last executing test programs: 22.784108335s ago: executing program 1 (id=86): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_MAC80211_HWSIM(&(0x7f0000000640), r0) r2 = socket(0x2, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_PROBE_MESH_LINK(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x14, r4, 0xc01, 0x70bd2c, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x20004004}, 0x40094) mmap$auto(0x0, 0x20006, 0x10000000000df, 0xeb2, 0x401, 0x8000) recvmsg$auto(0x4, 0x0, 0x33c) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000680)={0x20, r1, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@HWSIM_ATTR_PERM_ADDR={0xa, 0x16, "21ae6bdf236b"}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x48000) socket(0xa, 0x801, 0x106) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) socketpair$auto(0x3, 0x5, 0x7, 0x0) setsockopt$auto(0x3, 0x0, 0x13, 0x0, 0x9) syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000000200), r2) r5 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$auto_MAC80211_HWSIM(&(0x7f0000000640), r6) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000100)=ANY=[@ANYBLOB="a0000000", @ANYRES16=r7, @ANYBLOB="010025bd7000fadbdf25040000008a0016001a"], 0xa0}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000800) mmap$auto(0x0, 0x8, 0x1000000004, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) clone3$auto(0x0, 0x1000) sendmsg$auto_HWSIM_CMD_DEL_RADIO(r0, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x20, r7, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@HWSIM_ATTR_RADIO_NAME={0xc, 0x11, 'nl80211\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x48840}, 0x10) sendmsg$auto_NL80211_CMD_NEW_KEY(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80400020}, 0xc, &(0x7f0000000240)={&(0x7f0000000880)={0x164, r5, 0x10, 0x70bd2a, 0x25dfdbff, {}, [@NL80211_ATTR_MAX_NUM_AKM_SUITES={0x70, 0x13c, "26ba5c3bf6adbfe40018f254bc734d91df665e723189a0567fa59c73a93b71ccddd2ff95c6005c91637c965baed5829c7378f6d7efa8f791e19fc23e7c8e0f9835b5c7a66ca81de776ef63de53884251bd216baf7ec0de2f31d3c68275c93613e14b088814f5a7aa32a23045"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0x96, 0xe8, "02088d99934ef1fdd89c589a77f03a79558c4208c52f7a1e9f278e3167ac4c0001e2d456ef621ad6af57fc4673553b5eb69d03bee18f670d9dd97bc83a06f4d2d9bbca3bf3b3b80ffab929c2a5dbd1e74e406eb4f1a8782793dd4b65ca5d85def93d2b66d9707f131864edc0374741f438559dcb66cf219b3da7f8a053d604d569c1f323206f177c42df1f11f27e81a0201a"}, @NL80211_ATTR_PUNCT_BITMAP={0x8, 0x142, 0xbcd}, @NL80211_ATTR_TDLS_INITIATOR={0x4}, @NL80211_ATTR_BSS_CTS_PROT={0x5, 0x1c, 0x5}, @NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x9}, @NL80211_ATTR_BSS_SELECT={0x23, 0xe3, "3afc539b3ff2e492182dc045dc33781270809ab859441e5b225772aa7dc1da"}, @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, 0x1}]}, 0x164}, 0x1, 0x0, 0x0, 0x34040081}, 0x4000) 21.693931092s ago: executing program 1 (id=93): r0 = syz_genetlink_get_family_id$auto_802_15_4_MAC(&(0x7f0000002280), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) sendmsg$auto_IEEE802154_DEL_IFACE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="00042bb57000fedbdf2522000000050027000600000005002b00a3000000"], 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x4000010) (async) fanotify_mark$auto(0x1, 0x56d, 0xa, 0x8, 0xfffffffffffffffc) (async) madvise$auto(0x0, 0xffffffffffff0081, 0x15) mprotect$auto(0x1ffff000, 0x8007, 0x6) socket$nl_generic(0x10, 0x3, 0x10) (async) open(&(0x7f0000000000)='./file0\x00', 0x7ffd, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0xa040, 0x0) (async) fchown$auto(0x5, 0x8, 0x40004) (async) open(&(0x7f0000000000)='./file0\x00', 0x40440, 0x40) sendfile$auto(0x9, 0x2, &(0x7f0000000000)=0x2, 0x83) (async, rerun: 64) read$auto(0x7, &(0x7f0000000180)='nl80211\x00', 0x401) (rerun: 64) 21.380186549s ago: executing program 1 (id=96): r0 = socket(0x23, 0x1, 0x1000200) close_range$auto(0xffff, 0x8, 0x5) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), r0) (async) r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), r0) sendmsg$auto_NL80211_CMD_JOIN_OCB(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000c}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x50, r1, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@NL80211_ATTR_MPATH_NEXT_HOP={0x11, 0x1a, "0f18dc811e1718c3a92cad3710"}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x5}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x8}, @NL80211_ATTR_MDID={0x6, 0xb1, 0x2}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x1ff}, @NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x9}]}, 0x50}, 0x1, 0x0, 0x0, 0x400c885}, 0x121) sendmsg$auto_NL802154_CMD_DEL_SEC_KEY(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x40, 0x0, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@NL802154_ATTR_PAN_ID={0x6, 0x9, 0x3}, @NL802154_ATTR_SCAN_DURATION={0x5, 0x24, 0x3}, @NL802154_ATTR_IFNAME={0x14, 0x4, 'ip6gre0\x00'}, @NL802154_ATTR_PID={0x8, 0x1c, 0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x8080}, 0x4000) socket(0x2, 0x1, 0x5) (async) r2 = socket(0x2, 0x1, 0x5) fstatfs$auto(0x6ee, &(0x7f0000000280)={0x6, 0x80000000, 0x5, 0xfffffffffffffffd, 0xd3d, 0x2bbe8704, 0x4, {[0xd1, 0x4]}, 0x2, 0x1, 0x101, [0x7, 0x8, 0x6, 0x1ff]}) (async) fstatfs$auto(0x6ee, &(0x7f0000000280)={0x6, 0x80000000, 0x5, 0xfffffffffffffffd, 0xd3d, 0x2bbe8704, 0x4, {[0xd1, 0x4]}, 0x2, 0x1, 0x101, [0x7, 0x8, 0x6, 0x1ff]}) r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_SET_TID_CONFIG(r2, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x20, r3, 0x300, 0x70bd2b, 0x25dfdbfb, {}, [@NL80211_ATTR_WIPHY_SELF_MANAGED_REG={0x4}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x401}]}, 0x20}, 0x1, 0x0, 0x0, 0x8}, 0x40) r4 = syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000480), r2) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000004c0)={'vxcan1\x00', 0x0}) sendmsg$auto_BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x35e9e98593f359ae}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x38, r4, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_DAT_CACHE_VID={0x6, 0x25, 0x10}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r5}, @BATADV_ATTR_BLA_VID={0x6, 0x20, 0x7ff}, @BATADV_ATTR_MESH_IFNAME={0xc, 0x4, 'ip6gre0\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x4004084) (async) sendmsg$auto_BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x35e9e98593f359ae}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x38, r4, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_DAT_CACHE_VID={0x6, 0x25, 0x10}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r5}, @BATADV_ATTR_BLA_VID={0x6, 0x20, 0x7ff}, @BATADV_ATTR_MESH_IFNAME={0xc, 0x4, 'ip6gre0\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x4004084) syz_genetlink_get_family_id$auto_ila(&(0x7f00000005c0), r0) (async) syz_genetlink_get_family_id$auto_ila(&(0x7f00000005c0), r0) r6 = open(&(0x7f0000000600)='./file0\x00', 0x14001, 0x100) syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000680), r0) (async) r7 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000680), r0) sendmsg$auto_NFSD_CMD_THREADS_SET(r6, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x24, r7, 0x2, 0x70bd2d, 0x25dfdbfc, {}, [@NFSD_A_SERVER_THREADS={0x8, 0x1, 0x3}, @NFSD_A_SERVER_THREADS={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x841}, 0x10) madvise$auto(0xffffffffffffffff, 0xa5, 0x400) sendmsg$auto_NL80211_CMD_TDLS_MGMT(r0, &(0x7f00000008c0)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000880)={&(0x7f00000007c0)={0xa8, r1, 0x200, 0x70bd2a, 0x25dfdbfc, {}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x9}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_MAC_MASK={0x1f, 0xd7, "79dd197a32c70dc2524d2ecc15a27985b7179a1b8764b8d01aec16"}, @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0xfffffffd}, @NL80211_ATTR_CNTDWN_OFFS_BEACON={0x54, 0xba, "c73944350ebef3f403e411c640ac95a58ae0c49d26fbad4df2908e225a52ae34cac914d8324b4e1aefc228eb653746ba6468f43e84375d3c565fb1cfbcc6c7f30d68e282ed196e6254d9ac0e4b58b5e6"}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x8000}, @NL80211_ATTR_RECEIVE_MULTICAST={0x4}]}, 0xa8}, 0x1, 0x0, 0x0, 0x220040c4}, 0x4040) close_range$auto(0x12a, 0x5, 0x9) madvise$auto(0xfffffffffffff593, 0x7, 0x4) (async) madvise$auto(0xfffffffffffff593, 0x7, 0x4) syz_genetlink_get_family_id$auto_gtp(&(0x7f0000000940), r6) (async) r8 = syz_genetlink_get_family_id$auto_gtp(&(0x7f0000000940), r6) sendmsg$auto_GTP_CMD_GETPDP(r0, &(0x7f0000000a40)={&(0x7f0000000900), 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x4c, r8, 0x400, 0x70bd2c, 0x25dfdbfd, {}, [@GTPA_LINK={0x8, 0x1, 0x8}, @GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_MS_ADDR6={0x14, 0xc, {@u6_addr8="63fe34d5891de3efeb08b13f0f044746"}}, @GTPA_MS_ADDR6={0x14, 0xc, {@u6_addr16=[0x5, 0x3, 0x100, 0x60, 0x5, 0x6, 0x7ff, 0xb]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000000}, 0x2000000) (async) sendmsg$auto_GTP_CMD_GETPDP(r0, &(0x7f0000000a40)={&(0x7f0000000900), 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x4c, r8, 0x400, 0x70bd2c, 0x25dfdbfd, {}, [@GTPA_LINK={0x8, 0x1, 0x8}, @GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_MS_ADDR6={0x14, 0xc, {@u6_addr8="63fe34d5891de3efeb08b13f0f044746"}}, @GTPA_MS_ADDR6={0x14, 0xc, {@u6_addr16=[0x5, 0x3, 0x100, 0x60, 0x5, 0x6, 0x7ff, 0xb]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000000}, 0x2000000) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$auto_netdev(&(0x7f0000000ac0), r0) sendmsg$auto_NETDEV_CMD_NAPI_GET(r9, &(0x7f0000000bc0)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x241001}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)={0x54, r10, 0x0, 0x70bd27, 0x25dfdbff, {}, [@NETDEV_A_NAPI_ID={0x8, 0x2, 0x7}, @NETDEV_A_NAPI_ID={0x8, 0x2, 0x8}, @NETDEV_A_NAPI_ID={0x8, 0x2, 0x1}, @NETDEV_A_NAPI_ID={0x8, 0x2, 0xe90}, @NETDEV_A_NAPI_ID={0x8, 0x2, 0x3}, @NETDEV_A_NAPI_ID={0x8, 0x2, 0x5}, @NETDEV_A_NAPI_ID={0x8, 0x2, 0x1bb}, @NETDEV_A_NAPI_ID={0x8, 0x2, 0x7b}]}, 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x4000) sendmsg$auto_NETDEV_CMD_NAPI_GET(r0, &(0x7f0000000cc0)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c40)={0x14, r10, 0x100, 0x70bd28, 0x25dfdbfe}, 0x14}}, 0x8800) (async) sendmsg$auto_NETDEV_CMD_NAPI_GET(r0, &(0x7f0000000cc0)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c40)={0x14, r10, 0x100, 0x70bd28, 0x25dfdbfe}, 0x14}}, 0x8800) setns$auto(0x100, 0x1ff) socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000d40), r6) sendmsg$auto_ETHTOOL_MSG_LINKSTATE_GET(r9, &(0x7f0000000e00)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d80)={0x24, r11, 0x4, 0x70bd2b, 0x25dfdbfb, {}, [@ETHTOOL_A_LINKSTATE_HEADER={0x7, 0x1, "29e4b3"}, @ETHTOOL_A_LINKSTATE_HEADER={0x7, 0x1, "dc6784"}]}, 0x24}, 0x1, 0x0, 0x0, 0x43}, 0x4004) 20.972841377s ago: executing program 1 (id=99): socket(0x1e, 0x3, 0x4001) write$auto(0x3, 0x0, 0x81) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x5, 0x0) setsockopt$auto(0x4, 0x84, 0x3, 0xfffffffffffffffe, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x7, 0x42) mmap$auto(0xf000, 0x8, 0x7fffffffffffffff, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_IPVS(&(0x7f0000000080), 0xffffffffffffffff) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mbind$auto(0xf000, 0x1, 0x1, 0x0, 0x7fff, 0x2) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) mmap$auto(0x0, 0x20009, 0x800000000000df, 0xeb1, 0xa, 0x8) mbind$auto(0x400, 0x9, 0x9ae5, &(0x7f0000000000)=0x25, 0x5, 0x9) setrlimit$auto(0x8, 0xffffffffffffffff) mbind$auto(0x0, 0x100000004, 0x100000000, 0x0, 0x20000000000006, 0x2) madvise$auto(0x0, 0xffffffffffff0005, 0x19) futex$auto(0xfffffffffffffffe, 0x8, 0x7, 0x0, 0xfffffffffffffffc, 0x7fffffffffffffff) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sendmsg$auto_IPVS_CMD_GET_CONFIG(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="362c722a797e0903042050ca110b26bd7000fddbdf350d000000"], 0x14}, 0x1, 0x0, 0x0, 0x40008051}, 0x4000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket(0x15, 0x5, 0x0) poll$auto(0x0, 0x2, 0xc) 19.80295195s ago: executing program 1 (id=104): memfd_create$auto(0xfffffffffffffffe, 0x0) madvise$auto(0x0, 0x2000040080000004, 0xe) mlockall$auto(0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mincore$auto(0x0, 0x8000000000005a, 0x0) pipe2$auto(0x0, 0x80) tkill$auto(0x80000000000001, 0x7) kcmp$auto(0x1, 0x1, 0x3, 0x85, 0x2) bpf$auto(0x10, 0x0, 0x9) socket(0xa, 0x6, 0x0) setsockopt$auto(0x3, 0x29, 0x1f, 0xffffffffffffffff, 0x3) mprotect$auto(0x1ffff000, 0x8000000000000001, 0x4) socket(0xa, 0x2, 0x0) setsockopt$auto(0x400000000000003, 0x29, 0x3a, 0xffffffffffffffff, 0x3) mprotect$auto(0x1ffff000, 0x810002, 0x5) 18.457677963s ago: executing program 1 (id=110): mbind$auto(0xf000, 0x8000000000000001, 0x1, 0x0, 0x6, 0x2) r0 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) futex$auto(0x0, 0x89, 0x4, 0x0, 0x0, 0x100) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x801, 0x106) bind$auto(0x8, 0xfffffffffffffffd, 0x0) socket(0x10, 0x3, 0x6) r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000002f40), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) inotify_init1$auto(0x100) sendmsg$auto_NL80211_CMD_LEAVE_IBSS(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000100)={0x14, r1, 0x1, 0x70bd26, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) 6.205294038s ago: executing program 2 (id=150): set_mempolicy$auto(0x2, &(0x7f0000000080)=0x7e, 0x4) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mprotect$auto(0x1ffff000, 0x8000000000000001, 0x4) mmap$auto(0x800, 0x100000000, 0x0, 0x55879b94, 0x8, 0x0) (async) clone$auto(0x81000005, 0x6, 0xfffffffffffffffd, 0xffffffffffffffff, 0x80000001) move_pages$auto(0x0, 0xd0, 0x0, &(0x7f0000001140), 0x0, 0x2) 5.612637335s ago: executing program 2 (id=152): ioperm$auto(0x5, 0x6, 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nbd(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$auto_NBD_CMD_CONNECT(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000380)={0x30, r1, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SIZE_BYTES={0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0x40080}, 0x20040000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x1e, 0x401, 0x8000) dup2$auto(0x0, 0x3) pwritev2$auto(0x3, 0x0, 0x9, 0xffffffffffffffff, 0x2, 0xc) keyctl$auto(0x4, 0xfffffffd, 0x6, 0xffffffffffffffff, 0xb8a) mmap$auto(0xe, 0x8, 0x2, 0x17, 0xfffffffffffffffc, 0x80000000) ioperm$auto(0x4, 0x10001, 0x5) fsetxattr$auto(0x699d, 0x0, 0x0, 0x4, 0x0) 5.316431741s ago: executing program 2 (id=153): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x40) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_IOAM6(&(0x7f0000000440), 0xffffffffffffffff) bpf$auto(0x5, &(0x7f0000000000)=@iter_create={0xf14, 0xf4240}, 0x7) epoll_create$auto(0x4) rseq$auto(&(0x7f0000000300)={0xe, 0x401, 0x0, 0x6, 0xffffffff, 0x2}, 0x8000, 0x0, 0x6) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x3) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0xffffffffffff0001, 0x15) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mq_notify$auto(0x6f7, 0x0) 3.681193774s ago: executing program 3 (id=159): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000080), r0) acct$auto(&(0x7f0000000000)='nfsd\x00') close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x3, 0x6) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x402, 0x300000000000) mprotect$auto(0x1000, 0x3, 0xe) sendmsg$auto_NFSD_CMD_THREADS_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001380)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002dbd7000fddbdf250200000011000400"], 0x28}, 0x1, 0x0, 0x0, 0x40000021}, 0x8004) 3.544620356s ago: executing program 3 (id=160): bpf$auto(0x9, 0x0, 0x0) (async) bpf$auto(0x9, 0x0, 0x0) mknod$auto(&(0x7f0000000040)='\xfd\x90\x8f2\x14\x92\x00\xbf\xdf\xcf\x9a\xae}\xd9\xf95\xc5gV\x82\f\xe5h\xfe\x83\xe4\xbe\x8c\x1f\xa5\xf1_T\xde\xf7\xd4\x83D\x9eXS\xd6\x90T\xc1v\xad#\xc4q\x8b\xed2\xadW:0\xef\x9c.=\xba\x0fy\x8f\xcd\xd6\xde\xa9i\xec\xe8\xca\x9f\xf3\x82b\xa2y\xa87J\xfc \xc5\xd8\x80\xba\xaaV\x8f{\x1f\x1b\xb0\n\x97\\\xa7\xe3\xdf\xc29-*;#r\xc8\xd1\x14RcF\x87\xe4\x1c\x1fGL\xa5\x19\x90\xd6\x8d*\xe6\b(\x1a\xea\x95\xdc\xa6)5\xae&yAl\x1e\xe3j Lp\x91\r\xed%\xafZ\xf8w\xf2}\xcdGS\xce\xb9\xdck\x86\x00.6\xe6{\xc1\x00\x1bW5\x81\xda!\xcb.O\xa9\xf3\xa7\x88+\xb9\xf3\x9a7\xa4\xe6)<\xa79\xa4\x87\\\xb4\xbf\v\x03\x87\xac\x87r\x02\x05\xdb\xe4\xde,V\xb6G\xba.WR\xe2<~\xdd\xb2\xe53hj_;\xa5qm\x92\xc7P\xc9.\x82w8\x1f\xfcX\xe4\x14\xc72cC\xd3\x00'/263, 0x2, 0x4) mknod$auto(&(0x7f0000000280)='$}\x00', 0x0, 0xfffffffd) mknod$auto(&(0x7f00000002c0)='&-\x00', 0x0, 0x6) (async) mknod$auto(&(0x7f00000002c0)='&-\x00', 0x0, 0x6) socket(0x21, 0x2, 0x2) connect$auto(0x3, &(0x7f0000000180)={0x5, @sockaddr_1_1}, 0x54) rename$auto(&(0x7f0000000180)='\xfd\x90\x8f2\x14\x92\x00\xbf\xdf\xcf\x9a\xae}\xd9\xf95\xc5gV\x82\f\xe5h\xfe\x83\xe4\xbe\x8c\x1f\xa5\xf1_T\xde\xf7\xd4\x83D\x9eXS\xd6\x90T\xc1v\xad#\xc4q\x8b\xed2\xadW:0\xef\x9c.=\xba\x0fy\x8f\xcd\xd6\xde\xa9i\xec\xe8\xca\x9f\xf3\x82b\xa2y\xa87J\xfc \xc5\xd8\x80\xba\xaaV\x8f{\x1f\x1b\xb0\n\x97\\\xa7\xe3\xdf\xc29-*;#r\xc8\xd1\x14RcF\x87\xe4\x1c\x1fGL\xa5\x19\x90\xd6\x8d*\xe6\b(\x1a\xea\x95\xdc\xa6)5\xae&yAl\x1e\xe3j Lp\x91\r\xed%\xafZ\xf8w\xf2}\xcdGS\xce\xb9\xdck\x86\x00.6\xe6{\xc1\x00\x1bW5\x81\xda!\xcb.O\xa9\xf3\xa7\x88+\xb9\xf3\x9a7\xa4\xe6)<\xa79\xa4\x87\\\xb4\xbf\v\x03\x87\xac\x87r\x02\x05\xdb\xe4\xde,V\xb6G\xba.WR\xe2<~\xdd\xb2\xe53hj_;\xa5qm\x92\xc7P\xc9.\x82w8\x1f\xfcX\xe4\x14\xc72cC\xd3\x00', &(0x7f0000000000)='$}\x00') 3.337103384s ago: executing program 3 (id=162): close_range$auto(0x0, 0xe903, 0x2) socket(0x2, 0x1, 0x0) mmap$auto(0xfffffffffffffffd, 0x8, 0xdf, 0x40009b72, 0x80000000008, 0x8000) alarm$auto(0x0) mmap$auto(0x2, 0x20007, 0xdd, 0xeb1, 0x40000000401, 0x0) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) umount2$auto(0x0, 0x4) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket(0x1f, 0x1, 0xfffffffc) socket(0x28, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x9, 0xdf, 0x15, 0x2b, 0x8000) socket(0xa, 0x801, 0x106) setsockopt$auto(0x3, 0x0, 0x1, 0x0, 0x9) listen$auto(0x0, 0x4) alarm$auto(0x8) socket(0x2b, 0x1, 0x1) eventfd$auto(0xfffffff8) connect$auto(0x3, &(0x7f00000000c0)={0x2, @sa_data_min="1177f7a996c03917d3da2361b47d"}, 0x5) lchown$auto(&(0x7f0000000000)='.\x00', 0x0, 0x6) listen$auto(0x3, 0x81) socket(0x10, 0x3, 0x0) mmap$auto(0x0, 0x7, 0xdb, 0x571249d, 0x5, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mmap$auto(0x2, 0x400005, 0xdf, 0x9b72, 0x10000005, 0x8002) io_setup$auto(0x1, &(0x7f0000000040)=0x4) llistxattr$auto(&(0x7f0000000080), 0x0, 0x200ce3e) epoll_create$auto(0x4) fsconfig$auto(0x6, 0x6, 0x0, 0xfffffffffffffffe, 0x2) socket(0x2, 0x1, 0x0) 2.38130773s ago: executing program 0 (id=165): socket$nl_generic(0x10, 0x3, 0x10) (async) semctl$auto(0x1, 0x9, 0x40, 0x9f) (async) r0 = socket(0x2, 0x801, 0x100) fcntl$auto(0x4, 0x4, 0xa553) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000180), r0) 2.269164001s ago: executing program 3 (id=166): r0 = socket(0x1e, 0x4, 0x0) socket(0x2, 0x5, 0x0) mmap$auto(0x0, 0x40000a, 0xde, 0x809b72, 0x10000000006, 0x8000) io_setup$auto(0x1, 0x0) io_setup$auto(0x9e, &(0x7f0000000000)) listen$auto(0x3, 0x81) shutdown$auto(0x200000003, 0x2) socket(0x1, 0x2, 0x0) listen$auto(0x7f9e, 0xf) mmap$auto(0x0, 0x8, 0x1000000004, 0x9b72, 0x2, 0x8000) rt_sigaction$auto(0x11, &(0x7f0000000100)={0x0, 0x2000004, 0x0, {0x7}}, 0x0, 0x8) setrlimit$auto(0x1000000007, 0x0) socket(0xa, 0x801, 0x84) sendmsg$auto_NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x0, 0x4, 0x6, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4000010}, 0x800) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c148b73a55b00000000003500000000", @ANYRES16=r2, @ANYBLOB="000229bd7000ffdbdf251100000007000100b2926300"], 0x1c}, 0x1, 0x0, 0x0, 0x4c040}, 0x8840) sendmsg$auto_ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="10002cbd7000fddbdf25050000000500070000000400050006000e00000027000300faf975b5ec83e77182871571f72f11e0a5e9d7a6d0c4960089ec0e1bae83ca886405470005000700050000000800050000000100"], 0x5c}, 0x1, 0x0, 0x0, 0x84}, 0x84) socket(0x2b, 0x2, 0x1) rseq$auto(0xffffffffffffffff, 0xc8f, 0x0, 0x2) select$auto(0x3aee, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x40000a, 0xe2, 0xfffffffffffffff4, 0x0, 0x8000) mmap$auto(0x0, 0x20109, 0xdf, 0xeb1, 0x3fd, 0x8000) socket(0x22, 0x6efb7d17b8f91f90, 0x7) socket(0x1d, 0x2, 0x7) io_uring_setup$auto(0x6, 0x0) read$auto(0x18000000, 0x0, 0x3) io_setup$auto(0x10000, &(0x7f0000000040)) 2.223354118s ago: executing program 0 (id=167): connect$auto(0x3, &(0x7f00000000c0)={0x2, @sockaddr_1_1}, 0x55) mmap$auto(0x0, 0x8044, 0x7, 0x1a, 0x4000000080000000, 0x800008000) mmap$auto(0x0, 0x8, 0xdf, 0x9b76, 0x2, 0x808000) timer_create$auto(0x8, 0x0, 0x0) timer_gettime$auto(0x0, 0xfffffffffffffffc) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/mnt\x00') ioctl$NS_GET_PARENT(r0, 0xb701, 0x0) mprotect$auto(0x40, 0x9, 0xf) gettimeofday$auto(&(0x7f0000000000)={0x3, 0x2}, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) ioperm$auto(0x1000, 0x9b, 0x6) pkey_free$auto(0x89) epoll_pwait$auto(0x8, 0xfffffffffffffffd, 0xffffffffffffffff, 0xffffffff, 0x0, 0x963) socket(0x0, 0x2, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000000c0), 0xffffffffffffffff) madvise$auto(0x0, 0x80000001, 0x4) sendmsg$auto_NL80211_CMD_PROBE_MESH_LINK(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="1d00f990d90bf687cf04004ee93825a8ce517e875ebcee205ed6a5c452315080c823fe4c78d0752a4879074013ac70be01515ddb50e872a519bddbe4df8f4c0e4c362778c6fc8b5e222ad2fdc7140c7a7e130652df71ff87"], 0x14}, 0x1, 0x0, 0x0, 0x20004004}, 0x40094) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x9, 0xdf, 0xeb4, 0xd17, 0x100000000) setsockopt$auto(0x200000000000003, 0x1, 0x29, 0x0, 0x300) socket(0x15, 0x5, 0x0) ioctl$auto(0x3, 0x7, 0x7) socket(0x2, 0x5, 0x0) listen$auto(0x8, 0xfffffffd) shutdown$auto(0x200000003, 0x2) mmap$auto(0x1, 0x8000000000020002, 0x10000000000df, 0x80000010, 0xae000000, 0x8000) recvmsg$auto(0x4, 0x0, 0x33c) clone$auto(0x5, 0x8, 0x0, 0x0, 0x3) mmap$auto(0xf000, 0x8, 0x1000000003, 0x9b72, 0x2, 0x8000) 1.689186657s ago: executing program 2 (id=168): mmap$auto(0x3, 0x1ff, 0x2, 0x17, 0x9, 0x7fffffff) (async) setresuid$auto(0x401, 0x1, 0x7ff) ioctl$auto(0x60, 0x85a, 0x7) (async, rerun: 32) landlock_create_ruleset$auto(&(0x7f0000000000)={0x952, 0x7fffffffffffffff}, 0xbf2, 0x4) (rerun: 32) madvise$auto(0xfff, 0x6e0ee84b, 0x236) landlock_create_ruleset$auto(&(0x7f0000000040)={0xffffffffffffffff, 0x8}, 0x9, 0x9) (async) open(&(0x7f0000000080)='./file0\x00', 0x0, 0x19) (async) madvise$auto(0x9, 0x6, 0x10001) open(&(0x7f00000000c0)='./file0\x00', 0x8a002, 0x82) close_range$auto(0x84, 0x10000, 0x9) (async) landlock_create_ruleset$auto(&(0x7f0000000100)={0x2319, 0x4}, 0x9, 0x6) (async, rerun: 64) landlock_create_ruleset$auto(&(0x7f0000000140)={0xfffffffffffffffe, 0x8}, 0x3, 0xfffffffe) (async, rerun: 64) r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$auto_NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0xc7e237505f982b96}, 0xc, &(0x7f00000003c0)={&(0x7f0000000200)={0x1bc, r1, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@NL802154_ATTR_CHANNEL={0x5, 0x8, 0x4}, @NL802154_ATTR_SEC_OUT_LEVEL={0x8, 0x2a, 0x75}, @NL802154_ATTR_IFTYPE={0x8, 0x5, 0x76b}, @NL802154_ATTR_SCAN_MEAN_PRF={0xf6, 0x23, "fd52c94141726ee72b2ce3b2633712c173212145ba92be851bb2d617e907aa3be73723e9db904eeffc7d89423de0db551ba13829b13f4be41f2909dc25fb2faa618ed9a6b27677fe4469375e09dee4345e271326b6ceb84c4f3f0b45e85844a096394d26de28b6d9b3e4198a3e67def470d37d14920fa4db6d7ffeebe85c65395c4b206507eab2c884e758525e4ec7644c1cbd902cc077b969820285346f2b6bbec923f0c56909ce2ff92018a3ab68e2cd5795d8deac842fd988269d8faf86374741dc0e2276aef4ea065d304fca0495bcb8bc2355bbb4cbb497a8215c222868f41f186aa2c9e0a12885168228fa89210cc9"}, @NL802154_ATTR_SEC_KEY={0x75, 0x30, "bbc84b9d220fa0c940ea72546c673eaa613818db7a6f91f4781ae7301c5cc5af65c5394a45e6561fd4b83dd89c2d79f931ca1aa6329ffafef5a119274104807234cb3a96925a895d8f610f55cd1c75c81d3f6eee47b63b6ee5eb5c81b390734c085812f735df190a60d429d6dd3dd2c11d"}, @NL802154_ATTR_PAGE={0x5, 0x7, 0xbb}, @NL802154_ATTR_SCAN_CHANNELS={0x8, 0x21, 0x5b5}, @NL802154_ATTR_LBT_MODE={0x5, 0x13, 0x5}, @NL802154_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x1bc}, 0x1, 0x0, 0x0, 0x10}, 0x40010) (async, rerun: 32) fcntl$auto(0x6, 0x9, 0x4) (rerun: 32) socket(0xa, 0xa, 0x9) (async, rerun: 64) getsockopt$auto(0x7, 0x3, 0x0, &(0x7f0000000440)='nl802154\x00', &(0x7f0000000480)=0xffffffff) (async, rerun: 64) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$auto_NCSI(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$auto_NCSI_CMD_SET_PACKAGE_MASK(r2, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x1c, r3, 0x200, 0x70bd28, 0x25dfdbfc, {}, [@NCSI_ATTR_CHANNEL_ID={0x8, 0x4, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x44041}, 0x20000804) (async) ioprio_set$auto(0x101, 0x8000, 0x9) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ila(&(0x7f0000000600), r2) close_range$auto(0xc85, 0x1, 0x9) (async) open(&(0x7f0000000640)='./file0/file0\x00', 0x400, 0x42) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000006c0)={'veth0_to_team\x00', 0x0}) sendmsg$auto_NCSI_CMD_PKG_INFO(r2, &(0x7f0000000800)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000700)={0x84, r3, 0x300, 0x70bd2a, 0x25dfdbfc, {}, [@NCSI_ATTR_PACKAGE_LIST={0x5c, 0x2, "c9633ca698273316886137d7ffd61d76d6d04d1669d95b7cbe731127ce33efb86d4d3bb6cf547d9c8b26f63651068ea685c535eb675604d5805fecaa559b596e0e4a4710e96201387c89f1d259e3931f15d4d2a18f1607d2"}, @NCSI_ATTR_MULTI_FLAG={0x4}, @NCSI_ATTR_IFINDEX={0x8, 0x1, r5}, @NCSI_ATTR_CHANNEL_MASK={0x8, 0x8, 0x6}]}, 0x84}, 0x1, 0x0, 0x0, 0x8000}, 0x1091) r6 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000880), r4) sendmsg$auto_ETHTOOL_MSG_RINGS_SET(r0, &(0x7f0000000980)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x4c, r6, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@ETHTOOL_A_RINGS_TX_PUSH={0x5, 0xd, 0x4}, @ETHTOOL_A_RINGS_RX={0x8, 0x6, 0x50c2}, @ETHTOOL_A_RINGS_RX_BUF_LEN={0x8, 0xa, 0xff}, @ETHTOOL_A_RINGS_HEADER={0x7, 0x1, 'oa2'}, @ETHTOOL_A_RINGS_TCP_DATA_SPLIT={0x5, 0xb, 0x4}, @ETHTOOL_A_RINGS_RX={0x8, 0x6, 0x9}, @ETHTOOL_A_RINGS_RX_JUMBO={0x8, 0x8, 0xffa}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8080}, 0x0) 1.309347561s ago: executing program 0 (id=169): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000080), r0) setreuid$auto(0x3, 0x7) (async) ioperm$auto(0x7, 0x6, 0x2) (async) sendmsg$auto_NFSD_CMD_THREADS_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r1, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@NFSD_A_SERVER_LEASETIME={0x8, 0x3, 0x5e}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0x6f8d}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000021}, 0x8004) 1.219396878s ago: executing program 2 (id=170): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nbd(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$auto_NBD_CMD_CONNECT(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000380)={0x24, r1, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x5}, @NBD_ATTR_SOCKETS={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x40080}, 0x20040000) r2 = syz_genetlink_get_family_id$auto_802_15_4_MAC(&(0x7f0000000080), r0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_tcp_metrics(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_TCP_METRICS_CMD_DEL(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, r4, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@TCP_METRICS_ATTR_ADDR_IPV4={0x8, 0x1, @private=0xa010102}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x8004) sendmsg$auto_IEEE802154_LLSEC_DEL_DEVKEY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r2, 0x800, 0x70bd27, 0x25dfdbfc, {}, [@IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0x9}, @IEEE802154_ATTR_DEST_PAN_ID={0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x4080}, 0x800) syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000000), r0) 1.141221915s ago: executing program 0 (id=171): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x2, 0x801, 0x100) sendmsg$auto_NL80211_CMD_START_AP(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x0, 0x40910}, 0x20000000) recvfrom$auto(0x3, 0x0, 0x800000000e, 0xfffff4a4, 0x0, 0xfffffffffffffffd) sendmsg$auto_ETHTOOL_MSG_PRIVFLAGS_GET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000004c0)={0x14, 0x0, 0x4, 0x70bd2b, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x2404c040) syz_genetlink_get_family_id$auto_nfsd(&(0x7f00000006c0), r0) r2 = syz_genetlink_get_family_id$auto_handshake(&(0x7f0000000cc0), r0) sendmsg$auto_HANDSHAKE_CMD_DONE(r0, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000000)={0x14, r2, 0x1, 0x70bd29, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000000) 809.340912ms ago: executing program 0 (id=172): signalfd4$auto(0xffffffff, 0x0, 0x8, 0x0) statmount$auto(0x0, &(0x7f0000000040)={0x0, 0x0, 0x38, 0xffffff01, 0x9, 0x8000000000000000, 0x208, 0x7, 0x9, 0x5, 0x5, 0x9, 0x3, 0x8, 0x5, 0xf, 0x0, 0x9, 0x10001, 0x5, [0x10000000, 0x7f, 0x77, 0x1, 0x8, 0xe06, 0x400, 0x3, 0x80000000, 0x8, 0x3, 0xfffffffffffffff9, 0x0, 0x3, 0x35c4, 0x1, 0x6, 0x8, 0xea8, 0x8, 0x5, 0x8, 0x5, 0x1, 0x800, 0x9, 0x5, 0x2, 0x800, 0x8000000000000000, 0x2ab, 0x8, 0x7ff, 0x1, 0x1, 0x3, 0xffffffffffff0000, 0x6b, 0xfffffffffffffff9, 0x4, 0x2ba, 0x4, 0xf, 0xffffffffffffff26, 0x9, 0x7fffffff, 0x6, 0x7d, 0xdc]}, 0x800, 0x0) poll$auto(&(0x7f0000000080)={0x2, 0x0, 0x1a}, 0xff, 0x1) 785.372194ms ago: executing program 3 (id=173): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000080), r0) (async) ioperm$auto(0x7, 0x6, 0x2) (async) sched_rr_get_interval$auto(0x0, &(0x7f0000001280)={0x3, 0x6}) sendmsg$auto_NFSD_CMD_THREADS_SET(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, r1, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@NFSD_A_SERVER_THREADS={0x8, 0x1, 0x7fffffff}, @NFSD_A_SERVER_SCOPE={0x5, 0x4, '\x00'}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0x6f8d}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000021}, 0x8004) (async) mmap$auto(0x0, 0x8, 0xdf, 0x14, 0x3, 0x8003) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/net\x00') socket(0x1d, 0x3, 0x1) (async) getsockopt$auto(0x6, 0x65, 0x2, 0xffffffffffffffff, 0x0) (async) fsetxattr$auto(0xfffffff9, &(0x7f0000000180)='nfsd\x00', &(0x7f00000001c0)="9dfe556e7fdd0baba4a265396bde91343b4191ddc4efe934bea42d81adcd605307a5bae9e259f915c58550ebb565903312e954209b03735323307395443eacac08257efcdd2763a66938f12ca37f8bc275dd4e48900673a9c7c18e6f5712443f85858e9f168e9284db5f4036d291d53e01808bd43214ae45a5a189e797deb2982a2339e80fe32531d479138ab4b506ec6dfbbcf29a9ea8a6dc354a591b44c85dba896465834ec0d5efd17f27467caf1785211a614b60fb279dcc9594003ed9af0633b75c82bed48432913aa5f9d69bb2e535fb7274b2f12aa126138bdfaaa51986c373b3366f5d667914186ace8a64998c714579", 0x800, 0x100) (async) ioperm$auto(0x800, 0x5, 0xd) (async) kcmp$auto(0x1, 0x1, 0x3, 0x85, 0x2) (async) keyctl$auto(0x15, 0x725fffffffb, 0x69c9, 0x2, 0x6) (async) setreuid$auto(0xffffffff, 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x5, 0x0) get_mempolicy$auto(0x0, &(0x7f0000000bc0)=0x6dc, 0x7b72, 0x8, 0x4) setsockopt$auto(0x4, 0x84, 0x82, 0xfffffffffffffffe, 0x0) keyctl$auto(0x0, 0x10, 0x1, 0x8, 0x7fcb629d) 630.051725ms ago: executing program 0 (id=174): socket$nl_generic(0x10, 0x3, 0x10) (async) exit$auto(0x7) (async) unshare$auto(0x40000080) (async) madvise$auto(0x0, 0xffffffffffff0001, 0x15) (async) sendmsg$auto_IOAM6_CMD_ADD_SCHEMA(0xffffffffffffffff, 0x0, 0x8800) close_range$auto(0x2, 0x8, 0x0) (async) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid_for_children\x00') socket(0x1, 0x1, 0x1) (async) write$auto(0x3, 0x0, 0x100082) (async) socket(0xa, 0x3, 0x3a) (async) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000021}, 0x8004) mmap$auto(0x0, 0x9, 0x3ff57696, 0x9b72, 0x2, 0x8000000000008000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket(0x2, 0x1, 0x0) (async) socket(0x2b, 0x1, 0x1) socket(0x1d, 0x2, 0x2) (async) socket(0x2, 0x1, 0x106) (async) setsockopt$auto(0x3, 0x6, 0x1, 0x0, 0x4) (async) connect$auto(0x3, &(0x7f0000000140)={0xa, @sa_data_min="c40900448dc7fe8000"}, 0x55) 360.284922ms ago: executing program 2 (id=175): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x40) close_range$auto(0x0, 0xfffffffffffff000, 0x2) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_IOAM6(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$auto_IOAM6_CMD_DEL_SCHEMA(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="21012dbd7000fb00df25050000000800040010000000"], 0x1c}, 0x1, 0x0, 0x0, 0x20000051}, 0x40084) epoll_create$auto(0x4) rseq$auto(&(0x7f0000000300)={0xe, 0x401, 0x0, 0x6, 0xffffffff, 0x2}, 0x8000, 0x0, 0x6) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x3) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0xffffffffffff0001, 0x15) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mq_notify$auto(0x6f7, 0x0) 0s ago: executing program 3 (id=176): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40040021}, 0x8011) socket(0xa, 0x6, 0x0) (async) socket(0xa, 0x6, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000080), r0) sendmsg$auto_NFSD_CMD_THREADS_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, r1, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@NFSD_A_SERVER_LEASETIME={0x8, 0x3, 0x5e}, @NFSD_A_SERVER_SCOPE={0x5, 0x4, '\x00'}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0x6f8d}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000021}, 0x8004) (async) sendmsg$auto_NFSD_CMD_THREADS_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, r1, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@NFSD_A_SERVER_LEASETIME={0x8, 0x3, 0x5e}, @NFSD_A_SERVER_SCOPE={0x5, 0x4, '\x00'}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0x6f8d}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000021}, 0x8004) socket$nl_generic(0x10, 0x3, 0x10) syz_open_procfs$namespace(0x0, 0x0) connect$auto(0x3, &(0x7f0000000140)={0xa, @sa_data_min="c4aeed448dc7fe8000"}, 0x55) listen$auto(0x3, 0x81) mmap$auto(0x9, 0xef9, 0x0, 0x1a, 0x2, 0x80) mmap$auto(0x7, 0x7, 0x3, 0x9b7e, 0x0, 0xffffffffffffffff) (async) mmap$auto(0x7, 0x7, 0x3, 0x9b7e, 0x0, 0xffffffffffffffff) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) dup2$auto(0x0, 0x3) (async) dup2$auto(0x0, 0x3) mmap$auto(0x0, 0x20009, 0x4000000000dc, 0x14, 0x401, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) utimensat$auto(0x1, 0x0, 0xfffffffffffffffe, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x3, 0x6) (async) socket(0x10, 0x3, 0x6) syz_genetlink_get_family_id$auto_macsec(0x0, 0xffffffffffffffff) (async) r3 = syz_genetlink_get_family_id$auto_macsec(0x0, 0xffffffffffffffff) sendmsg$auto_MACSEC_CMD_ADD_RXSC(r2, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000001380)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="0100254ffdccb5bda1d6fd000000"], 0x14}, 0x1, 0x0, 0x0, 0x40b4ff743f26f506}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_netdev(&(0x7f0000000080), r4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'ip6tnl0\x00'}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'veth0_to_bridge\x00'}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'bridge0\x00', 0x0}) socket(0x1, 0x4, 0x1) bpf$auto(0x5, &(0x7f0000000180)=@link_create={@prog_fd=0x3, @target_ifindex=r5, 0x1, 0xa, @tcx={@relative_fd=0xf66, 0x7ff}}, 0x7) (async) bpf$auto(0x5, &(0x7f0000000180)=@link_create={@prog_fd=0x3, @target_ifindex=r5, 0x1, 0xa, @tcx={@relative_fd=0xf66, 0x7ff}}, 0x7) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.64' (ED25519) to the list of known hosts. [ 49.235474][ T5213] cgroup: Unknown subsys name 'net' [ 49.417438][ T5213] cgroup: Unknown subsys name 'cpuset' [ 49.425578][ T5213] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 50.712097][ T5213] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 52.533603][ T54] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 52.541777][ T54] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 52.550346][ T54] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 52.554163][ T5238] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 52.558013][ T54] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 52.572137][ T54] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 52.580060][ T54] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 52.588017][ T54] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 52.595067][ T5237] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 52.595081][ T5239] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 52.602827][ T54] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 52.611099][ T5239] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 52.617131][ T54] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 52.623626][ T5239] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 52.637879][ T5239] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 52.639222][ T54] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 52.647044][ T5239] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 52.654050][ T5233] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 52.666752][ T5233] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 52.670644][ T5239] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 52.684422][ T5239] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 52.686862][ T4621] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 52.710668][ T4621] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 52.718327][ T4621] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 53.024761][ T5224] chnl_net:caif_netlink_parms(): no params data found [ 53.068361][ T5227] chnl_net:caif_netlink_parms(): no params data found [ 53.106549][ T5225] chnl_net:caif_netlink_parms(): no params data found [ 53.192838][ T5226] chnl_net:caif_netlink_parms(): no params data found [ 53.209066][ T5224] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.216921][ T5224] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.224177][ T5224] bridge_slave_0: entered allmulticast mode [ 53.230734][ T5224] bridge_slave_0: entered promiscuous mode [ 53.259266][ T5224] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.266428][ T5224] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.273513][ T5224] bridge_slave_1: entered allmulticast mode [ 53.280353][ T5224] bridge_slave_1: entered promiscuous mode [ 53.308465][ T5227] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.315697][ T5227] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.322804][ T5227] bridge_slave_0: entered allmulticast mode [ 53.329563][ T5227] bridge_slave_0: entered promiscuous mode [ 53.345557][ T5225] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.352638][ T5225] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.359854][ T5225] bridge_slave_0: entered allmulticast mode [ 53.366781][ T5225] bridge_slave_0: entered promiscuous mode [ 53.388282][ T5227] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.396686][ T5227] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.403767][ T5227] bridge_slave_1: entered allmulticast mode [ 53.411321][ T5227] bridge_slave_1: entered promiscuous mode [ 53.427211][ T5225] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.434432][ T5225] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.441557][ T5225] bridge_slave_1: entered allmulticast mode [ 53.448687][ T5225] bridge_slave_1: entered promiscuous mode [ 53.459914][ T5224] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.487341][ T5224] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.498295][ T5227] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.512008][ T5227] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.552665][ T5225] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.565599][ T5227] team0: Port device team_slave_0 added [ 53.589183][ T5224] team0: Port device team_slave_0 added [ 53.597002][ T5227] team0: Port device team_slave_1 added [ 53.603962][ T5225] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.629091][ T5224] team0: Port device team_slave_1 added [ 53.649891][ T5226] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.657093][ T5226] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.664594][ T5226] bridge_slave_0: entered allmulticast mode [ 53.671099][ T5226] bridge_slave_0: entered promiscuous mode [ 53.679502][ T5226] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.686891][ T5226] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.694022][ T5226] bridge_slave_1: entered allmulticast mode [ 53.701013][ T5226] bridge_slave_1: entered promiscuous mode [ 53.722489][ T5225] team0: Port device team_slave_0 added [ 53.752607][ T5224] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 53.759640][ T5224] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.786083][ T5224] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 53.798467][ T5227] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 53.805768][ T5227] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.832169][ T5227] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 53.846119][ T5225] team0: Port device team_slave_1 added [ 53.853918][ T5226] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.864044][ T5224] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 53.871014][ T5224] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.897010][ T5224] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 53.913199][ T5227] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 53.920418][ T5227] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.946471][ T5227] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 53.971621][ T5226] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.000747][ T5226] team0: Port device team_slave_0 added [ 54.026792][ T5225] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.033814][ T5225] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.060262][ T5225] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.074774][ T5226] team0: Port device team_slave_1 added [ 54.094067][ T5225] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.101200][ T5225] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.130359][ T5225] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.176027][ T5227] hsr_slave_0: entered promiscuous mode [ 54.182283][ T5227] hsr_slave_1: entered promiscuous mode [ 54.200078][ T5224] hsr_slave_0: entered promiscuous mode [ 54.208596][ T5224] hsr_slave_1: entered promiscuous mode [ 54.214798][ T5224] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 54.222626][ T5224] Cannot create hsr debugfs directory [ 54.229145][ T5226] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.236132][ T5226] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.262132][ T5226] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.274381][ T5226] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.281334][ T5226] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.307543][ T5226] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.346071][ T5225] hsr_slave_0: entered promiscuous mode [ 54.352189][ T5225] hsr_slave_1: entered promiscuous mode [ 54.358847][ T5225] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 54.367118][ T5225] Cannot create hsr debugfs directory [ 54.463935][ T5226] hsr_slave_0: entered promiscuous mode [ 54.470845][ T5226] hsr_slave_1: entered promiscuous mode [ 54.477625][ T5226] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 54.485229][ T5226] Cannot create hsr debugfs directory [ 54.674767][ T4621] Bluetooth: hci2: command tx timeout [ 54.686146][ T5224] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 54.699211][ T5224] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 54.711836][ T5224] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 54.728747][ T5224] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 54.764541][ T4621] Bluetooth: hci3: command tx timeout [ 54.770163][ T4621] Bluetooth: hci1: command tx timeout [ 54.775760][ T5236] Bluetooth: hci0: command tx timeout [ 54.790462][ T5225] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 54.802146][ T5225] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 54.820385][ T5225] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 54.849022][ T5225] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 54.867099][ T5227] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 54.877813][ T5227] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 54.888323][ T5227] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 54.899972][ T5227] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 54.999437][ T5224] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.007945][ T5226] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 55.017855][ T5226] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 55.029470][ T5226] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 55.043028][ T5226] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 55.082997][ T5224] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.119070][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.126311][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.139092][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.146217][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.231649][ T5227] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.252110][ T5225] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.286850][ T5227] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.306781][ T5225] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.336943][ T2469] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.344170][ T2469] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.359470][ T2469] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.366652][ T2469] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.400387][ T2469] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.407495][ T2469] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.461631][ T996] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.468839][ T996] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.520635][ T5226] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.572718][ T5224] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.586025][ T5226] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.603762][ T2469] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.610901][ T2469] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.652348][ T2469] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.659514][ T2469] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.726723][ T5224] veth0_vlan: entered promiscuous mode [ 55.752144][ T5224] veth1_vlan: entered promiscuous mode [ 55.782121][ T5224] veth0_macvtap: entered promiscuous mode [ 55.809195][ T5224] veth1_macvtap: entered promiscuous mode [ 55.853752][ T5225] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.884976][ T5224] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 55.910554][ T5224] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 55.940973][ T5227] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.966503][ T5224] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.979712][ T5224] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.988872][ T5224] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.999746][ T5224] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.052022][ T5225] veth0_vlan: entered promiscuous mode [ 56.062540][ T5226] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.102381][ T5225] veth1_vlan: entered promiscuous mode [ 56.119724][ T5227] veth0_vlan: entered promiscuous mode [ 56.167411][ T5227] veth1_vlan: entered promiscuous mode [ 56.178843][ T996] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.213467][ T996] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.241112][ T5225] veth0_macvtap: entered promiscuous mode [ 56.263504][ T5226] veth0_vlan: entered promiscuous mode [ 56.273849][ T5225] veth1_macvtap: entered promiscuous mode [ 56.283037][ T5227] veth0_macvtap: entered promiscuous mode [ 56.290991][ T2469] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.303830][ T5227] veth1_macvtap: entered promiscuous mode [ 56.311341][ T5226] veth1_vlan: entered promiscuous mode [ 56.317685][ T2469] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.341961][ T5227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.353530][ T5227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.368041][ T5227] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.389023][ T5225] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.405824][ T5225] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.409490][ T5224] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 56.419420][ T5225] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.442369][ T5225] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.456052][ T5225] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.479307][ T5225] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.490297][ T5225] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.501359][ T5225] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.509935][ T5227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.530158][ T5227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.540390][ T5227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.551978][ T5227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.563797][ T5227] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.577953][ T5225] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.587031][ T5225] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.599274][ T5225] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.608759][ T5225] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.637071][ T5227] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.649893][ T5227] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.660216][ T5227] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.672953][ T5227] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.693832][ T5226] veth0_macvtap: entered promiscuous mode [ 56.748882][ T5226] veth1_macvtap: entered promiscuous mode [ 56.755910][ T4621] Bluetooth: hci2: command tx timeout [ 56.828208][ T5226] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.839083][ T4621] Bluetooth: hci3: command tx timeout [ 56.844663][ T4621] Bluetooth: hci1: command tx timeout [ 56.847218][ T5226] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.850136][ T5236] Bluetooth: hci0: command tx timeout [ 56.860354][ T5226] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.894417][ T5226] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.916428][ T5226] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.929313][ T5226] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.945589][ T5226] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.974457][ T5226] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.986342][ T5226] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.997661][ T5226] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.009443][ T5226] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.019883][ T5226] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.030442][ T5226] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.042161][ T5226] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 57.071666][ T5226] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.091715][ T5226] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.104419][ T5226] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.123544][ T5226] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.189738][ T996] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.201599][ T996] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.260589][ T996] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.284308][ T996] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.295651][ T2469] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.326528][ T2469] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.333971][ T996] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.353310][ T996] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.429773][ T1835] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.437986][ T1835] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.626581][ T2469] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.634844][ T2469] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.834602][ T5236] Bluetooth: hci2: command tx timeout [ 58.914351][ T5236] Bluetooth: hci0: command tx timeout [ 58.920288][ T4621] Bluetooth: hci1: command tx timeout [ 58.926490][ T4621] Bluetooth: hci3: command tx timeout [ 60.914892][ T5239] Bluetooth: hci2: command tx timeout [ 61.012817][ T5239] Bluetooth: hci0: command tx timeout [ 61.018555][ T5236] Bluetooth: hci3: command tx timeout [ 61.024056][ T5239] Bluetooth: hci1: command tx timeout [ 61.521603][ T5394] coredump: 26(syz.3.23): Core dump to core aborted: cannot preserve file permissions [ 62.564677][ T5416] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 63.004540][ T5426] netlink: 8 bytes leftover after parsing attributes in process `syz.1.35'. [ 63.589168][ T5431] Zero length message leads to an empty skb [ 64.911088][ T5453] sock: sock_set_timeout: `syz.0.42' (pid 5453) tries to set negative timeout [ 65.422329][ T5464] netlink: 8 bytes leftover after parsing attributes in process `syz.2.45'. [ 65.820271][ T5476] mmap: syz.0.50 (5476) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 65.927386][ T5478] netlink: 5 bytes leftover after parsing attributes in process `syz.0.50'. [ 67.006165][ T5505] syz.0.56 uses obsolete (PF_INET,SOCK_PACKET) [ 67.950894][ T5530] ptrace attach of "./syz-executor exec"[5226] was attempted by "./syz-executor exec"[5530] [ 68.845050][ T5557] netlink: 'syz.2.71': attribute type 11 has an invalid length. [ 69.140137][ T5569] netlink: 72 bytes leftover after parsing attributes in process `syz.0.74'. [ 69.888324][ T5599] workqueue: name exceeds WQ_NAME_LEN. Truncating to: ýÿÿÿÿÿÿÿ-œä¾ž6y“Õ¼ŸÜ§ L¨¦÷ k† [ 70.733577][ T5622] netlink: 'syz.1.86': attribute type 11 has an invalid length. [ 71.575829][ T1264] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.582816][ T1264] ieee802154 phy1 wpan1: encryption failed: -22 [ 74.229622][ T5716] svc: failed to register nfsdv3 RPC service (errno 512). [ 74.270883][ T5716] svc: failed to register nfsaclv3 RPC service (errno 512). [ 75.434453][ T4621] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 75.456228][ T4621] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 75.464050][ T4621] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 75.494282][ T4621] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 75.510056][ T4621] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 75.517541][ T4621] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 75.719112][ T5649] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.908110][ T5752] raw_sendmsg: syz.2.115 forgot to set AF_INET. Fix it! [ 75.993766][ T5649] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.199815][ T5649] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.546616][ T5649] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.685105][ T25] cfg80211: failed to load regulatory.db [ 76.762284][ T5738] chnl_net:caif_netlink_parms(): no params data found [ 77.441685][ T5649] bridge_slave_1: left allmulticast mode [ 77.461537][ T5649] bridge_slave_1: left promiscuous mode [ 77.496651][ T5649] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.545219][ T5649] bridge_slave_0: left allmulticast mode [ 77.554429][ T5649] bridge_slave_0: left promiscuous mode [ 77.562531][ T5649] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.570641][ T5236] Bluetooth: hci0: command tx timeout [ 79.424851][ T5649] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 79.555582][ T5649] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 79.634398][ T5236] Bluetooth: hci0: command tx timeout [ 79.643623][ T5649] bond0 (unregistering): Released all slaves [ 79.731207][ T5738] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.764209][ T5738] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.772480][ T5738] bridge_slave_0: entered allmulticast mode [ 79.815293][ T5738] bridge_slave_0: entered promiscuous mode [ 79.903933][ T5738] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.918508][ T5738] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.945081][ T5738] bridge_slave_1: entered allmulticast mode [ 79.952094][ T5738] bridge_slave_1: entered promiscuous mode [ 80.378034][ T5738] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.432486][ T5738] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.006232][ T5738] team0: Port device team_slave_0 added [ 81.047737][ T5738] team0: Port device team_slave_1 added [ 81.714214][ T5236] Bluetooth: hci0: command tx timeout [ 82.321526][ T5738] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.343883][ T5738] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.414275][ T5738] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.447246][ T5738] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.464396][ T5738] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.515332][ T5738] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.689213][ T5649] hsr_slave_0: left promiscuous mode [ 83.821960][ T5236] Bluetooth: hci0: command tx timeout [ 83.936657][ T5649] hsr_slave_1: left promiscuous mode [ 85.218225][ T5649] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 85.234834][ T5649] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 85.255449][ T5926] netlink: 131 bytes leftover after parsing attributes in process `syz.0.145'. [ 85.486725][ T5649] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 85.496190][ T5649] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 85.591525][ T5649] veth1_macvtap: left promiscuous mode [ 85.619741][ T5649] veth0_macvtap: left promiscuous mode [ 85.636664][ T5649] veth1_vlan: left promiscuous mode [ 85.642176][ T5649] veth0_vlan: left promiscuous mode [ 87.373937][ T5649] team0 (unregistering): Port device team_slave_1 removed [ 87.492058][ T5649] team0 (unregistering): Port device team_slave_0 removed [ 88.507331][ T5738] hsr_slave_0: entered promiscuous mode [ 88.714774][ T5738] hsr_slave_1: entered promiscuous mode [ 88.739375][ T5738] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 88.769967][ T5738] Cannot create hsr debugfs directory [ 90.993329][ T5738] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 91.061221][ T5738] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 91.247070][ T5738] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 91.301938][ T5738] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 91.527767][ T5953] syz.2.153 (5953) used greatest stack depth: 20320 bytes left [ 91.555556][ T5738] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.623289][ T5738] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.707438][ T5646] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.714712][ T5646] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.757120][ T5646] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.764423][ T5646] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.297543][ T5738] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.429658][ T5738] veth0_vlan: entered promiscuous mode [ 92.484605][ T5738] veth1_vlan: entered promiscuous mode [ 92.558272][ T5738] veth0_macvtap: entered promiscuous mode [ 92.583687][ T5738] veth1_macvtap: entered promiscuous mode [ 92.640507][ T6073] __kmem_cache_create_args(nfsd_file) failed with error -22 [ 92.642421][ T5738] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.682147][ T6073] CPU: 0 UID: 0 PID: 6073 Comm: syz.3.173 Not tainted 6.11.0-syzkaller-11624-ge477dba5442c #0 [ 92.692434][ T6073] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 92.702515][ T6073] Call Trace: [ 92.705810][ T6073] [ 92.706909][ T5738] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.708738][ T6073] dump_stack_lvl+0x16c/0x1f0 [ 92.723391][ T6073] __kmem_cache_create_args+0x130/0x3c0 [ 92.728979][ T6073] nfsd_file_cache_init+0x126/0x4d0 [ 92.734211][ T6073] ? net_generic+0xf4/0x2a0 [ 92.738751][ T6073] nfsd_svc+0x5db/0x940 [ 92.742950][ T6073] nfsd_nl_threads_set_doit+0x535/0xbe0 [ 92.744216][ T5738] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.748506][ T6073] genl_family_rcv_msg_doit+0x202/0x2f0 [ 92.764465][ T6073] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 92.770570][ T6073] ? bpf_lsm_capable+0x9/0x10 [ 92.775276][ T6073] ? security_capable+0x7e/0x260 [ 92.780252][ T6073] genl_rcv_msg+0x565/0x800 [ 92.784793][ T6073] ? __pfx_genl_rcv_msg+0x10/0x10 [ 92.788849][ T5738] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.789830][ T6073] ? __pfx_nfsd_nl_threads_set_doit+0x10/0x10 [ 92.805878][ T6073] netlink_rcv_skb+0x165/0x410 [ 92.810667][ T6073] ? __pfx_genl_rcv_msg+0x10/0x10 [ 92.814147][ T5738] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.815701][ T6073] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 92.831401][ T6073] ? down_read+0xc9/0x330 [ 92.835757][ T6073] ? __pfx_down_read+0x10/0x10 [ 92.840552][ T6073] ? netlink_deliver_tap+0x1ae/0xcf0 [ 92.844157][ T5738] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.845857][ T6073] genl_rcv+0x28/0x40 [ 92.845886][ T6073] netlink_unicast+0x53c/0x7f0 [ 92.864419][ T6073] ? __pfx_netlink_unicast+0x10/0x10 [ 92.864801][ T5738] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.869707][ T6073] ? __phys_addr_symbol+0x30/0x80 [ 92.869736][ T6073] ? __check_object_size+0x488/0x710 [ 92.887228][ T6073] netlink_sendmsg+0x8b8/0xd70 [ 92.892021][ T6073] ? __pfx_netlink_sendmsg+0x10/0x10 [ 92.897347][ T6073] ____sys_sendmsg+0x9ae/0xb40 [ 92.902140][ T6073] ? copy_msghdr_from_user+0x10b/0x160 [ 92.907267][ T5738] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.907613][ T6073] ? __pfx_____sys_sendmsg+0x10/0x10 [ 92.923306][ T6073] ? __pfx___futex_wait+0x10/0x10 [ 92.928371][ T6073] ? __pfx___lock_acquire+0x10/0x10 [ 92.933609][ T6073] ___sys_sendmsg+0x135/0x1e0 [ 92.938321][ T6073] ? __pfx____sys_sendmsg+0x10/0x10 [ 92.943594][ T6073] ? fdget+0x176/0x210 [ 92.947706][ T6073] __sys_sendmsg+0x117/0x1f0 [ 92.952332][ T6073] ? __pfx___sys_sendmsg+0x10/0x10 [ 92.957488][ T6073] ? __x64_sys_futex+0x1e1/0x4c0 [ 92.958166][ T5738] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.962449][ T6073] do_syscall_64+0xcd/0x250 [ 92.976826][ T6073] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 92.982756][ T6073] RIP: 0033:0x7f082ef7dff9 [ 92.987195][ T6073] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 92.992638][ T5738] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.006800][ T6073] RSP: 002b:00007f082fd59038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 93.006826][ T6073] RAX: ffffffffffffffda RBX: 00007f082f135f80 RCX: 00007f082ef7dff9 [ 93.006842][ T6073] RDX: 0000000000008004 RSI: 0000000020000140 RDI: 0000000000000003 [ 93.006856][ T6073] RBP: 00007f082eff0296 R08: 0000000000000000 R09: 0000000000000000 [ 93.006871][ T6073] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 93.006886][ T6073] R13: 0000000000000000 R14: 00007f082f135f80 R15: 00007ffe39a6aab8 [ 93.006916][ T6073] [ 93.040616][ T5738] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.064209][ T6073] nfsd: unable to create nfsd_file_slab [ 93.101428][ T5738] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.111996][ T5738] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.142675][ T5738] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.191821][ T5738] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.210333][ T5738] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.226568][ T5738] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.239346][ T5738] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.448322][ T6092] svc: failed to register nfsdv3 RPC service (errno 111). [ 93.502066][ T6092] svc: failed to register nfsaclv3 RPC service (errno 111). [ 93.564270][ T6092] ================================================================== [ 93.572369][ T6092] BUG: KASAN: slab-use-after-free in rhashtable_walk_enter+0x333/0x370 [ 93.580639][ T6092] Read of size 8 at addr ffff888066fe0010 by task syz.3.176/6092 [ 93.588365][ T6092] [ 93.590693][ T6092] CPU: 1 UID: 0 PID: 6092 Comm: syz.3.176 Not tainted 6.11.0-syzkaller-11624-ge477dba5442c #0 [ 93.600942][ T6092] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 93.611005][ T6092] Call Trace: SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 93.614287][ T6092] [ 93.617231][ T6092] dump_stack_lvl+0x116/0x1f0 [ 93.621932][ T6092] print_report+0xc3/0x620 [ 93.626368][ T6092] ? __virt_addr_valid+0x5e/0x590 [ 93.631405][ T6092] ? __phys_addr+0xc6/0x150 [ 93.635922][ T6092] kasan_report+0xd9/0x110 [ 93.640358][ T6092] ? rhashtable_walk_enter+0x333/0x370 [ 93.645838][ T6092] ? rhashtable_walk_enter+0x333/0x370 [ 93.651333][ T6092] rhashtable_walk_enter+0x333/0x370 [ 93.656647][ T6092] __nfsd_file_cache_purge+0xad/0x490 [ 93.662038][ T6092] ? __pfx___nfsd_file_cache_purge+0x10/0x10 [ 93.668033][ T6092] ? lockdep_hardirqs_on+0x7c/0x110 [ 93.673232][ T6092] ? enable_work+0x246/0x340 [ 93.677830][ T6092] ? __pfx_enable_work+0x10/0x10 [ 93.682776][ T6092] nfsd_file_cache_shutdown+0xcf/0x4e0 [ 93.688243][ T6092] nfsd_svc+0x6a9/0x940 [ 93.692406][ T6092] nfsd_nl_threads_set_doit+0x535/0xbe0 [ 93.697951][ T6092] genl_family_rcv_msg_doit+0x202/0x2f0 [ 93.703496][ T6092] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 93.709565][ T6092] ? bpf_lsm_capable+0x9/0x10 [ 93.714242][ T6092] ? security_capable+0x7e/0x260 [ 93.719186][ T6092] genl_rcv_msg+0x565/0x800 [ 93.723689][ T6092] ? __pfx_genl_rcv_msg+0x10/0x10 [ 93.728799][ T6092] ? __pfx_nfsd_nl_threads_set_doit+0x10/0x10 [ 93.734867][ T6092] netlink_rcv_skb+0x165/0x410 [ 93.739624][ T6092] ? __pfx_genl_rcv_msg+0x10/0x10 [ 93.744654][ T6092] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 93.749938][ T6092] ? down_read+0xc9/0x330 [ 93.754292][ T6092] ? __pfx_down_read+0x10/0x10 [ 93.759075][ T6092] ? netlink_deliver_tap+0x1ae/0xcf0 [ 93.764365][ T6092] genl_rcv+0x28/0x40 [ 93.768341][ T6092] netlink_unicast+0x53c/0x7f0 [ 93.773098][ T6092] ? __pfx_netlink_unicast+0x10/0x10 [ 93.778377][ T6092] ? __phys_addr_symbol+0x30/0x80 [ 93.783398][ T6092] ? __check_object_size+0x488/0x710 [ 93.788680][ T6092] netlink_sendmsg+0x8b8/0xd70 [ 93.793437][ T6092] ? __pfx_netlink_sendmsg+0x10/0x10 [ 93.798723][ T6092] ____sys_sendmsg+0x9ae/0xb40 [ 93.803488][ T6092] ? copy_msghdr_from_user+0x10b/0x160 [ 93.808949][ T6092] ? __pfx_____sys_sendmsg+0x10/0x10 [ 93.814231][ T6092] ? __pfx___futex_wait+0x10/0x10 [ 93.819258][ T6092] ? __pfx___lock_acquire+0x10/0x10 [ 93.824462][ T6092] ___sys_sendmsg+0x135/0x1e0 [ 93.829149][ T6092] ? __pfx____sys_sendmsg+0x10/0x10 [ 93.834358][ T6092] ? fdget+0x176/0x210 [ 93.838429][ T6092] __sys_sendmsg+0x117/0x1f0 [ 93.843020][ T6092] ? __pfx___sys_sendmsg+0x10/0x10 [ 93.848134][ T6092] ? __x64_sys_futex+0x1e1/0x4c0 [ 93.853073][ T6092] do_syscall_64+0xcd/0x250 [ 93.857573][ T6092] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 93.863472][ T6092] RIP: 0033:0x7f082ef7dff9 [ 93.867879][ T6092] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 93.887481][ T6092] RSP: 002b:00007f082fd59038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 93.895891][ T6092] RAX: ffffffffffffffda RBX: 00007f082f135f80 RCX: 00007f082ef7dff9 [ 93.903854][ T6092] RDX: 0000000000008004 RSI: 0000000020000140 RDI: 0000000000000006 [ 93.911821][ T6092] RBP: 00007f082eff0296 R08: 0000000000000000 R09: 0000000000000000 [ 93.919784][ T6092] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 93.927744][ T6092] R13: 0000000000000000 R14: 00007f082f135f80 R15: 00007ffe39a6aab8 [ 93.935715][ T6092] [ 93.938722][ T6092] [ 93.941035][ T6092] Allocated by task 6073: [ 93.945347][ T6092] kasan_save_stack+0x33/0x60 [ 93.950038][ T6092] kasan_save_track+0x14/0x30 [ 93.954718][ T6092] __kasan_kmalloc+0xaa/0xb0 [ 93.959328][ T6092] __kmalloc_node_noprof+0x211/0x440 [ 93.964616][ T6092] __kvmalloc_node_noprof+0xad/0x1a0 [ 93.969898][ T6092] bucket_table_alloc.isra.0+0x86/0x460 [ 93.975448][ T6092] rhashtable_init_noprof+0x43b/0x7d0 [ 93.980810][ T6092] rhltable_init_noprof+0x20/0x60 [ 93.985830][ T6092] nfsd_file_cache_init+0xd2/0x4d0 [ 93.990937][ T6092] nfsd_svc+0x5db/0x940 [ 93.995092][ T6092] nfsd_nl_threads_set_doit+0x535/0xbe0 [ 94.000648][ T6092] genl_family_rcv_msg_doit+0x202/0x2f0 [ 94.006201][ T6092] genl_rcv_msg+0x565/0x800 [ 94.010702][ T6092] netlink_rcv_skb+0x165/0x410 [ 94.015457][ T6092] genl_rcv+0x28/0x40 [ 94.019430][ T6092] netlink_unicast+0x53c/0x7f0 [ 94.024187][ T6092] netlink_sendmsg+0x8b8/0xd70 [ 94.028940][ T6092] ____sys_sendmsg+0x9ae/0xb40 [ 94.033704][ T6092] ___sys_sendmsg+0x135/0x1e0 [ 94.038380][ T6092] __sys_sendmsg+0x117/0x1f0 [ 94.042967][ T6092] do_syscall_64+0xcd/0x250 [ 94.047470][ T6092] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 94.053367][ T6092] [ 94.055677][ T6092] Freed by task 6073: [ 94.059642][ T6092] kasan_save_stack+0x33/0x60 [ 94.064316][ T6092] kasan_save_track+0x14/0x30 [ 94.068984][ T6092] kasan_save_free_info+0x3b/0x60 [ 94.074018][ T6092] __kasan_slab_free+0x51/0x70 [ 94.078781][ T6092] kfree+0x14f/0x4b0 [ 94.082677][ T6092] kvfree+0x47/0x50 [ 94.086479][ T6092] rhashtable_free_and_destroy+0x16c/0x990 [ 94.092281][ T6092] nfsd_file_cache_init+0x3e0/0x4d0 [ 94.097474][ T6092] nfsd_svc+0x5db/0x940 [ 94.101627][ T6092] nfsd_nl_threads_set_doit+0x535/0xbe0 [ 94.107165][ T6092] genl_family_rcv_msg_doit+0x202/0x2f0 [ 94.112706][ T6092] genl_rcv_msg+0x565/0x800 [ 94.117204][ T6092] netlink_rcv_skb+0x165/0x410 [ 94.121961][ T6092] genl_rcv+0x28/0x40 [ 94.125942][ T6092] netlink_unicast+0x53c/0x7f0 [ 94.130696][ T6092] netlink_sendmsg+0x8b8/0xd70 [ 94.135450][ T6092] ____sys_sendmsg+0x9ae/0xb40 [ 94.140206][ T6092] ___sys_sendmsg+0x135/0x1e0 [ 94.144880][ T6092] __sys_sendmsg+0x117/0x1f0 [ 94.149467][ T6092] do_syscall_64+0xcd/0x250 [ 94.153966][ T6092] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 94.159872][ T6092] [ 94.162185][ T6092] The buggy address belongs to the object at ffff888066fe0000 [ 94.162185][ T6092] which belongs to the cache kmalloc-4k of size 4096 [ 94.176225][ T6092] The buggy address is located 16 bytes inside of [ 94.176225][ T6092] freed 4096-byte region [ffff888066fe0000, ffff888066fe1000) [ 94.190010][ T6092] [ 94.192323][ T6092] The buggy address belongs to the physical page: [ 94.198725][ T6092] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x66fe0 [ 94.207477][ T6092] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 94.215966][ T6092] anon flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 94.223941][ T6092] page_type: f5(slab) [ 94.227914][ T6092] raw: 00fff00000000040 ffff88801ac42140 0000000000000000 dead000000000001 [ 94.236487][ T6092] raw: 0000000000000000 0000000000040004 00000001f5000000 0000000000000000 [ 94.245060][ T6092] head: 00fff00000000040 ffff88801ac42140 0000000000000000 dead000000000001 [ 94.253721][ T6092] head: 0000000000000000 0000000000040004 00000001f5000000 0000000000000000 [ 94.262383][ T6092] head: 00fff00000000003 ffffea00019bf801 ffffffffffffffff 0000000000000000 [ 94.271045][ T6092] head: 0000000000000008 0000000000000000 00000000ffffffff 0000000000000000 [ 94.279698][ T6092] page dumped because: kasan: bad access detected [ 94.286099][ T6092] page_owner tracks the page as allocated [ 94.291798][ T6092] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 2636, tgid 2636 (kworker/0:2), ts 66844987704, free_ts 66634514338 [ 94.312455][ T6092] post_alloc_hook+0x2d1/0x350 [ 94.317219][ T6092] get_page_from_freelist+0x101e/0x3070 [ 94.322763][ T6092] __alloc_pages_noprof+0x223/0x25c0 [ 94.328048][ T6092] alloc_pages_mpol_noprof+0x275/0x610 [ 94.333505][ T6092] new_slab+0x28b/0x3f0 [ 94.337706][ T6092] ___slab_alloc+0xc15/0x1500 [ 94.342374][ T6092] __slab_alloc.constprop.0+0x56/0xb0 [ 94.347739][ T6092] __kmalloc_node_track_caller_noprof+0x365/0x440 [ 94.354152][ T6092] kmalloc_reserve+0xef/0x2c0 [ 94.358827][ T6092] __alloc_skb+0x164/0x380 [ 94.363248][ T6092] nsim_dev_trap_report_work+0x2a4/0xc80 [ 94.368881][ T6092] process_one_work+0x958/0x1b30 [ 94.373816][ T6092] worker_thread+0x6c8/0xf00 [ 94.378405][ T6092] kthread+0x2c1/0x3a0 [ 94.382465][ T6092] ret_from_fork+0x45/0x80 [ 94.386879][ T6092] ret_from_fork_asm+0x1a/0x30 [ 94.391642][ T6092] page last free pid 5490 tgid 5487 stack trace: [ 94.397951][ T6092] free_unref_page+0x5f4/0xdc0 [ 94.402714][ T6092] __put_partials+0x14c/0x170 [ 94.407382][ T6092] qlist_free_all+0x4e/0x120 [ 94.411963][ T6092] kasan_quarantine_reduce+0x192/0x1e0 [ 94.417423][ T6092] __kasan_slab_alloc+0x69/0x90 [ 94.422269][ T6092] __kmalloc_noprof+0x199/0x410 [ 94.427115][ T6092] kobject_get_path+0xcb/0x230 [ 94.431875][ T6092] kobject_uevent_env+0x289/0x1670 [ 94.436987][ T6092] netdev_queue_update_kobjects+0x151/0x5b0 [ 94.442879][ T6092] netdev_register_kobject+0x290/0x3f0 [ 94.448333][ T6092] register_netdevice+0x1473/0x1e20 [ 94.453527][ T6092] __ip_tunnel_create+0x37b/0x4c0 [ 94.458545][ T6092] ip_tunnel_init_net+0x1c2/0x6e0 [ 94.463563][ T6092] ops_init+0x1df/0x5f0 [ 94.467715][ T6092] setup_net+0x21f/0x860 [ 94.471955][ T6092] copy_net_ns+0x2b4/0x6b0 [ 94.476365][ T6092] [ 94.478677][ T6092] Memory state around the buggy address: [ 94.484292][ T6092] ffff888066fdff00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 94.492340][ T6092] ffff888066fdff80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 94.500389][ T6092] >ffff888066fe0000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 94.508437][ T6092] ^ [ 94.513009][ T6092] ffff888066fe0080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 94.521059][ T6092] ffff888066fe0100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 94.529106][ T6092] ================================================================== [ 94.538422][ T6092] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 94.545632][ T6092] CPU: 1 UID: 0 PID: 6092 Comm: syz.3.176 Not tainted 6.11.0-syzkaller-11624-ge477dba5442c #0 [ 94.555881][ T6092] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 94.565943][ T6092] Call Trace: [ 94.569229][ T6092] [ 94.572159][ T6092] dump_stack_lvl+0x3d/0x1f0 [ 94.576765][ T6092] panic+0x71d/0x800 [ 94.580674][ T6092] ? mark_held_locks+0x9f/0xe0 [ 94.585892][ T6092] ? __pfx_panic+0x10/0x10 [ 94.590326][ T6092] ? irqentry_exit+0x3b/0x90 [ 94.594916][ T6092] ? lockdep_hardirqs_on+0x7c/0x110 [ 94.600113][ T6092] ? check_panic_on_warn+0x1f/0xb0 [ 94.605226][ T6092] check_panic_on_warn+0xab/0xb0 [ 94.610162][ T6092] end_report+0x117/0x180 [ 94.614490][ T6092] kasan_report+0xe9/0x110 [ 94.618905][ T6092] ? rhashtable_walk_enter+0x333/0x370 [ 94.624375][ T6092] ? rhashtable_walk_enter+0x333/0x370 [ 94.629938][ T6092] rhashtable_walk_enter+0x333/0x370 [ 94.635231][ T6092] __nfsd_file_cache_purge+0xad/0x490 [ 94.640602][ T6092] ? __pfx___nfsd_file_cache_purge+0x10/0x10 [ 94.646579][ T6092] ? lockdep_hardirqs_on+0x7c/0x110 [ 94.651779][ T6092] ? enable_work+0x246/0x340 [ 94.656375][ T6092] ? __pfx_enable_work+0x10/0x10 [ 94.661317][ T6092] nfsd_file_cache_shutdown+0xcf/0x4e0 [ 94.666774][ T6092] nfsd_svc+0x6a9/0x940 [ 94.670932][ T6092] nfsd_nl_threads_set_doit+0x535/0xbe0 [ 94.676478][ T6092] genl_family_rcv_msg_doit+0x202/0x2f0 [ 94.682021][ T6092] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 94.688090][ T6092] ? bpf_lsm_capable+0x9/0x10 [ 94.692768][ T6092] ? security_capable+0x7e/0x260 [ 94.697704][ T6092] genl_rcv_msg+0x565/0x800 [ 94.702209][ T6092] ? __pfx_genl_rcv_msg+0x10/0x10 [ 94.707232][ T6092] ? __pfx_nfsd_nl_threads_set_doit+0x10/0x10 [ 94.713297][ T6092] netlink_rcv_skb+0x165/0x410 [ 94.718056][ T6092] ? __pfx_genl_rcv_msg+0x10/0x10 [ 94.723078][ T6092] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 94.728366][ T6092] ? down_read+0xc9/0x330 [ 94.732692][ T6092] ? __pfx_down_read+0x10/0x10 [ 94.737452][ T6092] ? netlink_deliver_tap+0x1ae/0xcf0 [ 94.742740][ T6092] genl_rcv+0x28/0x40 [ 94.746715][ T6092] netlink_unicast+0x53c/0x7f0 [ 94.751474][ T6092] ? __pfx_netlink_unicast+0x10/0x10 [ 94.756754][ T6092] ? __phys_addr_symbol+0x30/0x80 [ 94.761774][ T6092] ? __check_object_size+0x488/0x710 [ 94.767059][ T6092] netlink_sendmsg+0x8b8/0xd70 [ 94.771817][ T6092] ? __pfx_netlink_sendmsg+0x10/0x10 [ 94.777098][ T6092] ____sys_sendmsg+0x9ae/0xb40 [ 94.781873][ T6092] ? copy_msghdr_from_user+0x10b/0x160 [ 94.787348][ T6092] ? __pfx_____sys_sendmsg+0x10/0x10 [ 94.792630][ T6092] ? __pfx___futex_wait+0x10/0x10 [ 94.797662][ T6092] ? __pfx___lock_acquire+0x10/0x10 [ 94.802865][ T6092] ___sys_sendmsg+0x135/0x1e0 [ 94.807557][ T6092] ? __pfx____sys_sendmsg+0x10/0x10 [ 94.812770][ T6092] ? fdget+0x176/0x210 [ 94.816846][ T6092] __sys_sendmsg+0x117/0x1f0 [ 94.821436][ T6092] ? __pfx___sys_sendmsg+0x10/0x10 [ 94.826553][ T6092] ? __x64_sys_futex+0x1e1/0x4c0 [ 94.831494][ T6092] do_syscall_64+0xcd/0x250 [ 94.835996][ T6092] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 94.841898][ T6092] RIP: 0033:0x7f082ef7dff9 [ 94.846309][ T6092] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 94.865916][ T6092] RSP: 002b:00007f082fd59038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 94.874329][ T6092] RAX: ffffffffffffffda RBX: 00007f082f135f80 RCX: 00007f082ef7dff9 [ 94.882293][ T6092] RDX: 0000000000008004 RSI: 0000000020000140 RDI: 0000000000000006 [ 94.890255][ T6092] RBP: 00007f082eff0296 R08: 0000000000000000 R09: 0000000000000000 [ 94.898217][ T6092] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 94.906180][ T6092] R13: 0000000000000000 R14: 00007f082f135f80 R15: 00007ffe39a6aab8 [ 94.914160][ T6092] [ 94.917386][ T6092] Kernel Offset: disabled [ 94.921693][ T6092] Rebooting in 86400 seconds..