.318957][ T5827] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.326915][ T5827] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.335386][ T5827] bridge_slave_0: entered allmulticast mode [ 67.342247][ T5827] bridge_slave_0: entered promiscuous mode [ 67.360303][ T5835] chnl_net:caif_netlink_parms(): no params data found [ 67.374677][ T5827] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.381965][ T5827] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.389341][ T5827] bridge_slave_1: entered allmulticast mode [ 67.395896][ T5827] bridge_slave_1: entered promiscuous mode [ 67.414832][ T5831] chnl_net:caif_netlink_parms(): no params data found [ 67.479706][ T5827] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.495983][ T5830] chnl_net:caif_netlink_parms(): no params data found [ 67.515273][ T5827] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.564773][ T5835] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.574613][ T5835] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.581999][ T5835] bridge_slave_0: entered allmulticast mode [ 67.589308][ T5835] bridge_slave_0: entered promiscuous mode [ 67.598907][ T5827] team0: Port device team_slave_0 added [ 67.621488][ T5835] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.628840][ T5835] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.635964][ T5835] bridge_slave_1: entered allmulticast mode [ 67.643030][ T5835] bridge_slave_1: entered promiscuous mode [ 67.660618][ T5827] team0: Port device team_slave_1 added [ 67.685300][ T5835] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.705400][ T5831] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.712828][ T5831] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.720478][ T5831] bridge_slave_0: entered allmulticast mode [ 67.727027][ T5831] bridge_slave_0: entered promiscuous mode [ 67.735447][ T5835] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.767110][ T5831] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.774403][ T5831] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.782065][ T5831] bridge_slave_1: entered allmulticast mode [ 67.788826][ T5831] bridge_slave_1: entered promiscuous mode [ 67.804011][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.811468][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.838032][ T5827] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.865664][ T5835] team0: Port device team_slave_0 added [ 67.872892][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.879904][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.906253][ T5827] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.917391][ T5830] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.924843][ T5830] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.932139][ T5830] bridge_slave_0: entered allmulticast mode [ 67.939474][ T5830] bridge_slave_0: entered promiscuous mode [ 67.955765][ T5835] team0: Port device team_slave_1 added [ 67.987388][ T5830] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.994641][ T5830] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.002187][ T5830] bridge_slave_1: entered allmulticast mode [ 68.009228][ T5830] bridge_slave_1: entered promiscuous mode [ 68.025644][ T5831] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.059227][ T5830] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.070463][ T5831] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.089797][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.096780][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.122961][ T5835] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.138055][ T5827] hsr_slave_0: entered promiscuous mode [ 68.144331][ T5827] hsr_slave_1: entered promiscuous mode [ 68.152782][ T5830] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.172448][ T5831] team0: Port device team_slave_0 added [ 68.179613][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.186555][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.213661][ T5835] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.243989][ T5831] team0: Port device team_slave_1 added [ 68.276774][ T5830] team0: Port device team_slave_0 added [ 68.309816][ T5830] team0: Port device team_slave_1 added [ 68.321251][ T5835] hsr_slave_0: entered promiscuous mode [ 68.327453][ T5835] hsr_slave_1: entered promiscuous mode [ 68.334445][ T5835] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 68.342581][ T5835] Cannot create hsr debugfs directory [ 68.349095][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.356088][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.382448][ T5831] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.423718][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.430833][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.458981][ T5830] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.470699][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.477824][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.504149][ T5831] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.528869][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.535845][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.562199][ T5830] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.636431][ T5831] hsr_slave_0: entered promiscuous mode [ 68.642748][ T5831] hsr_slave_1: entered promiscuous mode [ 68.652085][ T5831] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 68.660074][ T5831] Cannot create hsr debugfs directory [ 68.721924][ T5830] hsr_slave_0: entered promiscuous mode [ 68.730765][ T5830] hsr_slave_1: entered promiscuous mode [ 68.736788][ T5830] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 68.744704][ T5830] Cannot create hsr debugfs directory [ 68.858673][ T54] Bluetooth: hci0: command tx timeout [ 68.925394][ T5827] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 68.938617][ T54] Bluetooth: hci3: command tx timeout [ 68.938990][ T5828] Bluetooth: hci2: command tx timeout [ 68.947917][ T54] Bluetooth: hci1: command tx timeout [ 68.952121][ T5827] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 68.972354][ T5827] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 68.994636][ T5827] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 69.035239][ T5835] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 69.070341][ T5835] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 69.084734][ T5835] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 69.102491][ T5835] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 69.153553][ T5831] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 69.162953][ T5831] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 69.192733][ T5831] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 69.224177][ T5831] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 69.241204][ T5830] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 69.251085][ T5830] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 69.262936][ T5830] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 69.273066][ T5830] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 69.312264][ T5827] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.335167][ T5827] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.367039][ T3568] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.374375][ T3568] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.393140][ T3568] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.400284][ T3568] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.518785][ T5835] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.549766][ T5831] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.589516][ T5831] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.601139][ T5830] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.619725][ T3568] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.626861][ T3568] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.645894][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.653100][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.671407][ T5835] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.689242][ T5830] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.710909][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.718627][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.739655][ T3615] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.746767][ T3615] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.769377][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.776493][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.816517][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.823675][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.892706][ T5827] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.025581][ T5827] veth0_vlan: entered promiscuous mode [ 70.050697][ T5827] veth1_vlan: entered promiscuous mode [ 70.078745][ T5827] veth0_macvtap: entered promiscuous mode [ 70.102790][ T5827] veth1_macvtap: entered promiscuous mode [ 70.135413][ T5831] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.195711][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.232557][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.254227][ T5835] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.287060][ T5827] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.297126][ T5827] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.307858][ T5827] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.316577][ T5827] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.342105][ T5831] veth0_vlan: entered promiscuous mode [ 70.377430][ T5831] veth1_vlan: entered promiscuous mode [ 70.396571][ T5830] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.461183][ T5835] veth0_vlan: entered promiscuous mode [ 70.484675][ T68] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.486353][ T5835] veth1_vlan: entered promiscuous mode [ 70.499466][ T68] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.574570][ T5835] veth0_macvtap: entered promiscuous mode [ 70.581630][ T68] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.592410][ T5835] veth1_macvtap: entered promiscuous mode [ 70.598578][ T68] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.602270][ T5831] veth0_macvtap: entered promiscuous mode [ 70.623299][ T5830] veth0_vlan: entered promiscuous mode [ 70.634733][ T5830] veth1_vlan: entered promiscuous mode [ 70.647540][ T5831] veth1_macvtap: entered promiscuous mode [ 70.698825][ T5835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.701391][ T5827] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 70.710567][ T5835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.742328][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.755541][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.766226][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.777071][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.789643][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.802536][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.815220][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.831311][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.846835][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.858989][ T5835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.889976][ T5835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.903087][ T5835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.917189][ T5835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.932373][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.940277][ T54] Bluetooth: hci0: command tx timeout [ 70.974509][ T5831] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.990369][ T5831] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.004374][ T5831] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.014930][ T5831] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.035998][ T54] Bluetooth: hci2: command tx timeout [ 71.036020][ T5828] Bluetooth: hci1: command tx timeout [ 71.041610][ T54] Bluetooth: hci3: command tx timeout [ 71.060062][ T5835] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.070015][ T5835] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.078823][ T5835] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.087558][ T5835] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.114160][ T5830] veth0_macvtap: entered promiscuous mode [ 71.158292][ T5830] veth1_macvtap: entered promiscuous mode [ 71.303237][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.320363][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.331140][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.344413][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.355328][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.366430][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.377366][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.408078][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.422766][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.437101][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.458857][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.476695][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.492889][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.508928][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.520371][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.530927][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.541529][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.553291][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.590203][ T68] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.600454][ T68] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.607284][ T5830] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.622345][ T5830] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.632101][ T5830] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.640990][ T5830] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.660417][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.672193][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.749176][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.755925][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.844305][ T68] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.894122][ T68] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.925437][ T3568] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.954051][ T3568] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.963020][ T5900] Zero length message leads to an empty skb [ 72.187099][ T5905] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6'. [ 72.412974][ T5912] process 'syz.2.7' launched ':,' with NULL argv: empty string added [ 72.605931][ T5905] team0 (unregistering): Port device team_slave_0 removed [ 72.629196][ T5905] team0 (unregistering): Port device team_slave_1 removed [ 73.028399][ T54] Bluetooth: hci0: command tx timeout [ 73.098024][ T5841] Bluetooth: hci1: command tx timeout [ 73.099545][ T5828] Bluetooth: hci2: command tx timeout [ 73.103505][ T54] Bluetooth: hci3: command tx timeout [ 75.097795][ T54] Bluetooth: hci0: command tx timeout [ 75.178113][ T54] Bluetooth: hci3: command tx timeout [ 75.178250][ T5828] Bluetooth: hci1: command tx timeout [ 75.183553][ T5841] Bluetooth: hci2: command tx timeout [ 77.073699][ T6002] syz.3.26 uses obsolete (PF_INET,SOCK_PACKET) [ 78.442271][ T6023] smc: net device syz_tun applied user defined pnetid ETHTOOL [ 78.570539][ T6030] Process accounting resumed [ 78.708301][ T6019] could not allocate digest TFM handle [ 78.808678][ T6015] could not allocate digest TFM handle [ 79.405161][ T6053] debugfs: Directory '!PjE ùrõ£Òxxù*›"¤l-‹' with parent 'ieee80211' already present! [ 81.362210][ T6080] mmap: syz.0.41 (6080) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 81.754979][ T6095] Process accounting resumed [ 81.778483][ T6079] could not allocate digest TFM handle [ 81.911825][ T6091] could not allocate digest TFM handle [ 83.874173][ T6140] smc: net device syz_tun applied user defined pnetid ETHTOOL [ 85.726513][ T6186] WARNING! power/level is deprecated; use power/control instead [ 85.828367][ T6177] could not allocate digest TFM handle [ 85.865695][ T6177] Process accounting resumed [ 85.973587][ T6198] could not allocate digest TFM handle [ 86.429589][ T6234] netlink: 28 bytes leftover after parsing attributes in process `syz.1.66'. [ 86.435107][ T6230] binder: 6229:6230 ioctl c018620c 9 returned -22 [ 86.449954][ T6230] ================================================================== [ 86.458055][ T6230] BUG: KASAN: slab-out-of-bounds in strlen+0x93/0xa0 [ 86.464774][ T6230] Read of size 1 at addr ffff88802e02c800 by task syz.3.67/6230 [ 86.472423][ T6230] [ 86.474773][ T6230] CPU: 1 UID: 0 PID: 6230 Comm: syz.3.67 Not tainted 6.13.0-rc5-syzkaller-00012-g0bc21e701a6f #0 [ 86.485315][ T6230] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 86.495405][ T6230] Call Trace: [ 86.498703][ T6230] [ 86.501654][ T6230] dump_stack_lvl+0x116/0x1f0 [ 86.506369][ T6230] print_report+0xc3/0x620 [ 86.510821][ T6230] ? __virt_addr_valid+0x5e/0x590 [ 86.515861][ T6230] ? __phys_addr+0xc6/0x150 [ 86.520374][ T6230] kasan_report+0xd9/0x110 [ 86.524800][ T6230] ? strlen+0x93/0xa0 [ 86.528798][ T6230] ? strlen+0x93/0xa0 [ 86.532794][ T6230] strlen+0x93/0xa0 [ 86.536615][ T6230] kstrdup+0x29/0xb0 [ 86.540518][ T6230] debug_string_to_mask+0x82/0x570 [ 86.545644][ T6230] ? trace_lock_acquire+0x14e/0x1f0 [ 86.550857][ T6230] ? lock_acquire+0x2f/0xb0 [ 86.555374][ T6230] ? __might_fault+0xe3/0x190 [ 86.560063][ T6230] ? __pfx_debug_string_to_mask+0x10/0x10 [ 86.565795][ T6230] ? __might_fault+0xe3/0x190 [ 86.570497][ T6230] orangefs_debug_write+0x22e/0x780 [ 86.575712][ T6230] ? __pfx_orangefs_debug_write+0x10/0x10 [ 86.581500][ T6230] ? rcu_is_watching+0x12/0xc0 [ 86.586280][ T6230] ? trace_lock_acquire+0x14e/0x1f0 [ 86.591497][ T6230] full_proxy_write+0xfb/0x1b0 [ 86.596275][ T6230] ? __pfx_full_proxy_write+0x10/0x10 [ 86.601659][ T6230] vfs_write+0x24c/0x1150 [ 86.606003][ T6230] ? __fget_files+0x1fc/0x3a0 [ 86.610686][ T6230] ? __pfx___mutex_lock+0x10/0x10 [ 86.615716][ T6230] ? __pfx_vfs_write+0x10/0x10 [ 86.620493][ T6230] ? __fget_files+0x206/0x3a0 [ 86.625178][ T6230] ksys_write+0x12b/0x250 [ 86.629514][ T6230] ? __pfx_ksys_write+0x10/0x10 [ 86.634375][ T6230] do_syscall_64+0xcd/0x250 [ 86.638888][ T6230] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.644791][ T6230] RIP: 0033:0x7f0b7d585d29 [ 86.649208][ T6230] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 86.668913][ T6230] RSP: 002b:00007f0b7e3e1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 86.677333][ T6230] RAX: ffffffffffffffda RBX: 00007f0b7d775fa0 RCX: 00007f0b7d585d29 [ 86.685311][ T6230] RDX: 00000000fffffdef RSI: 0000000000000000 RDI: 0000000000000003 [ 86.693290][ T6230] RBP: 00007f0b7d601b08 R08: 0000000000000000 R09: 0000000000000000 [ 86.701302][ T6230] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 86.709275][ T6230] R13: 0000000000000000 R14: 00007f0b7d775fa0 R15: 00007ffed3adc5c8 [ 86.717253][ T6230] [ 86.720270][ T6230] [ 86.722588][ T6230] Allocated by task 6230: [ 86.726905][ T6230] kasan_save_stack+0x33/0x60 [ 86.731589][ T6230] kasan_save_track+0x14/0x30 [ 86.736267][ T6230] __kasan_kmalloc+0xaa/0xb0 [ 86.740873][ T6230] orangefs_debug_write+0x14c/0x780 [ 86.746103][ T6230] full_proxy_write+0xfb/0x1b0 [ 86.750882][ T6230] vfs_write+0x24c/0x1150 [ 86.755218][ T6230] ksys_write+0x12b/0x250 [ 86.759553][ T6230] do_syscall_64+0xcd/0x250 [ 86.764061][ T6230] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.769956][ T6230] [ 86.772273][ T6230] The buggy address belongs to the object at ffff88802e02c000 [ 86.772273][ T6230] which belongs to the cache kmalloc-2k of size 2048 [ 86.786334][ T6230] The buggy address is located 0 bytes to the right of [ 86.786334][ T6230] allocated 2048-byte region [ffff88802e02c000, ffff88802e02c800) [ 86.800912][ T6230] [ 86.803237][ T6230] The buggy address belongs to the physical page: [ 86.809645][ T6230] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2e028 [ 86.818402][ T6230] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 86.826894][ T6230] anon flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 86.834871][ T6230] page_type: f5(slab) [ 86.838848][ T6230] raw: 00fff00000000040 ffff88801ac42000 0000000000000000 0000000000000001 [ 86.847430][ T6230] raw: 0000000000000000 0000000080080008 00000001f5000000 0000000000000000 [ 86.856011][ T6230] head: 00fff00000000040 ffff88801ac42000 0000000000000000 0000000000000001 [ 86.864679][ T6230] head: 0000000000000000 0000000080080008 00000001f5000000 0000000000000000 [ 86.873351][ T6230] head: 00fff00000000003 ffffea0000b80a01 ffffffffffffffff 0000000000000000 [ 86.882021][ T6230] head: 0000000000000008 0000000000000000 00000000ffffffff 0000000000000000 [ 86.890683][ T6230] page dumped because: kasan: bad access detected [ 86.897088][ T6230] page_owner tracks the page as allocated [ 86.902792][ T6230] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 35, tgid 35 (kworker/u8:2), ts 75605522592, free_ts 75558295882 [ 86.923809][ T6230] post_alloc_hook+0x2d1/0x350 [ 86.928581][ T6230] get_page_from_freelist+0xfce/0x2f80 [ 86.934057][ T6230] __alloc_pages_noprof+0x223/0x25b0 [ 86.939358][ T6230] alloc_pages_mpol_noprof+0x2c9/0x610 [ 86.944835][ T6230] new_slab+0x2c9/0x410 [ 86.949000][ T6230] ___slab_alloc+0xce2/0x1650 [ 86.953680][ T6230] __slab_alloc.constprop.0+0x56/0xb0 [ 86.959058][ T6230] __kmalloc_node_track_caller_noprof+0x2ee/0x520 [ 86.965493][ T6230] kmalloc_reserve+0xef/0x2c0 [ 86.970186][ T6230] __alloc_skb+0x164/0x380 [ 86.974614][ T6230] rtmsg_ifinfo_build_skb+0x81/0x280 [ 86.979908][ T6230] unregister_netdevice_many_notify+0x983/0x1e60 [ 86.986257][ T6230] cleanup_net+0x58c/0xbd0 [ 86.990693][ T6230] process_one_work+0x958/0x1b30 [ 86.995638][ T6230] worker_thread+0x6c8/0xf00 [ 87.000233][ T6230] kthread+0x2c1/0x3a0 [ 87.004314][ T6230] page last free pid 5822 tgid 5822 stack trace: [ 87.010642][ T6230] free_unref_page+0x661/0x1080 [ 87.015501][ T6230] qlist_free_all+0x4e/0x120 [ 87.020106][ T6230] kasan_quarantine_reduce+0x195/0x1e0 [ 87.025568][ T6230] __kasan_slab_alloc+0x69/0x90 [ 87.030434][ T6230] kmem_cache_alloc_node_noprof+0x1ca/0x3b0 [ 87.036355][ T6230] __alloc_skb+0x2b3/0x380 [ 87.040783][ T6230] netlink_alloc_large_skb+0x69/0x130 [ 87.046166][ T6230] netlink_sendmsg+0x689/0xd70 [ 87.050938][ T6230] ____sys_sendmsg+0x9ae/0xb40 [ 87.055709][ T6230] ___sys_sendmsg+0x135/0x1e0 [ 87.060394][ T6230] __sys_sendmsg+0x16e/0x220 [ 87.064993][ T6230] do_syscall_64+0xcd/0x250 [ 87.069511][ T6230] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.075429][ T6230] [ 87.077755][ T6230] Memory state around the buggy address: [ 87.083638][ T6230] ffff88802e02c700: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 87.091702][ T6230] ffff88802e02c780: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 87.099781][ T6230] >ffff88802e02c800: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 87.107839][ T6230] ^ [ 87.111897][ T6230] ffff88802e02c880: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 87.119953][ T6230] ffff88802e02c900: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 87.128003][ T6230] ================================================================== [ 87.161792][ T6230] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 87.169031][ T6230] CPU: 0 UID: 0 PID: 6230 Comm: syz.3.67 Not tainted 6.13.0-rc5-syzkaller-00012-g0bc21e701a6f #0 [ 87.179557][ T6230] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 87.189635][ T6230] Call Trace: [ 87.192923][ T6230] [ 87.195848][ T6230] dump_stack_lvl+0x3d/0x1f0 [ 87.200454][ T6230] panic+0x71d/0x800 [ 87.204370][ T6230] ? __pfx_panic+0x10/0x10 [ 87.208811][ T6230] ? preempt_schedule_thunk+0x1a/0x30 [ 87.214176][ T6230] ? preempt_schedule_common+0x44/0xc0 [ 87.219637][ T6230] check_panic_on_warn+0xab/0xb0 [ 87.224594][ T6230] end_report+0x117/0x180 [ 87.228927][ T6230] kasan_report+0xe9/0x110 [ 87.233346][ T6230] ? strlen+0x93/0xa0 [ 87.237337][ T6230] ? strlen+0x93/0xa0 [ 87.241322][ T6230] strlen+0x93/0xa0 [ 87.245143][ T6230] kstrdup+0x29/0xb0 [ 87.249032][ T6230] debug_string_to_mask+0x82/0x570 [ 87.254142][ T6230] ? trace_lock_acquire+0x14e/0x1f0 [ 87.259346][ T6230] ? lock_acquire+0x2f/0xb0 [ 87.263863][ T6230] ? __might_fault+0xe3/0x190 [ 87.268534][ T6230] ? __pfx_debug_string_to_mask+0x10/0x10 [ 87.274248][ T6230] ? __might_fault+0xe3/0x190 [ 87.278931][ T6230] orangefs_debug_write+0x22e/0x780 [ 87.284148][ T6230] ? __pfx_orangefs_debug_write+0x10/0x10 [ 87.289862][ T6230] ? rcu_is_watching+0x12/0xc0 [ 87.294647][ T6230] ? trace_lock_acquire+0x14e/0x1f0 [ 87.299860][ T6230] full_proxy_write+0xfb/0x1b0 [ 87.304653][ T6230] ? __pfx_full_proxy_write+0x10/0x10 [ 87.310015][ T6230] vfs_write+0x24c/0x1150 [ 87.314345][ T6230] ? __fget_files+0x1fc/0x3a0 [ 87.319026][ T6230] ? __pfx___mutex_lock+0x10/0x10 [ 87.324063][ T6230] ? __pfx_vfs_write+0x10/0x10 [ 87.328822][ T6230] ? __fget_files+0x206/0x3a0 [ 87.333487][ T6230] ksys_write+0x12b/0x250 [ 87.337813][ T6230] ? __pfx_ksys_write+0x10/0x10 [ 87.342680][ T6230] do_syscall_64+0xcd/0x250 [ 87.347239][ T6230] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.353129][ T6230] RIP: 0033:0x7f0b7d585d29 [ 87.357530][ T6230] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 87.377130][ T6230] RSP: 002b:00007f0b7e3e1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 87.385552][ T6230] RAX: ffffffffffffffda RBX: 00007f0b7d775fa0 RCX: 00007f0b7d585d29 [ 87.393514][ T6230] RDX: 00000000fffffdef RSI: 0000000000000000 RDI: 0000000000000003 [ 87.401490][ T6230] RBP: 00007f0b7d601b08 R08: 0000000000000000 R09: 0000000000000000 [ 87.409471][ T6230] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 87.417435][ T6230] R13: 0000000000000000 R14: 00007f0b7d775fa0 R15: 00007ffed3adc5c8 [ 87.425417][ T6230] [ 87.428677][ T6230] Kernel Offset: disabled [ 87.432990][ T6230] Rebooting in 86400 seconds..